Assert for out-of-bounds subspans instead of throwing

Assert for out-of-bounds subspans instead of throwing #700