I don't see how to apply this to my medium-sized project - this is essentially a whitelist of all contributors, which is the same as a collaborators feature in github. How would an entirely new contributor get a contribution in?

This is perhaps good for massive projects like curl which are tired of AI slop.