preconditions should be append only, right?