Local rely-guarantee reasoning