Why a coordinate verification of Kerr
The Kerr metric (Kerr, 1963) is the exact solution of the vacuum Einstein equations that describes the exterior gravitational field of a rotating mass. It is the working model for astrophysical black holes: gravitational-wave templates, black-hole imaging and the classification results of the uniqueness theorems all take it as their starting point. Its form in the coordinates of Boyer and Lindquist (1967) is the one found in every textbook, and the statement that this line element has vanishing Ricci tensor is the single most-cited computation of the subject. That computation is long, it is almost never printed, and in practice it is trusted because computer-algebra systems agree on it. The parent project of this mission builds a certified-discovery pipeline for exact solutions of Einstein's equations in which a symbolic verifier is the oracle; this mission asks for the Kerr instance of that oracle's verdict to be re-established inside a proof assistant, so that the pipeline's benchmark result rests on a kernel-checked proof rather than on a simplification routine.
Timeline: Kerr (1963) found the metric in Kerr-Schild and in his original coordinates; Boyer and Lindquist (1967) introduced the coordinates (t,r,θ,φ) in which the metric below is written and described its maximal analytic extension; Carter (1968) established the separability structure that underlies the closed-form inverse. None of these results has, to the authors' knowledge, a machine-checked proof.
Setting
Fix real parameters M and a. A point of R4 is written x=(x0,x1,x2,x3)=(t,r,θ,φ); in Lean it is a function Pt := Fin 4 → ℝ. Write s=sinθ, c=cosθ and
Σ:=r2+a2cos2θ,Δ:=r2−2Mr+a2.
The Boyer-Lindquist Kerr metric is the symmetric 4×4 matrix of functions
gtt=−(1−Σ2Mr),grr=ΔΣ,gθθ=Σ,gφφ=(r2+a2+Σ2Mra2sin2θ)sin2θ,gtφ=−Σ2Marsin2θ,
with all other entries zero (signature (−,+,+,+), G=c=1). Its closed-form inverse g^ has g^rr=Δ/Σ, g^θθ=1/Σ and a (t,φ) block with denominator ΣΔsin2θ. The regular coordinate domain is
RegM,a(x) :⟺ Σ=0 ∧ Δ=0 ∧ sinθ=0.
For any matrix of functions g with candidate inverse g^, the coordinate partial derivative ∂if(x) is the one-variable derivative at u=xi of the slice u↦f(x[i↦u]), and the coordinate Christoffel symbols and coordinate Ricci tensor are
Γbca=21k∑g^ak(∂cgkb+∂bgkc−∂kgbc),Rbd=i∑(∂iΓbdi−∂dΓbii+j∑(ΓijiΓbdj−ΓdjiΓbij)).
These four definitions (pd, christoffel, ricci, ricciOf) form the definition bundle KerrBL_CoordGeometry; the metric, its inverse and the regular domain form KerrBL_Kerr_Metric.
Formalization targets
Goal: Kerr vacuum theorem in Boyer-Lindquist coordinates (KerrBL.vacuum_Kerr)
For all real M,a and every x with RegM,a(x):
k∑g^ik(x)gkj(x)=δij,u↦gij(x[l↦u]) and u↦Γjki(x[l↦u]) are differentiable at xl,Rbd(x)=0 ∀b,d.
The goal deliberately bundles the inverse identity and the two differentiability clauses with Ricci-flatness. Without the first, ricciOf g ĝ with a wrong g^ could vanish trivially; without the other two, the derivative in the definition of Rbd could be Mathlib's default value 0 at a non-differentiable slice. With them, the last clause is a statement about the genuine coordinate Ricci tensor.
Supporting targets
The milestones follow the three layers of the proof: (I) the inverse identity; (II) the bridge from the generic definitions to explicit closed forms, through derivative certification of the metric, the Christoffel bridge, derivative certification of the generic Christoffel symbols, and the Ricci bridge Rbd(x)=RicciKerrbd(x); (III) the vanishing of the explicit expression for each of the eight components that are not structurally zero, as rational identities in the seven variables (M,a,r,s,c,S,D) under s2+c2=1, S=Σ, D=Δ, and finally the vanishing of all sixteen generic components.
Significance
The result itself is classical: the Boyer-Lindquist Kerr family is a vacuum solution wherever the coordinates are regular. What the mission adds is a proof in which the trusted base is explicit and small: a 45-line generic layer defining ∂i, Γ and R, and the transcription of five metric components from a hash-locked source file, with source-lock lemmas proving that the compact definitions equal the transcriptions. Everything else, including roughly 120 kB of generated closed forms, is bridged by proof; a wrong closed form can make a bridge theorem unprovable but never a false theorem provable. The generic layer and the bridge pattern are reusable for any coordinate metric in four dimensions, and the pattern of certifying a computer-algebra derivation through polynomial witnesses checked by linear_combination is reusable for any rational-function identity.
Status: the theorem is proved in the classical sense since 1963 and verified by every computer-algebra system; the machine-checked coordinate proof is what this mission records. At launch every node of the mission carries an accepted proof.
Difficulty
The obvious argument is to compute. The difficulty is size and control, not ideas. The Ricci components of Kerr are rational functions whose numerators have up to a few hundred monomials in seven variables; a normalisation tactic applied to the raw expression does not terminate in practice, and a naive simp-based unfolding of the double sums over Fin4 produces terms whose elaboration alone exceeds the server budget. The proof therefore has to be organised: opaque atoms for Σ and Δ so that denominators are monomials, per-term clearing lemmas over a common denominator, and a single polynomial identity per component certified by explicit quotient witnesses of the relations s2+c2=1, S=Σ, D=Δ. Mathlib's derivative also needs care: deriv returns 0 where a function is not differentiable, so every derivative used in the Ricci formula must be accompanied by a HasDerivAt witness, and the differentiability of the generic Christoffel symbols has to be transferred from their closed forms by a locality argument on the open regular domain.
Formalization scope
The Lean representation commits to the following. Points are Fin 4 → ℝ with 0=t, 1=r, 2=θ, 3=φ; there is no manifold, no chart, no periodicity of φ and no range restriction on r. Derivatives are Mathlib's deriv of coordinate slices. The candidate inverse is data; its correctness is a theorem. The parameters M,a are arbitrary reals: the mission proves Ricci-flatness of the Boyer-Lindquist Kerr family on the regular coordinate domain used by the formalization, not a global Lorentzian-manifold theorem and not a statement restricted to the black-hole regime M>0, ∣a∣≤M. The axis sinθ=0 is excluded (the inverse carries 1/sin2θ) although the metric is smooth there; the loci Σ=0 and Δ=0 are excluded. Nothing is asserted about signature, uniqueness, symmetry of Rbd (all sixteen components are proved separately) or any coordinate-independent curvature quantity. A trivialising formalization is ruled out by the goal's first clause: the Ricci tensor of the specification layer takes the inverse as an argument, and the goal certifies that argument.
Independent blind read-back of the definitions and main statements, performed by a separate agent that saw only the Lean text, returned the following honest statement, recorded here verbatim: "For every pair of real numbers M, a and every point (t,r,θ,φ)∈R4 at which r2+a2cos2θ=0, r2−2Mr+a2=0 and sinθ=0, all sixteen numbers Rbd obtained by evaluating the explicit coordinate formula [...] vanish, where g is the explicitly transcribed Boyer-Lindquist Kerr component matrix, g^ is an explicitly transcribed matrix that (by ginv_mul_g_Kerr, under the same hypothesis) satisfies g^g=I at that point, and ∂i is Mathlib's one-variable deriv of the coordinate slice." The two should-fix findings of that read-back (inverse coupling; junk derivative values) are addressed by the first three clauses of the goal.
Infrastructure: three definition bundles (KerrBL_CoordGeometry, hand-written; KerrBL_Kerr_Metric, generated from the source file and human-auditable; KerrBL_Kerr_ClosedForms, generated and untrusted). Reusable beyond the mission: the generic layer, the locality lemma, and the bridge pattern. Natural extensions welcome after release: the two-sided inverse, the a=0 reduction to Schwarzschild, and curvature invariants such as the Kretschmann scalar.
Selected references
- R. P. Kerr, Gravitational field of a spinning mass as an example of algebraically special metrics, Phys. Rev. Lett. 11 (1963) 237-238. https://doi.org/10.1103/PhysRevLett.11.237
- R. H. Boyer and R. W. Lindquist, Maximal analytic extension of the Kerr metric, J. Math. Phys. 8 (1967) 265-281. https://doi.org/10.1063/1.1705193
- B. Carter, Global structure of the Kerr family of gravitational fields, Phys. Rev. 174 (1968) 1559-1571. https://doi.org/10.1103/PhysRev.174.1559
- S. Chandrasekhar, The Mathematical Theory of Black Holes, Oxford University Press, 1983, Chapter 6.
- S. M. Carroll, Spacetime and Geometry, Cambridge University Press, 2019, Section 6.6.