From 6b8983a6ca85cd63704453dd176b9b53c8455853 Mon Sep 17 00:00:00 2001 From: MiMoHo <37556964+MiMoHo@users.noreply.github.com> Date: Mon, 28 Sep 2026 21:07:15 +0200 Subject: [PATCH] docs(ai-policy): ask for a rewrite before closing over AI-written text Pull requests are closed right away when their description reads as AI-written. Translated text by non-native speakers often reads the same way, and pull requests opened before the policy existed were closed as well. - The ideas and decisions must come from the contributor. AI may help to draft the text if the contributor has read, understood, and edited it, and says so. Translation and grammar help stay exempt. - If a description is not understandable, maintainers ask for a rewrite first and may close after a month without a reply. - Contributors writing in another language may add a translation note. - Pull requests opened before a policy change are asked to adapt. - CONTRIBUTING.md and the agent snippet use the same wording. Assisted-by: Claude Opus 5.5 (xhigh) Signed-off-by: MiMoHo <37556964+MiMoHo@users.noreply.github.com> --- AGENT_MD_SNIPPETS.md | 2 +- AI_POLICY.md | 6 ++++-- CONTRIBUTING.md | 2 +- 3 files changed, 6 insertions(+), 4 deletions(-) diff --git a/AGENT_MD_SNIPPETS.md b/AGENT_MD_SNIPPETS.md index 4387edac..4322eca7 100644 --- a/AGENT_MD_SNIPPETS.md +++ b/AGENT_MD_SNIPPETS.md @@ -33,6 +33,6 @@ All contributions generated or assisted by this agent must fully comply with: - Open issues, submit pull requests, post review comments, or send security reports autonomously. Every contribution must be reviewed and submitted by a human. - Add `Signed-off-by` tags to commits. Only the human contributor can certify the Developer Certificate of Origin. - Generate or submit security reports without independent human verification. Report verified vulnerabilities via [HackerOne](https://hackerone.com/nextcloud), not as GitHub issues. -- Write PR descriptions, review comments, or issue reports on behalf of the contributor. These must be in the contributor's own words. +- Write PR descriptions, review comments, or issue reports for the contributor to post unchanged. Drafts are fine if the contributor reads, understands, and edits them before posting. Translating or correcting text the contributor wrote is always fine. - Fully automate the resolution of issues labeled [`good first issue`](https://github.com/issues?q=org%3Anextcloud+label%3A%22good+first+issue%22) or similar beginner-friendly labels. - Submit code that has not been reviewed and cleaned up by the contributor. Dead code, redundant logic, excessive comments, malformed or garbled characters (e.g. `�` replacement characters), and unrelated changes must be removed before submission. diff --git a/AI_POLICY.md b/AI_POLICY.md index 79350579..122468e1 100644 --- a/AI_POLICY.md +++ b/AI_POLICY.md @@ -42,10 +42,12 @@ The contributor is the legal and moral author of every line they submit. If a re ### Human-Written Communication -Issues, PR descriptions, and review comments must be in the contributor's own words. Translation assistance and grammar/spelling help are acceptable exceptions and do not need to be disclosed - the intent of this rule is to ensure that the ideas, reasoning, and decisions in community communication come from the contributor. +The ideas, reasoning, and decisions in issues, PR descriptions, and review comments must come from the contributor. AI tools may help to draft or phrase these texts if the contributor has read, understood, and edited the result before publishing it, and discloses that AI helped. Translation and grammar/spelling help do not need to be disclosed. Contributors who write in another language may add a short note that the text was translated. This requirement extends through the entire review process. Contributors must respond to reviewer questions and implement requested changes themselves. Passing maintainer feedback into an AI and posting whatever comes out is not an acceptable substitute for genuine engagement. If a contributor cannot explain or implement a requested change because they do not understand their own submission, the PR will be closed. +A PR description should be understandable for both the author and the maintainers. If it is not, maintainers ask for a rewrite, for example by requesting changes or converting the pull request to a draft. If the contributor does not reply within a month, the pull request may be closed. + ### Security and Dependency Scrutiny AI tools hallucinate package names, produce subtly broken access controls, and may reproduce vulnerable patterns from their training data. Contributors must manually verify all dependencies, access control logic, authentication patterns, and security implications in AI-generated code before submitting - the risk of undetected errors is higher than with hand-written code and warrants extra care. @@ -96,4 +98,4 @@ AI tools must not be used to fully automate the resolution of issues labeled [`g ## Scope and Updates -This policy applies to all contributions to repositories and apps under the Nextcloud GitHub organization, by all contributors. It will be reviewed and updated as AI tooling, open-source best practices, and applicable law evolve. Suggested changes are welcome via pull requests. \ No newline at end of file +This policy applies to all contributions to repositories and apps under the Nextcloud GitHub organization, by all contributors. It will be reviewed and updated as AI tooling, open-source best practices, and applicable law evolve. Pull requests opened before a change to this policy are asked to adapt to it rather than closed. Suggested changes are welcome via pull requests. \ No newline at end of file diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 2f6d46f4..9ecc0413 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -33,7 +33,7 @@ Nextcloud allows contributions made with the help of AI tools. You are the autho * **Accountability:** You must be able to explain, defend, and modify every line you submit. If a reviewer asks why something works a certain way, "the AI wrote it" is not an answer. -* **Communication:** PR descriptions, review comments, and issue reports must be written in your own words. This applies throughout the review process - passing reviewer feedback to an AI and posting whatever comes out is not acceptable. +* **Communication:** The ideas and reasoning in PR descriptions, review comments, and issue reports must be your own. AI may help you draft them if you read, understand, and edit the result and mention that AI helped. Translation and grammar help need no mention. This applies throughout the review process - passing reviewer feedback to an AI and posting whatever comes out is not acceptable. * **Quality:** AI output must be quality assured by the human, i.e. reviewed, cleaned up, and tested before submission. New features must be tested on a live instance by you, not by an agent. Code that has never been executed, or that shifts debugging work onto maintainers, will not be accepted.