Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Mais ça ne fonctionne plus...”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ffd53305c3547f488b943dabee7d6235de01d33727074d05d0e182118c4a2e2f
Signature (Ed25519, base64)
KEwE8+KMoDrKzB34TyxjpP6LquP/EES4UPQ7iWhu1rLebwGUK5xnVPQcFsa/f+gGtmj46vIQy791XQejnzNCAA==
Merkle root
49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path
["ffd554a802434576ce6c6084bbe4e64167b02030c8ff25c58ceafe1fdc04cf67","97995c0630a3aef11265a1e873f956372f5f84971811e1f024b9add90aa7cd2f","4ca2da8de5d3d05adc25baf208481dff80a4ab531b24f765cd53291eddaf79fa","a712d8b34302467bc139a036ca36dfa4fe3d46e284b2d981c2365c7bf707dc83","3f7f23d2358ce75067e2637687baa687400a3b6fd4bb68fcf2c789659cfe30a1","ce6a7c782bd2541917f3bdbaa2171da684f92454cd8c5ad32470b4165fb4569f","74e89dbcdbf9d9025de67b6efc2625972baa60789f511628620a090a10318c8b","9b64a0172b6a174e9028a2eb4d8f07bc8d94464dc72edcc5940c69698aa299bb","74db413daac5cb92471e1d3ffd5c0e5306fc09c9244a0e5e8911fdfa1213d4bc","1fef2eea1ba7233240a645d2d99dcdcc4e3841bf30f06929c9f12592e46a0c14"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash
d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791428432986","kind":"published-quote","locale":"fr","page":"brand:atupri","quote":"Mais ça ne fonctionne plus...","rating":1,"review_date":"2026-05-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.