Commit rights are an indication that we trust the person receiving them to know when they need a review vs. when they don’t need a review.
If we don’t trust someone, we need to talk to them first. Perhaps what we need is a system to review/suspend/remove commit rights when someone repeatedly demonstrates that they don’t know when a contribution has been suitably reviewed (which may include no additional review)?