Re: [PATCH 0/5] docs: improve guidance for AI-assisted bug reports

Willy Tarreau <[email protected]> writes:

> While vulnerability reporters have now started CCing maintainers,
> showing they read the docs, the security team still spends a lot of
> time repeating the same comments about tested version, incomplete
> fixes, poor email client setup causing formatting issues making
> patches unusable, unverified reports and missing Assisted-By tags,
> each time for AI-assisted reports.
>
> This series adds small updates to security-bugs.rst, threat-model.rst
> and coding-assistant.rst to better deal with this and provide minimal
> instructions helping the LLM follow our expectations.
>
> The updates were iteratively and carefully tested with 3 models,
> Opus-5, Qwen3.6-27B-Architect-Polaris2-Fable-B-F451, and Gemini,
> until all of them strictly followed the rules.
>
> It is expected to further improve the situation.

Just FWIW I've read through these and can't really find anything to
complain about.  It looks like Greg is planning to pick them up, so I'll
not do anything with them unless instructed otherwise.

Thanks,

jon