Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“syncs immediately”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
49436c465075d39c1c2035f2c51349e8067a4e9ddbd34a68312a791312d2e3e9
Signature (Ed25519, base64)
JfkWJbp6WunkhRrsWFBBRBMKWm0byyVTRN1RtWiUir4WdawpYCRctoQT6Bk958UzrfYPHW1qy5pB/c57A638Bw==
Merkle root
199738dc68b66dcf66f6b0cc77e2cba74c3bfda88989684620837b4c4e64818e
Merkle path
["4945071483fdd92dafb6477e1bba4d37003506640f0857584e6c47902b426ec4","9ea769c9f46fa0cc6a46d82977497dcf663a5de6a577bc868ba7b97cd39ca56b","c90885fc544c462f1f9a833ee3113ae90f93fb59b9a8c58d8d2388b48b61af7f","44a94c3edbd3a92834b8a20d2feccc73c8caafca407ea718b8c328323c268942","8fbf23ca54f5dbbb83ef06a7d06a46acb5c58a933e87433504c1d6d639b3216d","fecd157d53336bb11d77d9fae72cc73d12ceab7d1fe300b678f38e8a2ad2a7d5","8a11508cc2b30081266626847334dd78bb337d146744682e21e59dabacf7d11b","819a80fe6c87963ca72a30485deb2a66e2bbd439228c768dd93054011be1d85b","f4f47bc1cf1a7ad636e8e6e087fd3b633e2fc31d9fb599292584b523270401e5","bcc89037a49902a3c70b26cf633524ec038892760424a444a7fde7afcd652bb4","4819cbbd871abf60ec554a51473e2bc17ce4d8ef355170e3a704c7ca1cd1c9ef","793a0a113c6896c3097aa5fd875e658514ad3a060dcb3a5d23abdc1b4da18d9b","5dc6942b342fad0953fd3ad3bc002a6e4d6bf8c4ba6db81c1c43744a0d2c9996","ddc8a66e59fc8f0934334cf08e419f621290129e658cbc58d8ec27bafd90b0af"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3198797320 · entry 108e9186e8c5677a14ba…
Expected log hash
46227e67415cdf5b62c43420eb8b7a80b35acaa912410c2711787f678b77c9c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791687727006","kind":"published-quote","locale":"en","page":"theme:dashlane/delivery/en","quote":"syncs immediately","rating":5,"review_date":"2026-08-07","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (199738dc68b6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.