Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it doesn't accept fingerprint unlock”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8fd7d51920afa99d88facc5c2c76e2b6aca7e4baf6347c95c97ade63c62d372b
Signature (Ed25519, base64)
yyVMgzkJ3enPVII5mxi5kHSPnSgoQI7cacpKpzLfqS2aOlezWv4S7QGSBuWghYLBbaLQci2ia8z/gqoMsqk7Bg==
Merkle root
ab8d4de5853e13d360962f03dfb915842a42e1c5601cdaac4f2b37ad0ba96b78
Merkle path
["8fd78dcdef2c298fca5f663b369ef6f4871e5bafde97dd93a63628897dd60012","78a8aee900139cf3acb6d1ae48e6748db8082bee6b6f0a13493ab4c50853c434","47bcf7c225d09ca8c334cdcc86db15888c216fd6c8bcd5c0308333ff22423b84","dbd6f3ff166cc1d63020c8fdf4243f9d6ff344d2046790a954cafab8bcd59f76","2abfe5952971260f36d5fc9a70903e2015eed1b44131a4489eb2cb29c8db0713","5eb7c38930b0b7187e8f45e5a5385ab5957e6b14d0c33a82b759a42d33bfb68e","dcdcb38b02cfa212900c451aa7a45782f543b2aa98d3a94e0ac867d961842c60","b4186fa29e9747eac054da97009a75bb51b76c513ab31ee6403957f7269d2448","f7a74bb9ed48cd660abb3170411276c8ece12064f4dc0e321ae3385f21da6121","2e346d1a11162752a44bbe4df290bd0faab7c62eb027b692f3f57fee737d05fb","3f8320c648dc6768e8e114ca5d31b4be7a42fa367198af28b3ae5d4aac43c400","37d11c97a45bee2bb690ad37e9920153948ed9e3bf156340f0b64aaf448aea04","a179e4e628732700a4c05c1a9266dc0af0d4f4ba9e65711ab678d5064556702c","0d65fb7d6fb1f6bc88b73078a53833894fc747e8876cdcdc40319714cf650cf8","90ac6c76618b09f3702b50a6410c80828bbcb4ead0d9d85dda294a654717f483"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3162293789 · entry 108e9186e8c5677af0ef…
Expected log hash
49c1b9c7cf9c0180248092c94f6cb48d5e59f6c65f471decaa61f120e90874ce The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791539611981","kind":"published-quote","locale":"en","page":"subtheme:bitwarden/fit/mobile-specific-issues/en","quote":"it doesn't accept fingerprint unlock","rating":4,"review_date":"2026-08-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.x8bit.bitwarden","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ab8d4de5853e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.