dao spec: typos and minor adds

doc/src/spec/contract/dao/scheme.md

@@ -270,8 +270,8 @@ commit $T = \t{PedersenCommit}(d.τ, b_τ)$ where $T = ∑_{i ∈ 𝐢} Tᵢ$.
 
 **Yes vote commit**   $V_\t{yes} = \t{PedersenCommit}(ov, b_y)$
 
-**Total vote value commit**   $V = \t{PedersenCommit}(v, bᵥ)$ where
-$V = ∑_{i ∈ 𝐢} i.V$ should also hold.
+**Total vote value commit**   $V_\t{all} = \t{PedersenCommit}(v, bᵥ)$ where
+$V_\t{all} = ∑_{i ∈ 𝐢} i.V$ should also hold.
 
 **Vote option boolean**   enforce $o ∈ \{ 0, 1 \}$.
 
@@ -314,8 +314,9 @@ Attach a proof $πᵢ$ such that the following relations hold:
 
 Exec is the final stage after voting is [Accepted](concepts.md#proposal-states).
 
-It checks the correct voting conditions have been met in accordance with the DAO
-params such as quorum and approval ratio.
+It checks the correct voting conditions have been met in accordance with the
+[DAO params](model.md#dao) such as quorum and approval ratio.
+$V_\t{yes}$ and $V_\t{all}$ are pedersen commits to $v_\t{yes}$ and $v_\t{all}$ respectively.
 
 It also checks that child calls have been attached in accordance with the auth
 calls set inside the proposal. One of these will usually be an auth module
@@ -357,7 +358,7 @@ If $\#C ≠ \#𝒜 $ then exit.
 Otherwise, for each $c ∈ C$ and $a ∈ 𝒜 $, check the function ID of $c$ is $a$.
 
 **Aggregate votes lookup**   using the proposal bulla, fetch the
-aggregated votes from the DB and verify $V_y$ and $V_a$ are set correctly.
+aggregated votes from the DB and verify $V_\t{yes}$ and $V_\t{all}$ are set correctly.
 
 Let there be prover auxiliary witness inputs:
 $$ \begin{aligned}
@@ -379,7 +380,7 @@ where $p.𝒜  = 𝒜 $.
 
 **Yes vote commit**   $V_\t{yes} = \t{PedersenCommit}(v_y, b_y)$
 
-**All vote commit**   $V_\t{yes} = \t{PedersenCommit}(v_a, b_a)$
+**All vote commit**   $V_\t{all} = \t{PedersenCommit}(v_a, b_a)$
 
 **All votes pass quorum**   $Q ≤ v_a$
 
@@ -426,8 +427,13 @@ $$ \begin{aligned}
   \t{AuthCoinAttrs}.\t{SH}^\t{enc} &∈ 𝔽ₚ \\
   \t{AuthCoinAttrs}.\t{UD}^\t{enc} &∈ 𝔽ₚ \\
 \end{aligned} $$
-which corresponds to encrypted coin attributes. This provides verifiable
-note encryption for all output coins in the sibling `Money::transfer()` call.
+which corresponds to encrypted coin attributes.
+In both cases $\t{EPK}$ refers to the ephemeral key used to construct a
+diffie-hellman shared secret. We then derive further blinding factors from this
+shared secret which we use to encrypt the [coin attributes](../money/model.md#coin)
+$v, τ, ζ, \t{SH}, \t{UD}$.
+
+This provides verifiable note encryption for all output coins in the sibling `Money::transfer()` call.
 
 ```rust
 {{#include ../../../../../src/contract/dao/src/model.rs:dao-auth_xfer-params}}