Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A bit too focused on mobile and tablet.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ff9ada94218f7cad2b1594d19feea272f67fe0a5a57b87ff685401d9e445a90d
Signature (Ed25519, base64)
bAdxZlf9FuXcs2h6XPmYWgm4x0vyGP7+q/wnuiAnM2F9vE05U5BFd3WIHHSdqtXGdy0k+XtjlJiuWv/pvFMMBw==
Merkle root
4dc0bd79ba3e9442f7f1feb21f347e2f6fdbc72e99098aa5164776a6202654a8
Merkle path
["ff9be08302ca90daf2a920f718725b23d0905af2ae65b07df5190567df7bb2b2","0bc2295c978d65a51cd1353c9c98ba029b69d3248685e896986e0c9ce4e3ddd6","97db27df5ff47ff0ac94d3ace9053be83224a5b68a3d0c79da1d34a13e2b8294","f5c4f59b645c28d8baa1105a52a9c8f199f1b278b0d410eef9cbde3ed09e63a9","5ed14fab393fe682a3d24f987b5bd3aecb943ebdb1e6bdfbcfa633e052dcf34d","1519cce2452610e21f31e2c9217e7660a6701b553ab8ad58c3a369ce1e15e08b","c2759c3f3f23fa22185901572ba460d728db3dd940245d29dc27ea1cad489cf2","c683d0eb78952b3f018ffe2643455fcff37341bc29e8922ef6ae94fa3bf00871","6cfe24205163e82713745872bf57a9dc0581e84dbaa8b90e202a874aef1f278f","66f93059eee3676095d6925b7cc2fe3b97c348e816a4d3ce47c4b00902d3a227"]
Anchored
2026-09-10
Public log entry
search.sigstore.dev, log index 2776103867 · entry 108e9186e8c5677acd4f…
Expected log hash
2498329b7eaf275d309293dfbac35d05dfb8a55c65956add8448561c05945f28 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788848066028","kind":"published-quote","locale":"en","page":"theme:dashlane/fit/en","quote":"A bit too focused on mobile and tablet.","rating":4,"review_date":"2026-06-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.dashlane","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4dc0bd79ba3e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.