theorem
  0 <= a & 0 <= b implies 0 <= a*b;
