pub broadcast proof fn lemma_i16_be_value_roundtrip(o: i16)
#[trigger] i16_be_from_bytes(i16_be_to_bytes(o)) == o,