Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“C'est malhonnête.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
eb618d47d6a56a62fc42761ed22c92453203cd9661ff9d1e7ee796c339bd9710
Signature (Ed25519, base64)
5QFbwXHRwQ4QwvgemEyR+h+fPiFzNUz8mqy50/SVHRsbQQ/0wJSpbQwSuPOZO7CMl+SuI5e3vkrPKDR6FK1pBg==
Merkle root
06e613695f6fd14fbb088768a64dcac7db7e51e20377c5553a89e47a3f170973
Merkle path
["eb63382be6ce120f948a6f0a2a394d326d193a9f07e2dc76334e387975f1304e","96869c9ce04d88c4c32273e34b62c23d9bb35ca5a06252b53f9eba98f12db160","cff31807761e6f5d03b3e7ca16365d18f5f94779b0526eaba131d44c0bc28107","a61e776f78385faff352019197312209d649b9dbdcc8d57195a6e1187c57d5c4","106e033f3c7042125f5f9239a7a57af600915d4721c835490b9901b91d8ade52","c166ebac3f0c13db7fddd0748c68ac0f6ae98a33d60747aa0940b57a3a616bd8","0ab81f128c27c58e6a4c23a6baa4dd89cae3b4538a7a9c2ee9fa22ff55d37d8d","451241090726877c234b3f3f54512dbb710412182e0b47c849d9296e71868c1f","f467d8d05600899f9dcf0893250baefe1a3245db332f8590f66d07e28e300251","34a57b69d6a46d8dca7d04f227aab6fa089d32175427488ea7313806d0f935f9","5c0811d449c6978964355f94e04853a677a329926589d623ba9273a142617465","1da4223fa0bdd2107a87df567fb1804610e2ad00bd083b95cf6884347c3d2223","5875e4cc37e30e79ae8911adbff8609e1521bce37ec41dd8f38a2589b4365ee9"]
Anchored
2026-08-17
Public log entry
search.sigstore.dev, log index 2495023211 · entry 108e9186e8c5677af4f0…
Expected log hash
1a10a3fcbc3c3ff2c5a6cdf309089595ef78518d7c8e1569414b6c7875f49d97 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786932055373","kind":"published-quote","locale":"fr","page":"brand:tresorit","quote":"C'est malhonnête.","rating":5,"review_date":"2026-07-02","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id722163232?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (06e613695f6f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.