docs(ai-policy): ask for a rewrite before closing over AI-written text

AGENT_MD_SNIPPETS.md

@@ -33,6 +33,6 @@ All contributions generated or assisted by this agent must fully comply with:
 - Open issues, submit pull requests, post review comments, or send security reports autonomously. Every contribution must be reviewed and submitted by a human.
 - Add `Signed-off-by` tags to commits. Only the human contributor can certify the Developer Certificate of Origin.
 - Generate or submit security reports without independent human verification. Report verified vulnerabilities via [HackerOne](https://hackerone.com/nextcloud), not as GitHub issues.
-- Write PR descriptions, review comments, or issue reports on behalf of the contributor. These must be in the contributor's own words.
+- Write PR descriptions, review comments, or issue reports for the contributor to post unchanged. Drafts are fine if the contributor reads, understands, and edits them before posting. Translating or correcting text the contributor wrote is always fine.
 - Fully automate the resolution of issues labeled [`good first issue`](https://github.com/issues?q=org%3Anextcloud+label%3A%22good+first+issue%22) or similar beginner-friendly labels.
 - Submit code that has not been reviewed and cleaned up by the contributor. Dead code, redundant logic, excessive comments, malformed or garbled characters (e.g. `�` replacement characters), and unrelated changes must be removed before submission.

AI_POLICY.md

@@ -42,10 +42,12 @@ The contributor is the legal and moral author of every line they submit. If a re
 
 ### Human-Written Communication
 
-Issues, PR descriptions, and review comments must be in the contributor's own words. Translation assistance and grammar/spelling help are acceptable exceptions and do not need to be disclosed - the intent of this rule is to ensure that the ideas, reasoning, and decisions in community communication come from the contributor.
+The ideas, reasoning, and decisions in issues, PR descriptions, and review comments must come from the contributor. AI tools may help to draft or phrase these texts if the contributor has read, understood, and edited the result before publishing it, and discloses that AI helped. Translation and grammar/spelling help do not need to be disclosed. Contributors who write in another language may add a short note that the text was translated.
 
 This requirement extends through the entire review process. Contributors must respond to reviewer questions and implement requested changes themselves. Passing maintainer feedback into an AI and posting whatever comes out is not an acceptable substitute for genuine engagement. If a contributor cannot explain or implement a requested change because they do not understand their own submission, the PR will be closed.
 
+A PR description should be understandable for both the author and the maintainers. If it is not, maintainers ask for a rewrite, for example by requesting changes or converting the pull request to a draft. If the contributor does not reply within a month, the pull request may be closed.
+
 ### Security and Dependency Scrutiny
 
 AI tools hallucinate package names, produce subtly broken access controls, and may reproduce vulnerable patterns from their training data. Contributors must manually verify all dependencies, access control logic, authentication patterns, and security implications in AI-generated code before submitting - the risk of undetected errors is higher than with hand-written code and warrants extra care.
@@ -96,4 +98,4 @@ AI tools must not be used to fully automate the resolution of issues labeled [`g
 
 ## Scope and Updates
 
-This policy applies to all contributions to repositories and apps under the Nextcloud GitHub organization, by all contributors. It will be reviewed and updated as AI tooling, open-source best practices, and applicable law evolve. Suggested changes are welcome via pull requests.
+This policy applies to all contributions to repositories and apps under the Nextcloud GitHub organization, by all contributors. It will be reviewed and updated as AI tooling, open-source best practices, and applicable law evolve. Pull requests opened before a change to this policy are asked to adapt to it rather than closed. Suggested changes are welcome via pull requests.

CONTRIBUTING.md

@@ -33,7 +33,7 @@ Nextcloud allows contributions made with the help of AI tools. You are the autho
 
 * **Accountability:** You must be able to explain, defend, and modify every line you submit. If a reviewer asks why something works a certain way, "the AI wrote it" is not an answer.
 
-* **Communication:** PR descriptions, review comments, and issue reports must be written in your own words. This applies throughout the review process - passing reviewer feedback to an AI and posting whatever comes out is not acceptable.
+* **Communication:** The ideas and reasoning in PR descriptions, review comments, and issue reports must be your own. AI may help you draft them if you read, understand, and edit the result and mention that AI helped. Translation and grammar help need no mention. This applies throughout the review process - passing reviewer feedback to an AI and posting whatever comes out is not acceptable.
 
 * **Quality:** AI output must be quality assured by the human, i.e. reviewed, cleaned up, and tested before submission. New features must be tested on a live instance by you, not by an agent. Code that has never been executed, or that shifts debugging work onto maintainers, will not be accepted.