But obviously a lot of it remains behind closed doors, but there certainly some of that sort of thing going on.
Some of it also happens indirectly, for example a bank might design an improvement to the Linux kernel but because they want to remain covered by their support contract with say RedHat they might supply to the patch to RedHat and RedHat will then verify it and merge it into their core release and submit it back upstream, but it would have RedHat's name on it rather than the originating bank who might want to remain anonymous.
https://www.openadaptor.org/
But obviously a lot of it remains behind closed doors, but there certainly some of that sort of thing going on.
Some of it also happens indirectly, for example a bank might design an improvement to the Linux kernel but because they want to remain covered by their support contract with say RedHat they might supply to the patch to RedHat and RedHat will then verify it and merge it into their core release and submit it back upstream, but it would have RedHat's name on it rather than the originating bank who might want to remain anonymous.