Re: [PATCH 0/5] docs: improve guidance for AI-assisted bug reports
From: Willy Tarreau
Date: Mon Aug 03 2026 - 12:52:41 EST
On Mon, Aug 03, 2026 at 10:20:43AM -0600, Jonathan Corbet wrote:
> Willy Tarreau <w@xxxxxx> writes:
>
> > While vulnerability reporters have now started CCing maintainers,
> > showing they read the docs, the security team still spends a lot of
> > time repeating the same comments about tested version, incomplete
> > fixes, poor email client setup causing formatting issues making
> > patches unusable, unverified reports and missing Assisted-By tags,
> > each time for AI-assisted reports.
> >
> > This series adds small updates to security-bugs.rst, threat-model.rst
> > and coding-assistant.rst to better deal with this and provide minimal
> > instructions helping the LLM follow our expectations.
> >
> > The updates were iteratively and carefully tested with 3 models,
> > Opus-5, Qwen3.6-27B-Architect-Polaris2-Fable-B-F451, and Gemini,
> > until all of them strictly followed the rules.
> >
> > It is expected to further improve the situation.
>
> Just FWIW I've read through these and can't really find anything to
> complain about. It looks like Greg is planning to pick them up, so I'll
> not do anything with them unless instructed otherwise.
OK, many thanks to you both for the quick response!
Willy