Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The free plan is perfectly sufficient for an average user”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3084008230

Proof data

Record hash (SHA-256)

ab9f38cc2c6ddc7ffef0e48ac94590fc8eda1be9b16f0ade22c60b6514a786da

Signature (Ed25519, base64)

l/9x6qRCUcmdOOiRQlJ3wypfSBTe38h1Qi3Ik3Hj3bmus/lWjBYnfDW50GVheNO2vXbi1PZS3vhMXNahrCepCg==

Merkle root

c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85

Merkle path

["aba119d6ac1fef52a8c722e40e6be876f1594096e9ef59f7d05e4e9dae0c7980","23e59a625047fb2d0aad0f54dc264c1bc3fe40a0d8e5697d2ccfd04078d0dc78","87a78e8823de74381cb93aafe3b0f1a78c24ed3121b3f33abdb1d691127cfdcb","9b420a326a7e3909b34ce576ddda424aec8f868d6a53ebc1643ba21c14478b51","61e886bf8481ebadefbd6e76d44923ec1ddb3b9c4f0f650364eab0d8bec368f9","d7e1deaea9b64fe82e1ce8f0078dd46268ad37ce910c7c5c86fbed78151d988e","00375f506945472ff431cc4b9e2d132dc84ba7195d026977525f0ea38ae91c0f","61a390de3284e827e785c56f9df7b41e21f453316b776a1fccc1fa4835e1a7bc","3ecbe23f0f382dd6bd777462379f7ff330a2b4eebf2ae56354c82c310edc9c2f","2c8d9150dcb3b89ef84288f6de2267ae44860b29ba0c1471c301033792879b4a","f216407b2d89039a38455b48115dfeed046ef0293f2f2d358637e454bee40d4f","8f2a8912aca1048a4933283d89c19d6743fc8e8e17d93a0587b33eba88abd667","b611596563f9f58647a46a10388967b912d7f9bc715dab82189c067238c26228","df51e36b3706cf0aa826d42298e6b3dec441c2522060e389a8510db32e8f4a39","d08e876184fd6f67c869a98f4654f693085707c7f9c1884596981ce250200aaf"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…

Expected log hash

6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791183579482","kind":"published-quote","locale":"en","page":"theme:bitwarden/price/en","quote":"The free plan is perfectly sufficient for an average user","rating":5,"review_date":"2026-08-28","source":"Apple App Store","source_url":"https://apps.apple.com/pl/app/id1137397744?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.