Would it be possible to come up with a super-majority of witnesses to stonewall code changes larger than realistically auditable and testable? You've already stated your support for third-party review and testing, they could be the ones to specify acceptable limits.