I don't know how this can be enforced, there's a lot of room for interpretation, making projects at risk to be banned.

- original content written with or which facilitates the use of LLMs (large language models) or other generative AI technologies

and

Moreover, the use of AI for purposes other than co-authoring code, tickets, emails, and so on, is discouraged but not prohibited. If you use LLMs privately to review your work, to ask questions of, to perform security analysis, and so on, and then write original code to push to SourceHut, your use-case is aligned with our policy.

So from what I understand it is OK to use AI for security reviews privately but is not cool to host a project that allows to do that?

Also, what does it mean "and so on"? Like "anything we consider we don't allow at some point?"