Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“pourquoi j'arrive pas à accéder à mes fiches de paie ?”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2594047033

Proof data

Record hash (SHA-256)

ffb50a7d680505b3a5a84c3d3170325a3adf29d97c210dfbab4d78bcee02f6a5

Signature (Ed25519, base64)

vXotU2CjEV/7RPtBRtIGUvZlAf8KAFzmTFZVEZVS9xCPH9htJEyr0oGLgUo8HF40zy/uIPaOfpc2SFCjB09XCw==

Merkle root

bdc4b63265a70d38726c98a51a2f6fe0c825529e253e2d0102798be7f72f5677

Merkle path

["ffb9c1d419a2a081cc1e583690641db1a3b08d9b5a6f1b85705712062e6c24b1","3118062410d2b91598b03d0ab67da393ad084f9ed6dd85b0fe95d7d7b126d7b4","f87f9de190d03bc526cbf709e1280768fad46212ec23239e3e3343257618ed72","e4945087da09a83493c67e174542b43aeb8bd9bdab1a7fa9ceb4e28d237dee2c","b4d40788352506c40a8be7a6259e129cc7815c7f7972c8cb75af02bea092901d","ec6521f017b604df24e5e376fda3c57a43cf247d30b417a635fcf274f89cd643","5392373db8019ca31c0dc0b18b71b14aba76c5cc00e5b174334e1bb057e4e7a3","f1d47d51fdbdf52dfd7cf7e83c9a7f6360fd1eb3acd7e93f3a6a72be2b1a67c3","452294b2919625d670b66251ec9d27635d9b7f35d3f5f6e97cd7ce00018320c4","693e1f92eda4c071c335ad494c8c8a5df6b4ed498a0d950b9a3c078ff03f4f7f","82f7b2397af3b0550027d4a500795cfdf4c993d2866161f4a3d6cb4242ae2f8d"]

Anchored

2026-08-26

Public log entry

search.sigstore.dev, log index 2594047033 · entry 108e9186e8c5677af479…

Expected log hash

26ef5711a6b9de6fa8d880c18fe60f9d9918e495d6ecb3bfd46317eb69c9ba91 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787712098188","kind":"published-quote","locale":"fr","page":"brand:personio","quote":"pourquoi j'arrive pas à accéder à mes fiches de paie ?","rating":1,"review_date":"2026-02-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.personio","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bdc4b63265a7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.