Minor corrections to correctness proof in readme