Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They are unwilling to help”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a64c8ae2dc2985d2f6056ed48b2249a6b01600ae07e59f48e97f8704247831f6
Signature (Ed25519, base64)
Sj9p49t1/F64TIXP8+eZ0ymbPcR8k+GpVNo8o0COx0Ch+fajYqpEPg7RtQOWPtO+0HMkTTgQEWGyeFALuJ2qCg==
Merkle root
1b26d1b85473caad1868633ec4c931eb970e81199eea87926818f3f1753af37b
Merkle path
["a64f511c76d968db68ac62559c12deee74e17d0c4a12e954ec384e6e19769df4","d4520e51db794c1b580f634976aed5426c890073fa12893eba74bfe0fec2ce3e","550961dd96263deed70ebe088951456945e4acdefd6b47976ffd59d53ccc8fcd","6021c3d9fe3b0e99cb4e4b90710747afa37e41104bcd523f4ea6ffc30accbeea","61444e3da59a86198b941361d4cb6a172abe16d013c1c0730fb94940e36682f2","1a7fbe5e25de5b21c72ff60abd0550d7c51f575c81b183a97336b32765355fda","b28ae38e5d206283d2ecd2cf506d63279e417433786d65116d927c26bf5d84ca","c1ecd07293af7b038827c9589f05258b3f8605487ceda29bec909d0f9a2742f4","5e054b3840045c126593518d1f15765b01c19aad7dd6e2cf0863cd32db68c960","23cb3ac675affdeeea2d155165d51e73304f5033e0bed2e4dc88e075d3bfd106","03f6a52edfa03eee5b9343b82adef3d439d8164bdfb0c287191f3cc7be57636e","b777021cb51f63e820e93fd9380015ecf012671cab543d5fced13e3651d329ff","c0dee208cfc82bb58ef8bfbdce70ae59669cc0fafa6229438e70014c20ddc06e","f13bd3931ffab245c82268d5388ec4e7a23a41a86394a369b97f89216cceb3ad","06054c91b82ccf7b99bb6b4fcb7c60afa97f93295e6829b75e5bf1efe9493e63"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3138947147 · entry 108e9186e8c5677a2712…
Expected log hash
8f66b765b7efcb11dcdcf57b81c46ed3317a5895f5b870638e23b76f1efbb2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791425549743","kind":"published-quote","locale":"en","page":"brand:nordpass","quote":"They are unwilling to help","rating":2,"review_date":"2026-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.nordpass.android.app.password.manager","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b26d1b85473…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.