I'll patch via stdin, dry-run first to validate, then apply.