← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   143749
root hash   de52d205f4451955a522cd15bb8b0305713d165637e14041c9b03a11498f8a07
as of   2026-09-11 12:03 UTC
signature   vega-cache-1:3nLaH57q3kfrAOrApb3wOrwjtPX7ZQWEV7B9lsbXFAhEWt7BtjEFF3j5Fv5lsLTYbpA5b2semZfOUzcnlLB/DQ==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
789732026-07-17 17:38 UTC
unit-disk-pressure-warn.timer/nix/store/0nipg502lfazmdyxr13131j825zx62cx-unit-disk-pressure-warn.timer
gh-actionsgithub-hosted
789722026-07-17 17:38 UTC
unit-ssh-controlmasters.service/nix/store/0j9jxy4hzqk6kn9mdphhmlnjklfl72h5-unit-ssh-controlmasters.service
gh-actionsgithub-hosted
789712026-07-17 17:38 UTC
firewall-start/nix/store/04hhrc9jg3w3wvfhly8figlr2zfjn69z-firewall-start
gh-actionsgithub-hosted
789702026-07-17 17:38 UTC
etc-ssh-ssh_known_hosts/nix/store/0fr6b0r7vsxhg6rfz8nb24k7s14fkaxq-etc-ssh-ssh_known_hosts
gh-actionsgithub-hosted
789692026-07-17 17:38 UTC
polkit-1.pam/nix/store/0g9bnwp5lbrjpb5zy4lrjbksv6pndpw2-polkit-1.pam
gh-actionsgithub-hosted
789682026-07-17 17:38 UTC
unit-fluent-bit.service/nix/store/0c0dwqz9h605zd54dfzkifk8g9m032pb-unit-fluent-bit.service
gh-actionsgithub-hosted
789672026-07-17 17:33 UTC
loki-config.json/nix/store/zrygz4ss1ihrrlpq42vk0dfh7ikpiyp4-loki-config.json
gh-actionsgithub-hosted
789662026-07-17 17:33 UTC
unit-container-nat-fix.service/nix/store/zkppjxskbhsvgd83dhyz3cbfijpbxb5l-unit-container-nat-fix.service
gh-actionsgithub-hosted
789652026-07-17 17:33 UTC
unit-fail2ban.service/nix/store/zhrm2hrin0z6szm4aln2vf6gvj5l17xv-unit-fail2ban.service
gh-actionsgithub-hosted
789642026-07-17 17:33 UTC
unit-script-network-addresses-enp0s31f6-pre-stop/nix/store/zhjljvn7wgz16p5a21nzxh3xzg299j11-unit-script-network-addresses-enp0s31f6-pre-stop
gh-actionsgithub-hosted
789632026-07-17 17:33 UTC
unit-script-sshd-keygen-start/nix/store/z49sds6xl329w26cw2gjsnf6hin0yk4b-unit-script-sshd-keygen-start
gh-actionsgithub-hosted
789622026-07-17 17:33 UTC
tmpfiles.d/nix/store/z5p8hivshn632l82rkiksf0kmrcakc3p-tmpfiles.d
gh-actionsgithub-hosted
789612026-07-17 17:33 UTC
runuser.pam/nix/store/ymlvlzglm6hv6vc0lg77kkx1vqdy7wi9-runuser.pam
gh-actionsgithub-hosted
789602026-07-17 17:33 UTC
groupadd.pam/nix/store/yd8apxm0f9931wb262q5g3an9wpj1wrn-groupadd.pam
gh-actionsgithub-hosted
789592026-07-17 17:33 UTC
user-units/nix/store/yc4g1wp3ab1cf7akl813fsdzsnp7h843-user-units
gh-actionsgithub-hosted
789582026-07-17 17:33 UTC
unit-script-network-addresses-eth0-start/nix/store/yb70ypp732kppka8zl7w7hg60ppr3sb6-unit-script-network-addresses-eth0-start
gh-actionsgithub-hosted
789572026-07-17 17:33 UTC
unit-sshd.socket/nix/store/yaa4n7zv1cqxk3zzhfg3ichc80vlxba4-unit-sshd.socket
gh-actionsgithub-hosted
789562026-07-17 17:33 UTC
etc-gitconfig/nix/store/y8q16gffaw7jdfcf997wncpz5mbnjdl8-etc-gitconfig
gh-actionsgithub-hosted
789552026-07-17 17:33 UTC
user-units/nix/store/y638mz2a4z9svf2i8qn7xr9rvw137iwx-user-units
gh-actionsgithub-hosted
789542026-07-17 17:33 UTC
unit-pihole-ftl.service/nix/store/y51czsqvqil41ci25l1yj9z6mjxrfy53-unit-pihole-ftl.service
gh-actionsgithub-hosted
789532026-07-17 17:33 UTC
unit-script-network-addresses-eth0-start/nix/store/y1mw5k06i2nvj9k011yp81c3xncv0dnv-unit-script-network-addresses-eth0-start
gh-actionsgithub-hosted
789522026-07-17 17:33 UTC
etc/nix/store/xy80x7qa8xqfy6s035fryg4qswdw28kk-etc
gh-actionsgithub-hosted
789512026-07-17 17:33 UTC
tmpfiles.d/nix/store/xj4m24y1k0gm5pkvi4ipb2k6p8jyfxzp-tmpfiles.d
gh-actionsgithub-hosted
789502026-07-17 17:33 UTC
unit-script-container_codex-post-start/nix/store/x64p07nch74sa273lpyqrydjwnkq0f4q-unit-script-container_codex-post-start
gh-actionsgithub-hosted
789492026-07-17 17:33 UTC
unit-import-gpg-key.service/nix/store/x7xpc4frpx4072mz2k554rv09kinz60s-unit-import-gpg-key.service
gh-actionsgithub-hosted
789482026-07-17 17:33 UTC
unit-script-nginx-pre-start/nix/store/x5ccfrxg6nj72y55ssvcwxnv11qbr6yz-unit-script-nginx-pre-start
gh-actionsgithub-hosted
789472026-07-17 17:33 UTC
unit-script-mkswap-swapfile-start/nix/store/x51p0yalmrvf1hsxrkzjfvc8fiq1pkh1-unit-script-mkswap-swapfile-start
gh-actionsgithub-hosted
789462026-07-17 17:33 UTC
limits.conf/nix/store/x3bk5pc2k0hy32nj1ndypymd1isbdvcb-limits.conf
gh-actionsgithub-hosted
789452026-07-17 17:33 UTC
append-initrd-secrets/nix/store/wngymk8qj7hs7phq4f82mn83348d0i74-append-initrd-secrets
gh-actionsgithub-hosted
789442026-07-17 17:33 UTC
X-Restart-Triggers-systemd-sysctl/nix/store/wmkmym85w5k1vi92xsdw44barqlsdbaq-X-Restart-Triggers-systemd-sysctl
gh-actionsgithub-hosted
789432026-07-17 17:33 UTC
chsh.pam/nix/store/wmmprip96y7s2gyhlzh5maxbpbisjmrj-chsh.pam
gh-actionsgithub-hosted
789422026-07-17 17:33 UTC
unit-script-container_codex-pre-start/nix/store/wjm3pbvxjmjcnbd8n0ar6nxzg5qynqhk-unit-script-container_codex-pre-start
gh-actionsgithub-hosted
789412026-07-17 17:33 UTC
unit-systemd-nspawn-claude.service/nix/store/wd680dn7hqjv505bw1dma0fa4ghriavr-unit-systemd-nspawn-claude.service
gh-actionsgithub-hosted
789402026-07-17 17:33 UTC
etc-inputrc/nix/store/w9m06gw0zv7px81nip005ya9ig445p4n-etc-inputrc
gh-actionsgithub-hosted
789392026-07-17 17:33 UTC
nix.conf/nix/store/w784rx77acim7mw8s2vdgx4qjf8sld44-nix.conf
gh-actionsgithub-hosted
789382026-07-17 17:33 UTC
nixos-system-congo-26.11.20260708.0bb7ec5/nix/store/w3040apc32ylfz3bxjiinf9nzy5ldjc5-nixos-system-congo-26.11.20260708.0bb7ec5
gh-actionsgithub-hosted
789372026-07-17 17:33 UTC
hwdb.bin/nix/store/vxby2b83bzmk734hdxqfl0nyk7az29s1-hwdb.bin
gh-actionsgithub-hosted
789362026-07-17 17:33 UTC
unit-sshd.service/nix/store/vpxvi5g7m6bdqrb7mw58fwh12wyh11cf-unit-sshd.service
gh-actionsgithub-hosted
789352026-07-17 17:33 UTC
etc-zprofile/nix/store/zznl286wjynggzl1i4g57bxpdfdvygqs-etc-zprofile
gh-actionsgithub-hosted
789342026-07-17 17:33 UTC
claude-code-2.1.206/nix/store/sfl7gbiih7bfbqh14h244052pa4426k3-claude-code-2.1.206
gh-actionsgithub-hosted
789332026-07-17 17:33 UTC
etc-zshenv/nix/store/zw0krf3bhbz3skpzx4p03p77ax777bai-etc-zshenv
gh-actionsgithub-hosted
789322026-07-17 17:33 UTC
etc-ssh-ssh_config/nix/store/vn5vmw4k8l1f8npalqwpk26dl2f8q1ih-etc-ssh-ssh_config
gh-actionsgithub-hosted
789312026-07-17 17:33 UTC
darwin-version/nix/store/zrpsarfv6ymbznj4l08vh1zif06y1zfs-darwin-version
gh-actionsgithub-hosted
789302026-07-17 17:33 UTC
unit-test-initrd-ssh.service/nix/store/vdzqknk8yfcamw5d2hrznm94p8cm0gpc-unit-test-initrd-ssh.service
gh-actionsgithub-hosted
789292026-07-17 17:33 UTC
etc-100-tailnet-hardening.conf/nix/store/yx7vhjaw32kayb843fx39fvr1j7ww4k4-etc-100-tailnet-hardening.conf
gh-actionsgithub-hosted
789282026-07-17 17:33 UTC
unit-tailscaled.service/nix/store/v24cpjk297qwmfbzjfwpzv1b715bp2yc-unit-tailscaled.service
gh-actionsgithub-hosted
789272026-07-17 17:33 UTC
org.nixos.gnupg-agent.plist/nix/store/yvgz79k9bmd0h3nc3skrwacj32wn2z9v-org.nixos.gnupg-agent.plist
gh-actionsgithub-hosted
789262026-07-17 17:33 UTC
unit-NetworkManager.service/nix/store/sxpzsb34508ddpnxkwqglly8wm3jvl4m-unit-NetworkManager.service
gh-actionsgithub-hosted
789252026-07-17 17:33 UTC
init.lua/nix/store/y58y4x73g00cn2w2fy09055bzqmf0vvg-init.lua
gh-actionsgithub-hosted
789242026-07-17 17:33 UTC
useradd.pam/nix/store/sjqda7csghckizg74wrwsvjdb82n7qn1-useradd.pam
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.