Add symbolic coverage of value flow

Fixes #48