An anonymous model called Ox Alpha appeared on OpenRouter on 20 August 2026 as stealth slash ox-alpha, with a one million token context window, free preview pricing, and no company willing to claim it. OpenRouter states plainly that it is not the developer, owner or provider. Within three days OpenCode live data showed roughly twelve trillion tokens processed, one hundred and eighty thousand users and three and a half million sessions, making it the number two model there by recent usage. The headline benchmark needs care. The eighty percent Pass at one on DeepSWE came from a ten task subset. DeepSWE has one hundred and thirteen tasks across ninety one repositories in five languages, so ten tasks is under nine percent of it and a single task moves the score about ten points. A separate full set evaluation lands near sixty three percent, level with GPT five point six Sol mid and below Claude Fable 5 at sixty five. On attribution, one developer says he is ninety nine percent certain it comes from Zhipu AI and is likely an unreleased GLM five point three variant, citing a matching video encoder, tokenizer, response style and jailbreak behaviour, and separate forensics report a thirty out of thirty tokenizer match. Strong circumstantial evidence, still not confirmation. Full written analysis, every figure and who reported it: https://stealthmodel.novcog.us.com/ — Independent NOVCOG analysis, not affiliated with OpenRouter, OpenCode, Zhipu, Anthropic, OpenAI or Google.