Ensure error on negative input