theorem
  WFF c= bool [:NAT,NAT:]
proof
  let a be object;
  assume a in WFF;
  then reconsider H = a as ZF-formula by ZF_LANG:4;
  H c= [:NAT,NAT:];
  hence thesis;
end;
