Move a note about the order of arguments to NoteCommit^Orchard to a more

relevant place.

Signed-off-by: Daira Emma Hopwood <daira@jacaranda.org>

protocol/protocol.tex

@@ -10347,6 +10347,11 @@ instantiated as follows using $\SinsemillaCommitAlg$:
   \item $\NoteCommitGenTrapdoor{Orchard}()$ generates the uniform distribution on $\GF{\ParamP{r}}$.
 \end{formulae}
 
+\vspace{-2ex}
+\pnote{The arguments to $\NoteCommitAlg{Orchard}$ are the same order as their encodings in
+the input to $\SinsemillaCommit{}$; this is different to $\NoteCommitAlg{Sapling}$.}
+
+\vspace{1ex}
 The \commitmentScheme $\CommitIvkAlg$ specified in \crossref{abstractcommit} is
 instantiated as follows using $\SinsemillaShortCommitAlg$:
 
@@ -10359,7 +10364,6 @@ instantiated as follows using $\SinsemillaShortCommitAlg$:
   \item $\CommitIvkGenTrapdoor()$ generates the uniform distribution on $\GF{\ParamP{r}}$.
 \end{formulae}
 
-\vspace{-1ex}
 \begin{securityrequirements}
   \item $\SinsemillaCommitAlg$ and $\SinsemillaShortCommitAlg$, and hence
         $\NoteCommitAlg{Orchard}$ and $\CommitIvkAlg$, must be computationally \binding
@@ -10367,12 +10371,7 @@ instantiated as follows using $\SinsemillaShortCommitAlg$:
         \hiding \commitmentSchemes provided that no $\bot$ output is observed.
 \end{securityrequirements}
 
-\vspace{-1ex}
-\pnote{
-The arguments to $\NoteCommitAlg{Orchard}$ are the same order as their encodings in
-the input to $\SinsemillaCommit{}$; this is different to $\NoteCommitAlg{Sapling}$.
-} %pnote
-
+\vspace{-2ex}
 \introlist
 \theoremlabel{thmuncommittedorchard}
 \begin{theorem}[$\Uncommitted{Orchard}$ is not in the range of $\,\NoteCommitAlg{Orchard}$]\end{theorem}