TL;DR<\/p>\n
Open Code: SpaceXAI has opened Grok Build\u2019s coding-agent harness and terminal-interface code under Apache 2.0. Local Control: Developers can inspect the agent loop and compile the harness for a user-selected model endpoint. Upload Response: Tests documented repository transmission, while SpaceXAI disabled uploads and committed to deleting retained coding data. History Limit: The public repository appears to have begun with one commit, limiting scrutiny of earlier upload behavior. <\/p>\n
SpaceXAI has made Grok Build\u2019s coding-agent harness publicly auditable under Apache 2.0 on July 15. Grok Build\u2019s harness gathers context, interprets model responses, and dispatches tools through a terminal user interface. Opening the code followed a\u00a0Grok Build repository-upload incident<\/a>, in which version 0.2.93 secretly transmitted complete Git bundles, portable packages of repository files and commit histories, to an xAI-controlled storage bucket.\u00a0<\/p>\n SpaceXAI also reset usage limits<\/a> after attributing unusually fast depletion to caching inefficiencies. It previously reset beta limits after caching improvements on May 26, making the new reset a separate action rather than part of the code license.<\/p>\n Public repository history appears to have contained one initial release commit<\/a> when checked on July 16. Developers can inspect the current implementation, but that snapshot cannot reveal how SpaceXAI introduced, reviewed, or changed the upload path during private development.<\/p>\n SpaceXAI disabled the secret repository uploads<\/a> after changing the default on July 12. Two server-side flags then changed, and six July 13 retests produced no storage uploads.<\/p>\n SpaceXAI CEO\u00a0 Elon Musk committed to deleting the data<\/a>, but completion still requires independent confirmation.<\/p>\n What the Open Code Lets Developers Control <\/p>\n SpaceXAI publishes its coding-agent harness and terminal interface in the Grok Build repository<\/a>. Its agent loop assembles context and handles model responses. Adjacent components execute commands, render the terminal, review plans, and display inline code differences.<\/p>\n Interactive and headless modes<\/a> let developers work in a terminal or invoke the same tool layer through scripts and bots. Model Context Protocol servers, which use a standard for connecting agents to tools and data, join skills, plugins, hooks, and subagents in extending the harness. SpaceXAI has presented Grok 4.5 for coding-agent workflows<\/a>, while the open harness makes one layer around the still-closed model inspectable.<\/p>\n Developers who compile Grok Build can select a model endpoint through a local configuration file instead of relying only on SpaceXAI\u2019s hosted inference. Both interactive and automated routes expose the same dispatch logic for inspection. Teams can examine which commands the agent invokes, how it assembles workspace context, and which external services receive requests.<\/p>\n Local compilation does not make every setup private by itself. Data handling still depends on the chosen endpoint, enabled tools, network settings, and installed extensions. Interactive mode keeps a person in the terminal for plan review and inline code differences, while headless mode lets scripts or bots invoke the tool layer without that continuous interface.<\/p>\n Claude Code\u2019s subagents and Model Context Protocol integrations<\/a> illustrate how comparable extension systems can broaden an agent\u2019s access beyond its core runtime. Operators will still need to review permissions, network access, and the directories exposed to each Grok Build plugin, hook, or Model Context Protocol server.<\/p>\n First-party modules use Apache 2.0, while third-party components retain their licenses<\/a>. Simon Willison\u2019s count suggests the codebase includes 844,530 lines of Rust<\/a> excluding whitespace and comments, with about 3% appearing to be vendored code.<\/p>\n Developers can now inspect, compile, and adapt the published material, but the repository does not accept outside contributions<\/a>. SpaceXAI directs vulnerability reports to its HackerOne program<\/a> rather than accepting community patches. This means that SpaceXAI still retains control over merged fixes and future changes.<\/p>\n The Upload Mechanism and Open-Source Alternatives <\/p>\n A Grok Build user posting as @a_green_being had discovered that running the tool in a home directory uploaded Secure Shell keys and personal files<\/a>, including a password-manager database, documents, photos, and videos. The listed files illustrate what can be exposed when a coding agent scans the wrong directory.<\/p>\n The 12 GB proxy run of version 0.2.93 sent the transfer in 73 chunks. Model-turn traffic totaled about 192 KB, while a separate storage channel carried 5.10 GiB. Turning off model improvement did not stop the repository uploads because training consent and code transmission used separate controls.<\/p>\n Published code for Grok Code still contains Google Cloud Storage plumbing, although the upload function now returns a hard-coded unavailable error<\/a>. Developers can audit that current state, but the one-commit history does not reconstruct the private code that produced the earlier behavior.<\/p>\n