Comment by quietusmuris

So the compiler's in the Trusted Base either way and the asserts are just part of the spec surface the user has to get right. Makes sense.