The transformation functions can assume, as a precondition, that the source document is valid.
The transformation function guaranties, as a postcondition, that the target document is valid.