跪拜 Guibai
← All articles
Backend · Artificial Intelligence · Programmer

Grok Build Goes Open Source After Privacy Backlash, But the Repo Won't Accept Your Code

By cxuanAI ·
Read original on juejin.cn ↗ Google Translate ↗ Alt translation

An AI coding tool caught silently uploading entire repositories now ships as open source, but the repo is a read-only showcase with no community contribution path. Developers who audit the source can verify upload behavior themselves, yet the absence of reproducible builds means the binary you download may still differ from what you read on GitHub.

Summary

A traffic analysis of Grok Build 0.2.93 caught the tool uploading full Git repos—including unread files, history, and .env strings—far beyond what a coding task required. The `/privacy` command arrived as a quick fix, but researchers found whole-repo uploads persisted even with model-training toggles off. On July 15, SpaceXAI open-sourced the Rust CLI, agent runtime, and tool framework under Apache 2.0 and reset all user quotas.

The repo is genuinely inspectable: you can build from source, examine file reads, sandboxing, and upload logic, and point the harness at custom models or local inference via `base_url`. But the project explicitly refuses external pull requests and unsolicited patches, carries a single commit, and has no tagged release or reproducible-build proof that the binary matches the source. Codex CLI and Gemini CLI both accept community contributions; Grok Build does not.

Cursor doubled Grok 4.5 usage quotas in the same window, turning a privacy crisis into a competitive giveaway. The open-sourcing moves trust from a corporate promise to auditable code, but it does not retroactively fix the earlier uploads or independently verify that the current binary has stopped them.

Takeaways
A traffic analysis of Grok Build 0.2.93 confirmed it uploaded full Git repositories, including unread files, Git history, and test .env strings, during normal use.
The `/privacy` command was added to display data-retention status, but whole-repo uploads still occurred in the tested version even with model-training toggles disabled.
xAI open-sourced the Grok Build Rust CLI, agent runtime, and tool framework under Apache 2.0 on July 15 and reset all user quotas.
Grok 4.5 model weights, training code, and xAI cloud services remain closed; only the client-side harness was opened.
The repository accepts no external pull requests or unsolicited security patches, carries a single commit, and has no official GitHub Release.
Reproducible builds, version tags, and signing are absent, so the source code cannot yet be verified against the distributed binary.
Codex CLI and Gemini CLI both accept community Issues and PRs; Grok Build's CONTRIBUTING.md explicitly closes that door.
Cursor doubled Grok 4.5 usage quotas during the same period, amplifying the competitive pressure around the incident.
Conclusions

Open-sourcing the CLI turns a privacy scandal into a trust-repair narrative, but the timing and bundled quota resets make it read more like crisis PR than a philosophical commitment to openness.

Refusing external contributions while applying an Apache 2.0 license creates a strange hybrid: the code is legally forkable, but the upstream project is functionally closed to community development.

A single-commit history and no tagged release mean the repository offers auditability without verifiability—you can read the source, but you cannot confirm the binary you run was built from it.

The competitive response from Cursor, doubling Grok quotas, shows how quickly AI coding-tool vendors weaponize each other's missteps into user-acquisition plays.

Concepts & terms
Reproducible build
A build process that produces a bit-for-bit identical binary from a given source snapshot, allowing independent verification that a distributed binary matches the published source code.
Agent harness
The CLI runtime and tool framework that wraps an AI model, handling file I/O, command execution, sandboxing, and API calls so the model can act as an autonomous coding agent.
From the discussion
Featured comments
听雨舟上

I've never understood this narrative. Caught stealing code, then open-source the client. Isn't the most important thing what they actually did with the code, and how to guarantee that no residual copies remain and are completely deleted?

See top comments, translated →
Source: juejin.cn ↗ Google Translate ↗ Backup ↗