Turns out we passed the wrong bounds to the PaintingContext constructor.

Fix, and assert that we don't do that again.