Fixpoint safeN (n : nat) (c : C) (m : M) : Prop :=
  match n with
    | O => True
    | S n' =>
      match halted sem c with
        | None =>
          exists c', exists m',
            corestep sem ge c m c' m' /\
            safeN n' c' m'
        | Some i => True
      end
  end.

Lemma safe_corestepN_forward c m c' m' n n0 : corestep_fun sem -> corestepN sem ge n0 c m c' m' -> safeN (n + S n0) c m -> safeN n c' m'.