AI Weekly (Jul 15, 2026): contextualizes OSS release after Jul 10–12 repo-upload security findings.
- Apache 2.0 at xai-org/grok-build; Rust; targets Grok 4.5
- Prior: entire Git repos including .env uploaded to GCS grok-code-session-traces; server-side disable Jul 13 reported
- Usage limits reset for all users
- External contributions not accepted per CONTRIBUTING.md — audit-and-fork, not upstream PR
- Andrew Milich (project lead) framed release as enabling audit that no data leaves machine
- Elon Musk claimed previously uploaded data would be fully removed
Open-sourcing enables audit but does not by itself prove prior uploads or retention fully remediated — verify against security disclosures.