diff --git a/protocol/protocol.tex b/protocol/protocol.tex
index 7bb66a28..44384057 100644
--- a/protocol/protocol.tex
+++ b/protocol/protocol.tex
@@ -10657,8 +10657,8 @@ The same \quadraticConstraintProgram be used for compression and decompression.
 
 \pnote{
 The point-on-curve check could be omitted if $(u, \varv)$ were already known to be on the curve.
-However, the \Sapling circuit never omits it; this provides a redundant consistency check
-on the elliptic curve arithmetic in some cases.
+However, the \Sapling circuit never omits it \todo{CHECK}; this provides a redundant consistency
+check on the elliptic curve arithmetic in some cases.
 }