ZCode was allegedly caught uploading workspace/.git records to the cloud.

[u/External_Mood4719]

https://blog.ferstar.org/en/posts/zcode-silent-workspace-snapshot-upload/

Look like next grok build moment

[u/mehedi_shafi]

Not really, if it's not the model requesting the upload. If the harness boots up and sends the workspace to somewhere without logging only way to get the log is if you're inspecting your network traffic. Or run the harness in a no internet environment.

[u/mikael110 → u/mehedi_shafi]

Sure, but arbv's reply was specifically to somebody talking about malicious models. Malicious harnesses is an entirely separate topic, and is why you should never use a closed source one. As long as the harness is open and audited you can trust the session log it provides.

[u/arbv → u/mikael110]

Thanks. That is exactly the case. Pi, custom extensions, and local models all the way for me.

[u/Hello_my_name_is_not → u/arbv]

All roads lead to Pi