On Fri, Jul 24, 2026 at 04:25:32PM +0100, Ian Jackson wrote: >... > REQUIREMENTS (SUPPLEMENT TO THE CODE OF CONDUCT) > > 4. Within Debian, messages to humans (including for example bug > reports, mailing list messages, discussions on Salsa, and blog > posts on Planet Debian) must be drafted solely by humans without > LLM assistance. >...
A large part of the vulnerabilities in CVEs are found with LLM assistance. Our security team often submits bugs for CVEs. Quoting text from upstream advisories in bugs like #1142537 will no longer be permitted. > 6. Individual projects and maintainers may ban LLM contributions > completely. Such bans (including by upstream projects) must be > respected. > > 7. Violations of these requirements should be treated as violations of > the Code of Conduct and should result in swift but proportionate > disciplinary action. >... Example: Submitting bugs for CVEs that were found with LLM assistance to Debian maintainers who have banned LLM contributions completely should result in swift disciplinary action. cu Adrian
