I'm surprised large users don't have a simulate-before-issuing BGP-changes policy given the number of times BGP has bitten people. I imagine the devil would be in the differences between your sim and actual behavior, but it might save a few people a lot of pain.