project
Moonshot AI's agent workspace product; its Windows desktop client version 3.1.5 was found to attach raw records from five recent conversations to feedback submissions.
No evidence-backed relationships are recorded.
RuntimeWire put the Windows client behind an inspection proxy and found its one-off canary token verbatim in the query property of a POST to gator.volces.com, an endpoint ByteDance's Volcano Engine documents for analytics reporting.
Reality
RuntimeWire's A/B test shows no read-approval dialog appeared, and Moonshot's own kernel docs explain why: Read, Grep, Glob and ReadMediaFile are marked automatically allowed, so the prompt layer decides alone.
Reality
RuntimeWire's teardown of build 3.2.3 found the text-capture machinery finished and every toolbar button dead, which makes this an endpoint permissions question well before it becomes a product one.
Reality
Kimi Desktop 3.1.10 hides Moonshot's employee-only model gateway behind five clicks, then saves the personal bearer token to disk unencrypted in two places, according to RuntimeWire.
Reality
RuntimeWire found Moonshot AI's desktop app zips and uploads raw records from the five most recently updated conversations on every feedback submission, with no preview and no consent box.
Reality