documentation: when to BUG(), and when to not BUG()