doc: invoke() is thread-safe