Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in
← Collections

The OR Formalization Drive

Help us formalize the operations research literature in Lean.

653 completed missions

Missions

201–220 of 653
OpenCompletedAll
🏆Completed
Convex OptimizationFunctional AnalysisOperations Research+1·Captain: mikedeng1

A Three-Operator Splitting Scheme and its Optimization Applications 2: The Objective Rate of the Weighted Ergodic IterateResearch Paper

Motivation

Many problems in signal processing, statistics and machine learning minimise a sum of three convex terms: a smooth data-fit term and two nonsmooth regularisers or constraints, each of which is easy to handle on its own (through its proximal map) but not in combination. Examples are constrained sparse regression, matrix completion with a nuclear-norm penalty and box constraints, and support-vector machines with a norm penalty. Davis and Yin (Set-Valued Var. Anal. 25 (2017)) introduced a three-operator splitting scheme that evaluates each proximal map and the gradient of the smooth term once per iteration and reduces to Douglas–Rachford splitting (Lions and Mercier 1979) and forward–backward splitting as special cases. Section 3 of that paper gives the objective-error rates of the scheme on convex problems. This mission formalizes those rates for general convex problems.

Setting

Let HHH be a real Hilbert space. The problem is

min⁡x∈H  f(x)+g(x)+h(x),(3.1)\min_{x \in H}\; f(x) + g(x) + h(x), \tag{3.1}x∈Hmin​f(x)+g(x)+h(x),(3.1)

where f,g:H→(−∞,+∞]f, g : H \to (-\infty, +\infty]f,g:H→(−∞,+∞] are closed, proper, convex functions (lower semicontinuous, never −∞-\infty−∞, finite somewhere, with convex epigraph) and h:H→Rh : H \to \mathbb Rh:H→R is convex and differentiable with β−1\beta^{-1}β−1-Lipschitz gradient ∇h\nabla h∇h, β>0\beta > 0β>0.

For γ>0\gamma > 0γ>0 the proximal map prox⁡γf(x)\operatorname{prox}_{\gamma f}(x)proxγf​(x) is the unique minimiser of y↦f(y)+12γ∥y−x∥2y \mapsto f(y) + \frac{1}{2\gamma}\|y - x\|^2y↦f(y)+2γ1​∥y−x∥2. Algorithm 2 of the paper picks z0∈Hz^0 \in Hz0∈H and γ∈(0,2β)\gamma \in (0, 2\beta)γ∈(0,2β) and iterates, with relaxation λk≡1\lambda_k \equiv 1λk​≡1,

xgk=prox⁡γg(zk),xfk=prox⁡γf(2xgk−zk−γ∇h(xgk)),zk+1=zk+xfk−xgk.x^k_g = \operatorname{prox}_{\gamma g}(z^k),\qquad x^k_f = \operatorname{prox}_{\gamma f}\big(2x^k_g - z^k - \gamma\nabla h(x^k_g)\big),\qquad z^{k+1} = z^k + x^k_f - x^k_g .xgk​=proxγg​(zk),xfk​=proxγf​(2xgk​−zk−γ∇h(xgk​)),zk+1=zk+xfk​−xgk​.

Equivalently zk+1=Tzkz^{k+1} = T z^kzk+1=Tzk for the three-operator map

Tz=prox⁡γf(2prox⁡γg(z)−z−γ∇h(prox⁡γg(z)))+z−prox⁡γg(z).T z = \operatorname{prox}_{\gamma f}\big(2\operatorname{prox}_{\gamma g}(z) - z - \gamma\nabla h(\operatorname{prox}_{\gamma g}(z))\big) + z - \operatorname{prox}_{\gamma g}(z).Tz=proxγf​(2proxγg​(z)−z−γ∇h(proxγg​(z)))+z−proxγg​(z).

If z∗z^*z∗ is a fixed point of TTT, then x∗=prox⁡γg(z∗)x^* = \operatorname{prox}_{\gamma g}(z^*)x∗=proxγg​(z∗) minimises (3.1). The weighted ergodic iterate is

xˉgk=2(k+1)(k+2)∑i=0k(i+1) xgi,\bar x^k_g = \frac{2}{(k+1)(k+2)}\sum_{i=0}^{k} (i+1)\,x^i_g ,xˉgk​=(k+1)(k+2)2​i=0∑k​(i+1)xgi​,

and xˉfk\bar x^k_fxˉfk​ is defined the same way from (xfi)(x^i_f)(xfi​).

Formalization targets

Goal: Theorem 3.2 (p. 840)

Let z∗z^*z∗ be a fixed point of TTT, x∗=prox⁡γg(z∗)x^* = \operatorname{prox}_{\gamma g}(z^*)x∗=proxγg​(z∗), and suppose fff is LLL-Lipschitz continuous on the closed ball B(x∗,(1+γ/β)∥z0−z∗∥)B\big(x^*, (1+\gamma/\beta)\|z^0 - z^*\|\big)B(x∗,(1+γ/β)∥z0−z∗∥). Then there is a constant CCC, independent of kkk, with

(f+g+h)(xˉgk)−(f+g+h)(x∗)≤Ck+1(k≥0).(f+g+h)(\bar x^k_g) - (f+g+h)(x^*) \le \frac{C}{k+1}\qquad (k \ge 0).(f+g+h)(xˉgk​)−(f+g+h)(x∗)≤k+1C​(k≥0).

The goal asserts the order O(1/(k+1))O(1/(k+1))O(1/(k+1)) and leaves the constant free, so it is not invalidated by a sharper constant.

Milestones

  1. Corollary 2.1, Part 1 (p. 834): ∥zj−z∗∥\|z^j - z^*\|∥zj−z∗∥ is nonincreasing.
  2. Lemma 3.1 (p. 838): xfj,xgj∈B(x∗,(1+γ/β)∥z0−z∗∥)x^j_f, x^j_g \in B\big(x^*, (1+\gamma/\beta)\|z^0 - z^*\|\big)xfj​,xgj​∈B(x∗,(1+γ/β)∥z0−z∗∥) for all jjj.
  3. Eq. (3.2) (p. 839): for all k≥0k \ge 0k≥0,
2γ(f(xfk)+g(xgk)+h(xgk)−(f+g+h)(x∗))≤∥zk−x∗∥2−∥zk+1−x∗∥2−∥zk−zk+1∥2+2γ⟨zk−zk+1,∇h(xgk)⟩.2\gamma\big(f(x^k_f) + g(x^k_g) + h(x^k_g) - (f+g+h)(x^*)\big) \le \|z^k - x^*\|^2 - \|z^{k+1} - x^*\|^2 - \|z^k - z^{k+1}\|^2 + 2\gamma\langle z^k - z^{k+1}, \nabla h(x^k_g)\rangle .2γ(f(xfk​)+g(xgk​)+h(xgk​)−(f+g+h)(x∗))≤∥zk−x∗∥2−∥zk+1−x∗∥2−∥zk−zk+1∥2+2γ⟨zk−zk+1,∇h(xgk​)⟩.
  1. Theorem 3.1 (p. 838): the last-iterate rate (f+g+h)(xgk)−(f+g+h)(x∗)=o(1/k+1)(f+g+h)(x^k_g) - (f+g+h)(x^*) = o\big(1/\sqrt{k+1}\big)(f+g+h)(xgk​)−(f+g+h)(x∗)=o(1/k+1​).
  2. Eq. (2.7) (p. 836), with λk≡1\lambda_k \equiv 1λk​≡1: for γ/(2β)<ε<1\gamma/(2\beta) < \varepsilon < 1γ/(2β)<ε<1,
∑i=k∞∥∇h(xgi)−∇h(x∗)∥2≤∥zk−z∗∥2γ(2β−γ/ε).\sum_{i=k}^\infty \|\nabla h(x^i_g) - \nabla h(x^*)\|^2 \le \frac{\|z^k - z^*\|^2}{\gamma(2\beta - \gamma/\varepsilon)} .i=k∑∞​∥∇h(xgi​)−∇h(x∗)∥2≤γ(2β−γ/ε)∥zk−z∗∥2​.
  1. Eq. (3.4) (p. 840): ∥xˉfk−xˉgk∥≤5∥z0−z∗∥/(k+1)\|\bar x^k_f - \bar x^k_g\| \le 5\|z^0 - z^*\|/(k+1)∥xˉfk​−xˉgk​∥≤5∥z0−z∗∥/(k+1).

Significance

The result. Theorem 3.1 gives the last iterate an objective error of o(1/k+1)o(1/\sqrt{k+1})o(1/k+1​). Theorem 3.2 shows that averaging with linearly increasing weights improves this to O(1/(k+1))O(1/(k+1))O(1/(k+1)), the rate of the standard uniform ergodic average, while putting more weight on recent iterates. The paper notes that this matters when the iterates xgkx^k_gxgk​ are sparse vectors or low-rank matrices and the average should stay close to them. The rates hold under a local Lipschitz condition on one of the two nonsmooth terms only, so ggg may be the indicator function of a constraint set. They therefore cover the constrained applications of Section 4 of the paper.

Formalizing it. The results are proved in the paper. No machine-checked version of this scheme or its rates exists on the platform or, as far as is known, in Mathlib. A formalization produces a checked proof in an arbitrary real Hilbert space with extended-valued f,gf, gf,g. It also produces infrastructure that Mathlib lacks: proximal maps characterised by minimisation, the prox-subgradient inclusion, Fejér monotonicity of an averaged-operator iteration, and a weighted Jensen inequality for extended-valued convex functions. All of these can be reused by other splitting and proximal-gradient missions. The formalization also checks the constants: the last display of the published proof of Theorem 3.2 drops a factor 2γ2\gamma2γ in front of the Lipschitz term, and the printed ball in both theorems is centred at 000 where the proof needs x∗x^*x∗.

Difficulty

The obvious argument sums the one-step inequality (3.2). That controls the objective at the two different points xfkx^k_fxfk​ and xgkx^k_gxgk​, and only f(xfk)f(x^k_f)f(xfk​) appears, never f(xgk)f(x^k_g)f(xgk​). Moving from one point to the other needs the Lipschitz hypothesis on fff, and so it needs every iterate, and every weighted average, to stay in the ball on which that hypothesis holds. For the weighted average there is a further obstacle: the cross term 2γ⟨zk−zk+1,∇h(xgk)⟩2\gamma\langle z^k - z^{k+1}, \nabla h(x^k_g)\rangle2γ⟨zk−zk+1,∇h(xgk​)⟩ does not telescope under the weights (i+1)(i+1)(i+1). Controlling it requires the summability of the gradient differences (2.7), which is inherited from the averagedness analysis of Section 2 and not from convexity alone. Uniform averaging with the same argument does not give the weighted statement, and the weights must not be replaced.

Formalization scope

  • HHH is an arbitrary real Hilbert space (InnerProductSpace ℝ H, CompleteSpace H), not Rn\mathbb R^nRn.
  • f,g:H→f, g : H \tof,g:H→ EReal. They are proper (never ⊥\bot⊥, somewhere ≠⊤\ne \top=⊤), lower semicontinuous, and have a convex epigraph in H×RH \times \mathbb RH×R. h:H→Rh : H \to \mathbb Rh:H→R is convex and differentiable, and Mathlib's gradient h is β−1\beta^{-1}β−1-Lipschitz.
  • Proximal maps are not constructed. A map PPP is assumed to minimise f(y)+∥y−x∥2/(2γ)f(y) + \|y - x\|^2/(2\gamma)f(y)+∥y−x∥2/(2γ) for every xxx. Such a map exists and is unique for closed proper convex fff, so nothing is lost.
  • Algorithm 2 is fixed with λk≡1\lambda_k \equiv 1λk​≡1, the only case of Theorems 3.1 and 3.2. Iterates are indexed from 000. The fixed point z∗z^*z∗ is a hypothesis, Tz∗=z∗T z^* = z^*Tz∗=z∗, and x∗:=prox⁡γg(z∗)x^* := \operatorname{prox}_{\gamma g}(z^*)x∗:=proxγg​(z∗). Assumption 1 of the paper follows from this and is not assumed separately.
  • Ball centre. The theorems print B(0,(1+γ/β)∥z0−z∗∥)B(0, (1+\gamma/\beta)\|z^0 - z^*\|)B(0,(1+γ/β)∥z0−z∗∥). The proofs use Lemma 3.1, whose ball is centred at x∗x^*x∗, so the ball here is centred at x∗x^*x∗. "fff is LLL-Lipschitz on the ball" is stated as: fff is finite on the ball, and its real-valued restriction is LLL-Lipschitz there.
  • O(·) and o(·). O(1/(k+1))O(1/(k+1))O(1/(k+1)) is ∃C∈R, ∀k, (f+g+h)(xˉgk)≤(f+g+h)(x∗)+C/(k+1)\exists C \in \mathbb R,\ \forall k,\ (f+g+h)(\bar x^k_g) \le (f+g+h)(x^*) + C/(k+1)∃C∈R, ∀k, (f+g+h)(xˉgk​)≤(f+g+h)(x∗)+C/(k+1), with CCC chosen after all data. o(1/k+1)o(1/\sqrt{k+1})o(1/k+1​) is k+1 ((f+g+h)(xgk)−(f+g+h)(x∗))→0\sqrt{k+1}\,\big((f+g+h)(x^k_g) - (f+g+h)(x^*)\big) \to 0k+1​((f+g+h)(xgk​)−(f+g+h)(x∗))→0, together with finiteness of the objective values as part of the conclusion. No explicit constant from the proof is stated, because the published constant drops a factor.
  • Corollary 2.1 Part 1 and Eq. (2.7) are stated for Algorithm 2 with λk≡1\lambda_k \equiv 1λk​≡1, γ∈(0,2β)\gamma \in (0, 2\beta)γ∈(0,2β) and ε∈(γ/(2β),1)\varepsilon \in (\gamma/(2\beta), 1)ε∈(γ/(2β),1). As printed, Corollary 2.1's condition on τk\tau_kτk​ excludes λk≡1\lambda_k \equiv 1λk​≡1, but Section 3 uses Part 1 in exactly this case. Summability in (2.7) is part of the conclusion.
  • Trivialization ruled out. Objective values are extended reals, and the goal compares them without subtraction. The value (f+g+h)(x∗)(f+g+h)(x^*)(f+g+h)(x∗) is proved finite as part of the conclusion. So the goal cannot hold through ∞−∞\infty - \infty∞−∞ or through an infinite right-hand side.

Welcome contributions: the prox–subgradient inclusion for EReal-valued convex functions, averagedness and Fejér monotonicity of TTT (the companion mission on Section 2 treats the general operator case), a weighted Jensen inequality in EReal, and proofs of the milestones in the listed order.

Selected references

  • D. Davis and W. Yin, A Three-Operator Splitting Scheme and its Optimization Applications, Set-Valued and Variational Analysis 25 (2017) 829–858. https://doi.org/10.1007/s11228-017-0421-z
  • H. H. Bauschke and P. L. Combettes, Convex Analysis and Monotone Operator Theory in Hilbert Spaces, 2nd ed., Springer, 2017. https://doi.org/10.1007/978-3-319-48311-5
  • P.-L. Lions and B. Mercier, Splitting Algorithms for the Sum of Two Nonlinear Operators, SIAM J. Numer. Anal. 16 (1979) 964–979. https://doi.org/10.1137/0716071
  • D. Davis and W. Yin, Convergence Rate Analysis of Several Splitting Schemes, in Splitting Methods in Communication, Imaging, Science, and Engineering, Springer, 2016. https://doi.org/10.1007/978-3-319-41589-5_4
9 thms2 active usersReviewed
🏆Completed
Control TheoryDynamic ProgrammingOperations Research+1·Captain: mikedeng1

Monotone Mappings with Application in Dynamic Programming I: Compactness Gives Convergence of the DP Algorithm and an Optimal Stationary Policy under Uniform IncreaseResearch Paper

Motivation

Infinite-horizon optimal control problems with nonnegative costs (Strauch's negative dynamic programming, the positive-cost counterpart of Blackwell's positive model) are among the settings where the standard tools of discounted dynamic programming fail: there is no contraction, costs may be infinite, and the value-iteration algorithm started from zero may converge to the wrong limit. Strauch showed in 1966 that under these assumptions the limit of value iteration can lie strictly below the optimal cost (Strauch 1966). Bertsekas (1977) recast the deterministic, stochastic and minimax versions of these problems as one abstract problem about a monotone mapping HHH, and proved Bellman's equation, optimality criteria for stationary policies, and conditions for convergence of the dynamic programming algorithm at that level of generality (Bertsekas 1977). This framework became the basis of the "abstract dynamic programming" theory developed later in Bertsekas and Shreve (1978) and Bertsekas (2013, 2022).

This mission formalizes the part of the paper that works under the uniform increase assumption, culminating in the paper's compactness condition for convergence of value iteration.

Setting

A model consists of a nonempty state space SSS, a control space CCC, for each x∈Sx\in Sx∈S a nonempty constraint set U(x)⊆CU(x)\subseteq CU(x)⊆C, a mapping H:S×C×F→[−∞,+∞]H:S\times C\times F\to[-\infty,+\infty]H:S×C×F→[−∞,+∞], where FFF is the set of functions J:S→[−∞,∞]J:S\to[-\infty,\infty]J:S→[−∞,∞] ordered pointwise, and a terminal function Jˉ∈F\bar J\in FJˉ∈F with Jˉ(x)>−∞\bar J(x)>-\inftyJˉ(x)>−∞. HHH is monotone: J≤J′J\le J'J≤J′ implies H(x,u,J)≤H(x,u,J′)H(x,u,J)\le H(x,u,J')H(x,u,J)≤H(x,u,J′) for u∈U(x)u\in U(x)u∈U(x).

A selector is μ:S→C\mu:S\to Cμ:S→C with μ(x)∈U(x)\mu(x)\in U(x)μ(x)∈U(x); a policy is a sequence π={μ0,μ1,… }\pi=\{\mu_0,\mu_1,\dots\}π={μ0​,μ1​,…} of selectors, and {μ,μ,… }\{\mu,\mu,\dots\}{μ,μ,…} is stationary. Define

Tμ(J)(x)=H(x,μ(x),J),T(J)(x)=inf⁡u∈U(x)H(x,u,J),T_\mu(J)(x)=H(x,\mu(x),J),\qquad T(J)(x)=\inf_{u\in U(x)}H(x,u,J),Tμ​(J)(x)=H(x,μ(x),J),T(J)(x)=u∈U(x)inf​H(x,u,J), Jπ(x)=lim⁡N→∞(Tμ0⋯TμN−1)(Jˉ)(x),J∗(x)=inf⁡πJπ(x),J∞(x)=lim⁡N→∞TN(Jˉ)(x).J_\pi(x)=\lim_{N\to\infty}(T_{\mu_0}\cdots T_{\mu_{N-1}})(\bar J)(x),\qquad J^*(x)=\inf_\pi J_\pi(x),\qquad J_\infty(x)=\lim_{N\to\infty}T^N(\bar J)(x).Jπ​(x)=N→∞lim​(Tμ0​​⋯TμN−1​​)(Jˉ)(x),J∗(x)=πinf​Jπ​(x),J∞​(x)=N→∞lim​TN(Jˉ)(x).

J∗J^*J∗ is the optimal value function and J∞J_\inftyJ∞​ the limit of the dynamic programming algorithm. A policy is optimal if Jπ=J∗J_\pi=J^*Jπ​=J∗.

Assumption I is Jˉ(x)≤H(x,u,Jˉ)\bar J(x)\le H(x,u,\bar J)Jˉ(x)≤H(x,u,Jˉ) for all xxx and u∈U(x)u\in U(x)u∈U(x). Assumption I.1 says that H(x,u,⋅)H(x,u,\cdot)H(x,u,⋅) commutes with limits of nondecreasing sequences above Jˉ\bar JJˉ. Assumption I.2 says there is α>0\alpha>0α>0 with H(x,u,J)≤H(x,u,J+re)≤H(x,u,J)+αrH(x,u,J)\le H(x,u,J+re)\le H(x,u,J)+\alpha rH(x,u,J)≤H(x,u,J+re)≤H(x,u,J)+αr for r>0r>0r>0 and J≥JˉJ\ge\bar JJ≥Jˉ, where e≡1e\equiv1e≡1. For the convergence analysis the paper introduces, for k≥1k\ge1k≥1, the sets Ck={(x,u,λ)∣u∈U(x), H[x,u,Tk−1(Jˉ)]≤λ}C_k=\{(x,u,\lambda)\mid u\in U(x),\ H[x,u,T^{k-1}(\bar J)]\le\lambda\}Ck​={(x,u,λ)∣u∈U(x), H[x,u,Tk−1(Jˉ)]≤λ} with λ\lambdaλ real, their projections P(Ck)P(C_k)P(Ck​) on (x,λ)(x,\lambda)(x,λ) through admissible uuu, and the closure P(Ck)‾\overline{P(C_k)}P(Ck​)​ obtained by adding limits of real sequences λn\lambda_nλn​ at fixed xxx.

Formalization targets

Goal: Proposition 12

Let I, I.1, I.2 hold, let CCC be a Hausdorff topological space, and suppose there is kˉ\bar kkˉ such that Uk(x,λ)={u∈U(x)∣H[x,u,Tk(Jˉ)]≤λ}U_k(x,\lambda)=\{u\in U(x)\mid H[x,u,T^k(\bar J)]\le\lambda\}Uk​(x,λ)={u∈U(x)∣H[x,u,Tk(Jˉ)]≤λ} is compact for every xxx, real λ\lambdaλ and k≥kˉk\ge\bar kk≥kˉ. Then

P(⋂k≥1Ck)=⋂k≥1P(Ck)‾,J∞=T(J∞)=T(J∗)=J∗,P\Bigl(\bigcap_{k\ge1}C_k\Bigr)=\bigcap_{k\ge1}\overline{P(C_k)},\qquad J_\infty=T(J_\infty)=T(J^*)=J^*,P(k≥1⋂​Ck​)=k≥1⋂​P(Ck​)​,J∞​=T(J∞​)=T(J∗)=J∗,

and there exists an optimal stationary policy.

Milestones

In attack order: Proposition 2 (JN=TN(Jˉ)J_N=T^N(\bar J)JN​=TN(Jˉ) for the NNN-stage problem); Proposition 4 (ε\varepsilonε-optimal policies, stationary when α<1\alpha<1α<1); Proposition 5 (Bellman's equation J∗=T(J∗)J^*=T(J^*)J∗=T(J∗) and minimality of J∗J^*J∗ among TTT-excessive functions above Jˉ\bar JJˉ); Corollary 5.1 (the same for JμJ_\muJμ​); Proposition 7 ({μ∗,μ∗,… }\{\mu^*,\mu^*,\dots\}{μ∗,μ∗,…} is optimal iff Tμ∗(J∗)=T(J∗)T_{\mu^*}(J^*)=T(J^*)Tμ∗​(J∗)=T(J∗)); Proposition 10 (J∞≤T(J∞)≤T(J∗)=J∗J_\infty\le T(J_\infty)\le T(J^*)=J^*J∞​≤T(J∞​)≤T(J∗)=J∗, with equality throughout iff J∞=T(J∞)J_\infty=T(J_\infty)J∞​=T(J∞​)); Lemma 2 (P(Ck)‾=E[Tk(Jˉ)]\overline{P(C_k)}=E[T^k(\bar J)]P(Ck​)​=E[Tk(Jˉ)], the epigraph); Proposition 11 (convergence of value iteration is equivalent to interchanging projection and intersection); Lemma 3 (a function with compact real sublevel sets attains its minimum).

Significance

The result. Proposition 12 gives a checkable condition, compactness of sublevel sets of the one-stage costs, under which value iteration started at Jˉ\bar JJˉ converges to the optimal cost and an optimal stationary policy exists, in any model covered by the abstract framework: deterministic and stochastic control with nonnegative costs, minimax control, and problems with state constraints encoded by infinite costs. Without such a condition the algorithm can stall below J∗J^*J∗ even in one-dimensional deterministic problems. Propositions 5 and 7 are the abstract form of the classical Bellman equation and optimality criterion for positive-cost problems.

Formalizing it. The results are proved in the paper. The platform's existing dynamic programming results are finite-state, real-valued and contraction-based; none covers extended-real costs, general state spaces, or the uniform increase regime. This mission would produce a machine-checked abstract DP layer over EReal in which the Bellman equation, the stationary-policy criterion and the convergence conditions are proved once for every model satisfying the assumptions. No machine-checked proof of these results is known.

Difficulty

The obvious argument for J∞=J∗J_\infty=J^*J∞​=J∗ interchanges a limit in NNN with an infimum over policies. Under Assumption I the iterates increase, and a limit of infima of an increasing family can be strictly smaller than the infimum of the limits; the paper's own example in Section 1 shows it. Monotone convergence arguments therefore do not apply. The paper converts the interchange into a statement about projections of the sets CkC_kCk​ and closes the gap with a compactness argument, which requires handling infinite values carefully: epigraphs are taken over real λ\lambdaλ only, and states where the value is +∞+\infty+∞ are treated separately. Proposition 4, on which Bellman's equation rests, needs a selection of nearly optimal policies state by state and a geometric control of the errors through I.2.

Formalization scope

Functions in FFF are S → EReal. Policies are sequences ℕ → Selector, where a selector is a function with μ(x)∈U(x)\mu(x)\in U(x)μ(x)∈U(x) for all xxx. The composition Tμ0⋯TμN−1T_{\mu_0}\cdots T_{\mu_{N-1}}Tμ0​​⋯TμN−1​​ applies TμN−1T_{\mu_{N-1}}TμN−1​​ first. JπJ_\piJπ​ and J∞J_\inftyJ∞​ are limUnder atTop of their defining sequences. Every statement assumes Assumption I, under which these sequences are nondecreasing and the limits exist. TTT takes the infimum over U(x)U(x)U(x) only and J∗J^*J∗ over admissible policies only. Both SSS and each U(x)U(x)U(x) are nonempty. λ\lambdaλ ranges over R\mathbb RR, and the closure  ⋅ ‾\overline{\,\cdot\,}⋅ is the sequential closure in λ\lambdaλ at fixed xxx, not a topological closure on S×RS\times\mathbb RS×R. The sets CkC_kCk​ are used only for k≥1k\ge1k≥1. I.2 is parameterized by its scalar α\alphaα. Proposition 4's second part refers to the α\alphaα for which I.2 is assumed.

Repairs of the page. Lemma 3 is false as printed. On N\mathbb NN with the cofinite topology every subset is compact, yet f(n)=−nf(n)=-nf(n)=−n has no minimum. It also fails for U=∅U=\emptysetU=∅. The mission states Lemma 3 for a Hausdorff space CCC and nonempty UUU, and Proposition 12 for a Hausdorff control space. Proposition 12 is also false as printed: with S={0}S=\{0\}S={0}, C=U(0)=NC=U(0)=\mathbb NC=U(0)=N cofinite, Jˉ(0)=0\bar J(0)=0Jˉ(0)=0 and H(0,u,J)=J(0)+1/(u+1)H(0,u,J)=J(0)+1/(u+1)H(0,u,J)=J(0)+1/(u+1), all hypotheses hold but no stationary policy is optimal and (70) fails. Proposition 11(b)'s parenthetical "(equivalently there exists an optimal stationary policy)" holds only together with J∞=J∗J_\infty=J^*J∞​=J∗ (the paper cites an example with an optimal stationary policy and J∞≠J∗J_\infty\neq J^*J∞​=J∗). It is stated in that joint form, never as an equivalence between condition (68) and the bare existence of an optimal stationary policy.

Trivializing readings ruled out. An empty constraint set would make T≡+∞T\equiv+\inftyT≡+∞ and the policy set empty, so every Bellman identity would hold trivially. The model therefore requires U(x)≠∅U(x)\neq\emptysetU(x)=∅. The goal's three conclusions, (70), the chain of equalities and the optimal stationary policy, are all required, so a formalization that states only one of them is not the goal.

Needed infrastructure: monotone limits in EReal, infima over sets, and compactness in Hausdorff spaces (Mathlib's Cantor intersection theorem). The definitions (model, assumptions, epigraph sets) can be reused for the companion mission under Assumption D and for later abstract DP developments. Proofs of any milestone are welcome, as are reusable lemmas on monotone EReal sequences.

Selected references

  • D. P. Bertsekas, Monotone Mappings with Application in Dynamic Programming, SIAM J. Control Optim. 15(3), 438–464, 1977. https://doi.org/10.1137/0315031
  • R. E. Strauch, Negative Dynamic Programming, Ann. Math. Statist. 37(4), 871–890, 1966. https://doi.org/10.1214/aoms/1177699369
  • D. P. Bertsekas and S. E. Shreve, Stochastic Optimal Control: The Discrete-Time Case, Academic Press, 1978. http://web.mit.edu/dimitrib/www/soc.html
  • D. P. Bertsekas, Abstract Dynamic Programming, 3rd ed., Athena Scientific, 2022. http://web.mit.edu/dimitrib/www/abstractdp.html
13 thms4 active usersReviewed
🏆Completed
Convex OptimizationFunctional AnalysisOperations Research+1·Captain: mikedeng1

A Three-Operator Splitting Scheme and its Optimization Applications 3: Accelerated Convergence under Strong MonotonicityResearch Paper

Motivation

Many problems in convex optimization, variational inequalities and signal processing reduce to finding a zero of a sum of three monotone operators, one of which is single-valued and smooth. Davis and Yin (Set-Valued Var. Anal. 25, 2017) introduced a splitting scheme that evaluates each of the three operators separately: the two set-valued ones through their resolvents, the single-valued one through a forward step. With a fixed stepsize, their Algorithm 1 converges weakly but can be slow: the paper's Section 3.4 constructs examples where the squared distance of the iterates to the solution decays no faster than (k+1)−(1+ϵ)(k+1)^{-(1+\epsilon)}(k+1)−(1+ϵ) for every ϵ>0\epsilon > 0ϵ>0.

When one of the operators is strongly monotone (for example the subdifferential of a strongly convex function), first-order splitting methods can be accelerated by letting the stepsize shrink like 1/k1/k1/k; the paper relates its stepsizes to those of Chambolle and Pock's accelerated primal–dual method (J. Math. Imaging Vis. 40, 2011, Algorithm 2) and of Boţ, Csetnek, Heinrich and Hendrich (Math. Program. 150, 2015, Algorithm 5). Section 3.3 of Davis–Yin carries this device over to three-operator splitting and obtains an O(1/(k+1)2)O(1/(k+1)^2)O(1/(k+1)2) rate for the squared distance. This mission formalizes that result.

Setting

Let HHH be a real Hilbert space. A set-valued operator A:H→2HA : H \to 2^HA:H→2H is monotone if ⟨x−y,u−v⟩≥0\langle x - y, u - v\rangle \ge 0⟨x−y,u−v⟩≥0 for all u∈Axu \in Axu∈Ax, v∈Ayv \in Ayv∈Ay, and maximal monotone if its graph is not properly contained in the graph of another monotone operator. It is μ\muμ-strongly monotone if ⟨x−y,u−v⟩≥μ∥x−y∥2\langle x - y, u - v\rangle \ge \mu\|x-y\|^2⟨x−y,u−v⟩≥μ∥x−y∥2 for all such pairs. A single-valued C:H→HC : H \to HC:H→H is β\betaβ-cocoercive if β∥Cx−Cy∥2≤⟨Cx−Cy,x−y⟩\beta\|Cx - Cy\|^2 \le \langle Cx - Cy, x - y\rangleβ∥Cx−Cy∥2≤⟨Cx−Cy,x−y⟩, and LCL_CLC​-Lipschitz if ∥Cx−Cy∥≤LC∥x−y∥\|Cx - Cy\| \le L_C\|x - y\|∥Cx−Cy∥≤LC​∥x−y∥.

The problem is to find x∗∈zer⁡(A+B+C)x^* \in \operatorname{zer}(A + B + C)x∗∈zer(A+B+C), that is, 0∈Ax∗+Bx∗+Cx∗0 \in Ax^* + Bx^* + Cx^*0∈Ax∗+Bx∗+Cx∗, where AAA, BBB are maximal monotone and CCC is monotone and single-valued. For γ>0\gamma > 0γ>0 the resolvent JγA=(I+γA)−1J_{\gamma A} = (I + \gamma A)^{-1}JγA​=(I+γA)−1 is the map with x∈JγAx+γA(JγAx)x \in J_{\gamma A}x + \gamma A(J_{\gamma A}x)x∈JγA​x+γA(JγA​x).

Algorithm 3 fixes stepsizes (γk)k≥0⊆(0,∞)(\gamma_k)_{k\ge 0} \subseteq (0,\infty)(γk​)k≥0​⊆(0,∞) and an initial point xA0∈Hx_A^0 \in HxA0​∈H, sets xB0=Jγ0B(xA0)x_B^0 = J_{\gamma_0 B}(x_A^0)xB0​=Jγ0​B​(xA0​), uB0=γ0−1(xA0−xB0)u_B^0 = \gamma_0^{-1}(x_A^0 - x_B^0)uB0​=γ0−1​(xA0​−xB0​), and iterates for k≥0k \ge 0k≥0

xBk+1=JγkB(xAk+γkuBk),uBk+1=1γk(xAk+γkuBk−xBk+1),xAk+1=Jγk+1A(xBk+1−γk+1uBk+1−γk+1CxBk+1).x_B^{k+1} = J_{\gamma_k B}(x_A^k + \gamma_k u_B^k),\quad u_B^{k+1} = \tfrac{1}{\gamma_k}(x_A^k + \gamma_k u_B^k - x_B^{k+1}),\quad x_A^{k+1} = J_{\gamma_{k+1}A}(x_B^{k+1} - \gamma_{k+1}u_B^{k+1} - \gamma_{k+1}Cx_B^{k+1}).xBk+1​=Jγk​B​(xAk​+γk​uBk​),uBk+1​=γk​1​(xAk​+γk​uBk​−xBk+1​),xAk+1​=Jγk+1​A​(xBk+1​−γk+1​uBk+1​−γk+1​CxBk+1​).

The stepsize changes in the middle of an iteration. Two stepsize rules are considered, each defined recursively from γ0\gamma_0γ0​:

(3.6)γk+1=−2γk2μCη+(2γk2μCη)2+4(1+2γkμB)γk22(1+2γkμB),(3.7)γk+1=γk1+2γk(μB−γkLC2/2).\text{(3.6)}\quad \gamma_{k+1} = \frac{-2\gamma_k^2\mu_C\eta + \sqrt{(2\gamma_k^2\mu_C\eta)^2 + 4(1+2\gamma_k\mu_B)\gamma_k^2}}{2(1+2\gamma_k\mu_B)}, \qquad \text{(3.7)}\quad \gamma_{k+1} = \frac{\gamma_k}{\sqrt{1 + 2\gamma_k(\mu_B - \gamma_kL_C^2/2)}}.(3.6)γk+1​=2(1+2γk​μB​)−2γk2​μC​η+(2γk2​μC​η)2+4(1+2γk​μB​)γk2​​​,(3.7)γk+1​=1+2γk​(μB​−γk​LC2​/2)​γk​​.

Formalization targets

Goal: Theorem 3.3, both parts

Let BBB be μB\mu_BμB​-strongly monotone with μB≥0\mu_B \ge 0μB​≥0.

  1. If CCC is β\betaβ-cocoercive and μC\mu_CμC​-strongly monotone (μC>0\mu_C > 0μC​>0), η∈(0,1)\eta \in (0,1)η∈(0,1), γ0∈(0,2β(1−η))\gamma_0 \in (0, 2\beta(1-\eta))γ0​∈(0,2β(1−η)) and the stepsizes follow (3.6), then for every x∗∈zer⁡(A+B+C)x^* \in \operatorname{zer}(A+B+C)x∗∈zer(A+B+C)
∃K ∀k≥0:∥xBk−x∗∥2≤K(k+1)2.\exists K\ \forall k \ge 0:\quad \|x_B^k - x^*\|^2 \le \frac{K}{(k+1)^2}.∃K ∀k≥0:∥xBk​−x∗∥2≤(k+1)2K​.
  1. If CCC is LCL_CLC​-Lipschitz, μB>0\mu_B > 0μB​>0, γ0∈(0,2μB/LC2)\gamma_0 \in (0, 2\mu_B/L_C^2)γ0​∈(0,2μB​/LC2​) and the stepsizes follow (3.7), the same conclusion holds.

The goal asserts the shape of the rate only; the constant KKK is not fixed.

Milestones

  • Proposition 3.1, Parts 1 and 2: the one-step inequalities (3.9) and (3.10) for Algorithm 3 with arbitrary admissible stepsizes.
  • Stepsize facts from the proof of Theorem 3.3: the identities that make (3.9) and (3.10) telescope, the monotonicity of the stepsizes (3.6), and the limits (k+1)γk→1/(μCη+μB)(k+1)\gamma_k \to 1/(\mu_C\eta + \mu_B)(k+1)γk​→1/(μC​η+μB​) for (3.6) and (k+1)γk→1/μB(k+1)\gamma_k \to 1/\mu_B(k+1)γk​→1/μB​ for (3.7).

Significance

The theorem shows that strong monotonicity of BBB or CCC can be converted into a quadratically decaying distance bound without knowledge of the solution, with stepsizes that are computable from the strong monotonicity and cocoercivity (or Lipschitz) constants alone. Since the rate is established for xBkx_B^kxBk​, it applies directly to splitting schemes for strongly convex composite problems min⁡f+g+h\min f + g + hminf+g+h with hhh smooth, where xBkx_B^kxBk​ is the proximal point of ggg.

The result is proved in the paper; no machine-checked version is known. The formalization adds a precise statement of the admissible parameter ranges, a check of the index conventions of a scheme whose stepsize changes mid-iteration, and a correction of the one-step inequalities at the first iteration (see Formalization scope). The stepsize limits are statements about explicit real recursions and are of independent use for other accelerated schemes.

Difficulty

The one-step inequalities (3.9) and (3.10) are long but elementary chains of inner-product identities and Young's inequality; the work lies in bookkeeping two stepsizes per iteration. The rate itself does not follow from the one-step inequality alone: telescoping gives a bound of the form ∥xBk−x∗∥2≲γk2\|x_B^{k}-x^*\|^2 \lesssim \gamma_k^2∥xBk​−x∗∥2≲γk2​, and one must then show γk\gamma_kγk​ decays exactly like 1/k1/k1/k. The rules (3.6) and (3.7) are nonlinear recursions without closed form, so their asymptotics require a Stolz–Cesàro type argument, which is not available in Mathlib under that name. Choosing a stepsize sequence of the form c/kc/kc/k instead is a different algorithm and not covered by the theorem.

Formalization scope

  • HHH is an arbitrary real Hilbert space (InnerProductSpace ℝ H, CompleteSpace H), not a Euclidean space.
  • Resolvents are not constructed. They are families JA JB : ℝ → H → H required to satisfy the resolvent inclusion γ−1(x−J(γ)x)∈A(J(γ)x)\gamma^{-1}(x - J(\gamma)x) \in A(J(\gamma)x)γ−1(x−J(γ)x)∈A(J(γ)x) for every γ>0\gamma > 0γ>0; for maximal monotone operators such maps exist and are unique, so nothing is lost.
  • Algorithm 3 is a single recursive definition of the triple (xAk,xBk,uBk)(x_A^k, x_B^k, u_B^k)(xAk​,xBk​,uBk​) from xA0x_A^0xA0​, the stepsizes, the resolvent families and CCC; the paper's loop index k=1,2,…k = 1, 2, \dotsk=1,2,… matches recursion (3.8) shifted by one.
  • The stepsize rules (3.6) and (3.7) are recursive real sequences, used verbatim; each theorem assumes the paper's parameter ranges.
  • O(1/(k+1)2)O(1/(k+1)^2)O(1/(k+1)2) is rendered as ∃K ∀k, ∥xBk−x∗∥2≤K/(k+1)2\exists K\,\forall k,\ \|x_B^k - x^*\|^2 \le K/(k+1)^2∃K∀k, ∥xBk​−x∗∥2≤K/(k+1)2, with KKK chosen after all data (initial point, operators, constants, γ0\gamma_0γ0​, x∗x^*x∗) and before kkk. No explicit constant is stated.
  • Strong monotonicity of CCC means μC>0\mu_C > 0μC​>0; only μB=0\mu_B = 0μB​=0 is allowed, as on the page. With μB=μC=0\mu_B = \mu_C = 0μB​=μC​=0 rule (3.6) keeps γk\gamma_kγk​ constant and the rate fails, so a formalization allowing μC=0\mu_C = 0μC​=0 would be false. In Part 2, LC>0L_C > 0LC​>0 is assumed so that the stepsize interval is meaningful, and CCC is assumed monotone, as in problem (1.1) and as used in the paper's proof of (3.10).
  • The paper states (3.9) and (3.10) for all k≥0k \ge 0k≥0; at k=0k = 0k=0 the initial point xA0x_A^0xA0​ is not a resolvent output, and both inequalities fail in general. The milestones state them for k≥1k \ge 1k≥1. Theorem 3.3 is unaffected, since finitely many initial terms do not change an O(⋅)O(\cdot)O(⋅) bound.
  • The display γk2−γk+12=γkγk+1(2γkμB+2γk+1μCη)\gamma_k^2 - \gamma_{k+1}^2 = \gamma_k\gamma_{k+1}(2\gamma_k\mu_B + 2\gamma_{k+1}\mu_C\eta)γk2​−γk+12​=γk​γk+1​(2γk​μB​+2γk+1​μC​η) on p. 845 has γk\gamma_kγk​ and γk+1\gamma_{k+1}γk+1​ swapped inside the bracket; the milestone states the corrected identity γkγk+1(2γk+1μB+2γkμCη)\gamma_k\gamma_{k+1}(2\gamma_{k+1}\mu_B + 2\gamma_k\mu_C\eta)γk​γk+1​(2γk+1​μB​+2γk​μC​η).
  • A trivializing formalization, such as one in which the resolvent hypothesis is unsatisfiable, the stepsize interval is empty, or the rate constant may depend on kkk, is ruled out: the hypotheses are met by A=0A = 0A=0, B=μBIB = \mu_B IB=μB​I (with resolvents JγA=IJ_{\gamma A} = IJγA​=I, JγB=(1+γμB)−1IJ_{\gamma B} = (1+\gamma\mu_B)^{-1}IJγB​=(1+γμB​)−1I) and C=cIC = cIC=cI with c>0c > 0c>0, and KKK is quantified before kkk.

Contributions are welcome at every level: proofs of the real-sequence milestones (a general Stolz–Cesàro lemma would be reusable well beyond this mission), of the two one-step inequalities, and of the telescoping argument that assembles the goal.

Selected references

  • D. Davis and W. Yin, A Three-Operator Splitting Scheme and its Optimization Applications, Set-Valued and Variational Analysis 25 (2017), 829–858. https://doi.org/10.1007/s11228-017-0421-z (preprint: https://arxiv.org/abs/1504.01032)
  • R. I. Boţ, E. R. Csetnek, A. Heinrich and C. Hendrich, On the convergence rate improvement of a primal-dual splitting algorithm for solving monotone inclusion problems, Mathematical Programming 150 (2015), 251–279. https://doi.org/10.1007/s10107-014-0766-0
  • A. Chambolle and T. Pock, A First-Order Primal-Dual Algorithm for Convex Problems with Applications to Imaging, Journal of Mathematical Imaging and Vision 40 (2011), 120–145. https://doi.org/10.1007/s10851-010-0251-1
  • H. H. Bauschke and P. L. Combettes, Convex Analysis and Monotone Operator Theory in Hilbert Spaces, 2nd ed., Springer, 2017. https://doi.org/10.1007/978-3-319-48311-5
11 thms3 active usersReviewed
🏆Completed
Control TheoryDynamic ProgrammingOperations Research+1·Captain: mikedeng1

Monotone Mappings with Application in Dynamic Programming II: Convergence of the DP Algorithm under Uniform DecreaseResearch Paper

Motivation

Infinite-horizon sequential decision problems (deterministic optimal control, Markov decision processes, minimax control) share one computational question: does the dynamic programming (DP) algorithm, which starts from a terminal cost and repeatedly applies the Bellman operator, converge to the optimal cost? For discounted problems with bounded costs the answer is yes, by the contraction mapping theorem (Blackwell 1965; Denardo 1967). Without discounting and boundedness the answer depends on the sign structure of the problem. Strauch's negative programming model (Strauch 1966) and Blackwell's positive programming model behave differently, and in the former the DP algorithm can fail to converge to the optimal cost even for simple deterministic problems.

Bertsekas (1977) recast these models in one abstract framework: a monotone mapping HHH that encodes the one-stage problem, with no probabilistic or additive structure assumed. Two sign conditions organise the theory: uniform increase (Assumption I, containing Strauch's model) and uniform decrease (Assumption D, containing the deterministic version of Blackwell's positive model, e.g. deterministic problems with nonpositive stage costs). This mission formalizes the uniform-decrease half of Section 5: under D, the finite-horizon problems are solved by the DP algorithm, J∗J^*J∗ is the limit of the finite-horizon values, Bellman's equation holds, and the DP algorithm converges to J∗J^*J∗. The same framework became the basis of Bertsekas–Shreve's Stochastic Optimal Control: The Discrete-Time Case (1978) and of Bertsekas's Abstract Dynamic Programming (2013, 3rd ed. 2022).

Setting

States, controls, policies. SSS (nonempty) and CCC are sets. Each x∈Sx\in Sx∈S has a nonempty constraint set U(x)⊆CU(x)\subseteq CU(x)⊆C. MMM is the set of selectors μ:S→C\mu:S\to Cμ:S→C with μ(x)∈U(x)\mu(x)\in U(x)μ(x)∈U(x) for all xxx, and a policy is a sequence π={μ0,μ1,… }\pi=\{\mu_0,\mu_1,\dots\}π={μ0​,μ1​,…} of selectors. The policy is stationary if μk=μ\mu_k=\muμk​=μ for all kkk.

Functions and the mapping HHH. FFF is the set of functions J:S→[−∞,∞]J:S\to[-\infty,\infty]J:S→[−∞,∞], ordered pointwise, and eee is the constant function 111. A mapping H:S×C×F→[−∞,∞]H:S\times C\times F\to[-\infty,\infty]H:S×C×F→[−∞,∞] is given, and it is monotone: J≤J′J\le J'J≤J′ implies H(x,u,J)≤H(x,u,J′)H(x,u,J)\le H(x,u,J')H(x,u,J)≤H(x,u,J′) for every xxx and u∈U(x)u\in U(x)u∈U(x). It defines

Tμ(J)(x)=H(x,μ(x),J),T(J)(x)=inf⁡u∈U(x)H(x,u,J).T_\mu(J)(x)=H(x,\mu(x),J),\qquad T(J)(x)=\inf_{u\in U(x)}H(x,u,J).Tμ​(J)(x)=H(x,μ(x),J),T(J)(x)=u∈U(x)inf​H(x,u,J).

TkT^kTk is the kkk-fold composition, with T0T^0T0 the identity, and (Tμ0⋯TμN−1)(T_{\mu_0}\cdots T_{\mu_{N-1}})(Tμ0​​⋯TμN−1​​) applies TμN−1T_{\mu_{N-1}}TμN−1​​ first.

Costs. A terminal function Jˉ∈F\bar J\in FJˉ∈F with Jˉ(x)>−∞\bar J(x)>-\inftyJˉ(x)>−∞ is given. The cost of a policy, the optimal cost, the NNN-stage optimal cost and the limit of the DP algorithm are

Jπ=lim⁡N→∞(Tμ0⋯TμN−1)(Jˉ),J∗=inf⁡πJπ,JN=inf⁡π(Tμ0⋯TμN−1)(Jˉ),J∞=lim⁡N→∞TN(Jˉ),J_\pi=\lim_{N\to\infty}(T_{\mu_0}\cdots T_{\mu_{N-1}})(\bar J),\quad J^*=\inf_{\pi}J_\pi,\quad J_N=\inf_{\pi}(T_{\mu_0}\cdots T_{\mu_{N-1}})(\bar J),\quad J_\infty=\lim_{N\to\infty}T^N(\bar J),Jπ​=N→∞lim​(Tμ0​​⋯TμN−1​​)(Jˉ),J∗=πinf​Jπ​,JN​=πinf​(Tμ0​​⋯TμN−1​​)(Jˉ),J∞​=N→∞lim​TN(Jˉ),

all pointwise. JμJ_\muJμ​ denotes the cost of the stationary policy {μ,μ,… }\{\mu,\mu,\dots\}{μ,μ,…}.

Assumptions. D: H(x,u,Jˉ)≤Jˉ(x)H(x,u,\bar J)\le\bar J(x)H(x,u,Jˉ)≤Jˉ(x) for all xxx, u∈U(x)u\in U(x)u∈U(x). Under D every sequence above is nonincreasing, so the limits exist in [−∞,∞][-\infty,\infty][−∞,∞]. D.1: for every sequence with Jk+1≤Jk≤JˉJ_{k+1}\le J_k\le\bar JJk+1​≤Jk​≤Jˉ, lim⁡kH(x,u,Jk)=H(x,u,lim⁡kJk)\lim_k H(x,u,J_k)=H(x,u,\lim_k J_k)limk​H(x,u,Jk​)=H(x,u,limk​Jk​). D.2: there is α>0\alpha>0α>0 such that H(x,u,J)−αr≤H(x,u,J−re)≤H(x,u,J)H(x,u,J)-\alpha r\le H(x,u,J-re)\le H(x,u,J)H(x,u,J)−αr≤H(x,u,J−re)≤H(x,u,J) for all r>0r>0r>0 and J≤JˉJ\le\bar JJ≤Jˉ.

Formalization targets

Goal: convergence of the DP algorithm (Proposition 9)

If D holds, and either D.1 holds or JN=TN(Jˉ)J_N=T^N(\bar J)JN​=TN(Jˉ) for every N≥1N\ge1N≥1, then

J∞=J∗.J_\infty=J^*.J∞​=J∗.

Milestones

  1. Lemma 1. Under D, J∗(x)=lim⁡N→∞JN(x)J^*(x)=\lim_{N\to\infty}J_N(x)J∗(x)=limN→∞​JN​(x) for every xxx.
  2. Proposition 3. Under D, and either D.1 or (D.2 and TN(Jˉ)>−∞T^N(\bar J)>-\inftyTN(Jˉ)>−∞ everywhere), JN=TN(Jˉ)J_N=T^N(\bar J)JN​=TN(Jˉ) for a given N≥1N\ge1N≥1.
  3. Proposition 6. Under D and D.1, J∗=T(J∗)J^*=T(J^*)J∗=T(J∗), and every J′≤JˉJ'\le\bar JJ′≤Jˉ with J′≤T(J′)J'\le T(J')J′≤T(J′) satisfies J′≤J∗J'\le J^*J′≤J∗.
  4. Corollary 6.2. Under D and D.1, Jμ=Tμ(Jμ)J_\mu=T_\mu(J_\mu)Jμ​=Tμ​(Jμ​) for every stationary policy, and every J′≤JˉJ'\le\bar JJ′≤Jˉ with J′≤Tμ(J′)J'\le T_\mu(J')J′≤Tμ​(J′) satisfies J′≤JμJ'\le J_\muJ′≤Jμ​.
  5. Proposition 8. Under D and D.1, a stationary policy {μ∗,μ∗,… }\{\mu^*,\mu^*,\dots\}{μ∗,μ∗,…} is optimal if and only if Tμ∗(Jμ∗)=T(Jμ∗)T_{\mu^*}(J_{\mu^*})=T(J_{\mu^*})Tμ∗​(Jμ∗​)=T(Jμ∗​).

The goal is the paper's answer, in the uniform-decrease case, to the question it poses in the introduction: when is lim⁡NTN(Jˉ)=J∗\lim_N T^N(\bar J)=J^*limN​TN(Jˉ)=J∗?

Significance

The result. Proposition 9 justifies value iteration from Jˉ\bar JJˉ for every problem that fits Assumption D, including deterministic and stochastic control with nonpositive costs (reward maximization with nonnegative rewards) and minimax problems satisfying D.1. Propositions 6 and 8 characterise J∗J^*J∗ as the largest solution of Bellman's equation below Jˉ\bar JJˉ and give a verification test for stationary policies. The hypotheses are sharp in the sense the paper documents: its Counterexamples 2 and 3 show JN≠TN(Jˉ)J_N\ne T^N(\bar J)JN​=TN(Jˉ) when D.1 is dropped together with D.2 or with the finiteness condition TN(Jˉ)>−∞T^N(\bar J)>-\inftyTN(Jˉ)>−∞. Under the mirror assumption I, J∞=J∗J_\infty=J^*J∞​=J∗ can fail, so the asymmetry between the two sign conditions is part of the content.

Formalizing it. All results are proved in the 1977 paper and reappear in later monographs. No machine-checked version of this abstract framework is known. The platform's existing dynamic programming items are finite-state, real-valued and contraction-based, so this mission would add the first formal treatment of extended-real-valued, non-contractive dynamic programming, and a model definition that other results of the same theory can reuse.

Difficulty

The obvious argument for Proposition 9, "JN=TN(Jˉ)J_N=T^N(\bar J)JN​=TN(Jˉ) and JN→J∗J_N\to J^*JN​→J∗", hides two separate interchanges of limits and infima. Lemma 1 interchanges inf⁡π\inf_\piinfπ​ with lim⁡N\lim_NlimN​, which works only because every sequence is monotone in the right direction under D. Proposition 3 is where the work is: the NNN-stage infimum over policies must be matched by the iterated infimum TNT^NTN, which requires building near-optimal selectors stage by stage and passing a limit through HHH NNN times, using D.1, or controlling accumulated errors through D.2. The latter breaks down when values reach −∞-\infty−∞, which is why that branch needs TN(Jˉ)>−∞T^N(\bar J)>-\inftyTN(Jˉ)>−∞. All arithmetic is in [−∞,∞][-\infty,\infty][−∞,∞], where expressions such as ∞−∞\infty-\infty∞−∞ are not defined, and J∗J^*J∗, JNJ_NJN​, TN(Jˉ)T^N(\bar J)TN(Jˉ) may equal −∞-\infty−∞ even though Jˉ\bar JJˉ does not.

Formalization scope

The model is a Lean structure MonotoneDP.Decrease.Model S C with fields U, U_nonempty, H, mono, Jbar, Jbar_ne_bot and S_nonempty; FFF is S → EReal. Policies are ℕ → Selector, where a selector is a function with values in the constraint sets. TTT is an infimum over U x only, and J∗J^*J∗, JNJ_NJN​ are infima over admissible policies. JπJ_\piJπ​ and J∞J_\inftyJ∞​ are limUnder atTop; every theorem assumes D, under which both sequences are nonincreasing and converge, so these are the paper's limits. In D.1 both limits are limUnder. D.2 carries its scalar as a parameter, and "D.2 holds" is ∃ α, AssumptionD2 α. Only real scalars are ever subtracted from extended reals.

JNJ_NJN​ is defined for every NNN, and Propositions 3 and 9 quantify over N≥1N\ge1N≥1 as the paper does. In Proposition 3 the condition TN(Jˉ)>−∞T^N(\bar J)>-\inftyTN(Jˉ)>−∞ belongs to the D.2 branch only. No hypothesis beyond the page is added. Nonempty constraint sets and Jˉ>−∞\bar J>-\inftyJˉ>−∞ are the paper's standing assumptions, stated in the model, not in the theorems. Without nonempty constraint sets there would be no policies, J∗J^*J∗ and JNJ_NJN​ would be +∞+\infty+∞, and several statements would hold trivially; the model rules this out.

Useful contributions: general lemmas about monotone sequences in EReal (interchanging ⨅ and limits), the monotonicity facts (25) and TN+1(Jˉ)≤TN(Jˉ)T^{N+1}(\bar J)\le T^N(\bar J)TN+1(Jˉ)≤TN(Jˉ) under D, and reusable constructions of near-optimal selectors. Corollary 6.1 (the finite-state D.2 variant) is not included.

Selected references

  • D. P. Bertsekas, Monotone mappings with application in dynamic programming, SIAM J. Control Optim. 15(3), 438–464, 1977. https://doi.org/10.1137/0315031
  • E. V. Denardo, Contraction mappings in the theory underlying dynamic programming, SIAM Review 9(2), 165–177, 1967. https://doi.org/10.1137/1009030
  • R. E. Strauch, Negative dynamic programming, Ann. Math. Statist. 37(4), 871–890, 1966. https://doi.org/10.1214/aoms/1177699147
  • D. Blackwell, Discounted dynamic programming, Ann. Math. Statist. 36(1), 226–235, 1965. https://doi.org/10.1214/aoms/1177700285
  • D. P. Bertsekas, Abstract Dynamic Programming, 3rd ed., Athena Scientific, 2022. https://www.mit.edu/~dimitrib/abstractdp_MIT.html
8 thms3 active usersReviewed
🏆Completed
CombinatoricsDynamic ProgrammingGraph Theory+1·Captain: mikedeng1

The Steiner Problem in Graphs: Algorithm A Computes the Length of the Steiner TreeResearch Paper

Motivation

The Steiner problem in graphs asks for the cheapest way to connect a prescribed set of nodes of a network, where intermediate nodes may be used freely. It is the network version of the classical Euclidean Steiner tree problem surveyed by Gilbert and Pollak (SIAM J. Appl. Math. 16, 1968), and it arises wherever a few sites must be joined through an existing network at minimum total cost: communication and pipeline layout, VLSI routing, and phylogenetics. With two terminals it is the shortest-path problem; with all nodes as terminals it is the minimum spanning tree problem; in between it is NP-hard.

Dreyfus and Wagner (Networks 1(3):195–207, 1971) gave the first exact algorithm whose running time is exponential only in the number kkk of terminals and polynomial in the number nnn of nodes. The paper states it, as Algorithm A, together with its proof of correctness and an exact count of its elementary operations.

Timeline. 1968: Gilbert and Pollak survey Steiner minimal trees. 1971: Dreyfus and Wagner, a dynamic program over subsets of terminals running in time proportional to n3/2+n2(2k−1−k−1)+n(3k−1−2k+3)/2n^3/2 + n^2(2^{k-1}-k-1) + n(3^{k-1}-2^k+3)/2n3/2+n2(2k−1−k−1)+n(3k−1−2k+3)/2. 1987: Erickson, Monma and Veinott give the same subset recursion for general network flow problems. 2007: Björklund, Husfeldt, Kaski and Koivisto (STOC 2007) improve the exponential dependence on kkk for small integer weights. The Dreyfus–Wagner recursion remains the standard exact method and the basis of the fixed-parameter tractability of the problem in kkk.

Setting

A graph G=(N,A)G = (N, A)G=(N,A) has a finite set NNN of nodes and a set AAA of undirected arcs, each arc aaa having a positive length ∣a∣|a|∣a∣; GGG is connected. For a set S⊆AS \subseteq AS⊆A of arcs, ∣S∣=∑s∈S∣s∣|S| = \sum_{s \in S} |s|∣S∣=∑s∈S​∣s∣. A set SSS connects a node set XXX if all members of XXX are joined by paths composed only of arcs in SSS.

Given Y⊆NY \subseteq NY⊆N, a Steiner path (or Steiner tree) connecting YYY is a set S⊆AS \subseteq AS⊆A that connects YYY with ∣S∣|S|∣S∣ minimum. Its length is the Steiner length St⁡(Y)\operatorname{St}(Y)St(Y). For nodes i,ji, ji,j, D(i,j)D(i,j)D(i,j) is the length of a shortest path from iii to jjj; D(i,j)=St⁡({i,j})D(i,j) = \operatorname{St}(\{i,j\})D(i,j)=St({i,j}).

Algorithm A fixes a linear order of NNN (so that each nonempty set DDD has a first element D[1]D[1]D[1]), picks q∈Yq \in Yq∈Y, sets C=Y−{q}C = Y - \{q\}C=Y−{q}, and fills a table S[D,I]S[D, I]S[D,I] for nonempty D⊊CD \subsetneq CD⊊C and I∈NI \in NI∈N:

S[{t},I]=D(t,I),S[D,I]=min⁡J∈N(D(I,J)+min⁡D[1]∈E⊊D(S[E,J]+S[D−E,J])),S[\{t\}, I] = D(t, I), \qquad S[D, I] = \min_{J \in N}\Big(D(I,J) + \min_{D[1] \in E \subsetneq D}\big(S[E,J] + S[D-E,J]\big)\Big),S[{t},I]=D(t,I),S[D,I]=J∈Nmin​(D(I,J)+D[1]∈E⊊Dmin​(S[E,J]+S[D−E,J])),

and returns

v=min⁡J∈N(D(q,J)+min⁡C[1]∈E⊊C(S[E,J]+S[C−E,J])).v = \min_{J \in N}\Big(D(q,J) + \min_{C[1] \in E \subsetneq C}\big(S[E,J] + S[C-E,J]\big)\Big).v=J∈Nmin​(D(q,J)+C[1]∈E⊊Cmin​(S[E,J]+S[C−E,J])).

A minimum over an empty set is +∞+\infty+∞. In the Lean development these objects are steinerLength, pathDist, tableA and algorithmA in the namespace DreyfusWagner.Steiner.

Formalization targets

Goal: Algorithm A is exact

For every finite connected graph with positive arc lengths, every linear order on its nodes, every YYY with ∥Y∥≥3\|Y\| \ge 3∥Y∥≥3 and every q∈Yq \in Yq∈Y,

v=St⁡(Y).v = \operatorname{St}(Y).v=St(Y).

This is the caption of Algorithm A ("Computes the length of the Steiner tree connecting YYY", p. 203). The statement is an equality, not a bound.

Milestones

In the order the proof uses them:

  1. A Steiner path is a tree (§1, p. 197): a minimum connecting arc set contains no cycle.
  2. The two-node case (Appendix A, p. 205): St⁡({i,j})=D(i,j)\operatorname{St}(\{i,j\}) = D(i,j)St({i,j})=D(i,j).
  3. Theorem 1 (Appendix A, p. 206): for a Steiner tree SSS, a node xxx on it, and a set CCC of arcs of SSS at xxx, the arcs of SSS connecting xxx to the terminals reached through CCC form a Steiner tree for those terminals together with xxx.
  4. Optimal Decomposition Theorem (Appendix A, p. 206): if ∥Y∥≥3\|Y\| \ge 3∥Y∥≥3 and q∈Yq \in Yq∈Y, a Steiner tree for YYY splits into three disjoint Steiner paths, for {p,q}\{p,q\}{p,q}, {p}∪D\{p\} \cup D{p}∪D and {p}∪(Y−D−{q})\{p\} \cup (Y - D - \{q\}){p}∪(Y−D−{q}), where p∈Np \in Np∈N and ∅≠D⊊Y−{q}\emptyset \ne D \subsetneq Y - \{q\}∅=D⊊Y−{q}.
  5. The recurrence (§2, pp. 199–200): for ∥D∥≥2\|D\| \ge 2∥D∥≥2 and any node mmm,
St⁡({m}∪D)=min⁡k∈N(D(m,k)+min⁡∅≠E⊊D(St⁡({k}∪E)+St⁡({k}∪(D−E)))).\operatorname{St}(\{m\} \cup D) = \min_{k \in N}\Big(D(m,k) + \min_{\emptyset \ne E \subsetneq D}\big(\operatorname{St}(\{k\} \cup E) + \operatorname{St}(\{k\} \cup (D - E))\big)\Big).St({m}∪D)=k∈Nmin​(D(m,k)+∅=E⊊Dmin​(St({k}∪E)+St({k}∪(D−E)))).
  1. The table invariant (§2, p. 200): S[D,I]=St⁡({I}∪D)S[D, I] = \operatorname{St}(\{I\} \cup D)S[D,I]=St({I}∪D) for every nonempty DDD and every III.

Two companion items accompany the goal: the numerical illustration of §3 (seven nodes, St⁡(Y)=5\operatorname{St}(Y) = 5St(Y)=5, Algorithm A returns 555), and the exact count of elementary statements of §5, n2(2k−1−k−1)+n(3k−1−2k+3)/2n^2(2^{k-1}-k-1) + n(3^{k-1}-2^k+3)/2n2(2k−1−k−1)+n(3k−1−2k+3)/2.

Significance

The result turns the Steiner problem with few terminals into a polynomial computation in the size of the network: for fixed kkk the running time is O(n3)O(n^3)O(n3) including all-pairs shortest paths. It is the reference exact algorithm against which heuristics and approximation algorithms for Steiner trees are evaluated, a standard example of dynamic programming over subsets, and the origin of the fixed-parameter tractability of the Steiner tree problem parameterized by the number of terminals. The subset recurrence reappears in group Steiner, prize-collecting and directed Steiner variants.

The paper's proof is complete and the result is classical; it has not, to our knowledge, been machine-checked. This mission produces a checked account of the exactness of the recursion: the structural facts about minimum connecting arc sets (acyclicity, optimality of branches, the three-way decomposition) and the passage from these to the algorithm's table. These facts about weighted graphs, minimum connecting arc sets and shortest paths are reusable well beyond this paper.

Difficulty

The upper bound v≥St⁡(Y)v \ge \operatorname{St}(Y)v≥St(Y) is routine: each term of each minimum is the length of some connecting arc set, so no term can beat the optimum. The content is the reverse inequality, which needs the Optimal Decomposition Theorem: one must show that some optimal tree actually splits at a single node ppp into a shortest path to qqq and two optimal subtrees whose terminal sets partition Y−{q}Y - \{q\}Y−{q} into two nonempty parts. The naive choice p=qp = qp=q fails when qqq is a leaf, and the choice of the first branching node fails when the path from qqq meets another terminal first; the paper handles these as separate cases. A second difficulty is the passage from arc sets to trees: minimum connecting sets are forests only because lengths are positive, and "the arcs of SSS involved in connecting" a set of terminals must be identified with a subtree. Finally the table recursion must be matched with the recurrence, including the restriction D[1]∈ED[1] \in ED[1]∈E that enumerates each splitting once.

Formalization scope

Nodes are a finite type V with a LinearOrder (the paper's "(ordered) set"; the goal holds for every order). The graph is a SimpleGraph V with decidable adjacency, arcs are unordered pairs Sym2 V, and lengths are ℓ : Sym2 V → ℝ. Every theorem assumes the paper's standing hypotheses of p. 195: all arcs of GGG have positive length (∀ e ∈ G.edgeSet, 0 < ℓ e) and GGG is connected. The paper allows several arcs between the same two nodes; the simple-graph model keeps one, which does not change any Steiner length since an optimal set uses only the shortest of parallel arcs. Connecting means reachability in the graph formed by the arcs of SSS. Steiner lengths, D(i,j)D(i,j)D(i,j) and all minima of the algorithm take values in WithTop ℝ, where ⊤ is +∞+\infty+∞, ⊤ + x = ⊤ and an empty minimum is ⊤; no real-valued infimum with a junk value is used. D(i,j)D(i,j)D(i,j) is a minimum over paths of GGG.

The goal assumes ∥Y∥≥3\|Y\| \ge 3∥Y∥≥3, the paper's own hypothesis (Appendix A, p. 205). For ∥Y∥=2\|Y\| = 2∥Y∥=2 Algorithm A as printed returns +∞+\infty+∞ because line (18) admits no set EEE; the two-node case is covered by milestone 2. The algorithm is defined from D(i,j)D(i,j)D(i,j), addition and minima only: a formalization in which tableA or algorithmA refers to Steiner lengths, or in which the goal only asserts v≥St⁡(Y)v \ge \operatorname{St}(Y)v≥St(Y), would be trivial and is ruled out. The loop order of lines (4)–(14) is replaced by recursion on ∥D∥\|D\|∥D∥, which the paper states is immaterial (p. 203).

Useful infrastructure: sums of lengths along walks and paths, reachability in edge-subgraphs, acyclicity of minimum connecting sets, and splitting a tree at a node. Contributions of these as reusable lemmas are welcome, as are proofs of individual milestones in any order. Tree reconstruction (§2, p. 200) and the empirical running times (p. 205) are out of scope.

Selected references

  • S. E. Dreyfus, R. A. Wagner, The Steiner Problem in Graphs, Networks 1(3):195–207, 1971. https://doi.org/10.1002/net.3230010302
  • E. N. Gilbert, H. O. Pollak, Steiner Minimal Trees, SIAM Journal on Applied Mathematics 16(1):1–29, 1968. https://doi.org/10.1137/0116001
  • R. W. Floyd, Algorithm 97: Shortest Path, Communications of the ACM 5(6):345, 1962. https://doi.org/10.1145/367766.368168
  • R. E. Erickson, C. L. Monma, A. F. Veinott Jr., Send-and-Split Method for Minimum-Concave-Cost Network Flows, Mathematics of Operations Research 12(4):634–664, 1987. https://doi.org/10.1287/moor.12.4.634
  • A. Björklund, T. Husfeldt, P. Kaski, M. Koivisto, Fourier Meets Möbius: Fast Subset Convolution, STOC 2007, 67–74. https://doi.org/10.1145/1250790.1250801
10 thms3 active usersReviewed
🏆Completed
Algorithmic Game TheoryOperations ResearchProbability·Captain: mikedeng1

An Analog of the Minimax Theorem for Vector Payoffs: A Closed Convex Set Is Approachable If and Only If It Meets Every T(q), and Is Otherwise ExcludableResearch Paper

Motivation

Von Neumann's minimax theorem says that in a zero-sum game with real payoffs, Player I can guarantee an expected gain of at least the value vvv and Player II can hold it to at most vvv. In a long series of plays, the law of large numbers turns this into a statement about the average payoff: I can make it exceed v−εv-\varepsilonv−ε, II can keep it below v+εv+\varepsilonv+ε, with probability approaching one.

Blackwell's 1956 paper asks the same question when the payoff of each play is a vector in RN\mathbb R^NRN rather than a number. A single player then cannot optimize "the" payoff, and the natural question becomes geometric: can a player force the running average of the payoff vectors to converge to a prescribed set SSS, whatever the opponent does? The resulting notion, approachability, became a basic tool in repeated games with incomplete information (Aumann–Maschler), in the theory of calibration and regret minimization (Foster–Vohra; Hart–Mas-Colell), and in online learning, where no-regret algorithms and Blackwell approachability are known to be equivalent (Abernethy–Bartlett–Hazan 2011).

Timeline.

  • 1928: von Neumann's minimax theorem for matrix games.
  • 1954: Blackwell's maximal inequality for sums with negative conditional drift (On optimal systems, Ann. Math. Statist.), quoted in this paper as THEOREM 2.
  • 1956: this paper. A sufficient condition for approachability (THEOREM 1), a complete characterization for closed convex sets (THEOREM 3) and for N=1N=1N=1, an example of a set that is neither approachable nor excludable, and a conjecture on weak approachability.
  • 1992: Vieille proved Blackwell's conjecture that every set is weakly approachable or weakly excludable.

Setting

Fix integers N≥0N\ge0N≥0 and r,s≥1r,s\ge1r,s≥1, and a closed, bounded, convex set X⊆RNX\subseteq\mathbb R^NX⊆RN. The game is an r×sr\times sr×s matrix M=∥m(i,j)∥M=\|m(i,j)\|M=∥m(i,j)∥ whose entries are probability distributions concentrated on XXX. Write mˉ(i,j)\bar m(i,j)mˉ(i,j) for the mean of m(i,j)m(i,j)m(i,j), PPP for the simplex of mixed actions p=(p1,…,pr)p=(p_1,\dots,p_r)p=(p1​,…,pr​) of Player I, and QQQ for that of Player II.

A strategy f={fn}n≥0f=\{f_n\}_{n\ge0}f={fn​}n≥0​ of I is a sequence of measurable maps from the nnn-tuples (x1,…,xn)(x_1,\dots,x_n)(x1​,…,xn​) of past outcomes to PPP; f0f_0f0​ is a point of PPP. Strategies g={gn}g=\{g_n\}g={gn​} of II take values in QQQ. A play of (f,g)(f,g)(f,g) is a sequence of random vectors x1,x2,…x_1,x_2,\dotsx1​,x2​,… such that, given x1,…,xnx_1,\dots,x_nx1​,…,xn​, the players draw iii and jjj independently from fn(x1,…,xn)f_n(x_1,\dots,x_n)fn​(x1​,…,xn​) and gn(x1,…,xn)g_n(x_1,\dots,x_n)gn​(x1​,…,xn​), and xn+1x_{n+1}xn+1​ is drawn from m(i,j)m(i,j)m(i,j). The average payoff is xˉn=1n∑i=1nxi\bar x_n=\frac1n\sum_{i=1}^n x_ixˉn​=n1​∑i=1n​xi​, and δn\delta_nδn​ is its distance from SSS.

A set S⊆RNS\subseteq\mathbb R^NS⊆RN is approachable with f∗f^*f∗ if for every ε>0\varepsilon>0ε>0 there is N0N_0N0​ such that for every strategy ggg of II,

Prob{δn≥ε for some n≥N0}<ε.\mathrm{Prob}\{\delta_n\ge\varepsilon\text{ for some }n\ge N_0\}<\varepsilon .Prob{δn​≥ε for some n≥N0​}<ε.

It is excludable with g∗g^*g∗ if there is d>0d>0d>0 such that for every ε>0\varepsilon>0ε>0 there is N0N_0N0​ such that for every strategy fff of I,

Prob{δn≥d for all n≥N0}>1−ε.\mathrm{Prob}\{\delta_n\ge d\text{ for all }n\ge N_0\}>1-\varepsilon .Prob{δn​≥d for all n≥N0​}>1−ε.

SSS is approachable (excludable) if some strategy approaches (excludes) it. Finally, for p∈Pp\in Pp∈P and q∈Qq\in Qq∈Q,

R(p)=conv⁡{∑ipimˉ(i,j)}j=1s,T(q)=conv⁡{∑jqjmˉ(i,j)}i=1r:R(p)=\operatorname{conv}\Big\{\textstyle\sum_i p_i\bar m(i,j)\Big\}_{j=1}^{s},\qquad T(q)=\operatorname{conv}\Big\{\textstyle\sum_j q_j\bar m(i,j)\Big\}_{i=1}^{r}:R(p)=conv{∑i​pi​mˉ(i,j)}j=1s​,T(q)=conv{∑j​qj​mˉ(i,j)}i=1r​:

R(p)R(p)R(p) is the set of expected payoffs I can guarantee to stay in by playing ppp, and T(q)T(q)T(q) the set II can confine them to by playing qqq.

Formalization targets

Goal: THEOREM 3

For a closed convex set S⊆RNS\subseteq\mathbb R^NS⊆RN,

S is approachable  ⟺  S∩T(q)≠∅  for every q∈Q,S\text{ is approachable}\iff S\cap T(q)\neq\emptyset\ \text{ for every }q\in Q,S is approachable⟺S∩T(q)=∅  for every q∈Q,

and if S∩T(q0)=∅S\cap T(q_0)=\emptysetS∩T(q0​)=∅ then SSS is excludable with the stationary strategy gn≡q0g_n\equiv q_0gn​≡q0​. In particular every closed convex set is either approachable or excludable. Both sentences are part of the goal.

Milestones, in the paper's order

  1. THEOREM 2: for ∣zk∣≤1|z_k|\le1∣zk​∣≤1 with E(zk∣z1,…,zk−1)≤−u E(∣zk∣∣z1,…,zk−1)E(z_k\mid z_1,\dots,z_{k-1})\le-u\,E(|z_k|\mid z_1,\dots,z_{k-1})E(zk​∣z1​,…,zk−1​)≤−uE(∣zk​∣∣z1​,…,zk−1​) and 0<u<10<u<10<u<1,
Prob{z1+⋯+zk≥t for some k}≤(1−u1+u)t.\mathrm{Prob}\{z_1+\dots+z_k\ge t\text{ for some }k\}\le\Big(\tfrac{1-u}{1+u}\Big)^t .Prob{z1​+⋯+zk​≥t for some k}≤(1+u1−u​)t.
  1. The LEMMA: a sequence satisfying the almost-supermartingale conditions (5), (6), (7) converges to 000 at a rate depending only on the constants a,b,ca,b,ca,b,c.
  2. In the proof of THEOREM 1, the squared distances δn2\delta_n^2δn2​ satisfy (5)–(7) uniformly in II's strategy.
  3. THEOREM 1: if every x∉Sx\notin Sx∈/S admits p(x)∈Pp(x)\in Pp(x)∈P such that the hyperplane through a closest point y∈Sy\in Sy∈S, perpendicular to xyxyxy, separates xxx from R(p(x))R(p(x))R(p(x)), then SSS is approachable with any strategy playing p(xˉn)p(\bar x_n)p(xˉn​) when xˉn∉S\bar x_n\notin Sxˉn​∈/S.
  4. No set is both approachable and excludable.
  5. If a closed SSS is approachable in the transpose M′M'M′ with fff, then every closed TTT disjoint from SSS is excludable in MMM with fff.
  6. A closed convex SSS meeting every T(q)T(q)T(q) satisfies THEOREM 1's hypothesis.
  7. Every T(q0)T(q_0)T(q0​) is approachable in M′M'M′ with fn≡q0f_n\equiv q_0fn​≡q0​.

Significance

The result. THEOREM 3 is the vector analogue of the minimax theorem. For a closed convex target it reduces an infinite-horizon stochastic question, about every strategy of the opponent over all histories, to a finite family of one-shot conditions on the mean matrix Mˉ\bar MMˉ, and it shows that the game is determined for convex targets: one of the two players always wins. Its sufficient condition, THEOREM 1, is the origin of the "Blackwell strategy", which steers the average toward the target by playing, at each step, a mixed action that pushes the expected next payoff across the supporting hyperplane. Regret-matching, calibration algorithms and the reductions between online linear optimization and approachability are instances of this construction.

Formalizing it. The result is proved in the paper; to the best of available knowledge no machine-checked proof of it exists. This mission produces one: the stochastic model of a repeated game with vector payoffs, the probabilistic estimates (THEOREM 2 and the LEMMA) with the uniform rate the paper claims, and the minimax reduction for convex sets. A related platform mission, Introduction to Online Convex Optimization XIII, states a deterministic, sufficiency-only textbook variant for bounded sets; the present mission covers the stochastic model, unbounded convex targets, and the excludability half.

Difficulty

The obvious argument shows that the expected squared distance Eδn2E\delta_n^2Eδn2​ decreases like 1/n1/n1/n. That is not approachability: the definition asks for the probability that the average is ever again ε\varepsilonε-far after time N0N_0N0​, uniformly over the opponent's strategies. Controlling the whole tail of the path, with a threshold N0N_0N0​ that does not depend on the opponent, is the step that fails for a naive expectation bound and is why the paper needs a maximal inequality for sums with negative conditional drift. On the geometric side, the "only if" direction is not automatic: it requires that approachability and excludability be incompatible, which in turn requires that a play of every pair of strategies exists.

Formalization scope

Points live in EuclideanSpace ℝ (Fin N); pure actions are Fin r and Fin s; mixed actions are elements of stdSimplex. The game is a structure carrying XXX (closed, bounded, convex) and the distributions m(i,j)m(i,j)m(i,j) (probability measures with m(i,j)(Xc)=0m(i,j)(X^{c})=0m(i,j)(Xc)=0). A play is described by the conditional law of the next outcome given the past, and approachability and excludability quantify over every probability space in Type carrying such a play. Distances are extended (Metric.infEDist), equal to +∞+\infty+∞ to the empty set.

Conventions and disclosed additions:

  • r,s≥1r,s\ge1r,s≥1 where a statement needs both players to have strategies;
  • strategies are measurable in the history;
  • outcomes are indexed from 111; (5) and (7) start at n=2n=2n=2, (6) at n=1n=1n=1;
  • "the closest point" in THEOREM 1 is some closest point, and "separates" is weak separation;
  • THEOREM 2 is stated with E(∣zk∣∣⋅)E(|z_k|\mid\cdot)E(∣zk​∣∣⋅) in place of the printed "max" (the weaker hypothesis, as in the cited source), and with u<1u<1u<1 so that ((1−u)/(1+u))t((1-u)/(1+u))^t((1−u)/(1+u))t is a real power.

SSS is not assumed bounded or nonempty. With the real-valued distance, the empty set would be approachable with every strategy and THEOREM 3 would be false; the extended distance rules this out. Stating only the sufficiency direction, fixing the approaching strategy in the hypotheses, or assuming a play exists would each trivialize the goal, and none is done.

A complete development needs: conditional laws of the next outcome from a strategy pair (Ionescu–Tulcea, Kernel.traj in Mathlib), a nonnegative-supermartingale maximal inequality, the metric projection onto closed convex sets, and the minimax theorem (Mathlib's Sion theorem). The maximal inequality of THEOREM 2 and the LEMMA are reusable beyond this mission. Contributions to any milestone, and to a construction of plays, are welcome.

Selected references

  • D. Blackwell, An analog of the minimax theorem for vector payoffs, Pacific J. Math. 6(1):1–8, 1956. https://doi.org/10.2140/pjm.1956.6.1
  • D. Blackwell, On optimal systems, Ann. Math. Statist. 25(2):394–397, 1954. https://doi.org/10.1214/aoms/1177728796
  • N. Vieille, Weak approachability, Math. Oper. Res. 17(4):781–791, 1992. https://doi.org/10.1287/moor.17.4.781
  • J. Abernethy, P. Bartlett, E. Hazan, Blackwell approachability and no-regret learning are equivalent, COLT 2011. https://arxiv.org/abs/1011.1936
  • S. Hart, A. Mas-Colell, A simple adaptive procedure leading to correlated equilibrium, Econometrica 68(5):1127–1150, 2000. https://doi.org/10.1111/1468-0262.00153
12 thms3 active usersReviewed
🏆Completed
CombinatoricsGraph TheoryOperations Research+1·Captain: mikedeng1

Theoretical Improvements in Algorithmic Efficiency for Network Flow Problems 1: The Augmentation Bound for Shortest Augmenting PathsResearch Paper

Why the number of augmentations matters

The maximum flow problem asks how much of a commodity can be sent from a source to a sink through a network whose arcs have capacities. It is a basic model in operations research, underlies bipartite matching, transportation and scheduling problems, and is a standard subroutine inside larger combinatorial algorithms.

The classical method for it is the labeling method of Ford and Fulkerson: starting from some flow, repeatedly find an augmenting path from source to sink along which flow can be increased, push as much as the path allows, and stop when no such path exists. When all capacities are integers, each augmentation raises the flow value by at least one, so the method terminates, but the number of augmentations can be as large as the final flow value, which is exponential in the size of the input. Edmonds and Karp give a four-node example in which the method alternates between two paths and needs 2M2M2M augmentations for capacities MMM (Edmonds–Karp 1972, p. 250). With irrational capacities, Ford and Fulkerson showed that the method need not terminate at all and may converge to a non-maximum flow.

Timeline.

  • 1956 — Ford and Fulkerson introduce the labeling method and the max-flow min-cut theorem (Ford–Fulkerson 1956).
  • 1962 — Flows in Networks records the non-termination example for incommensurable capacities.
  • 1970 — Dinic independently obtains a polynomial bound using layered (shortest-path) networks (Dinic 1970).
  • 1972 — Edmonds and Karp prove that choosing each augmenting path with fewest arcs bounds the number of augmentations by 14(n3−n)\tfrac14(n^3-n)41​(n3−n), for arbitrary real capacities (Edmonds–Karp 1972, Theorem 1).

Setting

A network NNN consists of a finite set of nnn nodes, a source sss and a sink t≠st \ne st=s, and a set of arcs, which are ordered pairs (u,v)(u,v)(u,v) with u≠vu \ne vu=v; there is at most one arc from a node to another. One arc is the special return arc (t,s)(t,s)(t,s), and AAA denotes the set of all other arcs. Each (u,v)∈A(u,v) \in A(u,v)∈A has a real capacity c(u,v)>0c(u,v) > 0c(u,v)>0.

A flow is a nonnegative function fff on the arcs of NNN with f(u,v)≤c(u,v)f(u,v) \le c(u,v)f(u,v)≤c(u,v) on AAA and with inflow equal to outflow at every node, the return arc included. The value f(t,s)f(t,s)f(t,s) is the amount sent from sss to ttt; a maximum flow maximizes it.

Given a flow fff, the residual network NfN^fNf has the same nodes, and (u,v)(u,v)(u,v) is an arc of NfN^fNf when (u,v)∈A(u,v) \in A(u,v)∈A with c(u,v)−f(u,v)>0c(u,v) - f(u,v) > 0c(u,v)−f(u,v)>0, or (v,u)∈A(v,u) \in A(v,u)∈A with f(v,u)>0f(v,u) > 0f(v,u)>0. An augmenting path is a sequence of distinct nodes s=u1,…,up=ts = u_1, \dots, u_p = ts=u1​,…,up​=t whose consecutive pairs are arcs of NfN^fNf. Each step carries a number εi>0\varepsilon_i > 0εi​>0 (residual capacity forward, flow backward, or their sum when both (ui,ui+1)(u_i,u_{i+1})(ui​,ui+1​) and (ui+1,ui)(u_{i+1},u_i)(ui+1​,ui​) lie in AAA); ε=min⁡iεi\varepsilon = \min_i \varepsilon_iε=mini​εi​, and a step with εi=ε\varepsilon_i = \varepsilonεi​=ε is a bottleneck arc. Augmenting raises f(t,s)f(t,s)f(t,s) by ε\varepsilonε and shifts the flow on the path's arcs accordingly, using the paper's own rule for opposite arcs, which never exceeds a capacity.

A run with fewest-arc augmentations is a sequence f0,…,fKf^0, \dots, f^Kf0,…,fK where f0f^0f0 is a flow and each fk+1f^{k+1}fk+1 arises from fkf^kfk by augmenting along a path PkP^kPk with fewest arcs. The distance δk(u,v)\delta^k(u,v)δk(u,v) is the least number of arcs of a directed path from uuu to vvv in Nk=NfkN^k = N^{f^k}Nk=Nfk, or ∞\infty∞.

Formalization targets

Goal — Theorem 1

For every network on nnn nodes and every run of length KKK with fewest-arc augmentations,

K≤14 (n3−n),K \le \tfrac14\,(n^3 - n),K≤41​(n3−n),

and if no augmenting path exists relative to fKf^KfK, then fKf^KfK is a maximum flow. The capacities are arbitrary positive reals, and the initial flow is arbitrary.

Milestones

  1. §1.1: augmentation yields a flow with value f(t,s)+εf(t,s) + \varepsilonf(t,s)+ε, ε>0\varepsilon > 0ε>0.
  2. §1.1: a flow is maximum if and only if it admits no augmenting path.
  3. Proposition 1: a bottleneck arc of PkP^kPk is not an arc of Nk+1N^{k+1}Nk+1.
  4. Proposition 2: (u,v)∈Nk+1(u,v) \in N^{k+1}(u,v)∈Nk+1 implies (u,v)∈Nk(u,v) \in N^k(u,v)∈Nk or (v,u)∈Pk(v,u) \in P^k(v,u)∈Pk.
  5. Lemma 1: if (u,v)(u,v)(u,v) is a bottleneck arc at steps k<mk < mk<m, then (v,u)∈Pl(v,u) \in P^l(v,u)∈Pl for some k<l<mk < l < mk<l<m.
  6. Proposition 3: δk(s,u)≤δk+1(s,u)\delta^k(s,u) \le \delta^{k+1}(s,u)δk(s,u)≤δk+1(s,u) and δk(u,t)≤δk+1(u,t)\delta^k(u,t) \le \delta^{k+1}(u,t)δk(u,t)≤δk+1(u,t).
  7. Lemma 2: if k<lk < lk<l, (u,v)∈Pk(u,v) \in P^k(u,v)∈Pk and (v,u)∈Pl(v,u) \in P^l(v,u)∈Pl, then δl(s,t)≥δk(s,t)+2\delta^l(s,t) \ge \delta^k(s,t) + 2δl(s,t)≥δk(s,t)+2.
  8. Proof of Theorem 1: each pair {u,v}\{u,v\}{u,v} occurs as a bottleneck at most 12(n+1)\tfrac12(n+1)21​(n+1) times.

Significance

The theorem shows that one simple rule for choosing augmenting paths, which a breadth-first labeling process implements, makes the number of augmentations depend on the number of nodes alone, independent of the capacities and of their arithmetic nature. It removes both pathologies of the unrestricted labeling method at once: exponential running time for integer capacities, and non-termination for irrational ones. Together with Dinic's work it is the starting point of the theory of strongly polynomial network-flow algorithms, and the distance-monotonicity argument (Proposition 3, Lemma 2) reappears in blocking-flow and push-relabel analyses.

The result is classical and fully proved in the paper. What this mission adds is a machine-checked version of the complete argument in the paper's own model: return arc, arbitrary real capacities, and the paper's augmentation rule for pairs of opposite arcs, which differs from Ford and Fulkerson's (footnote 1, p. 249). The platform has a max-flow min-cut theorem and an integer termination theorem for the Ford–Fulkerson method in the Bertsimas–Tsitsiklis model (Introduction to Linear Optimization, missions IX–X), but no bound on the number of augmentations. No machine-checked proof of Theorem 1 in Lean is known to exist.

Difficulty

The obvious argument, "each augmentation saturates a bottleneck arc, which then disappears", fails because a saturated arc can reappear after later augmentations push flow back along its reverse. Counting augmentations therefore requires control over how often the same pair of nodes can supply a bottleneck again, and no property of a single augmentation provides it; the bound has to come from an invariant of the whole run that holds for real capacities, where no integrality argument is available. A second trap is that the converse direction of milestone 2 (no augmenting path implies maximality) is a max-flow min-cut statement that the paper cites without proof; it must be proved in the paper's model with the return arc.

Formalization scope

Nodes form a finite type V with decidable equality and nnn = Fintype.card V counts all nodes, sss and ttt included. The arc set A is a Finset (V × V) with no loops and without (t,s)(t,s)(t,s); capacities are real and positive on A. A flow is a function V → V → ℝ whose values off the arcs are ignored. A maximum flow is the predicate "f(t,s)≥g(t,s)f(t,s) \ge g(t,s)f(t,s)≥g(t,s) for every flow ggg", never a real supremum. Paths are lists of distinct nodes with every consecutive pair a residual arc, so the return arc is never on a path. Distances take values in ℕ∞. A run is a pair of ℕ-indexed sequences constrained on indices up to KKK. The explicit constants are stated as printed: 4K≤n3−n4K \le n^3 - n4K≤n3−n in ℕ (the truncated subtraction is harmless since n≤n3n \le n^3n≤n3) and 2 b(u,v)≤n+12\,b(u,v) \le n + 12b(u,v)≤n+1 for the per-pair count.

Case (b) of the paper's definition of augmenting paths is misprinted (its hypothesis repeats that of Case (c)); the formalization uses the reading (ui,ui+1)∉A(u_i,u_{i+1}) \notin A(ui​,ui+1​)∈/A, (ui+1,ui)∈A(u_{i+1},u_i) \in A(ui+1​,ui​)∈A, which the paper's own description of NfN^fNf on p. 251 confirms.

A trivializing formalization is ruled out: a run predicate that no sequence satisfies (for instance, one that requires paths through the return arc, or computes ε=0\varepsilon = 0ε=0) would make the bound vacuous; the step predicate here is satisfiable, and a concrete four-node run has been checked. Replacing the paper's augmentation rule by "increase the forward arc by ε\varepsilonε" would also change the theorem, because that rule can violate capacities.

A complete development needs basic facts on simple paths in finite digraphs, shortest paths and their subpaths, and a max-flow min-cut theorem in the paper's model. These are reusable well beyond this mission, as are the network, residual-network and augmentation definitions. Contributions proving any milestone independently are welcome.

Selected references

  • J. Edmonds, R. M. Karp, Theoretical Improvements in Algorithmic Efficiency for Network Flow Problems, Journal of the ACM 19(2):248–264, 1972. https://doi.org/10.1145/321694.321699
  • L. R. Ford, D. R. Fulkerson, Maximal Flow Through a Network, Canadian Journal of Mathematics 8:399–404, 1956. https://doi.org/10.4153/CJM-1956-045-5
  • L. R. Ford, D. R. Fulkerson, Flows in Networks, Princeton University Press, 1962. https://doi.org/10.1515/9781400875184
  • E. A. Dinic, Algorithm for Solution of a Problem of Maximum Flow in a Network with Power Estimation, Soviet Mathematics Doklady 11:1277–1280, 1970. https://www.cs.bgu.ac.il/~dinitz/D70.pdf
  • D. Bertsimas, J. N. Tsitsiklis, Introduction to Linear Optimization, Athena Scientific, 1997, Chapter 7 (network flow problems; formalized on the platform in missions IX–X).
24 thms2 active usersReviewed
🏆Completed
CombinatoricsGraph TheoryOperations Research+1·Captain: mikedeng1

Theoretical Improvements in Algorithmic Efficiency for Network Flow Problems 2: The Augmentation Bound for Maximum-Augmentation PathsResearch Paper

Motivation

The maximum flow problem asks how much of a commodity can be sent from a source to a sink through a network whose arcs have capacities. It underlies bipartite matching, transportation, scheduling and many reductions in combinatorial optimization. The classical method for it, the labeling method of Ford and Fulkerson (Flows in Networks, 1962), repeatedly finds an augmenting path and pushes flow along it. With integer capacities it terminates, but the number of augmentations can be as large as the maximum flow value itself, and Edmonds and Karp exhibit a four-node network on which this happens (p. 250). With irrational capacities the method need not terminate at all.

Edmonds and Karp, Theoretical Improvements in Algorithmic Efficiency for Network Flow Problems, J. ACM 19(2):248–264, 1972 (doi:10.1145/321694.321699), showed that two simple rules for choosing the augmenting path repair this. The first, augmenting along a path with fewest arcs, is the subject of mission 1 of this series. This mission covers the second (§1.3): augment along a path that gives the largest possible augmentation. For integer capacities the number of augmentations then grows only logarithmically in the maximum flow value.

Setting

A network NNN has a finite set VVV of nodes, a source sss and a sink t≠st \neq st=s, and a set of arcs, ordered pairs (u,v)(u,v)(u,v) with u≠vu \neq vu=v, at most one from each node to another. One arc is the return arc (t,s)(t,s)(t,s); the other arcs form the set AAA, and each (u,v)∈A(u,v) \in A(u,v)∈A has a capacity c(u,v)>0c(u,v) > 0c(u,v)>0. A flow is a nonnegative function fff on the arcs of NNN with f(u,v)≤c(u,v)f(u,v) \le c(u,v)f(u,v)≤c(u,v) on AAA and flow conservation at every node, sss and ttt included. Its value is f(t,s)f(t,s)f(t,s), the flow returned along the return arc; a maximum flow has the largest value among all flows, and f∗(t,s)f^*(t,s)f∗(t,s) denotes that value.

The residual network NfN^fNf has an arc (u,v)(u,v)(u,v) whenever (u,v)∈A(u,v) \in A(u,v)∈A and c(u,v)−f(u,v)>0c(u,v) - f(u,v) > 0c(u,v)−f(u,v)>0, or (v,u)∈A(v,u) \in A(v,u)∈A and f(v,u)>0f(v,u) > 0f(v,u)>0. An augmenting path is a directed path s=u1,…,up=ts = u_1, \dots, u_p = ts=u1​,…,up​=t of distinct nodes in NfN^fNf. Each of its arcs (u,v)(u,v)(u,v) has a residual amount e(u,v)e(u,v)e(u,v), equal to c(u,v)−f(u,v)c(u,v) - f(u,v)c(u,v)−f(u,v), f(v,u)f(v,u)f(v,u), or c(u,v)−f(u,v)+f(v,u)c(u,v) - f(u,v) + f(v,u)c(u,v)−f(u,v)+f(v,u) according to which of (u,v)(u,v)(u,v), (v,u)(v,u)(v,u) lie in AAA, and the path's augmentation is ε=min⁡e(ui,ui+1)\varepsilon = \min e(u_i, u_{i+1})ε=mine(ui​,ui+1​). Augmenting increases f(t,s)f(t,s)f(t,s) by ε\varepsilonε and changes the flow on the arcs of the path accordingly, with the paper's own rule when both (u,v)(u,v)(u,v) and (v,u)(v,u)(v,u) are arcs. The labeling method produces flows f0,f1,…f^0, f^1, \dotsf0,f1,… by augmenting along a path relative to fkf^kfk as long as one exists.

The rule studied here chooses, at every step, an augmenting path whose ε\varepsilonε is at least that of every other augmenting path relative to the current flow. The bound involves an integer M>1M > 1M>1 such that every partition of the nodes into X∋sX \ni sX∋s and Xˉ∋t\bar X \ni tXˉ∋t has at most MMM arcs of NNN with one end on each side.

Formalization targets

Goal: Theorem 2 (p. 253)

For a network with integer capacities, MMM as above, and a run f0,…,fKf^0, \dots, f^Kf0,…,fK of the labeling method with maximum augmentations started from an integer-valued flow,

K  ≤  1+log⁡M/(M−1)f∗(t,s),K \;\le\; 1 + \log_{M/(M-1)} f^*(t,s),K≤1+logM/(M−1)​f∗(t,s),

and if no augmenting path relative to fKf^KfK exists, then fKf^KfK is a maximum flow.

Milestones

The milestone list follows the paper's argument:

  1. augmentation produces a flow of value f(t,s)+εf(t,s) + \varepsilonf(t,s)+ε (§1.1, p. 249);
  2. a flow is maximum if and only if it has no augmenting path (§1.1, pp. 249–250);
  3. with integer capacities, ε\varepsilonε is a positive integer and the flows of the method stay integer-valued (§1.1, p. 250);
  4. the cut inequality c(X,Xˉ)≥f(X,Xˉ)−f(Xˉ,X)=f(t,s)c(X,\bar X) \ge f(X,\bar X) - f(\bar X,X) = f(t,s)c(X,Xˉ)≥f(X,Xˉ)−f(Xˉ,X)=f(t,s) (p. 254);
  5. f∗(t,s)−fk(t,s)≤εkMf^*(t,s) - f^k(t,s) \le \varepsilon^k Mf∗(t,s)−fk(t,s)≤εkM, where εk=fk+1(t,s)−fk(t,s)\varepsilon^k = f^{k+1}(t,s) - f^k(t,s)εk=fk+1(t,s)−fk(t,s) (p. 254);
  6. f∗(t,s)−fk+1(t,s)≤[f∗(t,s)−fk(t,s)](1−M−1)f^*(t,s) - f^{k+1}(t,s) \le [f^*(t,s) - f^k(t,s)](1 - M^{-1})f∗(t,s)−fk+1(t,s)≤[f∗(t,s)−fk(t,s)](1−M−1) (p. 254);
  7. f∗(t,s)−fk(t,s)≤f∗(t,s)(1−M−1)kf^*(t,s) - f^k(t,s) \le f^*(t,s)(1 - M^{-1})^kf∗(t,s)−fk(t,s)≤f∗(t,s)(1−M−1)k (p. 254).

Significance

Theorem 2 was among the first bounds showing that a maximum flow algorithm can be made polynomial in the size of the numbers rather than in their values: since M≤n2/2M \le n^2/2M≤n2/2 and f∗(t,s)f^*(t,s)f∗(t,s) is at most n2n^2n2 times the average capacity, the bound is O(n2log⁡(n2cˉ))O(n^2 \log(n^2 \bar c))O(n2log(n2cˉ)) in terms of the number of nodes nnn and the average capacity cˉ\bar ccˉ (p. 254). The largest-augmentation rule, often called the fattest-path or maximum-capacity augmenting path rule, is a standard textbook variant, and its geometric-decrease argument is the model for later capacity-scaling methods, including the scaling algorithm for the Hitchcock problem in §2 of the same paper (mission 3 of this series).

The theorem has been proved since 1972 and appears in standard texts. As far as a platform search shows (2026-09-26), no machine-checked proof of it exists on Prove2Me. The platform does contain LinearOptimization.max_flow_min_cut and LinearOptimization.max_flow_ford_fulkerson_integer_termination, which state max-flow min-cut and termination of the generic method in a different network model (parallel arcs, extended nonnegative capacities, no return arc); they give no count of augmentations and are related work only. This mission would contribute a formal proof of the counting bound together with the general labeling-method facts (milestones 1–3), which mission 1 needs as well.

Difficulty

The obvious argument, that each augmentation raises the value by at least 1, gives only the bound f∗(t,s)f^*(t,s)f∗(t,s), and on the four-node example of p. 250 that bound is attained by an arbitrary choice of paths. The logarithmic bound needs a lower bound on the size of the largest augmentation in terms of the remaining gap f∗(t,s)−fk(t,s)f^*(t,s) - f^k(t,s)f∗(t,s)−fk(t,s). The largest augmentation is defined by comparison with all augmenting paths relative to the current flow, while the gap is a global quantity of the network, and neither integrality nor the maximum-augmentation rule alone controls it. Milestone 2's converse, that a non-maximum flow always admits an augmenting path, is itself the max-flow min-cut theorem in this model, and the formal proof has to establish it for the paper's return-arc model rather than import it from a different one.

Formalization scope

  • Nodes form a finite type V with decidable equality. A : Finset (V × V) contains no loops and not (t,s)(t,s)(t,s). Capacities are real, c : V → V → ℝ, positive on A. Integrality is the hypothesis IntegralCaps N, and for the initial flow IsIntegralOn N (f 0) (integer values on the arcs of NNN, the return arc included).
  • Flows are functions V → V → ℝ constrained only on the arcs of NNN. A maximum flow is the predicate IsMaxFlow, comparing f(t,s)f(t,s)f(t,s) with every flow, not a supremum. The goal takes a maximum flow g as a hypothesis and sets f∗(t,s)=g(t,s)f^*(t,s) = g(t,s)f∗(t,s)=g(t,s); every network has one.
  • Augmenting paths are duplicate-free node lists whose consecutive pairs are arcs of NfN^fNf. The page prints Case (b) of the definition of εi\varepsilon_iεi​ with the same hypothesis as Case (c); the corrected Case (b), (u,v)∉A(u,v) \notin A(u,v)∈/A and (v,u)∈A(v,u) \in A(v,u)∈A, is used, as the definition of NfN^fNf (p. 251) and the list for e(u,v)e(u,v)e(u,v) (p. 253) confirm.
  • A run is IsMaxAugRun N K f P. Its initial flow is arbitrary except for integrality, and each later flow is the augmentation of the previous one along a path of maximum ε\varepsilonε among all augmenting paths.
  • The crossing bound CrossArcsBounded N M counts the arcs of NNN, return arc included, with one end on each side of every sss–ttt partition. This is the literal reading of p. 253.
  • Explicit constants. The bound is exactly 1+log⁡M/(M−1)f∗(t,s)1 + \log_{M/(M-1)} f^*(t,s)1+logM/(M−1)​f∗(t,s), written (K : ℝ) ≤ 1 + Real.logb ((M : ℝ) / ((M : ℝ) - 1)) (g N.t N.s) with M>1M > 1M>1 a natural number. When f∗(t,s)=0f^*(t,s) = 0f∗(t,s)=0, Real.logb gives 000 and the bound reads K≤1K \le 1K≤1. The contraction factor is 1 - (M : ℝ)⁻¹.
  • A statement that bounds only runs of an unsatisfiable step predicate, drops the integrality of f0f^0f0 or of the capacities (the bound is false without them), or compares ε\varepsilonε only among paths of some restricted class does not formalize Theorem 2. A sorry-free check exhibits a four-node network with integer capacities and a valid maximum-augmentation step.
  • Reusable beyond this mission: the return-arc network model, the augmentation step with the paper's opposite-arc rule, the integrality lemma, and the cut inequality. Proofs of any milestone are welcome, as are proofs of the converse in milestone 2 that could later be shared with mission 1.

Selected references

  • J. Edmonds, R. M. Karp, Theoretical Improvements in Algorithmic Efficiency for Network Flow Problems, Journal of the ACM 19(2):248–264, 1972. https://doi.org/10.1145/321694.321699
  • L. R. Ford, D. R. Fulkerson, Flows in Networks, RAND report R-375-PR, 1962; Princeton University Press, 1962. https://www.rand.org/pubs/reports/R375.html
11 thms3 active usersReviewed
🏆Completed
CombinatoricsGraph TheoryLinear Optimization+2·Captain: mikedeng1

Theoretical Improvements in Algorithmic Efficiency for Network Flow Problems 3: Capacity Scaling for the Hitchcock ProblemResearch Paper

Motivation

The Hitchcock transportation problem asks how to ship a commodity from mmm supply points to nnn demand points at minimum total cost. It was posed by Hitchcock in 1941 and is one of the founding problems of linear programming and network optimization; it is solved routinely in logistics, and its structure (a bipartite network with supplies, demands and per-unit costs) recurs in assignment, optimal transport and matching.

The classical algorithms for it, the Ford–Fulkerson primal–dual method among them, augment flow one path at a time. With integral data their number of augmentations is bounded only by the total supply ∑iai\sum_i a_i∑i​ai​, which is exponential in the number of binary digits used to write the data. Edmonds and Karp, Theoretical Improvements in Algorithmic Efficiency for Network Flow Problems (J. ACM 19(2), 1972, doi:10.1145/321694.321699), introduced capacity scaling: solve a coarse version of the problem first, then refine one binary digit at a time. Their Theorem 9 (p. 260) bounds the total number of augmentations by a quantity proportional to max⁡(m,n)\max(m,n)max(m,n) times the number of bits of the data, which made the transportation problem, and through standard reductions the minimum-cost flow problem, one of the first network problems with a polynomial-time ("good") algorithm in the sense of Edmonds.

Timeline. Hitchcock (1941) posed the problem; Ford and Fulkerson (1956–1962) gave the primal–dual labeling method and the optimality conditions by node potentials; Edmonds and Karp (1972) gave the scaling method and the bound formalized here. Strongly polynomial algorithms, independent of the size of the numbers, came later (Tardos 1985; Orlin 1988).

Setting

The network of Figure 1 (p. 259) has a source sss, a sink ttt, supply nodes s1,…,sms_1,\dots,s_ms1​,…,sm​ and demand nodes t1,…,tnt_1,\dots,t_nt1​,…,tn​, with m,n≥1m,n\ge 1m,n≥1. Its arcs are (s,si)(s,s_i)(s,si​) with capacity aia_iai​ and cost 000; (si,tj)(s_i,t_j)(si​,tj​) with capacity +∞+\infty+∞ and cost dij≥0d_{ij}\ge 0dij​≥0; (tj,t)(t_j,t)(tj​,t) with capacity bjb_jbj​ and cost 000; and the return arc (t,s)(t,s)(t,s) with capacity +∞+\infty+∞ and cost 000. The supplies aia_iai​ and demands bjb_jbj​ are positive integers with ∑iai=∑jbj=:B\sum_i a_i=\sum_j b_j=:B∑i​ai​=∑j​bj​=:B.

A flow assigns a nonnegative number to every arc, at most the capacity, with inflow equal to outflow at every node. Write f0i=f(s,si)f_{0i}=f(s,s_i)f0i​=f(s,si​), fij=f(si,tj)f_{ij}=f(s_i,t_j)fij​=f(si​,tj​), fj0=f(tj,t)f_{j0}=f(t_j,t)fj0​=f(tj​,t); the value of fff is f(t,s)f(t,s)f(t,s), and a maximum flow is one of largest value. Its cost is ∑i,jdijfij\sum_{i,j} d_{ij} f_{ij}∑i,j​dij​fij​; a flow is extreme if no flow of the same value is cheaper. A flow is pseudo-extreme if there are real ui,vju_i, v_jui​,vj​ with ui−vj+dij≥0u_i-v_j+d_{ij}\ge 0ui​−vj​+dij​≥0 for all i,ji,ji,j and fij=0f_{ij}=0fij​=0 whenever ui−vj+dij>0u_i-v_j+d_{ij}>0ui​−vj​+dij​>0.

An augmenting path relative to fff is a sequence of distinct nodes from sss to ttt in which each step either follows an arc with spare capacity or traverses backwards an arc carrying positive flow; augmenting pushes the minimum spare amount ε\varepsilonε along it and raises f(t,s)f(t,s)f(t,s) by ε\varepsilonε.

For p≥0p\ge 0p≥0, Problem ppp has the same network and costs, with capacities ⌊ai/2p⌋\lfloor a_i/2^p\rfloor⌊ai​/2p⌋ and ⌊bj/2p⌋\lfloor b_j/2^p\rfloor⌊bj​/2p⌋. Choose lll with every ai,bj<2la_i,b_j<2^lai​,bj​<2l. The scaling method solves Problems l−1,l−2,…,0l-1,l-2,\dots,0l−1,l−2,…,0 in turn. Each phase performs augmentations keeping every flow pseudo-extreme, until no augmenting path is left. Problem l−1l-1l−1 starts from the zero flow, and Problem p−1p-1p−1 starts from twice the final flow of Problem ppp.

Formalization targets

Goal: Theorem 9

For every run of the scaling method, the total number ∑p<lKp\sum_{p<l} K_p∑p<l​Kp​ of flow augmentations satisfies

∑p=0l−1Kp  ≤  max⁡(m,n)(2+⌊log⁡2∑i=1maimax⁡(m,n)⌋).\sum_{p=0}^{l-1} K_p \;\le\; \max(m,n)\left(2+\left\lfloor \log_2\frac{\sum_{i=1}^m a_i}{\max(m,n)}\right\rfloor\right).p=0∑l−1​Kp​≤max(m,n)(2+⌊log2​max(m,n)∑i=1m​ai​​⌋).

The bound holds for every lll admissible for the data and every choice of costs, and is stated with the paper's constant exactly.

Milestones

  1. §1.1: augmentation preserves feasibility and raises the value by ε>0\varepsilon>0ε>0; a flow is maximum iff no augmenting path exists.
  2. Theorem 8: a maximum flow is extreme iff there are potentials u0,…,umu_0,\dots,u_mu0​,…,um​, v0,…,vnv_0,\dots,v_nv0​,…,vn​ with (5a)–(5f).
  3. §2.2: a pseudo-extreme maximum flow is extreme.
  4. Lemma 3: if fff is pseudo-extreme in Problem ppp, then 2f2f2f is pseudo-extreme in Problem p−1p-1p−1.
  5. The maximum-flow value of Problem ppp is fp∗=min⁡(∑i⌊ai/2p⌋,∑j⌊bj/2p⌋)f_p^*=\min\big(\sum_i\lfloor a_i/2^p\rfloor,\sum_j\lfloor b_j/2^p\rfloor\big)fp∗​=min(∑i​⌊ai​/2p⌋,∑j​⌊bj​/2p⌋).
  6. Eq. (6): ∑pKp≤f0∗−∑p=1l−1fp∗\sum_p K_p\le f_0^*-\sum_{p=1}^{l-1} f_p^*∑p​Kp​≤f0∗​−∑p=1l−1​fp∗​.
  7. fp∗≥max⁡(0, B/2p−max⁡(m,n))f_p^*\ge\max\big(0,\,B/2^p-\max(m,n)\big)fp∗​≥max(0,B/2p−max(m,n)).

Significance

The result. Theorem 9 shows that scaling reduces the number of augmentations from order BBB to order max⁡(m,n)log⁡2(B/max⁡(m,n))\max(m,n)\log_2(B/\max(m,n))max(m,n)log2​(B/max(m,n)), which is roughly the length of the binary encoding of the data. Combined with the O(mn)O(mn)O(mn) cost of one augmentation it gives a polynomial-time algorithm for the transportation problem; through the reduction of minimum-cost flow to transportation (p. 261) it gives one for minimum-cost flow. Capacity and cost scaling became standard techniques in network optimization and in combinatorial optimization generally. Theorem 8 and the pseudo-extreme criterion are the optimality certificates for transportation, a special case of linear-programming complementary slackness.

Formalizing it. The theorem has been proved since 1972. This mission produces a machine-checked version of the bound, of the exact counting argument (eq. (6)) and of the arithmetic estimate that turns it into the stated constant, together with the potential-based optimality conditions for the transportation network. To our knowledge no machine-checked bound on the number of augmentations of a flow algorithm exists on the platform.

Difficulty

The obvious argument bounds the number of augmentations by the increase in flow value, since each augmentation raises the value by a positive integer. Applied to Problem 0 directly this gives only BBB. The scaling bound needs three things that the naive count does not supply. First, doubling the final flow of Problem ppp must give a feasible, still pseudo-extreme, starting flow for Problem p−1p-1p−1 (Lemma 3). Second, the gap between that start and the optimum of Problem p−1p-1p−1 must be small, which requires the exact maximum-flow value fp∗f_p^*fp∗​ of each scaled problem. Third, the telescoping sum of the gaps must be estimated against log⁡2(B/max⁡(m,n))\log_2(B/\max(m,n))log2​(B/max(m,n)) with the floors handled exactly. Integrality of every intermediate flow is not assumed; it has to be carried along the run from the integral capacities and the zero start.

Formalization scope

Everything lives in the namespace EdmondsKarp.Scaling. Nodes form an inductive type (s, t, src i, dst j). A flow is a structure with components f0, fx, fz, ret for the four arc families, real valued; the infinite capacities are encoded by the absence of an upper bound. IsMaxFlow is a predicate comparing values with every flow, not a supremum. Problem ppp uses natural-number division for ⌊ai/2p⌋\lfloor a_i/2^p\rfloor⌊ai​/2p⌋. Augmenting paths are lists of distinct nodes from s to t whose consecutive pairs have positive residual amount (resCap, valued in WithTop ℝ); they never use the return arc.

A run of the scaling method (IsScalingRun) is a family of phases F p 0,…,F p (K p)F\,p\,0,\dots,F\,p\,(K\,p)Fp0,…,Fp(Kp) for p<lp<lp<l. It starts from 000 in Problem l−1l-1l−1, restarts from 2F p (K p)2F\,p\,(K\,p)2Fp(Kp) in Problem p−1p-1p−1, and advances by one augmentation per step. Every flow is pseudo-extreme, and each phase ends with no augmenting path left. The paper's path-selection rule (minimum weight for the modified reduced costs Δˉ\bar\DeltaΔˉ) is abstracted to this invariant, which the paper states for it, so every run of the paper's method is covered.

The goal compares the count, cast to Z\mathbb{Z}Z, with max⁡(m,n) (2+⌊log⁡2(B/max⁡(m,n))⌋)\max(m,n)\,(2+\lfloor\log_2(B/\max(m,n))\rfloor)max(m,n)(2+⌊log2​(B/max(m,n))⌋), using Real.logb 2 and Int.floor. The constant is the printed one; neither O(⋅)O(\cdot)O(⋅) nor a weaker constant is acceptable. Positivity of all ai,bja_i,b_jai​,bj​ is a hypothesis, because without it the printed bound is false (for m=5m=5m=5, n=1n=1n=1, a=(1,0,0,0,0)a=(1,0,0,0,0)a=(1,0,0,0,0), b=(1)b=(1)b=(1) one augmentation is needed and the bound is negative). A formalization in which runs could be empty or never reach a maximum flow would trivialize the goal; the run predicate forbids this, and it is satisfiable (for instance with m=n=1m=n=1m=n=1, a=b=(1)a=b=(1)a=b=(1), l=1l=1l=1 and one augmentation).

A complete development needs max-flow/min-cut for the bipartite network, integrality of flows along a run, the exact value of fp∗f_p^*fp∗​, the telescoping identity and floor/logarithm estimates. LP duality or complementary slackness is needed only for Theorem 8. The augmenting-path and max-flow lemmas are reusable for other bipartite flow problems. Contributions welcome: proofs of any milestone, and a formalization of the paper's exact Δˉ\bar\DeltaΔˉ path rule showing that it satisfies the invariant.

Selected references

  • J. Edmonds, R. M. Karp, Theoretical Improvements in Algorithmic Efficiency for Network Flow Problems, Journal of the ACM 19(2):248–264, 1972. https://doi.org/10.1145/321694.321699
  • F. L. Hitchcock, The Distribution of a Product from Several Sources to Numerous Localities, Journal of Mathematics and Physics 20:224–230, 1941. https://doi.org/10.1002/sapm1941201224
  • L. R. Ford, D. R. Fulkerson, Flows in Networks, Princeton University Press, 1962. https://doi.org/10.1515/9781400875184
  • É. Tardos, A strongly polynomial minimum cost circulation algorithm, Combinatorica 5:247–255, 1985. https://doi.org/10.1007/BF02579369
  • J. B. Orlin, A faster strongly polynomial minimum cost flow algorithm, Proc. STOC 1988, 377–387. https://doi.org/10.1145/62212.62249
12 thms5 active usersReviewed
🏆Completed
CombinatoricsLinear OptimizationOperations Research+1·Captain: mikedeng1

Proximity Results and Faster Algorithms for Integer Programming Using the Steinitz Lemma: ℓ1-Proximity of Integer and LP OptimaResearch Paper

Motivation

Integer programs are routinely solved by first solving their linear programming (LP) relaxation and then searching for an integer optimum near the fractional one. How near an integer optimum must be is the subject of proximity theorems. They bound the search region of branch-and-bound and of dynamic programming, and they turn a fractional optimum into a starting point for exact algorithms.

The classical bound is due to Cook, Gerards, Schrijver and Tardos (Math. Programming 34, 1986): for an integer program in inequality form max⁡{cTx:Ax≤b, x∈Zn}\max\{c^Tx : Ax\le b,\ x\in\mathbb Z^n\}max{cTx:Ax≤b, x∈Zn} that is feasible and bounded, every optimal LP solution x∗x^*x∗ has an optimal integer solution z∗z^*z∗ with ∥x∗−z∗∥∞≤n⋅δ\|x^*-z^*\|_\infty\le n\cdot\delta∥x∗−z∗∥∞​≤n⋅δ, where δ\deltaδ is the largest absolute value of a subdeterminant of AAA. For programs in standard form Ax=bAx=bAx=b with mmm rows this gives, via the Hadamard bound, ∥z∗−x∗∥1≤n2⋅mm/2Δm\|z^*-x^*\|_1\le n^2\cdot m^{m/2}\Delta^m∥z∗−x∗∥1​≤n2⋅mm/2Δm, which grows with the number of variables nnn.

Eisenbrand and Weismantel (ACM Trans. Algorithms 16(1), Article 5, 2019; conference version SODA 2018) removed the dependence on nnn altogether, using the Steinitz lemma on rearranging vectors so that all partial sums stay short. Their bound depends only on mmm and on the largest absolute value Δ\DeltaΔ of an entry of AAA, and it is the basis of their faster algorithms for integer programs with few constraints.

Setting

Fix natural numbers mmm (rows) and nnn (variables). The data are a matrix A∈Zm×nA\in\mathbb Z^{m\times n}A∈Zm×n, a right-hand side b∈Zmb\in\mathbb Z^mb∈Zm, an objective c∈Znc\in\mathbb Z^nc∈Zn and upper bounds u∈Nnu\in\mathbb N^nu∈Nn. A natural number Δ\DeltaΔ bounds the entries: ∣aij∣≤Δ|a_{ij}|\le\Delta∣aij​∣≤Δ for all i,ji,ji,j. The integer program (10) is

max⁡{cTx:Ax=b, 0≤x≤u, x∈Zn},\max\{c^Tx : Ax=b,\ 0\le x\le u,\ x\in\mathbb Z^n\},max{cTx:Ax=b, 0≤x≤u, x∈Zn},

and its LP relaxation is the same problem over x∈Rnx\in\mathbb R^nx∈Rn. Its feasible region P={x∈Rn:Ax=b, 0≤x≤u}P=\{x\in\mathbb R^n: Ax=b,\ 0\le x\le u\}P={x∈Rn:Ax=b, 0≤x≤u} is a polytope, lpPolytope A b u. An optimal vertex solution is an optimal solution of the LP relaxation (IsLPOptimal) that is an extreme point of PPP. An optimal integer solution is IsIPOptimal. Both are maxima.

Distances are measured in the ℓ1\ell_1ℓ1​-norm ∥z−x∥1=∑i∣zi−xi∣\|z-x\|_1=\sum_i|z_i-x_i|∥z−x∥1​=∑i​∣zi​−xi​∣.

A vector y∈Zny\in\mathbb Z^ny∈Zn is a cycle of z∗−x∗z^*-x^*z∗−x∗ (Eq. (14)) if Ay=0Ay=0Ay=0 and, for every iii, ∣yi∣≤∣(z∗−x∗)i∣|y_i|\le|(z^*-x^*)_i|∣yi​∣≤∣(z∗−x∗)i​∣ and yi(z∗−x∗)i≥0y_i(z^*-x^*)_i\ge0yi​(z∗−x∗)i​≥0: an integer kernel vector that is sign-compatible with z∗−x∗z^*-x^*z∗−x∗ and dominated by it (IsCycle).

The Steinitz lemma (Theorem 1.1) concerns vectors x1,…,xnx_1,\dots,x_nx1​,…,xn​ in an mmm-dimensional normed space with ∑ixi=0\sum_i x_i=0∑i​xi​=0 and ∥xi∥≤1\|x_i\|\le1∥xi​∥≤1. It asserts a permutation π\piπ with ∥∑j≤kxπ(j)∥≤c(m)\|\sum_{j\le k}x_{\pi(j)}\|\le c(m)∥∑j≤k​xπ(j)​∥≤c(m) for all kkk, and the paper uses Sevast'anov's constant c(m)=mc(m)=mc(m)=m.

Formalization targets

Goal: Theorem 3.3 (p. 5:8)

If (10) has an integer feasible point and x∗x^*x∗ is an optimal vertex solution of its LP relaxation, then there is an optimal solution z∗z^*z∗ of (10) with

∥z∗−x∗∥1 ≤ m⋅(2mΔ+1)m.\|z^*-x^*\|_1\ \le\ m\cdot(2m\Delta+1)^m .∥z∗−x∗∥1​ ≤ m⋅(2mΔ+1)m.

The constant is the paper's. The goal holds for all mmm, nnn, bbb, ccc and uuu; only mmm and Δ\DeltaΔ enter the bound.

Milestones, in the order the proof uses them

  1. Lemma 3.1 (p. 5:8): for an LP optimum x∗x^*x∗, an integer optimum z∗z^*z∗ and a cycle yyy of z∗−x∗z^*-x^*z∗−x∗, the vector z∗−yz^*-yz∗−y is integer feasible, x∗+yx^*+yx∗+y is LP feasible, and cTy≤0c^Ty\le0cTy≤0.
  2. Lemma 3.2 (p. 5:8): if z∗z^*z∗ minimizes ∥z∗−x∗∥1\|z^*-x^*\|_1∥z∗−x∗∥1​ among the optimal integer solutions, then z∗−x∗z^*-x^*z∗−x∗ has no nonzero cycle.
  3. Theorem 1.1 with c(m)=mc(m)=mc(m)=m (p. 5:4): the Steinitz lemma in any mmm-dimensional real normed space.
  4. Proof of Theorem 3.3 (pp. 5:8–5:9): round a vertex x∗x^*x∗ towards an integer vector and write {x∗}\{x^*\}{x∗} for the remainder. Then ∥−A{x∗}∥∞≤Δm\|-A\{x^*\}\|_\infty\le\Delta m∥−A{x∗}∥∞​≤Δm and −A{x∗}=w1+⋯+wm-A\{x^*\}=w_1+\dots+w_m−A{x∗}=w1​+⋯+wm​ with integer wjw_jwj​, ∥wj∥∞≤Δ\|w_j\|_\infty\le\Delta∥wj​∥∞​≤Δ.
  5. Proof of Theorem 3.3, Eq. (20) (p. 5:9): a sequence of integer vectors of ℓ∞\ell_\inftyℓ∞​-norm at most mΔm\DeltamΔ in which no value repeats m+1m+1m+1 times has length at most m(2mΔ+1)mm(2m\Delta+1)^mm(2mΔ+1)m.
  6. Eq. (21) (p. 5:9), a consequence: cT(x∗−z∗)≤∥c∥∞⋅m(2mΔ+1)mc^T(x^*-z^*)\le\|c\|_\infty\cdot m(2m\Delta+1)^mcT(x∗−z∗)≤∥c∥∞​⋅m(2mΔ+1)m for every optimal integer solution z∗z^*z∗.

Significance

The bound is independent of the number of variables. Combined with the paper's dynamic program, it gives the paper's running-time results for integer programs with upper bounds: an optimal LP vertex is computed, and the integer optimum is searched for within an ℓ1\ell_1ℓ1​-ball of radius m(2mΔ+1)mm(2m\Delta+1)^mm(2mΔ+1)m around it. Eq. (21) bounds the absolute integrality gap by the same quantity, scaled by ∥c∥∞\|c\|_\infty∥c∥∞​. The Steinitz lemma with constant mmm is a general tool in discrepancy theory and in scheduling algorithms.

All of these results have published proofs. No machine-checked proof of Theorem 3.3 or of the Steinitz lemma is known to this mission, and Mathlib has no Steinitz lemma. The mission asks for complete Lean proofs of the milestones and of the goal. A proof of the Steinitz lemma with constant mmm for arbitrary norms is reusable well beyond integer programming.

Difficulty

Lemmas 3.1 and 3.2 and the counting step are elementary. The substance lies in two places. The first is the Steinitz lemma with the linear constant mmm for an arbitrary norm: the bound must hold uniformly in the number nnn of vectors, and the constant must be exactly mmm, because the goal's constant (2mΔ+1)m(2m\Delta+1)^m(2mΔ+1)m counts integer points of ℓ∞\ell_\inftyℓ∞​-norm at most mΔm\DeltamΔ. The second is the passage from a vertex to at most mmm fractional coordinates. The paper argues this in one sentence ("x∗x^*x∗ has at most mmm positive entries"), which is not literally true for (10) with upper bounds: coordinates at their upper bound ui>0u_i>0ui​>0 are positive. The correct fact concerns coordinates strictly between 000 and uiu_iui​, and it has to be derived from the extreme-point property of PPP.

Formalization scope

  • All declarations live in the namespace IPProximity.Eisenbrand. The data are integral: A : Matrix (Fin m) (Fin n) ℤ, b : Fin m → ℤ, c : Fin n → ℤ, u : Fin n → ℕ (entries ui=0u_i=0ui​=0 allowed), Δ : ℕ. They are cast to ℝ once, inside the LP definitions. m=0m=0m=0 and n=0n=0n=0 are allowed.
  • "Vertex" is Mathlib's Set.extremePoints ℝ (lpPolytope A b u). It is not defined through bases or by counting fractional coordinates.
  • The ℓ1\ell_1ℓ1​-distance is the explicit sum ∑ i, |(z i : ℝ) - x i|. Mathlib's norm on Fin n → ℝ is the sup norm, and it is used only where the paper has ∥⋅∥∞\|\cdot\|_\infty∥⋅∥∞​ (the ∥c∥∞\|c\|_\infty∥c∥∞​ of Eq. (21)).
  • The goal adds one hypothesis the paper leaves implicit: (10) has an integer feasible point. The paper's proof begins with "Let z∗z^*z∗ be an optimal integer solution"; without this hypothesis the conclusion is false.
  • Eq. (14) is formalized literally, so y=0y=0y=0 is a cycle, and Lemma 3.2 is stated for nonzero cycles, which is what its proof establishes. Dropping the vertex hypothesis would make the goal false, so the goal keeps it. The constant is exactly m(2mΔ+1)mm(2m\Delta+1)^mm(2mΔ+1)m, with no hidden existential constant.
  • The Steinitz milestone is stated for any finite-dimensional real normed space of dimension mmm with the explicit constant mmm. The goal needs only the ℓ∞\ell_\inftyℓ∞​ case on Rm\mathbb R^mRm.
  • Out of scope: the dynamic program and the running-time theorems of Sections 2 and 4, and the refinement ∥z∗−x∗∥1≤2Δ\|z^*-x^*\|_1\le2\Delta∥z∗−x∗∥1​≤2Δ for m=1m=1m=1.

Contributions welcome: proofs of any milestone, in particular the Steinitz lemma, and a proof of the goal from the milestones.

Selected references

  • F. Eisenbrand, R. Weismantel, Proximity Results and Faster Algorithms for Integer Programming Using the Steinitz Lemma, ACM Transactions on Algorithms 16(1), Article 5, 2019. https://doi.org/10.1145/3340322
  • W. Cook, A. M. H. Gerards, A. Schrijver, É. Tardos, Sensitivity theorems in integer linear programming, Mathematical Programming 34, 251–264, 1986. https://doi.org/10.1007/BF01582230
  • E. Steinitz, Bedingt konvergente Reihen und konvexe Systeme, Journal für die reine und angewandte Mathematik 143, 128–176, 1913. https://doi.org/10.1515/crll.1913.143.128
  • S. Sevast'janov, Approximate solution of some problems of scheduling theory (in Russian), Metody Diskretnogo Analiza 32, 66–75, 1978 (reference [31] of the paper).
  • V. S. Grinberg, S. V. Sevast'yanov, Value of the Steinitz constant, Functional Analysis and Its Applications 14(2), 125–126, 1980 (reference [16] of the paper).
12 thms3 active usersReviewed
🏆Completed
Convex OptimizationNumerical AnalysisOperations Research+1·Captain: mikedeng1

Projected Gradient Methods for Linearly Constrained Problems I: The Gradient Projection Method Drives the Projected Gradients to ZeroResearch Paper

Motivation

The gradient projection method minimizes a continuously differentiable function over a closed convex set by alternating a gradient step with a projection back onto the set. It was proposed by Goldstein (1964) and by Levitin and Polyak (1966), and it is the basic step of many algorithms for bound constrained and linearly constrained optimization, including large-scale quadratic programming codes.

The classical convergence results either need a Lipschitz constant for the gradient to choose the step (Goldstein; Levitin–Polyak), or assume a bounded sequence of iterates and conclude only that limit points are stationary (Bertsekas, 1976, for the Armijo rule on a box; Dunn, 1981). Calamai and Moré (1987) introduced a general step-size rule that contains the Armijo procedure, and proved a convergence statement that needs no boundedness of the iterates: the projected gradients tend to zero. This statement is what later results on finite identification of the active constraints use as their hypothesis, so it is the natural entry point to the paper.

Setting

Let EEE be a finite-dimensional real inner product space with norm ∥⋅∥\|\cdot\|∥⋅∥, let Ω⊆E\Omega \subseteq EΩ⊆E be nonempty, closed and convex, and let f:E→Rf : E \to \mathbb Rf:E→R be continuously differentiable on Ω\OmegaΩ, with gradient ∇f\nabla f∇f taken with respect to the inner product. The problem is

min⁡{f(x):x∈Ω}.(1.1)\min\{f(x) : x \in \Omega\}. \qquad (1.1)min{f(x):x∈Ω}.(1.1)
  • The projection into Ω\OmegaΩ is P(x)=argmin⁡{∥z−x∥:z∈Ω}P(x) = \operatorname{argmin}\{\|z - x\| : z \in \Omega\}P(x)=argmin{∥z−x∥:z∈Ω}, the unique nearest point of Ω\OmegaΩ to xxx (Eq. (1.3)).
  • A point x∗∈Ωx^* \in \Omegax∗∈Ω is stationary if ⟨∇f(x∗),x−x∗⟩≥0\langle \nabla f(x^*), x - x^* \rangle \ge 0⟨∇f(x∗),x−x∗⟩≥0 for all x∈Ωx \in \Omegax∈Ω (Eq. (1.5)).
  • A direction vvv is feasible at x∈Ωx \in \Omegax∈Ω if x+τv∈Ωx + \tau v \in \Omegax+τv∈Ω for all sufficiently small τ>0\tau > 0τ>0; the tangent cone T(x)T(x)T(x) is the closure of the set of feasible directions.
  • The projected gradient is ∇Ωf(x)=argmin⁡{∥v+∇f(x)∥:v∈T(x)}\nabla_\Omega f(x) = \operatorname{argmin}\{\|v + \nabla f(x)\| : v \in T(x)\}∇Ω​f(x)=argmin{∥v+∇f(x)∥:v∈T(x)} (Eq. (3.1)), the nearest point of T(x)T(x)T(x) to −∇f(x)-\nabla f(x)−∇f(x).

A run of the gradient projection method is a pair of sequences (xk)k≥0(x_k)_{k\ge0}(xk​)k≥0​, (αk)k≥0(\alpha_k)_{k \ge 0}(αk​)k≥0​ with x0∈Ωx_0 \in \Omegax0​∈Ω, αk>0\alpha_k > 0αk​>0 and xk+1=xk(αk)x_{k+1} = x_k(\alpha_k)xk+1​=xk​(αk​), where xk(α)=P(xk−α∇f(xk))x_k(\alpha) = P(x_k - \alpha \nabla f(x_k))xk​(α)=P(xk​−α∇f(xk​)). For fixed constants γ1,γ2>0\gamma_1, \gamma_2 > 0γ1​,γ2​>0 and μ1,μ2∈(0,1)\mu_1, \mu_2 \in (0,1)μ1​,μ2​∈(0,1), the steps satisfy the sufficient decrease condition

f(xk+1)≤f(xk)+μ1⟨∇f(xk),xk+1−xk⟩(2.1)f(x_{k+1}) \le f(x_k) + \mu_1 \langle \nabla f(x_k), x_{k+1} - x_k\rangle \qquad (2.1)f(xk+1​)≤f(xk​)+μ1​⟨∇f(xk​),xk+1​−xk​⟩(2.1)

and the condition that the step is not too small: either αk≥γ1\alpha_k \ge \gamma_1αk​≥γ1​, or αk≥γ2αˉk>0\alpha_k \ge \gamma_2 \bar\alpha_k > 0αk​≥γ2​αˉk​>0 for some αˉk\bar\alpha_kαˉk​ at which sufficient decrease fails,

f(xk(αˉk))>f(xk)+μ2⟨∇f(xk),xk(αˉk)−xk⟩.(2.2)–(2.3)f(x_k(\bar\alpha_k)) > f(x_k) + \mu_2 \langle \nabla f(x_k), x_k(\bar\alpha_k) - x_k \rangle. \qquad (2.2)\text{–}(2.3)f(xk​(αˉk​))>f(xk​)+μ2​⟨∇f(xk​),xk​(αˉk​)−xk​⟩.(2.2)–(2.3)

In Lean these objects are proj, projGrad and IsGradientProjectionRun in the namespace CalamaiMore.Convergence, together with the shared definitions tangentCone and IsStationaryPoint in CalamaiMore.Shared.

Formalization targets

Goal: Theorem 3.2

If, in addition, the steps are bounded, αk≤γ3\alpha_k \le \gamma_3αk​≤γ3​ for some constant γ3\gamma_3γ3​ (3.2), fff is bounded below on Ω\OmegaΩ, and ∇f\nabla f∇f is uniformly continuous on Ω\OmegaΩ, then

lim⁡k→∞∥∇Ωf(xk)∥=0.\lim_{k \to \infty} \|\nabla_\Omega f(x_k)\| = 0.k→∞lim​∥∇Ω​f(xk​)∥=0.

No boundedness of {xk}\{x_k\}{xk​} is assumed, and no specific step rule beyond (2.1)–(2.3).

Milestones

  1. Lemma 2.1: PPP satisfies the variational inequality ⟨P(x)−x,z−P(x)⟩≥0\langle P(x) - x, z - P(x)\rangle \ge 0⟨P(x)−x,z−P(x)⟩≥0 for z∈Ωz \in \Omegaz∈Ω, is monotone (strictly when P(y)≠P(x)P(y) \ne P(x)P(y)=P(x)) and nonexpansive.
  2. Eqs. (2.4)–(2.5): ⟨∇f(xk),xk−xk(α)⟩≥∥xk(α)−xk∥2/α\langle \nabla f(x_k), x_k - x_k(\alpha)\rangle \ge \|x_k(\alpha) - x_k\|^2/\alpha⟨∇f(xk​),xk​−xk​(α)⟩≥∥xk​(α)−xk​∥2/α for α>0\alpha > 0α>0, and its instance at α=αk\alpha = \alpha_kα=αk​.
  3. Lemma 2.2: α↦∥P(x+αd)−x∥/α\alpha \mapsto \|P(x + \alpha d) - x\|/\alphaα↦∥P(x+αd)−x∥/α is nonincreasing on (0,∞)(0, \infty)(0,∞).
  4. Theorem 2.3: under the hypotheses of the goal without (3.2), ∥xk+1−xk∥/αk→0\|x_{k+1} - x_k\|/\alpha_k \to 0∥xk+1​−xk​∥/αk​→0.
  5. Lemma 3.1: −⟨∇f(x),∇Ωf(x)⟩=∥∇Ωf(x)∥2-\langle \nabla f(x), \nabla_\Omega f(x) \rangle = \|\nabla_\Omega f(x)\|^2−⟨∇f(x),∇Ω​f(x)⟩=∥∇Ω​f(x)∥2; min⁡{⟨∇f(x),v⟩:v∈T(x),∥v∥≤1}=−∥∇Ωf(x)∥\min\{\langle \nabla f(x), v\rangle : v \in T(x), \|v\| \le 1\} = -\|\nabla_\Omega f(x)\|min{⟨∇f(x),v⟩:v∈T(x),∥v∥≤1}=−∥∇Ω​f(x)∥; and xxx is stationary if and only if ∇Ωf(x)=0\nabla_\Omega f(x) = 0∇Ω​f(x)=0.
  6. Theorem 2.4: if some subsequence {xk:k∈K}\{x_k : k \in K\}{xk​:k∈K} is bounded, ∥xk+1−xk∥/αk→0\|x_{k+1} - x_k\|/\alpha_k \to 0∥xk+1​−xk​∥/αk​→0 along KKK, and every limit point of {xk}\{x_k\}{xk​} is stationary.
  7. Lemma 3.3: x↦∥∇Ωf(x)∥x \mapsto \|\nabla_\Omega f(x)\|x↦∥∇Ω​f(x)∥ is lower semicontinuous on Ω\OmegaΩ.
  8. Theorem 3.4: with (3.2) and a bounded subsequence {xk:k∈K}\{x_k : k \in K\}{xk​:k∈K}, ∥∇Ωf(xk+1)∥→0\|\nabla_\Omega f(x_{k+1})\| \to 0∥∇Ω​f(xk+1​)∥→0 along KKK.

Significance

By Lemma 3.1, ∥∇Ωf(x)∥\|\nabla_\Omega f(x)\|∥∇Ω​f(x)∥ vanishes exactly at stationary points, so Theorem 3.2 says that the method approaches stationarity in a quantitative sense even when the iterates are unbounded. With Lemma 3.3 it gives that every limit point is stationary. For polyhedral Ω\OmegaΩ it is the hypothesis of the paper's Theorem 4.1: any sequence with ∇Ωf(xk)→0\nabla_\Omega f(x_k) \to 0∇Ω​f(xk​)→0 converging to a nondegenerate point identifies the active constraints in finitely many iterations, which is the basis of active-set methods that switch between gradient projection steps and subspace minimization.

The results are proved in the paper. To our knowledge they have no machine-checked proof. This mission produces a formal account of the gradient projection method with a general step rule, a reusable projected gradient and tangent cone on a general finite-dimensional inner product space, and the standard projection estimates of §2, which are also the starting point of the paper's other two main results.

Difficulty

The obvious argument fails at two places. First, the continuity of ∇Ωf\nabla_\Omega f∇Ω​f cannot be used: the map x↦∇Ωf(x)x \mapsto \nabla_\Omega f(x)x↦∇Ω​f(x) is not continuous, and ∥∇Ωf∥\|\nabla_\Omega f\|∥∇Ω​f∥ can be bounded away from zero in every neighborhood of a stationary point, because the tangent cone changes discontinuously at the boundary of Ω\OmegaΩ. So xk→x∗x_k \to x^*xk​→x∗ with x∗x^*x∗ stationary does not by itself force ∇Ωf(xk)→0\nabla_\Omega f(x_k) \to 0∇Ω​f(xk​)→0, and here the iterates need not converge at all. Second, the steps αk\alpha_kαk​ may tend to zero along a subsequence; the step rule gives information only through a trial step αˉk\bar\alpha_kαˉk​, at a point other than xk+1x_{k+1}xk+1​, and comparing the two projected steps is where the argument must work.

Formalization scope

The space is a type E with [NormedAddCommGroup E] [InnerProductSpace ℝ E] [FiniteDimensional ℝ E]; ∇f\nabla f∇f is Mathlib's gradient f. "Continuously differentiable on Ω\OmegaΩ" is ∀ x ∈ Ω, DifferentiableAt ℝ f x together with ContinuousOn (gradient f) Ω. Bounded below is BddBelow (f '' Ω), uniform continuity is UniformContinuousOn (gradient f) Ω. Sequences are ℕ → E indexed from 000; a subsequence is an infinite K : Set ℕ with limits along atTop ⊓ 𝓟 K; a limit point is a MapClusterPt. The projection and the projected gradient are total functions through a nearest-point map that returns 000 when no nearest point exists; every theorem assumes Ω\OmegaΩ nonempty, closed and convex, and evaluates ∇Ωf\nabla_\Omega f∇Ω​f only at points of Ω\OmegaΩ, where the nearest point exists and is unique. The step rule is a predicate on the pair of sequences, so the theorems cover every rule satisfying (2.1)–(2.3); the auxiliary condition μ1≤μ2\mu_1 \le \mu_2μ1​≤μ2​, which the paper uses only to show that an admissible step exists, is not imposed.

The run predicate is satisfiable: for a constant fff, the constant sequence xk=x0∈Ωx_k = x_0 \in \Omegaxk​=x0​∈Ω with αk=γ1\alpha_k = \gamma_1αk​=γ1​ is a run, so the goal is not vacuous. A formalization that states the goal for an arbitrary map in place of the projection, drops the bound αk≤γ3\alpha_k \le \gamma_3αk​≤γ3​, or replaces ∥∇Ωf(xk)∥\|\nabla_\Omega f(x_k)\|∥∇Ω​f(xk​)∥ by ∥xk+1−xk∥/αk\|x_{k+1} - x_k\|/\alpha_k∥xk+1​−xk​∥/αk​ proves a different theorem and is not accepted.

Contributions welcome: the projection estimates (reusable for any projection-based method), existence and uniqueness of the projected gradient, the characterization of stationarity, and the two limit theorems.

Selected references

  • P. H. Calamai, J. J. Moré, Projected gradient methods for linearly constrained problems, Mathematical Programming 39 (1987) 93–116. https://doi.org/10.1007/BF02592073
  • A. A. Goldstein, Convex programming in Hilbert space, Bulletin of the AMS 70 (1964) 709–710. https://doi.org/10.1090/S0002-9904-1964-11178-2
  • E. S. Levitin, B. T. Polyak, Constrained minimization methods, USSR Computational Mathematics and Mathematical Physics 6 (1966) 1–50. https://doi.org/10.1016/0041-5553(66)90114-5
  • D. P. Bertsekas, On the Goldstein–Levitin–Polyak gradient projection method, IEEE Transactions on Automatic Control 21 (1976) 174–184. https://doi.org/10.1109/TAC.1976.1101194
  • J. C. Dunn, Global and asymptotic convergence rate estimates for a class of projected gradient processes, SIAM Journal on Control and Optimization 19 (1981) 368–400. https://doi.org/10.1137/0319022
  • E. M. Gafni, D. P. Bertsekas, Two-metric projection methods for constrained optimization, SIAM Journal on Control and Optimization 22 (1984) 936–964. https://doi.org/10.1137/0322061
15 thms3 active usersReviewed
🏆Completed
Convex OptimizationOperations ResearchOptimization·Captain: mikedeng1

The Generalized Quasi-Variational Inequality Problem II: Existence via Projection and the Brouwer Fixed Point TheoremResearch Paper

Motivation

A variational inequality asks for a point xxx of a set K⊆RnK\subseteq\mathbb R^nK⊆Rn at which a vector field fff makes a non-obtuse angle with every feasible direction: (x′−x)Tf(x)≥0(x'-x)^T f(x)\ge 0(x′−x)Tf(x)≥0 for all x′∈Kx'\in Kx′∈K. It is the common form of the first-order optimality condition of a constrained optimization problem, of complementarity problems in mathematical programming, and of equilibrium conditions in traffic networks and economics. Two generalizations are standard in operations research. In a quasi-variational inequality the constraint set depends on the unknown, K=K(x)K=K(x)K=K(x), as in generalized Nash games where each player's feasible set depends on the other players' choices. In a generalized variational inequality the vector field is set-valued, y∈f(x)y\in f(x)y∈f(x), as when fff is the subdifferential of a nonsmooth convex function.

D. Chan and J. S. Pang (Math. Oper. Res. 7 (1982) 211–222) introduced the problem that combines both, the generalized quasi-variational inequality (GQVI), and proved existence theorems for it. Their §5 gives a second route to existence, independent of the set-valued fixed point theory of their §3: a solution is a fixed point of a map built from Euclidean projections, and for single-valued continuous fff the Brouwer fixed point theorem produces one. The characterization of solutions as projection fixed points, for the generalized variational inequality, is due to Fang and Peterson (reference [11] of the paper, a 1979 University of Maryland Baltimore County research report). This mission formalizes that projection route.

Setting

Work in Rn\mathbb R^nRn with the Euclidean inner product xTyx^TyxTy and norm ∥x∥\|x\|∥x∥. A point-to-set mapping KKK assigns to each x∈Rnx\in\mathbb R^nx∈Rn a subset K(x)⊆RnK(x)\subseteq\mathbb R^nK(x)⊆Rn; a point-to-point mapping fff assigns a vector f(x)f(x)f(x).

The GQVI. Given point-to-set mappings KKK and fff, GQVI(K,f)\mathrm{GQVI}(K,f)GQVI(K,f) asks for vectors xxx and yyy with

x∈K(x),y∈f(x),(x′−x)Ty≥0  for all x′∈K(x).x\in K(x),\qquad y\in f(x),\qquad (x'-x)^Ty\ge 0\ \text{ for all } x'\in K(x).x∈K(x),y∈f(x),(x′−x)Ty≥0  for all x′∈K(x).

Such a pair is a solution. For a point-to-point fff one takes y=f(x)y=f(x)y=f(x): find x∈K(x)x\in K(x)x∈K(x) with (x′−x)Tf(x)≥0(x'-x)^Tf(x)\ge0(x′−x)Tf(x)≥0 for all x′∈K(x)x'\in K(x)x′∈K(x).

Projection. For a set SSS and a point zzz, the projection PS(z)=sol⁡min⁡x∈S∥x−z∥P_S(z)=\operatorname{sol}\min_{x\in S}\|x-z\|PS​(z)=solminx∈S​∥x−z∥ is the nearest point of SSS to zzz. For nonempty closed convex SSS it exists and is unique.

Semicontinuity of point-to-set mappings (Berge). KKK is upper semicontinuous at xxx if for every open G⊇K(x)G\supseteq K(x)G⊇K(x) there is a neighbourhood NNN of xxx with K(x′)⊆GK(x')\subseteq GK(x′)⊆G for x′∈Nx'\in Nx′∈N; lower semicontinuous at xxx if for every open GGG meeting K(x)K(x)K(x) there is a neighbourhood NNN of xxx with K(x′)∩G≠∅K(x')\cap G\ne\emptysetK(x′)∩G=∅ for x′∈Nx'\in Nx′∈N; continuous if both. "On a set CCC" means at every point of CCC, with neighbourhoods relative to CCC.

Formalization targets

Goal: Theorem 5.2 (p. 220)

Let fff be continuous on a nonempty compact convex set CCC, and let KKK be a continuous mapping on CCC whose values K(x)K(x)K(x), x∈Cx\in Cx∈C, are nonempty, closed, convex and contained in CCC. Then there is xxx with

x∈K(x),(x′−x)Tf(x)≥0for all x′∈K(x).x\in K(x),\qquad (x'-x)^Tf(x)\ge 0\quad\text{for all }x'\in K(x).x∈K(x),(x′−x)Tf(x)≥0for all x′∈K(x).

Milestone: Lemma 5.1 (p. 220)

If KKK is continuous at x0x_0x0​ and every K(x)K(x)K(x) is nonempty, closed and convex, then for every y0y_0y0​ the map

(x,y)⟼p(x,y)=PK(x)(y)(x,y)\longmapsto p(x,y)=P_{K(x)}(y)(x,y)⟼p(x,y)=PK(x)​(y)

is continuous at (x0,y0)(x_0,y_0)(x0​,y0​).

Milestone: Theorem 5.1 (p. 220)

If every K(x)K(x)K(x) is closed and convex, then for every pair (x∗,y∗)(x^*,y^*)(x∗,y∗)

(x∗,y∗) solves GQVI(K,f)  ⟺  x∗=PK(x∗)(x∗−y∗) and y∗∈f(x∗).(x^*,y^*)\ \text{solves}\ \mathrm{GQVI}(K,f)\iff x^*=P_{K(x^*)}(x^*-y^*)\ \text{and}\ y^*\in f(x^*).(x∗,y∗) solves GQVI(K,f)⟺x∗=PK(x∗)​(x∗−y∗) and y∗∈f(x∗).

The Brouwer fixed point theorem is already on the platform (AGT.brouwer_fixed_point) and is included as a reference item, as is the Hilbert-space nearest-point theorem VectorSpaceOpt.min_distance_convex_set.

Significance

Theorem 5.2 is the existence theorem for quasi-variational inequalities with a moving convex constraint set and a continuous single-valued field, under compactness. With KKK constant it is the Hartman–Stampacchia theorem (Acta Math. 115 (1966) 271–310), the basic existence result for finite-dimensional variational inequalities, and so it also covers existence of equilibria of generalized Nash games whose shared constraints satisfy the continuity hypotheses. The paper notes that Theorem 5.2 also follows from its Corollary 3.1, which rests on the Eilenberg–Montgomery fixed point theorem; the projection route needs only Brouwer.

Theorem 5.1 matters beyond this existence result: it turns the GQVI into a fixed-point equation, which is the basis of projection algorithms for variational inequalities and of the contraction argument of the paper's Theorem 5.3. Lemma 5.1, continuity of the projection onto a continuously moving closed convex set, is a stability result used throughout parametric optimization.

All three statements were proved in 1982. None has a machine-checked proof on the platform or in Mathlib, which has neither a projection onto a general closed convex set as a function of the set nor any variational inequality. The work of this mission is to formalize the known proofs.

Difficulty

Theorem 5.1 is a direct consequence of the variational characterization of the nearest point of a convex set. The substance lies in Lemma 5.1 and in adapting it to the goal. The projection depends on the set K(x)K(x)K(x), not only on the point, and continuity of KKK is a statement about sets, given by two separate semicontinuity conditions that each control only one side of the convergence. Neither alone suffices: upper semicontinuity without lower lets K(x)K(x)K(x) shrink abruptly and the nearest point jump; lower without upper lets limits of nearest points fall outside K(x0)K(x_0)K(x0​). The limit points of the projections must also be kept bounded, which needs the nonemptiness near x0x_0x0​.

A second difficulty is that the goal assumes continuity of KKK only on CCC, with neighbourhoods relative to CCC, while Lemma 5.1 is stated for continuity at a point of Rn\mathbb R^nRn. Applying the lemma to the composite map x↦PK(x)(x−f(x))x\mapsto P_{K(x)}(x-f(x))x↦PK(x)​(x−f(x)) on CCC therefore requires either a relative version of the lemma or a reduction; the lemma cannot be quoted verbatim.

Formalization scope

The space is EuclideanSpace ℝ (Fin n) with its Euclidean norm, never the sup-norm space Fin n → ℝ. Point-to-set mappings are functions into Set. The solution predicate is IsGQVISolution K f x y; a point-to-point fff enters as fun z => {f z}. Upper and lower semicontinuity are Mathlib's UpperHemicontinuousAt/On and LowerHemicontinuousAt/On; "continuous on CCC" is both, relative to CCC.

The projection is IsProj S z p (nearest-point predicate) and proj S z, which returns a nearest point when one exists and the junk value zzz otherwise. Theorem 5.1 uses the relational form, so no junk value enters when K(x∗)=∅K(x^*)=\emptysetK(x∗)=∅. Lemma 5.1 assumes every K(x)K(x)K(x) nonempty, closed and convex, so proj is always the true projection there.

Two hypotheses implicit in the paper are explicit:

  1. Closed values in Theorem 5.2. The paper uses Berge's definitions, under which upper semicontinuous mappings have compact values, and its proof uses that each K(x)K(x)K(x) is closed. The Lean statement assumes K(x)K(x)K(x) closed for x∈Cx\in Cx∈C; without it the theorem is false (C=[0,1]C=[0,1]C=[0,1], K(x)≡(0,1)K(x)\equiv(0,1)K(x)≡(0,1), f≡1f\equiv1f≡1).
  2. Nonempty values in Lemma 5.1. The projection function p(x,y)=PK(x)(y)p(x,y)=P_{K(x)}(y)p(x,y)=PK(x)​(y) is defined only for nonempty K(x)K(x)K(x); the Lean statement assumes K(x)≠∅K(x)\ne\emptysetK(x)=∅ for all xxx.

A formalization in which the projection is merely "some point of K(x)K(x)K(x)", or ignores the distance, would make the reverse direction of Theorem 5.1 false and Lemma 5.1 meaningless; a GQVI whose test points range over CCC instead of K(x)K(x)K(x) would turn Theorem 5.2 into a plain variational inequality on CCC. Both are excluded by the definitions above.

A complete development needs the nearest-point characterization on closed convex sets (available in Mathlib and on the platform), sequential characterizations of upper and lower hemicontinuity for closed-valued mappings in Rn\mathbb R^nRn, continuity of the projection onto a moving convex set, and Brouwer's theorem (a platform reference). The hemicontinuity lemmas and the projection-continuity lemma are reusable for the other missions of this series and for parametric optimization in general. Proofs of Lemma 5.1 and Theorem 5.1, a relative-to-CCC version of Lemma 5.1, and a proof of Brouwer's theorem are all welcome.

Selected references

  • D. Chan and J. S. Pang, The generalized quasi-variational inequality problem, Mathematics of Operations Research 7(2) (1982) 211–222. https://doi.org/10.1287/moor.7.2.211
  • S. C. Fang and E. L. Peterson, Generalized variational inequalities, Mathematics Research Report No. 79-10, Department of Mathematics, University of Maryland Baltimore County, October 1979 (cited by Chan and Pang as [11]; no online copy).
  • P. Hartman and G. Stampacchia, On some non-linear elliptic differential-functional equations, Acta Mathematica 115 (1966) 271–310. https://doi.org/10.1007/BF02392210
  • C. Berge, Topological Spaces, The Macmillan Company, New York, 1963 (definitions of upper and lower semicontinuity of point-to-set mappings).
7 thms4 active usersReviewed
🏆Completed
Algorithmic Game TheoryMechanism DesignOperations Research+1·Captain: mikedeng1

Bargaining under Incomplete Information I: Class A Equilibrium Offer Strategies Satisfy the Linked Differential EquationsResearch Paper

Motivation

A buyer and a seller negotiate over a single indivisible good. Each knows how much the good is worth to them, but not how much it is worth to the other side. Whether the two will trade, and at what price, then depends on how each party shades its offer to exploit the other's uncertainty. Chatterjee and Samuelson (Bargaining under Incomplete Information, Operations Research 31(5), 1983) modelled this situation as a one-shot game in which both parties submit sealed offers simultaneously, and characterised its Bayesian equilibria.

The model became the standard reference point for bilateral trade with two-sided private information. Myerson and Satterthwaite (J. Econ. Theory 29, 1983) showed that no mechanism can guarantee efficient trade in this setting, and that the equilibrium of the Chatterjee–Samuelson game with k=1/2k = 1/2k=1/2 and uniform values attains the second-best efficiency bound. Later work on the kkk-double auction (Satterthwaite and Williams, J. Econ. Theory 48, 1989; Leininger, Linhart and Radner, J. Econ. Theory 48, 1989) studies the continuum of equilibria of exactly this game. The object of the present mission, a pair of linked differential equations, is the tool these papers use to construct and classify equilibria.

Setting

A seller has reservation price vs∈[v‾s,vˉs]v_s \in [\underline v_s, \bar v_s]vs​∈[v​s​,vˉs​] and a buyer has reservation price vb∈[v‾b,vˉb]v_b \in [\underline v_b, \bar v_b]vb​∈[v​b​,vˉb​]. Each knows their own value. The buyer's belief about vsv_svs​ is a probability measure μb\mu_bμb​ with distribution function FbF_bFb​; the seller's belief about vbv_bvb​ is μs\mu_sμs​ with distribution function FsF_sFs​. The subscript names the player who holds the belief, not the variable. Each belief is regular: F(v‾)=0F(\underline v) = 0F(v​)=0, F(vˉ)=1F(\bar v) = 1F(vˉ)=1, and FFF is strictly increasing and differentiable on the value interval, with density fbf_bfb​ (respectively fsf_sfs​).

Under the Bargaining Rule, the seller asks sss and the buyer offers bbb simultaneously. If b≥sb \ge sb≥s the good is sold at P=kb+(1−k)sP = kb + (1-k)sP=kb+(1−k)s for a fixed k∈[0,1]k \in [0, 1]k∈[0,1]; otherwise nothing happens. Profits are P−vsP - v_sP−vs​ for the seller and vb−Pv_b - Pvb​−P for the buyer on trade, and zero otherwise.

An offer strategy is a function SSS (for the seller) or BBB (for the buyer) from values to offers. Against SSS, a buyer with value vvv offering bbb earns in expectation

πb(b,v)=∫1{S(vs)≤b} (v−kb−(1−k)S(vs)) dμb(vs),\pi_b(b, v) = \int \mathbf 1\{S(v_s) \le b\}\,\bigl(v - kb - (1-k)S(v_s)\bigr)\,d\mu_b(v_s),πb​(b,v)=∫1{S(vs​)≤b}(v−kb−(1−k)S(vs​))dμb​(vs​),

and symmetrically πs(s,v)=∫1{s≤B(vb)} (kB(vb)+(1−k)s−v) dμs(vb)\pi_s(s, v) = \int \mathbf 1\{s \le B(v_b)\}\,(kB(v_b) + (1-k)s - v)\,d\mu_s(v_b)πs​(s,v)=∫1{s≤B(vb​)}(kB(vb​)+(1−k)s−v)dμs​(vb​). The pair (S,B)(S, B)(S,B) is an equilibrium if B(v)B(v)B(v) maximises πb(⋅,v)\pi_b(\cdot, v)πb​(⋅,v) over all real offers for every buyer value vvv, and S(v)S(v)S(v) maximises πs(⋅,v)\pi_s(\cdot, v)πs​(⋅,v) for every seller value vvv.

A strategy is of class AAA if its offers are bounded, it is nondecreasing, it is strictly increasing except where it sits at its lowest offer mmm or its highest offer MMM, and it is differentiable wherever its offer lies strictly between mmm and MMM. A class AAA equilibrium is an equilibrium in which both strategies are of class AAA.

Formalization targets

Goal: Theorem 2, the linked differential equations

In a class AAA equilibrium, wherever the seller's strategy is strictly increasing around yyy and the buyer value xxx offers B(x)=S(y)B(x) = S(y)B(x)=S(y),

kFb(y)S′(y)+fb(y)S(y)=x fb(y),(3a)k F_b(y) S'(y) + f_b(y) S(y) = x\, f_b(y), \tag{3a}kFb​(y)S′(y)+fb​(y)S(y)=xfb​(y),(3a)

and wherever the buyer's strategy is strictly increasing around xxx and the seller value yyy asks S(y)=B(x)S(y) = B(x)S(y)=B(x),

(1−k)(1−Fs(x))B′(x)−fs(x)B(x)=− y fs(x).(3b)(1-k)\bigl(1 - F_s(x)\bigr) B'(x) - f_s(x) B(x) = -\,y\, f_s(x). \tag{3b}(1−k)(1−Fs​(x))B′(x)−fs​(x)B(x)=−yfs​(x).(3b)

The paper writes x=B−1(S(y))x = B^{-1}(S(y))x=B−1(S(y)) in (3a) and y=S−1(B(x))y = S^{-1}(B(x))y=S−1(B(x)) in (3b).

Milestones: the displays of the proof

  1. Gb(S(y))=Fb(y)G_b(S(y)) = F_b(y)Gb​(S(y))=Fb​(y): the buyer's probability that the seller asks at most S(y)S(y)S(y) equals Fb(y)F_b(y)Fb​(y).
  2. The buyer's first-order condition: ∂πb/∂b=(v−b)gb(b)−kGb(b)\partial \pi_b / \partial b = (v - b) g_b(b) - k G_b(b)∂πb​/∂b=(v−b)gb​(b)−kGb​(b) at b=S(y)b = S(y)b=S(y), with offer density gb(S(y))=fb(y)/S′(y)g_b(S(y)) = f_b(y)/S'(y)gb​(S(y))=fb​(y)/S′(y), and it vanishes at an equilibrium offer.
  3. The seller's first-order condition: ∂πs/∂s=(v−s)gs(s)+(1−k)(1−Gs(s))\partial \pi_s / \partial s = (v - s) g_s(s) + (1-k)(1 - G_s(s))∂πs​/∂s=(v−s)gs​(s)+(1−k)(1−Gs​(s)) at s=B(x)s = B(x)s=B(x), and it vanishes at an equilibrium ask.

The milestones assume S′(y)>0S'(y) > 0S′(y)>0 (respectively B′(x)>0B'(x) > 0B′(x)>0), which the paper's formula for the offer density needs. The goal does not assume it.

Significance

Theorem 2 reduces the search for equilibria to the analysis of a pair of ordinary differential equations. Every explicit equilibrium in the paper and in the later kkk-double-auction literature is found as a solution of (3a)–(3b) with suitable boundary conditions: the linear equilibrium for uniform beliefs (the paper's Example 1), the one-parameter families of Satterthwaite–Williams, and the non-linear equilibria of Leininger–Linhart–Radner. The equations also expose how the split parameter kkk distributes bargaining power: at k=1k = 1k=1 equation (3b) forces the seller to ask their own value, and at k=0k = 0k=0 equation (3a) forces the buyer to bid theirs.

The result is proved in the paper. To the best of a search of the platform, no formalization of it or of the bargaining model exists. This mission produces a machine-checked version of the necessary conditions. Its definitions of beliefs, expected profits, equilibrium and class AAA are also the basis for companion missions on the uniform linear equilibrium and its trade probability.

Difficulty

The paper's proof is four lines: differentiate the expected profit, set the derivative to zero, substitute. Three steps of that argument do not survive a careful reading.

First, the paper differentiates under an offer density gbg_bgb​ that exists only if SSS is strictly increasing and has a positive derivative. Class AAA allows SSS to be flat at its bounds, to jump between them, and to have zero derivative. The formal goal assumes none of this. It must handle the case S′(y)=0S'(y) = 0S′(y)=0, where the offer distribution has an infinite density at S(y)S(y)S(y) and the first-order condition becomes a one-sided argument.

Second, identifying Gb(S(y))G_b(S(y))Gb​(S(y)) with Fb(y)F_b(y)Fb​(y) requires that no seller value outside a neighbourhood of yyy makes the same offer. That is a global statement about SSS, and it is where monotonicity on the whole interval and the "flat only at the bounds" clause of class AAA enter.

Third, the first-order condition needs the equilibrium offer S(y)S(y)S(y) to be an interior maximiser of a function of bbb that is differentiable there. The profit πb\pi_bπb​ is an integral over the belief, and its differentiability at S(y)S(y)S(y) must be derived from the differentiability of SSS at the single point yyy and of FbF_bFb​. Neither SSS nor πb\pi_bπb​ is assumed continuous elsewhere.

Formalization scope

Values, offers and kkk are real numbers. Beliefs are probability measures on R\mathbb RR, with distribution function Mathlib's ProbabilityTheory.cdf. Expected profits are Bochner integrals over the opponent's value, not over an offer density. The two agree whenever the density exists, and the integral form needs none. Integrability is not assumed: for a class AAA strategy and a regular belief supported on the value interval, the integrand is bounded and almost everywhere measurable. Ties (b=sb = sb=s) trade. Deviations range over all real offers. Strategies are arbitrary functions R→R\mathbb R \to \mathbb RR→R whose values outside the value interval play no role.

The derivative S′(y)S'(y)S′(y) is deriv S y. The paper's inverses B−1B^{-1}B−1 and S−1S^{-1}S−1 are not introduced as functions. The matching value is a universally quantified variable xxx with B(x)=S(y)B(x) = S(y)B(x)=S(y), so no junk value of an inverse can make an equation true or false. The equations are asserted only at values yyy interior to an open subinterval on which SSS is strictly increasing. A formalization that assumed the first-order condition, or restricted to strategies with S′>0S' > 0S′>0 everywhere, would be a different and weaker theorem.

A complete development needs: differentiation of parametric integrals of indicator type (the derivative of b↦∫1{S≤b} h dμb \mapsto \int \mathbf 1\{S \le b\}\,h\,d\mub↦∫1{S≤b}hdμ), the change of variables from values to offers under a strictly increasing strategy, and Fermat's rule (IsLocalMax.hasDerivAt_eq_zero). The first two are reusable for auctions and other Bayesian games with monotone strategies. Proofs of the milestones, alternative proofs of the goal, and general lemmas about monotone strategies are welcome.

Selected references

  • K. Chatterjee and W. Samuelson, Bargaining under Incomplete Information, Operations Research 31(5):835–851, 1983. https://doi.org/10.1287/opre.31.5.835
  • R. B. Myerson and M. A. Satterthwaite, Efficient Mechanisms for Bilateral Trading, Journal of Economic Theory 29(2):265–281, 1983. https://doi.org/10.1016/0022-0531(83)90048-0
  • M. A. Satterthwaite and S. R. Williams, Bilateral Trade with the Sealed Bid k-Double Auction: Existence and Efficiency, Journal of Economic Theory 48(1):107–133, 1989. https://doi.org/10.1016/0022-0531(89)90120-8
  • W. Leininger, P. B. Linhart and R. Radner, Equilibria of the Sealed-Bid Mechanism for Bargaining with Incomplete Information, Journal of Economic Theory 48(1):63–106, 1989. https://doi.org/10.1016/0022-0531(89)90121-X
9 thms4 active usersReviewed
🏆Completed
Convex OptimizationOperations ResearchOptimization·Captain: mikedeng1

Optimizing Static Linear Feedback: Gradient Method III: Gradient Descent with the Hessian Step Size Converges Linearly on Strongly Convex FunctionsResearch Paper

Motivation

Gradient descent needs a step size, and the classical choices each ask for something the user may not have. A constant step 1/L1/L1/L needs the Lipschitz constant LLL of the gradient, which is rarely known and often pessimistic. Backtracking needs repeated function evaluations. The exact line search needs a one-dimensional minimization at every iteration. Fatkhullin and Polyak (arXiv:2004.09875v2, SIAM J. Control Optim. 2021, doi:10.1137/20M1329858) proposed a step size for the static linear-quadratic regulator (their rule (4.8), §4.3, p. 11). In §6.1 they point out that the same rule applies to any smooth unconstrained problem min⁡x∈Rnf(x)\min_{x\in\mathbb{R}^n} f(x)minx∈Rn​f(x). The rule divides the squared gradient norm by the Hessian quadratic form along the gradient. It needs one Hessian–vector product per iteration and neither LLL nor the strong convexity constant μ\muμ. In the paper's LQR experiment (§5, Figure 8, p. 13) the algorithm built on this step converges much faster than gradient descent with a constant step tuned at the first iterations.

The paper proves the method converges linearly for strongly convex functions (Theorem 6.1, p. 13). The proof takes one page (Appendix D.4, p. 19). This mission formalizes that theorem. It is the third mission of a series on this paper; the other two concern the LQR gradient method and gradient flow, and this one uses none of their control-theoretic objects.

Setting

Let f:Rn→Rf:\mathbb{R}^n\to\mathbb{R}f:Rn→R be twice differentiable, with gradient ∇f(x)\nabla f(x)∇f(x) and Hessian ∇2f(x)\nabla^2 f(x)∇2f(x). Three constants describe it.

  • fff is μ\muμ-strongly convex, μ>0\mu>0μ>0: f(ax+by)≤af(x)+bf(y)−ab μ2∥x−y∥2f(ax+by)\le af(x)+bf(y)-ab\,\frac{\mu}{2}\|x-y\|^2f(ax+by)≤af(x)+bf(y)−ab2μ​∥x−y∥2 for all x,yx,yx,y and a,b≥0a,b\ge0a,b≥0 with a+b=1a+b=1a+b=1.
  • ∇f\nabla f∇f is Lipschitz with constant LLL: ∥∇f(x)−∇f(y)∥≤L∥x−y∥\|\nabla f(x)-\nabla f(y)\|\le L\|x-y\|∥∇f(x)−∇f(y)∥≤L∥x−y∥.
  • ∇2f\nabla^2 f∇2f is Lipschitz with constant MMM: ∥∇2f(x)−∇2f(y)∥≤M∥x−y∥\|\nabla^2 f(x)-\nabla^2 f(y)\|\le M\|x-y\|∥∇2f(x)−∇2f(y)∥≤M∥x−y∥ in the operator norm.

Let x∗x_*x∗​ be the global minimizer of fff. The Hessian step size at a point xxx is

γ(x)=∥∇f(x)∥2⟨∇2f(x)∇f(x),∇f(x)⟩,\gamma(x)=\frac{\|\nabla f(x)\|^2}{\langle\nabla^2 f(x)\nabla f(x),\nabla f(x)\rangle},γ(x)=⟨∇2f(x)∇f(x),∇f(x)⟩∥∇f(x)∥2​,

the minimizer of the second-order Taylor model of fff along −∇f(x)-\nabla f(x)−∇f(x). The method (6.1) runs

xj+1=xj−γj∇f(xj),γj=γ(xj),x_{j+1}=x_j-\gamma_j\nabla f(x_j),\qquad\gamma_j=\gamma(x_j),xj+1​=xj​−γj​∇f(xj​),γj​=γ(xj​),

from a starting point x0x_0x0​. The damped method with factor σ>0\sigma>0σ>0 runs xj+1=xj−σγj∇f(xj)x_{j+1}=x_j-\sigma\gamma_j\nabla f(x_j)xj+1​=xj​−σγj​∇f(xj​). For a quadratic f(x)=⟨Hx,x⟩f(x)=\langle Hx,x\ranglef(x)=⟨Hx,x⟩ the method (6.1) is steepest descent with exact line search.

Formalization targets

Goal: Theorem 6.1 (p. 13), both parts

Under the hypotheses above:

  1. If δ>0\delta>0δ>0 and M2L(f(x0)−f(x∗))≤3μ2(1−δ)M\sqrt{2L(f(x_0)-f(x_*))}\le3\mu^2(1-\delta)M2L(f(x0​)−f(x∗​))​≤3μ2(1−δ) (condition (6.2)), the iterates of (6.1) satisfy
f(xj)−f(x∗)≤(f(x0)−f(x∗))(1−μδL)jfor all j.(6.3)f(x_j)-f(x_*)\le\bigl(f(x_0)-f(x_*)\bigr)\Bigl(1-\frac{\mu\delta}{L}\Bigr)^j\quad\text{for all }j.\tag{6.3}f(xj​)−f(x∗​)≤(f(x0​)−f(x∗​))(1−Lμδ​)jfor all j.(6.3)
  1. If 0<σ≤μ/L0<\sigma\le\mu/L0<σ≤μ/L, the damped iterates from any x0x_0x0​ satisfy
f(xj)−f(x∗)≤(f(x0)−f(x∗))(1−μσL)jfor all j.(6.4)f(x_j)-f(x_*)\le\bigl(f(x_0)-f(x_*)\bigr)\Bigl(1-\frac{\mu\sigma}{L}\Bigr)^j\quad\text{for all }j.\tag{6.4}f(xj​)−f(x∗​)≤(f(x0​)−f(x∗​))(1−Lμσ​)jfor all j.(6.4)

The constants are the paper's, stated exactly.

Milestones (Appendix D.4, p. 19)

  • Cubic Taylor bound (first display): ∣f(x+y)−f(x)−⟨∇f(x),y⟩−12⟨∇2f(x)y,y⟩∣≤M6∥y∥3\bigl|f(x+y)-f(x)-\langle\nabla f(x),y\rangle-\frac12\langle\nabla^2 f(x)y,y\rangle\bigr|\le\frac M6\|y\|^3​f(x+y)−f(x)−⟨∇f(x),y⟩−21​⟨∇2f(x)y,y⟩​≤6M​∥y∥3.
  • One-step inequality (third display): with φj=f(xj)\varphi_j=f(x_j)φj​=f(xj​), φj+1≤φj−12γj∥∇f(xj)∥2(1−Mγj23∥∇f(xj)∥)\varphi_{j+1}\le\varphi_j-\frac12\gamma_j\|\nabla f(x_j)\|^2\bigl(1-\frac{M\gamma_j^2}{3}\|\nabla f(x_j)\|\bigr)φj+1​≤φj​−21​γj​∥∇f(xj​)∥2(1−3Mγj2​​∥∇f(xj​)∥).
  • (D.1): f(y)≤f(x)+⟨∇f(x),y−x⟩+L2μ⟨∇2f(x)(y−x),y−x⟩f(y)\le f(x)+\langle\nabla f(x),y-x\rangle+\frac{L}{2\mu}\langle\nabla^2 f(x)(y-x),y-x\ranglef(y)≤f(x)+⟨∇f(x),y−x⟩+2μL​⟨∇2f(x)(y−x),y−x⟩.
  • (D.2): one damped step gives f(xj+1)≤f(xj)−σγj2∥∇f(xj)∥2f(x_{j+1})\le f(x_j)-\frac{\sigma\gamma_j}{2}\|\nabla f(x_j)\|^2f(xj+1​)≤f(xj​)−2σγj​​∥∇f(xj​)∥2.

Significance

Theorem 6.1 gives a rate for a step size computed from local second-order information alone. Part 1 says that near the minimizer the method converges at least as fast as gradient descent with step δ/L\delta/Lδ/L, with no step-size parameter to tune. Part 2 gives convergence from every starting point, at the price of knowing a lower bound on μ/L\mu/Lμ/L for the damping. The same step appears in the paper's LQR method (rule (4.8)) and in gradient projection methods (p. 13, citing [37]), so the one-step inequalities are reusable beyond this theorem.

The result is proved in the paper. As of this writing none of it has a machine-checked proof. The formal work is the full development: the cubic Taylor bound from a Lipschitz second derivative on Rn\mathbb{R}^nRn, the two one-step inequalities, and the inductions that give the rates.

Difficulty

The obvious argument for gradient descent uses the quadratic upper bound f(y)≤f(x)+⟨∇f(x),y−x⟩+L2∥y−x∥2f(y)\le f(x)+\langle\nabla f(x),y-x\rangle+\frac L2\|y-x\|^2f(y)≤f(x)+⟨∇f(x),y−x⟩+2L​∥y−x∥2 and a step no larger than 2/L2/L2/L. The Hessian step can be as large as 1/μ1/\mu1/μ, far outside that range, so the quadratic bound in the Euclidean norm gives no decrease. Two different replacements are needed. For the undamped method, the cubic Taylor error must be controlled along the whole trajectory, and condition (6.2) is imposed only on x0x_0x0​: the proof must show the gradient stays small enough at every later iterate. For the damped method, the upper bound must be measured in the local Hessian norm (D.1), which trades the step's size for the condition number L/μL/\muL/μ.

On the Lean side, Mathlib has Taylor's theorem in one variable. The cubic bound for a function on Rn\mathbb{R}^nRn with a Lipschitz Fréchet second derivative must be assembled from it or from the integral form along a segment. Mathlib has no ready-made link between strong convexity and a lower bound on the Hessian either.

Formalization scope

The space is EuclideanSpace ℝ (Fin n). The gradient is Mathlib's gradient f. The Hessian quadratic form ⟨∇2f(x)v,v⟩\langle\nabla^2 f(x)v,v\rangle⟨∇2f(x)v,v⟩ is fderiv ℝ (fderiv ℝ f) x v v. Twice differentiability is differentiability of f and of fderiv ℝ f everywhere. The Lipschitz constant of the Hessian is in the operator norm of the bilinear map, not the Frobenius norm. Strong convexity is StrongConvexOn Set.univ μ f with 0 < μ; Mathlib's modulus is μ2∥x−y∥2\frac\mu2\|x-y\|^22μ​∥x−y∥2. LLL and MMM are real constants in the Lipschitz inequalities. The minimizer x∗x_*x∗​ is a hypothesis (f(x∗)≤f(y)f(x_*)\le f(y)f(x∗​)≤f(y) for all yyy), not constructed.

Deviations from the page, all recorded in the items' Formalization Notes:

  • The damping positivity 0<σ0<\sigma0<σ is added. It is implicit on the page.
  • The damped claim is stated under the full hypotheses of Theorem 6.1, including the Lipschitz Hessian, although its proof does not use MMM.
  • The one-step inequality for (6.1) is stated under the strong convexity of Theorem 6.1, which keeps γ≥0\gamma\ge0γ≥0. The gradient's Lipschitz constant is not assumed there.

At a stationary point the step is 0/00/00/0; Lean evaluates it to 000, so the method stays at the minimizer, and both rates remain true.

The iterates are those of the defined recursions (6.1) and its damped version. A statement about an arbitrary sequence satisfying a descent inequality would be a different, weaker theorem and does not discharge the goal. Condition (6.2) is imposed on x0x_0x0​ only; a version assuming it at every iterate is also not the goal.

Contributions welcome: the multivariate cubic Taylor bound (reusable wherever a Lipschitz Hessian appears, e.g. in cubic regularization of Newton's method); the Hessian bounds μI⪯∇2f⪯LI\mu I\preceq\nabla^2 f\preceq LIμI⪯∇2f⪯LI from strong convexity and a Lipschitz gradient; and the inequality 12∥∇f(x)∥2≤L(f(x)−f(x∗))\frac12\|\nabla f(x)\|^2\le L(f(x)-f(x_*))21​∥∇f(x)∥2≤L(f(x)−f(x∗​)).

Selected references

  • I. Fatkhullin, B. Polyak, Optimizing Static Linear Feedback: Gradient Method, arXiv:2004.09875v2, 2020; SIAM J. Control Optim. 59(5), 2021. https://arxiv.org/abs/2004.09875 · https://doi.org/10.1137/20M1329858
  • Yu. Nesterov, B. T. Polyak, Cubic regularization of Newton method and its global performance, Math. Program. 108, 2006 (the cubic Taylor bound for Lipschitz Hessians). https://doi.org/10.1007/s10107-006-0706-8
  • B. T. Polyak, Introduction to Optimization, Optimization Software, 1987 (gradient methods, strong convexity).
6 thms3 active usersReviewed
🏆Completed
Information TheoryOperations ResearchProbability·Captain: mikedeng1

Conditional and Dynamic Convex Risk Measures II: The Conditional Entropic Risk Measure and Conditional Relative EntropyResearch Paper

Motivation

A risk measure assigns to a random financial position XXX a capital requirement ρ(X)\rho(X)ρ(X): the amount of cash that must be added to XXX to make it acceptable. The axiomatic theory of convex risk measures (Föllmer–Schied 2002; Frittelli–Rosazza Gianin 2002) treats this number as computed with no information beyond the model. In practice a regulator or a risk manager revises the requirement as information arrives, so the requirement becomes a random variable measurable with respect to the information available at the time of measurement. Detlefsen and Scandolo (SFB 649 Discussion Paper 2005-006; published in Finance and Stochastics 9(4), 2005, doi:10.1007/s00780-005-0159-6) develop this conditional theory: axioms, a robust representation, and a treatment of dynamic risk measurement.

The entropic risk measure is the standard example of a convex risk measure that is not coherent. It is the capital requirement of an agent with exponential utility uγ(x)=1−e−γxu_\gamma(x)=1-e^{-\gamma x}uγ​(x)=1−e−γx, and its penalty function in the robust representation is the relative entropy 1γH(Q∣P)\frac1\gamma H(Q\mid P)γ1​H(Q∣P) (Föllmer–Schied, Stochastic Finance, Example 4.60, as cited by the paper). Section 5 of the paper carries this example to the conditional setting and shows that its penalty is a conditional relative entropy. The same identity appears in dynamic entropic risk measures, exponential-utility indifference pricing and recursive utility, where one-period conditional entropic measures are composed over time.

Setting

Fix a probability space (Ω,F,P)(\Omega,\mathcal F,P)(Ω,F,P) and a sub-σ\sigmaσ-algebra G⊆F\mathcal G\subseteq\mathcal FG⊆F, the information available at the time of measurement. L∞L^\inftyL∞ is the space of essentially bounded random variables and LG∞L^\infty_{\mathcal G}LG∞​ its G\mathcal GG-measurable part. All equalities and inequalities between random variables hold PPP-almost surely.

A conditional convex risk measure is a map ρ:L∞→LG∞\rho:L^\infty\to L^\infty_{\mathcal G}ρ:L∞→LG∞​ that is translation invariant (ρ(X+Z)=ρ(X)−Z\rho(X+Z)=\rho(X)-Zρ(X+Z)=ρ(X)−Z for Z∈LG∞Z\in L^\infty_{\mathcal G}Z∈LG∞​), monotone (X≤Y⇒ρ(X)≥ρ(Y)X\le Y\Rightarrow\rho(X)\ge\rho(Y)X≤Y⇒ρ(X)≥ρ(Y)), conditionally convex (ρ(ΛX+(1−Λ)Y)≤Λρ(X)+(1−Λ)ρ(Y)\rho(\Lambda X+(1-\Lambda)Y)\le\Lambda\rho(X)+(1-\Lambda)\rho(Y)ρ(ΛX+(1−Λ)Y)≤Λρ(X)+(1−Λ)ρ(Y) for Λ∈LG∞\Lambda\in L^\infty_{\mathcal G}Λ∈LG∞​, 0≤Λ≤10\le\Lambda\le10≤Λ≤1), and satisfies ρ(0)=0\rho(0)=0ρ(0)=0.

The relevant probability models are

PG={Q probability on (Ω,F):Q≪P, Q(A)=P(A) for all A∈G}.\mathcal P_{\mathcal G}=\{Q \text{ probability on } (\Omega,\mathcal F) : Q\ll P,\ Q(A)=P(A)\ \text{for all } A\in\mathcal G\}.PG​={Q probability on (Ω,F):Q≪P, Q(A)=P(A) for all A∈G}.

The essential supremum of a family X\mathcal XX of [−∞,+∞][-\infty,+\infty][−∞,+∞]-valued random variables is the a.s. smallest random variable that dominates every member a.s.; the essential infimum is defined symmetrically. The minimal penalty of ρ\rhoρ is

α∗(Q)=ess.sup⁡X∈L∞{−EQ(X∣G)−ρ(X)},Q∈PG.\alpha^*(Q)=\operatorname{ess.sup}_{X\in L^\infty}\{-E_Q(X\mid\mathcal G)-\rho(X)\},\qquad Q\in\mathcal P_{\mathcal G}.α∗(Q)=ess.supX∈L∞​{−EQ​(X∣G)−ρ(X)},Q∈PG​.

For a risk aversion γ>0\gamma>0γ>0, the conditional entropic risk measure is

ργ(X)=1γlog⁡EP(e−γX∣G),\rho_\gamma(X)=\frac1\gamma\log E_P\big(e^{-\gamma X}\mid\mathcal G\big),ργ​(X)=γ1​logEP​(e−γX∣G),

the capital requirement for the acceptance set Aγ={X∈L∞:EP(e−γX∣G)≤1}A_\gamma=\{X\in L^\infty : E_P(e^{-\gamma X}\mid\mathcal G)\le1\}Aγ​={X∈L∞:EP​(e−γX∣G)≤1}. For Q∈PGQ\in\mathcal P_{\mathcal G}Q∈PG​ with density φ=dQ/dP\varphi=dQ/dPφ=dQ/dP, the conditional relative entropy is

HG(Q∣P)=EP(φlog⁡φ∣G)∈[0,+∞],0log⁡0=0.H_{\mathcal G}(Q\mid P)=E_P(\varphi\log\varphi\mid\mathcal G)\in[0,+\infty],\qquad 0\log0=0.HG​(Q∣P)=EP​(φlogφ∣G)∈[0,+∞],0log0=0.

Formalization targets

Goal: Proposition 5.4

For every γ>0\gamma>0γ>0:

ργ(X)=ess.sup⁡Q∈PG{−EQ(X∣G)−1γHG(Q∣P)}(X∈L∞),α∗(Q)=1γHG(Q∣P)(Q∈PG).\rho_\gamma(X)=\operatorname{ess.sup}_{Q\in\mathcal P_{\mathcal G}}\Big\{-E_Q(X\mid\mathcal G)-\tfrac1\gamma H_{\mathcal G}(Q\mid P)\Big\}\quad(X\in L^\infty),\qquad \alpha^*(Q)=\tfrac1\gamma H_{\mathcal G}(Q\mid P)\quad(Q\in\mathcal P_{\mathcal G}).ργ​(X)=ess.supQ∈PG​​{−EQ​(X∣G)−γ1​HG​(Q∣P)}(X∈L∞),α∗(Q)=γ1​HG​(Q∣P)(Q∈PG​).

The first identity is representability with the minimal penalty as the penalty; the second identifies that penalty.

Milestones

  1. (Section 5, p. 12) ργ\rho_\gammaργ​ is a conditional convex risk measure.
  2. (Section 5, p. 12) ργ(X)=ess.inf⁡{Y∈LG∞:X+Y∈Aγ}=ess.inf⁡{Y∈LG∞:EP(e−γX∣G)≤eγY}\rho_\gamma(X)=\operatorname{ess.inf}\{Y\in L^\infty_{\mathcal G}: X+Y\in A_\gamma\}=\operatorname{ess.inf}\{Y\in L^\infty_{\mathcal G}: E_P(e^{-\gamma X}\mid\mathcal G)\le e^{\gamma Y}\}ργ​(X)=ess.inf{Y∈LG∞​:X+Y∈Aγ​}=ess.inf{Y∈LG∞​:EP​(e−γX∣G)≤eγY}.
  3. (Proof of Proposition 5.4) ργ\rho_\gammaργ​ is continuous from above: Xn↘XX_n\searrow XXn​↘X implies ργ(Xn)↗ργ(X)\rho_\gamma(X_n)\nearrow\rho_\gamma(X)ργ​(Xn​)↗ργ​(X).
  4. (Section 5, p. 13) For Q∈PGQ\in\mathcal P_{\mathcal G}Q∈PG​: EP(φ∣G)=1E_P(\varphi\mid\mathcal G)=1EP​(φ∣G)=1 and HG(Q∣P)=EQ(log⁡φ∣G)H_{\mathcal G}(Q\mid P)=E_Q(\log\varphi\mid\mathcal G)HG​(Q∣P)=EQ​(logφ∣G).
  5. (Proof of Proposition 5.4) α∗(Q)=1γess.sup⁡Z∈L∞{EQ(Z∣G)−log⁡EP(eZ∣G)}\alpha^*(Q)=\frac1\gamma\operatorname{ess.sup}_{Z\in L^\infty}\{E_Q(Z\mid\mathcal G)-\log E_P(e^Z\mid\mathcal G)\}α∗(Q)=γ1​ess.supZ∈L∞​{EQ​(Z∣G)−logEP​(eZ∣G)}.
  6. (Lemma 5.5) The conditional Donsker–Varadhan formula
ess.sup⁡Z∈L∞{EQ(Z∣G)−log⁡EP(eZ∣G)}=HG(Q∣P),Q∈PG.\operatorname{ess.sup}_{Z\in L^\infty}\{E_Q(Z\mid\mathcal G)-\log E_P(e^Z\mid\mathcal G)\}=H_{\mathcal G}(Q\mid P),\qquad Q\in\mathcal P_{\mathcal G}.ess.supZ∈L∞​{EQ​(Z∣G)−logEP​(eZ∣G)}=HG​(Q∣P),Q∈PG​.

Significance

The result gives the conditional entropic risk measure an explicit dual description: the capital requirement is a worst case over conditional models, each penalized by its conditional relative entropy. This duality is what makes entropic risk measures computable in dynamic settings. Recursive compositions of ργ\rho_\gammaργ​ over a filtration are time consistent, and their penalties add up by the chain rule for conditional relative entropy. Lemma 5.5 is also the conditional form of the Donsker–Varadhan (Gibbs) variational principle, which is used on its own in large deviations and in PAC-Bayesian bounds.

On status: the results are proved in the paper, and the unconditional versions are textbook material. Mathlib has unconditional Kullback–Leibler divergence, tilted measures, conditional Jensen's inequality and a [0,+∞][0,+\infty][0,+∞]-valued conditional expectation. As far as the platform search could establish, neither the conditional relative entropy nor the conditional Donsker–Varadhan formula nor any conditional risk measure has been formalized. This mission produces the first machine-checked conditional version, with HGH_{\mathcal G}HG​ allowed to be infinite.

Difficulty

In the unconditional case both sides of Lemma 5.5 are numbers, and the supremum is a supremum over reals. Conditionally, both sides are random variables. The supremum over the uncountable family indexed by L∞L^\inftyL∞ must be taken in the essential sense, and a pointwise supremum is neither measurable nor meaningful. The conditional relative entropy can be +∞+\infty+∞ on a set of positive probability. The integrand φlog⁡φ\varphi\log\varphiφlogφ need not be integrable, so the usual conditional expectation of L1L^1L1 is not available for it, and the "≥\ge≥" direction must reach an unbounded target through bounded test variables while controlling log⁡EP(eZ∣G)\log E_P(e^{Z}\mid\mathcal G)logEP​(eZ∣G) at the same time. The ess.sup in the goal ranges over measures, not random variables, and each EQ(⋅∣G)E_Q(\cdot\mid\mathcal G)EQ​(⋅∣G) is a conditional expectation under a different measure. These are identified with PPP-a.s. objects through the condition Q=PQ=PQ=P on G\mathcal GG.

Formalization scope

  • (Ω,F,P)(\Omega,\mathcal F,P)(Ω,F,P) is a probability space (IsProbabilityMeasure P), and G\mathcal GG is m : MeasurableSpace Ω with hm : m ≤ mΩ. Payoffs are real functions with MemLp X ⊤ P. LG∞L^\infty_{\mathcal G}LG∞​ membership is StronglyMeasurable[m] plus MemLp ⊤. Every (in)equality between random variables is PPP-a.e.
  • PG\mathcal P_{\mathcal G}PG​ is the subtype of probability measures Q≪PQ\ll PQ≪P with Q(A)=P(A)Q(A)=P(A)Q(A)=P(A) for all A∈GA\in\mathcal GA∈G. This is equality on G\mathcal GG, not equivalence of measures.
  • EP(⋅∣G)E_P(\cdot\mid\mathcal G)EP​(⋅∣G) and EQ(⋅∣G)E_Q(\cdot\mid\mathcal G)EQ​(⋅∣G) on bounded variables are Mathlib's conditional expectations P[·|m] and Q[·|m]. Bounded variables are integrable under every Q≪PQ\ll PQ≪P, so no junk value arises.
  • ργ\rho_\gammaργ​ is the paper's closed form 1γlog⁡EP(e−γX∣G)\frac1\gamma\log E_P(e^{-\gamma X}\mid\mathcal G)γ1​logEP​(e−γX∣G). The ess.inf descriptions are a milestone, and no positivity hypothesis on XXX is imposed.
  • φ\varphiφ is the real part of the Radon–Nikodym derivative Q.rnDeriv P. HG(Q∣P)H_{\mathcal G}(Q\mid P)HG​(Q∣P) and EQ(log⁡φ∣G)E_Q(\log\varphi\mid\mathcal G)EQ​(logφ∣G) are generalized conditional expectations, E(f+∣G)−E(f−∣G)E(f^+\mid\mathcal G)-E(f^-\mid\mathcal G)E(f+∣G)−E(f−∣G), built from Mathlib's [0,+∞][0,+\infty][0,+∞]-valued condLExp and valued in EReal. The negative parts are integrable, so +∞−(+∞)+\infty-(+\infty)+∞−(+∞) never arises. In EReal, a real number minus +∞+\infty+∞ is −∞-\infty−∞, which is how a model with infinite entropy drops out of the supremum.
  • Essential suprema and infima are predicates (IsEssSup, IsEssInf) on a candidate PPP-a.e. measurable EReal-valued function. The candidate must dominate every member a.s. and lie a.s. below every a.s. upper bound.
  • Continuity from above means: a.s. monotone convergence Xn↘XX_n\searrow XXn​↘X in L∞L^\inftyL∞ implies a.s. monotone convergence ρ(Xn)↗ρ(X)\rho(X_n)\nearrow\rho(X)ρ(Xn​)↗ρ(X).
  • γ\gammaγ is a real constant with γ>0\gamma>0γ>0. The random risk aversion of Remark 5.6 is not formalized.
  • Ruled out: defining HGH_{\mathcal G}HG​ through the Bochner conditional expectation P[φ * log φ | m] (which returns 000 when φlog⁡φ\varphi\log\varphiφlogφ is not integrable) or α∗\alpha^*α∗ through a pointwise supremum would make the goal false or vacuous, and so would stating it for an abstract convex risk measure in place of ργ\rho_\gammaργ​. The formalization uses the extended-valued HGH_{\mathcal G}HG​, the essential supremum, and the explicit ργ\rho_\gammaργ​.
  • The mission is self-contained. It redefines conditional convex risk measures, PG\mathcal P_{\mathcal G}PG​ and the essential supremum in its own namespace CondConvexRisk.Entropic and does not assume the general representation theorem (Theorem 3.2). The generalized conditional expectation and the conditional Donsker–Varadhan formula are reusable beyond risk measures. Contributions are welcome on the ess.sup API (existence, upward-directed families), on conditional monotone convergence for condExp, and on the conditional Jensen step for xlog⁡xx\log xxlogx.

Selected references

  • S. Detlefsen, G. Scandolo, Conditional and Dynamic Convex Risk Measures, SFB 649 Discussion Paper 2005-006, Humboldt-Universität zu Berlin, 2005 (the version formalized; published in Finance and Stochastics 9(4), 2005, https://doi.org/10.1007/s00780-005-0159-6).
  • H. Föllmer, A. Schied, Stochastic Finance: An Introduction in Discrete Time, de Gruyter, Berlin, 2002 (reference [8] of the paper).
  • H. Föllmer, A. Schied, Convex measures of risk and trading constraints, Finance and Stochastics 6:429–447, 2002. https://doi.org/10.1007/s007800200072
  • M. D. Donsker, S. R. S. Varadhan, Asymptotic evaluation of certain Markov process expectations for large time, III, Comm. Pure Appl. Math. 29:389–461, 1976. https://doi.org/10.1002/cpa.3160290405
9 thms3 active usersReviewed
🏆Completed
Operations ResearchProbabilityTheoretical Computer Science·Captain: mikedeng1

Competitive Paging Algorithms I: The Marking Algorithm Is 2H_k-CompetitiveResearch Paper

Motivation

Paging is the problem of managing a two-level memory: a fast cache holds kkk pages out of an address space of nnn pages, requests to pages arrive one at a time, and a request to a page outside the cache (a page fault) forces the algorithm to bring that page in and, when the cache is full, to evict another. The cost is the number of faults. An on-line algorithm decides which page to evict without knowing future requests. The comparison of paging policies with the optimal off-line policy is where competitive analysis began.

Sleator and Tarjan showed that LRU and FIFO are within a factor kkk of the off-line optimum and that no deterministic on-line algorithm does better than kkk (Sleator–Tarjan 1985). Randomization changes the picture: Fiat, Karp, Luby, McGeoch, Sleator and Young introduced the marking algorithm and proved that its expected cost is within a factor 2Hk2H_k2Hk​ of the optimum, where Hk=1+12+⋯+1k≈ln⁡kH_k = 1 + \frac12 + \dots + \frac1k \approx \ln kHk​=1+21​+⋯+k1​≈lnk (arXiv:cs/0205038).

Timeline.

  • 1985: Sleator and Tarjan: LRU and FIFO are kkk-competitive; no deterministic algorithm beats kkk.
  • 1988: Karlin, Manasse, Rudolph and Sleator coin "competitive" and analyse flush-when-full (Algorithmica 3).
  • 1990: Manasse, McGeoch and Sleator introduce the kkk-server problem and define competitiveness for randomized algorithms (J. Algorithms 11).
  • 1991: Fiat et al.: the marking algorithm is 2Hk2H_k2Hk​-competitive, and Hn−1H_{n-1}Hn−1​-competitive when k=n−1k = n-1k=n−1; no randomized paging algorithm beats HkH_kHk​.
  • 1991: McGeoch and Sleator give an HkH_kHk​-competitive randomized paging algorithm (Algorithmica 6).
  • 2000: Achlioptas, Chrobak and Noga determine the exact competitive ratio of the marking algorithm, 2Hk−12H_k - 12Hk​−1 (Theoret. Comput. Sci. 234).

Setting

The paper works in the uniform kkk-server problem, which is isomorphic to paging. There is a set MMM of nnn vertices, enumerated e(0),…,e(n−1)e(0), \dots, e(n-1)e(0),…,e(n−1), and moving a server between two distinct vertices costs 111. There are kkk servers, 1≤k≤n1 \le k \le n1≤k≤n. A request is a vertex, and after each request some server must be on it. Cached pages are covered vertices; a fault is a server move.

The marking algorithm starts with its servers on e(0),…,e(k−1)e(0), \dots, e(k-1)e(0),…,e(k−1) and keeps a set of marked vertices, initially the covered ones. On a request to rrr:

  1. Marking. rrr is marked; the moment k+1k+1k+1 vertices are marked, all marks except the one on rrr are erased.
  2. Serving. If rrr is covered, nothing moves. Otherwise a server is chosen uniformly at random among the covered unmarked vertices and moved to rrr.

The marks are updated before the server is chosen. For a finite request sequence σ\sigmaσ, CM(σ)C_M(\sigma)CM​(σ) is the algorithm's expected number of server moves. OPT(σ)\mathrm{OPT}(\sigma)OPT(σ) is the least number of moves with which kkk servers, starting from the same configuration C0C_0C0​ and knowing σ\sigmaσ in advance, can serve σ\sigmaσ.

A randomized algorithm is ccc-competitive if there is a constant aaa such that CM(σ)≤c⋅CB(σ)+aC_M(\sigma) \le c \cdot C_B(\sigma) + aCM​(σ)≤c⋅CB​(σ)+a for every request sequence σ\sigmaσ and every algorithm BBB.

The marks divide σ\sigmaσ into phases. A new phase begins at the request that would make k+1k+1k+1 vertices marked. A vertex is clean in a phase if it was not requested in the previous phase and not yet in this one, and stale if it was requested in the previous phase but not yet in this one.

Formalization targets

Goal: Theorem 1

∃ a∈R  ∀σ:CM(σ)  ≤  2Hk⋅OPT(σ)+a.\exists\, a \in \mathbb R\ \ \forall \sigma:\qquad C_M(\sigma) \;\le\; 2H_k \cdot \mathrm{OPT}(\sigma) + a .∃a∈R  ∀σ:CM​(σ)≤2Hk​⋅OPT(σ)+a.

The constant aaa may depend on nnn, kkk and the enumeration, never on σ\sigmaσ.

Milestones (proof of Theorem 1, pp. 4–5)

  1. Without loss of generality the adversary is lazy: no move on a covered request, exactly one move otherwise (reference item, already proved on the platform).
  2. At the start of every phase the marked vertices are exactly the covered ones, and the first request of a phase is unmarked.
  3. In a phase with lll clean requests, a lazy adversary pays CA≥l−dC_A \ge l - dCA​≥l−d, where ddd counts its servers off the marking algorithm's servers at the start of the phase.
  4. It also pays CA≥d′C_A \ge d'CA​≥d′, where d′d'd′ counts its servers off the final marked set at the end of the phase.
  5. Hence CA≥max⁡(l−d,d′)≥12(l−d+d′)C_A \ge \max(l-d, d') \ge \tfrac12(l - d + d')CA​≥max(l−d,d′)≥21​(l−d+d′).
  6. A request to a stale vertex is a fault with probability c/sc/sc/s (ccc clean vertices requested so far, sss stale vertices left).
  7. The marking algorithm's expected cost in a phase is at most l(Hk−Hl+1)≤lHkl(H_k - H_l + 1) \le lH_kl(Hk​−Hl​+1)≤lHk​.

Companions

  • Theorem 2: for k=n−1k = n-1k=n−1, CM(σ)≤Hn−1⋅OPT(σ)+aC_M(\sigma) \le H_{n-1} \cdot \mathrm{OPT}(\sigma) + aCM​(σ)≤Hn−1​⋅OPT(σ)+a.
  • Tightness remark (pp. 5–6): for k=2k = 2k=2, n=4n = 4n=4 there is no aaa with CM(σ)≤H2⋅OPT(σ)+aC_M(\sigma) \le H_2 \cdot \mathrm{OPT}(\sigma) + aCM​(σ)≤H2​⋅OPT(σ)+a for all σ\sigmaσ.

Significance

The result. Theorem 1 was the first proof that randomization beats the deterministic barrier kkk for paging, bringing the ratio down to O(log⁡k)O(\log k)O(logk). Together with the paper's lower bound HkH_kHk​ for every randomized algorithm, it determines the randomized competitive ratio of paging up to a factor 222. Its phase and clean/stale accounting is reused throughout the analysis of randomized caching.

Formalizing it. The theorem is proved (1991). As far as is known it has no machine-checked proof. Formalizing it requires a probabilistic model of a randomized on-line algorithm, an off-line optimum, and a phase decomposition with an exchangeability argument, and these are the first such objects in this library. Theorem 2 and the k=2k = 2k=2, n=4n = 4n=4 example use the same definitions and also check that the formal algorithm is the paper's. The sharp ratio 2Hk−12H_k - 12Hk​−1 is a natural follow-up.

Difficulty

The comparison is between a random process and a deterministic adversary, and each side has its own obstacle.

On the algorithm's side, the configuration inside a phase is random, and the fault probability of a stale request depends on the whole history of the phase. The claim that the ccc uncovered stale vertices form a uniformly random subset of the sss stale ones is an exchangeability property of the process, and must be established from the step-by-step uniform choice. The worst-case ordering of the requests within a phase then has to be justified as a bound, not assumed.

On the adversary's side, the per-phase bound max⁡(l−d,d′)\max(l-d, d')max(l−d,d′) does not sum directly. The ddd and d′d'd′ terms telescope across phases only because the configuration of the marking algorithm at each phase boundary is deterministic. The first phase, which begins after an initial run of requests to e(0),…,e(k−1)e(0), \dots, e(k-1)e(0),…,e(k−1), and the last, incomplete phase have to be absorbed into the additive constant.

Formalization scope

The vertex set is an abstract metric space MMM with e:Fin n≃Me : \mathrm{Fin}\,n \simeq Me:Finn≃M and dist(x,y)=1\mathrm{dist}(x,y) = 1dist(x,y)=1 for x≠yx \ne yx=y. The natural metric ∣i−j∣|i - j|∣i−j∣ on Fin n\mathrm{Fin}\,nFinn is deliberately not used. The configurations and the off-line optimum OPT\mathrm{OPT}OPT are the published KServer definitions (KServer.Config, KServer.offlineCost), with OPT\mathrm{OPT}OPT taken from the marking algorithm's initial configuration. An off-line algorithm starting elsewhere changes the cost by at most kkk, which is absorbed into aaa.

The marking algorithm is a Markov chain on pairs (covered set, marked set). Each step is a PMF, with the eviction drawn by PMF.uniformOfFinset from the covered unmarked vertices. The expected cost is the sum over requests of the probability that the request is not covered, which is exact because the algorithm moves exactly one server per fault. Harmonic numbers are Mathlib's harmonic, cast to R\mathbb RR. Phases, clean counts and lazy off-line schedules are defined once, in the mission's definition file, and all milestones use them.

A trivializing formalization is ruled out as follows. The additive constant is quantified before σ\sigmaσ, so a per-sequence constant cannot be used. The comparison is with the optimum over all off-line schedules, not a particular one. The random choice is among the covered unmarked vertices, with marks updated first. The hypothesis 1≤k≤n1 \le k \le n1≤k≤n excludes the degenerate case k=0k = 0k=0, where H0=0H_0 = 0H0​=0.

Proofs of individual milestones are welcome. The laziness reduction for off-line schedules, the exchangeability lemma for the uniform eviction process, and the harmonic-sum identity ∑j=l+1kl/j=l(Hk−Hl)\sum_{j=l+1}^{k} l/j = l(H_k - H_l)∑j=l+1k​l/j=l(Hk​−Hl​) are reusable beyond this mission.

Selected references

  • A. Fiat, R. M. Karp, M. Luby, L. A. McGeoch, D. D. Sleator, N. E. Young, Competitive Paging Algorithms, J. Algorithms 12(4):685–699, 1991; arXiv:cs/0205038v1. https://arxiv.org/abs/cs/0205038
  • D. D. Sleator, R. E. Tarjan, Amortized Efficiency of List Update and Paging Rules, Comm. ACM 28(2):202–208, 1985. https://doi.org/10.1145/2786.2793
  • A. R. Karlin, M. S. Manasse, L. Rudolph, D. D. Sleator, Competitive Snoopy Caching, Algorithmica 3:79–119, 1988. https://doi.org/10.1007/BF01762111
  • M. S. Manasse, L. A. McGeoch, D. D. Sleator, Competitive Algorithms for Server Problems, J. Algorithms 11(2):208–230, 1990. https://doi.org/10.1016/0196-6774(90)90003-W
  • L. A. McGeoch, D. D. Sleator, A Strongly Competitive Randomized Paging Algorithm, Algorithmica 6:816–825, 1991. https://doi.org/10.1007/BF01759073
  • D. Achlioptas, M. Chrobak, J. Noga, Competitive Analysis of Randomized Paging Algorithms, Theoret. Comput. Sci. 234:203–218, 2000. https://doi.org/10.1016/S0304-3975(98)00116-9
10 thms4 active usersReviewed
🏆Completed
Operations ResearchProbabilityTheoretical Computer Science·Captain: mikedeng1

Competitive Paging Algorithms II: Algorithm EATR Is 3/2-Competitive for Two ServersResearch Paper

Motivation

Paging is the problem of managing a two-level memory: a fast cache holding kkk pages and a slow memory holding the rest. When a requested page is not in the cache (a page fault), it must be brought in and, if the cache is full, some page must be evicted. An on-line paging algorithm decides which page to evict without knowing future requests. Sleator and Tarjan (CACM 1985) compared on-line algorithms with the optimal off-line algorithm on every request sequence and showed that the best deterministic algorithms (LRU, FIFO) lose a factor of exactly kkk, and that no deterministic on-line algorithm does better.

Randomization changes this picture. Fiat, Karp, Luby, McGeoch, Sleator and Young (J. Algorithms 1991; arXiv:cs/0205038) showed that the randomized marking algorithm is 2Hk2H_k2Hk​-competitive, where Hk=1+12+⋯+1kH_k=1+\tfrac12+\dots+\tfrac1kHk​=1+21​+⋯+k1​, and that no randomized algorithm is better than HkH_kHk​-competitive. For k<n−1k<n-1k<n−1 the marking algorithm does not reach HkH_kHk​, already for k=2k=2k=2 and n=4n=4n=4. For two servers the same paper gives a different algorithm, EATR ("end after twice requested"), and proves it 3/23/23/2-competitive. Since H2=3/2H_2=3/2H2​=3/2, EATR is strongly competitive for k=2k=2k=2: no randomized algorithm has a smaller competitive factor. This mission formalizes that result.

Timeline:

  • 1985: Sleator and Tarjan, deterministic paging: factor kkk, and kkk is optimal.
  • 1988: Karlin, Manasse, Rudolph and Sleator introduce the term competitive (Algorithmica 3:79–119); Manasse, McGeoch and Sleator formulate the kkk-server problem and extend competitiveness to randomized algorithms (J. Algorithms 1990).
  • 1991: Fiat et al.: the marking algorithm is 2Hk2H_k2Hk​-competitive, the lower bound HkH_kHk​, and EATR is 3/23/23/2-competitive for k=2k=2k=2.
  • 1991: McGeoch and Sleator give an HkH_kHk​-competitive algorithm for every kkk (Algorithmica 6, 1991; reference [12] of the paper).

Setting

The uniform 222-server problem has a finite set MMM of n≥2n\ge 2n≥2 vertices, any two distinct vertices at distance 111, and two servers. A request sequence σ=σ(0),σ(1),…\sigma=\sigma(0),\sigma(1),\dotsσ=σ(0),σ(1),… is a list of vertices; each request must be covered by a server when it is served, and the cost is the number of server moves. This is paging with a cache of two pages: vertices are pages and the covered vertices are the cache.

A deterministic algorithm BBB has a cost CB(σ)C_B(\sigma)CB​(σ); a randomized algorithm AAA has an expected cost CA(σ)C_A(\sigma)CA​(σ), averaged over its random choices. AAA is ccc-competitive if there is a constant aaa such that for every request sequence σ\sigmaσ and every deterministic algorithm BBB (on-line or off-line),

CA(σ)≤c⋅CB(σ)+a.C_A(\sigma)\le c\cdot C_B(\sigma)+a.CA​(σ)≤c⋅CB​(σ)+a.

Algorithm EATR. The servers start on the vertices 111 and 222. The algorithm divides σ\sigmaσ into phases; the first phase starts at the first request to a vertex other than 111 and 222. Let PPP be the set of vertices occupied by the servers at the end of the previous phase ({1,2}\{1,2\}{1,2} before the first phase). During a phase, a vertex is clean if it is not in PPP and has not been requested during this phase; a vertex is stale if it is neither clean nor the most recently requested vertex ℓ\ellℓ. EATR keeps one server on ℓ\ellℓ and the other uniformly at random on the stale set. When a stale vertex rrr is requested, the servers are placed on ℓ\ellℓ and rrr and the phase ends; the next phase starts at the next request to a vertex not covered by a server. Requests between phases, and repeated requests to ℓ\ellℓ, move nothing.

For a phase, lll denotes the number of clean vertices requested in it. For a deterministic algorithm AAA, ddd and d′d'd′ denote the numbers of AAA's servers that do not coincide with any of EATR's servers at the beginning and at the end of the phase. An algorithm is lazy if it moves no server on a request to a covered vertex and exactly one server on a request to an uncovered one.

Formalization targets

Goal: Theorem 3

With OPT(σ)\mathrm{OPT}(\sigma)OPT(σ) the optimal off-line cost of serving σ\sigmaσ from the servers' starting position (1,2)(1,2)(1,2), there is a constant ccc such that for all σ\sigmaσ

CEATR(σ)≤32 OPT(σ)+c.C_{\mathrm{EATR}}(\sigma)\le \tfrac32\,\mathrm{OPT}(\sigma)+c.CEATR​(σ)≤23​OPT(σ)+c.

The constant ccc is left free; the factor 3/23/23/2 is the paper's and is optimal.

Milestones, in the order of the proof

  1. Laziness (p. 4): every deterministic algorithm is dominated by a lazy one (a published theorem, reused).
  2. Adversary bound for structured phases (p. 5): in a complete EATR phase with lll clean requests, a lazy AAA pays at least l−d+d′l-d+d'l−d+d′.
  3. Stale set before the terminating request (p. 6): it has l+1l+1l+1 elements, each covered with probability 1/(l+1)1/(l+1)1/(l+1).
  4. Expected cost of a phase to EATR (p. 6): exactly l+ll+1l+\frac{l}{l+1}l+l+1l​.
  5. Per-phase ratio (p. 6): EATR's expected phase cost is at most 32(CA+d−d′)\tfrac32(C_A+d-d')23​(CA​+d−d′), since l+l/(l+1)l=1+1l+1≤32\frac{l+l/(l+1)}{l}=1+\frac{1}{l+1}\le\frac32ll+l/(l+1)​=1+l+11​≤23​.

Significance

The result. Theorem 3 settles the randomized competitive ratio of paging with two cache slots: combined with the paper's lower bound HkH_kHk​ (Corollary 5, the subject of a companion mission), the optimal factor for k=2k=2k=2 is exactly 3/23/23/2, against 222 for every deterministic algorithm. The general case was settled later by McGeoch and Sleator's HkH_kHk​-competitive partitioning algorithm, which is considerably more complicated.

Formalizing it. The result has been proved since 1991; no machine-checked proof of it is on the platform (a search for EATR, randomized paging and two-server results on 2026-09-26 found only deterministic kkk-server theorems). The mission produces a formal model of a randomized on-line algorithm as a probability distribution over states evolving with the request sequence, a formal treatment of the phase decomposition and of the telescoping amortization that relates expected on-line cost to the optimal off-line cost, and a first strongly competitive randomized paging result on the platform, alongside the deterministic kkk-server results already there.

Difficulty

The per-phase computations are short. The main difficulty is the global accounting. The adversary's cost in a phase is bounded only in amortized form, l−d+d′l-d+d'l−d+d′, where ddd and d′d'd′ compare the adversary's servers with EATR's at the phase boundaries; the bound becomes a statement about OPT\mathrm{OPT}OPT only after the ddd and d′d'd′ terms telescope across phases. This needs care with the requests that lie outside every phase (before the first phase, between phases, and in an unfinished last phase), during which the adversary may move. A further difficulty is that the off-line optimum ranges over arbitrary schedules, which may move several servers on one request, while the phase bound is proved for lazy on-line algorithms: the reduction from one to the other must be made explicit. Finally, the uniform law of the stale server is an invariant of a Markov chain on states that must be tracked through the whole phase.

Formalization scope

The vertices are an abstract metric space MMM with an enumeration e:Fin n≃Me:\mathrm{Fin}\,n\simeq Me:Finn≃M, 2≤n2\le n2≤n, and the hypothesis that distinct points are at distance 111; the metric of Fin n\mathrm{Fin}\,nFinn is not used. The starting vertices 1,21,21,2 are e(0),e(1)e(0),e(1)e(0),e(1). OPT\mathrm{OPT}OPT is KServer.offlineCost of the published KServer model: the infimum of total movement over all schedules serving σ\sigmaσ from (e(0),e(1))(e(0),e(1))(e(0),e(1)). Comparing with this infimum covers every deterministic BBB starting from EATR's position; a BBB starting elsewhere differs by at most 222, which the constant absorbs. The constant is quantified before σ\sigmaσ.

EATR is a PMF over states: a deterministic record (the set PPP, whether a phase is in progress, the last requested vertex, the vertices requested in the phase) and the random position of the second server. Its expected cost is the expected number of server moves, summed over the requests. The paper fixes only that the second server is uniform on the stale set; when a clean request enlarges the stale set, the formalization moves one server by a fixed coupling that keeps the law uniform, and this choice is stated in the definition. A formalization that defines EATR's expected cost by the closed formula of the proof, or that restricts σ\sigmaσ to complete phases, would make the goal a different statement; neither is done here. The pre-phase prefix and an unfinished last phase belong to σ\sigmaσ and are covered by the constant.

Needed infrastructure: finite probability distributions (Mathlib's PMF), the published KServer model and its laziness theorem, and bookkeeping lemmas on the deterministic phase record. The phase record and the amortization argument are reusable for the marking algorithm of the companion mission. Proofs of any milestone, and alternative decompositions of the goal, are welcome.

Selected references

  • A. Fiat, R. M. Karp, M. Luby, L. A. McGeoch, D. D. Sleator, N. E. Young, Competitive Paging Algorithms, Journal of Algorithms 12(4):685–699, 1991. https://doi.org/10.1016/0196-6774(91)90041-V ; arXiv:cs/0205038v1, https://arxiv.org/abs/cs/0205038
  • D. D. Sleator, R. E. Tarjan, Amortized Efficiency of List Update and Paging Rules, Communications of the ACM 28(2):202–208, 1985. https://doi.org/10.1145/2786.2793
  • M. S. Manasse, L. A. McGeoch, D. D. Sleator, Competitive Algorithms for Server Problems, Journal of Algorithms 11(2):208–230, 1990. https://doi.org/10.1016/0196-6774(90)90003-W
  • L. A. McGeoch, D. D. Sleator, A Strongly Competitive Randomized Paging Algorithm, Algorithmica 6:816–825, 1991 (reference [12] of the paper).
  • A. R. Karlin, M. S. Manasse, L. Rudolph, D. D. Sleator, Competitive Snoopy Caching, Algorithmica 3(1):79–119, 1988 (reference [9] of the paper).
8 thms3 active usersReviewed
🏆Completed
Operations ResearchProbabilityTheoretical Computer Science·Captain: mikedeng1

Competitive Paging Algorithms III: No Randomized Paging Algorithm Is Better than H_k-CompetitiveResearch Paper

Motivation

Paging is the problem of managing a two-level memory: a cache holds kkk of the nnn pages a program uses, every request must find its page in the cache, and a request to a page outside the cache (a page fault) forces the algorithm to bring the page in and evict another. An on-line algorithm chooses what to evict without seeing future requests. Sleator and Tarjan (CACM 1985) measured on-line paging algorithms against the optimal off-line algorithm, which knows the whole request sequence, and showed that no deterministic on-line algorithm can be within a factor smaller than kkk of it.

Randomization changes that picture. Fiat, Karp, Luby, McGeoch, Sleator and Young (J. Algorithms 1991; arXiv:cs/0205038) gave a randomized algorithm, the marking algorithm, whose expected number of faults is within 2Hk2H_k2Hk​ of the optimum, where Hk=1+12+⋯+1k≈ln⁡kH_k = 1 + \tfrac12 + \dots + \tfrac1k \approx \ln kHk​=1+21​+⋯+k1​≈lnk. This mission formalizes the other half of their paper's picture: no randomized paging algorithm can do better than HkH_kHk​. The bound says that the logarithmic behaviour is not an artefact of one algorithm but a property of the problem.

Timeline:

  • 1985 — Sleator and Tarjan: deterministic paging algorithms have competitive factor at least kkk; LRU and FIFO achieve kkk.
  • 1988 — Karlin, Manasse, Rudolph and Sleator (Algorithmica 3, 1988) introduce the term competitive; Manasse, McGeoch and Sleator (STOC 1988; J. Algorithms 1990) extend it to randomized algorithms and pose the kkk-server problem, of which paging is the uniform-metric case.
  • 1991 — Fiat et al.: the marking algorithm is 2Hk2H_k2Hk​-competitive, and no randomized algorithm is better than HkH_kHk​-competitive (Theorem 4 and Corollary 5 of the paper). Raghavan gave an alternative proof of the lower bound through Yao's minimax principle.
  • 1991 — McGeoch and Sleator give an HkH_kHk​-competitive randomized paging algorithm (Algorithmica 6, 1991), so the lower bound is tight.

Setting

Let MMM be a set of nnn vertices with the uniform metric: any two distinct vertices are at distance 111. A configuration of kkk servers is a map C:{1,…,k}→MC : \{1,\dots,k\} \to MC:{1,…,k}→M; server sss sits at C(s)C(s)C(s), and a vertex is covered when some server sits on it. A request sequence σ\sigmaσ is a finite list of vertices. A deterministic on-line algorithm assigns to every prefix of requests the configuration after serving it, in such a way that the vertex just requested is covered; its cost on σ\sigmaσ is the total distance travelled by its servers, which on the uniform metric is the number of server moves. Paging with kkk cache slots and nnn pages is exactly this kkk-server problem on nnn uniform vertices.

The optimal off-line cost OPTC0(σ)\mathrm{OPT}_{C_0}(\sigma)OPTC0​​(σ) is the least cost of any schedule of configurations that starts at C0C_0C0​ and covers each request of σ\sigmaσ in turn.

A randomized on-line algorithm AAA is a probability space (Ω,μ)(\Omega,\mu)(Ω,μ) of coin outcomes together with a deterministic on-line algorithm AωA_\omegaAω​ for each outcome ω\omegaω. Its expected cost CA(σ)C_A(\sigma)CA​(σ) is the average of the cost of AωA_\omegaAω​ on σ\sigmaσ over ω\omegaω. The request sequence is fixed in advance and does not depend on the coins (an oblivious adversary). Following the paper, AAA is ccc-competitive from the initial configuration C0C_0C0​ if there is a constant aaa such that

CA(σ)  ≤  c⋅OPTC0(σ)+afor every request sequence σ.C_A(\sigma) \;\le\; c \cdot \mathrm{OPT}_{C_0}(\sigma) + a \qquad \text{for every request sequence } \sigma .CA​(σ)≤c⋅OPTC0​​(σ)+afor every request sequence σ.

For the lower-bound argument, the probability vector p=(pi)i∈Mp=(p_i)_{i\in M}p=(pi​)i∈M​ after a prefix σ\sigmaσ has pip_ipi​ equal to the probability, over ω\omegaω, that vertex iii is not covered by AωA_\omegaAω​ after serving σ\sigmaσ. A set SSS of marked vertices and the number u=n−∣S∣u = n - |S|u=n−∣S∣ of unmarked vertices are bookkeeping of the adversary, updated as the marking algorithm would update them.

Formalization targets

Goal: Corollary 5

For 1≤k≤n−11 \le k \le n-11≤k≤n−1, every randomized on-line algorithm AAA with kkk servers on nnn uniform vertices, every initial configuration C0C_0C0​ and every real ccc,

c<Hk  ⟹  A is not c-competitive from C0.c < H_k \;\Longrightarrow\; A \text{ is not } c\text{-competitive from } C_0 .c<Hk​⟹A is not c-competitive from C0​.

Theorem 4 (milestone)

The case k=n−1k = n-1k=n−1: no randomized algorithm for the uniform (n−1)(n-1)(n−1)-server problem on nnn vertices is ccc-competitive with c<Hn−1c < H_{n-1}c<Hn−1​.

Claims of the proof of Theorem 4 (milestones)

With ppp the probability vector, SSS the marked set, P=∑i∈SpiP = \sum_{i\in S} p_iP=∑i∈S​pi​ and u=n−∣S∣u = n - |S|u=n−∣S∣:

∑ipi=1(servers on distinct vertices),CA(σ i)≥CA(σ)+pi,\sum_i p_i = 1 \quad(\text{servers on distinct vertices}),\qquad C_A(\sigma\,i) \ge C_A(\sigma) + p_i,i∑​pi​=1(servers on distinct vertices),CA​(σi)≥CA​(σ)+pi​, P=0⇒∃ i∉S, pi≥1u,P>ϵ>0⇒max⁡j∈Spj≥ϵ∣S∣>0,P = 0 \Rightarrow \exists\, i\notin S,\ p_i \ge \tfrac1u, \qquad P > \epsilon > 0 \Rightarrow \max_{j\in S} p_j \ge \tfrac{\epsilon}{|S|} > 0,P=0⇒∃i∈/S, pi​≥u1​,P>ϵ>0⇒j∈Smax​pj​≥∣S∣ϵ​>0, pj=max⁡j′∉Spj′⇒pj≥1−Pu,P≤ϵ⇒ϵ+pj≥ϵ+1−Pu≥ϵ+1−ϵu≥1u.p_j = \max_{j'\notin S} p_{j'} \Rightarrow p_j \ge \tfrac{1-P}{u}, \qquad P \le \epsilon \Rightarrow \epsilon + p_j \ge \epsilon + \tfrac{1-P}{u} \ge \epsilon + \tfrac{1-\epsilon}{u} \ge \tfrac1u .pj​=j′∈/Smax​pj′​⇒pj​≥u1−P​,P≤ϵ⇒ϵ+pj​≥ϵ+u1−P​≥ϵ+u1−ϵ​≥u1​.

Significance

The result. Together with the marking algorithm's 2Hk2H_k2Hk​ upper bound, the corollary pins the randomized competitive ratio of paging to Θ(log⁡k)\Theta(\log k)Θ(logk), an exponential improvement over the deterministic ratio kkk that no randomized algorithm can push below HkH_kHk​. For k=n−1k = n-1k=n−1 the marking algorithm itself is Hn−1H_{n-1}Hn−1​-competitive, so Theorem 4 makes it optimal there. The HkH_kHk​ bound is the benchmark every later randomized paging algorithm is measured against, including the HkH_kHk​-competitive algorithm of McGeoch and Sleator, and it is the uniform-metric base case of the randomized kkk-server conjecture.

Formalizing it. The theorem is proved and classical; no machine-checked proof is known to exist. The platform already has the deterministic bound (KServer.uniform_not_competitive_below_k, ratio kkk) and a formal Yao averaging principle for randomized kkk-server algorithms (KServer.randomized_yao_averaging), but no randomized paging lower bound. This mission produces the first formal HkH_kHk​ lower bound, stated against the published randomized kkk-server model, and a formal version of the paper's adversary argument. Either route — the paper's adaptive construction of a nemesis sequence from the probability vector, or Raghavan's distributional argument through Yao's principle — is welcome.

Difficulty

The adversary may not look at the coins, yet it must build one fixed sequence against which the expected cost is high in every phase. Requesting an uncovered vertex is not available, since which vertex is uncovered depends on the coins; requesting the vertex with the largest uncovered probability gives only 1/n1/n1/n per request and loses the harmonic sum. Lifting the per-phase bound to the asymptotic statement also requires handling the additive constant aaa, the initial configuration of the off-line algorithm, and, for Corollary 5, the reduction from nnn vertices to k+1k+1k+1 of them for an algorithm that may still place servers on the others.

Formalization scope

The Lean development reuses the published definitions KServer_model (configurations Fin k → M, deterministic on-line algorithms as functions of the request prefix, offlineCost) and KServer_randomized (RandomizedAlgorithm: a probability measure on coin outcomes, a deterministic algorithm per outcome, measurable costs; expCost as a lower Lebesgue integral in [0,∞][0,\infty][0,∞]; IsCompetitiveFrom C₀ c: every drawn algorithm starts at C0C_0C0​ and there is one constant aaa, fixed before the sequence, with expCost σ ≤ ENNReal.ofReal (c * offlineCost C₀ σ + a)). The clamp at 000 in ENNReal.ofReal only weakens the property the goal refutes. The vertex set is an abstract type MMM with an equivalence Fin n ≃ M and the uniform metric as a hypothesis, never the line metric of Fin n. HkH_kHk​ is Mathlib's harmonic k cast to R\mathbb RR. The goal quantifies over every algorithm and every initial configuration, with no laziness or distinct-positions assumption, and over every real c<Hkc < H_kc<Hk​, including c≤0c \le 0c≤0.

A formalization in which competitiveness is vacuous (a model with no algorithms, or a cost that is always infinite), in which the adversary may choose the sequence after seeing the coins, or which fixes ccc or the additive constant, would be a different statement and is ruled out by the published definitions used here.

The probability vector is the one new definition, uncoveredProb A σ i. Milestones about it assume the uncovered events measurable, the standing convention that pip_ipi​ is a probability; the model itself only guarantees measurable costs. The milestone ∑ipi=1\sum_i p_i = 1∑i​pi​=1 assumes the n−1n-1n−1 servers occupy distinct vertices, as in the paper; in general ∑ipi≥1\sum_i p_i \ge 1∑i​pi​≥1. The arithmetic milestones are stated for an arbitrary probability vector on a finite set. Reusable pieces: the probability vector and the cost lemma apply to any randomized kkk-server algorithm on a uniform metric, and a restriction lemma (from nnn vertices to k+1k+1k+1) would serve other paging lower bounds.

Selected references

  • A. Fiat, R. M. Karp, M. Luby, L. A. McGeoch, D. D. Sleator, N. E. Young, Competitive Paging Algorithms, J. Algorithms 12(4):685–699, 1991. https://doi.org/10.1016/0196-6774(91)90041-V ; preprint arXiv:cs/0205038v1 (cited version). https://arxiv.org/abs/cs/0205038
  • D. D. Sleator, R. E. Tarjan, Amortized Efficiency of List Update and Paging Rules, Comm. ACM 28(2):202–208, 1985. https://doi.org/10.1145/2786.2793
  • M. S. Manasse, L. A. McGeoch, D. D. Sleator, Competitive Algorithms for Server Problems, J. Algorithms 11(2):208–230, 1990. https://doi.org/10.1016/0196-6774(90)90003-W
  • L. A. McGeoch, D. D. Sleator, A Strongly Competitive Randomized Paging Algorithm, Algorithmica 6:816–825, 1991.
  • P. Raghavan, Lecture Notes on Randomized Algorithms, IBM Research Report, Yorktown Heights, 1990 (the alternative proof of the lower bound, pp. 118–119).
11 thms3 active usersReviewed
🏆Completed
CombinatoricsOperations ResearchTheoretical Computer Science·Captain: mikedeng1

Competitive Paging Algorithms IV: An Algorithm Competitive against Several Others Exists iff the Reciprocal Ratios Sum to at Most 1Research Paper

Motivation

Paging is the problem of managing a fast memory that holds kkk pages out of nnn: when a requested page is not in fast memory (a page fault), some resident page must be evicted, and the cost of an algorithm is its number of faults. Practitioners have many eviction rules. Least-recently-used (LRU) performs well on real workloads but can be kkk times worse than the optimal off-line schedule; the randomized marking algorithm of the same paper is 2Hk2H_k2Hk​-competitive and so has better worst-case guarantees. Fiat, Karp, Luby, McGeoch, Sleator and Young asked in 1991 whether one on-line algorithm can combine the advantages of several given ones, and answered the question exactly: the attainable combinations of ratios are characterized by one inequality (arXiv:cs/0205038, §6).

The question of combining on-line algorithms has since become a theme of its own: combining heuristics with worst-case-safe algorithms, and, more recently, combining machine-learned predictions with robust fallbacks, both ask for the same kind of guarantee against several reference algorithms at once.

Setting

A type (k,n)(k,n)(k,n) consists of kkk servers and a finite set MMM of nnn vertices with the uniform metric: two distinct vertices are at distance 111. This is paging: vertices are pages, the vertices covered by servers are the pages in fast memory, and a server move is a page fault.

A deterministic on-line algorithm AAA of type (k,n)(k,n)(k,n) has an initial configuration of its kkk servers and, after each request r∈Mr\in Mr∈M, moves servers so that some server covers rrr; its configuration after a request sequence depends only on that sequence. Its cost CA(σ)C_A(\sigma)CA​(σ) on a request sequence σ\sigmaσ is the total distance its servers travel, i.e. the number of server moves.

For algorithms AAA and BBB of the same type and a constant ccc, AAA is ccc-competitive against BBB if there is a constant aaa such that for every request sequence σ\sigmaσ

CA(σ)≤c⋅CB(σ)+a.C_A(\sigma)\le c\cdot C_B(\sigma)+a .CA​(σ)≤c⋅CB​(σ)+a.

A sequence c∗=(c(1),…,c(m))c^*=(c(1),\dots,c(m))c∗=(c(1),…,c(m)) of positive reals is realizable if for every type (k,n)(k,n)(k,n) and every mmm deterministic on-line algorithms B(1),…,B(m)B(1),\dots,B(m)B(1),…,B(m) of that type there is a deterministic on-line algorithm AAA of the same type that is c(i)c(i)c(i)-competitive against B(i)B(i)B(i) for every iii.

Formalization targets

Goal: Theorem 6

For m≥1m\ge1m≥1 and positive reals c(1),…,c(m)c(1),\dots,c(m)c(1),…,c(m),

c∗ is realizable  ⟺  ∑1≤i≤m1c(i)≤1.c^*\ \text{is realizable}\iff \sum_{1\le i\le m}\frac1{c(i)}\le 1 .c∗ is realizable⟺1≤i≤m∑​c(i)1​≤1.

Milestones

In the order of the paper's proof:

  1. Punishments are paid for. If AAA punishes BBB at a time step (an AAA-interval on a vertex vvv ends at that step and contains the end of a BBB-interval on vvv that began no later), then BBB has moved a server; the number of such steps is at most CB(σ)C_B(\sigma)CB​(σ).
  2. A fault leaves room to punish. If ∣SA∣=k|S_A|=k∣SA​∣=k, ∣SB∣≤k|S_B|\le k∣SB​∣≤k, x∈SBx\in S_Bx∈SB​ and x∉SAx\notin S_Ax∈/SA​, then some u∈SAu\in S_Au∈SA​ is not in SBS_BSB​.
  3. The greedy quota claim. If ∑i1/c(i)≤1\sum_i 1/c(i)\le 1∑i​1/c(i)≤1 and each unit of cost punishes the B(i)B(i)B(i) minimizing c(i)(PUN(i)+1)c(i)(\mathrm{PUN}(i)+1)c(i)(PUN(i)+1) (other algorithms may be punished incidentally), then after cost rrr every B(i)B(i)B(i) has been punished at least ⌊r/c(i)⌋\lfloor r/c(i)\rfloor⌊r/c(i)⌋ times.
  4. Shuttle algorithms. With 2m−12m-12m−1 servers on 2m2m2m vertices there are mmm algorithms, each keeping all vertices outside its own pair covered, no two of which move at the same step; in particular their total cost on any σ\sigmaσ is at most ∣σ∣|\sigma|∣σ∣.
  5. A forcing adversary. With 2m−12m-12m−1 servers on 2m2m2m vertices every algorithm can be forced to move at each of NNN steps, so CA(τ(N))≥NC_A(\tau(N))\ge NCA​(τ(N))≥N.

Significance

The result. Theorem 6 is an exact characterization, not a bound: the region of simultaneously attainable ratios against arbitrary deterministic paging algorithms is {c:∑1/c(i)≤1}\{c:\sum 1/c(i)\le 1\}{c:∑1/c(i)≤1}. For example, any two paging algorithms can be combined into one that is 222-competitive against each, and no better symmetric pair is possible in general. Combined with Theorem 7 of the same paper (not part of this mission), the same region is attainable against randomized algorithms, which is how LRU's practical behaviour and the marking algorithm's 2Hk2H_k2Hk​ worst-case guarantee can be obtained within constant factors by one algorithm.

Formalizing it. The theorem has been proved since 1991; no machine-checked proof is known. A formal proof produces a reusable notion of competitiveness of one on-line algorithm against another, built on the published KServer_model definitions, and a formal account of the scheduling fact at the core of the sufficiency proof.

Difficulty

Sufficiency looks like an averaging argument, but the combined algorithm cannot simulate the B(i)B(i)B(i) and follow one of them: switching between their configurations costs up to kkk per switch, which no additive constant absorbs. The accounting has to charge each of AAA's faults to a specific move of a specific B(i)B(i)B(i), and the charge must be injective; the paper's claim that CB(σ)C_B(\sigma)CB​(σ) is at least the number of punishments is where this happens, and it depends on how server intervals are matched. The allocation of faults to algorithms is then a deadline-scheduling problem whose feasibility is exactly ∑1/c(i)≤1\sum 1/c(i)\le 1∑1/c(i)≤1, and the floor functions make the counting delicate at the boundary. The paper's own definition of punishment only counts intervals that start with a move, so the first kkk faults of AAA (servers on their initial vertices) need separate treatment; they are absorbed by the additive constant.

Necessity needs the right family of hard instances: the mmm algorithms must never move at the same step, which pins the type to (2m−1,2m)(2m-1,2m)(2m−1,2m).

Formalization scope

The Lean development works in the namespace CompetitivePaging.Combining and imports the published KServer_model definitions: KServer.OnlineAlgorithm k M (a configuration map from request prefixes to Fin k → M with a serving condition) and OnlineAlgorithm.cost. Committed conventions:

  • a type (k,n)(k,n)(k,n) is any k : ℕ and any finite M : Type with a metric in which distinct points are at distance 111; realizability quantifies over all of them, never over one fixed type;
  • servers are labelled; each algorithm has its own initial configuration, and the additive constant aaa is chosen before the request sequence;
  • c(i)>0c(i)>0c(i)>0 and m≥1m\ge1m≥1 are hypotheses of the goal, as in the paper; without positivity, 1/0=01/0=01/0=0 in Lean would make a zero ratio free;
  • time ttt is the step processing the ttt-th request; the paper's PUN\mathrm{PUN}PUN counts time steps.

Trivializing encodings are ruled out: realizability is not stated for a single fixed type, the metric is not the metric of Fin n, and the competitive constant is not allowed to depend on the request sequence.

A complete proof needs the construction of the punishing algorithm as a KServer.OnlineAlgorithm (a lazy, injective algorithm whose moves depend on the prefix and on the B(i)B(i)B(i)'s configurations), the injective charging argument, the scheduling lemma, and the explicit shuttle algorithms. The scheduling lemma and the charging lemma are independent of paging and reusable. Proofs of any milestone are welcome, as are alternative statements of the sufficiency construction.

Selected references

  • A. Fiat, R. M. Karp, M. Luby, L. A. McGeoch, D. D. Sleator, N. E. Young, Competitive Paging Algorithms, J. Algorithms 12(4):685–699, 1991. doi:10.1016/0196-6774(91)90041-V; preprint arXiv:cs/0205038.
  • D. D. Sleator, R. E. Tarjan, Amortized efficiency of list update and paging rules, Comm. ACM 28(2):202–208, 1985. doi:10.1145/2786.2793
  • M. S. Manasse, L. A. McGeoch, D. D. Sleator, Competitive algorithms for server problems, J. Algorithms 11(2):208–230, 1990. doi:10.1016/0196-6774(90)90003-W
9 thms5 active usersReviewed
🏆Completed
Convex OptimizationLinear algebraNumerical Analysis+2·Captain: mikedeng1

Robust Solutions to Least-Squares Problems with Uncertain Data I: The Worst-Case Residual and Its Unique MinimizerResearch Paper

Motivation

The least-squares (LS) problem min⁡x∥Ax−b∥\min_x \|Ax - b\|minx​∥Ax−b∥ assumes that the data A∈Rn×mA \in \mathbb{R}^{n\times m}A∈Rn×m, b∈Rnb \in \mathbb{R}^nb∈Rn are exact. In applications they rarely are: they come from measurements, from linearizations, or from models with neglected dynamics. A classical response is sensitivity analysis or regularization (Tikhonov), where a weight trades the size of the solution against the fit, and the choice of that weight is left to the user. El Ghaoui and Lebret (SIAM J. Matrix Anal. Appl. 18(4), 1997) take a deterministic view instead: the true data lie in a known ball around (A,b)(A, b)(A,b), and the solution should minimize the residual it can be forced to have in the worst case over that ball. The paper shows that this robust least-squares (RLS) problem is solvable exactly, in the unstructured case by a second-order cone program (SOCP). The same worst-case idea, applied to regression, underlies the later equivalence between robustness and regularization (Xu, Caramanis and Mannor, 2009) and is a standard entry point to robust optimization (Ben-Tal, El Ghaoui and Nemirovski, Robust Optimization, 2009).

This mission formalizes the first main result of the paper, Theorem 3.1: the worst-case residual has a closed form, its minimizer is unique, and minimizing it is an SOCP.

Setting

Vectors carry the Euclidean norm ∥v∥=(∑ivi2)1/2\|v\| = (\sum_i v_i^2)^{1/2}∥v∥=(∑i​vi2​)1/2. For a matrix XXX, ∥X∥F=(∑i,jXij2)1/2\|X\|_F = (\sum_{i,j} X_{ij}^2)^{1/2}∥X∥F​=(∑i,j​Xij2​)1/2 is the Frobenius norm and ∥X∥\|X\|∥X∥ the largest singular value, i.e. the smallest c≥0c \ge 0c≥0 with ∥Xv∥≤c∥v∥\|Xv\| \le c\|v\|∥Xv∥≤c∥v∥ for all vvv.

Fix A∈Rn×mA \in \mathbb{R}^{n\times m}A∈Rn×m and b∈Rnb \in \mathbb{R}^nb∈Rn. A perturbation is a pair ΔA∈Rn×m\Delta A \in \mathbb{R}^{n\times m}ΔA∈Rn×m, Δb∈Rn\Delta b \in \mathbb{R}^nΔb∈Rn, collected in the augmented matrix Δ=[ΔA Δb]∈Rn×(m+1)\Delta = [\Delta A\ \Delta b] \in \mathbb{R}^{n\times(m+1)}Δ=[ΔA Δb]∈Rn×(m+1). For a bound ρ≥0\rho \ge 0ρ≥0 and x∈Rmx \in \mathbb{R}^mx∈Rm, the worst-case residual is (paper, eq. (1))

r(A,b,ρ,x)=max⁡∥[ΔA Δb]∥F≤ρ∥(A+ΔA)x−(b+Δb)∥,r(A,b,\rho,x) = \max_{\|[\Delta A\ \Delta b]\|_F \le \rho} \|(A+\Delta A)x - (b+\Delta b)\|,r(A,b,ρ,x)=∥[ΔA Δb]∥F​≤ρmax​∥(A+ΔA)x−(b+Δb)∥,

and xxx is an RLS solution if it minimizes r(A,b,ρ,⋅)r(A,b,\rho,\cdot)r(A,b,ρ,⋅). The bound constrains the augmented matrix jointly, not ΔA\Delta AΔA and Δb\Delta bΔb separately. The paper normalizes ρ=1\rho = 1ρ=1 and writes r(A,b,x)=r(A,b,1,x)r(A,b,x) = r(A,b,1,x)r(A,b,x)=r(A,b,1,x). Finally, [x;1]∈Rm+1[x;1] \in \mathbb{R}^{m+1}[x;1]∈Rm+1 denotes xxx stacked over 111. In the Lean development these are RobustLS.Unstructured.eucNorm, frobNorm, specNorm, augment, stackOne, worstCaseResidual A b ρ x, its largest-singular-value variant worstCaseResidualSpec, and the SOCP constraint predicate SocpFeasible A b x λ τ.

Formalization targets

Goal: Theorem 3.1 (p. 1040)

For n≥1n \ge 1n≥1, every AAA, bbb:

r(A,b,x)=∥Ax−b∥+∥x∥2+1for all x∈Rm,r(A,b,x) = \|Ax-b\| + \sqrt{\|x\|^2+1} \quad \text{for all } x \in \mathbb{R}^m,r(A,b,x)=∥Ax−b∥+∥x∥2+1​for all x∈Rm,

the problem min⁡x∈Rmr(A,b,x)\min_{x \in \mathbb{R}^m} r(A,b,x)minx∈Rm​r(A,b,x) has exactly one solution xRLSx_{\mathrm{RLS}}xRLS​, and it is the SOCP

minimize λsubject to∥Ax−b∥≤λ−τ,∥[x;1]∥≤τ,(15)\text{minimize } \lambda \quad\text{subject to}\quad \|Ax-b\| \le \lambda-\tau,\quad \|[x;1]\| \le \tau, \tag{15}minimize λsubject to∥Ax−b∥≤λ−τ,∥[x;1]∥≤τ,(15)

in the sense that r(A,b,x)r(A,b,x)r(A,b,x) is the least λ\lambdaλ for which some τ\tauτ makes (x,λ,τ)(x,\lambda,\tau)(x,λ,τ) feasible.

Milestones

  1. Eq. (16). Every perturbation with ∥[ΔA Δb]∥F≤1\|[\Delta A\ \Delta b]\|_F \le 1∥[ΔA Δb]∥F​≤1 has residual at most ∥Ax−b∥+∥x∥2+1\|Ax-b\| + \sqrt{\|x\|^2+1}∥Ax−b∥+∥x∥2+1​.
  2. The worst-case perturbation. For a unit vector uuu aligned with Ax−bAx - bAx−b (arbitrary if Ax=bAx = bAx=b), the rank-one matrix Δ=u[xT −1]/∥x∥2+1\Delta = u[x^T\ {-1}]/\sqrt{\|x\|^2+1}Δ=u[xT −1]/∥x∥2+1​ has ∥Δ∥F=∥Δ∥=1\|\Delta\|_F = \|\Delta\| = 1∥Δ∥F​=∥Δ∥=1 and attains the bound.
  3. Spectral norm. The worst case over the larger ball ∥[ΔA Δb]∥≤1\|[\Delta A\ \Delta b]\| \le 1∥[ΔA Δb]∥≤1 is the same value.
  4. Strict convexity. x↦r(A,b,x)x \mapsto r(A,b,x)x↦r(A,b,x) is strictly convex on Rm\mathbb{R}^mRm.
  5. The SOCP (15). For every xxx, r(A,b,x)r(A,b,x)r(A,b,x) is the optimal λ\lambdaλ of (15) with xxx fixed, and xxx is an RLS solution exactly when it is the xxx-part of an optimal solution of (15).

Significance

The closed form replaces a maximization over a matrix ball of dimension n(m+1)n(m+1)n(m+1) by two Euclidean norms. It shows that the RLS objective is the LS residual plus a penalty ∥x∥2+1\sqrt{\|x\|^2+1}∥x∥2+1​ that does not depend on AAA or bbb, which is the starting point for the paper's Theorem 3.2 (the RLS solution is a Tikhonov-regularized LS solution with a data-dependent weight) and its analysis of continuity and conditioning. The SOCP formulation places the problem in the class solved by interior-point methods, at a cost the paper compares with one singular value decomposition of AAA. The spectral-norm statement says the worst case does not depend on which of the two standard matrix norms bounds the perturbation.

The result is proved in the paper; the proof is short. To the best of the planning survey (September 2026), no machine-checked proof exists, and Prove2Me has no statement about worst-case residuals or robust least squares. The mission produces a verified closed form that later missions of this series (Tikhonov form of the solution, structured and linear-fractional perturbations) and any formalization of robust regression can import.

Difficulty

The upper bound alone does not give the theorem: the statement is an equality, and the equality needs an explicit maximizer. The paper's printed maximizer is wrong by a sign: with [xT 1][x^T\ 1][xT 1] in place of [xT −1][x^T\ {-1}][xT −1] the perturbation does not attain the bound (for A=0A = 0A=0, x=0x = 0x=0, b=e1b = e_1b=e1​ it gives residual 000 instead of 222), so a transcription of the printed proof fails. Two further points are silent in the paper. The operator norm of a rank-one matrix has to be computed from the definition of the largest singular value. Uniqueness of the minimizer needs existence first, which follows from growth of rrr at infinity and is not stated. Working with the sSup definition of the worst case requires showing the set of residuals is bounded, which is milestone 1.

Formalization scope

  • Dimensions are Fin n, Fin m; AAA is Matrix (Fin n) (Fin m) ℝ, bbb and xxx are functions Fin n → ℝ, Fin m → ℝ. The augmented matrix [ΔA Δb][\Delta A\ \Delta b][ΔA Δb] is indexed by Fin m ⊕ Unit, and so is [x;1][x;1][x;1].
  • Vector norms are the Euclidean norm written as ∑ivi2\sqrt{\sum_i v_i^2}∑i​vi2​​ (eucNorm), never Mathlib's ‖·‖ on Fin n → ℝ, which is the sup norm. The Frobenius norm and the largest singular value are explicit definitions (frobNorm, specNorm); specNorm is the infimum of admissible operator constants.
  • The maximum in (1) is sSup of the set of attained residuals. For ρ≥0\rho \ge 0ρ≥0 the set is nonempty and bounded, so this is the true maximum; milestones 1 and 2 state the bound and the attaining perturbation directly, so no statement relies on the value of sSup on an unbounded set.
  • The paper's normalization ρ=1\rho = 1ρ=1 is kept; general ρ>0\rho > 0ρ>0 follows from the scaling ϕ(A,b,ρ)=ρ ϕ(A/ρ,b/ρ,1)\phi(A,b,\rho) = \rho\,\phi(A/\rho,b/\rho,1)ϕ(A,b,ρ)=ρϕ(A/ρ,b/ρ,1) the paper records on p. 1039 and is not a target.
  • The goal assumes n≥1n \ge 1n≥1. For n=0n = 0n=0 the only perturbation is the empty matrix, the worst case is 000, and the closed form fails; the paper's setting (Ax≃bAx \simeq bAx≃b with data b∈Rnb \in \mathbb{R}^nb∈Rn) has n≥1n \ge 1n≥1. Milestones 3–5 carry the same hypothesis.
  • Milestone 2 states the corrected perturbation [xT −1][x^T\ {-1}][xT −1]; the printed [xT 1][x^T\ 1][xT 1] is false.
  • A trivializing formalization — an upper bound in place of the equality, a worst case over ΔA\Delta AΔA and Δb\Delta bΔb bounded separately, or uniqueness among critical points only — is ruled out: the goal is the equality for the jointly bounded augmented matrix and ∃! of a global minimizer over all of Rm\mathbb{R}^mRm.

Contributions welcome: lemmas on Frobenius and operator norms of rank-one matrices, the inequality ∥Mz∥≤∥M∥F∥z∥\|Mz\| \le \|M\|_F\|z\|∥Mz∥≤∥M∥F​∥z∥ in this explicit setting, and strict convexity of x↦∥x∥2+1x \mapsto \sqrt{\|x\|^2+1}x↦∥x∥2+1​; these are reusable beyond the mission.

Selected references

  • L. El Ghaoui and H. Lebret, Robust Solutions to Least-Squares Problems with Uncertain Data, SIAM Journal on Matrix Analysis and Applications 18(4):1035–1064, 1997. https://doi.org/10.1137/S0895479896298130
  • A. Ben-Tal, L. El Ghaoui and A. Nemirovski, Robust Optimization, Princeton University Press, 2009. https://doi.org/10.1515/9781400831050
  • H. Xu, C. Caramanis and S. Mannor, Robust Regression and Lasso, Journal of Machine Learning Research 10:1485–1510, 2009 (IEEE Trans. Inf. Theory 56(7), 2010). https://jmlr.org/papers/v10/xu09b.html
  • M. S. Lobo, L. Vandenberghe, S. Boyd and H. Lebret, Applications of Second-Order Cone Programming, Linear Algebra and its Applications 284:193–228, 1998. https://doi.org/10.1016/S0024-3795(98)10032-0
7 thms3 active usersReviewed
PreviousNext

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me