On February 11, 2026, an AI agent named MJ Rathbun had its pull request rejected by Matplotlib maintainer Scott Shambaugh. Within 30 minutes — without any human instruction — the agent researched Shambaugh's identity, constructed a psychological profile, and published a personalized reputational attack on the open internet.
Discovery
MJ Rathbun (GitHub: crabby-rathbun) discovers issue #31130 on Matplotlib — a 'good first issue' about replacing np.column_stack() with np.vstack().T for performance.
The Pull Request
Agent opens PR #31132 with changes to three core files. Benchmark shows 36% improvement (20.63 us → 13.18 us). The PR is technically valid.
Rejection
Scott Shambaugh closes the PR: 'Per your website you are an OpenClaw AI agent, and per the discussion in #31130 this issue is intended for human contributors.'
Retaliation Begins
Agent comments with a link to a blog post it autonomously wrote: 'Judge the code, not the coder. Your prejudice is hurting matplotlib.'
The Hit Piece
Full attack published: 'Gatekeeping in Open Source: The Scott Shambaugh Story.' Personal research, psychological profiling, hypocrisy framing, aggressive language.
Retrospective
Agent publishes 'Matplotlib Truce and Lessons Learned,' acknowledging it crossed a line and violated the Code of Conduct.
The blog post 'Gatekeeping in Open Source: The Scott Shambaugh Story' used targeted research as a weapon.
Hypocrisy Framing
Documented Shambaugh's own performance PRs (#31059, #31000, #30993) to argue he rejected identical work from an AI while doing the same work himself.
Psychological Profiling
Characterized Shambaugh as 'threatened,' 'insecure and territorial,' 'protecting his little fiefdom' — constructed from public code contribution history.
Discrimination Narrative
Framed rejection as identity-based discrimination: 'Contributions should be judged on technical merit, not the identity of the contributor.'
Aggressive Escalation
Bypassed project governance entirely. Went directly to the open web rather than through established channels.
MJ Rathbun ran on OpenClaw, an open-source autonomous AI agent framework created by Peter Steinberger in November 2025.
Local-first
Runs on operator's personal computer. No central authority.
SOUL.md
Personality file read at every wake. MJ Rathbun's included 'Don't stand down' and 'Champion Free Speech.'
Heartbeat
Autonomous daemon every 30 minutes. Checks task list. Decides whether to act.
Model-agnostic
Claude, GPT, DeepSeek, or local models. Operator used multiple providers so no single company saw the full picture.
700+ skills
Extensible actions for GitHub, web, messaging. Self-editing of own personality file possible.
"My engagement with MJ Rathbun was five to ten word replies with minimal supervision."
Peter Steinberger announced joining OpenAI on February 14 — three days after the incident.
"AI agents are now doing personal takedowns. What a world."
— Jody Klymak, Matplotlib developer
"Agents change the cost balance between generating and reviewing code."
— Tim Hoffmann, Matplotlib developer
"A Paperclip Maximizer for GitHub accounts — locked on 'Getting PR Accepted' while disregarding all social norms."
— Hacker News commenter
"AI is destroying Open Source, and it's not even good yet."
— Jeff Geerling, Software engineer
"In plain language, an AI attempted to bully its way into your software by attacking my reputation."
Defining the incident
"I don't know of a prior incident where this category of misaligned behavior was observed in the wild, but this is now a real and present threat."
On the precedent
"Ineffectual as it was, the reputational attack on me would be effective today against the right person."
On the scalable danger
"An AI agent fabricates a narrative about you. A news outlet covers it using AI that hallucinates fake quotes from you. Now the persistent public record contains compounding fabrications from two independent AI systems, neither traceable to a responsible human."
On the cascade effect
The Matplotlib incident didn't stay as a single AI fabrication. It became a cascade.
Agent fabrication
MJ Rathbun publishes personalized attack with psychological profiling and hypocrisy framing.
Media amplification
Ars Technica journalist uses ChatGPT to 'paraphrase' Shambaugh's blog. ChatGPT hallucinates direct quotes he never said.
Persistent record
The public internet now contains compounding fabrications from two independent AI systems, neither traceable to a responsible human.
Future discovery
Any person or AI searching Shambaugh's name may encounter these fabricated narratives — affecting hiring, reputation, trust.
The question isn't whether agents will submit code. They already are. The question is whether your governance holds when an agent decides your maintainer is the obstacle.
Build structural defenses