a clean approach: negation type dnf

we will port these insights to the packet set