No call to next_state if postcondition returns false

In execution phase:

command execution loop
1 - check precondition
2 - evaluate the command
3 - check postcondition
4 - run next_state only if postcondition returned 'true'