• 4.6: Loop Invariants