Accountable Autonomy
Explore the Vaara Resin
Vaara Resin is the chain of autonomous-action receipts. Every allow, escalate and deny an agent produced, hash-chained so a removed one stops reconciling, and checkable by someone who does not trust whoever ran it. Drop a receipt below to verify it here in your tab, or look one up in the public log underneath.
Search the Vaara Resin
by receipt digest, entry digest, or public key
Paste a public key and the log returns every head published with it. No account, no sign-in: the key is the identity, and the answer comes from the log rather than from us. Your private key is never involved and must never be pasted anywhere.
The Vaara Resin
Resin sets around what it caught and keeps it exactly as it was, checkable by whoever finds it later without trusting whoever left it there. This is the public log Vaara publishes heads to. Publishing is opt-in and off by default, so an absence here means nothing was published, not that nothing happened.
log
rekor.sigstore.dev
entries
—
root
—
Before you opt in. A digest reveals no content, no size and no
identity. What it does reveal is that something was published, and when.
Entries carry a public key that generates on your own machine, so they are
pseudonymous rather than anonymous: everything published with one key can be
grouped by anyone, and the moment you point someone at an entry, that key is
publicly yours. Use a separate key per context if you do not want two trails
sharing one pseudonym.
Publication is permanent and irreversible. It cannot be withdrawn,
deleted or corrected once the log integrates it, so there is no erasure to
request afterwards. The log is public and enumerable, which means everyone
rather than only whoever runs it.
The default log, Sigstore Rekor, is operated in the United States by the Linux
Foundation. That matters much less than publishing to everyone, but some buyers
will ask, and Vaara can publish to a self-hosted or EU-operated log instead.
Publishing is also the only usage signal Vaara ever receives, and it exists
because you switched it on, not because anything here collects it.
Have a receipt? Check it here
Optional. The Vaara Resin above needs nothing from you.
Drop a receipt file here, or paste one below. It is read in this tab and
never sent anywhere, so there is nothing to upload and no account to make.