Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“integration with wear os watch, spot on”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2871093963

Proof data

Record hash (SHA-256)

8c927c58b1af0da5e8887b02a164b6c6026bb3ac2225bb07109f4bf95cd42ea1

Signature (Ed25519, base64)

6fIkq9jd8onO03g+8sJ5k3BIyh0IsVv12PWyjxoq9Jbo4OWRTWT1g5r9S/NA1jsEwjF/2KrxiBRq7sGVH/yRAw==

Merkle root

10c793aeb45e0f89b9202290e8cd37afdaa93db762a28319e14e5d167b3b381e

Merkle path

["8c94003409dd98169563f0d44917f3f6da14bbe233512e80bae95106716f74b2","f83e3ee24450cb4006951893e97bd1eaa8bb6074df2d7e521f294d7b1c200530","94fa6054f1b4317987d84f0ea77956538b2e502d5d024eed2fbbcadf3b582e83","19e174eef0e11d959ab93dcd2eb542585145a654217d6e2cf8d3d1f4185a9c49","4ef2f26a6b635399be33d61614ec93e8afd3ff086e2a7458c81d7e06f65740e3","96ca1518f6619798b119cb01ab969c3221d0d05f2bbcdc32bdfb589a859d5979","63a3c8b44e357e5e2ac2ac03245f51fcf8aef49cfe67e7c8dc51020695cb059e","190b703b728203c18d455c8a68b50a2161339a1ebd15fa0880a779e49e516bfc","9492639f0334c803cec14aee5a9c7bb9ff8afd4d276fa488087bf49d8d967d40","649e8d277154037c88d5e4605b6b5240f907d54727922d8a08eb5b97b385d072","3acef11d2fec7efc1b29385460dd845b463217649f027943ec9ede911d8393a4","f8bd74964031291aa46758d56cd127596f791c71c827165c7b5f9fde7d8fcd5b","dccf217d21fb36838ea4dd2efcae3c16107e39782fd6d9f93819c1d7e5647957","0a0b65d14f8830f13578c0a03ccc6845d0f40e308a396eedfef160d14748cc93","86698da34df4e83c54914359e9a6440fbcb5c84f13163aaa7ad9fba21ade0277"]

Anchored

2026-09-17

Public log entry

search.sigstore.dev, log index 2871093963 · entry 108e9186e8c5677aaa83…

Expected log hash

2dc7fe816b6373997045fe2c089e9db0b321b7c653bfed462fbdb27b856b80a8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789531532649","kind":"published-quote","locale":"en","page":"theme:roboform/quality/en","quote":"integration with wear os watch, spot on","rating":5,"review_date":"2026-08-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.siber.roboform","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (10c793aeb45e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.