Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Les uploads démarrent, mais restent bloqués et ne finissent pas.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2525430207

Proof data

Record hash (SHA-256)

eab1dfc2775e2745978ad1cb11508588310826f7c9f6f5a4f31fbdab7b47f36f

Signature (Ed25519, base64)

BkU+hguslh0vgm45dRodpwIgetp5RMqyx6nc02EKHtCQ9Mywg+ieMbJdIhBp6gHTobPxqepplAXAhHerb9sqCA==

Merkle root

689da4f5bb049dceb797a1ebd18ec1f343afdc6a2eec17587eed167cc7c21a02

Merkle path

["eab174c6334a63bdac52d009055c527921e50a0be2aab82b959c3934118f9f89","9ecafd47837502d6141bb938a47249ea715f6bec167a304a0b3744aaad4616f5","48d47c5b4a975a201d2acffdd80fe45ce6f1c470e60ed1480b770e1ed7e4512a","de3b613f6ac236d755e70fc7efeb594eba2e019e324d5b95b7f2fe83013f2397","98940ef67d58afead58bd3ff5b9e04872fd6f5dc9fc8a885a69ded887dde1c72","8f91e3c9c76f92925130e4d8de2731de8e7b38bf0e8b18cff5ef5a8d1dba37c7","355c146ed304cb45c53f24db11ec0092fc768926fba83ed8cfddea980a77a939","7a5c401b6ab2b2369ad8b1371b4e25dfe564638d4faf49bae5652b4e59265ec9","e3309c229aba587ac2f3d73f0c6b7d179ab282e6a4af4a842652558cd4b34b58","abacde455787a2f36b08661d5a2e02b821a56104b6b39c1b414128819b8662d6","54fff7046a480bab67694f6f5a4e45a58bdd935f3363a6069ad9720f4a72a64a","b336e0d848a6d29a7cfd990e08752be18410beab85a60322e121eb5e126a19d1","cf5240297799cf83aac163f53f04275b611d759331e13e9af4b09fb2650058b9","cbe53573bc503d1fac8b66c37a5c149ad9dc05847ed30843f48702f08cb1f237"]

Anchored

2026-08-20

Public log entry

search.sigstore.dev, log index 2525430207 · entry 108e9186e8c5677abb21…

Expected log hash

68e6afcd6c232c11ffffa818a4cc0c5faf1a86dd24e2ab2a7811fa1f4f43bec8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787196781193","kind":"published-quote","locale":"fr","page":"brand:tresorit","quote":"Les uploads démarrent, mais restent bloqués et ne finissent pas.","rating":1,"review_date":"2026-07-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.tresorit.mobile","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (689da4f5bb04…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.