Status: IN
The event causality graph maintains correctness through two complementary invariants: acyclicity by construction (preventing infinite traversal in reachability checks) and identity-based comparison (preventing conflation of structurally-equal but distinct events).
Either invariant alone is insufficient — cycles would break traversal even with identity checks, and equality-based matching would conflate events even in a DAG
Depends on (SL): event-graph-acyclicity-by-construction, reaches-uses-identity-not-equality