← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   143742
root hash   2547a37ae85b1d3190e01728f736b0c8e08f1c4af7304c8731aa3a03e9c8b614
as of   2026-09-09 09:16 UTC
signature   vega-cache-1:imaxWNxupJYa9kD9f2B7uSwZOwqb7vt0Itw1RDe+Tq7mT755/ZbiosbHIDa/yGmb0bK1g4VKzcOM07qehTT+DA==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
57782026-06-02 06:29 UTC
hosts/nix/store/f9w2wki9y28hjxp9vi6s88s1rb1brmi3-hosts
gh-actionsgithub-hosted
57772026-06-02 06:29 UTC
etc-10-nix-darwin-extra-config/nix/store/4sx8xhfkkmi6kv1g4gncrvb5120w89b0-etc-10-nix-darwin-extra-config
gh-actionsgithub-hosted
57762026-06-02 06:29 UTC
patches/nix/store/4kf56vpj5wxg3r3algvhbgqf0pqkj2y7-patches
gh-actionsgithub-hosted
57752026-06-02 06:29 UTC
unit-script-network-addresses-enp0s31f6-start/nix/store/f8rvjcny6gd29m64kycynm5sc53yz03w-unit-script-network-addresses-enp0s31f6-start
gh-actionsgithub-hosted
57742026-06-02 06:29 UTC
darwin-uninstaller/nix/store/4jbr4g2bxz5nyvhc86ml2qwmpa5gnnq6-darwin-uninstaller
gh-actionsgithub-hosted
57732026-06-02 06:29 UTC
etc-hostname/nix/store/f8kadgfmw04wfcplkpn2lkvxfghmrqc7-etc-hostname
gh-actionsgithub-hosted
57722026-06-02 06:29 UTC
system-path/nix/store/f7nr1bm48mkpvlpp0i9h598icy3a35ay-system-path
gh-actionsgithub-hosted
57712026-06-02 06:29 UTC
launchd/nix/store/3qpccfn5g73r1gz5dfc4g5dhrgrqpfn3-launchd
gh-actionsgithub-hosted
57702026-06-02 06:29 UTC
init.lua/nix/store/3gp6v9p238z1ljc08mbbcgbn7wwl6mbw-init.lua
gh-actionsgithub-hosted
57692026-06-02 06:29 UTC
darwin-auto-update/nix/store/3998w6fq3lcx4ka9qkz1j4ijnl1m59n5-darwin-auto-update
gh-actionsgithub-hosted
57682026-06-02 06:29 UTC
etc-pihole-versions/nix/store/f5nj4mvw7yc055npm6lvdksflxsk35yw-etc-pihole-versions
gh-actionsgithub-hosted
57672026-06-02 06:29 UTC
darwin-rebuild/nix/store/2shx8z57scjs1nkfrvcla6r7rg0900qv-darwin-rebuild
gh-actionsgithub-hosted
57662026-06-02 06:29 UTC
etc-ssh-ssh_config/nix/store/f01csf90rgbxx9zw3mknnzzfp47cyp4w-etc-ssh-ssh_config
gh-actionsgithub-hosted
57652026-06-02 06:29 UTC
etc-systemd-logind.conf/nix/store/dyxkczlmfkg0lj0g3cr9jvl7jij0mqmh-etc-systemd-logind.conf
gh-actionsgithub-hosted
57642026-06-02 06:29 UTC
etc-direnvrc/nix/store/2s7jxaw0pyjwrzbgn28n14dnbsmbgciz-etc-direnvrc
gh-actionsgithub-hosted
57632026-06-02 06:29 UTC
etc-jason/nix/store/1rrn4fdbg0l7wab3sbi28b4lqawjck00-etc-jason
gh-actionsgithub-hosted
57622026-06-02 06:29 UTC
nginx.conf/nix/store/dk878368jaicsmrgfnzgnd5gy2gmjdaz-nginx.conf
gh-actionsgithub-hosted
57612026-06-02 06:29 UTC
web-flow.gpg/nix/store/ddimd8q67vp3nrycl6n18jjlmyabkql6-web-flow.gpg
gh-actionsgithub-hosted
57602026-06-02 06:29 UTC
etc-100-nix-darwin.conf/nix/store/2hggvihkki2m16zjbxxzskxabha6qf71-etc-100-nix-darwin.conf
gh-actionsgithub-hosted
57592026-06-02 06:29 UTC
etc-direnv.toml/nix/store/1gfra50554d6bvij0pqv6jv7bq5phnl5-etc-direnv.toml
gh-actionsgithub-hosted
57582026-06-02 06:29 UTC
initrd-linux-7.0.10/nix/store/7w88jda6g3w6ahbgnr55avx8was3gxl9-initrd-linux-7.0.10
gh-actionsgithub-hosted
57572026-06-02 06:29 UTC
unit-script-pihole-seed-adlists-start/nix/store/d2c5knmmy4lpcz0ix5wdkngqpv5x4148-unit-script-pihole-seed-adlists-start
gh-actionsgithub-hosted
57562026-06-02 06:29 UTC
unit-script-container_codex-pre-start/nix/store/cvsag7xzq3kl11nszxp26wywx9winppb-unit-script-container_codex-pre-start
gh-actionsgithub-hosted
57552026-06-02 06:29 UTC
etc-nix.custom.conf/nix/store/14a30fvarpd4f4a9kchj7i9y9aar5s27-etc-nix.custom.conf
gh-actionsgithub-hosted
57542026-06-02 06:29 UTC
system-applications/nix/store/10pxxqn24plfydmy4j89fs4wl2gj121a-system-applications
gh-actionsgithub-hosted
57532026-06-02 06:29 UTC
launchd/nix/store/1a25w360ypg3p45670nxssrf6k2rnw4c-launchd
gh-actionsgithub-hosted
57522026-06-02 06:29 UTC
travel-mode-on/nix/store/1c00n0flkiaym7ajhiz382pn6bfmb6ml-travel-mode-on
gh-actionsgithub-hosted
57512026-06-02 06:29 UTC
unit-container-codex.service/nix/store/cplafymqjw7jjaf7laqla32wyrivrvj9-unit-container-codex.service
gh-actionsgithub-hosted
57502026-06-02 06:29 UTC
users-groups.json/nix/store/clq26dj5m53n6s8s06i4z6ydchi4pwnw-users-groups.json
gh-actionsgithub-hosted
57492026-06-02 06:29 UTC
etc-bashrc/nix/store/clznq0331m6a7damq0g2ynk4dbdp8d6f-etc-bashrc
gh-actionsgithub-hosted
57482026-06-02 06:29 UTC
doas-conf/nix/store/cfndrbbd2wm0kh5nji7521iywx9r14rx-doas-conf
gh-actionsgithub-hosted
57472026-06-02 06:29 UTC
groupmems.pam/nix/store/cddrd57404x819fv7l8vsq9gb3gzr5m5-groupmems.pam
gh-actionsgithub-hosted
57462026-06-02 06:29 UTC
X-Restart-Triggers-systemd-modules-load/nix/store/c97flwhk0qrm5jr62sgywda9z28slhah-X-Restart-Triggers-systemd-modules-load
gh-actionsgithub-hosted
57452026-06-02 06:29 UTC
etc-polkit-1-rules.d-10-nixos.rules/nix/store/c71zmrlnm23g3747g7g7j3bm9zdp8d4y-etc-polkit-1-rules.d-10-nixos.rules
gh-actionsgithub-hosted
57442026-06-02 06:29 UTC
unit-systemd-sysctl.service/nix/store/c46xqx9pb2aabi9d3bqx231jl20jfmmx-unit-systemd-sysctl.service
gh-actionsgithub-hosted
57432026-06-02 06:29 UTC
amy-password.age/nix/store/c440mr001sdmby3yvzybzbgzqa23fwgb-amy-password.age
gh-actionsgithub-hosted
57422026-06-02 06:29 UTC
unit-nix-daemon.service/nix/store/bxg7z2jrflig8yq5hfv1xa9rjb0bbszj-unit-nix-daemon.service
gh-actionsgithub-hosted
57412026-06-02 06:29 UTC
etc-fail2ban-filter.d-openvpn.conf/nix/store/bx9vn94k5vmqz48kkvc1r3rvcdbhgz47-etc-fail2ban-filter.d-openvpn.conf
gh-actionsgithub-hosted
57402026-06-02 06:29 UTC
unit-script-network-addresses-enp0s31f6-pre-stop/nix/store/bnsr99bg7gfpkhcigxgqfy1kbhq2jk0z-unit-script-network-addresses-enp0s31f6-pre-stop
gh-actionsgithub-hosted
57392026-06-02 06:29 UTC
security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl/nix/store/bglbgww3sywgxrbag52yk73aak703dff-security-wrapper-pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas-x86_64-unknown-linux-musl
gh-actionsgithub-hosted
57382026-06-02 06:29 UTC
shutdown-ramfs-contents.json/nix/store/bf5wrnxwa4shr82qa7bl08b5a2fy86cn-shutdown-ramfs-contents.json
gh-actionsgithub-hosted
57372026-06-02 06:29 UTC
Caddyfile-formatted/nix/store/bdca25l2m5xw99bhah6dmybj7yrb0phg-Caddyfile-formatted
gh-actionsgithub-hosted
57362026-06-02 06:29 UTC
useradd.pam/nix/store/b2jbv5kpq4gnbb1al24fdrkwp1w5plhp-useradd.pam
gh-actionsgithub-hosted
57352026-06-02 06:29 UTC
unit-fluent-bit.service/nix/store/avvwjmm1sgl8lphkra2xph72dsphvg9f-unit-fluent-bit.service
gh-actionsgithub-hosted
57342026-06-02 06:29 UTC
unit-network-addresses-eth0.service/nix/store/ard5fw6kwi4x7x6367ykj0px0383mli5-unit-network-addresses-eth0.service
gh-actionsgithub-hosted
57332026-06-02 06:29 UTC
ai-peer-inbox-watcher/nix/store/al1z28pszlqr7mnilbqycvhbq90mhbrw-ai-peer-inbox-watcher
gh-actionsgithub-hosted
57322026-06-02 06:29 UTC
unit-dhcpcd.service/nix/store/ac9yml24r9k7hdgrx1ylvp84gl4gwcmy-unit-dhcpcd.service
gh-actionsgithub-hosted
57312026-06-02 06:29 UTC
unit-ssh-controlmasters.service/nix/store/a9hm0aqbj5wq072pqxjw3lw3hmac86rn-unit-ssh-controlmasters.service
gh-actionsgithub-hosted
57302026-06-02 06:29 UTC
unit-loki.service/nix/store/a1102p0c0qa4h27iamm3fw3vm79ky57m-unit-loki.service
gh-actionsgithub-hosted
57292026-06-02 06:29 UTC
unit-dbus-broker.service/nix/store/9nbygnwiya7qbvr4zmbizhlbcb2lmqc5-unit-dbus-broker.service
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.