Function lemma_u16_be_value_roundtrip 

pub broadcast proof fn lemma_u16_be_value_roundtrip(o: u16)

ensures

#[trigger] u16_be_from_bytes(u16_be_to_bytes(o)) == o,