clamp() is *inclusive*