pub broadcast proof fn lemma_u8_pow2_no_overflow(n: nat)
Expand description
requires
0 <= n < <u8>::BITS,
ensures
#[trigger] pow2(n) <= <u8>::MAX,

Proof that 2^n does not overflow u8 for an exponent n.