reduces # of cases where Rop succesfully runs
on invalid input
complete safety would require use of Assert op
which disrupts optimizations, so not done for now