Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“C'est l'assurance qui compte !”
Google Play · 5/5 · 2026-09-11

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3668444190

Proof data

Record hash (SHA-256): 5cf7fa64e0a498d10fe93e10bb24c91529525bd0037d11a7ec43a5181d3a370e
Signature (Ed25519, base64): fOthc/AbtD/bBLZ07P/N9Kr9wg5NeY+XZEBpNwGhFdFdObwSXoaJEseRN9S33fbOkpkj5KCTaDTKUQbtFe5sBA==
Merkle root: ee5cb7d5466574a42af50a5863f2e6b08707c3d7337d478e2a75ec5974817ca5
Merkle path: ["5ce1111f656424d1598b42805dc0461e24470a85840d4931a95b801d5a8789db","7a3be8ade5d98eae259ee6f26f296047c5cd326b30e90197e506b99f496ef81e","217059386bcadd6d06fdf865659ec2cf0d33725e102253edaa9f5511ab3f4010","54b76e24676afd5211f3e173f9f5264b64038f6532cb8fa55edb9e99c2e407bf","a339f08ce3f6d0ccc7dde95078b8efb7500b9e9fedcce7daa0287adc1e1633cc","f43d87020b3e0cb6883f871df206825f85afb259207a925a55dcce6594f14c86","140b9bbaf95939b3291c1f708c230375ef3a40531aba3097979f8d4057d93a74","ac57639764da00def971d87558598090b574b7793918f4b82773a380f514a9a2","6110bb714061c57d88c2490d346a061630251186cb7816cce5568392ac40166c","5233656b851e53255fe655bee4200aca3801122c487a58dffea3389a8883844d","fa65362f5a9787cc5f8f72551b8da1f0f00ea3233bc341ec77f880c22a940b68","d3624b4d35b185c815fb5bdf5f2eb0a5012daa6aabc70b48cbf30a068042ab09","2a73db7909019b8ec3460673eae2069c28cd7cadadc50cf37b832bc38db68e45"]
Anchored: 2026-11-03
Public log entry: search.sigstore.dev, log index 3668444190 · entry 108e9186e8c5677ac70a…
Expected log hash: 6a62ae4e16460222b9c1147d69e44f936572be00297966ae47e1c0e2e60f1a72 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1793705698743","kind":"published-quote","locale":"fr","page":"brand:concordia","quote":"C'est l'assurance qui compte !","rating":5,"review_date":"2026-09-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.concordia.myconcordia","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ee5cb7d54665…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.