pub broadcast proof fn lemma_u32_pow2_ilog2(e: u32)Expand description
requires
pow2(e as nat) <= u32::MAX,ensures#[trigger] (pow2(e as nat) as u32).ilog2() == e,