RawSubst computed the wrong domain (off-by-1)