Design by contract style assertions for Rust