clarify restrictions on singletons
proof -> proving