Adam Klein (2014-10-27T13:38:36.000Z)
d at domenic.me (2014-11-05T10:15:51.306Z)
For what it's worth, given that there exists one implementation (IE 11) that gets this right per spec, I'm more inclined as an implementor to match that than to try to get the spec changed here. I think Allen and Domenic answered my question about why this isn't a precondition when they pointed out that ToLength() is now greater than the max array length.