Let negative capacity be a runtime error