@Requires seems to ignore invariants. Pre-state is modified automatically without any apparent reason