一句话:通过对67个高关注开源项目的多阶段定性分析,提炼出生成式AI贡献治理的3种取向、12种策略及政策工具。
生成式AI正日益参与开源软件,不仅补全代码和文档,还介入issue、pull request、代码评审与安全报告。但生成更便宜不代表评审更便宜,维护负担促使项目在贡献指南、安全策略和仓库说明中试验GenAI专门规则,甚至全面禁止AI辅助贡献。然而治理远非“禁或不禁”的二元选择,实践回应零散且研究缺乏系统认识。本文对67个高可见度开源项目的多种定性材料进行多阶段分析,识别贡献工作流中的反复关切,归纳三种治理取向,并绘制12种治理策略及其政策工具。研究表明,治理GenAI需要问责、验证、评审能力、代码来源和平台基础设施协同,为研究者提供概念基线,也为维护者和平台设计者提供实践参考。
Generative AI (GenAI) is playing an increasingly important role in open source software (OSS). Beyond completing code and documentation, GenAI is increasingly involved in issues, pull requests, code reviews, and security reports. Yet, cheaper generation does not mean cheaper review — and the resulting maintenance burden has pushed OSS projects to experiment with GenAI-specific rules in contribution guidelines, security policies, and repository instructions, even including a total ban on AI-assisted contributions. However, governing GenAI in OSS is far more than a ban-or-not question. The responses remain scattered, with neither a shared governance framework in practice nor a systematic understanding in research. Therefore, in this paper, we conduct a multi-stage analysis on various qualitative materials related to GenAI governance retrieved from 67 highly visible OSS projects. Our analysis identifies recurring concerns across contribution workflows, derives three governance orientations, and maps out 12 governance strategies and their policy instruments. We show that governing GenAI in OSS extends well beyond banning — it requires coordinated responses across accountability, verification, review capacity, code provenance, and platform infrastructure. Overall, our work distills dispersed community practices into a structured overview, providing a conceptual baseline for researchers and a practical reference for maintainers and platform designers.