carrigan proofs