Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Many times when updating a password on my phone it fails to update in the program itself.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7d7331c877bdcf8cf6eedf1eb42e674e620adeee227a0bf231a24b64672adb27
Signature (Ed25519, base64)
EnvqoMEO1n1mW/7Zu/iuCs7ouJxV9erJeQr40oISNtpS86tpRY4oyRYJ6g2qUE5cQmF7o0K61b8w9NrkIF9VAw==
Merkle root
3b3dd30c58213ddb8f8368232793fe0b07c54689d13df1c0c41d21cb861abb8a
Merkle path
["7d735244d9893ac917dc408cc82688b385ce88b448de9fbab976ab7aca36628b","3c4f71d48fc18af2392b167b242dee98f5b4fe45aaf4c37c607aeaf6773ec92a","ff3636a6b6694ee4fb3a72e6f138fd335d6ffa298fe9570eaf299bdaf786f7df","cc8221b9d72e95e22bdd75b7b661917ed4a948aec3a57be433ade3afc56f62f1","b096bd0d6e04cf4e13844d534ce5a252aed72b425bfbdbd783011215abb309a5","8adaabdf34b2f284eefd5c8c795407a6df5ac033345a89de9f5a1a8ff7574d9a","45a9ec274f208c621d7530d4c313c5245e7fa84f6cb9a7644c18bb6ad76dc816","2f793782e1b9bf49a5c0a85620b7e9d3d6936c5cbbeb14260d2501f994c7e58a","d688f8dad9f61cf88b775be5de09b7d89b810df7e7319c2e9a13710ee894b2f3","8f46e340dd9053b6abca0aaf4c91fe49f9a7afb761600b8486dcfc751adc4b33","aa65a07504800d296a2d37ac284d9d9f215066294de9b42a04f329fa83249e7e","67e34310b299415903d0393265acebbbd0e6c1e6e6dd704d0d04fb5a0bf50570","9ab6d125c3830e63c8eed663fd15015efd80833eadc02b245e7736a81584cf85","1ad3cc3e0b5bc4406fe1fb32457a370ab86c3c0c24739ac86495532e543872bc","90aac0c0379b3865ec4b002eb3695dc461bd0aa66de2ac6c660b6e443865b70a"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3101352376 · entry 108e9186e8c5677ae91e…
Expected log hash
0a3f75a20ca5e11e6fd9d7b6a5afa175a84aab197fa1914018652863a1a64cee The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791258637050","kind":"published-quote","locale":"en","page":"theme:dashlane/quality/en","quote":"Many times when updating a password on my phone it fails to update in the program itself.","rating":4,"review_date":"2026-08-25","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b3dd30c5821…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.