code for invariants to avoid null check insanity blog post