← VEGA

Transparency log

An append-only Merkle log (RFC 9162) of every attestation. Verify it; do not just trust it.

tree size   179083
root hash   18014ea7a2420b70c57b89296908f88c0bc8c52428d14c5bd76fbaee3e1a076d
as of   2026-10-22 16:39 UTC
signature   vega-cache-1:+LrXsCbumLeRdk1wK6APXwthWMqChtS9U66TWdAcTRgha6tCDkzELZY0HGo84mUitr77MrnJYuDu7PQHTwnWCw==
log key   vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Verify it yourself

# fetch the signed tree head
curl https://vega-cache.dev/log/sth

# an inclusion proof for entry <i>, and a consistency proof between sizes
curl https://vega-cache.dev/log/proof/inclusion/<i>
curl "https://vega-cache.dev/log/proof/consistency?first=<m>&second=<n>"

Find an output

Search the log by store path or its hash to confirm an output is recorded. This is a verification lookup, not a directory of builders.

Entries

#addedoutputlanerunner
97732026-06-03 00:11 UTC
unit-sshd.socket/nix/store/1f6x1pcfg38jrdvvvc1cxdibq32d2qqh-unit-sshd.socket
gh-actionsgithub-hosted
97722026-06-03 00:11 UTC
virtiofsd-agent-home/nix/store/ya47hbl2irr5n223whirb744wlbcipzf-virtiofsd-agent-home
gh-actionsself-hosted
97712026-06-03 00:11 UTC
hosts/nix/store/1rv4ijby24bpa2z7f474lyn7p08za5ng-hosts
gh-actionsgithub-hosted
97702026-06-03 00:11 UTC
unit-firewall.service/nix/store/1fy61cq67nab4z897d9m44pvgxby9mg5-unit-firewall.service
gh-actionsgithub-hosted
97692026-06-03 00:11 UTC
etc-config.json/nix/store/mf1y0fpc5kpqc0fd903iwa140x8pxg6s-etc-config.json
gh-actionsgithub-hosted
97682026-06-03 00:11 UTC
unit-script-container-nat-fix-start/nix/store/1dx7andkaidx9fk4mxgadqjcca2fc7ax-unit-script-container-nat-fix-start
gh-actionsgithub-hosted
97672026-06-03 00:11 UTC
unit-enable-ksm.service/nix/store/y8i1mnr5d2fqmv2w9pyx4i2ivxgpp3nd-unit-enable-ksm.service
gh-actionsself-hosted
97662026-06-03 00:11 UTC
podman-docker-compat-5.8.2/nix/store/y3gjvp9r6bn966wvpnhr3jdhbgs701kw-podman-docker-compat-5.8.2
gh-actionsself-hosted
97652026-06-03 00:11 UTC
wasmtime-40.0.2-lib/nix/store/xnwyc2bs0iqszi1cirq0ipayxhdppdjr-wasmtime-40.0.2-lib
gh-actionsself-hosted
97642026-06-03 00:11 UTC
unit-microvm-codex.service/nix/store/xy5x7myndyv9v3ljia04jzgsmlbkz74v-unit-microvm-codex.service
gh-actionsself-hosted
97632026-06-03 00:11 UTC
unit-script-container_claude-pre-start/nix/store/1czxy0qdgmff0gp3mf4im3q1xnwyvai6-unit-script-container_claude-pre-start
gh-actionsgithub-hosted
97622026-06-03 00:11 UTC
vlock.pam/nix/store/10ild8gvj4ykf2bnwdrfckcm22wnkv01-vlock.pam
gh-actionsgithub-hosted
97612026-06-03 00:11 UTC
chfn.pam/nix/store/13chyck8m0qdmhskdxx92b43cbi439h5-chfn.pam
gh-actionsgithub-hosted
97602026-06-03 00:11 UTC
X-Reload-Triggers-systemd-networkd/nix/store/xwp3jkdfdi4s2g09dy0mi2d7yh3c12ll-X-Reload-Triggers-systemd-networkd
gh-actionsself-hosted
97592026-06-03 00:11 UTC
bosun-browser-runner-token.age/nix/store/xn424ly0m71ifdbraxz9pfja21lh5ffk-bosun-browser-runner-token.age
gh-actionsself-hosted
97582026-06-03 00:11 UTC
packdir-start/nix/store/l3fqvnizfpbpp836r3fg2ws97v1dahrs-packdir-start
gh-actionsgithub-hosted
97572026-06-03 00:11 UTC
unit-script-container_codex-post-start/nix/store/0cjsvrbfbzd6xraz8xf8l7gwmda4n1nl-unit-script-container_codex-post-start
gh-actionsgithub-hosted
97562026-06-03 00:11 UTC
unit-avahi-daemon.service/nix/store/xkxisq0nrk73ry9b1rbf9aqllyf2c63c-unit-avahi-daemon.service
gh-actionsself-hosted
97552026-06-03 00:11 UTC
system-path/nix/store/l09cnblyskagd2ahqwsiyw64amqsn4ki-system-path
gh-actionsgithub-hosted
97542026-06-03 00:11 UTC
unit-systemd-nspawn-claude.service/nix/store/0njr02s6jx8qd5ys6dcqkf4igwgdf94r-unit-systemd-nspawn-claude.service
gh-actionsgithub-hosted
97532026-06-03 00:11 UTC
etc/nix/store/0i881bz48nphszm6li9ljf5xkxy65yiy-etc
gh-actionsgithub-hosted
97522026-06-03 00:11 UTC
passwd.pam/nix/store/0vmrjiyazmq1nxzwcslxyj78rg7i85dx-passwd.pam
gh-actionsgithub-hosted
97512026-06-03 00:11 UTC
unit-tailscaled.service/nix/store/xjs3li143j0psnwlw7y0pvlmpcm5vnhl-unit-tailscaled.service
gh-actionsself-hosted
97502026-06-03 00:11 UTC
microvm-qemu-bosun-browser/nix/store/xk6rgfb051mqdrd7pdq6xp9sywkcmdq3-microvm-qemu-bosun-browser
gh-actionsself-hosted
97492026-06-03 00:11 UTC
virtiofsd-agent-peers/nix/store/xji826icqshr6lzvpfpsvmi9rq850ikk-virtiofsd-agent-peers
gh-actionsself-hosted
97482026-06-03 00:11 UTC
unit-script-display-manager-pre-start/nix/store/xilkazaicn6bardnxfzdyvbnv811kr9j-unit-script-display-manager-pre-start
gh-actionsself-hosted
97472026-06-03 00:11 UTC
fontconfig-etc/nix/store/xhjsc9qylfcjnpkh1flag1dc5x196m93-fontconfig-etc
gh-actionsself-hosted
97462026-06-03 00:11 UTC
unit-podman-prune.service/nix/store/x95rb66svpmhh16hv75ih5qy8kiaav98-unit-podman-prune.service
gh-actionsself-hosted
97452026-06-03 00:11 UTC
X-Restart-Triggers-dbus-broker/nix/store/02qmn370prm4kn3s6mgbk240n2l9rz4w-X-Restart-Triggers-dbus-broker
gh-actionsgithub-hosted
97442026-06-03 00:11 UTC
dconf-system-config/nix/store/xc2hlz5s7wcz5xfcx5hc8m2sp0hqsy7w-dconf-system-config
gh-actionsself-hosted
97432026-06-03 00:11 UTC
unit-script-network-local-commands-start/nix/store/08fz701hrpprjd9b0fzcsa1wv1m5jmdc-unit-script-network-local-commands-start
gh-actionsgithub-hosted
97422026-06-03 00:11 UTC
X-Reload-Triggers-polkit/nix/store/07aslsp6pyymmfcasl7y144gvgvbbvbr-X-Reload-Triggers-polkit
gh-actionsgithub-hosted
97412026-06-03 00:11 UTC
unit-microvm-virtiofsd-.service/nix/store/x7h5n3nzjjq822xc0sjh81ck0kayk66l-unit-microvm-virtiofsd-.service
gh-actionsself-hosted
97402026-06-03 00:11 UTC
python3-3.13.13-env/nix/store/028a081gvcgifq44hc1kpp0xpgw1h1ir-python3-3.13.13-env
gh-actionsgithub-hosted
97392026-06-03 00:10 UTC
etc-zshrc/nix/store/j88wgavp2xj3n8x11pg82vw0zcyzdiq8-etc-zshrc
gh-actionsgithub-hosted
97382026-06-03 00:10 UTC
luajit-2.1.1774638290-env/nix/store/kx54lzvzxab3iwnbwm0kmisvkvskl77z-luajit-2.1.1774638290-env
gh-actionsgithub-hosted
97372026-06-03 00:10 UTC
microvm-ai-gemini-microvm-balloon/nix/store/x4f7nszaa0aac2jbizxkkypi2q08s0ph-microvm-ai-gemini-microvm-balloon
gh-actionsself-hosted
97362026-06-03 00:10 UTC
ghostty-setup/nix/store/x2vin2jjx3dgrqj6rskfbs295ivjnmwc-ghostty-setup
gh-actionsself-hosted
97352026-06-03 00:10 UTC
unit-microvm-pci-devices-gemini.service/nix/store/wzhnfmsjqgk5jh66am1rgainp6lrhwqb-unit-microvm-pci-devices-gemini.service
gh-actionsself-hosted
97342026-06-03 00:10 UTC
vim-pack-dir/nix/store/x2h465savf6azs2cay3lx67b36nsfj9q-vim-pack-dir
gh-actionsself-hosted
97332026-06-03 00:10 UTC
determinate-nix-util-3.21.0/nix/store/x0mc5slpjbqgvmsdakg7blssvns3nq9h-determinate-nix-util-3.21.0
gh-actionsself-hosted
97322026-06-03 00:10 UTC
firewall-reload/nix/store/wzr73m7zc9lkfc93w5qjac02wzs5n60a-firewall-reload
gh-actionsself-hosted
97312026-06-03 00:10 UTC
unit-microvm-pci-devices-codex.service/nix/store/wziv510iv3hfhmsxh3maqvrc3wqqvziz-unit-microvm-pci-devices-codex.service
gh-actionsself-hosted
97302026-06-03 00:10 UTC
etc-bashrc/nix/store/iid82gq546n0dsbcmzv2j613dhfhwmf4-etc-bashrc
gh-actionsgithub-hosted
97292026-06-03 00:10 UTC
org.nixos.darwin-auto-update.plist/nix/store/i73sap0hy9bri0b0imzzj7alaqadxqj6-org.nixos.darwin-auto-update.plist
gh-actionsgithub-hosted
97282026-06-03 00:10 UTC
unit-virbr-ai-netdev.service/nix/store/wzbvxxfs5kcz3gala94zvppjcascaals-unit-virbr-ai-netdev.service
gh-actionsself-hosted
97272026-06-03 00:10 UTC
microvm-store-disk.erofs/nix/store/vh0yaf58wa2avl7ynb67y7iygfkcpyx6-microvm-store-disk.erofs
gh-actionsself-hosted
97262026-06-03 00:10 UTC
etc/nix/store/wxfbmr0pj58imrifpc36hmkwv35fi574-etc
gh-actionsself-hosted
97252026-06-03 00:10 UTC
etc-hostname/nix/store/wvcvzq6jfcqi7m44mjgqxmlqvi7ahvrs-etc-hostname
gh-actionsself-hosted
97242026-06-03 00:10 UTC
terraform-1.15.4/nix/store/b3g7bcs3c488nynqgf69nmp21a216zn2-terraform-1.15.4
gh-actionsgithub-hosted

Lane is the provenance lane and runner is where the build ran (github-hosted or self-hosted). For gh-actions (CI) and owner-push entries the lane is provenance, not a trust verdict on its own: shared trust comes from distinct-owner agreement plus a Vega reproduction. Only github-hosted runners count toward that agreement, since a self-hosted runner is owner-controlled. The vega-repro lane is that reproduction itself: Vega rebuilt the output from source and got the same bytes, the trust-relevant rebuild that gates the shared signature.