{
  "manifest_version": 0,
  "note": "Format v0, approved 2026-08-27 (design discussion: https://github.com/curtisgalloway/oxbox/issues/10). ox resolves venue against its own table; base_url is documentation and is never honored. cost 'unknown' or omitted behaves as paid. No entry carries params.max_tokens this issue: every class-A completion cap is at or above the 100,000 default (minimax-m3:free 943,718; glm-5.3-flash 131,072), and class-B venues publish no caps.",
  "survey": "The Oxbox Survey",
  "issue_date": "2026-09-01",
  "defaults": {
    "max_tokens": 100000
  },
  "recommendations": [
    {
      "rank": 1,
      "venue": "openrouter",
      "base_url": "https://openrouter.ai/api/v1",
      "model": "minimax/minimax-m3:free",
      "cost": "free",
      "why": "Run-backed: 13 of 15 findings real over two batches on 2026-08-29, 7 of 12 on a matched batch on 2026-08-30 including the cross-host redirect in oxbox's own exposure gate, fixed the same afternoon. Budget for reasoning: 98% of its completion tokens across seven runs went to thinking, and one run used 84% of the 100,000 default."
    },
    {
      "rank": 2,
      "venue": "openrouter",
      "base_url": "https://openrouter.ai/api/v1",
      "model": "z-ai/glm-5.3-flash",
      "cost": "paid",
      "pricing_usd_per_mtok": {
        "input": 0.075,
        "output": 0.25
      },
      "why": "The revealed Ox Alpha: 63 findings at 72% in edition 0.2 and a real credential leak found in oxbox itself. Nobody has run the paid route; same weights per the reveal, same served behavior is an assumption."
    },
    {
      "rank": 3,
      "venue": "opencode",
      "base_url": "https://opencode.ai/zen/v1",
      "model": "nemotron-3-ultra-free",
      "cost": "free",
      "why": "One run on 2026-08-30: 2 of 10 findings real on a payload matched to MiniMax M3, with the one serious defect filed as UNCERTAIN and a false one filed as critical. Cheap, fast and format-clean; run it on a different fixture before trusting its severity labels."
    }
  ]
}