Vendor log monitor

Daily checks of Google's binary transparency logs and other public logs. Last run 2026-09-29 16:35 UTC. Signed results: statements.json.

Logs

LogSizeSince our last checkpointLast updateCosigs on log's noteWitness copies elsewhere
Pixel factory images
developers.google.com/android/binary_transparency/0
1,163unchanged6 days ago015 (9 at this size)
Google system APKs (pre-March)
developers.google.com/android/binary_transparency/google1p/0
134unchanged183 days ago015 (14 at this size)
Google system APKs
gstatic.com/android/binary_transparency/google1p/jwt/0
242unchanged1 day ago0—
Google APKs, 2026/01 shard
gstatic.com/android/binary_transparency/google1p/apk/2026/0
1,797,152unchanged19 days ago0—
Google APKs, 2026/02 shard
android.transparency.goog/google1p/apk/2026/1
375,395consistent 358075 → 375395today5—
Mainline modules, 2026/01 shard
gstatic.com/android/binary_transparency/mainline/modules/2026/0
818unchanged34 days ago0—
Mainline modules, 2026/02 shard
android.transparency.goog/mainline/modules/2026/1
342consistent 321 → 342today5—
log.frem.sh
log.frem.sh
4,840consistent 4049 → 4840today1—
notbefore.net
notbefore.net/log
539head only 491 → 539no date served1—

Consistent: a proof from the checkpoint we stored last run to today's verifies. Head only: the log serves no tiles, so no proof can be fetched; a rollback or a second root at a size we already saw is still caught.

Cross-witness views

Log originViewsAt newest sizeSplit viewsInconsistent
developers.google.com/android/binary_transparency/015900
developers.google.com/android/binary_transparency/google1p/0151400
go.sum database tree16100
tlog.andxor.it15100
log2025-1.rekor.sigstore.dev1100
transparency.dev/armored-witness/firmware_transparency/prod/1151400
Armory Drive Prod 2151500

Views are checkpoints collected from the transparency.dev distributor and witness.gdbsecurity.com. A split view is two roots at one size.

Tiled CT logs: 71 of 71 witnessed checkpoints reproduce from the live tiles.

Coverage

Findings