no contract test can prevent that, really. That’s where defensive programming comes in (and related techniques) - always assume the worst.