- The failing assertion is p1.len() == p2.len(), where p1 = (s.len() as usize).ghost_serialize() and p2 = (o.len() as usize).ghost_serialize(). - This is inside the ...

- There are no assumptions in scope about marshalability or equality of ghost_serialize; thus no link between self and other is established. - The trait’s lemma_serialize_injective provides the ...