now the ACC coverage adds a test formula for the invariant if the operation has no predicates