I’ll note this need to audit runtime upgrade code is potentially addressed by this RFP (under review) - if it is able to be implemented in Substrate…
There may be features, related to this use case, that should be added to this RFP?