Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Biometric login fails”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
87a33ccc6a94b4e03898a972acb752cb55bf662477c6e8ed832d2f8ddb6c93d4
Signature (Ed25519, base64)
n7N2yg2rbXDxYZABdwPC1xstUhELuew/4fiNt1R3iZQwhJppco7fTsXwuAkczAG/b1e8KBc6QWpT+97QHd/9Bw==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["879bc266d721b7680c6f2e48c2b0d3f8b9de7d1ca7cd9f257ceded0aba59a4d0","8b5543f658f25754bda9c65fb7bf7a6192d84f360cd858b3e321f4d5120e281f","6bd0f76bdb4acfc78b81a5408713d25903d7b1d8cbb558d0a88af7110c90aa3b","0730f3f2e8ede80c37ab9e01e7fb8285d09e11bf26bc9e6e20752d3c704fbbeb","dcb46fb68867556061dfd53b99c1c1dffbe14e4a03563adf371507206dfab023","578c042cd04825b8cd3e15e94787cfed16b6f754a939975ccb6f09f49d5427ac","037420fccbe23aa26db3007ca3b75fff9ffe64ef985f8fced9fcf86493488a97","cb891bf716aa1f96612df546bdec2b5825abbf682478ffb2107e8a57af44b9cb","a5f27fad689ea64a320284f673b51969850e45d4a6e40ed90d3159f1a083cbc1","4747f8350612f2bba1d141220aa5c346522052bccdda1ba284069785ccc992b0","4be1d5f0c95cb10e96a85e96c9d00f29cd34e9298ecba9a3752f4f04cb4d2de6","d098ede59e492d69a5edc22e4ea0a324ae8e5a1382fbb4f78d7fbe20dd21f96d","3a4557370606b510c9a2cb3a2ca3671efcf47160eb4264ac3eb8a4e9a9f5afbb","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:roboform/quality/en","quote":"Biometric login fails","rating":2,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.siber.roboform","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.