$\forall$$i$:Id, $L$:IdLnk List, $k$:Knd. @$i$: $k$ sends only links in $L$ $\in$ Dsys