Asked Codex to redesign a page; it pushed my repo to OpenAI infra

I think the sane take here is that if you let loose a coding agent in a project, you should assume it can read everything, because at any point it can issue a read tool command to read arbitrary file. If you want to be selective in what you share, a coding harness is probably a bad tool for the job. That said, AI companies still shouldn't be intentionally building features that upload code wholesale because it betrays the users trust. It's like if you hired a cleaner and the first thing it did was go to every room and opened every closet/cabinet. If you let a cleaner in your house, you're basically giving them full access, and if you're not comfortable with that, maybe you shouldn't be hiring a cleaner, but that doesn't excuse the cleaner rummaging through your stuff without a good reason.

Same principle applies to the grok build fiasco a few weeks ago.

It doesn’t “need” to “copy it all”. Of course it has to (temporarily) send necessary code, but the coding agents I use have never just gone and read the entire repo from the first prompt. The whole thing doesn’t even fit in the context window.

I get what you’re saying about how you’re inherently trusting them by using their LLMs, but it’s different from pushing up the entire repo and git history to some server I didn’t ask for. The skill should ask if the user wants to upload to openAI “sites” or whatever the feature is called.

using anything other than a Local model is insecure. Your business agreement is meaningless.

I know the difference between AI reading selected part of the code to get the context and a git sync. Thank You for looking out/down for/on me.

Yeah they really should have a “dev mode” and a “normie mode”. I don’t want anything they could cook up like openai-hosting running, ever.

Agreed - it felt like codex was pushing to my git repo - I said yes, then quickly realised what was already done .