asserting the response has not been committed on modification attempts.

for now, it makes sense.  if at some later point we go to an
all-streaming model, adding certain headers will be allowed