pub broadcast proof fn axiom_seq_add_len<A>(s1: Seq<A>, s2: Seq<A>)
#[trigger] s1.add(s2).len() == s1.len() + s2.len(),