Proof using cci vci cei rri.
intros net H.
pattern net.
apply lower_prop; auto.
clear H net.
intros.
repeat match goal with
| [ H : _ |- _ ] => rewrite deghost_spec in H
end.
eapply candidate_entries_lowered_rvr';
eauto using candidate_entries_invariant, votes_correct_invariant, cronies_correct_invariant.
Qed.

(* Specifications: *)
Lemma candidate_entries_lowered_nw' :
forall net,
CandidateEntries net ->
votes_correct net ->
cronies_correct net ->
forall h p e t li pli plt es lc,
pBody p = AppendEntries t li pli plt es lc ->
In p (nwPackets (deghost net)) ->
In e es ->
CandidateEntriesLowered (deghost net) e h.