prove brtree-diff-is-nat