Enterprise code is pouring into Ox Alpha — and nobody will sign for it
The mystery model's second act isn't about benchmarks anymore: billions of tokens of real developer work are now flowing weekly to an unnamed operator, and the data-policy fine print behind that free lunch is where this story gets serious.
Coding tools have pushed billions of tokens through Ox Alpha since Thursday, and no company has admitted to building it or operating it. Bloomberg reported Sunday that usage hasn't slowed since the anonymous model surfaced on OpenRouter on August 20, with tools like Claude Code among the heavy senders. That makes the terms worth reading twice. OpenRouter's model page says prompts and completions are retained by the provider and are not used for training — but its broader terms covering anonymous previews extend to training, evaluation and improvement. OpenCode's route advertises zero retention from a provider it does not even name. In practice, enterprises are pointing agentic coding tools at an unnamed counterparty whose retention posture depends on which sentence you read.
The scoreboard also came back down to earth. Developer Ben Davis's first 10-task DeepSWE run scored Ox Alpha above 80% — far ahead of GPT-5.6-sol's 52% on the same slice — but he flagged the sample size himself, and his warning held: on the full set, Ox Alpha landed roughly level with GPT-5.6-sol mid rather than ahead of it. We covered the fractured early verdicts in Early tests of mystery model Ox Alpha can't agree if it's frontier — long-horizon agent models keep grading differently depending on which slice you test.
Identity sleuthing, meanwhile, keeps circling Z.ai — which turns a curiosity into a compliance question. A developer known as unclecode built a tool called modelprint that fingerprints anonymous API endpoints with nine infrastructure probes; Ox Alpha matched GLM-5.3 on six of nine, including all four normalized tokenizer counts, though he concedes shared infrastructure is not proof of identity. Skeptics note one tokenizer reading points instead to cl100k_base — an encoding that came out of OpenAI and sits oddly on a Chinese model. But if the Z.ai attribution holds, the U.S. Commerce Department added Zhipu AI, Z.ai's former name, to its Entity List in January 2025 over advanced AI research tied to military modernization — and Western enterprise code would be landing with a listed company under a pseudonym nobody can audit. OpenRouter says it only routes requests and is not the owner or operator. The free window closes Monday on one route and around August 27 on another; when the meter starts running, someone will finally have to put a name on the invoice.
What to watch: whether any lab claims Ox Alpha before the free window ends — and whether enterprise buyers demand a named, signable counterparty before the next stealth preview launches.
Would you point your production codebase at a free model whose owner won't identify itself? Tell us in the comments.
Sources: modelprint documentation (GitHub)
