arbitrary instances for Formula;
some tests on Formula (especially w.r.t. De Bruijn indexes)