* we should either

- allow fallible everything (status quo) and document
- or infallible everything (user must UnwrappingAdapter both the CS and SPI)
- or poison the bus on any failure (CS and SPI)