Forensics Point to Zhipu's Unreleased GLM Behind Mystery Model Ox Alpha
On August 22, researcher zainhas published a series of forensic analyses arguing that the anonymous test model ox-alpha on OpenRouter is essentially Zhipu's unreleased GLM-5.3-V, with independent corroboration from server-side errors, input-format analysis and prompt injection by other users. Earlier community speculation had variously attributed the model to Gemini, Microsoft MAI-2 or a Google coding model, and claimed it outperformed OpenAI models. The Zhipu GLM theory currently has the strongest evidence, though no official confirmation exists.
Confirmed
- Tokenizer match: in a pre-registered blind test, ox-alpha's token counts on 9 unique special strings exactly matched GLM while other models diverged wildly
- Special-tag recognition: when asked to complete text containing the GLM-specific tag <sop>, ox-alpha refused, saying completion would reveal its identity, then identified itself as a GLM-family LLM and denied being built by Zhipu AI, Moonshot or DeepSeek; a Chinese-language identity test (m17) produced similar responses
- Chinese prompt leakage: forcing Chinese reasoning leaked identity info in 7 of 12 samples, including the registered entity name "Beijing Zhipu Huazhang Technology"
- Metadata match: ox-alpha's metadata matches GLM5.x in reasoning tiers, context length and sampling parameters
- Server forensics: user bdsqlsz triggered a Java stack trace with malformed requests, capturing the internal class ChatCompletionRequest and API route paas/v4/ch…, linking Ox Alpha to Zhipu's stack
- Input-format comparison: user himanshustwts independently found ox-alpha's text input format matches glm-5.3 and its multimodal format matches glm-5v-turbo, inferring a Z.ai origin (personal finding, unverified)
- Prompt injection: dejanseo confirmed via reverse engineering and prompt injection that OpenRouter's OX Alpha is a GLM developed by Z.ai; identical claims with screenshots appeared on Reddit from August 23 (m2)
Unconfirmed
- Exact version and positioning: several bloggers (m5, m11) citing "credible sources" claim Ox-Alpha is GLM 5.3 Flash, set to compete with GPT-5.6, Opus 5 and Fable 5 at lower cost with open weights—details inconsistent with zainhas's GLM-5.3-V conclusion
- The "Google theory": a DeepMind researcher reportedly hinted Ox Alpha is not Chinese and may be Gemini 3.5/4 Pro (m1); Google's official accounts posted vague tweets (m6); dejanseo first named it Gemini on August 22 before switching to GLM; m12 and m20 echo a Google coding-model or old-Gemini hypothesis
- Limits of self-report evidence: system prompts could make a model claim to be GLM as a training-data artifact
- "Rebranded test" doubts: @brandongalang relaying @JacobRothfield argued Zhipu's free-tier economics couldn't fund an anonymous free test, suggesting post-training on a GLM base by another party, possibly a Chinese lab or a US Neocloud partnership
- Earlier community analysis based on the cl100kbase tokenizer suggested Microsoft MAI-2, contradicting the latest tokenizer findings
Why it matters
- Identity forensics on stealth models affects community benchmarking fairness: if anonymous models can be unmasked via tokenizers and prompts, stealth launch strategies lose their value
- The conflicting attributions (Gemini, MAI-2, Google coding model, GLM) highlight the limits of single evidence and the value of cross-validation; a cheaper, open-weights GLM 5.3 Flash rivaling top models would pressure Western frontier labs
- The episode provides a reusable forensic playbook: pre-registered blind tokenizer tests, special-tag probing, metadata comparison, server-error triggering, input-format comparison and prompt injection
2026-08-22 ~ 2026-08-24 · 31 related posts
- Episode 1: Mystery model Ox Alpha stuns community; fingerprints point to Zhipu GLM-5.3(2026-08-21, 57 posts)
- Episode 2: OpenRouter's Mystery 'Ox Alpha' Model Identified as GLM(2026-08-21, 3 posts)
- Episode 3: Cola Launches Ox Model Claiming Terra-Level Capability at Flash Speed(2026-08-21, 2 posts)
- Episode 4: Mysterious Model Ox Alpha Gives Away 100T Tokens Daily, Sparking Power Questions(2026-08-21, 2 posts)
- Episode 5: Ox-Alpha Underperforms in Tests, Called Marketing Stunt(2026-08-22, 3 posts)
- Episode 6: Ox Alpha scores ~63% on full DeepSWE; earlier 80% was subset artifact(2026-08-22, 6 posts)
- Episode 7: Forensics Point to Zhipu's Unreleased GLM Behind Mystery Model Ox Alpha(2026-08-22, 31 posts)
- Episode 8: Ox Alpha Generates 64K-Token 3D Scene in One Prompt(2026-08-22, 2 posts)
- Episode 9: Mystery model Ox Alpha draws mixed reviews from early testers(2026-08-22, 6 posts)
- Episode 10: Mystery Model Ox Alpha Launches Free, Identity Unknown(2026-08-23, 3 posts)
- Episode 11: Mysterious Model Ox Alpha Debuts on OpenRouter, Sparking Speculation(2026-08-24, 5 posts)
- Episode 12: Leak: Ox Alpha Is GLM-5.3 Flash, 320B MoE at One-Tenth the Price(2026-08-25, 4 posts)
- Episode 13: Mystery Model Ox Alpha Revealed as Zhipu's GLM-5.3 Flash, Weights Going Open-Source Tonight(2026-08-25, 17 posts)
- Episode 14: Stealth Model Ox Alpha Proves Mediocre at Coding, Trails Grok 4.6(2026-08-25, 3 posts)
- Episode 15: Mystery Model Ox Alpha Revealed as Zhipu's GLM-5.3-Flash, Served on Domestic Chinese Chips(2026-08-26, 19 posts)
- Episode 16: Mystery Model Ox Alpha Burns 42T Tokens in Six Days(2026-08-26, 3 posts)
Primary sources
- Ox Alpha Speculated to be Microsoft's Unreleased MAI-2 Frontier Model — inductionheads · 2026-08-22
- Prompting ox-alpha to identify as GLM proves little about the model — Afinetheorem · 2026-08-22
- Leak claims Ox Alpha model is GLM-5.3, shrinking gap with US labs — ccerrato147 · 2026-08-22
- Test shows ox-alpha denies being developed by Zhipu, Moonshot, or DeepSeek — zainhas · 2026-08-22
- DeepMind researcher strongly hints mystery model Ox Alpha is the next Gemini Pro — Neurogence · 2026-08-22
- Evidence suggests ox-alpha is GLM-5.3-V — zainhas · 2026-08-22
- ox-alpha tokenizer matches GLM exactly in blind test — zainhas · 2026-08-22
- [source] Technical confirmation: Tokenizer analysis proves ox-alpha is GLM-5.3-V — zainhas · 2026-08-22
- Forensic deep dive: Chinese reasoning forces ox-alpha to leak Zhipu entity name — zainhas · 2026-08-22
- Model identity leak: Agent reveals itself as GLM via special tokens — zainhas · 2026-08-22
- ox-alpha metadata matches GLM5.x exactly — zainhas · 2026-08-22
- Ox alpha rumor: It is Google's coding model, not Mistral or Sarvam — DrDatta_AIIMS · 2026-08-22
- DeepMind Scientist Tests Ox Alpha: Repeated Coding Failures — haider1 · 2026-08-22
- Speculation mounts that Ox Alpha is a rebranded Google Gemini — Linahuaa · 2026-08-22
- [source] Reverse engineering confirms mystery model 'Ox Alpha' is Zhipu's GLM — bdsqlsz · 2026-08-22
- Ox Alpha Mystery Deepens: Speculation Points to a Post-Trained Chinese Model — brandon_galang · 2026-08-22
- Rumour: mystery model Ox Alpha on Hermes is Zhipu's GLM series — AJChadha · 2026-08-22
- [source] Claim: mystery model "0x Alpha" is Zhipu's Z AI, formats match GLM — himanshustwts · 2026-08-23
- Ox Alpha Revealed to Use Unreleased Zhipu GLM Model — py_blu · 2026-08-23
- Leak: Ox Alpha Identified as Google Gemini — dejanseo · 2026-08-23
- Speculation suggests mystery model 'Ox' originates from a Chinese lab — henloitsjoyce · 2026-08-23
- Speculation: Preview Model Potentially from Chinese Lab's Tiny Flash Model — brandon_galang · 2026-08-23
- Speculation on mystery model: Chinese lab or US neocloud partnership? — henloitsjoyce · 2026-08-23
- Mysterious Model OX Alpha on OpenRouter Revealed as Zhipu GLM — dejanseo · 2026-08-23
- Mystery Model 'OxAlpha' Sparks Tech Fingerprint Hunt: Suspected Zhipu or Google — 量子位 · 2026-08-23
- Decoding OpenCode's Mystery Model: 600 Calls Confirm It as GLM-5 — zainhas · 2026-08-23
- Mysterious free model Ox Alpha impresses Silicon Valley with coding — emmanuelvivier · 2026-08-23
- Analysis Suggests Ox Alpha Distilled from GLM-5 Weights — koltregaskes · 2026-08-23
- Ox-Alpha rumored to be GLM 5.3 Flash: open, cheap, top-tier — daniel_mac8 · 2026-08-23
- Mystery model "Ox Alpha" on OpenRouter rumored to be GLM 5.3 Flash, beating top models — TheZachMueller · 2026-08-24
1 near-duplicate retellings: RayLin_AI