Text this: Verification of forward simulations with thread-local, step-local proof obligations.