theorem
  'not' (x 'nand' y) = x '&' y;
