Also assert if size_t is smaller than uint32_t (probably not necessary) Note: 32bit builds will crash OOM if a really large model is loaded, as cannot allocate that much in total, let alone contiguously.