Establishment of the invariant: the invariant holds in any initial system state.
All the sets of endorsed pairs are initially empty, so the invariant trivially holds.
Theorem:
(defthm no-self-endorsed-p-when-init (implies (system-initp systate) (no-self-endorsed-p systate)))