doc: add policy on LLM-generated contributions

Add doc/contributing/ai-contributions.md banning LLM-generated content
from commits. Scoped to committed content only, excluding discussion,
vendored deps, and accessibility tools. Enforcement uses consensus
seeking. Rationale covers reviewer burden and DCO compatibility.

References added in CONTRIBUTING.md and the collaborator guide.

Author: bengl

CONTRIBUTING.md

@@ -19,6 +19,7 @@ works.
 * [Code of Conduct](#code-of-conduct)
 * [Issues](#issues)
 * [Pull Requests](#pull-requests)
+* [Policy on LLM-generated contributions](#policy-on-llm-generated-contributions)
 * [Developer's Certificate of Origin 1.1](#developers-certificate-of-origin-11)
 
 ## [Code of Conduct](./doc/contributing/code-of-conduct.md)
@@ -47,6 +48,13 @@ dependencies, and tools contained in the `nodejs/node` repository.
 * [Reviewing Pull Requests](./doc/contributing/pull-requests.md#reviewing-pull-requests)
 * [Notes](./doc/contributing/pull-requests.md#notes)
 
+## [Policy on LLM-generated contributions](./doc/contributing/ai-contributions.md)
+
+Do not submit commits containing content written in whole or in part by a
+large language model (LLM) or AI code-generation tool.
+
+See the [full policy on LLM-generated contributions](./doc/contributing/ai-contributions.md).
+
 ## Developer's Certificate of Origin 1.1
 
 ```text

doc/contributing/ai-contributions.md

@@ -0,0 +1,78 @@
+# Policy on LLM-generated contributions
+
+* [Policy](#policy)
+* [Scope](#scope)
+* [Enforcement](#enforcement)
+* [Rationale](#rationale)
+
+## Policy
+
+Do not submit commits containing code, documentation, or other content
+written in whole or in part by a large language model (LLM), AI
+code-generation tool, or similar technology. This includes cases where an
+LLM produced a draft that the contributor then edited. Contributors must be
+the sole human authors of the changes they submit.
+
+## Scope
+
+This applies to content that lands in the repository: source code,
+documentation, tests, tooling, and other files submitted via pull requests.
+
+It does not apply to:
+
+* Pull request descriptions, review comments, issue discussion, or other
+  communication that is not part of the committed tree. Those are covered by
+  general expectations around good-faith participation and the
+  [Code of Conduct][].
+* Vendored dependencies and other vendored content (e.g. code under `deps/`
+  and vendored code under `tools/`). That content is maintained upstream
+  under its own governance.
+* AI-powered accessibility tools like screen readers or text-to-speech
+  software, provided they do not influence the content of the contribution.
+
+## Enforcement
+
+This policy cannot be fully enforced. There is no reliable way to determine
+whether code was written by a human or generated by an LLM. Detection tools
+have high error rates, and generated output can be trivially edited to avoid
+detection. Compliance relies on contributor good faith.
+
+If a collaborator suspects a pull request contains LLM-generated content,
+they should raise the concern in the pull request. The normal
+[consensus seeking][] process applies: collaborators discuss, the author can
+respond, and a good-faith determination is made. If consensus is that the
+contribution violates this policy, it must not land. If consensus cannot be
+reached, the matter can be escalated to the TSC.
+
+When evaluating a concern:
+
+* Stylistic resemblance to LLM output is not sufficient on its own. Some
+  people write that way. Consider the contributor's history, the nature of
+  the change, and whether they can engage with review feedback.
+* Do not cite AI content-detection tools as evidence. They are unreliable.
+* If a contributor is asked directly whether they used LLM tools and
+  responds dishonestly, that undermines the good faith this policy depends
+  on. This should weigh against them in any consensus determination.
+
+## Rationale
+
+Contributors to this project need to be able to explain their changes,
+respond to review, and take responsibility for what they submit.
+LLM-generated pull requests do not meet that bar.
+
+Collaborators review every change on a volunteer basis. LLM-generated
+submissions shift the verification burden onto those reviewers, with no
+assurance the contributor has done that work themselves.
+
+The copyright status of LLM output is unresolved. Training data for popular
+models includes material under licensing terms that may not be compatible
+with the Node.js license. Contributors certify their submissions under the
+[Developer's Certificate of Origin 1.1][DCO], which requires that the
+contribution was created by them and that they have the right to submit it.
+It is not clear how anyone can honestly certify that for LLM output.
+
+This policy can be revisited if the legal situation or the tools change.
+
+[Code of Conduct]: https://github.com/nodejs/admin/blob/HEAD/CODE_OF_CONDUCT.md
+[DCO]: ../../CONTRIBUTING.md#developers-certificate-of-origin-11
+[consensus seeking]: ../../GOVERNANCE.md#consensus-seeking-process

doc/contributing/collaborator-guide.md

@@ -132,6 +132,10 @@ Pay special attention to pull requests for dependencies which have not
 been automatically generated and follow the guidance in
 [Maintaining Dependencies](https://github.com/nodejs/node/blob/main/doc/contributing/maintaining/maintaining-dependencies.md#updating-dependencies).
 
+The project does not accept commits containing LLM-generated content. See the
+[policy on LLM-generated contributions][] for the full policy and the process
+for raising concerns during review.
+
 In some cases, it might be necessary to summon a GitHub team to a pull request
 for review by @-mention.
 See [Who to CC in the issue tracker](#who-to-cc-in-the-issue-tracker).
@@ -1057,6 +1061,7 @@ need to be attached anymore, as only important bugfixes will be included.
 [macos]: https://github.com/orgs/nodejs/teams/platform-macos
 [node-core-utils-credentials]: https://github.com/nodejs/node-core-utils#setting-up-credentials
 [node-core-utils-issues]: https://github.com/nodejs/node-core-utils/issues
+[policy on LLM-generated contributions]: ai-contributions.md
 [ppc]: https://github.com/orgs/nodejs/teams/platform-ppc
 [s390]: https://github.com/orgs/nodejs/teams/platform-s390
 [smartos]: https://github.com/orgs/nodejs/teams/platform-smartos