emodel: Using EINA_SAFETY instead of assert