The invariant holds in every reachable state.
Theorem: signer-records-p-when-reachable
(defthm signer-records-p-when-reachable (implies (system-state-reachablep systate) (signer-records-p systate)))