relation2alloy: better error handling