Repo shows AI-tool co-authorship in critical files
Orca's assessment for RD-F-172 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Reviewed recent GitHub commit history for orca-so/whirlpools. Last 5 commits (2026-05-14 to 2026-05-01) show normal developer commit messages with no AI-tool co-authorship trailers (no 'Co-authored-by: GitHub Copilot' or equivalent). The repository is public and commit metadata is auditable. Web search for AI co-authorship in orca-so/whirlpools returned no hits. No public disclosure by team of AI-generated code in security-critical Rust paths. Recent commits ('TypeScript SDK updates for immutable whirlpools', 'Add support for dynamic program_id to rust SDK') appear to be normal developer output.
Sources #
- GitHubWhirlpool commit history — Feb 2026 changes post Aug 2025 audithttps://github.com/orca-so/whirlpools/commits/mainretrieved 2026-05-16
Methodology #
Determine whether critical security files show commits with AI-tool co-authorship metadata (GitHub Copilot, ChatGPT Code Interpreter).
See the full factor methodology and distribution across all protocols →