Seems like there should be some basic review processes in place. Any external dependency/purchase should require sign-off of at least one of only a few decision

Seems like there should be some basic review processes in place. Any external dependency/purchase should require sign-off of at least one of only a few decision makers. This should be very similar to a code review, but seen by CTO, CIO, and CEO (whichever combination is most relevant) so that big unexpected, costly structural changes don't cost long term disfunction and pain.