(** As a corollary, if [c_program] is free of undefined behaviors, the behavior of [asm_program] is one of the possible behaviors of [c_program]. *)

Theorem separate_transf_c_program_is_refinement:
(forall beh, program_behaves (Csem.semantics c_program) beh -> not_wrong beh) ->
(forall beh, program_behaves (Asm.semantics asm_program) beh -> program_behaves (Csem.semantics c_program) beh).