reverse loop invariant proved (in simple, without sequence constraints)