Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“There's also no free tier.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
418d81a036bbddd138e7e8fde7798b19ec9859ca22c46a5096084812fbc25b63
Signature (Ed25519, base64)
GFLVeB3RbQdtpj/uBeicLy9HGULgmZoted2G6WDefnSPfgrvdUZLM3FxLCMCNs4TOssWTRYk7t3iXeAAM71VCg==
Merkle root
a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c
Merkle path
["418df9536cb5fda64bff428f9bf9e785fb0026d61f94b1901f187c3fb64aea40","ca532e703349b5ebf6cc439f7b45ba256b67f1c25d0bad779ecee922eb2390f2","4bb73da737f46e91634d6bc627e2e43dfbb74b7e62b60fa1d229fbbea3154ad0","36a6fc3af2bce2e5ab98aaffd2de91d9b63eb7621b77649596101dd684c198f8","077af6774ff2b4145d5cf3a4c130256f11e46e257a5e8fc967b49fe3d2a43985","4fc4bba497d8bb76bf5405b7d87cbd3d85bc7d1401ad4eba7677c5f71003b1f0","64ca864b301bb899513ed3e939315570c98ea5fca005a1757a18cf8c2b14e43a","cd7bfad9893359a6f9968db4db1e56caf5b792a1b5210e8450ba7524a913893b","6e83211daabd12e7f883fa6630e7f9c7ad3182a206ce28b1d407405c283e8f5e","e327f298c50742fcc4499d3cd526609cd1fcbbf7bc3a399863e700d7d1346126","87ce158a45ac1c351ddb37490b58e4f190546396217560442df58265b751aa3c","4f59f4aaf0240f47bf6b7b597482d7f0ce33f9965169e550832697b23b630fed","34d17d8fbe0805298b779dccbf4c1befbc8fd33e42aa34df809cfe1ae000a274","71601cbc06cc18d15a7af93021ee7957212de37616a4dedb4252c015daf6350d","5153df72155ae00831ba1e4416296382c39280ea82c989972042c066f445006a"]
Anchored
2026-09-18
Public log entry
search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…
Expected log hash
5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789619628558","kind":"published-quote","locale":"en","page":"theme:dashlane/price/en","quote":"There's also no free tier.","rating":2,"review_date":"2026-08-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.dashlane","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.