sometimes it's not easily achievable, when code is owned by other team or data comes from external source. I guess forbidding invalid state is the best option,

sometimes it's not easily achievable, when code is owned by other team or data comes from external source. I guess forbidding invalid state is the best option, and checking invariants is viable choice when you can't avoid invalid states