Same idea as a patch proposed by ezyang but with somewhat less
infrastructure needed. We just use individual asserts for each part of
the invariant, so the assert source location tells us which part was
violated. Hopefully call stacks can also tell us in which function the
invariant was checked.