theorem
  0 <= a & 0 <= b & a+b = 0 implies a = 0;
