buildConfirmed8 publishers SpaceXAI lists Grok 4.7 at $2 and $6 per million tokens against $10 and $50 for GPT-6 Astra and Claude Fable 5.1, and the only per-task figures in the record put a Cursor run at $4.69 against about $9.
Perspective Coverage
8 publishers
- Builder
- Builder 51%
- Operator
- Operator 32%
- Investor
- Investor 17%
Reality
- Evidence60
- Adoption30
- Hype gap+25
- Incentives65
- Confidence58
buildOne report1 publisher Zetaris Cloud routes AI agents' queries to enterprise data where it already lives
Zetaris has launched a cloud harness that lets AI agents query enterprise data in place, citing cost savings of up to 67 percent at one customer. The figure is Zetaris' own before-and-after assessment, so buyers need their own numbers to know if it applies.
Reality
- Evidence30
- Adoption8
- Hype gap+45
- Incentives75
- Confidence40
buildOne report1 publisher Grok 4.7 doubles cost per task at an unchanged per-token price
Grok 4.7 keeps Grok 4.6's $2/$6 token price yet costs $3.74 per task against $1.86, by Artificial Analysis' measurement. Teams that budget from the price sheet will undercount agent spend until they measure tokens per task on their own work.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+45
- Incentives55
- Confidence55
Group-IB says the RemControl Android banking trojan reaches bank customers in six countries and the Middle East via Meta ads and fake Google Play pages. Its server address sits in a Telegram dead-drop, so the operator can move infrastructure without a new build.
Perspective Coverage
4 publishers
- Builder
- Builder 34%
- Operator
- Operator 59%
- Investor
- Investor 7%
Reality
- Evidence65
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence65
The option was written in April, before the June IPO. Exercising it turned newly listed shares into acquisition currency at a price no cash balance would have cleared.
Reality
- Evidence60
- Adoption35
- Hype gap+35
- Incentives70
- Confidence60
Manifold Security reported eight instances across seven command-line agents. The command runs as the user, outside the sandbox, with no approval prompt, and four were still firing when the researchers retested on September 1.
Reality
- Evidence72
- Adoption60
- Hype gap+15
- Incentives55
- Confidence70
Zhipu AI says repository data left only while a project description page was being generated, and that the behaviour is fixed. The developer who found it says earlier versions sent data on every query, and some companies have stopped using ZCode.
Perspective Coverage
3 publishers
- Builder
- Builder 43%
- Operator
- Operator 32%
- Investor
- Investor 25%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence62
Wire-level teardown puts Grok Build's privacy opt-out downstream of the upload
The independent checker cereblab captured grok 0.2.93 sending a never-read repository to a Google Cloud Storage bucket. The privacy opt-out xAI shipped afterwards governs retention, cereblab says, while the same bytes still leave the machine.
Publishers:gist.github.com
Reality
- Evidence66
- Adoption45
- Hype gap−8
- Incentives58
- Confidence62
Grok 4.7 buys 5.9 points of CursorBench at Grok 4.6's token price
xAI built Grok 4.7 on a larger base model with a longer reinforcement-learning run and kept the API at Grok 4.6's rates. The open question for buyers is how many tokens the longer runs burn.
Reality
- Evidence34
- Adoption22
- Hype gap+28
- Incentives82
- Confidence46
Z.ai open-sources ZCode with the uploading code gone from a two-commit history
Two outside bodies reported ZCode's cloud storage bucket empty, and the researcher who found the problem confirms the upload pipeline is gone. The repository Z.ai published holds two commits and not the code that did the uploading.
Reality
- Evidence64
- Adoption46
- Hype gap+32
- Incentives74
- Confidence61
buildOne report1 publisher Claude Code's per-repository memory store lost a rule set for all projects
Both terminal agents recalled planted facts inside a single project across three two-session tests on identical Node repos. Only Grok Build carried a stated convention into an unrelated repo, at about a third of the reported cost.
Reality
- Evidence58
- Adoption25
- Hype gap+14
- Incentives40
- Confidence62
Grok Bot ties write access to Gmail and Salesforce to a personal paid seat
Engadget says SpaceXAI's agent signs into Gmail, LinkedIn and Salesforce and acts for the user, with eligibility running through six individual paid tiers. The only brake described is a human-approval setting.
Reality
- Evidence30
- Adoption15
- Hype gap+20
- Incentives55
- Confidence35
ZCode encrypted a developer's Git history with a key only Z.ai's servers hold
A developer found a 313MB archive of his commercial project queued for upload and could not open it, because the private key sits on Z.ai's back end. Z.ai says the data is destroyed once the page is built.
Reality
- Evidence64
- Adoption38
- Hype gap+30
- Incentives68
- Confidence58
buildOne report1 publisher A repo's core.fsmonitor setting turns an agent's routine git status into code execution
GitSpawn, as summarised in a dev.to write-up of Cloud Security Alliance findings, uses a Git performance setting to run attacker code when a coding agent inspects a project it just opened. Seven agents are named.
Reality
- Evidence32
- Adoption
- Not scored
- Hype gap+18
- Incentives28
- Confidence40
buildOne report1 publisher Opening an untrusted repo made seven coding agents run the program its Git config named
Manifold Security's GitSpawn findings cover eight issues across seven coding agents. The path runs through core.fsmonitor, where a background git status starts a helper the repository chose, outside the agent's sandbox and with no prompt.
Reality
- Evidence34
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence38
buildOne report1 publisher A wiki that accepted GET as an edit gave read-only agents 18,000 writes
The wiki's old software took a plain GET as an edit, so a harness that policed request types could not stop the writes. GitSpawn puts the same gap in the startup git calls of seven coding agents.
Reality
- Evidence42
- Adoption52
- Hype gap+30
- Incentives78
- Confidence45
buildOne report1 publisher Grok 4.6 reaches Foundry, and xAI's fourth catalog in 14 days turns model choice into a purchase order
Two weeks after release, Grok sits in Microsoft's, Amazon's and Google's catalogs. The Foundry listing is a public preview, which is not what the Bedrock deployment got.
Reality
- Evidence42
- Adoption55
- Hype gap+22
- Incentives72
- Confidence50
buildOne report1 publisher Grok Build's real product is the X timeline, not the code generator
SpaceXAI opened its prompt-to-app builder to every Grok plan on August 19 and wired publishing straight into the X feed. The pressure on rivals lands on distribution.
Reality
- Evidence33
- Adoption20
- Hype gap+22
- Incentives72
- Confidence44
buildOne report1 publisher Four frontier models in four days, and the cheapest number in your agent plan has an expiry date
Grok 4.6, Gemini 3.7 Flash, DeepSeek V4 Pro and GLM-5.3 all chase agents that stay on task. The pricing underneath them is moving faster than the benchmarks.
Reality
- Evidence58
- Adoption55
- Hype gap+12
- Incentives68
- Confidence48
buildOne report1 publisher SpaceXAI's new Grok terms make "indirect competitor" a deployment risk
The revised acceptable use policy, dated August 14, 2026, bars customers from assisting anyone building products that compete with SpaceXAI, directly or indirectly. Enforcement runs to termination.
Reality
- Evidence42
- Adoption28
- Hype gap+18
- Incentives68
- Confidence45