diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 47449b83..a01e4c5d 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -312,6 +312,8 @@ After the inputs have been selected, the sender can create one or more outputs f
*** If no additional outputs are required, continue to the next ''Bm'' with ''k++''[''' Why not re-use ''tk'' when paying different labels to the same receiver?''' If paying the same entity but to two separate labeled addresses in the same transaction without incrementing ''k'', an outside observer could subtract the two output values and observe that this value is the same as the difference between two published silent payment addresses and learn who the recipient is.]
** Optionally, if the sending wallet implements receiving silent payments, it can create change outputs by sending to its own silent payment address using label ''m = 0'', following the steps above
+All generated outputs MUST be present in the final transaction. If an output ''Pi'' with ''i < k'' is omitted, the receiver will not be able to find outputs ''Pj'' where ''i < j <= k''.
+
=== Receiver ===
==== Key Derivation ====