Z.ai's two most downloaded models carry an MIT badge and no licence file — and so do 35 more

Z.ai publishes 154 model repositories on Hugging Face. Forty-nine of them carry an MIT licence label. Thirty-seven of those forty-nine contain no licence file at all — not LICENSE, not LICENSE.txt, nothing. The label is a line of metadata typed into the model card header, and behind it there is no licence text to read, no copyright holder named, no year. This is not a long tail of abandoned experiments. The two most downloaded models on the entire account are in the list: GLM-OCR, pulled two million times in thirty days, and GLM-4.7-Flash, pulled 1.88 million times. So are GLM-4.5, GLM-4.6, GLM-4.7, GLM-5 and their quantised builds, the vision line GLM-4.6V, the speech model GLM-ASR-Nano-2512, the image model GLM-Image and December's phone-operating agent AutoGLM-Phone-9B. Counted by traffic rather than by repository, the models with a badge and no file account for 5.51 million of the 9.09 million downloads Z.ai's MIT-labelled weights recorded in the past thirty days — three downloads in five. The company clearly knows how to ship a licence when it wants to. GLM-5.2, GLM-5.1 and GLM-5.3-Flash all carry the MIT text in the repository. The flagship GLM-5.3, released on 25 August, ships a bespoke document — the GLM-5.3 License, MIT-like in substance but with a clause requiring a Z.ai security review from any model-as-a-service operator above ten billion dollars in group revenue. Where the company had something specific to say, it wrote it down. AutoGLM-Phone-9B shows what the gap costs a reader. The weights repository is labelled MIT with no file. The code repository on GitHub is Apache 2.0. And the project's own notice states that the work is intended for research and study only, and prohibits use for unauthorised data access or system interference. Three signals, three different scopes, and nothing that reconciles them. A team that picks the model off the MIT badge is relying on a label the publisher never backed with text. None of this makes the weights unusable, and none of it implies bad faith — an omitted file is most easily explained by an upload script that never copied one. But a licence badge is the single field most readers use to decide whether they may ship something, and on this account it is unsupported three times out of four. Until the files appear, the safe reading of an MIT badge in these repositories is that the terms have not actually been published.