Yes, that's exactly the sort of thing I had in mind. You may want to experiment with other values of CHECK, to see which fits your repair strategy best.

As for losing data, just be sure not to overwrite the original stuff. Encode should not modify its object string without documenting that.

On a different plane, it would be a good thing to yell at whoever is supplying invalid utf8.