We agree uncommit is dangerous, but it can't be triggered by accident; people will have to explicitly type uncommit. I have a problem when a regular "bzr push" in the default configuration can change history though.
If you propose that whenever I mean to "bzr uncommit" I have to "bzr disable-append-revision-only", "bzr uncommit", and "bzr reenable-append-revision-only", then I'm going to as for a "bzr really-uncommit" instead! :-)
We agree uncommit is dangerous, but it can't be triggered by accident; people will have to explicitly type uncommit. I have a problem when a regular "bzr push" in the default configuration can change history though.
If you propose that whenever I mean to "bzr uncommit" I have to "bzr disable- append- revision- only", "bzr uncommit", and "bzr reenable- append- revision- only", then I'm going to as for a "bzr really-uncommit" instead! :-)