> git doesn't check the validity of sha-1 hashes in your commit history.

What, like never? Or just not under specific circumstances?

I sure wouldn't want git to be doing that in every darn operation that traverses the history, like git log.

When receiving packets from another repo though, it would be useful.