Do not allow upgradeTo(0, ...)
Enforce non-ascending revision numbers of releases
Enfore correct offset range for downgrades and upgrades between two releases
Enfore upgrade offset greater than 0
Enforce non-negative downgrade offset