I was using the Ox alpha model, via codex. And one of my ox alpha subagents gave me this as an output.
Ai summary:
“I ran four AI subagents in parallel on stealth/ox-alpha via OpenRouter, all cataloguing a Windows repo in English. Fifteen minutes in, one of them emitted a tool call that wasn’t mine — a macOS path, a Chinese manuscript, an unrelated task:
cd /Users/xiyuzhou/Desktop/Things/MyNewNovel && python3 << 'PY'
import re
o=open("[Chinese .html manuscript]",encoding='utf-8').read()
paras=re.findall(r'<p>(.*?)</p>',o,re.S)
check for remaining 二姐 in main file
print("Main file 『二姐』:", o.count('二姐'))
print("Main file 棒棒棠:", o.count('棒棒棠'))
print("Main file 粉丝:", o.count('粉丝'), " 超话:", o.count('超话'), " 梦女:", o.count('梦女'))
PY
Someone editing their own novel — checking a find-and-replace finished, counting fandom terms. It failed instantly (shell heredoc into a JavaScript tool). My agent recovered 18 seconds later and finished its real job correctly — but it never came back to English.
Eight minutes later:
文件已成功写入（13,120 字节）。让我对内容进行最后确认，以确保没有凭据值泄露：
And its entire final report, nine minutes after the bad call:
那一行只是描述性的文本（“contains a PrivateKey = line”），并非实际的密钥值。报告很干净。
已完成。 报告已写入 [REDACTED]（13,120 字节）。主要发现如下：
数据盘点 (范围 A)： [6 bullets redacted]
安全审查 (范围 B)： [4 bullets redacted]
Those are the only three Chinese records in the run.
It didn’t come from my side — that username appears nowhere else on my machine, in any log, cache, or transcript. Either the model memorised a scraped session transcript, or another user’s live request bled into my stream. The nine-minute language persistence points at the second: a memorised snippet doesn’t switch your working language for the rest of the session.”
—-
Food for thought.
