cardinality and boundary conditions in TDD