Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“This application is just as good as its competitors”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5a9623dbbdc2e9c14ce63626f9d5b8d0eec4465339df60eeedaf050f098e1050
Signature (Ed25519, base64)
CIL+nQAimMyhrruj5qKKZkcVH1M2ZTF9ojHtjDj/KcxiQuDt7LfWB9PJM25LSU6NT2hW4syCZX0imixUEXNmCg==
Merkle root
61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path
["5a95efb2200f6c9d7d808a5cb9d9d1e413deddb59fc0226d82487472219ba2dc","e4778e9a5c5d8f4d4f2cee7143c969b3c052dcc81a44d107f737372a0f3c0153","201175865f20be5a34cfe25c6ce2a5141750cd2ce8402c79ad5bcaa582f51e77","3c7606397e6ba857401ca04e36f5465d1f68db3f77b4e1093e7472170ba0f1e0","f3a5b790247b27c01671431f38150fc8ece6eb04976d05b0772cf6dcb4c430c3","92c4b0b9633b3f87b08d76e75b8d66006735d258ad4c91ca462d2b7b0f4788be","4f691305911ce20d0a4afd85616185d63da0b4d6112d1e3efe95ece40a52b7f1","c18a8e65eeea4c74870ab6cb20eff6c21cc350de92d9d560cef729fe50fcaa11","196faaf9900d6b0c00e95a4e94e66c7721a1721ebef1a607ed885db79b652f88","f9e3a92e84d9f77fc16641407f1f44ef0aa4ca794e68112a7d6bfa0af5948a5c","63dbb9075362a6ca4fca4be1643d7b4d2ca85712beb2c771434c7e07c3fe3510","2dd7436b52ad095029060b52ae9fec82ac525b3414921c225849ee17eb82e133","f4ce7da97c251bc798d3dd7f50e69529d587fea515781ff7f75120076a0decef","8623ef0c7509529f19128084f674283d15fc3b4b9165c3273da961b1c9f411fa","d35a1781f2fb2fc9cd66aa22e2ed6cd805ebe75af0ac2c167c3e4444a0a6f362"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash
0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791253605372","kind":"published-quote","locale":"en","page":"product:bitwarden/individual/en","quote":"This application is just as good as its competitors","rating":5,"review_date":"2026-08-13","source":"Apple App Store","source_url":"https://apps.apple.com/pl/app/id1137397744?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.