Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I really like Bitwarden, but the iOS app has been having issues with self-hosted servers.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
26af182e633dedaf5343ae877ce97cc64720650af4d1532003a85180ea01bcd5
Signature (Ed25519, base64)
Twof8bnPvLoMpp4VaweLCjB8leLQMJCoWR/wpUzrRZ9PEy/naAK9/8KXOIBelu/aaAzWlqOx+hafMQ3bWjIYDw==
Merkle root
c1d49fab62e94ee1796f3eb15e1a21f856756e9a68ad117a17ae6c9694ffe1e9
Merkle path
["26a7bde1eed8cae10d855a300cb364cad536236a4fd9dff06b45586abe47a222","ae6a0758040a1cf6a99aa0b345aec5b9eb3b51bfb8f2e5a695e3e8deb34ef4bb","346dfa97ab88620a85cca172bd3c9fbd354e6ce7e5b958ec17b38f874de8a746","31d0d932da97fbe5e696dfd00f63384aa501a0d1ede26fff9e658b8ebcff5d3f","a66f62e7dd526825ec2912b081f1f3530cc26210c6aa5220207717ed4202965e","236c6d7103937e3e8bfb322157f643297ea1a9af1af9f9b9e6bfe185d49fec4a","0a89278c53c54bda8d2dc4d69e2d0bdfc022643d54d3b1fbf303190fd352dd8f","acbeb5acc73c5fc67c5ab3408278ca9f25ed561b00e648c59085041fdb5e0475","2ab80292da3ce5bc9c4fb9dcb2588f4ff1dd914f54de838f634a594c4751077f","3e56fbcb8a8a4a49592f462055d9676d8061d2200a525396a3ad1e545134af69","d548028ef9025b3c22d524c1f1d85be654856c3ed276e6e4b719f445ffebfe9d","219bd599cfb89fbe7096defae6a66c994562ac0a422a5db43368bd9cf9789683","856d9a6a3e94d695a98fa0bb5ce8d80e9fc70a3794652b53ea754ef3c0720b7a","436050ea3288f64644ca44d910bc166b737265d33885dda72495c78f7429279a"]
Anchored
2026-10-15
Public log entry
search.sigstore.dev, log index 3258717636 · entry 108e9186e8c5677abf47…
Expected log hash
30640a6c2a3bbbd5aa6e5244e634da7339a6d42d7209b3c3a5dde0fcd662474c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792034121129","kind":"published-quote","locale":"en","page":"brand:bitwarden","quote":"I really like Bitwarden, but the iOS app has been having issues with self-hosted servers.","rating":3,"review_date":"2026-10-13","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id1137397744?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c1d49fab62e9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.