The details that X-Fade added (developer stats) goes a long way toward improving visibility. We'll never have a perfectly foolproof app QA "firewall" but in this sort of process identifying people circumventing process and then doing as ewan suggests above is IMO good enough.