pub broadcast proof fn lemma_i32_be_value_roundtrip(o: i32)
#[trigger] i32_be_from_bytes(i32_be_to_bytes(o)) == o,