presburger.v: nf_correctness