Re: Ballet Option "Responsible use of Generative AI" (was: Draft permissive ballot option) from Debian)
Lucas Nussbaum <[email protected]> Wed, 29 Jul 2026 17:41:47 +0200
| Newsgroups | gmane.linux.debian.devel.vote |
|---|---|
| Message-ID | <[email protected]> |
--2fUi4+3DYbNlvyFr Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, On 28/07/26 at 21:51 +0200, Marc Haber wrote: > Here is my suggestion for a permissive ballot option. Disclaimer:=20 > generative AI and manual review of the output was used in preparing this= =20 > option. >=20 > BALLOT OPTION >=20 > **Responsible Use of Generative AI** >=20 > Using its power under Constitution section 4.1 (5), the project issues=20 > the following statement describing its current position on AI-assisted=20 > contributions. This statement describes the position of the project at=20 > the time it is adopted. That position may evolve as time passes without= =20 > the need to resort to future general resolutions. The GR process remains= =20 > available if the project needs a decision and cannot come to a=20 > consensus. >=20 > Debian neither endorses nor prohibits the use of generative AI tools in= =20 > the development, maintenance, or documentation of software, packaging,=20 > documentation, and other media published within the Debian Project. We=20 > recognize that such tools can substantially improve the productivity of= =20 > contributors when used responsibly, allowing volunteers to spend more of= =20 > their limited time on work that requires technical expertise, judgment,= =20 > review, and collaboration. >=20 > The Debian Project nevertheless expects that all contributions submitted= =20 > to Debian, regardless of how and with which tools they were produced,=20 > satisfy the same standards of quality, correctness, maintainability, and= =20 > legal compliance. The use of a generative AI tool does not diminish the= =20 > contributor's responsibility for the work they submit. Contributors are= =20 > expected to understand, review, test, and, where appropriate, modify=20 > AI-assisted output before incorporating it into Debian. Blindly=20 > accepting or uploading AI-generated material without appropriate human=20 > review is inconsistent with Debian's established development practices.= =20 > We enourage our contributors to disclose whether a contribution was made= =20 > with AI assitance, but do not require them to do so. >=20 > Debian acknowledges that the legal status of material produced by=20 > generative AI systems remains the subject of ongoing discussion in many= =20 > jurisdictions, including questions relating to copyright, authorship,=20 > licensing, and potential reproduction of training material. The Project= =20 > does not seek to resolve these unsettled legal questions through this=20 > General Resolution, nor does it adopt a position on whether AI-generated= =20 > output is, in whole or in part, copyrightable or derived from=20 > copyrighted works. >=20 > Instead, Debian continues to rely on the judgment and responsibility of= =20 > its individual contributors. Project members are expected to exercise=20 > appropriate care when using generative AI tools, to consider the=20 > provenance and licensing implications of material they contribute, and=20 > to avoid introducing content whose legal status they cannot reasonably=20 > justify. Existing Debian policies governing licensing, copyright,=20 > software freedom, and the acceptance of contributions continue to apply= =20 > irrespective of the tools used to produce those contributions. >=20 > Contributors are expected to exercise appropriate care when designing=20 > and implementing workflows that incorporate generative AI tools. In=20 > particular, they should ensure that confidential information, private=20 > communications, security-sensitive information (such as embargoed=20 > information about security bugs that is not yet public), cryptographic=20 > keys, credentials, and other non-public material relating to the Debian= =20 > Project, its infrastructure, or its community are not disclosed to=20 > third-party AI services unless such disclosure has been explicitly=20 > authorized and is consistent with Debian's security and privacy=20 > requirements. >=20 > The use of generative AI does not alter Debian's established=20 > expectations regarding large-scale or automated project actions.=20 > Contributors intending to perform actions with broad project impact,=20 > such as mass bug filing or patch submission, large-scale code=20 > modifications, or other automated changes or requests affecting many=20 > packages or contributors, should seek prior discussion and consensus=20 > through the appropriate project channels before proceeding. Any such=20 > automated process should be overseen by a human who remains accountable= =20 > for its behavior and output. >=20 > This resolution therefore affirms that generative AI is neither exempt=20 > from nor subject to special rules beyond the standards already expected= =20 > of Debian contributors. The responsibility for every contribution rests= =20 > with the contributor who submits it, who remains accountable for its=20 > technical quality, legal acceptability, and suitability for inclusion in= =20 > Debian. >=20 >=20 > END BALLOT OPTION Seconded. Thanks for your work! Lucas --2fUi4+3DYbNlvyFr Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE/t7ByzN7z1CfQ8IkORS1MvTfvpkFAmpqHzoACgkQORS1MvTf vpnd9RAAgHGwCT/JwbGNeSutEl3yl3O2EXQ3tqdKXdjpfQSsJ6PSa/Tj+G8nSEnk 0B80REt3trIEFFJ6YjQsUT3xIjOBjqAwFLS/fmX5Vkre5DbqLBn1jdwonzde7Wcl e9m85GcK4CqdvMYzJs/g0niksE7kRP9hBQqsTO+QW03F4+11nz6aIc6R0EDnbAJX aF0tujGqF1VCMBg63I7dO5RCnIERQyea26d23vRdIe0E1hWec0zzRigrNlRK+QJU +P74xAb4FHeq5ZsHL9XQoNyxa0jr1T2yhOIzF/gXPi9088A2rNLwdWny7ot825Qd FZ/vhpxc5z19lVGLg8DBrsU2xs+z0y7QLWi/b+6EILNQST/fH8ZW3b8mpUVNtIml 1Wo91xi+R7VsbKD/Nm6GazjOnPSRyoY03cRnGw0f8UlNp2xoh6IAsrxQeUsOZWDM lkTbBjj+VBUxyiaFOCIq9TBvY5wPI0CbwqJME7erN9EEQveBakC9/ePzaWFPAhnh DGwsdM/gtUJJCZsJw7jYR6QMaCAM9prPFm6wVWEusQxEf2UHWcvV/Jgj5FYBgeAA Cgh3dWg2OU0T4WOQrITC+Et5rdHY7n9GKx8SaYdnGePpqrQLI1uhjORjONUaL/0t /gCLnDowKq6Nc/R37MV1BiyrKXM1xkQ7DF6CSFPUJwlqZSLbA1Y= =1ahl -----END PGP SIGNATURE----- --2fUi4+3DYbNlvyFr--