I'd prefer to keep the separation of powers intact (legislature writes/modifies laws, judiciary can strike them down but can't (or isn't supposed to) make up law... the exchange is not that different between development and QA :)

your process seems reasonable though.