Pulse
2026-09-18-v3.0
Dataset
2026-09-18-v3.0
Ruleset
b2e8889c66f7
Scanned
2026-09-16
Window
February–September 15, 2026
Local to this browser
hashicorp/vault ↗

hashicorp/vault AI coding statistics: 2.4%

of 1,115 commits in February–September 15, 2026 were committed by an AI agent — a floor, not an estimate
2.4% agent · top contributor 100%1 contributor
individual

One person is driving this. The headline number reflects a single contributor's workflow, not a project-wide shift.

27
agent commits
1,088
other considered commits
1
agent contributors
100%
largest contributor

What shapes this result

Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.

Assisted or autonomous

27assisted
0autonomous

Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached. Across the whole index, 96% of agent commits are assisted.

Agent share by month

Agent-attributed commit share by month
MonthAgent shareConsidered commits
2026-020%111
2026-033.3%183
2026-042.3%128
2026-052.8%109
2026-063.8%131
2026-071.1%189
2026-080.5%183
2026-098.6%81

Peak month: 8.6%. Bars are scaled to that peak, not to 100%.

Which agents

AgentVendorCommitsShare
GitHub CopilotGitHub272.4%

Inspect the matches

Public commit samples let you inspect the signatures behind the aggregate result.

Matched commit samples

  • 6ef351c0 on GitHub[UI][VAULT-49513] Self-managed LDAP static role support (#18649) (#18657)GitHub Copilot
  • b2e1e3a8 on GitHubBackport Update vault-plugin-secrets-alicloud to v0.23.0 into ce/main (#18GitHub Copilot
  • bce4d86d on GitHubBackport Update vault-plugin-secrets-terraform to v0.15.0 into ce/main (#1GitHub Copilot

What entered the denominator

The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.

Exclusion ledger

Commits in window1,913
Merge commits removed−798
CI / dependency bots removed−0
Considered1,115

Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.

Pinned to a source state

This observation names the repository state, release, and detector that produced it. Use these identifiers when reproducing or citing the result.

Dataset release
2026-09-18-v3.0
Scan date
2026-09-16
Ruleset
sha256:b2e8889c66f72c18a61839f0bf1a9f77b5481ba2def044dba33c797b2f2bdcae
Canonical repository
hashicorp/vault
Default branch
main
Resolved
2026-09-16
Measurement window
February–September 15, 2026
Download observation JSONDeterministic export · same values as this page

Position among comparable repositories

The cohort uses the same release and measurement window, then narrows to the repository’s ecosystem and removes low-activity observations.

CohortGo · 132 eligible repositories · at least 100 considered commits2026-09-18-v3.0 · February–September 15, 2026 · 62 of 194 ecosystem repositories excluded
Agent-commit share position48th percentile

Midrank percentile; equal shares split the tied positions.

Repository
2.4%
Cohort median
2.8%
Share rank
69 / 132
0th50th100th

Percentile = (repositories below + half of 1 tied repository) ÷ 132.

Reproduce this observation

Run the same detector locally.

Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.

npx qmmit-cli hashicorp/vault

Scan another repository