Proof using rmri tsi glemi lphogli glci miaei lalcii rlmli smspi si rri.
intros.
apply lower_prop; intros; eauto.
apply msg_lower_prop with (P := fun net => _ (deghost net)); intros; auto.
find_apply_lem_hyp everything_invariant.
unfold everything in *. intuition.
auto using maxIndex_sanity_lower.
Qed.

(* Specifications: *)
Theorem commit_recorded_committed_invariant :
forall net,
refined_raft_intermediate_reachable net ->
commit_recorded_committed net.