Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“No app updates on older devices means they just stop working with Dashlane”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3121837738

Proof data

Record hash (SHA-256)

8542d99a3d6dc1c544b457c31dd057e95b25fcdba3ef221be5ae8a9e9aac485d

Signature (Ed25519, base64)

PD+gtlsiZ2KxaL+USlGGELDRKue9IzjfnNbbmStMQb6l88KeqjUG/xmSy8H/txNONEyecPOTV9iJavWi5QQ7CQ==

Merkle root

9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945

Merkle path

["8546679cc54b0da7605ae38a14ec9b51c803332b3408a7cc6c0c0c71f9306e83","0f7b8c4042084b331f0f8400c2dc213fadca5ffed5ddeaee58fbea1aea9143be","a08ebc680a3bf7c2864736de5ea20384a71e7dfbe061758fc7f7f166011ce5b2","3d8f8066c2a95d1f9461f6b0496ffb60edfdc44a38cc3372742a8c313ffeb9e3","3382386b5fa5d51d1b677b044f0c9c5ffdb89adc891c503014606fac6c5583aa","e655d52fac1b50a84b639b031d73266fb4da41f22f97165a19dc5c35513a994b","05e83bac22cad6a18f8e7ee710a864f5c1f2335e8159d059dd84c4c44218d900","015c9dd9f550d717ccb12da6c1fc24587a0df51009733c935ca25aba5e074102","7b326b996e73df3eeee681923f765e1ef3c9624bdea7eb1de2680466f4c325ed","3e2cc9f7edd4049117e9755b5fc97c59f9534c157a88af0104ee00a465b4ef4b","cd7e64dd744c6b2b3c0bc1348c71c214529f5922bc33f0cfed04ae6d517e5f30","6d541edb33c9f5f1ee15fbb1fec161013911242830bc1e7512ad7e4c9bac785f","78676505a7a4e31eeadca3cd52e7c8dd54cff3cf24b51dd75865ba23f402c848","07b2decfe383429cb71278f9069f54d1b4f607f991c518b70357c1681514c3ad","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…

Expected log hash

a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"theme:dashlane/quality/en","quote":"No app updates on older devices means they just stop working with Dashlane","rating":1,"review_date":"2026-08-30","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id517914548?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.