You know, swival.dev is fully opensource, doesn't hide anything, fully supports GLM, has excellent context management to keep token usage low, and doesn't send anything you didn't ask to the cloud.

I recently began playing around with ZCode. Works pretty well. Super sketchy though if it is in fact silently uploading full git history of every user's projects. This is why we need not only open weight models, but open source harnesses as well. Luckily the project I'm trying ZCode on is already open source (Molecule.dev), and I'm already allowing full telemetry with my other agents/harnesses (e.g., Claude) for this particular project, so it's not a huge deal in my case, but it's obviously a huge deal for anything proprietary.

> However, across the entire policy, FAQs, and changelogs, there is not a single mention of silently packaging and uploading entire workspaces and full Git histories.

So this is criminal hacking, right? It will be prosecuted as criminal hacking? Not in civil court, but criminal court. Because if not... then are we totally done pretending, and we're just openly admitting that computer security law only applies to individuals, and corporations are exempt?

Well - spy agents. Not surprising. But people could have suspected this before surrendering to AI skynet.

This sounds a lot like the same thing Openai did with navier stokes, but Openai is more stealthy about it.

Again. You really should stop using closed source harnesses, just because "It's cheap!".

Built a similar read-scope gate and the fiddly bit was symlinks escaping the project root.

Is this a step forward compared to previous distillations or a step backwards?

I would never trust these Chinese vendors with their tooling or their own inference endpoints.

afaik DeepSeek also trained on everything that was sent to them via OR and that's why you got that massive discount