Preservation of the invariant by multiple transitions.
Theorem: no-self-endorsed-p-of-events-next
(defthm no-self-endorsed-p-of-events-next (implies (and (events-possiblep events systate) (no-self-endorsed-p systate)) (no-self-endorsed-p (events-next events systate))))