Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

Complexity Theory

136 missions · 53 completed

Missions

Open83Completed53All136
Linear OptimizationOperations ResearchOptimization+1·Captain: mikedeng1

A Comment on "Computational Complexity of Stochastic Programming Problems" 3: An ε-Optimal Decision of the Random-Recourse Program (11) Decides the Integer Feasibility ProblemResearch Paper

Motivation

A linear two-stage stochastic program chooses a first-stage decision xxx before an uncertain parameter ξ~\tilde\xiξ~​ is revealed, and pays the optimal value Q(x,ξ)Q(x,\xi)Q(x,ξ) of a second-stage linear program once the realization ξ\xiξ is known. Such programs are the basic model of planning under uncertainty in operations research, and their computational complexity determines which solution methods can be expected to work. In 2006, Dyer and Stougie argued that linear two-stage stochastic programs with fixed recourse are #P-hard even when the random data follow independent uniform distributions. Hanasusanto, Kuhn and Wiesemann showed that this proof is not correct and gave a corrected one, which also covers approximate evaluation to sufficiently high accuracy; their note also shows that, when the second-stage constraint matrix itself depends on ξ\xiξ (random recourse), even finding an approximately optimal decision is strongly NP-hard.

This mission formalizes that last result, Theorem 4 of the note. The previous missions of the series treat the hardness of evaluating the expected recourse with fixed and with random recourse.

Setting

The Integer Feasibility Problem. An instance is an integer matrix A∈Zm×nA\in\mathbb Z^{m\times n}A∈Zm×n and an integer vector b∈Zmb\in\mathbb Z^mb∈Zm such that the polytope {y∈Rn:Ay≤b}\{y\in\mathbb R^n:Ay\le b\}{y∈Rn:Ay≤b} lies in the unit cube [0,1]n[0,1]^n[0,1]n. The question is whether some binary vector y∈{0,1}ny\in\{0,1\}^ny∈{0,1}n satisfies Ay≤bAy\le bAy≤b. This problem is strongly NP-hard (Garey and Johnson).

The second-stage problem. For a decision x∈Rx\in\mathbb Rx∈R and a realization ξ∈[0,1]n\xi\in[0,1]^nξ∈[0,1]n, write eee for the all-ones vector and consider

Q(x,ξ)= minimize  e⊤ysubject to  y∈R+n, λ∈R+m, x≥e⊤y,yi≥ξi+(b−Aξ)⊤λ,yi≥(1−ξi)+(b−Aξ)⊤λ(i=1,…,n).\begin{aligned} Q(x,\xi)=\ \text{minimize}\ \ & e^\top y\\ \text{subject to}\ \ & y\in\mathbb R^n_+,\ \lambda\in\mathbb R^m_+,\ x\ge e^\top y,\\ & y_i\ge \xi_i+(b-A\xi)^\top\lambda,\quad y_i\ge(1-\xi_i)+(b-A\xi)^\top\lambda\qquad(i=1,\dots,n). \end{aligned}Q(x,ξ)= minimize  subject to  ​e⊤yy∈R+n​, λ∈R+m​, x≥e⊤y,yi​≥ξi​+(b−Aξ)⊤λ,yi​≥(1−ξi​)+(b−Aξ)⊤λ(i=1,…,n).​

The coefficient of λ\lambdaλ in each constraint depends on ξ\xiξ, which is what makes the recourse random.

Problem (11). With ξ~\tilde\xiξ~​ uniformly distributed on [0,1]n[0,1]^n[0,1]n,

minimize  x+E[Q(x,ξ~)]subject to  x∈R.\text{minimize}\ \ x+\mathbb E\big[Q(x,\tilde\xi)\big]\quad\text{subject to}\ \ x\in\mathbb R .minimize  x+E[Q(x,ξ~​)]subject to  x∈R.

The second stage is not feasible for every xxx (the problem lacks relatively complete recourse), so a decision xxx is feasible only if the second stage is feasible for every ξ∈[0,1]n\xi\in[0,1]^nξ∈[0,1]n. Let f⋆f^\starf⋆ be the infimum of the objective over feasible decisions. A feasible xxx is ϵ\epsilonϵ-optimal if

∣f⋆−(x+E[Q(x,ξ~)])∣max⁡{∣f⋆∣,1}≤ϵ.\frac{\big|f^\star-\big(x+\mathbb E[Q(x,\tilde\xi)]\big)\big|}{\max\{|f^\star|,1\}}\le\epsilon .max{∣f⋆∣,1}​f⋆−(x+E[Q(x,ξ~​)])​​≤ϵ.

The constant ϵ′\epsilon'ϵ′. Lemma 4 fixes ϵ′\epsilon'ϵ′ with 0≤ϵ′<120\le\epsilon'<\tfrac120≤ϵ′<21​ and ϵ′∑j∣Aij∣<1\epsilon'\sum_j|A_{ij}|<1ϵ′∑j​∣Aij​∣<1 for every row iii.

Formalization targets

Goal: Theorem 4 as a reduction

For an instance with nonempty polytope, n≥1n\ge1n≥1, ϵ′\epsilon'ϵ′ as above, 0≤ϵ<ϵ′/(4n)0\le\epsilon<\epsilon'/(4n)0≤ϵ<ϵ′/(4n), and any ϵ\epsilonϵ-optimal decision xxx of (11),

∃ y∈{0,1}n: Ay≤b  ⟺  x>n−ϵ′2.\exists\,y\in\{0,1\}^n:\ Ay\le b\iff x>n-\frac{\epsilon'}{2}.∃y∈{0,1}n: Ay≤b⟺x>n−2ϵ′​.

This is the mathematical content of "determining an ϵ\epsilonϵ-optimal decision is strongly NP-hard whenever ϵ<ϵ′/4n\epsilon<\epsilon'/4nϵ<ϵ′/4n": a single comparison of any approximate decision with a threshold answers the NP-hard question.

Milestones

  1. Lemma 4. Ay≤bAy\le bAy≤b has a binary solution iff it has a solution in ([0,ϵ′]∪[1−ϵ′,1])n([0,\epsilon']\cup[1-\epsilon',1])^n([0,ϵ′]∪[1−ϵ′,1])n.
  2. The second stage. If Aξ≤bA\xi\le bAξ≤b, the second stage is feasible iff ∑imax⁡{ξi,1−ξi}≤x\sum_i\max\{\xi_i,1-\xi_i\}\le x∑i​max{ξi​,1−ξi​}≤x, with value ∑imax⁡{ξi,1−ξi}\sum_i\max\{\xi_i,1-\xi_i\}∑i​max{ξi​,1−ξi​}; otherwise it is feasible iff x≥0x\ge0x≥0, with value 000. Optimal yyy is unique in both cases.
  3. The optimal decision. xxx is feasible iff x≥x⋆x\ge x^\starx≥x⋆, and x⋆x^\starx⋆ is the unique optimal decision, where
x⋆=max⁡{∑i=1nmax⁡{ξi,1−ξi}:Aξ≤b}.x^\star=\max\Big\{\sum_{i=1}^n\max\{\xi_i,1-\xi_i\}:A\xi\le b\Big\}.x⋆=max{i=1∑n​max{ξi​,1−ξi​}:Aξ≤b}.
  1. The dichotomy. The answer is affirmative iff x⋆=nx^\star=nx⋆=n, and negative iff x⋆<n−ϵ′x^\star<n-\epsilon'x⋆<n−ϵ′.
  2. Accuracy of the decision. Every ϵ\epsilonϵ-optimal xxx satisfies ∣x⋆−x∣≤2nϵ|x^\star-x|\le2n\epsilon∣x⋆−x∣≤2nϵ.

Significance

The result. Theorem 4 implies that, unless the problems in NP admit an efficient solution scheme, there is no fully polynomial-time approximation scheme for two-stage stochastic programs with random recourse, even with a one-dimensional first stage and a uniform distribution. Together with the #P-hardness results of the same note, it delimits what algorithms such as sample average approximation can guarantee once relatively complete recourse and fixed recourse are dropped.

Formalizing it. The theorem has a short published proof, but that proof leaves several conventions implicit: the index set of the constraint block, the meaning of first-stage feasibility, and the condition on ϵ′\epsilon'ϵ′ when AAA has a zero row. A machine-checked version fixes each of them and verifies that the claimed formula for x⋆x^\starx⋆ is correct under the chosen reading. To our knowledge none of these statements has been formalized before. The objects are elementary (finite-dimensional linear programs, a set integral on the unit cube), and the second-stage solution and rounding lemma are reusable for related reductions from integer feasibility.

Difficulty

The individual steps are short; the difficulty is bookkeeping across three layers. The second stage is an optimisation over (y,λ)(y,\lambda)(y,λ) whose feasibility depends on the sign pattern of b−Aξb-A\xib−Aξ; the first stage requires a supremum over a polytope to be attained (compactness), and the expected recourse to be the same integral for all feasible decisions (integrability of a piecewise-defined value function over the cube). The tempting shortcut, reading off feasibility from the value of QQQ, fails: an infeasible linear program has no meaningful value, and treating it as cost 000 would make every decision look optimal. Similarly, an almost-sure notion of feasibility looks natural for a stochastic program but invalidates the formula for x⋆x^\starx⋆ whenever the polytope has measure zero, as it typically does for integer feasibility instances written with equalities.

Formalization scope

All objects live in SPHardness.IntFeas. Vectors are functions on Fin n and Fin m; AAA and bbb are integer and are cast to R\mathbb RR, and integrality is kept because Lemma 4 depends on it. The uniform law on [0,1]n[0,1]^n[0,1]n is Lebesgue measure restricted to the cube (volume 111); expectations are set integrals. The recourse value, f⋆f^\starf⋆ and x⋆x^\starx⋆ are sInf/sSup in R\mathbb RR, and second-stage feasibility, first-stage feasibility and ϵ\epsilonϵ-optimality are separate predicates, so no statement depends on the junk value of an empty infimum.

Pinned readings and added conventions:

  • The page writes the constraint block as "∀i=1,…,m\forall i=1,\dots,m∀i=1,…,m" and x⋆x^\starx⋆ with ∑i=1m\sum_{i=1}^m∑i=1m​, adding "n=m=kn=m=kn=m=k". Here the block ranges over i=1,…,ni=1,\dots,ni=1,…,n, ξ∈[0,1]n\xi\in[0,1]^nξ∈[0,1]n, and mmm (the number of rows of AAA) is arbitrary.
  • First-stage feasibility is robust: feasible for every ξ∈[0,1]n\xi\in[0,1]^nξ∈[0,1]n, not almost every ξ\xiξ.
  • ϵ′<min⁡i{(∑j∣Aij∣)−1}\epsilon'<\min_i\{(\sum_j|A_{ij}|)^{-1}\}ϵ′<mini​{(∑j​∣Aij​∣)−1} is encoded as ϵ′∑j∣Aij∣<1\epsilon'\sum_j|A_{ij}|<1ϵ′∑j​∣Aij​∣<1 for every row, together with 0≤ϵ′<120\le\epsilon'<\tfrac120≤ϵ′<21​.
  • Added hypotheses, all disclosed in the statements: the polytope {Aξ≤b}\{A\xi\le b\}{Aξ≤b} is nonempty (the proof's own assumption), n≥1n\ge1n≥1, and ϵ≥0\epsilon\ge0ϵ≥0.

Strong NP-hardness, the FPTAS consequence, running times and encoding lengths are not formalized; the goal is the correctness of the reduction. A statement in which xxx ranges over arbitrary reals satisfying a hypothesised identity, rather than over ϵ\epsilonϵ-optimal decisions of the program (11) built from (A,b)(A,b)(A,b), would be trivial and is ruled out: every object in the goal is defined from the instance.

Contributions welcome: proofs of the milestones, in particular measurability and integrability of the recourse function on the cube and attainment of x⋆x^\starx⋆, which are reusable for other piecewise-linear recourse functions.

Selected references

  • G. A. Hanasusanto, D. Kuhn, W. Wiesemann, A comment on "computational complexity of stochastic programming problems", Mathematical Programming (2016); preprint Optimization Online 2015/03/4825 (version of October 6, 2015). https://optimization-online.org/wp-content/uploads/2015/03/4825.pdf, DOI https://doi.org/10.1007/s10107-015-0958-2
  • M. Dyer, L. Stougie, Computational complexity of stochastic programming problems, Mathematical Programming 106 (2006) 423–432. https://doi.org/10.1007/s10107-005-0597-0
  • M. R. Garey, D. S. Johnson, Computers and Intractability: A Guide to the Theory of NP-Completeness, W. H. Freeman, 1979.
  • J. R. Birge, F. Louveaux, Introduction to Stochastic Programming, Springer, 1997 (2nd ed. 2011, https://doi.org/10.1007/978-1-4614-0237-4).
8 thms1 active userReviewed
Operations ResearchOptimizationProbability+1·Captain: mikedeng1

A Comment on "Computational Complexity of Stochastic Programming Problems" 1: δ-Accurate Expected Recourse Values of Problem (2) Determine the #Parity Count of a Knapsack PolytopeResearch Paper

Motivation

A two-stage stochastic program chooses a decision before uncertainty is observed and a recourse decision afterward. Its objective can involve the expected optimal value of the recourse problem. Even with linear constraints, evaluating that expectation can be difficult when the random input has many coordinates. Dyer and Stougie's 2006 complexity paper studied this question for stochastic programming. Hanasusanto, Kuhn and Wiesemann identified a false volume identity in one fixed-recourse argument, then supplied a quantitative replacement in their 2015 preprint. The replacement shows that sufficiently accurate expected-recourse values determine an exact counting answer.

The distinction matters to researchers designing numerical methods for stochastic programs. A hardness statement at a specified absolute accuracy identifies the scale at which a general exact-information guarantee would have strong complexity consequences. It does not say that useful approximations at coarser accuracy are unavailable. The present mission records the mathematical reduction behind the paper's Theorem 1 and its quantitative tolerance.

Setting

Let k≥1k\ge1k≥1. A realization ξ=(ξ1,…,ξk)\xi=(\xi_1,\ldots,\xi_k)ξ=(ξ1​,…,ξk​) lies in the unit cube C=[0,1]kC=[0,1]^kC=[0,1]k, equipped with Lebesgue measure. This cube has volume one, so integration over it is expectation under the uniform law. Let α∈R+k\alpha\in\mathbb R^k_+α∈R+k​ be nonnegative weights and β≥0\beta\ge0β≥0 a budget. The second-stage value Q(ξ;α,β)Q(\xi;\alpha,\beta)Q(ξ;α,β) is the maximum of

∑j=1kξjyj−βz\sum_{j=1}^k\xi_jy_j-\beta zj=1∑k​ξj​yj​−βz

over 0≤z≤10\le z\le10≤z≤1 and 0≤yj≤αjz0\le y_j\le\alpha_jz0≤yj​≤αj​z for each jjj. Its expected recourse value is Q(α,β)=∫CQ(ξ;α,β) dξ\mathcal Q(\alpha,\beta)=\int_C Q(\xi;\alpha,\beta)\,d\xiQ(α,β)=∫C​Q(ξ;α,β)dξ. There is no first-stage decision in this instance of the model.

The knapsack polytope is P(α,β)={ξ∈C:∑jαjξj≤β}P(\alpha,\beta)=\{\xi\in C:\sum_j\alpha_j\xi_j\le\beta\}P(α,β)={ξ∈C:∑j​αj​ξj​≤β}, and V(α,β)V(\alpha,\beta)V(α,β) denotes its volume. For integer weights and budget, its binary points correspond to subsets S⊆{1,…,k}S\subseteq\{1,\ldots,k\}S⊆{1,…,k} with ∑j∈Sαj≤β\sum_{j\in S}\alpha_j\le\beta∑j∈S​αj​≤β. The #Parity count DDD is the number of such subsets of even size minus the number of odd size. The paper invokes the counting complexity of this problem from Dyer and Frieze's 1988 volume paper.

For i=0,…,ki=0,\ldots,ki=0,…,k, define γi=β+i/(k+1)\gamma_i=\beta+i/(k+1)γi​=β+i/(k+1) and a square matrix FFF by Fic=γik−cF_{ic}=\gamma_i^{k-c}Fic​=γik−c​ for c=0,…,kc=0,\ldots,kc=0,…,k. The first column has power kkk and the last has power zero. This order matters: the first coordinate of the coefficient vector is the parity count. The matrix inverse is controlled by a column-sum bound of the kind studied by Gautschi in 1962.

Formalization targets

Goal: recourse values determine the count

Write ε3(α)=1/[2k!(∥α∥1+2)k(k+1)k+1∏jαj]\varepsilon_3(\alpha)=1/[2k!(\|\alpha\|_1+2)^k(k+1)^{k+1}\prod_j\alpha_j]ε3​(α)=1/[2k!(∥α∥1​+2)k(k+1)k+1∏j​αj​] and δ7(α)=[αkε3(α)/(1+αk)]2\delta_7(\alpha)=[\alpha_k\varepsilon_3(\alpha)/(1+\alpha_k)]^2δ7​(α)=[αk​ε3​(α)/(1+αk​)]2, exactly the right sides of (3) and (7). For positive integer weights, β≤∑jαj\beta\le\sum_j\alpha_jβ≤∑j​αj​, and 0<δ<δ7(α)0<\delta<\delta_7(\alpha)0<δ<δ7​(α), take any oracle Qδ(t)Q_\delta(t)Qδ​(t) with ∣Qδ(t)−Q(α,t)∣≤δ|Q_\delta(t)-\mathcal Q(\alpha,t)|\le\delta∣Qδ​(t)−Q(α,t)∣≤δ at every nonnegative ttt. Set h=2δh=2\sqrt\deltah=2δ​ and

g~i=Qδ(γi+h)−Qδ(γi)h+1.\widetilde g_i=\frac{Q_\delta(\gamma_i+h)-Q_\delta(\gamma_i)}{h}+1.g​i​=hQδ​(γi​+h)−Qδ​(γi​)​+1.

The target is that every solution of

Fx~=(k!∏j=1kαj)g~F\widetilde x=\left(k!\prod_{j=1}^k\alpha_j\right)\widetilde gFx=(k!j=1∏k​αj​)g​

satisfies ∣x~0−D∣<1/2|\widetilde x_0-D|<1/2∣x0​−D∣<1/2. Nearest-integer rounding therefore recovers DDD.

Supporting targets

The milestones establish the value formula for the second-stage program, the inclusion–exclusion volume formula (8), the integer coefficient identity for the exact volume system, the inverse bound (4), the perturbation bound (6), the derivative identity in Lemma 2, a global volume-growth bound, and the finite-difference estimate in Theorem 1. Together they retain the paper's constants and its sequence from expected values to volume approximations to an exact count. Proposition 1 separately records why the earlier proposed identity 1−Q=V1-\mathcal Q=V1−Q=V fails.

Significance

The result certifies a concrete information transfer. A function returning expected-recourse values to the stated absolute tolerance also contains enough information to distinguish the exact even-minus-odd count of feasible binary points. The bound states how accurate those values must be as dimension and weights change; a qualitative assertion of hardness alone would hide that dependence. The paper concludes #P-hardness after accounting for the polynomial-time operations of the reduction. That complexity-class conclusion is part of the paper, while the Lean goal isolates the reduction's numerical correctness.

A complete formalization would give separately reusable results about cube integrals, knapsack volumes, perturbations of Vandermonde systems, and finite differences of expected hinge functions. The source paper proves the mathematical assertions; this proposal stages their Lean statements as open proof obligations. No machine-checked proof is claimed here. The companion counterexample also keeps the corrected argument anchored to the precise error it repairs.

Difficulty

The tempting identity 1−Q(α,β)=V(α,β)1-\mathcal Q(\alpha,\beta)=V(\alpha,\beta)1−Q(α,β)=V(α,β) fails: the expectation of the second-stage optimum is a positive-part expectation, while volume is a distribution function. The paper's Proposition 1 makes the discrepancy explicit for all-ones weights. Recovering volume requires differentiation with respect to the budget, and an approximate function value does not directly provide an accurate derivative. The difficulty is controlling both oracle error and the change of volume over a finite budget interval tightly enough that the final coefficient error is strictly below one half.

There are further exactness points. The column order of FFF fixes which coefficient equals DDD. The 111-norm in (4) is the maximum column sum of the inverse, not a generic matrix norm. The perturbation threshold contains k!k!k!, every weight, and the power (k+1)k+1(k+1)^{k+1}(k+1)k+1; losing one factor can invalidate the rounding guarantee.

Formalization scope

Lean uses vectors Fin(k)→R\mathrm{Fin}(k)\to\mathbb RFin(k)→R, with zero-based indices; the paper's αk\alpha_kαk​ is the final coordinate. Lebesgue measure is restricted to CCC, whose volume is one. The LP value is a real supremum of its feasible objective values. For the nonnegative weights used in the theorems, the feasible set is nonempty and bounded, so this represents the actual maximum. The expected value is a real integral over the cube. The matrix FFF has descending powers, and its 111-norm estimate is written as a bound on each inverse column sum. Binary vectors are represented by subsets; DDD keeps the paper's even-minus-odd convention.

Positive weights are required where (3) and (7) divide by their product, and δ>0\delta>0δ>0 where hhh divides a finite difference. The case β>∑jαj\beta>\sum_j\alpha_jβ>∑j​αj​ is excluded from the main target because the paper first answers it directly with D=0D=0D=0. Lemma 2 excludes α=0,β=0\alpha=0,\beta=0α=0,β=0, where the claimed derivative fails to exist. The volume-growth milestone gives the content of the paper's Q′′≤1/αk\mathcal Q''\le1/\alpha_kQ′′≤1/αk​ argument without requiring a second derivative at a kink; it applies across the actual interval starting at β\betaβ. The printed determinant sign is also adjusted to the descending columns by asserting nonsingularity, which is what the proof uses. The second-stage value milestone retains only the optimal value, because the optimal decisions the page calls unique need not be unique at ties. The mission must use the LP and counting definitions above; replacing them with an arbitrary function assumed to have the desired derivative would empty the reduction.

The formal work requires measure and integration theory, finite polytope volume, finite sums over subsets, matrix inverses, and real inequalities. Contributions proving the eight milestones and any honest supporting lemmas are welcome. The setup does not encode polynomial-time computability, bit lengths, or a #P complexity class, so closure of the Lean goal alone is not a formal proof of the full complexity statement.

Selected references

  • G. A. Hanasusanto, D. Kuhn and W. Wiesemann, A comment on “computational complexity of stochastic programming problems”, Optimization Online preprint 2015/03/4825, version of October 6, 2015; published in Mathematical Programming, 2016. Preprint.
  • M. Dyer and L. Stougie, Computational complexity of stochastic programming problems, Mathematical Programming 106 (2006), 423–432. DOI.
  • M. E. Dyer and A. M. Frieze, On the complexity of computing the volume of a polyhedron, SIAM Journal on Computing 17 (1988), 967–974. DOI.
  • W. Gautschi, On inverses of Vandermonde and confluent Vandermonde matrices, Numerische Mathematik 4 (1962), 117–123. Scan.
10 thms1 active userReviewed
AlgebraTheoretical Computer Science·Captain: mikedeng1

The Power of the Combined Basic LP and Affine Relaxation for Promise CSPs II: BLP+Affine Solves PCSP(A, B) Exactly When Pol(A, B) Has Block-Symmetric Polymorphisms of Arbitrarily High WidthResearch Paper

Motivation

A promise constraint satisfaction problem PCSP(A,B)\mathrm{PCSP}(\mathbf A,\mathbf B)PCSP(A,B) asks to distinguish instances that are satisfiable in a structure A\mathbf AA from instances that are not even satisfiable in a weaker structure B\mathbf BB. Approximate graph colouring (tell 3-colourable graphs from graphs that are not 5-colourable) and (1-in-3-SAT, NAE-SAT)(1\text{-in-}3\text{-SAT},\ \mathrm{NAE\text{-}SAT})(1-in-3-SAT, NAE-SAT) are standard examples. The algebraic approach to CSPs explains the complexity of such problems through polymorphisms, the multi-argument maps AL→BA^L\to BAL→B that preserve every relation.

Two polynomial-time relaxations dominate the algorithmic side: the Basic LP relaxation, solved over Q≥0\mathbb Q_{\ge0}Q≥0​, and the affine relaxation, the same linear system solved over Z\mathbb ZZ. Barto, Bulín, Krokhin and Opršal (BBKO19) characterized each one separately: BLP solves PCSP(A,B)\mathrm{PCSP}(\mathbf A,\mathbf B)PCSP(A,B) exactly when Pol(A,B)\mathrm{Pol}(\mathbf A,\mathbf B)Pol(A,B) has symmetric polymorphisms of all arities, and the affine relaxation exactly when it has alternating polymorphisms of all odd arities. Brakensiek and Guruswami (BG19) used ad hoc combinations of the two. Brakensiek, Guruswami, Wrochna and Živný (arXiv:1907.04383) combine them into a single algorithm, BLP+Affine, and characterize its power exactly. This mission formalizes that characterization, Theorem 4 of the paper.

Setting

A signature assigns to each symbol RRR an arity ar(R)\mathrm{ar}(R)ar(R). A relational structure A\mathbf AA on a finite domain AAA fixes relations RA⊆Aar(R)R^{\mathbf A}\subseteq A^{\mathrm{ar}(R)}RA⊆Aar(R). A homomorphism A→B\mathbf A\to\mathbf BA→B is a map σ:A→B\sigma:A\to Bσ:A→B sending every tuple of RAR^{\mathbf A}RA into RBR^{\mathbf B}RB, and (A,B)(\mathbf A,\mathbf B)(A,B) is a promise template if one exists. An instance XXX has variables x1,…,xnx_1,\dots,x_nx1​,…,xn​ and constraints (Rj,xˉj)(R_j,\bar x_j)(Rj​,xˉj​); it is satisfiable in C\mathbf CC (written X→CX\to\mathbf CX→C) if some assignment sends each xˉj\bar x_jxˉj​ into RjCR_j^{\mathbf C}RjC​.

A map f:AL→Bf:A^L\to Bf:AL→B is a polymorphism if applying fff column-wise to any L×ar(R)L\times\mathrm{ar}(R)L×ar(R) matrix whose rows are in RAR^{\mathbf A}RA gives a tuple of RBR^{\mathbf B}RB. It is block-symmetric for a partition [L]=B1⊔⋯⊔Bκ[L]=B_1\sqcup\dots\sqcup B_\kappa[L]=B1​⊔⋯⊔Bκ​ if it is invariant under permutations of its arguments that preserve every block, and its width is the largest minimum block size over such partitions.

The Basic LP LPQ(X,A)\mathrm{LP}_{\mathbb Q}(X,\mathbf A)LPQ​(X,A) has a probability distribution wiw_iwi​ on AAA for each variable and pjp_jpj​ on RjAR_j^{\mathbf A}RjA​ for each constraint, with the marginal of pjp_jpj​ at each position of xˉj\bar x_jxˉj​ equal to the distribution of the variable in that position. The affine relaxation AffZ(X,A)\mathrm{Aff}_{\mathbb Z}(X,\mathbf A)AffZ​(X,A) is the same system over Z\mathbb ZZ with unknowns rir_iri​, qjq_jqj​ and no sign constraints. BLP+Affine (Figure 1) takes a relative interior point (w,p)(w,p)(w,p) of the LP, keeps only the integer solutions (r,q)(r,q)(r,q) that vanish wherever (w,p)(w,p)(w,p) does, and accepts iff one remains. It correctly solves PCSP(A,B)\mathrm{PCSP}(\mathbf A,\mathbf B)PCSP(A,B) if it accepts every X→AX\to\mathbf AX→A and rejects every X↛BX\not\to\mathbf BX→B.

The minor of f:AL→Bf:A^L\to Bf:AL→B along π:[L]→[L′]\pi:[L]\to[L']π:[L]→[L′] is f/π(x1,…,xL′)=f(xπ(1),…,xπ(L))f_{/\pi}(x_1,\dots,x_{L'})=f(x_{\pi(1)},\dots,x_{\pi(L)})f/π​(x1​,…,xL′​)=f(xπ(1)​,…,xπ(L)​). The minion MBLP+Aff\mathcal M_{\mathrm{BLP+Aff}}MBLP+Aff​ has as LLL-ary objects the pairs (w,r)(w,r)(w,r) with w:[L]→Q≥0w:[L]\to\mathbb Q_{\ge0}w:[L]→Q≥0​, r:[L]→Zr:[L]\to\mathbb Zr:[L]→Z, both summing to 111, and w(i)=0⇒r(i)=0w(i)=0\Rightarrow r(i)=0w(i)=0⇒r(i)=0; the minor along π\piπ sums both over fibres of π\piπ. A minion homomorphism ξ:MBLP+Aff→Pol(A,B)\xi:\mathcal M_{\mathrm{BLP+Aff}}\to\mathrm{Pol}(\mathbf A,\mathbf B)ξ:MBLP+Aff​→Pol(A,B) sends LLL-ary objects to LLL-ary polymorphisms and commutes with minors. The free structure FMBLP+Aff(A)F_{\mathcal M_{\mathrm{BLP+Aff}}}(\mathbf A)FMBLP+Aff​​(A) has the ∣A∣|A|∣A∣-ary objects as its domain, and a tuple is in RFR^FRF iff it is the family of coordinate minors of one ∣RA∣|R^{\mathbf A}|∣RA∣-ary object.

Formalization targets

Goal: Theorem 4

For a promise template (A,B)(\mathbf A,\mathbf B)(A,B) on finite domains, the following are equivalent:

BLP+Affine correctly solves PCSP(A,B)  ⟺  ∀N ∃f∈Pol(A,B): width(f)≥N  ⟺  ∀L ∃f∈Pol(2L+1) symmetric on blocks of sizes L, L+1.\text{BLP+Affine correctly solves } \mathrm{PCSP}(\mathbf A,\mathbf B) \iff \forall N\ \exists f\in\mathrm{Pol}(\mathbf A,\mathbf B):\ \mathrm{width}(f)\ge N \iff \forall L\ \exists f\in\mathrm{Pol}^{(2L+1)}\ \text{symmetric on blocks of sizes } L,\ L+1.BLP+Affine correctly solves PCSP(A,B)⟺∀N ∃f∈Pol(A,B): width(f)≥N⟺∀L ∃f∈Pol(2L+1) symmetric on blocks of sizes L, L+1.

Milestones

The paper proves Theorem 4 through Lemmas 7, 8 and 9. The milestones follow that proof:

  • MBLP+Aff\mathcal M_{\mathrm{BLP+Aff}}MBLP+Aff​ is a minion (p. 10);
  • Lemma 8: a minion homomorphism MBLP+Aff→Pol(A,B)\mathcal M_{\mathrm{BLP+Aff}}\to\mathrm{Pol}(\mathbf A,\mathbf B)MBLP+Aff​→Pol(A,B) yields the (2L+1)(2L+1)(2L+1)-ary two-block polymorphisms;
  • the finite-subset construction in the proof of Lemma 9: a symmetric polymorphism of arity L∗≥Mℓ2L^*\ge M\ell^2L∗≥Mℓ2, L∗=uℓ+vL^*=u\ell+vL∗=uℓ+v, gives a minion homomorphism on the finite set Mℓ,M\mathcal M_{\ell,M}Mℓ,M​ by repeating coordinate iii exactly Wi=uℓw(i)+vr(i)W_i=u\ell w(i)+v r(i)Wi​=uℓw(i)+vr(i) times;
  • Lemma 9: block-symmetric polymorphisms of arbitrarily high width yield a minion homomorphism;
  • Observation 15, Lemma 16 (compactness for structures) and Lemma 17 (free structures versus minion homomorphisms, for MBLP+Aff\mathcal M_{\mathrm{BLP+Aff}}MBLP+Aff​), which together give
  • Lemma 7: BLP+Affine correctly solves PCSP(A,B)\mathrm{PCSP}(\mathbf A,\mathbf B)PCSP(A,B) iff MBLP+Aff→Pol(A,B)\mathcal M_{\mathrm{BLP+Aff}}\to\mathrm{Pol}(\mathbf A,\mathbf B)MBLP+Aff​→Pol(A,B).

A companion item, Example 10, records that the disjoint union of a directed 2-cycle and a directed 3-cycle has no block-symmetric polymorphism of width at least 222.

Significance

Theorem 4 is an exact criterion: the power of an algorithm is read off from the polymorphisms of the template. Its sufficiency direction (Theorem 3, the subject of the companion mission) says that one fixed algorithm decides every PCSP with block-symmetric polymorphisms of unbounded width, which covers nearly all tractable Boolean PCSPs known at the time, including those with threshold and alternating-threshold polymorphisms. The necessity direction, new in Theorem 4, gives a method for proving that BLP+Affine fails on a template: exhibit, for some LLL, the absence of a (2L+1)(2L+1)(2L+1)-ary polymorphism with blocks of sizes LLL and L+1L+1L+1. Example 10 is an instance: a tractable template that the algorithm does not solve. The minion MBLP+Aff\mathcal M_{\mathrm{BLP+Aff}}MBLP+Aff​ and its free structure are the template for later characterizations of relaxation hierarchies.

The result is proved in the paper. As far as is known it has not been machine-checked. A formalization adds a checked development of minions, minion homomorphisms and free structures for PCSPs, a compactness theorem for relational structures, and a checked version of the one-block argument whose many-block extension the paper only asserts.

Difficulty

The equivalence passes through three different kinds of object: an algorithm, an infinite algebraic object (a homomorphism defined on all of MBLP+Aff\mathcal M_{\mathrm{BLP+Aff}}MBLP+Aff​), and finite families of polymorphisms. From polymorphisms one obtains homomorphisms only on finite pieces Mℓ,M\mathcal M_{\ell,M}Mℓ,M​, each from a different polymorphism, and these do not agree with one another; a single homomorphism on the whole minion needs a compactness argument over the finitely many restrictions, which uses the finiteness of AAA and BBB. The passage from "every instance satisfiable in the free structure is satisfiable in B\mathbf BB" to a homomorphism from the infinite free structure is a second compactness step. The relative interior point of Figure 1 must be kept: accepting whenever both relaxations are merely feasible is a different, weaker algorithm.

Formalization scope

All objects are in the definitions file PCSPBLPAff.Characterization.Setting, built on Mathlib only.

  • Signatures are (τ : Type) (ar : τ → ℕ), with no finiteness of τ\tauτ; the paper's requirement that arities be positive is dropped, and no statement needs it. Domains are finite types; instance variables are Fin n and arities Fin L.
  • The LP is over Q\mathbb QQ and the affine system over Z\mathbb ZZ. Constraint distributions are functions on all tuples that vanish outside RAR^{\mathbf A}RA, and marginal conditions are imposed per position of a constraint's scope.
  • The relative interior point is encoded by the only property the algorithm uses: a solution whose zero coordinates are exactly those that vanish on the whole polytope. The algorithm is formalized by its acceptance condition; the polynomial-time claims are out of scope.
  • Width requires at least one block, so a nullary function does not have every width.
  • There is no abstract minion structure. A minion homomorphism MBLP+Aff→Pol(A,B)\mathcal M_{\mathrm{BLP+Aff}}\to\mathrm{Pol}(\mathbf A,\mathbf B)MBLP+Aff​→Pol(A,B) is spelled out as a family of maps from objects of each arity to polymorphisms of that arity, commuting with minors. Lemma 17 is stated for M=MBLP+Aff\mathcal M=\mathcal M_{\mathrm{BLP+Aff}}M=MBLP+Aff​. Free-structure objects are indexed by AAA and by tuples, identifying AAA with [∣A∣][|A|][∣A∣].
  • Lemma 16 drops the hypothesis that F\mathbf FF is infinite, which is unnecessary.

Two trivializing formalizations are ruled out: the acceptance condition keeps the maximal-support requirement, and the free structure's relation requires the witnessing pair to be an object of MBLP+Aff\mathcal M_{\mathrm{BLP+Aff}}MBLP+Aff​ supported in RAR^{\mathbf A}RA.

A complete development needs finite sums over fibres, transport of objects along Fintype.equivFin, Tychonoff or König's lemma (Mathlib.Order.KonigLemma, Mathlib.Combinatorics.Compactness), and the existence of a maximal-support point of a rational polytope. The compactness theorem for relational structures and the free-structure lemma are reusable beyond this mission. Proofs of any milestone, and of the general Lemma 17 for an abstract minion, are welcome.

Selected references

  • J. Brakensiek, V. Guruswami, M. Wrochna, S. Živný, The Power of the Combined Basic LP and Affine Relaxation for Promise CSPs, arXiv:1907.04383v3, 2020 (also SIAM J. Comput., 2020, https://doi.org/10.1137/20M1312745). https://arxiv.org/abs/1907.04383
  • L. Barto, J. Bulín, A. Krokhin, J. Opršal, Algebraic approach to promise constraint satisfaction, arXiv:1811.00970, 2019; J. ACM 68(4), 2021. https://arxiv.org/abs/1811.00970
  • J. Brakensiek, V. Guruswami, An Algorithmic Blend of LPs and Ring Equations for Promise CSPs, SODA 2019, pp. 436–455. https://arxiv.org/abs/1807.05194
  • R. Diestel, Graph Theory, 5th ed., Springer, 2016, Theorem 8.1.3 (de Bruijn–Erdős compactness). https://doi.org/10.1007/978-3-662-53622-3
12 thms1 active userReviewed
Linear OptimizationTheoretical Computer Science·Captain: mikedeng1

The Power of the Combined Basic LP and Affine Relaxation for Promise CSPs I: BLP+Affine Correctly Solves Every PCSP with Symmetric Polymorphisms of Arbitrarily Large AritiesResearch Paper

Motivation

A constraint satisfaction problem (CSP) asks whether variables can be assigned values from a finite domain so that every constraint, drawn from a fixed list of allowed relations, is satisfied. A promise CSP (PCSP) relaxes the question: given two templates A\mathbf AA and B\mathbf BB with a homomorphism A→B\mathbf A\to\mathbf BA→B, distinguish instances satisfiable in A\mathbf AA from instances not even satisfiable in the weaker B\mathbf BB. Approximate graph colouring (colour a graph with more colours than its chromatic number) is the standard example. For CSPs, the resolution of the Feder–Vardi dichotomy conjecture by Bulatov and Zhuk (FOCS 2017) ties tractability to the existence of polymorphisms satisfying non-trivial identities; for PCSPs no such dichotomy is known, and the question of which polymorphism families yield algorithms is open in general.

A polymorphism of a PCSP is a function f:AL→Bf:A^L\to Bf:AL→B mapping tuples of rows satisfying the strict constraints to columns satisfying the weak ones. Brakensiek, Guruswami, Wrochna and Živný (arXiv:1907.04383v3, SIAM J. Comput. 2020) give a single algorithm, BLP+Affine, that decides every PCSP with infinitely many symmetric polymorphisms, and extend it to block-symmetric polymorphisms. As a corollary the same algorithm solves all tractable Boolean CSPs of Schaefer's dichotomy (2-SAT, Horn-SAT and its dual, linear equations mod 2).

Timeline, as recorded in the paper's introduction:

  • 2012: Kun, O'Donnell, Tamaki, Yoshida and Zhou (ITCS 2012): with symmetric polymorphisms of all arities, the Basic LP alone decides the CSP; with only some arities (e.g. odd majorities) it does not.
  • 2017: Austrin, Guruswami and Håstad classify (2+ϵ)(2+\epsilon)(2+ϵ)-SAT and introduce polymorphisms for PCSPs (SIAM J. Comput. 46(5), 2017).
  • 2018–2019: Brakensiek and Guruswami study PCSPs through polymorphisms; their SODA 2019 algorithm (arXiv:1807.05194) solves the search version for PCSPs with structured symmetric polymorphisms (threshold, threshold-periodic, regional), combining an LP over Z[2]\mathbb Z[\sqrt2]Z[2​] with an affine relaxation over a finite ring.
  • 2019: Barto, Bulín, Krokhin and Opršal (arXiv:1811.00970) show that the identities satisfied by polymorphisms, captured by minion homomorphisms, determine the complexity of a PCSP.
  • 2019–2020: the present paper. Theorem 2 needs only that fff be symmetric, with no structure beyond that; Theorem 3 handles any number of blocks; Theorem 4 characterizes exactly the PCSPs that BLP+Affine solves.

Setting

A signature τ\tauτ is a set of symbols RRR with arities ar(R)\mathrm{ar}(R)ar(R). A relational structure A\mathbf AA on a finite domain AAA gives, for each RRR, a relation RA⊆Aar(R)R^{\mathbf A}\subseteq A^{\mathrm{ar}(R)}RA⊆Aar(R). A homomorphism A→B\mathbf A\to\mathbf BA→B is a map σ:A→B\sigma:A\to Bσ:A→B sending every tuple of RAR^{\mathbf A}RA, componentwise, into RBR^{\mathbf B}RB; (A,B)(\mathbf A,\mathbf B)(A,B) is a promise template when one exists.

An instance XXX has variables x1,…,xnx_1,\dots,x_nx1​,…,xn​ and constraints cj=(Rj,xˉj)c_j=(R_j,\bar x_j)cj​=(Rj​,xˉj​), j∈[m]j\in[m]j∈[m], where xˉj\bar x_jxˉj​ is a tuple of ar(Rj)\mathrm{ar}(R_j)ar(Rj​) variables. XXX is satisfiable in A\mathbf AA if some assignment sends every xˉj\bar x_jxˉj​ into RjAR_j^{\mathbf A}RjA​.

A polymorphism of (A,B)(\mathbf A,\mathbf B)(A,B) of arity LLL is f:AL→Bf:A^L\to Bf:AL→B such that for every RRR and every L×ar(R)L\times\mathrm{ar}(R)L×ar(R) matrix whose rows lie in RAR^{\mathbf A}RA, applying fff to each column gives a tuple in RBR^{\mathbf B}RB. It is symmetric if it is invariant under all permutations of its LLL arguments.

The Basic LP LPQ(X,A)\mathrm{LP}_{\mathbb Q}(X,\mathbf A)LPQ​(X,A) has rational unknowns wi(a)≥0w_i(a)\ge0wi​(a)≥0, a distribution on AAA for each variable, and pj(y)≥0p_j(y)\ge0pj​(y)≥0, a distribution on RjAR_j^{\mathbf A}RjA​ for each constraint, linked by the marginal conditions ∑y: yk=apj(y)=wi(a)\sum_{y:\,y_k=a}p_j(y)=w_i(a)∑y:yk​=a​pj​(y)=wi​(a) when xix_ixi​ is the kkk-th variable of xˉj\bar x_jxˉj​. The affine relaxation AffZ(X,A)\mathrm{Aff}_{\mathbb Z}(X,\mathbf A)AffZ​(X,A) is the same system of equations in integer unknowns ri(a)r_i(a)ri​(a), qj(y)q_j(y)qj​(y), with no sign constraints.

The BLP+Affine algorithm (Figure 1) finds a relative interior point (w,p)(w,p)(w,p) of LPQ(X,A)\mathrm{LP}_{\mathbb Q}(X,\mathbf A)LPQ​(X,A), rejecting if there is none; restricts the affine system to AffZ′(X,A)\mathrm{Aff}'_{\mathbb Z}(X,\mathbf A)AffZ′​(X,A) by forcing ri(a)=0r_i(a)=0ri​(a)=0 wherever wi(a)=0w_i(a)=0wi​(a)=0 and qj(y)=0q_j(y)=0qj​(y)=0 wherever pj(y)=0p_j(y)=0pj​(y)=0; and accepts if and only if the restricted system has an integer solution. It correctly solves PCSP-Decision(A,B)\mathrm{PCSP\text{-}Decision}(\mathbf A,\mathbf B)PCSP-Decision(A,B) (Definition 1) if it accepts every instance satisfiable in A\mathbf AA and rejects every instance unsatisfiable in B\mathbf BB.

Formalization targets

Goal: Theorem 2 (p. 6)

(∀N ∃L≥N ∃f:AL→B symmetric polymorphism of (A,B)) ⟹ BLP+Affine correctly solves PCSP-Decision(A,B).\Bigl(\forall N\ \exists L\ge N\ \exists f:A^L\to B \text{ symmetric polymorphism of } (\mathbf A,\mathbf B)\Bigr)\ \Longrightarrow\ \text{BLP+Affine correctly solves } \mathrm{PCSP\text{-}Decision}(\mathbf A,\mathbf B).(∀N ∃L≥N ∃f:AL→B symmetric polymorphism of (A,B)) ⟹ BLP+Affine correctly solves PCSP-Decision(A,B).

The hypothesis is a property of the template alone; the conclusion quantifies over all instances.

Milestones, in attack order

  1. Footnote 1 (p. 5): a feasible LPQ(X,A)\mathrm{LP}_{\mathbb Q}(X,\mathbf A)LPQ​(X,A) has a solution of maximal support.
  2. Completeness (p. 6): an instance satisfiable in A\mathbf AA is accepted.
  3. Rounding of variables (pp. 6–7): Wi(a)=uℓwi(a)+vri(a)W_i(a)=u\ell w_i(a)+v r_i(a)Wi​(a)=uℓwi​(a)+vri​(a) are non-negative integers with ∑aWi(a)=L\sum_a W_i(a)=L∑a​Wi​(a)=L, for L=uℓ+v≥Mℓ2L=u\ell+v\ge M\ell^2L=uℓ+v≥Mℓ2, 0≤v<ℓ0\le v<\ell0≤v<ℓ.
  4. Rounding of constraints (p. 7): Pj(y)=uℓpj(y)+vqj(y)P_j(y)=u\ell p_j(y)+v q_j(y)Pj​(y)=uℓpj​(y)+vqj​(y) are non-negative integers with ∑yPj(y)=L\sum_y P_j(y)=L∑y​Pj​(y)=L.
  5. Eq. (9) (p. 7): Wi(a)=∑y: y∣i=aPj(y)W_i(a)=\sum_{y:\,y|i=a}P_j(y)Wi​(a)=∑y:y∣i=a​Pj​(y).
  6. Satisfying assignment (p. 7): Xi:=f(a,…,a [Wi(a) times])X_i:=f(a,\dots,a\ [W_i(a)\text{ times}])Xi​:=f(a,…,a [Wi​(a) times]) satisfies XXX in B\mathbf BB.

Companion: Theorem 3 (p. 8)

The same conclusion when Pol(A,B)\mathrm{Pol}(\mathbf A,\mathbf B)Pol(A,B) contains block-symmetric polymorphisms of arbitrarily large width: [L][L][L] is split into blocks, each of size at least NNN, within which fff is invariant.

Significance

Theorem 2 gives one algorithm that decides every PCSP with an infinite family of symmetric polymorphisms, without knowing or evaluating the polymorphisms; it subsumes the BLP-then-AIP algorithm of Brakensiek and Guruswami for Boolean templates and applies over any finite domain. Theorem 3 extends this to block-symmetric families, which covers nearly all known tractable Boolean PCSPs, including 1-in-3-SAT versus NAE-SAT, whose alternating threshold polymorphisms are block-symmetric but not symmetric.

The results are proved in the paper. No machine-checked formalization of PCSPs, polymorphisms or the Basic LP is known to exist; Mathlib has no theory of constraint satisfaction. This mission produces a formal model of promise templates, instances, polymorphisms, the two relaxations and the algorithm's acceptance condition, together with a formal proof of the correctness theorem. The same model is the starting point for the characterization theorem (Theorem 4) treated in the companion mission.

Difficulty

Completeness is routine. Soundness is the substance: from a rational LP solution and an integer solution of the refined affine system one must produce an actual assignment in B\mathbf BB, using a polymorphism whose arity is chosen only after the instance is known. The natural first idea, clearing denominators of the LP solution and feeding the resulting multiplicities to a polymorphism, needs a polymorphism of exactly the arity the denominators dictate; with polymorphisms of only some arities it fails, and the paper's introduction notes that the LP alone does not suffice there. An integer affine solution, on the other hand, may have negative entries, which are not multiplicities. The paper stresses that the affine system must be the one refined by the support of a relative interior point: an arbitrary solution of the unrefined lattice gives no control on where the negative entries sit. In the formalization, the counting step (the columns of the matrix built from the constraint multiplicities have the variable multiplicities) and the passage from equal multiplicities to equal values of a symmetric function require explicit combinatorics on finite tuples, and the existence of a maximal-support LP solution requires an averaging argument over the finite set of coordinates.

Formalization scope

All declarations are in the namespace PCSPBLPAff.Symmetric. Conventions:

  • Domains are Lean types with Fintype and DecidableEq; variables are Fin n, constraints Fin m, and a constraint's scope is a function Fin (ar R_j) → Fin n, possibly repeating variables.
  • Arities are any natural numbers (the page asks for positive arities; every statement remains true for arity 0).
  • The LP is over Q\mathbb QQ and the affine system over Z\mathbb ZZ. The weights pjp_jpj​, qjq_jqj​ are total functions on Aar(Rj)A^{\mathrm{ar}(R_j)}Aar(Rj​) required to vanish off RjAR_j^{\mathbf A}RjA​.
  • The marginal conditions (5) and (8) are imposed per position of the scope.
  • The relative interior point is encoded by its only property the algorithm uses (footnote 1): a solution whose support contains the support of every solution. Acceptance requires such a solution and an affine solution vanishing outside its support.
  • A block-symmetric function of width at least NNN has at least one block, each block of size at least NNN.
  • The polynomial-time claims of the paper, and the Remark on Z[2]\mathbb Z[\sqrt2]Z[2​], are out of scope: the algorithm is formalized by its acceptance condition.

The acceptance condition must not be replaced by "the LP is feasible and AffZ(X,A)\mathrm{Aff}_{\mathbb Z}(X,\mathbf A)AffZ​(X,A) has a solution", nor by an affine solution vanishing outside the support of an arbitrary LP solution; the first is a different algorithm and the second bypasses footnote 1.

Contributions welcome: proofs of the milestones, in particular the combinatorial lemma that a symmetric function takes the same value on tuples with the same multiplicities, and the averaging argument for maximal-support solutions; the block-wise version for Theorem 3.

Selected references

  • J. Brakensiek, V. Guruswami, M. Wrochna, S. Živný, The Power of the Combined Basic Linear Programming and Affine Relaxation for Promise Constraint Satisfaction Problems, SIAM J. Comput. 49(6), 2020; arXiv:1907.04383v3. https://arxiv.org/abs/1907.04383v3
  • J. Brakensiek, V. Guruswami, An Algorithmic Blend of LPs and Ring Equations for Promise CSPs, SODA 2019. https://arxiv.org/abs/1807.05194
  • J. Brakensiek, V. Guruswami, Promise Constraint Satisfaction: Structure Theory and a Symmetric Boolean Dichotomy, SODA 2018. https://arxiv.org/abs/1704.01937
  • L. Barto, J. Bulín, A. Krokhin, J. Opršal, Algebraic Approach to Promise Constraint Satisfaction, J. ACM 68(4), 2021. https://arxiv.org/abs/1811.00970
8 thms1 active userReviewed
Graph TheoryLinear algebraOptimization+1·Captain: mikedeng1

Most Tensor Problems Are NP-Hard 5: The Stability Number Is Read Off the Largest Eigenvalue of an Explicit Symmetric 3-TensorResearch Paper

Motivation

For a real symmetric matrix, the largest eigenvalue is the maximum of the quadratic form x⊤Ax\mathbf x^\top A\mathbf xx⊤Ax on the unit sphere, and it is computable to any accuracy in polynomial time. Tensor eigenvalues, introduced independently by Lim (2005) and Qi (2005), extend this picture to higher order: they are the stationary values of the cubic form A(x,x,x)\mathcal A(\mathbf x,\mathbf x,\mathbf x)A(x,x,x) on the unit sphere. They appear in multilinear statistics, signal processing, hypergraph theory and polynomial optimization, and for these applications the symmetric case is the natural one.

Hillar and Lim, in Most Tensor Problems Are NP-Hard (J. ACM 2013), show that the eigenvalue problem stays NP-hard when the tensor is required to be symmetric (their Theorem 9.3). The proof is short once one ingredient is available: a theorem of Nesterov (2003), in a form corrected by Hillar and Lim, that expresses the stability number of a graph as the maximum of an explicit cubic polynomial over a sphere. This mission formalizes that chain.

Setting

Let G=(V,E)G=(V,E)G=(V,E) be a simple graph on V={1,…,v}V=\{1,\dots,v\}V={1,…,v}, v≥1v\ge1v≥1. A set of vertices is stable if no two of its members are adjacent; the stability number α(G)\alpha(G)α(G) is the size of a largest stable set, so 1≤α(G)≤v1\le\alpha(G)\le v1≤α(G)≤v.

Put n=v+v(v−1)/2n=v+v(v-1)/2n=v+v(v−1)/2 and write a vector of Rn\mathbb R^nRn as z=(x,y)\mathbf z=(\mathbf x,\mathbf y)z=(x,y), with x=(x1,…,xv)\mathbf x=(x_1,\dots,x_v)x=(x1​,…,xv​) indexed by vertices and y=(yij)i<j\mathbf y=(y_{ij})_{i<j}y=(yij​)i<j​ indexed by pairs of vertices. The tensor SG=[ ⁣[sabc] ⁣]∈Rn×n×n\mathcal S_G=[\![s_{abc}]\!]\in\mathbb R^{n\times n\times n}SG​=[[sabc​]]∈Rn×n×n has entry 111 at the six orderings of the triple of coordinates (xi,xj,yij)(x_i,x_j,y_{ij})(xi​,xj​,yij​) for every non-adjacent pair i<ji<ji<j, and 000 elsewhere. It is symmetric: its entries do not change under any permutation of the three indices.

For a real 3-tensor A=[ ⁣[aabc] ⁣]\mathcal A=[\![a_{abc}]\!]A=[[aabc​]] the cubic form is A(z,z,z)=∑a,b,caabczazbzc\mathcal A(\mathbf z,\mathbf z,\mathbf z)=\sum_{a,b,c}a_{abc}z_az_bz_cA(z,z,z)=∑a,b,c​aabc​za​zb​zc​, and a real λ\lambdaλ is a unit ℓ2\ell^2ℓ2-eigenvalue of A\mathcal AA if

∑a,baabczazb=λzcfor all c,for some z with ∥z∥2=1.\sum_{a,b}a_{abc}z_az_b=\lambda z_c\quad\text{for all }c,\qquad\text{for some }\mathbf z\text{ with }\|\mathbf z\|_2=1 .a,b∑​aabc​za​zb​=λzc​for all c,for some z with ∥z∥2​=1.

Finally, λl=223(1−1l)\lambda_l=2\sqrt{\tfrac23\left(1-\tfrac1l\right)}λl​=232​(1−l1​)​ for l≥1l\ge1l≥1. In Lean these are TensorNP.SymEigen.stabTensor, cubicForm, IsUnitL2Eigenvalue and lambdaL, and α(G)\alpha(G)α(G) is Mathlib's SimpleGraph.indepNum.

Formalization targets

Goal: Theorem 9.3, core

α(G)=max⁡{ l∈{1,…,v}: λl is a unit ℓ2-eigenvalue of SG }.\alpha(G)=\max\{\,l\in\{1,\dots,v\}:\ \lambda_l\text{ is a unit }\ell^2\text{-eigenvalue of }\mathcal S_G\,\}.α(G)=max{l∈{1,…,v}: λl​ is a unit ℓ2-eigenvalue of SG​}.

That is, λα(G)\lambda_{\alpha(G)}λα(G)​ is an eigenvalue of SG\mathcal S_GSG​, and no λl\lambda_lλl​ with α(G)<l≤v\alpha(G)<l\le vα(G)<l≤v is. This is the statement on which the paper's vvv-query reduction rests; nothing is claimed about l<α(G)l<\alpha(G)l<α(G).

Milestones, in the paper's order

  1. Theorem 9.2 (Nesterov). With Sn−1={(x,y):∥x∥22+∥y∥22=1}\mathbb S^{n-1}=\{(\mathbf x,\mathbf y):\|\mathbf x\|_2^2+\|\mathbf y\|_2^2=1\}Sn−1={(x,y):∥x∥22​+∥y∥22​=1},
1−1α(G)=332⋅max⁡(x,y)∈Sn−1 ∑i<j, {i,j}∉Exixjyij.\sqrt{1-\frac1{\alpha(G)}}=3\sqrt{\frac32}\cdot\max_{(\mathbf x,\mathbf y)\in\mathbb S^{n-1}}\ \sum_{i<j,\ \{i,j\}\notin E}x_ix_jy_{ij}.1−α(G)1​​=323​​⋅(x,y)∈Sn−1max​ i<j, {i,j}∈/E∑​xi​xj​yij​.
  1. The tensor. SG\mathcal S_GSG​ is symmetric and SG(z,z,z)=6∑i<j,{i,j}∉Exixjyij\mathcal S_G(\mathbf z,\mathbf z,\mathbf z)=6\sum_{i<j,\{i,j\}\notin E}x_ix_jy_{ij}SG​(z,z,z)=6∑i<j,{i,j}∈/E​xi​xj​yij​.
  2. The maximum is an eigenvalue. max⁡∥z∥2=1SG(z,z,z)\max_{\|\mathbf z\|_2=1}\mathcal S_G(\mathbf z,\mathbf z,\mathbf z)max∥z∥2​=1​SG​(z,z,z) is attained and is a unit ℓ2\ell^2ℓ2-eigenvalue of SG\mathcal S_GSG​.
  3. Its value. max⁡∥z∥2=1SG(z,z,z)=λα(G)\max_{\|\mathbf z\|_2=1}\mathcal S_G(\mathbf z,\mathbf z,\mathbf z)=\lambda_{\alpha(G)}max∥z∥2​=1​SG​(z,z,z)=λα(G)​.
  4. Further result: Theorem 6.9 (Banach), (23). For every symmetric S∈Rn×n×n\mathcal S\in\mathbb R^{n\times n\times n}S∈Rn×n×n,
sup⁡x,y,z≠0∣S(x,y,z)∣∥x∥2∥y∥2∥z∥2=sup⁡x≠0∣S(x,x,x)∣∥x∥23,\sup_{\mathbf x,\mathbf y,\mathbf z\ne\mathbf 0}\frac{|\mathcal S(\mathbf x,\mathbf y,\mathbf z)|}{\|\mathbf x\|_2\|\mathbf y\|_2\|\mathbf z\|_2}=\sup_{\mathbf x\ne\mathbf 0}\frac{|\mathcal S(\mathbf x,\mathbf x,\mathbf x)|}{\|\mathbf x\|_2^3},x,y,z=0sup​∥x∥2​∥y∥2​∥z∥2​∣S(x,y,z)∣​=x=0sup​∥x∥23​∣S(x,x,x)∣​,

both sides finite. The paper uses it in §10 to transfer Theorem 9.3 to the spectral norm and the best rank-one approximation of symmetric tensors.

Significance

The result. Theorem 9.3 places symmetric tensor eigenvalue among the NP-hard problems of Hillar and Lim's Table I, and through Banach's theorem (Theorem 10.2 of the paper) the same holds for the largest singular value, the spectral norm and the best rank-one approximation of a symmetric 3-tensor. These are the quantities computed by higher-order power methods and by moment-based estimators, so the result marks where the matrix theory stops transferring.

Formalizing it. All results here are proved in the literature; none is machine-checked. Nesterov's theorem, which rests on the Motzkin–Straus theorem for the complement graph, is not on the platform or in Mathlib, and its formal statement settles the constant that the original paper got wrong by a factor 1/21/\sqrt21/2​ (Hillar–Lim, footnote 12). Banach's theorem on symmetric multilinear forms is likewise absent from Mathlib and is useful well beyond this mission.

Difficulty

The tensor identity (milestone 2) is bookkeeping. The analytic content sits in two places. First, Nesterov's theorem: the obvious route, fixing x\mathbf xx and maximizing over y\mathbf yy by Cauchy–Schwarz, reduces the cubic problem to a quartic one in x\mathbf xx, whose value still has to be identified with α(G)\alpha(G)α(G); that identification is the Motzkin–Straus theorem, which is not available in Lean and is itself a nontrivial optimization over the simplex. Second, the passage from a maximum to an eigenvalue needs a Lagrange multiplier argument on the sphere, and the symmetry of SG\mathcal S_GSG​ is what makes the gradient of the cubic form match the eigen-equation. Part (b) of the goal needs a further, unprinted observation relating every unit eigenpair to the cubic form. Banach's theorem has no short proof; the classical arguments go through polarization estimates or a variational argument specific to symmetric forms.

Formalization scope

  • Tensors and indices. A 3-tensor is a function ι → ι → ι → ℝ on a finite index type. For SG\mathcal S_GSG​ the index type is the disjoint union of the vertices Fin v and the pairs {(i,j):i<j}\{(i,j): i<j\}{(i,j):i<j}; this is Rn\mathbb R^nRn with coordinates labelled by name instead of by the paper's enumeration φ(i,j)=(i−1)v−i(i−1)/2+j−i\varphi(i,j)=(i-1)v-i(i-1)/2+j-iφ(i,j)=(i−1)v−i(i−1)/2+j−i. Vertices are 0,…,v−10,\dots,v-10,…,v−1.
  • Normalization. Eigenvalues are taken with a unit eigenvector. The paper's Problem 9.1 and Definition 5.1 say only x≠0\mathbf x\ne\mathbf 0x=0; since (λ,x)↦(tλ,tx)(\lambda,\mathbf x)\mapsto(t\lambda,t\mathbf x)(λ,x)↦(tλ,tx) preserves the eigen-equation, that reading would make every nonzero real an eigenvalue of SG\mathcal S_GSG​ and the goal false. The unit sphere (13) is where the paper derives the notion.
  • Explicit readings. The paper's index range "1≤i<j<k≤v1\le i<j<k\le v1≤i<j<k≤v" in the definition of sijks_{ijk}sijk​ is read as k≤nk\le nk≤n (taken literally it gives SG=0\mathcal S_G=0SG​=0). Every "max" is stated as a greatest element, so attainment is claimed. In (23) the suprema are real suprema over nonzero vectors with boundedness part of the conclusion. v≥1v\ge1v≥1 is assumed wherever the paper uses α(G)∈{1,…,v}\alpha(G)\in\{1,\dots,v\}α(G)∈{1,…,v}.
  • Not formalized. The oracle procedure of the proof of Theorem 9.3, the polynomial size of SG\mathcal S_GSG​, the input model of Problem 9.1 with quadratic irrationalities (Remark 9.4), and the NP-completeness of the stability number (Karp 1972, via α(G)=ω(G‾)\alpha(G)=\omega(\overline G)α(G)=ω(G)). The goal is the mathematical core of the Turing reduction, not a complexity statement.
  • Trivializations ruled out. Without the unit normalization the eigenvalue statements are trivial or false; a goal stating only (a), or only an inequality between the maximum and λα(G)\lambda_{\alpha(G)}λα(G)​, would not determine α(G)\alpha(G)α(G); both are excluded by the statements above.
  • Infrastructure. Everything rests on Mathlib (SimpleGraph.indepNum, real analysis on finite-dimensional spaces, Lagrange multipliers). A Motzkin–Straus theorem for SimpleGraph and Banach's theorem for symmetric trilinear forms are both reusable beyond this mission; contributions of either, or of a general "maximum of a symmetric cubic form on the sphere is an eigenvalue" lemma, are welcome.

Selected references

  • C. J. Hillar, L.-H. Lim, Most Tensor Problems Are NP-Hard, Journal of the ACM 60(6), Article 45, 2013. https://doi.org/10.1145/2512329 (arXiv:0911.1393v5: https://arxiv.org/abs/0911.1393)
  • Yu. Nesterov, Random walk in a simplex and quadratic optimization over convex polytopes, CORE Discussion Paper 2003/71, 2003. http://edoc.bib.ucl.ac.be:83/archive/00000238/01/dp2003-71.pdf
  • E. de Klerk, The complexity of optimizing over a simplex, hypercube or sphere: a short survey, Central European Journal of Operations Research 16, 111–125, 2008. https://doi.org/10.1007/s10100-007-0052-9
  • T. S. Motzkin, E. G. Straus, Maxima for graphs and a new proof of a theorem of Turán, Canadian Journal of Mathematics 17, 533–540, 1965. https://doi.org/10.4153/CJM-1965-053-6
  • S. Banach, Über homogene Polynome in (L2L^2L2), Studia Mathematica 7(1), 36–44, 1938 (reference [Banach 1938] of Hillar–Lim).
  • L.-H. Lim, Singular values and eigenvalues of tensors: a variational approach, Proc. IEEE CAMSAP 1, 129–132, 2005. https://arxiv.org/abs/math/0607648
  • L. Qi, Eigenvalues of a real supersymmetric tensor, Journal of Symbolic Computation 40, 1302–1324, 2005. https://doi.org/10.1016/j.jsc.2005.05.007
  • R. M. Karp, Reducibility among combinatorial problems, in Complexity of Computer Computations, 85–103, 1972. https://doi.org/10.1007/978-1-4684-2001-2_9
8 thms1 active userReviewed
Graph TheoryLinear algebraOptimization+1·Captain: mikedeng1

Most Tensor Problems Are NP-Hard 3: The Clique Number Is the Unique l for Which an Explicit Graph Tensor Has Spectral Norm 1Research Paper

Motivation

The spectral norm of a matrix, its largest singular value, is computable in polynomial time to any accuracy. Its analogue for 3-tensors appears in the analysis of multilinear systems, in the best rank-1 approximation of a data array, in quantum information (the geometric measure of entanglement), and in the injective norm of tensor products. Hillar and Lim, Most Tensor Problems Are NP-Hard (J. ACM 60(6), 2013, Article 45; final version arXiv:0911.1393v5), show that, in contrast with matrices, deciding whether a fixed nonzero rational number is a singular value or the spectral norm of a rational 3-tensor is NP-hard (their Theorems 6.5 and 1.10).

The proof is a reduction from the clique number ω(G)\omega(G)ω(G) of a graph. It combines three classical ingredients: the theorem of Motzkin and Straus (1965), which expresses ω(G)\omega(G)ω(G) as the value of a quadratic program over the simplex; a theorem of Banach (1938) on the spectral norm of symmetric tensors; and an observation from He, Li and Zhang (2010) on maxima of sums of squared bilinear forms. Deciding ω(G)≥l\omega(G)\ge lω(G)≥l is one of Karp's (1972) NP-complete problems.

Setting

A real 3-tensor is an array A=[ ⁣[aijk] ⁣]∈Rl×m×n\mathcal A=[\![a_{ijk}]\!]\in\mathbb R^{l\times m\times n}A=[[aijk​]]∈Rl×m×n with trilinear form A(x,y,z)=∑i,j,kaijkxiyjzk\mathcal A(\mathbf x,\mathbf y,\mathbf z)=\sum_{i,j,k}a_{ijk}x_iy_jz_kA(x,y,z)=∑i,j,k​aijk​xi​yj​zk​. With the Euclidean norm ∥⋅∥2\|\cdot\|_2∥⋅∥2​, its spectral norm is

∥A∥2,2,2=sup⁡x,y,z≠0∣A(x,y,z)∣∥x∥2∥y∥2∥z∥2.\|\mathcal A\|_{2,2,2}=\sup_{\mathbf x,\mathbf y,\mathbf z\ne\mathbf 0}\frac{|\mathcal A(\mathbf x,\mathbf y,\mathbf z)|}{\|\mathbf x\|_2\|\mathbf y\|_2\|\mathbf z\|_2}.∥A∥2,2,2​=x,y,z=0sup​∥x∥2​∥y∥2​∥z∥2​∣A(x,y,z)∣​.

A real σ\sigmaσ is a unit ℓ2\ell^2ℓ2-singular value of A\mathcal AA if there are unit vectors u,v,w\mathbf u,\mathbf v,\mathbf wu,v,w with

∑j,kaijkvjwk=σui,∑i,kaijkuiwk=σvj,∑i,jaijkuivj=σwk\textstyle\sum_{j,k}a_{ijk}v_jw_k=\sigma u_i,\quad \sum_{i,k}a_{ijk}u_iw_k=\sigma v_j,\quad \sum_{i,j}a_{ijk}u_iv_j=\sigma w_k∑j,k​aijk​vj​wk​=σui​,∑i,k​aijk​ui​wk​=σvj​,∑i,j​aijk​ui​vj​=σwk​

for all i,j,ki,j,ki,j,k: the stationarity conditions of A(u,v,w)\mathcal A(\mathbf u,\mathbf v,\mathbf w)A(u,v,w) on a product of unit spheres.

Let G=(V,E)G=(V,E)G=(V,E) be a simple graph on V={1,…,v}V=\{1,\dots,v\}V={1,…,v}, v≥1v\ge1v≥1, with eee edges {ik,jk}\{i_k,j_k\}{ik​,jk​}, k=1,…,ek=1,\dots,ek=1,…,e, and clique number ω\omegaω. Let Δv\Delta_vΔv​ be the standard simplex, AGA_GAG​ the adjacency matrix and JJJ the all-ones matrix. For a positive integer lll set Ql=AG+1lJQ_l=A_G+\frac1lJQl​=AG​+l1​J and Ml=max⁡x∈Δvx⊤QlxM_l=\max_{\mathbf x\in\Delta_v}\mathbf x^\top Q_l\mathbf xMl​=maxx∈Δv​​x⊤Ql​x. Let Ek=12Eikjk+12EjkikE_k=\frac12E_{i_kj_k}+\frac12E_{j_ki_k}Ek​=21​Eik​jk​​+21​Ejk​ik​​, and let TlT_lTl​ be the maximum over unit u,v∈Rv\mathbf u,\mathbf v\in\mathbb R^vu,v∈Rv, w∈Rl+2e\mathbf w\in\mathbb R^{l+2e}w∈Rl+2e of the multilinear form

∑i=1l(u⊤1lIv)wi+∑k=1e(u⊤Ekv)wl+k+∑k=1e(u⊤Ekv)we+l+k.(26)\sum_{i=1}^l\Big(\mathbf u^\top\tfrac1lI\mathbf v\Big)w_i+\sum_{k=1}^e(\mathbf u^\top E_k\mathbf v)w_{l+k}+\sum_{k=1}^e(\mathbf u^\top E_k\mathbf v)w_{e+l+k}. \tag{26}i=1∑l​(u⊤l1​Iv)wi​+k=1∑e​(u⊤Ek​v)wl+k​+k=1∑e​(u⊤Ek​v)we+l+k​.(26)

The graph tensor Al∈Qv×v×(l+2e)\mathcal A_l\in\mathbb Q^{v\times v\times(l+2e)}Al​∈Qv×v×(l+2e) has as entry aijka_{ijk}aijk​ the coefficient of uivjwku_iv_jw_kui​vj​wk​ in (26).

Formalization targets

Goal: Theorems 6.5 and 1.10, encoding-free core

For every graph GGG on v≥1v\ge1v≥1 vertices and every enumeration of its edges:

∀l≥1: ∥Al∥2,2,2=1  ⟺  l=ω;1 is a unit singular value of Aω;∀l>ω: 1 is not one of Al,\forall l\ge1:\ \|\mathcal A_l\|_{2,2,2}=1\iff l=\omega;\qquad 1\text{ is a unit singular value of }\mathcal A_\omega;\qquad \forall l>\omega:\ 1\text{ is not one of }\mathcal A_l,∀l≥1: ∥Al​∥2,2,2​=1⟺l=ω;1 is a unit singular value of Aω​;∀l>ω: 1 is not one of Al​,

so ω\omegaω is the largest l∈{1,…,v}l\in\{1,\dots,v\}l∈{1,…,v} for which 111 is a unit singular value of Al\mathcal A_lAl​. The paper's vvv-query Turing reductions rest on exactly this.

Milestones (in attack order)

  1. Theorem 6.7 (Motzkin–Straus): 1−1/ω=2max⁡x∈Δv∑{i,j}∈Exixj1-1/\omega=2\max_{\mathbf x\in\Delta_v}\sum_{\{i,j\}\in E}x_ix_j1−1/ω=2maxx∈Δv​​∑{i,j}∈E​xi​xj​.
  2. (22): Ml=1+ω−llωM_l=1+\frac{\omega-l}{l\omega}Ml​=1+lωω−l​; so Mω=1M_\omega=1Mω​=1, Ml>1M_l>1Ml​>1 for l<ωl<\omegal<ω, Ml<1M_l<1Ml​<1 for l>ωl>\omegal>ω.
  3. Lemma 6.8: Ml=NlM_l=N_lMl​=Nl​, where Nl=max⁡∥u∥2=1{∑i=1l(u⊤1lIu)2+2∑k(u⊤Eku)2}N_l=\max_{\|\mathbf u\|_2=1}\{\sum_{i=1}^l(\mathbf u^\top\frac1lI\mathbf u)^2+2\sum_k(\mathbf u^\top E_k\mathbf u)^2\}Nl​=max∥u∥2​=1​{∑i=1l​(u⊤l1​Iu)2+2∑k​(u⊤Ek​u)2}.
  4. Theorem 6.9 (Banach), (24): for a symmetric 4-tensor, ∥S∥2,2,2,2=sup⁡x≠0∣S(x,x,x,x)∣/∥x∥24\|\mathcal S\|_{2,2,2,2}=\sup_{\mathbf x\neq\mathbf 0}|\mathcal S(\mathbf x,\mathbf x,\mathbf x,\mathbf x)|/\|\mathbf x\|_2^4∥S∥2,2,2,2​=supx=0​∣S(x,x,x,x)∣/∥x∥24​.
  5. Proposition 6.10 (He–Li–Zhang): for symmetric AkA_kAk​, max⁡∥u∥=∥v∥=1∑k(u⊤Akv)2=max⁡∥v∥=1∑k(v⊤Akv)2\max_{\|\mathbf u\|=\|\mathbf v\|=1}\sum_k(\mathbf u^\top A_k\mathbf v)^2=\max_{\|\mathbf v\|=1}\sum_k(\mathbf v^\top A_k\mathbf v)^2max∥u∥=∥v∥=1​∑k​(u⊤Ak​v)2=max∥v∥=1​∑k​(v⊤Ak​v)2.
  6. Lemma 6.11: Tl=Ml1/2T_l=M_l^{1/2}Tl​=Ml1/2​, hence Tl=1T_l=1Tl​=1 iff l=ωl=\omegal=ω, Tl>1T_l>1Tl​>1 iff l<ωl<\omegal<ω, Tl<1T_l<1Tl​<1 iff l>ωl>\omegal>ω.
  7. Proof of Theorem 6.5: ∥Al∥2,2,2=Tl\|\mathcal A_l\|_{2,2,2}=T_l∥Al​∥2,2,2​=Tl​, TlT_lTl​ is a unit singular value of Al\mathcal A_lAl​, and every unit singular value has absolute value at most TlT_lTl​.
  8. §7 (content of Theorem 1.13): min⁡σ≥0, unit u,v,w∥A−σ u⊗v⊗w∥F2=∥A∥F2−∥A∥2,2,22\min_{\sigma\ge0,\ \text{unit }\mathbf u,\mathbf v,\mathbf w}\|\mathcal A-\sigma\,\mathbf u\otimes\mathbf v\otimes\mathbf w\|_F^2=\|\mathcal A\|_F^2-\|\mathcal A\|_{2,2,2}^2minσ≥0, unit u,v,w​∥A−σu⊗v⊗w∥F2​=∥A∥F2​−∥A∥2,2,22​, attained only with σ=∥A∥2,2,2\sigma=\|\mathcal A\|_{2,2,2}σ=∥A∥2,2,2​.

Significance

The result. The goal shows that a single comparison with 111 of the spectral norm, or of the singular-value spectrum, of an explicit rational tensor of size v×v×(l+2e)v\times v\times(l+2e)v×v×(l+2e) encodes whether l=ω(G)l=\omega(G)l=ω(G). It is the step that makes the spectral norm, the largest singular value, and (through §7) the best rank-1 approximation of a 3-tensor NP-hard, whereas all three are polynomial-time for matrices. It explains why the higher-order power method and its relatives carry no global guarantees, and it is the starting point for inapproximability results such as the paper's Theorem 1.11.

Formalizing it. The results are proved on paper; none of them is formalized. Motzkin–Straus, Banach's polarization theorem for symmetric 4-tensors, and the He–Li–Zhang identity are classical results that are not in Mathlib and not on the platform; each is reusable well beyond this mission (Turán-type bounds, polynomial optimization over spheres, injective norms). The mission also checks the paper's construction at the level of indices and constants.

Difficulty

The construction of Al\mathcal A_lAl​ is explicit, and the comparison with 111 is arithmetic once Tl=Ml1/2T_l=M_l^{1/2}Tl​=Ml1/2​ is known. Everything rests on the three cited theorems. Motzkin–Straus is an optimization statement over the simplex whose maximizers may lie on the boundary and need not be unique, so a first-order computation at an interior critical point does not settle it. Banach's theorem asserts equality, not equality up to a constant: the standard polarization identity bounds the 4-linear form by its diagonal values only up to a factor. Proposition 6.10 is where the paper's own argument is loose: the 4-linear form it introduces is not symmetric, so (24) does not apply as printed. Finally, the singular-value clauses require that the maximum of a trilinear form on a product of spheres is a stationary value. This must be proved, not assumed.

Formalization scope

Tensors are arrays Fin l → Fin m → Fin n → ℝ with 0-based indices: the paper's aijka_{ijk}aijk​ is A (i-1) (j-1) (k-1). The Euclidean norm is Real.sqrt (∑ i, x i ^ 2). Suprema and maxima are sSup of sets that are nonempty and bounded under the stated hypotheses; where the paper's "max" carries content (Motzkin–Straus, (22), §7), attainment is stated with IsGreatest/IsLeast. The graph is a SimpleGraph (Fin v) with v≥1v\ge1v≥1, clique number Mathlib's SimpleGraph.cliqueNum, and its edges are enumerated by an arbitrary Fin e ≃ G.edgeSet. Every statement holds for each enumeration, so the tensor depends on the choice and the conclusions do not. Al\mathcal A_lAl​ is a rational tensor, read over R\mathbb RR by casting.

Explicit readings of the paper:

  • Definition 6.1 has no norm constraint. Since (σ,u,v,w)↦(tσ,tu,tv,tw)(\sigma,\mathbf u,\mathbf v,\mathbf w)\mapsto(t\sigma,t\mathbf u,t\mathbf v,t\mathbf w)(σ,u,v,w)↦(tσ,tu,tv,tw) preserves (20), unnormalized singular values make every nonzero real a singular value of Al\mathcal A_lAl​, so the clause "not for l>ωl>\omegal>ω" would be false. Singular vectors are therefore unit vectors, as in the paper's derivation on p. 0:21.
  • The statement of Lemma 6.11 prints wm+l+kw_{m+l+k}wm+l+k​. There is no mmm in §6, and the proof uses we+l+kw_{e+l+k}we+l+k​, which is formalized.
  • EkE_kEk​ is written entrywise as 12[{i,j}={ik,jk}]\frac12[\{i,j\}=\{i_k,j_k\}]21​[{i,j}={ik​,jk​}], which equals 12Eikjk+12Ejkik\frac12E_{i_kj_k}+\frac12E_{j_ki_k}21​Eik​jk​​+21​Ejk​ik​​ for a loopless edge.
  • "TlT_lTl​ is just the maximum ℓ2\ell^2ℓ2-singular value of Al\mathcal A_lAl​" is made explicit as milestone 7.
  • The goal does not claim that 111 fails to be a singular value of Al\mathcal A_lAl​ for l<ωl<\omegal<ω; the paper neither claims nor uses this.

This is the mathematical core of a polynomial-time Turing reduction, not an NP-hardness theorem. The polynomial size of Al\mathcal A_lAl​, the vvv-query procedure, the scaling to a general fixed 0≠σ∈Q0\ne\sigma\in\mathbb Q0=σ∈Q, and the NP-completeness of CLIQUE (Karp 1972, cited) are not formalized. Theorem 1.11 and Corollary 1.12 are out of scope.

Two formalizations would make the goal trivial, and both are excluded. One is dropping the unit-norm constraint, which makes every nonzero number a singular value. The other is a spectral norm taken as a supremum over all vectors without normalization, which makes it unbounded and junk-valued; here the quotients are normalized.

Contributions are welcome on each milestone. Motzkin–Straus, Banach (24) and He–Li–Zhang are self-contained and reusable. Lemma 6.11 and milestone 7 need Cauchy–Schwarz and a Lagrange-type stationarity argument on spheres, which Mathlib supports through IsLocalExtrOn and the Lagrange multiplier files.

Selected references

  • C. J. Hillar, L.-H. Lim, Most Tensor Problems Are NP-Hard, J. ACM 60(6), Article 45, 2013. https://doi.org/10.1145/2512329 (final version arXiv:0911.1393v5, https://arxiv.org/abs/0911.1393v5)
  • T. S. Motzkin, E. G. Straus, Maxima for graphs and a new proof of a theorem of Turán, Canadian J. Math. 17, 533–540, 1965. https://doi.org/10.4153/CJM-1965-053-6
  • S. Banach, Über homogene Polynome in (L²), Studia Math. 7, 36–44, 1938. https://doi.org/10.4064/sm-7-1-36-44
  • S. He, Z. Li, S. Zhang, Approximation algorithms for homogeneous polynomial optimization with quadratic constraints, Math. Program. Ser. B 125(2), 353–383, 2010. https://doi.org/10.1007/s10107-010-0409-z
  • R. M. Karp, Reducibility among combinatorial problems, in Complexity of Computer Computations, Plenum, 85–103, 1972. https://doi.org/10.1007/978-1-4684-2001-2_9
11 thms1 active userReviewed
Graph TheoryTheoretical Computer Science·Captain: mikedeng1

Distributed Verification and Hardness of Distributed Approximation: Simulation Theorem — Time R < (dᵖ−1)/2 on G(Γ,d,p) with B-Bit Messages Gives an ε-Error Two-Party Protocol with 2dpB·R BitsResearch Paper

Motivation

In distributed computing, many graph problems (minimum spanning tree, shortest paths, connectivity checks) are solved by processors that sit at the vertices of the input network and communicate only along its edges. When every edge can carry only a few bits per round, the number of rounds an algorithm needs can be far larger than the network's diameter. Understanding by how much is the central question of the CONGEST (here: B) model of Peleg's monograph Distributed Computing: A Locality-Sensitive Approach (SIAM, 2000).

Das Sarma, Holzer, Kor, Korman, Nanongkai, Pandurangan, Peleg and Wattenhofer (SIAM J. Comput. 41 (2012) 1235–1265) proved round lower bounds for a long list of verification problems (is a given subgraph a spanning tree, a cut, a Hamiltonian cycle, …) and for approximating optimization problems such as the minimum spanning tree and shortest paths. Every one of those bounds goes through a single reduction, the Simulation Theorem (Theorem 3.1), which transfers lower bounds from two-party communication complexity to distributed algorithms.

Timeline:

  • 2000: Peleg and Rubinovich (SIAM J. Comput. 30) prove an Ω~(n)\tilde\Omega(\sqrt n)Ω~(n​) lower bound for distributed MST construction on a family of graphs built from paths and a tree.
  • 2006: Elkin (SIAM J. Comput. 36) extends it to MST approximation, using the networks G(Γ,d,p)G(\Gamma,d,p)G(Γ,d,p) (reference [10] of the paper).
  • 2011–2012: Das Sarma et al. isolate the Simulation Theorem as a general reduction for arbitrary Boolean functions fff and derive lower bounds for many verification and approximation problems.

Setting

A B-model network is an undirected graph whose vertices are processors with unbounded local computation. Computation proceeds in synchronous rounds; in each round, every vertex sends a message of BBB bits along each incident edge in each direction, then updates its local state from its old state and the messages it received. Two vertices sss and rrr hold inputs x,y∈{0,1}bx,y\in\{0,1\}^bx,y∈{0,1}b; all other vertices start without input. A public-coin randomized algorithm additionally lets all vertices read a shared random string. It computes f:{0,1}b×{0,1}b→{0,1}f:\{0,1\}^b\times\{0,1\}^b\to\{0,1\}f:{0,1}b×{0,1}b→{0,1} with ϵ\epsilonϵ-error in TTT rounds if, for every (x,y)(x,y)(x,y), both sss and rrr output f(x,y)f(x,y)f(x,y) after round TTT with probability at least 1−ϵ1-\epsilon1−ϵ. RϵG(f)R^{G}_\epsilon(f)RϵG​(f) is the least such TTT.

In the communication complexity model, Alice holds xxx, Bob holds yyy, one bit is sent per round, and both must output f(x,y)f(x,y)f(x,y). Rϵcc−pub(f)R^{cc-pub}_\epsilon(f)Rϵcc−pub​(f) is the least number of bits of an ϵ\epsilonϵ-error public-coin protocol.

The network G(Γ,d,p)G(\Gamma,d,p)G(Γ,d,p) consists of Γ\GammaΓ paths P1,…,PΓ\mathcal P^1,\dots,\mathcal P^\GammaP1,…,PΓ with dpd^pdp vertices v0ℓ,…,vdp−1ℓv^\ell_0,\dots,v^\ell_{d^p-1}v0ℓ​,…,vdp−1ℓ​ each, a complete ddd-ary tree T\mathcal TT of depth ppp with vertices u0ℓ,…,udℓ−1ℓu^\ell_0,\dots,u^\ell_{d^\ell-1}u0ℓ​,…,udℓ−1ℓ​ at level ℓ\ellℓ, and spoke edges joining each leaf ujpu^p_jujp​ to vjℓv^\ell_jvjℓ​ on every path. The inputs sit at the two extreme leaves, s=u0ps=u^p_0s=u0p​ and r=udp−1pr=u^p_{d^p-1}r=udp−1p​. The iii-right set RiR_iRi​ consists of all path vertices at positions j≥ij\ge ij≥i, the leaves ujpu^p_jujp​ with j≥ij\ge ij≥i, and their ancestors; the iii-left set LiL_iLi​ is the mirror image, and L0=V∖{r}L_0=V\setminus\{r\}L0​=V∖{r}, R0=V∖{s}R_0=V\setminus\{s\}R0​=V∖{s}. CRtC_{R_t}CRt​​ denotes the vector of states of the vertices of RtR_tRt​ at the end of round ttt.

Formalization targets

Goal: Theorem 3.1 (Simulation Theorem)

If a public-coin algorithm on G(Γ,d,p)G(\Gamma,d,p)G(Γ,d,p) computes fff with ϵ\epsilonϵ-error in TTT rounds and

T<dp−12,T<\frac{d^p-1}{2},T<2dp−1​,

then some public-coin two-party protocol computes fff with ϵ\epsilonϵ-error using at most

2 d p B T bits,i.e.Rϵcc−pub(f)≤2dpB RϵG(Γ,d,p)(f).2\,d\,p\,B\,T\ \text{bits},\qquad\text{i.e.}\qquad R^{cc-pub}_\epsilon(f)\le 2dpB\,R^{G(\Gamma,d,p)}_\epsilon(f).2dpBT bits,i.e.Rϵcc−pub​(f)≤2dpBRϵG(Γ,d,p)​(f).

Milestones

  1. Observation 3.3: the configuration of UUU at round ttt is determined by the configuration of U′⊇UU'\supseteq UU′⊇U at round t−1t-1t−1 and the messages into UUU from outside U′U'U′.
  2. §3.3 edge count: for 0<t<(dp−1)/20<t<(d^p-1)/20<t<(dp−1)/2, at most dpdpdp edges join V∖Rt−1V\setminus R_{t-1}V∖Rt−1​ to RtR_tRt​ (and V∖Lt−1V\setminus L_{t-1}V∖Lt−1​ to LtL_tLt​).
  3. Inclusion from the proof of Lemma 3.4: V∖Rt−1⊆Lt−1V\setminus R_{t-1}\subseteq L_{t-1}V∖Rt−1​⊆Lt−1​ (and its mirror image).
  4. Lemma 3.4: CRt=gR(CRt−1,M1,…,Mdp)C_{R_t}=g_R(C_{R_{t-1}},M_1,\dots,M_{dp})CRt​​=gR​(CRt−1​​,M1​,…,Mdp​) for dpdpdp messages of BBB bits sent from Lt−1L_{t-1}Lt−1​, with gRg_RgR​ and the message edges fixed before the inputs; and symmetrically for CLtC_{L_t}CLt​​.

Significance

The theorem turns any lower bound Rϵcc−pub(f)=Ω(b)R^{cc-pub}_\epsilon(f)=\Omega(b)Rϵcc−pub​(f)=Ω(b), such as those for set disjointness and equality, into a round lower bound on G(Γ,d,p)G(\Gamma,d,p)G(Γ,d,p): an algorithm with T<(dp−1)/2T<(d^p-1)/2T<(dp−1)/2 rounds forces T≥Rϵcc−pub(f)/(2dpB)T\ge R^{cc-pub}_\epsilon(f)/(2dpB)T≥Rϵcc−pub​(f)/(2dpB). Choosing the parameters gives the paper's bounds of order n/(Blog⁡n)\sqrt{n/(B\log n)}n/(Blogn)​ rounds for verification and approximation problems (§§4–7), and the same reduction underlies a large body of later CONGEST lower bounds.

The result has been proved since 2011. A machine-checked version would provide the first formal model of synchronous bandwidth-limited message passing and of public-coin two-party protocols on the platform, together with a verified reduction between them. No formalization of the theorem, of the B model, or of two-party communication protocols is known to exist in Mathlib or on the platform.

Difficulty

The informal proof is short; the work lies in making the information flow precise. The naive simulation, in which Alice simulates the vertices near sss and Bob those near rrr, fails because the cut between the two halves contains Γ\GammaΓ path edges plus the spokes, and Γ\GammaΓ can be large: sending every message across it costs ΓB\Gamma BΓB bits per round. The argument must instead let both parties' simulated regions shrink by one path position per round, so that the only messages crossing into Bob's region come from ppp tree vertices with ddd children each. Making this rigorous requires a careful accounting of which vertices belong to RtR_tRt​, which edges leave V∖Rt−1V\setminus R_{t-1}V∖Rt−1​, and why the functions that update the configurations do not depend on the other party's input.

Formalization scope

  • Network. Vertices are (Fin Γ × Fin (d^p)) ⊕ Σ ℓ : Fin (p+1), Fin (d^ℓ); paths are numbered from 000. The children of uiℓu^\ell_iuiℓ​ are udi+kℓ+1u^{\ell+1}_{di+k}udi+kℓ+1​, 0≤k<d0\le k<d0≤k<d. Li,RiL_i,R_iLi​,Ri​ are Finsets defined for every iii, with the paper's special case at i=0i=0i=0. The nodes s,rs,rs,r require dp≥1d^p\ge1dp≥1.
  • Messages are exactly BBB bits (Fin B → Bool) on every directed edge in every round. Optional or variable-length messages would let silence carry information and make the theorem false (e.g. at B=0B=0B=0).
  • Algorithms. Inputs enter only through the initial states of sss and rrr; a vertex receives a fixed dummy from non-neighbours. Running time is a fixed number TTT of rounds, outputs read after round TTT; this is equivalent to the paper's worst-case time.
  • Randomness is a PMF on an arbitrary type, shared by all vertices (resp. both parties); ϵ\epsilonϵ-error requires both outputs to be correct on the same random string, and ϵ≥0\epsilon\ge0ϵ≥0.
  • Protocols send one bit per round, so cost equals bits exchanged. Alice's moves read only xxx and the transcript, Bob's only yyy. Modelling the two-party side as a two-vertex B-model network would carry two bits per round and weaken the constant 2dpB2dpB2dpB by a factor of 222; the formalization does not do this.
  • Lemma 3.4 is stated with the functions gL,gRg_L,g_RgL​,gR​ and the message edges chosen before the inputs. A version where they may depend on (x,y)(x,y)(x,y) is trivially true and is ruled out.
  • The "in other words" inequality between the minimal complexities is not posed through sInf, which would be 000 on an empty set; the goal is stated for every algorithm.

Contributions welcome: proofs of the milestones, and reusable infrastructure for executions of message-passing algorithms (locality lemmas such as Observation 3.3 hold on any graph).

Selected references

  • A. Das Sarma, S. Holzer, L. Kor, A. Korman, D. Nanongkai, G. Pandurangan, D. Peleg, R. Wattenhofer, Distributed Verification and Hardness of Distributed Approximation, SIAM J. Comput. 41(5), 2012, 1235–1265. https://doi.org/10.1137/11085178X
  • M. Elkin, An Unconditional Lower Bound on the Time-Approximation Trade-off for the Distributed Minimum Spanning Tree Problem, SIAM J. Comput. 36(2), 2006, 433–456. https://doi.org/10.1137/S0097539704441848
  • D. Peleg, V. Rubinovich, A Near-Tight Lower Bound on the Time Complexity of Distributed Minimum-Weight Spanning Tree Construction, SIAM J. Comput. 30(5), 2000, 1427–1442. https://doi.org/10.1137/S0097539700369740
  • D. Peleg, Distributed Computing: A Locality-Sensitive Approach, SIAM, 2000. https://doi.org/10.1137/1.9780898719772
  • E. Kushilevitz, N. Nisan, Communication Complexity, Cambridge University Press, 1997. https://doi.org/10.1017/CBO9780511574948
8 thms1 active userReviewed
ProbabilityTheoretical Computer Science·Captain: mikedeng1

New Techniques for Noninteractive Zero-Knowledge 2: On a Perfectly Hiding Key the Circuit-SAT Proof from a Homomorphic Proof Commitment Is Perfect Zero-KnowledgeResearch Paper

Motivation

A non-interactive zero-knowledge (NIZK) proof lets a prover convince a verifier that a statement is true by sending a single message, computed from a common reference string σ\sigmaσ that both parties share, without revealing anything beyond the truth of the statement. NIZK proofs were introduced by Blum, Feldman and Micali (STOC 1988) and are a building block of chosen-ciphertext secure encryption, signatures and secure multi-party computation. For a long time every NIZK proof for all of NP was zero-knowledge only computationally: a simulator produced proofs that no efficient adversary could tell apart from real ones.

Groth, Ostrovsky and Sahai (J. ACM 59(3), 2012; conference versions at Eurocrypt 2006 and Crypto 2006) gave the first NIZK argument for all of NP whose zero-knowledge is perfect: real and simulated proofs have exactly the same distribution, so even an unbounded adversary learns nothing. The construction is the Circuit SAT proof of their Figure 3, run on a perfectly hiding key of a homomorphic proof commitment scheme. Its zero-knowledge is Lemma 8 of the paper, and it is the zero-knowledge half of their Theorem 11.

Setting

A homomorphic proof commitment scheme has a message space MMM (a finite cyclic group with generator 111, here Z/N\mathbb Z/NZ/N), a randomizer space RRR and a commitment space CCC, all finite abelian groups, and a commitment function comck(m;r)\mathrm{com}_{ck}(m; r)comck​(m;r). A hiding key generator KhidingK_{\mathrm{hiding}}Khiding​ outputs a commitment key ckckck together with a trapdoor tktktk. The scheme is assumed to have:

  1. the homomorphic property, com(m1+m2;r1+r2)=com(m1;r1) com(m2;r2)\mathrm{com}(m_1+m_2; r_1+r_2) = \mathrm{com}(m_1; r_1)\,\mathrm{com}(m_2; r_2)com(m1​+m2​;r1​+r2​)=com(m1​;r1​)com(m2​;r2​);
  2. perfect trapdoor opening: Topentk(m1,r1,m2)\mathrm{Topen}_{tk}(m_1, r_1, m_2)Topentk​(m1​,r1​,m2​) returns r2r_2r2​ with com(m2;r2)=com(m1;r1)\mathrm{com}(m_2; r_2) = \mathrm{com}(m_1; r_1)com(m2​;r2​)=com(m1​;r1​);
  3. perfect trapdoor opening indistinguishability: for uniform r1r_1r1​, the opening Topentk(m1,r1,m2)\mathrm{Topen}_{tk}(m_1, r_1, m_2)Topentk​(m1​,r1​,m2​) is distributed, jointly with ckckck, as a fresh uniform randomizer;
  4. perfect witness indistinguishability of a proof P01(ck,m,r;ρ)P_{01}(ck, m, r; \rho)P01​(ck,m,r;ρ) that a commitment contains 000 or 111: if com(0;r0)=com(1;r1)\mathrm{com}(0; r_0) = \mathrm{com}(1; r_1)com(0;r0​)=com(1;r1​), the proofs made from (0,r0)(0, r_0)(0,r0​) and from (1,r1)(1, r_1)(1,r1​) have the same law.

A NAND circuit on nnn wires is a list of gates (i,j,k)(i, j, k)(i,j,k) and an output wire out\mathrm{out}out; a witness w∈{0,1}nw \in \{0,1\}^nw∈{0,1}n satisfies it, C(w)=1C(w) = 1C(w)=1, if wk=¬(wi∧wj)w_k = \neg(w_i \wedge w_j)wk​=¬(wi​∧wj​) for every gate and wout=1w_{\mathrm{out}} = 1wout​=1. The prover P(σ,C,w)P(\sigma, C, w)P(σ,C,w) of Figure 3, with σ=ck\sigma = ckσ=ck, commits to every wire, ci=com(wi;ri)c_i = \mathrm{com}(w_i; r_i)ci​=com(wi​;ri​) with cout=com(1;0)c_{\mathrm{out}} = \mathrm{com}(1; 0)cout​=com(1;0), proves that each commitment contains 000 or 111, and for each gate proves that cicjck2 com(−2;0)c_i c_j c_k^2\,\mathrm{com}(-2; 0)ci​cj​ck2​com(−2;0) contains 000 or 111.

The simulator is S1=KhidingS_1 = K_{\mathrm{hiding}}S1​=Khiding​, returning σ=ck\sigma = ckσ=ck and τ=tk\tau = tkτ=tk, and S2(σ,τ,C)S_2(\sigma, \tau, C)S2​(σ,τ,C), which commits to 000 on every wire except the output wire, and makes all the 0/1 proofs from openings it knows or obtains with the trapdoor. In the zero-knowledge game an adaptive adversary AAA reads σ\sigmaσ, submits pairs (C,w)(C, w)(C,w) to an oracle one at a time, sees each answer before choosing the next, and outputs a bit. The real oracle answers with P(σ,C,w)P(\sigma, C, w)P(σ,C,w), the simulation oracle with S2(σ,τ,C)S_2(\sigma, \tau, C)S2​(σ,τ,C); both answer failure when C(w)≠1C(w) \neq 1C(w)=1.

Formalization targets

Goal: Lemma 8, perfect zero-knowledge

For every adaptive adversary AAA,

Pr⁡[σ←Sσ:AP(σ,⋅,⋅)(σ)=1]=Pr⁡[(σ,τ)←S1:AS(σ,τ,⋅,⋅)(σ)=1],\Pr\big[\sigma \leftarrow S_\sigma : A^{P(\sigma,\cdot,\cdot)}(\sigma) = 1\big] = \Pr\big[(\sigma, \tau) \leftarrow S_1 : A^{S(\sigma,\tau,\cdot,\cdot)}(\sigma) = 1\big],Pr[σ←Sσ​:AP(σ,⋅,⋅)(σ)=1]=Pr[(σ,τ)←S1​:AS(σ,τ,⋅,⋅)(σ)=1],

where SσS_\sigmaSσ​ is KhidingK_{\mathrm{hiding}}Khiding​ restricted to its first output.

Milestones, in the order the proof uses them

  1. Gate witness (proof of Lemma 8, p. 15): with ci,cj,ckc_i, c_j, c_kci​,cj​,ck​ commitments to 000 and rk′=Topentk(0,rk,1)r'_k = \mathrm{Topen}_{tk}(0, r_k, 1)rk′​=Topentk​(0,rk​,1),
cicjck2 com(−2;0)=com(0;ri+rj+2rk′).c_i c_j c_k^2\,\mathrm{com}(-2; 0) = \mathrm{com}(0; r_i + r_j + 2r'_k).ci​cj​ck2​com(−2;0)=com(0;ri​+rj​+2rk′​).
  1. Trapdoor-opened wires: com(wi;Topentk(0,ri,wi))=com(0;ri)\mathrm{com}(w_i; \mathrm{Topen}_{tk}(0, r_i, w_i)) = \mathrm{com}(0; r_i)com(wi​;Topentk​(0,ri​,wi​))=com(0;ri​), and the simulated commitments (com(0;ri))i(\mathrm{com}(0; r_i))_i(com(0;ri​))i​ have the law of the honest commitments (com(wi;ri))i(\mathrm{com}(w_i; r_i))_i(com(wi​;ri​))i​.
  2. Witness indistinguishability for two 0/1 openings: 0/1 proofs made from any two openings (m,r)(m, r)(m,r), (m′,r′)(m', r')(m′,r′) of the same commitment, m,m′∈{0,1}m, m' \in \{0,1\}m,m′∈{0,1}, have the same law.
  3. One query: for every hiding key and every (C,w)(C, w)(C,w) with C(w)=1C(w) = 1C(w)=1, P(ck,C,w)=dS2(ck,tk,C)P(ck, C, w) \overset{d}{=} S_2(ck, tk, C)P(ck,C,w)=dS2​(ck,tk,C).

Significance

Lemma 8 makes the Circuit SAT argument of Section 7 the first perfect NIZK argument for every language in NP. Combined with the computational indistinguishability of binding and hiding keys it also gives the computational zero-knowledge of the proof of Figure 3 (Theorem 6), and it is the template for the perfect zero-knowledge of the universally composable NIZK of the paper's Section 8. The same simulation pattern, commit to 000 everywhere and use the trapdoor where an opening is needed, recurs in later pairing-based proof systems such as Groth–Sahai proofs.

The result is proved in the paper; to our knowledge it has not been machine-checked. A formal proof fixes the simulator completely, including the cases the paper leaves to the reader, and makes the adaptive multi-query argument explicit: the paper's proof treats one proof at a time and does not spell out why answering many adaptively chosen queries preserves equality of distributions.

Difficulty

The real and simulated proofs never use the same randomizers, so the proof cannot compare outputs value by value; it must compare laws. Two gaps in the printed argument need to be closed. First, witness indistinguishability is assumed only for one opening to 000 against one opening to 111, while comparing a simulated gate proof with a real one compares two openings that may carry the same message; the trapdoor supplies the missing intermediate opening. Second, the printed gate recipe gives the gate commitment the message 000 only when no input of the gate is the output wire; when the output wire is an input, the message is 111 or 222, and 222 has no 0/1 opening, so the simulator must open the gate commitment itself with the trapdoor. The adaptive adversary adds a third point: equality of laws must survive an arbitrary interaction in which later queries depend on earlier answers.

Formalization scope

  • The message space is ZMod N with N≥4N \ge 4N≥4 (the paper describes Figure 3 for order at least 4, p. 14); RRR and RproofR_{\mathrm{proof}}Rproof​ are finite nonempty types, CCC a commutative group. Key generators and the 0/1 prover's randomness are probability mass functions; the coins are uniform.
  • Probability-one properties are stated for every key in the support of KhidingK_{\mathrm{hiding}}Khiding​; equalities of probabilities for all adversaries are stated as equalities of laws. Trapdoor opening indistinguishability is the joint law with ckckck, since the adversary does not see tktktk.
  • The adversary is a well-founded tree of fair coin tosses and adaptive oracle queries that reads σ\sigmaσ. Quantifying over all such trees is stronger than quantifying over polynomial-time adversaries. No running-time bound is imposed on the simulator.
  • The simulator is the specific S2S_2S2​ defined in the mission, a function of ckckck, tktktk, the circuit and fresh coins. A "simulator" that runs the honest prover on the witness would make the statement trivial and is ruled out by this definition. Each gate commitment is opened to 000 with Topentk\mathrm{Topen}_{tk}Topentk​, which covers the output-wire case.
  • Out of scope: key indistinguishability and every computational statement (computational soundness of Theorem 11, adaptive culpable soundness, the UC results); the second sentence of Lemma 8 (perfect non-erasure zero-knowledge); the verifier of Figure 3, which zero-knowledge does not involve.
  • Reusable beyond this mission: the query-tree adversary with its output law, and the abstract homomorphic proof commitment with its perfect properties. Contributions welcome: proofs of the milestones, and a general lemma that oracles with equal laws give equal output laws to every adaptive adversary.

Selected references

  • J. Groth, R. Ostrovsky, A. Sahai, New Techniques for Noninteractive Zero-Knowledge, Journal of the ACM 59(3), Article 11, 2012. https://doi.org/10.1145/2220357.2220358
  • J. Groth, R. Ostrovsky, A. Sahai, Perfect Non-interactive Zero Knowledge for NP, EUROCRYPT 2006, LNCS 4004. https://doi.org/10.1007/11761679_21
  • J. Groth, R. Ostrovsky, A. Sahai, Non-interactive Zaps and New Techniques for NIZK, CRYPTO 2006, LNCS 4117. https://doi.org/10.1007/11818175_6
  • M. Blum, P. Feldman, S. Micali, Non-Interactive Zero-Knowledge and Its Applications, STOC 1988. https://doi.org/10.1145/62212.62222
  • U. Feige, D. Lapidot, A. Shamir, Multiple NonInteractive Zero Knowledge Proofs Under General Assumptions, SIAM J. Comput. 29(1), 1999. https://doi.org/10.1137/S0097539792230010
  • J. Groth, A. Sahai, Efficient Non-interactive Proof Systems for Bilinear Groups, EUROCRYPT 2008, LNCS 4965. https://doi.org/10.1007/978-3-540-78967-3_24
10 thms1 active userReviewed
Theoretical Computer Science·Captain: mikedeng1

New Techniques for Noninteractive Zero-Knowledge 1: The Circuit-SAT Proof from a Homomorphic Proof Commitment Is Perfectly Complete, Perfectly Sound and a Perfect Proof of Knowledge on Binding KeysResearch Paper

Motivation

A non-interactive zero-knowledge (NIZK) proof lets a prover convince a verifier that a statement is true by sending a single message, computed from a common reference string σ\sigmaσ that both parties share, without revealing why the statement is true. NIZK proofs were introduced by Blum, Feldman and Micali (STOC 1988). They are a basic component of chosen-ciphertext secure encryption, signature schemes and secure multi-party computation.

Groth, Ostrovsky and Sahai (J. ACM 59(3), 2012; conference versions at EUROCRYPT 2006 and CRYPTO 2006) built NIZK proofs for all of NP from bilinear groups. The construction rests on one abstraction, the homomorphic proof commitment, and one protocol, the NIZK proof for Circuit SAT of their Figure 3. Theorem 6 says that the Figure 3 protocol works for every homomorphic proof commitment. This mission formalizes the part of Theorem 6 that holds exactly, with no computational assumption.

Setting

A homomorphic proof commitment scheme (Section 3) has a message space M\mathcal MM, a finite cyclic group (M,+,0)(\mathcal M,+,0)(M,+,0) with generator 111. It also has a randomizer space (R,+,0)(\mathcal R,+,0)(R,+,0) and a commitment space (C,⋅,1)(\mathcal C,\cdot,1)(C,⋅,1), both finite abelian groups. It comes with algorithms (Kbinding,Khiding,com,Topen,P01,V01)(K_{\mathrm{binding}},K_{\mathrm{hiding}},\mathrm{com},\mathrm{Topen},P_{01},V_{01})(Kbinding​,Khiding​,com,Topen,P01​,V01​):

  • KbindingK_{\mathrm{binding}}Kbinding​ outputs a commitment key ckckck and an extraction key xkxkxk; KhidingK_{\mathrm{hiding}}Khiding​ outputs ckckck and a trapdoor key tktktk;
  • com(m;r)∈C\mathrm{com}(m;r)\in\mathcal Ccom(m;r)∈C commits to m∈Mm\in\mathcal Mm∈M with randomizer r∈Rr\in\mathcal Rr∈R;
  • P01(ck,m,r;ρ)P_{01}(ck,m,r;\rho)P01​(ck,m,r;ρ) proves that a commitment contains 000 or 111, and V01(ck,c,π)V_{01}(ck,c,\pi)V01​(ck,c,π) checks such a proof;
  • Extxk\mathrm{Ext}_{xk}Extxk​ recovers a committed bit when the scheme has perfect extractability.

The exact properties used here are the following. The homomorphic property is com(m1+m2;r1+r2)=com(m1;r1) com(m2;r2)\mathrm{com}(m_1+m_2;r_1+r_2)=\mathrm{com}(m_1;r_1)\,\mathrm{com}(m_2;r_2)com(m1​+m2​;r1​+r2​)=com(m1​;r1​)com(m2​;r2​) on keys of either mode. Perfect binding says that on binding keys no commitment has openings to two different messages. Perfect completeness of the 0/1 proof says that honest proofs for (m,r)∈{0,1}×R(m,r)\in\{0,1\}\times\mathcal R(m,r)∈{0,1}×R are always accepted, on keys of either mode. Perfect soundness of the 0/1 proof says that on binding keys an accepted proof implies c=com(m;r)c=\mathrm{com}(m;r)c=com(m;r) for some (m,r)∈{0,1}×R(m,r)\in\{0,1\}\times\mathcal R(m,r)∈{0,1}×R. Perfect extractability says that on binding keys Extxk(com(m;r))=m\mathrm{Ext}_{xk}(\mathrm{com}(m;r))=mExtxk​(com(m;r))=m for m∈{0,1}m\in\{0,1\}m∈{0,1}.

A NAND circuit CCC on wires 1,…,n1,\dots,n1,…,n is a list of gates (i,j,k)(i,j,k)(i,j,k), with inputs i,ji,ji,j and output kkk, and an output wire out\mathrm{out}out. An assignment www satisfies it, C(w)=1C(w)=1C(w)=1, when wk=¬(wi∧wj)w_k=\neg(w_i\wedge w_j)wk​=¬(wi​∧wj​) for every gate and wout=1w_{\mathrm{out}}=1wout​=1.

The protocol of Figure 3 takes σ=ck\sigma=ckσ=ck with (ck,xk)←Kbinding(ck,xk)\leftarrow K_{\mathrm{binding}}(ck,xk)←Kbinding​. The prover commits to every wire, ci=com(wi;ri)c_i=\mathrm{com}(w_i;r_i)ci​=com(wi​;ri​), with cout=com(1;0)c_{\mathrm{out}}=\mathrm{com}(1;0)cout​=com(1;0). It proves with P01P_{01}P01​ that each cic_ici​ contains 000 or 111. For each gate (i,j,k)(i,j,k)(i,j,k) it proves that cicjck2 com(−2;0)c_ic_jc_k^2\,\mathrm{com}(-2;0)ci​cj​ck2​com(−2;0) contains 000 or 111, using message wi+wj+2wk−2w_i+w_j+2w_k-2wi​+wj​+2wk​−2 and randomizer ri+rj+2rkr_i+r_j+2r_kri​+rj​+2rk​. The verifier checks cout=com(1;0)c_{\mathrm{out}}=\mathrm{com}(1;0)cout​=com(1;0) and every 0/1 proof.

Formalization targets

Goal: Theorem 6, exact part

If ∣M∣≥4|\mathcal M|\ge 4∣M∣≥4 and the scheme has the homomorphic property, perfect binding, and perfectly complete and perfectly sound 0/1 proofs, then

perfect completeness ∧ perfect soundness ∧ (perfect extractability⇒perfect knowledge extraction).\text{perfect completeness}\ \wedge\ \text{perfect soundness}\ \wedge\ \big(\text{perfect extractability}\Rightarrow\text{perfect knowledge extraction}\big).perfect completeness ∧ perfect soundness ∧ (perfect extractability⇒perfect knowledge extraction).

The theorem holds for every scheme with these properties, with no assumption on how the scheme is built.

Milestones

  • Lemma 5. For bits b0,b1,b2b_0,b_1,b_2b0​,b1​,b2​ in a cyclic group of order at least 444, b2=¬(b0∧b1)b_2=\neg(b_0\wedge b_1)b2​=¬(b0​∧b1​) iff b0+b1+2b2−2∈{0,1}b_0+b_1+2b_2-2\in\{0,1\}b0​+b1​+2b2​−2∈{0,1}. Order 333 needs the extra condition b0+b1+b2−1∈{0,1}b_0+b_1+b_2-1\in\{0,1\}b0​+b1​+b2​−1∈{0,1}.
  • The gate commitment. c0c1c22 com(−2;0)c_0c_1c_2^2\,\mathrm{com}(-2;0)c0​c1​c22​com(−2;0) commits to b0+b1+2b2−2b_0+b_1+2b_2-2b0​+b1​+2b2​−2, and on a binding key an accepted 0/1 proof for it forces b2=¬(b0∧b1)b_2=\neg(b_0\wedge b_1)b2​=¬(b0​∧b1​).
  • Perfect completeness (proof of Theorem 6), on keys of either mode.
  • Lemma 7. Perfect soundness on binding keys.
  • Knowledge extraction (proof of Theorem 6). The wires wi=[Extxk(ci)=1]w_i=[\mathrm{Ext}_{xk}(c_i)=1]wi​=[Extxk​(ci​)=1] of an accepted proof satisfy CCC.

Significance

Theorem 6 is the step from a commitment primitive to NIZK proofs for an NP-complete language. With the subgroup-decision commitment of Section 4 or the decisional-linear commitment of Section 5 it gives Corollaries 9 and 10: perfectly sound NIZK proofs for Circuit SAT with proofs of size O(∣C∣k)O(|C|k)O(∣C∣k). When the common reference string is instead a hiding key, the same protocol becomes the perfect NIZK argument of Theorem 11. Its completeness clause is the hiding-key half of the completeness formalized here.

The result is proved in the paper. Lemma 5 and the soundness of the circuit protocol are left to the reader there or proved in three sentences. No machine-checked proof of this theorem, or of any commitment-based NIZK, was found in Mathlib or in the public Lean libraries searched. This mission states its exact content against an abstract scheme interface. The same interface can then be instantiated by machine-checked versions of the concrete commitments, which are the third and fourth missions of this series.

Difficulty

The argument is short, so the difficulty lies in the bookkeeping. On a binding key the verifier only learns that each commitment opens to some bit. Perfect binding is what identifies the message a gate proof certifies with bi+bj+2bk−2b_i+b_j+2b_k-2bi​+bj​+2bk​−2, which in turn identifies it with the wire bits. Lemma 5 must then be checked in Z/NZ\mathbb Z/N\mathbb ZZ/NZ rather than in the integers, where −2-2−2, −1-1−1 and 222 must be shown to differ from 000 and 111. This is exactly where N≥4N\ge4N≥4 enters: for N=3N=3N=3 the all-zero assignment passes every gate check, since −2=1-2=1−2=1. The output wire is handled by the literal check cout=com(1;0)c_{\mathrm{out}}=\mathrm{com}(1;0)cout​=com(1;0) together with binding. Completeness needs the prover's convention rout=0r_{\mathrm{out}}=0rout​=0 to be used consistently in the gate proofs.

Formalization scope

  • The message space is ZMod N. A finite cyclic group with a chosen generator 111 is this group, and every theorem that needs it assumes 4 ≤ N, the paper's restriction on p. 14.
  • The randomizer and commitment spaces are a finite AddCommGroup and a finite CommGroup. Key generators are PMFs. P01P_{01}P01​ takes its randomness as an argument.
  • Each perfect property of Section 3 is its own Prop, quantified over the support of the relevant generator. The paper's "for all adversaries, Pr⁡[… ]=1\Pr[\dots]=1Pr[…]=1" (or =0=0=0) is equivalent for unbounded adversaries.
  • Soundness of the 0/1 proof is assumed on binding keys only. Assuming it on hiding keys as well would be inconsistent with a real scheme and is not done.
  • Circuits are lists of NAND gates on Fin n with an output wire. No acyclicity is required, so the statements cover every system of NAND constraints.
  • The extractor is fixed to the paper's E1=KbindingE_1=K_{\mathrm{binding}}E1​=Kbinding​ and E2E_2E2​, which reads each wire as [Extxk(ci)=1][\mathrm{Ext}_{xk}(c_i)=1][Extxk​(ci​)=1]. An existentially quantified, computationally unbounded extractor would turn knowledge extraction into a restatement of soundness, and that trivializing reading is excluded.

Dropped, because they are computational:

  • computational zero-knowledge and computational non-erasure zero-knowledge (Theorem 6);
  • key indistinguishability;
  • the size bounds of Corollaries 9 and 10.

Perfect zero-knowledge on hiding keys (Lemma 8) is the second mission of this series. The definitions of this mission (the scheme interface, NAND circuits, the protocol) are reusable by any formalization of commitment-based proof systems. Proofs of the milestones are welcome in any order.

Selected references

  • J. Groth, R. Ostrovsky, A. Sahai, New Techniques for Noninteractive Zero-Knowledge, Journal of the ACM 59(3), Article 11, 2012. https://doi.org/10.1145/2220357.2220358
  • J. Groth, R. Ostrovsky, A. Sahai, Perfect Non-interactive Zero Knowledge for NP, EUROCRYPT 2006, LNCS 4004, pp. 339–358. https://doi.org/10.1007/11761679_21
  • J. Groth, R. Ostrovsky, A. Sahai, Non-interactive Zaps and New Techniques for NIZK, CRYPTO 2006, LNCS 4117, pp. 97–111. https://doi.org/10.1007/11818175_6
  • M. Blum, P. Feldman, S. Micali, Non-interactive zero-knowledge and its applications, STOC 1988, pp. 103–112. https://doi.org/10.1145/62212.62222
  • D. Boneh, E.-J. Goh, K. Nissim, Evaluating 2-DNF Formulas on Ciphertexts, TCC 2005, LNCS 3378, pp. 325–341. https://doi.org/10.1007/978-3-540-30576-7_18
9 thms1 active userReviewed
ProbabilityTheoretical Computer Science·Captain: mikedeng1

On the (Im)possibility of Obfuscating Programs 3: A Random Injection G : [K] → [L], L ≥ K², Fools Every K^δ-Query Distinguisher with Oracle G up to 1/K^δ, Except with Probability 2^(−K^δ)Research Paper

Motivation

Barak, Goldreich, Impagliazzo, Rudich, Sahai, Vadhan and Yang proved that general-purpose program obfuscation in the virtual black-box sense is impossible (J. ACM 59(2), 2012). A natural question is whether the impossibility proof relativizes, that is, whether it survives when every party gets access to the same oracle. Proposition 4.14 of the paper shows that it does not: there is an oracle relative to which efficient circuit obfuscators exist. This is evidence that the impossibility results are not formal consequences of black-box reasoning, and a further example that relativization is a poor guide to what can be proved.

The construction obfuscates a circuit CCC by publishing a random image Ok(C,r)O_k(C,r)Ok​(C,r), and its security comes down to one information-theoretic statement, Claim 4.14.2, restated and proved in Appendix B as Lemma B.1. A random injective function is a pseudorandom generator even against distinguishers that may query the function itself. The proof is a counting (compression) argument in the style of Gennaro and Trevisan's proof that a random permutation is one-way against nonuniform adversaries (FOCS 2000). Arguments of this kind recur in lower bounds for black-box constructions and in the theory of random oracles.

Setting

Fix natural numbers KKK and LLL and finite sets [K][K][K], [L][L][L] of these sizes. A distinguisher DDD receives an element y∈[L]y\in[L]y∈[L] and may ask an oracle G:[K]→[L]G:[K]\to[L]G:[K]→[L] for values G(z)G(z)G(z), choosing each query point adaptively from the input and the answers so far; finally it outputs a bit. Formally DDD is a family (Dy)y∈[L](D_y)_{y\in[L]}(Dy​)y∈[L]​ of query trees: a leaf carries an output bit, and an internal node carries a query point z∈[K]z\in[K]z∈[K] and one subtree for each possible answer in [L][L][L]. Running DyD_yDy​ against GGG follows the branch labelled G(z)G(z)G(z) at each node; DG(y)D^G(y)DG(y) is the bit at the leaf reached. The query complexity of DDD is the largest depth of its trees. Nothing restricts the computation between queries.

Let GGG be uniformly random among the injective functions [K]→[L][K]\to[L][K]→[L]. For a distinguisher DDD the two acceptance probabilities are

pX(D,G)=Pr⁡x∈[K][DG(G(x))=1],pY(D,G)=Pr⁡y∈[L][DG(y)=1],p_X(D,G)=\Pr_{x\in[K]}\big[D^G(G(x))=1\big],\qquad p_Y(D,G)=\Pr_{y\in[L]}\big[D^G(y)=1\big],pX​(D,G)=x∈[K]Pr​[DG(G(x))=1],pY​(D,G)=y∈[L]Pr​[DG(y)=1],

where xxx and yyy are uniform. DDD tries to tell the output G(x)G(x)G(x) of a random seed from a uniform element of [L][L][L] while it may query GGG.

Formalization targets

Goal: Lemma B.1 (Claim 4.14.2)

There is a constant δ>0\delta>0δ>0 such that for all sufficiently large KKK, all L≥K2L\ge K^2L≥K2, and every DDD making at most KδK^\deltaKδ oracle queries,

Pr⁡G[ ∣pX(D,G)−pY(D,G)∣≤1Kδ] ≥ 1−2−Kδ.\Pr_G\Big[\,\big|p_X(D,G)-p_Y(D,G)\big|\le \tfrac{1}{K^\delta}\Big]\ \ge\ 1-2^{-K^\delta}.GPr​[​pX​(D,G)−pY​(D,G)​≤Kδ1​] ≥ 1−2−Kδ.

The constant δ\deltaδ is left unspecified, as in the paper; the threshold for KKK may depend on δ\deltaδ only.

Milestones

The milestones follow the proof on pp. A:43–A:45, for small δ\deltaδ and γ=K−3δ\gamma=K^{-3\delta}γ=K−3δ:

  1. an averaging bound: for most sets S⊆[K]S\subseteq[K]S⊆[K] of size K1−5δK^{1-5\delta}K1−5δ, few runs DG(G(x))D^G(G(x))DG(G(x)), x∈Sx\in Sx∈S, query S∖{x}S\setminus\{x\}S∖{x};
  2. a sampling bound: a random such SSS estimates pXp_XpX​ within 14Kδ\frac1{4K^\delta}4Kδ1​;
  3. the triangle-inequality chain that turns a violation of the goal into a gap >12Kδ>\frac1{2K^\delta}>2Kδ1​ between SGS_GSG​ and LG=[L]∖G([K]∖SG)L_G=[L]\setminus G([K]\setminus S_G)LG​=[L]∖G([K]∖SG​);
  4. inequality (8): a simulator MMM that reads GGG only off SGS_GSG​ keeps that gap;
  5. the Chernoff count of subsets TTT that overestimate a Boolean average;
  6. Claim B.1.2 in counting form: the GGG admitting a good SGS_GSG​ inside a fixed SSS number at most B⋅2−cK1−7δB\cdot2^{-cK^{1-7\delta}}B⋅2−cK1−7δ, where BBB is the number of injections;
  7. the closing density bound: the bad GGG have density below K−δK^{-\delta}K−δ.

Significance

Lemma B.1 is the step that makes Proposition 4.14 work. Once the oracle is fixed everywhere except at the values Ok(C,⋅)O_k(C,\cdot)Ok​(C,⋅), the simulator's only dependence on the remaining randomness is through queries to GGG, and Lemma B.1 says that such a simulator cannot distinguish GGG's outputs from uniform except with probability 2−Kδ2^{-K^\delta}2−Kδ over the oracle. A union bound over circuits and adversaries of bounded description then yields the obfuscator relative to the oracle. More broadly, the lemma is a clean instance of the principle that a random function is pseudorandom against adversaries with few queries to it, which is used in random-oracle and black-box separation arguments.

The paper gives only a sketch, and formalizing it adds more than a check. The sketch proves the density bound K−δK^{-\delta}K−δ but asserts 2−Kδ2^{-K^\delta}2−Kδ; the counting bound supports the stronger statement, but the step is not written. More seriously, Property 2 of Claim B.1.1 as printed (no query of DG(G(x))D^G(G(x))DG(G(x)) lands in SGS_GSG​, including at xxx itself) cannot be met: a one-query distinguisher that inverts GGG makes every bad GGG violate it, so Claim B.1.1 is false as stated and the proof needs repair. As far as the platform's records show, no part of the argument has been machine-checked.

Difficulty

The naive attempt is a union bound: fix DDD, compute the expected gap over GGG, and apply a concentration inequality over GGG. This fails because DDD queries GGG, so the events "DG(G(x))=1D^G(G(x))=1DG(G(x))=1" for different xxx are correlated through GGG in ways that depend on DDD's adaptive strategy. Neither independence nor a bounded-differences argument applies directly, since changing one value of GGG can change many runs.

The compression argument avoids this, but each of its steps needs care. The set on which DDD's runs are "independent" must be chosen from a fixed SSS so that it is cheap to describe. The simulator must answer queries without the part of GGG being described. The saving from the Chernoff count must exceed the cost of describing SGS_GSG​ inside SSS. Queries a run makes at its own preimage xxx must be handled separately, which is where the printed argument breaks.

Formalization scope

The query trees are an inductive type QTree K L with constructors out : Bool → QTree K L and query : Fin K → (Fin L → QTree K L) → QTree K L, and [K][K][K], [L][L][L] are Fin K, Fin L. A distinguisher is D : Fin L → QTree K L, and "at most KδK^\deltaKδ queries" means every D y has depth at most KδK^\deltaKδ (a real power). Distinguishers are deterministic: the probabilities in the goal are over xxx, yyy and GGG only. Randomized distinguishers, averaged over their coins, are not covered, and the paper's application fixes the simulator's coins.

Every probability is a counting fraction over a finite uniform sample space: Fin K, Fin L, the embeddings Fin K ↪ Fin L, or the subsets of a given size (Finset.powersetCard). Sizes the paper writes as non-integers are floors or inequalities: ∣S∣=⌊K1−5δ⌋|S|=\lfloor K^{1-5\delta}\rfloor∣S∣=⌊K1−5δ⌋ and ∣SG∣≥(1−γ)∣S∣|S_G|\ge(1-\gamma)|S|∣SG​∣≥(1−γ)∣S∣. Each Ω(⋅)\Omega(\cdot)Ω(⋅) is an explicit constant c>0c>0c>0 that depends only on δ\deltaδ. "Sufficiently small δ\deltaδ" is either an explicit range 0<δ≤1/1000<\delta\le1/1000<δ≤1/100 (for the elementary steps) or an existential δ0>0\delta_0>0δ0​>0 (for the counting steps), and "sufficiently large KKK" is an explicit threshold K0K_0K0​.

The goal quantifies ∃δ>0 ∃K0 ∀K≥K0 ∀L≥K2 ∀D\exists\delta>0\ \exists K_0\ \forall K\ge K_0\ \forall L\ge K^2\ \forall D∃δ>0 ∃K0​ ∀K≥K0​ ∀L≥K2 ∀D, so δ\deltaδ cannot depend on KKK or DDD. The probability over GGG is taken outside the absolute value: averaging the gap over GGG would give a much weaker statement and is ruled out. Non-adaptive distinguishers or a fixed query set would also weaken the goal and are not used.

Milestone 1 is stated in a corrected form: it excludes the query at xxx itself and reads the misprint 4/K−4δ4/K^{-4\delta}4/K−4δ as 4K−4δ4K^{-4\delta}4K−4δ. Claim B.1.1 is not a milestone because it is false as printed. Milestones 4 and 6 use the printed Property 2. Contributions repairing the link between the corrected averaging step and the compression step are welcome, as are sorry-free proofs of the generic concentration milestones (2 and 5), which are reusable beyond this mission.

Selected references

  • B. Barak, O. Goldreich, R. Impagliazzo, S. Rudich, A. Sahai, S. Vadhan, K. Yang, On the (Im)possibility of Obfuscating Programs, Journal of the ACM 59(2), 2012. https://doi.org/10.1145/2160158.2160159
  • R. Gennaro, L. Trevisan, Lower bounds on the efficiency of generic cryptographic constructions, FOCS 2000. https://doi.org/10.1109/SFCS.2000.892119
  • W. Hoeffding, Probability inequalities for sums of bounded random variables, Journal of the American Statistical Association 58(301), 1963. https://doi.org/10.1080/01621459.1963.10500830
9 thms1 active userReviewed
Mathematical PhysicsQuantum Information·Captain: wurtle

QMA-hardness of continuum Coulomb energy with unit nuclear chargesResearch Paper

Motivation: hardness of the molecular ground-state energy with ordinary nuclei

Computing the ground-state energy of electrons in the Coulomb field of fixed nuclei is the basic problem of quantum chemistry. In quantum complexity theory, a problem is QMA-hard if every problem with polynomial-time quantum verification of a quantum witness (the quantum analogue of NP) reduces to it. Hardness was previously known for lattice models with magnetic fields, for continuum models with freely designed potentials, and for electronic structure restricted to a supplied finite orbital basis. None of these is the exact problem in which the external field comes only from point nuclei of charge one — hydrogen-like nuclei — and the energy is minimized over every antisymmetric many-electron wavefunction in the continuum. Two obstacles separate the known results from this problem: a designed potential need not be a sum of unit Coulomb wells, and a projected (finite-basis) energy only bounds the continuum infimum from above.

Timeline

  • 1959 — Anderson's superexchange mechanism: virtual hopping through double occupancy produces Heisenberg exchange (Anderson 1959).
  • 1965 / 1990 — Moser and Dacorogna–Moser: transporting volume forms by flows, later used here to place equal-mass nuclei (Moser 1965, Dacorogna–Moser 1990).
  • 2009 — Schuch and Verstraete: QMA-completeness of a Hubbard model with local magnetic fields and a continuum realization with designed scalar and spin-dependent potentials (Nature Phys. 2009).
  • 2017 — Piddock and Montanaro: singlet-pair mediators turning signed into positive (antiferromagnetic) exchange, and 2D lattice hardness (QIC 2017).
  • 2018/2019 — Cubitt, Montanaro and Piddock: universal quantum Hamiltonians, including spatially sparse QMA-hard Heisenberg models with polynomial interaction scales (PNAS 2018, arXiv:1701.05182v4).
  • 2022 — O'Gorman, Irani, Whitfield and Fefferman: QMA-completeness of electronic structure in a supplied finite basis, including a unit-point-charge construction; the complete-space question is left open (PRX Quantum 2022).
  • 2026 — Two OpenAI preprints (OpenAI Math Release, September 24, 2026) claim QMA-hardness of the full continuum problem: one with binary-encoded nuclear charges, and QMA-hardness of continuum Coulomb energy with unit nuclear charges (this mission). Neither is peer reviewed, and the theorem is not formally verified.

Setting

An instance consists of M≥1M\ge1M≥1 pairwise distinct positions Rα∈Q3R_\alpha\in\mathbb Q^3Rα​∈Q3 of nuclei of charge one, an electron number N≥1N\ge1N≥1 encoded in unary, and rational thresholds a<ba<ba<b (signed binary numerators, positive binary denominators). The electronic Hamiltonian is

H=−12∑i=1NΔxi−∑i=1N∑α=1M1∣xi−Rα∣+∑1≤i<j≤N1∣xi−xj∣H=-\frac12\sum_{i=1}^N\Delta_{x_i}-\sum_{i=1}^N\sum_{\alpha=1}^M\frac1{|x_i-R_\alpha|}+\sum_{1\le i<j\le N}\frac1{|x_i-x_j|}H=−21​i=1∑N​Δxi​​−i=1∑N​α=1∑M​∣xi​−Rα​∣1​+1≤i<j≤N∑​∣xi​−xj​∣1​

on HN=⋀N(L2(R3)⊗C2)\mathcal H_N=\bigwedge^N\big(L^2(\mathbb R^3)\otimes\mathbb C^2\big)HN​=⋀N(L2(R3)⊗C2), defined through its closed form on QN=H1(R3N;(C2)⊗N)∩HN\mathcal Q_N=H^1(\mathbb R^{3N};(\mathbb C^2)^{\otimes N})\cap\mathcal H_NQN​=H1(R3N;(C2)⊗N)∩HN​. Antisymmetry exchanges position and spin together and no spin sector is selected. E0=inf⁡spec⁡HE_0=\inf\operatorname{spec}HE0​=infspecH equals the infimum of the form over normalized vectors of QN\mathcal Q_NQN​. YES: E0≤aE_0\le aE0​≤a; NO: E0≥bE_0\ge bE0​≥b. Nuclear repulsion is omitted.

In Lean, unitGroundEnergy is that infimum (as an EReal) over normalized antisymmetric H1H^1H1 states with explicit square-integrable weak gradients; InQMA is defined by polynomial-time uniform {H,T,CNOT}\{H,T,\mathrm{CNOT}\}{H,T,CNOT} circuit families with completeness 2/32/32/3 and soundness 1/31/31/3; QMAHard requires a deterministic polynomial-time (Turing-machine computable) many-one reduction from every QMA promise problem.

Formalization targets

Goal: QMA-hardness with unit nuclear charges

UnitCoulomb is QMA-hard under deterministic polynomial-time many-one reductions,\textsf{UnitCoulomb}\ \text{is QMA-hard under deterministic polynomial-time many-one reductions},UnitCoulomb is QMA-hard under deterministic polynomial-time many-one reductions,

for the promise problem whose valid instances have threshold separation b−a≥1b-a\ge1b−a≥1. This is Theorem 1 of the source in the form produced by its reduction ("threshold separation at least one"), which implies the stated precision b−a≥L−1b-a\ge L^{-1}b−a≥L−1. The goal is published on the platform with status Open.

Significance

The result itself. The theorem shows that the exact clamped-nucleus electronic ground-energy problem is QMA-hard even when all nuclei are protons (charge one), with no supplied basis, magnetic field, or extra potential, and with constant threshold separation. It makes no claim of membership in QMA, of a molecular spectral gap, or of a ground eigenvector. It implies the companion binary-charge theorem, whose input class is larger, while the companion's proof gives independent tools.

Formalizing it. The Lean statement fixes the input encoding, the variational ground energy, and the notion of QMA precisely. Its proof would need the QMA-completeness source (an external theorem), finite spin and Hubbard reductions, and continuum estimates for Coulomb operators (localization, complement gaps, Hardy-type form bounds), most of which is absent from Mathlib. The definitions are shared with the binary-charge mission.

Difficulty

Unit nuclei offer no independently adjustable charges, so the wells needed for a Hubbard model must be produced by the geometry of many nuclei alone; the construction first builds a nonnegative continuous charge density and then replaces it by equal-mass point charges via a measure-transport flow and cubature, with rational rounding. The replacement error is not small on arbitrary states; only its compression to smooth localized modes is small. The lower bound must hold for every antisymmetric state in every spin sector, which requires a uniform gap on the one-particle complement and careful handling of the long-range direct Coulomb repulsion.

Formalization scope

  • Inputs are UnitCoulomb records (a list of rational positions, unary electron count, two binary rationals) with a self-delimiting bit encoding; validity requires M,N≥1M,N\ge1M,N≥1, distinct positions, positive denominators and b−a≥1b-a\ge1b−a≥1. Lowest-terms encoding of rationals is not required in Lean, a harmless relaxation.
  • unitGroundEnergy is computed by toNuclearData with every charge equal to one, using the same Coulomb form as the binary-charge definitions.
  • QMA verifiers use the gate set {H,T,CNOT}\{H,T,\mathrm{CNOT}\}{H,T,CNOT}, uniform generation by Turing.TM2ComputableInPolyTime, and a polynomial size bound; the reduction must be polynomial-time computable on the encodings.
  • Needed infrastructure: a formal QMA-completeness source for Heisenberg models, perturbative reductions, Sobolev/Hardy and quadratic-form methods for Coulomb operators, measure transport (Moser flow), and cubature error bounds.

Selected references

  • P. W. Anderson, New approach to the theory of superexchange interactions, Phys. Rev. 115 (1959), 2–13. https://doi.org/10.1103/PhysRev.115.2
  • J. Moser, On the volume elements on a manifold, Trans. Amer. Math. Soc. 120 (1965), 286–294. https://doi.org/10.1090/S0002-9947-1965-0182927-5
  • B. Dacorogna and J. Moser, On a partial differential equation involving the Jacobian determinant, Ann. Inst. H. Poincaré C 7 (1990), 1–26. https://www.numdam.org/item/AIHPC_1990__7_1_1_0/
  • N. Schuch and F. Verstraete, Computational complexity of interacting electrons and fundamental limitations of density functional theory, Nature Phys. 5 (2009), 732–735. https://doi.org/10.1038/nphys1370
  • S. Piddock and A. Montanaro, The complexity of antiferromagnetic interactions and 2D lattices, Quantum Inf. Comput. 17 (2017), 636–672. https://www.rintonpress.com/xxqic17/qic-17-78/0636-0672.pdf
  • T. S. Cubitt, A. Montanaro and S. Piddock, Universal quantum Hamiltonians, Proc. Natl. Acad. Sci. USA 115 (2018), 9497–9502. https://doi.org/10.1073/pnas.1804949115
  • B. O'Gorman, S. Irani, J. Whitfield and B. Fefferman, Intractability of electronic structure in a fixed basis, PRX Quantum 3 (2022), 020322. https://doi.org/10.1103/PRXQuantum.3.020322
  • G. Teschl, Mathematical Methods in Quantum Mechanics, Graduate Studies in Mathematics 99, AMS, 2009. https://www.mat.univie.ac.at/~gerald/ftp/book-schroe/schroe.pdf
  • OpenAI, Continuum Coulomb hardness with binary nuclear charges, OpenAI Math Release preprint, September 24, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Continuum-Coulomb-hardness-with-binary-nuclear-charges-September-24-2026/Continuum-Coulomb-hardness-with-binary-nuclear-charges-September-24-2026.pdf
  • OpenAI, QMA-hardness of continuum Coulomb energy with unit nuclear charges, OpenAI Math Release preprint, September 24, 2026 (Theorem 1, p. 2). https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/QMA-hardness-of-continuum-Coulomb-energy-with-unit-nuclear-charges-September-24-2026/QMA-hardness-of-continuum-Coulomb-energy-with-unit-nuclear-charges-September-24-2026.pdf
2 thms1 active userReviewed
Mathematical PhysicsQuantum Information·Captain: wurtle

Continuum Coulomb hardness with binary nuclear chargesResearch Paper

Motivation: how hard is the molecular ground-state energy?

Computing the ground-state energy of a molecule — electrons moving in the Coulomb field of fixed nuclei — is the central task of quantum chemistry. Quantum complexity theory asks whether it is hard even for a quantum computer: a problem is QMA-hard if every problem verifiable by a polynomial-time quantum verifier with a quantum witness reduces to it (QMA is the quantum analogue of NP). Many lattice and finite-basis versions of electronic structure are known to be QMA-complete, but those results either allow magnetic fields and designed potentials, or restrict the electrons to a supplied finite orbital basis. The exact problem — external field generated only by positive point nuclei, minimization over the full continuum of antisymmetric many-electron wavefunctions — needs a lower bound excluding every state outside any chosen orbital set, which projection arguments do not provide.

Timeline

  • 1959 — Anderson's theory of superexchange: virtual double occupancy produces Heisenberg exchange between localized spins (Anderson 1959).
  • 2007 — Liu, Christandl and Verstraete: QMA-completeness of NNN-representability (finite modes, Turing reductions) (PRL 2007).
  • 2009 — Schuch and Verstraete: QMA-completeness of a Hubbard model with local magnetic fields, with a continuum realization using designed scalar and spin-dependent potentials (Nature Phys. 2009).
  • 2013 — Whitfield, Love and Aspuru-Guzik survey complexity in electronic structure and the role of magnetic fields (PCCP 2013).
  • 2017–2018 — Piddock and Montanaro: complexity of antiferromagnetic interactions on 2D lattices (QIC 17, 2017); Cubitt, Montanaro and Piddock: universal quantum Hamiltonians, including QMA-hard field-free Heisenberg models (PNAS 2018).
  • 2022 — O'Gorman, Irani, Whitfield and Fefferman: QMA-completeness of electronic structure in a supplied finite basis, explicitly raising the complete-space question (PRX Quantum 2022).
  • 2026 — Two OpenAI preprints (OpenAI Math Release, September 24, 2026) claim QMA-hardness of the exact continuum problem: Continuum Coulomb hardness with binary nuclear charges (this mission) and a companion with unit nuclear charges. Neither is peer reviewed, and the theorem is not formally verified.

Setting

An instance consists of M≥1M\ge1M≥1 pairwise distinct nuclear positions Rα∈Q3R_\alpha\in\mathbb Q^3Rα​∈Q3, positive integer charges ZαZ_\alphaZα​ (encoded in binary), an electron number N≥1N\ge1N≥1 (encoded in unary), and rational thresholds a<ba<ba<b. The electronic Hamiltonian, in atomic units, is

H=−12∑ℓ=1NΔxℓ−∑ℓ=1N∑α=1MZα∣xℓ−Rα∣+∑1≤ℓ<k≤N1∣xℓ−xk∣H=-\frac12\sum_{\ell=1}^N\Delta_{x_\ell}-\sum_{\ell=1}^N\sum_{\alpha=1}^M\frac{Z_\alpha}{|x_\ell-R_\alpha|}+\sum_{1\le\ell<k\le N}\frac1{|x_\ell-x_k|}H=−21​ℓ=1∑N​Δxℓ​​−ℓ=1∑N​α=1∑M​∣xℓ​−Rα​∣Zα​​+1≤ℓ<k≤N∑​∣xℓ​−xk​∣1​

on the antisymmetric space ⋀NL2(R3;C2)\bigwedge^N L^2(\mathbb R^3;\mathbb C^2)⋀NL2(R3;C2) (positions and spins permuted together), defined through its closed quadratic form on H1∩⋀NL2H^1\cap\bigwedge^N L^2H1∩⋀NL2. Let E0=inf⁡Spec⁡HE_0=\inf\operatorname{Spec}HE0​=infSpecH. YES instances have E0≤aE_0\le aE0​≤a; NO instances have E0≥bE_0\ge bE0​≥b. Nuclear repulsion is omitted (clamped-nucleus electronic energy) and all spin sectors are included.

In Lean, groundEnergy is the infimum (in EReal) of the Coulomb form over normalized antisymmetric H1H^1H1 states, given by explicit square-integrable values and weak gradients; QMA is defined through polynomial-time uniform families of {H,T,CNOT}\{H, T, \mathrm{CNOT}\}{H,T,CNOT} circuits with acceptance ≥2/3\ge2/3≥2/3 / ≤1/3\le1/3≤1/3; QMAHard asks for a deterministic polynomial-time many-one reduction (as a Turing-machine-computable map on bit strings) from every QMA promise problem.

Formalization targets

Goal: QMA-hardness with binary charges

BinaryCoulomb is QMA-hard under deterministic polynomial-time many-one reductions,\textsf{BinaryCoulomb}\ \text{is QMA-hard under deterministic polynomial-time many-one reductions},BinaryCoulomb is QMA-hard under deterministic polynomial-time many-one reductions,

for the promise problem whose valid instances satisfy b−a≥1b-a\ge1b−a≥1. This is Theorem 1.1 of the source in its stronger form ("the reduction can produce instances with b−a≥1b-a\ge1b−a≥1"), which implies the stated precision b−a≥L−1b-a\ge L^{-1}b−a≥L−1. The goal is published on the platform with status Open.

Significance

The result itself. The theorem places the exact clamped-nuclei electronic ground-energy problem, with no supplied basis, field, or designed potential, among QMA-hard problems at inverse-polynomial (indeed constant) precision. It makes no claim of membership in QMA, of a spectral gap, or of hardness under bounded charges. The companion unit-charge theorem implies this one for the larger binary-charge input class; the present proof is independent and contributes certified exponential-accuracy eigenvalue computation and relative tunneling calibration for widely separated hydrogenic wells.

Formalizing it. A complete formalization would combine a QMA-completeness source theorem (Heisenberg models), finite spin and Hubbard reductions, and continuum many-body spectral estimates (Hardy inequality, localization, complement gaps) — a large but well-delimited body of mathematics, much of it absent from Mathlib. The precise Lean encoding of inputs and of QMA itself is reusable for other Hamiltonian-complexity missions.

Difficulty

Projecting HHH onto chosen orbitals gives an upper bound on E0E_0E0​ but says nothing about states outside the projection, so finite-basis hardness does not transfer NO instances. The construction must realize prescribed, exponentially small Hubbard hoppings using only point nuclei, with relative (not absolute) precision, and must certify one-well energies to exponential accuracy using polynomially many bits. Finally a lower bound for the full many-electron spectral infimum must hold for every fermionic state, in every spin sector.

Formalization scope

  • Inputs are BinaryCoulomb records (list of rational positions with natural charges, unary electron count, two binary rationals) with an explicit self-delimiting bit encoding; validity requires M,N≥1M,N\ge1M,N≥1, distinct positions, positive denominators, positive charges, and b−a≥1b-a\ge1b−a≥1. Lowest-terms encoding is not required in Lean, a harmless relaxation.
  • The state space is H1Vector n with antisymmetry under simultaneous permutation of positions and spins; groundEnergy is an EReal infimum over normalized states, which is the variational characterization of inf⁡Spec⁡H\inf\operatorname{Spec}HinfSpecH.
  • QMA uses a fixed universal gate set {H,T,CNOT}\{H,T,\mathrm{CNOT}\}{H,T,CNOT} and polynomial-time Turing-machine uniformity (Turing.TM2ComputableInPolyTime); the reduction must also be TM2ComputableInPolyTime.
  • A trivial proof is excluded: YES/NO sets are disjoint by construction and the reduction must preserve both promises for every QMA problem.
  • Needed infrastructure: a QMA-complete source (Kitaev-type local Hamiltonian / Heisenberg problem), perturbative gadgets, Hardy inequality, quadratic-form methods for Coulomb operators, and certified numerical analysis.

Selected references

  • P. W. Anderson, New approach to the theory of superexchange interactions, Phys. Rev. 115 (1959), 2–13. https://doi.org/10.1103/PhysRev.115.2
  • Y.-K. Liu, M. Christandl and F. Verstraete, Quantum computational complexity of the N-representability problem: QMA complete, Phys. Rev. Lett. 98 (2007), 110503. https://doi.org/10.1103/PhysRevLett.98.110503
  • N. Schuch and F. Verstraete, Computational complexity of interacting electrons and fundamental limitations of density functional theory, Nature Phys. 5 (2009), 732–735. https://doi.org/10.1038/nphys1370
  • J. D. Whitfield, P. J. Love and A. Aspuru-Guzik, Computational complexity in electronic structure, Phys. Chem. Chem. Phys. 15 (2013), 397–411. https://doi.org/10.1039/C2CP42695A
  • S. Piddock and A. Montanaro, The complexity of antiferromagnetic interactions and 2D lattices, Quantum Inf. Comput. 17 (2017), 636–672.
  • T. S. Cubitt, A. Montanaro and S. Piddock, Universal quantum Hamiltonians, Proc. Natl. Acad. Sci. USA 115 (2018), 9497–9502. https://doi.org/10.1073/pnas.1804949115
  • B. O'Gorman, S. Irani, J. Whitfield and B. Fefferman, Intractability of electronic structure in a fixed basis, PRX Quantum 3 (2022), 020322. https://doi.org/10.1103/PRXQuantum.3.020322
  • OpenAI, QMA-hardness of continuum Coulomb energy with unit nuclear charges, OpenAI Math Release preprint, September 24, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/QMA-hardness-of-continuum-Coulomb-energy-with-unit-nuclear-charges-September-24-2026/QMA-hardness-of-continuum-Coulomb-energy-with-unit-nuclear-charges-September-24-2026.pdf
  • OpenAI, Continuum Coulomb hardness with binary nuclear charges, OpenAI Math Release preprint, September 24, 2026 (Theorem 1.1, p. 2). https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Continuum-Coulomb-hardness-with-binary-nuclear-charges-September-24-2026/Continuum-Coulomb-hardness-with-binary-nuclear-charges-September-24-2026.pdf
2 thms1 active userReviewed
Mathematical LogicTheoretical Computer Science·Captain: wurtle

Witnessed symmetric choice is strictly stronger than choiceless polynomial time with countingResearch Paper

Motivation

A logic for unordered finite structures (graphs, databases, relational inputs given up to isomorphism) must give answers that do not depend on how the input elements are named. Many polynomial-time algorithms nevertheless make arbitrary intermediate choices, for example the pivot in Gaussian elimination, without changing their final answer. Choiceless polynomial time with counting (CPT), introduced by Blass, Gurevich and Shelah (1999), forbids such choices entirely: it computes with hereditarily finite sets over the input elements and can count, but can never pick one element from a set merely because the set is nonempty.

Witnessed symmetric choice (WSC), in the form of Lichter and Schweitzer (2022, arXiv version 3), adds a controlled form of choice: the logic may pick an element of a set provided it also constructs automorphisms of the input showing that all elements of that set are interchangeable, so the answer cannot depend on which one was picked. Lichter and Schweitzer asked whether CPT + WSC is strictly more expressive than CPT. This mission concerns a proof that it is.

Timeline

  • 1992. Cai, Fürer and Immerman construct graph pairs that hide a global parity obstruction from bounded-variable counting logic (doi:10.1007/BF01305232).
  • 1998. Gire and Hoang introduce a fixpoint logic with a symmetry-based choice construct (doi:10.1006/inco.1998.2712).
  • 1999, 2002. Blass, Gurevich and Shelah introduce choiceless polynomial time and its counting extension, and study CFI and linear-algebra instances (doi:10.1016/S0168-0072(99)00005-6, doi:10.2178/jsl/1190150152).
  • 2003. Dawar and Richerby define a fixed-point logic with symmetric choice, with parameters and nesting (doi:10.1007/978-3-540-45220-1_16).
  • 2008. Dawar, Richerby and Rossman show that preordered CFI queries are CPT-definable, and that bounded-rank CPT fails on them (doi:10.1016/j.apal.2007.11.011).
  • 2014–2021. Abu Zaid, Grädel, Grohe and Pakusa, and Lichter and Schweitzer, obtain CPT canonization for structures with small abelian, dihedral or cyclic colour classes (doi:10.1007/978-3-662-44522-8_5, doi:10.4230/LIPIcs.CSL.2021.31).
  • 2010–2023. Rossman and Pago prove functional lower bounds for CPT (doi:10.1007/978-3-642-15025-8_28, doi:10.4230/LIPIcs.CSL.2021.33, doi:10.4230/LIPIcs.MFCS.2023.73).
  • 2022–2023. Lichter and Schweitzer define CPT + WSC, show that definable isomorphism testing yields canonization, and ask whether WSC strictly adds expressive power (arXiv:2205.14003).

The source of this mission is an OpenAI preprint dated September 24, 2026; its companion preprint (September 23, 2026) proves that CPT does not capture polynomial time.

Setting

Let AAA be a finite set of atoms and HF(A)\mathrm{HF}(A)HF(A) the hereditarily finite sets over AAA. CPT terms are built from variables, ∅\emptyset∅, Atoms\mathrm{Atoms}Atoms, Pair(a,b)={a,b}\mathrm{Pair}(a,b)=\{a,b\}Pair(a,b)={a,b}, Union\mathrm{Union}Union, Unique\mathrm{Unique}Unique (the member of a singleton, else ∅\emptyset∅), Card\mathrm{Card}Card (the von Neumann ordinal ∣a∣|a|∣a∣), comprehensions {s(aˉ,u):u∈t(aˉ), θ(aˉ,u)}\{s(\bar a,u):u\in t(\bar a),\ \theta(\bar a,u)\}{s(aˉ,u):u∈t(aˉ), θ(aˉ,u)} and iteration from ∅\emptyset∅; formulas use input relations, equality and Boolean connectives. A sentence (Φ,p)(\Phi,p)(Φ,p) pairs a closed formula with a polynomial ppp that bounds the number of iteration steps and the hereditary size of all intermediate objects on inputs with nnn atoms; exceeding the bounds yields a default or a failure value †\dagger†.

A WSC operator iterates a step term in which, at each stage, a choice term proposes a nonempty set DDD; one element is chosen, and a witness term must produce automorphisms of the entire input that fix the parameters and all earlier stages and map any element of DDD to any other. If the witnesses are valid along every possible choice sequence, the output formula's value on the terminal state is returned; otherwise the value is †\dagger†.

The true-model class of a sentence is the set of finite structures on which it returns true; false and †\dagger† are both outside it.

Formalization targets

Goal: Theorem 1.1

For the fixed vocabulary τ\tauτ of eight binary relations there is a CPT + WSC sentence (Φ,p)(\Phi,p)(Φ,p) with exactly one WSC occurrence such that

(i) (Φ,p) returns true or false on every finite τ-structure;(ii) TrueModels(Φ,p)≠TrueModels(Ψ,q) for every CPT sentence (Ψ,q).\text{(i)}\ (\Phi,p)\ \text{returns true or false on every finite }\tau\text{-structure;}\qquad \text{(ii)}\ \mathrm{TrueModels}(\Phi,p)\neq\mathrm{TrueModels}(\Psi,q)\ \text{for every CPT sentence }(\Psi,q).(i) (Φ,p) returns true or false on every finite τ-structure;(ii) TrueModels(Φ,p)=TrueModels(Ψ,q) for every CPT sentence (Ψ,q).

The Lean statement OAI.WitnessedChoice.main (via BGS.MainStatement) is open on the platform.

Significance

Since every CPT sentence is a CPT + WSC sentence, Theorem 1.1 gives a strict inclusion of definable Boolean queries and answers the expressiveness question posed by Lichter and Schweitzer in the true-model sense. The separation holds against CPT with counting and sets of arbitrary finite rank, not a rank-restricted fragment. It leaves open whether CPT + WSC captures polynomial time and the effect of nesting WSC operators.

The result is proved in an OpenAI preprint, which has not been peer reviewed. No machine-checked proof exists.

Difficulty

Two different tasks must be done. The upper bound requires a legal WSC definition on all inputs, not only on the intended grid structures: witnesses must be genuine automorphisms of the whole input fixing the full history, which the sentence must check, with a fallback when the input is not of the intended shape. The lower bound must defeat every CPT sentence, including those that build nested sets of large rank; rank-sensitive support arguments (Dawar–Richerby–Rossman) do not suffice. The paper uses a nonabelian automorphism group whose central subgroup has rank-independent small supports, then a counting equivalence and a bounded-width description of complete CPT evaluations.

Formalization scope

  • Syntax is a mutual inductive Term n / Formula n with de Bruijn-style Fin n variables, including iterate and the wsc formula; wscCount counts WSC occurrences.
  • Evaluation returns Option (none is †\dagger†). resource p n = ⌊p(n)⌋ bounds iteration length and transitive-closure size.
  • WSC validity (GoodWSC) quantifies over all choice prefixes; witnesses are permutationGraph g for permutations g that are input automorphisms, fix the free parameters and every earlier stage, and act transitively on the choice set.
  • FiniteInput packs any finite carrier type with the eight-symbol relations (Ed, Cf, EB, VB, I, Z δ, δ : ZMod 3). Sentence.isCPT means wscCount = 0.

A complete development needs hereditarily finite sets with permutation actions, support and counting-equivalence theory, and the grid structures; much of this is shared with the companion CPT noncapture mission. Contributions formalizing Proposition 4.4 (a total all-input definition), Proposition 5.3 (transitivity for every parameter tree), Theorem 5.5 (opposite grid answers), Proposition 6.3 (small-orbit support bound), Theorem 8.1 (transfer through small supports) and Theorem 9.3 (eventual equality for every CPT sentence) are welcome.

Selected references

  • OpenAI, Witnessed symmetric choice is strictly stronger than choiceless polynomial time with counting, preprint, September 24, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Witnessed-symmetric-choice-is-strictly-stronger-than-choiceless-polynomial-time-with-counting-September-24-2026/paper.pdf
  • OpenAI, Choiceless polynomial time with counting does not capture polynomial time, preprint, September 23, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Choiceless-polynomial-time-with-counting-does-not-capture-polynomial-time-September-23-2026/paper.pdf
  • M. Lichter, P. Schweitzer, Choiceless polynomial time with witnessed symmetric choice, 2023 (arXiv v3). https://arxiv.org/abs/2205.14003
  • A. Blass, Y. Gurevich, S. Shelah, Choiceless polynomial time, Ann. Pure Appl. Logic, 1999. https://doi.org/10.1016/S0168-0072(99)00005-6
  • A. Blass, Y. Gurevich, S. Shelah, On polynomial time computation over unordered structures, J. Symbolic Logic, 2002. https://doi.org/10.2178/jsl/1190150152
  • A. Dawar, D. Richerby, B. Rossman, Choiceless polynomial time, counting and the Cai–Fürer–Immerman graphs, Ann. Pure Appl. Logic, 2008. https://doi.org/10.1016/j.apal.2007.11.011
  • J.-Y. Cai, M. Fürer, N. Immerman, An optimal lower bound on the number of variables for graph identification, Combinatorica, 1992. https://doi.org/10.1007/BF01305232
  • F. Gire, H. K. Hoang, An extension of fixpoint logic with a symmetry-based choice construct, Inform. and Comput., 1998. https://doi.org/10.1006/inco.1998.2712
  • A. Dawar, D. Richerby, A fixed-point logic with symmetric choice, CSL, 2003. https://doi.org/10.1007/978-3-540-45220-1_16
2 thms1 active userReviewed
Graph TheoryTheoretical Computer Science·Captain: wurtle

Variable-dimension Weisfeiler–Leman equivalence on general and subcubic graphsResearch Paper

Motivation

Weisfeiler–Leman (WL) refinement compares two graphs by repeatedly refining colors of ordered vertex kkk-tuples. For every fixed dimension kkk this is a polynomial-time procedure, with running time nO(k)n^{O(k)}nO(k). When kkk is part of the input, that computation is no longer polynomial, and the complexity of deciding the outcome becomes a question in its own right. Seppelt (2024) proved coNP-hardness and recorded Berkholz's question whether the problem is EXPTIME-complete.

This preprint answers that question for the joint-update convention: deciding kkk-WL equivalence of two explicit graphs with kkk in binary is EXPTIME-complete, even on connected graphs of maximum degree three.

Background

  • 1968. Weisfeiler and Leman introduce the refinement method.
  • 1982. Luks shows isomorphism of graphs of bounded degree is decidable in polynomial time.
  • 1992. Cai, Fürer and Immerman construct degree-three graphs with small color classes that remain indistinguishable with linearly many counting variables.
  • 2019. Kiefer and Neuen record the joint-update convention and its bijective (k+1)(k+1)(k+1)-pebble game characterization.
  • 2024–2025. Seppelt, and independently Lichter, Raßmann and Schweitzer, prove coNP-hardness of WL equivalence with the dimension as input. Grohe, Lichter, Neuen and Schweitzer compress CFI graphs to obtain long refinement sequences.
  • 2026. The OpenAI preprint Variable-dimension Weisfeiler–Leman equivalence on general and subcubic graphs (dated September 25, 2026) proves EXPTIME-completeness; companion preprints treat identification and fixed-dimension time lower bounds. It has not been peer reviewed; the Lean goal is open on this platform.

Setting

Graphs are finite, simple, undirected and uncolored, given by adjacency matrices. In the joint-update convention a kkk-tuple's initial color records equalities and adjacencies among its entries; each round adjoins to the old color the multiset, over replacement vertices zzz, of the vector of kkk old colors obtained by replacing each coordinate in turn by zzz. Color names are common to both graphs, and G≡kHG \equiv_k HG≡k​H means their kkk-tuple color histograms agree at every round.

The language WL\mathrm{WL}WL consists of encodings (G,H,k)(G, H, k)(G,H,k) with k≥2k \ge 2k≥2 in binary and G≡kHG \equiv_k HG≡k​H. The language SubWL\mathrm{SubWL}SubWL additionally requires GGG and HHH to be connected, of the same positive order, and of maximum degree at most three. Malformed encodings are excluded.

In Lean (OAI.VariableWL), Graph is a SimpleGraph on Fin order, color and histogram implement the joint update by recursion on rounds, pairCode concatenates the two graph codes (order header plus row-major matrix) and the code of kkk, and complexity classes are defined from an explicit deterministic Turing machine model with OutputsWithin, InEXPTIME, PolytimeReduces and EXPTIMEComplete.

Formalization targets

Goal: Theorem 1.1

Both WL\mathrm{WL}WL and SubWL\mathrm{SubWL}SubWL are EXPTIME-complete under deterministic polynomial-time many-one reductions:

WL, SubWL∈EXPTIME,L≤pWL and L≤pSubWL for every L∈EXPTIME.\mathrm{WL},\ \mathrm{SubWL} \in \mathrm{EXPTIME}, \qquad L \le_p \mathrm{WL} \text{ and } L \le_p \mathrm{SubWL} \text{ for every } L \in \mathrm{EXPTIME}.WL, SubWL∈EXPTIME,L≤p​WL and L≤p​SubWL for every L∈EXPTIME.

Significance

The result. Theorem 1.1 resolves the question recorded by Seppelt and strengthens the known coNP-hardness to EXPTIME-completeness. The subcubic case is notable because isomorphism of bounded-degree graphs is polynomial-time (Luks), yet equivalence under refinement at a supplied dimension remains EXPTIME-complete for degree three; nonisomorphic graphs can be equivalent. Corollary 8.3 shows hardness persists with kkk in unary.

Formalizing it. No machine-checked proof exists; the source is an unrefereed preprint. The uniform computation interface developed here is reused by the companion identification paper, so a formalization would serve both missions.

Difficulty

Membership requires showing that the dimension can be capped before allocating tuple tables (Lemma 2.2), since kkk may exceed the graph order. Hardness requires simulating an arbitrary exponential-time computation by a graph pair whose WL equivalence at a polynomially encoded dimension reflects acceptance. Because the number of address coordinates grows with the input, fixed-dimension constructions with dimension-dependent constants do not give a uniform polynomial-time reduction, and in the subcubic case colors must be realized by uncolored degree-three gadgets that a winning strategy still recognizes.

Formalization scope

  • Graphs: SimpleGraph (Fin order); Subcubic bounds every vertex degree by three; SubWL also demands positive equal orders and connectivity.
  • Equivalence quantifies over all rounds sss; colors are nested Multiset types.
  • Dimension k≥2k \ge 2k≥2 is encoded in binary after a unary length header.
  • The Turing machine model is explicit; EXPTIME bounds are 2c(n+1)d2^{c(n+1)^d}2c(n+1)d and reductions run in c(n+1)dc(n+1)^dc(n+1)d steps.

The statement is not trivial: both membership and hardness are required for both languages.

Needed infrastructure: the bijective game characterization (Lemma 2.4), product-circuit compilation (Proposition 3.2), the general and subcubic realizations (Propositions 5.1 and 7.1) and the uniform compiler (Proposition 8.2). Contributions toward any of these are welcome.

Selected references

  • OpenAI, Variable-dimension Weisfeiler–Leman equivalence on general and subcubic graphs, OpenAI Math Release preprint, September 25, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Variable-dimension-Weisfeiler-Leman-equivalence-on-general-and-subcubic-graphs-September-25-2026/paper.pdf
  • OpenAI, The complexity of identifying a graph by Weisfeiler–Leman refinement, OpenAI Math Release preprint, September 25, 2026. https://github.com/openai/math/blob/main/preprints/The-complexity-of-identifying-a-graph-by-Weisfeiler-Leman-refinement-September-25-2026/paper.pdf
  • B. Weisfeiler, A. Leman, The Reduction of a Graph to Canonical Form and the Algebra Which Appears Therein, 1968. https://www.iti.zcu.cz/wl2018/pdf/wl_paper_translation.pdf
  • J.-Y. Cai, M. Fürer, N. Immerman, An Optimal Lower Bound on the Number of Variables for Graph Identification, Combinatorica 12 (1992). https://doi.org/10.1007/BF01305232
  • E. M. Luks, Isomorphism of Graphs of Bounded Valence Can Be Tested in Polynomial Time, J. Comput. Syst. Sci. 25 (1982). https://doi.org/10.1016/0022-0000(82)90009-5
  • S. Kiefer, D. Neuen, The Power of the Weisfeiler–Leman Algorithm to Decompose Graphs, MFCS 2019.
  • T. Seppelt, An Algorithmic Meta Theorem for Homomorphism Indistinguishability, MFCS 2024.
  • M. Lichter, S. Raßmann, P. Schweitzer, Computational Complexity of the Weisfeiler–Leman Dimension, CSL 2025. https://doi.org/10.4230/LIPIcs.CSL.2025.13
  • M. Grohe, M. Lichter, D. Neuen, P. Schweitzer, Compressing CFI Graphs and Lower Bounds for the Weisfeiler–Leman Refinements, J. ACM 72 (2025). https://doi.org/10.1145/3727978
2 thms1 active userReviewed
Graph TheoryTheoretical Computer Science·Captain: wurtle

Unconditional time lower bounds for Weisfeiler–Leman equivalenceResearch Paper

Motivation

The Weisfeiler–Leman (WL) method colors kkk-tuples of vertices by repeatedly recording their local extension patterns; two graphs are kkk-WL equivalent when the stable color histograms agree. For each fixed kkk the direct algorithm runs in time nO(k)n^{O(k)}nO(k): there are nkn^knk tuples and polynomially many refinement rounds. The question is whether the growing exponent is necessary for any algorithm deciding the equivalence relation, not just for implementations of refinement.

This preprint proves that it is, unconditionally: for every sufficiently large fixed kkk, every deterministic sequential decider for kkk-WL equivalence needs time nckn^{ck}nck at every sufficiently large graph order, without assuming the Exponential Time Hypothesis.

Background

  • 1966. Hennie and Stearns use padded machine indices and clocked self-simulation in their time-hierarchy proof.
  • 1968. Weisfeiler and Leman introduce the refinement method.
  • 1992. Cai, Fürer and Immerman's parity constructions establish limits of bounded-variable graph identification.
  • 1996. Hella introduces the bijective pebble game characterizing counting-logic equivalence.
  • 1999. Grohe proves equivalence in finite-variable logics is complete for polynomial time.
  • 2013. Berkholz proves unconditional time lower bounds with exponent linear in the number of pebbles for existential pebble games.
  • 2024–2025. Seppelt, and Lichter, Raßmann and Schweitzer, prove coNP-hardness of WL equivalence when the dimension is part of the input. Grohe, Lichter, Neuen and Schweitzer prove Ωk(nk/2)\Omega_k(n^{k/2})Ωk​(nk/2) lower bounds on the number of refinement rounds via compressed CFI graphs; such bounds do not constrain other algorithms deciding the equivalence.
  • 2026. The OpenAI preprint Unconditional time lower bounds for Weisfeiler–Leman equivalence (dated September 25, 2026) proves the bound stated below. It has not been peer reviewed; the Lean goal is open on this platform.

Setting

Graphs are finite, simple, undirected and uncolored, given as n×nn \times nn×n adjacency matrices. For a kkk-tuple, the initial color records coordinate equalities and adjacencies. Each refinement step keeps the old color and adds, in the joint convention, the multiset over vertices zzz of the kkk-vectors of colors obtained by replacing each coordinate by zzz; in the separate convention, one such multiset per coordinate. Two nnn-vertex graphs are kkk-WL equivalent if their color histograms agree at every round.

A decider for a convention and dimension kkk is a deterministic machine that halts on every encoded pair of nnn-vertex graphs and accepts exactly the equivalent pairs. Its worst-case time TA(n)T_A(n)TA​(n) is the maximum running time over pairs of nnn-vertex graphs (optionally restricted to connected graphs of diameter at most two).

In Lean (OAI.WLTime), Graph n is a symmetric loopless Boolean matrix on Fin n, tupleColor and histogram define both conventions by recursion on rounds, Equivalent compares all rounds, encodePair encodes nnn and both matrices, and machines are either multitape Turing machines (TM) or logarithmic-word RAMs (RAM) whose word operations are themselves implemented by Turing machines in time polynomial in the word length.

Formalization targets

Goal: Theorem 1.1

There are absolute constants c>0c > 0c>0 and k0k_0k0​ such that for every fixed k≥k0k \ge k_0k≥k0​, either convention, either input class (all graphs, or connected graphs of diameter at most two) and every correct deterministic decider AAA in either machine model, there is n0=n0(A,k)n_0 = n_0(A, k)n0​=n0​(A,k) with

TA(n)≥nckfor every n≥n0.T_A(n) \ge n^{ck} \qquad \text{for every } n \ge n_0 .TA​(n)≥nckfor every n≥n0​.

The exponent constant ccc is independent of kkk and of the program; the threshold n0n_0n0​ may depend on both. The bound holds at every large order, not only infinitely often.

Significance

The result. Theorem 1.1 rules out any running time f(k) ng(k)f(k)\,n^{g(k)}f(k)ng(k) with g(k)=o(k)g(k) = o(k)g(k)=o(k), unconditionally. Earlier lower bounds either concerned the number of refinement rounds, assumed ETH, or treated the dimension as part of the input (coNP- and EXPTIME-hardness), which does not give a fixed-dimension exponent. It covers both standard update conventions and the restricted class of diameter-two graphs.

Formalizing it. No machine-checked proof exists; the source is an unrefereed preprint. The Lean statement fixes explicit machine models, so a proof would include a verified padded diagonalization (Theorem 5.2), a verified computation-to-graph reduction (Theorem 4.3) and a verified compressed consistency construction (Theorem 3.2).

Difficulty

Unconditional time lower bounds in concrete models are rare; the only general technique is diagonalization, which yields hard languages but not hard natural problems. The proof must therefore transfer a diagonal language to WL equivalence through a reduction that is efficient enough to preserve an exponent linear in kkk. A polynomial-time computation with exponent proportional to kkk has too many addressed locations to list in a small reduction, and local consistency is symmetric whereas a computation must propagate information forward without forcing false predecessors to become true.

Formalization scope

  • Decides A c k p requires halting and correctness on every pair in the input class at every order nnn; worstTime is a Finset.sup over pairs in the class.
  • Diameter two includes n>0n > 0n>0 and every pair of vertices equal, adjacent, or with a common neighbour (hence connected).
  • Turing machines have finitely many tapes, states and symbols; RAM words have O(log⁡(n+2))O(\log(n+2))O(log(n+2)) bits, and RAM instructions are fixed finite programs whose word operations carry a polynomial-time implementation.
  • Time is a natural number; the bound nckn^{ck}nck is compared in ℝ.

The statement is not vacuous: correct deciders exist (direct refinement), so the conclusion constrains real algorithms.

Needed infrastructure: bijective pebble games and their equivalence with refinement (Lemma 2.3), Turing machine simulation and clocking, and the graph constructions of Sections 3–4. Contributions toward any of these components are welcome.

Selected references

  • OpenAI, Unconditional time lower bounds for Weisfeiler–Leman equivalence, OpenAI Math Release preprint, September 25, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Unconditional-time-lower-bounds-for-Weisfeiler-Leman-equivalence-September-25-2026/paper.pdf
  • B. Weisfeiler, A. Leman, The Reduction of a Graph to Canonical Form and the Algebra Which Appears Therein, 1968. https://www.iti.zcu.cz/wl2018/pdf/wl_paper_translation.pdf
  • J.-Y. Cai, M. Fürer, N. Immerman, An Optimal Lower Bound on the Number of Variables for Graph Identification, Combinatorica 12 (1992). https://doi.org/10.1007/BF01305232
  • L. Hella, Logical Hierarchies in PTIME, Information and Computation 129 (1996). https://doi.org/10.1006/inco.1996.0070
  • F. C. Hennie, R. E. Stearns, Two-Tape Simulation of Multitape Turing Machines, J. ACM 13 (1966). https://doi.org/10.1145/321356.321362
  • C. Berkholz, Lower Bounds for Existential Pebble Games and k-Consistency Tests, Logical Methods in Computer Science 9 (2013).
  • M. Grohe, Equivalence in Finite-Variable Logics Is Complete for Polynomial Time, Combinatorica 19 (1999). https://doi.org/10.1007/s004939970004
  • M. Grohe, M. Lichter, D. Neuen, P. Schweitzer, Compressing CFI Graphs and Lower Bounds for the Weisfeiler–Leman Refinements, J. ACM 72 (2025). https://doi.org/10.1145/3727978
  • M. Lichter, S. Raßmann, P. Schweitzer, Computational Complexity of the Weisfeiler–Leman Dimension, arXiv:2402.11531, 2024. https://arxiv.org/abs/2402.11531
  • T. Seppelt, An Algorithmic Meta Theorem for Homomorphism Indistinguishability, MFCS 2024.
2 thms1 active userReviewed
Graph TheoryTheoretical Computer Science·Captain: wurtle

The complexity of identifying a graph by Weisfeiler–Leman refinementResearch Paper

Motivation

The Weisfeiler–Leman (WL) algorithm refines colors of vertex tuples to test graph isomorphism, and its dimension kkk controls how much tuple information is used. A graph's Weisfeiler–Leman dimension WLdim(G)\mathrm{WLdim}(G)WLdim(G) is the least kkk for which kkk-WL refinement identifies GGG, i.e. distinguishes it from every non-isomorphic graph. This is a standard measure of the descriptive complexity of an individual graph, tied to counting logics and pebble games. The question here is how hard it is to compute: given GGG and kkk, decide whether WLdim(G)≤k\mathrm{WLdim}(G) \le kWLdim(G)≤k.

Identification differs from testing whether a given pair of graphs is equivalent: it quantifies over every possible comparison graph. The preprint shows the problem is EXPTIME-complete when kkk is part of the input.

Background

  • 1968. Weisfeiler and Leman introduce the refinement method.
  • 1992. Cai, Fürer and Immerman relate WL to counting logic and pebble games and construct parity graphs needing linear dimension.
  • 2017. Arvind, Köbler, Rattan and Verbitsky prove P-hardness of identification by color refinement (dimension one).
  • 2019. Kiefer and Neuen give a game formulation used to analyze WL decompositions.
  • 2024. Seppelt proves coNP-hardness of variable-dimension pair equivalence.
  • 2025. Lichter, Raßmann and Schweitzer prove P-hardness of identification for each fixed k≥2k \ge 2k≥2 and NP-hardness when the dimension is part of the input, including on simple uncolored graphs; they also prove coNP-hardness of pair equivalence independently. Grohe, Lichter, Neuen and Schweitzer introduce compressed CFI graphs for round lower bounds.
  • 2026. The OpenAI preprint The complexity of identifying a graph by Weisfeiler–Leman refinement (dated September 25, 2026) proves EXPTIME-completeness, building on the companion preprint on variable-dimension WL equivalence. It has not been peer reviewed; the Lean goal is open on this platform.

Setting

All graphs are finite, simple, undirected and uncolored. For k≥2k \ge 2k≥2 the joint-update convention is used: a kkk-tuple starts with its equality and adjacency type, and each round adjoins the multiset over vertices zzz of the vector of colors obtained by replacing each coordinate by zzz. For k=1k = 1k=1 ordinary color refinement is used. Colors are shared between graphs. G≡kHG \equiv_k HG≡k​H means the tuple-color histograms agree at every round. kkk-WL identifies GGG if G≡kHG \equiv_k HG≡k​H implies G≅HG \cong HG≅H for every graph HHH, and WLdim(G)\mathrm{WLdim}(G)WLdim(G) is the least positive such kkk.

The decision problem takes a nonempty graph GGG by its adjacency matrix and a positive integer kkk in binary, and asks whether WLdim(G)≤k\mathrm{WLdim}(G) \le kWLdim(G)≤k; malformed inputs are rejected.

In Lean (OAI.WLIdentification), Graph is an order with a symmetric loopless Boolean adjacency on Fin order; Equivalent, Identifies and WLdim follow the definitions above; inputs are bit words consisting of a unary order header, the row-major matrix and the binary dimension; complexity classes are defined from an explicit deterministic single-tape Turing machine model (Machine, run, DecidesWithin, InEXPTIME, PolytimeManyOne, EXPTIMEComplete).

Formalization targets

Goal: Theorem 1.1

The language

{⟨G,k⟩:G nonempty, k≥1, WLdim(G)≤k}\{\langle G, k\rangle : G \text{ nonempty},\ k \ge 1,\ \mathrm{WLdim}(G) \le k\}{⟨G,k⟩:G nonempty, k≥1, WLdim(G)≤k}

is EXPTIME-complete under deterministic polynomial-time many-one reductions: it is decidable in time 2C(n+1)d2^{C(n+1)^d}2C(n+1)d, and every EXPTIME language reduces to it in polynomial time.

Significance

The result. Theorem 1.1 settles the complexity of the input-dimension identification problem, strengthening the NP-hardness of Lichter, Raßmann and Schweitzer to EXPTIME-completeness. By Corollary 7.3 hardness persists with kkk in unary, so it does not come from exponentially large numerical dimensions.

Formalizing it. No machine-checked proof exists; the source is an unrefereed preprint. A formal proof would include a verified reduction from arbitrary exponential-time Turing machine computations to graphs, and a verified upper bound for WL identification. The Turing-machine model and the WL definitions in the Lean statement are reusable for the companion missions on WL equivalence.

Difficulty

Hardness must handle the all-mates quantifier: an encoding of a computation into a graph must ensure that every graph HHH that is kkk-WL equivalent to it is isomorphic to it exactly when the computation accepts. Local recognition of gadgets, as in earlier NP-hardness proofs, shows each incidence piece of HHH has an allowed pattern, but the encoding here admits a whole family of shifted constraints, and one must show every shift arising from an equivalent mate lifts to a single global isomorphism on accepting instances. Membership in EXPTIME is also not immediate, since identification quantifies over infinitely many comparison graphs.

Formalization scope

  • Graphs are Fin n-indexed Boolean adjacency matrices; the problem language requires a nonempty graph, a binary word with leading bit true, and a positive value.
  • WLdim G is sInf of the positive identifying dimensions; this set is nonempty for finite graphs (dimension equal to the order identifies), so the infimum is not the default value.
  • Time is counted in steps of the explicit Turing machine on the input length; EXPTIME uses bounds 2C(n+1)d2^{C(n+1)^d}2C(n+1)d and reductions use bounds C(n+1)dC(n+1)^dC(n+1)d.

The goal is not trivial: membership in EXPTIME and hardness under the explicit machine model are both required.

Needed infrastructure: WL refinement monotonicity, pebble games or an equivalent characterization, CFI-type gadget constructions, and Turing-machine simulation. Contributions toward the upper bound (Proposition 7.1) or the reconstruction results of Sections 3–5 are welcome.

Selected references

  • OpenAI, The complexity of identifying a graph by Weisfeiler–Leman refinement, OpenAI Math Release preprint, September 25, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/The-complexity-of-identifying-a-graph-by-Weisfeiler-Leman-refinement-September-25-2026/paper.pdf
  • OpenAI, Variable-dimension Weisfeiler–Leman equivalence on general and subcubic graphs, OpenAI Math Release preprint, September 25, 2026. https://github.com/openai/math/blob/main/preprints/Variable-dimension-Weisfeiler-Leman-equivalence-on-general-and-subcubic-graphs-September-25-2026/paper.pdf
  • B. Weisfeiler, A. Leman, The Reduction of a Graph to Canonical Form and the Algebra Which Appears Therein, Nauchno-Technicheskaya Informatsiya, 1968. https://www.iti.zcu.cz/wl2018/pdf/wl_paper_translation.pdf
  • J.-Y. Cai, M. Fürer, N. Immerman, An Optimal Lower Bound on the Number of Variables for Graph Identification, Combinatorica 12 (1992). https://doi.org/10.1007/BF01305232
  • V. Arvind, J. Köbler, G. Rattan, O. Verbitsky, Graph Isomorphism, Color Refinement, and Compactness, Computational Complexity 26 (2017).
  • M. Lichter, S. Raßmann, P. Schweitzer, Computational Complexity of the Weisfeiler–Leman Dimension, CSL 2025. https://doi.org/10.4230/LIPIcs.CSL.2025.13 (full version https://arxiv.org/abs/2402.11531)
  • T. Seppelt, An Algorithmic Meta Theorem for Homomorphism Indistinguishability, MFCS 2024.
  • M. Grohe, M. Lichter, D. Neuen, P. Schweitzer, Compressing CFI Graphs and Lower Bounds for the Weisfeiler–Leman Refinements, J. ACM 72 (2025). https://doi.org/10.1145/3727978
  • S. Kiefer, D. Neuen, The Power of the Weisfeiler–Leman Algorithm to Decompose Graphs, MFCS 2019.
2 thms1 active userReviewed
Linear algebraTheoretical Computer Science·Captain: wurtle

Finite tensor savings and exact Fourier circuitsResearch Paper

Motivation

The discrete Fourier transform of length nnn is computed by the fast Fourier transform with O(nlog⁡n)O(n\log n)O(nlogn) arithmetic operations, and this has been the benchmark since Cooley and Tukey (1965). Whether Ω(nlog⁡n)\Omega(n\log n)Ω(nlogn) operations are necessary is one of the basic open questions of algebraic complexity theory. Lower bounds of order nlog⁡nn\log nnlogn are known only under restrictions on the algorithm: bounded coefficients, unitary 2×22\times22×2 gates on exactly nnn registers, or bounded conditioning of intermediate maps. In the unrestricted model of linear circuits, where coefficients are arbitrary complex numbers and only arithmetic operations are counted, the question remained open. This mission concerns that unrestricted question.

Timeline

  • 1958. Good gives the multidimensional (coprime-factor) form of the Fourier transform (doi:10.1111/j.2517-6161.1958.tb00300.x).
  • 1965. Cooley and Tukey publish the fast Fourier transform (doi:10.1090/S0025-5718-1965-0178586-1).
  • 1969–1970. Rabiner, Schafer and Rader (chirp zzz-transform) and Bluestein reduce arbitrary lengths to convolution (doi:10.1109/TAU.1969.1162034, doi:10.1109/TAU.1970.1162132).
  • 1973. Morgenstern proves an Ω(nlog⁡n)\Omega(n\log n)Ω(nlogn) lower bound for linear circuits with bounded coefficients (doi:10.1145/321752.321761).
  • 2013–2014. Ailon proves lower bounds for 2×22\times22×2 unitary gate models and for well-conditioned computations (arXiv:1305.4745, arXiv:1403.1307).
  • 2023. Alman and Rao improve the leading constants for power-of-two transforms via matrix non-rigidity (doi:10.1145/3564246.3585188).
  • 2025. Alman and Li characterize asymptotic sizes of depth-two circuits for Kronecker powers (arXiv:2509.14489).

The source of this mission, an OpenAI preprint dated September 25, 2026, claims that the Ω(nlog⁡n)\Omega(n\log n)Ω(nlogn) lower bound fails in the unrestricted complex linear-circuit model.

Setting

For n≥2n\ge2n≥2 let ζn=e2πi/n\zeta_n=e^{2\pi i/n}ζn​=e2πi/n and Fn=(ζnjk)0≤j,k<nF_n=(\zeta_n^{jk})_{0\le j,k<n}Fn​=(ζnjk​)0≤j,k<n​. A linear circuit of length nnn has inputs x0,…,xn−1x_0,\dots,x_{n-1}x0​,…,xn−1​ and the constant 000, followed by a finite sequence of gates. Each gate computes u+vu+vu+v, u−vu-vu−v or λu\lambda uλu from previously available values u,vu,vu,v, where λ∈C\lambda\in\mathbb Cλ∈C is a fixed coefficient; each gate costs one. Values may be reused arbitrarily, and the nnn outputs are designated available values. The circuit computes FnF_nFn​ if its outputs equal FnxF_nxFn​x for every x∈Cnx\in\mathbb C^nx∈Cn. Coefficients may depend on nnn and have no bound on size or description; depth, storage and conditioning are unrestricted. Let L(n)L(n)L(n) be the minimum number of gates.

Formalization targets

Goal: Theorem 1.1

lim inf⁡n→∞L(n)nlog⁡2n=0,\liminf_{n\to\infty}\frac{L(n)}{n\log_2 n}=0,n→∞liminf​nlog2​nL(n)​=0,

equivalently: for every c>0c>0c>0 and every N0≥2N_0\ge2N0​≥2 there are n≥N0n\ge N_0n≥N0​ and an exact circuit for FnF_nFn​ with fewer than c nlog⁡2nc\,n\log_2 ncnlog2​n gates. The Lean statement OAI.ExactFourier.main_theorem is this second form and is open on the platform.

The statement does not assert an upper bound for every length, a uniform construction, or anything about numerical stability. A companion OpenAI preprint gives a quantitative all-length bound in a model that also charges coefficient preparation; that result is not part of this mission.

Significance

The theorem refutes the assertion that L(n)≥c nlog⁡2nL(n)\ge c\,n\log_2nL(n)≥cnlog2​n for some fixed c>0c>0c>0 and all large nnn in the unrestricted linear model. It shows that the known lower bounds necessarily depend on their restrictions (bounded coefficients, conditioning, unitary gates). The mechanism, a single finite tensor saving amplified through tensor powers, is a general tool: one strict improvement over the standard axis-by-axis algorithm for one tensor power of one nonmonomial matrix yields an exponent improvement for all tensor powers.

The result is claimed in an OpenAI preprint; it has not been peer reviewed and no machine-checked proof exists. The existence part of the argument is non-constructive (it proceeds by contradiction through price functions and compactness), so a formal proof is a meaningful check.

Difficulty

Leading-constant improvements of the FFT do not change the nlog⁡nn\log nnlogn scale, and every classical structural algorithm (Cooley–Tukey, Good–Thomas, chirp) has that scale. A gain in the exponent of the logarithm needs a saving that compounds across many tensor factors; but a saving for one tensor power of a small matrix does not obviously transfer to Fourier matrices of growing length, because Fourier factorizations introduce diagonal twiddle factors and change the coordinate set. In addition, the existence of a single finite saving is itself not exhibited explicitly and must be proved.

Formalization scope

  • Gate w is add i j, sub i j or scale c i with c : ℂ, referencing the www values available so far.
  • Program n k is a list of kkk gates in topological order; values 0,…,n−10,\dots,n-10,…,n−1 are the inputs and value nnn is the constant 000 (via Fin.snoc x 0).
  • Circuit n has size, a program of that size, and outputs : Fin n → Fin (n+1+size); output selection is free.
  • fourierMatrix n j k = zeta n ^ (j*k) with zeta n = exp(2πi/n); Computes is equality with mulVec for every input.
  • MainStatement: for every real c>0c>0c>0 and N0≥2N_0\ge2N0​≥2 there are n≥N0n\ge N_0n≥N0​ and a computing circuit with size < c * n * logb 2 n.

A complete development needs tensor products of matrices and circuits, the Chinese Remainder (Good–Thomas) identification of FrsF_{rs}Frs​ with Fr⊗FsF_r\otimes F_sFr​⊗Fs​ for coprime r,sr,sr,s, a Toeplitz/Vandermonde factorization of FrF_rFr​ on its own coordinates, and the price-function existence argument (separation, compactness, feedback). Contributions formalizing Lemma 2.3 (tensor amplification) and Proposition 3.4 (transfer of a finite win to Fourier circuits) are natural first steps.

Selected references

  • OpenAI, Finite tensor savings and exact Fourier circuits, preprint, September 25, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Finite-tensor-savings-and-exact-Fourier-circuits-September-25-2026/main.pdf
  • J. W. Cooley, J. W. Tukey, An algorithm for the machine calculation of complex Fourier series, Math. Comp., 1965. https://doi.org/10.1090/S0025-5718-1965-0178586-1
  • J. Morgenstern, Note on a lower bound on the linear complexity of the fast Fourier transform, J. ACM, 1973. https://doi.org/10.1145/321752.321761
  • N. Ailon, A lower bound for Fourier transform computation in a linear model over 2×2 unitary gates, preprint, 2013. https://arxiv.org/abs/1305.4745
  • N. Ailon, An Ω((nlog⁡n)/R)\Omega((n\log n)/R)Ω((nlogn)/R) lower bound for Fourier transform computation in the RRR-well conditioned model, preprint, 2014. https://arxiv.org/abs/1403.1307
  • J. Alman, K. Rao, Faster Walsh–Hadamard and discrete Fourier transforms from matrix non-rigidity, STOC 2023. https://doi.org/10.1145/3564246.3585188
  • I. J. Good, The interaction algorithm and practical Fourier analysis, J. R. Stat. Soc. B, 1958. https://doi.org/10.1111/j.2517-6161.1958.tb00300.x
  • J. Alman, B. Li, Kronecker powers, orthogonal vectors, and the asymptotic spectrum, preprint, 2025. https://arxiv.org/abs/2509.14489
2 thms1 active userReviewed
Operations ResearchTheoretical Computer Science·Captain: wurtle

The approximation threshold for metric k-medianResearch Paper

Motivation

In metric kkk-median, a finite set JJJ (or DDD) of clients and a finite set FFF of candidate facilities lie in a common finite metric with rational distances. Given an integer k≥1k\ge1k≥1, one opens a nonempty set S⊆FS\subseteq FS⊆F with ∣S∣≤k|S|\le k∣S∣≤k and pays

cost(S)=∑j∈Jd(j,S),d(j,S)=min⁡i∈Sd(j,i),OPTk=min⁡S⊆F, 1≤∣S∣≤kcost(S).\mathrm{cost}(S)=\sum_{j\in J}d(j,S),\qquad d(j,S)=\min_{i\in S}d(j,i),\qquad \mathrm{OPT}_k=\min_{S\subseteq F,\ 1\le|S|\le k}\mathrm{cost}(S).cost(S)=j∈J∑​d(j,S),d(j,S)=i∈Smin​d(j,i),OPTk​=S⊆F, 1≤∣S∣≤kmin​cost(S).

Candidate facilities are part of the input and need not coincide with the clients. It is one of the basic clustering and facility-location objectives, and its approximability has been a testing ground for LP rounding, primal-dual methods and local search. A lower bound has long been known: if P≠NP\mathrm P\ne\mathrm{NP}P=NP, no polynomial-time algorithm achieves a factor below 1+2/e≈1.7361+2/e\approx1.7361+2/e≈1.736 in this candidate-facility model, by a reduction from Feige's coverage gap. The best polynomial-time algorithms had reached 2+ε2+\varepsilon2+ε, leaving a gap between 1.7361.7361.736 and 222.

This mission asks for a formal proof that the threshold is exactly 1+2/e1+2/e1+2/e, as stated in an OpenAI preprint dated September 24, 2026 (source): a deterministic polynomial-time (1+2/e+ε)(1+2/e+\varepsilon)(1+2/e+ε)-approximation for every fixed ε>0\varepsilon>0ε>0, and hence, under P≠NP\mathrm P\ne\mathrm{NP}P=NP, an infimal approximation factor of exactly 1+2/e1+2/e1+2/e. The preprint has not been peer reviewed and its claims have not been independently verified; on the platform the Lean goal is open.

Background

  • 2001–2002 — Jain and Vazirani connect kkk-median to facility location by Lagrangian relaxation and primal-dual methods (J. ACM 2001); Charikar, Guha, Tardos and Shmoys give the first constant-factor approximation by LP rounding (JCSS 2002); Jain, Mahdian and Saberi introduce greedy dual fitting (STOC 2002; J. ACM 2003).
  • 2004 — Arya et al. show that bounded-swap local search achieves 3+ε3+\varepsilon3+ε (SICOMP 2004).
  • 2016 — Li and Svensson show that constant-additive pseudo-approximations can be converted to true approximations at arbitrarily small loss, breaking the factor-333 barrier (SICOMP 2016).
  • 2017–2023 — Bi-point rounding: 2.675+ε2.675+\varepsilon2.675+ε (Byrka et al., TALG 2017) and 2.6132.6132.613 (Gowda et al., SODA 2023).
  • 2019 — Cohen-Addad, Gupta, Kumar, Lee and Li give a tight FPT (1+2/e+ε)(1+2/e+\varepsilon)(1+2/e+ε)-approximation in time kO(k)polyk^{O(k)}\mathrm{poly}kO(k)poly (ICALP 2019).
  • 2025–2026 — Cohen-Addad, Grandoni, Lee, Schwiegelshohn and Svensson reach 2+ε2+\varepsilon2+ε (arXiv:2503.10972); Byrka et al. develop iterative randomized rounding with 2+ε2+\varepsilon2+ε (arXiv:2604.06046).
  • September 2026 — Two OpenAI preprints claim a deterministic (1+2/e+ε)(1+2/e+\varepsilon)(1+2/e+ε)-approximation, matching the known hardness threshold (source), and an independent randomized (2−σ)(2-\sigma)(2−σ)-approximation via anchor recovery and bounded-price strictness (source).
  • Hardness — Feige proves the ln⁡n\ln nlnn threshold for set cover and the perfect-completeness Max-kkk-Coverage gap (J. ACM 1998, Theorem 5.3); Anand and Lee record the resulting 1+2/e1+2/e1+2/e lower bound for kkk-median with specified facilities under P≠NP\mathrm P\ne\mathrm{NP}P=NP (IPCO 2024).

Setting

An instance consists of nnn points with a rational distance table ddd that is a metric (nonnegative, zero exactly on the diagonal, symmetric, triangle inequality), a client set JJJ, a facility set FFF (index sets that may overlap), and an integer 1≤k≤∣F∣1\le k\le|F|1≤k≤∣F∣, encoded in binary. A feasible solution is a nonempty S⊆FS\subseteq FS⊆F with ∣S∣≤k|S|\le k∣S∣≤k. An algorithm is an α\alphaα-approximation if it always outputs a feasible SSS with cost(S)≤α OPTk\mathrm{cost}(S)\le\alpha\,\mathrm{OPT}_kcost(S)≤αOPTk​, and it is polynomial-time if it runs on a deterministic multi-stack Turing machine with finite alphabets in time polynomial in the encoding length.

Formalization targets

Milestone: Theorem 1.1 (p. 1)

For every fixed ε>0\varepsilon>0ε>0 there is a deterministic polynomial-time algorithm which, on every instance, returns a feasible SSS with

∑j∈Jd(j,S)≤(1+2e+ε)OPTk.\sum_{j\in J}d(j,S)\le\Bigl(1+\frac2e+\varepsilon\Bigr)\mathrm{OPT}_k .j∈J∑​d(j,S)≤(1+e2​+ε)OPTk​.

Goal: Corollary 1.2 (p. 2)

If P≠NP\mathrm P\ne\mathrm{NP}P=NP, then

inf⁡{α: a deterministic polynomial-time α-approximation exists}=1+2e.\inf\{\alpha:\ \text{a deterministic polynomial-time }\alpha\text{-approximation exists}\}=1+\frac2e .inf{α: a deterministic polynomial-time α-approximation exists}=1+e2​.

The infimum is not asserted to be attained.

Significance

The result itself. It closes the approximability of metric kkk-median with specified candidate facilities up to arbitrarily small additive error in the factor, ending a sequence of improvements from LP rounding through local search (3+ε3+\varepsilon3+ε), bi-point rounding (2.6752.6752.675, 2.6132.6132.613) to 2+ε2+\varepsilon2+ε. It shows that the FPT factor 1+2/e1+2/e1+2/e of Cohen-Addad et al. is achievable in polynomial time. The case F=JF=JF=J has a different and still separate lower-bound question.

Formalizing it. The goal combines an algorithmic theorem with a hardness reduction. A formal proof needs: the Li–Svensson reduction from constant-additive pseudo-approximations (Theorem 2.2, p. 4); the grid preparation and iterative rounding with a finite directed comparison inequality whose scalar estimates are proved by rational polynomial certificates (Sections 3–5, Appendix A); derandomization by moment-matching distributions of polynomial size (Section 6); and, for the lower bound, NP-hardness of Feige's coverage gap in the Lean computation model. All are reusable for other clustering and covering problems.

Difficulty

Two obstacles meet. The cardinality budget is hard: allowing a constant number of extra facilities makes good connection cost much easier, and earlier rounding analyses in the iterative graph framework only certify factors at least 222 (p. 2). The preprint's new ingredient is a potential that keeps track of surviving assignment copies after an opening and a finite directed comparison inequality (Theorem 4.1, p. 13) that pays for erasures. Then the randomized rounding must be made deterministic and polynomial-time while keeping the analysis valid, which requires preserving exactly the low-order moments the analysis uses (Lemma 6.1, p. 28; Theorem 6.2, p. 33), before Li–Svensson removes the additive surplus. The hardness side is classical but rests on the PCP-based Max-kkk-Coverage gap.

Formalization scope

  • Instance carries n, a Fin n → Fin n → ℚ metric (distance_eq_zero is an iff, so a true metric), client and facility Finsets, and 1 ≤ k ≤ facilities.card. cost sums nearest distances over clients; optimum is the minimum over nonempty facility subsets of size ≤k\le k≤k.
  • Outputs are membership bit masks of an actual feasible set; FactorCorrect α I out requires that mask to describe a nonempty S⊆FS\subseteq FS⊆F with ∣S∣≤k|S|\le k∣S∣≤k and cost(S)≤α OPTk\mathrm{cost}(S)\le\alpha\,\mathrm{OPT}_kcost(S)≤αOPTk​.
  • Polynomial time is Turing.TM2ComputableInPolyTime with finite tape alphabets, on the fixed binary instance encoding.
  • approximationFactors is the set of α\alphaα admitting such an algorithm, and the goal is sInf approximationFactors = 1 + 2/Real.exp 1 under the hypothesis Complexity.PNeNP, where P and NP are defined in the same machine model (NP via polynomial-length witnesses and a finite-alphabet polynomial-time verifier). The set is nonempty by the milestone and bounded below, so sInf is meaningful.
  • The hypothesis P≠NP\mathrm P\ne\mathrm{NP}P=NP is not provable, so the goal is a conditional statement; deriving the lower bound requires a Cook–Levin-type NP-hardness of the coverage gap in this model.

Selected references

  • OpenAI, The approximation threshold for metric k-median, OpenAI Math Release preprint, September 24, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/The-Approximation-Threshold-for-Metric-k-Median-September-24-2026/main.pdf
  • OpenAI, Single-exponential recovery and bounded-price strictness for metric k-median, OpenAI Math Release preprint, September 24, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Single-Exponential-Recovery-and-Bounded-Price-Strictness-for-Metric-k-Median-September-24-2026/paper.pdf
  • U. Feige, A threshold of ln n for approximating set cover, J. ACM 45 (1998). https://doi.org/10.1145/285055.285059
  • A. Anand, E. Lee, Separating k-median from the supplier version, IPCO 2024. https://doi.org/10.1007/978-3-031-59835-7_2
  • K. Jain, M. Mahdian, E. Markakis, A. Saberi, V. V. Vazirani, Greedy facility location algorithms analyzed using dual fitting with factor-revealing LP, J. ACM 50 (2003). https://doi.org/10.1145/950620.950621
  • M. Charikar, S. Li, A dependent LP-rounding approach for the k-median problem, ICALP 2012. https://doi.org/10.1007/978-3-642-31594-7_17
  • R. Gandhi, S. Khuller, S. Parthasarathy, A. Srinivasan, Dependent rounding and its applications to approximation algorithms, J. ACM 53 (2006). https://doi.org/10.1145/1147954.1147956
  • K. N. Gowda, T. Pensyl, A. Srinivasan, K. Trinh, Improved bi-point rounding algorithms and a golden barrier for k-median, SODA 2023. https://doi.org/10.1137/1.9781611977554.ch38
  • K. Jain, V. V. Vazirani, Approximation algorithms for metric facility location and k-median problems using the primal-dual schema and Lagrangian relaxation, J. ACM 48 (2001). https://doi.org/10.1145/375827.375845
  • M. Charikar, S. Guha, É. Tardos, D. B. Shmoys, A constant-factor approximation algorithm for the k-median problem, JCSS 65 (2002). https://doi.org/10.1006/jcss.2002.1882
  • V. Arya, N. Garg, R. Khandekar, A. Meyerson, K. Munagala, V. Pandit, Local search heuristics for k-median and facility location problems, SIAM J. Comput. 33 (2004). https://doi.org/10.1137/S0097539702416402
  • S. Li, O. Svensson, Approximating k-median via pseudo-approximation, SIAM J. Comput. 45 (2016). https://doi.org/10.1137/130938645
  • J. Byrka, T. Pensyl, B. Rybicki, A. Srinivasan, K. Trinh, An improved approximation for k-median and positive correlation in budgeted optimization, ACM TALG 13 (2017). https://doi.org/10.1145/2981561
  • V. Cohen-Addad, A. Gupta, A. Kumar, E. Lee, J. Li, Tight FPT approximations for k-median and k-means, ICALP 2019. https://doi.org/10.4230/LIPIcs.ICALP.2019.42
  • V. Cohen-Addad, F. Grandoni, E. Lee, C. Schwiegelshohn, O. Svensson, A (2+ε)-approximation algorithm for metric k-median, arXiv:2503.10972 (2026 version). https://arxiv.org/abs/2503.10972v2
2 thms1 active userReviewed
Operations ResearchTheoretical Computer Science·Captain: wurtle

A Polynomial-Time Algorithm for Three-Machine Unit-Job SchedulingResearch Paper

Motivation

A set of unit-length jobs with precedence constraints is to be run on a fixed number of identical machines so that all jobs finish as early as possible. For two machines this was solved in 1969–1972; for a number of machines given as part of the input the problem is NP-complete (Ullman, 1975). Whether the problem is polynomial-time solvable for three machines, written P3∣prec,pj=1∣Cmax⁡P3\mid\mathrm{prec},p_j=1\mid C_{\max}P3∣prec,pj​=1∣Cmax​, is problem OPEN8 in the appendix of Garey and Johnson's 1979 book and is one of the best-known open questions on the complexity of scheduling.

Timeline

  • 1969–1971. Fujii, Kasami and Ninomiya solve the two-processor case by matching (doi:10.1137/0117070, erratum doi:10.1137/0120018).
  • 1972. Coffman and Graham give an optimal list-scheduling algorithm for two processors (doi:10.1007/BF00288685).
  • 1975. Ullman proves NP-completeness when the number of machines is part of the input (doi:10.1016/S0022-0000(75)80008-0).
  • 1979. Garey and Johnson list the fixed-three-machine problem as OPEN8; Graham, Lawler, Lenstra and Rinnooy Kan introduce the standard notation (doi:10.1016/S0167-5060(08)70356-X).
  • 1983. Garey, Johnson, Tarjan and Yannakakis give a linear-time algorithm on three processors for opposing forests (doi:10.1137/0604011).
  • 1984. Dolev and Warmuth give an O(nh(m−1)+1)O(n^{h(m-1)+1})O(nh(m−1)+1) algorithm for precedence graphs of height hhh (doi:10.1016/0196-6774(84)90039-7).
  • 2016–2022. Approximation schemes for fixed machine counts: Levey and Rothvoß via LP hierarchies (doi:10.1145/2897518.2897532), Garg's quasi-PTAS (doi:10.4230/LIPIcs.ICALP.2018.59), Li (doi:10.1137/1.9781611976465.178), Das and Wiese (doi:10.4230/LIPIcs.ESA.2022.40).
  • 2025. Nederlof, Swennenhuis and Węgrzycki give an exact algorithm in time 2O(nlog⁡n)2^{O(\sqrt n\log n)}2O(n​logn) for three machines (doi:10.1137/1.9781611978322.16).

The source of this mission, an OpenAI preprint dated September 24, 2026, claims a deterministic polynomial-time algorithm.

Setting

The input is a directed acyclic graph G=(V,E)G=(V,E)G=(V,E) on V={1,…,n}V=\{1,\dots,n\}V={1,…,n}, n≥1n\ge1n≥1, given as an explicit list of arcs, and optionally an integer deadline TTT with 1≤T≤n1\le T\le n1≤T≤n. A feasible schedule with makespan at most TTT is a map

τ:V→{1,…,T}\tau:V\to\{1,\dots,T\}τ:V→{1,…,T}

such that each value is taken at most three times (three machines) and τ(u)<τ(v)\tau(u)<\tau(v)τ(u)<τ(v) for every arc (u,v)∈E(u,v)\in E(u,v)∈E (precedence). Slot ttt means execution during [t−1,t)[t-1,t)[t−1,t). There are no release dates, communication delays or other resources. The input length LLL is the length of the binary encoding of the graph and deadline.

Formalization targets

Goal: Theorem 1.1

There is a single deterministic multitape Turing machine MMM and a constant CCC such that, on every such input of length LLL, MMM halts within

C (L+2)150020C\,(L+2)^{150020}C(L+2)150020

steps and

  • without a deadline, outputs a feasible schedule of minimum makespan;
  • with a deadline TTT, outputs "infeasible" exactly when no feasible schedule with makespan at most TTT exists, and otherwise outputs one.

The exponent is the one stated in the paper and is not optimized; the content of the theorem is that a fixed polynomial bound exists. The Lean statement OAI.ThreeMachine.main_theorem is open on the platform.

Significance

The theorem resolves the polynomial-time side of Garey and Johnson's OPEN8: unit-job makespan scheduling with arbitrary precedence constraints on three identical machines lies in P. Previous exact algorithms were either restricted to special precedence structures (forests, bounded height) or subexponential, and approximation schemes did not decide the optimum. The structural statement behind the algorithm, that feasible schedules admit recursive decompositions whose interval job sets have descriptions of bounded size, may be of independent use for other fixed-machine scheduling problems. No practical running time is claimed.

The result is claimed in an OpenAI preprint; it has not been peer reviewed and no machine-checked proof exists. A formal proof would also certify the running-time analysis in an explicit machine model, which is rarely done for algorithmic results of this size.

Difficulty

Removing selected slots from a feasible schedule leaves gaps that can be rescheduled independently, which suggests a recursive search over the job sets of gaps. The obstacle is their number: naming a gap by its two boundary triples does not determine its job set, and intersecting descriptions inherited from ancestors can make the descriptions grow without bound along a recursion of linear depth. The subexponential decomposition of Nederlof–Swennenhuis–Węgrzycki controls the number of subproblems only up to 2O(nlog⁡n)2^{O(\sqrt n\log n)}2O(n​logn); a polynomial bound needs every subproblem to have a global description of constant size.

Formalization scope

  • Instance n is a list of arcs on Fin n; acyclic forbids a Relation.TransGen cycle. Jobs are Fin n (shifted to 1,…,n1,\dots,n1,…,n in the encoding).
  • Feasible G T τ: slots in [1,T][1,T][1,T], at most three jobs per slot, strict precedence.
  • CorrectOutput distinguishes the optimization mode (none) and the decision mode (some T).
  • The machine model is a custom multitape Turing machine Machine k q g over Fin (g+3) with k+1k+1k+1 tapes; input on tape 0 encoded by encodeInput (self-delimiting binary numbers), output read from tape 0 after halting. The time bound is C (L+2)150020C\,(L+2)^{150020}C(L+2)150020 with LLL the encoded length.
  • The quantifiers are ordered so that the machine and constant are fixed before the instance (uniformity).

A complete development needs the combinatorics of the decomposition (separators and bounded global descriptions), a dynamic program over polynomially many descriptions, and its implementation and time analysis on the given Turing machine model. Contributions formalizing the purely combinatorial structure theorem, independently of the machine model, are welcome.

Selected references

  • OpenAI, A Polynomial-Time Algorithm for Three-Machine Unit-Job Scheduling, preprint, September 24, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/A-polynomial-time-algorithm-for-three-machine-unit-job-scheduling-September-24-2026/paper.pdf
  • M. R. Garey, D. S. Johnson, Computers and Intractability: A Guide to the Theory of NP-Completeness, W. H. Freeman, 1979.
  • E. G. Coffman Jr., R. L. Graham, Optimal scheduling for two-processor systems, Acta Inform., 1972. https://doi.org/10.1007/BF00288685
  • J. D. Ullman, NP-complete scheduling problems, J. Comput. System Sci., 1975. https://doi.org/10.1016/S0022-0000(75)80008-0
  • D. Dolev, M. K. Warmuth, Scheduling precedence graphs of bounded height, J. Algorithms, 1984. https://doi.org/10.1016/0196-6774(84)90039-7
  • J. Nederlof, C. M. F. Swennenhuis, K. Węgrzycki, A subexponential time algorithm for makespan scheduling of unit jobs with precedence constraints, SODA 2025. https://doi.org/10.1137/1.9781611978322.16
  • E. Levey, T. Rothvoß, A (1+ϵ)(1+\epsilon)(1+ϵ)-approximation for makespan scheduling with precedence constraints using LP hierarchies, STOC 2016. https://doi.org/10.1145/2897518.2897532
2 thms1 active userReviewed
Theoretical Computer Science·Captain: wurtle

Beyond the Square-Root Exponent for Depth-Three Boolean CircuitsResearch Paper

Motivation

Proving that explicit Boolean functions need large circuits is the central problem of circuit complexity. Even for very shallow circuits the known bounds are far from what counting arguments suggest. A depth-three OR–AND–OR circuit is an OR of CNFs, with unbounded fan-in and arbitrary sharing; most functions need 2Ω(n)2^{\Omega(n)}2Ω(n) gates in this model, yet for every explicit function in P the best known lower bounds had the form 2cn2^{c\sqrt n}2cn​ for a constant ccc. Håstad's switching lemma gave 2Ω(n)2^{\Omega(\sqrt n)}2Ω(n​) for parity (1989), and Paturi, Pudlák and Zane showed this is tight for parity up to a constant factor (1999), so parity cannot go further. Moving the exponent beyond any constant multiple of n\sqrt nn​ for an explicit language was identified as an open problem in the depth-three literature (Gurumukhani, Paturi, Pudlák, Saks and Talebanfard, CCC 2024; Gurumukhani, Kleber, Paturi, Rosin and Talebanfard, CCC 2026). Depth-three lower bounds are also tied to satisfiability algorithms and to Valiant's approach to lower bounds for logarithmic-depth circuits.

This mission asks for a formal proof that one polynomial-time language requires 2ω(n)2^{\omega(\sqrt n)}2ω(n​) depth-three gates, as stated in an OpenAI preprint dated September 23, 2026 (source). The preprint has not been peer reviewed and its claims have not been independently verified; on the platform the Lean goal is open.

Background

  • 1989 — Håstad's switching lemma yields 2Ω(n)2^{\Omega(\sqrt n)}2Ω(n​) depth-three lower bounds for parity (Almost optimal lower bounds for small depth circuits, Adv. Comput. Res. 5, 1989).
  • 1995 — Håstad, Jukna and Pudlák's top-down method improves the constants for parity and majority (Comput. Complexity 1995) and asks for 2n1/2+ε2^{n^{1/2+\varepsilon}}2n1/2+ε.
  • 1999–2000 — Paturi, Pudlák and Zane prove the sharp parity bound via the satisfiability coding lemma (Chicago J. TCS 1999); Paturi, Saks and Zane prove 2n−o(n)2^{n-o(n)}2n−o(n) bounds for bottom fan-in two (Comput. Complexity 2000).
  • 2001 — Impagliazzo, Paturi and Zane's sunflower sparsification (JCSS 2001).
  • 2005 — Paturi, Pudlák, Saks and Zane's code-membership bound with exponent (π/6)n(\pi/\sqrt6)\sqrt n(π/6​)n​ (JACM 2005).
  • 2024–2026 — Local enumeration and bottom-fan-in-three bounds (CCC 2024); optimal depth-three circuits for inner product (CCC 2026).
  • September 2026 — The OpenAI preprint claims a polynomial-time language with S3(fn)=2ω(n)S_3(f_n)=2^{\omega(\sqrt n)}S3​(fn​)=2ω(n​) (Theorem 1.1, p. 1).

Setting

A literal is a variable xix_ixi​ or its negation; negations are free. A depth-three OR–AND–OR circuit on nnn inputs has bottom OR gates (clauses) reading literals and optional constants, middle AND gates reading bottom gates, and one top OR gate reading middle gates. Fan-in and fan-out are unbounded and gates may be shared. Its size counts every bottom gate, every middle gate and the output gate. For f:{0,1}n→{0,1}f:\{0,1\}^n\to\{0,1\}f:{0,1}n→{0,1}, S3(f)S_3(f)S3​(f) is the least size of such a circuit computing fff exactly. For a language L⊆{0,1}∗L\subseteq\{0,1\}^*L⊆{0,1}∗, fnf_nfn​ is its membership function on {0,1}n\{0,1\}^n{0,1}n.

Formalization targets

Goal: Theorem 1.1 (p. 1)

There are a language L⊆{0,1}∗L\subseteq\{0,1\}^*L⊆{0,1}∗, a deterministic multi-tape Turing machine deciding LLL, and positive integers C,aC,aC,a such that the machine halts within C(n+1)aC(n+1)^aC(n+1)a steps on every input of length nnn, and for every real A>0A>0A>0 there is NAN_ANA​ with

S3(fn) > 2Anfor all n≥NA.S_3(f_n)\ >\ 2^{A\sqrt n}\qquad\text{for all } n\ge N_A .S3​(fn​) > 2An​for all n≥NA​.

The language and machine are fixed before AAA; no uniformity or bottom fan-in restriction is imposed on the circuits.

Significance

The result itself. It is the first explicit depth-three lower bound whose exponent is not O(n)O(\sqrt n)O(n​), crossing the barrier at which parity, majority and the earlier code-membership functions stop. It is weaker than the 2n1/2+ε2^{n^{1/2+\varepsilon}}2n1/2+ε bound asked by Håstad, Jukna and Pudlák and gives no fixed improvement of the exponent's power. Because every function has a single-CNF representation when bottom fan-in is unbounded, the result depends on counting all gates, as stated.

Formalizing it. Circuit lower bounds are combinatorial statements well suited to formal proof, but the libraries are thin: a complete development needs a Turing-machine time bound for a concrete polynomial-evaluation language, restriction arguments for CNFs, the Erdős–Rado sunflower lemma, and limited-independence estimates from hashing and polynomial interpolation. All of these are reusable in complexity theory. No machine-checked depth-three lower bound beyond small cases is known.

Difficulty

The classical switching lemma changes the normal form and loses a constant in the exponent, which keeps bounds at the cnc\sqrt ncn​ scale, and parity is provably no harder than 2O(n)2^{O(\sqrt n)}2O(n​), so a different hard function and a different argument are needed. The preprint needs a function whose sign has small correlation with every moderately wide CNF, independently of the number of clauses. Its key step (Lemma 3.1, p. 4) expresses each randomly restricted width-kkk CNF as a signed combination of width-bbb CNFs with expected coefficient mass at most two, with no dependence on the clause count. A uniform polynomial-time language cannot search for a hard function at each length, so hardness must come from inputs that carry the parameters selecting a hard slice (Section 5).

Formalization scope

  • Circuit3 (Fin n) has bottomCount raw clauses (lists of literals or Boolean constants), middleCount AND gates given as Finsets of bottom indices, and a top Finset of middle indices; gateCount = bottomCount + middleCount + 1. Computes requires exact agreement with L (List.ofFn x) on every input.
  • The machine model FiniteMultiTapeMachine has finitely many tapes, a finite alphabet, finite states, an input tape initialized with the input, and an accept predicate on the halting state. MultiTapeHaltsIn M w (L w) (C*(|w|+1)^a) requires halting within the bound with output L w.
  • The order of quantifiers is ∃L,M,C,a\exists L, M, C, a∃L,M,C,a before ∀A>0 ∃N ∀n≥N ∀\forall A>0\ \exists N\ \forall n\ge N\ \forall∀A>0 ∃N ∀n≥N ∀ circuits, with a strict inequality 2An<gateCount2^{A\sqrt n}<\mathrm{gateCount}2An​<gateCount in ℝ.
  • The statement is not vacuous: circuits exist for every function, so the claim is a genuine lower bound on all of them.

Selected references

  • OpenAI, Beyond the Square-Root Exponent for Depth-Three Boolean Circuits, OpenAI Math Release preprint, September 23, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Beyond-the-Square-Root-Exponent-for-Depth-Three-Boolean-Circuits-September-23-2026/main.pdf
  • J. Håstad, Almost optimal lower bounds for small depth circuits, Randomness and Computation, Adv. Comput. Res. 5 (1989), 143–170.
  • J. Håstad, S. Jukna, P. Pudlák, Top-down lower bounds for depth-three circuits, Comput. Complexity 5 (1995), 99–112. https://doi.org/10.1007/BF01268140
  • R. Paturi, P. Pudlák, F. Zane, Satisfiability coding lemma, Chicago J. Theor. Comput. Sci. (1999), Article 11.
  • R. Paturi, M. E. Saks, F. Zane, Exponential lower bounds for depth three Boolean circuits, Comput. Complexity 9 (2000), 1–15. https://doi.org/10.1007/PL00001598
  • R. Impagliazzo, R. Paturi, F. Zane, Which problems have strongly exponential complexity?, J. Comput. Syst. Sci. 63 (2001), 512–530. https://doi.org/10.1006/jcss.2001.1774
  • R. Paturi, P. Pudlák, M. E. Saks, F. Zane, An improved exponential-time algorithm for k-SAT, J. ACM 52 (2005), 337–364. https://doi.org/10.1145/1066100.1066101
  • M. Gurumukhani, R. Paturi, P. Pudlák, M. Saks, N. Talebanfard, Local enumeration and majority lower bounds, CCC 2024. https://doi.org/10.4230/LIPIcs.CCC.2024.17
  • M. Gurumukhani, D. Kleber, R. Paturi, C. Rosin, N. Talebanfard, Optimal depth-three circuits for inner product, CCC 2026. https://doi.org/10.4230/LIPIcs.CCC.2026.27
  • H. Dell, T. Husfeldt, D. Marx, N. Taslaman, M. Wahlén, Exponential time complexity of the permanent and the Tutte polynomial, ACM Trans. Algorithms 10 (2014). https://doi.org/10.1145/2635812
  • P. Erdős, R. Rado, Intersection theorems for systems of sets, J. London Math. Soc. (1960). https://doi.org/10.1112/jlms/s1-35.1.85
2 thms1 active userReviewed
Operations ResearchTheoretical Computer Science·Captain: wurtle

Uniform computation of the squared-logarithmic k-server boundResearch Paper

Motivation

In the kkk-server problem, kkk labelled servers occupy points of a metric space, requests arrive online, and each request is served by moving one server onto it; the cost is the total distance moved, compared with the offline optimum through the competitive ratio. A companion OpenAI preprint claims that on every metric there exists a randomized policy with ratio O(log⁡2(k+1))O(\log^2(k+1))O(log2(k+1)) against oblivious requests, matching the known worst-case lower bound. That result is an existence statement: it gives no procedure for computing the policy's probabilities.

This mission asks whether the bound can be realized by one uniform algorithm with explicit bit complexity on all finite rational metrics, as stated in an OpenAI preprint dated September 24, 2026 (source). The preprint has not been peer reviewed and its claims have not been independently verified; on the platform the Lean goal is open.

Background

  • 1988–1990 — Manasse, McGeoch and Sleator introduce the kkk-server problem and prove the deterministic lower bound kkk (STOC 1988; J. Algorithms 1990).
  • 1991 — Paging (the uniform metric): Fiat, Karp, Luby, McGeoch, Sleator and Young give the randomized marking algorithm and the harmonic lower bound (J. Algorithms 1991); McGeoch and Sleator attain HkH_kHk​ exactly (Algorithmica 1991). This suggested the randomized kkk-server conjecture, an O(log⁡k)O(\log k)O(logk) ratio on every metric.
  • 1995 — Koutsoupias and Papadimitriou prove that the work function algorithm is (2k−1)(2k-1)(2k−1)-competitive (J. ACM 1995).
  • 1996–2004 — Probabilistic tree embeddings: Bartal (FOCS 1996) and Fakcharoenphol–Rao–Talwar with distortion O(log⁡n)O(\log n)O(logn) (JCSS 2004).
  • 2012–2015 — Bansal, Buchbinder and Naor give O(log⁡k)O(\log k)O(logk) for weighted paging (J. ACM 2012); Bansal, Buchbinder, Mądry and Naor give the first polylogarithmic bound O(log⁡2klog⁡3nlog⁡log⁡n)O(\log^2k\log^3n\log\log n)O(log2klog3nloglogn) on arbitrary finite metrics (J. ACM 2015).
  • 2018 — Bubeck, Cohen, Lee, Lee and Mądry achieve O(log⁡2k)O(\log^2 k)O(log2k) on hierarchically separated trees, hence O(log⁡2klog⁡n)O(\log^2k\log n)O(log2klogn) on nnn-point metrics (STOC 2018).
  • 2023 — Bubeck, Coester and Rabani disprove the randomized kkk-server conjecture: some (k+1)(k+1)(k+1)-point metrics need ratio Ω(log⁡2k)\Omega(\log^2k)Ω(log2k) (STOC 2023).
  • 2026 — Coester and Cosson make the tree and finite-metric bounds polynomial-time, with ratio O(log⁡nlog⁡2k)O(\log n\log^2k)O(lognlog2k) on general metrics (ICALP 2026).
  • September 2026 — Two OpenAI preprints claim the matching upper bound O(log⁡2(k+1))O(\log^2(k+1))O(log2(k+1)) on every metric space (source) and a uniform bit-level implementation on finite rational metrics (source).

Setting

Fix n≥3n\ge3n≥3 and 2≤k<n2\le k<n2≤k<n. A rational metric on X={1,…,n}X=\{1,\dots,n\}X={1,…,n} is a table d(x,y)∈Qd(x,y)\in\mathbb Qd(x,y)∈Q that is nonnegative, zero exactly on the diagonal, symmetric, and satisfies the triangle inequality. An initial labelled tuple s∈Xks\in X^ks∈Xk may have repetitions. For a request word σ\sigmaσ, costA,s(σ)\mathrm{cost}_{A,s}(\sigma)costA,s​(σ) is the algorithm's total movement and OPTs(σ)\mathrm{OPT}_s(\sigma)OPTs​(σ) the minimum over all choices of serving labels with knowledge of σ\sigmaσ. LLL denotes the total binary length of the encoding of (n,k,d,s)(n,k,d,s)(n,k,d,s).

The computational model is a bit machine: a finite control with an input tape, finitely many work tapes over {0,1,blank}\{0,1,\text{blank}\}{0,1,blank}, an output channel, and one fresh unbiased random bit per step. At each request the input tape is replaced by the encoded request, the internal state is retained, and the output after the step budget names the server to move.

Formalization targets

Goal: Theorem 1.1 (p. 1)

There are an absolute constant CCC and a polynomial ppp such that a single uniform randomized online algorithm, on every instance (n,k,d,s)(n,k,d,s)(n,k,d,s) as above,

  • preprocesses the instance in at most p(L)p(L)p(L) bit operations;
  • serves request rtr_trt​, for every reachable history and internal state, in at most p(L+⌈log⁡2(t+1)⌉)p\bigl(L+\lceil\log_2(t+1)\rceil\bigr)p(L+⌈log2​(t+1)⌉) further bit operations, outputting a valid server label and moving exactly that server;
  • for every fixed finite request sequence σ\sigmaσ independent of its random bits satisfies
E costA,s(σ) ≤ C (log⁡(k+1))2 OPTs(σ)+Bd,k,s,\mathbb E\,\mathrm{cost}_{A,s}(\sigma)\ \le\ C\,\bigl(\log(k+1)\bigr)^2\,\mathrm{OPT}_s(\sigma)+B_{d,k,s},EcostA,s​(σ) ≤ C(log(k+1))2OPTs​(σ)+Bd,k,s​,

with Bd,k,s<∞B_{d,k,s}<\inftyBd,k,s​<∞ independent of σ\sigmaσ and of its length.

Significance

The result itself. It converts the existence theorem into an algorithm whose ratio is independent of nnn, using only unbiased random bits and polynomial work per request in the input length and the bit length of the request counter. The price is an additive constant Bd,k,sB_{d,k,s}Bd,k,s​ with no size bound: the algorithm may serve a very long initial stretch with a fixed label while its constructor runs. Coester and Cosson obtain stronger time and randomness guarantees but with ratio O(log⁡nlog⁡2k)O(\log n\log^2k)O(lognlog2k) on general metrics; the two results are incomparable.

Formalizing it. The goal is stated in an explicit machine model, so a formal proof certifies both the competitive bound and the bit-complexity bound. It needs the companion existence theorem (Theorem 2.1 here, p. 4) as an input; a full development therefore also requires formalizing that theorem or taking it as a separate milestone. Exact rational linear algebra (Fourier–Motzkin elimination), dyadic rounding of probabilities, and step-counted machine simulation are reusable.

Difficulty

Knowing that a good policy exists does not give its probabilities, and a finite horizon alone does not control a long input on which the optimum barely moves. The preprint (pp. 3–4) solves a rational linear system for each horizon, then filters requests so that only those missed by some strongly lazy service with bounded moves are retained, which bounds the retained word length; a marking fallback pays for trajectories exceeding the move cap. The constructor's running time is uncontrolled, so the algorithm simulates it for only ⌊log⁡2(t+1)⌋\lfloor\log_2(t+1)\rfloor⌊log2​(t+1)⌋ steps at request ttt (Proposition 4.2, p. 14), and the delayed activation is absorbed into Bd,k,sB_{d,k,s}Bd,k,s​.

Formalization scope

  • RationalMetric n is a Fin n → Fin n → ℚ table with the metric axioms; configurations are Fin k → Fin n; offlineCost is the sInf over label histories matching the request word (a finite, nonempty set of costs).
  • BitMachine has finitely many controls and tapes and a transition consuming one coin per step. Preprocessing (boot) runs c(L+1)ec(L+1)^ec(L+1)e steps with all coins 000, so it is deterministic; this is satisfied by the source's deterministic constructor, and Theorem 1.1 does not require randomness there.
  • Each request runs exactly requestBudget c e L t =c(L+⌈log⁡2(t+1)⌉+1)e=c(L+\lceil\log_2(t+1)\rceil+1)^e=c(L+⌈log2​(t+1)⌉+1)e steps (Nat.clog 2 (t+1)) and must have yielded with output value <k<k<k for every reachable state and every coin string; requests are encoded by a fixed self-delimiting binary code.
  • machineExpectedCost averages over all coin strings of the step budget, i.e. uniformly random bits; the bound is required for every request list w, with B≥0B\ge0B≥0 chosen after (d,s)(d,s)(d,s) and before w.
  • The machine, the polynomial (c,e)(c,e)(c,e) and CCC are fixed before nnn, kkk, ddd, sss: the algorithm is uniform.

Selected references

  • OpenAI, Uniform computation of the squared-logarithmic k-server bound, OpenAI Math Release preprint, September 24, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Uniform-computation-of-the-squared-logarithmic-k-server-bound-September-24-2026/Uniform-computation-of-the-squared-logarithmic-k-server-bound-September-24-2026.pdf
  • OpenAI, Squared-logarithmic randomized k-server on arbitrary metrics, OpenAI Math Release preprint, September 24, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Squared-logarithmic-randomized-k-server-on-arbitrary-metrics-September-24-2026/Squared-logarithmic-randomized-k-server-on-arbitrary-metrics-September-24-2026.pdf
  • D. Komm, R. Královič, R. Královič, T. Mömke, Randomized online computation with high probability guarantees, Algorithmica (2022). https://doi.org/10.1007/s00453-022-00925-z
  • G. B. Dantzig, B. C. Eaves, Fourier–Motzkin elimination and its dual, J. Combin. Theory Ser. A 14 (1973). https://doi.org/10.1016/0097-3165(73)90004-6
  • M. S. Manasse, L. A. McGeoch, D. D. Sleator, Competitive algorithms for server problems, J. Algorithms 11 (1990). https://doi.org/10.1016/0196-6774(90)90003-W
  • E. Koutsoupias, C. H. Papadimitriou, On the k-server conjecture, J. ACM 42 (1995). https://doi.org/10.1145/210118.210128
  • A. Fiat, R. M. Karp, M. Luby, L. A. McGeoch, D. D. Sleator, N. E. Young, Competitive paging algorithms, J. Algorithms 12 (1991). https://doi.org/10.1016/0196-6774(91)90041-V
  • N. Bansal, N. Buchbinder, A. Mądry, J. Naor, A polylogarithmic-competitive algorithm for the k-server problem, J. ACM 62 (2015). https://doi.org/10.1145/2783434
  • S. Bubeck, M. B. Cohen, J. R. Lee, Y. T. Lee, A. Mądry, k-server via multiscale entropic regularization, STOC 2018. https://doi.org/10.1145/3188745.3188798
  • S. Bubeck, C. Coester, Y. Rabani, The randomized k-server conjecture is false!, STOC 2023. https://doi.org/10.1145/3564246.3585132
  • C. Coester, R. Cosson, Randomized k-server in polynomial time, ICALP 2026. https://doi.org/10.4230/LIPIcs.ICALP.2026.65
  • J. Fakcharoenphol, S. Rao, K. Talwar, A tight bound on approximating arbitrary metrics by tree metrics, JCSS 69 (2004). https://doi.org/10.1016/j.jcss.2004.04.011
2 thms1 active userReviewed
Algebraic GeometryTheoretical Computer Science·Captain: wurtle

A cubic lower bound for border determinantal complexity of the permanentResearch Paper

Motivation

The permanent of an m×mm\times mm×m matrix X=(xij)X=(x_{ij})X=(xij​),

per⁡m(X)=∑σ∈Sm∏i=1mxi,σ(i),\operatorname{per}_m(X)=\sum_{\sigma\in S_m}\prod_{i=1}^m x_{i,\sigma(i)},perm​(X)=σ∈Sm​∑​i=1∏m​xi,σ(i)​,

has the same monomials as the determinant but no signs. The determinant can be computed in polynomial time; the permanent is #P-hard (Valiant, 1979). Valiant's algebraic theory makes this contrast precise: the determinant is complete for small formulas and branching programs, the permanent is complete for the class VNP, and VP ≠ VNP, the algebraic analogue of P ≠ NP, would follow if the permanent cannot be written as a determinant of polynomially larger size with affine-linear entries. Mulmuley and Sohoni's geometric complexity theory reformulates this through orbit closures, which leads to the border version of the question studied here.

Timeline

  • 1979. Valiant shows that formulas reduce to determinants and that the permanent is complete for its algebraic class (doi:10.1145/800135.804419), and that computing the permanent is #P-complete (doi:10.1016/0304-3975(79)90044-6).
  • 1987–1990. Linear lower bounds of order 2 m\sqrt2\,m2​m: von zur Gathen (Babai–Seress bound) (doi:10.1016/0024-3795(87)90337-5), Meshulam (doi:10.1016/0024-3795(89)90465-5), Cai (doi:10.1016/0890-5401(90)90036-H).
  • 2001 and 2008. Mulmuley and Sohoni propose geometric complexity theory (doi:10.1137/S009753970038715X, doi:10.1137/080718115).
  • 2004. Mignon and Ressayre prove dc(per⁡m)≥m2/2\mathrm{dc}(\operatorname{per}_m)\ge m^2/2dc(perm​)≥m2/2 in characteristic zero via Hessian rank (doi:10.1155/S1073792804142566).
  • 2010. Cai, Chen and Li extend the quadratic bound to odd characteristic (doi:10.1007/s00037-009-0284-2).
  • 2012. Grenet represents per⁡m\operatorname{per}_mperm​ as a determinant of order 2m−12^m-12m−1 (upper bound).
  • 2013. Landsberg, Manivel and Ressayre prove the border bound bdc(per⁡m)≥m2/2\mathrm{bdc}(\operatorname{per}_m)\ge m^2/2bdc(perm​)≥m2/2 (doi:10.4171/CMH/292).
  • 2017. Alper, Bogart and Velasco bound dc\mathrm{dc}dc via the codimension of the singular locus, which is only linear for the permanent (doi:10.1007/s10208-015-9300-x); Landsberg and Ressayre prove exponential bounds for representations with symmetry (doi:10.1016/j.difgeo.2017.03.017).

Until this work the best lower bounds for both exact and border determinantal complexity of the permanent were quadratic. The source of this mission, an OpenAI preprint dated September 24, 2026, claims a cubic lower bound in the border model.

Setting

For a complex polynomial f∈C[x1,…,xN]f\in\mathbb C[x_1,\dots,x_N]f∈C[x1​,…,xN​], the determinantal complexity dc(f)\mathrm{dc}(f)dc(f) is the least positive integer nnn with

f=det⁡(A0+∑j=1NxjAj),A0,…,AN∈Matn(C).f=\det\Bigl(A_0+\sum_{j=1}^N x_jA_j\Bigr),\qquad A_0,\dots,A_N\in\mathrm{Mat}_n(\mathbb C).f=det(A0​+j=1∑N​xj​Aj​),A0​,…,AN​∈Matn​(C).

The border determinantal complexity bdc(f)\mathrm{bdc}(f)bdc(f) is the least positive nnn such that fff is a coefficientwise limit of such determinants of size nnn (the size stays fixed along the sequence; the matrices are arbitrary). Clearly bdc(f)≤dc(f)\mathrm{bdc}(f)\le\mathrm{dc}(f)bdc(f)≤dc(f).

Formalization targets

Corollary 9.3 (milestone): smooth initial forms

If g∈C[x1,…,xd]g\in\mathbb C[x_1,\dots,x_d]g∈C[x1​,…,xd​], d≥2d\ge2d≥2, a∈Cda\in\mathbb C^da∈Cd, and the lowest nonzero homogeneous term GrG_rGr​ of g(a+x)g(a+x)g(a+x) has degree r≥2r\ge2r≥2 and defines a smooth projective hypersurface, then

bdc(g) ≥ (r−1)(d−1)4e,dc(g) ≥ (r−1)(d−1)4e.\mathrm{bdc}(g)\ \ge\ \frac{(r-1)(d-1)}{4e},\qquad \mathrm{dc}(g)\ \ge\ \frac{(r-1)(d-1)}{4e}.bdc(g) ≥ 4e(r−1)(d−1)​,dc(g) ≥ 4e(r−1)(d−1)​.

Goal: Theorem 1.1 and Corollary 9.1

For every m≥1408m\ge1408m≥1408,

bdc(per⁡m) ≥ m35 529 600 e,dc(per⁡m) ≥ m35 529 600 e.\mathrm{bdc}(\operatorname{per}_m)\ \ge\ \frac{m^3}{5\,529\,600\,e},\qquad \mathrm{dc}(\operatorname{per}_m)\ \ge\ \frac{m^3}{5\,529\,600\,e}.bdc(perm​) ≥ 5529600em3​,dc(perm​) ≥ 5529600em3​.

The constants are those stated in the paper and are not optimized. The Lean statement OAI.PermanentBorder.permanent_cubic_lower_bounds is open on the platform.

Significance

The theorem raises the exponent of the best lower bound for the permanent versus determinant problem from 222 (Mignon–Ressayre, Landsberg–Manivel–Ressayre) to 333, in the border model and hence also in the exact model. Through determinant reductions it also gives Ω(m3)\Omega(m^3)Ω(m3) lower bounds on the size of affine-linear algebraic branching programs for the permanent. It remains a polynomial bound: superpolynomial determinantal complexity of the permanent, which would separate VP from VNP-type classes, is still open. The smooth-form bound of Corollary 9.3 applies to any polynomial with a smooth initial form, not only the permanent.

The result is claimed in an OpenAI preprint; it has not been peer reviewed and no machine-checked proof exists. Formalizing it would certify the polar-degree counting argument and the coefficient-projection construction that extracts a smooth form of linear degree and quadratic dimension from the permanent.

Difficulty

The Hessian method stops at the quadratic scale: the Hessian of an order-nnn determinant has rank at most 2n2n2n at a singular matrix, while the permanent's Hessian has rank at most m2m^2m2, so it cannot give more than m2/2m^2/2m2/2. Singular-locus methods give only linear bounds for the permanent because its singular locus has small codimension. A cubic bound needs an invariant that grows multiplicatively in degree and dimension, and in the border model it must survive limits, so any intersection count used must be shown to persist for a single sufficiently close determinant.

Formalization scope

  • Polynomials are MvPolynomial σ ℂ; the permanent is permanentPolynomial m on variables Fin m × Fin m.
  • affineMatrixPolynomial n A₀ A is det⁡(A0+∑vxvAv)\det(A_0+\sum_v x_vA_v)det(A0​+∑v​xv​Av​) with complex matrices.
  • HasExactDeterminant n p: n>0n>0n>0 and ppp equals such a determinant. HasBorderDeterminant n p: n>0n>0n>0 and sequences A0(j),A(j)A_0(j),A(j)A0​(j),A(j) whose determinant polynomials converge to ppp coefficient by coefficient. Instead of defining bdc\mathrm{bdc}bdc as a minimum, the goal states that every admissible size nnn obeys the bound, which is equivalent.
  • For the milestone, affineSubstitution a I g is g(a+x)g(a+x)g(a+x), homogeneousComponent extracts GrG_rGr​, and smoothness is stated on the affine cone: the only common zero of GrG_rGr​ and all its partial derivatives is 000.
  • Real constants use Real.exp 1 for eee.

A complete development needs projective smoothness and polar intersections (Bézout-type counts with simple points), adjugate and kernel-line computations for determinant pencils, and dimension estimates for matrix fibers. Contributions formalizing Lemma 2.1 (affine substitution preserves the closure), Proposition 2.2 (equivalence of border models) or Theorem 2.3 are welcome.

Selected references

  • OpenAI, A cubic lower bound for border determinantal complexity of the permanent, preprint, September 24, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/A-cubic-lower-bound-for-border-determinantal-complexity-of-the-permanent-September-24-2026/A-cubic-lower-bound-for-border-determinantal-complexity-of-the-permanent-September-24-2026.pdf
  • L. G. Valiant, Completeness classes in algebra, STOC 1979. https://doi.org/10.1145/800135.804419
  • T. Mignon, N. Ressayre, A quadratic bound for the determinant and permanent problem, IMRN, 2004. https://doi.org/10.1155/S1073792804142566
  • J. M. Landsberg, L. Manivel, N. Ressayre, Hypersurfaces with degenerate duals and the Geometric Complexity Theory Program, Comment. Math. Helv., 2013. https://doi.org/10.4171/CMH/292
  • J.-Y. Cai, X. Chen, D. Li, Quadratic lower bound for permanent vs. determinant in any characteristic, Comput. Complexity, 2010. https://doi.org/10.1007/s00037-009-0284-2
  • K. D. Mulmuley, M. Sohoni, Geometric Complexity Theory I, SIAM J. Comput., 2001. https://doi.org/10.1137/S009753970038715X
  • J. Alper, T. Bogart, M. Velasco, A lower bound for the determinantal complexity of a hypersurface, Found. Comput. Math., 2017. https://doi.org/10.1007/s10208-015-9300-x
  • R. Piene, Polar classes of singular varieties, Ann. Sci. ÉNS, 1978. https://doi.org/10.24033/asens.1346
2 thms1 active userReviewed
Linear algebraTheoretical Computer Science·Captain: wurtle

Staggered extraction for exact matrix multiplication over every fieldResearch Paper

Motivation: the matrix-multiplication exponent

Multiplying two n×nn\times nn×n matrices by the schoolbook method costs about n3n^3n3 operations. The matrix-multiplication exponent ωF\omega_FωF​ of a field FFF is the infimum of exponents τ\tauτ such that n×nn\times nn×n matrices over FFF can be multiplied with O(nτ+o(1))O(n^{\tau+o(1)})O(nτ+o(1)) additions, subtractions and multiplications. It governs the asymptotic cost of a central bilinear operation and of the many algorithms built from it (determinants, inversion, linear systems). Bounding ω\omegaω has driven algebraic complexity theory since 1969. In recent years the bounds have moved in the third and fourth decimal place, with each improvement coming from a finer analysis of the same tensor-power framework.

Background

  • 1969 — Strassen's seven-product algorithm gives ω≤log⁡27\omega\le\log_27ω≤log2​7 (Strassen 1969).
  • 1980–1987 — Approximate bilinear algorithms (Bini 1980), the asymptotic sum inequality (Schönhage 1981) and the laser method (Strassen 1987).
  • 1990 — Coppersmith and Winograd introduce the tensor family CWq\mathrm{CW}_qCWq​ and progression-free extraction (J. Symbolic Comput. 1990).
  • 2010–2014 — Higher tensor powers: Stothers (fourth power; with Davie, Proc. Roy. Soc. Edinburgh 2013), Vassilevska Williams (eighth power, STOC 2012), Le Gall (thirty-second power, ISSAC 2014).
  • 2023–2024 — The refined laser method gives ω<2.3728596\omega<2.3728596ω<2.3728596 (Alman–Vassilevska Williams, TheoretiCS 2024). Asymmetric hashing reduces combination loss (Duan–Wu–Zhou). Finer variable sharing follows (Vassilevska Williams–Xu–Xu–Zhou).
  • 2024–2026 — Successive asymmetric compatibility tests (Alman–Duan–Vassilevska Williams–Xu–Xu–Zhou, arXiv:2404.16349). Dupont et al. optimize the eighth-power instance of this framework to ω<2.371177\omega<2.371177ω<2.371177 (arXiv:2608.16884).
  • 2026 — An OpenAI preprint, Staggered extraction for exact matrix multiplication over every field (OpenAI Math Release, September 24, 2026), claims ωF<2.371054886006746\omega_F<2.371054886006746ωF​<2.371054886006746 for every fixed field FFF, including every positive characteristic. It has not been peer reviewed, and the claim has not been formally verified.

Setting

Fix a field FFF. An arithmetic program is a straight-line sequence of gates, each a constant from FFF, an input entry, or the sum, difference or product of two earlier gates. Its cost counts the addition, subtraction and multiplication gates. A program multiplies n×nn\times nn×n matrices if designated registers equal the entries of ABABAB for every pair of input matrices A,BA,BA,B over FFF. A real number τ\tauτ is admissible if for every ε>0\varepsilon>0ε>0 there is C>0C>0C>0 such that for every n≥1n\ge1n≥1 some correct program has cost at most C nτ+εC\,n^{\tau+\varepsilon}Cnτ+ε, and

ωF=inf⁡{τ∈R: τ admissible over F}.\omega_F=\inf\{\tau\in\mathbb R:\ \tau\text{ admissible over }F\}.ωF​=inf{τ∈R: τ admissible over F}.

In Lean this is MatrixAllFields.MatrixMultiplication.Arithmetic.omega F, defined for every F : Type u with [Field F].

Formalization targets

Goal: the exponent bound over every field (Theorem 1.1)

∀ F field:ωF<2.371054886006746.\forall\,F\ \text{field}:\qquad \omega_F<2.371054886006746 .∀F field:ωF​<2.371054886006746.

The Lean statement also contains the numerical comparison 2.371054886006746<2.3710562.371054886006746<2.3710562.371054886006746<2.371056, which carries no mathematical content (the source writes the comparison as <2.371054887<2.371054887<2.371054887). This is Theorem 1.1 of the source. The goal is published on the platform with status Open: no machine-checked proof exists yet.

Significance

The result itself. If the source's argument and certificate are correct, the theorem lowers the best stated bound on ω\omegaω from 2.3711772.3711772.371177 (Dupont et al.) to 2.3710552.3710552.371055, and it does so uniformly over all fields, with exact algorithms in every positive characteristic. Any improvement in ω\omegaω lowers the exponent of every algorithm reducible to matrix multiplication. The method — pooling directional capacities across extraction depths and staggering lots so that one lot sits at each splitting stage — shows that combination losses in the asymmetric framework can be traded across depths.

Formalizing it. Bounds of this type rest on long chains of tensor-power constructions, recovery arguments and large rational parameter tables, checked in the source by an accompanying verifier with interval certificates for logarithms. A machine-checked proof would certify the whole chain from the arithmetic model to the final rational inequality. It would also give Mathlib the asymptotic sum inequality and Coppersmith–Winograd machinery, which every future bound on ω\omegaω needs.

Difficulty

Every recent improvement fights extraction losses. Restricting a tensor power to a direct sum of independent matrix products wastes variables whenever whole blocks must be disjoint, while the final products only need disjoint subsets. Prescribed marginals may also allow several joint distributions. Earlier analyses take the minimum of three directional capacities separately at each depth, so a shortage on one side at one depth is lost. Using capacity across depths requires that variables deleted in earlier extractions (to resolve conflicts or impose type conditions) can still be recovered exactly, over the original field and with only subexponentially many extra copies. Positive characteristic rules out arguments that divide by small integers or rely on characteristic-zero identities.

Formalization scope

  • The model is division-free straight-line programs over an arbitrary field F : Type u, with free constants from FFF and unit cost for add, sub and mul. This matches the source's "scalar additions and multiplications".
  • AdmissibleExponent F τ asks, for each ε>0\varepsilon>0ε>0, for one constant C>0C>0C>0 that works for every n≥1n\ge1n≥1. omega F is the sInf of the admissible set, which is nonempty (schoolbook algorithm) and bounded below by the output size, so a junk value cannot make the strict inequality true.
  • The goal quantifies over every field, including finite fields, so a proof cannot use characteristic-zero arguments or embeddings into C\mathbb CC.
  • The second conjunct is a trivially true rational comparison and can be ignored.
  • Infrastructure needed: tensor rank and border rank over arbitrary fields, the asymptotic sum inequality, the Coppersmith–Winograd tensor and its powers, method-of-types counting, and verified rational/logarithm interval arithmetic for the parameter certificate. All of this is reusable for other matrix-multiplication results.

Selected references

  • V. Strassen, Gaussian elimination is not optimal, Numer. Math. 13 (1969), 354–356. https://doi.org/10.1007/BF02165411
  • D. Bini, Relations between exact and approximate bilinear algorithms. Applications, Calcolo 17 (1980), 87–97. https://doi.org/10.1007/BF02575865
  • A. Schönhage, Partial and total matrix multiplication, SIAM J. Comput. 10 (1981), 434–455. https://doi.org/10.1137/0210032
  • V. Strassen, Relative bilinear complexity and matrix multiplication, J. reine angew. Math. 375/376 (1987), 406–443. https://doi.org/10.1515/crll.1987.375-376.406
  • D. Coppersmith and S. Winograd, Matrix multiplication via arithmetic progressions, J. Symbolic Comput. 9 (1990), 251–280. https://doi.org/10.1016/S0747-7171(08)80013-2
  • A. M. Davie and A. J. Stothers, Improved bound for complexity of matrix multiplication, Proc. Roy. Soc. Edinburgh Sect. A 143 (2013), 351–369. https://doi.org/10.1017/S0308210511001648
  • V. Vassilevska Williams, Multiplying matrices faster than Coppersmith–Winograd, STOC 2012, 887–898. https://doi.org/10.1145/2213977.2214056
  • F. Le Gall, Powers of tensors and fast matrix multiplication, ISSAC 2014, 296–303. https://arxiv.org/abs/1401.7714v1
  • J. Alman and V. Vassilevska Williams, A refined laser method and faster matrix multiplication, TheoretiCS 3 (2024), Art. 21. https://doi.org/10.46298/theoretics.24.21
  • R. Duan, H. Wu and R. Zhou, Faster matrix multiplication via asymmetric hashing, arXiv:2210.10173. https://arxiv.org/abs/2210.10173v5
  • V. Vassilevska Williams, Y. Xu, Z. Xu and R. Zhou, New bounds for matrix multiplication: from alpha to omega, arXiv:2307.07970. https://arxiv.org/abs/2307.07970v2
  • J. Alman, R. Duan, V. Vassilevska Williams, Y. Xu, Z. Xu and R. Zhou, More asymmetry yields faster matrix multiplication, arXiv:2404.16349v3. https://arxiv.org/abs/2404.16349v3
  • E. Dupont et al., Improving the matrix multiplication exponent with modern optimization, arXiv:2608.16884 (2026). https://doi.org/10.48550/arXiv.2608.16884
  • OpenAI, Staggered extraction for exact matrix multiplication over every field, OpenAI Math Release preprint, September 24, 2026 (Theorem 1.1, p. 2). https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Staggered-extraction-for-exact-matrix-multiplication-over-every-field-September-24-2026/Staggered-extraction-for-exact-matrix-multiplication-over-every-field-September-24-2026.pdf
2 thms1 active userReviewed
Graph TheoryTheoretical Computer Science·Captain: wurtle

Hardness of finding large independent sets in three-colorable graphsResearch Paper

Motivation: how hard is it to use the promise of three-colorability?

A graph is three-colorable if its vertices can be colored with three colors so that adjacent vertices get different colors. Deciding three-colorability is NP-complete. The approximate coloring problem asks how much a promise helps: given a graph promised to be three-colorable, can one efficiently find a coloring with a few more colors, or at least a large independent set? Every three-colorable graph on nnn vertices has an independent set of size n/3n/3n/3 (its largest color class). The best polynomial-time algorithms use n0.19…n^{0.19\ldots}n0.19… colors, while hardness results long reached only small palettes and needed extra conjectures for stronger gaps. Problems of this kind are central test cases for the PCP theorem, Label Cover and the theory of promise constraint satisfaction.

Background and timeline

  • 2000 — Khanna, Linial and Safra prove NP-hardness of 444-coloring three-colorable graphs (Combinatorica); Guruswami and Khanna give a different proof with bounded-degree variants (SIAM J. Discrete Math. 2004).
  • 2009 — Dinur, Mossel and Regev obtain three-colorable completeness with arbitrarily small independent-set soundness, conditional on a fish-shaped Label Cover conjecture (SIAM J. Comput.).
  • 2010 — Dinur, Khot, Perkins and Safra prove hardness of finding independent sets of density 1/91/91/9 in almost-three-colorable graphs (FOCS 2010).
  • 2020 — Guruswami and Sandeep show that the ddd-to-111 Games Conjecture with perfect completeness implies hardness of coloring three-colorable graphs with O(1)O(1)O(1) colors (ICALP 2020).
  • 2021 — Barto, Bulín, Krokhin and Opršal prove hardness of (2k−1)(2k-1)(2k−1)-coloring kkk-colorable graphs (five colors for k=3k=3k=3) via the algebraic theory of promise CSPs (J. ACM); Braverman, Khot, Lifshitz and Minzer obtain the independent-set gap from the Rich 222-to-111 Games Conjecture (FOCS 2021).
  • 2023 — Krokhin, Opršal, Wrochna and Živný give the arc-graph reduction to palette three (SIAM J. Comput.); Hecht, Minzer and Safra treat almost coloring almost-three-colorable graphs (APPROX/RANDOM 2023).
  • 2024–2026 — Kawarabayashi, Thorup and Yoneda (STOC 2024) and Bansal, Huang and Lee (arXiv:2602.05904) improve coloring algorithms to O(n0.19539)O(n^{0.19539})O(n0.19539) colors; Fei, Minzer and Wang prove the 444-to-111 Games Conjecture with perfect completeness, giving constant-palette hardness and small independent-set density with an eight-colorable promise (ECCC TR26-179).
  • 2026 — An OpenAI preprint, Hardness of finding large independent sets in three-colorable graphs (OpenAI Math Release, September 24, 2026), claims unconditional NP-hardness of distinguishing three-colorable graphs from graphs with independence ratio below any fixed δ>0\delta>0δ>0. It has not been peer reviewed, and its proof is not formally verified.

Setting

A 3-CNF formula is a conjunction of clauses, each a disjunction of at most three literals (variables or their negations); it is satisfiable if some truth assignment makes every clause true. For a finite simple undirected graph GGG with n=∣V(G)∣≥1n=|V(G)|\ge1n=∣V(G)∣≥1 vertices, α(G)\alpha(G)α(G) is the size of a largest independent set, a set of pairwise nonadjacent vertices. A polynomial-time reduction is a deterministic algorithm that, on an explicit binary encoding of its input, runs in time polynomial in the encoding length and outputs an explicit encoding (here the full adjacency matrix) of the output graph.

Formalization targets

Goal: NP-hardness of the three-colorable vs. small-independence-ratio gap (Theorem 1.1)

For every fixed real 0<δ<1/30<\delta<1/30<δ<1/3 there is a deterministic polynomial-time algorithm RδR_\deltaRδ​ mapping each explicitly encoded 3-CNF formula ϕ\phiϕ to a nonempty finite simple graph GϕG_\phiGϕ​ with

ϕ satisfiable ⟹ Gϕ three-colorable,ϕ unsatisfiable ⟹ α(Gϕ)<δ ∣V(Gϕ)∣.\phi\ \text{satisfiable}\ \Longrightarrow\ G_\phi\ \text{three-colorable}, \qquad \phi\ \text{unsatisfiable}\ \Longrightarrow\ \alpha(G_\phi)<\delta\,|V(G_\phi)| .ϕ satisfiable ⟹ Gϕ​ three-colorable,ϕ unsatisfiable ⟹ α(Gϕ​)<δ∣V(Gϕ​)∣.

The running time and output size are polynomial in the binary length of ϕ\phiϕ, with constants depending only on δ\deltaδ. The goal statement is published on the platform with status Open.

Significance

The result itself. Theorem 1.1 shows that, even with the full promise of three-colorability, it is NP-hard to find an independent set of any fixed positive density. It implies hardness of distinguishing kkk-colorable graphs from non-ccc-colorable graphs for all fixed 3≤k≤c3\le k\le c3≤k≤c (Corollary 1.2), the long-standing conjecture recorded by Barto–Bulín–Krokhin–Opršal. Unlike the routes through ddd-to-111 games and arc graphs, it keeps the independent-set soundness together with three-colorable completeness, and unlike Dinur–Khot–Perkins–Safra it does not delete vertices. Earlier results with this combination were conditional (Dinur–Mossel–Regev; Braverman–Khot–Lifshitz–Minzer).

Formalizing it. The statement is fully explicit: Mathlib's TM2ComputableInPolyTime fixes the machine model, and the formula and graph encodings are spelled out bit by bit. A formal proof would require a machine-checked PCP theorem with perfect completeness (Label Cover), a dimension-independent junta approximation theorem, and the paper's alignment and list-decoding lemmas. Any of these is a substantial and reusable formalization project; complexity-theoretic reductions are barely represented in Mathlib today.

Difficulty

Gap reductions from Label Cover to coloring traditionally use long-code or dictatorship tests whose soundness analysis loses control either of three-colorability of every vertex (completeness) or of independent sets of arbitrarily small density (soundness). Known unconditional routes reach constant-palette coloring hardness only by composing reductions that lose the independent-set guarantee, and routes keeping it required unproven games conjectures with structural assumptions. The proof must decode a labeling from any independent set of density δ\deltaδ in a graph that is genuinely three-colorable on every vertex when ϕ\phiϕ is satisfiable, without bounds on projection-fiber sizes.

Formalization scope

  • Formulas are lists of clauses of width at most 333 over literals named by natural numbers; satisfiability uses an assignment N→Bool\mathbb N\to\mathrm{Bool}N→Bool. Formulas and graphs are encoded as explicit bit strings (self-delimiting binary numbers; the graph encoding lists the vertex count and the full row-major adjacency matrix).
  • Graphs are Graph records: n≥1n\ge1n≥1 vertices Fin n, a symmetric loopless Boolean adjacency. Independence number is the maximum card of an independent Finset; three-colorability is a proper map to Fin 3.
  • RealGraphReduction δ packages a function reduce : List Bool → Graph with a Turing.TM2ComputableInPolyTime witness (identity input encoding, graphBits output encoding, finite stack alphabets), an explicit polynomial output-size bound, completeness and strict soundness α<δn\alpha<\delta nα<δn on encoded formulas. The reduction must be total and polynomial-time on all bit strings, which is harmless since malformed inputs can be sent to a fixed graph.
  • The goal quantifies over every real δ∈(0,1/3)\delta\in(0,1/3)δ∈(0,1/3); the source notes that rational δ\deltaδ suffices by monotonicity.
  • Needed infrastructure: polynomial-time Turing-machine composition, Label Cover with perfect completeness, Fourier analysis on product spaces and junta approximation. Contributions on any of these are welcome.

Selected references

  • S. Khanna, N. Linial and S. Safra, On the hardness of approximating the chromatic number, Combinatorica (2000). https://doi.org/10.1007/s004930070013
  • V. Guruswami and S. Khanna, On the hardness of 4-coloring a 3-colorable graph, SIAM J. Discrete Math. (2004). https://doi.org/10.1137/S0895480100376794
  • I. Dinur, E. Mossel and O. Regev, Conditional hardness for approximate coloring, SIAM J. Comput. (2009). https://doi.org/10.1137/07068062X
  • I. Dinur, S. Khot, W. Perkins and M. Safra, Hardness of finding independent sets in almost 3-colorable graphs, FOCS 2010. https://doi.org/10.1109/FOCS.2010.84
  • V. Guruswami and S. Sandeep, d-to-1 hardness of coloring 3-colorable graphs with O(1) colors, ICALP 2020. https://doi.org/10.4230/LIPIcs.ICALP.2020.62
  • L. Barto, J. Bulín, A. Krokhin and J. Opršal, Algebraic approach to promise constraint satisfaction, J. ACM (2021). https://doi.org/10.1145/3457606
  • M. Braverman, S. Khot, N. Lifshitz and D. Minzer, An invariance principle for the multi-slice, with applications, FOCS 2021. https://doi.org/10.1109/FOCS52979.2021.00030
  • A. Krokhin, J. Opršal, M. Wrochna and S. Živný, Topology and adjunction in promise constraint satisfaction, SIAM J. Comput. (2023). https://doi.org/10.1137/20M1378223
  • N. Bansal, N. Huang and E. Lee, Improved SDP-based algorithm for coloring 3-colorable graphs, 2026. https://arxiv.org/abs/2602.05904v1
  • OpenAI, Hardness of finding large independent sets in three-colorable graphs, OpenAI Math Release preprint, September 24, 2026 (Theorem 1.1, p. 1). https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Hardness-of-finding-large-independent-sets-in-three-colorable-graphs-September-24-2026/Hardness-of-finding-large-independent-sets-in-three-colorable-graphs-September-24-2026.pdf
2 thms1 active userReviewed
Theoretical Computer Science·Captain: wurtle

Perfect completeness for 2-to-1 gamesResearch Paper

Motivation

A projection game (label cover) asks for labels on the two sides of a bipartite multigraph so that, on each edge, the right label is the image of the left label under a prescribed map. In a 2-to-1 game the left alphabet has 2q2q2q labels, the right alphabet qqq, and every edge map has exactly two preimages of each right label. Khot introduced the 2-to-1 and Unique Games conjectures in 2002 (STOC 2002) as hypotheses that yield tight hardness of approximation. The 2-to-1 Games Conjecture with perfect completeness asserts that, for every fixed δ>0\delta>0δ>0, it is NP-hard to tell satisfiable 2-to-1 games from games in which every labeling satisfies at most a δ\deltaδ fraction of edges. Perfect completeness matters for problems whose YES instances must be exactly satisfiable, such as graph coloring: hardness with completeness 1−ε1-\varepsilon1−ε does not imply it.

This mission asks for a formal proof of the conjecture, as stated in an OpenAI preprint dated September 23, 2026 (source). The preprint has not been peer reviewed and its claims have not been independently verified; on the platform the Lean goal is open.

Background

  • 1998 — The PCP theorem (Arora–Safra, JACM 1998; Arora–Lund–Motwani–Sudan–Szegedy, JACM 1998) and Raz's parallel repetition theorem (SICOMP 1998).
  • 2002 — Khot formulates the 2-to-1 and Unique Games conjectures.
  • 2011 — Rao's parallel repetition for projection games (SICOMP 2011).
  • 2014 — Austrin, O'Donnell, Tan and Wright prove perfect-completeness 2-to-1 label cover hardness with alphabets of sizes 666 and 333 and soundness 23/24+ε23/24+\varepsilon23/24+ε (ACM TOCT 2014).
  • 2017–2023 — The Grassmann/shortcode programme: Khot–Minzer–Safra (STOC 2017; ToC 2025), Dinur–Khot–Kindler–Minzer–Safra (STOC 2018), Barak–Kothari–Steurer (ITCS 2019), and the Grassmann expansion theorem of Khot–Minzer–Safra (Annals 2023), giving 2-to-1 hardness with completeness arbitrarily close to 111.
  • 2026 — Fei, Minzer and Wang prove perfect-completeness hardness for 4-to-1 games at arbitrarily small soundness (ECCC TR26-179).
  • September 2026 — The OpenAI preprint claims perfect completeness for 2-to-1 games (Theorem 1.1, p. 1).

Setting

For an integer q≥2q\ge2q≥2, a 2-to-1 instance has finite left and right vertex sets and a nonempty list of edge occurrences e=(ue,ve,πe)e=(u_e,v_e,\pi_e)e=(ue​,ve​,πe​), where πe:[2q]→[q]\pi_e:[2q]\to[q]πe​:[2q]→[q] is given by an explicit table with ∣πe−1(b)∣=2|\pi_e^{-1}(b)|=2∣πe−1​(b)∣=2 for every b∈[q]b\in[q]b∈[q]. Parallel occurrences, possibly with different maps, are allowed and counted with multiplicity; there are no weights. A labeling (a,b)(a,b)(a,b) assigns a(u)∈[2q]a(u)\in[2q]a(u)∈[2q] and b(v)∈[q]b(v)\in[q]b(v)∈[q] and satisfies eee when πe(a(ue))=b(ve)\pi_e(a(u_e))=b(v_e)πe​(a(ue​))=b(ve​). The value is the maximum, over labelings, of the fraction of satisfied occurrences. 3-SAT inputs are bit strings that decode to conjunctions of three-literal clauses (repetitions allowed); malformed inputs count as unsatisfiable.

Formalization targets

Goal: Theorem 1.1 (p. 1)

For every fixed rational δ∈(0,1)\delta\in(0,1)δ∈(0,1) there are an integer q=q(δ)≥2q=q(\delta)\ge2q=q(δ)≥2 and a deterministic polynomial-time reduction φ↦Gφ\varphi\mapsto G_\varphiφ↦Gφ​ from 3-SAT to 2-to-1 instances with alphabets [2q][2q][2q] and [q][q][q] such that

φ satisfiable ⇒ val⁡(Gφ)=1,φ unsatisfiable ⇒ val⁡(Gφ)≤δ.\varphi\ \text{satisfiable}\ \Rightarrow\ \operatorname{val}(G_\varphi)=1,\qquad \varphi\ \text{unsatisfiable}\ \Rightarrow\ \operatorname{val}(G_\varphi)\le\delta .φ satisfiable ⇒ val(Gφ​)=1,φ unsatisfiable ⇒ val(Gφ​)≤δ.

The running time is polynomial in the binary input length, with degree and constants depending only on δ\deltaδ.

Significance

The result itself. It removes the conditional hypothesis from perfect-completeness reductions. The preprint derives NP-hardness for maximum kkk-colorable subgraph at soundness 1−1k+Clog⁡kk21-\frac1k+C\frac{\log k}{k^2}1−k1​+Ck2logk​ through Guruswami and Sinop's reduction (Corollary 1.2, p. 3), and recovers satisfiable Not-Two and three-query PCP hardness (Corollary 1.3, p. 4), the latter already known unconditionally by Håstad (SICOMP 2014). A companion preprint uses it for hardness of finding large independent sets in three-colorable graphs.

Formalizing it. No PCP-style hardness result of this strength has been machine-checked. A complete development needs a perfect-completeness PCP gap (Theorem 2.1, p. 5), projection-game parallel repetition (Theorem 2.2, p. 6), the Grassmann expansion theorem (Theorem 2.3, p. 7) and inverse shortcode estimates (Theorem 2.6, p. 9), on top of a polynomial-time Turing-machine framework. These components are shared with the Unique Games formalization and would be reusable.

Difficulty

Near-perfect completeness does not give perfect completeness: the 1−ε1-\varepsilon1−ε reductions need not produce any finite satisfiable game. Amplifying a constant-soundness perfect-completeness game by parallel repetition destroys the 2-to-1 structure, since kkk-fold repetition gives 2k2^k2k preimages per right label. The preprint therefore builds a new tree-structured construction (Section 3) whose joint-partition questions keep two-element fibers and satisfy exact identities, and the soundness analysis must decode labelings through a rank test whose tested rows depend on the decoded form itself (Sections 5–6), before projection-game repetition gives the contradiction (Section 7).

Formalization scope

  • ProjectionTable q is a Vector (Fin q) (2*q) with exactly two preimages of every b : Fin q. Instance q lists edges as a List with a nonemptiness proof, so value = maxSatisfied / edges.length never divides by zero; maxSatisfied is a Finset.sup over all labelings.
  • BinaryGapReduction δ fixes alphabet ≥ 2, a construct map, a Turing.TM2ComputableInPolyTime witness from raw input bits (identity encoding) to the explicit bit encoding gameBits, finite tape alphabets, completeness value = 1 on encodings of satisfiable formulas, and soundness value ≤ δ on all other inputs.
  • The goal quantifies over rational δ\deltaδ with 0<δ<10<\delta<10<δ<1, as in the source; the alphabet and machine are fixed before the input.
  • No vacuous reading: the 3-SAT language is nontrivial and value = 1 requires a labeling satisfying every edge.

Selected references

  • OpenAI, Perfect completeness for 2-to-1 games, OpenAI Math Release preprint, September 23, 2026. https://github.com/openai/math/blob/adc7f1241b42e322a6451854ab7e4b4c146bf78a/preprints/Perfect-completeness-for-2-to-1-games-September-23-2026/paper.pdf
  • S. Khot, On the power of unique 2-prover 1-round games, STOC 2002. https://doi.org/10.1145/509907.510017
  • P. Austrin, R. O'Donnell, L.-Y. Tan, J. Wright, New NP-hardness results for 3-coloring and 2-to-1 label cover, ACM Trans. Comput. Theory 6 (2014).
  • S. Khot, D. Minzer, M. Safra, Pseudorandom sets in Grassmann graph have near-perfect expansion, Ann. of Math. 198 (2023). https://doi.org/10.4007/annals.2023.198.1.1
  • I. Dinur, S. Khot, G. Kindler, D. Minzer, M. Safra, Towards a proof of the 2-to-1 games conjecture?, STOC 2018. https://doi.org/10.1145/3188745.3188804
  • B. Barak, P. K. Kothari, D. Steurer, Small-set expansion in shortcode graph and the 2-to-2 conjecture, ITCS 2019. https://doi.org/10.4230/LIPIcs.ITCS.2019.9
  • Y. Fei, D. Minzer, S. Wang, On the hardness of 4-to-1 games with perfect completeness, ECCC TR26-179 (2026). https://eccc.weizmann.ac.il/report/2026/179/
  • A. Rao, Parallel repetition in projection games and a concentration bound, SIAM J. Comput. 40 (2011). https://doi.org/10.1137/080734042
  • R. Raz, A parallel repetition theorem, SIAM J. Comput. (1998). https://doi.org/10.1137/S0097539795280895
  • V. Guruswami, A. K. Sinop, Improved inapproximability results for maximum k-colorable subgraph, Theory Comput. 9 (2013). https://doi.org/10.4086/toc.2013.v009a011
  • M. Braverman, S. Khot, D. Minzer, On rich 2-to-1 games, ITCS 2021. https://doi.org/10.4230/LIPIcs.ITCS.2021.27
  • J. Håstad, On the NP-hardness of Max-Not-2, SIAM J. Comput. (2014). https://doi.org/10.1137/120882718
2 thms1 active userReviewed
PreviousPage 5 of 6Next

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me