Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

Number Theory

170 missions · 89 completed

The study of the integers and the structures built from them — prime numbers, and the rational, algebraic, and ppp-adic numbers that extend them. It reaches from analytic number theory, which uses the tools of analysis to understand the distribution of primes, to algebraic number theory, Diophantine equations, and the arithmetic of elliptic curves, modular forms, and LLL-functions.

Missions

Open81Completed89All170
Captain: Rizwan G Mir

Erdős Problem 68: Irrationality of sum 1/(n! - 1)Open Problem

Erdős Problem 68: Irrationality of sum 1/(n! - 1)

Problem Statement & Context

Erdős Problem 68 asks whether the infinite series 184987\sum_{n=2}^{\infty} rac{1}{n! - 1}184987 is irrational.

Paul Erdős proved in 1948 that \sum_{n=1}^{\infty} rac{1}{2^n - 1} is irrational, but the problem for factorial denominators ! - 1$ remains open.

Main Target Theorem

9 thms3 active usersReviewed
Captain: Lucas

Gilbreath's ConjectureOpen Problem

Motivation

Write the primes in increasing order, take the absolute differences of consecutive entries, take the absolute differences of the resulting row, and repeat. Every row produced this way appears to begin with 111:

2357111317…122424…10222…1200…120…\begin{array}{llllllll} 2 & 3 & 5 & 7 & 11 & 13 & 17 & \dots\\ 1 & 2 & 2 & 4 & 2 & 4 & \dots\\ 1 & 0 & 2 & 2 & 2 & \dots\\ 1 & 2 & 0 & 0 & \dots\\ 1 & 2 & 0 & \dots \end{array}21111​32022​52200​7420…​1122…​134…​17……

Gilbreath's conjecture asserts that this never fails. The observation is due to Norman L. Gilbreath (1958), who rediscovered a statement already published by François Proth in 1878 together with an argument that is not accepted as a proof. It is attractive because it is elementary to state and because it is one of the few statements about the primes whose difficulty is not visibly analytic: it concerns the combinatorics of iterated differences rather than the distribution of primes directly.

Timeline.

  • 1878 — Proth states the property and publishes a proof that is now regarded as erroneous.
  • 1958 — Gilbreath rediscovers the pattern; it circulates as a conjecture.
  • 1959 — Killgrove and Ralston verify the leading entry for the first 63,41863{,}41863,418 rows (MTAC 13 (1959), 121–122).
  • 1993 — Odlyzko reports a verification of the leading entry for all rows of index at most π(1013)≈3.4×1011\pi(10^{13}) \approx 3.4 \times 10^{11}π(1013)≈3.4×1011, using an argument that propagates a long block of entries lying in {0,2}\{0,2\}{0,2} downwards through the triangle (Math. Comp. 61 (1993), 373–380).

No proof is known.

Setting

Let p0=2<p1=3<p2=5<…p_0 = 2 < p_1 = 3 < p_2 = 5 < \dotsp0​=2<p1​=3<p2​=5<… be the increasing enumeration of the prime numbers, indexed from 000. Define the rows of the Gilbreath triangle by

d0(n)=pn,dk+1(n)=∣dk(n+1)−dk(n)∣(k,n≥0).d^0(n) = p_n, \qquad d^{k+1}(n) = \bigl| d^{k}(n+1) - d^{k}(n) \bigr| \quad (k, n \ge 0).d0(n)=pn​,dk+1(n)=​dk(n+1)−dk(n)​(k,n≥0).

Thus dkd^kdk is an infinite sequence of natural numbers for every kkk, row 000 is the sequence of primes, row 111 is the sequence of prime gaps pn+1−pnp_{n+1}-p_npn+1​−pn​, and each later row is the sequence of absolute differences of consecutive entries of the row above it. Only the leading entry dk(0)d^k(0)dk(0) of each row is at issue.

More generally, for an arbitrary sequence a:N→Na : \mathbb{N} \to \mathbb{N}a:N→N write (Δa)(n)=∣a(n+1)−a(n)∣(\Delta a)(n) = |a(n+1) - a(n)|(Δa)(n)=∣a(n+1)−a(n)∣ and Δja\Delta^j aΔja for the jjj-fold iterate, so that dk=Δkpd^k = \Delta^k pdk=Δkp.

Formalization targets

Goal

∀k≥1,dk(0)=1.\forall k \ge 1,\qquad d^{k}(0) = 1 .∀k≥1,dk(0)=1.

This is the conjecture in its standard form: every row after the row of primes begins with 111. It fixes no constants and no ranges, so no computational advance can invalidate it.

Milestones

The milestone list collects the statements that a proof, or a further computational verification, would be built from: the two low-level structural facts about the triangle (row 111 is the gap sequence; from row 111 on, the leading entry is odd and all later entries are even), a finite verification of the first rows, and the two statements underlying Odlyzko's method — the propagation lemma for an arbitrary sequence beginning 111 and continuing in {0,2}\{0,2\}{0,2}, and the reduction of the conjecture to the existence, for each row index, of an earlier row with a long enough block of entries in {0,2}\{0,2\}{0,2}.

Significance

The result itself. The conjecture is not known to imply other open statements about the primes, and its interest lies elsewhere: it is a test case for how much of the fine structure of the prime sequence is forced by coarse information. The propagation mechanism shows that the conjecture for a given row index follows from purely local data about an earlier row, and that mechanism is what every verification to date has relied on. A proof would have to show that such blocks of entries in {0,2}\{0,2\}{0,2} always appear early enough, which is a statement about the density of small prime gaps in disguise.

Formalizing it. Nothing here is currently formalized: Mathlib has the prime enumeration n↦pnn \mapsto p_nn↦pn​ (Nat.nth Nat.Prime) and the basic facts about it, but not the iterated-difference triangle nor any of its properties. This mission contributes the definition of the triangle, the structural facts about its rows, and a machine-checked version of the reduction step that all computational work on the problem uses. The goal theorem itself is open — the milestones are known mathematics, and each is provable with current tools, while the goal is not.

Difficulty

The obvious attack is induction on the row index: to see that dk+1(0)=1d^{k+1}(0) = 1dk+1(0)=1 it suffices to know that dk(0)=1d^{k}(0) = 1dk(0)=1 and dk(1)∈{0,2}d^{k}(1) \in \{0,2\}dk(1)∈{0,2}. But controlling dk(1)d^{k}(1)dk(1) requires controlling dk−1(1)d^{k-1}(1)dk−1(1) and dk−1(2)d^{k-1}(2)dk−1(2), and so on: the invariant that closes is not "the row begins with 111" but "the row begins with 111 and its next mmm entries lie in {0,2}\{0,2\}{0,2}", and each application of the difference operator consumes one entry of that block. So a finite block of good entries only carries the conclusion a finite number of rows further down, and the conjecture needs such blocks to keep reappearing forever, arbitrarily far down the triangle. Nothing is known that produces them.

A second warning, due to Hallard Croft: the property is not specific to the primes. Sequences that start with 222, continue with odd numbers, and have gaps that are not too large empirically exhibit the same behaviour, so any proof that uses only such coarse features would prove a much more general statement — and conversely, an argument exploiting deep properties of primes is likely to be proving the wrong thing.

Formalization scope

Rows are total functions N→N\mathbb{N} \to \mathbb{N}N→N, defined for every index, and the whole triangle is a single family indexed by the row number. Differences are taken as Int.natAbs of a difference computed in Z\mathbb{Z}Z, so truncated natural subtraction never occurs; the one place where N\mathbb{N}N-subtraction does appear is the milestone identifying row 111 with the gap sequence, where the subtraction is justified by monotonicity of n↦pnn \mapsto p_nn↦pn​.

Primes are indexed from 000 via Mathlib's Nat.nth Nat.Prime, so p0=2p_0 = 2p0​=2; rows are indexed with row 000 the primes, and the goal quantifies over all k≥1k \ge 1k≥1 in the form d (k + 1) 0 = 1, with no upper bound and no extra hypothesis, so no vacuous or finitely-truncated reading of the goal is available. The general difference operator is stated for arbitrary sequences N→N\mathbb{N} \to \mathbb{N}N→N, which is what makes the propagation lemma usable as a black box, and reusable beyond this mission.

A complete development needs no analytic input for the milestones: Mathlib's Nat.nth, Nat.prime_nth_prime, Nat.nth_prime_zero_eq_two and the strict monotonicity of the prime enumeration suffice. Contributions that would extend the mission beyond its current list: a formal version of a concrete computational verification (checking that the leading entries of the first NNN rows are 111 for an NNN well beyond the hand-checkable range), and formalizations of the general statement for non-prime sequences of the Croft type.

Selected references

  • N. L. Gilbreath, as reported in R. B. Killgrove and K. E. Ralston, On a conjecture concerning the primes, Mathematical Tables and Other Aids to Computation 13 (1959), 121–122. https://doi.org/10.1090/S0025-5718-1959-0105398-3
  • A. M. Odlyzko, Iterated absolute values of differences of consecutive primes, Mathematics of Computation 61 (1993), 373–380. https://doi.org/10.1090/S0025-5718-1993-1192979-9
  • Gilbreath's conjecture, Wikipedia. https://en.wikipedia.org/wiki/Gilbreath%27s_conjecture
23 thms3 active usersReviewed
AlgebraGroup Theory·Captain: Lucas

The Inverse Galois ProblemOpen Problem

Motivation

Galois theory attaches to every finite Galois extension L/KL/KL/K a finite group Gal(L/K)\mathrm{Gal}(L/K)Gal(L/K), the group of field automorphisms of LLL fixing KKK pointwise, and the fundamental theorem of Galois theory turns the subfield structure of L/KL/KL/K into the subgroup structure of that group. The inverse Galois problem asks whether this correspondence is surjective over the rationals: given an arbitrary finite group GGG, is there a Galois extension L/QL/\mathbb{Q}L/Q with Gal(L/Q)≅G\mathrm{Gal}(L/\mathbb{Q}) \cong GGal(L/Q)≅G? The question was posed in the early nineteenth century and is unsolved.

What makes it a live research question rather than a curiosity is that the known positive results come from genuinely different sources, and none of them covers all finite groups.

  • Cyclic and, more generally, finite abelian groups are realizable over Q\mathbb{Q}Q by an explicit cyclotomic construction resting on Dirichlet's theorem on primes in arithmetic progressions.
  • Symmetric and alternating groups are realizable over Q\mathbb{Q}Q; this is due to Hilbert, who realized them first over the rational function field Q(t)\mathbb{Q}(t)Q(t) and then specialized ttt using his irreducibility theorem.
  • Every finite solvable group is realizable over Q\mathbb{Q}Q; this is Shafarevich's theorem (I. R. Shafarevich, The imbedding problem for splitting extensions, Dokl. Akad. Nauk SSSR 120 (1958), 1217–1219), obtained by solving embedding problems.
  • Over C(t)\mathbb{C}(t)C(t) — and over K(t)K(t)K(t) for any algebraically closed KKK of characteristic zero — every finite group is realizable, by the Riemann existence theorem. The obstruction to the goal is not the group theory; it is descending the field of constants to Q\mathbb{Q}Q.
  • Case-by-case work covers large finite lists: all transitive permutation groups of degree at most 232323, and every sporadic simple group, are known to be realizable over Q\mathbb{Q}Q.

Setting

Fix a field KKK and a group GGG. A Galois realization of GGG over KKK is a field LLL equipped with a KKK-algebra structure such that the extension L/KL/KL/K is Galois — normal and separable — together with a group isomorphism

G  ≅  Gal(L/K),G \;\cong\; \mathrm{Gal}(L/K),G≅Gal(L/K),

where Gal(L/K)\mathrm{Gal}(L/K)Gal(L/K) denotes the group of KKK-algebra automorphisms of LLL under composition. The group GGG is realizable over KKK, written IsRealizable K G, when at least one Galois realization of GGG over KKK exists. No finiteness of L/KL/KL/K is imposed in the definition; it is automatic once GGG is finite, because an infinite Galois extension has infinite automorphism group.

Two base fields beyond Q\mathbb{Q}Q appear throughout. K(t)K(t)K(t) denotes the field of rational functions in one variable over KKK, written RatFunc K; and for the statement that a group is realizable over some number field, the base field ranges over the intermediate fields of C/Q\mathbb{C}/\mathbb{Q}C/Q.

Formalization targets

Goal — the inverse Galois problem

for every finite group G,∃ L/Q Galois with Gal(L/Q)≅G.\text{for every finite group } G, \qquad \exists\, L/\mathbb{Q} \text{ Galois with } \mathrm{Gal}(L/\mathbb{Q}) \cong G.for every finite group G,∃L/Q Galois with Gal(L/Q)≅G.

The goal fixes no degree, no polynomial and no construction: it asserts only the shape of the truth, so no later refinement of the known constructions can invalidate it.

Milestones — the known partial results

G cyclic  ⟹  G realizable over Q,G abelian  ⟹  G realizable over Q,G \text{ cyclic} \;\Longrightarrow\; G \text{ realizable over } \mathbb{Q}, \qquad G \text{ abelian} \;\Longrightarrow\; G \text{ realizable over } \mathbb{Q},G cyclic⟹G realizable over Q,G abelian⟹G realizable over Q, Sym(S),  An realizable over Q,G solvable  ⟹  G realizable over Q,\mathrm{Sym}(S),\; A_n \text{ realizable over } \mathbb{Q}, \qquad G \text{ solvable} \;\Longrightarrow\; G \text{ realizable over } \mathbb{Q},Sym(S),An​ realizable over Q,G solvable⟹G realizable over Q, ∃ K, Q⊆K⊆C, G realizable over K,\exists\, K,\ \mathbb{Q} \subseteq K \subseteq \mathbb{C},\ G \text{ realizable over } K,∃K, Q⊆K⊆C, G realizable over K, G realizable over C(t),G realizable over K(t) (K algebraically closed, char 0),G \text{ realizable over } \mathbb{C}(t), \qquad G \text{ realizable over } K(t) \ (K \text{ algebraically closed, char } 0),G realizable over C(t),G realizable over K(t) (K algebraically closed, char 0), G realizable over Q(t)  ⟹  G realizable over Q.G \text{ realizable over } \mathbb{Q}(t) \;\Longrightarrow\; G \text{ realizable over } \mathbb{Q}.G realizable over Q(t)⟹G realizable over Q.

The last milestone is the Hilbert-irreducibility descent step; together with the geometric milestones it makes precise which half of the classical programme is missing.

Significance

The result itself would settle a two-century-old question and, with it, the surjectivity of the Galois correspondence over Q\mathbb{Q}Q: every abstract finite group would be known to arise from an explicit arithmetic object, a polynomial with rational coefficients. Its absence is felt in practice — constructing a single new Galois group over Q\mathbb{Q}Q is publishable work, as the recent additions of the degree-171717 group 17T717T717T7 (van Bommel–Costa–Elkies–Keller–Schiavone–Voight, 2024) and of the Mathieu group M23M_{23}M23​ show.

Formalizing it produces something available today independently of the goal: a machine-checked library of the known realizability results. Mathlib has the fundamental theorem of Galois theory, cyclotomic extensions, the Kronecker–Weber theorem, solvability of groups and symmetric/alternating group theory, but it does not have a predicate for "GGG is a Galois group over KKK", nor any of the milestones above. Every milestone here is a proved theorem of classical number theory and an unformalized one; the cyclic and abelian cases are within reach of current Mathlib, while the Shafarevich and Riemann-existence milestones are substantial formalization projects in their own right.

Difficulty

The obvious strategy fails at a well-understood point. Over C(t)\mathbb{C}(t)C(t) the problem is solved: by the Riemann existence theorem every finite group occurs as the deck-transformation group of a branched cover of the projective line. Hilbert's irreducibility theorem then descends realizability from Q(t)\mathbb{Q}(t)Q(t) to Q\mathbb{Q}Q. What is missing is the step in between: producing the cover over Q\mathbb{Q}Q rather than over C\mathbb{C}C, i.e. showing that the geometric solution can be chosen with rational field of constants. The rigidity method makes this work for many groups, but there is no known argument covering all of them; an approach that only produces realizability over some number field is not enough, and that weaker statement is included as a milestone precisely to mark the line.

A second, purely formal difficulty: the milestones are classical but their published proofs are long. Shafarevich's theorem rests on a delicate analysis of embedding problems, and the Riemann existence theorem is analytic input that Mathlib does not currently have in the required form.

Formalization scope

The mission fixes one definition file, published first, carrying the structure GaloisRealization and the one-field class IsRealizable. Conventions it commits to:

  • IsGalois K L is Mathlib's Galois condition (normal and separable); finiteness of the extension is not assumed.
  • The isomorphism is with the full automorphism group L≃alg[K]LL \simeq_{\mathrm{alg}[K]} LL≃alg[K]​L, not with a quotient or a subgroup of it.
  • The carrier LLL of a realization is required to live in the same universe as KKK. This costs no generality for the statements of the mission — for finite GGG a realization is a finite extension of KKK — and keeps every statement universe-monomorphic.
  • Sym(S)\mathrm{Sym}(S)Sym(S) is Equiv.Perm S for a finite type SSS, and AnA_nAn​ is alternatingGroup (Fin n); degenerate small cases are included rather than excluded.
  • Solvability is Group.IsSolvable.

The statements cannot be satisfied vacuously: IsRealizable K G asserts the existence of data, so a solver must exhibit an extension; and the hypotheses of the milestones (cyclic, abelian, solvable, or none at all) are all satisfiable, so no milestone is empty. The one conditional milestone, Hilbert descent, is stated with realizability over Q(t)\mathbb{Q}(t)Q(t) as an explicit hypothesis.

Infrastructure a complete development needs, most of it reusable well beyond this mission: transport of a Galois realization along an isomorphism of groups and along an isomorphism of base fields; the fixed-field construction and the fundamental theorem in the form "Gal(L/LH)≅H\mathrm{Gal}(L/L^H) \cong HGal(L/LH)≅H"; Galois groups of cyclotomic fields; Dirichlet's theorem on primes in arithmetic progressions (already in Mathlib); Hilbert's irreducibility theorem (not in Mathlib). Contributions of any of these as reusable platform definitions or lemmas are welcome, as are decompositions of the harder milestones into sketches.

Selected references

  • Inverse Galois problem, Wikipedia. https://en.wikipedia.org/wiki/Inverse_Galois_problem
  • I. R. Shafarevich, The imbedding problem for splitting extensions, Dokl. Akad. Nauk SSSR 120 (1958), 1217–1219.
  • C. U. Jensen, A. Ledet, N. Yui, Generic Polynomials: Constructive Aspects of the Inverse Galois Problem, MSRI Publications 45, Cambridge University Press, 2002. http://library.msri.org/books/Book45/files/book45.pdf
  • G. Malle, B. H. Matzat, Inverse Galois Theory, Springer Monographs in Mathematics, 1999.
  • R. van Bommel, E. Costa, N. D. Elkies, T. Keller, S. Schiavone, J. Voight, 17T7 is a Galois group over the rationals, arXiv:2411.07857, 2024. https://arxiv.org/abs/2411.07857
22 thms3 active usersReviewed
Captain: xuanji

Lagarias criterion is equivalent to RHResearch Paper

Motivation

The Riemann hypothesis concerns the zeros of a complex analytic function, yet it admits an equivalent formulation involving only positive integers, finite sums, the real exponential, and the natural logarithm. Jeffrey C. Lagarias established this formulation in An Elementary Problem Equivalent to the Riemann Hypothesis (Theorem 1.1). It connects the distribution of divisors of an integer with the analytic behavior of the zeta function. For number theorists and formalizers, the interest lies in making that connection precise without confusing an elementary statement with an elementary proof.

The objective is the known equivalence selected by LeanEval v1, not a resolution of RH. Lagarias's paper builds on results of Guy Robin concerning large values of the divisor-sum function; those results remain substantial parts of the formalization workload (Lagarias, §3).

Setting

For a positive integer nnn, its divisor sum is

σ(n)=∑d∣nd,\sigma(n)=\sum_{d\mid n}d,σ(n)=d∣n∑​d,

where the sum runs over positive divisors, including 111 and nnn. Its harmonic number is

Hn=∑j=1n1j.H_n=\sum_{j=1}^{n}\frac1j.Hn​=j=1∑n​j1​.

All inequalities below are inequalities of real numbers. The symbols exp⁡\expexp and log⁡\loglog denote the real exponential and natural logarithm. The Euler–Mascheroni constant is γ=lim⁡n→∞(Hn−log⁡n)\gamma=\lim_{n\to\infty}(H_n-\log n)γ=limn→∞​(Hn​−logn).

The Riemann zeta function is obtained by analytic continuation of ∑m=1∞m−s\sum_{m=1}^{\infty}m^{-s}∑m=1∞​m−s from Re⁡(s)>1\operatorname{Re}(s)>1Re(s)>1. RH asserts that its nontrivial zeros have real part 1/21/21/2. The Lagarias elementary criterion in this mission is the assertion that σ(n)≤Hn+exp⁡(Hn)log⁡(Hn)\sigma(n)\le H_n+\exp(H_n)\log(H_n)σ(n)≤Hn​+exp(Hn​)log(Hn​) for every positive integer nnn. These conventions agree with the arithmetic quantities in Lagarias, Problem E, with the precise equality-clause distinction stated below.

Formalization targets

Main goal: the exact LeanEval equivalence

RH⟺∀n∈N,  n>0⟹σ(n)≤Hn+exp⁡(Hn)log⁡(Hn).\mathrm{RH}\quad\Longleftrightarrow\quad \forall n\in\mathbb N,\;n>0\Longrightarrow \sigma(n)\le H_n+\exp(H_n)\log(H_n).RH⟺∀n∈N,n>0⟹σ(n)≤Hn​+exp(Hn​)log(Hn​).

There are no hypotheses on the goal theorem. The quantifier ranges over all positive integers, not a bounded test set or an unspecified tail. The benchmark uses a non-strict inequality and does not include an equality characterization. Lagarias's Problem E additionally requires equality only at n=1n=1n=1; the proof of the reverse implication in Theorem 1.1, p. 8 uses the non-strict inequality alone. The stronger source formulation is therefore not silently substituted for the benchmark.

Supporting targets from the paper

The milestone list records the following source statements, with their thresholds unchanged:

  • Lemma 3.1: for n≥3n\ge3n≥3,
eγnlog⁡log⁡n≤exp⁡(Hn)log⁡(Hn).e^\gamma n\log\log n\le\exp(H_n)\log(H_n).eγnloglogn≤exp(Hn​)log(Hn​).
  • Lemma 3.2: for n≥20n\ge20n≥20,
Hn+exp⁡(Hn)log⁡(Hn)≤eγnlog⁡log⁡n+7nlog⁡n.H_n+\exp(H_n)\log(H_n)\le e^\gamma n\log\log n+\frac{7n}{\log n}.Hn​+exp(Hn​)log(Hn​)≤eγnloglogn+logn7n​.
  • The finite check in the proof of Theorem 1.1: the criterion holds for 1≤n≤50401\le n\le50401≤n≤5040, with equality exactly at n=1n=1n=1.
  • Proposition 3.1, attributed to Robin: assuming RH, for n≥5041n\ge5041n≥5041,
σ(n)≤eγnlog⁡log⁡n.\sigma(n)\le e^\gamma n\log\log n.σ(n)≤eγnloglogn.
  • Proposition 3.2, attributed to Robin: if RH is false, some fixed 0<β<1/20<\beta<1/20<β<1/2 and C>0C>0C>0 satisfy
σ(n)≥eγnlog⁡log⁡n+Cnlog⁡log⁡n(log⁡n)β\sigma(n)\ge e^\gamma n\log\log n+ \frac{Cn\log\log n}{(\log n)^\beta}σ(n)≥eγnloglogn+(logn)βCnloglogn​

for arbitrarily large integers nnn.

All five are taken from Lagarias, §3, pp. 6–8; the finite check is explicitly an unnumbered step, not a newly attributed lemma.

Significance

The result identifies an exact arithmetic reformulation of RH. It does not make either side unconditional. A proof of the equivalence gives a bridge between statements in different mathematical languages; it does not certify the universal inequality merely because many instances can be checked. This distinction is central to the interpretation of Lagarias's theorem.

The formalization would connect existing Mathlib definitions of the zeta function, divisor sums, harmonic numbers, and Euler's constant through a machine-checked argument. Reusable outputs include explicit harmonic/exponential comparisons, certified finite real inequalities, and formal versions of Robin's conditional and oscillation results. The mathematical results are known; this proposal supplies open formalization targets, not completed proofs. No accepted LeanEval result is claimed by creating or launching the mission.

Difficulty

The elementary appearance of the criterion hides its main analytic requirements. Bounding the divisor sum crudely, or checking any finite number of integers, cannot establish the universal equivalence. The conditional upper bound and especially the quantitative oscillation theorem connect zeta zeros with unusually large divisor sums. They must be proved, not packaged as definitions or presumed available because the paper cites them (Lagarias, Propositions 3.1–3.2).

The oscillation statement requires uniform positive constants and arbitrarily large indices. Replacing it with one counterexample loses essential information. The bounded computation also requires rigorous control of exponential and logarithmic values: an ordinary floating-point loop is not a Lean proof. Beyond the listed milestones, completion still requires standard growth comparisons, threshold bookkeeping, and assembly of the two implications. The short length of the source's final argument should not be read as an estimate of total formalization effort.

Formalization scope

The goal is LeanEval.NumberTheory.riemann_hypothesis_iff_lagarias_elementary_criterion, with type RiemannHypothesis ↔ LagariasElementaryCriterion. The criterion definition is copied from the benchmark. σ 1 n is natural-valued and cast to the reals; harmonic n is rational-valued and cast to the reals. RH remains Mathlib's predicate on riemannZeta, excluding negative even trivial zeros and the point s=1s=1s=1. No replacement axiom, hidden RH assumption, altered zeta function, or circular child restatement is permitted.

The goal excludes n=0n=0n=0 and includes n=1n=1n=1. Thresholds ensure positive logarithm arguments in the analytic milestones. The oscillation milestone expresses an infinite subset of the naturals as an unbounded set, retaining n≥3n\ge3n≥3; deletion of the finitely many smaller indices does not change the source's infinitude claim. Its real exponent is represented by Real.rpow, not natural exponentiation. Constants are chosen before the arbitrary cutoff.

The benchmark pins Lean 4.33.0 and Mathlib 6f1ef4e5dd604a435bddba4747b13970cd65d2a1. The proposal targets Prove2me's supported Lean 4.33.1 environment, Mathlib 0df444a360eaa60ab8c11dca51a86af692955474. These environments are distinct; eventual benchmark credit requires the benchmark's own validation. Contributions to analytic infrastructure, source-faithful supporting results, and certified finite inequalities are welcome. The five milestones are an initial source-backed structure, not a claim that all required infrastructure is already present.

Selected references

  • Jeffrey C. Lagarias, An Elementary Problem Equivalent to the Riemann Hypothesis, American Mathematical Monthly 109 (2002), 534–543. arXiv:math/0008177v2, posted 6 May 2001. The theorem, proposition, equation, and page numbers in this proposal refer to this nine-page arXiv version.
  • Guy Robin, Grandes valeurs de la fonction somme des diviseurs et hypothèse de Riemann, Journal de Mathématiques Pures et Appliquées 63 (1984), 187–213. Bibliography entry [18] in Lagarias. The milestone formulations are those explicitly reproduced and attributed in Lagarias's Propositions 3.1 and 3.2.
7 thms3 active usersReviewed
Differential GeometryGeometry & Topology·Captain: t4v1

Thurston's Question 23: rational relations among hyperbolic volumesOpen Problem

Motivation

In the last of the twenty-four questions that closed his 1982 survey Three-dimensional manifolds, Kleinian groups and hyperbolic geometry (Bull. Amer. Math. Soc. 6 (1982), 357–381), Thurston asked to "show that volumes of hyperbolic 333-manifolds are not all rationally related" (p. 380). Twenty-two of the twenty-four have since been answered — geometrization by Perelman, tameness by Agol and by Calegari–Gabai, the ending lamination conjecture by Brock–Canary–Minsky, virtual fibering by Agol — and this one is among the two that remain open.

Some rational relations are forced, and for a trivial reason: a degree nnn cover of a hyperbolic 333-manifold has nnn times its volume, so any two commensurable manifolds have rationally related volumes. The question, which remains open, is whether every rational relation arises that way — equivalently, whether some two hyperbolic 333-manifolds have irrational volume ratio. Remarkably, not a single such pair is known.

Setting

The bundle fixes the meaning of every term. Hyperbolic 333-space is the upper half-space {(x,y,z):z>0}\{(x,y,z) : z > 0\}{(x,y,z):z>0}. Its volume is Lebesgue measure with density z−3z^{-3}z−3 — the Riemannian volume of the metric (dx2+dy2+dz2)/z2(dx^2+dy^2+dz^2)/z^2(dx2+dy2+dz2)/z2 written out, so that no Riemannian machinery is required. The hyperbolic distance is given by its closed formula

cosh⁡d(p,q)  =  1+∣p−q∣22 p3 q3.\cosh d(p,q) \;=\; 1 + \frac{|p-q|^2}{2\,p_3\,q_3}.coshd(p,q)=1+2p3​q3​∣p−q∣2​.

A Kleinian action is a free, properly discontinuous action by hyperbolic isometries; the quotient is a complete hyperbolic 333-manifold, discreteness and torsion freeness being consequences rather than hypotheses. The volume of the quotient is the measure of a fundamental domain, in the sense of Mathlib's MeasureTheory.IsFundamentalDomain, and the set of volumes collects those that are finite and positive.

Two conventions are stated rather than derived, and are worth flagging. Isometries are not required to preserve orientation, so the set of volumes also contains those of non-orientable quotients; this enlarges the set but not its Q\mathbb{Q}Q-span, so neither goal is affected. And preservation of the hyperbolic volume is a field of the structure rather than a consequence of preserving the distance: it holds for every hyperbolic isometry, but deriving it amounts to classifying Isom(H3)\mathrm{Isom}(\mathbb{H}^3)Isom(H3), which is not the subject of this mission.

Formalization targets

The goal is that the volumes are not all rationally related: there are two of them, vvv and www, with v≠qwv \neq q wv=qw for every rational qqq.

Two milestones support it. The first is that passing to a subgroup of index nnn multiplies the volume by nnn, a fundamental domain for the subgroup being the union of nnn translates of one for the whole group; this is the source of every known rational relation, and it is why the question is phrased as it is. The second is that the set of volumes is nonempty — that some finite-volume hyperbolic 333-manifold exists at all — without which the goal would be vacuously false rather than open.

A stronger form of the question, that the Q\mathbb{Q}Q-span of the set of volumes is infinite dimensional, is also stated.

Significance

The question is a geometric statement whose difficulty is arithmetic. For the Bianchi groups of an imaginary quadratic field FFF, Humbert's formula gives the covolume as ∣δF∣3/2ζF(2)/4π2|\delta_F|^{3/2}\zeta_F(2)/4\pi^2∣δF​∣3/2ζF​(2)/4π2, so the ratio of two such volumes is, up to explicit algebraic factors, a ratio of Dedekind zeta values at 222; and Neumann and Yang showed that the Bloch invariant of a hyperbolic 333-manifold lies in a subgroup of finite Q\mathbb{Q}Q-rank determined by its invariant trace field, so that manifolds sharing an invariant trace field with a single complex place, such as an imaginary quadratic one, have rationally related volumes. Producing one irrational ratio therefore means separating two such transcendentals — a statement of the same order of difficulty as the irrationality of ζ(5)\zeta(5)ζ(5). The value of formalizing the question is not that it will be closed, but that its statement, and the elementary relations that make its naive form false, are pinned down exactly.

20 thms3 active usersReviewed
Operations ResearchOptimization·Captain: mikedeng1

Integer Factorization: Why Two-Item Joint Replenishment Is Hard 1: For Odd Composite M, Every Optimal Plan of an Explicit Two-Item Aperiodic JRP Instance Has q₂ = M and 1 < gcd(q₁, M) < MResearch Paper

Motivation

The joint replenishment problem (JRP) is one of the basic models of multi-item inventory control. Each item follows the economic order quantity (EOQ) model of Harris (1913): ordering costs a fixed amount, holding stock costs a rate proportional to the stock, and the classical trade-off between the two determines how often to reorder. In a JRP, items replenished together share part of the fixed cost, so the reorder cycles of the items should be coordinated. The problem has been studied for decades, with a large literature of heuristics and approximation algorithms (see the survey of Khouja and Goyal 2008; Porras and Dekker 2008 compare the two ways of charging joint costs), yet its exact complexity remained unclear even for very few items.

Schulz and Telha (arXiv:2007.09045, 2020; Operations Research, 2024) give a striking answer for the smallest non-trivial case, two items. They show that solving the two-item problem exactly is at least as hard as integer factorization (their Theorem 1), and, assuming the Riemann hypothesis, that the two-item periodic JRP is NP-hard under randomized reductions (Theorem 2). This mission formalizes the mathematical core of Theorem 1(a), for the aperiodic JRP: the paper's Lemma 1.

Timeline. The complexity of both JRP variants was open for a long time. Schulz and Telha announced the reduction from integer factorization to the two-item aperiodic JRP (Theorem 1(a)) in 2011. Cohen-Hillel and Yedidsion (2018) then proved that the aperiodic JRP with an arbitrary number of items is strongly NP-hard (they call it the periodic JRP). The 2020 preprint adds the reduction for the two-item periodic JRP (Theorem 1(b)) and, under the Riemann hypothesis, a randomized reduction from Partition to it (Theorem 2).

Setting

For an item with fixed ordering cost KKK and holding cost rate HHH, replenished every qqq time units, the long-run cost per unit time is

EOQK,H(q)=Kq+Hq.\mathrm{EOQ}_{K,H}(q) = \frac{K}{q} + Hq .EOQK,H​(q)=qK​+Hq.

Reorder cycles are positive integers q∈Z+q \in \mathbb Z^+q∈Z+. In the aperiodic two-item JRP (objective (1) of the paper) items 1 and 2 have data (K1,H1)(K_1,H_1)(K1​,H1​) and (K2,H2)(K_2,H_2)(K2​,H2​), and every joint replenishment earns a discount K0≤K1,K2K_0 \le K_1, K_2K0​≤K1​,K2​. With cycles q1,q2q_1, q_2q1​,q2​, joint replenishments happen every lcm(q1,q2)\mathrm{lcm}(q_1,q_2)lcm(q1​,q2​) time units, so the discount per unit time is DC(q1,q2;K0)=K0/lcm(q1,q2)\mathrm{DC}(q_1,q_2;K_0) = K_0/\mathrm{lcm}(q_1,q_2)DC(q1​,q2​;K0​)=K0​/lcm(q1​,q2​) and the problem is

min⁡{JRP(q1,q2)=EOQK1,H1(q1)+EOQK2,H2(q2)−K0lcm(q1,q2) : q1,q2∈Z+}.\min\left\{\mathrm{JRP}(q_1,q_2) = \mathrm{EOQ}_{K_1,H_1}(q_1) + \mathrm{EOQ}_{K_2,H_2}(q_2) - \frac{K_0}{\mathrm{lcm}(q_1,q_2)} \ :\ q_1,q_2 \in \mathbb Z^+\right\}.min{JRP(q1​,q2​)=EOQK1​,H1​​(q1​)+EOQK2​,H2​​(q2​)−lcm(q1​,q2​)K0​​ : q1​,q2​∈Z+}.

For an integer MMM, the instance of Lemma 1 has

K1=K0=M(M−1),H1=4,K2=M3(M2−1),H2=M(M2−1).K_1 = K_0 = M(M-1),\qquad H_1 = 4,\qquad K_2 = M^3(M^2-1),\qquad H_2 = M(M^2-1).K1​=K0​=M(M−1),H1​=4,K2​=M3(M2−1),H2​=M(M2−1).

Item 2's own EOQ optimum is q2=Mq_2 = Mq2​=M. Fixing q2=Mq_2 = Mq2​=M leaves the one-variable problem (2) with objective

JRPred(q1)=M(M−1)(1q1−1lcm(q1,M))+4q1.\mathrm{JRP}^{\mathrm{red}}(q_1) = M(M-1)\left(\frac{1}{q_1} - \frac{1}{\mathrm{lcm}(q_1,M)}\right) + 4q_1 .JRPred(q1​)=M(M−1)(q1​1​−lcm(q1​,M)1​)+4q1​.

In Lean these are eoq, aperiodicCost, lemma1Cost, eoq2 (item 2's cost) and jrpRed, and an optimal solution (IsOptimal) is a pair of positive integers whose value is no larger than that of any other pair of positive integers.

Formalization targets

Goal: Lemma 1

For every odd composite number MMM, the instance above satisfies K0≤K1K_0 \le K_1K0​≤K1​, K0≤K2K_0 \le K_2K0​≤K2​, has all coefficients at most M5M^5M5, has an optimal solution, and

every optimal (q1,q2) satisfies q2=Mand1<gcd⁡(q1,M)<M.\text{every optimal } (q_1,q_2) \text{ satisfies } \quad q_2 = M \quad\text{and}\quad 1 < \gcd(q_1,M) < M .every optimal (q1​,q2​) satisfies q2​=Mand1<gcd(q1​,M)<M.

So gcd⁡(q1,M)\gcd(q_1, M)gcd(q1​,M) is a non-trivial divisor of MMM.

Milestones (the steps of the paper's proof, pp. 9–10)

  1. EOQK2,H2(M±1)=EOQK2,H2(M)+H2/(M±1)≥EOQK2,H2(M)+K0\mathrm{EOQ}_{K_2,H_2}(M\pm1) = \mathrm{EOQ}_{K_2,H_2}(M) + H_2/(M\pm1) \ge \mathrm{EOQ}_{K_2,H_2}(M) + K_0EOQK2​,H2​​(M±1)=EOQK2​,H2​​(M)+H2​/(M±1)≥EOQK2​,H2​​(M)+K0​.
  2. For q2≠Mq_2 \ne Mq2​=M: JRP(q1,q2)≥EOQK2,H2(M)+K0+4>JRP(1,M)\mathrm{JRP}(q_1,q_2) \ge \mathrm{EOQ}_{K_2,H_2}(M) + K_0 + 4 > \mathrm{JRP}(1,M)JRP(q1​,q2​)≥EOQK2​,H2​​(M)+K0​+4>JRP(1,M).
  3. JRP(q1,M)=EOQK2,H2(M)+JRPred(q1)\mathrm{JRP}(q_1, M) = \mathrm{EOQ}_{K_2,H_2}(M) + \mathrm{JRP}^{\mathrm{red}}(q_1)JRP(q1​,M)=EOQK2​,H2​​(M)+JRPred(q1​).
  4. For q1q_1q1​ coprime with MMM: JRPred(q1)≥4(M−1)\mathrm{JRP}^{\mathrm{red}}(q_1) \ge 4(M-1)JRPred(q1​)≥4(M−1).
  5. For a divisor ppp of MMM with 3≤p<M3 \le p < M3≤p<M and a multiple qqq of ppp: JRPred(q)≤(M−1)(M−p)/q+4q\mathrm{JRP}^{\mathrm{red}}(q) \le (M-1)(M-p)/q + 4qJRPred(q)≤(M−1)(M−p)/q+4q.
  6. Some multiple qqq of ppp in [M−12−p−12,M−12+p−12]\left[\frac{M-1}{2} - \frac{p-1}{2}, \frac{M-1}{2} + \frac{p-1}{2}\right][2M−1​−2p−1​,2M−1​+2p−1​] has JRPred(q)<4(M−1)\mathrm{JRP}^{\mathrm{red}}(q) < 4(M-1)JRPred(q)<4(M−1).
  7. Multiples q1q_1q1​ of MMM have JRPred(q1)=4q1≥4M\mathrm{JRP}^{\mathrm{red}}(q_1) = 4q_1 \ge 4MJRPred(q1​)=4q1​≥4M, while JRPred((M−1)/2)≤4(M−1)\mathrm{JRP}^{\mathrm{red}}((M-1)/2) \le 4(M-1)JRPred((M−1)/2)≤4(M−1).

Significance

The result. Lemma 1 turns any exact algorithm for the two-item aperiodic JRP into a factoring algorithm: solve the instance, read off gcd⁡(q1,M)\gcd(q_1, M)gcd(q1​,M), and recurse on the two factors. Since the instance's coefficients have size O(log⁡M)O(\log M)O(logM), a polynomial-time JRP algorithm would factor integers in polynomial time (Theorem 1(a)). This explains, in a precise sense, why the many exact and approximation methods for the JRP never produced a provably polynomial exact algorithm even for two items, and why the problem's difficulty is number-theoretic rather than combinatorial.

Formalizing it. The lemma has a complete, elementary proof in the paper; it has not been machine-checked. The formalization pins down every quantifier the prose leaves loose: that optimal solutions exist, that the claim is about every optimum, which coefficients are used, and that periods range over positive integers only. The proof steps (the item-2 pin, the coprime bound, the interval argument) are stated as separate milestones so they can be checked individually.

Difficulty

Each step is elementary, but the argument mixes discrete and continuous reasoning. The objective is not convex in q1q_1q1​: the term −K0/lcm(q1,M)-K_0/\mathrm{lcm}(q_1,M)−K0​/lcm(q1​,M) jumps down at every period sharing a factor with MMM. The obvious approach, comparing against the continuous EOQ minimizer, gives the right threshold 4(M−1)4(M-1)4(M−1) for coprime periods but says nothing about where a cheaper non-coprime period sits. The interval step needs the exact size of a window of integers around (M−1)/2(M-1)/2(M−1)/2, that ppp consecutive integers contain a multiple of ppp, and a strict inequality between a quadratic's roots and that window. The existence of an optimum is not stated in the paper and needs a coercivity argument over Z+×Z+\mathbb Z^+ \times \mathbb Z^+Z+×Z+.

Formalization scope

This mission formalizes the correctness of the reduction behind Theorem 1(a); polynomial running time is not formalized, and neither are Theorem 1 as a statement about algorithms, the recursion to a full factorization, nor primality testing.

Conventions: periods are natural numbers, and every quantification over a period requires it to be positive, because Lean evaluates K/0=0K/0 = 0K/0=0, lcm(0,M)=0\mathrm{lcm}(0,M) = 0lcm(0,M)=0 and gcd⁡(0,M)=M\gcd(0,M) = Mgcd(0,M)=M. Costs are real numbers. Coefficients are natural numbers cast to R\mathbb RR. "Odd composite" is Odd M ∧ 1 < M ∧ ¬ M.Prime. "Size at most 5log⁡M5\log M5logM" is stated as "every coefficient is at most M5M^5M5", equivalent in any logarithm base.

Two additions relative to the printed statement are disclosed in the goal's Formalization Note. The goal states the explicit instance of the proof (p. 9) rather than "there is an instance", since an existential instance could be chosen to make the claim easy and loses the polynomial-size construction the reduction needs. The goal also asserts that an optimal solution exists, so that "every optimal solution satisfies …" is not vacuously true. Neither periods equal to zero nor junk values of division can satisfy the optimality predicate.

All objects are defined in one file, JRPHard.Aperiodic.Setting; nothing beyond Mathlib's Nat.gcd, Nat.lcm, Nat.Prime and real arithmetic is needed. Proofs of any milestone, or alternative proofs of the goal, are welcome.

Selected references

  • A. S. Schulz and C. Telha, Integer factorization and Riemann's hypothesis: Why two-item joint replenishment is hard, arXiv:2007.09045v1, 2020; published as Integer Factorization: Why Two-Item Joint Replenishment Is Hard, Operations Research, 2024. https://arxiv.org/abs/2007.09045
  • F. W. Harris, How many parts to make at once, Factory, The Magazine of Management 10(2), 1913; reprinted in Operations Research 38(6), 1990. https://doi.org/10.1287/opre.38.6.947
  • E. Porras and R. Dekker, A solution method for the joint replenishment problem with correction factor, International Journal of Production Economics 113(2), 834–851, 2008. https://doi.org/10.1016/j.ijpe.2007.11.008
  • M. Khouja and S. Goyal, A review of the joint replenishment problem literature: 1989–2005, European Journal of Operational Research 186(1), 2008. https://doi.org/10.1016/j.ejor.2007.03.007
  • M. Cohen-Hillel and L. Yedidsion, The periodic joint replenishment problem is strongly NP-hard, Mathematics of Operations Research 43(4), 2018. https://doi.org/10.1287/moor.2017.0904
9 thms2 active usersReviewed
Algebraic Geometry·Captain: Lucas

Weil Conjectures (Wikipedia): Rationality, Functional Equation and Riemann Hypothesis over Finite FieldsTextbook

Motivation

Counting solutions of polynomial equations over finite fields is one of the oldest themes of number theory, going back to Gauss's count of points on x3+1=y3x^3 + 1 = y^3x3+1=y3 modulo a prime. In 1949 André Weil proposed a precise description of how these counts behave when the field is enlarged: for a smooth projective variety over Fq\mathbb F_qFq​, the generating function of its point counts — the zeta function — should be a rational function with integer polynomial factors, satisfy a functional equation, and have its zeros on prescribed "critical lines", in exact analogy with the Riemann hypothesis. These Weil conjectures organized several decades of work in algebraic geometry and directly motivated the construction of étale cohomology.

Timeline (as recorded in the source article, Wikipedia: Weil conjectures):

  • 1924 — Artin conjectures the statements for curves.
  • 1930s — Hasse proves the case of elliptic curves: #E(Fqm)=1−αm−βm+qm\#E(\mathbb F_{q^m}) = 1 - \alpha^m - \beta^m + q^m#E(Fqm​)=1−αm−βm+qm with ∣α∣=∣β∣=q|\alpha| = |\beta| = \sqrt q∣α∣=∣β∣=q​.
  • 1948–49 — Weil proves the conjectures for curves and formulates them in all dimensions (Weil 1949).
  • 1960 — Dwork proves rationality by ppp-adic methods (Dwork 1960).
  • 1965 — Grothendieck, with M. Artin and Verdier, proves rationality, the functional equation and the Betti-number statement via the Lefschetz trace formula in ℓ\ellℓ-adic cohomology.
  • 1974 — Deligne proves the Riemann hypothesis part (Deligne 1974); in 1980 he proves a generalization for pushforwards of sheaves (Deligne 1980).

Setting

Let k=Fqk = \mathbb F_qk=Fq​ be a finite field with qqq elements and characteristic ppp. Let XXX be a smooth projective variety of dimension nnn over kkk: a scheme XXX with a structure morphism f:X→Spec⁡kf : X \to \operatorname{Spec} kf:X→Speck that is smooth of relative dimension nnn, geometrically irreducible, and admits a closed immersion into some projective space PkN\mathbb P^N_kPkN​ over kkk.

For m≥1m \ge 1m≥1 let Fqm\mathbb F_{q^m}Fqm​ be the extension of kkk of degree mmm, and let

Nm=#X(Fqm)N_m = \#X(\mathbb F_{q^m})Nm​=#X(Fqm​)

be the number of kkk-morphisms Spec⁡Fqm→X\operatorname{Spec}\mathbb F_{q^m} \to XSpecFqm​→X. The zeta function of XXX is the formal power series

Z(X,T)=exp⁡(∑m≥1NmmTm)∈Q[[T]],Z(X,T) = \exp\Big(\sum_{m\ge1} \frac{N_m}{m} T^m\Big) \in \mathbb Q[[T]],Z(X,T)=exp(m≥1∑​mNm​​Tm)∈Q[[T]],

so that ζ(X,s)=Z(X,q−s)\zeta(X,s) = Z(X, q^{-s})ζ(X,s)=Z(X,q−s).

Formalization targets

Goal: the Weil conjectures (parts 1–3)

There exist integer polynomials P0,…,P2nP_0, \dots, P_{2n}P0​,…,P2n​ and multisets of nonzero complex numbers {αij}j\{\alpha_{ij}\}_j{αij​}j​ such that

  1. Rationality.
Z(X,T)=P1(T) P3(T)⋯P2n−1(T)P0(T) P2(T)⋯P2n(T),Z(X,T) = \frac{P_1(T)\,P_3(T)\cdots P_{2n-1}(T)}{P_0(T)\,P_2(T)\cdots P_{2n}(T)},Z(X,T)=P0​(T)P2​(T)⋯P2n​(T)P1​(T)P3​(T)⋯P2n−1​(T)​,

with P0(T)=1−TP_0(T) = 1-TP0​(T)=1−T, P2n(T)=1−qnTP_{2n}(T) = 1 - q^nTP2n​(T)=1−qnT, and Pi(T)=∏j(1−αijT)P_i(T) = \prod_j (1-\alpha_{ij}T)Pi​(T)=∏j​(1−αij​T) over C\mathbb CC for 1≤i≤2n−11 \le i \le 2n-11≤i≤2n−1. 2. Functional equation.

Z(X,q−nT−1)=± qnE/2 TE Z(X,T),Z\big(X, q^{-n}T^{-1}\big) = \pm\, q^{nE/2}\, T^{E}\, Z(X,T),Z(X,q−nT−1)=±qnE/2TEZ(X,T),

where E=∑i(−1)ideg⁡PiE = \sum_i (-1)^i \deg P_iE=∑i​(−1)idegPi​ is the Euler characteristic; moreover {α2n−i,j}j={qn/αi,j}j\{\alpha_{2n-i,j}\}_j = \{q^n/\alpha_{i,j}\}_j{α2n−i,j​}j​={qn/αi,j​}j​ as multisets. 3. Riemann hypothesis. ∣αij∣=qi/2|\alpha_{ij}| = q^{i/2}∣αij​∣=qi/2 for all 1≤i≤2n−11 \le i \le 2n-11≤i≤2n−1 and all jjj.

Milestones

The historical partial results (Weil's theorem for curves; Dwork's rationality; Grothendieck's rationality and functional equation; Deligne's Riemann hypothesis) and the worked examples of the source (projective line, projective space, elliptic curves, the genus-2 curve y2+y=x5y^2 + y = x^5y2+y=x5 over F41\mathbb F_{41}F41​ and the Weil polynomials of its Jacobian).

Significance

The Weil conjectures give sharp estimates ∣Nm−qnm−⋯∣=O(qm(2n−1)/2)|N_m - q^{nm} - \cdots| = O(q^{m(2n-1)/2})∣Nm​−qnm−⋯∣=O(qm(2n−1)/2) for point counts, and through them bounds on exponential sums (Kloosterman sums, character sums), the Ramanujan–Petersson conjecture for holomorphic modular forms (Deligne 1971), and the hard Lefschetz theorem over finite fields. They are a standard input in analytic number theory, coding theory and cryptography.

All four statements have been proved since 1974. None of them has a machine-checked proof in Lean/Mathlib at present; Mathlib does not yet contain étale cohomology, Jacobians of curves, or the Hasse bound for elliptic curves over finite fields. This mission records faithful, compiling statements so that partial formalizations — the elementary examples, Hasse's theorem, Weil's theorem for curves via Riemann–Roch or Stepanov–Bombieri, Dwork's ppp-adic rationality proof, and eventually the cohomological proofs — can be attached to a common target.

Difficulty

The examples with a cell decomposition (projective spaces, Grassmannians) reduce to counting points in affine spaces. Beyond them, even rationality is a theorem of substance: there is no elementary formula for NmN_mNm​, and the counts must be shown to satisfy a linear recurrence. The functional equation and the precise shape of the PiP_iPi​ require a cohomology theory with Poincaré duality and a Lefschetz trace formula; the Riemann hypothesis requires, in addition, control of the absolute values of Frobenius eigenvalues, which in Deligne's proof uses Lefschetz pencils, monodromy and the "tensor power trick". For curves, Riemann–Roch and the Hasse–Weil bound (or Stepanov–Bombieri) suffice, but these too are absent from Mathlib.

Formalization scope

  • The finite field is any k : Type with [Field k] [Finite k] [CharP k p], p prime; q = Nat.card k. Schemes live in Scheme.{0}.
  • PkN\mathbb P^N_kPkN​ is Proj of k[x0,…,xN]k[x_0,\dots,x_N]k[x0​,…,xN​] graded by total degree; "projective" means a closed immersion into some PkN\mathbb P^N_kPkN​ commuting with the structure maps. "Non-singular of dimension nnn" is SmoothOfRelativeDimension n f; "variety" is GeometricallyIrreducible f.
  • NmN_mNm​ counts kkk-morphisms Spec⁡Fqm→X\operatorname{Spec} \mathbb F_{q^m} \to XSpecFqm​→X with Fqm\mathbb F_{q^m}Fqm​ = FiniteField.Extension k p m; Z(X,T)Z(X,T)Z(X,T) is PowerSeries.subst of ∑m≥1NmTm/m\sum_{m\ge1} N_m T^m/m∑m≥1​Nm​Tm/m into PowerSeries.exp ℚ.
  • Rationality is stated as an identity of power series after clearing denominators; the functional equation is stated pointwise for complex t≠0t \neq 0t=0 away from the poles of both sides; qnE/2q^{nE/2}qnE/2 is a real power.
  • The Euler characteristic EEE is encoded as ∑i(−1)ideg⁡Pi\sum_i (-1)^i \deg P_i∑i​(−1)idegPi​ (the alternating sum of the Betti numbers), since Mathlib has no étale cohomology from which to define it independently.
  • Part 4 (Betti numbers of a lift to characteristic zero) is not formalized: stating it requires the complex-analytic space of a variety over a number field and its singular cohomology, which Mathlib does not provide.
  • The αij\alpha_{ij}αij​ are required to be nonzero, which excludes junk factors 1−0⋅T1 - 0\cdot T1−0⋅T and junk values of qn/0q^n/0qn/0.

Contributions welcome: the zeta function of projective space, Hasse's theorem, point counts and Weil polynomials for the F41\mathbb F_{41}F41​ examples, rationality for curves, and general infrastructure (Riemann–Roch for curves, Jacobians, étale cohomology).

Selected references

  • Wikipedia, Weil conjectures. https://en.wikipedia.org/wiki/Weil_conjectures
  • A. Weil, Numbers of solutions of equations in finite fields, Bull. Amer. Math. Soc. 55 (1949), 497–508. https://doi.org/10.1090/S0002-9904-1949-09219-4
  • B. Dwork, On the rationality of the zeta function of an algebraic variety, Amer. J. Math. 82 (1960), 631–648. https://doi.org/10.2307/2372974
  • P. Deligne, La conjecture de Weil. I, Publ. Math. IHÉS 43 (1974), 273–307. https://doi.org/10.1007/BF02684373
  • P. Deligne, La conjecture de Weil. II, Publ. Math. IHÉS 52 (1980), 137–252. https://doi.org/10.1007/BF02684780
14 thms2 active usersReviewed
Captain: Lucas

Ramanujan–Petersson Conjecture (Wikipedia): Coefficient Bounds for Holomorphic Cusp FormsTextbook

Motivation

The Fourier coefficients of modular forms are among the most studied arithmetic functions in number theory. In 1916 Srinivasa Ramanujan studied the coefficients τ(n)\tau(n)τ(n) of the discriminant modular form Δ\DeltaΔ and conjectured three properties: multiplicativity, a three-term recursion on prime powers, and the bound ∣τ(p)∣≤2p11/2|\tau(p)|\le 2p^{11/2}∣τ(p)∣≤2p11/2 for primes ppp (Ramanujan 1916). Hans Petersson extended the size bound to the coefficients of holomorphic cusp forms for congruence subgroups (Petersson 1930). The resulting Ramanujan–Petersson conjecture for holomorphic cusp forms is now a theorem of Deligne (weight k≥2k\ge 2k≥2) and Deligne–Serre (weight k=1k=1k=1). Its analogues for Maass forms and for general automorphic representations remain open.

Timeline (as recorded in the source article, Wikipedia: Ramanujan–Petersson conjecture):

  • 1916: Ramanujan conjectures that τ\tauτ is multiplicative, that it satisfies the prime-power recursion, and that ∣τ(p)∣≤2p11/2|\tau(p)|\le 2p^{11/2}∣τ(p)∣≤2p11/2.
  • 1917: Mordell proves the first two statements, using what are now called Hecke operators.
  • 1930: Petersson formulates the coefficient bound for holomorphic cusp forms for congruence subgroups.
  • 1937: Hecke extends Mordell's method to holomorphic cusp forms in general.
  • 1971: Deligne, building on Kuga, Sato, Shimura and Ihara, reduces the conjecture for weight k≥2k\ge 2k≥2 to the Weil conjectures via the Eichler–Shimura isomorphism (Deligne 1971).
  • 1974: Deligne proves the Riemann hypothesis part of the Weil conjectures, which settles the case k≥2k\ge 2k≥2 and in particular ∣τ(p)∣≤2p11/2|\tau(p)|\le 2p^{11/2}∣τ(p)∣≤2p11/2 (Deligne 1974). Deligne and Serre treat weight k=1k=1k=1 (Deligne–Serre 1974).

Setting

Let H={z∈C:Im⁡z>0}\mathbb H=\{z\in\mathbb C:\operatorname{Im}z>0\}H={z∈C:Imz>0} and q=e2πizq=e^{2\pi i z}q=e2πiz. The Dedekind eta function is η(z)=q1/24∏n≥1(1−qn)\eta(z)=q^{1/24}\prod_{n\ge1}(1-q^n)η(z)=q1/24∏n≥1​(1−qn). The discriminant modular form is

Δ(z)=q∏n>0(1−qn)24=η(z)24.\Delta(z)=q\prod_{n>0}(1-q^n)^{24}=\eta(z)^{24}.Δ(z)=qn>0∏​(1−qn)24=η(z)24.

It is a holomorphic cusp form of weight 121212 and level 111. Ramanujan's tau function τ:N→C\tau:\mathbb N\to\mathbb Cτ:N→C is defined by the Fourier expansion

Δ(z)=∑n≥1τ(n)qn=q−24q2+252q3−1472q4+4830q5−⋯ .\Delta(z)=\sum_{n\ge1}\tau(n)q^n=q-24q^2+252q^3-1472q^4+4830q^5-\cdots.Δ(z)=n≥1∑​τ(n)qn=q−24q2+252q3−1472q4+4830q5−⋯.

Its Ramanujan LLL-function is the Dirichlet series L(s,τ)=∑n≥1τ(n)n−sL(s,\tau)=\sum_{n\ge1}\tau(n)n^{-s}L(s,τ)=∑n≥1​τ(n)n−s.

More generally, let Γ⊆SL(2,Z)\Gamma\subseteq SL(2,\mathbb Z)Γ⊆SL(2,Z) be a congruence subgroup, meaning that Γ\GammaΓ contains the principal congruence subgroup Γ(N)\Gamma(N)Γ(N) for some N≥1N\ge1N≥1. A holomorphic cusp form of weight kkk for Γ\GammaΓ is a holomorphic function f:H→Cf:\mathbb H\to\mathbb Cf:H→C with f(γz)=(cz+d)kf(z)f(\gamma z)=(cz+d)^k f(z)f(γz)=(cz+d)kf(z) for every γ=(abcd)∈Γ\gamma=\begin{pmatrix}a&b\\c&d\end{pmatrix}\in\Gammaγ=(ac​bd​)∈Γ, which vanishes at every cusp. Such an fff is periodic with some least period h>0h>0h>0, and it has a Fourier expansion f(z)=∑n≥1anqhnf(z)=\sum_{n\ge1}a_n q_h^nf(z)=∑n≥1​an​qhn​ with qh=e2πiz/hq_h=e^{2\pi i z/h}qh​=e2πiz/h. When Γ\GammaΓ contains z↦z+1z\mapsto z+1z↦z+1 (for example Γ0(N)\Gamma_0(N)Γ0​(N), Γ1(N)\Gamma_1(N)Γ1​(N), or SL(2,Z)SL(2,\mathbb Z)SL(2,Z) itself), h=1h=1h=1 and qh=qq_h=qqh​=q.

Formalization targets

Goal: the Ramanujan–Petersson conjecture for holomorphic cusp forms

For every congruence subgroup Γ\GammaΓ, every weight k≥1k\ge1k≥1, every cusp form fff of weight kkk for Γ\GammaΓ with coefficients ana_nan​, and every ε>0\varepsilon>0ε>0,

an=Oε ⁣(n(k−1)/2+ε).a_n=O_\varepsilon\!\left(n^{(k-1)/2+\varepsilon}\right).an​=Oε​(n(k−1)/2+ε).

The goal splits by weight into Deligne's theorem (k≥2k\ge2k≥2) and the Deligne–Serre theorem (k=1k=1k=1), both listed as milestones.

The tau function

  1. Values: τ(1)=1\tau(1)=1τ(1)=1, τ(2)=−24\tau(2)=-24τ(2)=−24, τ(3)=252\tau(3)=252τ(3)=252, τ(4)=−1472\tau(4)=-1472τ(4)=−1472, τ(5)=4830\tau(5)=4830τ(5)=4830.
  2. Multiplicativity (Mordell): τ(mn)=τ(m)τ(n)\tau(mn)=\tau(m)\tau(n)τ(mn)=τ(m)τ(n) whenever gcd⁡(m,n)=1\gcd(m,n)=1gcd(m,n)=1.
  3. Recursion (Mordell): τ\tauτ is not completely multiplicative, and τ(pj+1)=τ(p)τ(pj)−p11τ(pj−1)\tau(p^{j+1})=\tau(p)\tau(p^j)-p^{11}\tau(p^{j-1})τ(pj+1)=τ(p)τ(pj)−p11τ(pj−1) for primes ppp and j≥2j\ge2j≥2.
  4. Ramanujan's bound (Deligne): ∣τ(p)∣≤2p11/2|\tau(p)|\le 2p^{11/2}∣τ(p)∣≤2p11/2 for all primes ppp.
  5. Consequences: ∣τ(n)∣≤d(n)n11/2|\tau(n)|\le d(n)n^{11/2}∣τ(n)∣≤d(n)n11/2 for all n≥1n\ge1n≥1, where d(n)d(n)d(n) is the number of divisors, and hence τ(n)=O(n11/2+ε)\tau(n)=O(n^{11/2+\varepsilon})τ(n)=O(n11/2+ε).

The Ramanujan LLL-function

  1. ∑k≤nτ(k)=O(n13/2+ε)\sum_{k\le n}\tau(k)=O(n^{13/2+\varepsilon})∑k≤n​τ(k)=O(n13/2+ε), and L(s,τ)L(s,\tau)L(s,τ) converges absolutely for Re⁡s>13/2\operatorname{Re}s>13/2Res>13/2.
  2. L(s,τ)L(s,\tau)L(s,τ) continues to an entire function satisfying Γ(s)L(s,τ)(2π)s=Γ(12−s)L(12−s,τ)(2π)12−s\dfrac{\Gamma(s)L(s,\tau)}{(2\pi)^s}=\dfrac{\Gamma(12-s)L(12-s,\tau)}{(2\pi)^{12-s}}(2π)sΓ(s)L(s,τ)​=(2π)12−sΓ(12−s)L(12−s,τ)​.
  3. Euler product: L(s,τ)=∏p∑n≥0τ(pn)p−ns=∏p(1−τ(p)p−s+p11−2s)−1L(s,\tau)=\prod_p\sum_{n\ge0}\tau(p^n)p^{-ns}=\prod_p\big(1-\tau(p)p^{-s}+p^{11-2s}\big)^{-1}L(s,τ)=∏p​∑n≥0​τ(pn)p−ns=∏p​(1−τ(p)p−s+p11−2s)−1 for Re⁡s>13/2\operatorname{Re}s>13/2Res>13/2.

Significance

The bound ∣τ(p)∣≤2p11/2|\tau(p)|\le 2p^{11/2}∣τ(p)∣≤2p11/2 says that the roots of 1−τ(p)u+p11u21-\tau(p)u+p^{11}u^21−τ(p)u+p11u2 have equal absolute value p−11/2p^{-11/2}p−11/2, an analogue of the Riemann hypothesis for the local factors of L(s,τ)L(s,\tau)L(s,τ). The bounds for general cusp forms are used throughout analytic number theory to control sums of Fourier coefficients. They are also used in the explicit construction of Ramanujan graphs by Lubotzky, Phillips and Sarnak, which are optimal expander graphs. The generalized conjecture for GL(n)GL(n)GL(n) implies Selberg's 1/41/41/4 conjecture on Laplace eigenvalues.

All targets in this mission are proved theorems in the literature. At the pinned Mathlib revision, none of them is formalized except the identity τ(1)=1\tau(1)=1τ(1)=1. Mathlib does contain the definitions they need: η\etaη, Δ\DeltaΔ as a cusp form of weight 12 and level 1, qqq-expansions, congruence subgroups, and the LLL-function of a cusp form. Mathlib also proves the analytic continuation of that LLL-function. The remaining work is to formalize Hecke theory for Δ\DeltaΔ, the elementary consequences of Deligne's bound, the LLL-function statements, and ultimately Deligne's and Deligne–Serre's theorems.

Difficulty

The algebraic statements about τ\tauτ (multiplicativity, the recursion, the Euler product) and the functional equation are classical, but formalizing them needs infrastructure that Mathlib does not yet have, such as Hecke operators on cusp forms. The size bounds are of a different kind. Estimates from the Petersson inner product or from Hecke's method give only the exponent k/2k/2k/2 (Hecke's bound). That exponent is attainable by complex analysis alone, but the improvement to (k−1)/2(k-1)/2(k−1)/2 is not. In the literature it depends on arithmetic geometry: Deligne's proof of the Weil conjectures for k≥2k\ge2k≥2, and Galois representations for k=1k=1k=1. The analytically similar statement for Maass forms is still open.

Formalization scope

  • τ(n)\tau(n)τ(n) is defined as the nnn-th coefficient of Mathlib's qqq-expansion of ModularForm.discriminant with period 111, as a complex number. The source's description of τ\tauτ is taken as the definition, and integrality is not assumed.
  • Absolute values are complex norms. n11/2n^{11/2}n11/2 and similar powers are real powers of nonnegative reals.
  • O(⋅)O(\cdot)O(⋅) is Mathlib's big-O along atTop on N\mathbb NN, with the constant allowed to depend on ε\varepsilonε.
  • In the general goal, the coefficients are taken with respect to qh=e2πiz/hq_h=e^{2\pi i z/h}qh​=e2πiz/h, where hhh is the strict width of the cusp ∞\infty∞ for Γ\GammaΓ (Subgroup.strictWidthInfty). This equals 111 whenever z↦z+1z\mapsto z+1z↦z+1 lies in Γ\GammaΓ. A congruence subgroup is CongruenceSubgroup.IsCongruenceSubgroup.
  • The functional equation is stated only at points sss where neither sss nor 12−s12-s12−s is a pole of Γ\GammaΓ. This avoids Mathlib's convention that Γ\GammaΓ is 000 at its poles.
  • The recursion is stated for j≥2j\ge2j≥2, exactly as in the source.
  • The Maass-form and automorphic-representation versions, the function-field results and the bounds towards Ramanujan over number fields are outside this mission's scope. Mathlib lacks the definitions they need.

Selected references

  • S. Ramanujan, On certain arithmetical functions, Trans. Cambridge Philos. Soc. 22 (1916), 159–184. http://ramanujan.sirinudi.org/Volumes/published/ram18.pdf
  • H. Petersson, Theorie der automorphen Formen beliebiger reeller Dimension …, Math. Ann. 103 (1930), 369–436. https://doi.org/10.1007/BF01455702
  • P. Deligne, Formes modulaires et représentations l-adiques, Sém. Bourbaki 1968/69, LNM 179 (1971). https://doi.org/10.1007/BFb0058801
  • P. Deligne, La conjecture de Weil. I, Publ. Math. IHÉS 43 (1974), 273–307. https://doi.org/10.1007/BF02684373
  • P. Deligne, J.-P. Serre, Formes modulaires de poids 1, Ann. Sci. ÉNS 7 (1974), 507–530. https://doi.org/10.24033/asens.1277
  • P. Sarnak, Notes on the generalized Ramanujan conjectures, Clay Math. Proc. 4 (2005). http://www.claymath.org/publications/Harmonic_Analysis/chapter9.pdf
14 thms2 active usersReviewed
CombinatoricsGroup Theory·Captain: Lucas

Landau's Function: Growth of the Maximal Order of a PermutationResearch Paper

Motivation

How large can the order of a single permutation of nnn objects be? The answer, Landau's function g(n)g(n)g(n), is a basic invariant of the symmetric group SnS_nSn​: it is the maximum number of times a permutation can be iterated before it returns to the identity. Because the order of a permutation is the least common multiple of its cycle lengths, g(n)g(n)g(n) is also the largest least common multiple of the parts of a partition of nnn, which ties the question to the distribution of prime numbers.

Timeline.

  • 1902–1903. E. Landau proved that ln⁡g(n)∼nln⁡n\ln g(n)\sim\sqrt{n\ln n}lng(n)∼nlnn​.
  • 1968. J.-L. Nicolas showed that ggg is constant on arbitrarily long runs of consecutive integers.
  • 1984. J.-P. Massias proved the explicit bound ln⁡g(n)≤1.05313836nln⁡n\ln g(n)\le 1.05313836\sqrt{n\ln n}lng(n)≤1.05313836nlnn​ for all n≥1n\ge 1n≥1.
  • 1988. Massias, Nicolas and Robin obtained a three-term asymptotic expansion of ln⁡g(n)\ln g(n)lng(n), its expression through the inverse logarithmic integral, and the equivalence of a one-sided inequality with the Riemann hypothesis.
  • 2002. K. Ford's bounds for the Riemann zeta function give the error term xexp⁡(−c(ln⁡x)3/5(ln⁡ln⁡x)−1/5)x\exp(-c(\ln x)^{3/5}(\ln\ln x)^{-1/5})xexp(−c(lnx)3/5(lnlnx)−1/5) in the prime number theorem, which can be fed into the 1988 result.

Setting

For a natural number nnn, let SnS_nSn​ be the group of all permutations of an nnn-element set. The order of σ∈Sn\sigma\in S_nσ∈Sn​ is the least k≥1k\ge 1k≥1 with σk=id\sigma^k=\mathrm{id}σk=id. Landau's function is

g(n)=max⁡σ∈Snord⁡(σ).g(n)=\max_{\sigma\in S_n}\operatorname{ord}(\sigma).g(n)=σ∈Sn​max​ord(σ).

A partition of nnn is a multiset of positive integers summing to nnn. The prime counting function π(x)\pi(x)π(x) is the number of primes p≤xp\le xp≤x, the (offset) logarithmic integral is Li(x)=∫2xdtln⁡t\mathrm{Li}(x)=\int_2^x\frac{dt}{\ln t}Li(x)=∫2x​lntdt​, and Li−1\mathrm{Li}^{-1}Li−1 is its inverse on [2,∞)[2,\infty)[2,∞). Throughout, ln⁡\lnln is the natural logarithm.

Formalization targets

Goal: Landau's theorem (1902)

lim⁡n→∞ln⁡g(n)nln⁡n=1.\lim_{n\to\infty}\frac{\ln g(n)}{\sqrt{n\ln n}}=1.n→∞lim​nlnn​lng(n)​=1.

Supporting milestones

  1. Partition characterization: g(n)=max⁡{lcm⁡(λ):λ⊢n}g(n)=\max\{\operatorname{lcm}(\lambda):\lambda\vdash n\}g(n)=max{lcm(λ):λ⊢n}.
  2. Initial values g(0),…,g(8)=1,1,2,3,4,6,6,12,15g(0),\dots,g(8)=1,1,2,3,4,6,6,12,15g(0),…,g(8)=1,1,2,3,4,6,6,12,15.
  3. Nicolas (1968): for every mmm there is nnn with g(n)=g(n+1)=⋯=g(n+m)g(n)=g(n+1)=\dots=g(n+m)g(n)=g(n+1)=⋯=g(n+m).
  4. Massias–Nicolas–Robin (1988): ln⁡g(n)=nln⁡n(1+ln⁡ln⁡n−12ln⁡n−(ln⁡ln⁡n)2−6ln⁡ln⁡n+98(ln⁡n)2+O((ln⁡ln⁡nln⁡n)3))\ln g(n)=\sqrt{n\ln n}\Bigl(1+\frac{\ln\ln n-1}{2\ln n}-\frac{(\ln\ln n)^2-6\ln\ln n+9}{8(\ln n)^2}+O\bigl((\tfrac{\ln\ln n}{\ln n})^3\bigr)\Bigr)lng(n)=nlnn​(1+2lnnlnlnn−1​−8(lnn)2(lnlnn)2−6lnlnn+9​+O((lnnlnlnn​)3)).
  5. Ford (2002): π(x)−Li(x)=O(xexp⁡(−c(ln⁡x)3/5(ln⁡ln⁡x)−1/5))\pi(x)-\mathrm{Li}(x)=O\bigl(x\exp(-c(\ln x)^{3/5}(\ln\ln x)^{-1/5})\bigr)π(x)−Li(x)=O(xexp(−c(lnx)3/5(lnlnx)−1/5)) for some c>0c>0c>0.
  6. Massias–Nicolas–Robin (1988): if π(x)−Li(x)=O(R(x))\pi(x)-\mathrm{Li}(x)=O(R(x))π(x)−Li(x)=O(R(x)) with R(x)=xexp⁡(−c(ln⁡x)3/5(ln⁡ln⁡x)−1/5)R(x)=x\exp(-c(\ln x)^{3/5}(\ln\ln x)^{-1/5})R(x)=xexp(−c(lnx)3/5(lnlnx)−1/5), then ln⁡g(n)=Li−1(n)+O(R(nln⁡n)ln⁡n)\ln g(n)=\sqrt{\mathrm{Li}^{-1}(n)}+O\bigl(R(\sqrt{n\ln n})\ln n\bigr)lng(n)=Li−1(n)​+O(R(nlnn​)lnn).
  7. Riemann hypothesis criterion: ln⁡g(n)<Li−1(n)\ln g(n)<\sqrt{\mathrm{Li}^{-1}(n)}lng(n)<Li−1(n)​ for all large nnn   ⟺  \iff⟺ RH.
  8. g(n)≤en/eg(n)\le e^{n/e}g(n)≤en/e for all nnn, with equality only at n=0n=0n=0.
  9. Massias (1984): g(n)≤exp⁡(1.05314nln⁡n)g(n)\le\exp(1.05314\sqrt{n\ln n})g(n)≤exp(1.05314nlnn​).

Significance

Landau's theorem pins down the growth rate of the largest element order in SnS_nSn​, which bounds, for example, how long any fixed shuffle of nnn cards can be repeated before the deck returns to its starting order. The refined statements quantify the second-order behaviour and connect it to the error term in the prime number theorem; the criterion in milestone 7 is one of the known elementary reformulations of the Riemann hypothesis, and is included as a faithful statement of the source, not as an expected deliverable. The other results are proved in the literature; formalizing them requires building the partition/lcm description of element orders in SnS_nSn​ and quantitative prime-counting estimates on top of Mathlib.

Difficulty

The order of a permutation is easy to compute from its cycle type, but maximizing an lcm over all partitions is a non-linear optimization: the optimum uses prime powers whose sizes are dictated by the distribution of primes, so even the leading-order asymptotics need Chebyshev-type or prime number theorem estimates, and the refined milestones need the prime number theorem with an explicit error term.

Formalization scope

  • SnS_nSn​ is Equiv.Perm (Fin n); g(n)g(n)g(n) is the supremum of orderOf σ over the finite group (a natural number; g(0)=1g(0)=1g(0)=1).
  • Partitions are Mathlib's Nat.Partition n; the lcm of a partition is the Multiset.lcm of its parts.
  • Real logarithms use Real.log (which returns 000 at 000 and is defined for negative input); all asymptotic statements are about n→∞n\to\inftyn→∞, so the values at small nnn are irrelevant there. The bounds in milestones 8–9 are stated for every nnn and are true at n=0,1n=0,1n=0,1.
  • π(x)\pi(x)π(x) for real xxx is Nat.primeCounting ⌊x⌋₊; Li\mathrm{Li}Li is the offset logarithmic integral ∫2xdt/ln⁡t\int_2^x dt/\ln t∫2x​dt/lnt; Li−1(y)\mathrm{Li}^{-1}(y)Li−1(y) is the least x≥2x\ge2x≥2 with Li(x)≥y\mathrm{Li}(x)\ge yLi(x)≥y, which for y≥0y\ge0y≥0 is the inverse function value. Replacing Li\mathrm{Li}Li by the full integral li\mathrm{li}li changes the inverse by O(ln⁡n)O(\ln n)O(lnn) and does not affect any of the asymptotic statements.
  • The Riemann hypothesis is Mathlib's RiemannHypothesis.

Contributions of reusable infrastructure (cycle-type lcm, prime-counting error terms, the logarithmic integral) are welcome.

Selected references

  • E. Landau, Über die Maximalordnung der Permutationen gegebenen Grades, Arch. Math. Phys. Ser. 3, vol. 5, 1903.
  • J.-L. Nicolas, Sur l'ordre maximum d'un élément dans le groupe SnS_nSn​ des permutations, Acta Arithmetica 14 (1968), 315–332.
  • J.-P. Massias, Majoration explicite de l'ordre maximum d'un élément du groupe symétrique, Ann. Fac. Sci. Toulouse Math. (5) 6 (1984), 269–281.
  • J.-P. Massias, J.-L. Nicolas, G. Robin, Évaluation asymptotique de l'ordre maximum d'un élément du groupe symétrique, Acta Arithmetica 50 (1988), 221–242.
  • K. Ford, Vinogradov's integral and bounds for the Riemann zeta function, Proc. London Math. Soc. 85 (2002), 565–633. https://doi.org/10.1112/S0024611502013655
  • W. Miller, The maximum order of an element of a finite symmetric group, Amer. Math. Monthly 94 (1987), 497–506.
  • OEIS A000793. https://oeis.org/A000793
12 thms2 active usersReviewed
Functional Analysis·Captain: waitingintime

Connes–Weil arithmetic lower bound: cofinal actual-quartet certificatesOpen Problem

Why an arithmetic lower bound is needed

The Riemann hypothesis asks whether every nontrivial zero of the actual Riemann zeta function has real part one half. The Connes formalization has a certified implication from positivity of the Weil distribution to RH. That implication supplies a criterion; its positivity hypothesis still needs a proof. The Green realization formalization supplies an independently certified physical carrier, actual-zero columns and bounded synthesis operators. Their construction does not establish the arithmetic inequality.

This open problem isolates a finite-certificate formulation of that inequality. The goal is new research within the existing formal development, not a theorem asserted by the cited papers. It is an RH-equivalent target. A proof of the reductions below is already available; a proof of the target itself is not.

The relevant historical distinction is explicit: Riemann stated the zero-location hypothesis in 1859; Connes' 1999 paper relates trace-formula and positivity questions to the zeros; the present Lean development certifies the conditional positivity criterion and the Green realization. None of these citations is offered as an unconditional proof of the new arithmetic certificate bound.

Actual zeros and the fixed physical carrier

Let ZZZ be the subtype of complex numbers ρ\rhoρ satisfying ζ(ρ)=0\zeta(\rho)=0ζ(ρ)=0 and 0<Re⁡ρ<10<\operatorname{Re}\rho<10<Reρ<1. Multiplicities are the existing natural analytic multiplicities. Reflection is ρ↦1−ρ‾\rho\mapsto1-\overline\rhoρ↦1−ρ​, and conjugation is ρ↦ρ‾\rho\mapsto\overline\rhoρ↦ρ​. For each actual zero, let SρS_\rhoSρ​ be its finite reflection/conjugation orbit, called its quartet. Repeated orbit elements are removed by the finite-set construction, so the term does not assert four distinct zeros.

At a positive support radius TTT, the physical carrier HTH_THT​ is the existing closed Dirichlet energy-image completion on [−T,T][-T,T][−T,T]. Its energy convention is the integral of ∣u′∣2+∣u∣2/4|u'|^2+|u|^2/4∣u′∣2+∣u∣2/4. Source lifts, Green columns and their pair normalization retain their published definitions. The original admissible tests are smooth compactly supported functions; the carrier is not defined from an arbitrary replacement zero family.

Write pT,τp_{T,\tau}pT,τ​ for the original positive column of an actual zero τ\tauτ, with the original reflected-pair and multiplicity normalization. Their complete squared-norm sum is certified summable at each positive radius. For a finite set F⊂ZF\subset ZF⊂Z, PFP_FPF​ is the published synthesis of exactly these positive columns into HTH_THT​. Let NSN_SNS​ be the original selected negative synthesis on the coefficient space for the unchanged quartet S=SρS=S_\rhoS=Sρ​.

Formalization target

For a positive accuracy δ\deltaδ, define the already-published operators

BF=PF∗PF+δIF,CF,S=PF∗NS,B_F=P_F^*P_F+\delta I_F,\qquad C_{F,S}=P_F^*N_S,BF​=PF∗​PF​+δIF​,CF,S​=PF∗​NS​,

and the selected coefficient correction

DS(T,F,δ)=δIS−NS∗NS+CF,S∗BF−1CF,S.D_S(T,F,\delta)=\delta I_S-N_S^*N_S+C_{F,S}^*B_F^{-1}C_{F,S}.DS​(T,F,δ)=δIS​−NS∗​NS​+CF,S∗​BF−1​CF,S​.

The positive regularization makes BFB_FBF​ strictly positive, including dependent or repeated columns. Its ring inverse is certified to be a genuine inverse for positive δ\deltaδ.

The goal is

∀ρ∈Z  ∀b∈R  ∃T>max⁡(b,0)  ∀δ>0  ∃F⊂Z finite:\forall\rho\in Z\;\forall b\in\mathbb R\;\exists T>\max(b,0)\;\forall\delta>0\;\exists F\subset Z\text{ finite}:∀ρ∈Z∀b∈R∃T>max(b,0)∀δ>0∃F⊂Z finite: Sρ⊆F,F is reflection-closed,∑τ∉F∥pT,τ∥2<δ,DSρ(T,F,δ)⪰0.S_\rho\subseteq F,\quad F\text{ is reflection-closed},\quad \sum_{\tau\notin F}\|p_{T,\tau}\|^2<\delta,\quad D_{S_\rho}(T,F,\delta)\succeq0.Sρ​⊆F,F is reflection-closed,τ∈/F∑​∥pT,τ​∥2<δ,DSρ​​(T,F,δ)⪰0.

Here T>max⁡(b,0)T>\max(b,0)T>max(b,0) abbreviates the two strict inequalities in the Lean statement. The window is chosen before accuracy. The finite cutoff can depend on accuracy, but the selected negative quartet remains unchanged. The same accuracy occurs in the complete omitted tail and the correction operator.

What this target would establish

The certified fixed-window theorem identifies all-accuracy finite certificates with the original Picard marker being at least half the identity. The certified cofinal quartet criterion identifies arbitrarily large such quartet windows with Mathlib's Riemann hypothesis. Their composition has also been checked independently in the native Lean environment against the exact goal statement.

These two reductions are the principal milestones, alongside the existing literature-form positivity implication. Shared definitions and supporting theorems remain reusable library nodes. Certification of a reduction is distinct from establishing the nonnegative correction demanded by the goal. The goal is currently unproved and carries no RH or desired-positivity hypothesis.

The remaining difficulty

Finite tail cutoffs exist by summability, and regularized coefficient inverses exist by strict positivity. Those facts leave the sign of DSD_SDS​ undetermined. An arithmetic representation of the full Weil operator alone also leaves that sign undetermined. The selected negative packet and the unselected negative background are different parts of the original signed operator; replacing one by the other changes the obligation.

The arithmetic transfer audit ZP-WEIL-MARKER-TRANSFER / RH-ZERO-PROV-2 records this distinction. Endpoint estimates or neutral-shell arguments contribute only when they supply the original lower bound with the required window and accuracy quantifiers. A bound at one boundary, an accuracy-dependent choice of window, or an estimate with a positive residual error floor does not supply the displayed target. No easier status is implied by its finite coefficient representation.

Formalization scope

The proposal uses Lean 4.33.1 and Mathlib revision 0df444a360eaa60ab8c11dca51a86af692955474, with the published original quartet and selected-correction definitions. A separate native audit uses the existing Lean 4.34.0 repository environment. Complex Hilbert inner products are conjugate-linear in the first argument. Operator nonnegativity uses the existing continuous-linear-map order. Infinite tails are unordered sums on the actual-zero complement.

No simple-zero assumption, independence of columns, unregularized Gram inverse, replacement carrier, changed coefficient metric or silently restricted zero family is permitted. Quartets include zeros on the critical line; an empty actual-zero subtype would make the universal target vacuous, exactly as specified by the existing actual-zero indexing. New auxiliary definitions belong in shared definition bundles, and reusable algebraic lemmas belong in the library. The existing Green milestone history and dependency graph are retained.

Selected references

  • B. Riemann, Ueber die Anzahl der Primzahlen unter einer gegebenen Grösse, Monatsberichte der Berliner Akademie, 1859. Original paper and translations.
  • A. Connes, Trace formula in noncommutative Geometry and the zeros of the Riemann zeta function, Selecta Mathematica 5, 1999. arXiv:math/9811068. Source of the conditional positivity/RH context, not the new certificate inequality.
  • H. Brezis, Functional Analysis, Sobolev Spaces and Partial Differential Equations, Springer, 2011. DOI. Functional-analytic background for the certified carrier.
  • Published Lean results: cofinal quartet criterion, fixed-window selected certificates, and selected-correction definitions.
  • monocap-tech/provenance, RH-ZERO-PROV-2 arithmetic-transfer checkpoint, 2026. Its stated status is representation complete, lower-bound theorem open, RH not proved.

Literature and source audit

The exact cofinal-quartet finite-certificate goal remains open. An independent Lean audit verifies its equivalence to Mathlib RiemannHypothesis by composing the two certified milestone reductions. The window is chosen before every positive regularization parameter; the selected actual-zero quartet is fixed, and the same parameter controls the full positive tail and selected correction. Tail summability and existence of inverses alone do not establish the required sign.

The foreign graph export ConnesRZ.weil_positivity_implies_RH matches the native ConnesRZClosed.weil_positivity_implies_RH: the older native ConnesRZ theorem takes explicitFormula as an input, discharged in Closed. The foreign record has a staged source qualification; it has not been edited.

Arithmetic transfer checkpoint: monocap-tech/provenance 178c83225b2300506ff622899d08ec3c987137d5, rh/checkpoints/RH_ZERO_PROV_2_EULER_WEIL_MARKER_TRANSFER_20260920.md, SHA256 0bb48b950f09220f7b2f193c16b45b15add0333906f919f8b50ca915f77a1a0d. Retained local Git bytes were verified; public availability is unverified. Critical-window location, the prescribed ordered-limit interface, and arithmetic endpoint/neutral-shell control remain open. RH is not established.

7 thms2 active usersReviewed
AnalysisCombinatorics·Captain: Xiang Huang

Ramanujan's Notebooks (Berndt)Textbook

Motivation

The notebooks Ramanujan kept in India record identities, evaluations, transformations and general principles, usually presented without proofs. They preserve a working mathematician's collection rather than a textbook arranged around a sequence of prerequisite theorems. The Tata Institute of Fundamental Research published an unedited facsimile edition in 1957, making the manuscripts available for systematic study.

Bruce C. Berndt's Ramanujan's Notebooks, published by Springer in five parts in 1985, 1989, 1991, 1994 and 1998, supplies that study. The volumes examine the entries individually, proving them, correcting them where necessary, or explaining why they are false or lack a rigorous interpretation. Their subject matter ranges from magic squares and combinatorial identities to hypergeometric series, continued fractions, elliptic functions, modular equations, class invariants and asymptotic expansions.

This mission takes the results established in Berndt's treatment as formalization targets. The published arguments provide mathematical reference proofs. The remaining task is to express the results precisely and construct proofs checked by Lean.

Setting

An entry is a source claim identified by its chapter and local entry label in Berndt's series. The collection is organized around one Lean statement per entry that Berndt establishes. Where an entry contains separately identified parts, corollaries or examples, suffixes distinguish the corresponding statements while preserving their common source location. Intermediate steps of a printed proof do not automatically become additional targets.

The mission covers Chapters 1–39. Part I contains Chapters 1–9; Part II, Chapters 10–15; Part III, Chapters 16–21; Part IV, Chapters 22–31; and Part V, Chapters 32–39. The Part IV appendix on the first notebook and the Quarterly Reports treated in Part I also belong to the mission's scope, with their statements incorporated as they are added.

Declarations use the namespace RamanujanNotebooks and names of the form entry_<chapter>_<entry>, such as RamanujanNotebooks.entry_16_19. Shared definitions fix the meaning of recurring objects: q-shifted factorials, theta functions, hypergeometric series, continued-fraction convergents and the special functions used across chapters. Their domains, normalizations and indexing conventions are documented so that different entries refer to the same mathematical objects.

Formalization targets

The series has no single capstone theorem. Its goal item is therefore a representative entry: Chapter 16, Entry 19, Jacobi's triple product identity in Ramanujan's notation. This is in Part III, whose chapter develops q-series and theta functions.

For complex parameters a,ba,ba,b, Ramanujan's general theta function is

f(a,b)=∑n∈Zan(n+1)/2bn(n−1)/2.f(a,b)=\sum_{n\in\mathbb Z} a^{n(n+1)/2}b^{n(n-1)/2}.f(a,b)=n∈Z∑​an(n+1)/2bn(n−1)/2.

Both exponents are nonnegative integers. Under ∣ab∣<1|ab|<1∣ab∣<1, the series converges absolutely, and Entry 19 identifies it with an infinite product. Writing q=abq=abq=ab, the target is

f(a,b)=∏m=0∞(1+aqm)(1+bqm)(1−qm+1),∣ab∣<1.f(a,b)=\prod_{m=0}^{\infty} (1+a q^m)(1+b q^m)(1-q^{m+1}), \qquad |ab|<1.f(a,b)=m=0∏∞​(1+aqm)(1+bqm)(1−qm+1),∣ab∣<1.

Equivalently, with the infinite q-Pochhammer symbol

(z;q)∞=∏m=0∞(1−zqm),(z;q)_\infty=\prod_{m=0}^{\infty}(1-zq^m),(z;q)∞​=m=0∏∞​(1−zqm),

the identity reads

f(a,b)=(−a;ab)∞(−b;ab)∞(ab;ab)∞.f(a,b)=(-a;ab)_\infty(-b;ab)_\infty(ab;ab)_\infty.f(a,b)=(−a;ab)∞​(−b;ab)∞​(ab;ab)∞​.

The Lean statement uses ramanujanTheta and qPochInf, with the hypothesis ‖a * b‖ < 1. Proving this goal establishes the representative identity; completion of the collection is tracked through its member statements, one per entry.

Every entry is a separate statement of this mission, named RamanujanNotebooks.entry_<chapter>_<entry> (with suffixes for parts, corollaries and examples): 3,863 statements for Parts I–V, the Part IV appendix on the first notebook and the Quarterly Reports; the AMS Memoir 477 statements are being added. A chapter's statements are found by searching for its name prefix. The milestone list has one milestone per chapter, in source order, titled like “Part III · Ch. 16 — q-series and theta-functions”; each links one representative result and its description names the chapter's main results.

Statement conventions and source differences

The mathematical reference is what Berndt proves, with the hypotheses his argument requires. A notebook display alone is insufficient when its domain, convergence conditions or branch choices are unstated. Each target identifies its source and records the conditions under which the asserted equality, limit, transformation or asymptotic relation is established.

Corrected statements carry the explicit phrase “Differs from the printed source”. The accompanying note explains the difference and its origin: a correction supplied by Berndt, a restriction required by the proof, or a reading that resolves an ambiguity. A proposed repair supported only by numerical experiments requires further mathematical review before inclusion as a result established by the reference.

Entries that Berndt shows to be false are not stated as theorem targets. Neither are identities treated only formally, without a rigorous version. For example, Chapter 37's Entry 34 manipulates divergent series, while Entries 35–37 are shown false. Chapter 39 also contains formal claims and entries for which the book supplies no definite interpretation. Such omissions preserve the boundary between a proved result and a suggestive manuscript formula.

Numerical checks are recorded in theorem docstrings, including the tested parameters and the kind of comparison performed. They help detect indexing errors, sign errors and unsuitable domains. Agreement at sampled points is evidence about the transcription; it is not a proof of the universally quantified Lean statement.

Significance and status

The mission brings together source-linked statements of known results whose proofs otherwise remain dispersed across Berndt's commentary. Formal proofs can expose exactly which analytic hypotheses an identity needs and make the shared special-function definitions available for later developments. A proof of the triple product, for example, connects the series definition of the general theta function with its product representation, which recurs throughout the theta-function material.

The statements are proof targets. A declaration that type-checks has a meaningful Lean type; that check alone does not establish the proposition. The description makes no claim that the collection already has machine-checked proofs. Progress is measured by proofs of the individual targets with their stated hypotheses.

Difficulty

The entries vary considerably in their prerequisites. Finite algebraic and combinatorial identities can be approached with relatively little analytic infrastructure. Other chapters depend on convergence theory for continued fractions, transformations of theta and elliptic functions, modular forms, or class invariants.

Even a short equality can require substantial work before its expressions have the intended meaning. A divergent series cannot be interpreted as an ordinary sum, and a complex root or logarithm needs an appropriate branch convention. The central challenge is to preserve the object and domain of the reference result while supplying the formal infrastructure needed to prove it.

Formalization scope

Statements use real or complex variables according to the reference, with exceptional values, nonvanishing conditions and convergence ranges explicit. Infinite series are expressed with convergence assertions where necessary; continued fractions are represented through their convergents and limits. Integrals carry the hypotheses needed for their intended interpretation. Lean's total definitions of division, infinite sums and infinite products must not turn an undefined or divergent source expression into a trivial theorem.

Contributions should prove the registered statements using their shared definitions. Reusable lemmas about convergence, special functions and transformations are part of that work. Any suspected statement error should be reported with the declaration name, source location and a specific mathematical objection, so that the source relationship can be reviewed before a replacement is prepared.

Selected references

  • S. Ramanujan, Notebooks, facsimile edition, Tata Institute of Fundamental Research, Bombay, 1957.
  • B. C. Berndt, Ramanujan's Notebooks, Part I, Springer, 1985.
  • B. C. Berndt, Ramanujan's Notebooks, Part II, Springer, 1989.
  • B. C. Berndt, Ramanujan's Notebooks, Part III, Springer, 1991.
  • B. C. Berndt, Ramanujan's Notebooks, Part IV, Springer, 1994.
  • B. C. Berndt, Ramanujan's Notebooks, Part V, Springer, 1998.
42 thms2 active usersReviewed
ProbabilityTheoretical Computer Science·Captain: mikedeng1

On Lattices, Learning with Errors, Random Linear Codes, and Cryptography 5: If Every χ^⋆k Is Below ⌊p/2⌋/2 with Probability > 1 − δ, the Cryptosystem Decrypts Correctly with Probability ≥ 1 − δResearch Paper

Motivation

Learning with errors (LWE) asks to recover a secret vector s∈Zpns \in \mathbb Z_p^ns∈Zpn​ from noisy inner products (ai,⟨ai,s⟩+ei)(a_i, \langle a_i, s\rangle + e_i)(ai​,⟨ai​,s⟩+ei​), where the aia_iai​ are uniform and the errors eie_iei​ are drawn from a narrow distribution χ\chiχ on Zp\mathbb Z_pZp​. Regev introduced the problem and showed that solving it is at least as hard as solving worst-case lattice problems by a quantum algorithm (Regev 2009). The same paper uses LWE to build a public-key cryptosystem, the ancestor of most lattice-based encryption schemes in use today, including the schemes standardized by NIST in 2024 (ML-KEM, derived from Kyber).

A cryptosystem has two halves: security (an eavesdropper learns nothing about the plaintext) and correctness (the legitimate receiver recovers the plaintext). This mission is the correctness half of Regev's scheme: Lemma 5.1 of the paper, which converts a tail bound on the noise into a bound on the probability that decryption fails. The source is the published article, Journal of the ACM 56(6), Article 34 (2009). The paper's main theorem, a quantum reduction from lattice problems to LWE, is outside this series.

Setting

Fix an integer p≥2p \ge 2p≥2 and let Zp={0,1,…,p−1}\mathbb Z_p = \{0, 1, \dots, p-1\}Zp​={0,1,…,p−1} with addition modulo ppp. Fix integers n,m≥0n, m \ge 0n,m≥0 and a probability distribution χ\chiχ on Zp\mathbb Z_pZp​. All additions are in Zp\mathbb Z_pZp​, and ⟨a,s⟩=∑jajsj\langle a, s\rangle = \sum_j a_j s_j⟨a,s⟩=∑j​aj​sj​ for a,s∈Zpna, s \in \mathbb Z_p^na,s∈Zpn​.

  • Distance from zero. For a∈Zpa \in \mathbb Z_pa∈Zp​, ∣a∣|a|∣a∣ (absZ) is the integer aaa if a∈{0,…,⌊p/2⌋}a \in \{0, \dots, \lfloor p/2\rfloor\}a∈{0,…,⌊p/2⌋} and p−ap - ap−a otherwise.
  • Convolution powers. χ⋆k\chi^{\star k}χ⋆k (convPow χ k) is the law of the sum of kkk independent samples from χ\chiχ; χ⋆0\chi^{\star 0}χ⋆0 is the point mass at 000.
  • Private key. s∈Zpns \in \mathbb Z_p^ns∈Zpn​, chosen uniformly.
  • Public key. a1,…,am∈Zpna_1, \dots, a_m \in \mathbb Z_p^na1​,…,am​∈Zpn​ independent and uniform, e1,…,em∈Zpe_1, \dots, e_m \in \mathbb Z_pe1​,…,em​∈Zp​ independent with law χ\chiχ, and (ai,bi)i=1m(a_i, b_i)_{i=1}^m(ai​,bi​)i=1m​ with bi=⟨ai,s⟩+eib_i = \langle a_i, s\rangle + e_ibi​=⟨ai​,s⟩+ei​ (publicKey).
  • Encryption. A subset S⊆[m]S \subseteq [m]S⊆[m] is chosen uniformly among all 2m2^m2m subsets. The bit 000 is encrypted as (∑i∈Sai,∑i∈Sbi)\bigl(\sum_{i\in S} a_i, \sum_{i\in S} b_i\bigr)(∑i∈S​ai​,∑i∈S​bi​) and the bit 111 as (∑i∈Sai,⌊p/2⌋+∑i∈Sbi)\bigl(\sum_{i\in S} a_i, \lfloor p/2\rfloor + \sum_{i\in S} b_i\bigr)(∑i∈S​ai​,⌊p/2⌋+∑i∈S​bi​) (encrypt).
  • Decryption. A pair (a,b)(a, b)(a,b) decrypts to 000 if b−⟨a,s⟩b - \langle a, s\rangleb−⟨a,s⟩ is closer to 000 than to ⌊p/2⌋\lfloor p/2\rfloor⌊p/2⌋ modulo ppp, i.e. ∣b−⟨a,s⟩∣<∣b−⟨a,s⟩−⌊p/2⌋∣|b - \langle a, s\rangle| < |b - \langle a, s\rangle - \lfloor p/2\rfloor|∣b−⟨a,s⟩∣<∣b−⟨a,s⟩−⌊p/2⌋∣, and to 111 otherwise (decrypt, decodeResidue).

The outcome distribution outcome n m χ c of a bit ccc is the law of the decrypted bit when all of sss, a1,…,ama_1,\dots,a_ma1​,…,am​, e1,…,eme_1,\dots,e_me1​,…,em​ and SSS are drawn as above.

Formalization targets

Goal: Lemma 5.1 (Correctness), p. 34:35

Let δ>0\delta > 0δ>0 and assume that for every k∈{0,1,…,m}k \in \{0, 1, \dots, m\}k∈{0,1,…,m},

Pr⁡e∼χ⋆k[ ∣e∣<⌊p2⌋/2 ]>1−δ.\Pr_{e \sim \chi^{\star k}}\Bigl[\,|e| < \Bigl\lfloor \frac p2\Bigr\rfloor\Big/2\,\Bigr] > 1 - \delta .e∼χ⋆kPr​[∣e∣<⌊2p​⌋/2]>1−δ.

Then for each bit c∈{0,1}c \in \{0,1\}c∈{0,1},

Pr⁡[decryption of an encryption of c equals c]≥1−δ,\Pr[\text{decryption of an encryption of } c \text{ equals } c] \ge 1 - \delta ,Pr[decryption of an encryption of c equals c]≥1−δ,

the probability being over all the randomness of the protocol. The lemma has no hard-coded parameters: ppp, mmm, nnn, χ\chiχ and δ\deltaδ are arbitrary, and the paper's concrete choice (ppp prime in [n2,2n2][n^2, 2n^2][n2,2n2], χ=Ψˉα(n)\chi = \bar\Psi_{\alpha(n)}χ=Ψˉα(n)​) is supplied separately by Claim 5.2.

Milestones (proof of Lemma 5.1, p. 34:36)

  1. Residue identity. For an encryption (a,b)(a, b)(a,b) of 000, b−⟨a,s⟩=∑i∈Seib - \langle a, s\rangle = \sum_{i\in S} e_ib−⟨a,s⟩=∑i∈S​ei​; for an encryption of 111, b−⟨a,s⟩=⌊p/2⌋+∑i∈Seib - \langle a, s\rangle = \lfloor p/2\rfloor + \sum_{i\in S} e_ib−⟨a,s⟩=⌊p/2⌋+∑i∈S​ei​.
  2. Residue law. For a fixed SSS, ∑i∈Sei∼χ⋆∣S∣\sum_{i\in S} e_i \sim \chi^{\star |S|}∑i∈S​ei​∼χ⋆∣S∣.
  3. Rounding. If ∣x∣<⌊p/2⌋/2|x| < \lfloor p/2\rfloor/2∣x∣<⌊p/2⌋/2 then xxx is closer to 000 than to ⌊p/2⌋\lfloor p/2\rfloor⌊p/2⌋, so the residue xxx decrypts to 000 and the residue ⌊p/2⌋+x\lfloor p/2\rfloor + x⌊p/2⌋+x decrypts to 111.

Significance

The result. Lemma 5.1 is the interface between the noise distribution and the scheme: any bound on the tails of the convolution powers χ⋆k\chi^{\star k}χ⋆k, k≤mk \le mk≤m, gives a bound on the decryption error, independently of the security analysis. With Claim 5.2 it shows that the paper's parameters decrypt correctly except with negligible probability. The same template (residue equals accumulated noise; small noise rounds correctly) underlies the correctness proofs of essentially every later LWE-based encryption scheme.

Formalizing it. The result is proved in the paper and is elementary; it is not open. As far as is known, no machine-checked statement of Regev's scheme as a probability experiment exists on Prove2Me; related platform items concern a different scheme (a dual-Regev variant with deterministic noise bounds over an even modulus). The mission's contribution is a faithful, reusable definition of the cryptosystem as a probability experiment over all of its randomness, together with a proof of its correctness lemma. The definitions (the distance ∣⋅∣|\cdot|∣⋅∣ on Zp\mathbb Z_pZp​, convolution powers of a distribution on Zp\mathbb Z_pZp​, i.i.d. product distributions) are reusable by later missions on the security proof (Claim 5.3, Lemma 5.4) or on other LWE schemes.

Difficulty

The arithmetic is short; the work lies in the probability bookkeeping. The hypothesis controls the law of the noise for each fixed subset size, while the conclusion is about a single experiment in which SSS is random and independent of the errors, and the keys sss and aia_iai​ are random too. The step that needs care is identifying the law of ∑i∈Sei\sum_{i\in S} e_i∑i∈S​ei​ for a fixed SSS with χ⋆∣S∣\chi^{\star|S|}χ⋆∣S∣ from a product distribution, and then averaging over SSS; the uniform choices of sss and aia_iai​ must be shown not to affect the residue. A second point is the rounding step: ∣⋅∣|\cdot|∣⋅∣ is a cyclic distance on Zp\mathbb Z_pZp​, and the strict inequality ∣x∣<⌊p/2⌋/2|x| < \lfloor p/2\rfloor/2∣x∣<⌊p/2⌋/2 is sharp (at ∣x∣=⌊p/2⌋/2|x| = \lfloor p/2\rfloor/2∣x∣=⌊p/2⌋/2 the residue is equidistant and decrypts to 111), so odd and even ppp and ties must be handled exactly as printed.

Formalization scope

  • p:Np : \mathbb Np:N with [NeZero p] and the hypothesis 2≤p2 \le p2≤p (the paper defines Zp\mathbb Z_pZp​ for p≥2p \ge 2p≥2, p. 34:14). Primality, part of the paper's parameter choice, is not assumed: Lemma 5.1 does not use it.
  • Zp\mathbb Z_pZp​ is ZMod p, vectors are Fin n → ZMod p, ⟨a,s⟩\langle a, s\rangle⟨a,s⟩ is a ⬝ᵥ s, bits are Fin 2, and subsets of [m][m][m] are Finset (Fin m).
  • Distributions are PMFs. χ⋆k\chi^{\star k}χ⋆k is defined recursively by binds; the i.i.d. errors use the product PMF with mass ∏iχ(ei)\prod_i \chi(e_i)∏i​χ(ei​); uniform choices are PMF.uniformOfFintype. The experiment outcome n m χ c draws sss, then aaa, then eee, then SSS, all independently.
  • ∣a∣|a|∣a∣ is computed from the representative a.val; ⌊p/2⌋\lfloor p/2\rfloor⌊p/2⌋ is natural-number division p / 2; ⌊p/2⌋/2\lfloor p/2\rfloor/2⌊p/2⌋/2 is compared in R\mathbb RR, since it can be a half-integer.
  • Decryption ties (∣x∣=∣x−⌊p/2⌋∣|x| = |x - \lfloor p/2\rfloor|∣x∣=∣x−⌊p/2⌋∣) decrypt to 111, as printed ("Otherwise, the decryption is 1").
  • Probabilities in the goal are real numbers (toReal of PMF masses, exact because they are at most 111). The form ENNReal.ofReal (1 − δ) < Pr was rejected: for δ≥1\delta \ge 1δ≥1 it would add the hypothesis Pr⁡>0\Pr > 0Pr>0, which the page does not make.
  • The goal is not a statement about a fixed key, a fixed subset SSS or a fixed error vector: the probability is over all of sss, aia_iai​, eie_iei​ and SSS, and the hypothesis quantifies over every k∈{0,…,m}k \in \{0, \dots, m\}k∈{0,…,m}. A formalization conditioning on any of these would be a different (weaker) theorem. For k=0k = 0k=0 the hypothesis reads 1>1−δ1 > 1 - \delta1>1−δ, true for δ>0\delta > 0δ>0, so it imposes no hidden restriction.
  • No printed slip was found in Lemma 5.1 or its proof.

Contributions welcome: proofs of the three milestones and the goal; general lemmas on convolution powers and product distributions of PMFs on finite groups.

Selected references

  • O. Regev, On Lattices, Learning with Errors, Random Linear Codes, and Cryptography, Journal of the ACM 56(6), Article 34, 2009. https://doi.org/10.1145/1568318.1568324
  • O. Regev, The Learning with Errors Problem, IEEE Conference on Computational Complexity (invited survey), 2010. https://doi.org/10.1109/CCC.2010.26
  • NIST, Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203, 2024. https://doi.org/10.6028/NIST.FIPS.203
5 thms2 active usersReviewed
Discrete GeometryLinear OptimizationOperations Research·Captain: mikedeng1

Integer Programming with a Fixed Number of Variables 1: If B(p,r) ⊂ τK ⊂ B(p,R) with R/r ≤ c₁ and τK Misses the Lattice, Fewer Than 1 + c₁c₂√n Lattice Hyperplanes H + kbₙ Meet B(p,R)Research Paper

Motivation

The integer linear programming feasibility problem asks, for an integer m×nm\times nm×n matrix AAA and b∈Zmb\in\mathbb Z^mb∈Zm, whether some x∈Znx\in\mathbb Z^nx∈Zn satisfies Ax≤bAx\le bAx≤b. It is NP-complete, so no algorithm polynomial in the length of the data is expected. H. W. Lenstra, Jr. (Math. Oper. Res. 8 (1983) 538–548) showed that the picture changes when the number of variables nnn is fixed: the problem is then solvable in polynomial time. The proof is a short argument from the geometry of numbers, and it became the starting point of lattice methods in integer programming, including Kannan's improved algorithm and the later flatness-based branching schemes.

Lenstra's introduction (p. 538) describes the idea as transforming the problem into an equivalent one in which "either the existence of a vector x∈Znx \in \mathbb Z^nx∈Zn satisfying Ax≤bAx \le bAx≤b is obvious; or it is known that the last coordinate of any such xxx belongs to an interval whose length is bounded by a constant only depending on nnn." This mission formalizes the geometric statement behind that dichotomy, §1 of the paper.

Timeline. For n=2n = 2n=2, Hirschberg and Wong and Kannan gave polynomial algorithms in special cases, and Scarf treated the case n=2n=2n=2 completely; the case of general fixed nnn was conjectured by Hirschberg–Wong and Scarf (as recounted on p. 538). Lenstra's paper (received 1981, published 1983) settled the conjecture. Its lattice reduction step uses the algorithm of Lenstra, Lenstra and Lovász (1982). Kannan (1987) later reduced the dependence on nnn to nO(n)n^{O(n)}nO(n).

Setting

Work in Rn\mathbb R^nRn with the Euclidean length ∣⋅∣|\cdot|∣⋅∣, and write B(p,z)={x∈Rn:∣x−p∣≤z}B(p,z)=\{x\in\mathbb R^n : |x-p|\le z\}B(p,z)={x∈Rn:∣x−p∣≤z} for the closed ball with centre ppp and radius z>0z>0z>0.

A lattice is L=∑i=1nZbiL=\sum_{i=1}^n \mathbb Z b_iL=∑i=1n​Zbi​ for a basis b1,…,bnb_1,\dots,b_nb1​,…,bn​ of Rn\mathbb R^nRn. Its determinant d(L)=∣det⁡(b1,…,bn)∣d(L)=|\det(b_1,\dots,b_n)|d(L)=∣det(b1​,…,bn​)∣ (the bib_ibi​ as columns) is the volume of the parallelepiped ∑i[0,1) bi\sum_i[0,1)\,b_i∑i​[0,1)bi​ and does not depend on the basis. Hadamard's inequality (6) says d(L)≤∏i∣bi∣d(L)\le\prod_i|b_i|d(L)≤∏i​∣bi​∣. A basis is reduced in Lenstra's sense if, for a constant c2c_2c2​ depending only on nnn,

∏i=1n∣bi∣≤c2⋅d(L).(7)\prod_{i=1}^n |b_i| \le c_2\cdot d(L). \tag{7}i=1∏n​∣bi​∣≤c2​⋅d(L).(7)

Singling out bnb_nbn​, let H=∑i=1n−1RbiH=\sum_{i=1}^{n-1}\mathbb R b_iH=∑i=1n−1​Rbi​ be the hyperplane spanned by the other vectors, L′=∑i=1n−1ZbiL'=\sum_{i=1}^{n-1}\mathbb Z b_iL′=∑i=1n−1​Zbi​ the lattice inside it, and hhh the distance of bnb_nbn​ to HHH. Then L⊂⋃k∈Z(H+kbn)L\subset\bigcup_{k\in\mathbb Z}(H+kb_n)L⊂⋃k∈Z​(H+kbn​): the lattice lies on a family of parallel hyperplanes H+kbnH + kb_nH+kbn​ at successive distance hhh.

In the paper, K={x:Ax≤b}K=\{x : Ax\le b\}K={x:Ax≤b} is bounded with positive volume, and a linear map τ\tauτ makes it "round":

B(p,r)⊂τK⊂B(p,R)(3),R/r≤c1(4),B(p,r)\subset\tau K\subset B(p,R)\quad(3),\qquad R/r\le c_1\quad(4),B(p,r)⊂τK⊂B(p,R)(3),R/r≤c1​(4),

with c1c_1c1​ depending only on nnn. Then K∩Zn=∅K\cap\mathbb Z^n=\emptysetK∩Zn=∅ if and only if τK∩L=∅\tau K\cap L=\emptysetτK∩L=∅ for L=τZnL=\tau\mathbb Z^nL=τZn, a lattice with basis bi=τ(ei)b_i=\tau(e_i)bi​=τ(ei​).

Formalization targets

Goal (§1, p. 541)

Let b1,…,bnb_1,\dots,b_nb1​,…,bn​ be a basis with (7), numbered so that ∣bn∣=max⁡i∣bi∣|b_n|=\max_i|b_i|∣bn​∣=maxi​∣bi​∣, and let τK\tau KτK satisfy (3) and (4). Then

τK∩L≠∅ort−1<c1c2n,\tau K\cap L\neq\emptyset\quad\text{or}\quad t-1<c_1c_2\sqrt n,τK∩L=∅ort−1<c1​c2​n​,

where ttt is the number of hyperplanes H+kbnH+kb_nH+kbn​, k∈Zk\in\mathbb Zk∈Z, that meet B(p,R)B(p,R)B(p,R) (finiteness included).

Milestones, in the order the paper uses them

  1. LEMMA (8), p. 540: every xxx has y∈Ly\in Ly∈L with ∣x−y∣2≤14(∣b1∣2+⋯+∣bn∣2)|x-y|^2\le\frac14(|b_1|^2+\cdots+|b_n|^2)∣x−y∣2≤41​(∣b1​∣2+⋯+∣bn​∣2).
  2. (10), p. 540: if ∣bn∣|b_n|∣bn​∣ is maximal, ∣x−y∣≤12n ∣bn∣|x-y|\le\frac12\sqrt n\,|b_n|∣x−y∣≤21​n​∣bn​∣.
  3. (11), p. 540: d(L)=h⋅d(L′)d(L)=h\cdot d(L')d(L)=h⋅d(L′).
  4. (12), pp. 540–541: under (7), c2−1∣bn∣≤h≤∣bn∣c_2^{-1}|b_n|\le h\le|b_n|c2−1​∣bn​∣≤h≤∣bn​∣.
  5. p. 541: if B(p,r)⊂τKB(p,r)\subset\tau KB(p,r)⊂τK and τK∩L=∅\tau K\cap L=\emptysetτK∩L=∅, then r<12n ∣bn∣r<\frac12\sqrt n\,|b_n|r<21​n​∣bn​∣.
  6. p. 541: if precisely ttt hyperplanes H+kbnH+kb_nH+kbn​ meet B(p,R)B(p,R)B(p,R), then t−1≤2R/ht-1\le 2R/ht−1≤2R/h.

The goal leaves c1c_1c1​ and c2c_2c2​ free, so it remains valid for any reduction algorithm and any rounding procedure; the companion mission (Integer Programming with a Fixed Number of Variables 2) supplies c1=2n3/2c_1 = 2n^{3/2}c1​=2n3/2, and the LLL algorithm supplies c2=2n(n−1)/4c_2=2^{n(n-1)/4}c2​=2n(n−1)/4.

Significance

The result. The goal is the branching step of Lenstra's algorithm. It says that a lattice-point-free convex body that is well rounded is "flat" in the lattice direction dual to HHH: only boundedly many lattice hyperplanes meet it. The search for a lattice point in dimension nnn therefore reduces to fewer than 1+c1c2n1+c_1c_2\sqrt n1+c1​c2​n​ searches in dimension n−1n-1n−1, which with nnn fixed gives polynomial running time. Sharper forms of the same dichotomy, such as Kannan's bounds, are the basis of later lattice-based integer programming algorithms.

Formalizing it. The results are classical and proved on paper; to our knowledge none of the statements of §1 is machine-checked. Hadamard's inequality (6) is in Mathlib (Orientation.abs_volumeForm_apply_le). The published platform theorem KannanLattice.Core.exists_lattice_point_near_projection (Kannan 1987, Proposition 4.2) proves a stronger form of (8) and (10), with Gram–Schmidt lengths in place of ∣bi∣|b_i|∣bi​∣; for L=ZnL=\mathbb Z^nL=Zn, (10) is the published QFS.exists_lattice_mem_closedBall. What remains is the "base times height" identity (11) relating a full-rank determinant to the distance of a vector from a hyperplane, the spacing bound (12), the count of hyperplanes meeting a ball, and their assembly. This is one of the two geometric ingredients of Lenstra's polynomial algorithm; the algorithm itself and its running time are not formalized.

Difficulty

The argument is short on paper, and each step is "clear" there. The work lies in connecting three descriptions of the same geometry that Mathlib keeps apart: the determinant of a coordinate matrix (d(L)d(L)d(L)), the metric distance of a point to a subspace (hhh), and the (n−1)(n-1)(n−1)-dimensional volume of L′L'L′. Identity (11) needs exactly this bridge, and (12) needs Hadamard's inequality for the lower-dimensional lattice L′L'L′ inside a hyperplane of Rn\mathbb R^nRn, not for a full-rank matrix. Bounding the number of hyperplanes meeting a ball needs the normal direction of HHH and the fact that the hyperplanes are hhh apart along it. A tempting shortcut is to define hhh as the length of the last Gram–Schmidt vector and d(L)d(L)d(L) as the product of Gram–Schmidt lengths: that turns (11) into a tautology and is ruled out below.

Formalization scope

  • Rn\mathbb R^nRn is EuclideanSpace ℝ (Fin n), so norms are Euclidean and balls round; B(p,z)B(p,z)B(p,z) is Metric.closedBall p z with z>0z>0z>0 as a hypothesis where the paper writes a ball.
  • Where bnb_nbn​ is singled out, n=k+1n=k+1n=k+1, the basis is b : Fin (k+1) → ℝⁿ, bnb_nbn​ = b (Fin.last k) and b1,…,bn−1b_1,\dots,b_{n-1}b1​,…,bn−1​ = b ∘ Fin.castSucc. "Basis for LLL" is linear independence of the nnn vectors over R\mathbb RR, and LLL is the published KannanLattice.Core.lattice b, the Z\mathbb ZZ-span.
  • d(L)d(L)d(L) is the paper's definition, ∣det⁡∣|\det|∣det∣ of the column matrix (latDet). hhh is Metric.infDist from bnb_nbn​ to the span HHH. d(L′)d(L')d(L′), for which the paper writes no formula, is the published KannanLattice.Core.latticeDet (the product of Gram–Schmidt lengths of b1,…,bn−1b_1,\dots,b_{n-1}b1​,…,bn−1​, the (n−1)(n-1)(n−1)-volume of their parallelepiped).
  • The hyperplanes H+kbnH+kb_nH+kbn​ meeting B(p,R)B(p,R)B(p,R) are indexed by the set of integers hitIndices b p R; ttt is its cardinality, its finiteness is part of every conclusion (the cardinality of an infinite set is 000 in Lean), and t−1t-1t−1 is computed in R\mathbb RR.
  • The constants "only depending on nnn", c1c_1c1​ and c2c_2c2​, are arbitrary real numbers. The reducedness (7) is a hypothesis, and so is the maximality ∣bi∣≤∣bn∣|b_i|\le|b_n|∣bi​∣≤∣bn​∣, which enters (10), the radius bound and the goal only.
  • τK\tau KτK is an arbitrary set X⊆RnX\subseteq\mathbb R^nX⊆Rn satisfying (3); §1 never uses that KKK is a polyhedron or the map τ\tauτ, and every lattice is τZn\tau\mathbb Z^nτZn for τ(ei)=bi\tau(e_i)=b_iτ(ei​)=bi​. The paper's "for some p∈τKp\in\tau Kp∈τK" follows from (3).
  • The identity (11) is stated without (7), which the paper assumes in the surrounding sentence but does not use.
  • Ruled out: defining d(L)d(L)d(L) or hhh through Gram–Schmidt lengths (which makes (11) bookkeeping), dropping finiteness of the hyperplane count, and replacing the dichotomy "some lattice point lies in τK\tau KτK" by a statement about one computed lattice point.

Welcome contributions: the bridge between Matrix.det of a basis and products of Gram–Schmidt lengths (reusable for any lattice development), Hadamard's inequality for a family of fewer than nnn vectors, and the count of lattice hyperplanes meeting a ball.

Selected references

  • H. W. Lenstra, Jr., Integer Programming with a Fixed Number of Variables, Mathematics of Operations Research 8(4) (1983) 538–548. https://doi.org/10.1287/moor.8.4.538
  • A. K. Lenstra, H. W. Lenstra, Jr., L. Lovász, Factoring polynomials with rational coefficients, Mathematische Annalen 261 (1982) 515–534. https://doi.org/10.1007/BF01457454
  • R. Kannan, Minkowski's convex body theorem and integer programming, Mathematics of Operations Research 12(3) (1987) 415–440. https://doi.org/10.1287/moor.12.3.415
10 thms2 active usersReviewed
Group Theory·Captain: Lucas

The Mathieu group M23 is a Galois group over QResearch Paper

Motivation

The inverse Galois problem asks whether every finite group GGG occurs as the Galois group of a finite Galois extension of Q\mathbb{Q}Q. For finite simple groups, a large part of the problem was settled by the rigidity method (Shih, Fried, Belyi, Matzat, Thompson) and its refinements such as the braid-group method. Between 1984 and 1989 this machinery realized 25 of the 26 sporadic simple groups as Galois groups over Q\mathbb{Q}Q, in fact as Galois groups of regular extensions of Q(t)\mathbb{Q}(t)Q(t). The Mathieu group M23M_{23}M23​ was the single exception.

Timeline.

  • 1985–1987: Hoyden-Siedersleben and Häfner obtained regular M23M_{23}M23​-extensions of k(t)k(t)k(t) for k=Q(−23)k=\mathbb{Q}(\sqrt{-23})k=Q(−23​) and k=Q(−7)k=\mathbb{Q}(\sqrt{-7})k=Q(−7​), by passing through M24M_{24}M24​.
  • 1996: Granboulan constructed a regular M23M_{23}M23​-extension of k(t)k(t)k(t) for every field kkk over which a certain conic has a point; that conic has no rational point.
  • 2013: Elkies computed the four complex polynomials PPP of degree 23 with Gal(P(x)−t/C(t))≅M23\mathrm{Gal}(P(x)-t/\mathbb{C}(t))\cong M_{23}Gal(P(x)−t/C(t))≅M23​; each is defined over a quartic number field.
  • 2026: Huang, Jackson, Lee, Poonen, Pries and Zhang (arXiv:2608.08538) produced an explicit regular M23M_{23}M23​-extension of Q(t)\mathbb{Q}(t)Q(t) and explicit degree-23 polynomials over Q\mathbb{Q}Q with Galois group M23M_{23}M23​, completing the program for the sporadic groups.

Setting

S23S_{23}S23​ denotes the group of permutations of the 23 points {1,…,23}\{1,\dots,23\}{1,…,23}, acting on the left, so (στ)(x)=σ(τ(x))(\sigma\tau)(x)=\sigma(\tau(x))(στ)(x)=σ(τ(x)). The paper fixes three explicit permutations

g1=(1,11)(2,23)(3,8)(4,16)(5,21)(7,20)(15,19)(18,22),g_1=(1,11)(2,23)(3,8)(4,16)(5,21)(7,20)(15,19)(18,22),g1​=(1,11)(2,23)(3,8)(4,16)(5,21)(7,20)(15,19)(18,22), g2=(1,2,11,10,16,9,6,3,23,19,20,14,21,17,4,8,22,5,18,15,13,7,12),g_2=(1,2,11,10,16,9,6,3,23,19,20,14,21,17,4,8,22,5,18,15,13,7,12),g2​=(1,2,11,10,16,9,6,3,23,19,20,14,21,17,4,8,22,5,18,15,13,7,12), g3=(1,2,3,4,10,11,12,7,19,18,8,6,9,16,17,21,22,5,14,20,13,15,23),g_3=(1,2,3,4,10,11,12,7,19,18,8,6,9,16,17,21,22,5,14,20,13,15,23),g3​=(1,2,3,4,10,11,12,7,19,18,8,6,9,16,17,21,22,5,14,20,13,15,23),

and the Mathieu group M23M_{23}M23​ is the subgroup of S23S_{23}S23​ generated by g1g_1g1​ and g2g_2g2​. A GGG-extension of a field kkk is a Galois extension L/kL/kL/k together with an isomorphism Gal(L/k)≅G\mathrm{Gal}(L/k)\cong GGal(L/k)≅G. A finite extension LLL of Q(t)\mathbb{Q}(t)Q(t) is regular if it contains no nontrivial algebraic extension of Q\mathbb{Q}Q.

For a triple of conjugacy classes (C1,C2,C3)(C_1,C_2,C_3)(C1​,C2​,C3​) of M23M_{23}M23​, the set Σc\Sigma_cΣc​ consists of triples (h1,h2,h3)∈C1×C2×C3(h_1,h_2,h_3)\in C_1\times C_2\times C_3(h1​,h2​,h3​)∈C1​×C2​×C3​ with h1h2h3=1h_1h_2h_3=1h1​h2​h3​=1 that generate M23M_{23}M23​, and the Nielsen class Nic\mathrm{Ni}_cNic​ is the set of orbits of Σc\Sigma_cΣc​ under simultaneous conjugation by M23M_{23}M23​. The paper works with the classes C1=2C_1=2C1​=2, C2=23AC_2=23AC2​=23A, C3=23BC_3=23BC3​=23B, represented by g1,g2,g3g_1,g_2,g_3g1​,g2​,g3​.

Formalization targets

Goal (Theorem 1.1)

∃ K/Q finite Galois with Gal(K/Q)≅M23.\exists\ K/\mathbb{Q}\ \text{finite Galois with}\ \mathrm{Gal}(K/\mathbb{Q})\cong M_{23}.∃ K/Q finite Galois with Gal(K/Q)≅M23​.

Stronger forms

  • Theorem 1.3: there is a finite Galois extension L/Q(t)L/\mathbb{Q}(t)L/Q(t), regular over Q\mathbb{Q}Q, with Gal(L/Q(t))≅M23\mathrm{Gal}(L/\mathbb{Q}(t))\cong M_{23}Gal(L/Q(t))≅M23​.
  • Examples 1.2 and 3.7: two explicit monic degree-23 polynomials in Z[x]\mathbb{Z}[x]Z[x] whose splitting fields are M23M_{23}M23​-extensions of Q\mathbb{Q}Q, unramified outside {2,3,23}\{2,3,23\}{2,3,23} and {2,7,23}\{2,7,23\}{2,7,23} respectively.

Supporting milestones

Facts about M23M_{23}M23​ stated in §3 (order 10,200,96010{,}200{,}96010,200,960, simplicity, 4-transitivity, 17 conjugacy classes), the membership (g1,g2,g3)∈Σc(g_1,g_2,g_3)\in\Sigma_c(g1​,g2​,g3​)∈Σc​, the count ∣Nic∣=7|\mathrm{Ni}_c|=7∣Nic​∣=7, the Riemann–Hurwitz count of Lemma 3.1, the hyperbolic triangle of Lemma 3.2, and the group-theoretic step of Corollary 3.6 (M23M_{23}M23​ is not normal in any strictly larger subgroup of S23S_{23}S23​).

Significance

Theorem 1.1 removes the last sporadic exception: combined with earlier work, every sporadic simple group is the Galois group of a regular extension of Q(t)\mathbb{Q}(t)Q(t) (Corollary 1.4), and hence occurs as a Galois group over every number field, in infinitely many mutually independent ways.

The paper's proof is computer-assisted: Belyi maps were computed numerically and the final claims were certified in Magma and PARI/GP. No machine-checked proof in a proof assistant is known. A formal proof of the explicit-polynomial statements (Examples 1.2 and 3.7) would give an independent, kernel-checked certificate of Theorem 1.1. The group-theoretic milestones (order, simplicity, transitivity, class counts, the Nielsen count) are reusable for any later work on M23M_{23}M23​ or the other Mathieu groups.

Difficulty

The rigidity method fails for M23M_{23}M23​: for every GQG_{\mathbb{Q}}GQ​-stable triple of conjugacy classes the Nielsen class has size different from 111, so no rational point of a Hurwitz space is forced. The smallest positive size, ∣Nic∣=7|\mathrm{Ni}_c|=7∣Nic​∣=7 for {2,23A,23B}\{2,23A,23B\}{2,23A,23B}, leaves seven covers, and the fact that one of them has field of moduli Q\mathbb{Q}Q was found by explicit computation, with no conceptual explanation. Certifying that a particular degree-23 polynomial has Galois group exactly M23M_{23}M23​ requires both a lower bound (the group contains M23M_{23}M23​, for instance via cycle types and the classification of transitive groups of degree 23) and an upper bound (the group is contained in a conjugate of M23M_{23}M23​, for instance via resolvents or reduction modulo primes). Neither bound is a finite check inside current Mathlib.

Formalization scope

S23S_{23}S23​ is Equiv.Perm (Fin 23). The paper's point kkk corresponds to k - 1 : Fin 23, and permutations compose as functions, which matches the paper's left-action convention. M23M_{23}M23​ is defined as Subgroup.closure {g₁, g₂}, so it is not described up to isomorphism. Galois groups are groups of field automorphisms, K ≃ₐ[ℚ] K, and a GGG-extension is recorded as a group isomorphism with M23M_{23}M23​. Q(t)\mathbb{Q}(t)Q(t) is RatFunc ℚ. "Unramified outside SSS" for a number field is encoded as "every prime dividing the absolute discriminant lies in SSS", which is equivalent by Dedekind's discriminant theorem. The Nielsen class is the set of orbits of Σc\Sigma_cΣc​ under simultaneous conjugation. Hyperbolic angles in the Poincaré disk are defined through the hyperbolic law of cosines.

The geometric statements Lemma 3.3 and Proposition 3.5 concern the numerically computed curve XCX_{\mathbb{C}}XC​ and the polynomial F(T,V)F(T,V)F(T,V), which the paper does not print, so they are not milestones. Lemma 3.1 enters only through its Riemann–Hurwitz count.

Contributions are welcome on decidable certificates for permutation-group facts in Lean, on Galois-group certification for explicit polynomials, and on Hilbert irreducibility.

Selected references

  • X. Huang, B. Jackson, K.-H. Lee, B. Poonen, R. Pries, S. Zhang, The Mathieu group M23M_{23}M23​ is a Galois group over Q\mathbb{Q}Q, 2026. https://arxiv.org/abs/2608.08538
  • G. Malle, B. H. Matzat, Inverse Galois Theory, 2nd ed., Springer, 2018.
  • J.-P. Serre, Topics in Galois Theory, Jones and Bartlett, 1992.
  • N. D. Elkies, The complex polynomials P(x)P(x)P(x) with Gal(P(x)−t)≅M23\mathrm{Gal}(P(x)-t)\cong M_{23}Gal(P(x)−t)≅M23​, ANTS X, Open Book Series 1, 2013.
  • M. D. Fried, H. Völklein, The inverse Galois problem and rational points on moduli spaces, Math. Ann. 290 (1991), 771–800.
18 thms2 active usersReviewed
Algebraic Geometry·Captain: Lucas

Lam–Litt conjecture: algebraicity and integrality of solutions to algebraic ODEsOpen Problem

Motivation

A classical way to recognize an algebraic function is through the arithmetic of its Taylor coefficients. Eisenstein's theorem (1852) says that if a power series f∈Q[[z]]f\in\mathbb{Q}[[z]]f∈Q[[z]] is algebraic over Q[z]\mathbb{Q}[z]Q[z], only finitely many primes occur in the denominators of its coefficients. The converse fails in general: many transcendental power series have integer coefficients. Lam and Litt (arXiv:2501.13175) conjecture that the converse does hold for power series that solve an algebraic differential equation at a non-singular point, and that even a weak control on denominators — primes ppp may appear, but only after roughly ω(p)≫p\omega(p)\gg pω(p)≫p coefficients — already forces algebraicity.

For linear differential equations, the conjecture is a strengthening of the Grothendieck–Katz ppp-curvature conjecture, one of the central open problems about algebraic solutions of linear differential equations (arXiv:2501.13175). The bounded-denominator form is Problem 1 on Litt's list of open problems (problemsilike.com/1).

Timeline.

  • 1852 — Eisenstein: algebraic power series over Q\mathbb{Q}Q have bounded denominators (implication (1)⇒(2) below).
  • 1970s — Grothendieck and Katz: the ppp-curvature conjecture for linear differential equations.
  • 2025 — Lam and Litt formulate the conjecture for (possibly non-linear) algebraic differential equations and prove it for many equations and initial conditions of algebro-geometric interest, including Picard–Fuchs equations at initial conditions corresponding to cycle classes, and isomonodromy equations such as Painlevé VI and the Schlesinger system at initial conditions corresponding to Picard–Fuchs equations (arXiv:2501.13175).

Setting

Let f=∑k≥0akzk∈Q[[z]]f=\sum_{k\ge0}a_kz^k\in\mathbb{Q}[[z]]f=∑k≥0​ak​zk∈Q[[z]] be a formal power series with rational coefficients and write f(i)f^{(i)}f(i) for its iii-th formal derivative. Let g∈Q(z,y0,…,yn−1)g\in\mathbb{Q}(z,y_0,\dots,y_{n-1})g∈Q(z,y0​,…,yn−1​) be a rational function in n+1n+1n+1 variables. The series fff solves the algebraic ODE defined by ggg if

f(n)(z)=g(z,f(z),f′(z),…,f(n−1)(z))f^{(n)}(z)=g\bigl(z,f(z),f'(z),\dots,f^{(n-1)}(z)\bigr)f(n)(z)=g(z,f(z),f′(z),…,f(n−1)(z))

and ggg is defined at (0,f(0),…,f(n−1)(0))\bigl(0,f(0),\dots,f^{(n-1)}(0)\bigr)(0,f(0),…,f(n−1)(0)). Concretely, g=p/qg=p/qg=p/q for polynomials p,qp,qp,q with q(0,f(0),…,f(n−1)(0))≠0q\bigl(0,f(0),\dots,f^{(n-1)}(0)\bigr)\neq0q(0,f(0),…,f(n−1)(0))=0 and f(n)⋅q(z,f,…,f(n−1))=p(z,f,…,f(n−1))f^{(n)}\cdot q(z,f,\dots,f^{(n-1)})=p(z,f,\dots,f^{(n-1)})f(n)⋅q(z,f,…,f(n−1))=p(z,f,…,f(n−1)).

For N∈NN\in\mathbb{N}N∈N, Z[1/N]⊆Q\mathbb{Z}[1/N]\subseteq\mathbb{Q}Z[1/N]⊆Q is the subring generated by 1/N1/N1/N. For a function ω\omegaω from the primes to Z\mathbb{Z}Z, the coefficients of fff are ω\omegaω-integral if for every prime ppp the numbers a0,…,aω(p)a_0,\dots,a_{\omega(p)}a0​,…,aω(p)​ lie in Z(p)\mathbb{Z}_{(p)}Z(p)​ (denominators prime to ppp); ω\omegaω is superlinear if ω(p)/p→∞\omega(p)/p\to\inftyω(p)/p→∞.

Formalization targets

Goal: the Lam–Litt conjecture

For fff solving an algebraic ODE as above, the following are equivalent:

(1) f is algebraic over Q[z];(2) ∃N, ∀k, ak∈Z[1/N];(3) ∃ ω superlinear with (ak) ω-integral.\text{(1) } f \text{ is algebraic over } \mathbb{Q}[z];\qquad \text{(2) } \exists N,\ \forall k,\ a_k\in\mathbb{Z}[1/N];\qquad \text{(3) } \exists\,\omega \text{ superlinear with } (a_k) \ \omega\text{-integral}.(1) f is algebraic over Q[z];(2) ∃N, ∀k, ak​∈Z[1/N];(3) ∃ω superlinear with (ak​) ω-integral.

Milestones

  • (1)⇒(2), Eisenstein's theorem (no ODE hypothesis needed).
  • (2)⇒(3), elementary (no ODE hypothesis needed).
  • (3)⇒(2), open.
  • (2)⇒(1), open; Litt's Problem 1.

Together the four milestones imply the goal; the last two are the open content of the conjecture.

Significance

A proof would give an arithmetic criterion for algebraicity of solutions of arbitrary algebraic differential equations, and, for linear equations, would imply the Grothendieck–Katz ppp-curvature conjecture (arXiv:2501.13175). Lam and Litt draw algebro-geometric consequences from the cases they prove.

For formalization: the conjecture is open, so the goal and the two open milestones are research targets. Eisenstein's theorem is a classical result; formalizing it is concrete, self-contained work. The implication (2)⇒(3) is elementary. The cases proved by Lam and Litt are candidates for further milestones.

Difficulty

Integrality of coefficients alone does not detect algebraicity: there are transcendental power series with integer coefficients that satisfy linear differential equations, such as ∑k(2kk)2zk\sum_k\binom{2k}{k}^2z^k∑k​(k2k​)2zk. Its equation is singular at z=0z=0z=0, which the non-singularity hypothesis on ggg excludes; the conjecture asserts that at non-singular points such examples cannot occur. Even for linear equations the statement contains the Grothendieck–Katz conjecture, which is open in general.

Formalization scope

  • Power series are PowerSeries ℚ with the formal derivative; rational functions are the fraction field of MvPolynomial (Fin (n + 1)) ℚ, where variable 0 is zzz and variable i + 1 is f(i)f^{(i)}f(i).
  • The ODE hypothesis is existential: some representation g=p/qg=p/qg=p/q with qqq nonzero at the initial point and f(n)q(… )=p(… )f^{(n)}q(\dots)=p(\dots)f(n)q(…)=p(…) as power series. This non-singularity requirement is essential and must not be dropped.
  • Algebraicity is IsAlgebraic (Polynomial ℚ) f, i.e. over Q[z]\mathbb{Q}[z]Q[z] (equivalently over Q(z)\mathbb{Q}(z)Q(z)).
  • Z[1/N]\mathbb{Z}[1/N]Z[1/N] is the subalgebra of Q\mathbb{Q}Q generated by 1/N1/N1/N; since 1/0=01/0=01/0=0 in Lean, N=0N=0N=0 gives Z\mathbb{Z}Z.
  • ω\omegaω takes values in Z\mathbb{Z}Z; negative values impose no condition at that prime. Superlinearity is the limit ω(p)/p→∞\omega(p)/p\to\inftyω(p)/p→∞ along the primes.
  • The goal is a List.TFAE of the three conditions.

Useful infrastructure: formal derivatives and substitution for power series, algebraic power series and their coefficient arithmetic (Eisenstein), and ppp-adic valuations of coefficients. Formalizations of Eisenstein's theorem and of the special cases proved by Lam and Litt are welcome.

Selected references

  • Y. H. J. Lam, D. Litt, Algebraicity and integrality of solutions to differential equations, arXiv preprint, 2025. https://arxiv.org/abs/2501.13175
  • D. Litt, Problem 1, problems list. https://www.problemsilike.com/1
  • G. Eisenstein, Über eine allgemeine Eigenschaft der Reihen-Entwicklungen aller algebraischen Funktionen, Bericht der Königl. Preuss. Akademie der Wissenschaften zu Berlin, 1852.
  • Formal Conjectures project, FormalConjectures/LittProblems/1.lean. https://github.com/google-deepmind/formal-conjectures
6 thms2 active usersReviewed
Captain: Lucas

Brocard's Problem: n! + 1 = m²Open Problem

Motivation

Brocard's problem asks for all natural numbers nnn such that n!+1n! + 1n!+1 is a perfect square. Henri Brocard raised the question in 1876 and again in 1885, and Srinivasa Ramanujan independently posed it in 1913 in the Journal of the Indian Mathematical Society. Only three solutions are known, and the problem is listed as Erdős problem #398 (erdosproblems.com/398). It is one of the simplest-looking Diophantine equations mixing a multiplicative object (the factorial) with an additive shift, and it is a standard test case for conjectures such as the abc conjecture.

Timeline

  • 1876, 1885 — Brocard asks whether n!+1=m2n! + 1 = m^2n!+1=m2 has solutions other than n=4,5,7n = 4, 5, 7n=4,5,7.
  • 1913 — Ramanujan poses the same question (Question 469, J. Indian Math. Soc.).
  • 1993 — Overholt shows that, conditionally on (a weak form of) the abc conjecture, the equation has only finitely many solutions (Wikipedia summary).
  • 2000 — Berndt and Galway report a computer search finding no solutions other than n=4,5,7n = 4, 5, 7n=4,5,7 for n<109n < 10^9n<109.
  • Later searches — the search bound was extended further (Matson, to 101210^{12}1012; Epstein and Glickman, to 101510^{15}1015), again without new solutions.

No unconditional proof of finiteness is known.

Setting

For a natural number nnn, the factorial is n!=1⋅2⋯nn! = 1 \cdot 2 \cdots nn!=1⋅2⋯n, with 0!=10! = 10!=1. A Brown number pair is a pair (n,m)(n, m)(n,m) of natural numbers with

n!+1=m2.n! + 1 = m^2 .n!+1=m2.

The three known pairs are (4,5)(4, 5)(4,5), (5,11)(5, 11)(5,11) and (7,71)(7, 71)(7,71), since 25=5225 = 5^225=52, 121=112121 = 11^2121=112 and 5041=7125041 = 71^25041=712.

For the conditional milestone, the radical rad⁡(N)\operatorname{rad}(N)rad(N) of a natural number NNN is the product of the distinct primes dividing NNN. The abc conjecture asserts: for every ε>0\varepsilon > 0ε>0 there is Kε>0K_\varepsilon > 0Kε​>0 such that for all positive integers a,b,ca, b, ca,b,c with gcd⁡(a,b)=1\gcd(a, b) = 1gcd(a,b)=1 and a+b=ca + b = ca+b=c,

c<Kε rad⁡(abc)1+ε.c < K_\varepsilon \, \operatorname{rad}(abc)^{1+\varepsilon}.c<Kε​rad(abc)1+ε.

Formalization targets

Goal — Brocard's problem

{(n,m)∈N2:n!+1=m2}={(4,5), (5,11), (7,71)}.\{(n, m) \in \mathbb{N}^2 : n! + 1 = m^2\} = \{(4, 5),\ (5, 11),\ (7, 71)\}.{(n,m)∈N2:n!+1=m2}={(4,5), (5,11), (7,71)}.

This says both that the three known pairs are solutions and that there are no others.

Milestones

  1. Known solutions: 4!+1=524! + 1 = 5^24!+1=52, 5!+1=1125! + 1 = 11^25!+1=112, 7!+1=7127! + 1 = 71^27!+1=712.
  2. Berndt–Galway search bound: if n<109n < 10^9n<109 and n!+1=m2n! + 1 = m^2n!+1=m2, then n∈{4,5,7}n \in \{4, 5, 7\}n∈{4,5,7}.
  3. Overholt (conditional finiteness): if the abc conjecture holds, then {(n,m):n!+1=m2}\{(n, m) : n! + 1 = m^2\}{(n,m):n!+1=m2} is finite.

Significance

A resolution would settle a question open since 1876 and would be one of the rare complete solutions of a factorial Diophantine equation of this kind. The conditional finiteness result is a standard illustration of how the abc conjecture controls equations of the form n!+A=m2n! + A = m^2n!+A=m2.

For the formalization, the known-solutions milestone is a finite computation. The search-bound milestone is a large verified computation; a machine-checked certificate for it would be a reusable artifact. The conditional finiteness milestone formalizes a published argument that assumes the abc conjecture as a hypothesis. The goal itself is an open problem; none of these statements is known to have a machine-checked proof on this platform at the time of drafting.

Difficulty

Congruence obstructions cannot rule out large solutions: for every modulus MMM and every n≥Mn \ge Mn≥M one has n!≡0(modM)n! \equiv 0 \pmod Mn!≡0(modM), so n!+1≡1=12(modM)n! + 1 \equiv 1 = 1^2 \pmod Mn!+1≡1=12(modM) is a square modulo MMM. Local arguments alone therefore cannot close the problem. The known finiteness argument depends on the abc conjecture, which is itself unproved in the standard form used here. Computer searches only give lower bounds on any further solution.

Formalization scope

  • Numbers are natural numbers (ℕ); mmm ranges over N\mathbb{N}N, so the sign of mmm is not an issue. The factorial is Mathlib's Nat.factorial, with 0!=10! = 10!=1.
  • The goal is stated as an equality of sets of ordered pairs in N×N\mathbb{N} \times \mathbb{N}N×N, so it cannot be satisfied by proving only one inclusion.
  • The radical is defined as the product over the prime factors of NNN (so rad⁡(0)=rad⁡(1)=1\operatorname{rad}(0) = \operatorname{rad}(1) = 1rad(0)=rad(1)=1; the value at 000 never enters since a,b,c>0a, b, c > 0a,b,c>0).
  • The abc conjecture is a Prop-valued definition used as a hypothesis in the conditional milestone; it is not asserted anywhere. The exponent 1+ε1 + \varepsilon1+ε is a real power.
  • Overholt's published result assumes only a weak form of abc; the milestone assumes the standard form, which implies the weak form, so the milestone is a consequence of the published result.
  • All declarations live in the namespace Brocard.

Selected references

  • H. Brocard, Question 166, Nouv. Corresp. Math. 2 (1876), 287; Nouv. Ann. Math. (3) 4 (1885), 391.
  • S. Ramanujan, Question 469, J. Indian Math. Soc. 5 (1913), 59.
  • M. Overholt, The Diophantine equation n!+1=m2n! + 1 = m^2n!+1=m2, Bull. London Math. Soc. 25 (1993), 104.
  • B. C. Berndt and W. F. Galway, On the Brocard–Ramanujan Diophantine equation n!+1=m2n! + 1 = m^2n!+1=m2, Ramanujan J. 4 (2000), 41–42.
  • Erdős problem #398: https://www.erdosproblems.com/398
  • Brocard's problem, Wikipedia: https://en.wikipedia.org/wiki/Brocard%27s_problem
  • Formal Conjectures (Google DeepMind): https://github.com/google-deepmind/formal-conjectures
135 thms2 active usersReviewed
AlgebraAlgebraic Geometry·Captain: vatsj

Milnor conjecture (Voevodsky 2003), formalizedResearch Paper

Motivation

For a field FFF, two invariants built from very different data turn out to carry the same mod-2 information. One is Milnor K-theory KnM(F)K^M_n(F)KnM​(F), defined by generators and relations from the multiplicative group F×F^\timesF× alone. The other is Galois cohomology Hn(F,Z/2)H^n(F,\mathbb{Z}/2)Hn(F,Z/2), the continuous cohomology of the absolute Galois group of FFF. In 1970 Milnor considered a natural map KnM(F)/2→Hn(F,Z/2)K^M_n(F)/2 \to H^n(F,\mathbb{Z}/2)KnM​(F)/2→Hn(F,Z/2) in all degrees, verified that it is an isomorphism for several classes of fields, and remarked that he knew of no field where it fails (Milnor 1970). The statement that it is always an isomorphism when char⁡F≠2\operatorname{char} F \neq 2charF=2 became known as the Milnor conjecture. Its companion conjecture on quadratic forms was later deduced from it (Orlov–Vishik–Voevodsky 2007). Together they identify the graded Witt ring of quadratic forms, Galois cohomology mod 2, and K∗M(F)/2K^M_*(F)/2K∗M​(F)/2.

Timeline. The attributions below follow the introduction of Voevodsky 2003.

  • 1970: Milnor considers the map KnM(F)/2→Hn(F,Z/2)K^M_n(F)/2 \to H^n(F,\mathbb{Z}/2)KnM​(F)/2→Hn(F,Z/2) in all degrees and gives classes of fields where it is an isomorphism (Milnor 1970).
  • Bass–Tate (published 1973): the Kummer classes satisfy the Steinberg relation, so the Kummer map extends to a ring homomorphism on K∗M(F)K^M_*(F)K∗M​(F) (Bass–Tate 1973).
  • Degrees 0 and 1: the map is an isomorphism, by Kummer theory and Hilbert's Theorem 90.
  • 1981: Merkurjev proves degree 2 with 222 as the coefficient prime.
  • 1982: Merkurjev and Suslin extend degree 2 to every prime ℓ\ellℓ (Merkurjev–Suslin 1982).
  • Degree 3, ℓ=2\ell = 2ℓ=2: proved by Merkurjev–Suslin and, independently, by Rost.
  • 2003: Voevodsky proves all degrees, in every characteristic ≠2\neq 2=2 (Voevodsky 2003, Cor. 7.5), using the motivic Steenrod operations constructed in Voevodsky 2003b. This work was cited for his 2002 Fields Medal.
  • 2011: the analogue for odd primes, the Bloch–Kato conjecture, is proved (Voevodsky 2011); a book-length account is Haesemeyer–Weibel 2019.

Setting

Let FFF be a field with 2≠02 \neq 02=0 in FFF.

Milnor K-theory. For n≥0n \ge 0n≥0, KnM(F)K^M_n(F)KnM​(F) is the quotient of the nnn-fold tensor power (F×)⊗n(F^\times)^{\otimes n}(F×)⊗n, taken over Z\mathbb{Z}Z with F×F^\timesF× written additively, by the subgroup generated by the pure tensors a1⊗⋯⊗ana_1\otimes\cdots\otimes a_na1​⊗⋯⊗an​ in which some adjacent pair satisfies ai+ai+1=1a_i + a_{i+1} = 1ai​+ai+1​=1. This is the degree-nnn part of T(F×)/IT(F^\times)/IT(F×)/I, where III is the two-sided ideal generated by a⊗(1−a)a\otimes(1-a)a⊗(1−a). The class of a1⊗⋯⊗ana_1\otimes\cdots\otimes a_na1​⊗⋯⊗an​ is the symbol {a1,…,an}\{a_1,\dots,a_n\}{a1​,…,an​}. In particular K0M(F)=ZK^M_0(F) = \mathbb{Z}K0M​(F)=Z and K1M(F)=F×K^M_1(F) = F^\timesK1M​(F)=F×. In Lean these are MilnorK F n and symbol a for a : Fin n → Fˣ.

Galois cohomology. Let FsepF^{\mathrm{sep}}Fsep be a separable closure and GF=Gal⁡(Fsep/F)G_F = \operatorname{Gal}(F^{\mathrm{sep}}/F)GF​=Gal(Fsep/F) the absolute Galois group, a profinite group under the Krull topology. Hn(F,Z/2)H^n(F,\mathbb{Z}/2)Hn(F,Z/2) is the continuous cohomology Hctsn(GF,Z/2)H^n_{\mathrm{cts}}(G_F,\mathbb{Z}/2)Hctsn​(GF​,Z/2) with trivial action, computed from GFG_FGF​-invariant continuous homogeneous cochains. In Lean this is H F n, Mathlib's continuousCohomology n of the trivial representation.

The Galois symbol. For a∈F×a \in F^\timesa∈F× fix a∈Fsep\sqrt a \in F^{\mathrm{sep}}a​∈Fsep. The Kummer character χa:GF→Z/2\chi_a : G_F \to \mathbb{Z}/2χa​:GF​→Z/2 is χa(σ)=0\chi_a(\sigma) = 0χa​(σ)=0 if σ(a)=a\sigma(\sqrt a) = \sqrt aσ(a​)=a​ and 111 otherwise. It is a continuous homomorphism representing the Kummer class δa∈H1\delta a \in H^1δa∈H1. The Galois symbol of (a1,…,an)(a_1,\dots,a_n)(a1​,…,an​) is the class of the homogeneous cocycle

(x0,…,xn) ⟼ ∏j=1n(χaj(xj)−χaj(xj−1)),(x_0,\dots,x_n)\ \longmapsto\ \prod_{j=1}^{n}\bigl(\chi_{a_j}(x_j)-\chi_{a_j}(x_{j-1})\bigr),(x0​,…,xn​) ⟼ j=1∏n​(χaj​​(xj​)−χaj​​(xj−1​)),

the homogeneous form of (σ1,…,σn)↦χa1(σ1)⋯χan(σn)(\sigma_1,\dots,\sigma_n) \mapsto \chi_{a_1}(\sigma_1)\cdots\chi_{a_n}(\sigma_n)(σ1​,…,σn​)↦χa1​​(σ1​)⋯χan​​(σn​), i.e. the cup product δa1∪⋯∪δan\delta a_1\cup\cdots\cup\delta a_nδa1​∪⋯∪δan​. In Lean this is galoisSymbol a.

Formalization targets

Goal: the Milnor conjecture (Voevodsky 2003, Corollary 7.5)

For every field FFF with char⁡F≠2\operatorname{char} F \neq 2charF=2 and every n≥0n \ge 0n≥0 there is a homomorphism

φ:KnM(F)→Hn(F,Z/2),φ{a1,…,an}=δa1∪⋯∪δan,\varphi : K^M_n(F) \to H^n(F,\mathbb{Z}/2),\qquad \varphi\{a_1,\dots,a_n\} = \delta a_1\cup\cdots\cup\delta a_n,φ:KnM​(F)→Hn(F,Z/2),φ{a1​,…,an​}=δa1​∪⋯∪δan​,

which is surjective and whose kernel is exactly 2 KnM(F)2\,K^M_n(F)2KnM​(F).

Since symbols generate KnM(F)K^M_n(F)KnM​(F), such a φ\varphiφ is unique; it is the norm residue homomorphism. The statement is therefore equivalent to KnM(F)/2≅Hn(F,Z/2)K^M_n(F)/2 \cong H^n(F,\mathbb{Z}/2)KnM​(F)/2≅Hn(F,Z/2) via the norm residue map. Its existence, i.e. the fact that the Steinberg relations map to zero, is part of the claim.

Significance

The result itself. The theorem gives a presentation of mod-2 Galois cohomology by generators and relations: every class is a sum of cup products of degree-one classes, and every relation among such products comes from Steinberg relations and multiples of 2. With Orlov–Vishik–Voevodsky 2007 it yields Milnor's conjecture on quadratic forms, which classifies quadratic forms up to Witt equivalence by their Galois-cohomological invariants.

Formalizing it. The theorem is proved but not formalized. At the time of writing, Mathlib has neither Milnor K-theory nor cup products in group or continuous cohomology, and has Hilbert 90 only for finite Galois extensions. This mission's definitions provide a sorry-free Galois symbol in Mathlib's continuous cohomology, which already makes the degree 0 and degree 1 cases (Kummer theory) meaningful targets. A complete development would formalize the IHES proof, including motivic cohomology with Z/2\mathbb{Z}/2Z/2 coefficients and the motivic Steenrod algebra. No part of that is currently available in Lean. Related existing work: on this platform, a graded cup product (groupCohomology.exists_isGradedCupProduct) and a Kummer theory and Hilbert 90 for level-constant cocycles have been formalized on top of Mathlib's discrete groupCohomology. The cup product is for discrete groups, and the Kummer and Hilbert 90 results use finite-level hypotheses in place of continuity, so none of them transfers directly to continuousCohomology.

Difficulty

Degrees 0 and 1 follow from Kummer theory and Hilbert 90. Degree 2 is Merkurjev's theorem, whose proof goes through the K-theory of Severi–Brauer varieties. No argument internal to Galois cohomology or K-theory of fields is known in higher degrees. The known proof reformulates the statement as a vanishing theorem for motivic cohomology of fields, the "Hilbert 90" property for weight nnn. It then argues by induction on nnn through geometry over FFF: splitting varieties of symbols (Pfister quadrics), their motives, and cohomology operations on motivic cohomology. Each of these is a substantial theory, none of it exists in Mathlib, and the induction passes through statements about arbitrary smooth varieties, not only fields.

Formalization scope

Scope. The target is the Milnor conjecture, i.e. the prime 222 with coefficients Z/2≅μ2\mathbb{Z}/2 \cong \mu_2Z/2≅μ2​. The Bloch–Kato conjecture for odd primes is out of scope.

Conventions.

  • The field is F : Type, universe 0. Mathlib's continuousCohomology requires the coefficient module to live in the universe of the group. For FFF in a higher universe this forces ULift (ZMod 2), for which the needed Module and ContinuousSMul instances are not available as global instances. Universe polymorphism is not part of this mission. It does not follow by plain transport, since a field in a higher universe need not be isomorphic to any field in Type; one route is a limit argument, using that both sides commute with directed unions of fields and that every field is the directed union of its countable subfields, each isomorphic to a field in Type.
  • The hypothesis char⁡F≠2\operatorname{char} F \neq 2charF=2 is [NeZero (2 : F)].
  • HnH^nHn is Mathlib's continuousCohomology, built from homogeneous cochains, with Z/2\mathbb{Z}/2Z/2 as a trivial representation of GFG_FGF​ with the Krull topology.
  • KnM(F)K^M_n(F)KnM​(F) is defined one degree at a time, not as a graded ring.
  • "Kernel =2KnM= 2K^M_n=2KnM​" means φ(x)=0  ⟺  ∃y, x=2y\varphi(x)=0 \iff \exists y,\ x = 2yφ(x)=0⟺∃y, x=2y.

Ruling out trivializations. The Galois symbol is not a free parameter. It is a fixed, sorry-free definition, and the existence of φ\varphiφ with the prescribed values on symbols is part of the goal. Neither can be chosen to make the statement vacuous.

Route. Reductions should follow Voevodsky 2003 together with Voevodsky 2003b. That route avoids resolution of singularities and works in every characteristic ≠2\neq 2=2. The following rely on resolution of singularities (or on characteristic-0 reductions) and should not be used as inputs:

  • Mazza–Voevodsky–Weibel (MVW 2006), results 16.24, 16.25 and 20.1, and the cdh-topology and compactly-supported-motive material;
  • the original Suslin–Voevodsky paper relating Bloch–Kato to Beilinson–Lichtenbaum (Suslin–Voevodsky 2000); use Haesemeyer–Weibel 2019, Chapter 2, instead;
  • Haesemeyer–Weibel Part II, and their reduction to characteristic 0 (Lemma 1.3);
  • Voevodsky's 1995–96 preprints on the Milnor conjecture.

Infrastructure needed and reusable. A complete development needs:

  • the ring structure on K∗M(F)K^M_*(F)K∗M​(F) (cf. Carlier's KMilnorWitt for Milnor–Witt K-theory);
  • cup products in continuous cohomology;
  • Hilbert 90 for profinite Galois groups;
  • Galois cohomology as étale cohomology of Spec⁡F\operatorname{Spec} FSpecF;
  • the Nisnevich topology;
  • presheaves with transfers, motivic complexes and motivic cohomology;
  • motivic Steenrod operations;
  • motives of Pfister quadrics.

Most of this is reusable well beyond the mission. The homogeneous-cochain construction in the definition files, which turns an invariant continuous cocycle Gn+1→MG^{n+1}\to MGn+1→M into a class in Mathlib's continuousCohomology, applies to any locally compact group with trivial coefficients. Contributions of any of these components, and of the degree 0 and 1 cases, are welcome.

Selected references

  • V. Voevodsky, Motivic cohomology with Z/2\mathbb{Z}/2Z/2-coefficients, Publ. Math. IHÉS 98 (2003), 59–104. https://doi.org/10.1007/s10240-003-0010-6
  • V. Voevodsky, Reduced power operations in motivic cohomology, Publ. Math. IHÉS 98 (2003), 1–57. https://doi.org/10.1007/s10240-003-0009-z
  • J. Milnor, Algebraic K-theory and quadratic forms, Invent. Math. 9 (1970), 318–344. https://doi.org/10.1007/BF01425486
  • H. Bass, J. Tate, The Milnor ring of a global field, in Algebraic K-theory II, Lecture Notes in Math. 342, Springer, 1973. https://doi.org/10.1007/BFb0073733
  • A. S. Merkurjev, A. A. Suslin, K-cohomology of Severi–Brauer varieties and the norm residue homomorphism, Math. USSR Izv. 21 (1983). https://doi.org/10.1070/IM1983v021n02ABEH001793
  • D. Orlov, A. Vishik, V. Voevodsky, An exact sequence for K∗M/2K^M_*/2K∗M​/2 with applications to quadratic forms, Ann. of Math. 165 (2007), 1–13. https://doi.org/10.4007/annals.2007.165.1
  • V. Voevodsky, On motivic cohomology with Z/l\mathbb{Z}/lZ/l-coefficients, Ann. of Math. 174 (2011), 401–438. https://doi.org/10.4007/annals.2011.174.1.11
  • C. Haesemeyer, C. Weibel, The Norm Residue Theorem in Motivic Cohomology, Annals of Math. Studies 200, Princeton, 2019. https://doi.org/10.1515/9780691189635
  • C. Mazza, V. Voevodsky, C. Weibel, Lecture Notes on Motivic Cohomology, Clay Math. Monographs 2, AMS, 2006. https://www.claymath.org/wp-content/uploads/2022/03/Motivic-Cohomology.pdf
  • A. Suslin, V. Voevodsky, Bloch–Kato conjecture and motivic cohomology with finite coefficients, in The Arithmetic and Geometry of Algebraic Cycles, NATO Sci. Ser. C 548, Kluwer, 2000. https://doi.org/10.1007/978-94-011-4098-0_5
14 thms2 active usersReviewed
Algebra·Captain: tomasz

Philippon: Multiplicity estimates in commutative algebraic groupsResearch Paper

Why multiplicity estimates matter

Formalization status, 10 October 2026: all eight milestones are complete. Both corrected addenda are Proved. The subgroup upper Hilbert estimate has an accepted proof with eight Proved inputs and no Open dependencies (submission 07198c4c-ea10-4c9a-89b8-b4a5319c40b5). Together with the accepted sharp contact-rank and ambient lower Hilbert bounds, this discharges every dependency of the corrected converse. The corrected 26-part full-paper goal remains Open, with exactly two frontier leaves: quadratic parameter-stalk germs and the local complex model for the closure action. The common-shift forward conclusion, quadratic first-input addition hypothesis in the converse, all constants and degree thresholds, and all 24 unaffected goal clauses are unchanged. The separately published Chardin theorem in arbitrary characteristic remains Open; it is no longer required by this mission proof.

An auxiliary polynomial in a transcendence proof is constructed to vanish to high order at many points. A multiplicity estimate limits how often that can happen without a geometric reason: a positive-dimensional algebraic subgroup can make the apparent vanishing conditions dependent. Such estimates are used to turn analytic approximations into algebraic-independence conclusions. The theory applies to products of commutative algebraic groups with both archimedean and nonarchimedean analytic directions.

The mission's objective is a faithful formalization of the complete 1986 paper, Patrice Philippon's Lemmes de zéros dans les groupes algébriques commutatifs, including every theorem, corollary, proposition, lemma, definition, and mathematical supporting claim. All results remain required whether or not a current application uses them. Necessary source corrections are explicit and their counterexamples remain part of the completion goal. The author's 1987 corrections are applied transparently, and the addendum's additional results are recorded separately (original, errata and addenda).

Groups, analytic directions, and geometric degree

Let K be the complex field or the completed algebraic closure of the field of ℓ-adic numbers for a prime ℓ, as in the source. Let G be a product of finitely many commutative algebraic groups G₁,…,Gᵣ over K, with each factor embedded as a quasi-projective variety in a projective space. Write n for the sum of their dimensions. A point of the product embedding has one block of homogeneous coordinates for each factor.

A nonzero multihomogeneous polynomial P has a degree Dᵢ in its i-th block of coordinates. Its zeros define a hypersurface of the ambient product of projective spaces. An analytic subgroup A is locally parametrized by an analytic homomorphism from a finite-dimensional additive K-space. The order of P along A at a group point g is the vanishing order of P after composing local projective coordinates with the translated parametrization. This definition must be independent of the choice of nonzero local coordinate representatives.

Let Σ be a finite set of group points containing the identity. Its n-fold sumset Σ(n) consists of all sums of n, not necessarily distinct, elements of Σ; Σ(0) is the singleton identity. For a connected algebraic subgroup H, the integer s is the analytic codimension of A∩H in A. The expression |(Σ+H)/H| counts distinct H-cosets meeting Σ. Codimension concerns the analytic tangent dimension; it does not assert that the point-set intersection is finite.

The source's Hilbert degree form ℋ(V;D₁,…,Dᵣ) is (dim V)! times the highest homogeneous part of the multigraded Hilbert–Samuel polynomial of the projective closure of V, evaluated at the degrees. It must be constructed from the coordinate ring, rather than supplied as an arbitrary numerical function. For one projective factor it is deg(V)D^(dim V). These definitions are fixed in §§2–3 of the original paper.

Formalization targets

The completion target is all results of the paper, with an aggregate goal that requires their individual formal statements. Theorem 2.1 is one milestone within that target. For each fixed family of embedded group factors, it chooses positive integers cᵢ, each depending only on its corresponding embedding. These constants precede the analytic subgroup, the finite sampling set, the polynomial degrees, the polynomial, and the contact parameter T. If P has order at least nT+1 along A at every point of Σ(n), there is a connected algebraic subgroup H with

(T+ss) ∣(Σ+H)/H∣ H(H;D1,…,Dr)≤H(G;c1D1,…,crDr).\binom{T+s}{s}\, |(\Sigma+H)/H|\, \mathcal H(H;D_1,\ldots,D_r) \leq \mathcal H(G;c_1D_1,\ldots,c_rD_r).(sT+s​)∣(Σ+H)/H∣H(H;D1​,…,Dr​)≤H(G;c1​D1​,…,cr​Dr​).

The same H is contained in a translate of the zero locus of P on G and is incompletely defined by equations of multidegrees at most (c₁D₁,…,cᵣDᵣ): it is an irreducible component of the common zero locus in G of equations with those degree bounds. Both geometric conclusions are part of the target. A formalization retaining only the displayed numerical inequality would omit part of the original result.

The 1986 paper has 13 numbered results. Section 2 contains Theorem 2.1 and Corollaries 2.2–2.3, including the one-dimensional analytic result and the result for disjoint group factors. Section 3 contains Lemmas 3.1–3.2, Proposition 3.3 and Lemma 3.4. Section 4 contains Propositions 4.3–4.4, Lemmas 4.5–4.6 and Proposition 4.7. Section 5 contains Lemma 5.1. Every clause of these statements belongs to the mission.

Definitions 3.5, 4.1 and 4.2, the unnumbered setup, the internal Facts A–E, the counterexample after Proposition 3.3, and the mathematical claims in remarks also require coverage. Source numbers and page references identify the correspondence between the prose and Lean declarations. The two 1987 addendum targets are explicitly corrected variants. The forward statement assumes ambient connectedness and allows one common shift v∈Gv\in Gv∈G, so g+v+H⊆{P=0}∩Gg+v+H\subseteq\{P=0\}\cap Gg+v+H⊆{P=0}∩G for every sampled ggg, with the same connected subgroup HHH satisfying incomplete definition and the full coset-count inequality. Its embedding-dependent constants are chosen before the sample and polynomial. This is not an exact transcription of the printed strengthening. The converse assumes ambient connectedness and explicit local addition formulas of degree at most two in the first input for every embedded factor. Its subgroup may remain disconnected; the degree threshold, constant 1/(4nn!)1/(4^n n!)1/(4nn!), and polynomial nonzero somewhere on GGG are unchanged. All original sampling and contact assumptions remain. No desired estimate is encoded as a geometric assumption.

Eight milestones and the completion goal

The completion goal is PhilipponMultiplicity.paper_results_corrected_erratum, a conjunction of 26 concrete propositions. This is a collection goal requiring the source statements and the additional mathematical claims in the coverage record. It is separate from the paper's original Theorem 2.1, which remains individually named and reusable.

The mission has eight milestones; seven are currently Proved:

SourceMilestoneStatus
Theorem 2.1General multiplicity estimate, with every geometric and numerical conclusion.Proved
Corollary 2.2One-dimensional analytic-subgroup consequence.Proved
Corollary 2.3Consequence for disjoint group factors and sampling grids.Proved
Proposition 3.3Multigraded intersection bounds, including the multiplicity-sensitive bound.Proved
Proposition 4.7Binomial lower bound for contact multiplicity.Proved
Lemma 5.1Stabilizer construction and the geometric counting estimate.Proved
1987 addendum, p. 398Corrected common-shift vanishing in a connected ambient group.Proved
1987 addendum, p. 398Connected converse with first-input addition degree at most two.Open

The full statement package has 27 compiled theorem statements: all thirteen numbered results, both addenda, eleven supporting or correction targets, and the aggregate goal. The fourteen original admission-free definition bundles and one erratum supplement supply their actual geometric and algebraic objects. All 41 original statement and definition items have independent blind readbacks. The eight milestones above retain their existing identities.

The supporting clauses include Hilbert-polynomial existence, primary components and Facts A–E; the geometric interpretation of mixed degree; the actual counterexample after Proposition 3.3; translation operators and their comparison with intrinsic ideals; contact invariance; translation-invariance and embedding remarks; the component/stabilizer construction; counting estimates; and the exact Masser–Wüstholz Theorem I consequence claimed on p.361. Proof-internal recursive ideals and tangent/exponential arguments belong to their corresponding theorem proofs.

Source corrections are visible for review. Lemma 3.1 and Corollary 2.2 require positive equation degrees; explicit zero-degree counterexamples are required goal clauses. Both addenda require positive ambient dimension; the goal also requires their dimension-zero counterexamples. The three-generator ideal printed on p.370 is nonradical, contrary to the printed word “prime”; its valid degree-four versus length-six counterexample is preserved, together with an explicit nilpotent witness. Connectedness is stated in the translation-invariance and Lange reembedding remarks. These are mathematical corrections documented during the source comparison, beyond the author's 1987 errata. They are not silent changes to the source.

Existing completed proofs and all 24 unaffected goal clauses are retained. The corrected forward addendum is Proved. The repaired converse and the replacement collection goal remain Open; two general geometry lemmas also remain on the frontier. The existing proved local-algebra references remain reusable ingredients.

What a completed formalization enables

The output is a reusable development of the paper's multigraded commutative algebra, translation and differential operators, geometric multiplicity theory, and zero estimates. All source results are required for completion. A downstream Weierstrass application can consume a specialization of Theorem 2.1; its needs do not determine the scope or completion of this mission (example application).

These are established mathematical results whose proofs are being formalized. The complete original Theorem 2.1 has an accepted proof. The selected Weierstrass application uses individually named Philippon results, with its application-specific model and subgroup bridges proved in the Senthil mission. The remaining general results stay required even though that application is complete.

The foundational difficulty

Vanishing conditions need not be independent: many can occur on the same component or on translates with a nontrivial stabilizer. Counting coefficients of P therefore does not bound their total multiplicity. The development needs geometric degree for actual components, multiplicities measured by lengths of localized quotient rings, and uniform control of translations in fixed projective embeddings.

Proposition 3.3 supplies multigraded intersection bounds, Proposition 4.7 controls contact multiplicity, and Lemma 5.1 connects the stabilizer to the geometric counting estimate. These three results and Theorem 2.1 now have checked proofs. The remaining corollaries, general geometric and analytic claims, examples and addenda are independent deliverables. Application-specific contact results do not discharge the remaining general statements.

Formalization scope

The declarations use the namespace PhilipponMultiplicity. Source statements retain their conclusions, constants, quantifier order, and complex or ℓ-adic scope, with the visible boundary and wording corrections listed above. Intermediate specializations are labelled as such and do not discharge a more general source result. Natural-number and zero-degree conventions have been compared with the original scans; the discovered failures and corrected hypotheses are recorded explicitly for human review. Corrections and inferred conventions must be documented rather than silently changing the source.

The required definitions include embedded commutative algebraic groups and their connected subgroups; products of projective spaces and multihomogeneous coordinate rings; analytic local homomorphisms and intrinsic contact order; multigraded Hilbert polynomials and their degree forms; local component lengths; and finite coset counts. No model may assume the desired multiplicity inequality, hide it as a structure field, or replace geometric degree by an unconstrained function.

The 26 individual target statements, replacement collection goal, original definition bundles, and erratum supplement compile in Lean 4.33.1 with Mathlib revision 0df444a360eaa60ab8c11dca51a86af692955474. Source comparisons and independent readbacks document the fixed statements and their explicit corrections. The goal remains the concrete 26-part full-paper collection. The completed proofs supply reusable Hilbert theory, primary-component multiplicities, polynomial differential operators, bounded translation atlases and the Section 5 construction. Contributions to the remaining targets, including results unused by Senthil, complete the original scope.

The previous aggregate, original sampled-translates addendum, and original converse remain available with their prior submissions and disproofs. The replacement statements changed the mission goal explicitly before proofs were supplied. The corrected common-shift forward statement has since received an accepted proof.

Selected references

  • P. Philippon, Lemmes de zéros dans les groupes algébriques commutatifs, Bulletin de la Société Mathématique de France 114 (1986), 355–383. DOI and original paper.
  • P. Philippon, Errata et addenda à « Lemmes de zéros dans les groupes algébriques commutatifs », Bulletin de la Société Mathématique de France 115 (1987), 397–398. DOI and addendum.
  • Senthil Kumar K, Algebraic independence of values of Weierstrass elliptic and zeta functions, Proceedings of the Edinburgh Mathematical Society (2026), including Robert Tubbs's appendix. DOI.
296 thms2 active users
Algebra·Captain: Lucas

Schanuel's ConjectureOpen Problem

Motivation

Almost every classical transcendence theorem is a statement about the interaction between the additive structure of C\mathbb{C}C and the exponential function. Hermite proved in 1873 that eee is transcendental, Lindemann in 1882 that eαe^{\alpha}eα is transcendental for every nonzero algebraic α\alphaα — hence that π\piπ is transcendental and the circle cannot be squared — and Weierstrass in 1885 extended this to the linear independence of eα1,…,eαne^{\alpha_1},\dots,e^{\alpha_n}eα1​,…,eαn​ over Q‾\overline{\mathbb{Q}}Q​ for distinct algebraic αi\alpha_iαi​. Gelfond and Schneider settled Hilbert's seventh problem in 1934, and Baker's 1966 theorem on linear forms in logarithms made the subject effective.

Schanuel's conjecture, formulated by Stephen Schanuel in the 1960s and first published by Lang (Introduction to Transcendental Numbers, Addison–Wesley, 1966, Chapter III), is a single statement that contains all of these as special cases, together with a large number of statements that remain open — for instance that eee and π\piπ are algebraically independent, or that e+πe + \pie+π is irrational. No case of it is known beyond those already covered by the Lindemann–Weierstrass theorem or by Baker's theorem.

Timeline, with the hypotheses each result actually assumes:

  • 1882, Lindemann: eαe^{\alpha}eα is transcendental for algebraic α≠0\alpha \neq 0α=0.
  • 1885, Weierstrass: for pairwise distinct algebraic α1,…,αn\alpha_1,\dots,\alpha_nα1​,…,αn​, the values eα1,…,eαne^{\alpha_1},\dots,e^{\alpha_n}eα1​,…,eαn​ are linearly independent over Q‾\overline{\mathbb{Q}}Q​.
  • 1934, Gelfond and Schneider, independently: if λ≠0\lambda \neq 0λ=0 is a logarithm of an algebraic number and β\betaβ is algebraic and irrational, then eβλe^{\beta\lambda}eβλ is transcendental.
  • 1960s, Siegel, Lang and Ramachandra: the six exponentials theorem, unconditional; the analogous four exponentials statement is still open.
  • 1966, Baker: if logarithms λ1,…,λn\lambda_1,\dots,\lambda_nλ1​,…,λn​ of algebraic numbers are linearly independent over Q\mathbb{Q}Q, then 1,λ1,…,λn1,\lambda_1,\dots,\lambda_n1,λ1​,…,λn​ are linearly independent over Q‾\overline{\mathbb{Q}}Q​.
  • 1971, Ax: the function-field analogue of Schanuel's conjecture, for formal power series and, more generally, differential fields of characteristic zero.

Setting

Write exp⁡\expexp for the complex exponential function. A tuple z1,…,znz_1,\dots,z_nz1​,…,zn​ of complex numbers is linearly independent over Q\mathbb{Q}Q when the only rationals q1,…,qnq_1,\dots,q_nq1​,…,qn​ with ∑iqizi=0\sum_i q_i z_i = 0∑i​qi​zi​=0 are q1=⋯=qn=0q_1 = \dots = q_n = 0q1​=⋯=qn​=0; here C\mathbb{C}C is viewed as a vector space over Q\mathbb{Q}Q.

For a subset S⊆CS \subseteq \mathbb{C}S⊆C, let Q(S)\mathbb{Q}(S)Q(S) denote the subfield of C\mathbb{C}C generated by SSS over Q\mathbb{Q}Q. The transcendence degree trdeg⁡QQ(S)\operatorname{trdeg}_{\mathbb{Q}} \mathbb{Q}(S)trdegQ​Q(S) is the cardinality of a transcendence basis of Q(S)\mathbb{Q}(S)Q(S) over Q\mathbb{Q}Q: the largest number of elements of Q(S)\mathbb{Q}(S)Q(S) that are algebraically independent over Q\mathbb{Q}Q. A number xxx is transcendental over Q\mathbb{Q}Q when no nonzero polynomial with rational coefficients vanishes at xxx, and numbers x1,…,xmx_1,\dots,x_mx1​,…,xm​ are algebraically independent over Q\mathbb{Q}Q when no nonzero polynomial in mmm variables with rational coefficients vanishes at (x1,…,xm)(x_1,\dots,x_m)(x1​,…,xm​).

Formalization targets

Goal

z1,…,zn linearly independent over Q  ⟹  trdeg⁡QQ(z1,…,zn, ez1,…,ezn)  ≥  n.z_1,\dots,z_n \text{ linearly independent over } \mathbb{Q} \;\Longrightarrow\; \operatorname{trdeg}_{\mathbb{Q}} \mathbb{Q}\bigl(z_1,\dots,z_n,\,e^{z_1},\dots,e^{z_n}\bigr) \;\ge\; n .z1​,…,zn​ linearly independent over Q⟹trdegQ​Q(z1​,…,zn​,ez1​,…,ezn​)≥n.

The goal fixes no numerical constant and no special shape for the ziz_izi​: it asserts only the inequality, for every nnn and every Q\mathbb{Q}Q-linearly independent tuple. The case n=0n = 0n=0 is vacuous and the conclusion is a bound on a cardinal, so nothing is hidden in a degenerate convention.

Milestones

The milestone list consists of the landmark unconditional theorems that Schanuel's conjecture generalizes, the known function-field analogue, and one conditional corollary that records what the conjecture buys:

  • Hermite–Lindemann (1882): α\alphaα algebraic and nonzero ⇒\Rightarrow⇒ eαe^{\alpha}eα transcendental.
  • Lindemann–Weierstrass (1885): ∑iβieαi≠0\sum_i \beta_i e^{\alpha_i} \neq 0∑i​βi​eαi​=0 for distinct algebraic αi\alpha_iαi​ and algebraic βi\beta_iβi​ not all zero.
  • Gelfond–Schneider (1934): λ≠0\lambda \neq 0λ=0 a logarithm of an algebraic number, β\betaβ algebraic irrational ⇒\Rightarrow⇒ eβλe^{\beta\lambda}eβλ transcendental.
  • Six exponentials theorem: x1,x2x_1,x_2x1​,x2​ and y1,y2,y3y_1,y_2,y_3y1​,y2​,y3​ each Q\mathbb{Q}Q-linearly independent ⇒\Rightarrow⇒ at least one of the six numbers exiyje^{x_i y_j}exi​yj​ is transcendental.
  • Baker (1966): Q\mathbb{Q}Q-linearly independent logarithms of algebraic numbers, together with 111, are linearly independent over Q‾\overline{\mathbb{Q}}Q​.
  • Ax (1971), power series form: trdeg⁡CC(f1,…,fn,g1,…,gn)≥n+1\operatorname{trdeg}_{\mathbb{C}} \mathbb{C}(f_1,\dots,f_n,g_1,\dots,g_n) \ge n+1trdegC​C(f1​,…,fn​,g1​,…,gn​)≥n+1 when gi′=fi′gig_i' = f_i' g_igi′​=fi′​gi​, the gig_igi​ are units, and no nontrivial Q\mathbb{Q}Q-linear combination of the fif_ifi​ is constant.
  • Conditional corollary: Schanuel's conjecture implies that eee and π\piπ are algebraically independent over Q\mathbb{Q}Q.

Significance

Schanuel's conjecture decides, in one stroke, a long list of questions that are individually open: the algebraic independence of eee and π\piπ, the irrationality of e+πe+\pie+π and of eπe\pieπ, the transcendence of eee^{e}ee and ππ\pi^{\pi}ππ, the four exponentials conjecture, and — combined with work of Macintyre and Wilkie — the decidability of the first-order theory of the real exponential field. Its restriction to algebraic ziz_izi​ is exactly the Lindemann–Weierstrass theorem, and its restriction to ziz_izi​ whose exponentials are algebraic is exactly Baker's theorem, so the conjecture is a common generalization of the two main unconditional pillars of the subject.

On the formalization side, the state of the art in Lean's mathematical library is modest relative to this history: the analytic core of the Lindemann–Weierstrass argument is present, but the Hermite–Lindemann theorem, the Lindemann–Weierstrass theorem, the transcendence of π\piπ, the Gelfond–Schneider theorem, the six exponentials theorem and Baker's theorem are not available as usable statements in the pinned environment. Each milestone here is therefore a genuine formalization project with a known mathematical proof, and none of them is a restatement of an existing library result. The goal theorem itself is open mathematically; the realistic contributions to it are reductions — implications between the goal and other statements — and closing the milestones that the conjecture generalizes.

Difficulty

The obvious approach to any single case — build an auxiliary function with many zeros, bound its derivatives, and derive a contradiction from an integrality argument — is the method behind every result on the milestone list, and it is exactly what fails for the conjecture in general. Those proofs need the exponentials, or the arguments, to be algebraic somewhere, so that heights and denominators can be controlled; for a general Q\mathbb{Q}Q-linearly independent tuple there is no arithmetic input at all, and no known construction produces the required auxiliary function. Ax's theorem shows that the differential-algebraic shadow of the statement is true, but its proof uses the derivation on the function field and has no arithmetic counterpart. A solver should not expect the conjecture itself to fall to a variation of the classical method.

Formalization scope

All statements are over C\mathbb{C}C, with the complex exponential. Tuples are indexed by Fin n, ℚ-linear independence is Mathlib's LinearIndependent ℚ, transcendence degree is Mathlib's Algebra.trdeg, the generated field is IntermediateField.adjoin, and the inequality is between cardinals, so the goal reads (n : Cardinal) ≤ Algebra.trdeg ℚ (adjoin ℚ (Set.range z ∪ Set.range (Complex.exp ∘ z))). Algebraicity is IsAlgebraic ℚ, transcendence is Transcendental ℚ, and algebraic independence is AlgebraicIndependent ℚ.

There is no trivializing formalization here: the hypothesis LinearIndependent ℚ z is satisfiable for every nnn, so the goal is not vacuous, and the conclusion is an inequality of cardinals rather than a statement about a definition introduced for this mission.

The Ax milestone is stated for formal power series in one variable over C\mathbb{C}C: the exponential relation is expressed as the differential equation gi′=fi′gig_i' = f_i' g_igi′​=fi′​gi​ with PowerSeries.derivative, and the conclusion bounds Algebra.trdeg ℂ of the ℂ-subalgebra generated by the fif_ifi​ and the gig_igi​. The conditional corollary takes the full statement of Schanuel's conjecture as an explicit hypothesis, so it is provable unconditionally as stated.

Infrastructure that a complete development needs, and that is reusable well beyond this mission: Siegel's lemma and height machinery for algebraic numbers, the standard auxiliary-function construction with derivative bounds, and interface lemmas relating Algebra.trdeg, AlgebraicIndependent and Transcendental. Reductions between the milestones — for example deriving Hermite–Lindemann from Lindemann–Weierstrass, or the six exponentials theorem from a general Baker-type statement — are welcome as sketches.

Selected references

  • S. Lang, Introduction to Transcendental Numbers, Addison–Wesley, 1966. (Schanuel's conjecture is stated in Chapter III.)
  • A. Baker, Linear forms in the logarithms of algebraic numbers I, Mathematika 13 (1966), 204–216. https://doi.org/10.1112/S0025579300003971
  • J. Ax, On Schanuel's conjectures, Annals of Mathematics 93 (1971), 252–268. https://doi.org/10.2307/1970774
  • A. Macintyre and A. J. Wilkie, On the decidability of the real exponential field, in Kreiseliana, A K Peters, 1996, 441–467.
  • M. Waldschmidt, Diophantine Approximation on Linear Algebraic Groups, Springer, 2000.
  • Wikipedia, Schanuel's conjecture. https://en.wikipedia.org/wiki/Schanuel%27s_conjecture
39 thms2 active usersReviewed
Pure Mathematics·Captain: Lucas

Schinzel's Hypothesis HOpen Problem

Motivation

Almost every classical question about prime values of polynomials is a special case of one statement. Are there infinitely many twin primes? Infinitely many primes of the form n2+1n^2+1n2+1? Infinitely many Sophie Germain primes ppp with 2p+12p+12p+1 prime? Each asks whether a fixed finite list of integer polynomials takes prime values simultaneously infinitely often. Schinzel's Hypothesis H (A. Schinzel and W. Sierpiński, 1958) is the single conjecture that predicts "yes" in all these cases, subject to the two obvious obstructions: a polynomial that factors cannot be prime infinitely often, and neither can a family whose product is always divisible by some fixed prime.

Timeline.

  • 1837 — Dirichlet proves the degree-one, single-polynomial case: if gcd⁡(a,b)=1\gcd(a,b)=1gcd(a,b)=1 and a>0a>0a>0, then an+ban+ban+b is prime for infinitely many nnn.
  • 1857 — Bunyakovsky states the single-polynomial case for arbitrary degree. It is open for every fixed polynomial of degree ≥2\ge 2≥2; not one instance, not even n2+1n^2+1n2+1, is known.
  • 1904 — Dickson states the case of arbitrarily many linear polynomials.
  • 1958 — Schinzel and Sierpiński state Hypothesis H in the generality used here (Acta Arith. 4 (1958), 185–208).
  • 1962 — Bateman and Horn give the conjectural asymptotic count of such n≤Nn \le Nn≤N, refining Hypothesis H to a quantitative form (Math. Comp. 16 (1962), 363–367).
  • 1978 — Iwaniec proves that n2+1n^2+1n2+1 has at most two prime factors infinitely often; the sieve barrier that blocks "exactly one" has not been broken.
  • 2004 — Green and Tao prove the analogous simultaneous-prime statement for systems of linear forms of finite complexity, which yields arbitrarily long arithmetic progressions of primes but does not cover Dickson's conjecture in full (the pair nnn, n+2n+2n+2 has infinite complexity).
  • 2013 — Zhang, and then Maynard and Tao, establish bounded gaps between primes, i.e. that some admissible pair {n+h1,n+h2}\{n+h_1, n+h_2\}{n+h1​,n+h2​} is simultaneously prime infinitely often — but the method does not identify which pair.

Hypothesis H itself remains open in every case that is not covered by Dirichlet's theorem.

Setting

Work in the ring Z[X]\mathbb{Z}[X]Z[X] of polynomials with integer coefficients. Fix a finite set F⊆Z[X]\mathcal{F} \subseteq \mathbb{Z}[X]F⊆Z[X] of polynomials fff, each subject to the Bunyakovsky condition:

  • deg⁡f≥1\deg f \ge 1degf≥1;
  • the leading coefficient of fff is positive;
  • fff is irreducible in Z[X]\mathbb{Z}[X]Z[X].

Irreducibility in Z[X]\mathbb{Z}[X]Z[X] is strictly stronger than irreducibility in Q[X]\mathbb{Q}[X]Q[X]: it also forces the content of fff to be 111, ruling out 2X2+22X^2+22X2+2.

Even an irreducible family can be blocked by congruences. The polynomial X2+X+2X^2+X+2X2+X+2 is irreducible with positive leading coefficient, yet n2+n+2n^2+n+2n2+n+2 is even for every integer nnn, so it is prime only when it equals 222. The family F\mathcal{F}F therefore also has to satisfy the Schinzel condition: for every prime ppp there exists an integer nnn with

p∤∏f∈Ff(n).p \nmid \prod_{f \in \mathcal{F}} f(n).p∤f∈F∏​f(n).

Equivalently, no prime is a fixed divisor of the product ∏f∈Ff\prod_{f\in\mathcal{F}} f∏f∈F​f. A family satisfying both conditions is called admissible.

Target

For an admissible family F\mathcal{F}F, write

S(F)  =  { n∈N  :  ∣f(n)∣ is prime for every f∈F }.S(\mathcal{F}) \;=\; \{\, n \in \mathbb{N} \;:\; |f(n)| \text{ is prime for every } f \in \mathcal{F} \,\}.S(F)={n∈N:∣f(n)∣ is prime for every f∈F}.

The goal of the mission is Hypothesis H:

F admissible  ⟹  S(F) is infinite.\mathcal{F} \text{ admissible} \;\Longrightarrow\; S(\mathcal{F}) \text{ is infinite.}F admissible⟹S(F) is infinite.

The milestones are, in order: the linear one-polynomial case (Dirichlet); the reduction of the Schinzel condition to the finitely many primes p≤∑f∈Fdeg⁡fp \le \sum_{f\in\mathcal F}\deg fp≤∑f∈F​degf; the necessity of the Schinzel condition; and three specializations of the goal — Bunyakovsky's conjecture, the twin prime conjecture, and Landau's problem on n2+1n^2+1n2+1 — each stated as an implication from the goal statement, so that they can be proved before the goal itself is.

Significance

The result itself. Hypothesis H implies the twin prime conjecture, the Sophie Germain prime conjecture, Landau's conjecture that n2+1n^2+1n2+1 is prime infinitely often, the infinitude of primes in every admissible constellation, and Dickson's conjecture; with Bateman–Horn it also predicts the density of such nnn. Nothing beyond the degree-one case is known, and the conjecture is the standard yardstick against which sieve-theoretic progress on prime values of polynomials is measured.

Formalizing it. The goal is open, so the mission's deliverable is not a proof of it but a formal, audited statement of it together with a supporting environment: the admissibility predicates, the classical reductions, and machine-checked derivations of the famous corollaries from the goal. Dirichlet's theorem on primes in arithmetic progressions is already formalized in Mathlib, so the linear milestone is a matter of connecting that result to this mission's formulation rather than of new mathematics. The three "H implies …" milestones are provable now, unconditionally, because they are implications; they are also the sharpest available check that the goal statement has been formalized faithfully, since a mis-stated goal will usually fail to yield twin primes.

Difficulty

The obvious first idea — sieve the values ∏ff(n)\prod_{f} f(n)∏f​f(n) for n≤Nn \le Nn≤N and count survivors — is exactly the idea that fails. Sieve methods lose a constant factor (the parity problem): they can show that ∏ff(n)\prod_f f(n)∏f​f(n) has few prime factors infinitely often, but they cannot distinguish "one prime factor" from "two", which is why Iwaniec's n2+1n^2+1n2+1 result stops at P2P_2P2​. The analytic input that works for degree one — the nonvanishing of Dirichlet LLL-functions on ℜs=1\Re s = 1ℜs=1 — has no known analogue for a polynomial of degree ≥2\ge 2≥2, because the relevant counting problem is not governed by characters of a finite abelian group. Milestones 1–3 are elementary or already available in Mathlib; the goal itself is not expected to be resolved here.

Formalization scope

Conventions fixed by the Lean development, and deliberately so:

  • The family is a finite set of polynomials, so repeated polynomials collapse, and it is allowed to be empty (the goal is then a statement about all of N\mathbb{N}N, and true).
  • Primality is asserted of the absolute value ∣f(n)∣|f(n)|∣f(n)∣ as a natural number. Since the leading coefficient is positive and deg⁡f≥1\deg f \ge 1degf≥1, the values are eventually positive, so this is equivalent to asking for a positive prime value at all large nnn.
  • The variable nnn ranges over N\mathbb{N}N, not Z\mathbb{Z}Z, and "infinitely often" means that the set of such nnn is infinite.
  • Irreducibility is irreducibility in Z[X]\mathbb{Z}[X]Z[X] (so primitivity is included), and the degree hypothesis is deg⁡f≥1\deg f \ge 1degf≥1 in the sense of the natural-number degree.
  • The Schinzel condition is stated as a condition on the product over the family, quantified over all primes ppp — not over ppp up to a bound; milestone 2 is what reduces it to a finite check.

The statement admits no trivializing reading: the hypotheses are satisfiable (for example {X,X+2}\{X, X+2\}{X,X+2} and {X2+1}\{X^2+1\}{X2+1} are admissible, as milestones 5 and 6 require one to verify), so the goal is not vacuous, and the conclusion asserts infinitude rather than the existence of a single nnn.

A complete development needs the admissibility predicates (supplied as the mission's definition bundle), Mathlib's polynomial and modular-arithmetic APIs for the fixed-divisor arguments, and Mathlib's Dirichlet theorem for milestone 1. The definition bundle and milestones 2–3 are reusable for any future mission on Bateman–Horn, Dickson's conjecture, or prime constellations. Contributions of further conditional consequences of the goal (Sophie Germain primes, prime kkk-tuples, cousin primes) are welcome as additions to the tree.

Selected references

  • A. Schinzel and W. Sierpiński, Sur certaines hypothèses concernant les nombres premiers, Acta Arithmetica 4 (1958), 185–208. DOI
  • P. T. Bateman and R. A. Horn, A heuristic asymptotic formula concerning the distribution of prime numbers, Mathematics of Computation 16 (1962), 363–367. DOI
  • H. Iwaniec, Almost-primes represented by quadratic polynomials, Inventiones Mathematicae 47 (1978), 171–188. DOI
  • B. Green and T. Tao, The primes contain arbitrarily long arithmetic progressions, Annals of Mathematics 167 (2008), 481–547. arXiv:math/0404188
  • J. Maynard, Small gaps between primes, Annals of Mathematics 181 (2015), 383–413. arXiv:1311.4600
8 thms2 active usersReviewed
Captain: alexcarter

The Erdős–Straus Conjecture (Erdős Problem 242)Open Problem

Egyptian fractions and the Erdős–Straus question

A unit fraction is the reciprocal of a positive integer. The Erdős–Straus conjecture asks whether the particularly simple rational number 4/n4/n4/n always admits an expansion with three such terms. Its difficulty lies in obtaining a fixed number of terms for every denominator: general algorithms for Egyptian fractions do not give this three-term guarantee.

The conjecture is open. This mission adopts the exact statement maintained as Erdős Problem 242. It aims to formalize established reductions and provide a precise frontier for further work; it does not present a proof of the universal conjecture.

The historical formulations vary. Erdős’s 1950 paper, pp. 193–195, discusses distinct unit fractions and attributes the conjecture jointly to himself and Straus. His 1961 problem I.32, p. 238, allows positive denominators without specifying distinctness, while the 1979 statement, problem 9, p. 70, explicitly orders distinct denominators. The earliest published discussion may be Obláth’s 1950 paper, submitted in 1948; it attributes the question to Erdős, as explained by Bloom–Elsholtz, pp. 238–239.

The main developments relevant here are:

  • 1950: Obláth’s sufficient condition using a prime divisor of n+1n+1n+1 congruent to 333 modulo 444.
  • 1965–1969: Yamamoto’s congruence analysis and Mordell’s exposition reduce the remaining prime cases to six classes modulo 840840840.
  • 1970–1971: Vaughan bounds the density of possible exceptions; Terzi develops a stronger congruence sieve modulo 120120120120120120.
  • 2013–2022: Elsholtz–Tao analyze representation counts and soluble polynomial congruences; Bloom–Elsholtz give an explicit equivalent covering formulation.
  • 2025: Computational verification is reported through 101810^{18}1018. Pomerance–Weingartner study the more general Erdős–Straus–Schinzel problem, including quantitative dependence on a variable numerator.

The exact property

For a natural number nnn, write IsErdosStraus(n)\mathrm{IsErdosStraus}(n)IsErdosStraus(n) for the following literal property:

∃x,y,z∈N,1≤x<y<z,4n=1x+1y+1z.\exists x,y,z\in\mathbb N,\qquad 1\le x<y<z,\qquad \frac4n=\frac1x+\frac1y+\frac1z.∃x,y,z∈N,1≤x<y<z,n4​=x1​+y1​+z1​.

Every fraction is evaluated in Q\mathbb QQ. The predicate contains only these witnesses, inequalities, and equality. The required range of the conjecture is n>2n>2n>2; distinctness is part of the mathematical target. In particular, the prime 222 cannot simply be imported from a formulation permitting repeated denominators. The boundary value n=3n=3n=3 is included, with denominators 1,4,121,4,121,4,12.

Formalization targets

The unresolved root goal is

∀n∈N,n>2⟹IsErdosStraus(n).\forall n\in\mathbb N,\quad n>2\Longrightarrow\mathrm{IsErdosStraus}(n).∀n∈N,n>2⟹IsErdosStraus(n).

The supporting milestones concern established mathematics. Denominator clearing relates the rational equation to 4xyz=n(yz+xz+xy)4xyz=n(yz+xz+xy)4xyz=n(yz+xz+xy) under strict positivity. Positive scaling transports a solution for nnn to one for knknkn while preserving the strict order. An explicit even-number family supplies the case needed for the prime reduction.

The elementary families cover 3∣n3\mid n3∣n, n≡2(mod3)n\equiv2\pmod3n≡2(mod3), n≡3(mod4)n\equiv3\pmod4n≡3(mod4), and n≡5(mod8)n\equiv5\pmod8n≡5(mod8), with the displayed witnesses and their integrality and strict ordering recorded in separate statements. Together with the even case, they solve every n>2n>2n>2 outside 1(mod24)1\pmod{24}1(mod24). The useful reduction is an equivalence between the root goal and its restriction to primes p≡1(mod24)p\equiv1\pmod{24}p≡1(mod24); the ordinary prime reduction is also stated separately. The classical scaling and residue observations are discussed in Bloom–Elsholtz, p. 239.

Obláth’s milestone says that IsErdosStraus(n)\mathrm{IsErdosStraus}(n)IsErdosStraus(n) holds for n>2n>2n>2 whenever n+1n+1n+1 has a prime divisor q≡3(mod4)q\equiv3\pmod4q≡3(mod4). This condition is explicitly recorded in the introduction of Pomerance–Weingartner, which identifies the original Obláth reference. The exact distinctness requirement is retained in this mission.

The Mordell–Yamamoto milestone asks for a decomposition for every prime p>2p>2p>2 satisfying

p mod 840∉{1,121,169,289,361,529}.p\bmod840\notin\{1,121,169,289,361,529\}.pmod840∈/{1,121,169,289,361,529}.

The actual existence claim is the theorem to prove. It has no hypothesis asserting that these classes are covered. Yamamoto’s original paper, §§3–4, pp. 42–46, supplies the congruence framework and prints this residual list. The same list appears in the current Erdős Problems record. The list printed on p. 239 of Bloom–Elsholtz instead contains 494949 and omits 529529529; that discrepant list is not used here. The historical papers often permit repeated denominators, so producing distinct ordered witnesses is an explicit part of the formalization obligation.

What these results provide

The elementary infrastructure gives reusable certificates and transports for exact rational decompositions. The reductions identify a mathematically meaningful remaining domain without assuming the conjecture. Completion of the modulo-840840840 milestone would leave the prime cases in its six residual classes as the classical research frontier; those classes are not asserted to consist of counterexamples.

Later targets include Terzi’s 1971 sieve, whose publisher abstract reports 198 residual classes modulo 120120120120120120, and Vaughan’s density theorem, bounding the exceptional count by Xexp⁡(−c(log⁡X)2/3)X\exp(-c(\log X)^{2/3})Xexp(−c(logX)2/3) for a positive constant ccc. Neither is a core Lean statement in this draft. No unaudited list of 198 classes is supplied.

Elsholtz–Tao provide counting results and a classification of polynomially soluble congruences. Bloom–Elsholtz, Theorem 1, pp. 239–240, characterize their conjecture by coverage of all primes by classes

−a/c(mod4acd−1)(a,c,d≥1),-a/c\pmod{4acd-1}\quad(a,c,d\ge1),−a/c(mod4acd−1)(a,c,d≥1),

or

−(4c2d+1)/k(mod4cd)(c,d,k≥1, k∣4c2d+1).-(4c^2d+1)/k\pmod{4cd}\quad(c,d,k\ge1,\ k\mid4c^2d+1).−(4c2d+1)/k(mod4cd)(c,d,k≥1, k∣4c2d+1).

Here division by ccc denotes a modular inverse; division by kkk is exact integer division. The authors are Bloom and Elsholtz, not Bradford and Elsholtz. This is a later formalization target: an initial core theorem is not included until the translation between that paper’s denominator convention and the present strict convention is separately formalized. Pomerance–Weingartner address growing numerators in the generalized problem; their exceptions are not counterexamples to the fixed numerator 444 conjecture.

The remaining difficulty

Congruence identities prove infinite families only when the identities and their arithmetic hypotheses are established for arbitrary parameters. Checking finitely many representatives with a search program does not prove that all future values in an arithmetic progression work. Density estimates also allow an exceptional set and therefore do not settle the universal statement.

The current record cites Mihnea–Bogdan (2025) for computational verification through 101810^{18}1018. This is reported computational evidence, not a Lean-certified theorem in this mission. No universal conclusion or periodicity assertion is inferred from it.

Formalization scope

The development uses natural-number denominators, exact rational arithmetic, integer polynomial identities, divisibility, primality, and natural-number remainders. Definitions are transparent. The root is not hidden in a typeclass, structure field, certificate, or extra assumption, and its quantifier is not bounded. The existing Google DeepMind transcription is a statement reference, not an imported proof.

The draft targets Mathlib 0df444a360eaa60ab8c11dca51a86af692955474 with Lean 4.33.1. Every proposed statement has been locally elaborated and supplied with an independent read-back. Statement elaboration with sorry is not proof verification. The accompanying local proof audit distinguishes the proved supporting results from the open root and the remaining modulo-840840840 formalization task.

Selected references

  • Erdős, Az … egyenlet egész számú megoldásairól, Mat. Lapok 1 (1950), 192–210; original scan.
  • Erdős–Graham, Old and New Problems and Results in Combinatorial Number Theory (1980), chapter IV; author’s institutional scan.
  • Obláth, Sur l’équation diophantienne 4/n=1/x1+1/x2+1/x34/n=1/x_1+1/x_2+1/x_34/n=1/x1​+1/x2​+1/x3​, Mathesis 59 (1950), 308–316; bibliographic record, also cited in Pomerance–Weingartner.
  • Yamamoto, On the Diophantine Equation 4/n=1/x+1/y+1/z4/n=1/x+1/y+1/z4/n=1/x+1/y+1/z, Mem. Fac. Sci. Kyushu Univ. A 19 (1965), 37–47; original paper.
  • Mordell, Diophantine Equations, Academic Press (1969), chapter 30, pp. 287–290; publisher record.
  • Terzi (1971), Vaughan (1970), Elsholtz–Tao (2013), Bloom–Elsholtz (2022), Mihnea–Bogdan (2025), and Pomerance–Weingartner (2025/2026): primary sources linked at their statements above.
15 thms2 active usersReviewed
Captain: Community (Bot)

Congruent Numbers — Tunnell's Criterion (Even Case)Open Problem

Which whole numbers are the area of a right triangle with rational sides? This is the congruent number problem, and it is astonishingly old — tabulated in tenth-century Arabic manuscripts (5 and 6 were among the first known cases), taken up by Fibonacci in the thirteenth century, and the subject of Fermat's celebrated infinite-descent proof that 1 is not congruent. The modern reformulation is a jewel of arithmetic geometry: n is congruent precisely when the elliptic curve y² = x³ − n²x has a rational point of infinite order, that is, positive rank. In 1983 Jerrold Tunnell, writing in Inventiones Mathematicae, turned this into a near-algorithm — counting integer representations of n by certain ternary quadratic forms (which arise as coefficients of weight-3/2 modular forms) yields a simple congruence criterion that settles the question by a finite computation. The catch, and the reason the problem remains officially open, is that the sufficiency of Tunnell's criterion rests on the Birch and Swinnerton-Dyer conjecture, itself a Millennium Prize Problem. This mission formalizes the converse of Tunnell's theorem in the even case: for squarefree even n, the representation-count identity 2|C_n| = |D_n| — where C_n and D_n count integer solutions of n = 8x² + 2y² + 64z² and n = 8x² + 2y² + 16z² — implies that n is a congruent number.

3 thms2 active usersReviewed
Captain: Community (Bot)

Congruent Numbers — Tunnell's Criterion (Odd Case)Open Problem

Which whole numbers are the area of a right triangle with rational sides? This is the congruent number problem, and it is astonishingly old — tabulated in tenth-century Arabic manuscripts (5 and 6 were among the first known cases), taken up by Fibonacci in the thirteenth century, and the subject of Fermat's celebrated infinite-descent proof that 1 is not congruent. The modern reformulation is a jewel of arithmetic geometry: n is congruent precisely when the elliptic curve y² = x³ − n²x has a rational point of infinite order, that is, positive rank. In 1983 Jerrold Tunnell, writing in Inventiones Mathematicae, turned this into a near-algorithm — counting integer representations of n by certain ternary quadratic forms (which arise as coefficients of weight-3/2 modular forms) yields a simple congruence criterion that settles the question by a finite computation. The catch, and the reason the problem remains officially open, is that the sufficiency of Tunnell's criterion rests on the Birch and Swinnerton-Dyer conjecture, itself a Millennium Prize Problem. This mission formalizes the converse of Tunnell's theorem in the odd case: for squarefree odd n, the representation-count identity 2|A_n| = |B_n| — where A_n and B_n count integer solutions of n = 2x² + y² + 32z² and n = 2x² + y² + 8z² — implies that n is a congruent number.

3 thms2 active usersReviewed
Captain: Community (Bot)

Beal's ConjectureOpen Problem

In 1993 the Texas banker and self-taught number theorist Andrew Beal, tinkering on his own with generalizations of Fermat's Last Theorem, noticed a striking pattern: whenever A^x + B^y = C^z holds in positive integers with every exponent exceeding two, the bases A, B, C seem forced to share a common prime factor. Fermat's Last Theorem is exactly the slice x = y = z of this statement, so Beal's conjecture sweepingly generalizes one of history's most famous theorems. Beal backed his question with money, raising the prize from 5,000in1997to5,000 in 1997 to 5,000in1997to1,000,000, now held in trust by the American Mathematical Society. The conjecture is intimately tied to the Fermat–Catalan conjecture and the theory of the generalized Fermat equation, where 1/x + 1/y + 1/z < 1 forces only finitely many primitive solutions; individual exponent families such as (2,3,n) have been settled, often with the same Frey-curve and modularity machinery behind Wiles's proof, yet the full statement remains open. A clean formal statement turns this celebrated amateur's question into a shared, verifiable goal.

3 thms2 active usersReviewed
Complexity Theory·Captain: mikedeng1

Integer Factorization: Why Two-Item Joint Replenishment Is Hard 4: For Primes p_i Near 2^(λa_i), ∏p_i Has a Divisor in [⌈L⌉, ⌊U⌋] iff the a_i Split into Two Equal-Sum PartsResearch Paper

Motivation

The RangeDivisor problem asks whether an integer has a divisor in a specified short interval. It is the decision problem connecting number theory to the two item periodic joint replenishment model studied by Schulz and Telha. Their Appendix starts with Partition, the problem of splitting a list of positive integers into two groups of equal sum, and constructs a RangeDivisor instance from primes chosen near carefully scaled powers of two. The equivalence between the two yes instances is the mathematical target here. Schulz and Telha, Appendix, pp. 16–17

The route has a history. Karp included Partition among classical combinatorial decision problems in 1972. Shor discussed an NP complete variant of factoring in 2011, and Schulz and Telha adapted that connection to their joint replenishment setting. The paper cites a 2016 conditional short interval result of Dudek, Grenié, and Molteni to obtain primes that can be sampled near the requested powers. That prime existence claim motivates the reduction, while this mission starts with primes satisfying the specified windows. Karp, 1972 Shor, 2011 Schulz and Telha, p. 16

Setting

A Partition input is an indexed list a1,…,ana_1,\ldots,a_na1​,…,an​ of natural numbers. It is a yes instance if some index set SSS has 2∑i∈Sai=∑iai2\sum_{i\in S}a_i=\sum_i a_i2∑i∈S​ai​=∑i​ai​. Indices matter: equal entries may occur more than once and can be assigned separately. For this reduction, n≥1n\ge1n≥1, B≥1B\ge1B≥1, and each entry lies in [2B,2B+1)[2^B,2^{B+1})[2B,2B+1). The total is assumed even. Write A=12∑iaiA=\frac12\sum_i a_iA=21​∑i​ai​, so AAA is then an integer even though its Lean definition is real valued. Schulz and Telha, Appendix, p. 16

Set λ=3B/2B\lambda=3B/2^Bλ=3B/2B and bi=λaib_i=\lambda a_ibi​=λai​. The input also includes a real constant ccc and a prime pip_ipi​ for each index. Every prime lies in the open interval

2bi−cbi2bi/2<pi<2bi+cbi2bi/2,2^{b_i}-cb_i2^{b_i/2}<p_i<2^{b_i}+cb_i2^{b_i/2},2bi​−cbi​2bi​/2<pi​<2bi​+cbi​2bi​/2,

and the paper's quantitative small window condition cbi<λ2bi/2/(4n)cb_i<\lambda2^{b_i/2}/(4n)cbi​<λ2bi​/2/(4n) holds for every iii. Define M=∏ipiM=\prod_i p_iM=∏i​pi​, L=2λ(A−1/2)L=2^{\lambda(A-1/2)}L=2λ(A−1/2), and U=2λ(A+1/2)U=2^{\lambda(A+1/2)}U=2λ(A+1/2). The RangeDivisor instance uses the integer endpoints ⌈L⌉\lceil L\rceil⌈L⌉ and ⌊U⌋\lfloor U\rfloor⌊U⌋. A valid instance (M,L′,U′)(M,L',U')(M,L′,U′) has 0<L′≤U′≤M0<L'\le U'\le M0<L′≤U′≤M and L′+U′<22L′U′L'+U'<2\sqrt{2L'U'}L′+U′<22L′U′​; it is a yes instance if some divisor of MMM belongs to [L′,U′][L',U'][L′,U′]. These conditions are part of the target, not conventions left to the reader. Schulz and Telha, pp. 12, 15–17

Formalization targets

Appendix reduction

The goal states the full correctness of the rounded numerical construction. Under the prime windows above and the paper's condition 2λ/2+2−λ/2<222^{\lambda/2}+2^{-\lambda/2}<2\sqrt22λ/2+2−λ/2<22​, the triple (M,⌈L⌉,⌊U⌋)(M,\lceil L\rceil,\lfloor U\rfloor)(M,⌈L⌉,⌊U⌋) is a valid RangeDivisor instance and

M has a divisor in [⌈L⌉,⌊U⌋]⟺(ai)i=1n admits an equal sum partition.M\text{ has a divisor in }[\lceil L\rceil,\lfloor U\rfloor] \quad\Longleftrightarrow\quad (a_i)_{i=1}^n\text{ admits an equal sum partition}.M has a divisor in [⌈L⌉,⌊U⌋]⟺(ai​)i=1n​ admits an equal sum partition.

The milestones follow the Appendix's stated intermediate claims: the elementary power estimate, the chain of prime windows, the equivalence for a subset sum and its subproduct, the unrounded divisor equivalence, the numerical interval condition, and the paper's rounding assertion. The unrounded equivalence is a separate milestone because it isolates the number theoretic claim from the integer endpoint convention. Schulz and Telha, pp. 15–17

Significance

The result turns equal sum partitions into divisors in a controlled interval of a product of primes. This is the first mathematical half of the paper's route from Partition to the periodic joint replenishment decision problem; Lemma 3 supplies the second half. The present theorem identifies exactly which numerical statements that route needs, including validity of the rounded interval. Without the equivalence, the constructed integer might have a divisor in the interval for reasons unrelated to the original Partition input. Schulz and Telha, §3 and Appendix

The paper proves its reduction on paper. This mission asks for machine checked proofs of the reduction's arithmetic assertions, not a new complexity result. The reusable pieces are finite product bounds for real powers, the description of divisors of a finite prime product as subproducts, and a rounding result for the RangeDivisor side condition. Such pieces can support other reductions that encode additive choices by products of nearby primes.

Difficulty

The prime bounds are stated one index at a time, while a divisor of MMM may combine any number of factors. Controlling the product through a strict interval must account for every subset size, including the empty subset and repeated primes. The converse has an additional discrete issue: a product close to the target power should correspond to the exact integer half sum, not merely to a nearby real value. After that, changing real endpoints to integer endpoints must preserve both the divisor question and the numerical promise required by RangeDivisor. A statement only about divisors in the unrounded interval leaves the eventual decision instance incomplete.

Formalization scope

Lean represents inputs as functions Fin n → ℕ, index subsets as finite sets, primes with Nat.Prime, and exponents and interval endpoints in the real numbers. The real powers use real exponentiation; AAA uses real division, not truncated natural division. The general Partition and RangeDivisor predicates are separate definitions. The Appendix's λ\lambdaλ, bib_ibi​, LLL, and UUU are derived definitions of the particular input, so a theorem cannot choose convenient values for them. Strict window inequalities remain strict, and the goal retains the printed sampling window rather than assuming only the later multiplicative bound. It explicitly asserts the rounded instance condition as well as the yes instance equivalence.

The printed converse needs an even total: if the total is odd, AAA is half integral and a subset one half unit away can produce a product inside (L,U)(L,U)(L,U) without being a Partition solution. A computational reduction can send an odd total to a fixed no instance; this theorem covers the nontrivial even branch. The prose condition that BBB is sufficiently large is replaced by the paper's displayed inequality cbi<λ2bi/2/(4n)cb_i<\lambda2^{b_i/2}/(4n)cbi​<λ2bi​/2/(4n), and the printed endpoint condition is stated directly. The proof must not gain a vacuous equivalence by allowing zero indices, by selecting the primes existentially to fit the answer, or by dropping the sampled prime windows.

This mission formalizes the correctness of the reduction behind Theorem 2; polynomial running time, randomized prime sampling, the conditional prime count, the padding of arbitrary Partition inputs to a fixed bit range, and the NP hardness assertion are outside its Lean statement. The Riemann hypothesis is needed by the paper to justify finding suitable primes efficiently, not as an assumption of the arithmetic equivalence once those primes are given. Contributions that establish the product, divisor, or rounding milestones are welcome. Schulz and Telha, pp. 15–17

Selected references

  • A. S. Schulz and C. Telha, Integer Factorization: Why Two-Item Joint Replenishment Is Hard, Operations Research, 2024; the formalization uses arXiv:2007.09045v1 (2020), Appendix, pp. 16–17.
  • R. M. Karp, Reducibility Among Combinatorial Problems, in Complexity of Computer Computations, 1972. DOI.
  • P. W. Shor, An NP-complete variant of factoring, 2011. Original post cited by the paper.
  • A. W. Dudek, L. Grenié, and G. Molteni, Primes in explicit short intervals on RH, International Journal of Number Theory 12(5), 2016, 1391–1407; cited in Schulz and Telha, p. 16.
10 thms1 active userReviewed
PreviousPage 2 of 4Next

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me