Open-source foundations that steward widely used software often respond to fears of corporate capture by diversifying board membership: a technical steering committee seat is reserved for each of several sponsoring companies, so that no single firm holds a voting majority. This safeguard addresses one channel of influence, formal control over roadmap votes, but leaves a second, functionally independent channel untouched. Most foundations depend on a small number of full-time maintainers to review contributions, triage security issues and merge code, and in many projects a single sponsoring company employs a majority of these maintainers even when it holds a minority of board seats. Because maintainers exercise day-to-day judgment about which contributions are merged, which are deprioritized and which security disclosures are treated as urgent, a company that controls maintainer time can shape a project's practical direction without ever needing a board majority: it need only ensure that changes favorable to its interests are reviewed promptly while changes favorable to competitors move slowly through the queue, a pattern that rarely triggers a formal board vote at all and therefore never touches the safeguard the diversified board was designed to catch. A foundation that recognizes this distinction can close the gap, but only by pairing board diversification with a second, independent constraint: a rule guaranteeing a minimum share of maintainer hours from companies other than the largest sponsor, enforced by funding that does not route through the dominant sponsor itself. Diversifying the board while leaving maintainer funding concentrated addresses the risk that is easiest to formalize in a governance document without addressing the risk that actually determines a project's day-to-day direction. Only when both channels, formal votes and functional review capacity, are simultaneously constrained does board diversification deliver the independence it is meant to represent; diversifying either channel alone leaves the other available as an unmonitored route to the same influence.