3.4 Safety and liveness