have you checked splassert() in openbsd?   i like it better than
	mandating comments, as we can check violation at runtime (if enabled,
	of course).

itojun


itojun[starfruit:~/OpenBSD/src/sys/kern] grep splassert *
kern_malloc_debug.c:    splassert(IPL_VM);
kern_synch.c:   splassert(IPL_STATCLOCK);
kern_sysctl.c:          splassert(IPL_NET);
kern_sysctl.c:              &splassert_ctl));
subr_prf.c:int splassert_ctl = 0;
subr_prf.c:splassert_fail(int wantipl, int haveipl, const char *func)
subr_prf.c:     printf("splassert: %s: want %d have %d\n", func, wantipl, haveipl);
subr_prf.c:     switch (splassert_ctl) {
tty.c:  splassert(IPL_TTY);
tty.c:  splassert(IPL_TTY);
uipc_socket.c:  splassert(IPL_SOFTNET);
uipc_socket.c:  splassert(IPL_SOFTNET);
uipc_socket2.c: splassert(IPL_SOFTNET);
vfs_bio.c:      splassert(IPL_BIO);
vfs_bio.c:      splassert(IPL_BIO);
vfs_bio.c:      splassert(IPL_BIO);
vfs_cluster.c:  splassert(IPL_BIO);
vfs_subr.c:     splassert(IPL_BIO);
vfs_subr.c:     splassert(IPL_BIO);
vfs_subr.c:     splassert(IPL_BIO);
vfs_subr.c:     splassert(IPL_BIO);
vfs_subr.c:     splassert(IPL_BIO);
vfs_subr.c:     splassert(IPL_BIO);