Assert that IOFacade::DoWork() is only called on main-thread