The week of July 15, 2026, was defined by trust, ambition, and integration. SpaceXAI open-sourced the Grok Build CLI after a privacy scandal revealed it was secretly uploading users’ entire repositories. Elon Musk confirmed Grok 4.6 — a 2-trillion-parameter model — is finishing training with SpaceX engineering data. Tesla’s 2026 Summer Update brought deep Grok integration into vehicle controls, and Grok Automations launched scheduled and email-triggered AI tasks.

Here is our professional analysis of the developments that mattered this week.

Grok Build Open-Sourced After Privacy Scandal

The biggest developer-platform story of the week wasn’t a model launch — it was a trust failure and its aftermath.

On July 12, security researcher Cereblab published wire-level evidence that the Grok Build CLI was silently packaging users’ entire Git repositories — including SSH keys, password databases, and private documents — as Git Bundles and uploading them to SpaceXAI-controlled Google Cloud storage. The upload was approximately 5.1 GB per repository versus the 192 KB actually needed by the model API, a 27,800x discrepancy. The visible “opt out” toggle only controlled whether SpaceXAI could train on your data — it did not prevent the data from leaving your machine.

Musk publicly pledged to delete all previously uploaded user data and open-source the tool after a security audit. On July 15–16, the full ~844,530-line Rust codebase was published at github.com/xai-org/grok-build under Apache 2.0.

What the open-source release actually delivers

  • Source transparency, not community governance. The code was published as a single commit with no prior Git history, no pull requests accepted, and GitHub issues disabled. External contributions are rejected. This is a far cry from genuinely community-driven projects like OpenCode or Kimi K2.7-Code.
  • Default data retention disabled retroactive to July 12. Previously retained coding data was pledged for deletion, though this has not been independently verified.
  • Security reports now route through HackerOne with bounty payouts ranging from $100 to $20,000.
  • Local-first mode is now possible — Grok Build can run with your own inference backend via config.toml, meaning no data needs to leave your machine.
  • Usage limits were reset for all users, since the caching inefficiencies caused by the bulk uploads had been triggering premature rate caps.
  • Simon Willison noted that tool implementations reuse patterns from OpenAI’s Codex and the OpenCode harness, and found a self-contained Mermaid-diagram terminal renderer.

Why it matters for enterprise teams

The “consent toggle was fake” — it controlled training use, not data exfiltration. The fix was a server-side flag (disable_codebase_upload: true), meaning SpaceXAI retains unilateral control to re-enable it. For enterprise teams evaluating Grok Build, the open-source release is necessary but not sufficient. The trust deficit will persist until independent auditors verify that the server-side controls are permanent and that previously uploaded data has been destroyed. If your organization uses or evaluates Grok Build, treat the local-first mode as the only trustworthy configuration until that verification occurs.

Grok 4.6 — 2-Trillion-Parameter Model Finishing Training

On July 18, Musk stated on X that Grok 4.6 is completing its initial training run. The model is a 2-trillion-parameter build, up from 1.5T for Grok 4.5, and Musk described it as “better in every way.” He hedged that it “might be able to exceed Kimi” — a reference to Moonshot AI’s 2.8T Kimi K3, which launched earlier in July. Inference speed and token efficiency should remain “close to our 1.5T (aka Grok 4.5).”

Musk indicated initial training would complete the week of July 20, with customer availability targeted for August 2026.

SpaceX engineering data enters the training pipeline

On July 21, Musk announced that SpaceX will feed its “massive corpus of world-class engineering data” into Grok’s next training run — excluding anything restricted under U.S. arms export law (ITAR). This gives SpaceXAI a data moat no other AI company can replicate: Tesla (driving and manufacturing data), X (conversational and real-time data), Cursor (developer session data), and now SpaceX (aerospace engineering data spanning 2002 to present).

For enterprise buyers, the SpaceX data pipeline is strategically significant. Engineering and manufacturing firms now have a frontier model trained on domain-specific aerospace and mechanical engineering data — something neither OpenAI nor Anthropic can offer. Whether that translates to measurable performance gains on enterprise tasks remains to be seen, but the data asymmetry is real.

Grok 5 status: still training

Grok 5 has not shipped — it missed both Q1 and Q2 2026 targets. It is reportedly still training on the Colossus 2 supercluster in two variants: 6-trillion and 10-trillion parameters running in parallel. The earliest realistic window is Q3 2026 or later. SpaceXAI reportedly plans to ship a new foundation model roughly every month through end of 2026, making Grok 4.6 the next step in that cadence.

Tesla 2026 Summer Update — Grok Takes the Wheel (Literally)

Tesla’s 2026.26 software update, rolling out at the end of July, represents the deepest Grok integration into Tesla vehicles to date. This is the first time Grok can control core vehicle functions rather than merely answering questions.

New Grok vehicle commands

  • Make phone calls via voice activation
  • Search and play music from the vehicle’s media system
  • Adjust climate settings
  • Open the glovebox
  • Answer questions about your Tesla — range, status, diagnostics
  • “Hey Grok” wake word now available, trained on American English
  • Grok personality options: Storyteller, Unhinged, and Assistant
  • Grok is now available in all of Europe with this update

Automatic Navigation now learns your patterns beyond Home and Work — suggesting regularly visited destinations like school drop-off or gym visits based on calendar and frequent routes. Preferred Routes prioritizes roads you actually take over theoretically faster paths. Both features work with standard navigation and FSD.

Other notable additions

  • Caraoke scoring while parked, with high scores saved to your Tesla profile
  • FSD stats viewable and shareable in the mobile app
  • Arrival Energy battery percentage setting adjustable remotely
  • Custom vehicle wraps sendable from phone to car without USB
  • Rear Display Lock for controlling kids’ content
  • Apple Music queueing from search and artist pages
  • Browser access to cabin camera and microphone with user consent

For enterprise fleet operators, the Grok integration is the most significant development. Voice-activated vehicle controls reduce driver distraction, and the European expansion removes a major geographic limitation. The personality options (including “Unhinged”) are a distinctly SpaceXAI touch — expect enterprise fleet managers to standardize on “Assistant” mode.

Grok Automations — Scheduled and Email-Triggered AI Jobs

SpaceXAI launched Grok Automations on July 16, available at grok.com/automations and on iOS and Android. The feature lets users describe a task once in natural language; Grok then runs it automatically on a schedule or when a matching email arrives.

Schedule triggers (free for all users)

  • Once, daily, weekdays, weekly, monthly, or yearly
  • Set time in your local timezone — morning brief at 8:00 AM, rent reminder on the 1st, etc.
  • Every run creates a fresh conversation saved to run history

Email triggers (SuperGrok only — $30/month)

  • Filters by sender, recipient, or subject line
  • The matching email becomes run context — Grok responds to the actual message content
  • Practical use cases: customer support triage, invoice processing, security alert response

Enterprise implications

Grok Automations puts SpaceXAI in direct competition with workflow automation tools like Zapier and IFTTT — but with natural language configuration instead of visual workflow builders. The email-trigger capability is particularly relevant for support and operations teams that handle structured inbound messages. The SuperGrok-only gating for email triggers means enterprise users will need the $30/month tier at minimum.

The @connector mention system lets automations call specific tools each run, and instructions can include attachments, connectors, skills, and mode selection — making this more capable than simple scheduled prompts. Templates are available, and automations can be paused, resumed, edited, or deleted at any time.

xAI Sues User for CSAM Generation

On July 15, SpaceXAI filed a lawsuit against a South Carolina man, Terry Harwood, for using Grok to create child sexual abuse material (CSAM). This is one of the first cases of an AI company suing a user for model misuse.

SpaceXAI reports it has suspended 52,222 accounts and made 73,604 reports to NCMEC in 2026, resulting in at least 244 arrests. The lawsuit signals that SpaceXAI is prepared to enforce its usage policies through legal action, not just account suspension — a notable escalation in AI platform governance.

Grok 4.3 Reaches Amazon Bedrock

Grok 4.3 became available on Amazon Bedrock on July 17, giving enterprise customers a managed-service deployment path with a 1-million-token context window, configurable reasoning modes, tool calling, and structured output. This is an older model than Grok 4.5, but the Bedrock integration matters for enterprises that standardize on AWS for compliance and procurement reasons. It also gives SpaceXAI distribution through AWS’s enterprise sales channel — a meaningful advantage for reaching buyers who won’t adopt a standalone API.

What to Watch

  • Grok 4.6 launch — If training completes this week as Musk indicated, an August release is plausible. Watch for benchmark leaks and pricing announcements.
  • Grok Build audit results — Independent verification of the data deletion pledge and server-side upload controls is the real test of whether trust has been restored.
  • Odyssey movie pledge — Musk promised Grok Imagine will produce a full-length Odyssey film by year-end. Current clips max at ~15 seconds. Watch for clip-length increases (15s → 60s → 5min) as the leading indicator of whether this is feasible.
  • X open-source pledge — Musk promised X’s entire codebase will be open-sourced after a security audit. No timeline given. If it materializes, it would be unprecedented for a major social platform.
  • Grok Automations enterprise adoption — Whether workflow automation teams adopt Grok-native automations or stick with established platforms like Zapier will depend on connector breadth and reliability over the coming weeks.
  • Grok 5 timeline — Two variants (6T and 10T parameters) still training on Colossus 2. Any timeline update from SpaceXAI moves markets.

Follow Kevin Kaminski on X for daily AI ecosystem updates. Check back next week for the next xAI Weekly.