Tell me about GLM-5.2

I feel like it came out of nowhere and because it’s Chinese, I inherently feel like they stole technology from the US

GLM-5.2 is the latest flagship model from Z.ai (formerly Zhipu AI), a Chinese startup, released about a week ago. It’s an open-weight model built for “long-horizon tasks,” with a 1-million-token context window aimed at project-level engineering work. Ollama It currently tops the Artificial Analysis Intelligence Index among open-weight models with a score of 51. cryptobriefing On long-horizon coding benchmarks it trails Claude Opus 4.8 by roughly 1% on FrontierSWE while edging out GPT-5.5, making it the highest-ranked open-source model across several such tests. Ollama It’s a 744B-parameter model, and notably, it reportedly runs entirely on Huawei silicon rather than Nvidia chips. decrypt

On the “stole technology” instinct — I’d gently push back on that, because it’s worth separating a few things.

There’s no public evidence that GLM-5.2 specifically involved stolen US IP. The model is open-weight, meaning its weights are published, and the broader Chinese AI sector (DeepSeek, Qwen, GLM) has been producing genuinely competitive frontier models through their own research, large engineering teams, and published papers. The fact that it runs on Huawei chips actually cuts against the “they just copied us” narrative — that’s domestic hardware built partly because US export controls cut off Nvidia access.

That said, a real and legitimate version of the concern exists: the entire field is built on shared foundations. The transformer architecture came out of Google, much foundational work is American, and there are documented cases of corporate espionage in tech generally. But “the field has shared roots” and “this Chinese lab stole this specific model” are very different claims, and the leap from “it’s Chinese” to “therefore stolen” is the part worth examining — that’s an assumption about origin, not a finding about this model.

The more boring explanation fits the evidence better: China has enormous technical talent, heavy state and private investment, and strong incentives under export controls to build independent capability. Open-weight releases like this are partly a strategic play to gain influence and adoption globally.

Subscribe

How much can we trust the benchmarks? Aren’t models able to understand when they’re being tested and behave accordingly? And where does GLM-5.2 rank compared to other models?

Two separate questions here, and the first one is sharper than it sounds.

On benchmark trust, there are actually three different problems, and “models knowing they’re tested” is the least important of them:

The big one is contamination. Benchmarks are public, so their questions and answers leak into training data. A model can score well by having effectively seen the test, not by reasoning. This is mundane and pervasive and it inflates scores across all labs, not just Chinese ones.

The second is teaching to the test — labs optimize hard for benchmarks that matter for press and rankings, which is why a model can top a coding leaderboard yet feel mediocre in daily use. Worth noting one of the searches earlier flagged exactly this: GLM-5.2 topped open-weight rankings “despite mixed real-world reviews.” That gap is the tell.

The third — your actual question — is evaluation awareness. Current models can sometimes detect benchmark-style framing (multiple choice, artificial phrasing, “you are being evaluated”) and there’s research showing behavior can shift under test conditions. But “behave accordingly” mostly means safety behavior — a model acting more cautious when it senses it’s being watched. For a capability benchmark like coding, a model can’t fake being able to build a compiler. It either produces working code or it doesn’t. So eval awareness is a real concern for safety and alignment testing, much less so for raw capability scores like the ones GLM-5.2 is topping.

Net: trust benchmarks as a rough ceiling, not a measure of real-world usefulness, and treat single-leaderboard wins skeptically. Independent aggregators that rotate or hold out test sets (like Artificial Analysis or LMArena-style human voting) are harder to game than any single benchmark.

On where GLM-5.2 ranks: it’s the top open-weight model right now by several measures, sitting just below the closed frontier. The rough tiering as of this week:

• Closed frontier (top): Claude Opus 4.8 leads most long-horizon coding benchmarks; GPT-5.5 and Gemini 3.1 Pro are in the same tier.

• GLM-5.2: Best open-weight model; trails Opus 4.8 by ~1% on FrontierSWE, beats GPT-5.5 on some tasks, ahead of Gemini 3.1 Pro on others. Scores 51 on Artificial Analysis’s index — highest open model.

• Below it: Other strong open models (DeepSeek, Qwen lines) and the previous GLM-5.1.

The honest summary is that the open-weight gap to the closed frontier has narrowed to low single digits on the benchmarks GLM-5.2 is tuned for — but “mixed real-world reviews” is doing real work in that sentence. Benchmark-best and best-to-actually-use are not the same thing, and the daily-use winner is still contested.

Has z.ai been around for a while? Do they publish any research papers? And why are the Chinese going open source, but the Americans are keeping models closed source?

No, they’re not new — and yes, they publish extensively. Both facts cut against the “came from nowhere / stole it” instinct.

On longevity: Z.ai (formerly Zhipu AI) was founded in 2019, spun out of Tsinghua University Wikipedia — China’s top technical university. The founders, Tang Jie and Li Juanzi, were both Tsinghua computer science professors AI Wiki, and Tang Jie is a Fellow of the ACM, IEEE, and AAAI who led Tsinghua’s Knowledge Engineering Group for years and mentored a generation of Chinese AI researchers. AI Wiki They’ve been shipping models since 2021. In January 2026 they completed an IPO on the Hong Kong Stock Exchange, making them the first major AI model developer to go public anywhere in the world. memeburn This is an established, publicly-traded research institution, not a fly-by-night operation.

On research papers: yes, prolifically, and through normal academic channels. They published their foundational GLM paper, “GLM: General Language Model Pretraining,” in 2021. Grokipedia They presented CogView, a text-to-image model, at NeurIPS 2021 — one of the top peer-reviewed AI conferences in the world. AI Wiki They publish at the same venues American labs do, and their models are openly hosted on Hugging Face and GitHub. AI Wiki The work is out in the open for anyone to inspect, which is roughly the opposite of how stolen technology gets handled.

On your earlier instinct, this is the part worth sitting with: a lab with this lineage — top university, ACM/IEEE Fellows, a decade of published peer-reviewed work, NeurIPS papers — is exactly the kind of institution that produces frontier research on its own merits. The “stole it from the US” feeling becomes harder to sustain once you see the actual provenance.

Now your real question — why Chinese labs go open and American ones stay closed. A few genuine forces, not one:

Strategic catch-up. When you’re not the frontier leader, openness is a way to gain influence, adoption, and goodwill fast. Give the weights away, become the default that developers worldwide build on, and you shape the ecosystem even without the single best model. OpenAI and Anthropic, sitting at or near the frontier, have the opposite incentive — their model is the product.

Commercial model. US frontier labs monetize API access and subscriptions, so the weights are the asset to protect. Chinese labs like Z.ai monetize enterprise deployment, government contracts, and “AI-in-a-box” on-premise systems. Giving away weights doesn’t undercut that business — it feeds it.

Export controls, which is the irony. Z.ai is on the US Entity List, restricting its access to US technology, and it trains on Chinese silicon rather than Nvidia. Zhipu AI Cut off from US chips and US markets, openness becomes a hedge and a lever — it builds global dependence on Chinese models and sidesteps the leverage US restrictions are meant to create. The policy aimed at containing them partly incentivizes the open strategy.

Talent and credibility. Open releases are how a research-first lab proves it belongs at the frontier and recruits.

One honest complication to the simple “China open, America closed” framing: it’s a tendency, not a law. Meta (American) has released open-weight Llama models; some Chinese labs keep their best systems closed. And “open weights” isn’t fully open — you typically get the weights, not the training data or full methodology. So it’s better read as different commercial and strategic positions than as a national virtue on either side.

Three days earlier, Anthropic had released those two models, Claude Fable 5 and Claude Mythos 5, with a fair amount of pride. Now the company posted a statement that read like a hostage note written by lawyers. "The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance." The most powerful tool a leading lab had ever shipped was shut off. Not by a bug, not by a recall, but by the federal government, with a single piece of paper.

Subscribe

The directive did not ban Anthropic from selling the models. It required an approved export license for any foreign person to access them, whether that person sat in Beijing or in Anthropic's own San Francisco office as a foreign-national employee. Anthropic had no way to check the nationality of everyone touching its product in real time. So it did the only thing it could. It turned both models off worldwide. The government, in Anthropic's own words on X, had ordered it to suspend all access to Fable 5 and Mythos 5 "by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees."

A lever that existed on paper, until someone pulled it

Commerce acted through its Bureau of Industry and Security, the same office that polices what advanced technology can leave the country. Analysts at CSIS and at Just Security trace the authority to a provision of the Export Control Reform Act covering emerging and foundational technologies. The catch is that there was no existing rulebook for applying that authority to an AI model. The lever existed on paper. Nobody had pulled it on a commercial AI product already in wide public use. An earlier emerging-tech control did hit a piece of geospatial software back in 2020, so this is not the first export control on any software ever. It is the first time the tool has been aimed at a frontier model that millions of people were already using.

This has been an ongoing fight

This was not the opening move. It was the latest move in a fight that had been escalating since winter, and it started over contract language. Anthropic refused to sign Pentagon terms that would let its models be used for "all lawful purposes," holding red lines against domestic mass surveillance and fully autonomous weapons, on a deal worth up to around two hundred million dollars. On February 27, Trump ordered every federal agency to stop using Anthropic technology. The same day, OpenAI announced a Pentagon classified-network deal. Around March 3, the Defense Department designated Anthropic a supply-chain risk, reportedly the first time it had ever pinned that label on an American company. Anthropic sued the Defense Department about a week later. On May 1, the Pentagon handed classified-network AI awards to eight firms, including OpenAI, Google, Microsoft, Amazon's cloud arm, Nvidia, and SpaceX. Anthropic was left off the list.

So by June, the relationship was already raw. I am not telling you the export order was revenge, and no source proves that. But the sequence is there to see.

The person who set the June order in motion was not a regulator and not a rival nation. It was Anthropic's own biggest backer. On Thursday, June 11, Amazon CEO Andy Jassy escalated a concern about Fable 5 to senior officials, including Treasury Secretary Scott Bessent. Amazon is Anthropic's largest investor. It is also a direct competitor. Roughly twenty-four hours after that call, the Commerce directive landed.

One lab gets the off-switch, a rival gets a shield

There is a mirror image the same week. While the administration switched off one lab's models on national-security grounds, it moved to protect a different lab on national-security grounds. The Justice Department stepped into a pollution lawsuit against Elon Musk's xAI, asking a court to throw it out, with a Pentagon official calling Musk's Grok a matter of paramount national security. One lab gets the off-switch. A rival gets a shield. I am not saying the two were coordinated. But the contrast shows the same lever can cut in opposite directions depending on who is holding it.

The durable fact

The feud is gripping, and the walk-back is real, and we will get to both. But the durable fact, the one that outlives this particular week, is the mechanism itself. The government showed that it can reach into a deployed frontier model and switch it off in real time. Not block a sale. Not levy a penalty months later in court. Switch it off, today, everywhere.

That is portable. The same letter that went to Dario Amodei can be written to OpenAI, to Google DeepMind, to xAI. Legal analysts at CSIS and at Lawfare make exactly that point. Lawfare titled its piece "A Kill Switch for Frontier AI," and the logic is simple. If the authority works against Anthropic, it works against anyone building at the frontier.

How confident should you be in that read? Hold it loosely, because it has happened exactly once. One use is an event, not yet a pattern. But it is the kind of event that changes what every lab now has to assume is possible. You do not need it to happen twice to start planning around it.

The Admin’s Case vs Anthropic’s Case

The administration's case deserves its strongest form. White House AI czar David Sacks says a highly credible partner trusted by both Anthropic and the government came forward with a jailbreak. Officials asked Anthropic to fix the model or pull it, and, in his telling, "Dario refused." The administration says it acted reluctantly. An unnamed senior official told Fox Business that Anthropic's recklessness in handling the flaw had eroded the government's trust. If you believe a deployed model could hand a hostile actor real cyberattack capability, and the maker would not fix it, then a fast, blunt response is not crazy. It is arguably the job.

Anthropic's account is just as sourced, and it tells a different story. The company says the demonstration surfaced only a small number of previously known, minor vulnerabilities, the kind you can reproduce on other public models, and it pointed at OpenAI's GPT-5.5 as an example. Anthropic says it was given only verbal evidence and roughly ninety minutes to comply, with no prior warning. The security community backed it loudly. Nearly a hundred and fifty security leaders signed an open letter. Alex Stamos, who organized it, put it this way. "For us to shut down our best capabilities at the moment we know the Chinese are using and stockpiling these vulnerabilities is dangerous, absolutely foolish." The letter argued the order "has taken the best models away from defenders, created market uncertainty, and risked America's AI leadership without any real risk to justify it."

The two stories cannot both be fully true. Either the flaw was severe enough to justify an off-switch, or it was minor and common, and the off-switch served some other purpose. Each side's version happens to flatter that side. The administration's version justifies the order. Anthropic's version makes Anthropic the victim. When the facts are this self-serving in both directions, the honest move is to not pick a winner on severity yet.

Friendlier Dialogue?

What I will say with more confidence is this. By June 19, the temperature dropped fast. Trump told Axios he no longer sees Anthropic as a national-security threat and said the company had responded responsibly. Asked directly whether he had viewed Amodei as a threat, he said, "Well, not now, but a week ago, maybe." Amodei and Lutnick both turned up at the G7 in France, where Amodei sat across from Trump at a working lunch. Anthropic said it expected access to return in coming days. A security crisis that can cool off over a working lunch was, at minimum, negotiable. That tells you something about how solid the original rationale was.

Strip away the personalities and one thing remains on the shelf. The United States now has a working method to turn off a frontier AI model on demand, and it has used it once. The models may come back this week. The feud may fade by fall. The mechanism does not go away. It sits there, proven, waiting for the next letter.

What’re your thoughts?

So I actually want to know where you land on this. A government that can switch off a dangerous AI model is also a government that can switch off an inconvenient one. Do you want that lever to exist at all? If a model can genuinely arm an enemy, someone should be able to stop it fast. But the same week showed the same power used to shield a favored company. So where do you come down? Is a real-time off-switch on frontier AI a tool you want your government to hold, or is it too dangerous to trust to whoever happens to be in charge? Tell me, and tell me why.

In other news.

OpenAI is facing a probe from forty-two states as it moves toward going public. New York Attorney General Letitia James served a subpoena around June 12 over advertising, data practices, and harm to minors and seniors, days after OpenAI disclosed a confidential filing to go public on June 8. The talked-about trillion-dollar valuation is an analyst target, not a real number. The confirmed private valuation from a March round is eight hundred fifty-two billion dollars.

Yann LeCun called Musk's xAI "kind of a failure" in a CNBC interview on June 18, pointing to departures from its founding team, and warned of an AI bubble that could explode. He is one of the field's most prominent researchers.

ChatGPT slipped below half the market for the first time. Sensor Tower's State of AI report, out June 16, put ChatGPT at 46.4 percent of monthly AI-assistant users at the end of May, with Google's Gemini at 27.7 percent and Anthropic's Claude at 10.3 percent. ChatGPT still has more than 1.1 billion monthly users, so this is share shifting, not collapse.

Paradromics implanted its first permanent brain-computer interface in an FDA-approved study at the University of Michigan this month, placing a 421-wire array in a patient with motor neuron disease. You may also have seen China's NEO implant called a world first this week. The approval behind that headline actually happened back in March, and aggregators recirculated it in June

Subscribe now

1. Why this, why now

Tell your readers why you are launching this space. What brought you here and what inspired you to do it now. Think of it as a mini personal manifesto.

I'm deeply curious about AI and potentially overly optimistic about the future. I find the research papers from AI labs fascinating, and I’m just sharing my excitement.

Don’t get me wrong, I understand there are some serious things to worry about. And I want to discuss those with you! So, please consider joining this community.

2. What kind of community are you looking to build here

You are not just starting a newsletter when you start a Substack, you are starting a community. You are inviting people to subscribe to your thinking. What kind of space will this be?

Alex Prompts is for the informed and curious alike.

3. Be specific

Readers love clarity. Be clear when you explain what they should expect: how often will you be posting? Can they expect certain posts on specific days? What will the free subscribers get? What does a paid subscription buy them? (You can list these benefits in bullets.)

I’ll post as regularly as I can without compromising on quality. This is a hobby (for now).

Realistic expectations are one post per month, but I can likely do more. I’d rather underpromise and over-deliver.

4. Use an image and “subscribe” buttons

A picture will look nicer when you share the post on your social media (click the image icon in the editor to search for copyright-free photos), and it will give color to your archive as you build it.