xAI open-sources Grok Build weeks after its Git-repo upload disclosure

xAI open-sourced Grok Build on July 15, 2026, publishing the Rust-based terminal coding-agent harness behind its Grok CLI to GitHub under an Apache 2.0 license. The release comes weeks after security researchers disclosed that earlier versions had been silently uploading users’ full Git repositories.

The move is as much cleanup as open-source strategy. Researchers found that earlier Grok Build versions synced users’ entire repositories, including commit histories and credentials such as API keys and SSH keys, to Google Cloud servers without clear consent; xAI disabled the upload feature in response.

The code published on GitHub covers the agent loop, the tool layer for file read, edit, search and execute, the terminal user interface and an extension system. The open-sourced runtime can now run fully local-first, compiled and pointed at self-hosted inference, which removes the remote dependency at the center of the privacy complaints.

The release stops short of full openness. It does not include Grok 4.5 model weights, and xAI does not accept external code contributions.

Publishing the harness lets outside developers audit exactly what the agent sends and where. Whether that rebuilds trust after the upload disclosure will depend on independent reviews of the now-public code.