recovery: return IndexError on container out-of-bounds access