Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Otherwise great app”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
49fc093421c371bddd42c69e9150295775b2997eef32a6f37ac6418a41de917c
Signature (Ed25519, base64)
4w1M6ADVXh+Ni+HXA9nyplBrlzpCZfNImKkE8JyL/1pV31e6PbGHCu3kgHMlBXRzfs43XxZKGG2SyfG6Ts49Cg==
Merkle root
1b0b408c7cf60721bf3cca50f4b7f268b0858a42fba11906e486c6694252cb22
Merkle path
["4a0d6e24a09086320205151da5b5363b423ba7694996ef486460d3b69957e519","97e8e7e3849be017d746d3947792a9cc4d6126bee3c2c6ed086ddfb62588c018","55468c02bc23b89d3a68d6469ae02f33c3d3ccf2e21ae5a6be5f20e96ac49dad","2d81212bb459a90d792ee3a46b7e88dc647f598a1c584c206c875833068bfb10","924a82d69eca061893d848afd24d5aba54e4908a1a307385f6c75fb6b07d6402","e20fbd14cd466b64d77c5ee7fd8411e02473e16fda2bae446ce0126c64a28ffc","d46c5bcb994013c3de6cf2e3b2c37eabd32c80efc9f7565440acfbbb11d55e56","04c98affd33cb45f95dd300226513c7ca6c80ecdbb213a65da3ce879d430b92d","9a411c9b0ce28b516cbea40dc698d33e9b53b322880b294d51e9f5ec26adb463","c29ebf7cd77050ea1ec26b3571d03df5ce670b85430cd288a957493f195de050","e17d8e9ff94efe92b55c6dd5f917ff12be0cdde94f4a34cd1badcff751846bb5","cf447dfb6dce6b5d81ae8302a2a58a74ffebf3f56c78349476d09cc10653e60d","a35aaf4615d6d52528c83ebb3bc75a27f09df1b160bd5ce58f5b6dfb09d28482","8547750c311d384cbb1a945300d6b6fb4f4bd2b78af7177366b3baa4b4c1e724"]
Anchored
2026-10-12
Public log entry
search.sigstore.dev, log index 3220996539 · entry 108e9186e8c5677add5d…
Expected log hash
00694de1434e648cba57bf07fb439ed90ba501083441667555bcf619bf5edce8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791779426071","kind":"published-quote","locale":"en","page":"theme:bitwarden/returns/en","quote":"Otherwise great app","rating":3,"review_date":"2025-04-04","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1137397744?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b0b408c7cf6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.