pub broadcast proof fn lemma_frame_to_meta_soundness(page: Paddr)Expand description
requires
page % PAGE_SIZE == 0,page < MAX_PADDR,ensures#[trigger] frame_to_meta(page) % META_SLOT_SIZE == 0,FRAME_METADATA_RANGE.start <= frame_to_meta(page)
&& frame_to_meta(page) < FRAME_METADATA_RANGE.start + MAX_NR_PAGES * META_SLOT_SIZE,