Model: safety checking against merging a number