Elton interface should check for positivity of natural numbers

[robsimmons]

Asserting or querying with a negative IntInf.int should raise Domain in the public interface that Elton generates.