← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   143749
root hash   de52d205f4451955a522cd15bb8b0305713d165637e14041c9b03a11498f8a07
as of   2026-09-10 15:32 UTC
signature   vega-cache-1:BZM/upgtTq6WoLT5g1FaFsRwI2ZwuYL9BprCykSe3QJWW/RVJT8sAsqphPYnN3WTFT+Ygui0bfvla1ziNVHtCg==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
32282026-06-02 01:07 UTC
etc-ssh-ssh_config/nix/store/f01csf90rgbxx9zw3mknnzzfp47cyp4w-etc-ssh-ssh_config
gh-actionsgithub-hosted
32272026-06-02 01:07 UTC
etc-systemd-logind.conf/nix/store/dyxkczlmfkg0lj0g3cr9jvl7jij0mqmh-etc-systemd-logind.conf
gh-actionsgithub-hosted
32262026-06-02 01:07 UTC
etc-nixos-containers-gemini.conf/nix/store/dxnsmpn1pxdia263gxin4yyjdhsfksdd-etc-nixos-containers-gemini.conf
gh-actionsgithub-hosted
32252026-06-02 01:07 UTC
nginx.conf/nix/store/dk878368jaicsmrgfnzgnd5gy2gmjdaz-nginx.conf
gh-actionsgithub-hosted
32242026-06-02 01:07 UTC
web-flow.gpg/nix/store/ddimd8q67vp3nrycl6n18jjlmyabkql6-web-flow.gpg
gh-actionsgithub-hosted
32232026-06-02 01:07 UTC
codex-0.133.0/nix/store/y7d0jz8j1bszs2nima2maic1ifbhk1xh-codex-0.133.0
gh-actionsgithub-hosted
32222026-06-02 01:07 UTC
unit-script-pihole-seed-adlists-start/nix/store/d2c5knmmy4lpcz0ix5wdkngqpv5x4148-unit-script-pihole-seed-adlists-start
gh-actionsgithub-hosted
32212026-06-02 01:07 UTC
unit-script-container_codex-pre-start/nix/store/cvsag7xzq3kl11nszxp26wywx9winppb-unit-script-container_codex-pre-start
gh-actionsgithub-hosted
32202026-06-02 01:07 UTC
unit-container-codex.service/nix/store/cplafymqjw7jjaf7laqla32wyrivrvj9-unit-container-codex.service
gh-actionsgithub-hosted
32192026-06-02 01:07 UTC
etc-bashrc/nix/store/clznq0331m6a7damq0g2ynk4dbdp8d6f-etc-bashrc
gh-actionsgithub-hosted
32182026-06-02 01:07 UTC
users-groups.json/nix/store/clq26dj5m53n6s8s06i4z6ydchi4pwnw-users-groups.json
gh-actionsgithub-hosted
32172026-06-02 01:07 UTC
doas-conf/nix/store/cfndrbbd2wm0kh5nji7521iywx9r14rx-doas-conf
gh-actionsgithub-hosted
32162026-06-02 01:07 UTC
groupmems.pam/nix/store/cddrd57404x819fv7l8vsq9gb3gzr5m5-groupmems.pam
gh-actionsgithub-hosted
32152026-06-02 01:07 UTC
etc-polkit-1-rules.d-10-nixos.rules/nix/store/c71zmrlnm23g3747g7g7j3bm9zdp8d4y-etc-polkit-1-rules.d-10-nixos.rules
gh-actionsgithub-hosted
32142026-06-02 01:07 UTC
X-Restart-Triggers-systemd-modules-load/nix/store/c97flwhk0qrm5jr62sgywda9z28slhah-X-Restart-Triggers-systemd-modules-load
gh-actionsgithub-hosted
32132026-06-02 01:07 UTC
unit-systemd-sysctl.service/nix/store/c46xqx9pb2aabi9d3bqx231jl20jfmmx-unit-systemd-sysctl.service
gh-actionsgithub-hosted
32122026-06-02 01:07 UTC
amy-password.age/nix/store/c440mr001sdmby3yvzybzbgzqa23fwgb-amy-password.age
gh-actionsgithub-hosted
32112026-06-02 01:07 UTC
unit-nix-daemon.service/nix/store/bxg7z2jrflig8yq5hfv1xa9rjb0bbszj-unit-nix-daemon.service
gh-actionsgithub-hosted
32102026-06-02 01:07 UTC
etc-fail2ban-filter.d-openvpn.conf/nix/store/bx9vn94k5vmqz48kkvc1r3rvcdbhgz47-etc-fail2ban-filter.d-openvpn.conf
gh-actionsgithub-hosted
32092026-06-02 01:07 UTC
unit-script-network-addresses-enp0s31f6-pre-stop/nix/store/bnsr99bg7gfpkhcigxgqfy1kbhq2jk0z-unit-script-network-addresses-enp0s31f6-pre-stop
gh-actionsgithub-hosted
32082026-06-02 01:07 UTC
shutdown-ramfs-contents.json/nix/store/bf5wrnxwa4shr82qa7bl08b5a2fy86cn-shutdown-ramfs-contents.json
gh-actionsgithub-hosted
32072026-06-02 01:07 UTC
security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl/nix/store/bglbgww3sywgxrbag52yk73aak703dff-security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl
gh-actionsgithub-hosted
32062026-06-02 01:07 UTC
Caddyfile-formatted/nix/store/bdca25l2m5xw99bhah6dmybj7yrb0phg-Caddyfile-formatted
gh-actionsgithub-hosted
32052026-06-02 01:07 UTC
unit-script-verify-upgrade-commits-start/nix/store/aycrx8hmz3n22m4sx76vmq90s0yhmjik-unit-script-verify-upgrade-commits-start
gh-actionsgithub-hosted
32042026-06-02 01:07 UTC
useradd.pam/nix/store/b2jbv5kpq4gnbb1al24fdrkwp1w5plhp-useradd.pam
gh-actionsgithub-hosted
32032026-06-02 01:07 UTC
unit-fluent-bit.service/nix/store/avvwjmm1sgl8lphkra2xph72dsphvg9f-unit-fluent-bit.service
gh-actionsgithub-hosted
32022026-06-02 01:07 UTC
unit-network-addresses-eth0.service/nix/store/ard5fw6kwi4x7x6367ykj0px0383mli5-unit-network-addresses-eth0.service
gh-actionsgithub-hosted
32012026-06-02 01:07 UTC
ai-peer-inbox-watcher/nix/store/al1z28pszlqr7mnilbqycvhbq90mhbrw-ai-peer-inbox-watcher
gh-actionsgithub-hosted
32002026-06-02 01:07 UTC
unit-dhcpcd.service/nix/store/ac9yml24r9k7hdgrx1ylvp84gl4gwcmy-unit-dhcpcd.service
gh-actionsgithub-hosted
31992026-06-02 01:07 UTC
unit-ssh-controlmasters.service/nix/store/a9hm0aqbj5wq072pqxjw3lw3hmac86rn-unit-ssh-controlmasters.service
gh-actionsgithub-hosted
31982026-06-02 01:07 UTC
unit-loki.service/nix/store/a1102p0c0qa4h27iamm3fw3vm79ky57m-unit-loki.service
gh-actionsgithub-hosted
31972026-06-02 01:06 UTC
gemini-cli-0.43.0/nix/store/m0rac1c5zahcvlv3i2263qwyd621dds8-gemini-cli-0.43.0
gh-actionsgithub-hosted
31962026-06-02 01:07 UTC
unit-network-local-commands.service/nix/store/9idlk01m86185gi48ajjsz6r811s8kp9-unit-network-local-commands.service
gh-actionsgithub-hosted
31952026-06-02 01:07 UTC
systemd-user.pam/nix/store/9kgxfaaa2danllhgxblw9ngpigkjpig6-systemd-user.pam
gh-actionsgithub-hosted
31942026-06-02 01:07 UTC
sshd.conf-final/nix/store/9dzld9a2didiwkq5ysa7sbjv8wskb17l-sshd.conf-final
gh-actionsgithub-hosted
31932026-06-02 01:07 UTC
X-Restart-Triggers-systemd-tmpfiles-resetup/nix/store/9a9rawanz3bvk49xacnfbsb4f4r5g5a2-X-Restart-Triggers-systemd-tmpfiles-resetup
gh-actionsgithub-hosted
31922026-06-02 01:07 UTC
sshd.conf-final/nix/store/97z01nn8rbi7y8s9gr0jlpawdbiyigk7-sshd.conf-final
gh-actionsgithub-hosted
31912026-06-02 01:07 UTC
unit-test-initrd-ssh.service/nix/store/8zywxjz297q2dqn4w3y2dhjcvpp3nh2f-unit-test-initrd-ssh.service
gh-actionsgithub-hosted
31902026-06-02 01:07 UTC
sudo.pam/nix/store/8qiic9ii4x0zaqgyrxsnvhyfgd2vsgji-sudo.pam
gh-actionsgithub-hosted
31892026-06-02 01:07 UTC
firewall-reload/nix/store/8pxf77k8sii219ddb387if340d57sifl-firewall-reload
gh-actionsgithub-hosted
31882026-06-02 01:07 UTC
unit-sshd.socket/nix/store/8l9r3jrcgjphqlhvpk8g2jsq8rbh87in-unit-sshd.socket
gh-actionsgithub-hosted
31872026-06-02 01:07 UTC
etc-pam-environment/nix/store/8i48y668l3c9k8nd8mlhi0n6wp85bzng-etc-pam-environment
gh-actionsgithub-hosted
31862026-06-02 01:07 UTC
dbus-1/nix/store/8fwa6d890ginwk91d98ic4pgkrk77i8x-dbus-1
gh-actionsgithub-hosted
31852026-06-02 01:07 UTC
firewall-start/nix/store/8fab79nwym9bxa3csw5rr48qfd5nq4zp-firewall-start
gh-actionsgithub-hosted
31842026-06-02 01:07 UTC
congo-logs-dashboard/nix/store/8cbscggsm4hnqd8gbssy9v6mk7ksxmmn-congo-logs-dashboard
gh-actionsgithub-hosted
31832026-06-02 01:07 UTC
firewall-reload/nix/store/89c2fj8h4yyhgwnps77imhapa6s8zhmr-firewall-reload
gh-actionsgithub-hosted
31822026-06-02 01:07 UTC
hosts/nix/store/7wwhydsyjkizgc9j6b1m2zwx5m4qqfyh-hosts
gh-actionsgithub-hosted
31812026-06-02 01:07 UTC
hwdb.bin/nix/store/6mqm6ga5pwd9ca7l8gfrw69a997mhxvn-hwdb.bin
gh-actionsgithub-hosted
31802026-06-02 01:07 UTC
firewall-start/nix/store/79d9n3f55jr8603xlb6gnwp27p4r7wi2-firewall-start
gh-actionsgithub-hosted
31792026-06-02 01:07 UTC
unit-pihole-seed-adlists.service/nix/store/6m5a7snxjlgpf3ywn65j653r01rbcxg8-unit-pihole-seed-adlists.service
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.