Tighten up invariants.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>