Safety says nothing bad happens; liveness says something good eventually does. Express bounded liveness, prove a round-robin arbiter starvation-free, and state the fairness it rests on.
Part of Hardware Formal Verification on formal.org.