Proof using mili rri.
intros.
pose proof lift_prop _ match_index_leader_invariant _ ltac:(eauto) leader.
find_rewrite_lem deghost_spec. concludes. auto.
Qed.

(* Specifications: *)
Lemma lifted_match_index_sanity :
forall net leader h,
refined_raft_intermediate_reachable net ->
type (snd (nwState net leader)) = Leader ->
assoc_default name_eq_dec (matchIndex (snd (nwState net leader))) h 0 <=
maxIndex (log (snd (nwState net leader))).