Looking at the last commits it does not seems like majority upstream development is not done by Oxide (I did not look at it extensively)
user@machine:~/illumos-gate$ git log --since 2023-09-10 | grep ^Author | awk -F @ '{print $2}' | sed 's/>$//' | sort | uniq -c | sort -n | tail
11 mnx.io
16 grumpf.hope-2000.org
18 gmail.com
21 oxide.computer
29 hamachi.org
36 richlowe.net
37 racktopsystems.com
71 fiddaman.net
91 fingolfin.org
125 me.com
I'm not going to post names because that feels a touch icky, but a little bit of cross-comparison suggests that one of those domains should be combined with oxide (read: I search for names and they work there) in a way that does probably make Oxide more than 50% of commits in the last year. Though even if that's true it doesn't make them the only player or anything.