[markeganfuller]

Maybe that should be the default. It does a dry run and if you're sure you add --do or something.

[cjh_]

It could have a simple 'are you sure y/n' prompt, and you could then have a git config setting to disable this.