Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have a few issues on the ui/ux part but in the recent bitwarden updates they revamped their mobile ui, extension ui which is big yes flag”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8e83134bf861fb775b48cf029edb7d276c277e9f7e861833928c72ca2b55e420
Signature (Ed25519, base64)
ASk6+MeX99t6A+aPKM38jiFf++jgIdsY/T75wOsrDX21OF+d0UG2dblLHdVqWPzC9ZtYG7FEyCaNeGn2qjjNCw==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["8e8b67f7e7d25573e668551cce5e34648f84f302395655af27bd60c60b2c864c","c9ed8e0d6a40c862559c60bd7d89d7f1e358da49b7eb7f3788f1efcea1f0ede5","bb9c7f181f9f5bd95e3b4a0b1b86bfde33ea648035a1dbc85e185ab3082f7d6c","b3b9ee5bece77573661f0f7e6a2ab01c012ff89bdf38c6e9b99cb41bbfae9247","4ae7af78ea1169556d55302cfc38428f735252919c690708e18bb0eaf2b1a3d6","2cf725025ce2ff4616dcdc4d155bf30974c9a6b4217e3905f8512202dfbad385","27e88f19f2657fa60acb8acd86b0592043b403cd2a9b3008789c5814ed664a32","9c9a71097c338d29f940838e3b37ddae9be5969a7d486dca067da81dfb9dea82","45dc5cdd7e1e76179e21f00af800252b4dff75472048ebe16c10ab90994d1902","2df31aa3309d8c938f828f517623b1f5e57ee20adbd1c3ed075f2167fb79748b","2dd7c932a16b693260526fc2447dc6f412cf40aa69ac5e1deb0223c56600f9f7","2d343add7d6c445de4039fab2805e7b3615704f7c464b69b8c43459c7d961350","92dc205e4aa0fc1885d50120ca1ca6d484aa433fa7e4e33e903a12548dc38060","faf75fd6bb73a751917db6b8d00819eae7e29d2bb6f9270942a28e0da8dab05b","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"subtheme:bitwarden/fit/mobile-specific-issues/en","quote":"I have a few issues on the ui/ux part but in the recent bitwarden updates they revamped their mobile ui, extension ui which is big yes flag","rating":5,"review_date":"2025-03-01","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/67c33f6d1abfd2bf090ea776","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.