Transitions for proposal augmentation.
Here we define the system state changes caused by
When a correct validator receives an endorsement from another validator, it records the endorsement, associated with the pending proposal.
This kind of events only makes sense for correct validators.
Faulty validators do not have an explicit internal state in our model,
so there is nothing to record in their internal state.
However, as defined in the transitions for