invariant-inference