From: "Theo de Raadt" Subject: Re: AI-Driven Security Enhancements for OpenBSD Kernel To: Otto Moerbeek Cc: Alfredo Ortega , tech@openbsd.org Date: Wed, 12 Jun 2024 00:15:01 -0600 I think the important thing to understand about complex software is that it must be humanly comprehensible. Once abstractions levels become too grand (via human or automation efforts), no human will put effort into understanding how the pieces fit together, or put further effort into mutating the software to do some new future thing. So in this conversation, 10,000 extra chunks of code -- we have a choice between automation which will evict the human interest, or humans who won't accept automation that will evict their future interest. One additional point. This project has always been founded on keeping patches minimal, explainable, etc. That's 10,000 patches which will need to be submitted in very small bundles, and trying to keep the attention of reviewers. Oh, review isn't neccessary? Amazing. How did we ever get to this point.