abstraction slightly modified; started proof for deadlocking