The model did exactly what it was told. The software around the model uploaded the whole repository anyway. A researcher put a coding agent to the simplest possible test.
Source: [Dev.to](https://dev.to/vibeagentmaking/xais-grok-build-uploaded-your-whole-repo-and-the-privacy-toggle-did-nothing-4844)