quickcheck-like property testing