Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Button to close review request broken”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8b02172088a4a38321bc2e40497d91795973e9eab7f266750831c6b3dc57980b
Signature (Ed25519, base64)
xh5JcSqJ8oGN80V5ogNSY1Pm3BGAByeHgvkX+IKGTt1cu/3pRfzf3s5BLo7c1L+XGbz2B+ZVuo01s6x2OFHQDg==
Merkle root
f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7
Merkle path
["8afe715279839aec77e5a220049998062d965f9ac687d456f8c93dfda5fa419d","94bbbb3b69d759e7cc30a27a541fae641a0d03940e36126f45fcc31200f0e9ce","8a4aa9510612c4dd031507e690816919cdeaef00a45d16895dc9e849fe30fef4","8834dd3bf86b927b2204c1406f10cfe8de0bf149f5cea4078e4200c834b7e65c","b9f0e442fdb74ff2421dc3c9c2342ca477ff9f35ef96982d85edfa2d5aec5a45","f63c56342a5e9181326cb40f77e364d8c8a943e475602136d1e858e296c794b0","40181ec6e9ae31784da6c7ce4bed71bf0917db6ec4a890da316729f476ccfd39","1df6f0b95493782be97a6daf5ede7602a8e8994f5431343f2c86a4829de6511f","20214f27d98c10fb118c7aa8322b1187f957b46a8caa40a534a291028432d559","814eda5d480a18d692e06fd209b99451e98cb3190435fb268a7a84d10855bceb","6e61c9f56451a8e8eb1276d1ea489621e0a6bea5521aadb44a80db54e76827fa","75575ce94a8103fc4cb4c831d0dca6ec42fc70a6f37ef2062e3955985d558d0d","d970959e5b05d4a70372f5ae2d1d980b73e422178cdc592279299d85f726fd61","313187cc6b6f4604419538cba862872ebf0808d9a29a91fe1debaeea14203481","db68423323e09aea2b604cfadc31f46b31b4c7c4a02b09b3fe1987d87269ad9b"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…
Expected log hash
083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791172602574","kind":"published-quote","locale":"en","page":"theme:dashlane/ordering/en","quote":"Button to close review request broken","rating":3,"review_date":"2026-08-17","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.