What is the mechanism to hold the contributor responsible after the merge?

Especially the contributor that would otherwise lie about their usage if it was outright banned.