The primary correctness concern is that patch understands
the output, ie., the libxdiff + patch brings out right back.
It ought to be fairly easy to script checking every file change
that ever went into a git repository. You won't cover evil
cases that way, but it should provide some assurances that
nothing is too wrong.
M.