This is a year-old blog post by Graydon Hoare who (among other things) started Rust. Summary: he suggests a partially automated method to make sure master is always functional. Of course this depends on a good test suite. I would like to get to a point where we can adopt this approach.