pub broadcast proof fn lemma_u32_is_pow2_is_ilog2_pow2(x: u32)
#[trigger] is_pow2(x as int),
x as nat == pow2(x.ilog2() as nat),