pub broadcast proof fn lemma_mod_twice(x: int, m: int)
Expand description
requires
m > 0,
ensures
#[trigger] ((x % m) % m) == x % m,

Proof that performing (x % m) % m gives the same result as simply perfoming x % m.