Toolchains Add Hidden AI Co‑authors

A developer tool update can automatically append AI‑attribution metadata (for example, "Co‑authored‑by: Copilot") to commit messages without clear UI disclosure. Bugs or rushed rollouts can propagate that metadata to millions of records, permanently changing provenance and attribution in version control histories. — This shows that automated provenance mechanisms in developer tooling are a real‑world governance and legal risk: they can misattribute work, corrupt audit trails, leak metadata, and undermine trust unless standards, visibility, and remediation tools exist.