pub broadcast proof fn lemma_u16_pow2_ilog2(e: u32)Expand description
requires
pow2(e as nat) <= u16::MAX,ensures#[trigger] (pow2(e as nat) as u16).ilog2() == e,