← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   89222
root hash   761c74120de30e9067c03d5de81afdf0a34e6568156106f835fa70ed368cb306
as of   2026-08-01 19:10 UTC
signature   vega-cache-1:q6anVj4Qc95uJYjZXVteizee1qg0urDlP0lTVKbjA6/gvEpCKlqXFri+H+0Iv7iaAybOIJXBSsSleRmxoWJgAw==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
608282026-06-17 22:51 UTC
unit-script-nixos-upgrade-start/nix/store/sw5f94pahc4njnq9sa0wxc2aynz566xf-unit-script-nixos-upgrade-start
gh-actionsgithub-hosted
608272026-06-17 22:51 UTC
unit-polkit.service/nix/store/sv7prw0m3v654r121y7ma4mf7br4px27-unit-polkit.service
gh-actionsgithub-hosted
608262026-06-17 22:51 UTC
logrotate.conf/nix/store/ssxks5s491rrzxwf6pr906yjqv51910s-logrotate.conf
gh-actionsgithub-hosted
608252026-06-17 22:51 UTC
X-Restart-Triggers-systemd-sysctl/nix/store/sryfm46qcyyrqrplfq27andalgndms61-X-Restart-Triggers-systemd-sysctl
gh-actionsgithub-hosted
608242026-06-17 22:51 UTC
unit-container-nat-fix.service/nix/store/sbky7wpkrihahh1p79dls3pgwbjdk2sf-unit-container-nat-fix.service
gh-actionsgithub-hosted
608232026-06-17 22:51 UTC
firewall-start/nix/store/rn86qrh8izchx1ijqw520fzjpa4hjqng-firewall-start
gh-actionsgithub-hosted
608222026-06-17 22:51 UTC
hosts/nix/store/sa9k00m20fxnh8ai2cdljhvj6id2ifdj-hosts
gh-actionsgithub-hosted
608212026-06-17 22:51 UTC
unit-network-addresses-enp0s31f6.service/nix/store/ris5d9jslbhzrx768d9fvalpcavzvsly-unit-network-addresses-enp0s31f6.service
gh-actionsgithub-hosted
608202026-06-17 22:51 UTC
unit-script-test-initrd-ssh-start/nix/store/rkfr5cpwbs8ac2wzrnbhslfrgjv72vac-unit-script-test-initrd-ssh-start
gh-actionsgithub-hosted
608192026-06-17 22:51 UTC
unit-nixos-upgrade.timer/nix/store/rh4629fj58iizyyd1w2i552rysgmsn3d-unit-nixos-upgrade.timer
gh-actionsgithub-hosted
608182026-06-17 22:51 UTC
runuser-l.pam/nix/store/rfcm6dpblfgyp5wvvb2ag9643yzazhgx-runuser-l.pam
gh-actionsgithub-hosted
608172026-06-17 22:51 UTC
set-environment/nix/store/rdbn553vmwfxwcfn13fyqy8axl3r6n3r-set-environment
gh-actionsgithub-hosted
608162026-06-17 22:51 UTC
unit-40-enp0s31f6.link/nix/store/r5svn9csc1ycwmzrc8jfzyn42l015pzi-unit-40-enp0s31f6.link
gh-actionsgithub-hosted
608152026-06-17 22:51 UTC
unit-container-claude.service/nix/store/r408q3gpxdac23scwj0cvmmrs1922gv3-unit-container-claude.service
gh-actionsgithub-hosted
608142026-06-17 22:51 UTC
X-Restart-Triggers-systemd-udevd/nix/store/qyzc23bnxyn2kfvxr79bdwy9ny8d1r77-X-Restart-Triggers-systemd-udevd
gh-actionsgithub-hosted
608132026-06-17 22:51 UTC
etc-environment.d-50-systemd-path.conf/nix/store/qz0501x99qv8g7gw159d40flqwrdd2cw-etc-environment.d-50-systemd-path.conf
gh-actionsgithub-hosted
608122026-06-17 22:51 UTC
X-Restart-Triggers-nix-daemon/nix/store/qlzdny4wc6bcikr2cww5d05yp1vvmkjk-X-Restart-Triggers-nix-daemon
gh-actionsgithub-hosted
608112026-06-17 22:51 UTC
etc-fail2ban-fail2ban-status.sh/nix/store/qi96zwqrw4f6lpca84wq4jvk3bn7r68s-etc-fail2ban-fail2ban-status.sh
gh-actionsgithub-hosted
608102026-06-17 22:51 UTC
hwdb.bin/nix/store/pyfzpw2d8nr9llrdwkmw1ma82sm9gikn-hwdb.bin
gh-actionsgithub-hosted
608092026-06-17 22:51 UTC
etc-polkit-1-rules.d-10-nixos.rules/nix/store/q7fzglac6bg96hrfzl8yaca9v9nlaa5n-etc-polkit-1-rules.d-10-nixos.rules
gh-actionsgithub-hosted
608082026-06-17 22:51 UTC
unit-disk-pressure-warn.service/nix/store/qbrmxrb33a37mlyw8gm7ps7zgcl5fc43-unit-disk-pressure-warn.service
gh-actionsgithub-hosted
608072026-06-17 22:51 UTC
user-units/nix/store/pm4ysrpkb0yaarfqrk33z39kcmc3mrvm-user-units
gh-actionsgithub-hosted
608062026-06-17 22:51 UTC
userdel.pam/nix/store/pl1mhpn6h5ajml2pgb151d557zn0xf6c-userdel.pam
gh-actionsgithub-hosted
608052026-06-17 22:51 UTC
sudo-as-doas/nix/store/pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas
gh-actionsgithub-hosted
608042026-06-17 22:51 UTC
ld-library-path/nix/store/pjdn6g0wlwmh8h2mzrjc60ncj22sf9rs-ld-library-path
gh-actionsgithub-hosted
608032026-06-17 22:51 UTC
system-path/nix/store/p87ildglh4ykaq2fzamwhwwsj55l0kpq-system-path
gh-actionsgithub-hosted
608022026-06-17 22:51 UTC
gemini-cli-0.46.0/nix/store/mpdibwcbj65mh37g7wvqi4ikr0anq31q-gemini-cli-0.46.0
gh-actionsgithub-hosted
608012026-06-17 22:51 UTC
etc-bashrc/nix/store/phhkrj0gz9hlh1ff9yr8ly3n6ikrfkmq-etc-bashrc
gh-actionsgithub-hosted
608002026-06-17 22:51 UTC
runuser.pam/nix/store/pgnplx9yp1a96mx6368w90291ldccgmf-runuser.pam
gh-actionsgithub-hosted
607992026-06-17 22:51 UTC
unit-sshd-keygen.service/nix/store/p620cqn71k8najdxgxb3ij2axfw28i5d-unit-sshd-keygen.service
gh-actionsgithub-hosted
607982026-06-17 22:51 UTC
tmpfiles.d/nix/store/nw6gw8qzpwmp2fb178wrcv7948sryx2n-tmpfiles.d
gh-actionsgithub-hosted
607972026-06-17 22:51 UTC
unit-script-import-gpg-key-start/nix/store/nhfx0cn4ryvlkn5nh5lxv8smbvn9ghj9-unit-script-import-gpg-key-start
gh-actionsgithub-hosted
607962026-06-17 22:51 UTC
web-flow.gpg/nix/store/ndjp6rs8ya95dss4j2r32dkj6xpnsifn-web-flow.gpg
gh-actionsgithub-hosted
607952026-06-17 22:51 UTC
agent-authorized_keys/nix/store/nbmkg7a8zcs856msqr0x6c9qalhwd0j7-agent-authorized_keys
gh-actionsgithub-hosted
607942026-06-17 22:51 UTC
etc-hostname/nix/store/n7fpd0vv666p65lr333f5mc92lamqvad-etc-hostname
gh-actionsgithub-hosted
607932026-06-17 22:51 UTC
unit-script-nix-gc-start/nix/store/n44majsfy8wxn91h7bib7mr759vcn1dm-unit-script-nix-gc-start
gh-actionsgithub-hosted
607922026-06-17 22:51 UTC
security-wrapper-utempter-x86_64-unknown-linux-musl/nix/store/n1pga168l4251dcyfs5kziwlw56zvz4x-security-wrapper-utempter-x86_64-unknown-linux-musl
gh-actionsgithub-hosted
607912026-06-17 22:51 UTC
unit-systemd-nspawn-gemini.service/nix/store/myjj9y14icp4k0wpjs3k1y0gk026jkqp-unit-systemd-nspawn-gemini.service
gh-actionsgithub-hosted
607902026-06-17 22:51 UTC
unit-script-tailscale-udp-gro-start/nix/store/mjqzdwq5bv00hw39kcfs8qyf27aq9bps-unit-script-tailscale-udp-gro-start
gh-actionsgithub-hosted
607892026-06-17 22:51 UTC
system-units/nix/store/m97w2n6x3hg9vn2b6iv24g47qzv94d8j-system-units
gh-actionsgithub-hosted
607882026-06-17 22:51 UTC
etc-bashrc/nix/store/mncq1zga1z2wnrj8z0s5sx5dwp7m848p-etc-bashrc
gh-actionsgithub-hosted
607872026-06-17 22:51 UTC
doas.pam/nix/store/m8pwjchpvx881f568vg2gf7hd12gyris-doas.pam
gh-actionsgithub-hosted
607862026-06-17 22:51 UTC
dhcpcd.conf/nix/store/m3a46697lwv5kyj8pwl23raq11dhq582-dhcpcd.conf
gh-actionsgithub-hosted
607852026-06-17 22:51 UTC
firewall-reload/nix/store/lywldldbrhr9286h8gaqmxwsa6w4smfr-firewall-reload
gh-actionsgithub-hosted
607842026-06-17 22:51 UTC
nixos-version/nix/store/lz6xlmfjlhqkm0kpxjzqvjd1anl8w6bh-nixos-version
gh-actionsgithub-hosted
607832026-06-17 22:51 UTC
firewall-start/nix/store/lga7bgcm0m4s94nwlkvjiwayia2ifxzy-firewall-start
gh-actionsgithub-hosted
607822026-06-17 22:51 UTC
unit-nix-daemon.service/nix/store/l9lcpm1mxhd4p3gqvz4269wv7w4cf8c0-unit-nix-daemon.service
gh-actionsgithub-hosted
607812026-06-17 22:51 UTC
system-units/nix/store/ksg3g39s943w3y7x70np8mjbsc736mhv-system-units
gh-actionsgithub-hosted
607802026-06-17 22:51 UTC
unit-network-addresses-eth0.service/nix/store/l4zpj6fvcdmxz9vznmg0gpd7vda4fnbg-unit-network-addresses-eth0.service
gh-actionsgithub-hosted
607792026-06-17 22:51 UTC
append-initrd-secrets/nix/store/kyry3hqnfax37vxd8whdwrl0pj8vhqfs-append-initrd-secrets
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.