Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It’s been great so far to use for over 2 years now”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4cadce17f1ff4a70cd3bacf06e6ba3fc46106f7ecead5550e0dfbbd9b114c5e4
Signature (Ed25519, base64)
YqEO/JE/+1zN3iuNECDThvYOc6oIzp26T6EM/IT48e/zHAfcmpYO9TIv2jZxnXntu/Wx7cJ5k3bLvUMSPaH2Cg==
Merkle root
784ff8fc3c42eac43c7d399f0d67bba55d28073a7e106789ae0c6c3f5ac9dcc8
Merkle path
["4cad04faa8d98126f9375216943d6f6f2bf2888562baa9960fa52c62f40122fd","3c5db54f043c4fad76b6765b4a206141a30a2a82232254363c61e3d0c03de2a5","6e242cb74c817fa46a4968362c2d5c94a73513a0cd5a7576526bae41b3e55de6","94b04a4234e8d76ed44c4d979c92a9884740438aede0ff08a9ca5235cd33b41e","8691a1f633048c6edc013c89f8c93358ee53cdd216729b4ef443a81afd89f0f6","ecfb8f64d7c428af1844e6a755f7f85c0c29f3cceb2cc12cdd4c64562b108ece","2a6cc750fcba7eba8e1f480b2af39c02a0eaf93d9dd75056421100cb3c09ba29","225aa55aaed726513cbcc64541f2debf739ac4823d66d36559ee9733f5767ea2","418e9ed83a497675413a0c0273b63b988a3f31d471dc5b2dcde9f63a7f2ed83c","4375b7d9621f5dc613f66ca81920bd1fea762e858e3b08eadc2007f2f313ba5d","0f6141035fc654373fa68607e905d183a1565d2fd8d74535155178f8ac9b5a19","df4080343f159e809d1e5bc9f8a14b1ad519cf12a20097b0d95cee98c4ce6d74","2c4a19f22e337f5c4b12692deb8a5f8a7c64abf566c3dce060b63f26f421c3f4","7c65cdc9460755a327943aea2ce97e2f5c6080d778d9434fe2dafbfbc1e3b04c","5fa09e3847513934bffaf71960ac2a100e20422698698ab1e19a4fe8ac133514"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3163352270 · entry 108e9186e8c5677ad020…
Expected log hash
a3ae0badac804d14d314abd0e71726d06a96c43a3840dc1d63acded9268c461e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791543790412","kind":"published-quote","locale":"en","page":"theme:bitwarden/durability/en","quote":"It’s been great so far to use for over 2 years now","rating":5,"review_date":"2026-08-01","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1137397744?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (784ff8fc3c42…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.