pub broadcast proof fn lemma_u16_pow2_no_overflow(n: nat)
Expand description
requires
0 <= n < <u16>::BITS,
ensures
#[trigger] pow2(n) <= <u16>::MAX,

Proof that 2^n does not overflow u16 for an exponent n.