FYI, what Karoly proposes is exactly how the Mozilla project works. Each patch needs a "super review" from a fixed (but large) list of reveiwers. See http://www.mozilla.org/hacking/life-cycle.html I think at some point Drupal needs this. Perhaps not yet.