Replace all assert() w/ ensure() that throw