Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Updates are Precise & Accurate.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3668087860

Proof data

Record hash (SHA-256)

2163ad313ca06effbf61701593b3caa0969503951b4db5604f7d11b6b0a6e4c1

Signature (Ed25519, base64)

uXikiXCJUy2Ql2aKRb383FSdwHpd0ug253otzMsgA/f5+Ywih338Xn9ipeNw+XECCtuNvmQ7EaqO/FgC9COgCw==

Merkle root

1047936f87a157b28c078afc7a20c2628bbc08f0196f675d74b106da179f0837

Merkle path

["2163392284b0fd15c6557e868bb60e8dba4f18675393e95d3a5cb6b917bc8f4b","a73bc07db702997ae7500593d2b0c82a029507fa789e8e2dce3da007baf89c7e","779408c46e6e77b6adbfad04a71996db6161a9f3622187cc15bb6581e81e96be","51c08cea9439e4bd4cdb761a60362c0cec3cffedf54ba99c5640fd0a5fc5a958","1fcd893242b71a043cb8e6fcf9a7ed7a70ad84617cfcf187aa998fbd3dc6c7e4","e6b084271a7ad3875dcf2387084b9d365058ed4532af849028fe26e8208675e3","2ee49977f18df48e88d3f38742e4dd48491bfbf5060e6abf813060d0ea57e869","b19556d1fefe24cd20781a2a67ff8da1d26b9caafbc30e47afa9ad452c71ffc8","6a2f2bbfebed29f4e6402c5db4bfc69e1538c513d4e2e6694c5d496ec933bdf9","7b9b45c4d8838e69f760b1daac1f07eb51b240a007f07b4ebe96adaf0de5d183","8a62d67b1eac3a93a3f8a9acb42dd8c8052a730015b4535c97ce76cb176e6956","914ef6f739bd41530e41057618e80b0e08808ba78cdd769f11515bb20e10b1b3","f0c9f05f81092a04253915106712474a19d91611bbbc8087119ec734570aca0d"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3668087860 · entry 108e9186e8c5677a9a52…

Expected log hash

8136c8219f7f6eb1e1368a1be1e1dded601bc632f0bfe79c4ca1bc6cf8be67a1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793705308993","kind":"published-quote","locale":"en","page":"brand:roboform","quote":"Updates are Precise & Accurate.","rating":5,"review_date":"2026-08-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.siber.roboform","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1047936f87a1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.