Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The only feature that would make this a 5/5”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8a62275a91b8de3bdf96acdd580c89040a538936a126b50d541e1668a1bbf4a6
Signature (Ed25519, base64)
B2oaNWpUG201TZM1l8QPHtQhKzvOChsqvrBzSTsxuTXLLMYz1OcxpZQ5se9FptP3vXlWryr4mvzL6Up7OJ+8DA==
Merkle root
e299bf38720a5a91bdf63bbc0205245bccdf3432ab1652c69342549658b7a9ef
Merkle path
["8a64b07b631e166fe97059b27690b485f5aa92d0d7f8e45bfab200a56fec0464","b3ebeab97bd76ec509c665ab91dac3c9825f74475390dddb69a4075d6e34f6c6","50addd33215ec3bbbfc8ba0d06d17c4bb35a83135fb665a3350b86c6a846c651","303510ef5edc3cc50876c7ec8f3d2147fc707769d8bfc73483bdf52af30a5f50","a1675bc4b414dbe04e68ebc4a37805ba4ab82037c0bf82a05dda88c6de6ab9e5","a021b82bb21961f39521b5b544c177ef14200a471d876546d2592079340286f5","37655510ea2befb0a022c747e19ff8e97b0bd37ddc8d039a78a1d02e3c21c315","26fb3d0784ce90f3c722b0162eeb0675bd23019e4c8678d8a7569d2bda9ed8eb","541961acc4e5a85aba8c6adbbff50f3e1842963105842b7c2149c2e5ae826afe","0cf5bec4f5b90c40db010d72dfd5ad44323a66756aab3841164db423d8995b55","3ffdc1ad653f39c0429787d5c91bba35366ff0cac1e131f271cc3308cb191be9","9c56efa7498f22733bd81d9e1a9aa96f7fa30f782f3e2c5dc658ff683f136fda","3fdd31064998e61048d534909957bf68a4f9bbe35571f6d185756d8acc2a5420","aa4bbeb87247c2797626ab02a549451da6dfce4dcb854a36fdcc601e3e788772","bce5d442c07de6307e5ea8947098e74ce88c2246eda5e5fc1015a6d7519228a8"]
Anchored
2026-09-21
Public log entry
search.sigstore.dev, log index 2904877428 · entry 108e9186e8c5677ab408…
Expected log hash
d020708737f55ccdf49203f373fcbcefe8158cc388605556fbfda3c365de7360 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789881486272","kind":"published-quote","locale":"en","page":"theme:bitwarden/quality/en","quote":"The only feature that would make this a 5/5","rating":4,"review_date":"2026-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.x8bit.bitwarden","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e299bf38720a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.