Member predicate Function::mustPanic

Holds if calling this function always causes a runtime panic.

This predicate is an over-approximation: it may not hold for functions that do cause a runtime panic, but it never holds for functions that do not.