QuickCheck checks predicates against Arbitrary input