The two-person rule
Require a second staff member for the riskiest actions.
Under Moderation → Settings, you can require approval for permanent bans and player data edits. The action waits until another staff member with Approve actions that need a second person approves it. Approving runs the action as the requester, with their access checked again.
The owner is exempt, and only the owner can turn the rule off. Requests expire after 24 hours, and approvers get a notification.