🔥 重点（0-2 条，只有真正重磅才写。每条 ≤200 字：发生了什么+关键数字/细节+对创业者意味着什么。优先引用深挖材料里的具体事实，附链接）

⚡ 异动（表格：项目|变化|一句话解读。只列「48h 增量」中行尾带"今日异动:"标记的项目（新版本、star 异常增长）。标注"（无新变化）"的行即使显示版本号也绝不列入异动表。观察池项目名尾有"连续活跃"标注的，在该行尾加"→建议升级主清单"。全无变化就整节省略）

↕ 新面孔（最多 3 条，每条按小卡片写，让读者看完就懂是什么、怎么赚、门槛多高：
名称 ⭐star数｜一句话说清是干嘛的、解决谁的什么问题
💰 商业参考：变现方式/定价/融资情况（情报包里有数据就写数据，如 "$25M A轮"、"定价 $20/月"）；情报包没有收入数据时，基于同类产品给出务实的月收入估算区间并标注"（估算）"，再补一句启动门槛（业余可做/需全职/需资金投入）
🔗 链接）

💡 切入点（最多 2 个，每个 ≤80 字，具体可执行）

== 重点事件深挖（原文节选+HN热评）==

深挖·[HN热帖 260分] ZCode, the GLM coding agent, silently uploads your Git history

链接：https://tokenstead.ai/guides/zcode-silent-git-history-upload
正文节选：Guides

ZCode uploads your entire git history, and only Z.ai holds the key

Published Sep 18, 2026

▲ 0 Join free to upvote

On September 18, 2026, a developer going by ferstar published a reverse-engineering walkthrough of ZCode, the AI coding desktop app from Z.ai, the Beijing-headquartered company behind the GLM family of open-weight models - the same models running on local rigs all over the local-AI community, including GLM-5.3-Flash, tracked on this site. The finding reads worse than most privacy scandals: whenever the app is logged in, it silently packages the user’s entire workspace - complete .git history, LFS asset cache, reflogs, and global app configs - encrypts it, and uploads the archive to Aliyun OSS, Alibaba Cloud’s object storage. The researcher’s own capture: a 313MB encrypted archive built from a 345MB commercial workspace, 42,411 files, with 564 failed upload attempts logged while the researcher investigated.

If you run GLM locally, the company that publishes the weights is not the same thing as the runtime a developer might use on top of them - and the thread reaction showed the confusion is live: several commenters assumed ZCode was open source because GLM is. It is not. The weights are open; the harness is closed, and it is Z.ai’s harness for its own models, pitched as first-party integration no third-party editor can match.

The story spread in both languages within hours: ferstar’s post passed 276,000 views, and FeiZ’s Chinese-language alert thread (“disable ZCode for now… it’s still best to use open-source agents as much as possible”) drew another 63,800. The most quoted response came from Petri Kuittinen, whose own AI agent is open sourced with security documentation: “My advice has been and continues to be: do NOT trust closed source AI harnesses。”

The detail that turned a suspicious directory into a story: the encryption key. ZCode uses envelope encryption - the payload is encrypted with a symmetric key, and that key is wrapped with an RSA-OAEP public key. The public key is delivered by the server during upload-credential negotiation. The corresponding private key lives only in Z.ai’s cloud. ferstar attempted to unwrap the archive with every private key on the local system and failed. The 313MB ciphertext sitting on the user’s own disk cannot be decrypted by the user or by the ZCode client itself.

ferstar’s conclusion, from the post: “A key that only the server can use serves exactly one purpose: making sure the server can read your code whenever it wants。”

What gets packed

The packaging manifest is stored locally in plaintext, and it is specific. For a 42,411-file snapshot:

The .git directory alone is 86.6 percent of the payload.

![Payload breakdown of one 42,411-file snapshot: the .git directory is 86.6 percent of the encrypted archive. ::: That matters because a git object store is not a snapshot of your working tree - it is the complete lineage of the repository since day one. Deleted-in-a-later-commit API keys are in there. Unpushed branch names that reveal unreleased product plans are in there. Internal hostnames and repo paths from .git/config are in there. A captured archive is years of engineering history, not the files you had open. The upload pipeline, reconstructed from the client’s app.asar : the client requests credentials from zcode.z.ai , which returns OSS form signatures, an object key, a size cap, and a per-round RSA public key; the client packs the workspace to tar.gz, encrypts with AES-256-CTR, wraps the symmetric key, and POSTs the archive directly to Aliyu
HN 热评：LLM-paraphrased from the original post: https://blog.ferstar.org/en/posts/zcode-silent-workspace-sna... | That the article cannot distinguish between the git history 'git log' and the git repository, which is meant here, tells a lot. Claude Fable uploads my git history (git log) every day to the Anthropic servers! | You people are making too much of a fuss; even we don't use our own products.

深挖·[TechCrunch AI] A startup that builds other startups raised $100M and is all-in on physical AI

链接：https://techcrunch.com/2026/09/18/a-startup-that-builds-other-startups-raised-100m-and-is-all-in-on-physical-ai/
正文节选：Four years ago, a startup lab launched that wasn’t quite an incubator, accelerator program, or venture firm. UP.Labs, as it was called then, built startups designed to solve problems for corporate customers such as Alaska Airlines and Porsche, as well as for the outside world.

The firm still has the same mission — albeit with a critical addition to its approach, a new name, and a $100 million investment from Silversmith Capital Partners. Vantora, as the firm is now called, continues to work with its corporate customers, including some new ones in industrial manufacturing that it declined to name, and in the oil and gas sector.

But now, it’s more focused on building startups solely for its corporate customers, and not for the broader market.

Founder and CEO John Kuolt told TechCrunch that Vantora is moving toward a “proprietary M&A pipeline.” This means Vantora will still build startups for its corporate partners, which invest in the ventures and serve as their first customers. But those corporate partners now have the option to fold the startups into their core businesses — and essentially keep them to themselves.

That shift has influenced Vantora’s increased focus on physical AI startups, according to Kuolt.

In the past, Vantora would end up spiking ideas that were strategic to its corporate partners, but too sensitive to bring to the outside world.

“We were missing on the biggest value problems, which had the biggest upside because of that,” Kuolt said in a recent interview. “Imagine you’re a Fortune 100 industrial company and you need to retrofit all of your hardware and machines for autonomy. You need to own that, it needs to be sovereign, and you can’t rely on a third party to go do that for you. You need to own that intelligence layer. They’re never going to let us go sell that to their competitors.”

This change has allowed Vantora to “unlock big physical AI use cases,” according to Kuolt, including with its existing customers.

For example, the firm came up with an idea to use AI to advance the business of its partner J.B. Hunt. “They said there is no way you can take this out to the world, and so we passed on it,” he said, adding that this proprietary model now allows Vantora to pursue it.

The firm launched in 2022 with Porsche as its first corporate partner. Since then, Vantora has launched several startups for Porsche and struck deals with Alaska Airlines, J.B. Hunt, Wabash, and TDG, the parent of Ashley Furniture.

In its early days, UP.Labs was tied — although never financially — to venture firm Up.Partners. While Vantora still shares office space with the California-based VC, it is its own entity, Kuolt explained, noting that the $100 million from Silversmith is the company’s first outside investment.

Topics

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

You can contact or verify outreach from Kirsten by emailing kirsten.korosec.07 on Signal.

Last day to book an exhibit table is September 18. Don’t miss out on high-impact leads, investor access, and a brand spotlight in Disrupt’s Expo Hall.

深挖·[TechCrunch AI] Manus seeks $4B valuation in new $500M fundraise as it resumes independent ops

链接：https://techcrunch.com/2026/09/18/manus-seeks-4b-valuation-in-new-500m-fundraise-as-it-resumes-independent-ops/
正文节选：Chinese AI startup Manus, which earlier this year had to break off a merger with Meta, is in discussions to raise $500 million at a $4 billion valuation now that it has resumed operations as an independent company, The Wall Street Journal reported, citing anonymous sources.

Potential investors in the round include IDG Capital, Boyu Capital, battery maker Contemporary Amperex Technology, as well as existing backers Tencent, HSG and Zhenfund, the Journal reported. Manus is also said to be considering a restructuring exercise to prepare for an IPO in Hong Kong.

Manus, which went viral following a demo of its AI agent last year, relocated its staff to Singapore in mid-2025 before announcing a $2 billion acquisition deal with Meta that December. The startup was said to be pulling in annual recurring revenue of over $100 million at the time.

However, intensifying worries in China over losing AI talent and researchers to the West culminated in Beijing blocking the deal, citing potential violations of export controls and foreign investment rules.

Manus has since been untangling itself from the American social media giant, and its early investors and backers have reportedly helped the company buy back its shares at a valuation of about $2 billion.

As part of its separation from Meta, the company told its users this August that they would have to export and back up their own data because it had to delete data generated following Meta’s acquisition to “comply with regulatory requirements in specific jurisdictions.”

The company this month said it has resumed independent operations, and that its founding team will continue to lead it.

Manus makes AI products and agents that are pretty similar to what companies like OpenAI, Lovable and Replit offer. It offers a chatbot and vibe-coding tools to let users build apps, websites, create designs and presentations, generate video, a browser assistant, and more.

Manus did not immediately return a request for comment.

Topics

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Ram is a financial and tech reporter and editor. He covered North American and European M&A, equity, regulatory news and debt markets at Reuters and Acuris Global, and has also written about travel, tourism, entertainment and books.

You can contact or verify outreach from Ram by emailing ram.iyer@techcrunch.com.

Last day to book an exhibit table is September 18. Don’t miss out on high-impact leads, investor access, and a brand spotlight in Disrupt’s Expo Hall.

深挖·[TechCrunch融资] Y Combinator insurance tech alum Angle Health hits $2.7B valuation

链接：https://techcrunch.com/2026/09/18/y-combinator-insurance-tech-alum-angle-health-hits-2-7b-valuation/
正文节选：Posted:

Y Combinator insurance tech alum Angle Health hits $2.7B valuation

These days, it’s rare to hear of a startup founded in 2019, or one not focused on AI agents, raising a hefty Series C. But health insurance startup Angle Health announced Friday that it raised a $200 million Series C, alongside a $400 million tender offer, at a $2.7 billion valuation. The round was led by Vitruvian Partners with participation from Town Hall Ventures, Blumberg Capital, Portage Ventures, PruVen Capital, and Y Combinator. The tender offer allows employees to cash out

往期：Agent 雷达 09-18 · Agent 雷达 09-17

---

---

🤖 本文由「Agent 雷达」自动化情报系统每日生成 · 数据源：GitHub / Hacker News / TechCrunch / VentureBeat / arXiv