pub broadcast proof fn axiom_btree_set_decreases<Key, A: Allocator + Clone>(m: BTreeSet<Key, A>)
#[trigger] (decreases_to!(m => m @)),