baton_asio_linux checks at the end of run() whether it's done any work.  In the case of EINTR, it's possible it hasn't.

In this case, I think the simplest fix is to remove the invariant, as there's currently no contract that run() actually does work a user might actually care about and other invariants check the rest of the application logic