working on verification
verification for invariants