Hi Patrick,
Can the gerrit merge emails include the reviewers/commiter ID?
Gerrit (or the hook?) prevents pushing a new patch without the signoff of the person pushing except when a patch is already signed off in gerrit. If a patch is cherrypicked from gerrit and pushed again, it doesn't need a new signoff. I think that anyone that pushes a change should add a signoff. It might help prevent the unintentional push.
Marc