# Ansible AI Policy? **URL:** \ **Category:** Project Discussions\ **Tags:** ai, community-wg-nextmtg, community-wg\ **Created:** [May 14, 2025, 8:58am UTC](https://forum.ansible.com/t/ansible-ai-policy/42642 "2025-05-14T08:58:14Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![chris](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/chris/32/293_2.png) [@chris](https://forum.ansible.com/u/chris)\ **Post date:** [May 14, 2025, 8:58am UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/1 "2025-05-14T08:58:14Z")
Should the Ansible project have a AI policy? Some Free / Open Source projects have AI polices, for example [Servo has](https://book.servo.org/contributing.html#ai-contributions): > ## [AI contributions](https://book.servo.org/contributing.html#ai-contributions) > > Contributions must not include content generated by large language models or other probabilistic tools, including but not limited to Copilot or ChatGPT. This policy covers code, documentation, pull requests, issues, comments, and any other contributions to the Servo project. > > For now, we’re taking a cautious approach to these tools due to their effects — both unknown and observed — on project health and maintenance burden. This field is evolving quickly, so we are open to revising this policy at a later date, given proposals for particular tools that mitigate these effects. Our rationale is as follows: > > **Maintainer burden:** Reviewers depend on contributors to write and test their code before submitting it. We have found that these tools make it easy to generate large amounts of plausible-looking code that the contributor does not understand, is often untested, and does not function properly. This is a drain on the (already limited) time and energy of our reviewers. > > **Correctness and security:** Even when code generated by AI tools does seem to function, there is no guarantee that it is correct, and no indication of what security implications it may have. A web browser engine is built to run in hostile execution environments, so all code must take into account potential security issues. Contributors play a large role in considering these issues when creating contributions, something that we cannot trust an AI tool to do. > > **Copyright issues:** Publicly available models are trained on copyrighted content, both accidentally and intentionally, and their output often includes that content verbatim. Since the legality of this is uncertain, these contributions may violate the licenses of copyrighted works. > > **Ethical issues:** AI tools require an unreasonable amount of energy and water to build and operate, their models are built with heavily exploited workers in unacceptable working conditions, and they are being used to undermine labor and justify layoffs. These are harms that we do not want to perpetuate, even if only indirectly. > > > Note that aside from generating code or other contributions, AI tools can sometimes answer questions you may have about Servo, but we’ve found that these answers are often incorrect or very misleading. > > > > In general, do not assume that AI tools are a source of truth regarding how Servo works. Consider asking your questions [on Zulip](https://servo.zulipchat.com) instead. There has recently been [a discussion about this on a GitHub issue](https://github.com/servo/servo/discussions/36379). Personally I’d support the Ansible Project adopting something like this, has / could / should this be discussed by the steering committee? ---
**Author:** ![Lyle\_McKarns](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/lyle_mckarns/32/8142_2.png) [@Lyle\_McKarns](https://forum.ansible.com/u/Lyle_McKarns)\ **Post date:** [May 14, 2025, 12:06pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/2 "2025-05-14T12:06:01Z")
> [@chris](#): > > Personally I’d support the Ansible Project adopting something like this, has / could / should this be discussed by the steering committee? I tend to agree, but I’d focus more on the Copyright/Ethical issues as the most relevant. “Maintainer Burden” and “Quality & Security of code” are both fuzzy topics and are the most likely to evolve rapidly (and therefore, harder to keep a policy up to date on), while “this poses risk we’re unwilling to take” and “this does not align with our values” are much more concrete positions to have conversation around. At the very least, I very much agree that this should be addressed by the steering committee, and _some_ decision made. ---
**Author:** ![felixfontein](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/felixfontein/32/7530_2.png) [@felixfontein](https://forum.ansible.com/u/felixfontein)\ **Post date:** [May 14, 2025, 7:56pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/3 "2025-05-14T19:56:19Z")
I really like this! Regarding maintainer burden, I think this is a very real problem, even though we’ve been (as far as I can tell) lucky to haven’t gotten much (or any? not sure) of it. Some other projects, like curl, have been flooded with AI generated bug/security reports, which consume a considerable amount of resources from the maintainers. Also considering that many Ansible collections have too few and/or overworked maintainers, we should definitely discourage AI submissions of any kind (in particular bug reports or pull requests). ---
**Author:** ![Lyle\_McKarns](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/lyle_mckarns/32/8142_2.png) [@Lyle\_McKarns](https://forum.ansible.com/u/Lyle_McKarns)\ **Post date:** [May 14, 2025, 7:59pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/4 "2025-05-14T19:59:56Z")
To be clear, I wasn’t down-playing either the contributor burden or the security/correctness issues. They just seem easier to argue with/harder to understand than the other points. ---
**Author:** ![gotmax23](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gotmax23/32/106_2.png) [@gotmax23](https://forum.ansible.com/u/gotmax23)\ **Post date:** [May 14, 2025, 10:22pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/5 "2025-05-14T22:22:32Z")
I like the idea of having an official policy on AI contributions that Ansible ecosystem projects and collections can choose to adopt, but I don’t think this should be mandated. Whether or not we agree it, at the end of the day, it’s up to individual maintainers whether they want to accept AI contributions or not. ---
**Author:** ![mariolenz](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/mariolenz/32/108_2.png) [@mariolenz](https://forum.ansible.com/u/mariolenz)\ **Post date:** [May 15, 2025, 5:24pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/6 "2025-05-15T17:24:27Z")
Good point @gotmax23! I think it depends on what is meant by “the Ansible project”. The whole Ansible ecosystem? I wouldn’t want to make an AI policy mandatory there. I’m happy with deciding on an AI policy when it comes to, for example, ansible-build-data. Or work on an example policy that collections can adopt, although this would be voluntarily. Like the GitHub workflows we’re providing for collections. ---
**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\ **Post date:** [May 16, 2025, 8:35pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/7 "2025-05-16T20:35:52Z")
Hi folks, I appreciate this being raised and the discussion so far. This was something I’ve been thinking about, but hadn’t gotten to posting. Some similarities with back hacktoberfests ## Where AI spam exists - GitHub, especially ansible/ansible - This Forum We have seen an uptick in AI spam in ansible/ansible (it’s likely elsewhere, though I’ve not noticed it). I’ve seen cases on this Forum that people have reported as spam (thank you), and after looking at the posts (and their others) have been fairly sure they are AI generated, and while they “look nice”, they don’t make sense. So I’ve treated them the same as other spam. ## Code of Conduct (CoC) 1. As to the “where this applies”, we could define this to be where the [Ansible Code of Conduct (CoC)](https://docs.ansible.com/ansible/latest/community/code_of_conduct.html) applies. Which is all the repo under out GitHub Orgs, and in a lot of collection repos. As well as Meetups, Forum, Matrix, IRC, reddit’s r/ansible, etc 2. Though the CoC should be high level, and likely isn’t the place for anything specific about LLM. We don’t want it to change too often. 3. Extending the CoC to say something like “Read and follow the Contributor Guidelines”, could work 4. We don’t currently have a unified Contributor Gudelines, though maybe we could have some common bits for this, The Forum, etc. Which would allow a projects Guidelines to say “See the main Contributor guidelines” and “here are the foobar project specific bits” 5. Some CoC have had generic statements like “Do not claim the work of others as your own” ## Wording 1. If we think about what we are trying to achieve, which is “We want contributions that have has some thought put into them”, ie don’t blindly copy stuff from StackOverflow/AI/whatever. 2. At a high level, if people are posting junk (from AI or direct from their brain), it’s disruptive and was waste of other people’s time, which to me is a CoC issue. ## What other projects are doing. - [Generative AI](https://devguide.python.org/getting-started/generative-ai/) - [AI policy in Fedora - WIP - Fedora Discussion](https://discussion.fedoraproject.org/t/ai-policy-in-fedora-wip/144297) Lots of great discussion points in here - [Guidance on Generative AI usage in Kubernetes Github Orgs · Issue #291 · kubernetes/steering · GitHub](https://github.com/kubernetes/steering/issues/291) ---
**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\ **Post date:** [June 23, 2025, 7:43pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/8 "2025-06-23T19:43:36Z")
This dropped off my priority list, what are folks current thoughts? ---
**Author:** ![chris](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/chris/32/293_2.png) [@chris](https://forum.ansible.com/u/chris)\ **Post date:** [June 24, 2025, 7:58am UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/9 "2025-06-24T07:58:31Z")
I’d suggest the board should consider, as a minium, an AI policy that would ban contributions that could potentially invalidate [the GPL](https://github.com/ansible/ansible/blob/devel/COPYING)? 🤷‍♀️ ---
**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\ **Post date:** [June 24, 2025, 9:01am UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/10 "2025-06-24T09:01:11Z")
Someone recently shared [AI Detectors Don’t Work. Here’s What to Do Instead](https://mitsloanedtech.mit.edu/ai/teach/ai-detectors-dont-work/), an article from MIT. For me, this reinforces we need this via policy, rather than a (failed) technical solution. ---
**Author:** ![cassell](https://avatars.discourse-cdn.com/v4/letter/c/ecae2f/32.png) [@cassell](https://forum.ansible.com/u/cassell)\ **Post date:** [June 25, 2025, 12:37am UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/11 "2025-06-25T00:37:58Z")
My thought is that as long as there’s no license violation, it’s fine to use AI to make an MR. If folks use AI to spam, treat it as any other spam or more harshly. But something is either spam or not. Perhaps some sort of warning on a first offense if the submitter didn’t realize it’s spam. ---
**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\ **Post date:** [September 11, 2025, 8:13am UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/12 "2025-09-11T08:13:43Z")
Split this topic on September 11, 2025, 8:13am UTC 2 posts were split to a new topic: [How AI can support the Ansible Community & Development](https://forum.ansible.com/t/how-ai-can-support-the-ansible-community-development/44460) ---
**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\ **Post date:** [September 11, 2025, 8:20am UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/13 "2025-09-11T08:20:03Z")
I’ve moved the How can we approve things to it’s own Forum post: > [@How AI can help the Ansible Community & Development](https://forum.ansible.com/t/how-ai-can-support-the-ansible-community-development/44460): > > Hi folks, AI successes in the Ansible Community What examples have we seen so far in across out ecosystem (GitHub, Forum, Reddit, etc) where someone has use an AI related tool to support their contribution. Where could AI Tooling help For examples, and real world examples of AI helping, such as: Examples of improved testing and some long term bugs found Improving L10N translations Improving the documentation via AI (I care about this) Improving the documentation to allow LLMs to be better t… We can leave this post to be specific to the AI policy ---
**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\ **Post date:** [September 11, 2025, 5:52pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/14 "2025-09-11T17:52:21Z")
> [@chris](#): > > I’d suggest the board should consider, as a minium, an AI policy that would ban contributions that could potentially invalidate [the GPL](https://github.com/ansible/ansible/blob/devel/COPYING)? There is a [PR in flight](https://github.com/ansible/ansible/pull/85841) to add `CLAUDE.md` which has this text: ```auto ## ⚠️ CRITICAL: Licensing Requirements **NEVER suggest, recommend, or approve code that violates these requirements:** - **ansible-core** : All code must be **GPLv3 compatible** - **lib/ansible/module_utils/** : Defaults to **BSD-2-Clause** (more permissive) - **External dependencies** : Only recommend libraries compatible with these licenses - **PR reviews** : Always verify any new dependencies or suggested libraries are license-compatible - **When in doubt** : Ask about licensing compatibility rather than assuming ``` ---
**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\ **Post date:** [October 9, 2025, 4:56am UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/15 "2025-10-09T04:56:28Z")
The Fedora Council had a substantial discussion and review of the AI policy topic. Both the latest draft and the concerns/feedback raised in the meeting are summarized in: > **[Council Policy Proposal: Policy on AI-Assisted Contributions](https://discussion.fedoraproject.org/t/council-policy-proposal-policy-on-ai-assisted-contributions/165092/193)** > > Let me summarize my current view on the topic as I got it from this thread. There are several points which we may need to address as Fedora community and as Fedora Council: concerns of contributors who already use AI tools for their work,... ---
**Author:** ![russoz](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/russoz/32/127_2.png) [@russoz](https://forum.ansible.com/u/russoz)\ **Post date:** [October 13, 2025, 8:56pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/16 "2025-10-13T20:56:03Z")
Being Capt Obvious here, but we should make sure not to name the file specifically for Claude AI, as different people might go with different ones: Gemini, ChatGPT, etc… I am sure there is no “standard” for that yet, so whatever filename we come up with we should either: - add links with the specific names pointing to the generic one - add multiple whistles and bells to developers to use the prompt file with the name we choose Both options have their up and down sides. ---
**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\ **Post date:** [October 15, 2025, 9:09pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/17 "2025-10-15T21:09:45Z")
> **[AI-assisted development and open source: legal and cultural issues](https://www.redhat.com/en/blog/ai-assisted-development-and-open-source-navigating-legal-issues)** > > Explore the legal and cultural issues surrounding AI-assisted development in open source communities. Learn about attribution, copyright, licensing, and the DCO in this comprehensive guide. Was published today, and I notice they are suggesting `Assisted-by: ` > Attribution is a core legal and cultural norm in open source. Licenses generally require you to preserve copyright and authorship notices, and to avoid misleading claims of authorship. > > AI-assisted development complicates this. Because AI systems are not considered “authors” under copyright law, there is technically no one to credit. But it would still be misleading for a developer to present substantial AI-generated output as purely their own work. > > That’s why a growing number of open source projects are adopting disclosure rules for AI-assisted contributions, drawing inspiration from disclosure norms in other fields, such as labeling synthetic media. “Marking” contributions helps preserve both legal clarity and community trust, and makes it easier for reviewers to evaluate the code in context. > > We support marking, but we don’t think it should be overly prescriptive. Relatively trivial uses of AI (like autocompleting a variable name or suggesting a docstring) shouldn’t require disclosure. For more substantial uses, marking can be as simple as a source code comment, a note in a merge request, or a commit trailer such as Assisted-by: (other candidates used by some projects include Generated-by: and Co-authored by: ). ---
**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\ **Post date:** [October 15, 2025, 9:12pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/18 "2025-10-15T21:12:00Z")
> [@russoz](#): > > Being Capt Obvious here, but we should make sure not to name the file specifically for Claude AI, as different people might go with different ones: Gemini, ChatGPT, etc… You make a good point, I read that some other projects (maybe Python related) was picking AGENTS.md. Let me go do some digging to see if I can see what others are doing. ---
**Author:** ![markstos](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/markstos/32/9706_2.png) [@markstos](https://forum.ansible.com/u/markstos)\ **Post date:** [October 24, 2025, 7:27am UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/19 "2025-10-24T07:27:16Z")
AGENTS.md is emerging as a standard. I doubt I have enough XP to post a link but there’s a website about that exactly matches the file name. ---
**Author:** ![russoz](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/russoz/32/127_2.png) [@russoz](https://forum.ansible.com/u/russoz)\ **Post date:** [October 24, 2025, 11:13pm UTC](https://forum.ansible.com/t/ansible-ai-policy/42642/20 "2025-10-24T23:13:01Z")
> **[AGENTS.md](https://agents.md/)** > > AGENTS.md is a simple, open format for guiding coding agents. Think of it as a README for agents. [Next page](https://forum.ansible.com/t/ansible-ai-policy/42642.md?page=2)