enrich AccessControl with axioms policy-respects-observe : ⊦ d ⇒ d0 → (∀ nam. observe(nam, d) → observe(nam, d0)); comment: only needed for the transitive case; end enrich