- refined the semantic structure (it’s less strict now)
- fixed the semantics of the CheckWithin contract constructor
- formalised the causality; proved the inference rules for conservative causality sound