Evidence record / grok-build

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-13-grok-build-the-binary-documents-a-cursor-worker-whose-implementation-is-absent-from-the-public-mirror

The binary documents a Cursor worker whose implementation is absent from the public mirror. The shipped artifacts expose a packaging/source discrepancy and a documented execution-backend capability for Cursor Cloud Agents. Private Cursor and Grove paths are absent from public history. Source-location strings do not prove every path is reachable. The probes do not establish when this capability was introduced or that no code changed during the window.

Channel: tagged-release (text and source-location strings in inspected 1.0.45, 1.0.46, 1.0.50 and 1.0.52 artifacts); account-gated and off by default. Half: both. Date: 2026-10-13 (packaging observation, not an introduction date).

Operator consequence: Leave worker startup off on credential-bearing hosts until its authority is understood. Leaving any_repo off alone does not establish a repository allowlist because of the documented clone-pool door. Verify both doors and actual command confinement before enabling the worker. Public permission crates are readable, but they are not a complete account of the installed binary.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-grok-build-the-binary-documents-a-cursor-worker-whose-implementation-is-absent-from-the-public-mirror

Profile citations

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact