To make explicit the design problem: the "not found" sentinel is automatically converted to a valid index. That's dangerous.