pub broadcast proof fn lemma_u64_be_bytes_roundtrip(i: [u8; 8])
#[trigger] u64_be_to_bytes(u64_be_from_bytes(i)) == i,