These asserts are really in-contracts, not internal logic.