pub broadcast proof fn lemma_i32_le_bytes_roundtrip(i: [u8; 4])
#[trigger] i32_le_to_bytes(i32_le_from_bytes(i)) == i,