pub broadcast proof fn axiom_string_borrow(s: &String)
#[trigger] <String as BorrowSpec<str>>::borrow_spec(s)@ == s@,