This change mostly replaces explicit if/then/glog.Fatalf calls with util.Assert calls. In addition, it adds a companion util.Fail family of methods that does the same thing as a failed assertion, except that it is unconditional.