admit proof of loop invariant
Merge branch 'master' of github.com:jensgerlach/validation