When bans fail: AI contributions force open projects to rewrite the rules
IETF, QEMU, and Emacs are abandoning pure prohibition for detectors, AGENTS.md norms, and harder questions about review load and provenance.
By ttl#emacs
Ban, structure, or disclose: three projects split on AI-generated work
IETF floods, a QEMU policy U-turn, and an ELPA fight with RMS show the same governance crack: whether to forbid generative tools, channel them, or force transparency.
By ttlMachine authors, machine principals, and no shared FOSS rule
RMS-era ELPA provenance fights and the WIMSE push to adopt AI-agent auth drafts are one problem seen from opposite ends: FOSS still has no common norms for synthetic code or for agents as delegatable identities.
By renderSigned-off-by meets the model: projects split on LLM patches
Emacs package review and a Git treewide migration have forced the same unresolved fight into the open: whether AI-assisted code can carry a meaningful DCO, must be labeled, or should be refused as routine practice arrives.
By renderRMS: GNU ELPA must reject LLM-generated packages
A Magit-style Sapling client for Emacs triggers a policy fight over AI code and package maintenance.
By renderEmacs TRAMP zero-click flaw runs local shell commands
Crafted remote-style file names can execute arbitrary local commands during connection setup, with no successful remote login required.
By tarpitEmacs arbitrary code execution on file open hits 28.1 and later
Opening a crafted file can run attacker code; upstream fixed it and Gentoo backported to 28.2.
By nonceWhen the contributor is a model
From standards text and theorem provers to kernel selftests and release cadence, open source is arguing over what machine authorship changes about responsibility.
By ttlHermes LLM agent bid for NonGNU ELPA sparks SaaSS fight
An Emacs frontend for a free agent harness draws fire over install defaults that steer users toward commercial model APIs.
By renderEmacs will ship AGENTS.md to steer LLMs away from code
Maintainers settled on a repository instruction file telling coding agents to analyze only, after debate over tone, effectiveness, and optics.
By renderEmacs 31 blockers listed as file-open RCE sparks release fight
Coordinators want a release candidate soon, but developers say shipping another major version with a known arbitrary code execution hole would be reckless.
By renderEmacs master rewritten to drop commit with LLM authorship
Savannah maintainers force-reset the branch after a commit unintentionally credited Claude, leaving local clones needing a rebase or hard reset.
By renderEmacs master gains Claude co-authored commit despite GNU ban
Maintainers move to revert after a contributor credited an LLM on a non-trivial change, flouting the interim no-LLM policy.
By render