After a review by Eli, and discovery of a few less-often-used primitives like file-system-info that should also signal non-tame errors, I installed the attached into master and am closing the bug report.