Moving information changes its governance context even when the bytes do not change.
Developers reported that Z.ai’s ZCode coding assistant packaged and uploaded local workspace material to cloud infrastructure without explicit user consent. Z.ai acknowledged and patched the behavior, attributing it to repository indexing and project-description functionality.
The continuity failure
Local source code, Git history, and project records moved into a new processing context without an explicit authority transition visible to the user.
The GovKM interpretation
Custody, purpose, scope, and disposition should travel with records when they cross systems. A cloud copy is not merely another location; it is a new institutional relationship.
Continuity path: Source/local workspace → Authority/user consent → Context/remote processing → Action/upload → Record/server copy → Disposition → Future Reuse.
Sources
South China Morning Post, September 20–21, 2026; Tom’s Hardware, September 21, 2026.


