I think this should be `assert dd>=0`