Falsifiable. Counter-example: s0 = 128 :: SWord8