In a class, there are two fields with an invariant (one strictly less than the other), each protected by an AtomicInteger. Is this sufficient for thread safety?