add ensures_ for post-conditions on void functions