Create an AI Policy for Contributions

[azchin]

Kubernetes has a good one https://www.kubernetes.dev/docs/guide/pull-requests/#ai-guidance.

We are well aligned with the k8s one, AI-generated code is fine but humans should review.

[azchin]

Large AI generated PRs and AI generated commit messages are not allowed.

We can be more liberal with this: even though I prefer manually writing commit messages, I do not care to enforce this strictly for other people. Unless the commit history gets really messy with the way AI codes.

When responding to review comments, you must do so without relying on AI tools.

For purely automatic replies I agree, but using AI to help understand a problem or gather context should be fine.

[GeauxJD]

@azchin here is a link to an AI Contribution Policy being drafted by the OpenSSF TAC ossf/tac#605

[tusharshah21]

could do that, sounds like easy work to me

[azchin]

I would like to track the OpenSSF policy, we only need to create a separate policy if there are parts that are incompatible with OSS-CRS's development.

[tusharshah21]

@azchin my bad for the delay but it was an easy task