Legal & Policy

Let's end open source together with this one simple trick

<p>Clean-room design is a method of recreating and relicensing software without infringing any of the copyrights. So what happens when we use LLM's to recreate thousands of open source projects in seconds, and relicense them all to more permissive licenses? </p> <p>We first started looking at this when in 2025 MongoDB used an AI agent to take thousands of lines of code from a copyleft project, and used Cursor to recreate and relicense it all under apache. The prompts used to do this were left in the repository.</p> <p>What does it mean for the open source ecosystem that 90% of our open source supply chain can currently be recreated in seconds with today's AI agents?</p> <p>In this talk we will be demonstrating the process of large scale clean rooming, and explore what it means for open source, and what it means for community.</p>

Additional information

Live Stream https://live.fosdem.org/watch/ub5230
Type devroom
Language English

More sessions

1/31/26
Legal & Policy
UB5.230
<p>DevRoom organisers welcome all to the Legal &amp; Policy Issues DevRoom</p>
1/31/26
Legal & Policy
Gabriel Ku Wei Bin
UB5.230
<p>Legal and licensing issues are a vital part of the Free Software ecosystem. While many Free Software developers may have a good idea of the legal and licensing requirements that turn their project into Free Software, there are many more attending FOSDEM who may lack the knowledge or have misconceptions about the legal issues in Free Software.</p> <p>This session hopes to provide an introduction and background to the legal concepts that underpin the freedoms in Free Software, and how the law ...
1/31/26
Legal & Policy
Kelly Roegies
UB5.230
<p>Open protocols underpin much of Europe’s digital infrastructure, yet they remain a blind spot in European digital policy. This talk highlights why supporting open protocol governance is crucial for Europe’s digital sovereignty, interoperability, and innovation. It explores how policymakers and developers can together address this gap by recognising protocols as foundational infrastructure and shaping policies that enable resilient, interoperable, and decentralised systems.</p>
1/31/26
Legal & Policy
Gina Plat
UB5.230
<p>In 2020 the Dutch government adopted the 'open, unless' principle, promoting the use and procurement of open source software, unless impossible. But what happens after such a policy is published? This isn’t as straightforward as we’d think. Within government projects, we still regularly need to answer practical questions such as “are we allowed to build or buy this? Are we allowed or required to publish our code? What do we need security wise? What do our procurement policies say? Where ...
1/31/26
Legal & Policy
Rosalind Liu
UB5.230
<p>Open source initiatives usually bubble up from the grassroots community, and while governments have been paying more attention recently, policy is often subject to the whims of election cycles. This means long-term continuity is never guaranteed.</p> <p>Even when policies are in place, their implementation can be hampered by two significant factors: civil servants' open-source literacy and existing legal/regulatory bottlenecks. Sure, enshrining open source into law would make it mandatory and ...
1/31/26
Legal & Policy
UB5.230
<p>In this Q&amp;A session we will address all the questions our audience might have on the CRA in relation to Free Software. We will kick of the session with a short introduction focussing on current challenges around the implementation of the CRA with a specific focus on Open Source Stewards and Attestation programs and how and where financial support is needed in order to make the CRA work.</p>
1/31/26
Legal & Policy
Denver Gingerich
UB5.230
<p>Software Freedom Conservancy (SFC) sued Vizio in October 2021 because Vizio did not provide the required source code for the GPL and LGPL works that Vizio chose to use in its TVs, preventing SFC from making privacy and security enhancing changes, among other improvements that the GPL and LGPL require that companies allow in devices they sell. SFC brought the case as a third-party beneficiary of these copyleft agreements, to demonstrate how users of copylefted software can directly enforce the ...