On Mon, Aug 03, 2026 at 10:20:43AM -0600, Jonathan Corbet wrote: > Willy Tarreau <[email protected]> writes: > > > While vulnerability reporters have now started CCing maintainers, > > showing they read the docs, the security team still spends a lot of > > time repeating the same comments about tested version, incomplete > > fixes, poor email client setup causing formatting issues making > > patches unusable, unverified reports and missing Assisted-By tags, > > each time for AI-assisted reports. > > > > This series adds small updates to security-bugs.rst, threat-model.rst > > and coding-assistant.rst to better deal with this and provide minimal > > instructions helping the LLM follow our expectations. > > > > The updates were iteratively and carefully tested with 3 models, > > Opus-5, Qwen3.6-27B-Architect-Polaris2-Fable-B-F451, and Gemini, > > until all of them strictly followed the rules. > > > > It is expected to further improve the situation. > > Just FWIW I've read through these and can't really find anything to > complain about. It looks like Greg is planning to pick them up, so I'll > not do anything with them unless instructed otherwise.
OK, many thanks to you both for the quick response! Willy
