← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   143742
root hash   2547a37ae85b1d3190e01728f736b0c8e08f1c4af7304c8731aa3a03e9c8b614
as of   2026-09-09 07:15 UTC
signature   vega-cache-1:LdJIzP1IB2wLQcfVxTtKdAuKD4cAbEd3STGoFig4aa/Oigo2YO56kYwyBcZpEjqhxEIr5z0UlSLa+kqrQSIXBA==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
66282026-06-02 06:45 UTC
unit-dbus-broker.service/nix/store/j4aj0gcbblhc3vw9fayqg94584x48604-unit-dbus-broker.service
gh-actionsgithub-hosted
66272026-06-02 06:45 UTC
polkit-1.pam/nix/store/impi12xhjnq60765x4pz2396yz9jmgb3-polkit-1.pam
gh-actionsgithub-hosted
66262026-06-02 06:45 UTC
unit-nix-gc.service/nix/store/ijviccd0xlyy9qla5s8yi4hvcpirqdia-unit-nix-gc.service
gh-actionsgithub-hosted
66252026-06-02 06:45 UTC
etc-ssh-ssh_known_hosts/nix/store/iafzwf4gqab8q02q1hkaql8zh1xvh8zf-etc-ssh-ssh_known_hosts
gh-actionsgithub-hosted
66242026-06-02 06:45 UTC
users-groups.json/nix/store/i2vbn731mzhfp6y1mpnj6h3p1g7bbb6a-users-groups.json
gh-actionsgithub-hosted
66232026-06-02 06:45 UTC
systemd-run0.pam/nix/store/i94m0nh16v8nvv8qkfxmz17276q1p8yz-systemd-run0.pam
gh-actionsgithub-hosted
66222026-06-02 06:45 UTC
unit-import-gpg-key.service/nix/store/i6m6m35dr0xb0v5nkhxvr5jx5j5zb1sj-unit-import-gpg-key.service
gh-actionsgithub-hosted
66212026-06-02 06:45 UTC
chpasswd.pam/nix/store/i2v9ngqg069zxdrggah00vhl7wky71as-chpasswd.pam
gh-actionsgithub-hosted
66202026-06-02 06:45 UTC
sshd.pam/nix/store/hygdvgr59x2qq6m4ydsfbnyrizk11v6m-sshd.pam
gh-actionsgithub-hosted
66192026-06-02 06:45 UTC
gh-token.age/nix/store/hvv9pxbf86l0965hbans6mx229haan0v-gh-token.age
gh-actionsgithub-hosted
66182026-06-02 06:45 UTC
unit-script-sshd-keygen-start/nix/store/hj17zj705ljpkvpikx7dzy2m17mzrali-unit-script-sshd-keygen-start
gh-actionsgithub-hosted
66172026-06-02 06:45 UTC
etc-os-release/nix/store/hq9m6ljbamvpdw7k25s91pbn46zrkm59-etc-os-release
gh-actionsgithub-hosted
66162026-06-02 06:45 UTC
initrd-ssh-host-ed25519-key.age/nix/store/hdn1apkr9m0vs1f3y27lv2bnc599qcv3-initrd-ssh-host-ed25519-key.age
gh-actionsgithub-hosted
66152026-06-02 06:45 UTC
unit-script-mkswap-swapfile-start/nix/store/gmf6kx4f9a2vflcy98ymnj12iin5pcfx-unit-script-mkswap-swapfile-start
gh-actionsgithub-hosted
66142026-06-02 06:45 UTC
amy-authorized_keys/nix/store/h7wp68xx9b5pxj2fl216f1xpsbv39vc1-amy-authorized_keys
gh-actionsgithub-hosted
66132026-06-02 06:45 UTC
unit-firewall.service/nix/store/h0yz77zzxw0bjrg12svlz5xm8v47vc79-unit-firewall.service
gh-actionsgithub-hosted
66122026-06-02 06:45 UTC
unit-tailscaled.service/nix/store/gdb29mxr9l7ynvq88ydklkls8lgq2fw0-unit-tailscaled.service
gh-actionsgithub-hosted
66112026-06-02 06:45 UTC
chsh.pam/nix/store/gghwy3mcllqdbky7vzfi9f47rf20zq8c-chsh.pam
gh-actionsgithub-hosted
66102026-06-02 06:45 UTC
unit-script-suid-sgid-wrappers-start/nix/store/gb3cphkwpidp4fnx4kcyzmqrqa9bfya8-unit-script-suid-sgid-wrappers-start
gh-actionsgithub-hosted
66092026-06-02 06:45 UTC
unit-script-container_claude-post-start/nix/store/g6wlk8qvfmw0w7faksmdyn8qniaa59zi-unit-script-container_claude-post-start
gh-actionsgithub-hosted
66082026-06-02 06:45 UTC
limits.conf/nix/store/g67aq9p5nr1swghxfy93bn7yd275mm8v-limits.conf
gh-actionsgithub-hosted
66072026-06-02 06:45 UTC
unit-NetworkManager.service/nix/store/fsvamlcr75scwcqk5gbgm6sky9q0i973-unit-NetworkManager.service
gh-actionsgithub-hosted
66062026-06-02 06:45 UTC
unit-screen-config.service/nix/store/fms33a7vs0mqcb0yxf2ni8wqzasjcrpd-unit-screen-config.service
gh-actionsgithub-hosted
66052026-06-02 06:45 UTC
nixos-system-ai-gemini-26.05pre-git/nix/store/fjh13j1wf8z23pas9rkdi3gr7clr53kv-nixos-system-ai-gemini-26.05pre-git
gh-actionsgithub-hosted
66042026-06-02 06:45 UTC
ask-peer/nix/store/fkclsi9lb86zlap87wbdigknzysa1a5p-ask-peer
gh-actionsgithub-hosted
66032026-06-02 06:45 UTC
fluent-bit.yaml/nix/store/fi7p9cvanhszpjdqdb1qpaz7wka1mw0j-fluent-bit.yaml
gh-actionsgithub-hosted
66022026-06-02 06:45 UTC
usermod.pam/nix/store/fi2wdickara9wbl93z6vkx1a484rx9jk-usermod.pam
gh-actionsgithub-hosted
66012026-06-02 06:45 UTC
hosts/nix/store/f9w2wki9y28hjxp9vi6s88s1rb1brmi3-hosts
gh-actionsgithub-hosted
66002026-06-02 06:45 UTC
unit-script-network-addresses-enp0s31f6-start/nix/store/f8rvjcny6gd29m64kycynm5sc53yz03w-unit-script-network-addresses-enp0s31f6-start
gh-actionsgithub-hosted
65992026-06-02 06:45 UTC
etc-hostname/nix/store/f8kadgfmw04wfcplkpn2lkvxfghmrqc7-etc-hostname
gh-actionsgithub-hosted
65982026-06-02 06:45 UTC
system-path/nix/store/f7nr1bm48mkpvlpp0i9h598icy3a35ay-system-path
gh-actionsgithub-hosted
65972026-06-02 06:45 UTC
etc-pihole-versions/nix/store/f5nj4mvw7yc055npm6lvdksflxsk35yw-etc-pihole-versions
gh-actionsgithub-hosted
65962026-06-02 06:45 UTC
etc-ssh-ssh_config/nix/store/f01csf90rgbxx9zw3mknnzzfp47cyp4w-etc-ssh-ssh_config
gh-actionsgithub-hosted
65952026-06-02 06:45 UTC
nginx.conf/nix/store/dk878368jaicsmrgfnzgnd5gy2gmjdaz-nginx.conf
gh-actionsgithub-hosted
65942026-06-02 06:45 UTC
etc-systemd-logind.conf/nix/store/dyxkczlmfkg0lj0g3cr9jvl7jij0mqmh-etc-systemd-logind.conf
gh-actionsgithub-hosted
65932026-06-02 06:45 UTC
web-flow.gpg/nix/store/ddimd8q67vp3nrycl6n18jjlmyabkql6-web-flow.gpg
gh-actionsgithub-hosted
65922026-06-02 06:45 UTC
unit-script-container_codex-pre-start/nix/store/cvsag7xzq3kl11nszxp26wywx9winppb-unit-script-container_codex-pre-start
gh-actionsgithub-hosted
65912026-06-02 06:45 UTC
unit-script-pihole-seed-adlists-start/nix/store/d2c5knmmy4lpcz0ix5wdkngqpv5x4148-unit-script-pihole-seed-adlists-start
gh-actionsgithub-hosted
65902026-06-02 06:45 UTC
unit-container-codex.service/nix/store/cplafymqjw7jjaf7laqla32wyrivrvj9-unit-container-codex.service
gh-actionsgithub-hosted
65892026-06-02 06:45 UTC
groupmems.pam/nix/store/cddrd57404x819fv7l8vsq9gb3gzr5m5-groupmems.pam
gh-actionsgithub-hosted
65882026-06-02 06:45 UTC
etc-bashrc/nix/store/clznq0331m6a7damq0g2ynk4dbdp8d6f-etc-bashrc
gh-actionsgithub-hosted
65872026-06-02 06:45 UTC
users-groups.json/nix/store/clq26dj5m53n6s8s06i4z6ydchi4pwnw-users-groups.json
gh-actionsgithub-hosted
65862026-06-02 06:45 UTC
doas-conf/nix/store/cfndrbbd2wm0kh5nji7521iywx9r14rx-doas-conf
gh-actionsgithub-hosted
65852026-06-02 06:45 UTC
gemini-cli-0.44.1/nix/store/9ii95vwlsmc460xn7xmmfwa4g8rqimn1-gemini-cli-0.44.1
gh-actionsgithub-hosted
65842026-06-02 06:45 UTC
X-Restart-Triggers-systemd-modules-load/nix/store/c97flwhk0qrm5jr62sgywda9z28slhah-X-Restart-Triggers-systemd-modules-load
gh-actionsgithub-hosted
65832026-06-02 06:45 UTC
unit-systemd-sysctl.service/nix/store/c46xqx9pb2aabi9d3bqx231jl20jfmmx-unit-systemd-sysctl.service
gh-actionsgithub-hosted
65822026-06-02 06:45 UTC
etc-polkit-1-rules.d-10-nixos.rules/nix/store/c71zmrlnm23g3747g7g7j3bm9zdp8d4y-etc-polkit-1-rules.d-10-nixos.rules
gh-actionsgithub-hosted
65812026-06-02 06:45 UTC
amy-password.age/nix/store/c440mr001sdmby3yvzybzbgzqa23fwgb-amy-password.age
gh-actionsgithub-hosted
65802026-06-02 06:45 UTC
unit-nix-daemon.service/nix/store/bxg7z2jrflig8yq5hfv1xa9rjb0bbszj-unit-nix-daemon.service
gh-actionsgithub-hosted
65792026-06-02 06:45 UTC
etc-fail2ban-filter.d-openvpn.conf/nix/store/bx9vn94k5vmqz48kkvc1r3rvcdbhgz47-etc-fail2ban-filter.d-openvpn.conf
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.