This invariant should be changed to a tassert since it is only an error in the context of a single command. The server as a whole can/should continue healthy execution even when it's hit.