At: strong safety implies safety E:EventStruct, P:TraceProperty(E). R_strong_safety(E) preserves P safetyR(E) preserves P By: Unfolds [`trace_property`;`preserved_by`;`R_strong_safety`;`R_safety`] 0
THEN
Reduce 0
THEN
ExRepD
THEN
Using [`x',x] BackThruSomeHyp Generated subgoal: