Re: Ballot option: Allow AI-Assisted Contributions

Simon Richter <[email protected]>
Newsgroups gmane.linux.debian.devel.vote
Message-ID <[email protected]>
Hi,

On 8/5/26 5:59 PM, Gerardo Ballabio wrote:

> As I understand it, the problem with copyright isn't that AI providers
> might claim copyright. It's that *someone else* might claim copyright
> because the AI scraped and regurgitated their code. That's still an
> open legal question AFAIK.

That, and whether the person prompting AI can claim copyright on the 
generated code.

If we accept the premise that the code that went into the training data 
has been so thoroughly processed that no traces of the original 
copyrights remain and the generated code is therefore not subject to the 
intersection of the original licenses, that still leaves the context 
going into the inference phase.

That context is a mix of

  - system prompt (provided by the service)
  - project context (when modifying existing code)
  - user prompt

Now, there are multiple possible interpretations:

1. the output is not a derivative work of the context. The prompter 
therefore is not the author, and asserting that they own the copyright 
is therefore fraudulent.

2. the output is a derivative work of the context. We therefore need a 
licence from the service provider to be able to freely choose a licence 
for the generated output (I suppose we have that, but we need to make 
sure), and the generated code is largely attributable to the authors of 
the existing code, not the person implementing the latest change.

I don't see any interpretation where a thorough review is sufficient to 
establish authorship, regardless of whether the generated code is 
copyrightable or not.

For the US, the closest to case law we have is probably the Monkey 
Selfie Copyright Dispute.

I see very little danger that copyright holders of training data will be 
able to sue for infringement, because that would put the legal status of 
inference services into question, and these can (still) afford expensive 
lawyers.

I think it is more likely that we will see another FUD campaign like in 
the early 2000s, with large commercial software vendors asserting that 
the legal status of free software is unclear because of potential AI 
involvement.

Oracle have a strong policy disallowing any AI use in OpenJDK. We can 
only speculate if they are doing this for legal or technical reasons, 
but neither suggests that it is a good idea to use AI for contributions 
to existing OSS projects.

I'm a bit more relaxed[2] about isolated green field development by 
single authors, especially for things that aren't core system components 
and can be exchanged if necessary. The more problematic uses are the 
proper community projects with hundreds of authors, where one cannot 
assume that all copyright holders agree.

    Simon

[1] https://en.wikipedia.org/wiki/Monkey_selfie_copyright_dispute

[2] except for the influence of AI on sanitation, medicine, education, 
wine, public order, irrigation, roads, the fresh water system and public 
health
OpenPGP_signature.asc (application/pgp-signature, 488 B)
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEtjuqOJSXmNjSiX3Tfr04e7CZCBEFAmp0lA0ACgkQfr04e7CZ
CBGCoAf/RuG07feywwTkzDt0fHvUU7ZI5t671Mg24wzA1LpywmLwqGwPlX0P38BB
r/nr6OgHdZV8Fbywo+ztfZ8aHtxdn6TNoZ9Uw3YRrtt1LqfYqkAXM6a1z+uyFXK0
iZ9U8+uT684VnajC/nea7Gidveo6h6G5FQSpYu3hDc3y3f/7aeRrGXyJThtLp2JZ
at/qcg5AX5pKRUkmgH7zNK+Nb+tcS5n2bOMMa1gS29eRYzvQu52Bd8Qc3YeVHqZS
uqvy0sIaTWXbGv5VTjjOjaJbxw0/XJ95Hn0djyZQcjjIp2uU2U9cQJ7EjLM7Qm6X
AYnzQidJDzxV528kq9kZrXDLXiZVpQ==
=RTZn
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.