I think that just leaves everyone with an incentive to keep it quiet. A monetary reward for the reporting dev and a fine for the person authorizing the build pu

I think that just leaves everyone with an incentive to keep it quiet. A monetary reward for the reporting dev and a fine for the person authorizing the build puts incentives in the right place, IMO.