pub proof fn spec_u64_to_le_bytes_to_open(x: u64)
spec_u64_to_le_bytes(x) == spec_u64_to_le_bytes_open(x),