The invariant holds in every reachable state.
Theorem: last-anchor-voters-p-when-reachable
(defthm last-anchor-voters-p-when-reachable (implies (and (system-state-reachablep systate) (system-committees-fault-tolerant-p systate)) (last-anchor-voters-p systate)))