Expressing preconditions with invariants of parameter types