cleanup: signed/unsigned comparison