GLM-5.3 vs Step 3.7 Flash

GLM-5.3 58

The card covers intended use, languages and context and misses limitations, architecture, parameters and cut-off, for 8. Training data is 5, a description of the GLM-5 corpus in the cited report with no cut-off. The last change, a chat template speed-up on 14 October in the FP8 repository and on 15 October in the BF16 one, is within 30 days on 2 November, for 20. Responsiveness is 5, as zai-org answered 2 of the 16 discussions that aren't pull requests, the last on 8 September, which is a few, and no discussion has been opened since 10 October. Version policy is the full 10, with each GLM-5 release in its own repository and a dated blog saying what changed from GLM-5.2. File health is the full 10, with files and card agreeing and no broken-file report waiting by title.

Step 3.7 Flash 39

Model card 14, Intended use, the architecture, the parameters, the context and the language (in the metadata) are on the card. Training data 0, Nothing on the card about the training data. Last change 10, the last commit, on 3 June 2026, fixed the modelling code, 160 days before this check and within 180. Responsiveness 0, none of the 11 most recent discussions that aren't pull requests (29 May to 24 June 2026) has a reply from a stepfun-ai member, counted on 10 November by author flags and dates with a script, text not read. Version policy 5, Step-3.5-Flash stays in its own repositories and 3.7 came out in new ones, with no dated note on the older cards that we read. File health 10, Config, template and card agree on the architecture and the context, and June commits fixed the modelling code. 14 + 0 + 10 + 0 + 5 + 10 = 39.

GLM-5.3 55

Memory earns nothing, since Z.ai's smallest build is the 755.6 GB FP8 one, about 907 GB with the fifth added, and Ollama only lists a cloud entry. Four runtimes run it in a released version, llama.cpp, vLLM, SGLang and Transformers, for 20, while Ollama and LM Studio have no local build. Z.ai publishes one quantised build, FP8, for 10, since the BF16 repository is the full precision. The GLM-5.3 License is a custom licence that is free for commercial use below a revenue threshold, for 10. The files download with no account or gate, for 10, and Z.ai's own API plus eight live providers on Hugging Face serve it, for 5.

Step 3.7 Flash 70

Memory 5, the smallest build at 4 bits is StepFun's IQ4_XS GGUF, 104.99 GB with the 3.97 GB projector, and 108.96 GB × 1.2 = 130.8 GB, over what the reference machine can give a model and within 256 GB. The IQ3 and Q3 builds are below 4 bits and aren't read. Runtimes 20, Released vLLM 0.33.0, SGLang 0.5.23 and Transformers 5.22.2 have the step3p7 model, and llama.cpp b12242 has the architecture, with StepFun's own GGUF. Four at 5 each, and the card documents all four. Builds 15, StepFun publishes GGUF at five quantised precisions, an FP8 build and an NVFP4 build. Terms 15, Apache 2.0 in the card's metadata and its licence section, an OSI licence with nothing added. Download 10, the Hub API reports gated false for all four repositories on 10 November 2026, so the files download with no account and nothing to accept. Hosted 5, StepFun's own API serves it, per the card and our StepFun API listing, and Featherless and DeepInfra are live for it on Hugging Face. 5 + 20 + 15 + 15 + 10 + 5 = 70.

GLM-5.3 70

A Jinja chat template sits in the repository, for 20. The tool-calling format is 10, since it is defined only by the template and the glm47 parser is named by vLLM and SGLang rather than by Z.ai. The template takes several calls in one turn, for 20. Structured output is 0, with nothing on the card and JSON documented only for the hosted API. Reasoning control is 10, a per-request budget through reasoning_effort with the reasoning in a think block, though thinking can't be turned off. Context is 10, 1,048,576 tokens native with no rope scaling.

Step 3.7 Flash 85

Chat template 20, chat_template.jinja in the repository (5,723 characters). Tool-calling format 25, the card names the parser to use in two runtimes, step3p5 in vLLM (with auto tool choice) and in SGLang, and both ship Step parsers in a release. Trained tool calling 20, the card presents tool orchestration as a main use, with multi-turn results, and the template renders every call in a turn. Structured output 0, Nothing on the card about JSON or schema-constrained output for the weights. Reasoning control 10, the template has a reasoning_effort setting and keeps reasoning_content, and the card names the step3p5 reasoning parser for vLLM and SGLang, which returns the reasoning apart from the answer. Context 10, 256K tokens per the card, and 262,144 positions in config.json. 20 + 25 + 20 + 0 + 10 + 10 = 85.

GLM-5.3 50

File safety is full, with safetensors only, no Python in the repository and no remote code needed in Transformers 5.12.0 or later. Provenance is full, files in the zai-org organisation Z.ai links to with a SHA-256 for every shard. Safety evaluation is 0, because the blog mentions safety evaluation and hardening but publishes no results, and agent guidance is 0, with nothing on refusals, prompt injection or cautions. Licence risk is 10, losing 5 for the security review that model-as-a-service operators above US$10 billion of revenue must pass. The security programme is 0, with no security.txt, no SECURITY.md and no advisories.

Step 3.7 Flash 45

File safety 15, safetensors and GGUF only, no .bin, .pt or .pth files (25). Provenance 15, the files sit in the stepfun-ai organisation, which the card's StepFun platform and model page belong to (10). Safety evaluation 0, no safety results on the card. Agent guidance 0, the card has no limitations section and gives no guidance on prompt injection, instruction priority, refusals or safeguards. Licence risk 15, Apache 2.0 has no use policy, threshold or change clause. Security programme 0, no way to report a flaw on the card, and our StepFun API listing found no security.txt, bug bounty or disclosure policy. 15 + 15 + 0 + 0 + 15 + 0 = 45.