Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I couldn't live without it.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
60a2179ca11f0310315c463db2d1be457651424aa99e819e63ca714cd37293fd
Signature (Ed25519, base64)
G32dTzCNIqEtDi9uutVaWN861SPBmfoozGaw/n1EBfJ9rueyRTC6wo4l800QThr3b4h7jobkpo0DEzVINJZlCw==
Merkle root
b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02
Merkle path
["60993fc63170d462fdc714d0f1354f598c17ff9dbe1c47df85e07ced85a37e72","0f380e9fb3d399c34342bb8d3ca5c91b0b69c0dd431536df700cc328924a6997","3c298614eab9f46774140ebe3c9d18a2c372d27be431c86d6d57419aa823a371","24b6741134eabeb78c18fbbdce222659865d2343dc484f3376773840b3bf7883","6fa5dc9838fa02247f5cec7bd74d8f4af3ed2f3674fd8461d8840128e1f63888","5828dce6872b010105839774276614b2f766c3efb572cfbccb95e0c5eb19981c","11ab2d35e7e4dbdd81e810ab463301e5c280fa1710c4a0a11df38f7a9013bbaa","d1226f6002c9b047c0c42638b4d899396f4215896e767fb669050dc04b188803","5c07a1a87d2bcf42b365b3b96e7d755ebc62f7cdddbfcb700dfa856ccc8760d0","02e83066a2d417a6b11590ff406ecc0486b921ac6635497db9aec9ad8cd5c83b","3ffc4d7ca09b39e0b9dadb921b06581d3652d248d7ed39418b832cb86366bd66","40bd9581780e3da9ba474021971a27a2b963126bf33adecf2de39d29e5b5c2dc","bcc0d977b8ab2060a87584efe5d0f5545e840726716d3f02c248db108122259f","6c299608515c69a03540be35865f96ca4932f3e0403f8f39fb0e1c2e2aedffb4","43a562d6822dab12c673c1efa0a3171d1ef69b949f676fb01847e1e5b56274de"]
Anchored
2026-09-22
Public log entry
search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…
Expected log hash
bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789969984102","kind":"published-quote","locale":"en","page":"theme:dashlane/durability/en","quote":"I couldn't live without it.","rating":4,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.dashlane","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.