Re: GR: Ban LLM contributions from Debian
Andrey Rakhmatullin <[email protected]>
| Newsgroups | gmane.linux.debian.devel.vote |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Jul 22, 2026 at 05:35:37PM +0200, Matthias Geiger wrote: > 2. Quality LLM output has many well-known problems with > accuracy.[3][4][5] A LLM can never "know" if its output is correct > since it merely produces syntactically likely combinations of the > training data. > In some environments this is good enough. In Debian, it is not. For >instance, in packaging, each Debian source package is unique. Since >packaging syntax and best practices have changed over time, a >LLM-produced package will have a mixture of contents spanning the age >of the archive, with watch files that do not work, overrides out of >context, imaginary copyright, and will generally be unfit for upload. >A seasoned Debian contributor with packaging expertise may find some >limited usefulness here, but a new contributor cannot, and would not >know how to fix it. These same quality and accuracy concerns apply >clearly to all of the areas listed in the scope of this proposal >above. All of this applies to human-written contributions even more, and modern good models are evidently good enough to write acceptable packaging: https://github.com/TheJonaz/moraine-backup/tree/main/debian https://github.com/Derrity/TinyServe/tree/main/debian https://github.com/istax/eos/tree/main/debian These are all in the better 50% of new packager contributions, the second one even reported that it ran `lintian -EvIL +pedantic` while many new human packagers don't run lintian at all... "a mixture of contents spanning the age of the archive, with watch files that do not work, overrides out of context, imaginary copyright" applies to many existing packages, including fresh uploads by DDs, and not all DDs follow "packaging syntax and best practices have changed over time". I think we should instead ban low quality submissions. >Debian intentionally grows this >community through many means, and new contributors are always >encouraged to join. *cough* > Allowing LLM contributions breaks this. You want to forbid "assistance of large language models" while it may be Debian's only chance to get new contributors in the absence of good new contributor docs. >New >contributors submitting LLM output for review places an unnecessary >strain on the reviewer Agreed. Though just like the problem with spam OSS repo PRs always existed and LLMs mostly increased quantity of that as opposed to qualitative changes, Debian always had a problem with low quality new contributor submissions (see 3 new packages I linked above, none of them deserves to be in Debian, and they would be proposed just the same 5 years ago, just with worse debian/), and I think the solution is the same as with spam PRs: reject the contribution instead of reviewing it, reject the contributor if they persist or are clearly bad actors. > which can lead to burnout. Burnout of RFS reviewers is not only older than LLMs but older than RFSes... I'm mostly talking about RFSes because I assume we don't have a noticeable number of new contributors submitting patches to internal services or someone else's packages (except trivial ones or in bad faith). >Debian is not here to generate as much code as possible requiring >manual review by a shrinking number of human volunteers, or to package >every piece of software, or to rush new features, but these are what >LLMs are used for. Agreed, and we should actively reject more RFSes instead of silently letting them rot, but LLMs are also used for debugging, reviewing, drafting plans and drafting patches, which are things taking most of our volunteers' time. -- WBR, wRAR
signature.asc
(application/pgp-signature, 894 B)
-----BEGIN PGP SIGNATURE----- iQJhBAABCgBLFiEEtf6ieDcfC1EgtGkao+OWn23e7IYFAmphDqstFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEKPjlp9t3uyG K4cQAMwpt9ITErl7f9j73k+O9Tw16iHQpzglXg3yjzN5NKYMRtP2H2rTJkymlPCy XZG3MIAgBToYUElWmL/PvE16+hZHK23CbHAf9l2kqSpTGQ8wV5bKjMjaSK6cThGC 5ngJQheu6XU8h4u5s3cOyqIeOBuWcv0vq90QYqrEMCGxTh/UV3PnrPlfvNMfJWls 8ws+vIfFH4XjcmQ7ShvsccNDeIp67vHb2hhnfxEWG0L18IgCM8HFwWi6rEafR5Wm v+uyjbCHSDrpBR3PxvAVB7cTLS0+1strGzyXWQv88L6Y+li6NBuJHRBmHQeau4WQ +nF80DUA+xmpd5QkKJIyQw6X8sVd9Vxxu4nIBk0+TGROZ6L+Ek7RK1AA1IPSiaM3 5z7BlxB6IYdg4Vd5NMF3GOzKUb5jahVswT6vZGmXAUudkfxtR2nKgYC1D5ZEnGBG qyU+jibE7RedwNuNgvISa9ZkAnTygg+cMsc2QHjehhLCYuR1/PKurAHkEc+9QEPz yIfMK/wOT0DmLy5IqIdVLjdz0ZGheXlIbzRAuEUwIShknh7fAQpq2qJ1Dg6U1bBs d7Q71PaI05M9wrzqoaKwBJoobLAGeDobydU7UfQ+WWD2dCRSZWrPJe/QktOeLMZ4 VlBGydLOD+PbyamSBO7BLuZeXst1R1Q0Zs2Qne7cfmbZc7dj =7s1T -----END PGP SIGNATURE-----