Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“l’ia ne récolte pas les donnés personnelles ce qui est encore mieux”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543700701

Proof data

Record hash (SHA-256)

4d4cd77940f7978a4f12b3fa4bf887a165a91a396136ecf0c953d35b7471e4c6

Signature (Ed25519, base64)

nkeju51UvqfE5By5WvL9ldPH3Tei1+RtCWOjFncTjgLw6Zgrot2oHC4w8pvWeM0FriJjo6kNEunYH7GpkV0iDQ==

Merkle root

c921242d78a65e026e3281000ec5ef04ef930758058c4fed3f79f3b5ef992cde

Merkle path

["4d4c90a5552f5312339a76555ada6bd51fb6975c145333a98edc341f7012ab9a","324388864c50df15f1152b09ed0394281b42d56cdba6533d3558775c44df4576","70c82facaf5302b69708980d149418ea3ec06a984e367ce1058429bb3c7759f9","597441b939fbaed7ca7fdee2bb79a829f1c72c4372dde44a5b95fa96ec7d443b","de696c8636009473e3306b14479aef5e0c90b1bdaaecdee4e8cf871c66f453ae","005610533287d68f30359d9dd693c90ae80fc52ee193e4083f93ec2cd7ca3900","a069b1c05e6ac92dd39413bdcaedde82abe5c976b5270563d4b493d8e41c42b6","55ba9abc7d8dd0903512513da41ff0d0a13310410f92f6e8975ea3e207d7c0a7","6a498c7c070f216d4939aba8d36f90837068a543211aed407b8dca4130d90564","b0142db5fce3485071450b82f1ec127148b7179e38025a3013f02de0d042a173","3068497f447c78087778463e62f38760db0e68f6a3ccf500c1d9a7f8cd43ef7c","0873915137cf11fa0118ec1588ca7cdfbf107d20621661e35a06cd20f2f34728","affd4e3e6ec270a4ab2ae23163aa1a6ec143fc7cb3b6399ad8156d5289cce2ce","a3747175efd8cc3d769be29f15252da2dfd09eccbeeae76e08b0112f75ae1173","522d5a6bf348351e5632579ca190fcb390464957ba4b4698b399695ee13b67d6"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543700701 · entry 108e9186e8c5677ac7e1…

Expected log hash

c1abaf0323b08bce2cedebaf1993162920ee741ace8973292e7ffdd13aca356b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787287374804","kind":"published-quote","locale":"fr","page":"product:infomaniak/euria/fr","quote":"l’ia ne récolte pas les donnés personnelles ce qui est encore mieux","rating":5,"review_date":"2026-06-28","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id6754152858?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c921242d78a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.