Please use `Ensure` to guard against potential invalid parameters