Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“hence I end up hitting the forget password button”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4b04f1f81bb0cb8806cf15c456dbfba20b456ad20784c439a19dc4b63ef04a36
Signature (Ed25519, base64)
GrCUPureaUyoxNc5MhjcE1lp5uL0qDrgQyGKoCDFEyGSyV+F8TX88nEq2lU+T6Jf9ipxYF8K9WEekYzgPBtCAA==
Merkle root
3ac2a65164a98b25d6607e9cd20ce9559bf4391886ca2eae943b9792fcb8a323
Merkle path
["4afcda5becb3c9e7d0c17e4f814d77c02f6a226dbda9760d9a125675cc17a219","c9d92f67dda859eaf83289ae37318ef5e0b42985ecb81778fd907a4713b781a2","01bfb4583a96f5b72b8bd5d5318600c59071eccc468be204ff3c6dd1a72cf3d4","00caf140477ddb57db20936f8746621b5a28119e2dcadca8b0210154c860b510","69860a9a82ac28754e60a7cce473c4dc0452cd441e97d437f88bf3117ecd8a1c","7c28318aebef0114fc3ad92b4635f0b6c7d53c81d636ff6196b65f3130b2a048","112a96a930d2b7f1f4dcc072a3b71852c0b62c7e9e701650f72d72fce12420a6","fafa3759dd41fc5179b167cebe367d17abf64f99a8de0c18c43780c908b9d61d","3e21d2fcadc1e0e70c90e50761caef5ef760790b09620971ed351521eef8f521","6f2e517ec4de38e321ff85b312d387c30968df40aad7ac7797ac9aa5aa3b5d5a","1cc25e7befe3a2b7b7b87954175b087e8da55a844cf0f9cdf2eea3052c739c23","6375738768a0a8eabf0341ab075c89a22c376233f7c7eee524850fe1596f883c","5f5095da0215f1901a3184808897a3046d0516221076a1744460c18534137d85","95a4564f2e81974ca76356c63108d24ec353ede03c377af99a07ba4afd726c1a","b933f107006d8bf043be83ef3bd88a04368b06893809d6915935ad1f675c78b6"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3083528439 · entry 108e9186e8c5677ac4c0…
Expected log hash
8816bf48c9e6a0b1ef2758b04fc7021824819cb4cee30b879cd603a10d38b8a0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791181418024","kind":"published-quote","locale":"en","page":"theme:bitwarden/returns/en","quote":"hence I end up hitting the forget password button","rating":2,"review_date":"2026-03-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.x8bit.bitwarden","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3ac2a65164a9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.