Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I was usually able to find or reactivate that old account.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
860e7bc2ee5789a8ec2d8bf4d91f4e8758fd6c5e136e277cbb90fbfd862ba0fc
Signature (Ed25519, base64)
ifh03Vsd0GlJuMIRmAM19JlHpKAeHdhExuZ8n5O83poqZKVjhOZtaDkxKj2mXqiRMckX3fP5yBn1jrID8zOZCA==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["861227f46158f4d5957dffa68514864f554b770c35df6e978a7bac277093967f","83b7c089f903039f3df6a105b61467531483e460ae5f20be0d4e1fcb1bd6f818","22ebdc1157de743b23e6545240dce8c7873b5568834f9a19525fc73a5b895443","98cebfabfefed4ea4a1fcbfe59d6d92be404126e0e5f856073341f719b7112b8","bdb33473bae451c2e2c37fba86db8c66f58940cceb7d77282bb4d6d576c1fd66","08f36a620f7e6ac5dd270b6041897251b9fe26c751e38a40197ec180d0c1ee38","88f3b948bbcb98d264000c472739cd2884b3933df2d0d6490754c5954a60e2ae","2ec6446a6894cc2f4315be006d30cbf2c021a5e794f0fdc7eae9dae29c74f273","d1ed42459bfb5d37010085078a1e503a71d4be86bdefdd6c02cb8aabf6817048","21af7c27c1c46dca5fa00657ffc78595ef5271880615b2701c6a5919de024717","3535825ea2c6b8516e71f95e9858439af5720da4cd0c6696f0a2ef4cb5714092","d126874f810eb1c51838fa9fb17e901f6585d6ebc792c2c90430fdd62e551c3b","92dc205e4aa0fc1885d50120ca1ca6d484aa433fa7e4e33e903a12548dc38060","faf75fd6bb73a751917db6b8d00819eae7e29d2bb6f9270942a28e0da8dab05b","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"theme:dashlane/quality/en","quote":"I was usually able to find or reactivate that old account.","rating":3,"review_date":"2026-09-01","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.