The second copy is the one that runs
The same commit trailer is required by the Linux kernel, required by Node.js, and forbidden by Kubernetes. Major projects are now writing their contribution rules down twice — once for people, once for the machine — and nothing checks that the two versions still agree.
Every serious project now keeps two copies of its contribution process, one addressed to contributors that carries the authority and one addressed to agents that carries the effect, and the second copy is a derived artefact whose derivation nothing enforces.