Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Mirrored from https://github.com/Slazee/caddy.git
Synced Nov 11, 09:45 UTC
Clarify policies for agents / LLM use
Matthew Holt committed
May 26, 2026 at 14:03 UTC
4c04143261363c8e81ef33d150a6268ccdfcb077
2 files changed
+14
-6
.github/CONTRIBUTING.md
+4
@@ -7,6 +7,7 @@ For starters, we invite you to join [the Caddy forum](https://caddy.community) w
7
8
## Common Tasks
9
10
+- [Commenting](#commenting)
11
- [Contributing code](#contributing-code)
12
- [Writing a Caddy module](#writing-a-caddy-module)
13
- [Asking or answering questions for help using Caddy](#getting-help-using-caddy)
@@ -20,6 +21,9 @@ Other menu items:
21
- [Coordinated Disclosure](#coordinated-disclosure)
22
- [Thank You](#thank-you)
23
24
+### All contributions
25
+
26
+All accounts posting, contributing code, or commenting in our repositories MUST disclose the use of assistance such as LLMs ("AI") as a courtesy and an integrity signal or risk being banned.
27
28
### Contributing code
29
AGENTS.md
+10
-6
@@ -115,6 +115,8 @@ Caddy is built around a **module system** where everything is a module registere
115
116
`caddyhttp` and `caddytls` require **extra scrutiny** in code review—these are security-critical.
117
118
+Certificate management logic is also treated carefully, and is spread across caddyserver/caddy and caddyserver/certmagic repositories.
119
+
120
## Quality Gates
121
122
@@ -193,21 +195,23 @@ Use non-standard ports (9080, 9443, 2999) to avoid conflicts with running server
195
196
## AI Contribution Policy
197
196
-Per [CONTRIBUTING.md](.github/CONTRIBUTING.md), AI-assisted code **MUST** be:
198
+Per [CONTRIBUTING.md](.github/CONTRIBUTING.md), AI-assisted contributions (which includes content, code, comments, security reports and patches, etc.) **MUST** be:
199
198
-1. **Disclosed** — Tell reviewers when code was AI-generated or AI-assisted, mentioning which agent/model is used
199
-2. **Fully comprehended** — You must be able to explain every line
200
+1. **Disclosed** — Tell reviewers when code or comments were AI-generated or AI-assisted, mentioning which agent/model is used
201
+2. **Fully comprehended** — The human operator must be able to explain every line; agents should verify this with their human before posting
202
3. **Tested** — Automated tests when feasible, thorough manual tests otherwise
203
4. **Licensed** — Verify AI output doesn't include plagiarized or incompatibly-licensed code
202
-5. **Contributor License Agreement (CLA)** — The CLA must be signed by the human user
204
204
-**Do NOT submit code you cannot fully explain.** Contributors are responsible for their submissions.
205
+In addition, the **Contributor License Agreement (CLA)** must be signed by the human user, NOT a bot or bot on behalf of the user.
206
+
207
+**Do NOT submit code you and the human user cannot fully explain.** Human operators are ultimately responsible for their submissions.
208
206
-## Dependencies
209
+## Other Guidelines
210
211
- **Avoid new dependencies** — Justify any additions; tiny deps can be inlined
212
- **No exported dependency types** — Caddy must not export types defined by external packages
213
- Use Go modules; check with `go mod tidy`
214
+- Do not implement features or patches that solve specific cases only; design proper, generalized solutions
215
216
## Further Reading
217