I think we should modify Operator interface so that Init could be called at most once. It would have prevented a crash like #44133, but also it is beneficial from the memory allocations stand point (since we often allocate new stuff on Init).

If we do decide to modify the interface, one way to enforce that we follow it is to modify invariantsChecker to call Init multiple times on its input.