Theo Browne examines the Linux community's changing response to AI-assisted code review. He highlights Sashiko, a kernel-specific review system that analyzes mailing-list patches or local Git changes with multiple language-model providers and reports finding defects that had already passed human review.
Linux maintainers are also seeing a sharp improvement in AI-generated security reports. Theo Browne says earlier low-quality submissions have given way to legitimate findings, giving contributors faster feedback and helping maintainers delay manual review until automated checks pass.
The volume creates a new burden, especially for small open source projects, but it also changes the security balance. Theo Browne argues that maintainers need AI-assisted auditing because malicious actors can use the same tools to find vulnerabilities, while model vendors and developers should contribute funding, inference and better-maintainer workflows.
Theo Browne frames Linus Torvalds's position as technical rather than ideological: individuals can decline to use AI, but the kernel project will judge tools by whether they improve the software. The practical goal is not blind automation, but additional review, testing and temporary validation code that helps humans ship fewer defects.
Watch on YouTube
