I just merged and deployed https://gerrit.wikimedia.org/r/#/c/184886/ , which means: A +1 in gerrit.w.o didn't have any technical effect until now. Now it submits the patch for testing. That means if you +1 a patch from a non-whitelisted user that was not yet tested, it will then, just as if recheck was issued. Thus executing the code that you reviewed to not steal secrets or compromise security in other ways.