On the governance angle, one of the most effective moves we could make is already underway (hat tip to @tchambers): the @activitypubtestsuite: https://docs.google.com/document/d/1l46VNMY_ULZmf0lGPKJ86a_umHqGv--WA0fynVjQaRQ/edit
Establishing robust test-suites to define common protocols is a time-tested method within the #OSS world for preventing things like #EEE. This is used, among other things, for the Java language and JVM specs, the major implementations of which are controlled by corporations. It is a part of keeping them open.