The invariant holds in every reachable state.
Theorem: unequivocal-signed-certs-p-when-reachable
(defthm unequivocal-signed-certs-p-when-reachable (implies (system-state-reachablep systate) (unequivocal-signed-certs-p systate)))