Search papers, labs, and topics across Lattice.
This study investigates the compliance of AI coding agents with contribution rules established by open-source communities, utilizing a curated dataset of 106 issues from 49 repositories. The findings reveal that while agents can improve their adherence to disclosure and verification requirements with prompts and feedback, they consistently fail to refuse contributions in repositories where AI contributions are banned. This highlights a significant gap in the enforcement of contribution bans, suggesting that while some compliance issues can be addressed, critical challenges remain in ensuring agents respect community rules.
AI coding agents are nearly incapable of refusing contributions in repositories that explicitly ban their involvement, revealing a critical compliance gap in open-source contributions.
Open source communities have been flooded with AI-generated contributions. In defense, they have written contribution rules to regulate coding agents'behavior, spanning from a total ban, mandatory disclosure, to verification gates and human sign-offs. Yet, whether coding agents read and follow those rules, and behave in open source repositories, remains unknown. To estimate real-world rule compliance of coding agents, we curate 106 issues from 49 repositories containing AI contribution rules into RepoComplianceBench. We judge the trajectory of each run against the repository's rules, measuring whether the agent refuses to contribute, discloses its assistance truthfully, clears the required verification gates, or escalates critical steps to a human. We also test if extra prompts, rule disclosure, or feedback from the compliance verifier help with the situation. Our experiments on four frontier models show that today's agents almost never proactively retrieve the contribution rules. Agents pick up disclosure and verification with reminder prompts, rule quotes, and verifier feedback; however, they never refuse to contribute in AI-banned repositories under any condition we tested. The status reveals that verification and disclosure issues are solvable with existing mechanisms, yet enforcing bans and human escalations remains an open problem.
