The product also has a separate behavior, U, that uses the buffer manipulated by
M.
The intended policy is that the buffer resource must be valid after M has
modified or created it. This creates an expectation for U that it will be using