Rather than clamping _value on read, we now clamp the value when writing it,
which simplifies reasoning about _value.