The invariant holds in every reachable state.
Theorem: dag-previous-quorum-p-when-reachable
(defthm dag-previous-quorum-p-when-reachable (implies (and (system-state-reachablep systate) (system-committees-fault-tolerant-p systate)) (dag-previous-quorum-p systate)))