I think PRs is pretty good, IF

1. you sample a few to see that they are actually meaningful,

2. they go to prod and are validated without having to roll back.

Still needs to be managed. But it should be much easier for a manager to catch an engineer gaming PRs than something like AI use or lines of code.