app case of safety lemma

some TODOs that seem more or less straightforward.