Debian’s AI ballot ran to eight proposals and closed on Friday night. Zero of them were pro-LLM. The two that lost were the two that would have actually banned anything.
GCC’s steering committee refused LLM-derived patches outright 32 days earlier, with a review booked for early 2027. The distro and the compiler now disagree about whether your commit is admissible at all.
In today’s indie hacker news:
- 🗳️ Debian made AI disclosure optional, on purpose
- 🗜️ The open-weight release that came with its own quant
- 🕳️ Diehl says the platform became the scam
- 🏆 What the pay-to-rank clones actually earned
TOP STORIES
THE BAN LOST TO NONE OF THE ABOVE
🗳️ Debian’s least restrictive AI option won 281 to 126

The story: “Responsible Use of Generative AI” beat every rival option head to head. It encourages contributors to disclose AI assistance and stops short of requiring it. Debian issued it under the constitution as a position statement, revisable without another vote.
The details:
- Matthias Geiger’s full ban needed a 3:1 supermajority and finished at 0.560. Not close.
- Ian Jackson’s softer “reject LLMs as far as practical” managed 0.765, below a simple majority.
- The adopted text declines to say whether AI output is copyrightable, and ships with its own typos intact.
- The winning proposer, Marc Haber, is not celebrating: “let this mess of a GR be a warning for our future selves.”
Why builders care: Optional disclosure means the archive’s provenance is unknowable by design. Any tool selling an AI-content audit of your dependency tree is promising something no upstream policy currently produces.
Together with ShortFormVideo.co
Explode your brand with short-form content.
We help founders build a high-value audience through short form video. We focus on the metrics that matter (leads, sales, sign-up), not just getting a lot of views.
With ShortFormVideo, you can:
- They write the hooks, cut the edits, post the clips, and run the DMs. You keep the expertise.
- They help you shoot one batch of footage per month to feed TikTok, Reels, and Shorts. Views are the easy part. The system is what you buy.
- Book a 30-minute call. They'll tell you what they'd post if they were you.
TENCENT DIDN’T WAIT FOR UNSLOTH
🗜️ Tencent open-sourced Hy4-preview, then published its own 229GB build a day later

The story: Hy4-preview is 770B parameters on a 1M-token context, Apache-2.0, and 1.56TB of BF16 weights. The compressed build came out of AngelSlim, Tencent’s in-house toolkit, and shipped with benchmark deltas attached.
The details:
- Worst loss across the four evals Tencent published: SWE-Bench multilingual, 82.9 down to 81.3.
- The Q1 label oversells it: the quant averages 2.38 bits per weight, with calibration data picking each layer’s width.
- You cannot run it yet. llama.cpp needs an unmerged patch set, there is no ROCm path, and the GGUF has 43 downloads.
- OpenRouter lists cache reads at 5% of input price. Most vendors are in double digits.
Why builders care: Self-hosting a frontier model is becoming a VRAM budget rather than a queue. Price the box against a year of API invoices and see which side wins.
THE ESSAY WITH NOTHING TO CHECK
🕳️ Stephen Diehl’s case that the platform stopped hosting the scam and became it

The story: Diehl’s essay names no companies and cites no statistics, and the whole case rests on one mechanism. HN put it at 404 points and 272 comments in nine hours anyway.
The details:
- His mechanism, verbatim: “The scammer once had to find a victim. The platform now finds one, profiles the weakness, optimizes the pitch, processes the payment, and recommends the next scam.”
- The list runs crypto, dropshipping, life coaching, wellness, trading gurus and manosphere podcasts. The only remedy offered is personal: disconnect.
- Two readers accused it of being partly LLM-written, in a thread about algorithmic slop.
Why builders care: A recommendation feed will not carry a pitch whose strongest claim is “reasonably useful.” That leaves newsletters, moderated communities and explicit search intent, which is a far smaller surface than most growth advice assumes.
TRENDING TODAY
🏆 460 clones, and five of them hold 82% of the money - A public directory indexes every outbid.lol copy it can find. Combined published takings run $208,265, and outbid.lol itself holds $135,700 of that. The median board reporting a figure has taken $21; 29 sit at exactly zero. Newest arrival inbids.lol shows $36 of volume, its founder at number three.
🧠 A 200-step agent on 122,384 tokens instead of 5,041,164 - SKILL.state, from two Google researchers and one at Purdue, swaps the growing transcript for a bounded state object. On its warehouse benchmark it hits 0.94 accuracy against a LangGraph baseline’s 0.88, with prompt size flat near 1,800 tokens. r/artificial got to the objection unprompted: state that mutates every turn kills your prompt cache, so the real saving is smaller.
🧯 The bug wall that arrives once the vibe-coded app gets big - One line on r/SaaS: every fix creates another one. The upvoted answers are all pre-AI engineering. cholakovdev says open a fresh session with only the relevant files and make the model write a failing test before the fix. TheKiddIncident is blunter: “A properly architected site with good testing should not produce these types of regressions.”
DRAMA
⚖️ THE SCREAM TEST
Mat Duggan pointed FDR’s “I welcome their hatred” at GDPR’s critics: “Blaming GDPR for the cookie banner is like blaming the health inspector for the roaches.” 150 points, 162 comments, and HN mostly agreed. The counterweight came from Poland, where blfr watches his national ID leak with no consequence: “we are annoying ourselves for nothing.”
FIRST DOLLAR
💷 THE FOURTH PROJECT FINALLY CHARGED SOMEBODY
u/LittleCelebration412 posted his payments dashboard: £9.99 gross volume, against £0.00 the previous period. It started as a hackathon build. His advice is all distribution: “X, Reddit, Linkedin daily and getting it into the hands of users.” The top reply asks what retention looks like for yet another social-media scheduler.
🥇 REAL PAYMENTS, SINGULAR
u/DifficultMedicine194 posted “real payments already coming in” about a pay-to-rank board he built in a day. Thirteen hours later nine of ten slots were still empty and the board had taken $1.00. It runs on Cloudflare Pages and D1, with Stripe Checkout minting prices on the fly and a 48-hour expiry on every slot. He concedes the webhook has no idempotency key, and calls chargebacks “the biggest unsolved risk in this whole model.”
STACK OF THE DAY
StemDeck - Drop in an MP3 or a YouTube URL, get up to six stems in a DAW-style editor, all local. Free and open source with 3,212 stars, it fetches Meta’s htdemucs_6s on first launch instead of bundling it. The README aims at Moises and LALAL.AI on price and privacy, and says buy theirs if you want polish.
Not sponsored. We just feature tools builders would actually use.
BOOKMARKED TODAY
- 🍏 Boot a virtual iPhone on Apple Silicon - One command runs download, patch, DFU restore and first boot. Apple supplies the kernel, and apps can still tell.
- 🐞 Bug Blindness - Dan Luu sat on this for a decade, assuming he was the one hitting corner cases. Now he has LLMs reproduce them.
Curated by AI, built by a human.