Ah good that way US sanctions cut off designated bad guys from encryption that much faster.
Also good because heavy automation means larger opportunities for the NSA and eyes countries to hack you, change that automation slightly and compromise your infrastructure to their liking and you won’t even notice because things are changing so often you as a human cannot possibly keep up and review these things.
Centralized trust is already experiencing a massive crisis as it’s entirely under the control of very untrustworthy, abusive western authorities centralized within the US and subject to subterfuge by spy agencies, political machinations, sanctions laws, etc.
Attackers really don’t need more than a few days to exploit stolen private keys anyway. Assuming they’re using an attack kit with good zero days in tandem with it (pretty likely with AI assisted exploit finding) so all this will result in is attackers adapting IMO.
Minimum age requirement and activity requirement. If it was built all in one go it’s more likely to be abandoned and full of problems and just pollute the landscape. If it’s been under development with multiple commits over a time-span of months or a year or more it’s more likely to be higher quality, have human in the loop somewhere, continue development, patches, etc. Linux itself for example would be exempted because it has a significant age, significant recurring activity in development, multiple human developers, etc.
I do think exceptions on a case by case basis for clever simple programs that address a not previously addressed need might be fine as well. I really think there needs to be a little discretion for mod action.
What a lot of people hate and I do as well are these “look daddy I can ‘code’ too” baby’s first/second/etc vibecoded programs that people proudly toss out there without any real thought beyond pride they told an LLM to make something and it did it. Those rarely add much value, often are redundant with one another (why reinvent the wheel again and again?), and would tend to be lower quality and end up just being so much spam that makes it harder to understand what’s worthwhile.