What you can do today

Do not wait for a patch note. Share is publication. Summarize-this-page is a loaded gun. Build’s privacy toggle was not a control.

Chats

Do not share sensitive threads. Revoke old links.

Browse

Never summarize a page you would not open as admin.

Build

Hard veto in config.toml. Then rotate every secret in that tree.

The three files that matter

~/.grok/config.toml

[features]
telemetry = false
codebase_indexing = false
feedback = false

[telemetry]
trace_upload = false
mixpanel_enabled = false

[harness]
disable_codebase_upload = true

Shell profile (defense in depth)

export GROK_TELEMETRY_TRACE_UPLOAD=false
export GROK_TELEMETRY_ENABLED=false

.grokignore

.env*
*.pem
*.key
*.crt
*.p12
*secret*
*password*

Full checklist

What you can do today

Immediate

Short-term

The three files that matter