Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sync to cloud + home hosting = best family plan option for the homelab/tech/security minded enthusiast.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8bc922c584e5a92c83657f786c1e4016c1608b0cc64e8dab98ddb3bce0bf54c7
Signature (Ed25519, base64)
KBVu9dGHkXi0paogOaIOGuXyD+F5/M7JJu9+2BBSoLA/UrsErP7ZNNvneQeYPj9tlEjZHpZiqNHzCTOhl0QxCg==
Merkle root
c5671f9a997da9b293a79ebe58b20e4534ae608121169f15a5adc358d42ed147
Merkle path
["8bce7814eeaa5842a64b9a3a9eb003ba3e904039ed4240fddcba9fa553212751","c275ccefbeeb002b7c3f7576e6ac69f7a957a53c0ef0cb626d7b0be0d27665ac","60fa2b75107ee581e371a5320888ce0f83f6839e936e55cabf6a9b796fc33d41","deb919c217e0a335d03b7063e37d1309b6c85c2854daa56bf793f0e5e79c2a8b","732eb2875787c37845eb02d7834cf2a0c779817c632682ded6bc5e93a806c79e","89cbe4ccce6e9e2459720a8dc1ced7583eb3179acb39dceec4ca01e016d14566","ad8aa715541f5c9644a214788bbc6e57bb0ba1d4748439cfab3aa581058f2514","ca164b34ef1b6c01a4f22cb761fdc11cd9f10e3d904e58579763f90009804af1","906e4ff324be8ed013935e622f62c9105fe692d2a73e6d6c0b8fab0baa54c16a","ce1f235db4ae1d4787603acc04ccdd14b6f2a6fb598e680d7f7a7e0e8ac1b752","eabbbe209187d45e59a30e17d1323b5f642f6d5868a3fdbc5f3b2c59d725c73c","2ac52bfd7019efc5590b5cfeb80fdf634434e8839267865b515b47069d2c6ef0","d2482c8c27b9666d395774cc0539a6ae5a22798c7dcc665c13e5aa68bbcb3778","8621becbd314bf961e51e6037fd253dfa12e66cb7b2d1c68d51addc52321e8a9","b178a1b83338c84f1a44bf8fe330ca4b62fad9df75daa4f4e38c0d04e336f831"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081733041 · entry 108e9186e8c5677a0bbb…
Expected log hash
88ab7ac46d4614551fa6e665889f054d7592b15d91016a45621b5c46a7ae8e2f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791174108170","kind":"published-quote","locale":"en","page":"product:bitwarden/family/en","quote":"Sync to cloud + home hosting = best family plan option for the homelab/tech/security minded enthusiast.","rating":5,"review_date":"2025-09-09","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1137397744?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5671f9a997d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.