So the next question is, what can we do to be sure something works?
- make sure the patch applies
- make sure it passes all the tests
- step through the coding guidelines and review the code
- do functionality testing
- add our sign-off
This is what I had thought QA meant as well - a second set of eyes to make sure that patches aren't going to break things or cause regression.