Simple Design Rule Check: no multiple drivers

Addresses but does not completely deal with #119.
Elsewhere in the system we've called argumentless, void methods that check system state `verify()`. Not a big deal but it would be nice to be consistent.