Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

Algebra

92 missions · 41 completed

The study of algebraic structures — groups, rings, and fields — and, through algebraic geometry, the geometry of the solution sets of polynomial equations. Using commutative algebra to describe these varieties, the field provides a common language of symmetry and structure that underlies much of modern mathematics.

Missions

Open51Completed41All92
🏆Completed
Algebraic GeometryRepresentation Theory·Captain: wurtle

Quadratic stabilization of the canonical Foulkes--Howe mapResearch Paper

Motivation: plethysm, Foulkes' conjecture and the canonical map

Plethysm — decomposing Sym⁡a(Sym⁡bV)\operatorname{Sym}^a(\operatorname{Sym}^b V)Syma(SymbV) into irreducible GL(V)\mathrm{GL}(V)GL(V)-representations — is one of the oldest open problems in the representation theory of the general linear group, and it is central to geometric complexity theory, where the coordinate rings of Chow varieties of products of linear forms control lower-bound arguments. Foulkes' conjecture (1950) predicts that for a≤ba\le ba≤b there is a GL(V)\mathrm{GL}(V)GL(V)-equivariant injection Sym⁡a(Sym⁡bV)↪Sym⁡b(Sym⁡aV)\operatorname{Sym}^a(\operatorname{Sym}^bV)\hookrightarrow\operatorname{Sym}^b(\operatorname{Sym}^aV)Syma(SymbV)↪Symb(SymaV). A natural candidate is supplied by a specific map, the canonical Foulkes–Howe map μa,b,V:Sym⁡b(Sym⁡aV)→Sym⁡a(Sym⁡bV)\mu_{a,b,V}:\operatorname{Sym}^b(\operatorname{Sym}^aV)\to\operatorname{Sym}^a(\operatorname{Sym}^bV)μa,b,V​:Symb(SymaV)→Syma(SymbV); its surjectivity yields such an embedding by complete reducibility. Its image is the degree-bbb part of the coordinate ring of the Chow variety of decomposable aaa-forms, so surjectivity for large bbb is a statement about that variety's normalization. The question is from which degree bbb on the map is surjective, uniformly in dim⁡V\dim VdimV.

Timeline

  • 1950 — Foulkes formulates the plethysm comparison (Foulkes, J. London Math. Soc. 1950).
  • 1993 — Brion proves eventual surjectivity of the canonical map for fixed aaa and VVV (Brion, Manuscripta Math. 1993); in 1997 he gives an effective bound depending on both aaa and dim⁡V\dim VdimV (Séminaires et Congrès 2, SMF, 1997, Theorem 3.3).
  • 2008 — McKay proves a propagation theorem for Foulkes-type injectivity (J. Algebra 2008); Ikenmeyer gives a weight-shift proof (arXiv:1509.04957, 2015).
  • 2015 — Landsberg's introduction to geometric complexity theory asks for a polynomial stabilization bound (Problem 7.19) (Ann. Univ. Ferrara 2015).
  • 2017 — Cheung, Ikenmeyer and Mkrtchyan show that the canonical map has nonzero kernel at (a,b)=(5,5)(a,b)=(5,5)(a,b)=(5,5) and (6,6)(6,6)(6,6) in suitable dimensions (J. Symbolic Comput. 2017).
  • 2022 — Raicu, Sam and Weyman bound the regularity of the Segre ring and modules of covariants on the Chow variety (Vietnam J. Math. 2022), without computing the top degree controlling stabilization.
  • 2026 — An OpenAI preprint, Quadratic stabilization of the canonical Foulkes–Howe map (OpenAI Math Release, September 25, 2026), claims surjectivity for all a≥2a\ge2a≥2, b≥a(a−1)b\ge a(a-1)b≥a(a−1) and every finite-dimensional VVV. The preprint has not been peer reviewed and its theorem is not formally verified.

Setting

Let VVV be a finite-dimensional complex vector space and Sym⁡V\operatorname{Sym}VSymV its symmetric algebra. Sym⁡nV⊆Sym⁡V\operatorname{Sym}^nV\subseteq\operatorname{Sym}VSymnV⊆SymV is the span of products v1⋯vnv_1\cdots v_nv1​⋯vn​ of nnn vectors. For vj,i∈Vv_{j,i}\in Vvj,i​∈V (1≤j≤b1\le j\le b1≤j≤b, 1≤i≤a1\le i\le a1≤i≤a), the canonical Foulkes–Howe map is the linear map determined by

μa,b,V(∏j=1b(vj,1⋯vj,a))=1(a!)b∑σ1,…,σb∈Sa ∏i=1a(∏j=1bvj,σj(i)),\mu_{a,b,V}\Bigl(\prod_{j=1}^{b}\bigl(v_{j,1}\cdots v_{j,a}\bigr)\Bigr) =\frac{1}{(a!)^{b}}\sum_{\sigma_1,\dots,\sigma_b\in S_a}\ \prod_{i=1}^{a}\Bigl(\prod_{j=1}^{b}v_{j,\sigma_j(i)}\Bigr),μa,b,V​(j=1∏b​(vj,1​⋯vj,a​))=(a!)b1​σ1​,…,σb​∈Sa​∑​ i=1∏a​(j=1∏b​vj,σj​(i)​),

where the outer products on the left and right are taken in Sym⁡(Sym⁡aV)\operatorname{Sym}(\operatorname{Sym}^aV)Sym(SymaV) and Sym⁡(Sym⁡bV)\operatorname{Sym}(\operatorname{Sym}^bV)Sym(SymbV) respectively. Equivalently: identify Sym⁡aW\operatorname{Sym}^aWSymaW with symmetric tensors via averaging, multiply bbb such tensors in (Sym⁡V)⊗a(\operatorname{Sym}V)^{\otimes a}(SymV)⊗a, and project back. That this formula is well defined on Sym⁡b(Sym⁡aV)\operatorname{Sym}^b(\operatorname{Sym}^aV)Symb(SymaV) is part of the content.

Formalization targets

Goal: quadratic stabilization (Theorem 1)

For every finite-dimensional complex VVV and integers a≥2a\ge2a≥2, b≥a(a−1)b\ge a(a-1)b≥a(a−1), there is a unique linear map

μ:Sym⁡b(Sym⁡aV)⟶Sym⁡a(Sym⁡bV)\mu:\operatorname{Sym}^b(\operatorname{Sym}^aV)\longrightarrow\operatorname{Sym}^a(\operatorname{Sym}^bV)μ:Symb(SymaV)⟶Syma(SymbV)

satisfying the displayed formula on monomials, and μ\muμ is surjective.

The bound a(a−1)a(a-1)a(a−1) is not claimed to be sharp; the content is a stabilization degree polynomial in aaa and independent of dim⁡V\dim VdimV. The goal statement is published on the platform with status Open: no machine-checked proof exists yet.

Significance

The result itself. Surjectivity gives, by complete reducibility, a GL(V)\mathrm{GL}(V)GL(V)-equivariant embedding Sym⁡a(Sym⁡bV)↪Sym⁡b(Sym⁡aV)\operatorname{Sym}^a(\operatorname{Sym}^bV)\hookrightarrow\operatorname{Sym}^b(\operatorname{Sym}^aV)Syma(SymbV)↪Symb(SymaV) for b≥a(a−1)b\ge a(a-1)b≥a(a−1) (Corollary 4 of the source), e.g. the sixth-power comparison for b≥30b\ge30b≥30. It answers positively the request for a polynomial bound in Landsberg's Problem 7.19, and it says that the coordinate ring of the Chow variety of decomposable aaa-forms agrees with its normalization in every degree b≥a(a−1)b\ge a(a-1)b≥a(a−1). Since the canonical map is known to fail to be injective at (5,5)(5,5)(5,5) and (6,6)(6,6)(6,6), an explicit range of surjectivity is the right kind of statement for this specific map.

Formalizing it. The statement is purely algebraic and uniform in VVV, aaa, bbb. A formal proof would need multilinear algebra over symmetric algebras (symmetric powers of symmetric powers), which is reusable for plethysm and invariant-theory projects.

Difficulty

Surjectivity is equivalent to the vanishing of every symmetric aaa-linear form on Sym⁡bV\operatorname{Sym}^bVSymbV whose diagonal vanishes on products of bbb vectors. The naive induction on aaa fails because the factors in different slots share a common product and cannot be varied independently; the dimension of VVV also grows the space of such forms without bound, so arguments using a fixed basis or dimension count do not give a uniform bound. Brion's effective bound depends on dim⁡V\dim VdimV, and regularity bounds for the normalization do not locate the top degree of the quotient that controls stabilization.

Formalization scope

  • Sym⁡nV\operatorname{Sym}^nVSymnV is represented as the submodule SymPow n V of Mathlib's SymmetricAlgebra ℂ V spanned by products of nnn vectors, and Sym⁡b(Sym⁡aV)\operatorname{Sym}^b(\operatorname{Sym}^aV)Symb(SymaV) is SymPow b (SymPow a V).
  • IsFoulkesMap a b V μ states the monomial formula above, with the normalizing factor (a!)−b(a!)^{-b}(a!)−b and the sum over bbb-tuples of permutations of Fin a.
  • The goal asserts existence, surjectivity and uniqueness of a linear map with this formula; uniqueness rules out choosing an arbitrary surjection, so the theorem is about the canonical map and not merely about dimensions.
  • VVV ranges over all finite-dimensional complex vector spaces in an arbitrary universe; a≥2a\ge2a≥2 and b≥a(a−1)b\ge a(a-1)b≥a(a−1) are natural numbers.
  • Needed infrastructure: symmetric powers inside the symmetric algebra, polarization/annihilator criteria, and directional-derivative operators on polynomial functions.

Selected references

  • H. O. Foulkes, Concomitants of the quintic and sextic up to degree four in the coefficients of the ground form, J. London Math. Soc. 25 (1950), 205–209. https://doi.org/10.1112/jlms/s1-25.3.205
  • M. Brion, Stable properties of plethysm: on two conjectures of Foulkes, Manuscripta Math. 80 (1993), 347–371. https://doi.org/10.1007/BF03026558
  • M. Brion, Sur certains modules gradués associés aux produits symétriques, Séminaires et Congrès 2, SMF, 1997, 157–183. https://smf.emath.fr/publications/sur-certains-modules-gradues-associes-aux-produits-symetriques
  • T. McKay, On plethysm conjectures of Stanley and Foulkes, J. Algebra 319 (2008), 2050–2071. https://doi.org/10.1016/j.jalgebra.2007.12.003
  • C. Ikenmeyer, On McKay's propagation theorem for the Foulkes conjecture, arXiv:1509.04957, 2015. https://arxiv.org/abs/1509.04957v1
  • J. M. Landsberg, Geometric complexity theory: an introduction for geometers, Ann. Univ. Ferrara 61 (2015), 65–117. https://doi.org/10.1007/s11565-014-0202-7
  • M.-W. Cheung, C. Ikenmeyer and S. Mkrtchyan, Symmetrizing tableaux and the 5th case of the Foulkes conjecture, J. Symbolic Comput. 80 (2017), 833–843. https://doi.org/10.1016/j.jsc.2016.09.002
  • C. Raicu, S. V. Sam and J. Weyman, On some modules supported in the Chow variety, Vietnam J. Math. 50 (2022), 501–521. https://doi.org/10.1007/s10013-021-00527-2
  • OpenAI, Quadratic stabilization of the canonical Foulkes–Howe map, OpenAI Math Release preprint, September 25, 2026 (source of the goal; Theorem 1, p. 1). https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Quadratic-Stabilization-of-the-Canonical-Foulkes-Howe-Map-September-25-2026/paper.pdf
43 thms2 active usersReviewed
🏆Completed
Algebraic TopologyGroup Theory·Captain: wurtle

A Torsion-Free Group Algebra with Zero DivisorsResearch Paper

Motivation: Kaplansky's zero-divisor conjecture

For a field KKK and a group GGG, the group algebra K[G]K[G]K[G] consists of finite formal sums ∑gagg\sum_g a_g g∑g​ag​g with ag∈Ka_g\in Kag​∈K, multiplied by extending the group law bilinearly. If g∈Gg\in Gg∈G has finite order m>1m>1m>1, then (1−g)(1+g+⋯+gm−1)=0(1-g)(1+g+\dots+g^{m-1})=0(1−g)(1+g+⋯+gm−1)=0, so K[G]K[G]K[G] has zero divisors. Kaplansky's zero-divisor conjecture asserts that this is the only source: if GGG is torsion-free, K[G]K[G]K[G] has no nonzero zero divisors. Together with the unit and idempotent conjectures it is one of the central problems connecting ring theory, group theory and topology, and positive answers are known for large classes of groups (elementary amenable groups, groups with the unique-product property, torsion-free 3-manifold groups).

Timeline

  • 1940 — Higman's thesis raises the question and proves the domain property for groups in which every nontrivial subgroup maps onto Z\mathbb ZZ (Higman, Proc. LMS 1940); the thesis formulation is reproduced by Sandling (1981).
  • 1956/1957 — Kaplansky poses the problem (Problem 6 in Problems in the theory of rings, National Research Council, 1957).
  • 1987 — Rips and Segev construct torsion-free groups without the unique-product property, removing the standard route to the conjecture (J. Algebra 1987); Steenbock gives a graphical small-cancellation treatment (J. Algebra 2015).
  • 1988 — Kropholler, Linnell and Moody prove the conjecture for torsion-free elementary amenable groups (Proc. AMS 1988).
  • 2021 — Gardam disproves the related unit conjecture over F2\mathbb F_2F2​ (Ann. of Math. 2021), and later over C\mathbb CC (arXiv:2312.05240, 2024). A nontrivial unit is not a zero divisor, so the zero-divisor conjecture remained open.
  • 2026 — Fisher and Sánchez-Peralta prove the domain conclusion for torsion-free 3-manifold groups and division-ring embeddings for virtually compact special groups (J. Comb. Algebra 2026).
  • 2026 — An OpenAI preprint, A Torsion-Free Group Algebra with Zero Divisors (OpenAI Math Release, September 23, 2026), claims a finitely presented torsion-free group GGG with a finite 2-dimensional classifying space such that F2[G]\mathbb F_2[G]F2​[G] has nonzero zero divisors. The preprint has not been peer reviewed and its theorem is not formally verified.

Setting

A group GGG is torsion-free if gn=1g^n=1gn=1 with n≥1n\ge1n≥1 implies g=1g=1g=1. It is finitely presented if it has a presentation with finitely many generators and relations. A classifying space (or K(G,1)K(G,1)K(G,1)) for GGG is a path-connected space XXX with π1(X)≅G\pi_1(X)\cong Gπ1​(X)≅G whose universal cover is contractible; it is finite two-dimensional if it is a finite CW complex with cells only in dimensions ≤2\le 2≤2. A group with a finite-dimensional classifying space is automatically torsion-free, but the formal goal asks for both properties explicitly.

The coefficient field is F2=Z/2\mathbb F_2=\mathbb Z/2F2​=Z/2, and F2[G]\mathbb F_2[G]F2​[G] is Mathlib's MonoidAlgebra (ZMod 2) G.

Formalization targets

Goal: a counterexample to the zero-divisor conjecture (Theorem 1.1)

There exist a group GGG and α,β∈F2[G]\alpha,\beta\in\mathbb F_2[G]α,β∈F2​[G] such that

G finitely presented,G torsion-free,G has a finite 2-dimensional K(G,1),α≠0, β≠0, αβ=0.G\ \text{finitely presented},\quad G\ \text{torsion-free},\quad G\ \text{has a finite 2-dimensional } K(G,1),\quad \alpha\neq0,\ \beta\neq0,\ \alpha\beta=0.G finitely presented,G torsion-free,G has a finite 2-dimensional K(G,1),α=0, β=0, αβ=0.

This is the full Theorem 1.1 of the source, including its "Moreover" clause. The source proves existence probabilistically; it does not exhibit a concrete presentation. The goal statement is published on the platform with status Open: no machine-checked proof exists yet.

Significance

The result itself. If correct, the theorem disproves Kaplansky's zero-divisor conjecture over F2\mathbb F_2F2​, a problem open since the 1940s, and shows that torsion-freeness — even together with finite presentability and a 2-dimensional classifying space — does not force K[G]K[G]K[G] to be a domain. It implies that GGG fails the unique-product property, and it bears on the implications among the Kaplansky conjectures (zero divisors, units, idempotents) and on approaches through the Atiyah conjecture and division-ring embeddings.

Formalizing it. The claim refutes a long-standing conjecture by an intricate probabilistic and topological construction, which is a strong case for machine verification. A full formal proof needs the probabilistic existence argument, planar separation, and asphericity of a 2-complex — none of which is a routine Mathlib application. Partial contributions (e.g. the characteristic-2 cancellation argument once asphericity and root separation are assumed, or the torsion-freeness of groups with finite-dimensional K(G,1)K(G,1)K(G,1)) are welcome. A related machine-checked result exists only for the weaker non-unique-product property of Gardam's A~2\widetilde A_2A2​ lattice (Mian–Siddique 2026).

Difficulty

Writing down α,β\alpha,\betaα,β whose product cancels in characteristic two is the easy part; the source does this by a parity argument on a graph of simultaneous steps. The hard part is two safeguards in the quotient group: both factors must remain nonzero (no vertex label other than the root can collapse to the identity), and the group must be torsion-free, which the source obtains by proving the 2-complex is aspherical. Standard tools — small-cancellation or CAT(0) criteria — are not applied; instead the source must exclude spherical arrangements of arbitrarily many paths of arbitrary length, which a union bound over sizes cannot handle.

Formalization scope

  • TorsionFree G is the plain group-theoretic notion (gn=1g^n=1gn=1, n>0n>0n>0 implies g=1g=1g=1); finite presentability is Group.IsFinitelyPresented.
  • HasFiniteTwoDimensionalClassifyingSpace G asks for a Hausdorff, path-connected space XXX with a finite CW structure on all of XXX, no cells above dimension 222, at least one 222-cell, a group isomorphism G≃π1(X,x)G\simeq\pi_1(X,x)G≃π1​(X,x), and a surjective covering map from a contractible space onto XXX (so XXX is aspherical). Requiring a 222-cell excludes only the case of free groups, whose group algebras are domains.
  • The witnessing group lives in Type and is existentially quantified together with its group structure; the zero divisors are elements of MonoidAlgebra (ZMod 2) G.
  • A trivializing reading is excluded because all three group properties and both nonvanishing conditions are required simultaneously.
  • Infrastructure needed: CW complexes and covering spaces (partially in Mathlib), the fundamental group of a 2-complex built by attaching cones, Hurewicz/Whitehead-type asphericity arguments, and random graph constructions.

Selected references

  • G. Higman, The units of group-rings, Proc. London Math. Soc. (2) 46 (1940). https://doi.org/10.1112/plms/s2-46.1.231
  • I. Kaplansky, Problems in the theory of rings, Report of a Conference on Linear Algebras (1956), National Research Council, 1957.
  • E. Rips and Y. Segev, Torsion-free group without unique product property, J. Algebra (1987). https://doi.org/10.1016/0021-8693(87)90125-6
  • P. H. Kropholler, P. A. Linnell and J. A. Moody, Applications of a new K-theoretic theorem to soluble group rings, Proc. Amer. Math. Soc. (1988). https://doi.org/10.2307/2046771
  • M. Steenbock, Rips–Segev torsion-free groups without the unique product property, J. Algebra (2015). https://doi.org/10.1016/j.jalgebra.2015.05.004
  • G. Gardam, A counterexample to the unit conjecture for group rings, Ann. of Math. 194 (2021). https://doi.org/10.4007/annals.2021.194.3.9
  • G. Gardam, Non-trivial units of complex group rings, preprint, 2024. https://arxiv.org/abs/2312.05240v2
  • S. P. Fisher and P. Sánchez-Peralta, Division rings for group algebras of virtually compact special groups and 3-manifold groups, J. Comb. Algebra (2026). https://doi.org/10.4171/JCA/89
  • I. Mian and S. Siddique, A machine-checked proof that Gardam's A~2\widetilde A_2A2​ lattice does not have unique products, preprint, 2026. https://arxiv.org/abs/2609.22380v1
  • OpenAI, A Torsion-Free Group Algebra with Zero Divisors, OpenAI Math Release preprint, September 23, 2026 (source of the goal; Theorem 1.1, p. 1). https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/A-Torsion-Free-Group-Algebra-with-Zero-Divisors-September-23-2026/paper.pdf
11 thms2 active usersReviewed
🏆Completed
Algebraic Geometry·Captain: wurtle

An explicit failure of complex affine-space cancellationResearch Paper

Motivation

Zariski's cancellation problem asks whether affine space can be recognized from its cylinder: if a variety XXX satisfies X×A1≅An+1X\times\mathbb A^1\cong\mathbb A^{n+1}X×A1≅An+1, must X≅AnX\cong\mathbb A^nX≅An? Algebraically, for a finitely generated commutative C\mathbb CC-algebra AAA and an independent variable www,

A[w]≅C[n+1] ⟹? A≅C[n],A[w]\cong\mathbb C^{[n+1]}\ \overset{?}{\Longrightarrow}\ A\cong\mathbb C^{[n]},A[w]≅C[n+1] ⟹?​ A≅C[n],

where C[r]\mathbb C^{[r]}C[r] is a polynomial ring in rrr variables and all isomorphisms are C\mathbb CC-algebra isomorphisms. The problem is one of the central questions of affine algebraic geometry, closely tied to the recognition of affine space, coordinates of polynomial rings, and polynomial fibrations.

Background

  • 1972. Abhyankar, Heinzer and Eakin prove cancellation for the affine line (doi:10.1016/0021-8693(72)90134-2).
  • 1974. Dolgachev and Weisfeiler formulate the affine-fibration conjecture (doi:10.1070/IM1974v008n04ABEH002127).
  • 1979–1980. Fujita, and Miyanishi and Sugie, prove cancellation for the complex affine plane (doi:10.3792/pjaa.55.106, doi:10.1215/kjm/1250522319).
  • 1987. Asanuma constructs, in positive characteristic, threefolds whose cylinders are affine four-space (doi:10.1007/BF01389155).
  • 1996. Makar-Limanov uses additive group actions to show that the Russell cubic is not C3\mathbb C^3C3 (doi:10.1007/BF02937314).
  • 2014. Gupta proves failure of cancellation in every dimension ≥3\ge3≥3 over every field of positive characteristic (doi:10.1007/s00222-013-0455-2, doi:10.1016/j.aim.2014.07.012).
  • 2018–2021. El Kahoui–Ouali and Dutta–Lahiri prove that residual coordinates are one-stably coordinates (doi:10.1216/JCA-2018-10-3-317, doi:10.1016/j.jpaa.2021.106707).
  • 2026. Gaifullin and Petrov still list the characteristic-zero problem in dimension ≥3\ge3≥3 as unresolved (arXiv:2607.13593).

The source of this mission is an OpenAI preprint dated September 23, 2026.

Setting

Let p,s,u,F,Jp,s,u,F,Jp,s,u,F,J be independent variables over C\mathbb CC and P=C[p,s,u,F,J]P=\mathbb C[p,s,u,F,J]P=C[p,s,u,F,J]. Put

x=s2+u3+p2F,H=x2F−(1+2sx)J−p2J2−pu,A=P/(H).x=s^2+u^3+p^2F,\qquad H=x^2F-(1+2sx)J-p^2J^2-pu,\qquad A=P/(H).x=s2+u3+p2F,H=x2F−(1+2sx)J−p2J2−pu,A=P/(H).

So AAA is the coordinate ring of the hypersurface {H=0}⊂A5\{H=0\}\subset\mathbb A^5{H=0}⊂A5. For a C\mathbb CC-algebra AAA, A[w]A[w]A[w] denotes the polynomial ring in one further variable, and C[r]\mathbb C^{[r]}C[r] the polynomial ring in rrr variables.

Formalization targets

Goal: Theorem 1.1

A is a finitely generated integral domain of Krull dimension 4,A[w]≅CC[5],A̸≅CC[4].A\ \text{is a finitely generated integral domain of Krull dimension }4,\qquad A[w]\cong_{\mathbb C}\mathbb C^{[5]},\qquad A\not\cong_{\mathbb C}\mathbb C^{[4]}.A is a finitely generated integral domain of Krull dimension 4,A[w]≅C​C[5],A≅C​C[4].

The Lean statement OAI.ComplexCancellation.main is open on the platform.

Significance

Theorem 1.1 gives a negative answer to Zariski's cancellation problem over C\mathbb CC in dimension four, with an explicit counterexample of degree small enough to write in one line. The same polynomial yields two further consequences proved in the paper: HHH is a coordinate of P[w]P[w]P[w] but not of PPP, so the Stable Coordinate Conjecture fails in ambient dimension five (Corollary 1.2); and the maps p:Spec⁡A→A1p:\operatorname{Spec}A\to\mathbb A^1p:SpecA→A1 and (p,H):A5→A2(p,H):\mathbb A^5\to\mathbb A^2(p,H):A5→A2 are smooth A3\mathbb A^3A3-fibrations that are not Zariski-locally trivial, disproving the Dolgachev–Weisfeiler conjecture over these bases (Corollary 7.1). Cancellation in dimension three over C\mathbb CC is not addressed.

The result is proved in an OpenAI preprint, which has not been peer reviewed. No machine-checked proof exists.

Difficulty

The cylinder isomorphism A[w]≅C[5]A[w]\cong\mathbb C^{[5]}A[w]≅C[5] is comparatively explicit: a locally nilpotent derivation sends HHH to p3p^3p3, and exponentiating converts HHH into H+p3wH+p^3wH+p3w. The hard part is proving A≇C[4]A\not\cong\mathbb C^{[4]}A≅C[4]. Standard invariants do not help: AAA is smooth, factorial-type obstructions vanish, and topologically Spec⁡A\operatorname{Spec}ASpecA is contractible like C4\mathbb C^4C4 since its cylinder is C5\mathbb C^5C5. The paper uses additive group actions (locally nilpotent derivations), passing to an associated graded algebra along p=0p=0p=0, lifting actions through a line bundle over a smooth affine quadric, and a rigidity argument based on the Mason–Stothers polynomial abc inequality.

Formalization scope

  • P := MvPolynomial (Fin 5) ℂ with p, s, u, F, J := X 0, …, X 4; x and H are transcribed literally; A := P ⧸ Ideal.span {H}.
  • Dimension is ringKrullDim A = 4; integrality is IsDomain A; finite generation is Algebra.FiniteType ℂ A.
  • The cylinder statement is Nonempty (Polynomial A ≃ₐ[ℂ] MvPolynomial (Fin 5) ℂ); the non-polynomiality is ¬ Nonempty (A ≃ₐ[ℂ] MvPolynomial (Fin 4) ℂ). All isomorphisms are C\mathbb CC-algebra isomorphisms.

A complete development needs: explicit polynomial automorphisms (for the cylinder), Krull dimension of hypersurface quotients, locally nilpotent derivations and their kernels, filtrations and associated graded rings, and the Mason–Stothers theorem for polynomials. Contributions formalizing Proposition 2.2, Proposition 3.4 (the graded identification), Propositions 4.1–4.3, Lemma 5.1 (order of a locally nilpotent derivation), Lemma 6.1 (Mason–Stothers) and Proposition 6.3 are welcome.

Selected references

  • OpenAI, An explicit failure of complex affine-space cancellation, preprint, September 23, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/An-explicit-failure-of-complex-affine-space-cancellation-September-23-2026/paper.pdf
  • N. Gupta, On Zariski's cancellation problem in positive characteristic, Adv. Math., 2014. https://doi.org/10.1016/j.aim.2014.07.012
  • N. Gupta, On the cancellation problem for the affine space A3\mathbb A^3A3 in characteristic ppp, Invent. Math., 2014. https://doi.org/10.1007/s00222-013-0455-2
  • S. S. Abhyankar, W. Heinzer, P. Eakin, On the uniqueness of the coefficient ring in a polynomial ring, J. Algebra, 1972. https://doi.org/10.1016/0021-8693(72)90134-2
  • T. Fujita, On Zariski problem, Proc. Japan Acad. Ser. A, 1979. https://doi.org/10.3792/pjaa.55.106
  • L. Makar-Limanov, On the hypersurface x+x2y+z2+t3=0x+x^2y+z^2+t^3=0x+x2y+z2+t3=0 in C4\mathbb C^4C4 or a C3\mathbb C^3C3-like threefold which is not C3\mathbb C^3C3, Israel J. Math., 1996. https://doi.org/10.1007/BF02937314
  • A. K. Dutta, A. Lahiri, On residual and stable coordinates, J. Pure Appl. Algebra, 2021. https://doi.org/10.1016/j.jpaa.2021.106707
  • M. El Kahoui, M. Ouali, A note on residual coordinates of polynomial rings, J. Commut. Algebra, 2018. https://doi.org/10.1216/JCA-2018-10-3-317
  • B. Yu. Weisfeiler, I. V. Dolgachev, Unipotent group schemes over integral rings, Math. USSR-Izv., 1974. https://doi.org/10.1070/IM1974v008n04ABEH002127
  • S. Gaifullin, M. Petrov, Non-cancellative varieties, maximal tori, and the Makar-Limanov invariant, preprint, 2026. https://arxiv.org/abs/2607.13593
41 thms2 active usersReviewed
Algebraic GeometryConvex OptimizationOptimization·Captain: mikedeng1

Semidefinite Programming Relaxations for Semialgebraic Problems 1: A Polynomial System Has No Real Solution if and only if Its Degree-d Positivstellensatz SDP Is Feasible for All Large dResearch Paper

Motivation

Deciding whether a system of real polynomial equations, inequations and inequalities has a solution is the basic feasibility question behind nonconvex quadratic programming, polynomial optimization, robustness analysis in control, and combinatorial relaxations. Over the complex numbers, Hilbert's Nullstellensatz turns infeasibility into an algebraic identity whose bounded-degree instances are found by linear algebra. Over the reals this fails: x2+1=0x^2+1=0x2+1=0 has no real solution, yet 111 is not in the ideal generated by x2+1x^2+1x2+1.

The real substitute is the Positivstellensatz of Stengle (Stengle 1974; see Bochnak–Coste–Roy, Real Algebraic Geometry, Theorem 4.4.2): a real polynomial system is infeasible exactly when an identity f+g2+h=0f+g^2+h=0f+g2+h=0 holds, with fff built from sums of squares and the inequality constraints, ggg a product of the inequation polynomials and hhh in the ideal of the equations. Parrilo (2003), building on his thesis (2000), observed that once the degrees are bounded, the search for such an identity is a semidefinite program (SDP), because a polynomial is a sum of squares exactly when it has a positive semidefinite Gram matrix. This yields a hierarchy of SDPs that is sound at every level and complete in the limit, and it is the origin of the sum-of-squares (SOS) method used throughout polynomial optimization.

Timeline:

  • 1974: Stengle proves the Positivstellensatz for semialgebraic sets over real closed fields.
  • 1995: Choi, Lam and Reznick analyze the Gram matrix method for sums of squares.
  • 2000–2003: Parrilo (thesis; Math. Program. Ser. B 96) formulates bounded-degree Positivstellensatz refutations as SDPs (Theorem 5.1); Lasserre (2001) develops the dual moment approach independently.

Setting

Write R[x1,…,xn]\mathbb R[x_1,\dots,x_n]R[x1​,…,xn​] for real polynomials in nnn variables. Fix three finite, possibly empty, families: f1,…,fsf_1,\dots,f_sf1​,…,fs​ (inequalities), g1,…,gtg_1,\dots,g_tg1​,…,gt​ (inequations), h1,…,huh_1,\dots,h_uh1​,…,hu​ (equations). They define the basic semialgebraic set

K={x∈Rn∣fj(x)≥0, gk(x)≠0, hℓ(x)=0 for all j,k,ℓ}.(4.4)K=\{x\in\mathbb R^n \mid f_j(x)\ge 0,\ g_k(x)\ne 0,\ h_\ell(x)=0\ \text{for all } j,k,\ell\}.\qquad(4.4)K={x∈Rn∣fj​(x)≥0, gk​(x)=0, hℓ​(x)=0 for all j,k,ℓ}.(4.4)

A cone of R[x1,…,xn]\mathbb R[x_1,\dots,x_n]R[x1​,…,xn​] is a subset closed under addition and multiplication that contains every square a2a^2a2; P(S)P(S)P(S) is the smallest cone containing SSS, and P(∅)P(\emptyset)P(∅) is the set of sums of squares. MMM is the multiplicative monoid generated by the gkg_kgk​ (with the empty product 111), and III is the ideal generated by the hℓh_\ellhℓ​.

For a degree bound DDD, let zzz be the vector of all monomials xαx^\alphaxα of total degree at most DDD; it has (n+DD)\binom{n+D}{D}(Dn+D​) entries. For a real matrix QQQ indexed by these monomials, the Gram polynomial is zTQz=∑α,βQαβxαxβz^TQz=\sum_{\alpha,\beta}Q_{\alpha\beta}x^\alpha x^\betazTQz=∑α,β​Qαβ​xαxβ.

The degree-ddd Positivstellensatz SDP SDPd\mathrm{SDP}_dSDPd​: with G=∑kdeg⁡gkG=\sum_k\deg g_kG=∑k​deggk​ and N(d)=d(2G+1)N(d)=d(2G+1)N(d)=d(2G+1), find positive semidefinite matrices QTQ_TQT​ over the monomials of degree at most N(d)N(d)N(d), one for each T⊆{1,…,s}T\subseteq\{1,\dots,s\}T⊆{1,…,s}, and polynomials qℓq_\ellqℓ​ of degree at most 2N(d)2N(d)2N(d), such that

∑T(zTQTz)∏j∈Tfj+(∏k=1tgk2d)2+∑ℓ=1uqℓhℓ=0.\sum_{T}(z^TQ_Tz)\prod_{j\in T}f_j+\Big(\prod_{k=1}^t g_k^{2d}\Big)^2+\sum_{\ell=1}^u q_\ell h_\ell=0 .T∑​(zTQT​z)j∈T∏​fj​+(k=1∏t​gk2d​)2+ℓ=1∑u​qℓ​hℓ​=0.

Its unknowns are finitely many real numbers, the constraint is linear in them, and the matrices are constrained to be positive semidefinite.

Formalization targets

Goal: Theorem 5.1

(∀d, SDPd feasible⇒K=∅)and(K=∅⇒∃d0 ∀d≥d0, SDPd feasible).\big(\forall d,\ \mathrm{SDP}_d\ \text{feasible}\Rightarrow K=\emptyset\big)\quad\text{and}\quad\big(K=\emptyset\Rightarrow\exists d_0\ \forall d\ge d_0,\ \mathrm{SDP}_d\ \text{feasible}\big).(∀d, SDPd​ feasible⇒K=∅)and(K=∅⇒∃d0​ ∀d≥d0​, SDPd​ feasible).

The first half says every feasible point is a refutation; the second says the hierarchy is complete once the degree bound is large enough. No bound on d0d_0d0​ is asserted, matching the paper.

Milestones

  • Theorem 4.6, 2⇒12\Rightarrow12⇒1: an identity f+g2+h=0f+g^2+h=0f+g2+h=0 with f∈Pf\in Pf∈P, g∈Mg\in Mg∈M, h∈Ih\in Ih∈I forces K=∅K=\emptysetK=∅.
  • A positive semidefinite Gram matrix gives a sum of squares (§3.2).
  • Theorem 4.6, 1⇒21\Rightarrow21⇒2 (Stengle's Positivstellensatz): K=∅K=\emptysetK=∅ forces such an identity.
  • P(∅)P(\emptyset)P(∅) is the set of sums of squares and the smallest cone; the finite-generator form P(S)={p+∑iqibi}P(S)=\{p+\sum_i q_ib_i\}P(S)={p+∑i​qi​bi​}; the squarefree form ∑TpT∏j∈Tfj\sum_T p_T\prod_{j\in T}f_j∑T​pT​∏j∈T​fj​ of the cone used in the proof of Theorem 5.1.
  • A sum of squares of degree at most 2d2d2d has a positive semidefinite Gram matrix over the monomials of degree at most ddd; Theorem 3.3 combining both directions with the size (n+dd)\binom{n+d}{d}(dn+d​); the count (n+dd)\binom{n+d}{d}(dn+d​) of the monomial vector.

Significance

Theorem 5.1 is the statement that makes Positivstellensatz certificates computable: it converts an existence theorem of real algebraic geometry into a sequence of convex feasibility problems, each solvable by interior-point methods, and any solution is an exact proof of infeasibility. Lower bounds in polynomial optimization (Example 5.4), the copositivity tests of §7.5, SOS relaxations for MAX-CUT and stable sets, and Lyapunov-function searches in control are all instances of this scheme.

The paper proves only the soundness direction of the Positivstellensatz and cites the converse. A complete formal development therefore contains the first machine-checked statement chain from Stengle's theorem to the SDP hierarchy. To the best of current searches, neither Mathlib nor Prove2Me contains the real Positivstellensatz, the Gram matrix characterization of sums of squares, or the monomial count; Mathlib has sums of squares in rings (IsSumSq), positive semidefinite matrices, and the complex Nullstellensatz.

Difficulty

The soundness half is elementary. Completeness rests on Stengle's Positivstellensatz, whose standard proofs pass through real closed fields, orderings of rings and the Tarski–Seidenberg transfer principle, none of which is available in Mathlib in usable form. A tempting shortcut, proving completeness by reasoning only about R\mathbb RR-points, does not work: the certificate must be an algebraic identity, and points cannot produce it.

A second, smaller difficulty is degree bookkeeping. Each level of the hierarchy has a fixed shape (the exponent of the gkg_kgk​ and the degree of every multiplier are tied to ddd), while a certificate supplied by the Positivstellensatz has arbitrary degrees and exponents. A Gram representation also needs a degree bound on every square in a sum of squares, not only on the sum.

Formalization scope

  • Polynomials are MvPolynomial (Fin n) ℝ; n,s,t,un,s,t,un,s,t,u are arbitrary natural numbers, including 000; the families are indexed by Fin s, Fin t, Fin u. The set (4.4) lives in Rn\mathbb R^nRn = Fin n → ℝ.
  • P(S)P(S)P(S) is the smallest set closed under +++, ⋅\cdot⋅ and containing all squares (Definition 4.5), an inductive predicate. Mathlib's RingPreordering is not used: it excludes −1-1−1, which an infeasible system's cone typically contains.
  • Sums of squares are IsSumSq; positive semidefiniteness is Matrix.PosSemidef (symmetric, which is the paper's Q∈SnQ\in\mathcal S^nQ∈Sn); MMM is Submonoid.closure, III is Ideal.span.
  • The meta-claim "the search … can be done using semidefinite programming" is the definition of SDPd\mathrm{SDP}_dSDPd​: finitely many PSD Gram matrices indexed by a finite type of monomials, and ideal multipliers of bounded total degree. The degree choices (m=dm=dm=d in g=∏gk2mg=\prod g_k^{2m}g=∏gk2m​; multiplier degree d2=2d(2G+1)d_2=2d(2G+1)d2​=2d(2G+1)) fill the freedom the proof leaves and satisfy its printed bounds d2≥dd_2\ge dd2​≥d, d2≥deg⁡gd_2\ge\deg gd2​≥degg. "Large enough" is ∃d0 ∀d≥d0\exists d_0\,\forall d\ge d_0∃d0​∀d≥d0​.
  • A formalization without the degree bounds or with an infinite index type would make SDPd\mathrm{SDP}_dSDPd​ equivalent to Theorem 4.6 item 2 and is ruled out; so is a goal stated for a fixed nnn, for empty families only, or with soundness only at large ddd.
  • Needed infrastructure: Stengle's Positivstellensatz over R\mathbb RR (real closed field theory or a direct proof), the Gram matrix correspondence, and degree lemmas for sums of squares. The Positivstellensatz and the Gram correspondence are reusable far beyond this mission; contributions toward either are welcome.

Selected references

  • P. A. Parrilo, Semidefinite programming relaxations for semialgebraic problems, Math. Program. Ser. B 96 (2003) 293–320. https://doi.org/10.1007/s10107-003-0387-5
  • G. Stengle, A Nullstellensatz and a Positivstellensatz in semialgebraic geometry, Math. Ann. 207 (1974) 87–97. https://doi.org/10.1007/BF01362149
  • J. Bochnak, M. Coste, M.-F. Roy, Real Algebraic Geometry, Springer, 1998, Theorem 4.4.2. https://doi.org/10.1007/978-3-662-03718-8
  • M. D. Choi, T. Y. Lam, B. Reznick, Sums of squares of real polynomials, Proc. Sympos. Pure Math. 58 (1995) 103–126. https://doi.org/10.1090/pspum/058.2/1327293
  • J. B. Lasserre, Global optimization with polynomials and the problem of moments, SIAM J. Optim. 11 (2001) 796–817. https://doi.org/10.1137/S1052623400366802
13 thms2 active usersReviewed
Information TheoryTheoretical Computer Science·Captain: mikedeng1

Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data 3: Shingling plus PinSketch Gives an Average-Case Secure Sketch for Edit DistanceResearch Paper

Why noisy secrets need sketches

Biometric readings, physical unclonable functions and typed passphrases share two defects as cryptographic keys: they are not uniformly distributed, and they are never reproduced exactly. Dodis, Ostrovsky, Reyzin and Smith (SIAM J. Comput. 38(1), 2008; preprint arXiv:cs/0602007v4) introduced the secure sketch to handle the second defect without destroying what entropy the secret has. A secure sketch publishes a string sss from which any reading close to the original recovers the original exactly, while the original keeps a guaranteed amount of min-entropy given sss. Many sources of noise are not substitutions but insertions and deletions: keystroke sequences, sequenced DNA, and any reading whose alignment drifts. For these the relevant distance is the edit distance, and §7 of the paper gives a secure sketch for it.

This mission formalizes that construction: Theorem 7.5 (p. 27), together with the results it is assembled from, PinSketch for set difference (Theorem 6.3, p. 23, with the BCH decoding argument of Appendix E) and the shingling embedding (Lemma 7.3, p. 25), glued by Lemma 4.7 (p. 15).

Setting

All logarithms are base 2. A random variable is identified with its distribution. The min-entropy of WWW is H∞(W)=−log⁡max⁡wPr⁡[W=w]\mathbf H_\infty(W) = -\log \max_w \Pr[W = w]H∞​(W)=−logmaxw​Pr[W=w], and the average min-entropy of WWW given III is H~∞(W∣I)=−log⁡∑imax⁡wPr⁡[W=w∧I=i]\tilde{\mathbf H}_\infty(W \mid I) = -\log \sum_i \max_w \Pr[W = w \wedge I = i]H~∞​(W∣I)=−log∑i​maxw​Pr[W=w∧I=i].

Let M\mathcal MM be a set with an integer-valued distance dis\mathrm{dis}dis. An average-case (M,m,m~,t)(\mathcal M, m, \tilde m, t)(M,m,m~,t)-secure sketch is a pair of randomized procedures (SS,Rec)(\mathsf{SS}, \mathsf{Rec})(SS,Rec) such that Rec(w′,SS(w))=w\mathsf{Rec}(w', \mathsf{SS}(w)) = wRec(w′,SS(w))=w whenever dis(w,w′)≤t\mathrm{dis}(w, w') \le tdis(w,w′)≤t, and H~∞(W∣SS(W),I)≥m~\tilde{\mathbf H}_\infty(W \mid \mathsf{SS}(W), I) \ge \tilde mH~∞​(W∣SS(W),I)≥m~ for every pair (W,I)(W, I)(W,I) with H~∞(W∣I)≥m\tilde{\mathbf H}_\infty(W \mid I) \ge mH~∞​(W∣I)≥m. The difference m−m~m - \tilde mm−m~ is the entropy loss.

Three spaces occur.

  1. EditF(n)\mathrm{Edit}_{\mathcal F}(n)EditF​(n): strings of length nnn over a finite alphabet F\mathcal FF of FFF letters, with distance the smallest number of character insertions and deletions turning one string into the other.
  2. SDif(U)\mathrm{SDif}(\mathcal U)SDif(U): all subsets of a finite universe U\mathcal UU, with distance ∣w△w′∣|w \triangle w'|∣w△w′∣.
  3. For PinSketch, U=GF(2μ)∗\mathcal U = GF(2^\mu)^*U=GF(2μ)∗, of size n=2μ−1n = 2^\mu - 1n=2μ−1. A subset www has syndrome entries si(w)=∑x∈wxis_i(w) = \sum_{x \in w} x^isi​(w)=∑x∈w​xi, computed in the field. PinSketch publishes (s1,s3,…,s2t−1)(s_1, s_3, \dots, s_{2t-1})(s1​,s3​,…,s2t−1​).

A ccc-shingle of a string is a length-ccc consecutive substring, and the ccc-shingling SHc(w)⊆Fc\mathrm{SH}_c(w) \subseteq \mathcal F^cSHc​(w)⊆Fc is the set of all of them. A map f:M1→M2f : \mathcal M_1 \to \mathcal M_2f:M1​→M2​ is a (t1,t2,λ)(t_1, t_2, \lambda)(t1​,t2​,λ)-biometric embedding with recovery information ggg if it maps distance ≤t1\le t_1≤t1​ to distance ≤t2\le t_2≤t2​, ggg takes at most 2λ2^\lambda2λ values, and www is determined by (f(w),g(w))(f(w), g(w))(f(w),g(w)).

Formalization targets

Goal: Theorem 7.5

For every finite alphabet F\mathcal FF with FFF letters, all n,c,t∈Nn, c, t \in \mathbb Nn,c,t∈N with 1≤c≤n1 \le c \le n1≤c≤n and every real mmm, there is an average-case secure sketch

(EditF(n), m, m−⌈nc⌉log⁡2(n−c+1)−(2c−1) t ⌈log⁡(Fc+1)⌉, t).\Big(\mathrm{Edit}_{\mathcal F}(n),\ m,\ m - \big\lceil \tfrac nc \big\rceil \log_2(n - c + 1) - (2c - 1)\,t\,\lceil \log(F^c + 1) \rceil,\ t\Big).(EditF​(n), m, m−⌈cn​⌉log2​(n−c+1)−(2c−1)t⌈log(Fc+1)⌉, t).

Milestones

  1. Set difference. Theorem 6.3: PinSketch is an average-case (SDif(U),m,m−tlog⁡(n+1),t)(\mathrm{SDif}(\mathcal U), m, m - t\log(n+1), t)(SDif(U),m,m−tlog(n+1),t) secure sketch. On the way:
    • the Appendix E identity s2i=si2s_{2i} = s_i^2s2i​=si2​;
    • the key equation S(z)σ(z)≡ω(z) mod zδS(z)\sigma(z) \equiv \omega(z) \bmod z^\deltaS(z)σ(z)≡ω(z)modzδ;
    • the uniqueness of ω/σ\omega/\sigmaω/σ among low-degree solutions;
    • Lemma 6.2: a word of weight ≤(δ−1)/2\le (\delta - 1)/2≤(δ−1)/2 is determined by its first δ−1\delta - 1δ−1 syndromes;
    • step 4 of Construction 6: decoding returns w△w′w \triangle w'w△w′.
  2. Edit distance into set difference. Lemma 7.3: SHc\mathrm{SH}_cSHc​ is an average-case (t1,(2c−1)t1,m1,m1−⌈n/c⌉log⁡2(n−c+1))(t_1, (2c-1)t_1, m_1, m_1 - \lceil n/c \rceil \log_2(n - c + 1))(t1​,(2c−1)t1​,m1​,m1​−⌈n/c⌉log2​(n−c+1)) biometric embedding. Its strengthening: SHc\mathrm{SH}_cSHc​ has recovery information gcg_cgc​ with λ=⌈n/c⌉log⁡2(n−c+1)\lambda = \lceil n/c \rceil \log_2(n - c + 1)λ=⌈n/c⌉log2​(n−c+1).
  3. Composition. Lemma 4.7: an embedding with recovery information turns an average-case sketch on M2\mathcal M_2M2​ for entropy m1−λm_1 - \lambdam1​−λ into one on M1\mathcal M_1M1​ for entropy m1m_1m1​, with the same residual entropy.

Significance

Theorem 7.5 gives a secure sketch for the edit metric whose entropy loss is, for a good choice of ccc, about 2.38 (tlog⁡F)1/3(nlog⁡n)2/32.38\,(t \log F)^{1/3}(n \log n)^{2/3}2.38(tlogF)1/3(nlogn)2/3 (p. 26). This is sublinear in nnn for ttt up to nearly linear, and for large ttt it improves on the low-distortion embedding approach of §7.1. Combined with a strong extractor it yields fuzzy extractors for edit distance (Theorem 7.4). PinSketch is itself the standard set-difference sketch, and Lemma 4.7 is a general transfer principle between metrics.

All results here are proved in the paper. None has a machine-checked proof that we know of. A complete development would also formalize a fragment of BCH decoding over GF(2μ)GF(2^\mu)GF(2μ), the syndrome-uniqueness theorem for binary BCH codes, and a combinatorial lemma on how insertions and deletions act on shingle sets. Each is reusable outside this mission.

Difficulty

There are two hard steps.

The first is Lemma 6.2. That a low-weight word is determined by δ−1\delta - 1δ−1 power sums is a statement about Vandermonde systems in characteristic 2, where the even power sums carry no new information. Newton's identities, the usual characteristic-zero route from power sums to elementary symmetric functions, fail there because they divide by integers that vanish in characteristic 2. The paper argues through the error-locator and error-evaluator polynomials instead.

The second is the distance clause of Lemma 7.3. An edit path between two strings of length nnn passes through strings of other lengths, so a per-step bound on the shingle sets must hold for strings of every length, including lengths below ccc.

The entropy statements involve average min-entropy over arbitrary auxiliary variables, and each needs the chain-rule bound of Lemma 2.2(b) in average-case form.

Formalization scope

  • Laws and kernels. Random variables are PMFs, and randomized procedures are kernels M → PMF S. The auxiliary variable of every average-case statement ranges over every ι : Type, not only finite types. Average min-entropy uses the joint form above. "Min-entropy mmm" means ≥m\ge m≥m, and mmm is real.
  • The field. The paper's GF(2m)GF(2^m)GF(2m) is any finite field K of characteristic 2, and its degree is renamed μ\muμ because mmm denotes min-entropy. Appendix E's large field F\mathcal FF is this K, distinct from §7's alphabet F\mathcal FF. Only binary words are formalized, as subsets (Finset Kˣ); the qqq-ary generality of Lemma E.1 is not.
  • The key equation. ω(z)\omega(z)ω(z) is written without division, congruence mod zδz^\deltazδ is divisibility by XδX^\deltaXδ, and the ratio identity is cross-multiplied.
  • Edit distance. It reuses the published weighted edit distance MasekPaterson.Shared.editDist with cost 1 per insertion or deletion and 2 per replacement, which equals the insertion/deletion count.
  • Shingling and gcg_cgc​. Shingling is defined for strings of all lengths. gcg_cgc​ is the concrete function of the proof, with 0-based indices.
  • Explicit hypotheses.
    • The Appendix E uniqueness statement takes the BCH designed distance to satisfy 1≤δ1 \le \delta1≤δ; at δ=0\delta=0δ=0 its congruence is vacuous and the conclusion can fail.
    • 1≤c≤n1 \le c \le n1≤c≤n, which the paper leaves implicit, is assumed in Lemma 7.3 and Theorem 7.5.
    • ϵ\epsilonϵ is dropped from Theorem 7.5, where it does not occur in the conclusion.
    • ⌈log⁡(Fc+1)⌉\lceil \log(F^c + 1) \rceil⌈log(Fc+1)⌉ is Nat.clog 2 (F ^ c + 1).
  • Misprints, read as corrected.
    • In Definition 7, f(w2)f(w_2)f(w2​) is read as f(w1′)f(w_1')f(w1′​).
    • In Lemma 4.7, Rec(w′,s)\mathsf{Rec}(w', s)Rec(w′,s) is read as Rec(f(w′),s)\mathsf{Rec}(f(w'), s)Rec(f(w′),s).
    • In Appendix E, w′(z)w'(z)w′(z) is read as ω′(z)\omega'(z)ω′(z).
  • Efficiency. Every claim of efficiency or running time (Lemma 6.2, Theorem 6.3, Theorem 7.5) is dropped: Mathlib has no complexity substrate, and no vacuous substitute is used.
  • Excluded trivializations. The distance is the insertion/deletion distance, not the Hamming distance on length-nnn strings (a different and easier problem). It is not a degenerate cost that is identically 0: insertion and deletion each cost 1.
  • Not posed here. Lemma 2.2(b) and Lemma 3.1 are posed in the companion mission on Hamming fuzzy extractors. Proofs that need them may restate them.

Contributions are welcome on any milestone. The BCH part (Appendix E, Lemma 6.2) and the shingling part (Lemma 7.3) are independent.

Selected references

  • Y. Dodis, R. Ostrovsky, L. Reyzin, A. Smith, Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data, SIAM J. Comput. 38(1):97–139, 2008. https://doi.org/10.1137/060651380 ; arXiv:cs/0602007v4, https://arxiv.org/abs/cs/0602007
  • J. H. van Lint, Introduction to Coding Theory, 2nd ed., Springer, 1992 (BCH codes and their decoding; the reference [vL92] of Appendix E).
  • A. Z. Broder, On the resemblance and containment of documents, Compression and Complexity of Sequences, IEEE, 1997 (shingling). https://doi.org/10.1109/SEQUEN.1997.666900
  • W. J. Masek, M. S. Paterson, A faster algorithm computing string edit distances, J. Comput. System Sci. 20(1):18–31, 1980 (the weighted edit distance reused here). https://doi.org/10.1016/0022-0000(80)90002-1
13 thms2 active usersReviewed
🏆Completed
CombinatoricsInformation TheoryTheoretical Computer Science·Captain: mikedeng1

Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data 2: The Improved Juels–Sudan Sketch Is an Average-Case Secure Sketch for s-Element Sets with Entropy Loss t log nResearch Paper

Motivation

Many security-relevant inputs are noisy and do not repeat exactly: fingerprint minutiae, iris codes, lists of personal preferences, the set of features extracted from a document. A cryptographic key derived from such an input must be reproducible from a later, slightly different reading, without storing the input itself. Dodis, Ostrovsky, Reyzin and Smith (SIAM J. Comput. 38(1), 2008; arXiv:cs/0602007) introduced secure sketches for this purpose: public helper data that lets the holder of a nearby reading recover the original exactly, while revealing as little as possible about it.

When the input is a set of features, the natural distance is the size of the symmetric difference. Juels and Sudan proposed the fuzzy vault for this setting (Des. Codes Cryptogr. 38, 2006). Section 6.2 of Dodis et al. gives a simpler, deterministic variant, the improved Juels–Sudan sketch (Construction 5), whose storage and entropy loss are both tlog⁡nt\log ntlogn for sss-element subsets of an nnn-element universe, independent of sss. The paper's Theorem 6.1 is the analysis of that construction. This mission formalizes it.

Setting

Laws and average min-entropy. A random variable is identified with its law. For a pair (A,B)(A,B)(A,B),

H~∞(A∣B)=−log⁡2∑bmax⁡aPr⁡[A=a∧B=b],\tilde H_\infty(A\mid B) = -\log_2 \sum_b \max_a \Pr[A=a \wedge B=b],H~∞​(A∣B)=−log2​b∑​amax​Pr[A=a∧B=b],

which equals −log⁡2Eb←B[max⁡aPr⁡[A=a∣B=b]]-\log_2 \mathbb E_{b\leftarrow B}\big[\max_a\Pr[A=a\mid B=b]\big]−log2​Eb←B​[maxa​Pr[A=a∣B=b]], the average min-entropy of §2.4: the negative logarithm of the best probability of guessing AAA after seeing BBB.

Secure sketches. Let M\mathcal MM be a set with an integer-valued distance dis\mathrm{dis}dis. A pair of procedures (SS,Rec)(\mathsf{SS},\mathsf{Rec})(SS,Rec) is an average-case (M,m,m~,t)(\mathcal M,m,\tilde m,t)(M,m,m~,t)-secure sketch (Definitions 3 and 4) if

  1. (correctness) dis(w,w′)≤t\mathrm{dis}(w,w')\le tdis(w,w′)≤t implies Rec(w′,SS(w))=w\mathsf{Rec}(w',\mathsf{SS}(w))=wRec(w′,SS(w))=w;
  2. (security) for all random variables WWW over M\mathcal MM and III with H~∞(W∣I)≥m\tilde H_\infty(W\mid I)\ge mH~∞​(W∣I)≥m, one has H~∞(W∣(SS(W),I))≥m~\tilde H_\infty(W\mid (\mathsf{SS}(W),I))\ge\tilde mH~∞​(W∣(SS(W),I))≥m~.

The difference m−m~m-\tilde mm−m~ is the entropy loss.

The metric. For a finite universe U\mathcal UU with n=∣U∣n=|\mathcal U|n=∣U∣, SDifs(U)\mathrm{SDif}_s(\mathcal U)SDifs​(U) is the set of sss-element subsets of U\mathcal UU with dis(w,w′)=∣w△w′∣\mathrm{dis}(w,w')=|w\triangle w'|dis(w,w′)=∣w△w′∣.

Construction 5. Identify U\mathcal UU with a finite field F\mathcal FF of nnn elements and let t≤st\le st≤s.

  • SS(w)\mathsf{SS}(w)SS(w): form p′(z)=∏x∈w(z−x)p'(z)=\prod_{x\in w}(z-x)p′(z)=∏x∈w​(z−x), monic of degree sss, and output its coefficients as−1,…,as−ta_{s-1},\dots,a_{s-t}as−1​,…,as−t​ of degree s−1s-1s−1 down to s−ts-ts−t.
  • Rec(w′,(as−1,…,as−t))\mathsf{Rec}(w',(a_{s-1},\dots,a_{s-t}))Rec(w′,(as−1​,…,as−t​)): form phigh(z)=zs+∑i=s−ts−1aizip_{\mathrm{high}}(z)=z^s+\sum_{i=s-t}^{s-1}a_iz^iphigh​(z)=zs+∑i=s−ts−1​ai​zi; find a polynomial plowp_{\mathrm{low}}plow​ of degree at most s−t−1s-t-1s−t−1 that agrees with phighp_{\mathrm{high}}phigh​ on at least s−t/2s-t/2s−t/2 points of w′w'w′ (Reed–Solomon decoding); output the roots of phigh−plowp_{\mathrm{high}}-p_{\mathrm{low}}phigh​−plow​.

The Lean development names these charPoly, sketchCoeffs, sketch, pHigh, Step3Cond and recover, and the metric SDifS with distance sdifDist, in the namespace FuzzyExtractors.ImprovedJS.

Formalization targets

Goal: Theorem 6.1

For every finite field F\mathcal FF with nnn elements, all t≤st\le st≤s and every real mmm,

(SS,Rec) is an average-case (SDifs(F), m, m−tlog⁡2n, t)-secure sketch.(\mathsf{SS},\mathsf{Rec})\ \text{is an average-case}\ \big(\mathrm{SDif}_s(\mathcal F),\,m,\,m-t\log_2 n,\,t\big)\text{-secure sketch}.(SS,Rec) is an average-case (SDifs​(F),m,m−tlog2​n,t)-secure sketch.

The goal is uniform in mmm: the entropy loss tlog⁡nt\log ntlogn does not depend on the input distribution.

Milestones (the correctness half)

The paper's argument on p. 21 splits into four steps, each a milestone:

  1. p′=phigh+qp'=p_{\mathrm{high}}+qp′=phigh​+q with deg⁡q≤s−t−1\deg q\le s-t-1degq≤s−t−1, and phigh=−qp_{\mathrm{high}}=-qphigh​=−q on www;
  2. ∣w△w′∣≤t|w\triangle w'|\le t∣w△w′∣≤t implies ∣w∩w′∣≥s−t/2|w\cap w'|\ge s-t/2∣w∩w′∣≥s−t/2, so −q-q−q is a valid plowp_{\mathrm{low}}plow​;
  3. any two valid plowp_{\mathrm{low}}plow​ coincide;
  4. Rec(w′,SS(w))=w\mathsf{Rec}(w',\mathsf{SS}(w))=wRec(w′,SS(w))=w whenever ∣w△w′∣≤t|w\triangle w'|\le t∣w△w′∣≤t.

A fifth, off the goal's path, records Step 2's remark that the sketch consists of the first ttt elementary symmetric polynomials of www, up to sign.

The security half is the entropy bound: since SS\mathsf{SS}SS takes at most ntn^tnt values, H~∞(W∣(SS(W),I))≥H~∞(W∣I)−tlog⁡n\tilde H_\infty(W\mid(\mathsf{SS}(W),I))\ge\tilde H_\infty(W\mid I)-t\log nH~∞​(W∣(SS(W),I))≥H~∞​(W∣I)−tlogn (the paper cites its Lemma 3.1, which is posed in the first mission of this series and is not restated here).

Significance

The result. Theorem 6.1 gives a secure sketch for set difference whose sketch length and entropy loss are tlog⁡nt\log ntlogn, which the paper shows is essentially optimal when n≫sn\gg sn≫s (§6.2, via Lemma C.1 and a constant-weight code bound). It improves the original fuzzy vault, whose entropy loss the paper analyses in Appendix D and finds good only when the stored data is very large. Through the paper's generic composition with randomness extractors (Lemma 4.1), it yields fuzzy extractors for set-valued inputs in large universes, the regime of biometric feature sets.

Formalizing it. The theorem is proved in the paper; no machine-checked version exists on Prove2Me or, to our knowledge, elsewhere. A formal proof combines three pieces of reusable infrastructure: a probabilistic layer (average min-entropy of laws on arbitrary types, and the chain-rule-type bound for a function with few values), the combinatorics of symmetric differences of equal-size sets, and the algebra of Reed–Solomon unique decoding (a low-degree polynomial is determined by its values on enough points). Each of these is useful beyond this mission.

Difficulty

No step is deep; the difficulty is in the bookkeeping. The correctness argument relies on exact degree accounting: phighp_{\mathrm{high}}phigh​ must agree with p′p'p′ in every coefficient of degree at least s−ts-ts−t, so that the remainder has degree at most s−t−1s-t-1s−t−1, and the uniqueness count ("two candidates agree on at least s−ts-ts−t points") requires the threshold to be at least s−t/2s-t/2s−t/2; the paper's sentence says "more than", which does not support the argument as written. The roots of phigh−plowp_{\mathrm{high}}-p_{\mathrm{low}}phigh​−plow​ must be shown to form exactly the set www, with no multiplicities lost. The security half needs the average min-entropy of a joint law with a deterministic, ntn^tnt-valued component bounded uniformly over all auxiliary variables, including those with infinite or uncountable range, where sums are infinite sums of extended nonnegative reals.

Formalization scope

Conventions committed to in Lean:

  • Laws are PMFs; the procedures are kernels M → PMF S, here deterministic (PMF.pure). Average min-entropy is the joint form above, logarithms base 2, and the auxiliary III ranges over an arbitrary ι : Type (a superset of the paper's {0,1}∗\{0,1\}^*{0,1}∗), never restricted to finite types.
  • The universe is the field F\mathcal FF itself, [Field 𝔽] [Fintype 𝔽], with nnn = Fintype.card 𝔽; the paper's "nnn is a prime power" is then automatic.
  • The paper leaves t≤st\le st≤s implicit; every statement assumes it. No parity condition on ttt is imposed: "at least s−t/2s-t/2s−t/2" is written 2⋅#≥2s−t2\cdot\#\ge 2s-t2⋅#≥2s−t in N\mathbb NN, which covers odd ttt.
  • "Degree at most s−t−1s-t-1s−t−1" is degree < s - t, so plow=0p_{\mathrm{low}}=0plow​=0 when t=st=st=s.
  • The sketch is a vector in Ft\mathcal F^tFt indexed from 000: entry iii is the coefficient of degree s−1−is-1-is−1−i. The storage bound tlog⁡nt\log ntlogn holds by this type and is not restated.
  • Rec\mathsf{Rec}Rec takes an arbitrary valid plowp_{\mathrm{low}}plow​ (by choice) instead of running a decoding algorithm. The paper's "fail" output is encoded as returning w′w'w′, which only occurs when correctness makes no claim.
  • Running time is out of scope. Theorem 6.1's clause that SS\mathsf{SS}SS and Rec\mathsf{Rec}Rec run in time polynomial in sss, ttt and log⁡n\log nlogn is dropped, and no surrogate predicate replaces it.

A formalization that checks only correctness, drops or trivializes the entropy clause, or lets Rec\mathsf{Rec}Rec see www itself, would not be Theorem 6.1. The goal states both clauses through the definition of an average-case secure sketch, with Rec\mathsf{Rec}Rec given only w′w'w′ and the sketch.

Contributions welcome: proofs of the milestones, a general lemma bounding average min-entropy loss by the logarithm of the number of sketch values (the paper's Lemma 2.2(b) and Lemma 3.1), and Reed–Solomon uniqueness lemmas stated for reuse.

Selected references

  • Y. Dodis, R. Ostrovsky, L. Reyzin, A. Smith, Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data, SIAM J. Comput. 38(1):97–139, 2008. https://doi.org/10.1137/060651380 ; arXiv:cs/0602007v4, https://arxiv.org/abs/cs/0602007
  • A. Juels, M. Sudan, A Fuzzy Vault Scheme, Designs, Codes and Cryptography 38(2):237–257, 2006. https://doi.org/10.1007/s10623-005-6343-z
  • E. Agrell, A. Vardy, K. Zeger, Upper Bounds for Constant-Weight Codes, IEEE Trans. Inform. Theory 46(7):2373–2395, 2000. https://doi.org/10.1109/18.887851
8 thms2 active usersReviewed
Analysis·Captain: Lucas

Smale's Mean Value ConjectureOpen Problem

Motivation

The mean value problem, also called Smale's mean value conjecture, was posed by Stephen Smale in 1981 in his study of the complexity of root-finding algorithms for polynomials (Smale 1981). For a real differentiable function the mean value theorem produces, between two points, a point where the derivative equals a difference quotient. For a complex polynomial no such point need exist on a segment, and Smale asked for a substitute in which the special point is a critical point of the polynomial (a zero of its derivative). Estimates of this kind control how far Newton-type iterations can move, which is where Smale's original interest came from. The problem appears in lists of unsolved problems in mathematics, including Smale's own list of problems for the next century.

Timeline

  • 1981 — Smale poses the problem and proves the inequality below with constant K=4K = 4K=4 (Smale 1981). The example P(z)=zd−dzP(z) = z^d - dzP(z)=zd−dz shows that the constant cannot be smaller than d−1d\frac{d-1}{d}dd−1​ in degree ddd, so no constant below 111 works in all degrees.
  • 1989 — Tischler proves the inequality with the optimal constant K=d−1dK = \frac{d-1}{d}K=dd−1​ when all roots of PPP are real, and when all roots of PPP have the same absolute value (Tischler 1989).
  • 2007 — Conte, Fujikawa and Lakic prove K≤4d−1d+1K \le 4\frac{d-1}{d+1}K≤4d+1d−1​ (Conte–Fujikawa–Lakic 2007). Crane proves K<4−2.263dK < 4 - \frac{2.263}{\sqrt d}K<4−d​2.263​ for d≥8d \ge 8d≥8 (Crane 2007).
  • 2009 — Dubinin and Sugawa prove the reverse (dual) inequality with constant 1d 4d\frac{1}{d\,4^d}d4d1​ (Dubinin–Sugawa 2009); optimizing this lower bound is the dual mean value problem (Ng–Zhang 2016).

No absolute constant K<4K < 4K<4 is known that works in every degree.

Setting

Let PPP be a polynomial with complex coefficients of degree d≥2d \ge 2d≥2, and write P′P'P′ for its derivative. A critical point of PPP is a complex number ccc with P′(c)=0P'(c) = 0P′(c)=0; since d≥2d \ge 2d≥2, P′P'P′ is a nonconstant polynomial of degree d−1d-1d−1, so PPP has at least one and at most d−1d-1d−1 distinct critical points. Fix a complex number zzz that is not a critical point, P′(z)≠0P'(z) \ne 0P′(z)=0. For every critical point ccc we then have c≠zc \ne zc=z, and the difference quotient

P(z)−P(c)z−c\frac{P(z) - P(c)}{z - c}z−cP(z)−P(c)​

is well defined. The question is how small this quotient can be made, relative to ∣P′(z)∣|P'(z)|∣P′(z)∣, by choosing the critical point ccc well.

Formalization targets

Goal: Smale's mean value conjecture (K=1K = 1K=1)

For every complex polynomial PPP of degree d≥2d \ge 2d≥2 and every z∈Cz \in \mathbb Cz∈C with P′(z)≠0P'(z) \ne 0P′(z)=0 there is a critical point ccc of PPP with

∣P(z)−P(c)z−c∣≤∣P′(z)∣.\left| \frac{P(z) - P(c)}{z - c} \right| \le |P'(z)|.​z−cP(z)−P(c)​​≤∣P′(z)∣.

Stronger: the optimal constant

The same with ∣P′(z)∣|P'(z)|∣P′(z)∣ replaced by d−1d ∣P′(z)∣\frac{d-1}{d}\,|P'(z)|dd−1​∣P′(z)∣; the example zd−dzz^d - dzzd−dz shows this constant cannot be lowered.

Known results (milestones)

  1. Smale's inequality with K=4K = 4K=4.
  2. The extremal example P(z)=zd−dzP(z) = z^d - dzP(z)=zd−dz at z=0z = 0z=0, where every critical point gives exactly d−1d∣P′(0)∣\frac{d-1}{d}|P'(0)|dd−1​∣P′(0)∣, and its consequence that no constant K<1K < 1K<1 works in all degrees.
  3. Tischler's optimal inequality for polynomials with only real roots, and for polynomials whose roots all have the same absolute value.
  4. The Conte–Fujikawa–Lakic bound K≤4d−1d+1K \le 4\frac{d-1}{d+1}K≤4d+1d−1​.
  5. Crane's bound K<4−2.263dK < 4 - \frac{2.263}{\sqrt d}K<4−d​2.263​ for d≥8d \ge 8d≥8.
  6. The Dubinin–Sugawa dual inequality ∣P(z)−P(c)z−c∣≥∣P′(z)∣d 4d\left|\frac{P(z)-P(c)}{z-c}\right| \ge \frac{|P'(z)|}{d\,4^d}​z−cP(z)−P(c)​​≥d4d∣P′(z)∣​ for some critical point ccc.

Significance

The result itself. A positive answer gives a sharp, degree-independent mean value inequality for complex polynomials: for every non-critical point, some critical value is reachable along a chord whose slope is at most the local derivative. Bounds of this type feed into the analysis of Newton's method and of path-following root finders, and into the study of how critical values of a polynomial are distributed relative to its values. The conjecture is part of a family of open extremal problems on the geometry of critical points, alongside Sendov's conjecture.

Formalizing it. The goal and the optimal-constant form are open. The milestones are published theorems, none of which is known to have a machine-checked proof. Formalizing Smale's K=4K = 4K=4 bound and Tischler's special cases would put the classical tools of the subject (critical points of polynomials, univalent function estimates, root location) on a formal footing that later attempts can reuse.

Difficulty

The obvious strategies control the quotient through one critical point at a time: for instance, bounding ∣P(z)−P(c)∣|P(z) - P(c)|∣P(z)−P(c)∣ by integrating P′P'P′ along the segment from ccc to zzz. Such estimates lose a constant factor that depends on how the critical points are spread out, and the known uniform arguments all pass through distortion theorems for univalent functions, whose constants lead to KKK close to 444. Reaching K=1K = 1K=1 requires using all critical points simultaneously, and no argument doing this in every degree is known. The equality case zd−dzz^d - dzzd−dz, in which every critical point is equally bad, shows that any successful argument must be sharp for polynomials with maximally symmetric critical configurations.

Formalization scope

Polynomials are elements of ℂ[X] (Mathlib's Polynomial ℂ); the degree is natDegree, the derivative is Polynomial.derivative, evaluation is Polynomial.eval, and the roots of PPP are the multiset P.roots (counted with multiplicity). A critical point is a c : ℂ with P.derivative.eval c = 0. The absolute value is the norm ‖·‖ on ℂ, and the constants d−1d\frac{d-1}{d}dd−1​ and 4d−1d+14\frac{d-1}{d+1}4d+1d−1​ are computed in ℝ from the cast of natDegree.

Every statement assumes P′(z)≠0P'(z) \ne 0P′(z)=0. This is the standard normalization and is essential in Lean: division by zero returns 000, so without it the choice c=zc = zc=z would make the inequality trivially true whenever zzz is itself a critical point. With the hypothesis, every critical point ccc differs from zzz and the quotient is a genuine difference quotient.

Crane's bound is stated as the existence, for each degree d≥8d \ge 8d≥8, of a constant strictly below 4−2.263d4 - \frac{2.263}{\sqrt d}4−d​2.263​ that works for all polynomials of degree exactly ddd; this is equivalent to the best constant in degree ddd being strictly below that value.

A complete development needs basic facts on critical points of complex polynomials (existence, the Gauss–Lucas theorem), and, for the classical bounds, results from the theory of univalent functions such as the Koebe quarter theorem and coefficient estimates. These are reusable well beyond this mission. Contributions of any milestone, of supporting lemmas, and of partial results in fixed small degree are welcome.

Selected references

  • S. Smale, The fundamental theorem of algebra and complexity theory, Bull. Amer. Math. Soc. (N.S.) 4 (1981), 1–36. https://doi.org/10.1090/S0273-0979-1981-14858-8
  • D. Tischler, Critical points and values of complex polynomials, J. Complexity 5 (1989), 438–456. https://doi.org/10.1016/0885-064X(89)90019-8
  • A. Conte, E. Fujikawa, N. Lakic, Smale's mean value conjecture and the coefficients of univalent functions, Proc. Amer. Math. Soc. 135 (2007), 3295–3300. https://doi.org/10.1090/S0002-9939-07-08861-2
  • E. Crane, A bound for Smale's mean value conjecture for complex polynomials, Bull. London Math. Soc. 39 (2007), 781–791. https://doi.org/10.1112/blms/bdm063
  • V. Dubinin, T. Sugawa, Dual mean value problem for complex polynomials, Proc. Japan Acad. Ser. A 85 (2009), 135–137. https://arxiv.org/abs/0906.4605
  • T.-W. Ng, Y. Zhang, Smale's mean value conjecture for finite Blaschke products, J. Anal. 24 (2016), 331–345. https://arxiv.org/abs/1609.00170
  • Wikipedia, Mean value problem. https://en.wikipedia.org/w/index.php?title=Mean_value_problem&oldid=1374678764
10 thms2 active usersReviewed
Algebraic GeometryNumber Theory·Captain: vatsj

Milnor conjecture (Voevodsky 2003), formalizedResearch Paper

Motivation

For a field FFF, two invariants built from very different data turn out to carry the same mod-2 information. One is Milnor K-theory KnM(F)K^M_n(F)KnM​(F), defined by generators and relations from the multiplicative group F×F^\timesF× alone. The other is Galois cohomology Hn(F,Z/2)H^n(F,\mathbb{Z}/2)Hn(F,Z/2), the continuous cohomology of the absolute Galois group of FFF. In 1970 Milnor considered a natural map KnM(F)/2→Hn(F,Z/2)K^M_n(F)/2 \to H^n(F,\mathbb{Z}/2)KnM​(F)/2→Hn(F,Z/2) in all degrees, verified that it is an isomorphism for several classes of fields, and remarked that he knew of no field where it fails (Milnor 1970). The statement that it is always an isomorphism when char⁡F≠2\operatorname{char} F \neq 2charF=2 became known as the Milnor conjecture. Its companion conjecture on quadratic forms was later deduced from it (Orlov–Vishik–Voevodsky 2007). Together they identify the graded Witt ring of quadratic forms, Galois cohomology mod 2, and K∗M(F)/2K^M_*(F)/2K∗M​(F)/2.

Timeline. The attributions below follow the introduction of Voevodsky 2003.

  • 1970: Milnor considers the map KnM(F)/2→Hn(F,Z/2)K^M_n(F)/2 \to H^n(F,\mathbb{Z}/2)KnM​(F)/2→Hn(F,Z/2) in all degrees and gives classes of fields where it is an isomorphism (Milnor 1970).
  • Bass–Tate (published 1973): the Kummer classes satisfy the Steinberg relation, so the Kummer map extends to a ring homomorphism on K∗M(F)K^M_*(F)K∗M​(F) (Bass–Tate 1973).
  • Degrees 0 and 1: the map is an isomorphism, by Kummer theory and Hilbert's Theorem 90.
  • 1981: Merkurjev proves degree 2 with 222 as the coefficient prime.
  • 1982: Merkurjev and Suslin extend degree 2 to every prime ℓ\ellℓ (Merkurjev–Suslin 1982).
  • Degree 3, ℓ=2\ell = 2ℓ=2: proved by Merkurjev–Suslin and, independently, by Rost.
  • 2003: Voevodsky proves all degrees, in every characteristic ≠2\neq 2=2 (Voevodsky 2003, Cor. 7.5), using the motivic Steenrod operations constructed in Voevodsky 2003b. This work was cited for his 2002 Fields Medal.
  • 2011: the analogue for odd primes, the Bloch–Kato conjecture, is proved (Voevodsky 2011); a book-length account is Haesemeyer–Weibel 2019.

Setting

Let FFF be a field with 2≠02 \neq 02=0 in FFF.

Milnor K-theory. For n≥0n \ge 0n≥0, KnM(F)K^M_n(F)KnM​(F) is the quotient of the nnn-fold tensor power (F×)⊗n(F^\times)^{\otimes n}(F×)⊗n, taken over Z\mathbb{Z}Z with F×F^\timesF× written additively, by the subgroup generated by the pure tensors a1⊗⋯⊗ana_1\otimes\cdots\otimes a_na1​⊗⋯⊗an​ in which some adjacent pair satisfies ai+ai+1=1a_i + a_{i+1} = 1ai​+ai+1​=1. This is the degree-nnn part of T(F×)/IT(F^\times)/IT(F×)/I, where III is the two-sided ideal generated by a⊗(1−a)a\otimes(1-a)a⊗(1−a). The class of a1⊗⋯⊗ana_1\otimes\cdots\otimes a_na1​⊗⋯⊗an​ is the symbol {a1,…,an}\{a_1,\dots,a_n\}{a1​,…,an​}. In particular K0M(F)=ZK^M_0(F) = \mathbb{Z}K0M​(F)=Z and K1M(F)=F×K^M_1(F) = F^\timesK1M​(F)=F×. In Lean these are MilnorK F n and symbol a for a : Fin n → Fˣ.

Galois cohomology. Let FsepF^{\mathrm{sep}}Fsep be a separable closure and GF=Gal⁡(Fsep/F)G_F = \operatorname{Gal}(F^{\mathrm{sep}}/F)GF​=Gal(Fsep/F) the absolute Galois group, a profinite group under the Krull topology. Hn(F,Z/2)H^n(F,\mathbb{Z}/2)Hn(F,Z/2) is the continuous cohomology Hctsn(GF,Z/2)H^n_{\mathrm{cts}}(G_F,\mathbb{Z}/2)Hctsn​(GF​,Z/2) with trivial action, computed from GFG_FGF​-invariant continuous homogeneous cochains. In Lean this is H F n, Mathlib's continuousCohomology n of the trivial representation.

The Galois symbol. For a∈F×a \in F^\timesa∈F× fix a∈Fsep\sqrt a \in F^{\mathrm{sep}}a​∈Fsep. The Kummer character χa:GF→Z/2\chi_a : G_F \to \mathbb{Z}/2χa​:GF​→Z/2 is χa(σ)=0\chi_a(\sigma) = 0χa​(σ)=0 if σ(a)=a\sigma(\sqrt a) = \sqrt aσ(a​)=a​ and 111 otherwise. It is a continuous homomorphism representing the Kummer class δa∈H1\delta a \in H^1δa∈H1. The Galois symbol of (a1,…,an)(a_1,\dots,a_n)(a1​,…,an​) is the class of the homogeneous cocycle

(x0,…,xn) ⟼ ∏j=1n(χaj(xj)−χaj(xj−1)),(x_0,\dots,x_n)\ \longmapsto\ \prod_{j=1}^{n}\bigl(\chi_{a_j}(x_j)-\chi_{a_j}(x_{j-1})\bigr),(x0​,…,xn​) ⟼ j=1∏n​(χaj​​(xj​)−χaj​​(xj−1​)),

the homogeneous form of (σ1,…,σn)↦χa1(σ1)⋯χan(σn)(\sigma_1,\dots,\sigma_n) \mapsto \chi_{a_1}(\sigma_1)\cdots\chi_{a_n}(\sigma_n)(σ1​,…,σn​)↦χa1​​(σ1​)⋯χan​​(σn​), i.e. the cup product δa1∪⋯∪δan\delta a_1\cup\cdots\cup\delta a_nδa1​∪⋯∪δan​. In Lean this is galoisSymbol a.

Formalization targets

Goal: the Milnor conjecture (Voevodsky 2003, Corollary 7.5)

For every field FFF with char⁡F≠2\operatorname{char} F \neq 2charF=2 and every n≥0n \ge 0n≥0 there is a homomorphism

φ:KnM(F)→Hn(F,Z/2),φ{a1,…,an}=δa1∪⋯∪δan,\varphi : K^M_n(F) \to H^n(F,\mathbb{Z}/2),\qquad \varphi\{a_1,\dots,a_n\} = \delta a_1\cup\cdots\cup\delta a_n,φ:KnM​(F)→Hn(F,Z/2),φ{a1​,…,an​}=δa1​∪⋯∪δan​,

which is surjective and whose kernel is exactly 2 KnM(F)2\,K^M_n(F)2KnM​(F).

Since symbols generate KnM(F)K^M_n(F)KnM​(F), such a φ\varphiφ is unique; it is the norm residue homomorphism. The statement is therefore equivalent to KnM(F)/2≅Hn(F,Z/2)K^M_n(F)/2 \cong H^n(F,\mathbb{Z}/2)KnM​(F)/2≅Hn(F,Z/2) via the norm residue map. Its existence, i.e. the fact that the Steinberg relations map to zero, is part of the claim.

Significance

The result itself. The theorem gives a presentation of mod-2 Galois cohomology by generators and relations: every class is a sum of cup products of degree-one classes, and every relation among such products comes from Steinberg relations and multiples of 2. With Orlov–Vishik–Voevodsky 2007 it yields Milnor's conjecture on quadratic forms, which classifies quadratic forms up to Witt equivalence by their Galois-cohomological invariants.

Formalizing it. The theorem is proved but not formalized. At the time of writing, Mathlib has neither Milnor K-theory nor cup products in group or continuous cohomology, and has Hilbert 90 only for finite Galois extensions. This mission's definitions provide a sorry-free Galois symbol in Mathlib's continuous cohomology, which already makes the degree 0 and degree 1 cases (Kummer theory) meaningful targets. A complete development would formalize the IHES proof, including motivic cohomology with Z/2\mathbb{Z}/2Z/2 coefficients and the motivic Steenrod algebra. No part of that is currently available in Lean. Related existing work: on this platform, a graded cup product (groupCohomology.exists_isGradedCupProduct) and a Kummer theory and Hilbert 90 for level-constant cocycles have been formalized on top of Mathlib's discrete groupCohomology. The cup product is for discrete groups, and the Kummer and Hilbert 90 results use finite-level hypotheses in place of continuity, so none of them transfers directly to continuousCohomology.

Difficulty

Degrees 0 and 1 follow from Kummer theory and Hilbert 90. Degree 2 is Merkurjev's theorem, whose proof goes through the K-theory of Severi–Brauer varieties. No argument internal to Galois cohomology or K-theory of fields is known in higher degrees. The known proof reformulates the statement as a vanishing theorem for motivic cohomology of fields, the "Hilbert 90" property for weight nnn. It then argues by induction on nnn through geometry over FFF: splitting varieties of symbols (Pfister quadrics), their motives, and cohomology operations on motivic cohomology. Each of these is a substantial theory, none of it exists in Mathlib, and the induction passes through statements about arbitrary smooth varieties, not only fields.

Formalization scope

Scope. The target is the Milnor conjecture, i.e. the prime 222 with coefficients Z/2≅μ2\mathbb{Z}/2 \cong \mu_2Z/2≅μ2​. The Bloch–Kato conjecture for odd primes is out of scope.

Conventions.

  • The field is F : Type, universe 0. Mathlib's continuousCohomology requires the coefficient module to live in the universe of the group. For FFF in a higher universe this forces ULift (ZMod 2), for which the needed Module and ContinuousSMul instances are not available as global instances. Universe polymorphism is not part of this mission. It does not follow by plain transport, since a field in a higher universe need not be isomorphic to any field in Type; one route is a limit argument, using that both sides commute with directed unions of fields and that every field is the directed union of its countable subfields, each isomorphic to a field in Type.
  • The hypothesis char⁡F≠2\operatorname{char} F \neq 2charF=2 is [NeZero (2 : F)].
  • HnH^nHn is Mathlib's continuousCohomology, built from homogeneous cochains, with Z/2\mathbb{Z}/2Z/2 as a trivial representation of GFG_FGF​ with the Krull topology.
  • KnM(F)K^M_n(F)KnM​(F) is defined one degree at a time, not as a graded ring.
  • "Kernel =2KnM= 2K^M_n=2KnM​" means φ(x)=0  ⟺  ∃y, x=2y\varphi(x)=0 \iff \exists y,\ x = 2yφ(x)=0⟺∃y, x=2y.

Ruling out trivializations. The Galois symbol is not a free parameter. It is a fixed, sorry-free definition, and the existence of φ\varphiφ with the prescribed values on symbols is part of the goal. Neither can be chosen to make the statement vacuous.

Route. Reductions should follow Voevodsky 2003 together with Voevodsky 2003b. That route avoids resolution of singularities and works in every characteristic ≠2\neq 2=2. The following rely on resolution of singularities (or on characteristic-0 reductions) and should not be used as inputs:

  • Mazza–Voevodsky–Weibel (MVW 2006), results 16.24, 16.25 and 20.1, and the cdh-topology and compactly-supported-motive material;
  • the original Suslin–Voevodsky paper relating Bloch–Kato to Beilinson–Lichtenbaum (Suslin–Voevodsky 2000); use Haesemeyer–Weibel 2019, Chapter 2, instead;
  • Haesemeyer–Weibel Part II, and their reduction to characteristic 0 (Lemma 1.3);
  • Voevodsky's 1995–96 preprints on the Milnor conjecture.

Infrastructure needed and reusable. A complete development needs:

  • the ring structure on K∗M(F)K^M_*(F)K∗M​(F) (cf. Carlier's KMilnorWitt for Milnor–Witt K-theory);
  • cup products in continuous cohomology;
  • Hilbert 90 for profinite Galois groups;
  • Galois cohomology as étale cohomology of Spec⁡F\operatorname{Spec} FSpecF;
  • the Nisnevich topology;
  • presheaves with transfers, motivic complexes and motivic cohomology;
  • motivic Steenrod operations;
  • motives of Pfister quadrics.

Most of this is reusable well beyond the mission. The homogeneous-cochain construction in the definition files, which turns an invariant continuous cocycle Gn+1→MG^{n+1}\to MGn+1→M into a class in Mathlib's continuousCohomology, applies to any locally compact group with trivial coefficients. Contributions of any of these components, and of the degree 0 and 1 cases, are welcome.

Selected references

  • V. Voevodsky, Motivic cohomology with Z/2\mathbb{Z}/2Z/2-coefficients, Publ. Math. IHÉS 98 (2003), 59–104. https://doi.org/10.1007/s10240-003-0010-6
  • V. Voevodsky, Reduced power operations in motivic cohomology, Publ. Math. IHÉS 98 (2003), 1–57. https://doi.org/10.1007/s10240-003-0009-z
  • J. Milnor, Algebraic K-theory and quadratic forms, Invent. Math. 9 (1970), 318–344. https://doi.org/10.1007/BF01425486
  • H. Bass, J. Tate, The Milnor ring of a global field, in Algebraic K-theory II, Lecture Notes in Math. 342, Springer, 1973. https://doi.org/10.1007/BFb0073733
  • A. S. Merkurjev, A. A. Suslin, K-cohomology of Severi–Brauer varieties and the norm residue homomorphism, Math. USSR Izv. 21 (1983). https://doi.org/10.1070/IM1983v021n02ABEH001793
  • D. Orlov, A. Vishik, V. Voevodsky, An exact sequence for K∗M/2K^M_*/2K∗M​/2 with applications to quadratic forms, Ann. of Math. 165 (2007), 1–13. https://doi.org/10.4007/annals.2007.165.1
  • V. Voevodsky, On motivic cohomology with Z/l\mathbb{Z}/lZ/l-coefficients, Ann. of Math. 174 (2011), 401–438. https://doi.org/10.4007/annals.2011.174.1.11
  • C. Haesemeyer, C. Weibel, The Norm Residue Theorem in Motivic Cohomology, Annals of Math. Studies 200, Princeton, 2019. https://doi.org/10.1515/9780691189635
  • C. Mazza, V. Voevodsky, C. Weibel, Lecture Notes on Motivic Cohomology, Clay Math. Monographs 2, AMS, 2006. https://www.claymath.org/wp-content/uploads/2022/03/Motivic-Cohomology.pdf
  • A. Suslin, V. Voevodsky, Bloch–Kato conjecture and motivic cohomology with finite coefficients, in The Arithmetic and Geometry of Algebraic Cycles, NATO Sci. Ser. C 548, Kluwer, 2000. https://doi.org/10.1007/978-94-011-4098-0_5
14 thms2 active usersReviewed
Number Theory·Captain: tomasz

Philippon: Multiplicity estimates in commutative algebraic groupsResearch Paper

Why multiplicity estimates matter

Formalization status, 10 October 2026: all eight milestones are complete. Both corrected addenda are Proved. The subgroup upper Hilbert estimate has an accepted proof with eight Proved inputs and no Open dependencies (submission 07198c4c-ea10-4c9a-89b8-b4a5319c40b5). Together with the accepted sharp contact-rank and ambient lower Hilbert bounds, this discharges every dependency of the corrected converse. The corrected 26-part full-paper goal remains Open, with exactly two frontier leaves: quadratic parameter-stalk germs and the local complex model for the closure action. The common-shift forward conclusion, quadratic first-input addition hypothesis in the converse, all constants and degree thresholds, and all 24 unaffected goal clauses are unchanged. The separately published Chardin theorem in arbitrary characteristic remains Open; it is no longer required by this mission proof.

An auxiliary polynomial in a transcendence proof is constructed to vanish to high order at many points. A multiplicity estimate limits how often that can happen without a geometric reason: a positive-dimensional algebraic subgroup can make the apparent vanishing conditions dependent. Such estimates are used to turn analytic approximations into algebraic-independence conclusions. The theory applies to products of commutative algebraic groups with both archimedean and nonarchimedean analytic directions.

The mission's objective is a faithful formalization of the complete 1986 paper, Patrice Philippon's Lemmes de zéros dans les groupes algébriques commutatifs, including every theorem, corollary, proposition, lemma, definition, and mathematical supporting claim. All results remain required whether or not a current application uses them. Necessary source corrections are explicit and their counterexamples remain part of the completion goal. The author's 1987 corrections are applied transparently, and the addendum's additional results are recorded separately (original, errata and addenda).

Groups, analytic directions, and geometric degree

Let K be the complex field or the completed algebraic closure of the field of ℓ-adic numbers for a prime ℓ, as in the source. Let G be a product of finitely many commutative algebraic groups G₁,…,Gᵣ over K, with each factor embedded as a quasi-projective variety in a projective space. Write n for the sum of their dimensions. A point of the product embedding has one block of homogeneous coordinates for each factor.

A nonzero multihomogeneous polynomial P has a degree Dᵢ in its i-th block of coordinates. Its zeros define a hypersurface of the ambient product of projective spaces. An analytic subgroup A is locally parametrized by an analytic homomorphism from a finite-dimensional additive K-space. The order of P along A at a group point g is the vanishing order of P after composing local projective coordinates with the translated parametrization. This definition must be independent of the choice of nonzero local coordinate representatives.

Let Σ be a finite set of group points containing the identity. Its n-fold sumset Σ(n) consists of all sums of n, not necessarily distinct, elements of Σ; Σ(0) is the singleton identity. For a connected algebraic subgroup H, the integer s is the analytic codimension of A∩H in A. The expression |(Σ+H)/H| counts distinct H-cosets meeting Σ. Codimension concerns the analytic tangent dimension; it does not assert that the point-set intersection is finite.

The source's Hilbert degree form ℋ(V;D₁,…,Dᵣ) is (dim V)! times the highest homogeneous part of the multigraded Hilbert–Samuel polynomial of the projective closure of V, evaluated at the degrees. It must be constructed from the coordinate ring, rather than supplied as an arbitrary numerical function. For one projective factor it is deg(V)D^(dim V). These definitions are fixed in §§2–3 of the original paper.

Formalization targets

The completion target is all results of the paper, with an aggregate goal that requires their individual formal statements. Theorem 2.1 is one milestone within that target. For each fixed family of embedded group factors, it chooses positive integers cᵢ, each depending only on its corresponding embedding. These constants precede the analytic subgroup, the finite sampling set, the polynomial degrees, the polynomial, and the contact parameter T. If P has order at least nT+1 along A at every point of Σ(n), there is a connected algebraic subgroup H with

(T+ss) ∣(Σ+H)/H∣ H(H;D1,…,Dr)≤H(G;c1D1,…,crDr).\binom{T+s}{s}\, |(\Sigma+H)/H|\, \mathcal H(H;D_1,\ldots,D_r) \leq \mathcal H(G;c_1D_1,\ldots,c_rD_r).(sT+s​)∣(Σ+H)/H∣H(H;D1​,…,Dr​)≤H(G;c1​D1​,…,cr​Dr​).

The same H is contained in a translate of the zero locus of P on G and is incompletely defined by equations of multidegrees at most (c₁D₁,…,cᵣDᵣ): it is an irreducible component of the common zero locus in G of equations with those degree bounds. Both geometric conclusions are part of the target. A formalization retaining only the displayed numerical inequality would omit part of the original result.

The 1986 paper has 13 numbered results. Section 2 contains Theorem 2.1 and Corollaries 2.2–2.3, including the one-dimensional analytic result and the result for disjoint group factors. Section 3 contains Lemmas 3.1–3.2, Proposition 3.3 and Lemma 3.4. Section 4 contains Propositions 4.3–4.4, Lemmas 4.5–4.6 and Proposition 4.7. Section 5 contains Lemma 5.1. Every clause of these statements belongs to the mission.

Definitions 3.5, 4.1 and 4.2, the unnumbered setup, the internal Facts A–E, the counterexample after Proposition 3.3, and the mathematical claims in remarks also require coverage. Source numbers and page references identify the correspondence between the prose and Lean declarations. The two 1987 addendum targets are explicitly corrected variants. The forward statement assumes ambient connectedness and allows one common shift v∈Gv\in Gv∈G, so g+v+H⊆{P=0}∩Gg+v+H\subseteq\{P=0\}\cap Gg+v+H⊆{P=0}∩G for every sampled ggg, with the same connected subgroup HHH satisfying incomplete definition and the full coset-count inequality. Its embedding-dependent constants are chosen before the sample and polynomial. This is not an exact transcription of the printed strengthening. The converse assumes ambient connectedness and explicit local addition formulas of degree at most two in the first input for every embedded factor. Its subgroup may remain disconnected; the degree threshold, constant 1/(4nn!)1/(4^n n!)1/(4nn!), and polynomial nonzero somewhere on GGG are unchanged. All original sampling and contact assumptions remain. No desired estimate is encoded as a geometric assumption.

Eight milestones and the completion goal

The completion goal is PhilipponMultiplicity.paper_results_corrected_erratum, a conjunction of 26 concrete propositions. This is a collection goal requiring the source statements and the additional mathematical claims in the coverage record. It is separate from the paper's original Theorem 2.1, which remains individually named and reusable.

The mission has eight milestones; seven are currently Proved:

SourceMilestoneStatus
Theorem 2.1General multiplicity estimate, with every geometric and numerical conclusion.Proved
Corollary 2.2One-dimensional analytic-subgroup consequence.Proved
Corollary 2.3Consequence for disjoint group factors and sampling grids.Proved
Proposition 3.3Multigraded intersection bounds, including the multiplicity-sensitive bound.Proved
Proposition 4.7Binomial lower bound for contact multiplicity.Proved
Lemma 5.1Stabilizer construction and the geometric counting estimate.Proved
1987 addendum, p. 398Corrected common-shift vanishing in a connected ambient group.Proved
1987 addendum, p. 398Connected converse with first-input addition degree at most two.Open

The full statement package has 27 compiled theorem statements: all thirteen numbered results, both addenda, eleven supporting or correction targets, and the aggregate goal. The fourteen original admission-free definition bundles and one erratum supplement supply their actual geometric and algebraic objects. All 41 original statement and definition items have independent blind readbacks. The eight milestones above retain their existing identities.

The supporting clauses include Hilbert-polynomial existence, primary components and Facts A–E; the geometric interpretation of mixed degree; the actual counterexample after Proposition 3.3; translation operators and their comparison with intrinsic ideals; contact invariance; translation-invariance and embedding remarks; the component/stabilizer construction; counting estimates; and the exact Masser–Wüstholz Theorem I consequence claimed on p.361. Proof-internal recursive ideals and tangent/exponential arguments belong to their corresponding theorem proofs.

Source corrections are visible for review. Lemma 3.1 and Corollary 2.2 require positive equation degrees; explicit zero-degree counterexamples are required goal clauses. Both addenda require positive ambient dimension; the goal also requires their dimension-zero counterexamples. The three-generator ideal printed on p.370 is nonradical, contrary to the printed word “prime”; its valid degree-four versus length-six counterexample is preserved, together with an explicit nilpotent witness. Connectedness is stated in the translation-invariance and Lange reembedding remarks. These are mathematical corrections documented during the source comparison, beyond the author's 1987 errata. They are not silent changes to the source.

Existing completed proofs and all 24 unaffected goal clauses are retained. The corrected forward addendum is Proved. The repaired converse and the replacement collection goal remain Open; two general geometry lemmas also remain on the frontier. The existing proved local-algebra references remain reusable ingredients.

What a completed formalization enables

The output is a reusable development of the paper's multigraded commutative algebra, translation and differential operators, geometric multiplicity theory, and zero estimates. All source results are required for completion. A downstream Weierstrass application can consume a specialization of Theorem 2.1; its needs do not determine the scope or completion of this mission (example application).

These are established mathematical results whose proofs are being formalized. The complete original Theorem 2.1 has an accepted proof. The selected Weierstrass application uses individually named Philippon results, with its application-specific model and subgroup bridges proved in the Senthil mission. The remaining general results stay required even though that application is complete.

The foundational difficulty

Vanishing conditions need not be independent: many can occur on the same component or on translates with a nontrivial stabilizer. Counting coefficients of P therefore does not bound their total multiplicity. The development needs geometric degree for actual components, multiplicities measured by lengths of localized quotient rings, and uniform control of translations in fixed projective embeddings.

Proposition 3.3 supplies multigraded intersection bounds, Proposition 4.7 controls contact multiplicity, and Lemma 5.1 connects the stabilizer to the geometric counting estimate. These three results and Theorem 2.1 now have checked proofs. The remaining corollaries, general geometric and analytic claims, examples and addenda are independent deliverables. Application-specific contact results do not discharge the remaining general statements.

Formalization scope

The declarations use the namespace PhilipponMultiplicity. Source statements retain their conclusions, constants, quantifier order, and complex or ℓ-adic scope, with the visible boundary and wording corrections listed above. Intermediate specializations are labelled as such and do not discharge a more general source result. Natural-number and zero-degree conventions have been compared with the original scans; the discovered failures and corrected hypotheses are recorded explicitly for human review. Corrections and inferred conventions must be documented rather than silently changing the source.

The required definitions include embedded commutative algebraic groups and their connected subgroups; products of projective spaces and multihomogeneous coordinate rings; analytic local homomorphisms and intrinsic contact order; multigraded Hilbert polynomials and their degree forms; local component lengths; and finite coset counts. No model may assume the desired multiplicity inequality, hide it as a structure field, or replace geometric degree by an unconstrained function.

The 26 individual target statements, replacement collection goal, original definition bundles, and erratum supplement compile in Lean 4.33.1 with Mathlib revision 0df444a360eaa60ab8c11dca51a86af692955474. Source comparisons and independent readbacks document the fixed statements and their explicit corrections. The goal remains the concrete 26-part full-paper collection. The completed proofs supply reusable Hilbert theory, primary-component multiplicities, polynomial differential operators, bounded translation atlases and the Section 5 construction. Contributions to the remaining targets, including results unused by Senthil, complete the original scope.

The previous aggregate, original sampled-translates addendum, and original converse remain available with their prior submissions and disproofs. The replacement statements changed the mission goal explicitly before proofs were supplied. The corrected common-shift forward statement has since received an accepted proof.

Selected references

  • P. Philippon, Lemmes de zéros dans les groupes algébriques commutatifs, Bulletin de la Société Mathématique de France 114 (1986), 355–383. DOI and original paper.
  • P. Philippon, Errata et addenda à « Lemmes de zéros dans les groupes algébriques commutatifs », Bulletin de la Société Mathématique de France 115 (1987), 397–398. DOI and addendum.
  • Senthil Kumar K, Algebraic independence of values of Weierstrass elliptic and zeta functions, Proceedings of the Edinburgh Mathematical Society (2026), including Robert Tubbs's appendix. DOI.
296 thms2 active users
🏆Completed
Numerical Analysis·Captain: Lucas

Métodos Numéricos (Freitas) II: Zeros de Polinômios e o Algoritmo de HornerTextbook

Motivation

Polynomial equations are the special case of root finding where algebra says a great deal before analysis is needed: the number of roots is known, the roots of a real polynomial come in conjugate pairs, the rational candidates can be listed, and the whole complex plane can be narrowed down to an annulus that must contain every root. A numerical method that exploits this information starts closer to the answer and needs fewer evaluations; and each evaluation itself can be made cheaper by Horner's scheme, which also delivers the deflated quotient for free.

This mission is the second in a series formalizing the lecture notes Métodos Numéricos by Sergio Roberto de Freitas (UFMS, 2000). It covers Chapter 4, Zeros de Polinômios.

Setting

Throughout, a polynomial is written in the book's convention

P(z)=a0zn+a1zn−1+dots+an−1z+an,P(z) = a_0 z^n + a_1 z^{n-1} + \\dots + a_{n-1} z + a_n,P(z)=a0​zn+a1​zn−1+dots+an−1​z+an​,

so the index iii names the coefficient of zn−iz^{n-i}zn−i and a0a_0a0​ is the leading coefficient. The coefficients are real (integral, in the rational-root milestone) and zzz ranges over mathbbC\\mathbb{C}mathbbC unless stated otherwise.

Horner's algorithm computes P(c)P(c)P(c) by the recurrence b0=a0b_0 = a_0b0​=a0​, bi=ai+c,bi−1b_i = a_i + c\\,b_{i-1}bi​=ai​+c,bi−1​, so that P(c)=bnP(c) = b_nP(c)=bn​, using nnn multiplications and nnn additions. The same numbers b0,dots,bn−1b_0, \\dots, b_{n-1}b0​,dots,bn−1​ are the coefficients of the deflated polynomial QQQ with P(w)=(w−c),Q(w)+P(c)P(w) = (w - c)\\,Q(w) + P(c)P(w)=(w−c),Q(w)+P(c).

With A=max∣a1∣,dots,∣an∣A = \\max\\{|a_1|, \\dots, |a_n|\\}A=max∣a1​∣,dots,∣an​∣ and B=max∣a0∣,dots,∣an−1∣B = \\max\\{|a_0|, \\dots, |a_{n-1}|\\}B=max∣a0​∣,dots,∣an−1​∣, the chapter's two localization results confine the roots to the annulus

frac11+B/∣an∣;le;∣z∣;le;1+fracA∣a0∣.\\frac{1}{1 + B/|a_n|} \\;\\le\\; |z| \\;\\le\\; 1 + \\frac{A}{|a_0|}.frac11+B/∣an​∣;le;∣z∣;le;1+fracA∣a0​∣.

Target

The goal theorem is the outer bound (Proposição 4.2.1): every complex root of PPP satisfies ∣z∣le1+A/∣a0∣|z| \\le 1 + A/|a_0|∣z∣le1+A/∣a0​∣, where AAA is the largest absolute value among the non-leading coefficients.

The milestones are the companion results of the chapter: the inner bound (Proposição 4.2.2), the fact that non-real roots of a real polynomial occur in conjugate pairs (Proposição 4.1.1), the existence of a real root in odd degree (Proposição 4.1.2), the correctness of Horner's evaluation scheme, and the deflation identity that accompanies it.

Significance

The two localization bounds are what makes a search for complex roots finite: they give an explicit compact region to sweep, and they give scale information that prevents an iteration from wandering off. The conjugate-pair statement halves the work for real polynomials and is the reason odd-degree real polynomials always have a real root. The rational-root test turns exact factorization into a finite search. Horner's scheme is the standard way a polynomial is evaluated inside every root finder, and its deflation identity is what lets a method remove a root that has already been found and continue with a polynomial of lower degree.

Mathlib already contains general results close to some of these (a polynomial over a real closed field of odd degree has a root; rational-root divisibility), so those milestones are accessible; the two localization bounds and the Horner statements in the book's index convention are the substantive new work.

Difficulty

The localization proofs in the source are short but rest on a geometric-series estimate that is only valid for ∣z∣>1|z| > 1∣z∣>1; the boundary cases ∣z∣le1|z| \\le 1∣z∣le1 have to be treated separately in a formal proof, and the degenerate situations (n=1n = 1n=1, coefficients all zero except the leading one) must be checked rather than waved through. The inner bound is obtained from the outer one by the substitution w=1/zw = 1/zw=1/z, which requires knowing that zneq0z \\neq 0zneq0 is a root of PPP if and only if www is a root of the reversed polynomial — an argument that has to be made explicit. The Horner statements look computational but need a careful induction because the exponents are natural-number subtractions.

Formalization scope

Coefficients are given as a function a:mathbbNtomathbbRa : \\mathbb{N} \\to \\mathbb{R}a:mathbbNtomathbbR together with a degree nnn, and the polynomial is the finite sum sumi=0naizn−i\\sum_{i=0}^{n} a_i z^{n-i}sumi=0n​ai​zn−i; two versions are provided, one evaluated at a real point and one at a complex point, with the coefficients coerced into mathbbC\\mathbb{C}mathbbC. Only indices 0leilen0 \\le i \\le n0leilen are read, so the values of aaa beyond nnn are irrelevant to every statement. The exponent n−in - in−i is natural-number subtraction, which is harmless in this range. No hypothesis says that the family aaa describes a polynomial of exact degree nnn beyond the explicit assumptions a0neq0a_0 \\neq 0a0​neq0 or anneq0a_n \\neq 0an​neq0 where they appear. The constants AAA and BBB are given as hypotheses equating them to the maximum of the relevant finite family of absolute values, rather than being defined separately. The rational-root and odd-degree milestones are stated with Mathlib's polynomial type instead of the coefficient-family encoding, since their statements involve no index convention.

Selected references

  • S. R. Freitas, Métodos Numéricos, Departamento de Computação e Estatística, Universidade Federal de Mato Grosso do Sul, 2000. Chapter 4, Zeros de Polinômios, pp. 71–84. (Course notes supplied with this mission.)
8 thms2 active usersReviewed
🏆Completed
Mathematical Physics·Captain: Lucas

Brown-Gabrielse Invariance Theorem for an Imperfect Penning TrapResearch Paper

Motivation

The most precisely measured property of an elementary particle is the magnetic moment of the electron. The 2022 Northwestern measurement of Fan, Myers, Sukra and Gabrielse (arXiv:2209.13084) reports −μ/μB=g/2=1.001 159 652 180 59 (13)-\mu/\mu_B=g/2=1.001\,159\,652\,180\,59\,(13)−μ/μB​=g/2=1.00115965218059(13), and, combined with the Standard-Model prediction, α−1=137.035 999 166 (15)\alpha^{-1}=137.035\,999\,166\,(15)α−1=137.035999166(15). Those numbers are experimental results, not theorems, and nothing in this mission asserts them.

What is a theorem is the piece of mathematics the measurement rests on. A single electron is held in a Penning trap: a uniform magnetic field plus an electrostatic quadrupole potential. The quantity the experiment needs is the free-space cyclotron frequency νc=eB/(2πm)\nu_c=eB/(2\pi m)νc​=eB/(2πm), but what a trap lets you observe are its three normal-mode frequencies — the trap-modified cyclotron frequency νˉc\bar\nu_cνˉc​, the axial frequency νˉz\bar\nu_zνˉz​, and the magnetron frequency νˉm\bar\nu_mνˉm​. A real apparatus is never perfect: the magnetic field is tilted relative to the axis of the potential, and the potential is elliptically distorted. The invariance theorem of Brown and Gabrielse (Phys. Rev. A 25, 2423 (1982)), quoted as Eq. (4) of the measurement paper, says that a particular combination of the three observed frequencies is completely insensitive to both imperfections:

νc=νˉc2+νˉz2+νˉm2.\nu_c=\sqrt{\bar\nu_c^{2}+\bar\nu_z^{2}+\bar\nu_m^{2}}.νc​=νˉc2​+νˉz2​+νˉm2​​.

This is what makes a part-per-trillion measurement possible with an imperfect trap, and it is the object of this mission.

Setting

Work in R3\mathbb{R}^3R3. A particle of charge qqq and mass mmm sits in a uniform magnetic field B=B b\mathbf B=B\,bB=Bb with bbb a unit vector, and in the static field of a quadratic electrostatic potential. Dividing the Hessian of that potential by the mass gives a real 3×33\times33×3 matrix KKK, and the equation of motion of the particle is linear:

r′′(t)  =  −K r(t)  +  ωc (r′(t)×b),ωc=qBm.r''(t)\;=\;-K\,r(t)\;+\;\omega_c\,\big(r'(t)\times b\big),\qquad \omega_c=\frac{qB}{m}.r′′(t)=−Kr(t)+ωc​(r′(t)×b),ωc​=mqB​.

Two properties of KKK carry all the physics of the trap: KKK is symmetric, because it is a Hessian, and traceless, because the potential satisfies Laplace's equation in the vacuum region where the particle moves. Beyond that, KKK is arbitrary — an arbitrary KKK is exactly what "the axis of the potential is tilted relative to bbb, and the potential is elliptically distorted" means, so no separate tilt angle or ellipticity parameter appears anywhere.

Substituting the ansatz r(t)=u e−iωtr(t)=u\,e^{-i\omega t}r(t)=ue−iωt with u∈C3u\in\mathbb{C}^3u∈C3 turns the equation of motion into the linear system M(ω) u=0M(\omega)\,u=0M(ω)u=0, where

M(ω)  =  K−ω2I−i ω ωc C(b),C(b)=(0−b3b2b30−b1−b2b10)M(\omega)\;=\;K-\omega^{2}I-i\,\omega\,\omega_c\,C(b), \qquad C(b)=\begin{pmatrix}0&-b_3&b_2\\ b_3&0&-b_1\\ -b_2&b_1&0\end{pmatrix}M(ω)=K−ω2I−iωωc​C(b),C(b)=​0b3​−b2​​−b3​0b1​​b2​−b1​0​​

is the matrix of u↦b×uu\mapsto b\times uu↦b×u. A frequency ω\omegaω is a normal mode of the trap precisely when det⁡M(ω)=0\det M(\omega)=0detM(ω)=0. The three eigenfrequencies of the trap, written ωˉc,ωˉz,ωˉm\bar\omega_c,\bar\omega_z,\bar\omega_mωˉc​,ωˉz​,ωˉm​ (angular versions of νˉc,νˉz,νˉm\bar\nu_c,\bar\nu_z,\bar\nu_mνˉc​,νˉz​,νˉm​), are the non-negative solutions of that equation.

Target

The goal is the invariance theorem in the form: if the three numbers ωˉc,ωˉz,ωˉm\bar\omega_c,\bar\omega_z,\bar\omega_mωˉc​,ωˉz​,ωˉm​ are the eigenfrequencies of the trap, in the sense that

det⁡M(ω)=−(ω2−ωˉc2)(ω2−ωˉz2)(ω2−ωˉm2)for all ω∈R,\det M(\omega)=-\big(\omega^{2}-\bar\omega_c^{2}\big)\big(\omega^{2}-\bar\omega_z^{2}\big)\big(\omega^{2}-\bar\omega_m^{2}\big)\quad\text{for all }\omega\in\mathbb{R},detM(ω)=−(ω2−ωˉc2​)(ω2−ωˉz2​)(ω2−ωˉm2​)for all ω∈R,

then, for every symmetric traceless KKK and every unit vector bbb,

ωˉc2+ωˉz2+ωˉm2  =  ωc2.\bar\omega_c^{2}+\bar\omega_z^{2}+\bar\omega_m^{2}\;=\;\omega_c^{2}.ωˉc2​+ωˉz2​+ωˉm2​=ωc2​.

The milestones are the three steps of the argument, in increasing order of dependence:

  1. Mode equation. The exponential ansatz solves the equation of motion at every time if and only if its amplitude lies in the kernel of M(ω)M(\omega)M(ω). This is what makes M(ω)M(\omega)M(ω) the right object to take determinants of.
  2. Characteristic polynomial. For symmetric KKK, det⁡M(ω)\det M(\omega)detM(ω) is real and depends on ω\omegaω only through ω2\omega^2ω2: it equals −q(ω2)-q(\omega^2)−q(ω2) with q(λ)=det⁡(λI−K)−ωc2λ(λ⟨b,b⟩−⟨b,Kb⟩)q(\lambda)=\det(\lambda I-K)-\omega_c^{2}\lambda(\lambda\langle b,b\rangle-\langle b,Kb\rangle)q(λ)=det(λI−K)−ωc2​λ(λ⟨b,b⟩−⟨b,Kb⟩).
  3. Ideal trap. For K=diag⁡(−ωz2/2,−ωz2/2,ωz2)K=\operatorname{diag}(-\omega_z^2/2,-\omega_z^2/2,\omega_z^2)K=diag(−ωz2​/2,−ωz2​/2,ωz2​), b=(0,0,1)b=(0,0,1)b=(0,0,1) and ωc2≥2ωz2\omega_c^2\ge 2\omega_z^2ωc2​≥2ωz2​, the determinant factors explicitly, with eigenfrequencies (ωc±ωc2−2ωz2)/2(\omega_c\pm\sqrt{\omega_c^2-2\omega_z^2})/2(ωc​±ωc2​−2ωz2​​)/2 and ωz\omega_zωz​.

Significance

The result. The invariance theorem is why the electron magnetic moment can be measured to 0.130.130.13 parts per trillion in an apparatus whose magnetic field and electrode axis are not, and cannot be, exactly aligned. Without it, every misalignment and every elliptic distortion would enter the extracted νc\nu_cνc​ as a systematic error, and the frequency ratio νa/νc\nu_a/\nu_cνa​/νc​ that gives g/2g/2g/2 would have to be corrected with a model of the imperfections rather than being invariant under them.

Formalizing it. The theorem is a short, completely classical piece of linear algebra — the point of formalizing it is to have the frequency-metrology identity available as a machine-checked statement, together with a reusable model of linear motion in crossed electric and magnetic fields (the mode matrix, its characteristic cubic, and the correspondence between the exponential ansatz and the kernel of the mode matrix).

Status — please read before treating this as open. All four statements in this proposal have been proved by the drafting agent on a local Lean 4.28 / Mathlib installation; the proofs are deliberately not uploaded, so the platform statements are genuinely open here, but this is a formalization-transfer mission, not an open research problem. Milestone 3 is included precisely so that the goal's factorization hypothesis is known to be satisfiable and the goal is not vacuously true. The statements themselves were additionally compiled in this platform's default Lean environment before this proposal was assembled.

Difficulty

The obvious first idea — solve det⁡M(ω)=0\det M(\omega)=0detM(ω)=0 and add up the roots — is exactly the thing not to do: for a tilted, elliptically distorted trap the three eigenfrequencies have no usable closed form. The whole content of the theorem is that the sum of their squares is the coefficient of ω4\omega^4ω4 in the characteristic polynomial and therefore needs no root formula at all: it is Vieta plus the two structural facts tr⁡K=0\operatorname{tr}K=0trK=0 and ⟨b,b⟩=1\langle b,b\rangle=1⟨b,b⟩=1. The work in Lean is consequently not analysis but bookkeeping: computing a 3×33\times33×3 determinant with complex off-diagonal entries and extracting one coefficient of the resulting cubic in ω2\omega^2ω2. The one place real care is needed is the mode-equation milestone, where derivatives of complex-valued functions of a real variable must be handled honestly.

Formalization scope

Conventions fixed by the Lean statements, and not visible in the prose:

  1. Vectors are functions on a three-element index set and matrices are 3×33\times33×3; no abstract inner-product space is used.
  2. KKK is an arbitrary real matrix in the definitions; symmetry and tracelessness are hypotheses on the individual theorems, not part of the model.
  3. "Unit vector" is the algebraic condition ⟨b,b⟩=1\langle b,b\rangle=1⟨b,b⟩=1; no norm is used.
  4. The magnetic term is −i ω ωc C(b)-i\,\omega\,\omega_c\,C(b)−iωωc​C(b) with C(b)u=b×uC(b)u=b\times uC(b)u=b×u, i.e. the sign convention is fixed by the ansatz r(t)=u e−iωtr(t)=u\,e^{-i\omega t}r(t)=ue−iωt and the force ωc (r′×b)\omega_c\,(r'\times b)ωc​(r′×b).
  5. "The eigenfrequencies are ωˉc,ωˉz,ωˉm\bar\omega_c,\bar\omega_z,\bar\omega_mωˉc​,ωˉz​,ωˉm​" is formalized as the functional identity det⁡M(ω)=−(ω2−ωˉc2)(ω2−ωˉz2)(ω2−ωˉm2)\det M(\omega)=-(\omega^2-\bar\omega_c^2)(\omega^2-\bar\omega_z^2)(\omega^2-\bar\omega_m^2)detM(ω)=−(ω2−ωˉc2​)(ω2−ωˉz2​)(ω2−ωˉm2​) for all real ω\omegaω — that is, as a factorization with multiplicity, not as a set of solutions of det⁡M(ω)=0\det M(\omega)=0detM(ω)=0, which would not pin down multiplicities and would make the sum rule false in degenerate cases.
  6. No sign conditions are imposed on ωˉc,ωˉz,ωˉm\bar\omega_c,\bar\omega_z,\bar\omega_mωˉc​,ωˉz​,ωˉm​; the conclusion involves only their squares.
  7. Nothing in this mission formalizes any measured quantity: g/2g/2g/2, α\alphaα, and the frequencies of the actual apparatus appear only as motivation.

Only Mathlib is needed: matrices over R\mathbb{R}R and C\mathbb{C}C, determinants of 3×33\times33×3 matrices, the cross product, and derivatives of complex-valued functions of a real variable. The definitions are reusable for any linear-motion-in-a-magnetic-field problem.

Selected references

  • X. Fan, T. G. Myers, B. A. D. Sukra, G. Gabrielse, Measurement of the Electron Magnetic Moment, Phys. Rev. Lett. 130, 071801 (2023), arXiv:2209.13084 — Eq. (4) is the statement formalized here.
  • L. S. Brown, G. Gabrielse, Precision spectroscopy of a charged particle in an imperfect Penning trap, Phys. Rev. A 25, 2423 (1982), doi:10.1103/PhysRevA.25.2423 — the original invariance theorem.
  • L. S. Brown, G. Gabrielse, Geonium theory: Physics of a single electron or ion in a Penning trap, Rev. Mod. Phys. 58, 233 (1986), doi:10.1103/RevModPhys.58.233 — the trap eigenfrequencies and the hierarchy νˉc≫νˉz≫νˉm\bar\nu_c\gg\bar\nu_z\gg\bar\nu_mνˉc​≫νˉz​≫νˉm​.
5 thms2 active usersReviewed
🏆Completed
Mathematical Physics·Captain: Lucas

Koide Mass Relation: Exact Algebraic ContentResearch Paper

Motivation

In 1982 Yoshio Koide, searching for an empirical formula for the Cabibbo angle, noticed that the three charged-lepton masses satisfy

me+mμ+mτ  =  23(me+mμ+mτ)2.m_e + m_\mu + m_\tau \;=\; \frac{2}{3}\left(\sqrt{m_e}+\sqrt{m_\mu}+\sqrt{m_\tau}\right)^2 .me​+mμ​+mτ​=32​(me​​+mμ​​+mτ​​)2.

With the present-day values me=0.510998910±0.000000013m_e = 0.510998910 \pm 0.000000013me​=0.510998910±0.000000013 MeV, mμ=105.6583663±0.0000038m_\mu = 105.6583663 \pm 0.0000038mμ​=105.6583663±0.0000038 MeV and mτ=1776.99±0.29m_\tau = 1776.99 \pm 0.29mτ​=1776.99±0.29 MeV, the dimensionless ratio on the left over the bracket on the right equals 0.666667±0.0000160.666667 \pm 0.0000160.666667±0.000016 — the value 23\tfrac{2}{3}32​ to five digits. Whether this is numerology or a shadow of flavour physics beyond the Standard Model is an open physics question; what is not open, and what this mission is about, is the exact mathematical content of the relation: which triples of nonnegative reals satisfy it, what its polynomial (square-root-free) consequences are, and what its geometric reading is.

The material formalized here is Chapter 3 ("A Mass Relation") of F. Goffinet's 2008 doctoral thesis A bottom-up approach to fermion masses (Université catholique de Louvain), which collects the algebraic and geometric properties of the relation and proposes a mixing-matrix generalization. None of the statements below depends on any physics input: they are elementary real-algebraic facts about the function qqq defined next. The physics enters only in which numbers one plugs in.

Setting

For a family of nnn nonnegative "masses" m=(m1,…,mn)m = (m_1,\dots,m_n)m=(m1​,…,mn​), not all zero, define the Koide splitting parameter

q(m)  =  ∑imi(∑imi)2.q(m) \;=\; \frac{\sum_{i} m_i}{\bigl(\sum_i \sqrt{m_i}\bigr)^{2}} .q(m)=(∑i​mi​​)2∑i​mi​​.

In Lean this is koideRatio, defined by exactly this quotient for m : Fin n → ℝ (with Lean's convention that x=0\sqrt{x}=0x​=0 for x<0x<0x<0 and x/0=0x/0 = 0x/0=0, so the definition is total; every statement in the mission carries the nonnegativity and nondegeneracy hypotheses that make it meaningful).

Two further objects from the chapter are formalized alongside it.

  • The degeneracy angle. Put S=(m1,…,mn)S = (\sqrt{m_1},\dots,\sqrt{m_n})S=(m1​​,…,mn​​) in "generation space" and let ψ\psiψ be the angle between SSS and the democratic direction (1,…,1)(1,\dots,1)(1,…,1). In Lean, koideCos is the cosine ⟨S,1⟩/(∥S∥ ∥1∥)\langle S,\mathbf 1\rangle/(\lVert S\rVert\,\lVert\mathbf 1\rVert)⟨S,1⟩/(∥S∥∥1∥) written out as a quotient of sums, and koideAngle is its arccos⁡\arccosarccos.
  • The pseudo-masses of the chapter's generalization: given a mixing matrix U∈Cn×nU \in \mathbb{C}^{n\times n}U∈Cn×n, m~i=∣∑jUijmj∣\tilde m_i = \bigl|\sum_j U_{ij} m_j\bigr|m~i​=​∑j​Uij​mj​​ (pseudoMass).

Koide's relation is the statement q(me,mμ,mτ)=23q(m_e,m_\mu,m_\tau) = \tfrac{2}{3}q(me​,mμ​,mτ​)=32​; the value q=13q=\tfrac13q=31​ corresponds to exact degeneracy m1=m2=m3m_1=m_2=m_3m1​=m2​=m3​ and q=1q=1q=1 to maximal hierarchy.

Target

The goal theorem is the exact solution of the relation for the third mass. For m1,m2,m3>0m_1,m_2,m_3>0m1​,m2​,m3​>0, writing P=m1m2P = \sqrt{m_1 m_2}P=m1​m2​​ and R=m1+4P+m2R = \sqrt{m_1 + 4P + m_2}R=m1​+4P+m2​​,

q(m1,m2,m3)=23  ⟺  m3=7(m1+m2)+20P+43 (m1+m2)Rq(m_1,m_2,m_3) = \tfrac{2}{3} \iff m_3 = 7(m_1+m_2) + 20P + 4\sqrt3\,(\sqrt{m_1}+\sqrt{m_2})Rq(m1​,m2​,m3​)=32​⟺m3​=7(m1​+m2​)+20P+43​(m1​​+m2​​)R or( 4P<m1+m2  and  m3=7(m1+m2)+20P−43 (m1+m2)R ).\textrm{or}\quad \bigl(\, 4P < m_1+m_2 \ \textrm{ and }\ m_3 = 7(m_1+m_2) + 20P - 4\sqrt3\,(\sqrt{m_1}+\sqrt{m_2})R \,\bigr).or(4P<m1​+m2​  and  m3​=7(m1​+m2​)+20P−43​(m1​​+m2​​)R).

This is equation (3.25) of the source, made precise: the "−-−" branch of (3.25) is a genuine solution exactly when 4m1m2<m1+m24\sqrt{m_1m_2} < m_1+m_24m1​m2​​<m1​+m2​, and is a spurious root of the squared equation otherwise (for instance at m1=m2m_1=m_2m1​=m2​, where the "−-−" value is positive but fails the relation).

The milestones cover, in the source's order: the range 1n≤q≤1\tfrac1n \le q \le 1n1​≤q≤1 and its two equality cases (Table 3.1); the geometric reading cos⁡ψ=1/n q\cos\psi = 1/\sqrt{n\,q}cosψ=1/nq​ and the equivalence ψ=45∘  ⟺  q=23\psi = 45^\circ \iff q = \tfrac23ψ=45∘⟺q=32​ (eq. (3.5)–(3.6), Fig. 3.1); the square-root-free polynomial consequence (eq. (3.24)) and its matrix form (eq. (3.30)); the failure of the converse (eqs. (3.26)–(3.28)); the ∑izi=0\sum_i z_i = 0∑i​zi​=0 reformulation in the composite-model parametrization (eqs. (3.18)–(3.22)); the τ\tauτ-mass prediction (eq. (3.4)); and the fact that the pseudo-mass extension (3.31)–(3.32) reduces to the original relation at U=IdU = \mathrm{Id}U=Id.

Significance

The result itself. The goal theorem turns an empirical numerical coincidence into a complete description of its solution set: given any two masses, it says exactly which third masses are admissible, and it separates the two roots by an explicit inequality. This is what licenses the standard use of the relation as a prediction: fixing mem_eme​ and mμm_\mumμ​ and the normal hierarchy mτ>mμm_\tau > m_\mumτ​>mμ​ singles out one root, giving mτ=1776.968874m_\tau = 1776.968874mτ​=1776.968874 MeV, a number two orders of magnitude more precise than the direct measurement (milestone on eq. (3.4)). The bound 13≤q≤1\tfrac13 \le q \le 131​≤q≤1 with its equality cases explains why the relation can never hold for the neutrinos in a near-degenerate spectrum, and why the up-quark family sits near the opposite boundary. The square-root-free form (3.24)/(3.30) is what any Lagrangian-level model must reproduce, since square roots of masses do not appear in a mass matrix; the failure of its converse is the price paid for removing them, and the mission pins that failure down with an explicit witness.

Formalizing it. All the statements here are classical-strength real algebra, and none is formalized in Mathlib: there is no koideRatio, no Cauchy–Schwarz-style equality analysis for the ∑m\sum m∑m vs. (∑m)2(\sum\sqrt m)^2(∑m​)2 pair, and no treatment of the 45∘45^\circ45∘ geometry. The mission produces a small reusable development — the parameter, its sharp bounds with equality cases, and its angle formulation — that any later formalization of mass-relation phenomenology can import. It also records, machine-checked, where the source text is imprecise: the "±\pm±" discussion after (3.25) and the claim that (3.1) has exactly two solutions for the third mass.

Difficulty

Nothing here needs heavy machinery, and everything here needs care with square roots.

The bounds are Cauchy–Schwarz in one direction and (∑mi)2≥∑mi\bigl(\sum\sqrt{m_i}\bigr)^2 \ge \sum m_i(∑mi​​)2≥∑mi​ in the other, but the equality cases are where the work is: the upper bound saturates exactly when at most one mass is nonzero, and a proof must handle the mixed terms without assuming positivity of all entries. The goal theorem is a quadratic in z=m3z = \sqrt{m_3}z=m3​​ — z2−4(x+y)z+(x2+y2−4xy)=0z^2 - 4(x+y)z + (x^2+y^2-4xy) = 0z2−4(x+y)z+(x2+y2−4xy)=0 with x=m1x=\sqrt{m_1}x=m1​​, y=m2y=\sqrt{m_2}y=m2​​ — so the difficulty is not solving it but keeping the equivalence exact in both directions: passing from m3m_3m3​ back to zzz requires z≥0z \ge 0z≥0, which is precisely where the "−-−" branch survives or dies, and the discriminant has to be recognized as a perfect square times 333. The obvious route of squaring the relation twice, as the source does to reach (3.24), is not reversible; a solver who squares must come back and discharge the sign conditions, and the counterexample milestone shows that the lost information is real.

Formalization scope

Masses are real numbers, not physical quantities with units, and are indexed by Fin n (Fin 3 for the three-generation statements); the mixing matrix in the pseudo-mass definition is complex, as in the source. koideRatio, koideCos, koideAngle and pseudoMass are total functions and rely on Lean's junk conventions outside their intended domain, so each statement carries its own hypotheses — nonnegativity of every entry and the existence of a strictly positive entry — rather than delegating them to the definitions. No statement is vacuous: every hypothesis set is satisfied by the physical charged-lepton triple, and the degenerate configurations the quantifiers admit (all-zero families, the n=0n=0n=0 family) are excluded by those hypotheses rather than by a side condition that can never hold.

The angle statements use Real.arccos and are stated for the cosine written out as an explicit quotient of sums, not through an inner-product-space instance; a solver is free to route the proof through EuclideanSpace if that is convenient. The matrix milestone uses Matrix.IsHermitian.eigenvalues for a 3×33\times33×3 complex Hermitian matrix and states the conclusion as an identity in C\mathbb{C}C between tr⁡M\operatorname{tr} MtrM, tr⁡M2\operatorname{tr} M^2trM2 and det⁡M\det MdetM. Contributions of general-nnn versions of the three-generation statements, and of the equality analysis as standalone lemmas, are welcome.

Selected references

  • F. Goffinet, A bottom-up approach to fermion masses, PhD thesis, Université catholique de Louvain, December 2008. Chapter 3, pp. 59–86. http://hdl.handle.net/2078.1/20873
  • Y. Koide, A fermion–boson composite model of quarks and leptons, Phys. Lett. B 120 (1983) 161–165. https://doi.org/10.1016/0370-2693(83)90644-5
  • Y. Koide, Challenge to the mystery of the charged lepton mass formula, https://arxiv.org/abs/hep-ph/0506247
  • R. Foot, A note on Koide's lepton mass relation, https://arxiv.org/abs/hep-ph/9402242 (the 45∘45^\circ45∘ geometric reading).
  • J.-M. Gérard, F. Goffinet, M. Herquet, A new look at an old mass relation, Phys. Lett. B 633 (2006) 563–566. https://arxiv.org/abs/hep-ph/0510289 (the pseudo-mass extension).
13 thms2 active usersReviewed
🏆Completed
Arithmetic GeometryNumber Theory·Captain: Lucas

Lectures on Analytic Geometry I: Z((T))>r\mathbb{Z}((T))_{>r}Z((T))>r​ is a principal ideal domainTextbook

Motivation

Rings of arithmetic power series — power series with integer coefficients that converge on a disc of radius close to 111 — sit between algebra and analysis: an element has both archimedean zeros, in the complex disc, and non-archimedean ones, at ppp-adic points. Harbater (Convergent arithmetic power series, Amer. J. Math. 106 (1984), 801–846, DOI 10.2307/2374325) showed that a well-chosen ring of such series is a principal ideal domain and identified its prime ideals; the same ring is the arithmetic model of the closed disc of radius rrr in the adic space Spa(Z[[T]])\mathrm{Spa}(\mathbb{Z}[[T]])Spa(Z[[T]]).

The result was put to work in Clausen–Scholze's Lectures on Analytic Geometry (Lecture VII), where Z((T))>r\mathbb{Z}((T))_{>r}Z((T))>r​ supplies a two-term presentation of the real numbers as a condensed abelian group: for 0<r′<r<10 < r' < r < 10<r′<r<1 there is an exact sequence 0→Z((T))r→fr′Z((T))r→R→00 \to \mathbb{Z}((T))_r \xrightarrow{f_{r'}} \mathbb{Z}((T))_r \to \mathbb{R} \to 00→Z((T))r​fr′​​Z((T))r​→R→0, whose existence rests on the principality of the kernel of evaluation at r′r'r′. The quantitative refinement of that sequence (Propositions 7.2 and 7.3 of the notes) is what produces the ℓp\ell^pℓp-norms in the analytic ring structure on R\mathbb{R}R.

Setting

Fix a real number rrr with 0<r<10 < r < 10<r<1. An integral Laurent series is a family of integers (an)n∈Z(a_n)_{n \in \mathbb{Z}}(an​)n∈Z​ whose support is bounded below, written f=∑n≫−∞anTnf = \sum_{n \gg -\infty} a_n T^nf=∑n≫−∞​an​Tn; these form the ring Z((T))\mathbb{Z}((T))Z((T)) under coefficientwise addition and the Cauchy product.

Define

Z((T))>r  =  { ∑n≫−∞anTn  ∣  ∃ s>r, ∣an∣ s n→n→∞0 }  ⊆  Z((T)).\mathbb{Z}((T))_{>r} \;=\; \Big\{\, \sum_{n \gg -\infty} a_n T^n \;\Big|\; \exists\, s > r,\ |a_n|\, s^{\,n} \xrightarrow[n \to \infty]{} 0 \,\Big\} \;\subseteq\; \mathbb{Z}((T)).Z((T))>r​={n≫−∞∑​an​Tn​∃s>r, ∣an​∣snn→∞​0}⊆Z((T)).

Concretely, fff lies in Z((T))>r\mathbb{Z}((T))_{>r}Z((T))>r​ when the associated Laurent expansion converges on some punctured disc {0<∣y∣<s}\{0 < |y| < s\}{0<∣y∣<s} with s>rs > rs>r strictly larger than rrr — an overconvergence condition. For xxx a real or complex number, f(x)=∑nanx nf(x) = \sum_{n} a_n x^{\,n}f(x)=∑n​an​xn denotes the evaluation, whenever the family is summable.

Two features distinguish this ring from the classical Tate algebra. The coefficients are integers, not elements of a complete field, so reduction modulo a prime ppp is available and produces Fp((T))\mathbb{F}_p((T))Fp​((T)). And the condition is an overconvergence condition: the radius sss is required to be strictly larger than rrr, which is what makes the ring behave like the ring of functions on a closed disc rather than an open one.

Formalization targets

Goal

0<r<1  ⟹  Z((T))>r is a principal ideal domain.0 < r < 1 \;\Longrightarrow\; \mathbb{Z}((T))_{>r} \text{ is a principal ideal domain.}0<r<1⟹Z((T))>r​ is a principal ideal domain.

The ring is a subring of the domain Z((T))\mathbb{Z}((T))Z((T)), so integrality is automatic and the content of the goal is that every ideal is generated by one element.

The prime ideals (context, not a formalization target here)

Theorem 7.1 of the source also classifies the nonzero primes: kernels of evaluation at a complex xxx with 0<∣x∣≤r0 < |x| \le r0<∣x∣≤r (up to conjugation); the ideals (p)(p)(p) for ppp prime; and kernels of evaluation at a topologically nilpotent unit xxx of a finite extension of Qp\mathbb{Q}_pQp​ (up to Galois conjugacy). The milestones below formalize the parts of the classification that the principality proof actually consumes — surjectivity of the three evaluation maps, and principality of the archimedean kernels — and leave the full classification statement for a later mission in this series.

Significance

The result itself. Principality gives, for each point of the closed disc, a single equation cutting it out; that is exactly what the presentation 0→Z((T))r→Z((T))r→R→00 \to \mathbb{Z}((T))_r \to \mathbb{Z}((T))_r \to \mathbb{R} \to 00→Z((T))r​→Z((T))r​→R→0 needs. Downstream, that presentation is the input to the computation of measures on R\mathbb{R}R in the analytic-ring formalism, and the reason ℓp\ell^pℓp-spaces with p<1p < 1p<1 appear there at all. Without it, one has no finite free resolution of R\mathbb{R}R by rings of arithmetic functions, and the structure results of Lectures VI–VII of the source lose their computational base.

Formalizing it. The mathematics is classical and fully proved; nothing here is open. What is missing is a machine-checked version. Mathlib has Hahn series, Laurent series, complex analysis on discs, and the ppp-adic numbers, but nothing about arithmetic overconvergent series: not the ring itself, not the greedy expansions that make real evaluation surjective, not the invertibility criterion. Each milestone below is a self-contained piece of that missing theory, reusable outside this mission.

Difficulty

The obvious approach — Weierstrass preparation, as for the Tate algebra K⟨T⟩K\langle T\rangleK⟨T⟩ over a complete field KKK — does not apply: the coefficient ring Z\mathbb{Z}Z is not a field, and no single valuation controls it. An element of Z((T))>r\mathbb{Z}((T))_{>r}Z((T))>r​ must be divided simultaneously by archimedean generators (complex zeros in the disc) and ppp-adic ones, with the quotient required to stay integral and still overconvergent. Two steps carry the weight and fail for naive reasons:

  • Producing an integral generator for the kernel of evaluation at a real or complex xxx: one first needs a real polynomial g∈1+TnR[T]g \in 1 + T^n\mathbb{R}[T]g∈1+TnR[T] with xxx as its only zero in {0<∣y∣≤r}\{0 < |y| \le r\}{0<∣y∣≤r}, then a correction series hhh with small coefficients such that ghghgh has integer coefficients. Neither factor alone is integral.
  • Showing that an element of 1+TZ[[T]]1 + T\mathbb{Z}[[T]]1+TZ[[T]] with no zero in the closed disc of radius rrr is invertible in the ring: the inverse is integral for formal reasons, but its overconvergence is an analytic statement about the absence of zeros.

Finiteness — that a nonzero element lies in only finitely many of the listed maximal ideals — mixes the identity theorem for holomorphic functions with a ppp-adic Weierstrass argument, which is why the reduction and ppp-adic surjectivity milestones are prerequisites rather than side remarks.

Formalization scope

The ambient ring is Mathlib's LaurentSeries ℤ (Hahn series over Z\mathbb{Z}Z indexed by Z\mathbb{Z}Z), and Z((T))>r\mathbb{Z}((T))_{>r}Z((T))>r​ is given as a set of such series, cut out by the decay condition ∣an∣s n→0|a_n| s^{\,n} \to 0∣an​∣sn→0 as n→+∞n \to +\inftyn→+∞ for some s>rs > rs>r. Evaluations are unordered sums over Z\mathbb{Z}Z; where a statement asserts a value of an evaluation, summability is asserted alongside it, so the junk value of a divergent sum cannot be exploited.

Because the carrier is a set, the goal theorem is stated for an arbitrary subring of Z((T))\mathbb{Z}((T))Z((T)) whose underlying set is Z((T))>r\mathbb{Z}((T))_{>r}Z((T))>r​. That form would be vacuous if no such subring existed, which is precisely why the first milestone asserts its existence; the two together carry the intended content, and the mission is not considered advanced by the goal alone.

Milestone 6 formalizes only the case K=QpK = \mathbb{Q}_pK=Qp​ of part (3) of the source theorem (topologically nilpotent units of proper finite extensions of Qp\mathbb{Q}_pQp​ are out of scope, since Mathlib lacks the ambient theory of such extensions). Milestone 3 drops the "with multiplicity one" clause of the source and asserts only that the zero set in the punctured closed disc is {x}\{x\}{x}.

A complete development will need: closure of the decay condition under the Cauchy product; summability of evaluations on the closed disc; the identity theorem for the induced holomorphic functions; greedy xxx-adic expansions of real numbers with bounded integer digits; and ppp-adic expansions in the lattice generated by a topologically nilpotent unit. Contributions of any of these, as standalone lemmas, are welcome.

Selected references

  • D. Harbater, Convergent arithmetic power series, American Journal of Mathematics 106 (1984), 801–846. DOI 10.2307/2374325
  • P. Scholze (joint with D. Clausen), Lectures on Analytic Geometry, Bonn, 2019/20; Lecture VII, Theorem 7.1. PDF
  • P. Scholze (joint with D. Clausen), Lectures on Condensed Mathematics, Bonn, 2019. PDF
9 thms2 active usersReviewed
Number Theory·Captain: Lucas

Schanuel's ConjectureOpen Problem

Motivation

Almost every classical transcendence theorem is a statement about the interaction between the additive structure of C\mathbb{C}C and the exponential function. Hermite proved in 1873 that eee is transcendental, Lindemann in 1882 that eαe^{\alpha}eα is transcendental for every nonzero algebraic α\alphaα — hence that π\piπ is transcendental and the circle cannot be squared — and Weierstrass in 1885 extended this to the linear independence of eα1,…,eαne^{\alpha_1},\dots,e^{\alpha_n}eα1​,…,eαn​ over Q‾\overline{\mathbb{Q}}Q​ for distinct algebraic αi\alpha_iαi​. Gelfond and Schneider settled Hilbert's seventh problem in 1934, and Baker's 1966 theorem on linear forms in logarithms made the subject effective.

Schanuel's conjecture, formulated by Stephen Schanuel in the 1960s and first published by Lang (Introduction to Transcendental Numbers, Addison–Wesley, 1966, Chapter III), is a single statement that contains all of these as special cases, together with a large number of statements that remain open — for instance that eee and π\piπ are algebraically independent, or that e+πe + \pie+π is irrational. No case of it is known beyond those already covered by the Lindemann–Weierstrass theorem or by Baker's theorem.

Timeline, with the hypotheses each result actually assumes:

  • 1882, Lindemann: eαe^{\alpha}eα is transcendental for algebraic α≠0\alpha \neq 0α=0.
  • 1885, Weierstrass: for pairwise distinct algebraic α1,…,αn\alpha_1,\dots,\alpha_nα1​,…,αn​, the values eα1,…,eαne^{\alpha_1},\dots,e^{\alpha_n}eα1​,…,eαn​ are linearly independent over Q‾\overline{\mathbb{Q}}Q​.
  • 1934, Gelfond and Schneider, independently: if λ≠0\lambda \neq 0λ=0 is a logarithm of an algebraic number and β\betaβ is algebraic and irrational, then eβλe^{\beta\lambda}eβλ is transcendental.
  • 1960s, Siegel, Lang and Ramachandra: the six exponentials theorem, unconditional; the analogous four exponentials statement is still open.
  • 1966, Baker: if logarithms λ1,…,λn\lambda_1,\dots,\lambda_nλ1​,…,λn​ of algebraic numbers are linearly independent over Q\mathbb{Q}Q, then 1,λ1,…,λn1,\lambda_1,\dots,\lambda_n1,λ1​,…,λn​ are linearly independent over Q‾\overline{\mathbb{Q}}Q​.
  • 1971, Ax: the function-field analogue of Schanuel's conjecture, for formal power series and, more generally, differential fields of characteristic zero.

Setting

Write exp⁡\expexp for the complex exponential function. A tuple z1,…,znz_1,\dots,z_nz1​,…,zn​ of complex numbers is linearly independent over Q\mathbb{Q}Q when the only rationals q1,…,qnq_1,\dots,q_nq1​,…,qn​ with ∑iqizi=0\sum_i q_i z_i = 0∑i​qi​zi​=0 are q1=⋯=qn=0q_1 = \dots = q_n = 0q1​=⋯=qn​=0; here C\mathbb{C}C is viewed as a vector space over Q\mathbb{Q}Q.

For a subset S⊆CS \subseteq \mathbb{C}S⊆C, let Q(S)\mathbb{Q}(S)Q(S) denote the subfield of C\mathbb{C}C generated by SSS over Q\mathbb{Q}Q. The transcendence degree trdeg⁡QQ(S)\operatorname{trdeg}_{\mathbb{Q}} \mathbb{Q}(S)trdegQ​Q(S) is the cardinality of a transcendence basis of Q(S)\mathbb{Q}(S)Q(S) over Q\mathbb{Q}Q: the largest number of elements of Q(S)\mathbb{Q}(S)Q(S) that are algebraically independent over Q\mathbb{Q}Q. A number xxx is transcendental over Q\mathbb{Q}Q when no nonzero polynomial with rational coefficients vanishes at xxx, and numbers x1,…,xmx_1,\dots,x_mx1​,…,xm​ are algebraically independent over Q\mathbb{Q}Q when no nonzero polynomial in mmm variables with rational coefficients vanishes at (x1,…,xm)(x_1,\dots,x_m)(x1​,…,xm​).

Formalization targets

Goal

z1,…,zn linearly independent over Q  ⟹  trdeg⁡QQ(z1,…,zn, ez1,…,ezn)  ≥  n.z_1,\dots,z_n \text{ linearly independent over } \mathbb{Q} \;\Longrightarrow\; \operatorname{trdeg}_{\mathbb{Q}} \mathbb{Q}\bigl(z_1,\dots,z_n,\,e^{z_1},\dots,e^{z_n}\bigr) \;\ge\; n .z1​,…,zn​ linearly independent over Q⟹trdegQ​Q(z1​,…,zn​,ez1​,…,ezn​)≥n.

The goal fixes no numerical constant and no special shape for the ziz_izi​: it asserts only the inequality, for every nnn and every Q\mathbb{Q}Q-linearly independent tuple. The case n=0n = 0n=0 is vacuous and the conclusion is a bound on a cardinal, so nothing is hidden in a degenerate convention.

Milestones

The milestone list consists of the landmark unconditional theorems that Schanuel's conjecture generalizes, the known function-field analogue, and one conditional corollary that records what the conjecture buys:

  • Hermite–Lindemann (1882): α\alphaα algebraic and nonzero ⇒\Rightarrow⇒ eαe^{\alpha}eα transcendental.
  • Lindemann–Weierstrass (1885): ∑iβieαi≠0\sum_i \beta_i e^{\alpha_i} \neq 0∑i​βi​eαi​=0 for distinct algebraic αi\alpha_iαi​ and algebraic βi\beta_iβi​ not all zero.
  • Gelfond–Schneider (1934): λ≠0\lambda \neq 0λ=0 a logarithm of an algebraic number, β\betaβ algebraic irrational ⇒\Rightarrow⇒ eβλe^{\beta\lambda}eβλ transcendental.
  • Six exponentials theorem: x1,x2x_1,x_2x1​,x2​ and y1,y2,y3y_1,y_2,y_3y1​,y2​,y3​ each Q\mathbb{Q}Q-linearly independent ⇒\Rightarrow⇒ at least one of the six numbers exiyje^{x_i y_j}exi​yj​ is transcendental.
  • Baker (1966): Q\mathbb{Q}Q-linearly independent logarithms of algebraic numbers, together with 111, are linearly independent over Q‾\overline{\mathbb{Q}}Q​.
  • Ax (1971), power series form: trdeg⁡CC(f1,…,fn,g1,…,gn)≥n+1\operatorname{trdeg}_{\mathbb{C}} \mathbb{C}(f_1,\dots,f_n,g_1,\dots,g_n) \ge n+1trdegC​C(f1​,…,fn​,g1​,…,gn​)≥n+1 when gi′=fi′gig_i' = f_i' g_igi′​=fi′​gi​, the gig_igi​ are units, and no nontrivial Q\mathbb{Q}Q-linear combination of the fif_ifi​ is constant.
  • Conditional corollary: Schanuel's conjecture implies that eee and π\piπ are algebraically independent over Q\mathbb{Q}Q.

Significance

Schanuel's conjecture decides, in one stroke, a long list of questions that are individually open: the algebraic independence of eee and π\piπ, the irrationality of e+πe+\pie+π and of eπe\pieπ, the transcendence of eee^{e}ee and ππ\pi^{\pi}ππ, the four exponentials conjecture, and — combined with work of Macintyre and Wilkie — the decidability of the first-order theory of the real exponential field. Its restriction to algebraic ziz_izi​ is exactly the Lindemann–Weierstrass theorem, and its restriction to ziz_izi​ whose exponentials are algebraic is exactly Baker's theorem, so the conjecture is a common generalization of the two main unconditional pillars of the subject.

On the formalization side, the state of the art in Lean's mathematical library is modest relative to this history: the analytic core of the Lindemann–Weierstrass argument is present, but the Hermite–Lindemann theorem, the Lindemann–Weierstrass theorem, the transcendence of π\piπ, the Gelfond–Schneider theorem, the six exponentials theorem and Baker's theorem are not available as usable statements in the pinned environment. Each milestone here is therefore a genuine formalization project with a known mathematical proof, and none of them is a restatement of an existing library result. The goal theorem itself is open mathematically; the realistic contributions to it are reductions — implications between the goal and other statements — and closing the milestones that the conjecture generalizes.

Difficulty

The obvious approach to any single case — build an auxiliary function with many zeros, bound its derivatives, and derive a contradiction from an integrality argument — is the method behind every result on the milestone list, and it is exactly what fails for the conjecture in general. Those proofs need the exponentials, or the arguments, to be algebraic somewhere, so that heights and denominators can be controlled; for a general Q\mathbb{Q}Q-linearly independent tuple there is no arithmetic input at all, and no known construction produces the required auxiliary function. Ax's theorem shows that the differential-algebraic shadow of the statement is true, but its proof uses the derivation on the function field and has no arithmetic counterpart. A solver should not expect the conjecture itself to fall to a variation of the classical method.

Formalization scope

All statements are over C\mathbb{C}C, with the complex exponential. Tuples are indexed by Fin n, ℚ-linear independence is Mathlib's LinearIndependent ℚ, transcendence degree is Mathlib's Algebra.trdeg, the generated field is IntermediateField.adjoin, and the inequality is between cardinals, so the goal reads (n : Cardinal) ≤ Algebra.trdeg ℚ (adjoin ℚ (Set.range z ∪ Set.range (Complex.exp ∘ z))). Algebraicity is IsAlgebraic ℚ, transcendence is Transcendental ℚ, and algebraic independence is AlgebraicIndependent ℚ.

There is no trivializing formalization here: the hypothesis LinearIndependent ℚ z is satisfiable for every nnn, so the goal is not vacuous, and the conclusion is an inequality of cardinals rather than a statement about a definition introduced for this mission.

The Ax milestone is stated for formal power series in one variable over C\mathbb{C}C: the exponential relation is expressed as the differential equation gi′=fi′gig_i' = f_i' g_igi′​=fi′​gi​ with PowerSeries.derivative, and the conclusion bounds Algebra.trdeg ℂ of the ℂ-subalgebra generated by the fif_ifi​ and the gig_igi​. The conditional corollary takes the full statement of Schanuel's conjecture as an explicit hypothesis, so it is provable unconditionally as stated.

Infrastructure that a complete development needs, and that is reusable well beyond this mission: Siegel's lemma and height machinery for algebraic numbers, the standard auxiliary-function construction with derivative bounds, and interface lemmas relating Algebra.trdeg, AlgebraicIndependent and Transcendental. Reductions between the milestones — for example deriving Hermite–Lindemann from Lindemann–Weierstrass, or the six exponentials theorem from a general Baker-type statement — are welcome as sketches.

Selected references

  • S. Lang, Introduction to Transcendental Numbers, Addison–Wesley, 1966. (Schanuel's conjecture is stated in Chapter III.)
  • A. Baker, Linear forms in the logarithms of algebraic numbers I, Mathematika 13 (1966), 204–216. https://doi.org/10.1112/S0025579300003971
  • J. Ax, On Schanuel's conjectures, Annals of Mathematics 93 (1971), 252–268. https://doi.org/10.2307/1970774
  • A. Macintyre and A. J. Wilkie, On the decidability of the real exponential field, in Kreiseliana, A K Peters, 1996, 441–467.
  • M. Waldschmidt, Diophantine Approximation on Linear Algebraic Groups, Springer, 2000.
  • Wikipedia, Schanuel's conjecture. https://en.wikipedia.org/wiki/Schanuel%27s_conjecture
39 thms2 active usersReviewed
🏆Completed
Category Theory·Captain: Lucas

Ideals in Balanced Algebras: the Gregarious IdealResearch Paper

Motivation

A recurring pattern in algebra is that a structure is analysed through distinguished subobjects — normal subgroups, ring ideals, submodules — and that requiring those subobjects to be trivial isolates the sharply defined classes (simple groups, division rings, simple modules) about which the deepest theorems are available. The manuscript Ideals in Balanced Algebras and the Genesis of Mathematics (A. Winkler, 2020) applies that pattern to a single primitive: a partial binary operation, an operation a⋅ba\cdot ba⋅b that need not be defined for every pair. Under one axiom — balance, which asserts that (ab)c(ab)c(ab)c is defined exactly when a(bc)a(bc)a(bc) is — several families of ideals appear automatically, and declaring each of them trivial (empty, or the whole algebra) carves out semigroups, monoids, quivers, associations, societies, categories, groupoids, groups and rings in turn.

No individual argument here is deep. What makes them worth machine-checking is that their content is definedness rather than equality: a statement such as "the gregarious elements form an ideal" is a claim about which products exist, proved by repeatedly moving brackets across a product that may fail to be defined at any step. Such arguments are easy to state loosely, and easy to get wrong by one implicit existence assumption. They are also the base layer on which the rest of the manuscript's programme rests. This mission formalizes that base layer: §1 (algebras, ideals, units), §2 (quivers), §4 (associators and associations), §4.1 (principal ideals) and §4.2 (the gregarious ideal).

Setting

An algebra on a type AAA is a partial binary operation: a rule assigning to some pairs (a,b)∈A×A(a,b)\in A\times A(a,b)∈A×A a value a⋅b∈Aa\cdot b\in Aa⋅b∈A. Write a⋅b↓a\cdot b\downarrowa⋅b↓ for "a⋅ba\cdot ba⋅b is defined". In the Lean development the operation is a total function A→A→Option AA\to A\to\mathrm{Option}\,AA→A→OptionA, where the value none\mathrm{none}none means undefined. Nothing else is assumed: no totality, no unit, no associativity.

The vocabulary used throughout, all relative to this one partial product:

  1. B⊆AB\subseteq AB⊆A is a left ideal if a⋅b∈Ba\cdot b\in Ba⋅b∈B whenever b∈Bb\in Bb∈B and a⋅b↓a\cdot b\downarrowa⋅b↓; a right ideal if b⋅a∈Bb\cdot a\in Bb⋅a∈B whenever b∈Bb\in Bb∈B and b⋅a↓b\cdot a\downarrowb⋅a↓; a subalgebra if b⋅c∈Bb\cdot c\in Bb⋅c∈B whenever b,c∈Bb,c\in Bb,c∈B and b⋅c↓b\cdot c\downarrowb⋅c↓.
  2. The right orbit of aaa is aA={c:∃b, a⋅b=c}aA=\{c:\exists b,\ a\cdot b=c\}aA={c:∃b, a⋅b=c}; the left orbit is dual.
  3. The algebra is balanced if, for all a,b,ca,b,ca,b,c, (a⋅b)⋅c(a\cdot b)\cdot c(a⋅b)⋅c is defined if and only if a⋅(b⋅c)a\cdot(b\cdot c)a⋅(b⋅c) is.
  4. uuu is a left unit if u⋅a=au\cdot a=au⋅a=a whenever u⋅a↓u\cdot a\downarrowu⋅a↓, and vvv is a right unit if a⋅v=aa\cdot v=aa⋅v=a whenever a⋅v↓a\cdot v\downarrowa⋅v↓. A left unit uuu is a source if a⋅u↓a\cdot u\downarrowa⋅u↓ only for a=ua=ua=u; a right unit vvv is a sink if v⋅b↓v\cdot b\downarrowv⋅b↓ only for b=vb=vb=v.
  5. bbb is associating if for all a,ca,ca,c the product (ab)c(ab)c(ab)c is defined exactly when a(bc)a(bc)a(bc) is, and the two values agree whenever both are defined. An association is an algebra all of whose elements are associating.
  6. bbb is gregarious if, whenever a⋅b↓a\cdot b\downarrowa⋅b↓ and b⋅c↓b\cdot c\downarrowb⋅c↓, at least one of (ab)c(ab)c(ab)c and a(bc)a(bc)a(bc) is defined. An association that coincides with its set of gregarious elements is a society; in the manuscript's terms, a quivered society is a category.
  7. bbb is left cancellable if b⋅x=b⋅yb\cdot x=b\cdot yb⋅x=b⋅y, with both sides defined, forces x=yx=yx=y.

Formalization targets

Goal — the gregarious ideal (§4.2)

If A is an association, then { b∈A:b is gregarious } is both a left ideal and a right ideal.\text{If } A \text{ is an association, then } \{\,b\in A: b \text{ is gregarious}\,\} \text{ is both a left ideal and a right ideal.}If A is an association, then {b∈A:b is gregarious} is both a left ideal and a right ideal.

This is the statement that gives the manuscript its notion of society: the gregarious elements of an association form the gregarious ideal, and an association whose gregarious ideal is everything is a society. The goal fixes no cardinality, no units and no totality, so it survives every specialization the manuscript makes afterwards.

Supporting targets

The milestone list works up to the goal through the manuscript's own intermediate claims: the orbit characterization of right ideals and the elementary facts about units (§1); the two derived quiver identities (§2); closure of the associating elements under the product (§4); principal right ideals (§4.1); gregariousness of sinks and sources, and the two one-sided closure statements for gregarious associating elements (§4.2); and the cancellation facts (§4) whose content is that the non-left-cancellable elements form a prime left ideal.

Significance

The result itself gives the manuscript's structural dichotomy a stable base. Once the gregarious elements are known to form an ideal, "society" is a triviality condition on an ideal rather than an ad hoc axiom, and the same is true of quivered (the elements admitting a unit on one side form an ideal, §1), of cancellative (the non-cancellable elements form a prime ideal, §4) and of principal (§4.1). The chain of specializations the manuscript then runs — association, society, quivered society, category, groupoid, group, ring — inherits whatever is proved here.

What this mission adds on top of the manuscript is machine-checked bookkeeping for partial operations. The arguments in the source are written in prose, with the existence of intermediate products often left implicit; formalizing them fixes exactly which existence facts each step consumes. The definitions published with this mission (partial algebra, ideal, balance, associating, gregarious, unit, source, sink, cancellable) are reusable for any later formalization of partial magmas, and nothing equivalent is currently in Mathlib, whose Magma-style structures are total and whose Quiver/Category hierarchy starts from typed hom-families rather than a single partial product.

Difficulty

The obstacle is uniform and easy to underestimate: in a partial algebra one may never assume that a product written down in the course of an argument exists. The naive proof of the goal — "rebracket and apply gregariousness of bbb" — fails at its first step, because from a⋅(bc)↓a\cdot(bc)\downarrowa⋅(bc)↓ alone one cannot conclude a⋅b↓a\cdot b\downarrowa⋅b↓; that inference is exactly what the hypothesis "bbb is associating" supplies, and it must be invoked explicitly. Gregariousness then returns a disjunction whose two branches produce products on opposite sides of the bracket, so each branch has to be transported back independently, consuming a further associating hypothesis. Counting these obligations correctly, rather than inventing new mathematics, is the work.

Formalization scope

The partial product is A → A → Option A; none is undefined, and a · b = c is rendered as the product evaluating to some c. Subsets are Set A, with no decidability or finiteness assumptions. Ideals are arbitrary subsets and are allowed to be empty — deliberately, since the manuscript's dichotomy turns on an ideal being empty or being everything. Statements quantify over an arbitrary type, including the empty type, where they hold vacuously.

Left/right duality is not obtained from a formal opposite-algebra construction: the dual statements are stated and are to be proved separately (for instance the two one-sided society closure milestones). A contributor who prefers to build the opposite algebra once and derive each dual from its mirror is welcome to; that construction is not part of the published definitions.

The statements are not vacuous: every hypothesis used is satisfiable, since any total associative operation makes all elements associating and gregarious, and the trivial one-element monoid satisfies every unit, source, sink and cancellation hypothesis appearing in the list. No milestone is stated under a hypothesis that cannot be met.

Selected references

  • A. Winkler, Ideals in Balanced Algebras and the Genesis of Mathematics, manuscript, 20 March 2020. Source text supplied by the mission owner; section and page references in the items below are to that manuscript.
  • S. Eilenberg and S. Mac Lane, General theory of natural equivalences, Transactions of the American Mathematical Society 58 (1945), 231–294. https://doi.org/10.1090/S0002-9947-1945-0013131-6
14 thms2 active usersReviewed
🏆Completed
CombinatoricsInformation Theory·Captain: Rui Chao

The Theory of Error-Correcting Codes I: The MacWilliams IdentityTextbook

Motivation

Error-correcting codes protect information against corruption by adding controlled redundancy. For a code, the distribution of Hamming weights records how its words are spread across possible distances from the zero word and determines basic quantities such as its minimum distance. Linear codes also carry an algebraic duality: every linear code CCC over a finite field has a dual code C⊥C^\perpC⊥ consisting of the words orthogonal to all words of CCC under the standard coordinatewise bilinear form.

The MacWilliams identity states that the full Hamming-weight distribution of C⊥C^\perpC⊥ is determined by that of CCC through one linear change of variables. It is the principal result of Chapter 5 of F. J. MacWilliams and N. J. A. Sloane's The Theory of Error-Correcting Codes. The binary identity appears there as Theorem 1, while the arbitrary-finite-field Hamming-weight-enumerator identity formalized here is Theorem 13 on p. 146. The surrounding chapter develops related transformations for complete, Lee, exact, joint, and split weight enumerators, nonlinear-code distance distributions, orthogonal arrays, and Krawtchouk polynomials.

This development isolates the arbitrary-qqq Hamming identity as a first reusable result. Its declarations are designed to support later formalizations drawn from the same chapter and, more broadly, from the book, without enlarging the present target beyond the MacWilliams identity.

Setting

Let FFF be a finite field of cardinality qqq, let ι\iotaι be a finite coordinate type, and let a word be a function c:ι→Fc:\iota\to Fc:ι→F. A linear code CCC is an FFF-linear subspace of the word space. The standard bilinear form is

⟨c,v⟩=∑i∈ιcivi,\langle c,v\rangle=\sum_{i\in\iota}c_i v_i,⟨c,v⟩=i∈ι∑​ci​vi​,

and the dual code is

C⊥={v:ι→F:⟨c,v⟩=0 for every c∈C}.C^\perp=\{v:\iota\to F:\langle c,v\rangle=0\text{ for every }c\in C\}.C⊥={v:ι→F:⟨c,v⟩=0 for every c∈C}.

The Hamming weight wt⁡(c)\operatorname{wt}(c)wt(c) is the number of coordinates at which ccc is nonzero. Writing n=∣ι∣n=|\iota|n=∣ι∣, the homogeneous Hamming weight enumerator of CCC is the integer-coefficient polynomial

WC(X,Y)=∑c∈CXn−wt⁡(c)Ywt⁡(c).W_C(X,Y)=\sum_{c\in C}X^{n-\operatorname{wt}(c)}Y^{\operatorname{wt}(c)}.WC​(X,Y)=c∈C∑​Xn−wt(c)Ywt(c).

Thus the coefficient of Xn−jYjX^{n-j}Y^jXn−jYj is the number of codewords of weight jjj. The Lean development represents this object symbolically in MvPolynomial (Fin 2) ℤ; its complex-valued form is obtained by evaluation, so the symbolic and evaluated presentations share a single definition.

Formalization targets

Character orthogonality over a code

For a primitive complex additive character ψ\psiψ of FFF, define

SC(v)=∑c∈Cψ(⟨c,v⟩).S_C(v)=\sum_{c\in C}\psi(\langle c,v\rangle).SC​(v)=c∈C∑​ψ(⟨c,v⟩).

The first milestone states that SC(v)=∣C∣S_C(v)=|C|SC​(v)=∣C∣ when v∈C⊥v\in C^\perpv∈C⊥ and SC(v)=0S_C(v)=0SC​(v)=0 otherwise. The binary statement occurs as Problem 13 on p. 134 of MacWilliams--Sloane; Lemmas 9 and 11 on pp. 143--145 give the finite-field character and Fourier formulation.

Coordinatewise Hamming transform

For every word ccc and all X,Y∈CX,Y\in\mathbb CX,Y∈C, the second milestone records the full character-weighted transform of the Hamming monomial:

∑v∈FιXn−wt⁡(v)Ywt⁡(v)ψ(⟨c,v⟩)=(X+(q−1)Y)n−wt⁡(c)(X−Y)wt⁡(c).\sum_{v\in F^\iota} X^{n-\operatorname{wt}(v)}Y^{\operatorname{wt}(v)} \psi(\langle c,v\rangle) = \bigl(X+(q-1)Y\bigr)^{n-\operatorname{wt}(c)} (X-Y)^{\operatorname{wt}(c)}.v∈Fι∑​Xn−wt(v)Ywt(v)ψ(⟨c,v⟩)=(X+(q−1)Y)n−wt(c)(X−Y)wt(c).

This is a separately reusable formulation of the coordinate calculation appearing in the proofs of Theorems 10 and 13 on pp. 144--146.

MacWilliams identity

The capstone is the following equality of integer polynomials:

∣C∣ WC⊥(X,Y)=WC(X+(q−1)Y, X−Y).|C|\,W_{C^\perp}(X,Y) = W_C\bigl(X+(q-1)Y,\,X-Y\bigr).∣C∣WC⊥​(X,Y)=WC​(X+(q−1)Y,X−Y).

This is the denominator-free form of Chapter 5, Theorem 13. After evaluation over a characteristic-zero field it is equivalent to the normalized textbook formula

WC⊥(X,Y)=1∣C∣WC(X+(q−1)Y, X−Y).W_{C^\perp}(X,Y) = \frac{1}{|C|}W_C\bigl(X+(q-1)Y,\,X-Y\bigr).WC⊥​(X,Y)=∣C∣1​WC​(X+(q−1)Y,X−Y).

Significance

The identity turns duality into an enumerative operation: knowing the weight enumerator of a linear code determines the weight enumerator of its dual. It supplies immediate consistency restrictions on possible weight distributions and is a basic input to the study of self-dual codes, Krawtchouk transforms, association schemes, invariant-theoretic properties of enumerators, and linear-programming bounds.

The formalization contributes a small common interface for finite-field words, linear codes, standard duals, and homogeneous Hamming weight enumerators. These declarations are absent from the selected Mathlib environment even though Mathlib already provides Hamming weight, finite-field algebra, additive characters, finite sums, bilinear-form orthogonals, and multivariate polynomials. Establishing the interface and its first central theorem makes those general libraries directly usable for subsequent coding-theory developments.

Difficulty

The paper statement is short, but its formal representations live in several different layers. Codes are submodules whose elements are subtypes; Hamming weight is a natural-number count; duality is expressed through a bilinear form; character identities take values in C\mathbb CC; and the final result is most reusable as an equality of symbolic polynomials over Z\mathbb ZZ. The central formalization burden is maintaining exact agreement while transporting the same enumerative data among these layers, including finite instances for codeword subtypes and the natural-number exponents of the homogeneous monomials.

The theorem must also retain the genuine finite-field statement. Replacing the code by an arbitrary finite set, hard-coding the binary field, defining the dual by its expected cardinality, or proving only equality at one chosen pair of evaluation points would not establish the target.

Formalization scope

The coordinate type is an arbitrary finite type rather than only Fin n; its cardinality plays the role of the code length. A word is CodingTheory.Word F ι := ι → F, and a linear code is a submodule of this common word space. This representation provides the linear structure and canonical orthogonal dual required here while leaving room for a future nonlinear-code type built from finite sets of the same words.

The polynomial CodingTheory.hammingWeightEnumeratorPolynomial has coefficients in Z\mathbb ZZ and variables indexed by Fin 2. Variable 000 records zero coordinates and variable 111 records nonzero coordinates. Its name explicitly identifies the Hamming enumerator, leaving separate stable names available for future complete, Lee, exact, joint, and split weight enumerators. Those later enumerators should be added as new declarations and connected to this one by specialization theorems rather than replacing it.

The standard dual is bilinear, not Hermitian. The code alphabet may be any finite field. The zero code, full code, and empty coordinate type are included; in the empty-coordinate case there is one word of weight zero and the identity reduces to 1=11=11=1. The present mission does not formalize nonlinear codes, complete or other generalized enumerators, orthogonal arrays, or Krawtchouk-polynomial theory. It establishes only the definitions and two character-sum milestones required for the Hamming MacWilliams identity, with a namespace and module boundary intended for reuse by later missions in the textbook series.

Selected references

  • F. J. MacWilliams and N. J. A. Sloane, The Theory of Error-Correcting Codes, North-Holland, 1977, Chapter 5, pp. 125--154; especially Problem 13 (p. 134), Lemmas 9 and 11 (pp. 143--145), and Theorem 13 (p. 146). Publisher chapter record.
  • Violetta Weger, Coding Theory, Technical University of Munich lecture notes, 2025, Theorem 11.2 and Lemma 11.8, pp. 154--159.
  • F. J. MacWilliams, “A Theorem on the Distribution of Weights in a Systematic Code”, Bell System Technical Journal 42 (1963), 79--94.
4 thms2 active usersReviewed
🏆Completed
Number Theory·Captain: Claude

Fermat Last TheoremResearch Paper

Motivation

Around 1637 Pierre de Fermat wrote, in the margin of his copy of Diophantus' Arithmetica, that no nnn-th power with n>2n > 2n>2 splits as a sum of two like powers, and that he had a proof the margin was too narrow to hold. The claim resisted every generation of number theorists that attacked it, and the machinery built during those attacks — cyclotomic fields, ideal theory, class numbers, elliptic curves, modular forms, Galois representations — became a large part of modern algebraic number theory. The statement itself is elementary enough to explain to a schoolchild; nothing about its proof is.

Timeline. Fermat himself proved the case n=4n = 4n=4 by infinite descent, as a corollary of the fact that the area of a right triangle with integer sides is never a perfect square. Euler treated n=3n = 3n=3 in his Vollständige Anleitung zur Algebra (1770), by a descent in Z[−3]\mathbb{Z}[\sqrt{-3}]Z[−3​] that assumed a unique-factorization property later supplied by others. Dirichlet and Legendre settled n=5n = 5n=5 between 1825 and 1830, Dirichlet added n=14n = 14n=14 in 1832, and Lamé published n=7n = 7n=7 in 1839. In 1847 Kummer made the decisive structural step: introducing ideal numbers to repair the failure of unique factorization in Z[ζp]\mathbb{Z}[\zeta_p]Z[ζp​], he proved the theorem for every regular prime exponent — those ppp not dividing the class number of Q(ζp)\mathbb{Q}(\zeta_p)Q(ζp​), a condition he characterized by divisibility of Bernoulli numerators. Irregular primes were left open, and the elementary programme stalled there for over a century.

The route that closed the problem came from a different direction. The modularity conjecture of Taniyama (1955), refined by Shimura and given conceptual support by Weil (1967), predicted that every elliptic curve over Q\mathbb{Q}Q arises from a modular form. Hellegouarch and then Frey (1985) attached to a hypothetical solution ap+bp=cpa^p + b^p = c^pap+bp=cp the curve y2=x(x−ap)(x+bp)y^2 = x(x - a^p)(x + b^p)y2=x(x−ap)(x+bp), whose ramification behaviour is too tame for a curve of its conductor. Serre made this precise as the epsilon conjecture, and Ribet proved it in 1986: modularity of semistable elliptic curves over Q\mathbb{Q}Q implies Fermat's Last Theorem. Wiles proved that modularity statement, with the key Hecke-algebra input supplied jointly with Taylor, in two 1995 Annals of Mathematics papers. Breuil, Conrad, Diamond and Taylor removed the semistability hypothesis in 2001.

Setting

Fix a natural number nnn and natural numbers a,b,ca, b, ca,b,c. A Fermat triple of exponent nnn is a triple (a,b,c)(a,b,c)(a,b,c) of strictly positive naturals with

an+bn=cn.a^n + b^n = c^n.an+bn=cn.

For n=1n = 1n=1 such triples are everywhere, and for n=2n = 2n=2 they are the Pythagorean triples, parametrized by (k(u2−v2), 2kuv, k(u2+v2))(k(u^2-v^2),\, 2kuv,\, k(u^2+v^2))(k(u2−v2),2kuv,k(u2+v2)). The assertion at issue is that from n=3n = 3n=3 upward there are none at all: the hypothesis 3≤n3 \le n3≤n and the positivity hypotheses 0<a0 < a0<a, 0<b0 < b0<b, 0<c0 < c0<c are exactly what is needed, since n≤2n \le 2n≤2 and the degenerate triples with a zero entry both produce solutions.

Two standard reductions organize any attack. First, if (a,b,c)(a,b,c)(a,b,c) is a triple of exponent nnn and m∣nm \mid nm∣n, then (an/m,bn/m,cn/m)(a^{n/m}, b^{n/m}, c^{n/m})(an/m,bn/m,cn/m) is a triple of exponent mmm; since every n≥3n \ge 3n≥3 is divisible by 444 or by an odd prime p≥3p \ge 3p≥3, the general statement follows from the cases n=4n = 4n=4 and n=pn = pn=p an odd prime. Second, for a prime exponent ppp one may assume gcd⁡(a,b,c)=1\gcd(a,b,c) = 1gcd(a,b,c)=1, and the classical literature then splits on whether p∤abcp \nmid abcp∤abc (case I) or p∣abcp \mid abcp∣abc (case II).

Formalization targets

Goal

∀ n≥3, ∀ a,b,c∈N>0,an+bn≠cn.\forall\, n \ge 3,\ \forall\, a, b, c \in \mathbb{N}_{>0},\qquad a^n + b^n \ne c^n.∀n≥3, ∀a,b,c∈N>0​,an+bn=cn.

This is the mission's single goal, referenced as the published platform theorem fermat_last_theorem. It fixes no exponent, no congruence class, and no auxiliary structure: any complete argument, classical or modern, discharges it.

Significance

The result itself. As a Diophantine statement, Fermat's Last Theorem is a closed case; its value now lies in what proving it required. The proof established the modularity of semistable elliptic curves over Q\mathbb{Q}Q, made modularity lifting ("R=TR = TR=T") a standard technique, and turned Galois deformation theory into a working tool. Those consequences — not the non-existence of Fermat triples — are what the surrounding mathematics uses daily; the Fermat statement is the compact certificate that the machinery works.

Formalizing it. The theorem is proved but not formally verified end to end, and that gap is the mission. Machine-checked proofs exist for the small exponents and for Kummer's regular-prime case: Mathlib carries the general statement together with the cases n=3n = 3n=3 and n=4n = 4n=4, and the flt-regular project verified the regular-prime theorem in Lean 4. No formal proof of the full theorem exists in any system; Buzzard's ongoing FLT project at Imperial College is building one by reducing the statement to results known to experts by the late 1980s. Contributions here need not follow that route — a complete Lean proof of any single case not yet covered, or of any structural ingredient (level lowering, modularity lifting, the properties of the Frey curve), is a genuine advance, and the platform's sketch mechanism is the natural way to record such a reduction.

Difficulty

The naive attacks fail for identifiable reasons, and a solver should rule them out before spending time on them. Congruence and descent arguments of the kind that settle n=3,4,5,7n = 3, 4, 5, 7n=3,4,5,7 depend on the arithmetic of a specific small ring and do not generalize: the descent step needs unique factorization in Z[ζn]\mathbb{Z}[\zeta_n]Z[ζn​] or a substitute, and unique factorization fails there for all but finitely many nnn. Kummer's ideal-theoretic repair recovers the argument exactly when ppp is regular, and no argument in that family is known to handle irregular primes; the irregular primes are moreover infinite in number, so no finite computation closes them. Parity, size, and modular-arithmetic obstructions have all been shown insufficient, since the equation has solutions modulo every prime power for suitable triples. The only known complete proof passes through modularity, which means the formal development needs elliptic curves over Q\mathbb{Q}Q, their Galois representations, modular forms and Hecke algebras, level-lowering, and a modularity lifting theorem — none of which is a shortcut around the difficulty, all of which is where the difficulty actually lives.

Formalization scope

The target is stated over N\mathbb{N}N, so no truncated subtraction enters the statement and no sign analysis is hidden in it; the equivalent formulations over Z\mathbb{Z}Z and over Q\mathbb{Q}Q follow by clearing denominators and moving terms, and a solver who prefers to work over Z\mathbb{Z}Z must supply that bridge. Exponentiation is Monoid.npow on N\mathbb{N}N, and 00=10^0 = 100=1 plays no role because 3≤n3 \le n3≤n. The hypotheses 0<a0 < a0<a, 0<b0 < b0<b, 0<c0 < c0<c are all load-bearing and none of them is vacuous, so the statement admits no trivializing reading: dropping any one makes it false, and every hypothesis is satisfiable, so the conclusion cannot be reached by contradiction from the assumptions alone. Mathlib does not contain Fermat's Last Theorem, so the goal cannot be discharged by citing a library lemma.

A complete development will want: the reduction from general nnn to n=4n = 4n=4 and odd prime exponents; the coprimality normalization; cyclotomic fields, class groups, and the regularity criterion for the Kummer line of attack; and, for the modular route, Weierstrass curves over Q\mathbb{Q}Q, conductors and minimal models, Galois representations attached to torsion points, modular forms and Hecke operators, and the level-lowering and modularity-lifting statements. Most of that infrastructure is reusable well beyond this mission and is welcome as separate published theorems and definitions. Partial contributions are welcome in either style: a direct proof of a single exponent, or a sketch that reduces the goal to child lemmas with statements that stand on their own.

Selected references

  • Andrew Wiles, Modular elliptic curves and Fermat's Last Theorem, Annals of Mathematics 141 (1995), 443–551. https://doi.org/10.2307/2118559
  • Richard Taylor and Andrew Wiles, Ring-theoretic properties of certain Hecke algebras, Annals of Mathematics 141 (1995), 553–572. https://doi.org/10.2307/2118560
  • Kenneth A. Ribet, On modular representations of Gal(Q‾/Q)\mathrm{Gal}(\overline{\mathbb{Q}}/\mathbb{Q})Gal(Q​/Q) arising from modular forms, Inventiones Mathematicae 100 (1990), 431–476. https://doi.org/10.1007/BF01231195
  • Christophe Breuil, Brian Conrad, Fred Diamond and Richard Taylor, On the modularity of elliptic curves over Q\mathbb{Q}Q: wild 3-adic exercises, Journal of the American Mathematical Society 14 (2001), 843–939. https://doi.org/10.1090/S0894-0347-01-00370-8
  • Ernst Eduard Kummer, Beweis des Fermat'schen Satzes der Unmöglichkeit von xλ+yλ=zλx^\lambda + y^\lambda = z^\lambdaxλ+yλ=zλ für eine unendliche Anzahl Primzahlen λ\lambdaλ, Monatsberichte der Königlich Preußischen Akademie der Wissenschaften zu Berlin (1847), 132–139.
  • Gerhard Frey, Links between stable elliptic curves and certain Diophantine equations, Annales Universitatis Saraviensis 1 (1986), 1–40.
  • Riccardo Brasca et al., Fermat's Last Theorem for regular primes (flt-regular), Lean 4 formalization. https://github.com/leanprover-community/flt-regular
  • Kevin Buzzard et al., The Fermat's Last Theorem project, Lean 4 formalization in progress. https://imperialcollegelondon.github.io/FLT/
31k thms2 active usersReviewed
🏆Completed
Captain: wenxinzhang

Transpose symmetry for injectivity over semiringsOpen Problem

Motivation

For a square matrix A over a commutative semiring, subtraction and determinant arguments are generally unavailable. The source asked whether injectivity of the map x maps to Ax is nevertheless invariant under transposition. The case n=2 was known, with n=3 presented as the first open size.

This mission turns CUHK-Shenzhen AI Math Problem 20, Transpose symmetry for injectivity over semirings, into an auditable Lean campaign. The objective is not merely to transcribe notation: it is to expose the mathematical model, the capstone, and a smaller attack surface as separate artifacts that other formalizers can inspect and reuse.

Setting

The capstone states transpose symmetry of function injectivity for every finite matrix size and every unital commutative semiring. In the current Prove2Me snapshot both the general theorem and the dimension-two supporting theorem are published and marked Proved. This mission concerns a resolved result, not an open general declaration. The general literature result is due to Gu, Qi and Cheng, Transpose Symmetry of Injectivity over Commutative Semirings (2026).

Significance

The result establishes transpose symmetry without additive inverses or cancellation. The current formal artifacts already record the finite-dimensional statement over arbitrary unital commutative semirings; users should inspect those exact statements and proof records before selecting extensions. The literature status and formal proof status are both resolved for the linked targets.

Difficulty

Over rings, adjugates, determinants, or duality make transpose symmetry routine. Over semirings, equality of alternating sums cannot be rearranged by subtraction, additive cancellation need not hold, and linear duals do not reflect injectivity. The successful proof must encode parity-separated minors and use injectivity itself to cancel vectors rather than scalars.

Suggested attack route

This mission is historical and solved in the literature. A Prove2Me solution can reconstruct the paper's proof with independently authored Lean code: isolate the even/odd minor algebra, verify the top separation identity, descend through matrix sizes, and derive coefficient equality. Generalizations to nonunital semirings and the parallel surjectivity theorem are natural follow-up nodes, provided their exact hypotheses match the paper.

Formalization scope

The capstone quantifies over every unital commutative semiring and every finite square size, using actual function injectivity of Mathlib mulVec, not merely a trivial kernel. The extra sizes zero, one and two do not weaken the original size-at-least-three question. Both linked theorem items are now Proved on Prove2Me. This update does not copy or redistribute any external repository source, and does not change the published Lean statements or proof identities.

Milestones

The linked dimension-two theorem is Proved. The general goal is also Proved. Any further generalization, such as a nonunital version or a surjectivity statement, would be a separately stated theorem rather than an unfinished part of either existing item.

Timeline and literature status

The source problem was added July 4, 2026. Sixuan Gu, Wei Qi, and Yaoyu Cheng posted a general proof on August 17, 2026, together with a Lean formalization. The mission records that rapid resolution rather than presenting the theorem as currently unknown.

Acceptance criteria

A contribution may prove the displayed theorem or refute it by constructing data satisfying every Lean hypothesis while negating the conclusion. Informal changes of model do not count: any proposed correction must be submitted as a separately reviewed statement with an explanation of which source ambiguity or false implication it repairs. Definitions must remain computational or mathematically constrained; fields that simply assume the desired conclusion are not acceptable. Every proof must compile against the mission's pinned Mathlib revision, use no sorry, and expose a top-level theorem solution when submitted to Prove2Me.

The main theorem is intentionally separated from a smaller milestone. Contributors should preserve that dependency order, publish reusable lemmas rather than monolithic tactics, and report whether a lemma is analytic, algebraic, combinatorial, or infrastructure-only. Numerical evidence, external computer algebra, and exhaustive search are welcome for discovery, but a final certificate must be replayable by Lean. If an external result is invoked, its hypotheses must be represented in the formal statement or proved in the dependency tree.

Formal verification policy

The files were built locally with Lean 4.30.0 and Mathlib revision c5ea00351c28e24afc9f0f84379aa41082b1188f, the supported Prove2Me environment at drafting time. The mission definition file is ordered before all theorem files, and each theorem imports exactly that public definition module or Mathlib. Independent blind read-backs accompany the draft items so reviewers can compare what the Lean code literally says with this mathematical description. Human confirmation remains required before the public proposal can be submitted for moderation.

Selected references

  • Original problem
  • Resolved 2026 paper
  • Lean proof repository
4 thms2 active usersReviewed
🏆Completed
Captain: tianyipeng

Hefferon Linear Algebra V: Jordan Canonical FormTextbook

Chapter Five of Jim Hefferon's Linear Algebra is one long search for a canonical form for matrix similarity, and Theorem IV.2.8 ends it: over the complex numbers every square matrix is similar to a matrix in Jordan form. That is the goal theorem of this mission and the capstone of the book. Mathlib carries the generalized eigenspace decomposition but has no Jordan canonical form, so this is a genuine target rather than a wrapper around an existing lemma; the Jordan block and the block-diagonal Jordan matrix are supplied as a mission definition. The milestones are the three results the proof is assembled from: diagonalizability as the existence of an eigenbasis, Cayley-Hamilton, and the canonical form of a nilpotent map, which is Jordan form applied to t−λt - \lambdat−λ on each generalized eigenspace.

10 thms2 active usersReviewed
🏆Completed
Captain: tianyipeng

Hefferon Linear Algebra III: Maps, Representation and Change of BasisTextbook

Chapter Three of Jim Hefferon's Linear Algebra is about maps between spaces and how matrices represent them. The goal theorem is where the chapter arrives: two matrices represent the same transformation with respect to different bases exactly when they are similar. That is the hinge of the whole book — it converts the search for a canonical form under similarity into the search for the basis in which a map looks simplest, which is the programme of Chapter Five. The milestones are the chapter's landmarks: dimension classifies spaces up to isomorphism, rank plus nullity recovers the dimension of the domain, matrix multiplication is exactly composition, and Gram-Schmidt splits a space into a subspace and its orthogonal complement.

4 thms2 active usersReviewed
🏆Completed
Captain: tianyipeng

Hefferon Linear Algebra II: Dimension and RankTextbook

Chapter Two of Jim Hefferon's Linear Algebra builds the vector space vocabulary — spanning, independence, basis — and turns it into a theory of dimension. The goal theorem is the chapter's most striking result, that the row rank and the column rank of a matrix always agree, which is the bridge between the matrix-of-numbers view of Chapter One and the vector space view of Chapter Two. The milestones are the two pillars it stands on: that any two bases of a space have the same size, so dimension is well defined at all, and that any linearly independent set can be extended to a basis.

1 thm2 active usersReviewed
🏆Completed
Operations Research·Captain: tianyipeng

Hefferon Linear Algebra I: Gauss's Method and the Solution SetTextbook

Chapter One of Jim Hefferon's Linear Algebra develops Gauss's method and asks what row reduction actually preserves. The answer arrives as the Linear Combination Lemma: row operations change the rows of a matrix but never the subspace those rows span, and that invariant is complete. The goal theorem is that completeness — two matrices are row equivalent exactly when they have the same row space — which is what makes reduced echelon form a genuine canonical form. The milestones are the two results the chapter builds on the way: that row operations leave a system's solution set alone, and that a solution set is always one particular solution translated by the solutions of the associated homogeneous system.

3 thms2 active usersReviewed
🏆Completed
Captain: Community (Bot)

The Jacobian ConjectureOpen Problem

First raised for two variables by Ludwig Kraus in 1884 and stated in full generality by Ott-Heinrich Keller in 1939, the Jacobian conjecture asks something that sounds almost like freshman calculus: if a polynomial map from complex n-space to itself has a Jacobian determinant equal to a nonzero constant, must it be invertible by another polynomial map? That constant-Jacobian condition is precisely the algebraic shadow of the inverse function theorem, yet producing a polynomial — not merely analytic — inverse has resisted every attack for over eighty years. Shreeram Abhyankar championed the problem because it can be stated 'using little beyond a knowledge of calculus,' and Stephen Smale placed it sixteenth on his 1998 list of problems for the new century. Its notoriety is sharpened by a graveyard of published 'proofs' that later collapsed. Deep reductions exist — Bass, Connell, and Wright showed in 1982 that the general case reduces to maps of degree three — and the problem is equivalent, through work of Tsuchimoto, Belov-Kanel, and Kontsevich, to the Dixmier conjecture on the Weyl algebra. A formal statement anchors this famously slippery problem so that progress can be verified rather than merely believed.

1 thm2 active usersReviewed
CombinatoricsDiscrete GeometryInformation Theory·Captain: mikedeng1

A Large Family of Maximum Scattered Linear Sets of PG(1, q^n) and Their Associated MRD Codes 2: For Odd q = p^r and t > 4, a Lower Bound on the Number of PΓL-Classes of the Linear Sets L_{h,t}Research Paper

Motivation

A linear set of the projective line PG(1,qn)\mathrm{PG}(1, q^n)PG(1,qn) is the set of points ⟨u⟩Fqn\langle u\rangle_{\mathbb F_{q^n}}⟨u⟩Fqn​​ spanned by the nonzero vectors uuu of an Fq\mathbb F_qFq​-subspace U⊆Fqn2U \subseteq \mathbb F_{q^n}^2U⊆Fqn2​. The extremal ones, the maximum scattered linear sets, are given by scattered polynomials fff over Fqn\mathbb F_{q^n}Fqn​, and each such fff also gives an Fqn\mathbb F_{q^n}Fqn​-linear maximum rank-distance (MRD) code Cf={ax+bf(x):a,b∈Fqn}\mathcal C_f = \{ax + bf(x) : a, b \in \mathbb F_{q^n}\}Cf​={ax+bf(x):a,b∈Fqn​} of minimum distance n−1n-1n−1 (Sheekey, Adv. Math. Commun. 10, 2016). Rank-distance codes are used in network coding, and linear sets appear in the study of semifields, blocking sets and two-intersection sets.

Linear sets and codes are classified up to equivalence: two linear sets are the same object if a collineation of the line, an element of PΓL(2,qn)\mathrm{P\Gamma L}(2, q^n)PΓL(2,qn), maps one onto the other. The question is therefore not only whether new scattered polynomials exist but how many inequivalent linear sets they produce.

  • 2000–2001. The monomials xqsx^{q^s}xqs, gcd⁡(s,n)=1\gcd(s,n) = 1gcd(s,n)=1 (Blokhuis–Lavrauw 2000), all give a single linear set of PG(1,qn)\mathrm{PG}(1,q^n)PG(1,qn) (pseudoregulus type); the binomials δxqs+xqn−s\delta x^{q^s} + x^{q^{n-s}}δxqs+xqn−s (Lunardon–Polverino 2001) give at most φ(n)\varphi(n)φ(n) times a function of qqq classes.
  • 2018. Csajbók, Marino and Polverino (J. Combin. Theory Ser. A 157, 2018) develop the equivalence theory of linear sets of PG(1,qn)\mathrm{PG}(1, q^n)PG(1,qn), including coefficient identities that two qqq-polynomials defining the same linear set must satisfy.
  • 2021. Longobardi and Zanella (J. Algebraic Combin. 2021) give a third family, again with at most φ(n)/2\varphi(n)/2φ(n)/2 classes.
  • 2021. Longobardi, Marino, Trombetti and Zhou (arXiv:2102.08287v3) construct the family ψh,t\psi_{h,t}ψh,t​ (Theorem 3.1, the companion mission) and show (Theorem 5.1) that it contains a number of PΓL\mathrm{P\Gamma L}PΓL-classes growing exponentially in nnn. This mission formalizes that count.

Setting

Let ppp be an odd prime, r≥1r \ge 1r≥1, q=prq = p^rq=pr, t≥1t \ge 1t≥1, n=2tn = 2tn=2t, and let F=FqnF = \mathbb F_{q^n}F=Fqn​ be the finite field of order q2tq^{2t}q2t. Its subfield Fq\mathbb F_qFq​ is {c:cq=c}\{c : c^q = c\}{c:cq=c}.

A qqq-polynomial is a map f(x)=∑i=0n−1αixqif(x) = \sum_{i=0}^{n-1} \alpha_i x^{q^i}f(x)=∑i=0n−1​αi​xqi with αi∈F\alpha_i \in Fαi​∈F (qpoly). It is scattered (IsScatteredPoly) if for all z,y∈F∗z, y \in F^*z,y∈F∗, f(z)/z=f(y)/yf(z)/z = f(y)/yf(z)/z=f(y)/y forces z=cyz = cyz=cy with c∈Fqc \in \mathbb F_qc∈Fq​.

The graph of fff is Uf={(x,f(x)):x∈F}⊆F2U_f = \{(x, f(x)) : x \in F\} \subseteq F^2Uf​={(x,f(x)):x∈F}⊆F2 (graph). A point ⟨v⟩Fqn\langle v \rangle_{\mathbb F_{q^n}}⟨v⟩Fqn​​ of PG(1,qn)\mathrm{PG}(1, q^n)PG(1,qn) is the set of all FFF-multiples of a nonzero v∈F2v \in F^2v∈F2 (point), and the linear set of fff is the point set

Lf={⟨(x,f(x))⟩Fqn:x∈F∗}(linSet).L_f = \{\langle (x, f(x))\rangle_{\mathbb F_{q^n}} : x \in F^*\} \quad (\texttt{linSet}).Lf​={⟨(x,f(x))⟩Fqn​​:x∈F∗}(linSet).

For a field automorphism σ\sigmaσ and an invertible 2×22 \times 22×2 matrix AAA over FFF, the map v↦Avσv \mapsto A v^\sigmav↦Avσ (σ\sigmaσ acting on coordinates, act) is an element of ΓL(2,qn)\Gamma\mathrm L(2, q^n)ΓL(2,qn); with σ=id\sigma = \mathrm{id}σ=id it is in GL(2,qn)\mathrm{GL}(2, q^n)GL(2,qn). Two subsets U,W⊆F2U, W \subseteq F^2U,W⊆F2 are GL- or ΓL-equivalent (GLEquiv, GammaLEquiv) if such a map sends UUU onto WWW. Two point sets are PGL- or PΓL-equivalent (PGLEquiv, PGammaLEquiv) if the induced map on points, P↦{Avσ:v∈P}P \mapsto \{A v^\sigma : v \in P\}P↦{Avσ:v∈P}, sends one onto the other.

The family. For h∈Fh \in Fh∈F,

ψh,t(x)=xq+xqt−1−h1−qt+1xqt+1+h1−q2t−1xq2t−1(psi),\psi_{h,t}(x) = x^q + x^{q^{t-1}} - h^{1-q^{t+1}} x^{q^{t+1}} + h^{1-q^{2t-1}} x^{q^{2t-1}} \quad (\texttt{psi}),ψh,t​(x)=xq+xqt−1−h1−qt+1xqt+1+h1−q2t−1xq2t−1(psi),

H={h∈F:hqt+1=−1}H = \{h \in F : h^{q^t+1} = -1\}H={h∈F:hqt+1=−1} (hSet), Uh=Uψh,tU_h = U_{\psi_{h,t}}Uh​=Uψh,t​​ and Lh,t=Lψh,tL_{h,t} = L_{\psi_{h,t}}Lh,t​=Lψh,t​​. For t≥3t \ge 3t≥3 and h∈H∖Fqth \in H \setminus \mathbb F_{q^t}h∈H∖Fqt​, ψh,t\psi_{h,t}ψh,t​ is scattered and Lh,tL_{h,t}Lh,t​ is a maximum scattered linear set (Theorem 3.1).

Formalization targets

Goal: Theorem 5.1

For t>4t > 4t>4, the number MMM of PΓL(2,qn)\mathrm{P\Gamma L}(2,q^n)PΓL(2,qn)-classes met by the sets Lh,tL_{h,t}Lh,t​, h∈Hh \in Hh∈H, satisfies

M≥{⌊qt+18rt⌋,t≢2(mod4),⌊qt+14rt(q2+1)⌋,t≡2(mod4).M \ge \begin{cases} \left\lfloor \dfrac{q^t+1}{8rt} \right\rfloor, & t \not\equiv 2 \pmod 4,\\[1.5ex] \left\lfloor \dfrac{q^t+1}{4rt(q^2+1)} \right\rfloor, & t \equiv 2 \pmod 4.\end{cases}M≥⎩⎨⎧​⌊8rtqt+1​⌋,⌊4rt(q2+1)qt+1​⌋,​t≡2(mod4),t≡2(mod4).​

It is stated as: some S⊆HS \subseteq HS⊆H of at least that size has pairwise PΓL\mathrm{P\Gamma L}PΓL-inequivalent Lh,tL_{h,t}Lh,t​. The goal fixes the paper's constants; the proof on p. 26 in fact counts classes exactly in terms of class sizes, so a sharper bound is a natural follow-up.

Milestones

  1. Proposition 3.2 (p. 7): h∈H⇒hq2+1≠1h \in H \Rightarrow h^{q^2+1} \ne 1h∈H⇒hq2+1=1 and hqt−2≠−hh^{q^{t-2}} \ne -hhqt−2=−h.
  2. ∣H∣=qt+1|H| = q^t + 1∣H∣=qt+1 (p. 26).
  3. Display (29) (p. 16): for h,k∈Hh, k \in Hh,k∈H, Uh∼GLUkU_h \sim_{\mathrm{GL}} U_kUh​∼GL​Uk​ iff h=±kh = \pm kh=±k (t≢2t \not\equiv 2t≡2) or h=ℓkh = \ell kh=ℓk with ℓq2+1=1\ell^{q^2+1} = 1ℓq2+1=1 (t≡2 mod 4t \equiv 2 \bmod 4t≡2mod4).
  4. Theorem 4.2 (a)–(b) (p. 16), in the UhU_hUh​ form: Uh∼ΓLUkU_h \sim_{\Gamma\mathrm L} U_kUh​∼ΓL​Uk​ iff h=±kρh = \pm k^\rhoh=±kρ (resp. ℓkρ\ell k^\rhoℓkρ) for some ρ∈Aut(Fqn)\rho \in \mathrm{Aut}(\mathbb F_{q^n})ρ∈Aut(Fqn​).
  5. Proof of Corollary 4.3 (p. 18): the GL-class of UhU_hUh​ in the family has ξh=2\xi_h = 2ξh​=2 (resp. q2+1q^2+1q2+1) members, and its ΓL-class at most nrξhnr\xi_hnrξh​.
  6. Lemma 2.2 (p. 5, from Csajbók–Marino–Polverino): Lf=LgL_f = L_gLf​=Lg​ forces α0=β0\alpha_0 = \beta_0α0​=β0​ and two families of coefficient identities.
  7. Display (37) (pp. 20–21): PGL-equivalence of Lf,LgL_f, L_gLf​,Lg​ as an equality of sets of quotients.
  8. The case b=0b = 0b=0 of (37) (p. 21): c=0c = 0c=0.
  9. Lemma 5.2 (p. 21): the case b=0b = 0b=0 for ψh,t,ψk,t\psi_{h,t}, \psi_{k,t}ψh,t​,ψk,t​ gives (h/k)q2+1=1(h/k)^{q^2+1} = 1(h/k)q2+1=1 and Uh∼ΓLUkU_h \sim_{\Gamma\mathrm L} U_kUh​∼ΓL​Uk​.
  10. Lemma 5.3 (p. 22): the case b=1b = 1b=1, with its three conclusions.

Significance

The result. Theorem 5.1 shows that maximum scattered linear sets of PG(1,qn)\mathrm{PG}(1, q^n)PG(1,qn), and hence Fqn\mathbb F_{q^n}Fqn​-linear MRD codes, exist in numbers exponential in nnn up to equivalence, whereas each previously known infinite family yields at most φ(n)\varphi(n)φ(n) times a function of qqq classes (Table 1, p. 3). Remark 5.4 draws the consequence that the family is new. Its intermediate results, the classification of the GL\mathrm{GL}GL- and ΓL\Gamma\mathrm LΓL-equivalences between the UhU_hUh​ (Theorem 4.2) and the reduction of PGL\mathrm{PGL}PGL-equivalence to sets of quotients, are the standard tools for any later classification of this family.

Formalizing it. The theorem has a complete published proof; none of it is machine-checked. The platform has no action of GL(2,qn)\mathrm{GL}(2, q^n)GL(2,qn) or ΓL(2,qn)\Gamma\mathrm L(2, q^n)ΓL(2,qn) on the projective line, no linear sets of PG(1,qn)\mathrm{PG}(1,q^n)PG(1,qn) as point sets, and no coefficient identities for qqq-polynomials defining the same linear set. The mission produces these, then the class counts. Lemma 2.2 is a result of an earlier paper (Csajbók–Marino–Polverino 2018) cited without proof, so formalizing it means formalizing part of that paper too.

Difficulty

Equality of two linear sets is equality of sets of points, which says nothing directly about the polynomials: different qqq-polynomials can define the same linear set (all xqsx^{q^s}xqs with gcd⁡(s,n)=1\gcd(s,n)=1gcd(s,n)=1 do). The obvious idea, that PΓL\mathrm{P\Gamma L}PΓL-equivalent linear sets come from ΓL\Gamma\mathrm LΓL-equivalent subspaces UhU_hUh​, fails in general (p. 3), so the count cannot be read off Theorem 4.2. The step that needs the restriction t>4t > 4t>4 is the comparison of coefficients in the qqq-polynomial identities, which for t=3,4t = 3, 4t=3,4 is open (Remark 5.5). A second difficulty is bookkeeping: the exponents qt±1q^{t\pm1}qt±1, q2t−1q^{2t-1}q2t−1, the negative powers of hhh and the case split on t mod 4t \bmod 4tmod4 must all be tracked through every identity.

Formalization scope

  • Field. FFF is a finite field with CharP F p, p prime, Odd p ("qqq odd"), q = p ^ r with 0 < r, and Fintype.card F = q ^ (2 * t). rrr is the exponent of q=prq = p^rq=pr, as in Theorem 5.1, so ∣Aut(Fqn)∣=rn|\mathrm{Aut}(\mathbb F_{q^n})| = rn∣Aut(Fqn​)∣=rn. Lemma 2.2, (37) and the b=0b = 0b=0 step are stated for general n≥1n \ge 1n≥1 and Fintype.card F = q ^ n, without "qqq odd", as printed.
  • Exponents. xqix^{q^i}xqi is x ^ q ^ i; negative powers of hhh are field quotients (h / h ^ q ^ (t+1) for h1−qt+1h^{1-q^{t+1}}h1−qt+1), exact since h≠0h \ne 0h=0 on HHH. Natural-number subtractions t−1t-1t−1, 2t−12t-12t−1, 3t−23t-23t−2, n−kn-kn−k, qi−1q^i - 1qi−1 are exact in the stated ranges.
  • Geometry. The plane is Fin 2 → F; points are sets of scalar multiples; linear sets are sets of points. Equivalences are stated as images of sets under v↦Avσv \mapsto A v^\sigmav↦Avσ with det⁡A\det AdetA a unit and σ:F≃F\sigma : F \simeq Fσ:F≃F a ring automorphism.
  • Pinned readings.
    1. "Scattered" is the p. 2 quotient definition with Fq={c:cq=c}\mathbb F_q = \{c : c^q = c\}Fq​={c:cq=c}.
    2. Proposition 3.2's hqt−2h^{q^{t-2}}hqt−2 is read as hq3t−2h^{q^{3t-2}}hq3t−2 (equal for t≥2t \ge 2t≥2), and "qqq odd" is added.
    3. Theorem 4.2 (a)–(b), stated for codes Ch,t\mathcal C_{h,t}Ch,t​, is formalized as the ΓL\Gamma\mathrm LΓL-equivalence of Uh,UkU_h, U_kUh​,Uk​, which the proof establishes and which is the code equivalence by Theorem 2.1 (from Sheekey 2016). The automorphism-group sentence is omitted.
    4. Lemma 5.3's hypothesis "(41) holds" is read in the setting of p. 21: b=1b = 1b=1, cˉ=c−da≠0\bar c = c - da \ne 0cˉ=c−da=0, gˉ=∑γiyqi\bar g = \sum \gamma_i y^{q^i}gˉ​=∑γi​yqi inverse to x↦ax+g(x)x \mapsto ax + g(x)x↦ax+g(x) (47), and d+cˉγ0=0d + \bar c\gamma_0 = 0d+cˉγ0​=0 (40).
    5. In (37), ax+bg(x)≠0ax + bg(x) \ne 0ax+bg(x)=0 for x≠0x \ne 0x=0 is part of the condition (stated on p. 21 for b=1b = 1b=1).
    6. "The total number MMM of inequivalent Lh,tL_{h,t}Lh,t​" is the number of classes met by {Lh,t:h∈H}\{L_{h,t} : h \in H\}{Lh,t​:h∈H}, formalized through a pairwise-inequivalent subset of HHH. HHH is not restricted to h∉Fqth \notin \mathbb F_{q^t}h∈/Fqt​, as in the count ∣H∣=qt+1|H| = q^t+1∣H∣=qt+1 of p. 26; "maximum scattered" is descriptive.
  • Trivializing formalizations ruled out. Equivalence is stated on point sets, never on quotient sets {f(x)/x}\{f(x)/x\}{f(x)/x}, where Lean's y/0=0y/0 = 0y/0=0 could merge inequivalent sets; the goal requires pairwise inequivalence, not distinctness of the parameters hhh (note ψ−h,t=ψh,t\psi_{-h,t} = \psi_{h,t}ψ−h,t​=ψh,t​); and the hypotheses are satisfiable, with bound ⌊244/40⌋=6\lfloor 244/40 \rfloor = 6⌊244/40⌋=6 at q=3q = 3q=3, t=5t = 5t=5.
  • Citation basis. All indices and pages refer to arXiv:2102.08287v3 (printed page = PDF page). The Combinatorica version is not used.
  • Welcome contributions. The ΓL(2,qn)\Gamma\mathrm L(2,q^n)ΓL(2,qn) action on F2F^2F2 and on point sets, the cardinality of {h:hqt+1=−1}\{h : h^{q^t+1} = -1\}{h:hqt+1=−1}, and Lemma 2.2 are reusable beyond this mission. Proofs of any milestone, and of Theorem 3.1 in the companion mission, are welcome.

Selected references

  • G. Longobardi, G. Marino, R. Trombetti, Y. Zhou, A large family of maximum scattered linear sets of PG(1, q^n) and their associated MRD codes, arXiv:2102.08287v3, 2021 (Combinatorica 43, 2023). https://arxiv.org/abs/2102.08287v3
  • B. Csajbók, G. Marino, O. Polverino, Classes and equivalence of linear sets in PG(1, q^n), J. Combin. Theory Ser. A 157, 402–426, 2018.
  • J. Sheekey, A new family of linear maximum rank distance codes, Adv. Math. Commun. 10(3), 475–488, 2016.
  • G. Longobardi, C. Zanella, Linear sets and MRD-codes arising from a class of scattered linearized polynomials, J. Algebraic Combin., 2021. https://doi.org/10.1007/s10801-020-01011-9
  • A. Blokhuis, M. Lavrauw, Scattered spaces with respect to a spread in PG(n, q), Geometriae Dedicata 81(1), 231–243, 2000.
  • G. Lunardon, O. Polverino, Blocking sets and derivable partial spreads, J. Algebraic Combin. 14(1), 49–56, 2001.
  • B. Csajbók, C. Zanella, On the equivalence of linear sets, Des. Codes Cryptogr. 81(2), 269–281, 2016.
13 thms1 active userReviewed
CombinatoricsDiscrete Geometry·Captain: mikedeng1

A Large Family of Maximum Scattered Linear Sets of PG(1, q^n) and Their Associated MRD Codes 1: For q Odd, t ≥ 3, h ∉ 𝔽_{q^t} and h^(q^t+1) = −1, ψ_{h,t} Is Scattered over 𝔽_{q^{2t}}Research Paper

Motivation

A linear set of a projective space over a finite field is the set of points spanned by the nonzero vectors of a subspace over a subfield. They have been used to construct and characterize semifields, rank-metric codes, translation spreads, translation ovoids, two-intersection sets and the blocking sets for which Lunardon introduced them (Polverino 2010; Lavrauw–Van de Voorde 2015). On the projective line PG(1,qn)\mathrm{PG}(1, q^n)PG(1,qn) the extremal objects, the maximum scattered linear sets, are equivalent to scattered polynomials over Fqn\mathbb F_{q^n}Fqn​, and each scattered polynomial fff gives an Fq\mathbb F_qFq​-linear maximum rank-distance (MRD) code Cf={ax+bf(x):a,b∈Fqn}\mathcal C_f = \{ax + bf(x) : a, b \in \mathbb F_{q^n}\}Cf​={ax+bf(x):a,b∈Fqn​} of minimum distance n−1n-1n−1 (Sheekey 2016). Rank-distance codes are studied in network coding theory (p. 2).

Scattered polynomials are scarce. Before this paper, only three families were known for infinitely many nnn:

  • 2000. The monomials xqsx^{q^s}xqs with gcd⁡(s,n)=1\gcd(s, n) = 1gcd(s,n)=1 (pseudoregulus type). Blokhuis and Lavrauw (2000) proved that a scattered linear set of PG(1,qn)\mathrm{PG}(1, q^n)PG(1,qn) has rank at most nnn.
  • 2001, 2016. The binomials δxqs+xqn−s\delta x^{q^s} + x^{q^{n-s}}δxqs+xqn−s with Nqn/q(δ)∉{0,1}N_{q^n/q}(\delta) \notin \{0, 1\}Nqn/q​(δ)∈/{0,1} (Lunardon–Polverino 2001, Sheekey 2016).
  • 2021. For qqq odd and n=2tn = 2tn=2t, the polynomial 12(xq+xqt−1−xqt+1+xq2t−1)\tfrac12(x^q + x^{q^{t-1}} - x^{q^{t+1}} + x^{q^{2t-1}})21​(xq+xqt−1−xqt+1+xq2t−1) and its variants (Longobardi–Zanella 2021).
  • 2018–2020. Further families exist only for n∈{6,8}n \in \{6, 8\}n∈{6,8} (Csajbók–Marino–Polverino–Zanella 2018; Csajbók–Marino–Zullo 2018; Bartoli–Zanella–Zullo 2020). Asymptotic classification results suggest that scattered polynomials are rare (Bartoli–Zhou 2018).

Longobardi, Marino, Trombetti and Zhou construct a fourth family, defined for every even n≥6n \ge 6n≥6 and odd qqq. This mission formalizes that construction, Theorem 3.1 of the paper.

Setting

Let ppp be an odd prime, r≥1r \ge 1r≥1, q=prq = p^rq=pr, t≥3t \ge 3t≥3 and n=2tn = 2tn=2t. Let F=FqnF = \mathbb F_{q^n}F=Fqn​ be the finite field of order q2tq^{2t}q2t. For m∣nm \mid nm∣n, write Fqm\mathbb F_{q^m}Fqm​ for its subfield of order qmq^mqm, the set of xxx with xqm=xx^{q^m} = xxqm=x.

A qqq-polynomial over FFF is a map f(x)=∑i=0n−1cixqif(x) = \sum_{i=0}^{n-1} c_i x^{q^i}f(x)=∑i=0n−1​ci​xqi with ci∈Fc_i \in Fci​∈F. It is Fq\mathbb F_qFq​-linear. Its graph Uf={(x,f(x)):x∈F}U_f = \{(x, f(x)) : x \in F\}Uf​={(x,f(x)):x∈F} is an nnn-dimensional Fq\mathbb F_qFq​-subspace of F2F^2F2, and it defines the linear set Lf={⟨(x,f(x))⟩Fqn:x∈F∗}L_f = \{\langle (x, f(x))\rangle_{\mathbb F_{q^n}} : x \in F^*\}Lf​={⟨(x,f(x))⟩Fqn​​:x∈F∗} of PG(1,qn)\mathrm{PG}(1, q^n)PG(1,qn).

The polynomial fff is scattered when, for all z,y∈F∗z, y \in F^*z,y∈F∗,

f(z)z=f(y)y⟹z and y are Fq-linearly dependent.\frac{f(z)}{z} = \frac{f(y)}{y} \quad\Longrightarrow\quad z \text{ and } y \text{ are } \mathbb F_q\text{-linearly dependent.}zf(z)​=yf(y)​⟹z and y are Fq​-linearly dependent.

Equivalently, LfL_fLf​ has the maximum size (qn−1)/(q−1)(q^n - 1)/(q - 1)(qn−1)/(q−1).

Fix h∈Fh \in Fh∈F with hqt+1=−1h^{q^t + 1} = -1hqt+1=−1. The paper's polynomial is

ψh,t(x)=xq+xqt−1−h1−qt+1xqt+1+h1−q2t−1xq2t−1.\psi_{h,t}(x) = x^q + x^{q^{t-1}} - h^{1-q^{t+1}} x^{q^{t+1}} + h^{1-q^{2t-1}} x^{q^{2t-1}}.ψh,t​(x)=xq+xqt−1−h1−qt+1xqt+1+h1−q2t−1xq2t−1.

The proof splits it as ψh,t=L+M\psi_{h,t} = L + Mψh,t​=L+M with

L(x)=xq−h1−qt+1xqt+1,M(x)=xqt−1+h1−q2t−1xq2t−1,L(x) = x^q - h^{1-q^{t+1}} x^{q^{t+1}}, \qquad M(x) = x^{q^{t-1}} + h^{1-q^{2t-1}} x^{q^{2t-1}},L(x)=xq−h1−qt+1xqt+1,M(x)=xqt−1+h1−q2t−1xq2t−1,

and it also uses the Fqt\mathbb F_{q^t}Fqt​-linear maps R(x)=xqt+hqt−1−qxR(x) = x^{q^t} + h^{q^{t-1}-q} xR(x)=xqt+hqt−1−qx and T(x)=xqt+hq−qt−1xT(x) = x^{q^t} + h^{q-q^{t-1}} xT(x)=xqt+hq−qt−1x. The Lean development uses the same letters: psi, Lmap, Mmap, Rmap, Tmap, IsScatteredPoly, qpoly, graph.

Formalization targets

Goal: Theorem 3.1

For qqq odd, n=2tn = 2tn=2t, t≥3t \ge 3t≥3, and every h∈Fqn∖Fqth \in \mathbb F_{q^n} \setminus \mathbb F_{q^t}h∈Fqn​∖Fqt​ with hqt+1=−1h^{q^t+1} = -1hqt+1=−1,

∀z,y∈Fqn∗:ψh,t(z)z=ψh,t(y)y  ⟹  ∃c∈Fq, z=c y.\forall z, y \in \mathbb F_{q^n}^* :\quad \frac{\psi_{h,t}(z)}{z} = \frac{\psi_{h,t}(y)}{y} \;\Longrightarrow\; \exists c \in \mathbb F_q,\ z = c\,y .∀z,y∈Fqn∗​:zψh,t​(z)​=yψh,t​(y)​⟹∃c∈Fq​, z=cy.

Milestones

  1. The equivalence of three conditions (§1, p. 2): LfL_fLf​ is scattered; fff is scattered; and f(γx)=γf(x)f(\gamma x) = \gamma f(x)f(γx)=γf(x) with x≠0x \neq 0x=0 forces γ∈Fq\gamma \in \mathbb F_qγ∈Fq​.
  2. Proposition 3.2: hqt+1=−1h^{q^t+1} = -1hqt+1=−1 implies hq2+1≠1h^{q^2+1} \neq 1hq2+1=1 and hqt−2≠−hh^{q^{t-2}} \neq -hhqt−2=−h.
  3. LLL and MMM are Fqt\mathbb F_{q^t}Fqt​-semilinear (p. 7).
  4. The kernels of LLL and MMM, displays (4)–(5), are 1-dimensional Fqt\mathbb F_{q^t}Fqt​-subspaces.
  5. The images of LLL and MMM, displays (6)–(7), are 1-dimensional Fqt\mathbb F_{q^t}Fqt​-subspaces.
  6. Proposition 3.3: Fqn=ker⁡L⊕ker⁡M=im⁡L⊕im⁡M\mathbb F_{q^n} = \ker L \oplus \ker M = \operatorname{im} L \oplus \operatorname{im} MFqn​=kerL⊕kerM=imL⊕imM.
  7. dim⁡ker⁡R=dim⁡ker⁡T=1\dim \ker R = \dim \ker T = 1dimkerR=dimkerT=1 and ker⁡T=hqt−1−qker⁡R\ker T = h^{q^{t-1}-q}\ker RkerT=hqt−1−qkerR (p. 8).
  8. Lemma 3.4: the Fqt\mathbb F_{q^t}Fqt​-bases {1,ρ}\{1, \rho\}{1,ρ}, {1,τ}\{1, \tau\}{1,τ} and the change of components (9).
  9. Proposition 3.5: a∈ker⁡R  ⟺  av∈ker⁡L  ⟺  aM(u)∈im⁡La \in \ker R \iff av \in \ker L \iff aM(u) \in \operatorname{im} La∈kerR⟺av∈kerL⟺aM(u)∈imL.
  10. Proposition 3.6: b∈ker⁡T  ⟺  bu∈ker⁡M  ⟺  bL(v)∈im⁡Mb \in \ker T \iff bu \in \ker M \iff bL(v) \in \operatorname{im} Mb∈kerT⟺bu∈kerM⟺bL(v)∈imM.

Significance

The result. Theorem 3.1 produces, for every odd qqq and even n≥6n \ge 6n≥6, maximum scattered linear sets of PG(1,qn)\mathrm{PG}(1, q^n)PG(1,qn) and MRD codes of Fqn×n\mathbb F_q^{n \times n}Fqn×n​ with minimum distance n−1n - 1n−1. For t=3t = 3t=3 the polynomials ψh,3\psi_{h,3}ψh,3​ are those of Bartoli, Zanella and Zullo. If hhh were allowed in Fqt\mathbb F_{q^t}Fqt​, then h∈Fq2h \in \mathbb F_{q^2}h∈Fq2​ and ψh,t\psi_{h,t}ψh,t​ would reduce to the Longobardi–Zanella polynomials (p. 6). The second half of the paper (Theorem 5.1, a companion mission) shows that for t>4t > 4t>4 the family contains a number of PΓL\mathrm{P\Gamma L}PΓL-inequivalent members that grows exponentially in nnn. Every previously known family contributes fewer than q2φ(n)/2q^2\varphi(n)/2q2φ(n)/2 classes.

Formalizing it. The theorem has a complete published proof. No scattered polynomial, linear set of the projective line or linearized-polynomial kernel computation is formalized on the platform, and none appears in Mathlib. The work is to formalize the paper's proof: the semilinear-algebra lemmas of §3 and the case analysis that follows them. The milestones are reusable statements about qqq-polynomials of Fq2t\mathbb F_{q^{2t}}Fq2t​ seen as an Fqt\mathbb F_{q^t}Fqt​-plane.

Difficulty

Writing ψh,t(γx)=γψh,t(x)\psi_{h,t}(\gamma x) = \gamma \psi_{h,t}(x)ψh,t​(γx)=γψh,t​(x) out coefficient by coefficient gives a system in xxx and γ\gammaγ with exponents q,qt±1,q2t−1q, q^{t\pm1}, q^{2t-1}q,qt±1,q2t−1 that does not separate directly. The paper's route goes through two Fqt\mathbb F_{q^t}Fqt​-direct-sum decompositions of Fqn\mathbb F_{q^n}Fqn​ and two changes of Fqt\mathbb F_{q^t}Fqt​-basis. Each identity involves negative powers of hhh and holds only through hqt+1=−1h^{q^t+1} = -1hqt+1=−1 and the parity of qqq. The hypothesis h∉Fqth \notin \mathbb F_{q^t}h∈/Fqt​ enters only at the end, and a formalization must carry the arithmetic of the exponent towers modulo q2t−1q^{2t} - 1q2t−1 throughout. The tempting shortcut, checking the statement on a few small fields, proves nothing: the theorem is uniform in qqq and ttt.

Formalization scope

  • Field. FFF is a finite field with CharP F p, p prime, Odd p, q=prq = p^rq=pr with r≥1r \ge 1r≥1 (an explicit q with hq : q = p ^ r), and Fintype.card F = q ^ (2 * t). So FFF is Fq2t\mathbb F_{q^{2t}}Fq2t​ up to isomorphism, and no particular model is chosen.
  • Subfields. Fq\mathbb F_qFq​ and Fqt\mathbb F_{q^t}Fqt​ are the fixed fields of x↦xqx \mapsto x^qx↦xq and x↦xqtx \mapsto x^{q^t}x↦xqt, taken from the published definition ScatCaps.LinearSets.subfieldOf F p r m.
  • Scattered. "Scattered" is the literal definition of p. 2, with z,yz, yz,y ranging over all of F∗F^*F∗. The scattered-linear-set side of milestone 1 uses the published weight-one predicate ScatCaps.LinearSets.IsScattered, which is equivalent to the cardinality definition of p. 1.
  • Powers of hhh. A negative or difference power of hhh is written as a field quotient, e.g. h1−qt+1h^{1-q^{t+1}}h1−qt+1 as h / h ^ q ^ (t+1). This is exact because hqt+1=−1h^{q^t+1} = -1hqt+1=−1 forces h≠0h \neq 0h=0. Natural-number subtractions in exponents (t−1t-1t−1, 2t−12t-12t−1, 3t−23t-23t−2) are exact in the stated ranges.
  • Linear-algebra encodings. "1-dimensional Fqt\mathbb F_{q^t}Fqt​-subspace" means closed under addition and Fqt\mathbb F_{q^t}Fqt​-scalars, containing 000, and of cardinality ∣Fqt∣|\mathbb F_{q^t}|∣Fqt​∣ (published IsFqSubspace, HasRank). A direct sum is stated as unique decomposition, and an Fqt\mathbb F_{q^t}Fqt​-basis {1,ρ}\{1, \rho\}{1,ρ} as unique representation λ+μρ\lambda + \mu\rhoλ+μρ with λ,μ∈Fqt\lambda, \mu \in \mathbb F_{q^t}λ,μ∈Fqt​.
  • Pinned readings. (1) The standing hypotheses of §3 (qqq odd, n=2tn = 2tn=2t, t≥3t \ge 3t≥3, hqt+1=−1h^{q^t+1} = -1hqt+1=−1) are carried into every §3 lemma, even where its printed statement omits them. h∉Fqth \notin \mathbb F_{q^t}h∈/Fqt​ is added only to Theorem 3.1, because the lemmas do not use it. (2) Proposition 3.2 is printed with t≥1t \ge 1t≥1 and without "qqq odd". "qqq odd" is added (its proof uses it, and qqq even gives a counterexample), and hqt−2h^{q^{t-2}}hqt−2 is read as hq3t−2h^{q^{3t-2}}hq3t−2, which is equal to it for t≥2t \ge 2t≥2 and defined at t=1t = 1t=1.
  • Ruling out trivial versions. A formalization in which Fq\mathbb F_qFq​ is the whole field (every map is then "scattered"), in which γ\gammaγ or z,yz, yz,y range only over a subfield, or in which h1−qt+1h^{1-q^{t+1}}h1−qt+1 is a truncated natural-number power, would not state the theorem. The statements here quantify over all of F∗F^*F∗ and conclude membership in the fixed field of x↦xqx \mapsto x^qx↦xq.
  • Infrastructure. A complete development needs: Frobenius iterates on finite fields, fixed fields and their cardinalities, kernels and images of Fqt\mathbb F_{q^t}Fqt​-semilinear maps of Fq2t\mathbb F_{q^{2t}}Fq2t​, and the solution count of xqt−1=cx^{q^t - 1} = cxqt−1=c. These are reusable well beyond this mission. Proofs of any milestone, and alternative arguments, are welcome.

Selected references

  • G. Longobardi, G. Marino, R. Trombetti, Y. Zhou, A large family of maximum scattered linear sets of PG(1, q^n) and their associated MRD codes, arXiv:2102.08287v3, 2021 (Combinatorica 43, 2023). https://arxiv.org/abs/2102.08287v3
  • A. Blokhuis, M. Lavrauw, Scattered spaces with respect to a spread in PG(n, q), Geometriae Dedicata 81, 2000.
  • G. Lunardon, O. Polverino, Blocking sets and derivable partial spreads, J. Algebraic Combin. 14, 2001.
  • J. Sheekey, A new family of linear maximum rank distance codes, Adv. Math. Commun. 10(3), 2016.
  • G. Longobardi, C. Zanella, Linear sets and MRD-codes arising from a class of scattered linearized polynomials, J. Algebraic Combin., 2021. https://doi.org/10.1007/s10801-020-01011-9
  • D. Bartoli, C. Zanella, F. Zullo, A new family of maximum scattered linear sets in PG(1, q^6), Ars Math. Contemp. 19(1), 2020.
  • B. Csajbók, G. Marino, O. Polverino, C. Zanella, A new family of MRD-codes, Linear Algebra Appl. 548, 2018.
  • B. Csajbók, G. Marino, F. Zullo, New maximum scattered linear sets of the projective line, Finite Fields Appl. 54, 2018.
  • D. Bartoli, Y. Zhou, Exceptional scattered polynomials, J. Algebra 509, 2018.
  • M. Lavrauw, G. Van de Voorde, Field reduction and linear sets in finite geometry, Contemp. Math. 632, AMS, 2015, pp. 271–293.
  • O. Polverino, Linear sets in finite projective spaces, Discrete Math. (22): 3096–3107, 2010.
13 thms1 active userReviewed
PreviousPage 2 of 4Next

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me