bound QuickCheck