OpenSSL Communities

Proposed AI policy

Jon Ericson PublicSeen by 127

There is now a proposed AI policy. For discussion of the details, please direct your comments to the PR itself. This discussion thread is a continuation of an earlier discussion. In a relatively short period of time we seem to have arrived a point where some allowance for AI seems necessary. Better to require people disclose the AI model(s) they have used and sign an updated CLA than pretend people aren't already contributing AI-assisted code.

Dmitry Belyavsky

What I don't like in the idea is the resigning of the updated CLA. People are negative to the current CLA approach, and resigning will not make the situation any better

Tomas Mraz

@Dmitry Belyavsky Only those that want to submit work generated by AI will need to sign CLA again. I do not think there is any way around that. Furthermore, we recently do not have any issues with signing CLAs. It was quite a while ago when we saw somebody not willing to sign a CLA. And, frankly, with AI we already have a lot of contributors, more than we can actually currently handle as for reviewing.

Peter Gutmann

Could the existing CLA be taken to mean "does not include AI", so only contributors wanting to use AI would have to sign the updated CLA? That would restrict the disruption to only those affected by it.

Matt Caswell

@Peter Gutmann that is exactly what the proposed policy says: "The old CLA remains valid for contributions that do not include non-trivial AI-generated content. If you are not using AI assistance, there is no need to re-sign."

Peter Gutmann

@Matt Caswell Ah, reading comprehension fail, it's further down in the "The CLA Requirement" section.

Matt Caswell

@Craig Lorentzen It hasn't been issued/written yet. As noted in the PR "This presupposes the existence of some version of the CLA with an AI clause", i.e. we know we need one, but haven't issued it yet.

Matt Caswell

@Richard Levitte (individual) Fixed!

Josef Edwards

This is excellent! Thank you for sharing this email! All of my comments on the OpenSSL repo were not AI generated. The little bit of allowance I was asking for was just one iteration help with a new dot c file for the atomic operations. I will elaborate on the discussion PR further if @drqedwards is not blocked on there anymore

Gadepalli R G

🙏. CLA hear would mean Contributor , license agreement. I don’t understand this post completely especially in the context

I am seeking clarification to avoid ambiguity to be on the same page with folks here

Have a nice day

Best regards

Gayatri

Matt Caswell

@Gayatri Yes CLA == Contributor License Agreement

Gadepalli R G

🙏, for clarification,

Best , Gayatri