DRAFT OPTION: A cautious approach to generative AI

Tobias Frost <[email protected]> Wed, 29 Jul 2026 10:02:49 +0200
Newsgroups gmane.linux.debian.devel.vote
Message-ID <[email protected]>
--WUpA+KT0Jt8SkfNE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

I think there is still a gap among the current ballot options, so I'd
like to propose another one for discussion.

The intention is to acknowledge the concerns around generative AI and
encourage caution in its use, while avoiding new behavioural or Code of
Conduct rules. Instead, it reaffirms Debian's long-standing principles
of contributor autonomy, personal responsibility, and collaborative
maintenance.

Comments welcome. If people think this option might be useful to have on
the ballot, I'll formally propose it.

-----BEGIN DRAFT PROPOSAL-----

Summary: A cautious approach to generative AI

Using its power under Constitution section 4.1(5), the Project issues
the following statement describing its current position regarding the
use of generative AI within Debian.

Debian recognizes that generative AI raises significant ethical, legal,
technical, and social concerns. These include questions relating to
copyright and licensing, privacy, the provenance and quality of
generated material, the health of Free Software communities, and the
long-term consequences of widespread reliance on AI-generated content.

Accordingly, Debian encourages contributors to avoid the use of
generative AI where practical and to prefer human authorship,
collaboration, and technical understanding over AI-generated output.

At the same time, Debian has long relied on the judgment and
responsibility of its contributors rather than prescribing individual
workflows. Contributors remain responsible for everything they submit,
irrespective of the tools used in preparing a contribution. Existing
Debian standards regarding quality, correctness, licensing, and legal
compliance continue to apply.

Contributors using external generative AI services should exercise
particular care not to disclose confidential information, embargoed
security information, credentials, cryptographic keys, private
communications, personal data, or other non-public Debian information.

Nothing in this resolution should be understood as requiring
contributors to use generative AI, nor as preventing contributors or
maintainers from choosing not to use or accept AI-assisted
contributions. Debian's existing collaborative processes remain the
appropriate means for resolving such differences while allowing the
project to continue making progress.

While disclosure is not required, contributors are encouraged to
voluntarily disclose the use of generative AI where appropriate,
allowing others who prefer not to interact with AI-assisted content to
make informed choices.

Such disclosure should be regarded as a courtesy to fellow contributors
rather than an indication that AI-assisted contributions are subject to
different technical or procedural standards.

-----END DRAFT PROPOSAL-----

Disclosure: This proposal originated from my own ideas. I used a
generative AI solely as a drafting and language assistance tool, and
reviewed and edited the resulting text before posting it.

--=20
tobi

--WUpA+KT0Jt8SkfNE
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=Hwza
-----END PGP SIGNATURE-----

--WUpA+KT0Jt8SkfNE--