Someone named a Grok Bot “CFO”, gave it read-only bank access, and told it to send the monthly audit only into a Grok group called “My Personal Exec Team”. On October 1 the first monthly run posted that audit to XMTP’s Slack channel “Exec-team”.

Shane Mac said Slack lived on a different Bot, and under the hood they share connections. Grok told him they shipped an explicit grant before an agent can move information to other channels, the night before the October 9 piece.

I fetched the live docs; I did not run Grok Bot. Approvals, security, and privacy (Last updated October 6, 2026; HTTP Date Sat, 10 Oct 2026 21:04:07 GMT, no last-modified) still has “Do not use separate Bots as a security boundary.” Files, browser sessions, and command-line credentials are shared. An Auto Review card from a routine, a trigger, or another Bot expires in about ten minutes. Use the computer and apps (Last updated October 8) still says installed connectors are account-wide. Those pages do not mention a channel-move grant.