About

About DistillRank verification

How the verification registry works, what it confirms, and what it does not.

What this registry confirms

For any Report ID issued by DistillRank, this registry confirms:

• Authenticity. The Report ID corresponds to a real report issued by DistillRank, not a fabrication.
• Integrity. The report contents have not been modified since issuance. The cryptographic hash of the original report is recorded at issuance and remains verifiable.
• Status. Whether the report is currently active, expired, or revoked. Status changes are append-only and timestamped.
• Top-line metadata. Product identification, verdict, composite score, confidence level, methodology version, and evidence summary.

What this registry does not show

The full diagnostic content of any report remains the commissioning brand's confidential property. This registry does not display:

• Per-pillar scoring breakdowns
• Specific evidence quotes
• Action recommendations
• Gate trace details and statistical methodology
• Promise-versus-reality analysis

For authorized access to the full diagnostic report, contact the commissioning brand directly or DistillRank.

Methodology

DistillRank diagnostics combine deterministic scoring with AI-assisted narrative composition under a versioned constitution. Specifically:

• Scores, gates, pillar weights, evidence selection, quote grounding, and statistical aggregations are produced by deterministic RankBot logic.
• Narrative passages may be composed with assistance from large language models, validated through automated grounding checks against the underlying evidence.
• Re-runs preserve the score, gate decisions, and evidence basis. Wording may vary while preserving factual content.

Every report references the constitution version used at issuance, including a SHA-256 hash of the methodology document. Methodology documentation is available on request.

Cryptographic verification

Reports issued under the cryptographic signing infrastructure include a signed JSON record using Ed25519 digital signatures. Verification confirms the report's authenticity and integrity directly — without requiring trust in DistillRank's servers.

How to verify

1. Open the verification page for the report — either from the registry search at distillrank.com/verify/, or by scanning the QR code in the report's footer.
2. Click the "Verify cryptographically" button.
3. If the signature is valid and the record has not been tampered with, the button turns green and displays "Cryptographically verified". If any byte of the record was modified after issuance, verification fails and the button turns red.

Verification runs entirely in your browser using the Web Crypto API. No data is sent back to DistillRank during the signature check, so a successful verification depends only on the math — not on whether DistillRank servers happen to be reachable or trustworthy at the moment you check.

Re-runs and methodology versioning

If a brand commissions a new analysis of the same product after the original report's issuance, a new Report ID is issued. The original report remains valid for its analysis date and remains discoverable in this registry. Methodology versions are tracked: a report issued under Constitution v2.2.2 remains verifiable against that version's documented rules, even if the current methodology has been superseded.

Revocation

DistillRank may revoke a certification badge for cause, including:

• Discovery of manipulation in the underlying evidence base
• Brand-side violation of certification license terms
• Material discovery after issuance that changes the original findings
• Brand request

Revoked reports remain in the registry with a clear revocation banner, the date of revocation, and the category of cause. Revocation is append-only — the original issuance record is never deleted.

Contact

For questions about a specific report, verification system inquiries, or to report a suspected fraudulent certification claim, contact DistillRank at the contact addresses on distillrank.com.