payload bounds check