Catalytic Reaction–Diffusion: Global Attraction of the Positive Equilibrium (AIM 416)Open Problem
Motivation
Nguyen and Tang study the irreversible catalytic network A+B→B+C, B+C→A+B, a simple reaction–diffusion system with both a positive and a boundary equilibrium (catalyst used up). They settle every mass regime but one and leave it as a conjecture (AIM problem 416).
Timeline. 2021: Fellner–Morgan–Tang give global classical solutions with uniform bounds. 2026: Nguyen–Tang prove convergence for M1<M2 and M1≥2M2 and local results in between, conjecturing global attraction there.
Setting
On a bounded connected smooth domain Ω⊂Rn with ∣Ω∣=1 and d1,d2,d3>0:
with homogeneous Neumann conditions and strictly positive C2 compatible initial data. The masses M1=∫Ω(a0+c0), M2=∫Ω(b0+c0) are conserved. The equilibria are the positive one (2M1,M2−2M1,2M1) and the boundary one (M1−M2,0,M2).
Formalization target
If M2≤M1<2M2, every classical solution converges uniformly on Ω to the positive equilibrium (no rate required).
Significance
This is the last open regime of Nguyen–Tang's stability analysis. Strict positivity is essential: with b0≡0 the solution stays away from the positive equilibrium.
Difficulty
For M1≥M2 there is no positive lower bound on ∫Ωb, so entropy dissipation can degenerate near the boundary equilibrium (b=0), and the local results do not exclude trajectories approaching it.
Formalization scope
Rn is EuclideanSpace ℝ (Fin n) and Δ is Mathlib's Laplacian. The domain is Ω={φ<0} for a C∞ function φ with ∇φ=0 on {φ=0}; the Neumann condition is the derivative within Ω in the direction ∇φ. Solutions are continuous on [0,∞)×Ω and C1,2 for t>0, and L∞ convergence is TendstoUniformlyOn. The goal quantifies over classical solutions; their existence is proved in the literature (Fellner–Morgan–Tang; Nguyen–Tang, Theorem 2.1) but is not part of this statement.
Selected references
T. L. Nguyen, B. Q. Tang, Stability analysis of irreversible chemical reaction-diffusion systems with boundary equilibria, Z. Angew. Math. Phys. 77, 2026, 199. DOI
K. Fellner, J. Morgan, B. Q. Tang, Uniform-in-time bounds for quadratic reaction-diffusion systems with mass dissipation in higher dimensions, DCDS-S 14, 2021, 635–651. DOI
Ordinary Differential Equations and Dynamical Systems VIII: Stable Manifolds and the Hartman–Grobman TheoremTextbook
Motivation
The first step in analysing a nonlinear differential equation x˙=f(x) near an equilibrium is usually to replace f by its derivative there and study the linear system x˙=Ax, which can be solved explicitly. This step is justified only if the linearization predicts the qualitative behaviour of the nonlinear system correctly. The Hartman–Grobman theorem makes that precise. If no eigenvalue of A lies on the imaginary axis, then near the equilibrium the nonlinear flow is a continuous deformation of the linear flow etA. The phase portrait, including which solutions approach the equilibrium and which leave it, is the linear one up to a homeomorphism.
The theorem was proved independently by D. M. Grobman (1959) and P. Hartman (1960, Proc. AMS 11). C. Pugh gave the proof by a global contraction argument (1969, Amer. J. Math. 91) that most textbooks follow, including this one.
This mission formalizes the Hartman–Grobman part of Chapters 9 and 10 of Teschl, Ordinary Differential Equations and Dynamical Systems (AMS Graduate Studies in Mathematics 140, 2012; author's preliminary version): the linear stable and unstable subspaces, the conjugacy lemma for maps, and the theorem for flows and for maps.
Setting
Let n∈N and let A be a real n×n matrix. Its eigenvaluesαj are the complex numbers z with Av=zv for some nonzero v∈Cn. For a set S⊆C, the spectral subspaceES(A)⊆Rn is the set of real vectors lying in the sum of the generalized eigenspaces Ker(A−αj)aj with αj∈S, where aj is the algebraic multiplicity.
For the linear flowetA, the stable subspace is E+=E{Rez<0}(A) and the unstable subspace is E−=E{Rez>0}(A). A is hyperbolic (for flows) if no eigenvalue has zero real part. For the linear mapx↦Ax, the contracting and expanding subspaces are E+(A)=E{∣z∣<1}(A) and E−(A)=E{∣z∣>1}(A), and A is hyperbolic (for maps) if no eigenvalue lies on the unit circle.
A vector field is a C1 map f:M→Rn on an open set M⊆Rn. Its flowΦ(t,x) is the maximal solution of x˙=f(x), x(0)=x, defined for t in the maximal interval Ix∋0. A point x0 with f(x0)=0 is a fixed point. It is hyperbolic if the Jacobian matrix A=dfx0 is hyperbolic. Two flows Φ,Ψ are topologically conjugate if there is a homeomorphism ϕ of Rn with ϕ∘Φt=Ψt∘ϕ.
Formalization targets
Goal: Theorem 9.9 (Hartman–Grobman)
Let 0∈M be a hyperbolic fixed point of the C1 vector field f, with A=df0 and flow Φ. Then there are a homeomorphism ϕ(x)=x+h(x) of Rn, with h bounded, and a neighborhood U of 0 such that
ϕ(etAx)=Φ(t,ϕ(x)),t∈Iϕ(x),
for all x and t with esAx∈U for every s between 0 and t.
Milestones
In attack order:
Theorem 9.2: E± are invariant under etA and ∣etAx±∣≤Ce∓tα∣x±∣ for ±t≥0, for every α below the relevant spectral gap.
Lemma 9.7: for A invertible and hyperbolic for maps, a norm adapted to A, and bounded g with small Lipschitz constant, there is a unique bounded continuous h with
(id+h)∘A=(A+g)∘(id+h),
and id+h is a homeomorphism when A+g is invertible.
3. Corollary 9.8: such a conjugating homeomorphism of the form identity plus bounded is unique.
4. Theorem 10.4 (Hartman–Grobman for maps): a C1 local diffeomorphism with a hyperbolic fixed point 0 satisfies ϕ∘A=f∘ϕ near 0, with A=df0.
5. Theorem 9.10: two hyperbolic linear flows whose stable and unstable subspaces have equal dimensions are topologically conjugate.
Significance
The result itself. Hartman–Grobman reduces the local topological classification of hyperbolic equilibria to linear algebra. Together with Theorem 9.10 it shows that, near a hyperbolic fixed point, a C1 vector field is determined up to local topological conjugacy by two integers: the dimensions of the stable and unstable subspaces. In particular, stability and instability of a hyperbolic equilibrium can be read off the eigenvalues of the Jacobian.
Formalizing it. Mathlib has the matrix exponential, generalized eigenspaces and homeomorphisms. It has no hyperbolic splitting of a matrix, no conjugacy theory for flows or maps, and no local flow of an ODE with maximal intervals; none of these results has a machine-checked proof on this platform. The mission builds the linear hyperbolic layer (spectral subspaces with exponential rates), the functional-analytic conjugacy lemma, and the local theorems on top of them.
Difficulty
The naive idea is to conjugate the nonlinear flow to its linearization directly on a small ball. That fails because a small ball is not invariant: orbits of a saddle leave every neighborhood of the fixed point, and a conjugacy defined only on the ball cannot be propagated along them. The book's route first makes the problem global and then solves a functional equation. Solving it requires an operator-norm estimate on a space of bounded continuous functions, with a norm on Rn adapted to the hyperbolic splitting.
A second difficulty is passing from one time to all times. A conjugacy for the time-one map has to be upgraded to one for the whole flow, which needs a uniqueness statement (Corollary 9.8) and control of the derivative of the flow through the variational equation. Throughout, the flow is local, so every identity Φ(t,ϕ(x))=… also carries the claim that t lies in the maximal interval of ϕ(x).
Formalization scope
The state space is Fin n → ℝ; matrices are Matrix (Fin n) (Fin n) ℝ, etA is NormedSpace.exp (t • A) acting by mulVec, and eigenvalues are those of the complexified matrix. The subspaces E± are defined spectrally, exactly as the book's (9.2), with the book's sign convention (+ is the stable or contracting side for both flows and maps). The flow is local and enters through IsMaximalFlow f M I Φ, the unique maximal integral curves on an open phase space M. No completeness is assumed.
Conventions and quantifier readings:
Smoothness. "Differentiable vector field" in Theorem 9.9 is read as C1 on M, since the proof uses continuity of ∂f/∂x. "Local diffeomorphism" in Theorem 10.4 is read as C1 with invertible derivative everywhere.
Local conjugacy. "In a sufficiently small neighborhood of 0" is made explicit as ∃U∈N(0), chosen after ϕ. For flows, the identity is required along every linear orbit segment {esAx:s between 0 and t} contained in U, for both signs of t, together with t∈Iϕ(x). For maps, it is required for all x∈U.
Constants. "Some C>0 depending on α" (Theorem 9.2) is ∀α∃C>0∀t∀x.
Adapted norm. Lemma 9.7's "choose a norm such that α=max(∥A−−1∥,∥A+∥)<1" is a norm N passed as a parameter, with the two operator bounds as hypotheses. The lemma also assumes that the projections onto E± do not increase N. The book's proof uses this when it bounds ∥L−1∥≤2/(1−α), and the norms it constructs satisfy it. This is the one hypothesis added to a printed statement.
A trivializing formalization is ruled out. The conjugacy at the single point 0, or at t=0 only, holds for every ϕ (both sides are 0, respectively ϕ(x)). The goal instead fixes ϕ and U first and requires the identity on every orbit segment inside U, with Φ the maximal flow of f rather than an arbitrary map.
Needed infrastructure:
the hyperbolic splitting Rn=E+⊕E− with exponential estimates and adapted norms;
Neumann series and contraction arguments on the Banach space of bounded continuous functions;
smooth cut-off of the nonlinearity;
differentiability of the flow in the initial condition (variational equation) and Gronwall's inequality;
maximal solutions of C1 ODEs.
The linear layer and the conjugacy lemma are reusable for the stable manifold theorem, for periodic orbits (Chapter 12) and for the horseshoe (Chapter 13). Standalone contributions of those layers are welcome.
Ordinary Differential Equations and Dynamical Systems III: The Frobenius Method and Fuchs's TheoremTextbook
Motivation
Many linear differential equations of mathematical physics have coefficients with singular points. Examples are the Bessel equationz2u′′+zu′+(z2−ν2)u=0, which comes from separating variables in the Laplace and wave equations in cylindrical coordinates, and the Legendre, hypergeometric and confluent hypergeometric equations. Near a singular point the usual power-series method breaks down, and the practical question is how solutions behave as z approaches the singularity. Evaluating special functions, matching asymptotics and computing connection coefficients all depend on the answer.
For second-order equations the answer goes back to Lazarus Fuchs (Zur Theorie der linearen Differentialgleichungen mit veränderlichen Coefficienten, J. reine angew. Math. 66 (1866), 121–160, doi:10.1515/crll.1866.66.121) and to Georg Frobenius (Ueber die Integration der linearen Differentialgleichungen durch Reihen, J. reine angew. Math. 76 (1873), 214–235, doi:10.1515/crll.1873.76.214). Frobenius's generalized power-series ansatz u=zα∑jhjzj is known as the Frobenius method. This mission follows Chapter 4 of G. Teschl, Ordinary Differential Equations and Dynamical Systems (AMS Graduate Studies in Mathematics 140, 2012, doi:10.1090/gsm/140), in the author's preliminary version.
Setting
All functions are complex-valued functions of a complex variable z, and derivatives are complex derivatives. The object is the second-order linear equation
u′′(z)+p(z)u′(z)+q(z)u(z)=0(4.20)
near the point z=0, where the coefficients may be singular. A function f that is holomorphic on a punctured disc 0<∣z∣<r has a pole of order at most k at 0 if zkf(z) extends to a function analytic at 0. The point 0 is a regular singular point of (4.20) if p has a pole of order at most one and q a pole of order at most two there:
In Lean these hypotheses are functions P,Q holomorphic on ∣z∣<R with zp(z)=P(z) and z2q(z)=Q(z) for 0<∣z∣<R. The general notion is TeschlODE.Frobenius.HasPoleOfOrderAtMost f k.
The indicial equation is α2+(p0−1)α+q0=0. Its roots, the characteristic exponents, are
α1,2=21(1−p0±(p0−1)2−4q0),(4.37)
where the square root is the principal branch, so that Reα1≥Reα2. In Lean they are charExponents p₀ q₀.
The functions zα=eαlogz and logz are single-valued only after a branch cut is chosen. As the book does, solutions are considered on the slit punctured disc{0<∣z∣<R}∖(−∞,0] (slitDisc R), using the principal branches. A solution of (4.20) on an open set D is IsSolution p q D u. A fundamental system is a pair of solutions that are linearly independent over C on D.
Formalization targets
Goal: Fuchs's theorem (Theorem 4.5)
Let 0 be a regular singular point as in (4.30), with P,Q holomorphic on ∣z∣<R, 0<R≤∞. Let α1,α2 be the characteristic exponents of p0=P(0), q0=Q(0). Then there are functions h1,h2, holomorphic on the whole disc ∣z∣<R with h1(0)=h2(0)=1, such that on {0<∣z∣<R}∖(−∞,0] the following holds.
Case 1. If α1−α2∈/N0, then uj(z)=zαjhj(z) for j=1,2 form a fundamental system.
Case 2. If α1−α2=m∈N0, then for some c∈C, with c=0 when m=0,
u1(z)=zα1h1(z),u2(z)=zα2h2(z)+clog(z)u1(z)
form a fundamental system.
The requirement that hj be holomorphic on the full disc is the book's statement that the radius of convergence of hj is at least the smaller of the radii of convergence of p and q.
Milestones
In attack order:
Theorem 4.1. For f analytic and bounded on the bidisc {∣z−z0∣<ε,∣w−w0∣<δ} with M=sup∣f∣, the problem w′=f(z,w), w(z0)=w0 has a unique analytic solution on ∣z−z0∣<min(ε,δ/M).
Lemma 4.4. For p holomorphic on 0<∣z∣<R, the equation u′+p(z)u=0 has a solution zαh(z) with h analytic at 0 and h(0)=1 if and only if p has at most a first-order pole. In that case α=−limz→0zp(z), and h has radius of convergence at least R.
Theorem 4.7. For A, b analytic on a simply connected domain Ω, the problem w′=A(z)w+b(z), w(z0)=w0 has a unique solution on all of Ω. Its power series at z0 converges on the largest disc about z0 contained in Ω.
Theorem 4.6 (Fuchs, converse). For p,q holomorphic on a punctured disc, (4.20) has a fundamental system of the form in Theorem 4.5 if and only if p and zq have at most first-order poles.
Significance
Theorem 4.5 is the basic structural theorem for linear equations at a regular singular point. It determines the leading behaviour zαj of each solution from two numbers read off the coefficients. It says exactly when a logarithm can occur, and it guarantees that the series part converges on the full disc on which the coefficients converge. Theorem 4.6 shows that the regular-singular hypothesis cannot be weakened. The series expansions of Bessel functions Jν, of Legendre functions and of the hypergeometric function F(a,b,c;z), and the logarithmic second solutions for integer order, are all instances of the theorem. The theorem is also the local ingredient of the classification of Fuchsian equations, including the Riemann P-symbol.
Mathlib has holomorphic functions, power series with radius of convergence, the principal complex power and logarithm, and a real-variable ODE layer. It has no complex-analytic existence theorem for differential equations and no Frobenius theory. The results here are classical and proved in the book, but to our knowledge none of them has a machine-checked proof. The platform has real-variable regular-singular estimates (the RegularSingular namespace), which are a different setting. A formal Theorem 4.5 would give a foundation for formal special-function theory, for example Bessel functions defined as solutions of their equation.
Difficulty
The formal power-series computation is mechanical: substitute zα∑hjzj, compare coefficients, and read off the indicial equation and a recursion for the hj. The difficulty is everything around it. First, the recursion for the second exponent breaks down exactly when α1−α2∈N0, and the form of the second solution changes there. Whether a logarithm really appears depends on a compatibility condition that can go either way when m≥1. Second, the claim is about actual solutions on a slit domain, not formal series. This needs convergence estimates for the recursion and the principal branches of zα and logz. Third, the radius claim asks for convergence on the whole disc of the coefficients, not just on some small disc. Fourth, linear independence of the two solutions has to be proved on the slit domain.
Milestones 1 and 3 need the complex analogues of Picard iteration and analytic continuation, which Mathlib does not supply for differential equations.
Formalization scope
Namespace TeschlODE.Frobenius. Complex derivatives are HasDerivAt/deriv/DifferentiableAt ℂ, and holomorphy on a set is DifferentiableOn ℂ. Radii are ENNReal, so R=∞ is allowed. Discs are Metric.eball 0 R. Powers and logarithms are Mathlib's principal Complex.cpow and Complex.log, used only on slitDisc R = Metric.eball 0 R ∩ Complex.slitPlane. On the full punctured disc these functions are discontinuous along the negative axis, and the theorem would be false there. "Fundamental system" is linear independence over C on the solution domain. Without independence Case 1 would hold trivially with u2=u1. "α1−α2∈N0" is ∃ m : ℕ, α₁ - α₂ = m. The book's "the constant c might be zero unless m=0" is the clause m=0⇒c=0.
Quantifier readings:
"Analytic near z=0" is strengthened to holomorphic on the whole disc of radius R, as the book's radius claim asserts.
"Poles of order at most one and two" is given explicitly: P,Q holomorphic on ∣z∣<R with zp=P, z2q=Q on 0<∣z∣<R.
In Theorem 4.1, the case M=0 is read as ε0=ε. The supremum is over the nonempty bidisc, and a boundedness hypothesis is included.
In Lemma 4.4, "a solution of the form (4.29)" means one on some slit punctured disc of positive radius. The book's "the radii are the same" is corrected to "at least": h(z)=1−z, p(z)=1/(1−z) is a counterexample to equality.
In Theorem 4.6, "as in the previous theorem" means the form (4.49) for some exponents and some c (Case 1 is c=0), on some slit punctured disc of radius 0<ρ≤R.
In Theorem 4.7, "simply connected domain" is IsOpen Ω together with SimplyConnectedSpace Ω. "The largest disc" has radius Metric.infEDist z₀ Ωᶜ.
The trivializing formalization, with the two solutions not required to be linearly independent or with hj unconstrained away from 0, is ruled out by the independence clause and by requiring hj to be holomorphic on the whole disc with hj(0)=1.
A full development needs the following: the complex Picard iteration, analytic continuation along paths (the monodromy theorem), Cauchy-type estimates for recursively defined power series, and the calculus of zα and logz on the slit plane. The definitions slitDisc, IsSolution, charExponents and HasPoleOfOrderAtMost can be reused for the Bessel, Legendre and hypergeometric equations (Problems 4.5–4.18 of the book). Contributions such as a general complex-analytic ODE existence theorem are welcome.
L. Fuchs, Zur Theorie der linearen Differentialgleichungen mit veränderlichen Coefficienten, J. reine angew. Math. 66 (1866), 121–160, doi:10.1515/crll.1866.66.121.
G. Frobenius, Ueber die Integration der linearen Differentialgleichungen durch Reihen, J. reine angew. Math. 76 (1873), 214–235, doi:10.1515/crll.1873.76.214.
E. L. Ince, Ordinary Differential Equations, Longmans, Green and Co., 1926 (Dover reprint 1956), Chapters XV–XVI.
Stabilization for a Perturbed Chain of Integrators in Prescribed Time II: Fixed-Time and Prescribed-Time Stability of the Varying-Degree Homogeneous FeedbackResearch Paper
Motivation
Many control tasks come with a deadline: a consensus protocol or a regulation task must reach its target by a time fixed in advance, whatever the initial condition. Prescribed-time stabilization asks for a feedback law that brings every trajectory of a control system to the equilibrium by a user-chosen time T. The basic test case is the chain of integratorsx1(n)=u, the normal form of every single-input feedback-linearizable system.
Fix n≥1 and write x=(x1,…,xn)∈Rn with the Euclidean norm. Let Jn be the n-th Jordan block (Jnei=ei−1, e0=0). The pure chain of integrators (31) is
x˙=Jnx+uen.
For y∈R and a>0 write ⌈y⌋a=sign(y)∣y∣a. Given gains ℓ1,…,ℓn>0 and κ∈[−2n1,2n1], set rj=1+(j−1)κ and βj=(2+κ)/rj+1−1. Define v0=0 and
vj=−ℓj⌈⌈xj⌋βj−1−⌈vj−1⌋βj−1⌋rjβj−1rj+κ.
The homogeneous feedback is ωκH(x)=vn(x) (Definition 23). The associated Lyapunov function is
and (36) is the decay inequality V˙κ≤−CVκ1+α(κ), with α(κ)=κ/(2+κ) and one constant C for all κ in the range.
For m∈(0,1) and κ0∈(0,2n1), the state-dependent degreeκ(x) of (49) equals κ0 where V0(x)>1+m and −κ0 where V0(x)<1−m, and it interpolates linearly in V0 in between. The closed-loop controller is ωκ(x)H(x). With B<aκ={Vκ<a}, let r(m,κ0) be the largest r with B<rκ0⊆B<1+m0, and r(m,−κ0) the smallest r with B<r−κ0⊇B<1−m0. Set
A system is globally fixed-time stable with settling time at most T if the origin is an equilibrium, solutions exist from every initial state, it is Lyapunov stable, and every solution vanishes for all t≥T (Definition 1 with Ω=Rn).
Formalization targets
Goal: Theorem 30 (p. 1038)
Let the gains and C>0 satisfy (36). There are m∈(0,1) and κ0∈(0,2n1) such that, for every T>0 and every λ>0 with
λ≥T∗(m,κ0)/T,
the feedback u=ωκ(Dλrx)H(Dλrx) makes (31) globally fixed-time stable with settling time at most T.
Milestones
Proposition 24 (p. 1034): gains exist for which (36) holds uniformly in κ, Vκ is C1, positive definite and r(κ)-homogeneous of degree 2+κ, and ωκH is globally asymptotically stabilizing.
Lemma 31 (p. 1038): on the shell B1−m,1+mκ, ∣xj∣ and ∣vj∣ are bounded uniformly in κ.
Lemma 32 (p. 1039): on that shell, ∣ωκH−ω0H∣ and ∣Vκ−V0∣ are at most a constant times ∣κ∣min(1,rn).
Proposition 33 (p. 1040): for every m there is κ0(m)>0 below which the closed loop is fixed-time stable, with an explicit settling-time bound that coincides with (52) for m≤(17−3)/4.
Theorem 28 (pp. 1036–1037): with an input gain b(t)∈[b,bˉ] and the feedback ωκ(x)H(x)/b, the closed loop is globally fixed-time stable with settling time at most T∗(m,κ0).
Significance
The result gives a static, continuous state feedback for the chain of integrators with an explicit settling-time bound. It is robust to a bounded uncertain input gain, and the rescaled controller meets any prescribed deadline. Unlike time-varying designs, the gains stay bounded, which is what the paper's ISS analysis in §4.3 builds on. The constants in (52) are explicit in terms of C and the radii r(m,±κ0), so the rescaling factor λ is computable.
The results are proved on paper; no machine-checked proof is known. A formalization would check the parameter bookkeeping of the construction: index shifts, exponents, the three-phase settling-time estimate, and the interplay of two different dilations. It would also produce reusable definitions of Carathéodory solutions and of finite-, fixed- and prescribed-time stability, which the platform does not yet have.
Difficulty
The obvious argument uses the Lyapunov function Vκ(x) for the varying-degree controller. That fails: κ depends on x, so Vκ(x)(x) acquires a term from the derivative of κ. The proof instead handles three regions separately, with Vκ0 outside B1+m0, V0 on the shell B1−m,1+m0, and V−κ0 inside B1−m0. On the shell the controller is a perturbation of the linear one, and bounding that perturbation needs uniform Hölder estimates in κ (Lemmas 31–32). The closed loop is only continuous, so solutions need not be unique and every stability claim is about all solutions. Proposition 24 itself is a recursive gain construction whose constants must be uniform in κ.
Formalization scope
States are EuclideanSpace ℝ (Fin n); the paper's index j∈{1,…,n} is j.val + 1. Solutions are Carathéodory solutions on [0,∞) in integral form, with integrability stated. Every stability property quantifies over all solutions, and existence of a solution from each initial state is part of Lyapunov stability. ⌈y⌋a is read as sign(y)∣y∣a; the paper never defines it. V˙ is the Fréchet derivative applied to the vector field. r(m,κ0) and r(m,−κ0) are the supremum and infimum of the admissible radii.
Hypotheses and readings that differ from the page:
The gains and C in Theorems 28 and 30 and Proposition 33 are data satisfying (36), not existentially chosen. An unconstrained ∃C would make (52) false, and Proposition 24 shows (36) is satisfiable.
b is assumed measurable in Theorem 28.
"Adapted" is the feedback divided by b, as the page says.
Corrected printed slips:
(51) lacks en.
Theorem 30 writes κ0∈(0,1/n); Theorem 28's (0,2n1) is used.
Proposition 33 prints κ0(m)∈[−2n1,−2n1]; the value is positive and at most 2n1.
(37) prints βi−1 for βj−1.
The proof of Lemma 32 prints the exponent of (33) as (rj+1)/(rjβj−1); (33) is used.
Lemma 32's maxima are read pointwise, with rn=rn(κ).
In Proposition 33 the middle term −2ln(2m) of (52) is replaced by max(−2ln(2m),2ln1−m1+m): the page's crossing-time estimate −2ln(2m)/C is justified only for m≤(17−3)/4, where the two bounds coincide.
"Explicit" constants are stated as existing.
A formalization in which (36) is dropped, or C is chosen freely, or a trajectory is only required to exist, would be trivial or false. Any trivializing reading of this kind is ruled out: stability is required of every solution, and C is tied to (36).
Needed infrastructure: signed powers and their Hölder estimates (42), differentiability of Vκ, weighted homogeneity, Carathéodory existence for continuous right-hand sides, and comparison lemmas for V˙≤−cV1+α. The stability definitions and the comparison lemmas are reusable beyond this mission. Contributions of any of these are welcome.
Selected references
Y. Chitour, R. Ushirobira, H. Bouhemou, Stabilization for a Perturbed Chain of Integrators in Prescribed Time, SIAM J. Control Optim. 58(2), 1022–1048, 2020. https://doi.org/10.1137/19M1285937
M. Harmouche, S. Laghrouche, Y. Chitour, M. Hamerlain, Stabilisation of perturbed chains of integrators using Lyapunov-based homogeneous controllers, Int. J. Control 90, 2631–2640, 2017. https://doi.org/10.1080/00207179.2016.1262967
F. Lopez-Ramirez, D. Efimov, A. Polyakov, W. Perruquetti, Fixed-time output stabilization and fixed-time estimation of a chain of integrators, Int. J. Robust Nonlinear Control 28, 4647–4665, 2018. https://doi.org/10.1002/rnc.4275
Y. Song, Y. Wang, J. Holloway, M. Krstić, Time-varying feedback for regulation of normal-form nonlinear systems in prescribed finite time, Automatica 83, 243–251, 2017. https://doi.org/10.1016/j.automatica.2017.06.008
S. P. Bhat, D. S. Bernstein, Geometric homogeneity with applications to finite-time stability, Math. Control Signals Systems 17, 101–127, 2005. https://doi.org/10.1007/s00498-005-0151-x
Stabilization of Hybrid Systems by Feedback Control Based on Discrete-Time State Observations II: Mean-Square and Almost Sure Exponential StabilityResearch Paper
Motivation
Many engineered systems switch between a finite number of operating modes at random times: a power grid after a line failure, a networked controller whose links drop, a manufacturing plant whose machines break down and are repaired. A standard model for such systems is a hybrid stochastic differential equation, also called an SDE with Markovian switching: the state follows an Itô equation whose coefficients depend on a mode that evolves as a continuous-time Markov chain. The monograph of Mao and Yuan (Stochastic Differential Equations with Markovian Switching, 2006) develops the stability theory of these equations.
A controller that stabilizes such a system usually needs the current state. In practice the state is sampled: it is observed at times 0,τ,2τ,… and the control is held between observations. Mao (Automatica 49, 2013) showed that, under a global Lipschitz condition on the drift and diffusion, a feedback control based on discrete-time observations makes a hybrid SDE mean-square exponentially stable when τ is small enough. You, Liu, Lu, Mao and Qiu (SIAM J. Control Optim. 53(2), 2015) replaced that condition by local Lipschitz continuity plus linear growth, gave an explicit bound (3.5) on the admissible observation interval, and proved H∞-stability, asymptotic stability, and, in Section 4, exponential stability in mean square and almost surely with an explicit rate. This mission formalizes that exponential stability result, Theorem 4.2, and the steps of its proof.
Setting
Let (Ω,F,{Ft}t≥0,P) be a probability space with a filtration satisfying the usual conditions (increasing, right-continuous, F0 contains the null sets). On it live an m-dimensional {Ft}-Brownian motionw and a right-continuous {Ft}-Markov chainr on S={1,…,N} with generatorΓ=(γij) (γij≥0 for i=j, zero row sums), independent of w. Fix τ>0 and the sampling timeδt=[t/τ]τ. The controlled system is
In Lean these are Assumption21, Assumption22, C21, LU, Assumption31, Assumption41, Condition35, theta, lam, H1, H2, rateEquationLHS; the basis is HybridSetup, the Itô integral IsItoIntegral, the sampling time delta, solutions SolvesSampledHybridSDE, and the functional (4.7) Vbar, all in the namespace You2015.Expo.
Formalization targets
Goal: Theorem 4.2 (exponential stability)
Under the hypotheses above, the equation
2τγe2τγ(H1+τH2)+γc2=λ(4.4)
has a unique root γ>0, and every solution of (2.1) satisfies
(4.11) EVˉ(x^z,r^z,z)≤(H1+τH2)∫z−2τzE∣x(y)∣2dy for z≥2τ.
(4.14) c1eγtE∣x(t)∣2≤C for t≥2τ.
(4.14) ⇒ (4.3), the mean-square-to-almost-sure transfer cited from Mao–Yuan [23, Theorem 8.8].
Significance
The result. Theorem 4.2 gives a quantitative guarantee: a controller that samples the state every τ units makes the switching system decay exponentially, with a rate γ computable from the constants of the assumptions. Asymptotic stability (Section 3 of the paper) says nothing about how fast trajectories settle; the rate is what a designer trades against the sampling cost when choosing τ. The almost sure statement concerns individual trajectories, which is what an operator observes.
Formalizing it. The results are proved in the paper; none of them is machine-checked. Mathlib has real Brownian motion but no Itô integral, no stochastic differential equations and no continuous-time Markov chains. The mission therefore also produces a definition layer: a filtration under the usual conditions, a multidimensional {Ft}-Brownian motion, an {Ft}-Markov chain with a given generator, the L2 Itô integral of vector-valued integrands, and the solution notion of an SDE with Markovian switching and a sampled-state delay. A related but different layer exists on Prove2Me for Ethier–Kurtz (EthierKurtz_IsStandardBrownian, EthierKurtz_HasBrownianItoIntegral, EthierKurtz_SolvesBrownianSDE); it has no mode switching and no sampled state, so it cannot express (2.1). Formalization also checks the constants: it found that the printed H1 in (4.5) disagrees with the paper's own derivation (see below).
Difficulty
Equation (2.1) is a stochastic differential delay equation whose delay t−δt is bounded but jumps at every observation time, so the delay-equation stability theorems that require a differentiable delay with derivative below one (Mao–Yuan, p. 285) do not apply. A Lyapunov function of the current state alone leaves the term Ux[u(x(t))−u(x(δt))], which has no sign and depends on the path over a whole observation interval. An exponential rate requires controlling this delay term with an exponential weight, and the weight inflates the delay contribution by a factor e2τγ; the rate equation (4.4) records exactly this balance. The almost sure part does not follow from the mean-square part by Chebyshev's inequality at fixed times alone: a pathwise bound needs control of the supremum of ∣x∣ over each unit interval, which involves the martingale part of the solution.
Formalization scope
Conventions committed to in Lean:
The state space is EuclideanSpace ℝ (Fin n), so ∣x∣ is the Euclidean norm; the explicit constants in (3.5), (3.21), (4.5) depend on it. The diffusion g is given by its m columns and ∣g∣2=∑k∣gk∣2 (trace norm). Modes are Fin N (0-based). Time is ℝ≥0; time integrals are over subsets of R at s.toNNReal.
Every expectation of a nonnegative quantity (E∣x∣2, EVˉ) and every time integral of one is a lower Lebesgue integral in [0,∞], so a non-integrable process cannot produce a junk value 0.
Logarithms. The paper's log takes the value −∞ at 0. For a finite a(t)≥0, limsupt→∞t1loga(t)≤−γ is stated in the equivalent form "for every γ′<γ, eventually a(t)≤e−γ′t". Lean's Real.log 0 = 0 never enters. In (4.3) the almost-sure quantifier is outside the quantifier over γ′.
Correction of (4.5). The page prints the last term of H1 as 24τ3K34/(1−6τ2K32). Substituting (3.21) into (4.9), as the proof does, gives 24θτ4K34/(1−6τ2K32) (the same computation reproduces the printed H2). The mission uses the corrected H1 in the goal, (4.11) and (4.14). With the printed value the claimed rate could exceed what the proof yields whenever θτ>1.
"The unique root" is a conjunct of the goal (∃!γ>0); the stability conclusions are stated for every positive root. "(so λ>0)" is a consequence of (3.5), not a hypothesis. (4.4) is kept as an equality.
"The solution of (2.1)" is read as every process satisfying the solution definition: progressively measurable, almost surely continuous paths, E∣x(t)∣2<∞ for each t, and for each t, almost surely, the integral equation with Itô integrals in the L2 sense. Existence and uniqueness (cited from Mao–Yuan on p. 908) are not asserted.
"An m-dimensional Brownian motion" and "a Markov chain with generator Γ" are read in the Mao–Yuan framework the paper cites: an {Ft}-Brownian motion with independent coordinates and increments independent of the past, and an {Ft}-Markov chain with transition matrix etΓ. The usual conditions are kept as hypotheses.
"Locally Lipschitz" is uniform in the mode and time on each ball. C2,1 carries its derivatives Ut,Ux,Uxx as witnesses tied to U by derivative relations and joint continuity.
"τ>0 sufficiently small for (3.5)" means every τ>0 satisfying both inequalities of (3.5). U,λ1,λ2,c1,c2,τ are data. The constant C of (4.14) is chosen after x0, r0, the solution and γ, and before t.
(3.15), (3.21) and the transfer (4.14) ⇒ (4.3) are stated under fewer hypotheses than the surrounding proof has (Assumptions 2.1, 2.2, τ>0, and for (3.21) τ≤1/(4K3)), because their derivations use no more. Vˉ of (4.7) is used only for z≥2τ, where no extension of the solution to negative times is needed. Other misprints on the page (g(x,i,s)=f(x,i,0) on p. 909, V(x^0,r^0,t) for V(x^0,r^0,0) on p. 918, the swapped ∨,∧ on p. 907) are not formalized.
A trivializing formalization is ruled out: the expectations are not Bochner integrals, log0 is never evaluated, the goal asserts that the rate equation has exactly one positive root (so the stability clauses are not vacuous), the solution notion admits the true solution and requires path continuity, and the derivative witnesses of U are tied to U. A sorry-free local check confirms that Assumptions 2.1, 2.2, 4.1, condition (3.5) and λ>0 hold for n=m=N=1, f=g=0, u(x)=−x, U=∣x∣2, K1=K2=K3=1, λ1=1/4, λ2=1, c1=c2=1, τ=1/10; for these data LU+λ1∣Ux∣2=−∣x∣2 by hand.
Welcome contributions: the Itô isometry and Itô's formula for the L2 integral defined here, a generalized Itô formula for functions of a Markov-modulated Itô process, the Burkholder–Davis–Gundy inequality, and the Borel–Cantelli argument that turns mean-square exponential decay into almost sure decay. These are reusable far beyond this mission. Section 3 of the paper (asymptotic stability) is a separate mission of the same series.
Selected references
S. You, W. Liu, J. Lu, X. Mao, Q. Qiu, Stabilization of Hybrid Systems by Feedback Control Based on Discrete-Time State Observations, SIAM J. Control Optim. 53(2), 905–925, 2015. https://doi.org/10.1137/140985779
X. Mao, C. Yuan, Stochastic Differential Equations with Markovian Switching, Imperial College Press, 2006. https://doi.org/10.1142/p473
X. Mao, Stabilization of continuous-time hybrid stochastic differential equations by discrete-time feedback control, Automatica 49(12), 3677–3681, 2013. https://doi.org/10.1016/j.automatica.2013.09.005
The O.D.E. Method for Convergence of Stochastic Approximation and Reinforcement Learning II: Mean-Square Error under Bounded StepsizesResearch Paper
Motivation
Stochastic approximation is the family of recursive algorithms that locate a zero of a vector field h from noisy evaluations of it. Temporal-difference learning, Q-learning, actor–critic methods and stochastic gradient descent are all instances. In practice these algorithms are often run with a constant or bounded, non-vanishing stepsize: the iterate keeps adapting to new data and never freezes, at the price of never converging exactly. The natural question for such a scheme is quantitative: how far from the target does the iterate stay in the long run, and how does that distance scale with the stepsize?
Borkar and Meyn (SIAM J. Control Optim. 38(2), 2000) answer both halves of the question under one set of hypotheses. First, stability of a "fluid" ODE obtained by scaling h at infinity implies that the iterates have bounded second moments, with no a priori boundedness or projection assumption. Second, if the ODE x˙=h(x) has a globally exponentially stable equilibrium x∗, the asymptotic mean-square error is of the order of the largest stepsize. The first result replaced the usual stochastic-Lyapunov-function verification in reinforcement-learning applications (Section 3 of the paper). This mission formalizes the bounded-stepsize branch of the paper. A companion mission (… I: Stability and Almost-Sure Convergence under Tapering Stepsizes) covers the vanishing-stepsize branch.
Setting
Fix d≥1 and a Lipschitz vector field h:Rd→Rd. The stochastic approximation recursion (1.1) is
X(n+1)=X(n)+a(n)[h(X(n))+M(n+1)],n≥0,
with a deterministic step sequence {a(n)} and a noise sequence {M(n)} on a probability space (Ω,F,P). The associated ODE (1.2) is x˙=h(x).
The scaled fields are hr(x)=r−1h(rx). Assumption (A1) asks that h be Lipschitz, that hr(x)→h∞(x) for every x as r→∞, and that the origin be an asymptotically stable equilibrium of the fluid ODEx˙=h∞(x).
Let Fn=σ(X(0),…,X(n)). Assumption (A2) asks that {M(n)} be a martingale difference sequence, E[M(n+1)∣Fn]=0, with conditional second moments E[∥M(n+1)∥2∣Fn]≤C0(1+∥X(n)∥2) for a constant C0.
Assumption (BS), bounded stepsizes: 0<α≤a(n)≤αˉ<1 for all n, with α<αˉ.
The error (2.2) is e(n)=∥X(n)−x∗∥.
An equilibrium x∗ of (1.2) is globally asymptotically stable if it is Lyapunov stable and attracts every solution. It is globally exponentially asymptotically stable if there are b and δ>0 with ∥x(t)−x∗∥≤be−δt∥x(0)−x∗∥ for every solution.
The proofs compare the iterates with ODE solutions on a time grid: t(n)=∑i<na(i), blocks T(j)=t(m(j)) of length about T, the interpolated path ψ of the iterates, its rescaled version ϕj=ψ/r(j) with r(j)=max(1,∥X(m(j))∥), and the ODE solutions ψ^, ϕ^j restarted at each block.
Formalization targets
Goal: Theorem 2.3(ii)
Under (A1), (A2) and (BS), if x∗ is a globally asymptotically and globally exponentially asymptotically stable equilibrium of (1.2), there are α∗>0 and b2<∞ such that for all 0<αˉ≤α∗ and every initial condition X(0),
n→∞limsupE[e(n)2]≤b2αˉ.
The constant b2 is uniform in the stepsizes and in X(0). No rate constant is fixed: only the linear dependence on αˉ is asserted.
Milestones
Lemma 4.7. For fixed T>0 there is C2, independent of the stepsizes, with E[∥ϕj(t)−ϕ^j(t)∥2∣Fm(j)]≤C2αˉ and E[∥ϕj(t)∥2∣Fm(j)]≤C2 on every block.
Theorem 2.1(ii). There are α∗>0 and C1 with limsupnE∥X(n)∥2≤C1 whenever αˉ<α∗.
Lemma 4.8. For αˉ≤α∗, supt≥0E∥ψ^(t)−ψ(t)∥2≤C3αˉ.
Significance
The result. Theorem 2.1(ii) says that a stability property of a deterministic ODE at infinity controls a stochastic recursion in mean square, uniformly over initial conditions. Theorem 2.3(ii) turns this into an error bound: with a non-vanishing stepsize the iterate does not converge, but its mean-square distance from x∗ is eventually O(αˉ). This is the quantitative justification for constant-stepsize stochastic approximation in reinforcement learning and adaptive control, and it is the starting point of the trade-off between bias (small stepsize) and speed (large stepsize) discussed in Section 2.2 of the paper.
Formalizing it. The results are proved in the paper, partly by sketch: Lemma 4.8's proof refers to "familiar arguments using the Bellman–Gronwall lemma", and the paper writes several bounds as O(αˉ). A formal proof makes every constant and its dependence explicit, which the paper's quantifier order leaves partly implicit (see the scope section). No machine-checked proof of these results, or of any stochastic-approximation stability theorem in this generality, is known to exist.
Difficulty
The natural first argument, that the iterates track the ODE and the ODE converges, needs the iterates to be bounded. Bounded iterates are exactly what is being proved, so the argument is circular. The paper breaks the circularity by rescaling: on each block the iterate is divided by r(j), so that on large scales it tracks the fluid ODE, whose stability contracts the norm by a fixed factor per block. Making this work in mean square requires conditional second-moment estimates that are uniform in the stepsize and the scale (Lemma 4.7). A second difficulty is that the stepsize does not vanish: the tracking error per block does not go to zero, and the goal's content is precisely that it is of order αˉ with a constant that does not depend on αˉ.
Formalization scope
The state space is EuclideanSpace ℝ (Fin d). ODE solutions are forward solutions: continuous on [0,∞) with right derivatives. Stability notions are the standard ones, with exponential stability in the form the proof of Theorem 2.3(ii) uses.
The filtration is the natural filtration of the iterates. (A2) includes integrability of M(n+1) and ∥M(n+1)∥2 so that the conditional expectations are meaningful. Each theorem quantifies over every probability space, every measurable process satisfying (1.1) and (A2), and every deterministic X(0).
Second moments, suprema and limsup are computed in [0,∞], so a bound is a genuine finiteness claim.
Constant placement.α∗, C1 and b2 depend only on h, h∞, C0 (and x∗). C2 depends in addition on T, and C3 on T and X(0). None depends on the stepsizes. Theorem 2.3's page text puts b2 after α. Read literally, that would allow b2=C1/αˉ and make the goal a restatement of Theorem 2.1(ii). The formal goal fixes b2 before the stepsizes and the initial condition, as the proof (16C3αˉ) gives. α∗ is existential in Theorem 2.3(ii) and Lemma 4.8 rather than tied to Theorem 2.1(ii)'s witness.
The proof objects ψ^, ϕ^j are characterized by predicates (initial value, continuity, ODE on the block). Lemmas 4.7 and 4.8 hold for every function satisfying them.
Not included: Theorem 2.3(i) (its proof chooses a radius depending on αˉ), Theorem 2.4 and the Markov-chain results of Section 4.3, and the asynchronous extension (Theorem 2.5). The deterministic ODE lemmas 4.1–4.4 belong to the companion mission.
Useful infrastructure, reusable beyond this mission: Bellman–Gronwall inequalities in discrete time (Lemma 4.3 of the paper), stability of scaled ODEs, and conditional second-moment estimates for martingale-difference-driven recursions. Contributions of any of these as separate lemmas are welcome.
Selected references
V. S. Borkar and S. P. Meyn, The O.D.E. Method for Convergence of Stochastic Approximation and Reinforcement Learning, SIAM J. Control Optim. 38(2):447–469, 2000. https://doi.org/10.1137/S0363012997331639
M. Benaïm, Dynamics of stochastic approximation algorithms, Séminaire de Probabilités XXXIII, Lecture Notes in Math. 1709, Springer, 1999. https://doi.org/10.1007/BFb0096509
H. J. Kushner and G. G. Yin, Stochastic Approximation and Recursive Algorithms and Applications, 2nd ed., Springer, 2003. https://doi.org/10.1007/b97441
Tao 2022: Almost All Collatz Orbits Attain Almost Bounded ValuesResearch Paper
Motivation
The Collatz map sends an even positive integer n to n/2 and an odd one to 3n+1. The Collatz conjecture asserts that every orbit of this map eventually reaches 1. It remains an open problem.
Because the conjecture is open, a large part of the literature proves weaker statements that hold for almost all starting values. These results bound how small an orbit gets, not whether it reaches 1. They are the strongest unconditional evidence for the conjecture. Terence Tao's 2022 theorem is the strongest result of this type: outside a set of logarithmic density zero, every orbit drops below any prescribed function that tends to infinity, however slowly (Tao 2022).
Timeline
Attributions follow the survey in Tao 2022, Section 1. Here Colmin(N) is the least value in the orbit of N.
1976 to 1979, Terras and Everett.Colmin(N)<N for almost all N, in natural density.
1979, Allouche.Colmin(N)<Nθ for almost all N, for every θ>0.869.
1994, Korec. The same bound for every θ>log3/log4≈0.7924.
2019 preprint, 2022 publication, Tao. The power Nθ is replaced by any f(N)→∞, in logarithmic density instead of natural density (Forum of Mathematics, Pi 10, e12).
2026, ProofAtlas. A complete machine-checked proof of Tao's theorem in Lean 4 is published (formalization record).
Setting
Let collatzStep:N→N be
collatzStep(n)={n/23n+1n even,n odd.
Write collatzStep[k] for the k-fold iterate, with collatzStep[0](n)=n. The orbit of n is the set of values collatzStep[k](n) for k≥0. It includes n itself.
The Syracuse map acts on odd integers. It sends an odd n to the odd part of 3n+1, which is syracuseStep(n)=(3n+1)/2ν2(3n+1). The Syracuse orbit minimumsyracuseOrbitMin(n) is the least value syracuseStep[k](n) over k≥0.
For a set A of positive integers and a real cutoff x≥2, the logarithmic mass of A up to x is
weightedLogMassReal(x)=logx11≤n≤xn∈A∑n1.
A set of positive integers has logarithmic densityd when this quantity tends to d as x→∞. Since ∑n≤x1/n=logx+O(1), all positive integers together have logarithmic density 1, and the odd positive integers have logarithmic density 1/2.
A function f:N→Rtends to infinity on positive inputs when for every real M there is an N such that f(n)>M for all n≥N with n>0.
Formalization targets
Goal: Tao's Theorem 1.3
For every f that tends to infinity on positive inputs,
This is the Lean theorem collatz_almost_bounded_logarithmic. It fixes no rate and no constant, so later improvements do not invalidate it.
Syracuse form: Tao's Theorem 1.6
For every f that tends to infinity on odd positive inputs, the odd n whose Syracuse orbit contains a value below f(n) have logarithmic density 1/2, which is all of the odd integers. This is syracuse_almost_bounded_logarithmic.
Quantitative form: Tao's Theorem 3.1
There are constants C,c>0 such that for all real M≥2 and x≥2,
This is syracuse_uniform_logarithmic_tail_bound. The three targets are listed from weakest to strongest. In Tao's paper, the goal and Theorem 1.6 both follow from Theorem 3.1.
Significance
The result. Theorem 1.3 improves the earlier almost-all bounds on Collatz orbit minima from a power of N to any function that tends to infinity. For example, Colmin(N)<loglogloglogN for almost all N. The theorem does not settle the conjecture. A single divergent orbit or nontrivial cycle is not excluded, because its predecessors form a set with bounded orbit minima.
The formalization. The theorem is proved, and a complete formalization already exists. The ProofAtlas record Tao's Almost-Bounded Collatz Orbits proves the statement taoAlmostBoundedColMin_checked with the same step map and an orbit that includes its starting value. That package has 397 first-party Lean files and about 124,000 source lines. ProofAtlas records a passing build with no sorry and the axiom profile propext, Classical.choice, Quot.sound. The source is released under the Apache-2.0 licence at commit d53c8de00056fb05999e44589f2399d7efa026e4, with copyright held by Advameg, Inc. It was built with Lean v4.30.0-rc2.
The remaining work for this mission is therefore a port, not new mathematics. The existing Lean development must be moved to Lean v4.33.1 and Mathlib 0df444a, and then connected to the goal statement above.
Difficulty
The mathematical difficulty is already resolved in the existing proof. The classical first-descent argument shows that a typical orbit drops below its starting value. Repeating that argument fails, because after one descent the new value is no longer distributed like a random integer of its size, and the error compounds at each repetition. That is why earlier results stop at a power bound Nθ.
The difficulty of this mission is engineering. The port moves a development of about 124,000 lines forward across three minor Lean releases and the corresponding Mathlib changes. Lemma renames, deprecations, and changes in tactic behaviour must be repaired file by file without changing any statement.
Formalization scope
Step map.collatzStep n = if Even n then n / 2 else 3 * n + 1, so collatzStep(0)=0. This is the same definition as in the ProofAtlas source.
Orbit. The witness k ranges over all natural numbers, including k=0.
Density. The goal uses weightedLogMassReal: a real cutoff x, the natural indices 0≤n≤⌊x⌋, weights 1/n, and normalization by logx. The ProofAtlas statement instead uses integer cutoffs and normalization by the harmonic sum ∑n≤N1/n. A short bridge between the two normalizations is part of the required work.
Threshold. The hypothesis on f constrains only positive inputs. The value f(0) is irrelevant.
Non-triviality. The case k=0 alone covers only inputs with n<f(n). For slowly growing f this set is finite, so the goal is not satisfied by the starting value.
The goal is already reduced, through accepted proofs, to the single open statement syracuse_uniform_logarithmic_tail_bound. Two routes therefore close the mission. The first is to port the ProofAtlas development and prove the goal directly through the density bridge. The second is to prove Theorem 3.1 in its stated form. Contributions welcome include ported modules as reusable solutions, the density bridge, and a proof of Theorem 3.1. Every ported file must keep the Apache-2.0 notice and attribution to the ProofAtlas source.
Every quadratic-force oscillator is the same oscillator in different unitsTextbook
Motivation
This mission is a statement about ordinary differential equations and nothing else. It is motivated by the scaling analysis in the Shape Zero derivation (00_START_HERE/MODEL_SPEC.md §1b), which found that the golden ratio in an on-site quadratic well is a coordinate choice. The statements below do not depend on that motivation.
Result. For any a=0 and any two distinct real roots r1=r2, the equation
x′′=−a(x−r1)(x−r2)
becomes exactly
z′′=−(z2−1)
under one fixed shift and scaling of the value and one fixed rescaling of time. So every oscillator with a quadratic restoring force and two real roots is the same oscillator, described in different units. In particular, the golden-ratio well x′′=−(x2−x−1), whose roots are φ and −1/φ, is the normal form in disguise: its φ is a choice of coordinates.
What this mission does NOT prove.
Nothing about any lattice or model. It concerns a single oscillator. It does not treat coupling terms, and it says nothing about which dimensionless combinations survive in a coupled system.
Not that φ has no meaning anywhere. It shows only that φ in this equation is a coordinate choice.
Only solutions defined on all of R. Some solutions of this equation escape to infinity in finite time; the theorem concerns twice continuously differentiable functions on the whole real line. The same transformation works on intervals, but that is not formalized.
Not uniqueness of the transformation. It proves one exists.
Setting
Solutions are functions x:R→R that are twice continuously differentiable on all of R (ContDiff ℝ 2 x), with x′′ written deriv (deriv x). The transformation is
z(τ)=dx(τ/ω)−m,
a shift by m, a scaling by d=0 of the value, and a rescaling t=τ/ω of time with ω>0.
Formalization targets
Goal: one transformation for every solution
Let a=0 and r1=r2. There are real numbers m, d, ω with d=0 and ω>0, chosen once, before any solution is considered, such that for every twice continuously differentiable x:R→R:
This is QuadraticWell.quadratic_well_equiv. Explicitly m=(r1+r2)/2, d=±(r1−r2)/2 with the sign chosen so that ad>0, and ω=ad.
Milestones
M1 (the force in shifted, scaled form). If r1=r2 and d=±(r1−r2)/2 (either sign), then for every real y: −a(y−r1)(y−r2)=−ad2(((y−m)/d)2−1) with m=(r1+r2)/2.
M2 (the sign can be chosen). If a=0 and r1=r2, then a(r1−r2)/2>0 or a(r2−r1)/2>0 — so ω=ad is real and positive for one choice of d.
M3 (chain rule for the rescaling). For x twice continuously differentiable, ω=0 and d=0, the second derivative of τ↦(x(τ/ω)−m)/d at τ is x′′(τ/ω)/(ω2d).
The goal combines them: by M1 the equation reads x′′=−ad2(y2−1) with y=(x−m)/d; by M3 this becomes z′′=−(ad/ω2)(z2−1); and ω2=ad, available by M2, gives z′′=−(z2−1). The converse uses τ=ωt.
Corollary: the golden-ratio well
For every twice continuously differentiable x:R→R, x′′=−(x2−x−1) everywhere if and only if
z(τ)=5/2x(τ/ω)−21,ω=5/2,
satisfies z′′=−(z2−1) everywhere. This is the explicit instance with roots φ and −1/φ: m=21, d=5/2.
Significance
The result itself. It shows that the only content of a quadratic restoring force with two real roots, for a single oscillator, is the normal form z′′=−(z2−1); the roots and the stiffness are units.
Formalizing it. The equivalence had been checked numerically only.
Cross-check (independent code)
check
result
M1 identity, both signs of d (sympy)
exact
golden-ratio well: m, d, ω
21, 5/2, (5/2)1/2=1.057371
z(τ)=(x(τ/ω)−m)/d against a direct solution of z′′=−(z2−1), 400 points
max difference 6.9×10−13
a case needing the sign flip (a=−2, roots 3 and −1)
Low–moderate. M1 and M2 are short. M3 is the only fiddly part: Mathlib's chain rule for a composition with τ↦τ/ω, applied twice, needs the differentiability of x and of x′ that ContDiff ℝ 2 supplies. The goal and corollary then follow by rewriting.
Formalization scope
Solutions are functions on all of R, twice continuously differentiable; the derivative is Mathlib's deriv.
m, d and ω are existentially chosen before the solution x, so one transformation serves every solution.
The hypotheses of the goal are exactly a=0 and r1=r2.
Stabilization of Hybrid Systems by Feedback Control Based on Discrete-Time State Observations I: Almost Sure Asymptotic StabilityResearch Paper
Motivation
Many engineered systems switch between a finite number of operating modes at random times: a power grid after a line failure, a networked controller whose links drop, a manufacturing plant whose machines break down and are repaired. A standard model for such systems is a hybrid stochastic differential equation, also called an SDE with Markovian switching: the state follows an Itô equation whose coefficients depend on a mode that evolves as a continuous-time Markov chain. The monograph of Mao and Yuan (Stochastic Differential Equations with Markovian Switching, 2006) develops the stability theory of these equations.
A controller that stabilizes such a system usually needs the current state. In practice the state is sampled: it is observed at times 0,τ,2τ,… and the control is held between observations. Mao (Automatica 49, 2013) showed that, under a global Lipschitz condition on the drift and diffusion, a feedback control based on discrete-time observations stabilizes a hybrid SDE in the sense of mean-square exponential stability when τ is small enough. You, Liu, Lu, Mao and Qiu (SIAM J. Control Optim. 53(2), 2015) replaced that condition by local Lipschitz continuity plus linear growth, gave an explicit bound (3.5) on the admissible observation interval τ, and proved H∞-stability, mean-square asymptotic stability, almost sure asymptotic stability and exponential stability of the controlled system. This mission formalizes the almost sure asymptotic stability result, Theorem 3.4, and the results it is built on.
Setting
Let (Ω,F,{Ft}t≥0,P) be a probability space with a filtration satisfying the usual conditions (increasing, right-continuous, F0 contains the null sets). On it live an m-dimensional {Ft}-Brownian motionw and a right-continuous {Ft}-Markov chainr on S={1,…,N} with generatorΓ=(γij) (γij≥0 for i=j, zero row sums), independent of w. Fix τ>0 and the sampling timeδt=[t/τ]τ, the last observation time up to t. The controlled system is
Condition (3.5): λ2>λ1τK32[2τ(K12+2K32)+K22] and τ≤4K31.
In Lean these are Assumption21, Assumption22, C21, LU, Assumption31, Condition35, in the namespace You2015.Asymp; the basis is HybridSetup, the Itô integral IsItoIntegral, the sampling time delta, and solutions SolvesSampledHybridSDE, in the namespace You2015.Shared shared with the companion mission.
(3.24)–(3.25): E∫0∞∣x(t)∣2dt<∞ and liminft→∞∣x(t)∣=0 a.s.
(3.28): P(∃t:∣x(t)∣≥h)≤C/h2 for h>∣x0∣.
Significance
The result. Theorem 3.4 says that a controller sampling the state at rate 1/τ makes almost every trajectory of the switching system converge to the equilibrium, with an explicit, checkable bound (3.5) on τ. Mean-square convergence (Theorem 3.3) does not imply almost sure convergence in general, and a single trajectory is what an operator observes, so the pathwise statement is the one relevant to a deployed system. Condition (3.5) is stated in terms of the constants of Assumptions 2.1, 2.2 and 3.1, so for a concrete system (Section 6 of the paper) it gives a numerical bound on the observation interval.
Formalizing it. The results are proved in the paper; none of them is machine-checked. Mathlib has real Brownian motion but no Itô integral, no stochastic differential equations and no continuous-time Markov chains. The mission therefore also produces a reusable definition layer: a filtration under the usual conditions, a multidimensional {Ft}-Brownian motion, an {Ft}-Markov chain with a given generator, the L2 Itô integral of vector-valued integrands, and the solution notion of an SDE with Markovian switching and a sampled-state delay. A related but different layer exists on Prove2Me for Ethier–Kurtz (EthierKurtz_IsStandardBrownian, EthierKurtz_HasBrownianItoIntegral, EthierKurtz_SolvesBrownianSDE); it has no mode switching and no sampled state, so it cannot express (2.1).
Difficulty
Equation (2.1) is a stochastic differential delay equation with the delay t−δt, which is bounded but jumps at every observation time and has derivative 1 in between. The stability theorems for hybrid delay equations in the literature require a differentiable delay with derivative less than one (Mao–Yuan, p. 285), so they do not apply. Applying LU directly to U(x(t),r(t),t) leaves the term Ux[u(x(t))−u(x(δt))], which has no sign and depends on the path over a whole observation interval, so a Lyapunov function of the current state alone does not close the argument.
For the goal, the natural first idea, deducing almost sure convergence from E∣x(t)∣2→0 or from ∫0∞∣x(t)∣2dt<∞ a.s., fails: both are compatible with paths that make ever shorter excursions away from 0. The obstacle is to exclude infinitely many excursions of a fixed size, which neither moment statement controls.
Formalization scope
Conventions committed to in Lean:
The state space is EuclideanSpace ℝ (Fin n), so ∣x∣ is the Euclidean norm; the explicit constants in (3.5) and (3.21) depend on it. The diffusion g is given by its m columns and ∣g∣2=∑k∣gk∣2 (trace norm). Modes are Fin N (0-based). Time is ℝ≥0; time integrals are over subsets of R at s.toNNReal.
Every expectation E∣⋅∣2 and every time integral of a nonnegative quantity is a lower Lebesgue integral in [0,∞], so a non-integrable process cannot produce a junk value 0.
"The solution of (2.1)" is read as every process satisfying the solution definition: progressively measurable, almost surely continuous paths, E∣x(t)∣2<∞ for each t, and for each t, almost surely, the integral equation with Itô integrals in the L2 sense. Existence and uniqueness (cited from Mao–Yuan on p. 908) are not asserted.
"An m-dimensional Brownian motion" and "a Markov chain with generator Γ" are read in the Mao–Yuan framework the paper cites: an {Ft}-Brownian motion with independent coordinates and increments independent of the past, and an {Ft}-Markov chain with transition matrix etΓ. The usual conditions are kept as hypotheses.
"Locally Lipschitz" is uniform in the mode and time on each ball. C2,1 carries its derivatives Ut,Ux,Uxx as witnesses tied to U by derivative relations and joint continuity.
"τ>0 sufficiently small for (3.5)" means every τ>0 satisfying both inequalities of (3.5). U,λ1,λ2,τ are data of each statement. The paper's "C denotes a positive constant" is an existential chosen after x0, r0 and the solution, and before the time variables and h.
(3.15) and (3.21) are stated under fewer hypotheses than the surrounding proof has (Assumptions 2.1, 2.2, τ>0, and for (3.21) τ≤1/(4K3)), because their derivations use no more. Misprints on the page (for example g(x,i,s)=f(x,i,0) on p. 909 and the swapped definitions of ∨,∧ on p. 907) are not formalized.
A trivializing formalization is ruled out: the expectations are not Bochner integrals (which vanish for non-integrable integrands), the solution notion admits the true solution and requires path continuity, the derivative witnesses of U are tied to U, and a sorry-free check shows that the data hypotheses (Assumptions 2.1, 2.2, 3.1, C2,1, (3.5)) are satisfiable, for example by n=m=N=1, f=g=0, u(x)=−x, U=∣x∣2, λ1=1/4, λ2=1, τ=1/10.
Welcome contributions: the Itô isometry and Itô's formula for the L2 integral defined here, a generalized Itô formula for functions of a Markov-modulated Itô process, and Doob's maximal inequality in continuous time. These are reusable far beyond this mission. Section 4 of the paper (exponential stability) is a separate mission of the same series.
Selected references
S. You, W. Liu, J. Lu, X. Mao, Q. Qiu, Stabilization of Hybrid Systems by Feedback Control Based on Discrete-Time State Observations, SIAM J. Control Optim. 53(2), 905–925, 2015. https://doi.org/10.1137/140985779
X. Mao, C. Yuan, Stochastic Differential Equations with Markovian Switching, Imperial College Press, 2006. https://doi.org/10.1142/p473
X. Mao, Stabilization of continuous-time hybrid stochastic differential equations by discrete-time feedback control, Automatica 49(12), 3677–3681, 2013. https://doi.org/10.1016/j.automatica.2013.09.005
Free Energy Principle I: the variational free-energy boundResearch Paper
Motivation
The free energy principle (FEP) proposes that a self-organizing system — a brain, an organism, an agent — persists by minimizing one quantity: the variational free energy of its sensory states under an internal generative model. Introduced by Karl Friston as a principle of brain function [Friston 2006] and stated in its unified form [Friston 2010], the principle makes a precise mathematical claim at its core: whatever internal state estimate the system holds, the free energy of incoming data is never below the data's surprisal (negative log marginal likelihood), and the excess is exactly the Kullback–Leibler divergence between the system's recognition density and the Bayesian posterior implied by the model. Active inference extends the same functional from perception to action and planning [Friston et al. 2017], and the same bound is known in machine learning as the evidence lower bound (ELBO) of variational inference [Parr et al. 2022].
Timeline of the mathematical content this mission formalizes:
2006 — Friston, A free energy principle for the brain (J. Physiol. Paris 100): the bound stated for perception as variational inference on a generative model.
2010 — Friston, The free-energy principle: a unified brain theory? (Nat. Rev. Neurosci. 11, 127–138): free energy as an upper bound on surprisal, presented as the core of a unified account.
2017 — Friston, FitzGerald, Rigoli, Schwartenbeck, Pezzulo, Active inference: a process theory (Neural Comput. 29(1), 1–49): the same functional drives policy selection through expected free energy.
2022 — Parr, Pezzulo, Friston, Active Inference (MIT Press): textbook treatment; the posterior-form identity F=DKL(Q∥P(s∣o))−logP(o) as the central equation.
2026 — fep_formal (Active Inference Institute): a machine-checked Lean 4 catalogue of 155 Free Energy Principle topics, compiled with zero proof holes against a pinned Mathlib. This mission transcribes the catalogue's core-free-energy chain — topic fep-002 and the foundation module active_inference — onto the platform, turning the first link of the FEP development into solvable community infrastructure.
Setting
Everything is finite, and laws are normalized real mass functions.
A finite law on a finite type α is a function p:α→R with p(x)≥0 for every x and ∑xp(x)=1. A finite kernel from α to β assigns to each x∈α a normalized row over β. The mission's definitions Def_fep_finite_laws and Def_fep_finite_information package these carriers with entropy, cross-entropy, and the KL divergence
a totalized real-valued divergence that is finite even at zero-mass atoms (the convention 0⋅log0=0 via Real.negMulLog) and nonnegative on normalized laws.
A finite generative model for active inference (definition Def_fep_generative_model) over finite types Policy,State,Outcome consists of: an initial state law P(s); a policy-conditioned transition kernel; a state-to-outcome likelihood kernel; a preference law over outcomes; and a policy prior. Under a policy π the model predicts the state law P(s∣π) and the outcome law P(o∣π). A recognition density is any finite law Q over states — the system's internal estimate. At an outcome o with positive predicted mass, the Bayesian posteriorP(⋅∣o,π) is the exact finite Bayes rule. The outcome surprisal is −logP(o∣π), and the posterior-form variational free energy of a recognition density Q is
F[Q,o,π]=DKL(Q∥P(⋅∣o,π))−logP(o∣π).
Formalization targets
Goal: the variational free-energy bound
For every generative model, every policy π, every outcome o with P(o∣π)>0, and every recognition density Q:
−logP(o∣π)≤F[Q,o,π].
The recognition density Q is universally quantified — the bound holds for whatever state estimate the system happens to carry.
Exactness, uniqueness, and the ELBO form
Three companions pin down the equality case, ordered weakest to strongest alongside the milestone list:
Exactness — the Bayesian posterior attains the bound:
F[P(⋅∣o,π),o,π]=−logP(o∣π).
Uniqueness — equality characterizes the posterior, with no full-support assumption:
F[Q,o,π]=−logP(o∣π)⟺Q=P(⋅∣o,π).
ELBO form — negating both sides:
−F[Q,o,π]≤logP(o∣π).
Measure-theoretic core
Independently of the finite model, in Mathlib's nonnegative extended reals R≥0∪{∞}, with q, p measures on any measurable space and s∈R≥0∪{∞}:
s≤s+DKL(q∥p),
the unconditional shape of the bound (topic fep-002 of the source catalogue), with the divergence taken as ∞ when the log-likelihood ratio is not integrable.
Significance
The result itself. This inequality is the load-bearing step of the FEP: it converts "minimize free energy" into "move recognition toward the posterior," and it is the exact statement whose continuous, dynamic, and policy-selecting extensions (expected free energy, Markov blankets, non-equilibrium thermodynamics) form the rest of the FEP literature. Without it, the principle's variational step has no mathematical content.
Formalizing it. The mathematics here is classical — Gibbs' inequality — and the source development already proves every row with no proof holes. What the mission adds is faithful, reusable infrastructure: the definitions are published as platform nodes in the shared namespace FreeEnergyPrinciple, so later missions in this programme (expected free energy and policy selection, Markov blankets, Gaussian and continuous-time variants, already proved in the source repository) can import them instead of re-deriving the substrate. Status honesty: all eight items below are formalized and machine-checked locally against the platform environment; each is an open problem on the platform only in the sense that no proof has yet been submitted to it.
Difficulty
The bound itself is a one-line consequence of KL nonnegativity — the naive idea "prove it by simp on the KL sum" is essentially right, and the source proofs are correspondingly short. The actual difficulty is boundary precision, where plausible renderings go silently wrong:
The positivity premise P(o∣π)>0 is not decoration: the Bayesian posterior is defined only where the evidence has positive mass, and hiding that in a totalized division would change the statement.
The uniqueness characterization is not a formality: at zero-mass reference atoms the logarithmic cross-entropy identity degenerates, and the proof needs the normalization lemma DKL(p∥q)=0↔p=q, which forces the recognition law's mass to zero wherever the posterior's is zero. A solver who proves the bound but states equality with a full-support hypothesis has proved something different from the source.
The measure-theoretic core is deliberately unconditional; adding finiteness side conditions to it would weaken the source's point that R≥0∪{∞} absorbs the degenerate cases.
A vacuous formalization — quantifying over a single distinguished recognition law, or taking "posterior" as an arbitrary variable — would trivialize the goal; the targets below rule this out by fixing the exact finite Bayes rule and universally quantifying Q.
Formalization scope
Committed conventions of this mission's Lean development:
All model carriers are finite types (Fintype); laws are R-valued normalized mass functions; kernels are normalized rows. No measure-theoretic machinery below the finite substrate except for the measure-theoretic core milestone.
KL is the totalized real-valued finite divergence DKL(p∥q)=∑xq(x)⋅klFun(p(x)/q(x)); entropy uses Real.negMulLog, so 0⋅log0=0 exactly, not by exception-handling.
The posterior is the exact finite Bayes rule FiniteKernel.posterior, taken at the explicit hypothesis 0<P(o∣π).
One mission-wide namespace FreeEnergyPrinciple; definitions live in the published definition files Def_fep_finite_laws, Def_fep_finite_information, Def_fep_generative_model, and every theorem item imports them. A Free Energy Principle II mission (expected free energy) is expected to reuse the same namespace and definitions.
The measure-theoretic core uses Mathlib's InformationTheory.klDiv in ℝ≥0∞ with no finiteness hypotheses.
Contributions welcome: alternative measure-theoretic renderings of the core bound, the Gaussian instantiation of the same identity, and ports of the source repository's subsequent rows (Bayesian model reduction, expected free energy) onto these definitions.
K. Friston, The free-energy principle: a unified brain theory?, Nature Reviews Neuroscience 11 (2010) 127–138. https://doi.org/10.1038/nrn2787
K. Friston, T. FitzGerald, F. Rigoli, P. Schwartenbeck, G. Pezzulo, Active inference: a process theory, Neural Computation 29 (2017) 1–49. https://doi.org/10.1162/neco_a_00912
D. A. Friedman, fep_formal: Towards Lean 4 Formalization of the Free Energy Principle (v1.2.0), Active Inference Institute (2026), the formal source of truth for this mission. https://github.com/ActiveInferenceInstitute/fep_formal
D. A. Friedman, Towards Lean 4 Formalization of the Free Energy Principle: AI-Driven Theorem Sketching and Verification for Active Inference and Bayesian Mechanics, Active Inference Journal (2026). https://doi.org/10.5281/zenodo.19699233
Bound L4: 33,070,982 <= R Reversible Binary 2D Moore RulesOpen Problem
Bound L4: 33,070,982≤R
This mission formalizes the lower bound 33,070,982≤R on the number of reversible binary cellular automata on the 3×3 Moore neighborhood. Extending the conserved-landscape marker families to both centered and off-centered rules.
Winding Arithmetic III: Faithful Dense Phase CharacterResearch Paper
Motivation
An integer winding label is discrete, but its exponential readout lies on a continuous circle. This mission makes that relationship exact. For a nonzero real algebraic angle α, the map
n⟼einα
is simultaneously a group character, a faithful encoding of Z, and a countable dense orbit in the unit circle. Its complex values also form a linearly independent family over the algebraic complex numbers Q.
The result welds three previously completed interfaces. Circle covering theory produces canonical integer winding. Irrational-rotation theory classifies when an integer orbit is dense. Lindemann–Weierstrass gives the arithmetic rigidity that excludes resonance and algebraic linear relations. The point is not that topology alone proves transcendence, or that transcendence constructs winding: the theorem records the precise composition of the three layers.
The foundations are the completed private missions Winding Dynamics I, Lindemann–Weierstrass I, and Winding Arithmetic II. The transcendence layer is an attributed Lean 4.30-compatible port of Yuyang Zhao's mathlib PR #28013.
Setting
Write S1⊂C for the complex unit circle. For a real angle α and integer n, define
phaseα(n)=einα∈S1.
This is an additive-to-multiplicative character: phase at 0 is 1, and phase at m+n is the product of the phases at m and n.
A based Circle loop γ has a canonical integer wind(γ), obtained from the endpoint of its zero-based lift through the exponential cover. Its real phase readout is phaseα(wind(γ)).
The orbit is dense when every nonempty open subset of S1 contains some phaseα(n). It is faithful when distinct integers have distinct phases. These properties are compatible: a countable subset may be dense without being all of the circle.
Formalization targets
Irrational rotation criterion
For every real α,
DenseRange(n↦einα)⟺2πα∈/Q.
The proof identifies the phase orbit with integer multiples in R/(2πZ) and transports Mathlib's irrational-rotation theorem through the standard homeomorphism with the complex unit circle.
Algebraic angles are nonresonant
If α∈R is nonzero and algebraic over Q, then α/(2π) is irrational. Otherwise π would be algebraic, contradicting the proved transcendence of π. Consequently the real phase character has dense range.
Faithfulness and arithmetic rigidity
For the same nonzero algebraic α, the character is injective and
(einα)n∈Z
is linearly independent over Q. The first conclusion says no two winding integers alias. The second says no nontrivial finite algebraic-coefficient linear relation exists among the phase values.
Actual Circle-loop consumer
For based Circle loops γ and δ,
eiαwind(γ)=eiαwind(δ)⟺wind(γ)=wind(δ).
This consumes the canonical covering-space winding rather than an arbitrary externally supplied integer.
Resonance control
At the full-turn angle α=2π, every integer phase is 1, so the character is not injective. This negative control is outside the algebraic-angle regime because π is transcendental. It records exactly why a nonresonance hypothesis is load-bearing.
Significance
The capstone exhibits one object with three complementary properties:
topological discreteness — values are indexed by integer winding;
dynamical density — the countable orbit visits every Circle neighborhood;
arithmetic rigidity — distinct values are faithful and linearly independent over Q.
This is a precise version of the intuitive claim that winding creates an integer coordinate whose phase representation explores a continuum. The continuum statement is density, not surjectivity: the image remains countable. The arithmetic statement is linear independence, not algebraic independence of the separate phase variables; the character law itself supplies multiplicative relations.
Together with Winding Arithmetic II, continuous homotopy preserves these readouts and a registered reset ledger factorizes their changes. This mission isolates the extra fact that the resulting character is both faithful and dense for every nonzero real algebraic angle.
Difficulty
No single layer implies the capstone by itself. The Circle exponential is periodic, so injectivity requires a genuine nonresonance argument. Density requires the exact normalization by 2π and transport through the AddCircle–Circle homeomorphism in both directions. Linear independence requires the completed Lindemann–Weierstrass theorem, not merely irrationality or transcendence of π.
The coercion bridge between the real Circle phase and the complex exponential character is also orientation-sensitive: the formal phase is exactly exp(inα). Reversing the sign would still define a dense faithful character, but it would not be the registered convention used by the prior winding arithmetic mission.
Formalization scope
All artifacts use Lean 4.30 and Mathlib revision c5ea00351c28e24afc9f0f84379aa41082b1188f. Circle density is stated only for real α. The arithmetic conclusions require both IsAlgebraic ℚ α and α=0.
The actual-loop theorem proves equality of phase values if and only if equality of canonical winding integers. It does not claim that the loops themselves are equal, and it does not add a new classification of homotopy classes. That classification remains the responsibility of the Circle covering-space layer.
The theorem proves a faithful representation of winding values, not the existence of winding in an arbitrary physical model. A Kuramoto, XY, or Lohe consumer must still provide a jointly continuous Circle field or a preserved non-simply-connected carrier and readout. No particle–wave or quantum-mechanical interpretation is asserted.
Winding Arithmetic II: Conserved Phase BasesResearch Paper
Motivation
Winding number is a topological integer: continuous deformation preserves it, while crossing a branch cut or registering a reset can change it by an integer amount. Transcendence theory gives a different kind of rigidity. For a nonzero algebraic coupling α, the phases eiαn attached to distinct integers n are linearly independent over the field Q of algebraic complex numbers. This mission joins those statements at their exact formal interfaces.
The result is useful wherever a model first produces an integer winding label and then represents that label by a complex phase. Topology supplies the discrete coordinate, dynamics determines when it is conserved or reset, and Lindemann–Weierstrass supplies arithmetic distinguishability. None of those layers is asked to manufacture the others.
The foundation comes from three completed private missions: Winding Dynamics I: Homotopy Conservation and Reset Balance, Integer Winding Transcendence I: Exponential Phase Independence, and Lindemann–Weierstrass I: Exponential Independence. The transcendence proof is an attributed Lean 4.30-compatible port of Yuyang Zhao's mathlib PR #28013.
Setting
Let S1 be the complex unit circle. A based Circle loop is a continuous path in S1 that starts and ends at 1. Its canonical real lift through the exponential covering starts at 0; the lift endpoint determines an integer wind(γ).
For β∈C and n∈Z, define the integer exponential character
χβ(n)=exp(nβ).
The arithmetic consumer uses β=iα, where α is nonzero and algebraic over Q. Thus a loop γ carries the phase χiα(wind(γ)).
A closed Circle field is a jointly continuous map on the time/spatial square I×I whose two spatial endpoints agree at every time. Each spatial slice is normalized by its moving basepoint, producing a based loop. A carrier/readout segment generalizes this: an ambient trajectory remains in a registered carrier subspace and is observed through a continuous map from that carrier to S1.
The discontinuous branch is represented separately by a finite reset ledger. It stores successive integer edge-turn cochains. Pairing those cochains with a certified closed edge cycle produces integer winding values and reset periods.
Formalization targets
Circle winding separates algebraic phases
For a family of loops (γj)j∈J with pairwise-distinct windings,
(eiαwind(γj))j∈J is linearly independent over Q.
Continuous evolution preserves the phase basis
If the initial windings of a family of closed Circle fields are distinct, then the initial phase family is linearly independent, every phase is unchanged between endpoint times, and the final phase family remains linearly independent. The same conclusion is exposed through the carrier/readout interface.
Reset balance becomes phase factorization
If a reset ledger has endpoint winding change Wf−Wi and registered reset periods ΔWj, then
χβ(Wf−Wi)=j∏χβ(ΔWj).
This is the multiplicative image of the exact additive ledger balance.
The phase readout is faithful
For nonzero algebraic α, the character χiα is injective on
Z. Consequently, two actual Circle loops have equal algebraic phase
readouts exactly when they have equal canonical winding. On the reset branch,
j∏χiα(ΔWj)=1⟺Wf=Wi.
Thus the multiplicative reset record detects zero net winding change without
losing integer information.
Significance
The main theorem upgrades conservation of a single integer to conservation of an arithmetic basis. Distinct homotopy classes do not merely retain distinct integer labels: after the algebraic exponential readout, the corresponding phases admit no nontrivial finite linear relation with algebraic coefficients. This lets downstream consumers treat a family of winding sectors as a linearly independent family over Q.
The reset theorem provides the matching event law. Continuous evolution preserves the basis, whereas a registered reset multiplies phases according to the reset periods. The two branches share one character but retain different hypotheses, so a discontinuous ledger event is not misrepresented as a continuous homotopy.
The algebraic readout is also faithful: despite taking values on the complex
exponential curve, it neither aliases two winding sectors nor hides a nonzero
net reset behind total phase 1 under the stated algebraic hypothesis.
This does not establish a particle–wave duality or a quantum-mechanical interpretation. It establishes a precise mathematical analogy: an integer topological label has a complex character representation whose distinct values enjoy a strong arithmetic independence theorem under an algebraic nonresonance condition.
Difficulty
The individual deductions are short only because three difficult interfaces have already been proved. Replacing an arbitrary integer map by actual Circle winding requires using the canonical covering lift rather than postulating labels. Preserving the phase basis requires transporting injectivity and linear independence through a jointly continuous moving-basepoint normalization. The reset branch requires respecting the sign convention and mapping a finite sum to a finite product, including the empty ledger.
Several tempting statements would be false. Duplicate winding labels cannot give a linearly independent family. The exponent α=0 collapses every phase to 1. Continuity of finitely many vertex phases does not by itself define a continuous spatial Circle field, and crossing the principal cut can change a discrete principal-turn winding. A global readout from a simply connected carrier such as all of SU(2) cannot support nonzero loop winding without a separately registered non-simply-connected subcarrier or channel.
For a general complex coupling, exponential resonance can destroy injectivity.
The nonzero algebraic hypothesis excludes that resonance here through the
proved Lindemann--Weierstrass theorem; it is not merely a convenient side
condition.
Formalization scope
All artifacts use Lean 4.30 and Mathlib revision c5ea00351c28e24afc9f0f84379aa41082b1188f. The Circle winding is the floor of the canonical zero-based lift endpoint divided by 2π. Closed fields live on I×I and are normalized at spatial coordinate zero. The coupling α is an arbitrary complex algebraic number, not necessarily real, and must be nonzero.
The main carrier/readout theorem is conditional on an explicit continuous carrier-valued trajectory, closed spatial slices, and continuous Circle readout. It does not prove existence of a Kuramoto, XY, or Lohe solution, nor preservation of a particular carrier by such an ODE. Those are model-specific successors.
The reset factorization consumes the registered coherent ledger and certified closed cycle. It is an exact algebraic event law, not an energy estimate and not a claim that every physical trajectory realizes such a ledger. Its vertex and edge types retain the universe-zero scope of the existing reset interface.
Winding Dynamics I: Homotopy Conservation and Reset BalanceTextbook
Motivation
Phase winding is an integer attached to a circle-valued field on a closed spatial cycle. It distinguishes configurations that cannot be continuously deformed into one another while remaining circle-valued and spatially continuous. In oscillator and spin models this integer is often described informally as conserved by smooth evolution, while changes of winding are attributed to phase slips, vortices, singularities, or branch-cut crossings. The purpose of this mission is to turn that informal division into an exact Lean interface.
The continuum and finite-lattice settings must be separated. A jointly continuous field on a spatial circle really does provide a homotopy of circle maps, so its degree is invariant. A finite list of continuously moving vertex phases does not by itself determine a continuous field on the geometric realization of the lattice. Principal shortest-arc interpolation becomes ambiguous at antipodal bonds, and the corresponding discrete winding can jump even though every vertex phase remains continuous. The mission therefore treats winding as a first integral only on the regular sector and records every failure of regularity through an integer reset ledger.
This distinction is relevant to circle-valued reductions of the Kuramoto model, the finite XY model, and Lohe-type dynamics. Kuramoto's original synchronization model concerns coupled phase oscillators, while Lohe's non-Abelian extension replaces phases by group-valued variables. A model-specific conservation theorem is justified only after the dynamics has been connected to an actual circle-valued spatial loop or to the registered finite principal-branch interface.
Setting
A circle loop is a continuous map from a closed parameter interval to S1 whose two endpoints agree. Its winding number is the integer obtained from the endpoint of a lift to the universal cover R→S1. When the loop's basepoint moves during a deformation, the loop is normalized by the inverse of its value at the chosen spatial basepoint; this produces a based loop without changing its winding.
A continuous Circle-field segment is a jointly continuous map
U:[t0,t1]×S1⟶S1.
Each time slice Ut is a spatial loop. Such a segment has no branch-cut convention: it is intrinsic topological data.
For a finite directed edge system (including a finite periodic lattice), a state assigns a real lift to every vertex. Each oriented edge receives an integer principal turn. A state is branch regular when no stored edge is antipodal. A coherent finite reset ledger stores successive principal-turn cochains Ti and defines the reset ki=Ti+1−Ti. For a certified closed integer cycle C, the pairing ⟨ki,C⟩ is its registered winding jump.
A Kuramoto, XY, or Lohe consumer must supply the missing model-specific data. For a continuum consumer this is a jointly continuous circle-valued field. For a finite consumer it is a continuous vertex trajectory together with branch regularity away from registered events. A Lohe consumer additionally needs a continuous Circle readout or invariant Circle carrier; preservation of a rotor constraint alone does not provide that reduction.
Formalization targets
Continuous-field conservation
For every jointly continuous Circle-field segment, the two endpoint loops have equal winding:
wind(Ut1)=wind(Ut0).
The statement must cover moving loop basepoints through explicit normalization. Winding is defined directly from Mathlib's exponential covering map as the floor of the zero-based lift endpoint divided by 2π.
Branch-regular finite conservation
For every finite directed principal-phase trajectory on a preconnected time domain that remains branch regular, every registered integer-chain winding is constant:
WC(t1)=WC(t0).
Continuity of the vertex phases alone is not a sufficient hypothesis and must not appear as a replacement for branch regularity or spatial interpolation.
Exact reset balance
For a finite coherent ledger with steps i=0,…,N−1, endpoint winding change equals the sum of the reset periods:
WC(TN)−WC(T0)=i=0∑N−1⟨ki,C⟩.
The conservation theorem is the empty-ledger or zero-period special case. The statement is an exact integer identity and does not assert an energy lower bound, vortex separation, or a thermodynamic-limit result.
Dynamics adapters
The generic dynamics adapter requires a jointly continuous ambient-state segment, a registered carrier containing it, closed spatial profiles, and a continuous readout from that carrier to the Circle. Kuramoto/XY or Lohe consumers must separately prove those hypotheses for their model. A second fence states that a global continuous readout from a simply connected carrier maps every loop to a nullhomotopic Circle loop; nonzero Lohe winding therefore requires a separately registered non-simply-connected carrier, such as a preserved U(1) orbit, or a different explicit interface.
Significance
The resulting theorem family makes precise the statement that winding obstructs unwinding. In the intrinsic continuum setting, winding cannot change while the field remains a continuous S1-valued map. In the finite principal-branch setting, winding is piecewise constant and every change has an exact integer certificate. This separates a topological conservation law from the physical or analytic question of how much energy is needed to realize a certificate.
For formalization, the mission supplies a reusable boundary between topology and dynamics. A dynamics development can establish continuity and carrier preservation without reimplementing covering-space winding. A lattice development can consume the same integer through reset cochains without claiming that a vertex-only path is a homotopy of spatial loops. Later energy-barrier, vortex, and transport results can depend on the reset balance rather than on an informal conservation principle.
Difficulty
The principal difficulty is that several superficially similar notions of continuity have different consequences. Continuity in time of finitely many vertex phases is continuity into the configuration torus (S1)V, which is connected and does not preserve a principal-edge winding sector. Continuity of a map on time times the geometric spatial cycle is stronger. A formal statement that confuses them would make the desired theorem false.
There are two additional interface risks. First, the canonical Circle lift is based, whereas a physical phase field normally has a moving value at the chosen spatial origin. Second, the current Lohe development establishes algebraic identities and infinitesimal rotor preservation, not a global continuous flow in a selected Circle subgroup. These distinctions remain visible in the theorem hypotheses.
Formalization scope
The mission targets Lean 4.30 with Mathlib revision c5ea00351c28e24afc9f0f84379aa41082b1188f, matching the cited LeanProofs development. It reuses Mathlib's unit interval, continuous maps, path homotopies, Circle covering map, local constancy, and finite sums. The continuum statement concerns spatial S1 only. The finite theorem is graph-generic: it uses finite oriented edges, integer edge cochains, certified closed integer cycles, coherent successive reset states, and branch regularity on a preconnected time domain.
The scope excludes ODE or PDE existence and uniqueness, preservation of a Circle carrier by a particular Lohe vector field, extraction of a coherent reset ledger from a physical event trajectory, arbitrary graph interpolation, accumulating reset times, thermodynamic limits, and energetic barriers. Those may be attached later through explicit interfaces. No theorem claims global winding conservation for an unrestricted finite vertex trajectory, and no theorem identifies group-valued Lohe motion with Circle motion without a declared continuous readout.
Y. Kuramoto, “Self-entrainment of a population of coupled non-linear oscillators,” in International Symposium on Mathematical Problems in Theoretical Physics, Lecture Notes in Physics 39, 1975, pp. 420–422. https://doi.org/10.1007/BFb0013365
A real lift of a circle-valued phase records both a principal representative and an integer sheet. This packet isolates the neutral arithmetic of that lifted reading before any physical interpretation as time, dynamics, causality, or a preferred vacuum.
Setting
A clock candidate is a function from an arbitrary event type to the real universal cover of the circle. Principalization separates each real value into a representative modulo 2π and an integer sheet. Real origin shifts, integral deck shifts, and orientation reversal are treated as distinct transformations.
Formalization targets
The intended packet covers principal-ledger reconstruction, the conditional strict order induced by an injective or monotone lift, affine-origin and deck freedom, orientation reversal, an adapter from separately established circle winding to an integer clock turn, and a scalar power-law integrability boundary.
The exact target statements remain subject to reconciliation with the immutable LeanProofs source before this private draft is submitted. In particular, no arithmetic quotient identity may be presented as the full Circle winding adapter, and no scalar integrability theorem may be interpreted as a PDE blow-up result.
Significance
This separates universal-cover bookkeeping from later consumers. A subsequent packet may connect the ledger to reset cochains, null-pair torsors, or dynamics only through explicit adapters.
Difficulty
The main risks are sign conventions at the principal cut, degeneracy on empty event types, confusion between the continuous real origin action and the integral deck action, and circular definitions that manufacture winding from the desired clock integer.
Formalization scope
The development targets Lean 4.30 and Mathlib revision c5ea00351c28e24afc9f0f84379aa41082b1188f. It makes no claim of monotone physical time, dynamical selection, causal order, global foliation, PDE existence, singularity formation, or a canonical origin or orientation.
Curso de EDO I: Picard Existence and UniquenessTextbook
Motivation
Essentially every quantitative model written as a rate of change — a mechanical system, a chemical
reaction network, a population model, a control loop — is an ordinary differential equation
(ODE) together with an initial condition. Before anything can be computed about such a model, two
questions must be settled: does a solution through the given initial state exist, and is it the
only one? The classical answer is the Picard–Lindelöf theorem: a Lipschitz right-hand side
yields a unique local solution. Uniqueness is not a technicality — it is what licenses speaking of
the trajectory through a point, hence of a flow, and so it underwrites the entire qualitative
theory of dynamical systems that the source text builds afterwards (vector fields, tubular flow,
ω-limit sets, Poincaré–Bendixson, Grobman–Hartman, stable manifolds).
This mission is the first in a series formalizing Augusto Armando de Castro Júnior's lecture notes
Curso de Equações Diferenciais Ordinárias (2009), a graduate ODE course that develops the theory
directly in Banach spaces, not only in Rn. The book proves existence and uniqueness
once, in that general setting, and then reuses it throughout; this mission formalizes that
foundation.
Setting
Let E be a real Banach space, t0∈R, x0∈E, and a,b>0. Write
Bˉ(x0,b)={x∈E:∥x−x0∥≤b} for the closed ball and
U=[t0−a,t0+a]×Bˉ(x0,b)⊂R×E.
A map f:U→E is Lipschitz with respect to the second variable with constant c>0 if
the same c serving for every z (Definição 2.1.1 of the source).
Given f, the Cauchy problem (initial value problem) with initial data (t0,x0) asks for a
curve φ:I→E, defined on a nondegenerate interval I∋t0, such that
(t,φ(t))∈U for all t∈I, φ(t0)=x0, and
φ′(t)=f(t,φ(t)) for all t∈I — one-sided derivatives at the endpoints of I
(Definições 1.0.1 and 1.1.1). Equivalently, by the Fundamental Theorem of Calculus, φ is
continuous with graph in U and satisfies the integral equation
φ(t)=x0+∫t0tf(s,φ(s))ds,t∈I.
Finally, put M=sup{∥f(t,x)∥:(t,x)∈U} and α=min{a,b/M}.
Target
The goal theorem is Teorema 2.1.2 (Picard) of the source: if f:U→E is continuous,
bounded, and Lipschitz in the second variable, then the Cauchy problem x′=f(t,x),
x(t0)=x0 has a solution on [t0−α,t0+α], and any two solutions on that interval
whose graphs stay in U coincide there:
∃φsolution on [t0−α,t0+α],∀ψsolution on [t0−α,t0+α]:φ=ψon [t0−α,t0+α].
The milestones are the results the source uses to get there, in its own order: the contraction
fixed point theorem (Teorema 0.2.10), the equivalence between the Cauchy problem and the integral
equation (Capítulo 2, opening paragraphs), the sufficient condition for Lipschitz dependence via a
bounded partial derivative (Proposição 2.1.4), and the global version on a whole interval
(Corolário 2.1.3).
Significance
Picard's theorem is what makes the initial value problem well posed in the sense of Hadamard's
first two requirements. Downstream in the same book it is the hypothesis behind maximal solutions
and the escape-from-compacts property (§2.3), continuous and differentiable dependence on initial
conditions and parameters (Chapter 3), and the local flow of a vector field (Chapter 4). Without
uniqueness none of these statements can even be phrased.
As for formalization status: Mathlib already contains a Picard–Lindelöf development
(IsPicardLindelof, ODE_solution_unique and relatives) and a Banach fixed point theorem
(ContractingWith.exists_fixedPoint). The work this mission asks for is therefore not the
discovery of a proof but a faithful bridge: stating the source's hypotheses as the source states
them — a closed ball, a supremum bound M, the radius α=min{a,b/M}, Lipschitz in the
second variable with one constant for all times, uniqueness among solutions whose graph stays in
the domain — and deriving them from, or proving them alongside, the library's own formulation.
Such bridges are where unfaithful formalizations usually hide, and they are reusable by every
later mission in the series.
Difficulty
The obvious route is "cite the library and close the goal". It does not go through unchanged, for
three reasons. First, the hypothesis shapes differ: the library packages its assumptions in a
structure with its own choice of ball, bound and time radius, and matching α=min{a,b/M}
with a supremum-defined M requires the boundedness argument to be redone at the interface.
Second, uniqueness here is asserted for solutions in the sense of this mission's definition —
derivative within the interval, one-sided at the two endpoints, graph inside U — so a
Grönwall-type uniqueness statement must be transported to that formulation, including the endpoint
cases. Third, the source works with an arbitrary Banach space E and only assumes f bounded,
rather than assuming finite dimension; compactness arguments are unavailable by design.
The remaining genuine mathematical content sits in the milestones: the iterate estimate
∥Fm(φ1)−Fm(φ2)∥≤m!cmαm∥φ1−φ2∥ used by the
source to make some iterate of the Picard operator a contraction, and the mean value inequality on
a convex open set behind Proposição 2.1.4.
Formalization scope
Conventions this proposal fixes, all visible in the definitions item:
Solutions are total functions R→E whose behaviour is constrained only on the
interval I; uniqueness is therefore stated as agreement onI, never as equality of
functions.
Differentiability is the derivative relative to I, which is exactly the source's convention
of lateral derivatives at endpoints.
The ball Bˉ(x0,b) is closed — the source's proof needs the function space
C0([t0−α,t0+α],Bˉ(x0,b)) to be a closed subset of C0.
M is a least upper bound of {∥f(t,x)∥:(t,x)∈U}, which encodes both the
boundedness hypothesis and the definition of M; the extra hypothesis M>0 is stated
explicitly because the quotient b/M is otherwise a junk value.
The Lipschitz constant c is an explicit parameter with c>0, the same for all times, as in
Definição 2.1.1.
Vacuity is ruled out: the hypotheses are satisfiable — for instance by a nonzero constant f —
so the goal is not true by default.
A complete development needs the Bochner and interval integrals, the contraction mapping API, the
mean value inequality for Fréchet derivatives, and the ODE files. Contributions of independent
interest to the series: the Picard iterate factorial estimate, and the conversion between the
library's Picard–Lindelöf hypotheses and the ones above.
Selected references
A. A. de Castro Júnior, Curso de Equações Diferenciais Ordinárias, lecture notes, 6 January
2009. Teorema 0.2.10 (p. 10), Definição 1.1.1 (p. 34), Definição 2.1.1 (p. 43),
Teorema 2.1.2 (p. 44), Corolário 2.1.3 (p. 46), Proposição 2.1.4 (p. 47).
E. Lindelöf, Sur l'application de la méthode des approximations successives aux équations
différentielles ordinaires du premier ordre, C. R. Acad. Sci. Paris 114 (1894), 454–457.