Post by @paul
@CryptPad what is your LLM policy?
Enquiring minds would like to know.
In 2025 I can see that project members were not interested in AI
https://forum.cryptpad.org/d/2447-ai-in-cryptpad
But also with a kind of we don't have time to review.
At a time when many of us are looking for alternative tools that are explicitly not developed with LLMs, it would be nice to have a formal policy.
Hello @onepict
Thanks for your interest in CryptPad and its development.
So far we don’t have any AI-policy, however as a NLNet-funded project, we are following the NLNet AI policy 1.1: https://nlnet.nl/foundation/policies/generativeAI/1.1/
It allows for responsible and transparent use of AI-tools without degrading quality, clarity and maintainability. It has been recently updated to a 2.0 version only allowing read-only use of AI-tools. CryptPad is still compliant with it.
For the sake of transparency, CryptPad is using AI for security analysis ahead of releases to catch oversights, but the fixes are written and reviewed by our developers.
We are planning to make a survey to our end-user and developers to know their stance about the use of AI-tools in the development and plan to publish soon a temporary AI policy to clarify how it has been so far and our future plans.
@CryptPad@social.xwiki.com @onepict@chaos.social This is a reasonable baseline, but as far as I'm concerned as soon as somebody uses an LLM to write a single character of code, the future licensing of that product becomes questionable.
Use tools to find security vulns, sure, (with an aim to use in-house solutions instead of paying some white american billionaires for their monstrosities), but please please I beg you to continue writing and reviewing the fixes with developers so we know the license of the product is safe!
