The Hardest Fork

**Executive summary:** Dan Lorenc warns that AI has dramatically increased open-source supply-chain risk by finding and chaining many issues at scale, argues existing coordinated disclosure and maintainer models cannot keep up, and proposes a two-part response: (A) a scalable, trusted coordinated disclosure pipeline and (B) a funded, neutral maintainer-of-last-resort to steward forks and patch critical unmaintained projects to avoid chaotic fragmentation.