From 608ed56537748299f10cb263f69a84c1faa54568 Mon Sep 17 00:00:00 2001 From: Enric Tobella Date: Wed, 8 Jul 2026 15:43:03 +0200 Subject: [PATCH 1/4] [ADD] AI_POLICY.md: Base on attrs version --- AI_POLICY.md | 71 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 71 insertions(+) create mode 100644 AI_POLICY.md diff --git a/AI_POLICY.md b/AI_POLICY.md new file mode 100644 index 0000000..41352d7 --- /dev/null +++ b/AI_POLICY.md @@ -0,0 +1,71 @@ +# Generative AI / LLM Policy + +We appreciate that we can't realistically police how you author your pull requests, which includes whether you employ large-language model (LLM)-based development tools. +So, we don't. + +However, due to both legal and human reasons, we have to establish boundaries. + +> [!CAUTION] +> **TL;DR:** +> - We take the responsibility for this project very seriously and we expect you to take your responsibility for your contributions seriously, too. +> This used to be a given, but it changed now that a pull request is just one prompt away. +> +> - Every contribution has to be backed by a human who unequivocally owns the copyright for all changes. +> No LLM bots in `Co-authored-by:`s. +> +> - DoS-by-slop leads to a permanent ban. +> +> - Absolutely **no** unsupervised agentic tools like OpenClaw. +> +> --- +> +> By submitting a pull request, you certify that: +> +> - You are the author of the contribution or have the legal right to submit it. +> - You either hold the copyright to the changes or have explicit legal authorization to contribute them under this project's license. +> - You understand the code. +> - You accept full responsibility for it. + + +## Legal + +There is ongoing legal uncertainty regarding the copyright status of LLM-generated works and their provenance. +Since we do not have a formal [Contributor License Agreement](https://en.wikipedia.org/wiki/Contributor_license_agreement) (CLA), you retain your copyright to your changes to this project. + +Therefore, allowing contributions by LLMs has unpredictable consequences for the copyright status of this project – even when leaving aside possible copyright violations due to plagiarism. + + +## Human + +As the makers of software that is used by millions of people worldwide and with a reputation for high-quality maintenance, we take our responsibility to our users very seriously. +No matter what LLM vendors or boosters on LinkedIn tell you, we have to manually review every change before merging, because it's **our responsibility** to keep the project stable. + +Please understand that by opening low-quality pull requests you're not helping anyone. +Worse, you're [poisoning the open source ecosystem](https://lwn.net/Articles/1058266/) that was precarious even before the arrival of LLM tools. +Having to wade through plausible-looking-but-low-quality pull requests and trying to determine which ones are legit is extremely demoralizing and has already burned out many good maintainers. + +Put bluntly, we have no time or interest to become part of your vibe coding loop where you drop LLM slop at our door, we spend time and energy to review it, and you just feed it back into the LLM for another iteration. + +This dynamic is especially pernicious because it poisons the well for mentoring new contributors which we are committed to. + + +## Summary + +In practice, this means: + +- Pull requests that have an LLM product listed as co-author can't be merged and will be closed without further discussion. + We cannot risk the copyright status of this project. + + If you used LLM tools during development, you may still submit – but you must remove any LLM co-author tags and take full ownership of every line. + +- By submitting a pull request, **you** take full **technical and legal** responsibility for the contents of the pull request and promise that **you** hold the copyright for the changes submitted. + + "An LLM wrote it" is **not** an acceptable response to questions or critique. + **If you cannot explain and defend the changes you submit, do not submit them** and open a high-quality bug report/feature request instead. + +- Accounts that exercise bot-like behavior – like automated mass pull requests – will be permanently banned, whether they belong to a human or not. + +- Do **not** post LLM-generated review comments – we can prompt LLMs ourselves should we desire their wisdom. + Do **not** post summaries unless you've fact-checked them and take responsibility for 100% of their content. + Remember that *all* LLM output *looks* **plausible**. + When using these tools, it's **your** responsibility to ensure that it's also **correct** and has a reasonable signal-to-noise ratio. From aaffe937b58b973fa203033498f07d43506816d6 Mon Sep 17 00:00:00 2001 From: Enric Tobella Date: Wed, 8 Jul 2026 15:44:27 +0200 Subject: [PATCH 2/4] [IMP] AI_POLICY: Add Thanks to original authors --- AI_POLICY.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/AI_POLICY.md b/AI_POLICY.md index 41352d7..509e617 100644 --- a/AI_POLICY.md +++ b/AI_POLICY.md @@ -69,3 +69,7 @@ In practice, this means: Do **not** post summaries unless you've fact-checked them and take responsibility for 100% of their content. Remember that *all* LLM output *looks* **plausible**. When using these tools, it's **your** responsibility to ensure that it's also **correct** and has a reasonable signal-to-noise ratio. + +## Thanks + +This policy was based on the policy of the `attrs` project. Many thanks to them for developing it. From 13006813bd73448fe92fce1b87acbb4e1031b466 Mon Sep 17 00:00:00 2001 From: Enric Tobella Date: Wed, 8 Jul 2026 16:03:38 +0200 Subject: [PATCH 3/4] [IMP] AI_POLICY add more information regarding Reviews (from PIP AI Policy) --- AI_POLICY.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/AI_POLICY.md b/AI_POLICY.md index 509e617..f7fe607 100644 --- a/AI_POLICY.md +++ b/AI_POLICY.md @@ -44,6 +44,9 @@ Please understand that by opening low-quality pull requests you're not helping a Worse, you're [poisoning the open source ecosystem](https://lwn.net/Articles/1058266/) that was precarious even before the arrival of LLM tools. Having to wade through plausible-looking-but-low-quality pull requests and trying to determine which ones are legit is extremely demoralizing and has already burned out many good maintainers. +In particular, note that [code reviews are a social process](https://blog.glyph.im/2026/03/what-is-code-review-for.html) and are *not* intended to catch bugs in PRs created by an LLM. +If you submit a pull request, we expect you to engage with reviewers and learn from the review, not simply update the prompt that generated the PR and regenerate the code. + Put bluntly, we have no time or interest to become part of your vibe coding loop where you drop LLM slop at our door, we spend time and energy to review it, and you just feed it back into the LLM for another iteration. This dynamic is especially pernicious because it poisons the well for mentoring new contributors which we are committed to. From 5bb8273515e1103529442417ec1c4be8d6093be1 Mon Sep 17 00:00:00 2001 From: Enric Tobella Date: Wed, 8 Jul 2026 15:54:51 +0200 Subject: [PATCH 4/4] [IMP] AI_POLICY: Adapt to OCA --- AI_POLICY.md | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/AI_POLICY.md b/AI_POLICY.md index f7fe607..0288a4c 100644 --- a/AI_POLICY.md +++ b/AI_POLICY.md @@ -7,7 +7,7 @@ However, due to both legal and human reasons, we have to establish boundaries. > [!CAUTION] > **TL;DR:** -> - We take the responsibility for this project very seriously and we expect you to take your responsibility for your contributions seriously, too. +> - We take the responsibility for this community very seriously and we expect you to take your responsibility for your contributions seriously, too. > This used to be a given, but it changed now that a pull request is just one prompt away. > > - Every contribution has to be backed by a human who unequivocally owns the copyright for all changes. @@ -22,7 +22,7 @@ However, due to both legal and human reasons, we have to establish boundaries. > By submitting a pull request, you certify that: > > - You are the author of the contribution or have the legal right to submit it. -> - You either hold the copyright to the changes or have explicit legal authorization to contribute them under this project's license. +> - You either hold the copyright to the changes or have explicit legal authorization to contribute them under this community's license. > - You understand the code. > - You accept full responsibility for it. @@ -30,15 +30,13 @@ However, due to both legal and human reasons, we have to establish boundaries. ## Legal There is ongoing legal uncertainty regarding the copyright status of LLM-generated works and their provenance. -Since we do not have a formal [Contributor License Agreement](https://en.wikipedia.org/wiki/Contributor_license_agreement) (CLA), you retain your copyright to your changes to this project. - -Therefore, allowing contributions by LLMs has unpredictable consequences for the copyright status of this project – even when leaving aside possible copyright violations due to plagiarism. +Because of this, allowing contributions by LLMs has unpredictable consequences for the copyright status of the codebase – even when leaving aside possible copyright violations due to plagiarism. ## Human As the makers of software that is used by millions of people worldwide and with a reputation for high-quality maintenance, we take our responsibility to our users very seriously. -No matter what LLM vendors or boosters on LinkedIn tell you, we have to manually review every change before merging, because it's **our responsibility** to keep the project stable. +No matter what LLM vendors or boosters on LinkedIn tell you, we have to manually review every change before merging, because it's **our responsibility** to keep the projects stable. Please understand that by opening low-quality pull requests you're not helping anyone. Worse, you're [poisoning the open source ecosystem](https://lwn.net/Articles/1058266/) that was precarious even before the arrival of LLM tools. @@ -57,7 +55,7 @@ This dynamic is especially pernicious because it poisons the well for mentoring In practice, this means: - Pull requests that have an LLM product listed as co-author can't be merged and will be closed without further discussion. - We cannot risk the copyright status of this project. + We cannot risk the copyright status of the code of the community. If you used LLM tools during development, you may still submit – but you must remove any LLM co-author tags and take full ownership of every line. @@ -66,7 +64,7 @@ In practice, this means: "An LLM wrote it" is **not** an acceptable response to questions or critique. **If you cannot explain and defend the changes you submit, do not submit them** and open a high-quality bug report/feature request instead. -- Accounts that exercise bot-like behavior – like automated mass pull requests – will be permanently banned, whether they belong to a human or not. +- Accounts that exercise bot-like behavior – like automated mass pull requests creation or reviews – will be permanently banned, whether they belong to a human or not. - Do **not** post LLM-generated review comments – we can prompt LLMs ourselves should we desire their wisdom. Do **not** post summaries unless you've fact-checked them and take responsibility for 100% of their content.