pub open spec fn index_to_frame(index: int) -> Paddr
0 <= index < max_meta_slots(),
{ (index * PAGE_SIZE) as Paddr }