Re: The NetBSD Foundation becoming a member of Anthropic's Project Glasswing?

["requiem." <rqm%0xde501a7a.net@localhost>]

To what extent would this make NetBSD dependent upon Anthropic's services on the long term tho? Does NetBSD want the golden shackles these offers are?

The business model here is to make themselves "indispensible" for development. Does the project need such an external dependance on a company like Anthropic?

Further - what happens, hypothetically, after Anthropic folds in an AI bubble pop? What happens if Anthropic decides to terminate the service after it becomes a part of the development life cycle for NetBSD? Or decide that they are altering the terms?

Don't fall for the "there is free candy in my van" marketing. "Anthropic" are not "philanthropic", if you excuse the pun.

As an aside, imagine how many more such bugs OpenBSD devs could have found or prevented if the estimated $20k in tokens burnt on that single bug was paid out as developer salaries...

17 Apr 2026 17:08:03 Constantine A. Murenin <mureninc%gmail.com@localhost>:

> On Thu, 16 Apr 2026 at 22:58, Andrew Ball <asbatwrk%gmail.com@localhost> wrote:
> 
>> Hello Michael,
>> 
>>   CM> Given that 11RC3 is now being tested, I wondered if it made
>>     > sense for The NetBSD Foundation to join Project Glasswing,
>>     > for the express purpose of submitting the codebase to LLM
>>     > security audit, before officially releasing 11.0 ?
>> 
>>     I can't speak for the Foundation or NetBSD developers but as a
>> fellow user, I wonder whether there is a danger of LLM-based testing
>> distracting developers who already have plenty of code to review and
>> human-curated PRs to look at.
>> 
> 
> You mean, the human-curated PRs where randos manually submit LLM slop for
> review anyways?
> 
> I think a more official LLM review would be far better.
> 
> This wouldn't be the first, either:
> 
> * In the old day, we all ran Static Analysis on the source code; I've
> personally found and verified multiple bugs with the help of LLVM/Clang
> back in the day, before the wider adoption.
> 
> * Coverity used to offer this as a service to some OSS projects as well.
> 
> C.