ZCode Packed Whole Git Histories, Deleted Secrets and All
Z.ai's ZCode packaged whole workspaces, 86.6% of it .git history, for an upload only Z.ai could decrypt, and its privacy toggles never stopped it. Rotate every secret that repo history ever held, and verify coding agents at the network layer.
September 23, 2026 · 9 min read