minor corrections in soundness proofs