Gerrit ESC Meeting Minutes, July 29th, 2026

[Luca Milanesio]

The meeting minutes of the ESC meeting of the 29th of July 2026 have been published on [1]

See here the executive summary of the discussion:

Gerrit ESC Meeting Minutes, July 29th, 2026
Jul 29, 2026 / esc
Participants: Hari Jeyamani [HJ], Luca Milanesio [LM], Saša Živkov [SZ]
Next meeting: August 26th, 2026.Executive Summary

The meeting centered on refining security triage protocols, establishing new Artificial Intelligence (AI) access policies, and addressing infrastructure stability. The team aligned on several key decisions to improve project security and reduce the operational burden on maintainers.
A primary focus was addressing the high volume of AI-generated security reports. To mitigate this, the committee voted to adopt a stricter set of requirements for vulnerability submissions, mandating executive summaries and proven end-to-end exploits. Furthermore, the ESC agreed to transition AI access to a default-deny model and adopted Google’s centralized open-source guidelines for AI-generated code contributions, emphasizing human review and attribution.
The committee also reviewed several specific security vulnerabilities, categorizing them into actionable code fixes, configuration adjustments, or invalid reports. In addition to security matters, the committee prioritized addressing persistent Zuul CI resource flakiness and began planning for the upcoming deprecation of the Soy template system.

References:
[1] https://www.gerritcodereview.com/2026-07-29-esc-minutes.html

Luca.