Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“does not save website in android roboform browser”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3081733041

Proof data

Record hash (SHA-256)

8c54f683d7aa26180801fe29c06c7337cfcd4834bde8439bea487fdb000731ab

Signature (Ed25519, base64)

9hdQwWtmlsh56GWcNW97QY1fM0YpcrJH7mTkiAplXOalO7es3byYKuk0eDr1YZaVt9ltYtqw6aOB8ygRUGmXCA==

Merkle root

c5671f9a997da9b293a79ebe58b20e4534ae608121169f15a5adc358d42ed147

Merkle path

["8c52527cb47472a785de40156b0e3cfc4c1c97a0df66e46fe5a67a8e7aa93d89","ca801ea8e2d3643112595ff5ff8e8c2d87949c70a5217a9168919432617d1c46","d92e7d40e48fa285110218e3e8c4c99087dc85aae4e263e42bf51ce6ccb5191a","4a03fa308ba77855e9d17378b6700b61d9e7d9f981147aa08e0de4affe90d985","263508372948a5e89a82af012115de0169ce6d0db429764abc635ba029b09ef9","0fff6f4e1961e4f14c6c7454a7ab89e0ad1fada786266d7d3e5518108d4dd99e","72f8eb81e62ac47dbbe9c21fa24e0e4e2eb3bbcf19b6c22ecad6b68922bee617","ca164b34ef1b6c01a4f22cb761fdc11cd9f10e3d904e58579763f90009804af1","906e4ff324be8ed013935e622f62c9105fe692d2a73e6d6c0b8fab0baa54c16a","ce1f235db4ae1d4787603acc04ccdd14b6f2a6fb598e680d7f7a7e0e8ac1b752","eabbbe209187d45e59a30e17d1323b5f642f6d5868a3fdbc5f3b2c59d725c73c","2ac52bfd7019efc5590b5cfeb80fdf634434e8839267865b515b47069d2c6ef0","d2482c8c27b9666d395774cc0539a6ae5a22798c7dcc665c13e5aa68bbcb3778","8621becbd314bf961e51e6037fd253dfa12e66cb7b2d1c68d51addc52321e8a9","b178a1b83338c84f1a44bf8fe330ca4b62fad9df75daa4f4e38c0d04e336f831"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3081733041 · entry 108e9186e8c5677a0bbb…

Expected log hash

88ab7ac46d4614551fa6e665889f054d7592b15d91016a45621b5c46a7ae8e2f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791174108170","kind":"published-quote","locale":"en","page":"theme:roboform/quality/en","quote":"does not save website in android roboform browser","rating":1,"review_date":"2026-08-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.siber.roboform","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5671f9a997d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.