loop invariant proof examples - Search