Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“iOS 26 integration sucks”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
568103d187d2b9c860d9670449cf60810455127f1ef1ac90eda4d406b6d88c62
Signature (Ed25519, base64)
Ws6jIaJcAcXWSbz2ezLPeHJIFdwQS5dN+0av4z8bafoJz/fDRQXaS/8wrpjEacvVpUZi0VfhjcEJt0Ixv0i6Bg==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["567f6355751c223c211409023428c7f524868677d44f1b368640465ee5898fb4","f746307b60ccf80c335adbb8c9ec8d5ebc3dc106f91a2a580167e0feec912568","f1473efee4eeb32d30e00c485d59405f431fe97d6d4a4204b0ca41040b7ee8a8","42fcef4f8690b9e00d2884d1051fdde347385e4cf4e35170be4cd52ee0bc92b0","9ab6fc357c104d8b2025b75025acb0fd1b1f3065076c38b1388cba20a37c7859","f2fc3b7e092821ee4e9400dc4af19b75595c0f2e7d3bbb41a5f8718fb15c400a","7e76193bb41d4715320eb446acd7944ab84d7f2ead35a04028f8cf017fbef244","9f9e1b7e87b9760c2ce129ea38a7c5909a595820e9254005c216e3a9f3d028ea","7534e94b6eb9c775f05d2c55b546f2c5875ff1e7eb4c558dd74a9934d0e949e0","ad2465ed5f6296bf60239fcd6bd306471f373e69db687aa85b109d776e5333fd","3fafe90a1e6bb1578161c7c3b3d872c726b9e3e675bca334294a9f4f456cb2db","5365c2b27d59de41f7a39ccc36f0c9d2af5742528efb0b71cfd75231d3b7864a","8455d91e0d89d90a64ff5b7b26c228f01990ce53c1dcfadc629ce9d6ce5ae519","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:dashlane/quality/en","quote":"iOS 26 integration sucks","rating":3,"review_date":"2026-08-30","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.