verifiable thread safety