Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Mais ça ne fonctionne plus...”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3198489507

Proof data

Record hash (SHA-256)

a2fc0c8644024227c1d57cda51bb41268d4dc22b641aaa6e35fd95fe7c506eb4

Signature (Ed25519, base64)

vIymfZooH8Y3Oxdl4QK9UJkzeel/56lKpIzCjkHQ25kU/TkOvNRs3n7FgsvUOm3Ac4RrpbEQTu9BPoYE7lbcAg==

Merkle root

240cb93491796b59a812f7182e64c43781541345e454701e4066e1786c286494

Merkle path

["a2f0e457215e825ea346f3009b5107d4665d2ee232c24b6eb0de7da7a282b13a","eb2d08cdec94470cf26ee4a1db0eb175865788372f986fd44e461109fe058f3f","100f56ad0ba32e96408cf313b868f7beb775040d2350ea631c7bdd8aa6924aeb","d53eacf86c09ceb5a17711f996e1eb396e7c0779d91e69ad6a6b93d6d56b75e3","340736466d819009c347e7742658691d950b6220d368e5595d39d5945afa8ed0","8460d709f12b41edbfa6ade84c328593585b14b916f64798276b6c779b703894","a65f18818f2f6e67598777649c293a6360dab0a0db94f328467bfb2ff10e47e3","dd2a3fded676f5081a6eb9fd2e2ccc49462f7c482eeeeca1ed19b7738f2ef84c","415a5d5421d6134c49840201ee6ce3224a4ce32681b9e2072ef62f53f0edf35e","5c5d899ef69bb2f11e71cde6c3056bb6523b9ccc227bd11e53330f88875d6b71","2c585e750b5a0724ff7619dc36eaf7d7d23d85f7323cffa61a41fb1e475677fd","c2c7b0cd18a3b61450874997aa9a8203947229eb027bf9c58c1538fb44bf3628","966ae6a576179d8dd4cdd44a03ac9a676372cb3fb51bfd483d17fb1b38e24914","1a64ae1ec6314de97d3a290d1ea8c57875e5472b39d06fd054abd594be19c0c1"]

Anchored

2026-10-11

Public log entry

search.sigstore.dev, log index 3198489507 · entry 108e9186e8c5677ae5cf…

Expected log hash

50393c13ffd4f8ef4c37424a8293b422d8c3ecaf6b9593225e2bb93e0cf2c210 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791686710415","kind":"published-quote","locale":"fr","page":"brand:atupri","quote":"Mais ça ne fonctionne plus...","rating":1,"review_date":"2026-05-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (240cb9349179…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.