Invariant Proof - part 1