Re: GR: Ban LLM contributions from Debian

On Fri, Jul 24, 2026 at 04:25:32PM +0100, Ian Jackson wrote:
>...
> REQUIREMENTS (SUPPLEMENT TO THE CODE OF CONDUCT)
> 
> 4. Within Debian, messages to humans (including for example bug
>    reports, mailing list messages, discussions on Salsa, and blog
>    posts on Planet Debian) must be drafted solely by humans without
>    LLM assistance.
>...

A large part of the vulnerabilities in CVEs are found with LLM assistance.

Our security team often submits bugs for CVEs.

Quoting text from upstream advisories in bugs like #1142537 will no 
longer be permitted.

> 6. Individual projects and maintainers may ban LLM contributions
>    completely.  Such bans (including by upstream projects) must be
>    respected.
>
> 7. Violations of these requirements should be treated as violations of
>    the Code of Conduct and should result in swift but proportionate
>    disciplinary action.
>...

Example:
  Submitting bugs for CVEs that were found with LLM assistance to Debian
  maintainers who have banned LLM contributions completely should result 
  in swift disciplinary action.

cu
Adrian