Proof using.
unfold refined_raft_net_invariant_reboot, allEntries_indices_gt_0.
intros.
repeat find_higher_order_rewrite.
update_destruct_max_simplify; eauto.
match goal with
| [ H : nwState ?net ?h = (?x, _) |- _ ] =>
replace (x) with (fst (nwState net h)) in * by (rewrite H; auto)
end.
eauto.
Qed.

(* Specifications: *)
Lemma allEntries_indices_gt_0_invariant :
forall net,
refined_raft_intermediate_reachable net ->
allEntries_indices_gt_0 net.