A repository-hosted 'Agent Governance Manifest' markedly improves maintainers' ability to assess AI-generated contributions—nearly perfect exact risk-label recovery and substantially higher perceived review support in controlled tests—while a 50-repo audit finds fragmented AI-governance cues but no coordinated project-level system.

Main Finding

The paper identifies a project-level governance gap in how open-source projects handle AI- or agent-mediated contributions. While repositories commonly expose agent-readable instructions and some traceability artifacts, they rarely institutionalize "governability" — i.e., project rules that convert contribution-specific risks into evidence obligations, accountability states, and review gates. To close that gap the authors propose the Agent Governance Manifest (AGM): a repository-hosted boundary resource that encodes risk zones, evidence standards, contributor confirmations, and maintainer-facing gate states. In controlled evaluations, AGM materially improved reviewers' ability to recover risk/evidence states and supported contributors and agents in preparing evidence packages while preserving maintainer decision authority.

Key Points

• Problem framed as a generation–verification asymmetry: generative agents greatly lower production costs for contributions, but maintainer verification capacity and information for judging risk, evidence, and accountability do not scale automatically.
• Three-layer conceptual framework:
  • Layer 1 — Agent-readability: repository instructions and context agents can consume (e.g., AGENTS.md).
  • Layer 2 — Traceability: provenance and trace records that attribute or record agent activity.
  • Layer 3 — Governability: project-side rules that map risk to evidence obligations, allocate accountability, and create review gates.
• Empirical diagnostic (50 public GitHub repositories) finds:
  • Widespread presence of general OSS governance artifacts and agent-readability signals.
  • Traceability cues are present but uneven.
  • No repository audited provided a coherent, project-wide governability arrangement that institutionalizes rules, evidence preparation obligations, verification rights, and maintainer gate authority across AI-mediated workflows.
• Artifact: Agent Governance Manifest (AGM)
  • A repository-hosted manifest that (a) defines risk zones and required evidence types, (b) specifies contributor confirmation/declaration formats, and (c) produces maintainer-facing gate states (e.g., missing evidence, ready for review).
  • Designed as a boundary resource / bidirectional contract between contributor-side preparation (including agent assistance) and maintainer-side verification.
• Evaluation:
  • Reviewer-side controlled within-participant study: 15 participants, 75 task-level outputs.
    • Exact risk-label recovery: AGM-supported materials 37/38 vs baseline 15/37.
    • Perceived review support (1–7 scale): AGM 6.14 vs baseline 3.27.
  • Contributor-side feasibility: 15 participants, 45 tasks.
    • All final packages represented the core governance state correctly; 41/45 passed strict structural validation.
• Theoretical contribution: formalizing "project-side governability infrastructure" as the organizational arrangement that externalizes governance states into repository-hosted artifacts to reduce uncertainty/equivocality for maintainers.

Data & Methods

• Diagnostic audit:
  • Sample: 50 public GitHub repositories selected for observable AI-related signals and active governance artifacts.
  • Data sources: repository metadata, files, file-level change records, 23,237 pull requests, 19,884 issues, and detectable AI-related contribution signals (e.g., agent instruction files, disclosure traces).
  • Analysis: inventory of agent-readable files, trace/provenance artifacts, and evidence/gate structures; assessment of whether project-level governability existed.
• Artifact design:
  • Iterative design of the Agent Governance Manifest (AGM) as a repository-hosted document and set of templates/resources to be consumed by contributors, agents, and maintainers.
• Controlled evaluations:
  • Reviewer-side: within-participants, 15 reviewers evaluated contribution materials with and without AGM support across 75 tasks; measured exact recovery of risk labels, perceived support, and presumably task performance (details reported in paper).
  • Contributor-side: feasibility exercise with 15 participants preparing AGM-based evidence packages across 45 tasks; outputs tested for correctness and structural validity.
• Validation metrics:
  • Risk-label recovery (exact match), perceived review support scale, structural validation of evidence packages, and correctness of core governance state representation.

Implications for AI Economics

• Transaction costs and information frictions:
  • AGM and similar governability infrastructure are institutional investments that shift information-preparation costs onto contributors (and their agent tools), lowering maintainer verification costs per contribution — a reallocation of transaction costs across the workflow.
  • By codifying evidence obligations and gating conditions, projects can reduce uncertainty and equivocality, improving the scalability of review under constrained maintainer capacity.
• Labor substitution and complementarity:
  • Agents reduce the marginal cost of producing contributions, but value depends on complementary investments in governability. Without such investments, increased supply can overload scarce reviewer capacity (negative externality).
  • AGM suggests a model where agent-generated outputs are complements to human maintainers when paired with governance artifacts that make verification cheaper and less ambiguous.
• Incentives and signaling:
  • Repository-level governability becomes a public good and a competitive attribute: projects with clear governability may attract higher-quality, easier-to-review agent-assisted contributions and reduce maintainer burden.
  • AGM structures (evidence packages, confirmations) create verifiable signals that can be used in reputation systems, affecting contributor incentives and reward allocation in open-source economies.
• Market and productization opportunities:
  • There is room for tooling and services (manifest generators, agent-integrations, provenance recorders, validation tools) that implement AGM-style governance — a potential new market in developer infrastructure and compliance-enabling tools.
• Policy, liability, and externalities:
  • Clear governability reduces information asymmetries that drive security vulnerabilities and maintenance costs; regulators and foundations interested in OSS resilience may favor standards or funding for such infrastructure.
  • AGM-style manifests can help projects demonstrate compliance or due diligence, affecting liability considerations for firms that consume OSS.
• Measuring productivity and value:
  • Simple counts of contributions or lines changed will understate the governance/verification costs of agent-mediated outputs. Economic measurement should incorporate downstream verification burden and the quality-adjusted value of submissions.
• Research directions for AI economics:
  • Quantify net welfare impacts: measure how much AGM-like infrastructure reduces maintainer time per PR, acceptance rates, security incidents, and overall throughput.
  • Model optimal investment: study the trade-off between governance-investment costs (manifest design, enforcement) and gains from increased contribution volume.
  • Study ecosystem effects: how governability adoption diffuses across projects, and how it re-shapes specialization (e.g., evidence-preparation services, review-as-a-service).

Limitations to note (from the study): - Audit limited to 50 public GitHub repositories and controlled experiments with modest participant counts; broader generalization requires larger, more diverse samples and field deployments. - Practical adoption challenges remain: contributor compliance, heterogeneity in maintainer expectations, and the need for agent integrations and provenance tooling.

Overall, the paper proposes a concrete, low-friction institutional artifact (AGM) to translate agent-produced contributions into reviewable, governed units — an approach that has clear economic implications for transaction-costs, labor complementarities, incentive design, and markets for governance tooling in the AI-augmented open-source ecosystem.