Ox Alpha stealth AI model: an anonymous release on OpenRouter and OpenCode with a 1M-token multimodal context window and free near-unlimited usage, triggering a community detective hunt - with tokenizer fingerprinting pointing most strongly to an unreleased Zhipu AI GLM model - over its undisclosed developer.

Ox Alpha did not arrive in a vacuum. Pony Alpha turned out to be Zhipu AI's GLM-5, a 744B mixture-of-experts model. Hunter Alpha turned out to be Xiaomi's MiMo-V2-Pro. Elephant Alpha was later attributed to Ant Group's Lingxi Ling-2.6-flash, and Owl Alpha to Meituan's LongCat-2.0 ^[4]. Each one launched under an animal-plus-Alpha codename on OpenRouter, generated a burst of benchmark-chasing hype, and was eventually unmasked as a named release from a Chinese lab. Ox Alpha, which appeared on OpenRouter and OpenCode on August 20, 2026, is the fifth entry in that sequence in roughly six months ^[4].

What makes this instance notable is how quickly the community moved to fingerprint it. Tokenizer probes, benchmark replication, and API-error analysis were all circulating publicly within days of Ox Alpha's launch, well before OpenRouter or any lab confirmed a name change ^[2]. That speed applies the same detective playbook that eventually unmasked Pony Alpha, Hunter Alpha, Elephant Alpha, and Owl Alpha as named releases from Chinese labs - which raises the question of how much longer labs can expect anonymous testing to actually stay anonymous.

The strongest technical case for a Zhipu AI origin comes from tokenizer analysis: independent researcher Sushaanth Srinivasan ran probe tests comparing Ox Alpha's tokenizer against known GLM tokenizers and reported a full match across every test ^[2]. Separately, researcher Ben Davis benchmarked the model on a 10-task DeepSWE coding subset, where it beat GLM 5.3, Grok 4.6, and GPT 5.6, and concluded with 99 percent confidence that it is an unreleased GLM-5.3-series variant from Z.ai ^[5].

But the tokenizer evidence is not unanimous. Robert Lukoszko ran his own analysis and concluded Ox Alpha uses a cl100k_base tokenizer that contradicts the GLM theory entirely, matching only Microsoft's Phi/MAI lineage instead ^[2]. Gael Breton split the difference with a hybrid theory - a GLM-based model, but served through xAI's infrastructure, which he dubbed 'Composer 3' ^[2]. Beyond the tokenizer disputes, community forensic work has also pointed to numeric API error codes and a forced reasoning_content field that commenters characterized as Z.ai/GLM-specific, adding a fourth data point to the GLM side of the ledger, though this detail has circulated mainly through informal community testing rather than a published technical writeup.

A separate thread of evidence came from outside the coding-benchmark debate entirely: independent hands-on testers who put Ox Alpha through visually complex generation tasks - orbital 3D dashboards, a ship-combat game, SVG illustration, interactive 3D objects, and full-stack apps - converged on visual and creative-generation output as a standout strength, arguably more distinctive to them than the coding scores driving the identity debate. That convergence across multiple independent testers, on tasks far removed from the DeepSWE-style suites above, suggests Ox Alpha's capability profile may extend past coding into a genuinely broad multimodal skillset.

OpenCode's launch messaging for the free week described the offer using the phrase 'Zero Data Retention' alongside the 1M context window and multimodal support. But OpenRouter's own model page for stealth/ox-alpha states that prompts and completions are retained by the provider, just not used for training ^[1]- a materially different claim from true zero retention, and one that is easy to miss amid the excitement over free frontier-level access.

Third-party coverage of the launch flagged this same gap between the marketing language and the actual stated policy ^[4]. For a model whose developer is unknown and unaccountable by design, the distinction matters more than it would for a named lab: users sending proprietary code or sensitive prompts through a 'zero data retention' free trial have no way to verify who is retaining their data, or for how long, beyond OpenRouter's boilerplate disclaimer that it is merely routing the requests.

Not all of the detective work has been technical. On Reddit, users tested Ox Alpha with sensitive China-related questions and found it answered more openly than typical Chinese-developed models, which tend to refuse or deflect on those topics. The resulting thread, titled 'Ox Alpha can't be the Chinese,' argued this behavioral evidence cuts against the GLM/Zhipu attribution that the tokenizer and benchmark evidence otherwise supports.

Other users pushed back, arguing that content guardrails are typically applied as a filter layer separate from the base model's training data, so a model can be GLM-based at the architecture and tokenizer level while still answering sensitive political questions differently depending on how its safety layer is configured for a given deployment. That distinction - behavioral tests measuring guardrail configuration versus technical tests measuring model lineage - is a useful reminder that not all 'evidence' in these stealth-model mysteries carries equal weight, a point implicit throughout the broader roundup of competing attribution theories ^[2].

On the performance side, the same 10-task DeepSWE benchmark covered above had Ox Alpha scoring 80 percent versus 65 percent for Fable, 62 percent for both GLM 5.3 and Grok 4.6, and 52 percent for GPT 5.6 ^[5]- a result strong enough that the more interesting question isn't the score itself, but whether the free tier delivering it is economically sustainable. Community testing elsewhere reported similar relative rankings on informal coding and visual-generation tasks, though the small sample size (a 10-question benchmark) has drawn its own share of skepticism about reading too much into it.

That skepticism extends to the business logic behind the release. The theories roundup covering the launch notes doubts about whether even Zhipu AI has the compute capacity to sustain a genuine 100 trillion tokens per day in free serving capacity ^[2], and separate coverage of the launch reported that at least one user was rate-limited on their very first prompt - directly undercutting the 'near unlimited usage' claim used to market the free week ^[3]. Frontier-level benchmark scores and an unsustainable-sounding free offer are, in this case, two sides of the same unresolved mystery.