Hi Lucas, On 04/08/26 at 14:55 +0000, Nilesh Patra wrote: > > On Wed, Jul 22, 2026 at 09:31:10PM +0200, Lucas Nussbaum wrote: > > > 1. **Legal Compatibility:** Contributors should ensure that the terms > and > > > conditions of the generative AI tool do not impose contractual > > > restrictions that conflict with the distribution, modification, or > use of > > > the output in the context of Debian. > > > > I am not sure how one fully could ascertain that. Is code generated by > > ChatGPT/claude/codex/cursor/gemini (which most of the LLM users make use > > of these days) satisfy this criteria? > > > > Similar to https://wiki.debian.org/DFSGLicenses would it be possible to > > have a list of such LLMs which are acceptable? > > AFAIK, none of the commonly used tools or APIs make claims over > copyright or other aspects that would be a problem (so they are all OK > AFAIK). >
Lawyers that I have spoken with are of the opinion that AI providers (either model weight providers or service providers) can not *really* legally claim any kind of copyright on the outputs of the AI models, so they are very explicitly NOT doing that. The outputs are quite clearly derived from your input so *if* any copyright applies at all, it will be related to input and context (like the project being analysed to be modified). Barring major legal decisions on this front, this is the (relatively undefined) status quo. However, both AI model and AI service providers can and do force users to agree to terms of service to be able to use their models or services. Conditions in those TOS documents varies widly and a few *can* be problematic for free software development, especially when sensitive information is concerned, like pre-announcement security voulnerabilities. For example, Grok wants to have a full "irrevocable, perpetual, transferable, sublicensable, royalty-free, and worldwide" license to all content generated by your queries ... https://www.termsfeed.com/blog/ai-terms-service-fine-print/ is a pretty interesting write-up on some of these terms. It is important to understand that TOS work very differently from copyright and copyleft licensing - TOS is *only* binding on the user directly using the service. It is *not* binding (and can not be made binding) to any third parties that only get access to the *output* of the models and are not using the model itself. On the other hand TOS can and do contain clauses that allow the issuer of TOS to modify it at any time. This does noting to the outputs already generated, but may restrict future interactions of the user with the service or even with a downloaded model. Usage of a downloaded model with a one-sided change clause *can* become in violation of its TOS later on. So, IMHO - yes, if a proposal allowing AI use in Debian in any form does pass, it will be useful to create and maintain a reference guide on which AI models and services have "Debian-compliant TOS" and which don't an why/how specifically. -- Best regards, Aigars Mahinovs
