← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   143749
root hash   de52d205f4451955a522cd15bb8b0305713d165637e14041c9b03a11498f8a07
as of   2026-09-10 12:50 UTC
signature   vega-cache-1:az4iHjRnlHTDu8bPMvHdf7gO6sw519zP/8C+9BSIXB9GWJz+gbojo0+wMhBcRWziAcRTZ4VcprWkAlD9yjILDQ==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
44282026-06-02 05:24 UTC
etc-inputrc/nix/store/3w15vj1abpz69lzdhlij2ywmq8asjlfy-etc-inputrc
gh-actionsgithub-hosted
44272026-06-02 05:24 UTC
unit-network-addresses-eth0.service/nix/store/3iwnp4czwz5n2zdrlglplyfxnsj5ly98-unit-network-addresses-eth0.service
gh-actionsgithub-hosted
44262026-06-02 05:24 UTC
fuse-2.9.9-bin/nix/store/32r34b4hqbw0hliv6n1h3w8fqw781y11-fuse-2.9.9-bin
gh-actionsgithub-hosted
44252026-06-02 05:24 UTC
jasonodoom.gpg/nix/store/37hdywl6fhfpvzgb4sbs3g2s77r7jjvs-jasonodoom.gpg
gh-actionsgithub-hosted
44242026-06-02 05:24 UTC
unit-script-container_gemini-pre-start/nix/store/37g8hyv0jsq2n9r06l56cc7859px3rrh-unit-script-container_gemini-pre-start
gh-actionsgithub-hosted
44232026-06-02 05:24 UTC
sshd.conf-final/nix/store/2zmw9z4cbqhcw8h7cypnnsrkv1q6hisr-sshd.conf-final
gh-actionsgithub-hosted
44222026-06-02 05:24 UTC
unit-firewall.service/nix/store/276m2qfz6rxjpmn8k574gkm6w743p76q-unit-firewall.service
gh-actionsgithub-hosted
44212026-06-02 05:24 UTC
unit-nginx.service/nix/store/2i9d7qd46hj8gh3qqk9n5198f8la819a-unit-nginx.service
gh-actionsgithub-hosted
44202026-06-02 05:24 UTC
X-Restart-Triggers-dbus-broker/nix/store/2a9yy2m04yw0lg6rwkz6c516q4c223dm-X-Restart-Triggers-dbus-broker
gh-actionsgithub-hosted
44192026-06-02 05:24 UTC
unit-mkswap-swapfile.service/nix/store/217y6f0nmpm6iq9y419xic1sd9hsrcj9-unit-mkswap-swapfile.service
gh-actionsgithub-hosted
44182026-06-02 05:24 UTC
su.pam/nix/store/20xj712rsdvj1mas50kd1jdwc1h2w1jm-su.pam
gh-actionsgithub-hosted
44172026-06-02 05:24 UTC
user-units/nix/store/1yz6hv59qg0s3c6izarrzbqgii87jc8i-user-units
gh-actionsgithub-hosted
44162026-06-02 05:24 UTC
login.pam/nix/store/20hjr9n8k1ba8afp2gxj38360pv9x532-login.pam
gh-actionsgithub-hosted
44152026-06-02 05:24 UTC
unit-firewall.service/nix/store/1fy61cq67nab4z897d9m44pvgxby9mg5-unit-firewall.service
gh-actionsgithub-hosted
44142026-06-02 05:24 UTC
hosts/nix/store/1rv4ijby24bpa2z7f474lyn7p08za5ng-hosts
gh-actionsgithub-hosted
44132026-06-02 05:24 UTC
unit-sshd.socket/nix/store/1f6x1pcfg38jrdvvvc1cxdibq32d2qqh-unit-sshd.socket
gh-actionsgithub-hosted
44122026-06-02 05:24 UTC
unit-script-container_claude-pre-start/nix/store/1czxy0qdgmff0gp3mf4im3q1xnwyvai6-unit-script-container_claude-pre-start
gh-actionsgithub-hosted
44112026-06-02 05:24 UTC
unit-script-container-nat-fix-start/nix/store/1dx7andkaidx9fk4mxgadqjcca2fc7ax-unit-script-container-nat-fix-start
gh-actionsgithub-hosted
44102026-06-02 05:24 UTC
chfn.pam/nix/store/13chyck8m0qdmhskdxx92b43cbi439h5-chfn.pam
gh-actionsgithub-hosted
44092026-06-02 05:24 UTC
vlock.pam/nix/store/10ild8gvj4ykf2bnwdrfckcm22wnkv01-vlock.pam
gh-actionsgithub-hosted
44082026-06-02 05:24 UTC
unit-script-container_codex-post-start/nix/store/0cjsvrbfbzd6xraz8xf8l7gwmda4n1nl-unit-script-container_codex-post-start
gh-actionsgithub-hosted
44072026-06-02 05:24 UTC
unit-systemd-nspawn-claude.service/nix/store/0njr02s6jx8qd5ys6dcqkf4igwgdf94r-unit-systemd-nspawn-claude.service
gh-actionsgithub-hosted
44062026-06-02 05:24 UTC
passwd.pam/nix/store/0vmrjiyazmq1nxzwcslxyj78rg7i85dx-passwd.pam
gh-actionsgithub-hosted
44052026-06-02 05:24 UTC
X-Restart-Triggers-dbus-broker/nix/store/02qmn370prm4kn3s6mgbk240n2l9rz4w-X-Restart-Triggers-dbus-broker
gh-actionsgithub-hosted
44042026-06-02 05:24 UTC
X-Reload-Triggers-polkit/nix/store/07aslsp6pyymmfcasl7y144gvgvbbvbr-X-Reload-Triggers-polkit
gh-actionsgithub-hosted
44032026-06-02 05:24 UTC
unit-script-network-local-commands-start/nix/store/08fz701hrpprjd9b0fzcsa1wv1m5jmdc-unit-script-network-local-commands-start
gh-actionsgithub-hosted
44022026-06-02 05:24 UTC
python3-3.13.13-env/nix/store/028a081gvcgifq44hc1kpp0xpgw1h1ir-python3-3.13.13-env
gh-actionsgithub-hosted
44012026-06-02 04:23 UTC
shutdown-ramfs-contents.json/nix/store/9mjzq50l2nprqkqylsflfhmas4244iz6-shutdown-ramfs-contents.json
gh-actionsself-hosted
44002026-06-02 04:23 UTC
unit-network-local-commands.service/nix/store/9idlk01m86185gi48ajjsz6r811s8kp9-unit-network-local-commands.service
gh-actionsself-hosted
43992026-06-02 04:23 UTC
unit-script-suid-sgid-wrappers-start/nix/store/9i18dicb5wv5lisrzkclrya4zbnb3d7h-unit-script-suid-sgid-wrappers-start
gh-actionsself-hosted
43982026-06-02 04:23 UTC
agent-authorized_keys/nix/store/9hgmzryg3ryf3ikbfzymc350m7wz9yxi-agent-authorized_keys
gh-actionsself-hosted
43972026-06-02 04:23 UTC
system-path/nix/store/99qawah6l1vrf9mq4vc1bg4732m9q5cg-system-path
gh-actionsself-hosted
43962026-06-02 04:23 UTC
sshd.conf-final/nix/store/9dzld9a2didiwkq5ysa7sbjv8wskb17l-sshd.conf-final
gh-actionsself-hosted
43952026-06-02 04:23 UTC
unit-sshd.service/nix/store/93ajv6w0z9pjg65i0a250nx7fx3n23mk-unit-sshd.service
gh-actionsself-hosted
43942026-06-02 04:23 UTC
unit-ai-peer-inbox-watcher.service/nix/store/97wpyb19m620zz9hrmxk5a61p0dppfyc-unit-ai-peer-inbox-watcher.service
gh-actionsself-hosted
43932026-06-02 04:23 UTC
unit-tailscaled.service/nix/store/923qrr3ibsnda06i0hsxvvh2paq3nn8m-unit-tailscaled.service
gh-actionsself-hosted
43922026-06-02 04:23 UTC
unit-firewall.service/nix/store/930fmid236kavy25vb0bsapcxibk4v7i-unit-firewall.service
gh-actionsself-hosted
43912026-06-02 04:23 UTC
users-groups.json/nix/store/91w9vn6xdigz847mb033bb7rpgvzihqh-users-groups.json
gh-actionsself-hosted
43902026-06-02 04:23 UTC
X-Restart-Triggers-dbus-broker/nix/store/91rjs6v2n52yyaafr4lxmd6pl0ny5jx9-X-Restart-Triggers-dbus-broker
gh-actionsself-hosted
43892026-06-02 04:23 UTC
initrd-linux-6.18.33/nix/store/8shljdd340g62jpfwzpca6p52y2bv85v-initrd-linux-6.18.33
gh-actionsself-hosted
43882026-06-02 04:23 UTC
etc-skel-.gnupg-gpg.conf/nix/store/91f44pv9fdaks8srr843z8v79ri8x7xl-etc-skel-.gnupg-gpg.conf
gh-actionsself-hosted
43872026-06-02 04:23 UTC
X-Restart-Triggers-sshd/nix/store/905d1jsnc553123dpkw44ijryjjac403-X-Restart-Triggers-sshd
gh-actionsself-hosted
43862026-06-02 04:23 UTC
unit-test-initrd-ssh.service/nix/store/8zywxjz297q2dqn4w3y2dhjcvpp3nh2f-unit-test-initrd-ssh.service
gh-actionsself-hosted
43852026-06-02 04:23 UTC
unit-sshd.service/nix/store/8ysq5i8cp3zvb2gfjq6jliifbvhsnv9b-unit-sshd.service
gh-actionsself-hosted
43842026-06-02 04:23 UTC
unit-dbus-broker.service/nix/store/8vg0cm8jxd4l6p30af35p604px6kj982-unit-dbus-broker.service
gh-actionsself-hosted
43832026-06-02 04:23 UTC
etc-nix-registry.json/nix/store/8vbiwr6xqcgk1dqd3v2fyf766a6qcchz-etc-nix-registry.json
gh-actionsself-hosted
43822026-06-02 04:23 UTC
user/nix/store/8v4indjk8qksfnhk4r30hdfrajrm9fsy-user
gh-actionsself-hosted
43812026-06-02 04:23 UTC
dbus-1/nix/store/8la2r3plnwklsakjbrdbzsnyjzmk9gwn-dbus-1
gh-actionsself-hosted
43802026-06-02 04:23 UTC
unit-microvm-forgejo-runner.service/nix/store/8p9dqrwxm36jgbkrqng1dpg1wd3wpy74-unit-microvm-forgejo-runner.service
gh-actionsself-hosted
43792026-06-02 04:23 UTC
unit-suid-sgid-wrappers.service/nix/store/8hancfzkh3n949p32kr5i05wn3fp44gj-unit-suid-sgid-wrappers.service
gh-actionsself-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.