invariant stmt