pub open spec fn wrapping_add(x: u64, y: u64) -> u64
{ if x + y > <u64>::MAX { (x + y - 0x1_0000_0000_0000_0000) as u64 } else { (x + y) as u64 } }