document cross-thread error handling