Invariants are cheap. Silent corruption is not.

We had five numbers that were supposed to add up. Nothing in the codebase checked that they did. ...