Status: IN
PBFT view changes maintain both safety (requiring 2f+1 messages before acting) and liveness (carrying prepared-but-uncommitted requests into the new view), matching the theoretical protocol guarantees.
Two independent observations confirm that the implementation correctly handles both halves of the view-change correctness argument
Depends on (SL): pbft-view-change-preserves-prepared-requests, view-change-requires-2f-plus-1