Feature discussion: Trust rings

[strange]

A new and pretty common issue is slop PRs. Some community projects are having big issues with this.

What if Haxy had first class support for trust rings or something similar? I don't know exactly how it would work, but something like a feature you can opt into that disables public PRs and only identities present in the ring(s) you've linked to your project are allowed to create PRs.

Maybe Haxy could even maintain its own ring that users can use as a starting point?

Different rings would have their own rules. An example could be a ring where you can only be added added by an existing member (by having them sign and commit your public key), and if you misbehave (e.g., try to commit slop and it is reported to the ring maintainers) you and the member that approved you are both removed from the ring.

Don't know if the effort is worth the outcome, but figured I'd drop an issue here anyway.

[xeubie]

Yeah I think this will be a really important feature, though I have put very little time into thinking about it yet. I guess this is similar to vouch right? This is metadata that can be stored in repos, just like issues/PRs/etc. However, it may need to be stored in a separate repo for each user, rather than in specific project repos.

BTW I'm going to convert this to a discussion. Thanks for bringing this topic up.

[strange]

I hadn’t seen vouch before. I'll take a closer look, but at first glance it seems like it could work. But ... what would be even cooler is a more "official", shared system of trust you can connect your projects to. If I publish a project to Haxy I can select the its official trust ring and "know" that only approved persons will be able to bother me 😆

The more I think about it the more I want it. It could even work across text content / video / images / etc / whatever. AI can generate content at a crazy pace, and it is putting a lot of burden on the consumers. Would be extremely cool to tap into a trust ring like "Haxy's No AI Ring" or "Haxy's Responsible use of AI Ring" and filter out all the garbage automatically. Lots of difficult problems to solve, I know ... And I digress. A lot.

[strange]

N.B. I am not an AI hater. I just hate the low-effort slop and how it has totally ruined my previously very peaceful life.