If each modification to the design is approved using a multi-key process (this is practical, I've done this in financial trading environments), I don't see how this would go through.
With a financial trading environment, it should be easy to tell whether the approved plan is what got executed. How would you audit the chip manufacturer to ensure that they're using the design you approved?
The design as presented to the fab is usually "GDSII" format, which is a huge list of polygons on various layers.
Manufacturing companies usually have to run this through preprocessing in order to make the interference lithography work properly. In the end, they produce a bunch of IC masks, and it's always possible to ""manually"" (with expensive tools) cut another hole in the mask.