AI
Coding teams racing to use mystery Ox Alpha model face murky privacy terms
A new anonymous AI model with generous free credits attracted developers fast—but conflicting data-handling policies across different access routes are creating real security risks.
The New Stack
An anonymous coding model called Ox Alpha landed on OpenRouter in late August with a tantalizing offer: billions of free tokens daily for developers testing their own private code. Within days, the fingerprinting game began. Security researchers and AI enthusiasts launched tokenizer probes, benchmark comparisons, and architectural analysis trying to unmask its creator—suspecting Z.ai, Xiaomi, or another lab entirely. But the real puzzle isn't who built it. It's what happens to proprietary code once developers submit it.
Clues point toward a Chinese AI lab#
The circumstantial case implicates Zhipu AI (also known as Z.ai), which had previewed an earlier model on OpenRouter and released GLM-5.3 days before Ox Alpha appeared. Researchers using infrastructure fingerprinting tools observed network signatures that matched Zhipu's known stack on roughly two-thirds of their tests. One developer flagged that the model's tokenizer matched an OpenAI encoding—an odd choice for a Chinese provider—which muddied the water further.
Official benchmarks remain sparse. A viral screenshot claimed 80% success on a tiny 10-task sample. A more rigorous community test resolved 58% of 113 deep software engineering tasks over 20 hours of agentic work. The model doesn't yet appear on any official evaluation leaderboards.
While infrastructure clues have circled around one lab or another before, the question has historically required official confirmation to settle.
Conflicting privacy policies create legal fog#
Here's where the mystery becomes operational. OpenRouter itself hosts Ox Alpha under two different privacy regimes that say opposite things:
- The Ox Alpha model page states: The provider retains prompts and completions but does not use them for training.
- The broader Stealth Program EULA (which covers most other traffic): Submitted content is licensed for training and improvement.
OpenCode, a separate platform offering access, claims its providers follow strict zero-retention policies—but does not list Ox Alpha among them.
A developer cannot determine which terms apply based on the model name alone. Yet the distinction matters enormously because coding agents have moved billions of tokens through this model since launch. That traffic may contain repository contents, test logs, environment variables, and snapshots of private production systems.
