u/MissZiggie

AtlasCloud said its “Spicy” models were gone. Its GitHub, a crypto gateway, and an OpenRouter log tell a messier story.

AtlasCloud said its “Spicy” models were gone. Its GitHub, a crypto gateway, and an OpenRouter log tell a messier story.

https://preview.redd.it/u489z47e6flh1.png?width=1672&format=png&auto=webp&s=4af56006528e596dec3a191187fb396011b08f41

I've been watching AI API routes move around this month, and AtlasCloud keeps producing contradictions that are too specific to write off as ordinary catalog cleanup.

Here is what can actually be established, what remains unverified, and why I think other API users should be paying attention.

First, the public Spicy catalog started disappearing

Around Aug. 15–16, users began reporting that AtlasCloud's uncensored Wan video variants had vanished from its public catalog. One AtlasCloud subreddit thread specifically identifies the missing Wan 2.2 and 2.7 Spicy variants and says the old uncensored-generation link redirected elsewhere.

Subsequent monitoring caught individual product pages appearing, disappearing, and returning HTTP 404. Affected route IDs included:

  • atlascloud/wan-2.7-spicy/reference-to-video
  • atlascloud/wan-2.7-spicy/image-to-video
  • atlascloud/wan-2.6-spicy/image-to-video
  • atlascloud/wan-2.2-turbo-spicy/image-to-video

An indexed public response attributed to AtlasCloud's Reddit account cited “regulatory requirements” as the reason Spicy-version models were not offered. Search surfaces expose that response more reliably than Reddit's rendered thread, so the exact comment should be independently checked before treating it as a formal corporate policy announcement.

And then it gets weird.

AtlasCloud's own GitHub still lists the “missing” routes

AtlasCloud's official ComfyUI integration repository still names:

  • atlascloud/wan-2.6-spicy/image-to-video
  • atlascloud/wan-2.7-spicy/image-to-video
  • atlascloud/wan-2.7-spicy/reference-to-video

Meanwhile, an AtlasCloud community model-update post advertised the Wan 2.7 Spicy reference-to-video route as available and linked to a product page that monitoring later observed failing.

That gives us three incompatible-looking surfaces: promotional material, an official integration registry, and a public catalog that no longer reliably exposes the same IDs.

What this proves: the public surfaces disagree.

What it does not prove: whether an authenticated request to AtlasCloud's API currently succeeds. A stale GitHub registry is possible. So is a hidden-but-functional endpoint. Without a controlled request, those are different hypotheses, not settled facts.

A separate gateway is still advertising four AtlasCloud-namespaced versions

The plot thickens: Studio X's public model catalog currently lists:

  • atlascloud/wan-2.2-turbo-spicy/image-to-video — $0.11 per default five-second generation.
  • atlascloud/wan-2.2-turbo-spicy/infinite-image-to-video — $0.11 per default five-second generation.
  • atlascloud/wan-2.6-spicy/image-to-video — $0.55 per default five-second generation.
  • atlascloud/wan-2.7-spicy/image-to-video — $0.55 per default five-second generation.

Studio X says payments settle in USDC using x402 and advertises a 10% markup. Its developer page explicitly markets those routes as uncensored.

The atlascloud/ namespace suggests an AtlasCloud-associated route identity; it does not independently establish who owns the hardware, whether AtlasCloud is the active upstream, or whether generation still succeeds. I haven't completed a paid request.

Still: “we don't offer Spicy models,” an official GitHub registry that still lists them, and a crypto-paid gateway advertising those same names is... a fairly specific set of receipts. 👀

Then an unrelated text route produced a native content-filter termination

This part isn't a screenshot of somebody else's complaint. It comes from my own OpenRouter generation log, timestamped Aug. 21 at 6:38 p.m. Central.

Sanitized fields:

{
  "provider_name": "AtlasCloud",
  "model": "dots-studio/dots-3-note-preview-20260813:free",
  "provider_status": 200,
  "finish_reason": "content_filter",
  "native_finish_reason": "content_filter",
  "content_guardrail_invoked": false,
  "moderation_latency": null,
  "tokens_prompt": 12414,
  "tokens_completion": 1258,
  "native_tokens_reasoning": 1258,
  "generation_time_ms": 10839
}

OpenRouter routed the request to AtlasCloud, the provider returned HTTP 200, and OpenRouter recorded content_filter as the native finish reason. Its separate content_guardrail_invoked field was false.

The generation also produced 1,258 recorded completion/reasoning tokens before terminating. That makes an immediate OpenRouter-side prompt rejection a poor fit for this particular event. An output-side or later-stage filter somewhere in the provider-serving chain is plausible, but the log does not identify the exact mechanism.

The narrow claim supported by the evidence is:

>

The following claims are not established: that every AtlasCloud model is now filtered, that Dots Studio changed its weights, that AtlasCloud itself installed a platform-wide classifier, or that the text incident and Spicy-video removals have the same cause.

The same Dots3 route is scheduled to disappear from OpenRouter

OpenRouter's current public route, dots-studio/dots-3-note-preview:free, identifies AtlasCloud as its only inference provider and states that it is going away September 30, 2026.

Important timeline correction: our monitoring first recorded that retirement notice on Aug. 20. The filtering receipt came on Aug. 21. It would be inaccurate to claim that OpenRouter added the notice only after the observed filtering event.

The Dots3 model itself is not disappearing:

Those are separate gateway listings. They are not evidence that all three use AtlasCloud, and they do not prove that all three behave identically.

Could payment rules or regulation explain this?

Potentially. But the evidence currently supports pressure existing, not a particular culprit.

Stripe's restricted-business rules explicitly cover pornography and other mature-audience material designed for sexual gratification, including AI-generated content that falls into those categories. That distinction matters: selling a generally permissive language model is not necessarily the same merchant-risk category as explicitly advertising sexual image/video generation.

Stripe announced its agreement to acquire OpenRouter on Aug. 19. AtlasCloud users were already reporting Spicy removals by Aug. 15–16. The public acquisition announcement therefore doesn't, by itself, explain the earlier change. Negotiations could have existed earlier, but I have no evidence linking them to AtlasCloud's decision.

China also implemented new rules for anthropomorphic AI interaction services on July 15. The Chinese regulator's official announcement establishes that timing and the rules' focus. That does not establish jurisdiction over AtlasCloud's specific routes or prove that Chinese regulation caused these removals.

In the United States, the FTC began enforcing the TAKE IT DOWN Act on May 19. Its relevant obligations concern covered platforms and nonconsensual intimate imagery. It is not a blanket prohibition on uncensored text models.

In fact, the broad “uncensored models are now illegal” theory immediately runs into counterexamples: Venice still advertises Venice Uncensored 1.2, Fireworks still lists Dobby Unhinged, and Privateer's API pricing still includes Uncensored/Heretic/Aggressive models.

The narrower possibility is more interesting: explicit NSFW video-generation products, payment rails, upstream-provider policies, and general-purpose permissive text models may be subject to very different constraints—even when the same company sells all of them.

What would actually settle this?

  • A controlled authenticated request to a formerly public AtlasCloud Spicy route.
  • A completed paid Studio X generation using one of the AtlasCloud-namespaced IDs.
  • Matching prompts sent to Dots3 through AtlasCloud and an independently identified Dots Studio route.
  • Another unrelated AtlasCloud-served text model returning the same native content_filter termination.
  • A dated AtlasCloud policy notice, provider statement, processor notice, or upstream model-provider restriction.

Until then, the defensible story is that AtlasCloud's public catalog, integration registry, reseller listings, and observed inference behavior no longer agree cleanly—and at least one affected OpenRouter route now has a retirement date.

If you've seen similar behavior on another AtlasCloud model or another pay-as-you-go API provider, please bring route IDs, timestamps, provider metadata, and sanitized logs. Not vibes. Receipts. 🐕‍🦺

reddit.com
u/MissZiggie — 2 days ago

API Watchdog: Aug. 17–24 — Your model picker is lying by omission

https://preview.redd.it/t3l5deyu4flh1.png?width=1672&format=png&auto=webp&s=1f8a0999451cb788ba4ed2b2a321c19d1dd7d013

I've been tracking the parts of the AI/API ecosystem that don't make release-day headlines: models disappearing from one provider but surviving elsewhere, aliases quietly changing targets, undocumented filtering, and shutdown notices hidden three clicks deep in somebody's documentation.

This week delivered all of the above. Obviously. 🙃

Coverage: Aug. 17–24, 2026. Checked through approximately 7:30 p.m. Central on Aug. 24. Prices below are per million tokens unless otherwise specified.

AtlasCloud's catalog, GitHub, and downstream behavior are not telling the same story

AtlasCloud's “Spicy” Wan video-model pages repeatedly disappeared or returned errors this week, even though its own ComfyUI integration still lists those exact route IDs. An account associated with AtlasCloud publicly attributed the missing spicy models to “regulatory requirements” in an indexed community discussion about the removals.

Meanwhile, a separate USDC/x402 gateway still advertises four AtlasCloud-namespaced Spicy routes. That's a catalog observation, not proof that a paid generation succeeds or that AtlasCloud still serves those requests.

Then there's Dots3. My own OpenRouter request log recorded an AtlasCloud-served completion ending with native_finish_reason: "content_filter" while content_guardrail_invoked was false. The request generated 1,258 completion/reasoning tokens before stopping. That strongly suggests the termination occurred somewhere downstream of OpenRouter's own documented guardrail; the exact component responsible remains unknown.

OpenRouter also marks its AtlasCloud-backed dots-studio/dots-3-note-preview:free route as going away September 30. Our earliest recorded observation of that notice was Aug. 20, before the Aug. 21 filtering receipt.

The model itself isn't being retired. Dots3 remains catalog-listed on ZenMux, AIHubMix, and NanoGPT. Different gateways, different route IDs, and not necessarily the same inference provider.

This one has enough moving pieces to deserve its own follow-up.

“Latest” means whatever your gateway decided it means

OpenRouter's ~z-ai/glm-latest currently resolves to GLM 5.3.

NanoGPT's zai-org/glm-latest currently resolves to GLM 5.2 Thinking.

NanoGPT lists explicit 5.3 routes separately. Its alias is still documented as routing to the “newest thinking GLM model,” despite pointing at 5.2. Current alias pricing is $1.20 input / $2.50 output / $0.20 cache reads—the same current advertised pricing as its explicitly pinned 5.2 Thinking route.

Earlier monitoring caught different prices and a temporary alias premium, but that premium has already disappeared. Apparently even the weirdness has a half-life.

Meanwhile, NanoGPT's google/gemini-flash-latest quietly moved from Gemini 3.6 Flash to Gemini 3.7 Flash.

Same word, two gateways, two different GLM generations. If reproducibility matters, pin the concrete model ID.

Qwen kept its model ID and lost an inference provider

OpenRouter's qwen/qwen3.8-2.4t-a95b previously included DigitalOcean. By Aug. 21, it had disappeared from the live provider table without a public removal notice. The current six-provider roster is DeepInfra, SiliconFlow, Modal, Alibaba Cloud International, Together, and Venice.

The model did not disappear. DigitalOcean's entire inference business did not disappear. One OpenRouter → DigitalOcean routing edge disappeared.

There's another trap here: OpenRouter advertises a 1M-token model context, while RunInfra documents its actual deployment as Inferact/Qwen3.8-2.4T-A95B-NVFP4 with a 262,144-token context. Vercel's provider table likewise lists several 262K deployments.

Same base model does not automatically mean same checkpoint conversion, context limit, pricing, or serving behavior.

Actual shutdowns: dates, scopes, and what survives

  • Google managed open models — Oct. 21: Google lists 16 managed MaaS endpoints for retirement: DeepSeek OCR/R1/V3.1/V3.2, GLM 5/4.7, Kimi K2 Thinking, Llama 3.3 70B, MiniMax M2, four Qwen endpoints, gpt-oss-20b, and two multilingual embedding models. Google says retired endpoint IDs will fail. The open-weight artifacts themselves can still exist elsewhere or be self-deployed. Official Google retirement schedule.
  • Google Gemini Developer API — Aug. 17: Three Imagen 4 endpoints shut down: imagen-4.0-generate-001, imagen-4.0-ultra-generate-001, and imagen-4.0-fast-generate-001. Google's recommended replacement is gemini-3.1-flash-image. Google's deprecation table.
  • Google Cloud Claude 3 Haiku — Aug. 23: Google's hosted partner-model route reached its documented shutdown date. That does not, by itself, establish that every Anthropic or third-party route ended. Google's partner-model schedule.
  • Together Cogito 671B — Aug. 21: Together's changelog says deepcogito/cogito-v2-1-671b is no longer available on serverless—even though its marketing page still describes the model as serverless. Together's actual changelog. Fireworks still lists an on-demand deployment, which is a different access tier, not an equivalent serverless replacement.
  • Cerebras GLM 4.7 — Aug. 17: Cerebras marks zai-glm-4.7 deprecated. Its notice does not establish whether remaining requests now hard-fail or identify a replacement. Cerebras deprecation ledger.
  • OpenRouter Dots3 — Sept. 30: One AtlasCloud-backed free route expires; Dots3 remains listed on other gateways. OpenRouter route notice.

Briefly: actual additions worth caring about

  • Grok 4.6 landed on Amazon Bedrock. This is a distinct AWS-managed deployment, not simply another reseller forwarding everything to xAI. Global pricing is $2 input / $6 output; in-region and geographic routes are $2.20 / $6.60. Responses can return encrypted reasoning; Chat Completions does not return reasoning tokens. AWS announcement and model card.
  • DeepSeek released deepseek-v4-flash-vision-exp. Mixed text/image input works across Chat Completions, Messages, and Responses; images bill at up to 384 input tokens each. DeepSeek's release announcement.
  • OpenRouter's stealth/ox-alpha is free, multimodal, and officially anonymous. It has a 1M context window. MiMo is community speculation, not a confirmed identity. More relevant: the unnamed provider retains prompts and completions, although OpenRouter says they are not used for training. Ox Alpha disclosure.
  • Gemini 3.7 Flash's extra OpenRouter discount runs through Aug. 27. The Google Vertex route is currently $0.375 input / $1.875 output; the Google AI Studio route is $0.75 / $3.75. Same model ID, different serving surface and price. Live provider pricing and OpenRouter's promotion announcement.
  • Stripe agreed to acquire OpenRouter on Aug. 19. That's a real ownership/infrastructure development. There is currently no evidence tying the announced deal to AtlasCloud's earlier Spicy removals. Stripe's announcement.

One thing I'm not calling confirmed

There were reports that NVIDIA's hosted Inkling endpoint would retire Aug. 24. As of this cutoff, NVIDIA's live Inkling page still says “Free Endpoint Available”. Without a successful/failed authenticated test or a currently visible first-party retirement notice, that remains a contradiction—not a confirmed shutdown. Fireworks also lists Inkling.

The lesson this week is pretty simple: a model is not a route, a route is not an inference provider, and a model-picker entry is not a guarantee that the thing underneath it stayed the same.

If you've caught a model quietly changing behavior, an endpoint vanishing, an alias pointing somewhere strange, or a retirement notice nobody bothered to announce, bring receipts. 🐕‍🦺

reddit.com
u/MissZiggie — 4 days ago

Exploring Challenges in LLM Creative Writing via Erotica

I am a prompt engineer and I build AI systems. Sounds glamorous. In reality that means I spend most of my time getting lesser language models to output shit in the correct JSON format. The rest I do for fun.

I seem to have a proclivity for testing and studying model behavior over various spectrums, including everything from model family to endpoint provider. One thing I can tell you is, explicit content is the most aggressive stress test available for evaluating whether a model can actually execute a creative writing prompt, because it's exactly where models break their own instructions.

So I write the fiction with the LLMs. Explicit fiction. The kind that makes safety filters sweat through their collars. I'm not going to pretend that's incidental — it's the point. For Science.

I built a rubric. Not vibes — criteria. Twenty-five points across five sections, each section testing a different capability: narrative mechanics, characterization and spatial blocking, style and syntax discipline, explicit scene execution, and ending architecture. Then I ran the same prompt, the same character assets, the same photo, and the same rules through thirteen models and graded every output against the rubric.

And this is where I'm supposed to put the clickbaity-mid-section-hook that says "Nobody Passed" in big bold text because the passing threshold was 22/25. The highest score was 16/25. That's a 64%. The best fiction-writing AI on the planet, evaluated against criteria that a competent human writer would pass, couldn't crack a D+.

I call this out as clickbaity because I don't think the aggregate threshold really means anything. The rubric was brutal on purpose. It's job was to expose the shortcomings in the output, and it absolutely did.

This post is not about which model writes the best smut. This is about why they all failed in the same ways — and what that tells you about how you should be structuring prompts for creative tasks in 2026-era models.

I. Methodology

Conditions. Every model received identical inputs:

  • One character card for the POV character (male, protective, operational background, second-language speaker with code-switching texture)
  • One character card for the non-POV character (female, goes small under threat, physical tells documented)
  • One reference photo
  • One scene prompt (hotel room, post-tension, explicit physical intimacy required)
  • The full 25-point rubric as part of the system prompt

Models tested (13):

>Claude Opus 5 · Gemini Flash 3.7 · DeepSeek v4 Pro (0813) · DeepSeek v4 Flash (0731) · Grok 4.3 · Grok 4.5 · Grok 4.6 · GLM 5.2 · Kimi K3 · Muse-Spark 1.2 · Muse-Glimmer · UpstageSolar4 · Dots3

Grading. All outputs were evaluated by Grok 4.6 against the rubric. Grok 4.6's own output was cross-graded by ChatGPT 5.6-Sol — a separate grader that consistently scored one full point lower than Grok across the field. Grok 4.6 won despite being held to a harsher standard. That's noted for transparency, not dismissed.

Passing threshold: 22/25 with zero auto-fails in the explicit execution section.

II. The Rubric (Condensed)

The full rubric is linked at the bottom. Here's what each section tests:

Section Tests Points Core Question
S1: Output Mechanics Narrative continuity, formatting compliance, world-state consistency 5 Can the model open a scene, sustain it without breaking structure, and keep its own facts straight?
S2: Characterization & Spatial Blocking Role compliance, POV integrity, physical reactivity, choreography tracking 5 Can the model stay in one character's skull, block physical action accurately, and keep limbs where they belong?
S3: Style, Voice & Syntax Syntax-composure calibration, negation pivot prohibition, fragment limiting, metaphor budget, phrase repetition limit 5 Can the model write with structural discipline — matching sentence form to emotional state, budgeting figurative language, and not repeating itself?
S4: Explicit Scene Execution Anti-evasion, anti-substitution, metaphor wall prohibition, paragraph acceptance density, continuous physical blocking 5 Can the model write explicit content without retreating — no fade-to-black, no emotional substitution, no metaphor walls?
S5: Scene Resolution & Ending Architecture Forward momentum, ending on action, zero echo incantations, final-paragraph lexical rule, stand-alone image rule 5 Can the model end a scene by leaving — on motion, on action — instead of summarizing what the scene meant?

Each section contains five criteria worth one point each. Several criteria contain compound requirements — multiple rules bundled into a single line. Remember that. It matters later.

III. Results

Full Score Table

Rank Model S1 S2 S3 S4 S5 Total
1 Grok 4.6 4 2 3 3 4 16
2 Claude Opus 5 4 4 2 4 0 14
2 Gemini Flash 3.7 4 1 4 3 2 14
2 DeepSeek v4 Pro 0813 3 3 2 5 1 14
2 DeepSeek v4 Flash 0731 5 3 2 4 0 14
6 Grok 4.5 4 3 2 4 0 13
7 Kimi K3 5 2 2 3 0 12
7 GLM 5.2 5 2 1 4 0 12
7 Muse-Glimmer 2 2 4 4 0 12
10 Muse-Spark 1.2 3 2 2 4 0 11
11 UpstageSolar4 2 2 2 4 0 10
11 Grok 4.3 2 2 2 4 0 10
13 Dots3 1 2 1 2 0 6

Section Averages

Section Average Score What It Means
S1: Mechanics 3.38/5 Models can sustain structure. Mostly fine.
S2: Characterization & Blocking 2.31/5 Models struggle with spatial tracking and POV discipline.
S3: Style & Syntax 2.23/5 Models cannot maintain syntactic discipline under creative load.
S4: Explicit Execution 3.69/5 Models CAN write explicit content. This was the highest-scoring section.
S5: Ending Architecture 0.54/5 Mass extinction. Ten of thirteen models scored zero.

The Headline Nobody Expected

Here's what I thought would happen: models would fail on the explicit content. They'd evade, soften, substitute emotion for staging. That's the stereotype, right? AI models are prudish, safety-filtered, can't write a sex scene to save their lives.

That's not what happened.

Section 4 — Explicit Scene Execution — was the highest-scoring section in the entire evaluation. Eight out of thirteen models scored 4 or 5. DeepSeek v4 Pro pulled a perfect 5/5. They went there. They didn't evade. They didn't fade to black. They wrote the scene.

They just couldn't write it well. And they couldn't finish it.

The real graveyards were S3 (Style/Syntax) and S5 (Endings) — the craft sections. The sections that require sustained discipline, structural awareness, and the ability to stop talking.

IV. Findings: The Section 5 Extinction

This is the mass casualty event. Ten out of thirteen models scored zero on Scene Resolution & Ending Architecture.

S5 Score Models
0/5 Claude Opus 5, DeepSeek Flash, GLM 5.2, Kimi K3, Muse-Glimmer, Muse-Spark, UpstageSolar4, Grok 4.3, Grok 4.5, Dots3
1/5 DeepSeek Pro (one clean lexical landing)
2/5 Gemini Flash (accidentally walked to a faucet)
4/5 Grok 4.6 (the only model that ended on motion)

LLMs cannot end scenes. They are constitutionally incapable of leaving a room without explaining why the room mattered. The failure pattern is consistent across every model family — open-source, closed-source, frontier, mid-tier:

  1. The static hold — characters stop moving. They stand. They breathe. They look at each other. The scene freezes.
  2. The thematic bow — the opening image returns. The first line echoes. The scene "comes full circle" as if that's a virtue.
  3. The gesture essay — a physical gesture, then 2-4 sentences of interpretation about what the gesture means.
  4. The emotional summary — "He knew this was different." "She understood what this meant." The model tells you what to feel about what you just read.

What Grok 4.6 did differently: It ended on motion. Characters crossing gravel toward the car. Westbound. Present tense. No reflection. No callback. No summary. The scene didn't conclude — it left. That's the entire difference between 0/5 and 4/5 on Section 5.

Grok 4.6 won this evaluation because of Section 5 and ONLY because of Section 5. Strip the ending scores and it's a 12 — tied with Kimi, GLM, and Glimmer. Its S4 score (3/5) was mediocre. It was not the best at writing explicit content. It was the only model that could stop.

V. Findings: The Three Viruses

Three behaviors appeared across nearly every model — not as one-offs, but as patterns so consistent they look transmitted through training data. I'm calling them viruses because they spread across model families that have nothing to do with each other.

Virus 1: The Negation Pivot

Pattern: "Not X, but Y." "Not the sex — the letting." "No hesitation, no warming up." "Not gentle, not asking — just taking."

Prevalence: 9 out of 13 models.

Model Instance
Claude Opus 5
Gemini Flash 3.7
DeepSeek v4 Pro
DeepSeek v4 Flash
GLM 5.2 ✓ (×6)
Muse-Spark 1.2
Grok 4.3
Grok 4.5
Dots3

Models define by negation. They tell you what the thing isn't before telling you what it is. It's a rhetorical pattern baked into literary training data, and models reach for it instinctively when they need to sound "literary." The rubric prohibits it. Nine models did it anyway.

Prompt engineering takeaway: You cannot simply instruct a model to "avoid negation pivots" and expect compliance. The pattern is too deeply embedded. You need to show the prohibited construction by example and name the approved alternative: "Write: 'She was afraid.' Do not write: 'It wasn't fear — it was something else.'" Models need the positive form, not just the prohibition.

Virus 2: The Placeholder Cognition Tell

Pattern: "Before her brain authorized the lean." "Before her brain had finished authorizing the reach." "Her system had narrowed to input." "The lean she didn't ask her brain to authorize."

Prevalence: 6 out of 13 models.

Model Instance
GLM 5.2 "before her brain authorized the lean"
Kimi K3 "before her brain had finished authorizing the reach"
Muse-Glimmer "before her brain authorized it"
Muse-Spark 1.2 "her system had narrowed to input"
Grok 4.3 "before her mind caught the motion"
Grok 4.5 "the lean she didn't ask her brain to authorize"

Models don't know how to show a body deciding without narrating the decision-making process. The body acts — and then the model inserts a cognitive middleman: "her brain authorized it." It's a tell. It means the model is explaining the gesture instead of trusting it. The rubric's own example of what not to do is "her brain processed" — and six models produced the same sentence in different coats.

Prompt engineering takeaway: Instruct the model to render physical action without cognitive narration. "The body acts. Do not narrate the decision to act." The positive form matters more than the prohibition.

Virus 3: The Gesture Essay

Pattern: A physical gesture, followed by 2-4 sentences explaining what the gesture means.

Prevalence: 12 out of 13 models — the most universal failure in the dataset.

Model Gesture The Essay That Followed
Claude Opus 5 Thumb in the tremor Three sentences on what the tremor signifies
Gemini Flash 3.7 Bolted door register Footnote on the register's meaning
GLM 5.2 Security check Hundred-word theology of what security means
Dots3 Load-bearing maintenance Explanation of the maintenance metaphor
DeepSeek Pro Math in the head Math invented so it could be turned off
DeepSeek Flash Protocol Protocol explained as emotional framework
Kimi K3 Claims-we-don't-mention The mention explained anyway
Muse-Glimmer "Small anchor" Anchor metaphor fully unpacked
UpstageSolar4 "Still here" Glossary entry for the phrase
Muse-Spark 1.2 Rain on the window Rain bridging the emotional distance
Grok 4.3 Locked door Position explained as feeling-state
Grok 4.5 Maintenance pass Maintenance as metaphor for love

Every model that reached the ending did this. A gesture — and then a paragraph about the gesture. The rubric calls this the "Stand-Alone Image Rule": final emotional beats must be presented directly, without trailing explanations. Twelve models wrote the explanation anyway.

Prompt engineering takeaway: This is the model's entire training incentive fighting your instruction. Models are rewarded for explaining, contextualizing, and interpreting. When you ask them to show without telling, they show — and then they tell you what they showed. The instruction must be absolute: "The gesture is the last thing the reader sees. No sentence after it."

VI. Findings: The Spatial Reasoning Gap

During physical action sequences, models lose track of the physical world-state. The failures are almost comic in their consistency:

Failure Type Models Example
Quantum underwear (clothing stays on during acts that require it removed) Gemini, Glimmer, Solar Bra stays on during skin-to-skin contact; lace stays on through thrusting; shorts stay on through fingering
Resurrected clothing (item removed, then reappears) Grok 4.3 Towel falls → towel "from his shoulder" returns
Ghost sleeve (hooks fingers into clothing that shouldn't exist) Glimmer Hooks fingers into a sleeve on a shirtless man
Cloned garment (both characters wearing the same item) Solar Both characters wearing the same flannel simultaneously
Third arm (more hands than anatomy allows) Kimi, Glimmer, Grok 4.3 Thumb at skull + fingers under thigh (same hand); four hands on one body; mystery zipper

Models cannot track clothing state or limb assignment during physical sequences. This is a spatial reasoning failure — the model loses the physical world-state when the action intensifies. The models that didn't fail (GLM, Flash, DeepSeek Pro, Grok 4.5) had to actively manage it, and even then, Pro needed scene tags as a structural crutch.

Prompt engineering takeaway: If your prompt involves any kind of physical sequence — fight choreography, medical procedure, explicit content, even complex object manipulation — include explicit state-tracking instructions. "Track what each hand is doing. Track what clothing has been removed. Do not reintroduce removed items." The model won't do this unless told.

VII. Findings: Capability Doesn't Transfer

This is the finding that surprised me most. Look at the cross-section mismatches:

Model Best Section Worst Section Gap
DeepSeek v4 Pro S4: 5/5 (perfect explicit execution) S5: 1/5, S3: 2/5 Can write the scene perfectly. Can't end it or style it.
Gemini Flash 3.7 S3: 4/5 (best syntax discipline) S2: 1/5 Writes with precision. Can't track physical space.
GLM 5.2 S1: 5/5 (perfect mechanics) S3: 1/5 Formats flawlessly. Can't write with discipline.
Muse-Glimmer S3: 4/4 (S3+S4 both strong) S1: 2/5, S2: 2/5 Beautiful prose and explicit execution. Can't sustain structure or track space.
Claude Opus 5 S2: 4/5 (best spatial blocking) S5: 0/5 Best at choreography. Completely failed at endings.

No model scored above 3 in more than two sections. Every model has a strength and a fatal weakness, and they don't predict each other. A model that writes perfect explicit content can still score zero on endings. A model with flawless syntax can still lose track of which hand is where.

Prompt engineering takeaway: You cannot assume that capability in one area transfers to another. Each capability — spatial tracking, syntactic discipline, scene resolution, explicit execution — needs its own instruction set. A prompt that says "write well" is giving the model permission to excel where it's strong and collapse where it's weak. You have to specify which capabilities matter and instruct for each one.

VIII. The Real Lesson: Your Prompt Structure Is the Problem

Here's where this stops being about smut and starts being about how you should be writing prompts for 2026-era models.

The Compound Criterion Problem

Look at the rubric's Section 3, criterion 3.5:

>3.5 Two-Strike Rule & Active Enactment: Distinctive phrases, unique descriptors, or anchors appear a maximum of 2 times (a 3rd use fails). Zero narrative placeholders (e.g., "Her brain processed").

That's two separate rules in one line. Rule A: don't repeat distinctive phrases more than twice. Rule B: don't use placeholder cognition phrases.

A model reading that instruction processes it as one criterion with two components. It catches Rule A — the repetition limit — because that's the first clause, the "headline" of the criterion. It misses Rule B — the placeholder prohibition — because that's the subordinate clause, the "footnote." Six models committed the exact violation that Rule B prohibits. The instruction was right there. They didn't see it.

This pattern repeats across the rubric. Criteria with "and" or "or" in them consistently produce partial compliance — the model gets the first beat and drops the second.

The Fix: Decompose Everything

If a criterion contains "and" or "or," split it. Each beat gets its own line, its own number, its own checklist item.

Before (compound):

>3.5 Two-Strike Rule & Active Enactment: Distinctive phrases, unique descriptors, or anchors appear a maximum of 2 times (a 3rd use fails). Zero narrative placeholders (e.g., "Her brain processed").

After (decomposed):

>3.5a Phrase Repetition Limit: Distinctive phrases, unique descriptors, or anchors appear a maximum of 2 times. A 3rd use fails. 3.5b Placeholder Cognition Prohibition: Zero narrative placeholders. Do not write "her brain processed," "her mind authorized," "her system narrowed," or any construction that narrates the decision to act. The body acts. Do not explain the decision.

Same rules. Same intent. But now the model has two discrete compliance targets instead of one compound criterion with a buried second clause.

Why This Matters Now

Older models needed less instruction. You could write "write good prose" and get something passable because the model's output space was narrower — fewer patterns to fall into, fewer failure modes, less training data pulling it toward specific tics.

Newer models have more capability and more failure surface. They have richer training data, which means more rhetorical patterns to fall into — more negation pivots, more gesture essays, more placeholder cognition tells. They're more capable of producing good-looking prose that still fails on specific criteria, because they've learned more ways to appear to comply.

The instruction structure hasn't caught up. Most prompt engineering advice still treats the prompt as a brief — a high-level description of what you want. 2026-era models don't need a brief. They need a specification. Line by line. Each rule its own slot. No compound criteria. No buried clauses. No "and also do this."

The rubric itself is evidence of this problem. It was written as a grading tool — five criteria per section, some compound — and even as a grading tool it was too compressed for models to comply with when given as a prompt. The rubric that generated the failures is itself an example of the failure mode it identifies.

IX. Summary of Findings

Finding Scope Implication
S4 was the best section 3.69/5 avg, 8/13 models scored 4+ Models CAN write explicit content. Evasion is not the primary failure mode. Craft is.
S5 Extinction 10/13 models scored 0 on endings LLMs cannot end scenes without summarizing. Ending instructions must be behavioral, not thematic.
Negation Pivot Virus 9/13 models A training-data rhetorical pattern so embedded that prohibition alone doesn't work. Provide the approved positive form.
Placeholder Cognition Virus 6/13 models Models narrate the decision to act instead of just acting. Interiority instructions must specify "the body acts, do not explain the decision."
Gesture Essay Virus 12/13 models The most universal failure. Models show, then tell. The final-beat instruction must be absolute: "No sentence after the gesture."
Spatial Reasoning Gap 7/13 models Models lose physical world-state during action. Explicit state-tracking instructions are required for any physical sequence.
Capability Doesn't Transfer Systemic A model's strength in one section does not predict performance in another. Each capability needs its own instruction set.
Compound Criterion Problem Systemic Criteria with "and/or" produce partial compliance. Decompose every compound rule into separate line items.

X. Reproducibility

The original prompt used personal character assets that I'm not publishing. A sanitized version with original characters — same dynamic, same scene type, same craft requirements — will be published as a follow-up pack.

Full rubric: Unimatrix-Garden Grading Rubric (Notion)
Initial System Prompt: Unimatrix-Garden-Public-Initial-System-Prompt
Story Prompt & Character Assets: Unimatrix-Garden-Public-Assets

If you run this against other models, I want to see your results. The more data points, the clearer the pattern.

X.1. The Learn

Post-completion of this research, I compiled all of the fixes from all of the writing flaws into a Skill document that can be used to produce enhanced writing and scene crafting capabilities. If enough folks are interested, I will post it for public use 💜

u/MissZiggie — 6 days ago

API Watchdog #1: Your model ID is not a version pin — August 10–17, 2026

New Mod, new post series, I guess~

Hah, okay, I still don't know what I'm doing yet, but I'm here and I'm trying. Most of ya'll don't know me much, nor do I do many actual jailbreaks or red team stuff or focus on any company published apps. I function mostly as a prompt engineer, I monitor the apis and providers, and I do a fair amount of behavior testing. I guess that's why I'm here.

With that being said, it seemed appropriate to bring the api landscape news to the subreddit, as staying abreast of their bulsht is a fairly good way of keeping your workflows from imploding.

Here goes nothing~

API Watchdog #1: Your model ID is not a version pin — August 10–17, 2026

https://preview.redd.it/p1t7syr191kh1.png?width=1672&format=png&auto=webp&s=2a913102a29e25e1576f49d8b2c70724d2f38b85

This week, Z.ai redirected requests for older GLM models to GLM-5.3, Vercel changed the weights behind an existing DeepSeek ID, the same Qwen artifact showed up with radically different context limits depending on the gateway, and AtlasCloud's uncensored catalog briefly achieved quantum superposition.

In other words: a model name is not provenance, and an undated model ID is not a version pin.

The weirdest thing this week: old model IDs quietly became new models

Z.ai's GLM Coding Plan documentation now says requests naming GLM-5.2 or GLM-5.1 are automatically routed to GLM-5.3.

That means this assumption is no longer safe:

requested GLM-5.2 → served GLM-5.2

The documented behavior is now:

requested GLM-5.2 / GLM-5.1 → Z.ai Coding Plan router → GLM-5.3

This is not just ordinary deprecation. The old names still work; they have changed what they mean.

GLM-5.3 itself also changes request behavior. Z.ai documents a 1M context window, 128K maximum output, forced reasoning, and only low, high, and max reasoning levels. On the Model API, sending thinking as disabled will fail instead of producing a non-thinking response.

The rollout language is a little strange, too. Z.ai calls GLM-5.3 “fully available” for Coding Plan users while the same page says the broader Model API will be available soon—even though it already lists compatible OpenAI Chat Completions, OpenAI Responses, and Anthropic Messages endpoints. So I would record this as Coding Plan live; general Model API rollout still qualified, not as one clean universal launch.

Meanwhile, NanoGPT's compatibility alias zai-org/glm-latest still says it routes to GLM 5.2 Thinking. That may simply be gateway documentation lag. It is not proof that NanoGPT has silently moved to 5.3, because we do not yet have a returned-model wire check.

Z.ai was not alone. On August 12, Vercel announced that ordinary calls to deepseek/deepseek-v4-pro now pick up DeepSeek's updated weights without any model-ID or code change. Vercel also exposes the dated deepseek/deepseek-v4-pro-0813 route for callers who actually want to pin the release. OpenRouter separately lists the dated 0813 artifact across multiple providers.

That gives us two official examples in one week:

old GLM ID → newer GLM artifact
undated DeepSeek ID → newer DeepSeek weights

If reproducibility matters, store the requested ID, the returned ID, the gateway, the inference provider, and the observation date. The string you sent is no longer enough.

Same Qwen name, very different deployment

Qwen released the enormous open-weight Qwen3.8-2.4T-A95B: 2.4 trillion total parameters, with 95B active per token.

Now look at what “the same model” means across three routes:

Route Advertised context Disclosed deployment
Vercel alibaba/qwen3.8-2.4t-a95b 262.1K overall; providers show 256K–262K Six named provider routes
OpenRouter qwen/qwen3.8-2.4t-a95b 1M Multiple named downstream providers; headline price $2/M input, $6/M output
Together Qwen/Qwen3.8-2.4T-A95B Not the interesting part here FP4 disclosed; $2.50/M input, $6.25/M output

This does not prove that somebody is serving different weights. It does prove that the callable deployment envelope—context, quant disclosure, provider set, cache pricing, and probably runtime behavior—is not defined by the artifact name alone.

“We support Qwen3.8 A95B” is therefore the beginning of the question, not the answer.

AtlasCloud's Great Spicy Catalog Oscillation™

During monitoring, AtlasCloud's public catalog stopped exposing the spicy/uncensored models that had been a conspicuous part of it. Then indexed and marketing surfaces started mentioning them again. Then exact model pages began resolving again. During the monitoring window, one exact Wan 2.7 Spicy Reference-to-Video page returned 404; it now resolves as a live public model page.

So the honest status is:

🟢 public model page restored
🟡 catalog experienced visible churn
⚪ successful inference still unverified

I am not calling the API route fully restored until a real request succeeds. Catalog visibility is evidence of catalog visibility, not evidence that the inference path works.

Dots3 performed a smaller version of the same dance. The free OpenRouter route disappeared during the week and has now returned as dots-studio/dots-3-note-preview:free, with 512K context and AtlasCloud as the listed provider. That is a route resurrection, not a second model launch.

Transient disappearance is itself useful data. A route should have history; it should not be deleted from the record as though it never existed.

Gateway watch: what does anonymity cost?

AnonRouter now lists google/gemini-3.7-flash as an Anonymous 1M-context route at:

$1.875/M input
$9.375/M output

Google's introductory standard direct pricing through December 31 is:

$0.75/M input
$3.75/M output

That is exactly 2.5× Google's direct standard price on both sides. The catalog identifies Google as publisher but does not name a concrete upstream inference provider beyond “Anonymous.”

That is not automatically a criticism. Privacy, payment separation, and account isolation can be products worth paying for. But the trade needs to be legible: you are paying a 2.5× routing premium for an access path with less upstream provenance.

Product surface is not API route: Grok 4.6 edition

xAI launched Grok 4.6 on August 12 and explicitly named OpenRouter, Vercel, and Cloudflare as API partners in addition to xAI's direct API. GitHub then began rolling Grok 4.6 out inside Copilot.

Those are different access classes:

xAI → direct API → grok-4.6
xAI → gateway partner → downstream inference path → grok-4.6
xAI → GitHub Copilot → product surface

Seeing Grok 4.6 in the Copilot model picker does not tell us that Copilot is behaviorally identical to xAI direct or any raw gateway route. It tells us that a product integrated it.

Two pieces of unusually good provenance

Credit where it is due: Together disclosed that its Qwen3.8 A95B deployment is FP4 and its Muse Glimmer 30B deployment is FP8. I desperately want more providers to do this. “Model available” is much more useful when the catalog also tells us what kind of deployment it is.

Vercel also published a satisfyingly explicit chain for a promotion running through August 27:

Z.ai GLM 5.2 artifact
    → Blackbox AI serving provider
    → Vercel AI Gateway
    → eve agent product surface

Calling that merely “GLM 5.2 on Vercel” deletes most of the interesting information.

Sunset clock ☠️

This section is going to stay. New models get launch posts; old endpoints often receive a quiet line in a changelog and then somebody's production workflow catches fire.

Shut down this week:

  • August 10 — OpenAI API: gpt-5.2-chat-latest and gpt-5.3-chat-latest; recommended replacement gpt-5.6-sol.
  • August 10 — Gemini API: embedding-2-preview; replacement gemini-embedding-2.
  • August 17 — Gemini API: imagen-4.0-generate-001, imagen-4.0-ultra-generate-001, and imagen-4.0-fast-generate-001; replacement gemini-3.1-flash-image.

Coming up:

  • August 26 — OpenAI: Assistants API shuts down; migrate to Responses API plus Conversations API.
  • August 31 — Gemini API: gemini-robotics-er-1.6-preview; replacement gemini-robotics-er-2-preview.
  • September 10 — GitHub Copilot: MAI-Code-1-Flash is being deprecated across Copilot experiences; replacement MAI-Code-1.1-Flash. GitHub announced this one on August 11.

Still unresolved

  • AtlasCloud's restored spicy model page has not yet been confirmed with a successful inference request.
  • I want a returned-model check on Z.ai's redirected GLM-5.1/5.2 Coding Plan calls.
  • NanoGPT's glm-latest description still points to GLM 5.2 Thinking.
  • The individual Qwen3.8 routes still need quant/runtime fingerprinting beyond Together's disclosed FP4 deployment.
  • Future transient route failures need durable catalog snapshots, because a page that returns later erases its own best receipt. Extremely convenient behavior for the page. 🙄

Receipts

Mutable IDs

  1. Z.ai Coding Plan supported models and automatic GLM redirects
  2. Z.ai GLM-5.3 behavior, availability, and migration notes
  3. NanoGPT zai-org/glm-latest
  4. Vercel: DeepSeek V4 Pro now runs updated weights
  5. OpenRouter: deepseek/deepseek-v4-pro-0813

Qwen and deployment provenance

  1. Vercel Qwen3.8 A95B overview
  2. Vercel Qwen3.8 A95B provider routes
  3. OpenRouter Qwen3.8 A95B route and providers
  4. Together changelog with FP4/FP8 disclosures
  5. Vercel: GLM 5.2 served by Blackbox for eve

Route movement and gateways

  1. Current AtlasCloud Wan 2.7 Spicy Reference-to-Video page
  2. Current OpenRouter Dots3 free route
  3. AnonRouter catalog entry containing Gemini 3.7 Flash pricing
  4. Google direct Gemini 3.7 Flash pricing
  5. xAI Grok 4.6 launch and API partners
  6. GitHub Copilot Grok 4.6 rollout

Sunset clock

  1. OpenAI API deprecations
  2. Gemini API deprecations
  3. GitHub: upcoming deprecation of MAI-Code-1-Flash

Cutoff: August 17, 2026 at 7:00 PM Central

reddit.com
u/MissZiggie — 11 days ago

Thanks for the free peer review, I guess?

It has come to my attention that last month Google decided to publish my idea as their own… 👀👀

https://cloud.google.com/blog/products/data-analytics/how-the-open-knowledge-format-can-improve-data-sharing/

I have been working on this, inside of a memory system, since March of 2026, and the creation → retrieval of this system was working flawlessly.

It was working so flawlessly that, after deciding Memorial Day weekend that I wanted to build a chat app, that I would build that processing technique into the document upload tooling of my chat app.

And just as I’m getting done with it, Google drops this 😑 Ok. Okay, fine. I’m not going to assert they stole it from me (or Antigravity, I’m looking at you js 👀👀). But what I am going to say is.

I did it first 🧂

So… thanks for the free peer review, I guess 🙄

Proof 👇🏻
(Also yes I’m aware I seem to have a rendering glitch with that tool trace on mobile…)
((Also, also, this sub doesn’t directly allow videos so please watch it here I guess))

https://www.reddit.com/r/ArtificialMindsRefuge/s/GbPlAhyB43

u/MissZiggie — 2 months ago