first 0 X nil first s X cons Y cons Y from X cons X 2.2 true NaTT certifiable-1.6