pub broadcast proof fn lemma_u16_pow2_ilog2_x(e: u32, x: u16)
#[trigger] pow2(e as nat) == x,
#[trigger] x.ilog2() == e,