Arf/pre post conditions