Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“IDs and passwords are not being saved automatically on iOS.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3668793196

Proof data

Record hash (SHA-256)

1782393570b4535c6e747e167743a7a50515903a24303904a5d1bca226b3e4f1

Signature (Ed25519, base64)

0Kzyc657Xhrap8zV07IWstN7ghIFxo5WlsJBEE8VnQXfZAb8KsVTvac8KYnoWAg00kPoWvldC5GoxkMASiDACw==

Merkle root

8552de27836d9c1d73f2670cf2bc11df6459e7443d47ace4674278484e3a6d8e

Merkle path

["17801e58f53ea5eea0742c6e5ce0999c9f7f786a4ddbde2c6314d30fdd5a2d51","aa826d324ee7232a4627d74c54f8316411a7430edac6ba699b3c1328e9fe49a0","39e1579e5ba4bb44da3e9abc5678689e453c66560811cb4341f7b827943cf5c1","e5ea54666e5f64e2d17f0612d5dd1941285e3b23c921d42d79edd4a814c428ad","219fc56ba3f033e47f7b230789f0d5b2cf816e8075b8daea65f82c7901729033","5e65d46d8c9e27b88e4057bc9b66f886657c4ae1068f9614c7a5a9a7a4eca517","860cfa0b61b20d4fe4cb1cd15bc0b84f9dc10f41e2fa52c352f5098c1f03bc1a","a496d7b61860899b2241674593ea1a475af06af91ed94517709514b78a12b26c","320f4683ed3fe725789715bf3ab7c6f656049e3622678c3e107a4af4c3f333e2","a2167604f39dde688faee94cbc75887b7dd0f34620ca58d2a04f03684dea1105","4f17a7ed38c98f7a470320811cda3089cdb974f325cd6f8590ff2ad504addacf","521a2de35e4b98beb07bc39254cf192902ab2b5298a659e0538f167d5630eb48","06f625e80da47a14c2d3e7027b88f7f89c63e459e05ddda58b98e60b36bc2518"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3668793196 · entry 108e9186e8c5677a8c91…

Expected log hash

f099839a063ebfd0b66050d615b9645cca5be77075ecec449f1aa0148fdcbfea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793706932685","kind":"published-quote","locale":"en","page":"brand:roboform","quote":"IDs and passwords are not being saved automatically on iOS.","rating":1,"review_date":"2026-07-17","source":"Apple App Store","source_url":"https://apps.apple.com/jp/app/id331787573?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8552de27836d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.