Function lemma_u16_le_bytes_roundtrip 

pub broadcast proof fn lemma_u16_le_bytes_roundtrip(i: [u8; 2])

ensures

#[trigger] u16_le_to_bytes(u16_le_from_bytes(i)) == i,