Finish the Init_safe(E) proofs