Function calls: checks on sub-requires, assumes on sub-ensures.