Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The only reason I don’t give Roboform 5 stars overall is because they were slow to adapt to the world of APPs and iPhones.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4e47e138916d8cbc84dc06749bdb5ec062ee9294c2a4c76ab59f74a8806e9515
Signature (Ed25519, base64)
a6SVl8kcv7AItlO5w8xMI1oa/x/OJjrBeMvDZ184pGdUDR/RX7znPHMOAhnhR+SVrZPdsTuAc03sUsHLwu6xAw==
Merkle root
0d7fec37eb7aa7ca022c461398d36283692153bdca7d5292b2302abb6878e5f6
Merkle path
["4e4b638b0c58b8bc790b5e57395541d738634f028f6617cd04c8e3b3b77aaae4","11ff64d7626aa30004f719a321fb80e01d1f84704ed3f595969b30f547970bb5","29f8e2d4378e1b5f5bc846f37add643424f2a11db44e019c584f10c8d8d6109a","748ecb022496995d1cd97bcc64efb6ffa56e62cc79cdd8e12c0747b38a93ba02","13e64e6bb2e832df0e03e5c3260c6955c7928f887a3b7d1bde507cd7f9228fc4","df6c9914f9f1657607c3f419c6fcb580168123416e197c488fa91a58c809631d","0cbbebe43e0687951ef6b6809b010ea66a0cbf335cab01472b2110847dff9630","09d5fdc89b77169e6302153c02a609fbede1b71f2f4a1d054e5bec4816486079","6c89268f1e61cf338abe67b6c6dc41b3f33a1db2825484f6c0008c43907b15b4","723a14b3da0f68f2211fe60b2e9c6c1655b4c82d5f8260cbf508fc456f9d7de5","c805d3bc40931ffde43ae5f657be2d32e0b892085896cb29bf34f5e0ef439d8a","4ce12c2334e8f56fc30e7e4af9c0e326efa3c5646a10e71c10d670cf6a9c02ca","38ecadf8498df1719ecdff36e217de372cdc07cb84c4b18b50ce7d8a4750321d","7c6f9d1168e8a2f5a015e8aabaa46428ad67e71a9293d82f20ec40d2ad6c53fb","8c6d73d3d8b42a55077d4061fe37663a0906972431ecb9eb374f1f8461206839"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3126883925 · entry 108e9186e8c5677a6678…
Expected log hash
7790667e260445bf729ea3061132c2116b163a0e0b944eca343c9e8408350ef6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791359818972","kind":"published-quote","locale":"en","page":"theme:roboform/delivery/en","quote":"The only reason I don’t give Roboform 5 stars overall is because they were slow to adapt to the world of APPs and iPhones.","rating":4,"review_date":"2026-06-28","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id331787573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0d7fec37eb7a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.