pub broadcast proof fn always_double_equality<T>(p: TempPred<T>)
#[trigger] always(always(p)) == always(p),
Double □ can be simplified.
□
□□p == □p