sprinkle a few invariant assertions