pub open spec fn fresh_vm_io_id<'a>(m: Map<VmIoId, VmIoEntry>) -> VmIoId
{ choose |id: VmIoId| !m.dom().contains(id) }
Picks a VmIoId not currently in m.dom().
VmIoId
m.dom()