[xena]

An easy fix for GitHub is to clearly mark which PRs and comments are done via the web vs the API. This will let people at least have some idea.

[Wowfunhappy]

...but, like, why even offer an API at that point? Now every API-initiated PR is going to be suspect. And this will only work until the bots figure out the internal API or use the website directly.

[truelson]

Uh... i think Graphite (yay, stacking!) uses the API pretty heavily.