Preservation of the invariant by multiple transitions.
Theorem:
(defthm unequivocal-signed-certs-p-of-events-next (implies (and (events-possiblep events systate) (signer-records-p systate) (no-self-endorsed-p systate) (unequivocal-signed-certs-p systate)) (unequivocal-signed-certs-p (events-next events systate))))