← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   143749
root hash   de52d205f4451955a522cd15bb8b0305713d165637e14041c9b03a11498f8a07
as of   2026-09-10 21:37 UTC
signature   vega-cache-1:+IOwK6bLY/DGpPF1IUkM9s8hBcispTFD9cJ6ABNcDzBib8StvppFtIeOLl/tijrk/OxOvXs8if+y54R93h1UAg==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
5282026-06-01 08:01 UTC
gh-token.age/nix/store/hvv9pxbf86l0965hbans6mx229haan0v-gh-token.age
gh-actionsunknown
5272026-06-01 08:01 UTC
etc-os-release/nix/store/hq9m6ljbamvpdw7k25s91pbn46zrkm59-etc-os-release
gh-actionsunknown
5262026-06-01 08:01 UTC
initrd-ssh-host-ed25519-key.age/nix/store/hdn1apkr9m0vs1f3y27lv2bnc599qcv3-initrd-ssh-host-ed25519-key.age
gh-actionsunknown
5252026-06-01 08:01 UTC
unit-script-sshd-keygen-start/nix/store/hj17zj705ljpkvpikx7dzy2m17mzrali-unit-script-sshd-keygen-start
gh-actionsunknown
5242026-06-01 08:01 UTC
unit-ai-peer-inbox-watcher.service/nix/store/hd1cpg3gkhb1frphmpnc9yv1js10yr00-unit-ai-peer-inbox-watcher.service
gh-actionsunknown
5232026-06-01 08:01 UTC
amy-authorized_keys/nix/store/h7wp68xx9b5pxj2fl216f1xpsbv39vc1-amy-authorized_keys
gh-actionsunknown
5222026-06-01 08:01 UTC
unit-firewall.service/nix/store/h0yz77zzxw0bjrg12svlz5xm8v47vc79-unit-firewall.service
gh-actionsunknown
5212026-06-01 08:01 UTC
unit-verify-upgrade-commits.service/nix/store/h6wscjsdcsy8jw4kh8xrfa7g86imj59s-unit-verify-upgrade-commits.service
gh-actionsunknown
5202026-06-01 08:01 UTC
unit-script-mkswap-swapfile-start/nix/store/gmf6kx4f9a2vflcy98ymnj12iin5pcfx-unit-script-mkswap-swapfile-start
gh-actionsunknown
5192026-06-01 08:01 UTC
codex-0.133.0/nix/store/f4mhzpchhaznb28sj294qiwjvi1k7kjj-codex-0.133.0
gh-actionsunknown
5182026-06-01 08:01 UTC
chsh.pam/nix/store/gghwy3mcllqdbky7vzfi9f47rf20zq8c-chsh.pam
gh-actionsunknown
5172026-06-01 08:01 UTC
unit-tailscaled.service/nix/store/gdb29mxr9l7ynvq88ydklkls8lgq2fw0-unit-tailscaled.service
gh-actionsunknown
5162026-06-01 08:01 UTC
unit-script-suid-sgid-wrappers-start/nix/store/gb3cphkwpidp4fnx4kcyzmqrqa9bfya8-unit-script-suid-sgid-wrappers-start
gh-actionsunknown
5152026-06-01 08:01 UTC
unit-script-container_claude-post-start/nix/store/g6wlk8qvfmw0w7faksmdyn8qniaa59zi-unit-script-container_claude-post-start
gh-actionsunknown
5142026-06-01 08:01 UTC
limits.conf/nix/store/g67aq9p5nr1swghxfy93bn7yd275mm8v-limits.conf
gh-actionsunknown
5132026-06-01 08:01 UTC
system-units/nix/store/fw5xyg17iny6zxsjgnk181w77jpknxa1-system-units
gh-actionsunknown
5122026-06-01 08:01 UTC
unit-NetworkManager.service/nix/store/fsvamlcr75scwcqk5gbgm6sky9q0i973-unit-NetworkManager.service
gh-actionsunknown
5112026-06-01 08:01 UTC
nixos-system-ai-claude-26.05pre-git/nix/store/fqn05zrnvcpmh4sr36qiwl76cid2n8jv-nixos-system-ai-claude-26.05pre-git
gh-actionsunknown
5102026-06-01 08:01 UTC
unit-screen-config.service/nix/store/fms33a7vs0mqcb0yxf2ni8wqzasjcrpd-unit-screen-config.service
gh-actionsunknown
5092026-06-01 08:01 UTC
ask-peer/nix/store/fkclsi9lb86zlap87wbdigknzysa1a5p-ask-peer
gh-actionsunknown
5082026-06-01 08:01 UTC
fluent-bit.yaml/nix/store/fi7p9cvanhszpjdqdb1qpaz7wka1mw0j-fluent-bit.yaml
gh-actionsunknown
5072026-06-01 08:01 UTC
usermod.pam/nix/store/fi2wdickara9wbl93z6vkx1a484rx9jk-usermod.pam
gh-actionsunknown
5062026-06-01 08:01 UTC
nixos-system-ai-codex-26.05pre-git/nix/store/ffk53lfbvqcahvgzcgryw7dj1vfra4jw-nixos-system-ai-codex-26.05pre-git
gh-actionsunknown
5052026-06-01 08:01 UTC
hosts/nix/store/f9w2wki9y28hjxp9vi6s88s1rb1brmi3-hosts
gh-actionsunknown
5042026-06-01 08:01 UTC
system-path/nix/store/f7nr1bm48mkpvlpp0i9h598icy3a35ay-system-path
gh-actionsunknown
5032026-06-01 08:01 UTC
unit-script-network-addresses-enp0s31f6-start/nix/store/f8rvjcny6gd29m64kycynm5sc53yz03w-unit-script-network-addresses-enp0s31f6-start
gh-actionsunknown
5022026-06-01 08:01 UTC
etc-hostname/nix/store/f8kadgfmw04wfcplkpn2lkvxfghmrqc7-etc-hostname
gh-actionsunknown
5012026-06-01 08:01 UTC
etc-pihole-versions/nix/store/f5nj4mvw7yc055npm6lvdksflxsk35yw-etc-pihole-versions
gh-actionsunknown
5002026-06-01 08:01 UTC
etc-ssh-ssh_config/nix/store/f01csf90rgbxx9zw3mknnzzfp47cyp4w-etc-ssh-ssh_config
gh-actionsunknown
4992026-06-01 08:01 UTC
etc-systemd-logind.conf/nix/store/dyxkczlmfkg0lj0g3cr9jvl7jij0mqmh-etc-systemd-logind.conf
gh-actionsunknown
4982026-06-01 08:01 UTC
etc-nixos-containers-gemini.conf/nix/store/dxnsmpn1pxdia263gxin4yyjdhsfksdd-etc-nixos-containers-gemini.conf
gh-actionsunknown
4972026-06-01 08:01 UTC
nginx.conf/nix/store/dk878368jaicsmrgfnzgnd5gy2gmjdaz-nginx.conf
gh-actionsunknown
4962026-06-01 08:01 UTC
web-flow.gpg/nix/store/ddimd8q67vp3nrycl6n18jjlmyabkql6-web-flow.gpg
gh-actionsunknown
4952026-06-01 08:01 UTC
unit-script-pihole-seed-adlists-start/nix/store/d2c5knmmy4lpcz0ix5wdkngqpv5x4148-unit-script-pihole-seed-adlists-start
gh-actionsunknown
4942026-06-01 08:01 UTC
unit-script-container_codex-pre-start/nix/store/cvsag7xzq3kl11nszxp26wywx9winppb-unit-script-container_codex-pre-start
gh-actionsunknown
4932026-06-01 08:01 UTC
etc-bashrc/nix/store/clznq0331m6a7damq0g2ynk4dbdp8d6f-etc-bashrc
gh-actionsunknown
4922026-06-01 08:01 UTC
unit-container-codex.service/nix/store/cplafymqjw7jjaf7laqla32wyrivrvj9-unit-container-codex.service
gh-actionsunknown
4912026-06-01 08:01 UTC
users-groups.json/nix/store/clq26dj5m53n6s8s06i4z6ydchi4pwnw-users-groups.json
gh-actionsunknown
4902026-06-01 08:01 UTC
doas-conf/nix/store/cfndrbbd2wm0kh5nji7521iywx9r14rx-doas-conf
gh-actionsunknown
4892026-06-01 08:00 UTC
etc-polkit-1-rules.d-10-nixos.rules/nix/store/c71zmrlnm23g3747g7g7j3bm9zdp8d4y-etc-polkit-1-rules.d-10-nixos.rules
gh-actionsunknown
4882026-06-01 08:00 UTC
X-Restart-Triggers-systemd-modules-load/nix/store/c97flwhk0qrm5jr62sgywda9z28slhah-X-Restart-Triggers-systemd-modules-load
gh-actionsunknown
4872026-06-01 08:00 UTC
groupmems.pam/nix/store/cddrd57404x819fv7l8vsq9gb3gzr5m5-groupmems.pam
gh-actionsunknown
4862026-06-01 08:00 UTC
unit-systemd-sysctl.service/nix/store/c46xqx9pb2aabi9d3bqx231jl20jfmmx-unit-systemd-sysctl.service
gh-actionsunknown
4852026-06-01 08:00 UTC
unit-nix-daemon.service/nix/store/bxg7z2jrflig8yq5hfv1xa9rjb0bbszj-unit-nix-daemon.service
gh-actionsunknown
4842026-06-01 08:00 UTC
amy-password.age/nix/store/c440mr001sdmby3yvzybzbgzqa23fwgb-amy-password.age
gh-actionsunknown
4832026-06-01 08:00 UTC
etc-fail2ban-filter.d-openvpn.conf/nix/store/bx9vn94k5vmqz48kkvc1r3rvcdbhgz47-etc-fail2ban-filter.d-openvpn.conf
gh-actionsunknown
4822026-06-01 08:00 UTC
unit-script-network-addresses-enp0s31f6-pre-stop/nix/store/bnsr99bg7gfpkhcigxgqfy1kbhq2jk0z-unit-script-network-addresses-enp0s31f6-pre-stop
gh-actionsunknown
4812026-06-01 08:00 UTC
security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl/nix/store/bglbgww3sywgxrbag52yk73aak703dff-security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl
gh-actionsunknown
4802026-06-01 08:00 UTC
shutdown-ramfs-contents.json/nix/store/bf5wrnxwa4shr82qa7bl08b5a2fy86cn-shutdown-ramfs-contents.json
gh-actionsunknown
4792026-06-01 08:00 UTC
Caddyfile-formatted/nix/store/bdca25l2m5xw99bhah6dmybj7yrb0phg-Caddyfile-formatted
gh-actionsunknown

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.