Imagine you found a bug in your codebase. For the sake of the example, let's say that every 100th uploaded file gets deleted forever. The questions you are pos

Imagine you found a bug in your codebase. For the sake of the example, let's say that every 100th uploaded file gets deleted forever. The questions you are posing are mostly the equivalent of asking "but what if someone was using this feature as their Recycling bin? How will the time spent fixing it fit within the project's budget? And what if the developer who committed that code leaves the company because he doesn't like being told he writes faulty code?" The answer to those questions, of course, is "somehow". And maybe not all hours will be properly budgeted. But any mildly reasonable efforts towards fixing the obvious problem that's causing real harm to your users right now is better than opening a committee to discuss a framework for fixing integrity-related bugs in a proactive manner.