This was clarified in the spec for OpAccessChain, indexes are signed counts. Not sure if other passes also need updated.