(* strategy : prove allEntries_log as inductive invariant, then
     prove allEntries_leaderLogs inductive from that *)

  Definition no_entries_past_current_term_host_lifted net :=
    forall (h : name) e,
      In e (log (snd (nwState net h))) ->
      eTerm e <= currentTerm (snd (nwState net h)).

(* Specifications: *)
Lemma no_entries_past_current_term_host_lifted_invariant : forall net, refined_raft_intermediate_reachable net -> no_entries_past_current_term_host_lifted net.