Having seen how quality processes work, it's really not a substitute for competent oversight. You can have a crap design and get all the paperwork is completely 100% in order, in fact the paperwork then makes it a lot more time consuming and expensive to fix the design!
You have no ideea.
It's sooo extremely easy to fake everything! I'm working with ISO15189 right now. I could just fill paperwork saying I did things that I didn't really do. Nobody could tell the difference. Sometimes there's an audit. It's announced months in advance and they only just look at the paperwork. I'm the only one here that knows the analysers have trace logs and how do get/print them. Some of those logs are just CSV text files. I could fake those too.
According to ISO, the company should do an audit every year. Last one was 3 years ago, but I'm certain that someone wrote down every year that they did it.
Don't be so confident that falsification can be spotted. It usually can't. Or require very time-consuming cross-checks that I never saw happen in my entire 20y career, such as comparing the number times an internal control was run vs. the quantity of consumables used in the process that were bought.
In case of Boeing, the other problem is... who's going to look before the plane crashes?
Paperwork should be regularly audited and discrepancies investigated. The other nice thing about fear is that it should be very specific - people should know exactly what they have to do to not feel it.
The consequences part that I mentioned is where it's at, if one wanted to design a functioning system.
If there's an incident and the investigation reveals an engineer signed off on something that was contrary to process, they lose their license and get to switch careers to something else.
If it turns out management pushed the engineer to do that, personal liability on management means they get to do some long jail time.
With those two enforcement points, you cut out nearly all the cheating.
Oh, of course it'll never happen. I'm just responding to the thread that if a government actually wanted to create an effective quality mechanism, it's possible.
I should add that the regulator will be to the letter. I was told a case where the company followed the test form a spec from standard x, but standard x was superseded twice. The latest spec and standard x, the testing was exactly the same but because the company had done the testing against x and not the latest they had to redo all the work. Regulator would not shift or give dispensation on passing it.
You're correct in that the FAA can't (or at least, it would be wildly impractical) have a staff of in-house experts that equal or exceed the experience of the manufacturer engineers on every possible topic.
But, that's not necessary to enforce a process of quality. It can be done by enforcing that the company must establish and document the processes to ensure quality, including which experts need to sign off on what. Then the FAA needs to hold the engineers who sign off professionally responsible and their managment legally liable if any circumvention is discovered down the line.