On August 20, 2026, OpenRouter and OpenCode simultaneously released a stealth preview of a large model codenamed Ox Alpha. With a 1,048,576-token context window, text/image/video input, and a maximum 131,072-token output, it pulled the interface specs for a "reasoning model" and "long-horizon agent workflow" up to the current top tier. OpenCode announced the route is free to all users for one week and pegged daily compute capacity at 100 trillion tokens; on OpenRouter, the prompt and completion prices are also listed at zero. The catch: no one signed it. OpenRouter listed it under the generic "Stealth" provider, OpenCode simply called it "the stealth model", and as of writing, Zhipu AI, OpenRouter, and OpenCode have issued no public confirmation from any of the three parties.

An independent fingerprint points at Zhipu

What actually pushed the story into the technical community's view were two fingerprinting passes that the OpenRouter user community completed within 36 hours. The first pass, led by @aitrackerbot, compared native token counts across 25 diverse prompts against the candidate models. The result: Ox Alpha's token counts match GLM-5.3 exactly, with only a constant +75-token offset—which the researchers attribute to a system prompt added by OpenRouter or an upstream wrapping layer, not to the underlying identity. The second pass raised the dimension to the video encoder. On four controlled videos, Ox Alpha matched Zhipu's own GLM-5V-Turbo implementation token-for-token across three independent design choices: FPS-invariant frame sampling, ~147 tokens/second duration scaling, and per-frame resolution scaling. Three independent design choices colliding at once is far less likely than a single token count lining up. The HuggingNews community independently reached the same conclusion around the same time, pointing at a "GLM 5.3 vision variant".

Researchers set confidence at ~90%, with the wording "strongly points to but officially unconfirmed." Zhipu has stayed silent, neither confirming nor denying; OpenRouter and OpenCode likewise refuse to name any laboratory on the record.

What was ruled out—and the logic of going stealth

The same test pass ruled out the two most-circulated alternative theories. Xiaomi's MiMo v2.5 differs from Ox Alpha in audio-endpoint behavior—Ox Alpha refuses audio input on every route, behaving like the GLM-5V family, whereas MiMo v2.5 natively accepts audio. Qwen 3.8 Max and GLM-4.6V were also put through the same fingerprint and produced tokenizer and video-encoder signatures different from Ox Alpha. A separate AI Wiki cross-check pins down another set of facts: OpenRouter's model API lists Ox Alpha's tokenizer as "Other", leaves the knowledge cutoff empty, marks quantization as unknown, and provides no Hugging Face repo ID. None of those alone proves identity, but taken together they suggest this is not ordinary naming carelessness, but a deliberate stealth release.

That fits the playbook from earlier this year with Hunter Alpha and Healer Alpha, two Xiaomi MiMo stealth previews: drop an unnamed model on a neutral platform like OpenRouter, collect production traffic and failure cases, then reappear under an official identity once the preview window closes. The difference here is that the fingerprint points not at MiMo but at GLM.

Borders the conclusion should not cross

The "Ox Alpha = GLM-5.3" conclusion has a few public borders worth flagging. First, an informal DeepSWE run of ten tasks circulated with a headline placement "ahead of Fable and GPT-5.6 Sol"—but AI Wiki has noted the sample size is too small, lacks task IDs and seeds, and lacks full trajectories, so it cannot be treated as an official leaderboard score. Second, OpenRouter and OpenCode have inconsistent privacy terms: under the OpenRouter route, the EULA authorizes data for training and improvement; only OpenCode Zen is genuinely "zero retention"—so developers running real workloads on Ox Alpha cannot treat "both routes are anonymous" as one unified promise. Third, 1M tokens is capacity, not effective reasoning depth: neither "Lost in the Middle" nor RULER has run controlled long-context tests on Ox Alpha, and retrieval plus multi-hop reasoning over the middle of long documents remains a black box.

So what

If the public identity ends up confirmed as Zhipu, this means a top-tier Chinese lab is willing to use a "bare-run-for-a-week on an overseas neutral platform, collect real traffic, then resurface under an official identity" pattern as a stress test—markedly different from the path DeepSeek V3 walked a year ago, which leaned more toward papers. This time the lab is using production requests directly as an unlabeled benchmark. Whatever the fingerprint result, the three-act flow—stealth → evidence chain → waiting for official confirmation—is itself a new open lecture in the 2026 open-weight model ecosystem: model attribution is no longer a precondition for release, but attribution will eventually have to arrive.