Thank you very much for clarifying this for me. Now it is abundantly clear how an class invariant failure in _init() should be handled (i.e., through the use of a custom exception).

Michael Goldshteyn