Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“easy to use and understand”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3101352376

Proof data

Record hash (SHA-256)

687377b0e1b686ff151b9236ed58c439ad1c43f540ebf8933f97df0c0d262275

Signature (Ed25519, base64)

cYOTu+I8gVl4/3hlLgG0QTnoHspMpL9Wt24wUetbPZhkScmskXW3suQgSQe3oEwCB9tDgz97C0uYuHZtxB5UDA==

Merkle root

3b3dd30c58213ddb8f8368232793fe0b07c54689d13df1c0c41d21cb861abb8a

Merkle path

["686892c1c9533ed49061b1aeb8c035c0cedd847ce45fcd47bda56cbff9e44925","3e154464672ed2e516ad07a393265ac54c6caa144d223550ef76992b5d27b505","41d977063730498cfe0399a819be55cf8a614b62efa1302a3efb32b42f8f17c9","2ad9f4d702ef060ca0f67dbe84631f8cf09a0edb5db81942d061e5e8fdbcd57d","b1bf1565fe7ba2ff3fb95b1e3ba56d358bb01014bc05840f747999fc14cd1ee7","ad232000ccfc6e7ec7d0d974bf6d04c3481573a703617f40d2a1bde32b2a37e6","045c62a9b4e885bc40ab50e9440fb22135d5f8da2e1290eb8e1fd74db5b8ae3c","1358e7c039b42e89f8bc343d8c36787b97dd53647c5f7bbcbbc005452909b24c","72965f0a41f27dc2a0cd6f96760b6d065115a1fdbe0dd0a4d427948f3282ba11","20debc81f59517981d3e441250eeda338509ce1f6fa0d24b6b02d4923df49858","814fec29adf773a39c76050040728d4260277eb302220fc8d1b2630dd17d085a","ae0790434ce97f7dca269d8ab8f549cd06a2b10eadf8328ce2f130155482a482","dec4d3d0259cfe5ca348457c121ef62448086345a3e462fe45c7fda1a11461db","1ad3cc3e0b5bc4406fe1fb32457a370ab86c3c0c24739ac86495532e543872bc","90aac0c0379b3865ec4b002eb3695dc461bd0aa66de2ac6c660b6e443865b70a"]

Anchored

2026-10-06

Public log entry

search.sigstore.dev, log index 3101352376 · entry 108e9186e8c5677ae91e…

Expected log hash

0a3f75a20ca5e11e6fd9d7b6a5afa175a84aab197fa1914018652863a1a64cee The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791258637050","kind":"published-quote","locale":"en","page":"theme:roboform/ordering/en","quote":"easy to use and understand","rating":5,"review_date":"2026-04-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.siber.roboform","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b3dd30c5821…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.