Comment by azov

Your code is that contract (unless your tests cover every possible input, which is not practical in most cases).