Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“And have unique passwords.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
91edbc662c78688884e49f578039cd4ab090b52170b5f0e8fe0b98ac2b3eafc3
Signature (Ed25519, base64)
FNO0SV4aCFhQelSsqB4k2JjHQZE7+iHvuh7RW7HvVQJW4oD9OOk7OPVEFQYOjwM88wukMwO0I2eEY0axoPRTAQ==
Merkle root
a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c
Merkle path
["91ea73f4ec539f30460ccb75c349f7b53f67ffa6b4185137c9e2a09f33ce6283","95da304ed880d761162f1d9c738d01668bc8567f8b226dff467ca9c5d5a57d05","7241ddbc269a86c63c4d87181ebf998e6c55583c6f10951ae289d1d22ae16b1e","c9fcc12073a356ed5be30f88a911223857d40dbf2d81c5763c679f04e46c9447","cb17c9cbd6e66771ffb1c635f32bae323e46d4368f799bca80df2e83861e1c17","1162063a73fa72cc2cf5c7bdbe304e979b7bb0819fe63cc58b937163576ca121","a7244eb983981c9f03fa93e9e36b8468883582d7e82b9b95b5b07a066b97c3d3","fd02976f1eeeb45a7181e54e047cd9671448168ccb9e9a2209305a36e2ecd377","82601a9b26fca3e852a2346848fdca940be7a9e0eab51795a519912b4f099e22","64380d159908d7e5d6a4f2660e198577fb7f6cc041867ecec19d1a00c61c2361","4792b68a1efd37c2efe0d2ffc63092078c0aad9738a91c23701d505683d089a3","650569b6d36872ec607d21e90b70105894b45e1eba915a8d7588d829e1115e8c","d116928dd89f0a9ea13414b0fe2d577ce3dd16007ed8754e9f46163a67e25fa0","c2523440f419decfbfbb1761ac468558734f6da135e5a329b4c6dba0ae899966","5153df72155ae00831ba1e4416296382c39280ea82c989972042c066f445006a"]
Anchored
2026-09-18
Public log entry
search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…
Expected log hash
5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789619628558","kind":"published-quote","locale":"en","page":"theme:dashlane/ordering/en","quote":"And have unique passwords.","rating":5,"review_date":"2026-08-28","source":"Apple App Store","source_url":"https://apps.apple.com/nz/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.