Single-pass merge, all proofs