LineageEval Traces Ox Alpha's Censorship Pattern to GLM Model Family
Researchers analyzed Ox Alpha, a model that appeared on OpenRouter on August 20 without a disclosed developer, using their LineageEval censorship-detection tool. They found its tokenizer matches the GLM-5.x vocabulary exactly across 11 tests, confirming community suspicions that it belongs to the GLM family despite being listed as a third-party product.
GoKawiil's interpretation of the reporting above, not reported fact.
Rather than broadly softening answers like DeepSeek V4 Flash, Ox Alpha behaves like most Western models on most sensitive subjects but flips into hard refusal on a narrow list of seven topics, including Xi Jinping and domestic incidents. This binary, topic-specific censorship pattern is a distinctive fingerprint that can help identify a model's true origin even when its provenance is deliberately obscured.
- Ox Alpha's tokenizer matches GLM-5.x vocabulary in all 11 tested instances, tying it to the GLM family.
- Its censorship is concentrated in just 7 topics, contributing nearly all of its overall censorship score.
- Unlike DeepSeek V4 Flash's broad, mild censorship, Ox Alpha shows a sharp on/off switch limited to a defined blacklist.
AI Engineering" by Chip Huyen (book) — If tracking mystery models across OpenRouter and reverse-engineering tokenizer vocabularies sounds like your kind of puzzle, this book covers how modern foundation-model applications are actually built and evaluated. It's a solid grounding in evaluation design, the same discipline behind instruments like LineageEval.
See AI Engineering" by Chip Huyen (book) on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: ctgt.ai, 2026-08-25
Published there as: “Behaviorally fingerprinting Ox Alpha's provenance”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.