(** We now show that if all executions of [c_program] satisfy a specification, then all executions of [asm_program] also satisfy the specification, provided the specification is of the safety-enforcing kind. *)

(* Specifications: *)
Theorem separate_transf_c_program_preserves_spec:
forall spec,
safety_enforcing_specification spec ->
c_program_satisfies_spec c_program spec ->
asm_program_satisfies_spec asm_program spec.