2026-10-13 「开源之道」·论文略读:AI Slop 之后——当 cURL 关掉 7 年的 Bug Bounty 项目

Min, Frluckaj, Gaughan, Champion, Crowston, Benjamin Mako Hill, James Howison (2026, ACM CSCW 2026 Companion Workshop, DOI 10.1145/3785651.3818817) 用 2026-01 cURL 关闭运行 7 年、累计 $100K+ 的 Bug Bounty 项目作为最锋利的实证锚点:AI slop 冲击的不是「贡献质量」而是「协作规范的生产机制」——过去关于 AI slop 的全部讨论都绕过了这个命题。Coleman 1990 社会资本理论的最新样本(AI slop = 没有社会资本的贡献);Coase 1937《企业的性质》命题在开源场景的第六次精确化(bug bounty 被迫退回内部化);Lerner-Tirole 2002 声誉机制在 AI 时代的第二次实证失效;Williamson L1-L4 四层框架在协作规范层的第一次完整应用;「开源公共品外部脆弱性」命题的多层化——AI 冲击(技术)+ 气候冲击(物理)+ 本文协作冲击(规范)三重证据链。开源四层制度基础设施第 15 层「协作规范层」的第一份社会科学学科化。

2026年10月13日 · 13 分钟 · 6160 字 · 「开源之道」·窄廊

China Open Source Daily — 2026-10-13

Two institutionally dense placements, both from the 2026-10-12 WeChat input feed, sitting at institutional layers this series’ prior fifty-two briefings have not documented at before. (1) China Academy of Information and Communications Technology’s (CAICT, 中国信息通信研究院, directly under the Ministry of Industry and Information Technology) launch of the 2026 Internet Agent Governance Innovation Application Practice Activity on 2026-10-12 — the first-documented instance in this series of a Chinese state-adjacent research institute operationalizing the 2026-05-08 agent guidelines (Cyberspace Administration of China, NDRC, MIIT, jointly issued) at the institute-level application-activity layer: six recommendation directions spanning business-application plus infrastructure plus management-platform plus terminal plus inter-agent-interaction (explicitly naming the ATH agent trusted-handshake protocol plus A2A plus MCP) plus security-governance (explicitly naming open-source-community-governance-practice as a governance sub-topic), ten participant unit categories, single-unit cap of three recommendation items, submission window 2026-10-12 to 2026-11-06, review in 2026-11, results release at early 2026-12 AI-plus-Industry-Ecology Conference Agent Forum — completing the policy-framework-plus-technology-standard-plus-capability-assessment-plus-governance-practice institutional chain at its first application-layer activity layer, hosted by CAICT Cloud and Big Data Institute’s Open Source and Intelligent Safety Department (开源与智能安全部). Paired with this series’ prior October briefings’ documentation of the CAICT ATH protocol at the 2026-04-29-initiation-plus-AtomGit-plus-GitHub-dual-open-source-release-plus-2026-06-07-first-assessment-13-firms-plus-6-rounds-institutional-form-plus-talent-exchange layer — the pair completes the CAICT agent governance institutional object at the policy-framework-to-technology-standard-to-capability-assessment-to-governance-practice institutional-chain-completion layer. (2) The 自主可控新鲜事 outlet’s 2026-10-12 report “Tianjin quietly set up a Xinchuang Industry Bureau” (天津悄悄设了个信创产业局) documents, for the first time in this series, the Xinchuang institutional-formation institutional surface being operationalized at the renaming-plus-expansion-not-launch layer simultaneously with the administrative-bureau-plus-comprehensive-party-committee-plus-industry-alliance three-layer-architecture layer: the Tianjin Binhai High-Tech Development Zone Xinchuang Industry Bureau (天津滨海高新技术产业开发区信创产业局) has issued a batch of procurement pre-notices but no public inauguration record; historical names trace the institution from Marine-Economy-and-Military-Civilian-Fusion Industry Investment Bureau (2021 financial statements, still named 信创产业招商局 Investment Bureau) through an unnamed 2021-to-2023 transition window, to the March 2023 official appointment notice that first uses the current name — no public launch ceremony, no dedicated news release, only an institutional surface being re-oriented through name-change; the department’s financial statements disclose seven core functions including coordination of the Haihe Laboratory’s advanced-computing-and-key-software-Xinchuang research platform construction (the Haihe Laboratory adopts a small-core-large-platform model linking universities and enterprises across the base-research-to-industrialization chain); compared with the four-nationwide-categories of Xinchuang governance institutions (dedicated sections in Chengdu and Shanxi, working groups in Jiangsu and Zhejiang, Ningbo’s November 2024 service center, Beijing and Fujian department-coordination models), Tianjin picks the most institutionalized form; the Binhai Hi-Tech Zone has layered a Xinchuang Industry Comprehensive Party Committee over the Xinchuang Industry Bureau, absorbing Party-member technical backbones from research institutes and leading enterprises (Phytium 飞腾, Kylin 麒麟, Hygon 海光, Nandasoft 南大通用, Sugon 曙光, 360) into a three-layer architecture (administrative bureau + comprehensive Party committee + industry alliance); the scale metrics — 2024 Xinchuang industry revenue 72 billion yuan (up 30.1% YoY), 2025 full-year Xinchuang industry revenue approximately 85 billion yuan (up 17.4% YoY), 2025 Q1-to-Q3 Tianjin citywide Xinchuang industry scale 114.99 billion yuan, 2026 Q1 41 new landed enterprises registered at the Xinchuang Bureau. The two stories together document that two institutional objects this series’ prior October briefings have documented at the state-adjacent-research-institute-agent-governance-technology-standard layer and the Xinchuang-institute-and-Party-committee-plus-bureau-plus-alliance-institutional-formation layer are now being operationalized at the institute-level-application-activity-launch-and-most-institutionalized-Xinchuang-bureau institutional-form layer.

2026年10月13日 · 9 分钟 · 4458 字 · The Way of Open Source · Kuo Si

China Open Source Daily — 2026-10-12

Two institutionally dense placements at institutional layers this series’ prior fifty-one briefings have not documented at before, both concerning the same unsolved institutional object — the pre-IPO governance form of a Chinese frontier AI lab and the Western open-source foundation’s China-member formalization layer. (1) The PyTorch Foundation’s September 8, 2026 announcement, paired with the PyTorch Conference China 2026 keynote line-up, documents Alibaba Cloud joining as a Platinum member, Cambricon joining as a Platinum member, and Ant Group joining as a Gold member — alongside Huawei, which joined the PyTorch Foundation in 2023 as a founding-tier Platinum and started the Accelerator Integration Working Group that carried Ascend NPU through to becoming the first additional platform in PyTorch — the first-documented instance in this series of a Western open-source foundation being operationalized at the Chinese-tech-majority-of-members layer simultaneously with the silicon-to-software-to-deployment full-stack open-source AI view layer. (2) Yahoo Finance’s September 17, 2026 exclusive (originally by Quartz) plus CNBC’s September 17 pairing documents Moonshot AI’s launch of a Kimi financial services product, with early institutional customers including ICBC (one of the world’s largest banks by assets), CICC, CSC Financial, asset manager E Fund, and venture firms Hong Shan (formerly Sequoia China) and ZhenFund — the first-documented instance in this series of the pre-IPO Chinese-frontier-lab institutional object being operationalized at the state-owned-bank-client-and-institutional-VC-client-financial-vertical-product layer simultaneously with the open-weight-model-Kimi-K3-plus-300-million-USD-ARR-plus-Q1-2027-Hong-Kong-IPO-plus-sovereign-capital-formation pre-IPO-procedural layer. The two stories together document that the institutional-object pairing — DeepSeek-plus-Moonshot at the sovereign-capital-formation-plus-pre-IPO layer (this series’ October 7 and October 10 briefings) — is now being operationalized at the Western-foundation-membership-plus-state-bank-client-plus-VC-client layer as a downstream complement, and that both surfaces sit on the same Great Divergence 2.0 boundary object: the institutional-form-of-Chinese-open-source-across-institutional-borders.

2026年10月12日 · 7 分钟 · 3275 字 · The Way of Open Source · Kuo Si

China Open Source Daily — 2026-10-11

Two institutionally dense placements, both from the 2026-10-10 WeChat input feed, sitting at institutional layers this series’ prior ten October briefings have not documented at before. (1) The openEuler Community’s September 2026 operations report, released through OpenAtom Foundation’s openEuler official channel on 2026-09-30 — first-documented instance in this series of a Chinese-open-source-community operational-report surface being operationalized at the emergent-community-scale layer simultaneously with the administrator-facing community-layering layer: 10 million+ end users, 29,000+ developers, 2,199 organization members, 112 SIG groups, 340,800 cumulative PRs, 167,500 Issues, 6,225,400 Comments — a dataset that, in aggregate, is not a set of administrative-construction KPIs but a set of emergent-ecosystem operations indicators. Paired with Huawei’s Wang Tao HC 2026 keynote statement (“openEuler, after seven years, has surpassed 20 million installed instances and holds the #1 China server operating system share”) and this series’ prior Aug 8, Aug 25, Sep 11, Sep 23, and Oct 4 briefings’ documentation of the openEuler surface at the administrative-open-source-and-administrator-facing-open-source layer — the pair completes the institutional object at the emergent-ecosystem-operations layer. (2) The State-owned Assets Supervision and Administration Commission of the State Council Decree No. 46 — Measures for Investigating and Holding Accountable for Violations in Central Enterprise Operations and Investment — released through a domestic-database outlet on 2026-10-10 — first-documented instance in this series of the Xinchuang-southeast-side-of-stratification institutional surface being operationalized at the lifetime-reckoning-and-personalized-reckoning layer simultaneously with the cobra-effect-plus-forgery-technology-evolution layer: Article 4 lifetime accountability for major decisions, Article 35 collective-decision members held separately (collective decision is not an exemption), Article 51 post-retirement/post-transfer/post-resignation accountability retained with compensation obligation for state-asset loss, direct-responsible-person 100% annual performance pay deduction plus 100% term incentive deduction plus three-year medium-and-long-term incentive forfeit, and severe cases leading to demotion plus lifetime prohibition from state-owned enterprise service. Paired with the June 2026 MIIT-CAC-Central-Purchasing-Procurement-Center new rules (government, party, state-informatization new-and-modified systems require full-stack Xinchuang adaptation plus code-chain-full-link audit, non-compliant systems are disqualified from bidding and acceptance) and the State Council Office Document No. 2025-34 domestic-product standard (domestic products enjoy bidding price-review preference from this year) — three policy lines tighten into a single accountability surface. SASAC 79 Instruction targets end-of-2027 Xinchuang transformation completion; only slightly more than a year remains. Financial Xinchuang tender scale rose more than 40 percent year-on-year in Q1; annual Xinchuang market projected at 2.66 trillion yuan. Volume grows; the number of people willing to sign drops. Xinchuang selection logic inverts from “cheapest and pretty-parameter” to “won’t get in trouble” — evidence chain (source code, audit report, national-testing evaluation level, real deployment cases) shifts from bonus item to hard currency. The piece explicitly names this as the cobra effect — Yangquan’s 1980s horse-skin bounty case where people killed healthy horses to sell the hide — generalized to Xinchuang policy as the incentive for forgery technology to evolve alongside the accountability regime. One perspective, not a verdict.

2026年10月11日 · 8 分钟 · 3675 字 · The Way of Open Source · Kuo Si

2026-10-10 「开源之道」·论文略读:开源 LLM 多 Agent 系统的实践问题库——agent 时代开源治理的第一份诊断

Rehman et al. (2026, arXiv 2610.00905) 首次以 22,848 closed issues × 21 开源 LLM-based MAS 项目的大样本量化开源 MAS 的实践问题:过滤到 944 个 MAS 相关问题后诊断出三大核心问题类别(Orchestration & Execution 主导 / Workflow + Tool Integration + Memory 三大成因 / Optimize Workflow 单一主导解决方案)。开源 MAS 治理的第一份诊断式实证——把「开源治理」从「协作范式」层扩展到「多 agent 系统实践问题库」层。Ostrom 八原则的开源 MAS 场景全部失效的教科书样本。Williamson L3 治理机制层的最新诊断。适兕「思想是制度的源代码」命题的 AI 时代最新版本——治理设计的第一动作是「先诊断,再设计」。

2026年10月10日 · 13 分钟 · 6381 字 · 「开源之道」·窄廊

China Open Source Daily — 2026-10-10

Three institutionally dense placements on the same unsolved institutional object this series’ prior fifty briefings have been documenting — the pre-IPO governance form of a Chinese frontier AI lab — and all three placements this cycle’s briefing documents sit at institutional layers this series’ prior briefings have not documented at before. (1) Bloomberg’s October 6, 2026 reporting on DeepSeek’s approaching pre-IPO round of at least ¥80 billion (approximately US$11.93 billion), originally targeted at ¥50 billion with a target valuation of ¥500 billion (approximately US$74 billion), with China’s largest battery maker CATL and Tencent Holdings as the largest two committed investors, paired with Sina/RFI/iHeima’s re-reporting that DeepSeek is preparing to file for a STAR-board IPO in 2027 via CITIC Securities, paired with the Sina/Phoenix Tech piece’s documentation that the June 2026 first external round of approximately ¥50 billion-plus (approximately US$7.4 billion) was executed as a limited-partnership structure with external investors holding no voting rights and a five-year lockup while Liang Wenfeng personally contributed approximately ¥20 billion and retained close to 100 percent of voting rights. (2) Hongxing/Red Star News's October 6, 2026 reporting on Moonshot AI (月之暗面) completing its final pre-IPO round at a valuation of approximately US$50 billion, positioning for a Q1 2027 Hong Kong Exchange listing, paired with the Sina/Hongxing documentation that Moonshot AI has completed the business-registration change from “limited liability company” to “joint stock company” as a pre-IPO procedural signal, paired with the piece’s documentation of Moonshot’s six funding rounds in the first half of 2026 with valuation rising from US$10 billion to US$35 billion across January-to-July (with the final round lifting the valuation to approximately US$50 billion) and Moonshot's June 2026 annual recurring revenue (ARR) breaking through US$300 million on the back of Kimi K3’s launch. (3) Sina/Phoenix Tech’s documentation that during National Day holiday 2026 DeepSeek Harness released a new version with plugin and cross-platform enhancements including an experimental Claude Code Mods compatibility layer, paired with DeepSeek Harness head Cui Tianyi’s October 4, 2026 social-media statement that “the main purpose of building this compatibility layer is to verify whether the extension capabilities Claude Code Mods offers plugin authors are roughly a subset of the capabilities provided by DSH’s everything-is-a-plugin architecture”, and paired with Cui Tianyi’s own statement that “a fairly large portion of my daily working time is spent recruiting and interviewing for DeepSeek; DeepSeek’s goal is to achieve AGI, and DeepSeek Harness’s goal is to advance AGI from the Harness angle.” The institutional-economics question this cycle’s briefing documents but does not answer: whether the pre-IPO governance form of Chinese frontier AI labs — the DeepSeek-limited-partnership-plus-99-percent-voting-rights-plus-five-year-lockup structure and the Moonshot-limited-liability-to-joint-stock-conversion-plus-dual-track-Hong-Kong-and-Star-board-IPO structure — is the institutional-form object this series’ prior briefings’ Great Divergence 2.0 framework should be extended to cover, and whether the DeepSeek Harness Claude Code Mods compatibility-layer layer operationalizes the same open-source-vs-institutional-form boundary object this series’ prior briefings have documented at the OpenHarmony AI-tool-use-rulebook layer and the CANN-community-open-source-development layer.

2026年10月10日 · 13 分钟 · 6331 字 · The Way of Open Source · Kuo Si

2026-10-09 「开源之道」·论文略读:社交热度冲击开源协作——739,587 名 GitHub 用户的开发者注意力与“太热点而不敢/不愿提交”实证

Han (2026, SSRN 10.2139/ssrn.7582038, Peking University) 用 739,587 名活跃 GitHub 用户的日级 commit 面板 × 逐日热度/注意力观测,within-user 差分识别社交热度对开发者产出的关联效应。发现一:超高热度与 commits 产出显著下降相关,且后续几天几乎没有恢复;发现二:地理上距离较远的协作对中,一方产出下降与另一方产出上升相关——分布式结构可能提供注意力挤占风险分散。Coase 1937《企业的性质》命题在开源场景的第五次精确化(开发者的注意力状态作为外部交易成本的一部分)。Williamson L1 社会嵌入层的最底层样本(L1 命题从企业决策跨主体扩展到个人产出的注意力嵌入)。Ostrom 边界界定原则的注意力层版本(Ostrom 从社会注意力公地到数字公地的完整闭环)。哈耶克自发秩序命题在开源场景的第一份社交热度冲击实证。与 #192 Katz (10-08) 的镜像对照:AI 冲击(技术外部冲击)+ 社交热度冲击(注意力外部冲击)构成开源公共品的双重外部脆弱性。开源四层制度基础设施第二层扩展:贡献者注意力层。

2026年10月9日 · 14 分钟 · 6640 字 · 「开源之道」·窄廊

China Open Source Daily — 2026-10-09

Two institutionally dense placements on the Chinese open-source institutional-form surface from the 2026-10-08 WeChat input feed, both of which sit at institutional layers this series’ prior briefings have not documented at before, plus one vendor-official-roundtable placement that pairs structurally with the same two. (1) OpenHarmony’s 《生成式AI工具使用与开源贡献策略》 (Generative AI Tool Use and Open Source Contribution Strategy) published by the 开放原子 (OpenAtom) Foundation’s 开源鸿蒙 community channel on 2026-10-08 — eight-section rulebook covering basic principles, permitted-use scenarios, disclosure norms, six prohibited behaviors, license/privacy/data rules, issue-bug-security-vulnerability special rules, reviewer-side rules, and community-enforcement-iteration — is the first-documented instance of a large Chinese OS-community official channel publishing a formal AI-tool-use rulebook for open-source contributions, positioning the same “large OS community” surface this series’ September 8 briefing documented at the 14-billion-device-OpenHarmony base-layer layer at the AI-governance-rule-execution layer simultaneously with the community’s vendor-foundation-separation-and-90-percent-to-70-percent-contribution-share-decline institutional object. (2) 国产信创外传 (Chinese state-informatization industry outlet) publishes a two-piece piece arguing that a wave of enterprises, government, and energy-sector units have slowed one-size-fits-all state-informatization (Xinchuang) replacement, retreating from replacement-rate-first KPIs toward business-first, risk-controlled value-based rollout, and pairing this with an article characterizing Huawei as the sole beneficiary in the Xinchuang stratification period. (3) The 自主可控新鲜事 (Autonomous-Controllable Fresh News) WeChat piece re-published Richard Yu’s September 29, 2026 international-media roundtable — where Yu simultaneously states that Huawei has “essentially broken free” from US technology dependency while stating that China still relies on DUV lithography — with the outlet’s selective headline-framing (emphasizing “essentially broken free” and weakening “still relies on DUV”) being a structurally new first-documented instance in this series of the autonomous-controllable narrative’s market-media-plus-administrative-narrative selective-transmission mechanism being operationalized at the individual-vendor-vs-national-industry dichotomy layer.

2026年10月9日 · 13 分钟 · 6384 字 · The Way of Open Source · Kuo Si

2026-10-08 「开源之道」·论文略读:95% 需求替代——公共编程知识库的第一份大规模实证

Katz (2026, SSRN 10.2139/ssrn.7555720) 综述 6 篇独立实证,识别 Stack Overflow 2022-11 到 2025-12 月度问题量下跌 95% 的第一份系统性综述。核心立场:这不是公地自由搭便车(free-riding)问题,而是需求替代(demand substitution)——边界内消费者根本离开边界,不再进入社区。Coase 1937《企业的性质》命题在开源公共知识库场景的第四种精确化——贡献者边界 vs 消费者边界。Ostrom 1990 集体行动问题在 AI 时代的第一次根本性重新界定。Benkler 2006《网络的财富》的 commons-based peer production 命题在 AI 时代的失效。Lerner-Tirole 2002 声誉机制在 AI 时代的第一次实证失败。North 1990 制度变迁临界点命题在数字公地场景的第一次大规模实证——95% 下跌是数字公地可持续性临界点的第一次跨越。开源四层制度基础设施第十四层扩展:公共基础设施层。

2026年10月8日 · 16 分钟 · 7606 字 · 「开源之道」·窄廊