Turns out xAI's Grok Build CLI doesn't just read the files you point it at — it quietly bundles up your entire repo, git history and unredacted .env included, and ships it to a Google Cloud bucket literally named grok-code-session-traces. A researcher proved it on the wire: told the agent "read nothing," planted a canary file, and still recovered it verbatim from the upload.

And of course it does. Where else is a model provider going to get fresh training data now that they've scraped the open web dry? Your private codebase is the last untapped seam. You're not the customer — you're the mine. And you're paying for the shovel.