add another loop invariant