Function lemma_u16_allones_bit_it_set 

pub broadcast proof fn lemma_u16_allones_bit_it_set(k: int)

requires

0 <= k < 16,

ensures

u16_bit_is_set(!0u16, k),

Every bit of the all-ones word is set.