Re: Ballet Option "Responsible use of Generative AI" (was: Draft permissive ballot option) from Debian)

--UwbICKdMEQTOvQyB
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Marc,

Thanks for this option. I second it on the basis that:

- It places the agency and responsibility on the contributor to ensure
  quality of their contributions, acknowledging the challenges faced
  with AI-slop and the burden that it places on maintainers.

- It prioritizes our commitment under the social contract to focus on
  the end user, as ultimately that's what we're all after.

- Acknowledges the ongoing challenges and strong opinions relating to
  the technology that a diverse community as ours will have, but refrain
  from making a hard judgement that will split the community and disincenti=
vize
  those leveraging the technology while ensuring and respecting the quality
  standards.

I see some overlaps with Proposal B and D (thanks Lucas and
Pierre-Elliot) and would have preferred a joint option if any
differences or nuances can be worked out.

Anuradha

On Tue, Jul 28, 2026 at 09:51:33PM +0200, Marc Haber wrote:
> Here is my suggestion for a permissive ballot option. Disclaimer:=20
> generative AI and manual review of the output was used in preparing this=
=20
> option.
>=20
> BALLOT OPTION
>=20
> **Responsible Use of Generative AI**
>=20
> Using its power under Constitution section 4.1 (5), the project issues=20
> the following statement describing its current position on AI-assisted=20
> contributions. This statement describes the position of the project at=20
> the time it is adopted. That position may evolve as time passes without=
=20
> the need to resort to future general resolutions. The GR process remains=
=20
> available if the project needs a decision and cannot come to a=20
> consensus.
>=20
> Debian neither endorses nor prohibits the use of generative AI tools in=
=20
> the development, maintenance, or documentation of software, packaging,=20
> documentation, and other media published within the Debian Project. We=20
> recognize that such tools can substantially improve the productivity of=
=20
> contributors when used responsibly, allowing volunteers to spend more of=
=20
> their limited time on work that requires technical expertise, judgment,=
=20
> review, and collaboration.
>=20
> The Debian Project nevertheless expects that all contributions submitted=
=20
> to Debian, regardless of how and with which tools they were produced,=20
> satisfy the same standards of quality, correctness, maintainability, and=
=20
> legal compliance. The use of a generative AI tool does not diminish the=
=20
> contributor's responsibility for the work they submit. Contributors are=
=20
> expected to understand, review, test, and, where appropriate, modify=20
> AI-assisted output before incorporating it into Debian. Blindly=20
> accepting or uploading AI-generated material without appropriate human=20
> review is inconsistent with Debian's established development practices.=
=20
> We enourage our contributors to disclose whether a contribution was made=
=20
> with AI assitance, but do not require them to do so.
>=20
> Debian acknowledges that the legal status of material produced by=20
> generative AI systems remains the subject of ongoing discussion in many=
=20
> jurisdictions, including questions relating to copyright, authorship,=20
> licensing, and potential reproduction of training material. The Project=
=20
> does not seek to resolve these unsettled legal questions through this=20
> General Resolution, nor does it adopt a position on whether AI-generated=
=20
> output is, in whole or in part, copyrightable or derived from=20
> copyrighted works.
>=20
> Instead, Debian continues to rely on the judgment and responsibility of=
=20
> its individual contributors. Project members are expected to exercise=20
> appropriate care when using generative AI tools, to consider the=20
> provenance and licensing implications of material they contribute, and=20
> to avoid introducing content whose legal status they cannot reasonably=20
> justify. Existing Debian policies governing licensing, copyright,=20
> software freedom, and the acceptance of contributions continue to apply=
=20
> irrespective of the tools used to produce those contributions.
>=20
> Contributors are expected to exercise appropriate care when designing=20
> and implementing workflows that incorporate generative AI tools. In=20
> particular, they should ensure that confidential information, private=20
> communications, security-sensitive information (such as embargoed=20
> information about security bugs that is not yet public), cryptographic=20
> keys, credentials, and other non-public material relating to the Debian=
=20
> Project, its infrastructure, or its community are not disclosed to=20
> third-party AI services unless such disclosure has been explicitly=20
> authorized and is consistent with Debian's security and privacy=20
> requirements.
>=20
> The use of generative AI does not alter Debian's established=20
> expectations regarding large-scale or automated project actions.=20
> Contributors intending to perform actions with broad project impact,=20
> such as mass bug filing or patch submission, large-scale code=20
> modifications, or other automated changes or requests affecting many=20
> packages or contributors, should seek prior discussion and consensus=20
> through the appropriate project channels before proceeding. Any such=20
> automated process should be overseen by a human who remains accountable=
=20
> for its behavior and output.
>=20
> This resolution therefore affirms that generative AI is neither exempt=20
> from nor subject to special rules beyond the standards already expected=
=20
> of Debian contributors. The responsibility for every contribution rests=
=20
> with the contributor who submits it, who remains accountable for its=20
> technical quality, legal acceptability, and suitability for inclusion in=
=20
> Debian.
>=20
>=20
> END BALLOT OPTION

--UwbICKdMEQTOvQyB
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE9WuPFOAUze9dBH/BY221odkYYP0FAmppo7AACgkQY221odkY
YP3zng//SYzPd8chZ9lN6oo8VkaGMT7LV4un59gJ2/lkn3rfWGv6LXxCDu1taOa7
Sa0LOtvJ9PNeIjLn+xFW/0+bp4lC+hQ4fAFx6a9WHpGzfVfqyjnLZGtx4ZPcV84Y
9+7kmKnA3PO2OmnL5SUaQrq/ZMZOthu1C77etzfMVyMhOuAWs1C11ytAUPCEMyn7
/JWcjZ0YnnSd9xMBsYGxCFqSShL3hHYSOQeePlQRB/5yNS/hXdXtWqC18iuhpVbj
n5TfHHPwYSMQLsMsvRjnTtyUUjzn4e66giXkD5XO9K72Oso82jm96x2QyRjRQpsN
Sm9Co/1Q1z6E614JS228DLxyYb/WWaQBBeOpurnOAbkGDBtbatwa7oV2DF8Fj4px
xysUqoQJflzvs4huymsHy9QKf2JeIhrlNxvNXyD/o9j9ZLK+SHOE+naWvhWoQIy9
+oTDfsaLwuzN/icVHx2/o+FZK9l+N1keNT/d8yH22QwJZIbymj0NLgrr69PJGByq
bo+EJ7RwgBh6WpujlK4ySoT2PJY3LEddRLAq7bLguri6vJr6IgLxIrZUG9AcHHCm
sBvnvQNypt90ysH7mfy8xBJlqaXoh3Hn2oFGAmAY7FwvoBIdlD9af3cDN7kwyzHx
zW69D5LzVoSBoTfUg6QNGyVj9pQVddO4T/8f4HAV2YFKw1R8s24=
=mhYi
-----END PGP SIGNATURE-----

--UwbICKdMEQTOvQyB--