Slightly complicated. I forced toolkit/platform/ShadowDOM to your commit, then loaded Sandbox in IE 10 with the debug queryString. IE threw on that line from your assertion.