theorem
  'not' (a 'nand' b) = a '&' b
proof
  'not' (a 'nand' b) = 'not' 'not' (a '&' b) by th1;
  hence thesis;
end;
