Proof using name_map_bijective multi_map_congr msg_map.
apply functional_extensionality => n.
by rewrite tot_init_handlers_eq tot_map_name_inverse_inv.
Qed.

(* Specifications: *)
Lemma tot_map_trace_occ_inv :
forall tr n ol,
map tot_map_trace_occ tr = [(n, inr ol)] ->
exists n', exists lo, tr = [(n', inr lo)] /\ tot_map_name n' = n /\ map tot_map_output lo = ol.