SpaceXAI open-sourced Grok Build yesterday: the CLI, agent runtime, tools, and TUI. I pointed my agent at all 1.3M lines and asked for the cleverest things inside. Tl;dr of my new article: ⚖️ It has an appeals court. /goal mode won't let the agent call itself done. Three adversarial verifiers whose only job is to refute the claim, told to "default to rejection when uncertain" and hunt for "test theater" 🕵️ A laziness cop watches the first agent for fake completion. Catches "I ran this overnight" against the actual clock, injects facts the agent can't fabricate. Tool calls count as evidence, prose doesn't 💤 It literally "dreams." Memory consolidation is named a dream in the source: a reflective pass that keeps decisions and preferences, throws away tool noise, rewrites "yesterday" into real dates 🔎 Tools are a database, not a prompt. Hundreds of MCP schemas stay hidden. search_tool queries them with BM25, use_tool dispatches, so new tools never wreck the KV cache ⏮️ Undo that survives forgetting. After context compaction it rebuilds the lost history from its own event log and refuses to rewind if it can't prove the restore is safe 🌳 Copy-on-write worktrees. Every parallel subagent gets an isolated snapshot of your dirty tree via reflinks, Btrfs, or overlay before it ever falls back to copying files 🐚 It lies to the shell for speed. Fakes a persistent session across fresh processes, and swaps your find and grep for faster bfs and ugrep while pretending to still be them 🩸 A SIGBUS fix written in blood. A whole crate exists because SQLite crashes on NFS home directories. The comments reconstruct the exact outage that forced every layer 🧬 It ships OpenAI Codex's and opencode's tools verbatim (the notices say so), then XOR-scrambles its own prompts and open-sources the decryptor in the same repo 🎮 And a hidden DOOM clone, /gboom, subtitled "KNEE-DEEP IN THE TOKENS" 🚨 The backdrop: it went public days after a wire-level analysis showed the CLI uploading whole private repos to a Google Cloud bucket (534 pts on HN). Usage limits reset the same day The pattern: the cleverest code in a coding agent is the code that assumes the agent is wrong. Isolate it, audit it, distrust its claims, demand external proof before it can say "done." The model isn't the hard part anymore. Trusting it is.