(** Finally, any property that is preserved by [L.lub] and [transf] and that holds for [L.bot] also holds for the results of the analysis. *)

Axiom fixpoint_invariant:
forall A (code: PTree.t A) successors transf ep ev
(P: L.t -> Prop),
P L.bot ->
(forall x y, P x -> P y -> P (L.lub x y)) ->
(forall pc instr x, code!pc = Some instr -> P x -> P (transf pc x)) ->
P ev ->
forall res pc,
fixpoint code successors transf ep ev = Some res ->
P res!!pc.