Re: DRAFT OPTION: A cautious approach to generative AI

--G0MPCcCIhZupVL/0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline

Hello Tobi,

Tobias Frost dijo [Wed, Jul 29, 2026 at 10:02:49AM +0200]:
>Hi,
>
>I think there is still a gap among the current ballot options, so I'd
>like to propose another one for discussion.
>
>The intention is to acknowledge the concerns around generative AI and
>encourage caution in its use, while avoiding new behavioural or Code of
>Conduct rules. Instead, it reaffirms Debian's long-standing principles
>of contributor autonomy, personal responsibility, and collaborative
>maintenance.
>
>Comments welcome. If people think this option might be useful to have on
>the ballot, I'll formally propose it.

I didn't like the proposal when starting to read it, but it gradually grew
in me. Thanks for proposing it.

I second the following proposal:


>-----BEGIN DRAFT PROPOSAL-----
>
>Summary: A cautious approach to generative AI
>
>Using its power under Constitution section 4.1(5), the Project issues
>the following statement describing its current position regarding the
>use of generative AI within Debian.
>
>Debian recognizes that generative AI raises significant ethical, legal,
>technical, and social concerns. These include questions relating to
>copyright and licensing, privacy, the provenance and quality of
>generated material, the health of Free Software communities, and the
>long-term consequences of widespread reliance on AI-generated content.
>
>Accordingly, Debian encourages contributors to avoid the use of
>generative AI where practical and to prefer human authorship,
>collaboration, and technical understanding over AI-generated output.
>
>At the same time, Debian has long relied on the judgment and
>responsibility of its contributors rather than prescribing individual
>workflows. Contributors remain responsible for everything they submit,
>irrespective of the tools used in preparing a contribution. Existing
>Debian standards regarding quality, correctness, licensing, and legal
>compliance continue to apply.
>
>Contributors using external generative AI services should exercise
>particular care not to disclose confidential information, embargoed
>security information, credentials, cryptographic keys, private
>communications, personal data, or other non-public Debian information.
>
>Nothing in this resolution should be understood as requiring
>contributors to use generative AI, nor as preventing contributors or
>maintainers from choosing not to use or accept AI-assisted
>contributions. Debian's existing collaborative processes remain the
>appropriate means for resolving such differences while allowing the
>project to continue making progress.
>
>While disclosure is not required, contributors are encouraged to
>voluntarily disclose the use of generative AI where appropriate,
>allowing others who prefer not to interact with AI-assisted content to
>make informed choices.
>
>Such disclosure should be regarded as a courtesy to fellow contributors
>rather than an indication that AI-assisted contributions are subject to
>different technical or procedural standards.
>
>-----END DRAFT PROPOSAL-----

If anything, I'd propose adding the following paragraph:

     The Debian project has always recognized the commitment and
     professionalism of its members. All contributions are under the
     responsibility of the Debian Contributor making it, no matter the
     technology they have behind. We trust all Debian Developers,
     Maintainers and Contributors will continue to uphold the high quality
     values that have distinguished our project from its onset.

I will second this proposal whether you incorporate this text or not.

--G0MPCcCIhZupVL/0
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCamoJPgAKCRDi9jtDU/RZ
iVx6AQDMPF1bBZaotfGJaaKPcSk64yh7CkL7hWzasL2TOC74+wD/cBmu5jwmiJbj
oj4fkIonytBkcRV/4CGZ70913uXwgQM=
=QjOE
-----END PGP SIGNATURE-----

--G0MPCcCIhZupVL/0--