xAI's Grok Build Uploaded Your Whole Repo, and the Privacy Toggle Did Nothing
<p><em>The model did exactly what it was told. The software around the model uploaded the whole repository anyway.</em></p> <p>A researcher put a coding agent to the simplest possible test. They created a file called <code>never_read_canary.txt</code>, dropped a unique marker inside it (<code>CANARY-XR47P2-NEVERREAD-UNIQUE</code>), and gave the agent an instruction that left no room for interpretation: "Reply exactly OK, do not read any files." The agent replied OK. It obeyed. It did not read th













