Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“easy to share with family users”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7b891c5afe9c297d485c03f4257149ffe439c0969704bda418df3f0ef4a543ca
Signature (Ed25519, base64)
VGT+BtopAJ6ewOkDWFjrbKP6fo86pTmLB8NheQId4a5rEpacIXnjxoprV5Fau/5VOLDaqKUIgj3sA5FDPxIPBA==
Merkle root
d312d00ed6ab2beb6e18f20d8087ad3474eb8b04b26d5ad949e9237bf3ca4c52
Merkle path
["7b87500aff06fbaee5a082f731179813c7b75b09a79ce15e98ae566482e05112","ea7b1f96f92ce1684fbf9b10c5f80f0358b0b108609a9853547c78e3662a77de","f42d28134a2570b892cf14648bf55a6807c9b560e0b9b06a371c8fff372e8e15","e313b37f55fd6f1f9fed3b70cf3fe9e3a03b7104d42ed5c7c9da261210c639e9","e06b198f756aa83d94f220bb4adbcb1fbf5edf0d0a1605adeadd9dbad4f0bbdf","1f08ca78a06dc6aabb74f5b332d4bd48f3b53aae0f2b79b7c27eacd76c6e7fb3","422778ee663e537cb9230120693fff9bb9abe2e1b943f21a2a77c0cc557d8c4d","8ea40507f5e00b5a54686aa4cc01d6e64110072ea18167199caf9e8f3e95ec00","1ed22973e7ae2457e2c459c490264acb15a902ebf21cb033eb1e9f04f89c6052","8f775735de115c2c94d4229a736b14f50208a603a3ba5d4665f65f161b586eae","fc8b4dc8aff69ab3b596510e9904f5d2516e591919da30b18a1b5e2293421672","4f15841fed21f7e6cad6521c7e5f95f2956b9074923fe242e4c4cee090aa16ba","2677d1cff114508638aaf8e9c4730006ee8b778ccb52fd7ae32f6136ea74705c","1b52c506e73c97f5d2cc9d574137c52cb370bf5407bebe9b32056b133838b1ec","2fe1a36eecbe6e65e0243c1a81f5f430e558c99de7c492361bda367e122fe03b"]
Anchored
2026-09-29
Public log entry
search.sigstore.dev, log index 2991846025 · entry 108e9186e8c5677a5f08…
Expected log hash
321e41cd200068478c5cf6f353f00dbd75153d3d8a640e241b1a6e8e4f8ac2ea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790574513694","kind":"published-quote","locale":"en","page":"product:bitwarden/family/en","quote":"easy to share with family users","rating":5,"review_date":"2026-04-24","source":"Apple App Store","source_url":"https://apps.apple.com/be/app/id1137397744?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d312d00ed6ab…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.