Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ne fonctionne plus depuis la mise à jour.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542751096

Proof data

Record hash (SHA-256)

49cff473a124fced683e03bcc2cf495c8df94d60e6450741ad3e63fe6b52eb55

Signature (Ed25519, base64)

7n8B3LH8IXRfZDzHDGTHiSbZyo76HeXr4LdaiC/ypr4e7qnYO/LNq71nsm+GGPfE7G9eLicF0VvrRPnHY38xBA==

Merkle root

cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23

Merkle path

["49d0bbda66bae292c7ba71323335385f9d65499f5a2e80d82fe868fb6d032fd8","0b685bf39b495e43aff9f904bf5f1e65d747741f9ea2c0ac913e01cc254043c2","a8062baff9e7131622ccce25f2644847bd2b2ba7b2c6aab3427688934a811880","e4e8d16e9358b17e7e5953363ddbc96be23527805456114acd601b051b288822","338a75860b4b3f5046749344bf4d91188f57cf75c729c995a9db11418b563a62","dd6aea85a2385e1af58d64ea6308c4a9a3d470a4ba93d4d54834594a874de41b","e20e5953f9864e29a9c10b58ca868c4564ee514ef0690bbfccfa3abcbeb021b8","33e52d85acdc50e3ad1f4147d0d71087d474f564a7364043f4a9a92154691df5","083b9621e5cb13c3c848b71a5400b4284c9c3a8e911ba50310ec75af851a8b4a","2b8eb9db006f7648cd4967bc5f7f588abc2e9a61f42166f1943fb8d8137cd977","0a936570b82ce4729e73571d06657d4ce4a5b7fedb1fe6b41529a650c398362b","40fa417b4d18b6ccf75b0d8e5897525c82ddc54545fbb4e1fcfb84aa22c7898a","d2a0d95049b010a02dac5bc62f9c8cdbc0aab414d57731175348e6bac7bfc76e","0f351cde6b1d9915cc0e417c0e2f1f0e3b04741e1975a4ad546a8eefeb399e09","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…

Expected log hash

8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787281943761","kind":"published-quote","locale":"fr","page":"brand:bexio","quote":"Ne fonctionne plus depuis la mise à jour.","rating":3,"review_date":"2026-02-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.bexio.bxBexio","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.