Core: Verify for null references that may be returned due to concurrent changes or inconsistent cluster state

Should be unnecessary since shardSafe is called? (as opposed to just `shard`)