PPE: workaround clang-analyzer warnings

Reviewer: trivial

Add assertions to tell Clang that getting the field will always succeed
because we checked for its existence earlier.