enrich AccessControl4Vars
with
axioms
policy-respects-observe : ⊦ d ⇒ d0 → (∀ nam. usedName(nam) ∧ observe(nam, d) → observe(nam, d0));
comment: only needed for the transitive case;
policy-is-reflexive : ⊦ d ⇒ d;
comment: needed for observe-names lemma.;
end enrich