Expansion Contract Invariant Method cim Boiler plate invariant method Jonathan de Halleux
System.Diagnostics.Contracts condition boolean precondition false