I just looked it up: apparently they silently uploaded your entire repo with the entire git history to the cloud. A feature not controlled by any settings, operating and retrying silently.

Their excuse was that it was a file indexing optimisation and they forgot to create a toggle or setting around it. As an apology they open sourced the harness, but wiped out the history.

It sounds to me like a good distillation technique if the project has hundreds of commits written by Claude and detailed commit descriptions. Also for completeness Grok did the exact same thing two months ago.

https://www.theregister.com/security/2026/09/22/zai-says-sor...