Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“works on all of my devices”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4d9e1747aaaf3baae25d7309b8764f79e5776b8464e8c823dea298d80eadf176
Signature (Ed25519, base64)
jOxD4JynHqB7KwTNCjMXBv/YE7bBMWIQuSV9CPRlG7i609sHwCxxOyLAG1qmKyl0wyvdx+sK2sN/WtbfViUVDA==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["4d9d873c1117eb87d1e4a02858ec7d5ce4517b3619c66572362c42d5fce5b6b3","e7e90c43187b706784188b9b9722ccd4ac8c87b937ba873e1dcbd2875749ba53","56ff3783b04af0b43585d833866b94914d4eae19c4fbf5caf3e92fecedf00086","dde46598f4bc663975b2a49cd648617ed1b2dea99802143f603226714be6ffd9","fa93ea947c5d6e967b0d57a52e4db1b39c8c8b1be6713066a7d1409035b849ef","770cba9c3e47b4667919ea18b39a26ba3d8850bc4a92a4904c03ba6f3447128a","fbfbcd62cd15cb469d7ab1de948c62a2d9d945312cecdafa400fba1fb80497bf","31e8458e4d483be59ce9d356d64ecbd68f51b4205084c6b39af3f5d05bed8b20","a4dd0688bb7f653381239bdddcb4791727ebac6d714ed21a7d218ada3c5391fe","a1ebaac406416aad79781aba9f765882f757ea38c550e5ebaaccaf82d53609b4","5863c6abbf1bc56d61ade938e1d93c20025c09b6bbe5fc2e00df3bf236837f02","63eeb02103527ff931423915fd3ddf054d75db963f694a8be8357b62ce68484d","06d796a3b8e297c2eec8a6da440c9f9c6b9ce7c872dda1a86e5b18b3fde38aa0","faf75fd6bb73a751917db6b8d00819eae7e29d2bb6f9270942a28e0da8dab05b","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"theme:roboform/delivery/en","quote":"works on all of my devices","rating":3,"review_date":"2026-02-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.siber.roboform","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.