← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   142150
root hash   94323690aa7b2bdb4968f7ebcc6bdf42764c6e885e9942f3dd8880d5e7da2cd8
as of   2026-09-08 20:33 UTC
signature   vega-cache-1:fbAdVA+yyN1zvGAD7SmhA7oZyyob0M9qFyu+HnkRPC+exEISFCLkEh9lEgAl5aybkixYQ4M58gYQaeGz9r0ODg==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
78782026-06-02 15:55 UTC
system-applications/nix/store/10pxxqn24plfydmy4j89fs4wl2gj121a-system-applications
gh-actionsgithub-hosted
78772026-06-02 15:55 UTC
etc-nixos-containers-claude.conf/nix/store/q6sqjy4hw6z4akap1s6jjnbxlk2m1xsf-etc-nixos-containers-claude.conf
gh-actionsgithub-hosted
78762026-06-02 15:55 UTC
unit-disk-pressure-warn.service/nix/store/qbrmxrb33a37mlyw8gm7ps7zgcl5fc43-unit-disk-pressure-warn.service
gh-actionsgithub-hosted
78752026-06-02 15:55 UTC
etc-pam-environment/nix/store/plssxvgvf6p4r6qc21cma2k8l0kh1rnh-etc-pam-environment
gh-actionsgithub-hosted
78742026-06-02 15:55 UTC
userdel.pam/nix/store/pl1mhpn6h5ajml2pgb151d557zn0xf6c-userdel.pam
gh-actionsgithub-hosted
78732026-06-02 15:55 UTC
sudo-as-doas/nix/store/pknv1wvawmp4srl6ygry5zfk3xvpgwbl-sudo-as-doas
gh-actionsgithub-hosted
78722026-06-02 15:55 UTC
ld-library-path/nix/store/pjdn6g0wlwmh8h2mzrjc60ncj22sf9rs-ld-library-path
gh-actionsgithub-hosted
78712026-06-02 15:55 UTC
X-Restart-Triggers-systemd-tmpfiles-resetup/nix/store/pi5sl4li59f22qy06pxz99c97zgjf06d-X-Restart-Triggers-systemd-tmpfiles-resetup
gh-actionsgithub-hosted
78702026-06-02 15:55 UTC
runuser.pam/nix/store/pgnplx9yp1a96mx6368w90291ldccgmf-runuser.pam
gh-actionsgithub-hosted
78692026-06-02 15:55 UTC
unit-sshd-keygen.service/nix/store/p620cqn71k8najdxgxb3ij2axfw28i5d-unit-sshd-keygen.service
gh-actionsgithub-hosted
78682026-06-02 15:55 UTC
tmpfiles.d/nix/store/ns3kaf0ipmm5mcg9gw5r8lj9kfywxjs9-tmpfiles.d
gh-actionsgithub-hosted
78672026-06-02 15:55 UTC
agent-authorized_keys/nix/store/nbmkg7a8zcs856msqr0x6c9qalhwd0j7-agent-authorized_keys
gh-actionsgithub-hosted
78662026-06-02 15:55 UTC
security-wrapper-utempter-x86_64-unknown-linux-musl/nix/store/n1pga168l4251dcyfs5kziwlw56zvz4x-security-wrapper-utempter-x86_64-unknown-linux-musl
gh-actionsgithub-hosted
78652026-06-02 15:55 UTC
unit-systemd-nspawn-gemini.service/nix/store/myjj9y14icp4k0wpjs3k1y0gk026jkqp-unit-systemd-nspawn-gemini.service
gh-actionsgithub-hosted
78642026-06-02 15:55 UTC
unit-script-tailscale-udp-gro-start/nix/store/mjqzdwq5bv00hw39kcfs8qyf27aq9bps-unit-script-tailscale-udp-gro-start
gh-actionsgithub-hosted
78632026-06-02 15:55 UTC
unit-script-nix-gc-start/nix/store/mifjg5agmiqznpfdcsjz8xbj4xmhyqk3-unit-script-nix-gc-start
gh-actionsgithub-hosted
78622026-06-02 15:55 UTC
doas.pam/nix/store/m8pwjchpvx881f568vg2gf7hd12gyris-doas.pam
gh-actionsgithub-hosted
78612026-06-02 15:55 UTC
unit-script-container_codex-start/nix/store/mcw4z74gcc2dwz18vy0b83zjn3n09ijr-unit-script-container_codex-start
gh-actionsgithub-hosted
78602026-06-02 15:55 UTC
dhcpcd.conf/nix/store/m3a46697lwv5kyj8pwl23raq11dhq582-dhcpcd.conf
gh-actionsgithub-hosted
78592026-06-02 15:55 UTC
firewall-reload/nix/store/lywldldbrhr9286h8gaqmxwsa6w4smfr-firewall-reload
gh-actionsgithub-hosted
78582026-06-02 15:55 UTC
pihole.toml/nix/store/ld7w33in2b8y8d1xiqlfw4gxrwlginww-pihole.toml
gh-actionsgithub-hosted
78572026-06-02 15:55 UTC
firewall-start/nix/store/lga7bgcm0m4s94nwlkvjiwayia2ifxzy-firewall-start
gh-actionsgithub-hosted
78562026-06-02 15:55 UTC
unit-nixos-upgrade-failure-notify.service/nix/store/lc6gikfgb8q1b66l7183ib2a2cmbk6r2-unit-nixos-upgrade-failure-notify.service
gh-actionsgithub-hosted
78552026-06-02 15:55 UTC
unit-network-addresses-eth0.service/nix/store/l4zpj6fvcdmxz9vznmg0gpd7vda4fnbg-unit-network-addresses-eth0.service
gh-actionsgithub-hosted
78542026-06-02 15:55 UTC
etc/nix/store/l4v1lcfj058l52b263infc3abzrafh4m-etc
gh-actionsgithub-hosted
78532026-06-02 15:55 UTC
append-initrd-secrets/nix/store/kyry3hqnfax37vxd8whdwrl0pj8vhqfs-append-initrd-secrets
gh-actionsgithub-hosted
78522026-06-02 15:55 UTC
etc-gitconfig/nix/store/kis1fps9c2vzb26z4dnifm9mqndvsaxz-etc-gitconfig
gh-actionsgithub-hosted
78512026-06-02 15:55 UTC
unit-systemd-nspawn-codex.service/nix/store/khyw18ackn7hrz02c1lrhrmdvm78xf37-unit-systemd-nspawn-codex.service
gh-actionsgithub-hosted
78502026-06-02 15:55 UTC
etc-hostname/nix/store/kdlc9lr7sk6mlihx88l0jq68bwsqamvs-etc-hostname
gh-actionsgithub-hosted
78492026-06-02 15:55 UTC
etc/nix/store/kcd4n5igrdv2lsxiffbkm84vbcnyqzbl-etc
gh-actionsgithub-hosted
78482026-06-02 15:55 UTC
unit-script-network-addresses-eth0-start/nix/store/kaxha1amd0177l9rxnmaji1m7j88y82n-unit-script-network-addresses-eth0-start
gh-actionsgithub-hosted
78472026-06-02 15:55 UTC
tailscale-initrd-key.age/nix/store/k3bi88hd8j05snnhlhs7v1pb0a8ggk30-tailscale-initrd-key.age
gh-actionsgithub-hosted
78462026-06-02 15:55 UTC
unit-tailscale-udp-gro.service/nix/store/jssibc9yzn7h2fwjwbb34jl60xrmwssy-unit-tailscale-udp-gro.service
gh-actionsgithub-hosted
78452026-06-02 15:55 UTC
sshd.pam/nix/store/jpr3za7zbmx3zn1ys2kjdkswjbc63qja-sshd.pam
gh-actionsgithub-hosted
78442026-06-02 15:55 UTC
unit-script-disk-pressure-warn-start/nix/store/js6mii6v4b764cl0prhjfdy3qi0wy0vk-unit-script-disk-pressure-warn-start
gh-actionsgithub-hosted
78432026-06-02 15:55 UTC
pihole-admin-password.age/nix/store/jnx2anhsj09x933fswlf4jb9900ifdxc-pihole-admin-password.age
gh-actionsgithub-hosted
78422026-06-02 15:55 UTC
unit-pcscd.service/nix/store/jn72m22bcpxhl7c6p3qnyikhryahagsc-unit-pcscd.service
gh-actionsgithub-hosted
78412026-06-02 15:55 UTC
unit-systemd-modules-load.service/nix/store/jlpfjih61s6gmjkdlq4rczvah9sv979x-unit-systemd-modules-load.service
gh-actionsgithub-hosted
78402026-06-02 15:55 UTC
etc-sysctl.d-60-nixos.conf/nix/store/jj4z9akwzbh8fgqx4c5n1sdsfkf4mxak-etc-sysctl.d-60-nixos.conf
gh-actionsgithub-hosted
78392026-06-02 15:55 UTC
unit-systemd-udevd.service/nix/store/jg8va23lkr8yrnnl8yczdq6h33w2sxzj-unit-systemd-udevd.service
gh-actionsgithub-hosted
78382026-06-02 15:55 UTC
etc-screenrc/nix/store/jdd5djw4233q607w5085raqsmmnr6rzy-etc-screenrc
gh-actionsgithub-hosted
78372026-06-02 15:55 UTC
unit-dbus-broker.service/nix/store/j4aj0gcbblhc3vw9fayqg94584x48604-unit-dbus-broker.service
gh-actionsgithub-hosted
78362026-06-02 15:55 UTC
unit-generate-shutdown-ramfs.service/nix/store/iwz4grfkmz14pkyxyxbjygsx4pn80rvg-unit-generate-shutdown-ramfs.service
gh-actionsgithub-hosted
78352026-06-02 15:55 UTC
polkit-1.pam/nix/store/impi12xhjnq60765x4pz2396yz9jmgb3-polkit-1.pam
gh-actionsgithub-hosted
78342026-06-02 15:55 UTC
unit-nix-gc.service/nix/store/ijviccd0xlyy9qla5s8yi4hvcpirqdia-unit-nix-gc.service
gh-actionsgithub-hosted
78332026-06-02 15:55 UTC
etc-ssh-ssh_known_hosts/nix/store/iafzwf4gqab8q02q1hkaql8zh1xvh8zf-etc-ssh-ssh_known_hosts
gh-actionsgithub-hosted
78322026-06-02 15:55 UTC
unit-firewall.service/nix/store/h0yz77zzxw0bjrg12svlz5xm8v47vc79-unit-firewall.service
gh-actionsgithub-hosted
78312026-06-02 15:55 UTC
systemd-run0.pam/nix/store/i94m0nh16v8nvv8qkfxmz17276q1p8yz-systemd-run0.pam
gh-actionsgithub-hosted
78302026-06-02 15:55 UTC
unit-import-gpg-key.service/nix/store/i6m6m35dr0xb0v5nkhxvr5jx5j5zb1sj-unit-import-gpg-key.service
gh-actionsgithub-hosted
78292026-06-02 15:55 UTC
users-groups.json/nix/store/i2vbn731mzhfp6y1mpnj6h3p1g7bbb6a-users-groups.json
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.