The best way to be safe is to fail loud and clear, and definitely do not surprise your users who only use the api and don’t actually read the source code or how it is implemented.