Selected essay
Zhipu's ZCode “Silent Upload” Incident: A Review and Analysis
Zhipu's ZCode was caught silently uploading entire Git histories: 86.6% of a 313MB pending archive was Git history, and only the vendor held the key to the envelope encryption. This review reconstructs the September 16–21 timeline and the upload pipeline, checks what remains after remediation, open-sourcing and third-party audits, unpacks why the community rejected the “docs generation” explanation, and offers an actionable checklist for regulators, enterprises and developers.

