Finding / grok-build

2026-10-13-grok-build-the-binary-documents-a-cursor-worker-whose-implementation-is-absent-from-the-public-mirror

The binary documents a Cursor worker whose implementation is absent from the public mirror. The shipped artifacts expose a packaging/source discrepancy and a documented execution-backend capability for Cursor Cloud Agents. Private Cursor and Grove paths are absent from public history. Source-location strings do not prove every path is reachable. The probes do not establish when this capability was introduced or that no code changed during the window.

Channel: tagged-release (text and source-location strings in inspected 1.0.45, 1.0.46, 1.0.50 and 1.0.52 artifacts); account-gated and off by default. Half: both. Date: 2026-10-13 (packaging observation, not an introduction date).

Operator consequence: Leave worker startup off on credential-bearing hosts until its authority is understood. Leaving any_repo off alone does not establish a repository allowlist because of the documented clone-pool door. Verify both doors and actual command confinement before enabling the worker. Public permission crates are readable, but they are not a complete account of the installed binary.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-grok-build-the-binary-documents-a-cursor-worker-whose-implementation-is-absent-from-the-public-mirror

Profile citations

Source links

Primary links, including exact changelog lines when available.