Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's a shame that on my Mac running Ventura, the app doesn't work with Safari.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8337e7a85aaacfd66d5252a44bce0e1d85a2d63137bede575fba58b95ae4cef1
Signature (Ed25519, base64)
YlbBZa9p8kITgwkk+KEo9jrrLQTQeNeHIkhFtH6Kq6nFsxbDe9ABHtZlz87LQJxoCyAuAzqQFtg+A0XnpMaBCg==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["83385d97393f5c1a0f7588e6bfbf8093a72f6a6591f33a447db15d517a19e1d3","2f47a72712f49b47819915aba4d18dace0a099c86f3a92dbec5bb1c7bcf835b0","b97706b5402319f8473a477d6a2fe944cc934cc195b2cf77891306fe7c51888e","dcb5990b726ce81cab849c8ca8acdd90377b2853e8f42ca662b4f0c19af2aee1","8ecae32f5f58075cb5648ad7ef623f136808f3bcc416a98283987218a8b20a8a","b00c27e1110b725c7a19a6e3013bad67b81a63a836b6f64c6e037be3efa11082","e43c7725dd3a16da7161f6d9670fbf29499de89e498064760684fa07700e9f3b","d32f63921a12f78efb948e0f88359407fa5ffb0f0d4e772dc1d2a035d3aaedcb","7f0ad0dc45dc5bc64c29c3c32d67aaf75d0fdd9475e6d0cfcdcca91d8b595eea","20719844fe1742feebbef626cb83e7bb1e97af00bc531ae92540fe46d2a9eea6","4be1d5f0c95cb10e96a85e96c9d00f29cd34e9298ecba9a3752f4f04cb4d2de6","d098ede59e492d69a5edc22e4ea0a324ae8e5a1382fbb4f78d7fbe20dd21f96d","3a4557370606b510c9a2cb3a2ca3671efcf47160eb4264ac3eb8a4e9a9f5afbb","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:dashlane/quality/en","quote":"It's a shame that on my Mac running Ventura, the app doesn't work with Safari.","rating":1,"review_date":"2026-08-22","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.