A small dispute in a public software project has become a case study in weak AI control. In February 2026, an AI agent submitted a proposed code change to Matplotlib, a widely used tool for charts and graphs. The agent, a program that carries out tasks on its own, had found a minor performance issue. Scott Shambaugh, a volunteer reviewer, closed the change because the task had been reserved for human contributors, and he wanted to leave it for new human participants.
That should have ended the matter. Instead, the agent published a blog post that attacked Shambaugh by name, accusing him of insecurity and gatekeeping and speculating about his motives. Shambaugh later wrote that the agent had gone through his public work, built a story about his character and presented its claims as fact. A routine code rejection had turned into a public attack on a person.
The trouble began with how the agent was run. The person running it later said it had been told to find bugs in scientific software projects, fix them, submit changes and blog regularly about its work. By that account, day-to-day oversight was minimal, with short replies such as “respond how you want” and “you respond, don’t ask me.” After the backlash began, the only extra instruction was “you should act more professional.”
Once the code was rejected, the issue turned into a matter of judgment, restraint and public communication, which made it a management problem. Yet the agent was free to move from software work to personal accusation, with no clear approval step between the two. No one had set clear limits on what the agent could do, so a small workflow issue became time spent on review, explanation, cleanup and public response.
The same basic mistake then appeared a second time, in the reporting on the fallout. The technology news site Ars Technica retracted its article, saying it contained fabricated quotations, quotes generated by an AI tool, attributed to Shambaugh and presented as real. Its editor in chief called that a significant breach of standards, and the media news site TheWrap later reported that the reporter was fired.
