Add two additional properties that we believe are true:

 - All immediate reverse deps of packges that are currently processing
   are not currently being processed (ie not in the processing set).
 - The failed set is upwards closed, i.e. equal to its rev dep closure