The code for TUUP is audited freely by the community. If errors are found, users with governance rights may vote on changes that do not directly affect the concept in-practice with the protocol. Changes are then pushed into a new official version, as needed.