pre
  safety: T.zero -! step  # We must be able to negate `step`, so `T` must be signed
  debug: through?? && first??