Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“enregistrer ses heures chez les clients”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
43fdd2d99ca0021fc6a1b6ca1388e4c571f710ef5edf384d4d31035c209a8eb2
Signature (Ed25519, base64)
P/zdFdaNDBpglt7IQDuWUaZEDJjDPSl0bp1pgfZI8M4Sk/xgfpNEIhgKa6t6BNDjrZKT4PJ282xP4FHcWFUvCQ==
Merkle root
5c4849a28e8624d6f6d3204e1f81a6b24f2188b6690e8b122801054617ca25d8
Merkle path
["43fc32228d23f5fd88c6505c8daf399cedd5e3d0b86f612da9ca63b354d2fa9e","178712bbd13b6a6de327d54741bf4ef1d41cf11c5200369ffa386ada946e238a","b6b6bfe9b71dfc3b541fcf24d39b495f9ab572921aaf1e4d5aea4da6681094ed","db20e1cdca3766da4804cb1188a1f3ed20c5bb1d91f8ff70af0648455eb3c83e","c5cd2d483abf75cb340368cba8a5b4bce2af9f5f4a5f9a52e845422773c66cda","262dd10304a4eb4d9ea07ea20f9ffce8ff43b6927f510641c0371ec4fa6bee78","4114115120092ebe6daa68cc62f9522c96fcee2876bb8c28c9db0ce33eac5e8c","1e1383c20c3795b4a426e59664fb5ea27decc2411cf8801cb0fb052f8f66ee98","5aa53cb0c2db4e076a2b90dd4d31c874226ff613522f265b7248f64edf2af67f","e460fda082010187da75314f2abdc9366d5d07b6e2f93c8a323347aa069577fd","fb7a31316a4cd066b3bd69a463592a188072177d3eaadf62cfceee7db069553b","9d2e5b97810f7cb6aecc46f6ddade4f35ec5ee034d5538377aeac8eb4507a8f4","45616304fbb070f744d098367d3db0bfb10c29fad886560a2ad4fe003bd3cc4a","9693116cb745ecfbff942949993950a2efc72f3f48b394aa6516ac43c745a9a2","649f189ed3a422a3ffceae7f7673f3e683a1fac940fd27a4d89bce585dd48e49"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524617489 · entry 108e9186e8c5677ab139…
Expected log hash
2051fcd76f2ba790414bb1c15fd4d3d064889742ea46f8e55b5028f1f571c27b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193158162","kind":"published-quote","locale":"fr","page":"theme:bexio/ordering/fr","quote":"enregistrer ses heures chez les clients","rating":5,"review_date":"2025-03-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.bexio.bxBexio","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5c4849a28e86…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.