Re: Ballet Option "Responsible use of Generative AI" (was: Draft permissive ballot option) from Debian)

Lucas Nussbaum <[email protected]> Wed, 29 Jul 2026 17:41:47 +0200
Newsgroups gmane.linux.debian.devel.vote
Message-ID <[email protected]>
--2fUi4+3DYbNlvyFr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

On 28/07/26 at 21:51 +0200, Marc Haber wrote:
> Here is my suggestion for a permissive ballot option. Disclaimer:=20
> generative AI and manual review of the output was used in preparing this=
=20
> option.
>=20
> BALLOT OPTION
>=20
> **Responsible Use of Generative AI**
>=20
> Using its power under Constitution section 4.1 (5), the project issues=20
> the following statement describing its current position on AI-assisted=20
> contributions. This statement describes the position of the project at=20
> the time it is adopted. That position may evolve as time passes without=
=20
> the need to resort to future general resolutions. The GR process remains=
=20
> available if the project needs a decision and cannot come to a=20
> consensus.
>=20
> Debian neither endorses nor prohibits the use of generative AI tools in=
=20
> the development, maintenance, or documentation of software, packaging,=20
> documentation, and other media published within the Debian Project. We=20
> recognize that such tools can substantially improve the productivity of=
=20
> contributors when used responsibly, allowing volunteers to spend more of=
=20
> their limited time on work that requires technical expertise, judgment,=
=20
> review, and collaboration.
>=20
> The Debian Project nevertheless expects that all contributions submitted=
=20
> to Debian, regardless of how and with which tools they were produced,=20
> satisfy the same standards of quality, correctness, maintainability, and=
=20
> legal compliance. The use of a generative AI tool does not diminish the=
=20
> contributor's responsibility for the work they submit. Contributors are=
=20
> expected to understand, review, test, and, where appropriate, modify=20
> AI-assisted output before incorporating it into Debian. Blindly=20
> accepting or uploading AI-generated material without appropriate human=20
> review is inconsistent with Debian's established development practices.=
=20
> We enourage our contributors to disclose whether a contribution was made=
=20
> with AI assitance, but do not require them to do so.
>=20
> Debian acknowledges that the legal status of material produced by=20
> generative AI systems remains the subject of ongoing discussion in many=
=20
> jurisdictions, including questions relating to copyright, authorship,=20
> licensing, and potential reproduction of training material. The Project=
=20
> does not seek to resolve these unsettled legal questions through this=20
> General Resolution, nor does it adopt a position on whether AI-generated=
=20
> output is, in whole or in part, copyrightable or derived from=20
> copyrighted works.
>=20
> Instead, Debian continues to rely on the judgment and responsibility of=
=20
> its individual contributors. Project members are expected to exercise=20
> appropriate care when using generative AI tools, to consider the=20
> provenance and licensing implications of material they contribute, and=20
> to avoid introducing content whose legal status they cannot reasonably=20
> justify. Existing Debian policies governing licensing, copyright,=20
> software freedom, and the acceptance of contributions continue to apply=
=20
> irrespective of the tools used to produce those contributions.
>=20
> Contributors are expected to exercise appropriate care when designing=20
> and implementing workflows that incorporate generative AI tools. In=20
> particular, they should ensure that confidential information, private=20
> communications, security-sensitive information (such as embargoed=20
> information about security bugs that is not yet public), cryptographic=20
> keys, credentials, and other non-public material relating to the Debian=
=20
> Project, its infrastructure, or its community are not disclosed to=20
> third-party AI services unless such disclosure has been explicitly=20
> authorized and is consistent with Debian's security and privacy=20
> requirements.
>=20
> The use of generative AI does not alter Debian's established=20
> expectations regarding large-scale or automated project actions.=20
> Contributors intending to perform actions with broad project impact,=20
> such as mass bug filing or patch submission, large-scale code=20
> modifications, or other automated changes or requests affecting many=20
> packages or contributors, should seek prior discussion and consensus=20
> through the appropriate project channels before proceeding. Any such=20
> automated process should be overseen by a human who remains accountable=
=20
> for its behavior and output.
>=20
> This resolution therefore affirms that generative AI is neither exempt=20
> from nor subject to special rules beyond the standards already expected=
=20
> of Debian contributors. The responsibility for every contribution rests=
=20
> with the contributor who submits it, who remains accountable for its=20
> technical quality, legal acceptability, and suitability for inclusion in=
=20
> Debian.
>=20
>=20
> END BALLOT OPTION

Seconded. Thanks for your work!

Lucas

--2fUi4+3DYbNlvyFr
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=1ahl
-----END PGP SIGNATURE-----

--2fUi4+3DYbNlvyFr--