pub broadcast proof fn lemma_u8_is_pow2_is_ilog2_pow2(x: u8)
#[trigger] is_pow2(x as int),
x as nat == pow2(x.ilog2() as nat),