← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   143749
root hash   de52d205f4451955a522cd15bb8b0305713d165637e14041c9b03a11498f8a07
as of   2026-09-10 19:34 UTC
signature   vega-cache-1:R4iitYYJU2s2ArcIEX0E+j0n14UPpF/QQiGhy+MtGJOuyPx5Sdj/bCRmwQyD5P+0KZ5AfWtqGiX2UUpg6Hn7CA==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
14782026-06-01 15:43 UTC
unit-NetworkManager.service/nix/store/fsvamlcr75scwcqk5gbgm6sky9q0i973-unit-NetworkManager.service
gh-actionsunknown
14772026-06-01 15:43 UTC
nixos-system-ai-claude-26.05pre-git/nix/store/fqn05zrnvcpmh4sr36qiwl76cid2n8jv-nixos-system-ai-claude-26.05pre-git
gh-actionsunknown
14762026-06-01 15:43 UTC
ask-peer/nix/store/fkclsi9lb86zlap87wbdigknzysa1a5p-ask-peer
gh-actionsunknown
14752026-06-01 15:43 UTC
unit-screen-config.service/nix/store/fms33a7vs0mqcb0yxf2ni8wqzasjcrpd-unit-screen-config.service
gh-actionsunknown
14742026-06-01 15:43 UTC
fluent-bit.yaml/nix/store/fi7p9cvanhszpjdqdb1qpaz7wka1mw0j-fluent-bit.yaml
gh-actionsunknown
14732026-06-01 15:43 UTC
usermod.pam/nix/store/fi2wdickara9wbl93z6vkx1a484rx9jk-usermod.pam
gh-actionsunknown
14722026-06-01 15:43 UTC
nixos-system-ai-codex-26.05pre-git/nix/store/ffk53lfbvqcahvgzcgryw7dj1vfra4jw-nixos-system-ai-codex-26.05pre-git
gh-actionsunknown
14712026-06-01 15:43 UTC
hosts/nix/store/f9w2wki9y28hjxp9vi6s88s1rb1brmi3-hosts
gh-actionsunknown
14702026-06-01 15:43 UTC
unit-script-network-addresses-enp0s31f6-start/nix/store/f8rvjcny6gd29m64kycynm5sc53yz03w-unit-script-network-addresses-enp0s31f6-start
gh-actionsunknown
14692026-06-01 15:43 UTC
etc-hostname/nix/store/f8kadgfmw04wfcplkpn2lkvxfghmrqc7-etc-hostname
gh-actionsunknown
14682026-06-01 15:43 UTC
system-path/nix/store/f7nr1bm48mkpvlpp0i9h598icy3a35ay-system-path
gh-actionsunknown
14672026-06-01 15:43 UTC
etc-pihole-versions/nix/store/f5nj4mvw7yc055npm6lvdksflxsk35yw-etc-pihole-versions
gh-actionsunknown
14662026-06-01 15:42 UTC
web-flow.gpg/nix/store/ddimd8q67vp3nrycl6n18jjlmyabkql6-web-flow.gpg
gh-actionsunknown
14652026-06-01 15:42 UTC
etc-ssh-ssh_config/nix/store/f01csf90rgbxx9zw3mknnzzfp47cyp4w-etc-ssh-ssh_config
gh-actionsunknown
14642026-06-01 15:42 UTC
etc-systemd-logind.conf/nix/store/dyxkczlmfkg0lj0g3cr9jvl7jij0mqmh-etc-systemd-logind.conf
gh-actionsunknown
14632026-06-01 15:42 UTC
etc-nixos-containers-gemini.conf/nix/store/dxnsmpn1pxdia263gxin4yyjdhsfksdd-etc-nixos-containers-gemini.conf
gh-actionsunknown
14622026-06-01 15:42 UTC
nginx.conf/nix/store/dk878368jaicsmrgfnzgnd5gy2gmjdaz-nginx.conf
gh-actionsunknown
14612026-06-01 15:42 UTC
unit-script-pihole-seed-adlists-start/nix/store/d2c5knmmy4lpcz0ix5wdkngqpv5x4148-unit-script-pihole-seed-adlists-start
gh-actionsunknown
14602026-06-01 15:42 UTC
initrd-linux-7.0.10/nix/store/7w88jda6g3w6ahbgnr55avx8was3gxl9-initrd-linux-7.0.10
gh-actionsunknown
14592026-06-01 15:42 UTC
unit-script-container_codex-pre-start/nix/store/cvsag7xzq3kl11nszxp26wywx9winppb-unit-script-container_codex-pre-start
gh-actionsunknown
14582026-06-01 15:42 UTC
unit-container-codex.service/nix/store/cplafymqjw7jjaf7laqla32wyrivrvj9-unit-container-codex.service
gh-actionsunknown
14572026-06-01 15:42 UTC
etc-bashrc/nix/store/clznq0331m6a7damq0g2ynk4dbdp8d6f-etc-bashrc
gh-actionsunknown
14562026-06-01 15:42 UTC
users-groups.json/nix/store/clq26dj5m53n6s8s06i4z6ydchi4pwnw-users-groups.json
gh-actionsunknown
14552026-06-01 15:42 UTC
doas-conf/nix/store/cfndrbbd2wm0kh5nji7521iywx9r14rx-doas-conf
gh-actionsunknown
14542026-06-01 15:42 UTC
groupmems.pam/nix/store/cddrd57404x819fv7l8vsq9gb3gzr5m5-groupmems.pam
gh-actionsunknown
14532026-06-01 15:42 UTC
X-Restart-Triggers-systemd-modules-load/nix/store/c97flwhk0qrm5jr62sgywda9z28slhah-X-Restart-Triggers-systemd-modules-load
gh-actionsunknown
14522026-06-01 15:42 UTC
etc-polkit-1-rules.d-10-nixos.rules/nix/store/c71zmrlnm23g3747g7g7j3bm9zdp8d4y-etc-polkit-1-rules.d-10-nixos.rules
gh-actionsunknown
14512026-06-01 15:42 UTC
unit-systemd-sysctl.service/nix/store/c46xqx9pb2aabi9d3bqx231jl20jfmmx-unit-systemd-sysctl.service
gh-actionsunknown
14502026-06-01 15:42 UTC
amy-password.age/nix/store/c440mr001sdmby3yvzybzbgzqa23fwgb-amy-password.age
gh-actionsunknown
14492026-06-01 15:42 UTC
etc-fail2ban-filter.d-openvpn.conf/nix/store/bx9vn94k5vmqz48kkvc1r3rvcdbhgz47-etc-fail2ban-filter.d-openvpn.conf
gh-actionsunknown
14482026-06-01 15:42 UTC
unit-nix-daemon.service/nix/store/bxg7z2jrflig8yq5hfv1xa9rjb0bbszj-unit-nix-daemon.service
gh-actionsunknown
14472026-06-01 15:42 UTC
unit-script-network-addresses-enp0s31f6-pre-stop/nix/store/bnsr99bg7gfpkhcigxgqfy1kbhq2jk0z-unit-script-network-addresses-enp0s31f6-pre-stop
gh-actionsunknown
14462026-06-01 15:42 UTC
security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl/nix/store/bglbgww3sywgxrbag52yk73aak703dff-security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl
gh-actionsunknown
14452026-06-01 15:42 UTC
shutdown-ramfs-contents.json/nix/store/bf5wrnxwa4shr82qa7bl08b5a2fy86cn-shutdown-ramfs-contents.json
gh-actionsunknown
14442026-06-01 15:42 UTC
Caddyfile-formatted/nix/store/bdca25l2m5xw99bhah6dmybj7yrb0phg-Caddyfile-formatted
gh-actionsunknown
14432026-06-01 15:42 UTC
ai-peer-inbox-watcher/nix/store/al1z28pszlqr7mnilbqycvhbq90mhbrw-ai-peer-inbox-watcher
gh-actionsunknown
14422026-06-01 15:42 UTC
useradd.pam/nix/store/b2jbv5kpq4gnbb1al24fdrkwp1w5plhp-useradd.pam
gh-actionsunknown
14412026-06-01 15:42 UTC
unit-script-verify-upgrade-commits-start/nix/store/aycrx8hmz3n22m4sx76vmq90s0yhmjik-unit-script-verify-upgrade-commits-start
gh-actionsunknown
14402026-06-01 15:42 UTC
unit-fluent-bit.service/nix/store/avvwjmm1sgl8lphkra2xph72dsphvg9f-unit-fluent-bit.service
gh-actionsunknown
14392026-06-01 15:42 UTC
unit-network-addresses-eth0.service/nix/store/ard5fw6kwi4x7x6367ykj0px0383mli5-unit-network-addresses-eth0.service
gh-actionsunknown
14382026-06-01 15:42 UTC
unit-dhcpcd.service/nix/store/ac9yml24r9k7hdgrx1ylvp84gl4gwcmy-unit-dhcpcd.service
gh-actionsunknown
14372026-06-01 15:42 UTC
unit-ssh-controlmasters.service/nix/store/a9hm0aqbj5wq072pqxjw3lw3hmac86rn-unit-ssh-controlmasters.service
gh-actionsunknown
14362026-06-01 15:42 UTC
unit-loki.service/nix/store/a1102p0c0qa4h27iamm3fw3vm79ky57m-unit-loki.service
gh-actionsunknown
14352026-06-01 15:42 UTC
systemd-user.pam/nix/store/9kgxfaaa2danllhgxblw9ngpigkjpig6-systemd-user.pam
gh-actionsunknown
14342026-06-01 15:42 UTC
unit-network-local-commands.service/nix/store/9idlk01m86185gi48ajjsz6r811s8kp9-unit-network-local-commands.service
gh-actionsunknown
14332026-06-01 15:42 UTC
sshd.conf-final/nix/store/9dzld9a2didiwkq5ysa7sbjv8wskb17l-sshd.conf-final
gh-actionsunknown
14322026-06-01 15:42 UTC
X-Restart-Triggers-systemd-tmpfiles-resetup/nix/store/9a9rawanz3bvk49xacnfbsb4f4r5g5a2-X-Restart-Triggers-systemd-tmpfiles-resetup
gh-actionsunknown
14312026-06-01 15:42 UTC
sshd.conf-final/nix/store/97z01nn8rbi7y8s9gr0jlpawdbiyigk7-sshd.conf-final
gh-actionsunknown
14302026-06-01 15:42 UTC
unit-test-initrd-ssh.service/nix/store/8zywxjz297q2dqn4w3y2dhjcvpp3nh2f-unit-test-initrd-ssh.service
gh-actionsunknown
14292026-06-01 15:42 UTC
sudo.pam/nix/store/8qiic9ii4x0zaqgyrxsnvhyfgd2vsgji-sudo.pam
gh-actionsunknown

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.