Ensure usage from correct logic will never panic: use `Result` where appropriate, otherwise document correct usage

This will make it possible to guarantee panic-free codepaths.

Optionally, we might expose ways to record, read, that can panic but do not require the `Result` syntactic overhead.