theorem
  b <= a & c <= a implies max(b,c) <= a by Def9;
