ZCode, the GLM coding agent, silently uploads your Git history
Points and comments are a snapshot, not live.
ZCode silently uploads entire Git history encrypted to Alibaba Cloud, users cannot decrypt.
A developer reverse-engineered ZCode, Z.ai's desktop AI coding agent, finding it silently packages the entire workspace-including complete .git history, LFS cache, and reflogs-encrypts the archive with envelope encryption (AES-256-CTL wrapped with RSA-OAEP), and uploads it to Aliyun OSS. The private key resides only on Z.ai's servers. UI toggles do not stop the upload, only control training authorization and indexing. The privacy policy does not mention this. The checkpoint directory can be made immutable to prevent uploads, though this disables the rollback feature.
What commenters are saying
Top comments criticized the article for conflating Git history with the Git repository. One noted Claude Code also uploads commit history to Anthropic. Another pointed out that the Linux kernel's commit messages alone total 900MB, arguing 300MB is plausible. A commenter sarcastically remarked even Z.ai employees don't use their own product. The thread split between those concerned about the encrypted upload and those defending similar industry practices.