Ladybird bets AI-era browsers need closed gates: maintainers-only PRs, HN 900 pts

Ladybird is a web browser built on an engine written from zero — no Chromium, WebKit, or Gecko — by the Ladybird Browser Initiative, a 501(c)(3) non-profit co-founded by SerenityOS creator Andreas Kling and GitHub co-founder Chris Wanstrath; sponsors include Cloudflare, Shopify, FUTO, and 37signals.

That a from-scratch browser free of Google's ad-funded engines can ship — and that in the AI era, security means code only maintainers can write.

Andreas Kling built SerenityOS and its browser as a from-scratch hobby OS project; the browser was split into its own repository in 2022 as it outgrew the OS. In June 2024 the Ladybird Browser Initiative was formed as a 501(c)(3) with GitHub co-founder Chris Wanstrath as co-founder and major funder, later joined by sponsors including Cloudflare, Shopify, FUTO, and 37signals.

As the project prepared its first alpha (targeted for 2026 on Linux and macOS), Kling announced on June 5, 2026 that public pull requests would no longer be accepted: only maintainers can introduce code, all open PRs were closed, and forks, patches, or emailed code would not be treated as a review queue. He argued AI tools changed the economics of open source — a substantial patch no longer implies substantial effort — and cited patient, well-resourced campaigns to earn maintainer trust and abuse it; coverage also documented a single AI agent opening 103 PRs across 95 repos to farm GitHub reputation. Ladybird itself uses AI daily; the change is about accountability for code, not banning AI.

Every major browser engine is funded by Google's advertising empire; Ladybird's whole bet is that an independent, from-scratch engine can be built and adopted.

AI made patch volume cheap, destroying the old trust signal; closing public PRs protects the browser's attack surface before its first real users.

The non-profit's paid, sponsor-funded staff made the closure affordable — a governance option most volunteer projects do not have.

HN's 900-point, 570-comment thread and coverage of the 103-PR reputation-farming case made this a visible precedent for open source in the AI era.

When AI makes contributions cheap, effort stops proving good faith; security-critical open source may keep code open but shrink who writes it — a tradeoff only funded maintainers can afford.

As of 2026-09-02, Ladybird is still pre-alpha, with the first alpha for Linux and macOS targeted later in 2026. Development is maintainer-only: the source stays public under an open-source license, and outside input flows through bug reports, reductions, testing, standards and design discussion, and security reports. The repo had 65.5k stars and 3,100 forks by Aug 2026, and Kling has been moving the codebase toward Rust. The decision is a precedent — tldraw closed external PRs in January 2026 — and critics note it works because the initiative has paid maintainers and sponsors, not volunteers.