Linux Kernel Adds 'Assisted-by' Tag to Formally Acknowledge AI Help in Code Contributions

·1 views

The Linux kernel maintainers updated their patch submission documentation in mid-2025 to introduce new Git trailer tags, most notably 'Assisted-by', which credits any person or tool — including AI — that substantively helped write, debug, or shape a code patch. The change was pushed through the maintainer chain as a practical response to developers already using AI tools, since existing trailer tags did not accurately capture that type of contribution. Unlike automated outputs, the Assisted-by tag must be placed by a human, preserving personal accountability while recording the source of assistance. The update is expected to influence broader software development practices, as tooling such as checkpatch.pl and maintainer scripts will eventually parse these tags for compliance and code-intelligence purposes. Industry observers note that the kernel's adoption of the convention is likely to prompt enterprises and open-source projects to revise their own AI-disclosure and contribution policies.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

SnapMind App Shifts to Agent-Based Architecture in Major Rebuild

SnapMind, a desktop app that binds AI prompts to hotkeys, is undergoing a significant rebuild by its developer. The creator has decided to move away from a prompt-based model toward an agent-based architecture, citing rapid advancements in AI as the motivation. A key upcoming feature will allow users to create custom AI agents and assign them to hotkeys. The developer also plans to replace the current LLM provider service with a more robust solution, as frequent API endpoint changes have made the existing setup difficult to maintain. The latest release, v0.5.5, is available on the project's website and GitHub repository.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

DeepSeek Harness Builds Entire Agent Framework as Cordis Plugins, Guide Explains

DeepSeek Harness, currently in Developer Preview, treats every core component — including the model adapter, tool registry, session log, and agent loop — as a Cordis plugin rather than privileged core code. A technical guide published on DEV Community, pinned to commit 141eb6f on the master branch, explains how developers should choose between services, events, effects, profiles, and bundles when extending the framework. Services are recommended for callable capabilities with replaceable providers, while events handle passive observation and effects manage resources that must be cleaned up on unload. GitHub released the dsh-v0.1.0-rc.8 pre-release on August 19, though npm still showed version rc.7 as of August 20, meaning package availability may lag behind source releases. The guide is intended for agent-framework developers and emphasizes that plugin readiness is governed by dependency declarations, not YAML list order, with Cordis managing the full lifecycle from PENDING through ACTIVE to DISPOSED.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

LSHIY Campaign Exploited OAuth ROPC and IPv6 to Spray Passwords at Scale

A large-scale password-spraying campaign dubbed LSHIY targeted Microsoft Entra ID tenants by abusing OAuth's Resource Owner Password Credentials (ROPC) flow, which bypasses multi-factor authentication prompts entirely. Attackers harvested credentials from public sources and data leaks, then slowly tested one password against many accounts to avoid triggering lockouts. Over a two-week period, more than 81 million login attempts were recorded, resulting in at least 78 compromised accounts. To evade IP-based detection, the threat actors leveraged BYOIP infrastructure and vast IPv6 address ranges linked to entities such as LSHIY LLC, FranTech, and Tor exit nodes. No post-compromise activity was confirmed, suggesting the operation may have been focused on credential validation or resale rather than immediate exploitation.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

One Complex Query Beats Ten Simple Ones for Testing PostgreSQL-ChatGPT Connections

When connecting PostgreSQL to ChatGPT, developers should not rely on multiple easy questions with plausible-sounding answers to validate the integration. A single well-designed business query — incorporating a known answer, tenant boundary, join, versioned metric, and a defined reporting cutoff — provides a far more rigorous acceptance test. The test should also verify identity, data freshness, query limits, truncation handling, and provenance of results. Negative test cases, such as unauthorized tenant access, stale replicas, and forced timeouts, must also be executed to expose failure modes. Critically, the system's responses should preserve incomplete, stale, or unknown states rather than silently collapsing them into empty or misleading output.

0 comments Read more at DEV Community