but we never give functions access to the whole graph, because that would allow them to break out of dependency detection