regulatory: don't test list before iterating