Vega

A reproducible-build Nix binary cache, at the edge. Verify it; do not just trust it.

Every existing Nix cache asks for trust. cache.nixos.org means trusting Hydra; Cachix means trusting the cache owner. Vega's guarantee is the opposite: trust is derived from transparency and independent corroboration.

What Vega does

• Mirrors cache.nixos.org at the edge. Mirrored paths keep their upstream signature; Vega signs only its own builds.
• Promotes a build into the global shared cache only when enough independent, reputation-weighted tenants agree on the same output.
• Records every attestation in a public, append-only Merkle transparency log with signed tree heads and inclusion and consistency proofs.

Start here

• Configuration: point Nix at the cache.
• Transparency log: audit Vega yourself.
• Reproducibility: how shared promotion works.