This is great.
(I think we don’t have to explicitly scope this to “private or semi-private” processes. While it is true that such issues are usually handled privately, it’d be good to apply this policy even in cases where they aren’t. So the phrasing proposed by Aleksandra works better without additional qualifications.)
Can we take that one sentence and add it somewhere in the top-level governance docs and call it a day?