Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the first two sign-up authentication emails finally turned up over 5 minutes later”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6e57523a76a39d528c2403f0a07452777b352d2d1391cb918f567056191cdeab
Signature (Ed25519, base64)
LsfCrLBBpeX/jsJu8fwZtMS1Drd7iG2jp/FdnycHq8KPceyEPf9FA6r6skAauP3nj6GRFuOPgMCv5Zf6H7IMDw==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["6e4fbdcfd456674e84c8053ae4faa535a8f3c02a3400094d1c9e70172795bf2b","509faea29dd8f0d59ec755ea7b1aa75b31fb016d845115943cb24ad989ea6752","5e85bc560a53ded517e4ec6840d72cd57e4a0e978e27eede239178726fa6c775","3269bc5d27590e562bd224f362de75719ff56961b06ac1a36899750a678bfbae","5774bbf1dc3b520ea3fe94d1ef579c4160ae2858e6ff698f1f76204d74e8f231","6370dcc17bb934e5ba29e0e89a50aeded370e8a43ea8096f3ed84675a8b8feeb","336758b198bc96c8c0d5b0e5349ca85c7a8e524356360781fd4dab3e2985053b","b7f5d883e07a293be89627f1836c4b414f75afe86bfd36521577f03e2fa80113","595ed4b690e57edc602a8b380ac4582736f71ecf55c782ae6318e5b7db00d6b0","66664e4c2cfb807395a38b101ac062377c6042d710f4ca987e92ffd8f81e420a","33184179e6410e1d4481a0c98464cf68c91e8de800a9099f0062b37c736d20d3","d6fdaa57e40c81a651fe32e650dbfc00fecab21e8ba71bc260c30dcaf2f68ca4","3a4557370606b510c9a2cb3a2ca3671efcf47160eb4264ac3eb8a4e9a9f5afbb","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:bitwarden/communication/en","quote":"the first two sign-up authentication emails finally turned up over 5 minutes later","rating":1,"review_date":"2026-09-01","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id1137397744?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.