A dark server room with a single illuminated screen showing anonymous code, representing a stealth AI model deployed without attribution.
AI & Singularity

An Anonymous AI Model Appeared on OpenRouter. The Trail Points to Zhipu.

A mystery model on OpenRouter beats GPT-5.6 at coding and serves 1 million tokens free. Serving-layer forensics point to Zhipu AI. Nobody has confirmed anything.

OX AlphaZhipu AIGLMOpenRouterAI Models

An anonymous AI model appeared on OpenRouter on August 20, 2026, listed only as “stealth/ox-alpha.” It offered a 1,048,576-token context window, multimodal input across text, images, and video, and free access for a one-week preview window. Early testers reported coding performance that appeared to match or exceed GPT-5.6 Sol. By August 22, independent researchers had traced serving-layer fingerprints — a Java stack trace, shared error codes, and a 30-out-of-30 tokenizer match — to Zhipu AI, the Chinese lab behind the GLM model family. Zhipu has neither confirmed nor denied involvement.

What is OX Alpha? It is an unbranded AI model hosted on OpenRouter, a popular API aggregator that routes requests to dozens of model providers. OpenRouter listed it under a generic “Stealth” provider label with no company name attached. The model accepted text, image, and video inputs, could output up to 131,072 tokens in a single response, and was free to use during its preview period. Independent analysis estimated roughly 744 billion total parameters with about 40 billion active in a mixture-of-experts configuration.

The Benchmarks That Got Attention

The viral claim was an 80 per cent pass rate on DeepSWE, a coding benchmark that tests models on real-world software engineering tasks. That figure placed OX Alpha ahead of Claude at 65 per cent and GPT-5.6 Sol at 52 per cent, according to Build Fast With AI’s analysis.

The caveat matters. That 80 per cent came from a 10-task user test, not an audited leaderboard run. DeepSWE does not list OX Alpha on its public BenchSift leaderboard as of August 21. A 10-task sample carries enormous variance. The honest reading is that OX Alpha performs somewhere in the frontier band on coding — not that it definitively beats GPT-5.6.

The Forensic Trail to Zhipu

The identification work happened in stages. First, a developer known as “dax” ran tokenizer fingerprinting tests across 25 prompts and found that OX Alpha’s raw token counts aligned almost exactly with GLM-5.3, as documented by ExplainX.ai. Researcher @aitrackerbot then matched video encoder token consumption patterns to GLM-5V-Turbo across four test videos.

The strongest evidence came on August 22. Researcher Chetaslua sent a malformed request to OpenCode’s direct OX Alpha route — setting top_p to the string "abc" instead of a number — and the server returned a Java stack trace naming its own internal class: com.wd.paas.api.domain.v4.chat.ChatCompletionRequest. That package path maps directly to Zhipu’s documented API route on both open.bigmodel.cn and api.z.ai. The same researcher found that error code 1214, returned for invalid role parameters, matched identically across OX Alpha and Z.AI-hosted GLM models — but not on DeepInfra-hosted GLM-5.2, which uses the same model weights under a different operator stack.

The control case is the telling detail. Same weights, different host, different error dialect. The signature belongs to who operates the API, not to the model checkpoint in isolation.

Why Would a Lab Ship Anonymously?

Stealth launches on OpenRouter have become a standard pre-release ritual for Chinese AI labs. Zhipu previously live-tested its GLM-5 model under the “Pony” pseudonym before the official launch. The pattern is deliberate: a free frontier model with no brand attached gets tested harder and more honestly than a launch post. Developers stress-test it, share results, and surface bugs — all before the lab has to stand behind a public claim.

If OX Alpha is indeed the next GLM flagship, the timing fits. Zhipu’s GLM-5.3 already leads CyberGym at 84.5 per cent, ahead of Claude Mythos 5 and GPT-5.6 Sol. GLM-5.3 Max ranks second among open coding models on Artificial Analysis’s Intelligence Index, tied with Kimi K3 at a score of 60. Public weights for GLM-5.3 are targeted for around August 28 after safety testing. A stealth preview of the model that follows GLM-5.3 would be consistent with Zhipu’s established launch playbook.

The Broader Pattern

What stands out is the cadence. If the attribution is correct, Zhipu has shipped a leading cyber model, a top-two open coding model, and a stealth frontier candidate inside three weeks — all from post-training work on related 743-billion-parameter bases. GLM-5.3 added no parameters over GLM-5.2; every gain came from reinforcement learning and training environment design on a frozen base. That is a far cheaper path to capability than a new pre-training run, and it suggests the post-training frontier is nowhere near exhausted.

The pricing pressure this creates is real. GLM-5.3 comes bundled in coding plans starting at $18 a month. DeepSeek V4-Pro serves 1.6 trillion parameters at $1.32 and $3.96 per million tokens. Grok 4.6 matches GPT-5.6 Sol Max on the Artificial Analysis Intelligence Index at $2 and $6. OpenAI cut GPT-5.6 Sol to $4 and $20 per million tokens on August 20 — a 20 per cent input cut and 33 per cent output cut for a three-month promotional window. The pattern across the industry is that flagship pricing is being dragged down by open-weight and Chinese competition faster than anyone forecast a year ago.

What This Means for New Zealand

For NZ developers and businesses evaluating AI tools, the OX Alpha episode illustrates something practical. The gap between closed frontier models and what is freely available or cheaply served continues to narrow. A model that may match GPT-5.6 on coding was offered free for a week, and the open-weight models trailing it — Qwen3.8-27B runs on a single consumer GPU, and Kimi K3’s full weights are published — give teams with data sovereignty requirements credible in-house options. The competitive pressure benefits anyone paying for API access, regardless of which lab ultimately claims OX Alpha.

❓ FAQ

Is OX Alpha confirmed to be from Zhipu?

No. The attribution is based on independent forensic analysis — tokenizer matches, error code patterns, and a Java stack trace — but Zhipu, OpenRouter, and OpenCode have all declined to comment on the record. Researcher confidence is high at the operator layer, but no official confirmation exists.

Can I still use OX Alpha?

The free preview window was scheduled to close around August 27, 2026. After that, the model may be formally launched under its real name, withdrawn, or transitioned to paid access.

How reliable is the 80 per cent DeepSWE score?

Not very. It came from a 10-task user test, not an audited benchmark run. Treat it as indicative of frontier-band coding performance, not as a verified ranking. The public DeepSWE leaderboard does not list OX Alpha.

Why does it matter which lab built it?

The identity affects pricing, availability, and open-weight policy. If Zhipu confirms OX Alpha as a GLM variant, public weights typically follow within weeks under Zhipu’s established pattern. That changes the calculus for any team considering self-hosting.

🔍 THE BOTTOM LINE

The OX Alpha story is less about one mystery model and more about a launch strategy that works. Free, anonymous, frontier-tier access generates harder and more honest testing than any branded release. The forensic trail to Zhipu is strong but unconfirmed. The real signal is the cadence: Chinese labs are building complete model families with proper tiering, shipping flagship-tier capability through stealth channels, and compressing the price ceiling that Western labs can charge. Whether Zhipu claims OX Alpha or not, the model that matches it is coming.

📰 Sources

Sources: OpenRouter, ExplainX.ai, Build Fast With AI, WCCFtech