pub broadcast proof fn lemma_u32_be_bytes_roundtrip(i: [u8; 4])
#[trigger] u32_be_to_bytes(u32_be_from_bytes(i)) == i,