EFF Mandates Human Documentation for AI-Generated Code in Open Source Projects

The Electronic Frontier Foundation’s (EFF) recent decision to mandate human-authored documentation for AI-generated code represents a critical milestone in the evolving landscape of software governance and regulatory compliance. By drawing a hard line between the execution of code and the explanation of its intent, the EFF is addressing one of the most significant risks in the modern development lifecycle: the 'black box' problem. While Large Language Models (LLMs) have become remarkably adept at generating functional syntax, they frequently fail to provide the contextual reasoning—the 'why'—that is essential for long-term maintenance, security auditing, and legal accountability.

This policy shift comes at a time when 'Big Tech' is aggressively pushing for end-to-end automation in software engineering. Tools like GitHub Copilot and Amazon CodeWhisperer are increasingly capable of generating not just functions, but also the comments and documentation that accompany them. However, the EFF’s leadership, specifically Director of Engineering Alexis Hancock and Senior Staff Technologist Samantha Baldwin, argues that documentation is fundamentally a human-to-human communication channel. When AI generates both the code and the explanation, the link to human intent is severed, making the software 'brittle' and difficult for future developers to verify or repair without total reliance on the original AI model.

“

However, the EFF’s leadership, specifically Director of Engineering Alexis Hancock and Senior Staff Technologist Samantha Baldwin, argues that documentation is fundamentally a human-to-human communication channel.

From a RegTech and legal perspective, the implications are profound. In highly regulated sectors such as finance, healthcare, and legal services, software is often subject to strict audit requirements. If a system fails or produces a biased outcome, investigators must be able to trace the logic back to a human decision-maker. If the documentation explaining that logic was itself hallucinated or mechanically generated by an LLM, the audit trail becomes circular and potentially legally indefensible. The EFF’s stance provides a blueprint for how organizations can leverage AI productivity gains without sacrificing the transparency required for regulatory compliance.