@cstross @davidgerard The practical leftover is still useful: treat the generated diff as untrusted input. Read it the way you would a patch from a stranger, and don't merge it until someone on the team can explain what it changes.