Designing loop: the loop invariant