← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   92835
root hash   7ca7b8e5d43acfc0b73eb6df49a1b9020e218b25f46e48c1f7f19bfc9b8c4a80
as of   2026-08-15 21:00 UTC
signature   vega-cache-1:CKeZrB2tXyBdipfWOUVtqJIUhiCtYnJgedw40JOa0Reb2s9nuN8AQfzqbZjSLqqn/ri3tIqYBH45iHvuvXdtDw==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
448782026-06-12 06:14 UTC
doas-conf/nix/store/cfndrbbd2wm0kh5nji7521iywx9r14rx-doas-conf
gh-actionsgithub-hosted
448772026-06-12 06:14 UTC
groupmems.pam/nix/store/cddrd57404x819fv7l8vsq9gb3gzr5m5-groupmems.pam
gh-actionsgithub-hosted
448762026-06-12 06:14 UTC
unit-systemd-tmpfiles-resetup.service/nix/store/cdavn4w1k7zrg624gamlzn7cw912vzwi-unit-systemd-tmpfiles-resetup.service
gh-actionsgithub-hosted
448752026-06-12 06:14 UTC
etc-polkit-1-rules.d-10-nixos.rules/nix/store/c71zmrlnm23g3747g7g7j3bm9zdp8d4y-etc-polkit-1-rules.d-10-nixos.rules
gh-actionsgithub-hosted
448742026-06-12 06:14 UTC
X-Restart-Triggers-systemd-modules-load/nix/store/c97flwhk0qrm5jr62sgywda9z28slhah-X-Restart-Triggers-systemd-modules-load
gh-actionsgithub-hosted
448732026-06-12 06:14 UTC
etc-fail2ban-filter.d-openvpn.conf/nix/store/bx9vn94k5vmqz48kkvc1r3rvcdbhgz47-etc-fail2ban-filter.d-openvpn.conf
gh-actionsgithub-hosted
448722026-06-12 06:14 UTC
unit-systemd-sysctl.service/nix/store/c46xqx9pb2aabi9d3bqx231jl20jfmmx-unit-systemd-sysctl.service
gh-actionsgithub-hosted
448712026-06-12 06:14 UTC
amy-password.age/nix/store/c440mr001sdmby3yvzybzbgzqa23fwgb-amy-password.age
gh-actionsgithub-hosted
448702026-06-12 06:14 UTC
unit-script-network-addresses-enp0s31f6-pre-stop/nix/store/bnsr99bg7gfpkhcigxgqfy1kbhq2jk0z-unit-script-network-addresses-enp0s31f6-pre-stop
gh-actionsgithub-hosted
448692026-06-12 06:14 UTC
system-shutdown/nix/store/bvniw54j86ybzgzz0nq4li7p5dkfmd14-system-shutdown
gh-actionsgithub-hosted
448682026-06-12 06:14 UTC
unit-dhcpcd.service/nix/store/bhw05555lj1hlmqyc3i68z1jg2l15mjf-unit-dhcpcd.service
gh-actionsgithub-hosted
448672026-06-12 06:14 UTC
security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl/nix/store/bglbgww3sywgxrbag52yk73aak703dff-security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl
gh-actionsgithub-hosted
448662026-06-12 06:14 UTC
unit-ai-peer-inbox-watcher.service/nix/store/b0bi7k45zl4syd4s3cgl61g3cr4d4zsy-unit-ai-peer-inbox-watcher.service
gh-actionsgithub-hosted
448652026-06-12 06:14 UTC
unit-ssh-controlmasters.service/nix/store/a9hm0aqbj5wq072pqxjw3lw3hmac86rn-unit-ssh-controlmasters.service
gh-actionsgithub-hosted
448642026-06-12 06:14 UTC
unit-network-addresses-eth0.service/nix/store/ard5fw6kwi4x7x6367ykj0px0383mli5-unit-network-addresses-eth0.service
gh-actionsgithub-hosted
448632026-06-12 06:14 UTC
unit-loki.service/nix/store/a1102p0c0qa4h27iamm3fw3vm79ky57m-unit-loki.service
gh-actionsgithub-hosted
448622026-06-12 06:14 UTC
unit-logrotate.service/nix/store/a5hbwpzi97v69yfj052d2bglwsfnyf9r-unit-logrotate.service
gh-actionsgithub-hosted
448612026-06-12 06:14 UTC
etc-profile/nix/store/9q9415jf0afdw9gv2ayryfb7l5vdiy9f-etc-profile
gh-actionsgithub-hosted
448602026-06-12 06:14 UTC
etc/nix/store/9pj73yapqp8qc4mpkxjf81c37p0m3m3l-etc
gh-actionsgithub-hosted
448592026-06-12 06:14 UTC
systemd-user.pam/nix/store/9kgxfaaa2danllhgxblw9ngpigkjpig6-systemd-user.pam
gh-actionsgithub-hosted
448582026-06-12 06:14 UTC
unit-network-local-commands.service/nix/store/9idlk01m86185gi48ajjsz6r811s8kp9-unit-network-local-commands.service
gh-actionsgithub-hosted
448572026-06-12 06:14 UTC
X-Restart-Triggers-dbus-broker/nix/store/9ks5vrj5ncl6bg2gs8hyxn2abgy3l9bc-X-Restart-Triggers-dbus-broker
gh-actionsgithub-hosted
448562026-06-12 06:14 UTC
nixos-version/nix/store/9p2f08lk0c55jba1sixw61vk48r1h1y2-nixos-version
gh-actionsgithub-hosted
448552026-06-12 06:14 UTC
sshd.conf-final/nix/store/9dzld9a2didiwkq5ysa7sbjv8wskb17l-sshd.conf-final
gh-actionsgithub-hosted
448542026-06-12 06:14 UTC
etc-nixos-containers-gemini.conf/nix/store/9d50h5r9ai58fz960jw3pnbfbm3m7sfh-etc-nixos-containers-gemini.conf
gh-actionsgithub-hosted
448532026-06-12 06:14 UTC
unit-polkit.service/nix/store/9b9jr3pnayg5z93kwwg1x4g9zp317bws-unit-polkit.service
gh-actionsgithub-hosted
448522026-06-12 06:14 UTC
nixos-system-congo-26.11.20260606.a799d3e/nix/store/9aqmf80z9c2ymmsq99z1walc6ng8rn1f-nixos-system-congo-26.11.20260606.a799d3e
gh-actionsgithub-hosted
448512026-06-12 06:14 UTC
system-units/nix/store/98nbrqz3p9appcic4ivkwz0mgipdx961-system-units
gh-actionsgithub-hosted
448502026-06-12 06:14 UTC
sudo.pam/nix/store/8qiic9ii4x0zaqgyrxsnvhyfgd2vsgji-sudo.pam
gh-actionsgithub-hosted
448492026-06-12 06:14 UTC
jasonodoom.gpg/nix/store/9381h33q88i7jc5xc8s57xv2xgn03smk-jasonodoom.gpg
gh-actionsgithub-hosted
448482026-06-12 06:14 UTC
unit-test-initrd-ssh.service/nix/store/8zywxjz297q2dqn4w3y2dhjcvpp3nh2f-unit-test-initrd-ssh.service
gh-actionsgithub-hosted
448472026-06-12 06:14 UTC
sshd.conf-final/nix/store/97z01nn8rbi7y8s9gr0jlpawdbiyigk7-sshd.conf-final
gh-actionsgithub-hosted
448462026-06-12 06:14 UTC
firewall-reload/nix/store/8pxf77k8sii219ddb387if340d57sifl-firewall-reload
gh-actionsgithub-hosted
448452026-06-12 06:13 UTC
etc-inputrc/nix/store/3w15vj1abpz69lzdhlij2ywmq8asjlfy-etc-inputrc
gh-actionsgithub-hosted
448442026-06-12 06:14 UTC
unit-sshd.socket/nix/store/8l9r3jrcgjphqlhvpk8g2jsq8rbh87in-unit-sshd.socket
gh-actionsgithub-hosted
448432026-06-12 06:14 UTC
firewall-start/nix/store/8fab79nwym9bxa3csw5rr48qfd5nq4zp-firewall-start
gh-actionsgithub-hosted
448422026-06-12 06:14 UTC
dbus-1/nix/store/8kp0ivznl8nxldw6sx8g5nmj20d87wj3-dbus-1
gh-actionsgithub-hosted
448412026-06-12 06:14 UTC
congo-logs-dashboard/nix/store/8cbscggsm4hnqd8gbssy9v6mk7ksxmmn-congo-logs-dashboard
gh-actionsgithub-hosted
448402026-06-12 06:14 UTC
firewall-reload/nix/store/89c2fj8h4yyhgwnps77imhapa6s8zhmr-firewall-reload
gh-actionsgithub-hosted
448392026-06-12 06:14 UTC
X-Restart-Triggers-dbus-broker/nix/store/85r9j5jxhvrm9zv3gm91nykar730dsjv-X-Restart-Triggers-dbus-broker
gh-actionsgithub-hosted
448382026-06-12 06:14 UTC
hosts/nix/store/7wwhydsyjkizgc9j6b1m2zwx5m4qqfyh-hosts
gh-actionsgithub-hosted
448372026-06-12 06:14 UTC
user-units/nix/store/7hlvlq857khgyvap9r8i4pgkf5j66nc1-user-units
gh-actionsgithub-hosted
448362026-06-12 06:14 UTC
unit-generate-shutdown-ramfs.service/nix/store/7mnf16wwmjmim89ikcapb1p2fk26g286-unit-generate-shutdown-ramfs.service
gh-actionsgithub-hosted
448352026-06-12 06:14 UTC
unit-nginx.service/nix/store/7glf7whcxfhvc85flqr1ph2hby8d0f10-unit-nginx.service
gh-actionsgithub-hosted
448342026-06-12 06:14 UTC
etc/nix/store/6z83zz4fj06dch498kir5s0daa8yb0y1-etc
gh-actionsgithub-hosted
448332026-06-12 06:14 UTC
firewall-start/nix/store/79d9n3f55jr8603xlb6gnwp27p4r7wi2-firewall-start
gh-actionsgithub-hosted
448322026-06-12 06:14 UTC
X-Restart-Triggers-systemd-tmpfiles-resetup/nix/store/6swrkppbrm21krp1skmi4i4ai9cssa4f-X-Restart-Triggers-systemd-tmpfiles-resetup
gh-actionsgithub-hosted
448312026-06-12 06:14 UTC
udev-rules/nix/store/6bzygrrh9w90gdjg14w5mixzghc8jrbb-udev-rules
gh-actionsgithub-hosted
448302026-06-12 06:14 UTC
unit-pihole-seed-adlists.service/nix/store/6m5a7snxjlgpf3ywn65j653r01rbcxg8-unit-pihole-seed-adlists.service
gh-actionsgithub-hosted
448292026-06-12 06:14 UTC
unit-nix-gc.timer/nix/store/6lv25mq3i9bnky461nimqz5a25nvlliv-unit-nix-gc.timer
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.