- Dataset
- 2026-10-27-catalog-ai-v2
- Ruleset
- b2e8889c66f7
- Scanned
- 2026-10-27
- Window
- February–September 15, 2026
Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.
01Result
Loophole-LLC/Bastillion ↗Loophole-LLC/Bastillion AI coding statistics: 39%
One person is driving this. The headline number reflects a single contributor's workflow, not a project-wide shift.
02Drivers
What shapes this result
Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.
Assisted or autonomous
Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.
Agent share by month
| Month | Agent share | Considered commits |
|---|---|---|
| 2026-07 | 46.3% | 67 |
| 2026-08 | 21.4% | 28 |
| 2026-09 | 40% | 5 |
Peak month: 46.3%. Bars are scaled to that peak, not to 100%.
Which agents
| Agent | Vendor | Commits | Share |
|---|---|---|---|
| Claude Code | Anthropic | 31 | 31% |
| GitHub Copilot | GitHub | 8 | 8% |
03Evidence
Inspect the matches
Public commit samples let you inspect the signatures behind the aggregate result.
Matched commit samples
c54c11a8on GitHubDocument 5.2.1 SAML/LDAP profile/key-deletion fix in CHANGELOGClaude Codea2e5e443on GitHubFix GHSA-577v-6px6-m424: scope user_map delete to authenticating userClaude Code68a09811on GitHubAdd CHANGELOG.md, seeded with v5.2.0Claude Codeaf7dbc00on GitHubApply suggested fix to src/main/webapp/manage/view_terms.html from CopilotGitHub Copilot408fcdb3on GitHubFix for Exposing internal representationGitHub Copilot0f708e15on GitHubPotential fix for code scanning alert no. 19: Server-side template injectiGitHub Copilot
04Method
What entered the denominator
The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.
Exclusion ledger
| Commits in window | 218 |
| Merge commits removed | −65 |
| CI / dependency bots removed | −53 |
| Considered | 100 |
Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.
Continue exploring
Related coding-agent evidence
Run the same detector locally.
Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.
npx qmmit-cli Loophole-LLC/Bastillion