ChiaHungDuan wrote: One quick question, why do we need to annotate `REQUIRES` capability here if we already mark it as `ASSERT_CAPABILITY`? https://clang.llvm.org/docs/ThreadSafetyAnalysis.html#assert-capability-and-assert-shared-capability https://github.com/llvm/llvm-project/pull/68072