Assign negative weights to people who submit damaging pull requests?
Insert a layer of expert representatives (akin to congresspersons) to generate the PRs?
Making the system resilient doesn't sound like anything more than another engineering problem to me.
