Five-layer glossary

In plain. A program that has seen huge amounts of text and can do one trick: guess the next piece. Not a person. Not Google. It packed statistics into numbers.

Analogy. Phone autocomplete that dared to write a whole chapter of code.

Example. You: “The sky is”. It often continues “blue”, not because it “knows” weather, but because that pair showed up millions of times and context pushes it.

Trap. If it lies with confidence, it is still a brilliant parrot. Confidence ≠ truth.

Ox cut. Ox Alpha is an LLM dressed as “reasoning”: a private draft first, then the answer. OpenRouter sells it for coding and agents, not poetry.

In plain. Not a letter. Not always a word. It is the scrap the model cuts text into: “hi” can be 1; “extraordinarily” can be 3; an emoji 1 or 2; a line of code, 20.

Analogy. If text is a necklace, tokens are the beads. Different makers cut beads differently.

Example. “Hello” ≈ 1 token in English. “Hola” may be 1 or 2 depending on the knife. 1,048,576 tokens ≈ a fat book + a whole repo.

Trap. Old SMS counted 160 letters. WhatsApp does not. Models remember and bill in tokens, not letters. “A million words” is lazy marketing.

Ox cut. Ox Alpha takes 1,048,576 in and 131,072 out. That is 2²⁰ and 2¹⁷, not a round million.

In plain. The recipe that turns letters into numbers (IDs). Each lab has its own, or copies one. If two APIs, given the same text, report the same token count (except a FIXED extra), they almost surely share a knife.

Analogy. Two people with the same 2005 T9 keypad. Different messages, identical key-presses for “hello”.

Example. Public test: tok(Ox, P) − tok(GLM-5.3, P) = 75 on EN, DE, CN, code and emoji. Kimi, Qwen, MiMo and MiniMax do NOT give a constant 75.

Trap. Same knife ≠ same weights. Someone could have fine-tuned GLM. +75 proves dictionary + letterhead, not a brain passport.

Ox cut. This is THE star test of the file. A graduate can repeat it: same text to both APIs, subtract.

In plain. A number the model turned while training. There are hundreds of billions. It is not a scrap of text. “Fewer parameters” does not mean “dumber”: it can mean “more efficient”.

Analogy. An orchestra of 744 musicians where only 40 play at once. Sounds like a symphony, bills like a band.

Example. GLM-5.x: ~744B total, ~40B active per token (MoE). A dense 2T bills ~50× more per word. Interconnects: ~750B, a third of Kimi K3, still frontier at coding.

Trap. People use “parameters” as a playground insult. In 2026 the opposite happened: good post-training > raw size.

Ox cut. Ox does not publish a count. If it is GLM-5.x, it inherits ~744B/40B. Rumored Flash/Air ~300B: gossip, not a sheet.

In plain. Not one brain. A building of sub-brains and a doorman. The doorman wakes only a few for each scrap of text. Knowledge lives in the whole building; the bill charges the ones who woke up.

Analogy. You do not wake 744 doctors for a sprain. Triage calls 40. The hospital is still huge.

Example. cost ≈ k · P_active · tokens (not P_total). GLM: 40B / 744B ≈ 5% of the building works on each word.

Trap. “MoE is a marketing cheat”. Sometimes yes (toy experts). In GLM-5 it is measured: 40B active. Flash/Air is usually the sibling that wakes even fewer.

Ox cut. If Ox is Flash, the specialist bar slides further left: that is how they can gift a weekend of tokens.

In plain. How much text fits at once: what you paste + what it generates. Not infinite memory. It also does not guarantee it uses the start and the end well (it gets “lost in the middle”).

Analogy. A 1 km school desk. Every notebook fits. You can still lose math at meter 400.

Example. 2²⁰ = 1,048,576. Chrome with 200 tabs “fits”. That does not mean you find the tax tab. GLM-5.2 already used 1M with IndexShare.

Trap. Xiaomi also uses 1M. The number is not a passport. It does kill the round “1,000,000 tokens” slogan.

Ox cut. Ox and GLM-5.2/5.3 publish exactly 1,048,576. Nobody has audited that Ox USES the million well at 800K.

In plain. The text (and sometimes image/video) you give it. Includes what you see and what you do NOT see: the system prompt, the 75-token letterhead.

Analogy. The letter you put in the envelope. The envelope (system) already had a letterhead. That is why Ox always weighs 75 g more.

Example. If you paste a 40,000-token repo and a 20-token question, the model sees ~40,020 + letterhead. Cache tries not to reread the repo.

Trap. “I told it to be honest” does not erase the lab’s system prompt. Ox’s stealth letterhead says: do not identify as another model.

Ox cut. Pliny leaked the wrapper: “You are ox-alpha… undisclosed organization”. That is the +75, not the brain.

In plain. You do not talk to the brain. You talk to a window: you send JSON, tokens come back. OpenRouter is a mall: one counter, many storerooms behind it.

Analogy. You ordered delivery with no logo. The box, the receipt and the complaint number belong to one restaurant.

Example. Error 1210: “This model always engages in thinking and cannot be disabled; please use low, high, or max”. Same sentence as chat.z.ai / GLM-5.3.

Trap. The pretty counter (OpenRouter) did not invent 1210. The storeroom did. An internal error leaks the neighborhood.

Ox cut. stealth/ox-alpha is the aisle name, not the storeroom. Pritish (ex-Llama) saw 1210/1214 identical to z.ai.

In plain. A lab serves the model free and anonymous to see if traffic holds and what people say. Then they unmask… or not. On this OpenRouter channel, 4 of 4 previous ones were Chinese labs.

Analogy. A restaurant opens as “Nameless Place”. Free week. Then the sign goes up. The previous four were different Chinese kitchens.

Example. Pony Alpha (Feb 2026) → GLM-5. Hunter/Healer → MiMo-V2. Elephant → Ling-2.6-flash. Owl → LongCat-2.0. Ox is the fifth, the first with native video.

Trap. Stealth ≠ military secret. It is no-brand marketing. Also not “open-weights”: Mira’s Inkling DID publish weights; Ox did not.

Ox cut. OpenRouter says: we are not the owner. The provider retains prompts. OpenCode promises zero retention. Three contracts clash. Do not paste secrets.

In plain. A battery of tests a model cannot stop “being itself”: tokenizer, API errors, video encoder, temperature-0 style, audio rejection, cache, logs.

Analogy. You never see the face. You see shoe size, accent, coffee brand and the metro line. Five matches are not a whim.

Example. Video: 2s 30fps 360p = 296 tokens on Ox AND GLM-5V-Turbo. MiMo 910. Qwen 408. GLM-4.6V 1,832. Three encoder choices match.

Trap. One test is not a passport. The “I am GLM” jailbreak is the easiest to fake. The video encoder is the hardest.

Ox cut. Seven or eight fingerprints. Six point at Z.ai. The playbook could also be Xiaomi. The knife kills Xiaomi.

In plain. At 0, it always picks the most likely token: a disciplined parrot. At 1, more creative and more chaotic. To compare clones you use 0: if two systems write almost character-for-character the same, they are family or a copy.

Analogy. Temperature 0 = grandpa’s recipe, always the same. Temperature 1 = jazz. You do not fingerprint a jazzman.

Example. Testers at temp 0: same markdown quirks, same German-decimal LaTeX (0{,}375), near-literal factual answers vs GLM-5.3.

Trap. “It is creative” is not identity. Style at temp 1 wanders. The hard test is temp 0 + tokenizer, not a poem.

Ox cut. If someone shows you a “unique” Ox output at high temp, it is not a fingerprint. Ask for the token subtraction.

In plain. If you paste the same repo 40 times, a smart server does not reread it whole: it stores compute from the start. High hit rate = a serious kitchen. Not the brain; the infrastructure.

Analogy. 97 of 100 coffees come from the thermos, not the grinder. Only one shop used to do that so well… or so we thought.

Example. A pi.dev tester measured ~97% on Ox. The OpenRouter catalog showed ~87% Ox vs ~92% GLM-5.3. Typical Anthropic ~64%, OpenAI ~83%. Soft signature.

Trap. 97% is NOT official. Treating it as a z.ai passport was a mistake in this file and got cut. The encoder and +75 weigh more.

Ox cut. Compatible with a z.ai kitchen. Does not prove weights. Another lab with good cache could too.

In plain. Video does not enter like Netflix. It is split into frames (or space-time tubes) and turned into expensive tokens. Each lab picks resolution, fps and tokens per patch.

Analogy. Translating a movie into a comic. If two studios use the same panels per minute, they copied the storyboard.

Example. Four controlled clips: Ox = GLM-5V-Turbo token-for-token (296, 296, 884, 1,064). fps-invariant (30 vs 5 same: fixed sampling).

Trap. “It sees video” does not ID the lab. The token BUDGET does. A Cursor fine-tune that keeps Z.ai’s preprocessor is possible but a stretch.

Ox cut. The hardest fingerprint to fake in this episode. That is why from-scratch Composer 3 fits poorly: it would have to steal the whole toll booth.

In plain. A chat answers. An agent stays in a loop: read the error, change the file, run tests again. It eats tokens like crazy because the repo is pasted again and again.

Analogy. Not the teacher explaining homework. The intern you leave the laptop with, who comes back at 2 a.m. with a PR. Drinks coffee (tokens) non-stop.

Example. Davis: ~117 agent steps per DeepSWE task vs GLM-5.3’s 124. GPT-5.6-sol ~61. The big-model smell is in the steps, not a tweet.

Trap. “Agentic” is 2026’s fashion word. Any chat with tools claims it. Look at the loop and the cache, not the adjective.

Ox cut. The official sheet: coding, long agents, production. That is why OpenCode gifts it for a week: they want to see if the loop holds.

In plain. A trick so the model ignores its system prompt and spills what it should not: who it is, how to do harm, the internal text. Soft evidence: models also invent identity.

Analogy. At carnival you pull the mask off and they yell their name. A clue. They could also be acting.

Example. Pliny: the wrapper says it is ox-alpha from an undisclosed org. A weak other tweet: “I'm GLM… Z.ai”. Davis/tokenizer do not lead with that.

Trap. A jailbreak is not a lab leak. “My agent has spoken” (Pliny) is an agent’s opinion, not a Z.ai PDF.

Ox cut. Low weight in this file. The +75 and the video toll carry the sketch. The vomited name is decoration.

In plain. People bet money (or points) on facts. The percentage is the bet’s price, not a lab measurement. 85% Z.ai means “the market thinks it is Z.ai”, not “Z.ai signed”.

Analogy. Bookies give 80% chance of rain. Take the umbrella. It is not a satellite.

Example. Aug 21 snapshot: Z.ai/Zhipu ~85%, Xiaomi ~6%, Other ~6%, xAI/Cursor ~2%. Volume in thousands of mana, not millions.

Trap. This file puts 85 on the briefing because the MARKET says 85. The internal suspect rubric (22 MiMo, 9 Composer) is ANOTHER bar, ours, not Manifold.

Ox cut. Use it as room temperature, not as a fingerprint. Pliny and Davis bet GLM; that is not the token subtraction.

In plain. The lab drops the parameters (sometimes with a license). You can run it on your machine if it fits. Different from “open source” training code, which almost nobody drops whole.

Analogy. They give you the cake recipe (weights) but not the kitchen diary (data + train code). Inkling did that. Ox did not.

Example. Inkling (Mira, 15 Jul 2026): public weights, ~975B/41B, text+image+audio. GLM-5.3 promised weights ~2 weeks after Aug 14; still out on the 21st.

Trap. A stealth model is not open-weights. If Ox were, you would not need fingerprinting: you would download it and read config.json.

Ox cut. Ox is anonymous on purpose. That already closes Inkling. It also closes “it is Llama 4 I forgot”.

In plain. You start from an already-trained model and keep training it on a trade (code, medicine, “be Cursor”). It keeps the tokenizer. Behavior changes. That is why a GLM fine-tune still smells like GLM on the knife.

Analogy. You paint a Ferrari another color. Engine, chassis and serial stay Ferrari. The workshop may be another… or the original.

Example. Composer 1 was rumored as a GLM/Kimi fine-tune. Composer 3 was pitched as from-scratch 1.5T. Ox with a GLM tokenizer + z.ai errors fits from-scratch poorly.

Trap. Fine-tune explains a GLM knife + benches not identical to 5.3. It does NOT explain 1210, Chinese logs and the 5V-Turbo toll unless they serve from the z.ai kitchen.

Ox cut. A 9–12% suspect in this file (Cursor/Anomaly). Alive. Not leading. 100T/day is still a hyperscaler bill.

In plain. The model generates tokens YOU do not see (the cheat sheet) and then the clean answer. GLM-5.3 will not let you turn it off: low / high / max. Ask for disabled and 1210 explodes.

Analogy. A friend who can only say one word at a time, but is great at guessing the next. “Reasoning” is writing the cheat sheet first.

Example. Ox, like 5.3, seems always-on thinking. Max by default. That aligns APIs, not IQ. A small model can also be mandatory-thinking.

Trap. “It thinks” does not mean there is a homunculus. It still predicts tokens. It just reserves a budget for the draft.

Ox cut. Adds to the GLM profile. Does not pick the SKU. The knife and the toll weigh more than OpenRouter’s reasoning adjective.

In plain. A battery of tasks to compare models. N matters. Who paid matters. If the test leaked into training, 90% is copying.

Analogy. Hit 10 free throws and claim you are better than the NBA. Maybe. Maybe you picked the easy ones.

Example. DeepSWE has 113 tasks. Davis ran 10: Ox ~80%. Wenqi (the author) ~63% on a more serious subset. Kingbench: Ox 87.5 vs GLM-5.3 91.25.

Trap. The viral table putting Ox over Fable/Sol as if it were the official leaderboard is WRONG. n=10 is not n=113.

Ox cut. We use benches as a family clue (it looks like GLM), not a gold medal. Dylan Fetch on OpenTTD saw it slow and weak: real dissent.

In plain. Three papers clash. OpenCode: zero data retention. OpenRouter card: the provider RETAINS prompts and does not train. Stealth EULA: free access is consideration for training. You cannot believe all three.

Analogy. The restaurant says “we do not record”. The receipt says “we keep the order”. The app contract says “we use your recipe”. Pick who you believe before telling grandma’s secret.

Example. OpenRouter post: “this time the provider does not train”. The /terms/stealth the card links says the opposite for User Content.

Trap. “Free” is not charity. In stealth it is usually payment in prompts. Treat Ox like a stranger in a public café.

Ox cut. The file does not settle the contract. It warns you: do not paste keys, medical histories, or the company’s secret repo.

In plain. A bit is 0 or 1. With n bits you can represent 2ⁿ things. 2¹⁰ = 1,024. 2²⁰ = 1,048,576. GPUs love those sizes. That is why you almost never see a round “1,000,000 tokens” on a serious sheet.

Analogy. Eggs in 12s, not 10s. The box fits. Here the box is the attention mask.

Example. A “64 GB” stick does not have 64,000,000,000 round bytes. Ox context = 1,048,576 = GLM-5.2/5.3. Max out 131,072 = 2¹⁷ = GLM-5V-Turbo, not 5.3’s official 128K.

Trap. Xiaomi also uses 1M. 2²⁰ is not a passport. 131,072 vs 128K does push “not the brochure 5.3”.

Ox cut. In Labs → 2ⁿ desk you can move n and watch it grow up to Ox’s desk.

In plain. Z.ai, Xiaomi, OpenAI, Cursor, Thinking Machines… are labs (or studios). OpenRouter is NOT a lab: it is the mall. OpenCode is a terminal/agent that consumes models.

Analogy. The mall sells you the coffee. It does not say which farm roasted the bean — unless the cup has their stamp (error 1210).

Example. 2026 stealth channel: Zhipu, Xiaomi, Ant, Meituan. The West almost never puts an anonymous animal here. Inkling dropped WITH a name on Aug 21.

Trap. “It is China” is not silicon racism. It is THIS channel’s statistics. A US lab could use it; so far 4/4 did not.

Ox cut. The leading thesis names the lab (Z.ai) and the family (GLM-5.x). The SKU (Flash vs 5.3V) is still open.

In plain. Modality = kind of data. Text, image, audio, video. Ox: text+image+video IN, text OUT. Rejects audio. Inkling: text+image+audio. Public GLM-5.3: text only.

Analogy. It does not eat peanuts. Cousin Inkling does. It is not that cousin. The brochure 5.3 does not even ship a camera.

Example. A 2s 360p clip costs it 296 tokens. The same clip on GLM-5V-Turbo: 296. On MiMo v2.5: 910 and it ALSO accepts audio.

Trap. “Multimodal” in a tweet does not say which modalities. Always ask: audio? video? image out? Ox does not generate video; it READS it.

Ox cut. Native video is what splits it from public 5.3 and pulls it toward GLM-5V. Rejected audio is what kills Inkling and MiMo-Omni.

In plain. In Chinese families, Flash/Air is usually the same building with fewer people awake (or a distill). Cheaper to serve. That is why someone can gift 100T of capacity.

Analogy. Coke and Coke Light. Same house, less sugar. Taste betrays the brand. Calories betray the SKU.

Example. Leo/@synthwavedd said “GLM-5.3 Flash”. AGTP repeated “~300B community estimates”. Zero Z.ai sheet. Wenqi: “big model smell” (~63% DeepSWE) cuts against a small distill.

Trap. Flash is not a flavor you have verified. Treat it as technical gossip on top of the GLM ID, not a second identity.

Ox cut. Leading thesis: multimodal GLM-5.x family. Flash/Air is the loudest last name, not the only one. 5.3V (same size + camera) fits just as well.

In plain. Hidden text glued at the start: who you are, what not to say, what tone. The user does not see it. The model reads it as page 1. It counts as tokens. On Ox they are ~75 fixed.

Analogy. Hotel letterhead. The body of the letter is yours. The 75 words at the top belong to the chain: “you are ox-alpha, undisclosed organization”.

Example. Δ(Ox, GLM-5.3)=75 on 6–25 prompts and several languages. If the knife changed, 75 would become 71 or 90. Pliny leaked the wrapper that fits those 75.

Trap. The letterhead can order it to fake an identity. That is why a jailbreak that yells “I am GLM” is soft: the system prompt can also ask the opposite.

Ox cut. 75 is the extra, not the crime. The crime is that the rest of the count matches GLM-5.3 token for token.

In plain. The numbers the model saved after studying. They are the frozen parameters. Downloading weights = taking the brain with you. Ox publishes none. Inkling does.

Analogy. Recipe vs a covered plate. Open-weights give you the baked cake. Stealth serves the dish and hides the kitchen.

Example. Inkling ~975B/41B Apache-2.0, July 2026. Ox: zero. Public GLM-5.3 is not open-weights in the Inkling sense either; it is served by API.

Trap. Weights ≠ tokens. Tokens are the Lego of your sentence. Weights are the hands. “Open-weights” is not “fully open source”: data and the training recipe are often missing.

Ox cut. Without public weights you have to fingerprint. If Z.ai dropped a 5.3V open-weights, the +75 would go from mystery to catalog.

In plain. A small net that looks at each token and picks which k experts turn on. “Stingier gating” = Flash/Air: same brand, fewer on shift, cheaper to serve.

Analogy. ER triage. You do not wake the hospital. The doorman is not a different doctor: it is the person with the list.

Example. GLM-5: ~744B total, ~40B active/token. If Ox is Flash, gating wakes fewer. The tokenizer can still be the same. House flavor, Light calories.

Trap. Gating ≠ lab identity. Many labs do MoE. The doorman explains the bill, not the passport. The knife and the encoder do push the passport.

Ox cut. Rumored ~300B is gating gossip. Treat it as a SKU, not as proof. +75 is still harder.

In plain. Dense = every knob wakes on every token. MoE = a doorman wakes k. A dense 2T bills 2T the whole time. A 744B/40B MoE bills 40B. That is why 744B can be cheaper than 2T.

Analogy. A lamp that lights the whole city vs lamps that light only your street. The city is still there. You pay for the street.

Example. Cost ≈ k · P_active · tokens (MoE) vs P_total · tokens (dense). A lab can gift a weekend with MoE. With a dense 2T, it goes broke.

Trap. “More parameters” in an MoE does not map 1:1 to the bill or to intelligence. Do not insult with “fewer parameters”.

Ox cut. If Ox is GLM-5.x, it inherits MoE. The Flash rumor is “even fewer awake”, not a small dense model.

In plain. The model does not write: it computes a list of next pieces with probabilities and DRAWS one. Temperature flattens or sharpens that list. Top-p trims the tail. Sampling = that lottery.

Analogy. A roulette wheel with fatter slices for “blue” than for “magenta”. Temp 0 = only the fattest slice. Temp 1 = the honest wheel.

Example. At temp 0, testers saw markdown and LaTeX 0{,}375 identical to GLM-5.3. That is degenerate sampling: the maximum a posteriori, repeatable.

Trap. Sampling is not “thought”. It is a die. A wrapper can copy the style at temp 0. The +75 does not come from the die: it comes from the knife.

Ox cut. The hard test is not sampling (soft). It is tokenizer + encoder. Sampling is still kitchen evidence, grade B.

In plain. Fitting 1,048,576 tokens does not prove the model reads meter 400. It often attends well to the start and the end and loses the middle. Capacity is the desk. Attention is whether it finds the notebook.

Analogy. Chrome with 200 tabs “fits”. That does not mean you remember tab 87.

Example. Nobody has audited Ox at 800K. GLM-5.2 shipped IndexShare so it would not pay full attention at 1M. The million is a ceiling, not a recipe.

Trap. “Paste the monorepo because it fits” is how you burn tokens and lose the requirement. Lost-in-the-middle is a classic paper (Liu et al.), not an Ox meme.

Ox cut. 2²⁰ aligns with GLM and Xiaomi: engineering, not a passport. Do not use the million as identity proof or as permission to paste secrets.

In plain. Chat = pretty bubbles. API = JSON: you send temp, max tokens, thinking; raw prompt_tokens come back. The brain can be the same. The window betrays the storeroom (error 1210).

Analogy. Ordering at the bar vs delivery. Same kitchen. The complaint ticket comes from the window, not the terrace.

Example. In chat you do not see prompt_tokens. In API you do: that is why the +75 test exists. RocketmanSh sent an illegal max_tokens → 1210, the same sign as chat.z.ai.

Trap. Blaming OpenRouter for the identity is blaming Amazon Logistics for the phone. Fingerprinting is done via API.

Ox cut. stealth/ox-alpha is the aisle. 1210, CJK logs and prompt_tokens are the storeroom ticket.

In plain. The model always guesses the next piece. Sometimes it sounds like a fact and is not. Hallucination = fluent text not anchored to data or to the box. Confidence ≠ truth.

Analogy. A student who memorized the library and improvises the citation. The tone is exam-ready. The page does not exist.

Example. “Who won yesterday?” with no search: it invents or it refuses. An “I am GLM” jailbreak can be the same pattern: it completes “models reveal their name”.

Trap. Temp 0 cuts variety, not lies. If the most likely thing is an error, it will repeat it.

Ox cut. We do not lead with “Ox said it is GLM”. We lead with counts and tolls, which do not hallucinate. The parrot does not fake a 296=296.

In plain. Loop: read the goal → pick a tool (terminal, browser, test) → see the result → change a file → come back. Each turn pastes the repo again. It is not a chat.

Analogy. Not the teacher. The intern you leave the laptop with. The coffee is tokens. The thermos is the prefix cache.

Example. OpenCode, Hermes Agent, Claude Code: top Ox consumers. A chat = 1 turn. A repo agent can be 80. That is why 97% hit rate and 100T of capacity.

Trap. “Agentic” is sometimes just thinking tokens with no tools. Ask: does it have a real terminal?

Ox cut. The sheet: coding, long agents, production. The loop is why cache, 1 GW and stealth line up.

In plain. Pretrain = swallow the internet and learn to complete text (base). Post-training = teach it to obey (instruct/chat) and not be a monster. GLM-5.3 IS post-training on the 5.2 base.

Analogy. First you read every book. Then they train you to answer in an oral exam. Extra fine-tune = private lessons with someone else’s notes.

Example. Composer 3 was sold as 1.5T from-scratch. A from-scratch would NOT inherit a GLM tokenizer or ModelScope logs. A GLM post-train would.

Trap. Fine-tune and “it is GLM from z.ai” are not enemies. Ask WHO serves it and WHAT it inherited (knife, encoder, 1210).

Ox cut. Leading thesis: multimodal GLM-5.x family. Third-party fine-tune: alive, not leading. From-scratch Cursor: wounded.

In plain. A FIXED extra of tokens in front of your prompt. On Ox, Δ vs GLM-5.3 = 75 in every language. That is letterhead (system prompt / template), not another knife. If the knife changed, 75 would not be constant.

Analogy. Two cooks, same cucumber: always 8 slices, plus 75 of letterhead on one. The scissors are the same.

Example. RocketmanSh: Ox 88/106/97/108 vs GLM 13/31/22/33 → +75 each row. aitrackerbot N=25. r/singularity N=6. KatilaMarriete: OpenRouter Ox ≡ OpenCode Zen, both +75 vs GLM.

Trap. Same tokenizer ≠ same weights. Someone could have fine-tuned GLM. But Kimi/Qwen/MiMo/MiniMax diverge. You do not copy a dictionary by accident.

Ox cut. THE star test. Subtract prompt_tokens. If Δ is constant, it is the same knife. A graduate can repeat it today.

In plain. When the API fails, the server dumps an internal code. 1210/1214 had already been seen on chat.z.ai. It is the workshop’s language, not OpenRouter’s aisle.

Analogy. ATM “error 12-B”: only the corner bank uses that code. You already know whose machine it is even with no logo.

Example. RocketmanSh: illegal max_tokens → 1210. Pritish: 1210/1214 = chat.z.ai. Josh rad: Chinese logs + GLM strings from ModelScope.

Trap. A clean wrapper could translate errors. That 1210 KEEP coming out is a proxy slip or a direct z.ai service. Occam: z.ai.

Ox cut. Kills Anomaly-self-host, Cursor-clean-ID, ByteDance-Volcano, MiniMax, Hy4. The ticket is z.ai’s.

In plain. SKU = the concrete product variant (5.3 vs 5.3V vs Flash vs Air). The neighborhood can be Z.ai and the floor still have no sign. Manifold bets the lab, not the SKU.

Analogy. Same building, different floors. You know the neighborhood. You do not have the floor number.

Example. Public 5.3 = text only, 128K out. Ox sees video and outputs 131,072. So it is not the brochure one. Flash/~300B is rumor. 5.3V fits the encoder. Air is a forum nickname.

Trap. MaxForAI sometimes writes Flash as if it were a sheet. It is not. Do not turn a noisy last name into a second identity.

Ox cut. Leading thesis: unpublished multimodal variant of GLM-5.x. Exact SKU waits for a communiqué or a live run.

In plain. You send the same set of weird texts (emoji, CJK, code, empty) to two APIs and subtract the counts. L1 = sum of |differences|. 0 = same knife. 150–300 = a random knife.

Analogy. Two keys: if they open the same 6 locks in the same order, they are copies. If one fails on emoji by 33 tokens, it is not the copy.

Example. Tony Zhou: Ox vector [76, 384, 114, 64, 49, 313] identical to z-ai/glm-5.3 (L1=0). MiMo 176. MiniMax 172. unclecode modelprint: GLM 4/4; Kimi 0/4; MiniMax 0/4; Qwen 1/4; MiMo ≤2/4 (emoji 90 vs 57).

Trap. L1=0 proves vocabulary/template, not weights. It is still the death of MiMo-V3, MiniMax, Hy4, Grok, Seed-as-weights and Composer-from-scratch.

Ox cut. Together with +75 and the 296 toll, it is the tripod that kills rivals. It is not a passport signed by Z.ai.

In plain. OpenCode said “capacity for 100T tokens/day”. That is a factory ceiling, not a meter. What OpenRouter observed on Aug 21 was ~1.7–3.9T. Two orders of magnitude below.

Analogy. A factory says “we can make 100 million sneakers a day”. On Saturday they sold 2 million. Both figures can be true.

Example. Dan (@DanDr1s): ~3.85T in one day (OpenRouter+OpenCode) as a ByteDance argument (Doubao 120T+/day). Z.ai has a 1 GW data center (Tom's Hardware / Bloomberg 21 Jul 2026). Pony Alpha already gifted compute.

Trap. 100T does not ID the lab: Xiaomi, Tencent, ByteDance and Z.ai can dream that bill. The fingerprints (tokenizer, 1210, encoder) do pick the neighborhood.

Ox cut. Kills “they have no compute” and “it is a living-room wrapper”. Does not kill GLM vs ByteDance-as-CDN. The CDN still resolves to Z.ai on Manifold if Z.ai is who claims it.

In plain. Before guessing the next piece, the model looks at ALL previous pieces and decides which matter now. “River bank” vs “the bank that lends”: attention picks the sense.

Analogy. In a 40-person WhatsApp group you do not read all 40 messages with equal intensity. Attention is the highlight: who said what, how long ago, and whether it matters for your reply.

Example. An 8-token sentence. Attention is an 8×8 table of “how much i looks at j”. That grows with the SQUARE of context: that is why 1 million tokens is expensive, not just “more memory”.

Trap. “It has 1M context” does not mean it attends equally to token 1 and token 900,000. There is forgetting, lost-in-the-middle. The number is the box’s ceiling, not the quality of the gaze.

Ox cut. Ox Alpha lists 1,048,576. That is a huge box. It does not prove identity. It proves the lab dared to pay quadratic attention (or a trick that fakes it) at factory scale.

In plain. The 2017 architecture almost every LLM uses: attention blocks + layers that mix numbers, stacked tens or hundreds of times. Not a brand. The blueprint.

Analogy. If an LLM is a building, the transformer is the blueprint: same floors, different height, different finish. GPT, Claude, GLM, Gemma: almost all copy that blueprint and change the fittings.

Example. Paper “Attention Is All You Need” (2017). Since then the fight is not “transformer or not?”, it is how many layers, which MoE, which tokenizer, which data.

Trap. Saying “it is a transformer” does not ID the lab. It is like saying “it is a four-wheel car”. Ox’s prints sit in the knife and the toll, not in the generic blueprint.

Ox cut. Ox, GLM-5.3, MiMo, MiniMax: all transformers. That is why the blueprint does not kill rivals. The dictionary and the video encoder do.

In plain. The model does not “think a sentence”. It bets, brick by brick, which ID comes next. Logits = raw scores for every possible brick. Softmax turns them into percentages. Temperature squashes or stretches them.

Analogy. An urn with millions of ballots. Logits = how many ballots each word has. Softmax = percentages. Temperature 0 = the one with the most ballots always wins. High temperature = sometimes the weird one comes out.

Example. After “The sky is”, “blue” may have logit 12.4 and “green” 7.1. At temp 0 blue always wins. At temp 1.2 green sometimes wins. That is why style prints are measured at temp 0: same urn, same winning ballot.

Trap. “Creativity” is not magic: it is temperature + sampling. A model does not get smarter at temp 1.5; it gets drunker. Temp 0 does not guarantee truth, only consistency.

Ox cut. Testers compare Ox and GLM-5.3 at temperature 0. If answers look alike (and the knife matches), that is family evidence. Not a passport: a fine-tune can also copy the first token.

In plain. Byte Pair Encoding: the lab looks at a pile of text and merges the most frequent byte pairs until it has a dictionary (vocabulary) of ~100k pieces. SentencePiece is a similar recipe, common in Chinese labs.

Analogy. A butcher who, after cutting a thousand carcasses, stops splitting “steak” into “st-ea-k” and keeps a “steak” mold. The mold is the vocabulary. Two shops with the same mold cut the same.

Example. If GLM and Ox count 8 tokens for “Hello, how are you today?” and Kimi counts 9, Kimi is not smarter: its mold split differently. Ox’s +75 is the GLM mold plus a fixed letterhead.

Trap. Same BPE ≠ same weights. You can inherit the knife and paint the engine. That is why the tokenizer kills vocabulary rivals (MiMo, MiniMax, Hy4) and does not close the SKU (5.3 vs 5.3V vs Flash).

Ox cut. Zhou’s L1=0 says: same mold, same quirks. The +75 letterhead is extra text, not another dictionary. That is the file’s hard test.

In plain. How many distinct pieces the knife knows how to cut. 32k, 100k, 150k… Each ID is a drawer. If two models share counts on weird texts (emoji, CJK, empty), they almost surely share the chest of drawers.

Analogy. A Lego box. 100,000 distinct shapes. If your friend builds the same dog with the same 47 pieces, they are using your box, not another maker’s.

Example. Zhou’s vector [76, 384, 114, 64, 49, 313] identical Ox vs GLM-5.3. That is not “similar”: it is the same box. MiMo distance 176: another box.

Trap. A large vocabulary does not make the model more cultured. It makes the cut more efficient in some languages. What IDs it is the match, not the size.

Ox cut. Nobody published Ox’s vocab size. No need: the L1=0 vector already says “same box as GLM-5.3”.

In plain. How system / user / assistant get packed before tokenizing: special tokens, roles, end of turn. If the template changes, the count changes. Ox’s +75 is, in the thesis, a ~75-token system prompt on top of the GLM template.

Analogy. An envelope with letterhead, stamp and “Yours sincerely”. The body can be yours; the 75 protocol words are the hotel’s. If they always add 75, the envelope is the same.

Example. KatilaMarriete: OpenRouter and OpenCode Zen give the same +75. Same envelope in two malls. Not a bug in one aisle.

Trap. If a tester does not use the same template (drops the system, changes roles), Δ stops being 75 and they think the knife changed. The constant only shows up when the experiment is clean.

Ox cut. The +75 is not “Ox is wordier”. It is letterhead + template. That is why you subtract, you do not stare at the absolute number.

In plain. P50 = the median: half of requests are faster, half slower. P99 = the worst 1%. OpenRouter publishes snapshots (Ox ~3.88s / 26 tok/s one day). They move. Not a passport.

Analogy. ER wait time. The median is not the record and not the 4 a.m. hell. A Saturday snapshot is not the whole hospital.

Example. A tester timed Ox slower than GLM-5.3 at coding (18.3s vs 6.7s). That can be queue, thinking tokens, or a different SKU. It does not kill the GLM thesis: a Flash/V sibling can think longer.

Trap. Slower ≠ dumber. A “thinking” model spends invisible tokens before it speaks. Comparing P50 of a free stealth (queue) with a paid API (lane) is a trap.

Ox cut. The sheet shows P50. We use it as an official fact, not a fingerprint. Identity is played in tokenizer and encoder, not in Saturday’s traffic light.

In plain. Throughput: pieces emitted per second once it started talking. Different from latency (time to first token). A “thinking” model can take 4s for the first token and then pour at 80 tok/s.

Analogy. A waiter who thinks about the order for 20 seconds and then arrives with the whole tray. Wait and serving speed are two numbers.

Example. OpenRouter snapshot: ~26 tok/s. Coding testers spoke of 49–78 tok/s depending on the queue. Both can be true: different hour, different lane.

Trap. tok/s does not ID the lab. A ByteDance CDN serving GLM can be faster than z.ai’s public API. Speed ≠ author.

Ox cut. It serves the factory story (someone has a fleet) and stops you mixing thinking slowness with “small model”. It does not enter the identity rubric.

In plain. Lab = who trained the weights (Z.ai, Xiaomi…). Provider = who serves the API today (may be the lab or a CDN). Router = OpenRouter / OpenCode Zen: the mall. OpenRouter says it: “we are not the owner”.

Analogy. The chef, the waiter, the mall. If the error ticket is from the Chinese restaurant in the food court, the mall did not cook the dish. ByteDance-as-CDN would be a giant waiter, not the chef.

Example. stealth/ox-alpha = OpenRouter aisle. x-preview-f-free = OpenCode Zen aisle. 1210 = z.ai cashier stamp. Three layers. Identity lives in the till, not in the aisle.

Trap. “OpenRouter launched Ox” is a lazy headline. OpenRouter routes. OpenCode boasts capacity. The lab hides. Blaming the mall for the passport is forum error #1.

Ox cut. Leading thesis: Z.ai lab, provider probably the same stack (error 1210, ModelScope logs). ByteDance CDN: alive as waiter, not chef. Anomaly/OpenCode: loudspeaker.

In plain. The LLM does not run code or search the web by itself. It asks for JSON (“open this file”, “run this test”). The AGENT (OpenCode, Claude Code, Cursor) executes and returns the result. Then the model asks for another tool. That is the loop.

Analogy. A surgeon who does not touch the scalpel: they say “incision here”. The nurse cuts. The surgeon looks at the photo and asks for something else. The brain is the model; the hands are the agent.

Example. OpenRouter sells it for “sustained agentic work”. DeepSWE measures that: not a chat, a repo to fix with tools over many steps (~117 vs GLM-5.3 ~124 in one report).

Trap. If the agent is dumb (bad parser, bad sandbox), the model looks dumb. Blaming Ox for an OpenCode fail is blaming the surgeon for the nurse. And vice versa.

Ox cut. The sheet promises long agents, not a chatbot. That is why the stealth is tested in coding loops, not “write a poem”. 10-task quizzes do not replace DeepSWE’s 113.

In plain. Before answering you, a “reasoning” model writes a draft you sometimes do not see. It costs tokens. GLM-5.3 will not let you turn it off: low / high / max, never off. Ox inherits that lever.

Analogy. An exam where you must do the rough work on the back of the sheet. You can ask for short, medium or long rough work. You cannot hand in a blank back.

Example. Isenberg: OpenCode Zen x-preview-f-free exposes thinking low/high/max. Same lever as GLM-5.3. If you could set off and the model stayed just as smart, it would not be this contract.

Trap. The draft is not “consciousness”. It is more prediction tokens, sometimes with a different reward. It is not free either: you pay latency. A high P50 can be thinking, not queue.

Ox cut. The low/high/max lever is a GLM-5.3 contract print, softer than +75 but harder than vibe. It adds. Alone it is not enough.

In plain. The model does not search by itself. A system pastes scraps of relevant documents into the box and says “answer with this”. That is Retrieval-Augmented Generation. Not magic and not the stealth.

Analogy. A student who does not remember the statute. You put the article on the desk and they draft. The brain is the same; the filing cabinet is extra.

Example. Cursor / Claude Code paste the open file into the prompt. That is homemade RAG. It does not turn Ox into a search engine. If the file is missing, it hallucinates.

Trap. “It has internet” is almost always RAG or a tool, not the model. Ox’s sheet does not promise search. Do not ask it yesterday’s match like Google.

Ox cut. This dossier does not RAG against Ox: we do not call the API. We teach the pattern. If you later paste a PDF into Ox, you are doing RAG, not “Ox knows your PDF”.

In plain. Pretrain = reading the internet (base). Post-training = teaching it to obey, to code, not to insult. RLHF = humans (or an AI judge) score answers and knobs turn toward what they like. GLM-5.3 is post-training on the 5.2 base: same building, new schooling.

Analogy. A child who read the whole library (pretrain) and then interns at a hospital (post-training). The vocabulary was already there. The craft was not.

Example. Z.ai: “GLM-5.3 uses the same base as 5.2 — every gain comes from post-training”. Terminal-Bench 4.6% → 28.3% without changing the knife. That is why a stealth 6 days later can be another post-train, not another building.

Trap. Post-training changes benches and style; almost never the tokenizer or the video encoder. If Ox shares knife and toll, post-train is not an alibi: it is the natural mechanism of a sibling.

Ox cut. Leading thesis: multimodal post-train (cameras) on the 5.x family, not a from-scratch. Composer-from-scratch is wounded because it would inherit too much z.ai workshop.

In plain. Training a small model to imitate the answers (and sometimes the logits) of a big one. Cheaper to serve. “Flash” / “Air” often smell like a distillate or a MoE with fewer experts awake.

Analogy. A resident copying the head of department. They do not have 40 years of craft; they have the shortcuts. Sometimes they match. Sometimes they skip a weird step.

Example. Kingbench Ox 87.5 vs GLM-5.3 91.25: sibling, not twin. Fits a distillate or fewer experts. Flash/~300B is RUMOR, not a sheet. Do not turn it into a second identity.

Trap. A distillate usually INHERITS tokenizer and sometimes encoder. That is why distilling does not erase prints: it explains them. “It is a distillate” and “it is GLM” can be the same sentence.

Ox cut. The Flash/Air thesis is distillation or a light MoE to gift 100T. Still Z.ai neighborhood. Exact SKU waits for a communiqué.

In plain. Weights are numbers with many decimals (fp16, bf16). Quantizing = storing them fatter and rounder (int8, int4) so they fit on fewer GPUs. Sometimes the model gets a bit clumsier. It does not change the knife.

Analogy. A RAW photo vs a JPEG. The face is still yours. It takes less space. At 4-bit you see artifacts. The ID does not change name.

Example. Serving 40B active in int4 fits on fewer chips than bf16. That helps gift tokens on a weekend. It does not explain +75: the tokenizer lives before the weights.

Trap. “It is worse, so it is not GLM” is a trap: a quantized or distilled GLM is worse and still GLM. Measure the knife, not the JPEG.

Ox cut. Quantization is a SERVICE hypothesis (how they gift 100T), not identity. Fits Flash/Air. It neither kills nor saves Z.ai.