Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“on mobile it’s nothing but putting in your Roboform password 5x”
Apple App Store · 3/5 · 2026-08-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3121837738

Proof data

Record hash (SHA-256): 69c5c5db921d73846cea8f450ffaae026b01aaadf55069dbfefa74751e866163
Signature (Ed25519, base64): qepbKBPiXosBVUMCSF5txtRP2WI7k1iXZIcLjPCAFfXCUTYDUGnzVWaAWJ0S83PXZqJP9FxAkHUgD5RR3jfSCg==
Merkle root: 9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path: ["69c17cd68f38a55b45f8de6e4d8d4a7e35483323dfb063b8c5790ddf77497ad6","6fc99f87cfaf06e4dba36e6a6a7eab1d81c13650ad73de82f7f9bb7ffc8d07bb","b48c503e3390c3502d8967795c5e4f656681e5d63fef301f1a2f5d02b5cea8d1","c5c686585bad8184c4ddfb596d1d6d1dd78ba1436eb7b93d1b5b4dc4c2f24dbb","12f126ec0614b32c37c4ca1020bd769515e43e7e3336fe1540dac2fe9e7500a2","4ce08c65b17ef081be25e7a8f0c3ebcd7f93ca4a948434837983f57b43daef9b","99aa538af30234dbdfb10de3ba68faf7fb3ad410f41b493ac52037433b4dc0f0","fbf8caf1c308ac7c8558fc7fb1d10a6dcaa0385f5b7153de41c79e63c4e149f8","2bf4c5184da42ef228de921c5ff04aa00316a55135864c22763d6eabcc8e6709","8206c6e8e277f1297f8ced9eb6f94be90ef86e0d233123cc9c4ae1d8cd081c47","1e60a5f7e38047f6270163e7b617f0f816c632d640d32836a7083b56cc04bed2","de57ce495ce1dcef2c90dbc7937bf61413a49247e13455cab064ac817fe68fd3","3fcd45228716805aa85ade4544d04e795bb1399eb7a6a00746dabb625754cd90","07b2decfe383429cb71278f9069f54d1b4f607f991c518b70357c1681514c3ad","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash: a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"theme:roboform/ordering/en","quote":"on mobile it’s nothing but putting in your Roboform password 5x","rating":3,"review_date":"2026-08-05","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id331787573?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.