← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   143749
root hash   de52d205f4451955a522cd15bb8b0305713d165637e14041c9b03a11498f8a07
as of   2026-09-10 14:37 UTC
signature   vega-cache-1:1yvHJe2bREdfnpFVjzgmG2zOJC/gAFM4GrdLWkIk5jec9G87tY+ew6Kw7+4rM2T7bss/HCaCqnGmo7+Cvf6FAw==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
36282026-06-02 02:14 UTC
etc-hostname/nix/store/n7fpd0vv666p65lr333f5mc92lamqvad-etc-hostname
gh-actionsgithub-hosted
36272026-06-02 02:14 UTC
etc/nix/store/n6xhv9vf7r2a89m5y5x7v00x1g94xadk-etc
gh-actionsgithub-hosted
36262026-06-02 02:14 UTC
security-wrapper-utempter-x86_64-unknown-linux-musl/nix/store/n1pga168l4251dcyfs5kziwlw56zvz4x-security-wrapper-utempter-x86_64-unknown-linux-musl
gh-actionsgithub-hosted
36252026-06-02 02:14 UTC
unit-systemd-nspawn-gemini.service/nix/store/myjj9y14icp4k0wpjs3k1y0gk026jkqp-unit-systemd-nspawn-gemini.service
gh-actionsgithub-hosted
36242026-06-02 02:14 UTC
codex-0.133.0/nix/store/y7d0jz8j1bszs2nima2maic1ifbhk1xh-codex-0.133.0
gh-actionsgithub-hosted
36232026-06-02 02:14 UTC
system-units/nix/store/msbfyvq4nlksdllkrc9fli7ksxn6m10s-system-units
gh-actionsgithub-hosted
36222026-06-02 02:14 UTC
etc/nix/store/mlh80v7mp352gd9hk3i4hnn20602d6f0-etc
gh-actionsgithub-hosted
36212026-06-02 02:14 UTC
unit-script-tailscale-udp-gro-start/nix/store/mjqzdwq5bv00hw39kcfs8qyf27aq9bps-unit-script-tailscale-udp-gro-start
gh-actionsgithub-hosted
36202026-06-02 02:14 UTC
unit-script-nix-gc-start/nix/store/mifjg5agmiqznpfdcsjz8xbj4xmhyqk3-unit-script-nix-gc-start
gh-actionsgithub-hosted
36192026-06-02 02:14 UTC
doas.pam/nix/store/m8pwjchpvx881f568vg2gf7hd12gyris-doas.pam
gh-actionsgithub-hosted
36182026-06-02 02:14 UTC
unit-script-container_codex-start/nix/store/mcw4z74gcc2dwz18vy0b83zjn3n09ijr-unit-script-container_codex-start
gh-actionsgithub-hosted
36172026-06-02 02:14 UTC
dhcpcd.conf/nix/store/m3a46697lwv5kyj8pwl23raq11dhq582-dhcpcd.conf
gh-actionsgithub-hosted
36162026-06-02 02:14 UTC
firewall-reload/nix/store/lywldldbrhr9286h8gaqmxwsa6w4smfr-firewall-reload
gh-actionsgithub-hosted
36152026-06-02 02:14 UTC
pihole.toml/nix/store/ld7w33in2b8y8d1xiqlfw4gxrwlginww-pihole.toml
gh-actionsgithub-hosted
36142026-06-02 02:14 UTC
firewall-start/nix/store/lga7bgcm0m4s94nwlkvjiwayia2ifxzy-firewall-start
gh-actionsgithub-hosted
36132026-06-02 02:14 UTC
unit-nixos-upgrade-failure-notify.service/nix/store/lc6gikfgb8q1b66l7183ib2a2cmbk6r2-unit-nixos-upgrade-failure-notify.service
gh-actionsgithub-hosted
36122026-06-02 02:14 UTC
unit-network-addresses-eth0.service/nix/store/l4zpj6fvcdmxz9vznmg0gpd7vda4fnbg-unit-network-addresses-eth0.service
gh-actionsgithub-hosted
36112026-06-02 02:14 UTC
append-initrd-secrets/nix/store/kyry3hqnfax37vxd8whdwrl0pj8vhqfs-append-initrd-secrets
gh-actionsgithub-hosted
36102026-06-02 02:14 UTC
system-path/nix/store/kkmd2l5zh03yrxnr9jpd5xrrc1am0kyf-system-path
gh-actionsgithub-hosted
36092026-06-02 02:14 UTC
etc-gitconfig/nix/store/kis1fps9c2vzb26z4dnifm9mqndvsaxz-etc-gitconfig
gh-actionsgithub-hosted
36082026-06-02 02:14 UTC
etc-hostname/nix/store/kdlc9lr7sk6mlihx88l0jq68bwsqamvs-etc-hostname
gh-actionsgithub-hosted
36072026-06-02 02:14 UTC
unit-systemd-nspawn-codex.service/nix/store/khyw18ackn7hrz02c1lrhrmdvm78xf37-unit-systemd-nspawn-codex.service
gh-actionsgithub-hosted
36062026-06-02 02:14 UTC
unit-script-network-addresses-eth0-start/nix/store/kaxha1amd0177l9rxnmaji1m7j88y82n-unit-script-network-addresses-eth0-start
gh-actionsgithub-hosted
36052026-06-02 02:14 UTC
gemini-cli-0.43.0/nix/store/m0rac1c5zahcvlv3i2263qwyd621dds8-gemini-cli-0.43.0
gh-actionsgithub-hosted
36042026-06-02 02:14 UTC
tailscale-initrd-key.age/nix/store/k3bi88hd8j05snnhlhs7v1pb0a8ggk30-tailscale-initrd-key.age
gh-actionsgithub-hosted
36032026-06-02 02:14 UTC
unit-tailscale-udp-gro.service/nix/store/jssibc9yzn7h2fwjwbb34jl60xrmwssy-unit-tailscale-udp-gro.service
gh-actionsgithub-hosted
36022026-06-02 02:14 UTC
unit-script-disk-pressure-warn-start/nix/store/js6mii6v4b764cl0prhjfdy3qi0wy0vk-unit-script-disk-pressure-warn-start
gh-actionsgithub-hosted
36012026-06-02 02:14 UTC
sshd.pam/nix/store/jpr3za7zbmx3zn1ys2kjdkswjbc63qja-sshd.pam
gh-actionsgithub-hosted
36002026-06-02 02:14 UTC
pihole-admin-password.age/nix/store/jnx2anhsj09x933fswlf4jb9900ifdxc-pihole-admin-password.age
gh-actionsgithub-hosted
35992026-06-02 02:14 UTC
nixos-system-ai-gemini-26.05pre-git/nix/store/jm8l3sa7mn4lc4xdzh3vdc6w259vi24v-nixos-system-ai-gemini-26.05pre-git
gh-actionsgithub-hosted
35982026-06-02 02:14 UTC
unit-pcscd.service/nix/store/jn72m22bcpxhl7c6p3qnyikhryahagsc-unit-pcscd.service
gh-actionsgithub-hosted
35972026-06-02 02:14 UTC
unit-systemd-modules-load.service/nix/store/jlpfjih61s6gmjkdlq4rczvah9sv979x-unit-systemd-modules-load.service
gh-actionsgithub-hosted
35962026-06-02 02:14 UTC
etc-sysctl.d-60-nixos.conf/nix/store/jj4z9akwzbh8fgqx4c5n1sdsfkf4mxak-etc-sysctl.d-60-nixos.conf
gh-actionsgithub-hosted
35952026-06-02 02:14 UTC
etc-screenrc/nix/store/jdd5djw4233q607w5085raqsmmnr6rzy-etc-screenrc
gh-actionsgithub-hosted
35942026-06-02 02:14 UTC
unit-systemd-udevd.service/nix/store/jg8va23lkr8yrnnl8yczdq6h33w2sxzj-unit-systemd-udevd.service
gh-actionsgithub-hosted
35932026-06-02 02:14 UTC
etc/nix/store/j5ccr53hmgp93jbivfygcfna305fmh54-etc
gh-actionsgithub-hosted
35922026-06-02 02:14 UTC
unit-dbus-broker.service/nix/store/j4aj0gcbblhc3vw9fayqg94584x48604-unit-dbus-broker.service
gh-actionsgithub-hosted
35912026-06-02 02:14 UTC
unit-generate-shutdown-ramfs.service/nix/store/iwz4grfkmz14pkyxyxbjygsx4pn80rvg-unit-generate-shutdown-ramfs.service
gh-actionsgithub-hosted
35902026-06-02 02:14 UTC
polkit-1.pam/nix/store/impi12xhjnq60765x4pz2396yz9jmgb3-polkit-1.pam
gh-actionsgithub-hosted
35892026-06-02 02:14 UTC
unit-dbus-broker.service/nix/store/ig920rcb880g9fi994s7pzl98q1hiwjj-unit-dbus-broker.service
gh-actionsgithub-hosted
35882026-06-02 02:14 UTC
unit-nix-gc.service/nix/store/ijviccd0xlyy9qla5s8yi4hvcpirqdia-unit-nix-gc.service
gh-actionsgithub-hosted
35872026-06-02 02:14 UTC
systemd-run0.pam/nix/store/i94m0nh16v8nvv8qkfxmz17276q1p8yz-systemd-run0.pam
gh-actionsgithub-hosted
35862026-06-02 02:14 UTC
etc-ssh-ssh_known_hosts/nix/store/iafzwf4gqab8q02q1hkaql8zh1xvh8zf-etc-ssh-ssh_known_hosts
gh-actionsgithub-hosted
35852026-06-02 02:14 UTC
user-units/nix/store/i5x77b053mr57ghdf8xqgid8n7nx9hic-user-units
gh-actionsgithub-hosted
35842026-06-02 02:14 UTC
unit-import-gpg-key.service/nix/store/i6m6m35dr0xb0v5nkhxvr5jx5j5zb1sj-unit-import-gpg-key.service
gh-actionsgithub-hosted
35832026-06-02 02:14 UTC
users-groups.json/nix/store/i2vbn731mzhfp6y1mpnj6h3p1g7bbb6a-users-groups.json
gh-actionsgithub-hosted
35822026-06-02 02:14 UTC
chpasswd.pam/nix/store/i2v9ngqg069zxdrggah00vhl7wky71as-chpasswd.pam
gh-actionsgithub-hosted
35812026-06-02 02:14 UTC
nixos-system-congo-26.05.20260523.64c08a7/nix/store/i0prlpggj6rjw0hglpzlgmz9wvd1d7wq-nixos-system-congo-26.05.20260523.64c08a7
gh-actionsgithub-hosted
35802026-06-02 02:14 UTC
sshd.pam/nix/store/hygdvgr59x2qq6m4ydsfbnyrizk11v6m-sshd.pam
gh-actionsgithub-hosted
35792026-06-02 02:14 UTC
gh-token.age/nix/store/hvv9pxbf86l0965hbans6mx229haan0v-gh-token.age
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.