Why Oracle Is Banning AI‑Generated Code in OpenJDK

Oracle announced a temporary policy for OpenJDK that strictly prohibits any contribution containing content generated by large language models, diffusion models, or similar deep‑learning systems. The ban covers source code, text, images, pull‑request bodies, emails, wiki pages and JBS issues.

The rule does not stop developers from using AI tools privately for understanding, debugging, reviewing or research, but any AI‑generated artefacts must not be submitted to the OpenJDK community. Contributors must tick a compliance checkbox confirming the submission is not AI‑generated before the pull request proceeds to human review.

Oracle justifies the ban by pointing to increased code‑review workload, potential security risks, and unresolved intellectual‑property ownership of AI‑generated code. Because OpenJDK underpins many critical enterprise systems, hidden bugs introduced by AI‑generated code could be hard for reviewers to detect.

At the same time, Oracle publicly promotes AI‑assisted programming and has invested heavily in AI data‑center infrastructure, creating an apparent contradiction between its AI enthusiasm and the strict OpenJDK rule.

In contrast, Oracle Labs’ GraalVM project adopts a permissive “AI‑assist” policy: contributors may use AI tools but must be able to explain, justify and maintain any code they submit, and they are encouraged to disclose AI involvement without a hard ban.

The two divergent policies illustrate that even a company heavily betting on AI does not consider AI‑generated code ready for unreviewed inclusion in critical open‑source projects. The article includes a workflow diagram showing the private‑use‑AI step, the compliance checkbox, and the human‑review merge path.

Contributor's local workflow          OpenJDK contribution pipeline
┌───────────────────────┐            ┌─────────────────────────┐
│ AI used privately to  │            │ Pull request opened     │
│ explain,debug,research│  ───────►   │                         │
└───────────────────────┘            │   ▼                     │
                                      │Skara compliance checkbox│
Human writes and owns the            │ ("not AI-generated")   │
actual submitted code                 │   │                     │
                                      │   ▼                     │
                                      │ Human reviewer          │
                                      │   │                     │
                                      │   ▼                     │
                                      │ Merge                   │
                                      └─────────────────────────┘