Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Demande sans cesse l'adresse e-mail.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3668908157

Proof data

Record hash (SHA-256)

49fc7ec1bcc27f9ba08949b2e2d8724f444d4be9b84efb7facfad3a91309b97b

Signature (Ed25519, base64)

wXh9Gj6ZQbluV2JKYuqmj1i4dKym5LNXBXJ2a3pTNmO6OWYXl7aGDIZnlDOT8UWOv337cXBwO4f3sYVjamicAg==

Merkle root

05cfc62de4d0c54d5988c234e4de0ad83bfc41ea25849dd9d979eded6f322593

Merkle path

["49facbba43bf0cc82a22f151bcf9c7fd259b9d548846bcab5d80c4f1a9436f4b","97adf0e23f0e6b066d32a0bd9283dcb3ccc66d7d58cfa7b871befa485d670bc8","41f8e67580f17ab15cfe4a58a41e426286e006f9da7d627e9b49300cade1a226","5112ca0974e038c5215e9f6cc2bb3cd9abc6fc4cbbe3b237bc9ef2dc95fc296e","1af3645b5ef4b737739d46beb3724a95539a7ec6a71ab79757ad5ede33d88894","5da8b907bc33f5c3a2d79575a793d3acdfc0103e5dfc4efe3db5ed75f0709bc9","7525b6cb4daf473277f9965b310eab752d650fbd8b6aeb865a0ccdd3dd524aa7","1c5134f9508dca2de49871e5c0278b5ca8a565470cf35db969c1edf99cb435f3","a84f6e1d32793ef2ab268fc84aa2e0016805686e96f8bb0a597ad60a8e89c7b5","0ff24f3fab8b3bf22d3c05502e58e82b74ae8518f2be049a16cb6349bdadbb0c","3982c38c460003f1c1f6a1ffbec4912d65a6ffd82f1348042d43c859439201c2","93b1491f492ef629cd28e6f5004caf186d1384646cbfa66529b18ef562425512","63be509b3dc15b74d2801a17187772630297b93244215543f157cb4be936b8ef"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3668908157 · entry 108e9186e8c5677af58f…

Expected log hash

554a3bd1bf640e4c4cee904a7897bcc74cb572b6d2b741111b4ee09cd6a9dd1c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793707394647","kind":"published-quote","locale":"fr","page":"brand:atupri","quote":"Demande sans cesse l'adresse e-mail.","rating":1,"review_date":"2026-07-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (05cfc62de4d0…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.