← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   160512
root hash   d23d399c95b84cf054e6fff5e2db295a8650fd35385477535467a84357bc8311
as of   2026-09-17 17:16 UTC
signature   vega-cache-1:QNjpKY+bGsbE5w/WrcFnJmlwum+TJAf+eXJgO3XD4iMK8TCo5iIoEDCPB3x73pUJXcRtR5RtldH2ZXiHId8PBA==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
669232026-06-22 05:12 UTC
org.nixos.determinate-nix-update.plist/nix/store/z5gb640hzd7d52jjrciq6dkqnkby2nbp-org.nixos.determinate-nix-update.plist
gh-actionsgithub-hosted
669222026-06-22 05:12 UTC
unit-fail2ban.service/nix/store/sz0v523kqiz5bmr1k56sj7g0swa1p4ck-unit-fail2ban.service
gh-actionsgithub-hosted
669212026-06-22 05:12 UTC
X-Restart-Triggers-systemd-sysctl/nix/store/sryfm46qcyyrqrplfq27andalgndms61-X-Restart-Triggers-systemd-sysctl
gh-actionsgithub-hosted
669202026-06-22 05:12 UTC
etc/nix/store/z0d1s3wa93y7anjiiq0f1y9i6ssciwg8-etc
gh-actionsgithub-hosted
669192026-06-22 05:12 UTC
darwin-system-26.11/nix/store/y7j01l9zfjpsmk14775f288c917hfhdw-darwin-system-26.11
gh-actionsgithub-hosted
669182026-06-22 05:12 UTC
unit-pihole-ftl.service/nix/store/sckm0ggjlrq6bdd32svpwzr92lz1k436-unit-pihole-ftl.service
gh-actionsgithub-hosted
669172026-06-22 05:12 UTC
unit-container-nat-fix.service/nix/store/sbky7wpkrihahh1p79dls3pgwbjdk2sf-unit-container-nat-fix.service
gh-actionsgithub-hosted
669162026-06-22 05:12 UTC
logrotate.conf/nix/store/ssxks5s491rrzxwf6pr906yjqv51910s-logrotate.conf
gh-actionsgithub-hosted
669152026-06-22 05:12 UTC
vim-pack-dir/nix/store/yx53ihqw7zq244wxv8smyds79faqwpv2-vim-pack-dir
gh-actionsgithub-hosted
669142026-06-22 05:12 UTC
org.nixos.activate-agenix.plist/nix/store/y34cj5s14si64xpygsp8x29drc637g86-org.nixos.activate-agenix.plist
gh-actionsgithub-hosted
669132026-06-22 05:12 UTC
hosts/nix/store/sa9k00m20fxnh8ai2cdljhvj6id2ifdj-hosts
gh-actionsgithub-hosted
669122026-06-22 05:12 UTC
firewall-start/nix/store/rn86qrh8izchx1ijqw520fzjpa4hjqng-firewall-start
gh-actionsgithub-hosted
669112026-06-22 05:12 UTC
unit-script-test-initrd-ssh-start/nix/store/rkfr5cpwbs8ac2wzrnbhslfrgjv72vac-unit-script-test-initrd-ssh-start
gh-actionsgithub-hosted
669102026-06-22 05:12 UTC
system-path/nix/store/xr8ykrdpkw4hsr30i4fm0gyxydjsqxlr-system-path
gh-actionsgithub-hosted
669092026-06-22 05:12 UTC
system-applications/nix/store/xv3x3ny2kdnyibjn369wb2vgqsfczijs-system-applications
gh-actionsgithub-hosted
669082026-06-22 05:12 UTC
unit-network-addresses-enp0s31f6.service/nix/store/ris5d9jslbhzrx768d9fvalpcavzvsly-unit-network-addresses-enp0s31f6.service
gh-actionsgithub-hosted
669072026-06-22 05:12 UTC
runuser-l.pam/nix/store/rfcm6dpblfgyp5wvvb2ag9643yzazhgx-runuser-l.pam
gh-actionsgithub-hosted
669062026-06-22 05:12 UTC
unit-nixos-upgrade.timer/nix/store/rh4629fj58iizyyd1w2i552rysgmsn3d-unit-nixos-upgrade.timer
gh-actionsgithub-hosted
669052026-06-22 05:12 UTC
packdir-start/nix/store/x2nslj04h9fqlm4hdbn3r1pwbrdpn11c-packdir-start
gh-actionsgithub-hosted
669042026-06-22 05:12 UTC
set-environment/nix/store/rdbn553vmwfxwcfn13fyqy8axl3r6n3r-set-environment
gh-actionsgithub-hosted
669032026-06-22 05:12 UTC
etc-inputrc/nix/store/wn9svz2wbpy0g1s63c1w55n0p29xhln2-etc-inputrc
gh-actionsgithub-hosted
669022026-06-22 05:12 UTC
darwin-manpages/nix/store/wpb10h432hx5w9m8081qv6sxl6p6ic2z-darwin-manpages
gh-actionsgithub-hosted
669012026-06-22 05:12 UTC
unit-script-container_claude-start/nix/store/rcwhiyfdya8cb7pa3pdjk555n6r0a568-unit-script-container_claude-start
gh-actionsgithub-hosted
669002026-06-22 05:12 UTC
etc-pam-environment/nix/store/rbw0pdq7jkq46akckpv1gxwj94rl738v-etc-pam-environment
gh-actionsgithub-hosted
668992026-06-22 05:12 UTC
udev-rules/nix/store/r7v95ghl5a8srji83r4j9mw53c38b68n-udev-rules
gh-actionsgithub-hosted
668982026-06-22 05:12 UTC
unit-40-enp0s31f6.link/nix/store/r5svn9csc1ycwmzrc8jfzyn42l015pzi-unit-40-enp0s31f6.link
gh-actionsgithub-hosted
668972026-06-22 05:12 UTC
direnv-2.37.1/nix/store/ss1jnnxqw07kxnpp55ykbxrh5fhiv751-direnv-2.37.1
gh-actionsgithub-hosted
668962026-06-22 05:12 UTC
darwin-uninstaller/nix/store/rpfr6b66xz4fay2f17q0y4yy20hhwmab-darwin-uninstaller
gh-actionsgithub-hosted
668952026-06-22 05:12 UTC
unit-nixos-upgrade-failure-notify.service/nix/store/r1vh7ms4czi92g6r2dcnsjarxbqhhg13-unit-nixos-upgrade-failure-notify.service
gh-actionsgithub-hosted
668942026-06-22 05:12 UTC
darwin-version/nix/store/qbh13xrbhr151qf4lkhq4g00gwf51cyv-darwin-version
gh-actionsgithub-hosted
668932026-06-22 05:12 UTC
pihole.toml/nix/store/r07j6534gcxb9zwrvwvsygvl8jbf3c9d-pihole.toml
gh-actionsgithub-hosted
668922026-06-22 05:12 UTC
etc-shells/nix/store/s0q73rnvysq1311xg6sslndx0kh0c3jv-etc-shells
gh-actionsgithub-hosted
668912026-06-22 05:12 UTC
set-environment/nix/store/qzjncylnxahdx7miwfhzfny6aasl6bid-set-environment
gh-actionsgithub-hosted
668902026-06-22 05:12 UTC
etc-environment.d-50-systemd-path.conf/nix/store/qz0501x99qv8g7gw159d40flqwrdd2cw-etc-environment.d-50-systemd-path.conf
gh-actionsgithub-hosted
668892026-06-22 05:12 UTC
user-units/nix/store/qwsy792a2mq3msvnzk1kzzbr21mj3j8h-user-units
gh-actionsgithub-hosted
668882026-06-22 05:12 UTC
system-units/nix/store/qxny2mng54ljqll892qf21l8s5p2a82k-system-units
gh-actionsgithub-hosted
668872026-06-22 05:12 UTC
dbus-1/nix/store/qvanlzvdaka1y4sc3mcg1mndz4zar80d-dbus-1
gh-actionsgithub-hosted
668862026-06-22 05:12 UTC
unit-container-gemini.service/nix/store/qvp9nn3zahn9fm9k8s89s3w15q8jj05p-unit-container-gemini.service
gh-actionsgithub-hosted
668852026-06-22 05:12 UTC
activate-system-start/nix/store/q1pbq8bmv7jcczjznpirsgc9rqmmrkzv-activate-system-start
gh-actionsgithub-hosted
668842026-06-22 05:12 UTC
vimplugin-nvim-tree.lua-1.17.0-unstable-2026-06-08/nix/store/pi4bzfa39n393aa6mwkc14rik8k600fl-vimplugin-nvim-tree.lua-1.17.0-unstable-2026-06-08
gh-actionsgithub-hosted
668832026-06-22 05:12 UTC
determinate-nix-update/nix/store/pqc35gdrr5jz55mkbxzdgzpknk3nscjd-determinate-nix-update
gh-actionsgithub-hosted
668822026-06-22 05:12 UTC
etc-101-authorized-keys.conf/nix/store/pi6q4wl856r1wy0nrmyqgr2y2kmj4d3x-etc-101-authorized-keys.conf
gh-actionsgithub-hosted
668812026-06-22 05:12 UTC
X-Restart-Triggers-nix-daemon/nix/store/qlzdny4wc6bcikr2cww5d05yp1vvmkjk-X-Restart-Triggers-nix-daemon
gh-actionsgithub-hosted
668802026-06-22 05:12 UTC
etc-fail2ban-fail2ban-status.sh/nix/store/qi96zwqrw4f6lpca84wq4jvk3bn7r68s-etc-fail2ban-fail2ban-status.sh
gh-actionsgithub-hosted
668792026-06-22 05:12 UTC
unit-disk-pressure-warn.service/nix/store/qbrmxrb33a37mlyw8gm7ps7zgcl5fc43-unit-disk-pressure-warn.service
gh-actionsgithub-hosted
668782026-06-22 05:12 UTC
etc-polkit-1-rules.d-10-nixos.rules/nix/store/q7fzglac6bg96hrfzl8yaca9v9nlaa5n-etc-polkit-1-rules.d-10-nixos.rules
gh-actionsgithub-hosted
668772026-06-22 05:12 UTC
org.nixos.gnupg-agent.plist/nix/store/p949qilc8ggiip9dd3ldbpxg4ndcgdrs-org.nixos.gnupg-agent.plist
gh-actionsgithub-hosted
668762026-06-22 05:12 UTC
userdel.pam/nix/store/pl1mhpn6h5ajml2pgb151d557zn0xf6c-userdel.pam
gh-actionsgithub-hosted
668752026-06-22 05:12 UTC
unit-suid-sgid-wrappers.service/nix/store/pwk5rmzqpaiqixwj468c0mm6xjgsxcn7-unit-suid-sgid-wrappers.service
gh-actionsgithub-hosted
668742026-06-22 05:12 UTC
sync-ai-history/nix/store/p913csrs8cx8lp14jkjq1bb3k5255fs9-sync-ai-history
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.