Add in contract for clamp()

lower bound should not be larger than higher one