You need to distinguish safety properties from liveness properties.