I can say for sure (having worked for big companies) that they don't review everything. Consider something like pulling a new version of LLVM or Boost....