Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“L'application semble actuellement inutilisable avec Tresorit (cloud suisse).”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2681318538

Proof data

Record hash (SHA-256)

3fb70065a8dbca019cfaa3a633971f03ce1cfe0a8e45fbbfff0224c5a75869a1

Signature (Ed25519, base64)

12AX4NQld/xXGsWODszmWWlDG/lnJvCOQaT5vJVgDr2+FpXO02rB8lETtY0+g96zmZ4S0vN6gwWjZ/KhXLl5CA==

Merkle root

80545feed588a969110bcd2c8e526c8c2e400cad7348c7872c323a1674d2355a

Merkle path

["3fb83caaf5286273b60a63b8e19cee0aacf2c70c8d1bbd481940338a269eb0d6","c475571baeee2e269af97b4d9398ba87d63e8d616bf46fc27d330c59ac2d1527","3e626cb5401ddb1b5ef16d65641cbbd7e07c5e705798eff2dbffe759bccc4148","016516051736fe56da19845ce7db33efc067b7bdc8599301ccb9040f83116e44","039afc4a78bbe7809e5706f38bf9a24defe80c0d45b5ed6fb4e10c23c171c03f","eb6c34e17613f415e243fe073990969115664f27ad9bafb9f53423b9baa21575","68883fb7f80d985e51bfb9fc05583ee20ee0ce75f6cbc4f9f85701c1099066a3","9925a47344ccab0b4c765fda948017d88c032147809c705e746ffeb1795ff858","4cc9422a17196bd420e324c9ebba27e578f3f80ac03d70d408cc78410f0c45a7","82c829750b7cbc9831d9a209c7414a27f551b4e68c1708170f1a8dcfc44a7add","f409dfc2df498bf6dac55348227dba68809cfbfabb3e3b71918ba4d1bba58616","d3bc389941df874cd2571f89997ce8e7b19018ad59895eb4c789269357ff0a2f","4c6caa0b9a68721672e19894d208c3f84efb61f2da83a9ca4726c0d3f3e91414","8378d9d6ade0d6214a847a4a8145a9f89a0810e29d8d29962807c9aaac17e271","fca9ab6e6247b2eeb89a8619f295121cacecd7391ef0e06251791813430b969a"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2681318538 · entry 108e9186e8c5677a4bab…

Expected log hash

663cb0c78a61cc964eb6f0e00407fec6844129fb0623d2ac072b7b2e4274054b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788302168109","kind":"published-quote","locale":"fr","page":"brand:banana","quote":"L'application semble actuellement inutilisable avec Tresorit (cloud suisse).","rating":1,"review_date":"2025-11-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.banana.banana8","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80545feed588…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.