Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Toujours pas le crédit Agricole”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fb8ffe51f7999099a21aaa3e0de23995ffb3c1750972befdebb4d3b1da1972b0
Signature (Ed25519, base64)
1kVFcSLzn7DhluY5WKPktuupXMsZBUX/xAXFB+N6jtv85QRPOX7y1bqzgjiqcOJK4kG05wzIqkzZQ2ioMjQABg==
Merkle root
8c6268a14330d1a3403c561e774645b0671f81571ec1735d4674ebe1de7502e8
Merkle path
["fb94874f9fca05c0685a2d2e1c99e9f17cf27d558cc6435f387b093cfbe5042f","8e33dc3c34d2663a1feffd687a0c2da940910f6cb8844571893834cafe4377da","74dea084cf899d5daae561add920ba2a0112b9ae772f0d87531b118eaf62ebe1","0a3aebcdd419f56b73f9c1d05c680ef2daf329513b1750efc0a66b1d9b1348c2","c33062d27f909379fb8746fd5251596960da2b6b121a1cda5757e91f32334ad8","f1aaa616227d89d18244e369bc5e7c40d308fff7765164bfd18a463c13818dc7","6ce027df7c0a7f7cedb61e6321baade96ecf1fa788044044d48842104d3b9ca8","f5fd59b97b22416cb4d3b3db6c54fd339950f66f682859f07a2cefdd92b74ea2","7ff63701aab0f2b626107e8102e21fe1575e44fb8eea4cb3720478fd9b4011d6","2bd43b4f1e3f3336a4a9afc9f24e20a2963bee2a4c25936802baacc8d3737fe0","1f79c9eab7bfbf1c5afc67f3981af0f52a177533b212b5266dfce64e07fb0637","fbba1df861b4ec266471c280805470ef5a23e2d03346b6c50e4453cb7a331a51","2de97363b84c3a3c7892d6c13559facb127180f7fe51ea764f30fd45ad533e91"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515439294 · entry 108e9186e8c5677a4f15…
Expected log hash
128701fddbb19410bf57cdb2d04d7a0278d13bcfda6410d76f176fa58341e1c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787141082461","kind":"published-quote","locale":"fr","page":"brand:swatch","quote":"Toujours pas le crédit Agricole","rating":1,"review_date":"2026-04-26","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1525248439?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8c6268a14330…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.