fn trust_sites() -> usize
external_body attributes and assume( calls in the verified crates (Kani’s input bounds, kani::assume, are not trust).
external_body
assume(
kani::assume