Correctness of the circuit.
The equivalence between predicate and specification is proved automatically via the prime fields library rules.
The extension to the circuit is boilerplate.
Theorem:
(defthm boolean-not-pred-to-spec (implies (and (primep prime) (pfield::fep x prime) (pfield::fep y prime) (bitp x)) (equal (boolean-not-pred x y prime) (boolean-not-spec x y prime))))
Theorem:
(defthm boolean-not-circuit-to-spec (implies (and (equal (pfcs::lookup-definition (pfname "boolean_not") defs) (boolean-not-circuit)) (primep prime) (pfield::fep x prime) (pfield::fep y prime) (bitp x)) (equal (pfcs::definition-satp (pfname "boolean_not") defs (list x y) prime) (boolean-not-spec x y prime))))