Vega

A Nix binary cache verified by independent rebuilders. Verify it; do not just trust it.

Every existing Nix cache asks for trust. cache.nixos.org means trusting Hydra; Cachix means trusting the cache owner. Vega's guarantee is the opposite: trust is derived from transparency and independent corroboration.

What Vega does

• Mirrors cache.nixos.org at the edge. Mirrored paths keep their upstream signature; Vega signs only its own builds.
• Promotes a build into the global shared cache only when Vega independently rebuilds the same output from source; distinct-owner agreement is shown as corroboration, not a signing gate.
• Records every attestation in a public, append-only Merkle transparency log with signed tree heads and inclusion and consistency proofs.

Start here

• Configuration: point Nix at the cache.
• Transparency log: audit Vega yourself.
• Reproducibility: how shared promotion works.