Live data from Hacker News

Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

gitlab.redox-os.org

431–440 of 504 posts

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#431
post #244

Earlier quoted context omitted.

... you think It was good time? Not being able to publish anything without sifting through all the libs licences? Remembering legalese, jurisprudence, edge cases, on top of everything else? MIT became ubiquitous because it gives us peace of mind

You have to go through all the dependencies anyway, to roughly judge their quality, and the activity of their maintainers. Quickly looking at the license doesn't take any more effort.

Totally realistic expectation

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#432

Earlier quoted context omitted.

No, it is not reasonable to presume code generated by any large language model is "tainted code." What does that even mean? It sounds like a Weird Al parody of the song "Tainted Love."

“Taint” has been a term of art in Open Source for decades. That you don’t know this reveals your ignorance, not any sort of cleverness. LLMs regurgitate their training data. If they’re generating code, they’re not modeling the syntax of a language to solve a problem, they’re reproducing code they ingested, code that is covered by copyright. Just regurgitating that code via an LLM rather than directly from your editor…

[flagged]

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#433

Earlier quoted context omitted.

“Taint” has been a term of art in Open Source for decades. That you don’t know this reveals your ignorance, not any sort of cleverness. LLMs regurgitate their training data. If they’re generating code, they’re not modeling the syntax of a language to solve a problem, they’re reproducing code they ingested, code that is covered by copyright. Just regurgitating that code via an LLM rather than directly from your editor…

[flagged]

[flagged]

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#434
post #415

Earlier quoted context omitted.

> what else are you going to lie about? Nothing? Everything? Does it fucking matter? Assigning trust across a boundary like this is stupid, and that’s my point. Oh, would you just accept my blatantly, verbatim copied-from-another-codebase-and-relicensed PR just because I said “I solemnly swear this is not blatantly, verbatim copied from another codebase and relicensed”? That’s on you for stupidly assigning any trust…

> Oh, would you just accept my blatantly, verbatim copied-from-another-codebase-and-relicensed PR just because I said “I solemnly swear this is not blatantly, verbatim copied from another codebase and relicensed”? At that point you've proven intention, meaning you'll get the chance to argue your viewpoint in front of a judge.

> At that point you've proven intention, meaning you'll get the chance to argue your viewpoint in front of a judge.

Sure, put out an international search warrant for xXImADogOnTheInternet86Xx.

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#435
post #348

Earlier quoted context omitted.

Never? That would be tax avoidance and theft, both crimes.

So is fraudulently claiming your code has a different author & copyright (you) than it actually has (whether that's someone else's code, or LLM-generated code).

[flagged]

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#436

Earlier quoted context omitted.

[flagged]

I think you'll find the luddites to be a more informative historical analogy. A new tool arrives in an industry staffed by craftsmen, providing capital a lever to raise profits at the expense of quality. Is it surprising that worker co-ops would choose not to pull that lever?

Why do you believe the quality will go down?

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#437
post #424

Earlier quoted context omitted.

> I am talking about Opus 4.6 and Codex 5.3 here, at high+ effort settings So you have to burn tokens at the highest available settings to even have a chance of ending up with code that's not completely terrible (and then only in very specific domains), but of course you then have to review it all and fix all the mistakes it made. So where's the gain exactly? The proper goal is for those 500 lines to be almost always…

You really do need to try the latest ones. You can’t extrapolate from your previous experiences.

I do not think they are impartial - all I can see is lots of angst.

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#438

Earlier quoted context omitted.

Project maintainers will always have the right to decide how to maintain their projects, and "owe" nothing to no one. That being said, to outright ban a technology in 2026 on pure "vibes" is not something I'd say is reasonable. Others have already commented that it's likely unenforceable, but I'd also say it's unreasonable for the sake of utility. It leaves stuff on the table in a time where they really shouldn't. Th…

> That being said, to outright ban a technology in 2026 on pure "vibes" is not something I'd say is reasonable. The response to a large enough amount of data is always vibes. You cannot analyze it all so you offload it to your intuition. > It leaves stuff on the table in a time where they really shouldn't. Things like documentation tracking, regression tracking, security, feature parity, etc. can all be enhanced with…

[deleted]

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#439
post #366

This may be an unpopular opinion, but I fully support the no-AI stance. AI-generated code belongs nowhere in an operating system or it's low level/kernel components. Especially considering the shear amount of power the kernel has over the machine. The last thing you want is an AI-generated bug crashing systems because it flipped a bit that is reserved or silently corrupting memory (or worse) because it ran in kernel…

So many strawmen here - as if HN had deliberately dumbed itself down, just for sake of trendy argument. Of course you should vet the AI generated - who would've thought? Meanwhile I had Gemini find bugs in my AVX-512 code I would never find myself.

Re: Redox OS has adopted a Certificate of Origin policy and a strict no-LLM policy

#440
post #434

Earlier quoted context omitted.

> Oh, would you just accept my blatantly, verbatim copied-from-another-codebase-and-relicensed PR just because I said “I solemnly swear this is not blatantly, verbatim copied from another codebase and relicensed”? At that point you've proven intention, meaning you'll get the chance to argue your viewpoint in front of a judge.

> At that point you've proven intention, meaning you'll get the chance to argue your viewpoint in front of a judge. Sure, put out an international search warrant for xXImADogOnTheInternet86Xx.

Please stop embarrassing yourself, that's unnecessary.

Many major projects now require a signed DCO with a real name. That can be a nickname if you have a reasonable online presence under that name, but generally it has to identify you as an individual.

So you wouldn't sign it as "xXImADogOnTheInternet86Xx", but as "Tom Forbes (orf)".

And even if there won't be direct legal consequences, it'd certainly affect your ability to contribute to this or other projects in the future.

Post reply on HN