theorem
  f \+\ f = min(f, 1_minus f);
