add a defensive assertion