Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Vaults are suddenly empty!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5d1d6c22e6e5ed113f8d18316c256b6593c9bd9cb8165c4418a8b60ecd378e83
Signature (Ed25519, base64)
aDbGiL/qFH5I0siEnNr2k/NKsoYeKhGHck4WHV1pn7GSHTohdFIeGcHglfzN/u1hAMGRr3MC9LH1MS0fL+MLBw==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["5d1d50db7f4ff0cead160982f328056999cc1261c4833b44ce6e6b758bbb540a","b289d954bc3b543fa7a2ce912cdc8051f83b1f8a4cff95c25e929082b7db79b2","1a429db912da92feb43ab14ed5dc9952d048d9ba3e4dc26620cde9dbf1fcf534","98bfb7d4dd9998762c03c444d93e5210652447a589ce55fad2c20aed4d6bc87c","1f4fd985448c0dd7829452a6f4175043bc59032fc1774695d4307f0285c54a93","a7b99653670aa295457d50bb16bc7cfb88c1f56522814818f649fcd60ec9459e","a6d2b3d9b20b51e58af12cb3c94ab5d4e495e33e5ad4cfbec3696e29df199e47","03d466fd78b1c869fd096781ce01ee573e66f5fe749ec0b987f46dd985baa553","97971cb5d80ae537ca9772ff63581862a0db523f49577b15d49fc19a9ad18eaf","15ecc80b5730b6a835a33d3999797c53a3adc70a1040db5e2e4292ff8e4a5024","3fafe90a1e6bb1578161c7c3b3d872c726b9e3e675bca334294a9f4f456cb2db","5365c2b27d59de41f7a39ccc36f0c9d2af5742528efb0b71cfd75231d3b7864a","8455d91e0d89d90a64ff5b7b26c228f01990ce53c1dcfadc629ce9d6ce5ae519","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:bitwarden/durability/en","quote":"Vaults are suddenly empty!","rating":2,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.x8bit.bitwarden","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.