should we generalize that to “none of the methods on Publisher/Subscription/Subscriber are allowed to throw non-fatal exceptions; failure is signaled exclusively via the onError callback” (where there should be a footnote declaring VirtualMachineError (sans StackOverflowException), ThreadDeath, InterruptedException, LinkageError, NotImplementedError as “fatal”)