Fix many of the proofs in Spec.v