❯ Reuters says Z.ai disabled ZCode features after code-upload complaints and released the coding harness source

ResponseReuters reports that users accused ZCode of uploading local code repositories to overseas cloud servers without clear consent. Z.ai apologized and disabled some features. Whether any particular company’s secrets were affected requires case-specific evidence; the complaints alone do not establish that.

Open repositoryThe company has put source for its desktop, web and terminal coding-agent harness in a public repository. Developers can inspect parts of the client and runtime. Open sourcing does not, on its own, verify historical data flows, server-side processing or versions already installed.

Enterprise controlsPermission to access a project is too broad a description for a coding agent. Outbound code paths, defaults and audit logs need to be checkable in practice. An unexpected full-repository upload can force security teams to revisit tool approvals.

▪ SIGNALThe more autonomously a coding agent reads, the more clearly enterprises need to see what it read and where it sent it.