Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

Number Theory

170 missions · 89 completed

The study of the integers and the structures built from them — prime numbers, and the rational, algebraic, and ppp-adic numbers that extend them. It reaches from analytic number theory, which uses the tools of analysis to understand the distribution of primes, to algebraic number theory, Diophantine equations, and the arithmetic of elliptic curves, modular forms, and LLL-functions.

Missions

Open81Completed89All170
🏆Completed
CombinatoricsGraph Theory·Captain: Xiang Huang

Proofs from THE BOOKTextbook

Proofs from THE BOOK: verified results and open formalization tasks

This Textbook project develops a reusable Lean library around Martin Aigner and Günter M. Ziegler's Proofs from THE BOOK. It combines results imported from the existing proof_in_the_book repository with precise contribution targets from the sixth edition (2018). The aim is to preserve mathematical meaning, reuse existing proofs, and make the remaining work accessible to other contributors.

What is already verified

The original import contains 156 distinct platform-accepted results. Euclid, the original main theorem, is retained as a completed milestone when the project goal moves to the sixth-edition extension. Every one of the repository's 40 chapter topics has accepted results. Each result certifies its actual Lean statement, including its hypotheses; this does not certify every argument or every theorem in a chapter. Some proofs reuse Mathlib, while others were developed in the repository. Their source and proof notes retain that distinction.

The imported source snapshot is 873d52e0c88cd351f594221e70c3c5b3559777a9. Imported results use Lean 4.30.0 and Mathlib c5ea00351c28e24afc9f0f84379aa41082b1188f. Immutable public source links are used only where the linked source matches the verified artifact. Compatibility changes, unsuccessful attempts, and verification evidence are retained in the integration project.

The live goal is the explicit conjunction of the 21 linked sixth-edition extension targets. Its reduction connects these targets to the goal, so proving the remaining children advances the project. This goal is deliberately narrower than “every theorem and every proof in the book”; the unlinked topology tasks below are additional formalization work.

Sixth-edition contribution targets

New milestones explicitly marked 6th ed. cover Chapters 7 (spectral theorem and determinants), 15 (round circles and links), 35 (finite Kakeya), 37 (permanents and entropy), and 45 (probabilistic counting). They include the precise definitions and boundary conditions needed to state the results. Compiled Open targets are requests for proofs, not proved results. The spectral theorem has a direct Mathlib proof; community results are reused under their actual statements and with attribution.

Two Chapter 15 tasks intentionally remain unlinked mathematical milestones: the full non-equivalence assertion for the depicted Borromean, Tait, and trivial links, and the Fox-coloring invariance bridge for equivalent link diagrams. These invite formalization of the diagrams and the topology bridge as well as proof. The separate modular Fox calculations do not by themselves establish ambient non-equivalence.

The crossing-lemma target is the universal good-drawing form: actual injective edge arcs and exact finite intersection records appear in its interface. It does not assume the desired crossing bound. The Ramsey target preserves the real exponent for odd k. The related public Erdős–Ramsey result with a rounded exponent is identified as a supporting result, not as proof of that full target.

Chapter numbering and statement scope

Older milestones use the repository's chapter labels. Repository Chapters 1–21 match the bundled fourth edition; Chapter 22 inserts Van der Waerden's permanent theorem, and Chapters 23–40 correspond to fourth-edition Chapters 22–39. The sixth edition has 45 chapters, so these organizational labels are not sixth-edition chapter numbers. New milestones give sixth-edition numbers and printed source pages explicitly.

Some existing formalizations preserve narrower statements or additional premises. Examples include repository Chapter 13's dihedral-angle conclusion, Chapter 28's Dilworth lower-bound result, and the geometric premises in Chapter 36. Read the actual linked theorem and its description before reusing it. A chapter title or the former Euclid main theorem is not a completion certificate for the collection.

How to contribute

Choose an Open linked theorem and inspect its definitions, exact binders, Mathlib revision, and prior attempts. Reuse a compatible existing result when it proves that statement; preserve the original contributor's attribution. Submit a matching proof for verification. For an unlinked milestone, first formalize and review the source statement and its definitions. These are known textbook results awaiting formalization or proof in this project, rather than claims of new unresolved mathematics.

Source repository: https://github.com/xiangyazi24/proof_in_the_book

Book: Aigner and Ziegler, Proofs from THE BOOK, Sixth Edition (2018), https://doi.org/10.1007/978-3-662-57265-8

209 thms11 active users
🏆Completed
Captain: tomasz

Zeta5: irrationality of ζ(5) via normalized Hankel determinantsResearch Paper

Motivation

The value of the Riemann zeta function at five is the convergent sum

ζ(5)=∑k=1∞1k5.\zeta(5)=\sum_{k=1}^\infty\frac1{k^5}.ζ(5)=k=1∑∞​k51​.

The target is that this number cannot be expressed as a ratio of integers. This mission concerns the complete proof development in mo271/Zeta5, pinned to commit 7fe736760f4b96bfdb4334b68e3b3124ecbe10b0. The repository follows Aabir Fauzan's preprint ζ(5) is irrational, while explicitly changing parts of its arithmetic normalization. Its formal target is the individual value at five. Results asserting that at least one member of a list of odd zeta values is irrational do not establish this target.

The repository reports a complete Lean proof with only the standard axioms propext, Classical.choice, and Quot.sound. That is a statement about the source project. The existing Prove2.me goal remains Open, and importing and checking the source proof against the platform environment is the work tracked here. The exact existing goal is reused as a reference; there is no second copy of the irrationality assertion.

Setting

The construction uses Hankel matrices, whose entries depend on the sum of their row and column indices. For a natural index nnn, put K=40nK=40nK=40n, N=3nN=3nN=3n, and h=37nh=37nh=37n. The rational polynomial Dm(t)=∏j=1m(t+j2)D_m(t)=\prod_{j=1}^m(t+j^2)Dm​(t)=∏j=1m​(t+j2) controls a family of rational functions. A rational linear functional takes prescribed Bernoulli-number values on powers of ttt and prescribed affine-polynomial values on the simple poles (t+j2)−1(t+j^2)^{-1}(t+j2)−1. Polynomial division and residues extend it to P(t)/DK(t)P(t)/D_K(t)P(t)/DK​(t).

Applying this functional to DN(t)6ti+j/DK(t)D_N(t)^6t^{i+j}/D_K(t)DN​(t)6ti+j/DK​(t) gives an h×hh\times hh×h matrix Gn(X)G_n(X)Gn​(X) over Q[X]\mathbb Q[X]Q[X]. Write Δn(X)=det⁡Gn(X)\Delta_n(X)=\det G_n(X)Δn​(X)=detGn​(X) and Fn(X)=SnΔn(X)F_n(X)=S_n\Delta_n(X)Fn​(X)=Sn​Δn​(X), where SnS_nSn​ is the explicit positive factorial ratio in the construction module. These are specified polynomials; their existence and properties are not abstract supply assumptions. The real number zeta5 is the convergent series, and a short bridge identifies it with Mathlib's complex zeta value.

Formalization targets

The goal is

∃x∈R,x∉QandriemannZeta⁡(5)=x.\exists x\in\mathbb R,\quad x\notin\mathbb Q\quad\text{and}\quad\operatorname{riemannZeta}(5)=x.∃x∈R,x∈/QandriemannZeta(5)=x.

It is the existing theorem FCP.Zeta.irrational_zeta_five. The supporting target from the source main estimate is

∃c>0,∀n sufficiently large,∃Qn∈Z[X],deg⁡Qn=37n,0<Qn(ζ(5))<e−cn2.\exists c>0,\quad\forall n\text{ sufficiently large},\quad\exists Q_n\in\mathbb Z[X],\quad\deg Q_n=37n,\quad0<Q_n(\zeta(5))<e^{-cn^2}.∃c>0,∀n sufficiently large,∃Qn​∈Z[X],degQn​=37n,0<Qn​(ζ(5))<e−cn2.

The formal statement also requires QnQ_nQn​ to be a positive rational multiple of the explicit FnF_nFn​.

The milestone list records the general polynomial irrationality criterion, the exact degree calculation, the moment representation with integrability, strict determinant positivity, the real-value upper bound, integral normalization with its growth estimate, and the final small-value statement. A further supporting theorem states that b37ne−cn2b^{37n}e^{-cn^2}b37ne−cn2 tends to zero for every fixed positive integer bbb and every c>0c>0c>0. These targets cover the analytic, arithmetic, and final assembly parts of the source project.

Significance

The goal distinguishes a single zeta value from the disjunctive irrationality results for finite lists. The intermediate results also provide reusable infrastructure: an irrationality criterion for polynomials of varying degree, integral moment representations of rational functionals, determinant positivity, and estimates controlling rational normalizers.

For formalization, the concrete task is to transplant the source development while preserving its definitions, hypotheses, and actual constants. The source's existing proofs provide the intended implementations; the mission does not replace the difficult analytic or arithmetic statements with assumed approximation families. Proof imports and accepted submissions must eventually connect those implementations to the existing goal. The source's Apache-2.0 license and commit-pinned attribution accompany the code.

Difficulty

Small real values alone do not suffice: the integer coefficients and the degree growth must be controlled at the same time. The normalization needed to obtain integer coefficients can enlarge the values enough to destroy the analytic estimate. The decisive quantitative requirement is that its growth constant stay below the magnitude of the negative analytic constant.

Here the analytic estimate uses U=−2733991/2000000U=-2733991/2000000U=−2733991/2000000, and the implemented normalization uses Aeff=136/100A_{\rm eff}=136/100Aeff​=136/100. Their exact rational sum is negative. The milestone assertions retain the source's lower-order terms 27Klog⁡K+200K27K\log K+200K27KlogK+200K and the eventual quantifiers in the normalization estimate. They do not strengthen an eventual estimate to a uniform one, or infer positivity from a vanishing upper bound.

Formalization scope

The scope is the complete importable proof path to Apery.irrational_five in the pinned repository, including the arithmetic modules, logarithmic-energy estimates, finite certificates, and the external prime-number-theorem dependency where the proof uses it. The headline milestones organize that full development; they are not a claim that every internal lemma is already published on the platform. The repository's optional stronger numerical rate and the preprint's irrationality-measure claim are outside this goal.

The source uses cutoff 400400400, a full rank loss in its outer-prime estimate, and direct class-wise partial fractions, as documented in its implementation notes. Its final estimate asserts some positive decay constant, not the paper's 139/5139/5139/5. The draft retains those choices. Polynomial evaluations take place over the reals, coefficients begin in the rationals and are normalized into the integers, and the moment integrals are Lebesgue integrals over (0,∞)(0,\infty)(0,∞). Definitions are total at zero, while the positivity and real-bound milestones explicitly require n>0n>0n>0.

The source pins Lean 4.34.0-rc1 and Mathlib f385f9fd18abed332ebcd3df239cb357e264aceb. This proposal targets the available Lean 4.33.1 / Mathlib 0df444a360eaa60ab8c11dca51a86af692955474 environment. The draft definitions and milestone statements are checked locally in that target environment; acceptance of the complete imported proof graph is a separate verification step. The external dependency is mo271/PrimeNumberTheoremAnd at 04d81b2a68ea3548b9990813fdc463c78511f412. Any imported proof must retain a standard-axiom-only dependency check.

Selected references

  • Aabir Fauzan, ζ(5) is irrational, preprint, 17 September 2026. Zenodo record and manuscript.
  • mo271 and contributors, Zeta5, Lean source project, commit 7fe736760f4b96bfdb4334b68e3b3124ecbe10b0. Pinned repository.
  • mo271 and contributors, PrimeNumberTheoremAnd, pinned dependency. Source.
  • The Formal Conjectures Authors, Formal Conjectures, RiemannZetaValues.irrational_five. Pinned challenge source.
227 thms7 active usersReviewed
🏆Completed
Captain: Lucas

Zudilin: one of ζ(5), ζ(7), ζ(9), ζ(11) is irrationalResearch Paper

Motivation

The Riemann zeta function at integers splits into two very different worlds. At even arguments Euler's formula ζ(2k)=(−1)k+1B2k(2π)2k/(2 (2k)!)\zeta(2k) = (-1)^{k+1} B_{2k} (2\pi)^{2k} / (2\,(2k)!)ζ(2k)=(−1)k+1B2k​(2π)2k/(2(2k)!) shows every ζ(2k)\zeta(2k)ζ(2k) is a rational multiple of π2k\pi^{2k}π2k, hence irrational and even transcendental. At odd arguments almost nothing is known. The single exception is ζ(3)\zeta(3)ζ(3), proved irrational by R. Apéry in 1978 (Astérisque 61 (1979), 11–13). For every other odd argument ζ(5),ζ(7),ζ(9),…\zeta(5), \zeta(7), \zeta(9), \dotsζ(5),ζ(7),ζ(9),… the arithmetic nature is open to this day: no individual value is known to be irrational.

What is known are localisation results, which assert that an irrational number occurs somewhere in a finite or infinite list of odd zeta values without saying where.

  • 2000 — T. Rivoal proves that infinitely many of ζ(3),ζ(5),ζ(7),…\zeta(3), \zeta(5), \zeta(7), \dotsζ(3),ζ(5),ζ(7),… are irrational; more precisely the dimension of the Q\mathbb{Q}Q-vector space spanned by 1,ζ(3),ζ(5),…,ζ(2k+1)1, \zeta(3), \zeta(5), \dots, \zeta(2k+1)1,ζ(3),ζ(5),…,ζ(2k+1) grows at least like 13log⁡k\tfrac{1}{3}\log k31​logk (C. R. Acad. Sci. Paris 331 (2000), 267–270).
  • 2001 — Rivoal, and independently W. Zudilin, prove that at least one of the nine numbers ζ(5),ζ(7),…,ζ(21)\zeta(5), \zeta(7), \dots, \zeta(21)ζ(5),ζ(7),…,ζ(21) is irrational.
  • 2001 — Zudilin sharpens the list to four numbers: at least one of ζ(5),ζ(7),ζ(9),ζ(11)\zeta(5), \zeta(7), \zeta(9), \zeta(11)ζ(5),ζ(7),ζ(9),ζ(11) is irrational (Uspekhi Mat. Nauk 56:4 (2001), 149–150; English translation, Russian Math. Surveys 56:4 (2001), 774–776). This is the mission's source and remains the sharpest known localisation among small odd zeta values.

Setting

All objects below are those of the source note, in its own notation.

Fix odd integers qqq and rrr with q≥r+4q \ge r + 4q≥r+4, and positive integers η0,η1,…,ηq\eta_0, \eta_1, \dots, \eta_qη0​,η1​,…,ηq​ subject to η1≤η2≤⋯≤ηq<η0/2\eta_1 \le \eta_2 \le \dots \le \eta_q < \eta_0/2η1​≤η2​≤⋯≤ηq​<η0​/2 and

η1+η2+⋯+ηq  ≤  η0⋅q−r2.(1)\eta_1 + \eta_2 + \dots + \eta_q \;\le\; \eta_0 \cdot \frac{q-r}{2}. \tag{1}η1​+η2​+⋯+ηq​≤η0​⋅2q−r​.(1)

For each integer n>0n > 0n>0 put h0=η0n+2h_0 = \eta_0 n + 2h0​=η0​n+2 and hj=ηjn+1h_j = \eta_j n + 1hj​=ηj​n+1 for j=1,…,qj = 1, \dots, qj=1,…,q, and consider the rational function

Rn(t):=(h0+2t)∏j=1r1(hj−1)!Γ(hj+t)Γ(1+t)⋅∏j=1r1(hj−1)!Γ(h0+t)Γ(1+h0−hj+t)×∏j=r+1q(h0−2hj)! Γ(hj+t)Γ(1+h0−hj+t)R_n(t) := (h_0 + 2t)\prod_{j=1}^{r}\frac{1}{(h_j-1)!}\frac{\Gamma(h_j+t)}{\Gamma(1+t)}\cdot\prod_{j=1}^{r}\frac{1}{(h_j-1)!}\frac{\Gamma(h_0+t)}{\Gamma(1+h_0-h_j+t)}\times\prod_{j=r+1}^{q}(h_0-2h_j)!\,\frac{\Gamma(h_j+t)}{\Gamma(1+h_0-h_j+t)}Rn​(t):=(h0​+2t)j=1∏r​(hj​−1)!1​Γ(1+t)Γ(hj​+t)​⋅j=1∏r​(hj​−1)!1​Γ(1+h0​−hj​+t)Γ(h0​+t)​×j=r+1∏q​(h0​−2hj​)!Γ(1+h0​−hj​+t)Γ(hj​+t)​

together with the linear form

Fn:=1(r−1)!∑t=0∞Rn(r−1)(t).(2)F_n := \frac{1}{(r-1)!}\sum_{t=0}^{\infty} R_n^{(r-1)}(t). \tag{2}Fn​:=(r−1)!1​t=0∑∞​Rn(r−1)​(t).(2)

Condition (1) gives Rn(t)=O(t−2)R_n(t) = O(t^{-2})Rn​(t)=O(t−2), so the series converges.

Two arithmetic quantities control the denominators of FnF_nFn​. Write DND_NDN​ for the least common multiple of 1,2,…,N1, 2, \dots, N1,2,…,N, put mj=max⁡{ηr, η0−2ηr+1, η0−η1−ηr+j}m_j = \max\{\eta_r,\ \eta_0 - 2\eta_{r+1},\ \eta_0 - \eta_1 - \eta_{r+j}\}mj​=max{ηr​, η0​−2ηr+1​, η0​−η1​−ηr+j​} for j=1,…,q−rj = 1, \dots, q-rj=1,…,q−r, and set

Φn:=∏η0n<p≤mq−rnpφ(n/p),\Phi_n := \prod_{\sqrt{\eta_0 n} < p \le m_{q-r} n} p^{\varphi(n/p)},Φn​:=η0​n​<p≤mq−r​n∏​pφ(n/p),

the product running over primes, where φ\varphiφ is the integer-valued, nonnegative, 111-periodic function

φ(x):=min⁡0≤y<1(∑j=1r(⌊y⌋+⌊η0x−y⌋−⌊y−ηjx⌋−⌊(η0−ηj)x−y⌋−2⌊ηjx⌋)+∑j=r+1q(⌊(η0−2ηj)x⌋−⌊y−ηjx⌋−⌊(η0−ηj)x−y⌋)).\varphi(x) := \min_{0 \le y < 1}\Big(\sum_{j=1}^{r}\big(\lfloor y\rfloor + \lfloor \eta_0 x - y\rfloor - \lfloor y - \eta_j x\rfloor - \lfloor(\eta_0-\eta_j)x-y\rfloor - 2\lfloor \eta_j x\rfloor\big) + \sum_{j=r+1}^{q}\big(\lfloor(\eta_0-2\eta_j)x\rfloor - \lfloor y - \eta_j x\rfloor - \lfloor(\eta_0-\eta_j)x-y\rfloor\big)\Big).φ(x):=0≤y<1min​(j=1∑r​(⌊y⌋+⌊η0​x−y⌋−⌊y−ηj​x⌋−⌊(η0​−ηj​)x−y⌋−2⌊ηj​x⌋)+j=r+1∑q​(⌊(η0​−2ηj​)x⌋−⌊y−ηj​x⌋−⌊(η0​−ηj​)x−y⌋)).

The growth of FnF_nFn​ is governed by the saddle points, the zeros of

(τ−η0)r(τ−η1)⋯(τ−ηq)−τr(τ−η0+η1)⋯(τ−η0+ηq),(\tau-\eta_0)^r(\tau-\eta_1)\cdots(\tau-\eta_q) - \tau^r(\tau-\eta_0+\eta_1)\cdots(\tau-\eta_0+\eta_q),(τ−η0​)r(τ−η1​)⋯(τ−ηq​)−τr(τ−η0​+η1​)⋯(τ−η0​+ηq​),

and by the auxiliary function

f0(τ)=rη0log⁡(η0−τ)+∑j=1q(ηjlog⁡(τ−ηj)−(η0−ηj)log⁡(τ−η0+ηj))−2∑j=1rηjlog⁡ηj+∑j=r+1q(η0−2ηj)log⁡(η0−2ηj).f_0(\tau) = r\eta_0\log(\eta_0-\tau) + \sum_{j=1}^{q}\big(\eta_j\log(\tau-\eta_j) - (\eta_0-\eta_j)\log(\tau-\eta_0+\eta_j)\big) - 2\sum_{j=1}^{r}\eta_j\log\eta_j + \sum_{j=r+1}^{q}(\eta_0-2\eta_j)\log(\eta_0-2\eta_j).f0​(τ)=rη0​log(η0​−τ)+j=1∑q​(ηj​log(τ−ηj​)−(η0​−ηj​)log(τ−η0​+ηj​))−2j=1∑r​ηj​logηj​+j=r+1∑q​(η0​−2ηj​)log(η0​−2ηj​).

Writing τ0\tau_0τ0​ for the zero with Im⁡τ0>0\operatorname{Im}\tau_0 > 0Imτ0​>0 of largest real part, the two competing constants of the method are

C0=−Re⁡f0(τ0),C1=rm1+m2+⋯+mq−r−(∫01φ(x) dψ(x)−∫01/mq−rφ(x) dxx2),C_0 = -\operatorname{Re} f_0(\tau_0), \qquad C_1 = rm_1 + m_2 + \dots + m_{q-r} - \Big(\int_0^1 \varphi(x)\,\mathrm{d}\psi(x) - \int_0^{1/m_{q-r}}\varphi(x)\,\frac{\mathrm{d}x}{x^2}\Big),C0​=−Ref0​(τ0​),C1​=rm1​+m2​+⋯+mq−r​−(∫01​φ(x)dψ(x)−∫01/mq−r​​φ(x)x2dx​),

with ψ\psiψ the logarithmic derivative of the gamma function.

Formalization targets

Goal

∃ a∈{5,7,9,11}:ζ(a)∉Q.\exists\, a \in \{5,7,9,11\}: \quad \zeta(a) \notin \mathbb{Q}.∃a∈{5,7,9,11}:ζ(a)∈/Q.

The goal fixes no witness: the statement is satisfied as soon as one of the four values is irrational, and remains the honest form of what the source proves. It is deliberately weaker than the (open) statement that each ζ(2k+1)\zeta(2k+1)ζ(2k+1) is irrational, and weaker than any claim identifying which of the four is irrational.

Route to the goal

The milestones follow the source's own numbering: Lemma 1 (the linear form and its denominators), the prime-number-theorem asymptotics of DmjnD_{m_j n}Dmj​n​, Lemma 2 (the saddle-point asymptotics of FnF_nFn​ for r=3r = 3r=3), the small-values criterion for display (4), Lemma 3 (the criterion C0>C1C_0 > C_1C0​>C1​), and the numerical verification of C0>C1C_0 > C_1C0​>C1​ at r=3r = 3r=3, q=13q = 13q=13, η0=91\eta_0 = 91η0​=91, η1=η2=η3=27\eta_1 = \eta_2 = \eta_3 = 27η1​=η2​=η3​=27, ηj=25+j\eta_j = 25 + jηj​=25+j for 4≤j≤134 \le j \le 134≤j≤13, where C0=227.58019641…C_0 = 227.58019641\ldotsC0​=227.58019641… and C1=226.24944266…C_1 = 226.24944266\ldotsC1​=226.24944266….

Significance

The result itself. Together with Apéry's theorem it gives the smallest list of small odd zeta values known to contain an irrational number, and it fixes the current record of the Ball–Rivoal hypergeometric method: the same machinery yields quantitative lower bounds for the dimension of the Q\mathbb{Q}Q-span of odd zeta values, and any improvement of the arithmetic factor Φn\Phi_nΦn​ or the saddle-point estimate propagates directly to those bounds.

Formalizing it. The result is proved mathematically; nothing here is open. What is missing is a machine-checked proof. Mathlib contains the Riemann zeta function, the gamma function, and the prime number theorem, but not Apéry's theorem, not the Ball–Rivoal construction, and not the Chudnovsky–Rukhadze–Hata arithmetic method. A complete development produces reusable infrastructure: integrality of very-well-poised hypergeometric sums, the φ\varphiφ/Φn\Phi_nΦn​ denominator-saving mechanism, saddle-point asymptotics for a Barnes-type complex integral, and the standard linear-form irrationality criterion.

Difficulty

The obvious route — exhibit explicit rational approximations to a single ζ(2k+1)\zeta(2k+1)ζ(2k+1) and estimate them — fails, and that failure is the content of the field: no construction is known that separates a single odd zeta value. Zudilin's construction instead produces one real sequence FnF_nFn​ that is simultaneously a Q\mathbb{Q}Q-linear form in 1,ζ(5),ζ(7),ζ(9),ζ(11)1, \zeta(5), \zeta(7), \zeta(9), \zeta(11)1,ζ(5),ζ(7),ζ(9),ζ(11); irrationality of some coefficient's argument then follows from the two-sided estimate, but the argument is blind to which one.

The three hard steps are independent of one another. First, integrality: the coefficients of FnF_nFn​ have denominators controlled by Dm1nrDm2n⋯Dmq−rnD_{m_1 n}^r D_{m_2 n}\cdots D_{m_{q-r}n}Dm1​nr​Dm2​n​⋯Dmq−r​n​, and the extra factor Φn\Phi_nΦn​ — a product of prime powers extracted from the φ\varphiφ-function — must be divided out; this is a delicate ppp-adic valuation count. Second, asymptotics: the exact exponential rate of ∣Fn∣|F_n|∣Fn​∣ comes from a complex integral over a vertical line, evaluated by the saddle-point method at a zero of a degree-161616 polynomial with no closed form. Third, the final comparison C0>C1C_0 > C_1C0​>C1​ is a numerical inequality between two transcendental-looking constants that must be certified rigorously, including a Stieltjes integral of a piecewise-constant function against the digamma function.

Formalization scope

Statements are formalized over the reals, with ζ(k)\zeta(k)ζ(k) for an integer k≥2k \ge 2k≥2 represented by the convergent series ∑n≥1n−k\sum_{n\ge 1} n^{-k}∑n≥1​n−k (zetaR); a bridging statement identifies it with Mathlib's riemannZeta at natural arguments, so the goal theorem may be stated with riemannZeta as it already is in the platform library. Admissible parameter sets are a structure carrying qqq, rrr, the sequence η\etaη, and the hypotheses of the source, so no theorem quantifies over parameters the source excludes. R is a real-valued function of a real variable built from Real.Gamma, and FnF_nFn​ is the tsum of its (r−1)(r-1)(r−1)-st iteratedDeriv at natural arguments; convergence is a separate milestone rather than a silent assumption, so that the value is not asserted to exist by fiat. φ\varphiφ is the infimum over y∈[0,1)y \in [0,1)y∈[0,1) of the integer-valued expression above, Φn\Phi_nΦn​ a finite product over primes p≤mq−rnp \le m_{q-r}np≤mq−r​n with η0n<p2\eta_0 n < p^2η0​n<p2 (the integer form of η0n<p\sqrt{\eta_0 n} < pη0​n​<p), and DND_NDN​ the Finset.lcm of 1,…,N1, \dots, N1,…,N. The Stieltjes integral ∫01φ dψ\int_0^1 \varphi\,\mathrm{d}\psi∫01​φdψ is written as ∫01φ(x)ψ′(x) dx\int_0^1 \varphi(x)\psi'(x)\,\mathrm{d}x∫01​φ(x)ψ′(x)dx, which agrees with the Riemann–Stieltjes integral because ψ\psiψ is continuously differentiable on (0,1](0,1](0,1]; f0f_0f0​ uses the principal branch of the complex logarithm.

The saddle point τ0\tau_0τ0​ is not defined by a choice function: every statement that mentions it takes it as a parameter together with the hypotheses "root of the polynomial", "positive imaginary part", "maximal real part among such roots", and the two side conditions Re⁡τ0<η0\operatorname{Re}\tau_0 < \eta_0Reτ0​<η0​ and Im⁡f0(τ0)∉πZ\operatorname{Im} f_0(\tau_0)\notin\pi\mathbb{Z}Imf0​(τ0​)∈/πZ of Lemma 2. No milestone is vacuous: for the concrete parameter set of the source such a τ0\tau_0τ0​ exists, with τ0≈87.479005+3.328207 i\tau_0 \approx 87.479005 + 3.328207\,iτ0​≈87.479005+3.328207i.

Contributions of any size are welcome, including partial infrastructure: ppp-adic valuation lemmas for products of factorials, asymptotics of Finset.lcm, saddle-point estimates, and interval-arithmetic machinery for the final numerical comparison.

Selected references

  • R. Apéry, Irrationalité de ζ(2)\zeta(2)ζ(2) et ζ(3)\zeta(3)ζ(3), Astérisque 61 (1979), 11–13. numdam
  • T. Rivoal, La fonction zêta de Riemann prend une infinité de valeurs irrationnelles aux entiers impairs, C. R. Acad. Sci. Paris Sér. I Math. 331 (2000), 267–270. doi:10.1016/S0764-4442(00)01624-4
  • T. Rivoal, Propriétés diophantiennes des valeurs de la fonction zêta de Riemann aux entiers impairs, Thèse de doctorat, Univ. de Caen, 2001.
  • W. V. Zudilin, One of the numbers ζ(5),ζ(7),ζ(9),ζ(11)\zeta(5), \zeta(7), \zeta(9), \zeta(11)ζ(5),ζ(7),ζ(9),ζ(11) is irrational, Uspekhi Mat. Nauk 56:4 (2001), 149–150. doi:10.4213/rm427
40 thms7 active usersReviewed
🏆Completed
Combinatorics·Captain: aarontcao

The Komlos-Sulyok-Szemeredi bound: every finite set of reals has a Sidon subset of size c sqrt nResearch Paper

Call a set of reals a Sidon set when all its pairwise sums are distinct: if a+b=c+da + b = c + da+b=c+d with all four in the set, then {a,b}={c,d}\{a,b\} = \{c,d\}{a,b}={c,d}.

The goal. There is an absolute constant c>0c > 0c>0 such that every finite set XXX of positive reals contains a Sidon subset SSS with ∣S∣≥c∣X∣|S| \ge c\sqrt{|X|}∣S∣≥c∣X∣​.

This is the lower bound half of Erdos problem 530, which Riddell posed and which asks for the order of the largest guaranteed Sidon subset. That problem is open: it asks whether the guarantee is asymptotically N1/2N^{1/2}N1/2, and the constant is not known. What is settled is the order, by Komlos, Sulyok, and Szemeredi, Linear problems in combinatorial number theory, Acta Math. Acad. Sci. Hungar. 26 (1975) 113-121, as a case of a general theorem about linear equations. Erdos had previously observed the cube-root lower bound and the matching (1+o(1))N1/2(1+o(1))N^{1/2}(1+o(1))N1/2 upper bound from A={1,…,N}A = \{1, \dots, N\}A={1,…,N}. A second and much shorter proof is in Bailleul and Riblet, arXiv:2605.03181.

The exponent is the whole problem

A one-paragraph argument gives ∣S∣≥c∣X∣1/3|S| \ge c|X|^{1/3}∣S∣≥c∣X∣1/3: take a Sidon subset SSS of maximum size, and note that every xxx outside it satisfies x=c+d−bx = c + d - bx=c+d−b or x=(c+d)/2x = (c+d)/2x=(c+d)/2 for elements of SSS, so ∣X∣≤3∣S∣3|X| \le 3|S|^3∣X∣≤3∣S∣3.

That cube root is not a weak first attempt, it is the ceiling for any argument that only counts. An arithmetic progression of length nnn has additive energy of order n3n^3n3, so a probabilistic argument cannot see the difference between it and a generic set. Getting from 1/31/31/3 to 1/21/21/2 requires using the structure of the set, and that is what both published proofs do.

The idea both proofs share

Compress, then pigeonhole against a known Sidon set.

An arbitrary finite set of reals has no arithmetic to work with, so first move it into Z\mathbb{Z}Z: a finite set spans a finite dimensional Q\mathbb{Q}Q-vector space, and a generic rational functional separates its points while preserving every relation a+b=c+da + b = c + da+b=c+d. Then squeeze the resulting integers into an interval of length comparable to their number, keeping a constant fraction of them and keeping the property that a Sidon subset of the image lifts to one of the original. Finally intersect with a translate of the Erdos-Turan Sidon set, which has about N\sqrt{N}N​ elements inside {0,…,N−1}\{0, \dots, N-1\}{0,…,N−1}. A set of size Θ(n)\Theta(n)Θ(n) inside [1,n][1,n][1,n] meets some translate of a Sidon set of size n\sqrt{n}n​ in order n\sqrt{n}n​ points, and that intersection is Sidon.

The two proofs differ only in the compression step, and the mission carries both.

The two routes

The 1975 route compresses in four lemmas driven by a remainder map: choose a modulus qqq dividing no difference, dilate so that the remainders are small, and observe that a small remainder map preserves a+b=c+da + b = c + da+b=c+d. Finding the modulus needs a prime counting bound.

The 2026 route replaces all four with one averaging lemma over a real rotation parameter θ\thetaθ, keeping the elements whose fractional part of amθam\thetaamθ is below 1/21/21/2, where no carry occurs. No prime counting appears anywhere.

Notes on the formalization

Every item is stated in Mathlib primitives alone, so the mission needs no definition items. The Sidon condition, the Erdos-Turan construction, and the reduction relation of the 1975 route are all written out at each use.

The published 2026 proof finishes with Singer's 1938 covering of Z/(q2+q+1)Z\mathbb{Z}/(q^2+q+1)\mathbb{Z}Z/(q2+q+1)Z by q+1q+1q+1 Sidon sets. Mathlib has no perfect difference sets, so the mission uses averaging over translates instead. It does the same job at the same order and gives a worse constant, which costs nothing because the goal asserts only that some c>0c > 0c>0 exists.

Two lemmas of the 1975 paper are deliberately absent. A local formalization of Lemma 2 and Lemma 6 turned out to be false as stated, machine-checked in both cases, so neither is offered here as a milestone. Those are errors in that rendering rather than in the paper, and the 2026 route reaches the goal without either. Lemma 1' is absent for the same practical reason: the 2026 route does not need it.

17 thms7 active usersReviewed
🏆Completed
Combinatorics·Captain: aarontcao

Long-Wagner Conjecture 5.1: cube-free subsets of Z/2^nZ have density at most 5/8Open Problem

Call A⊆Z/2nZA \subseteq \mathbb{Z}/2^n\mathbb{Z}A⊆Z/2nZ cube-free if no triple x,y,zx, y, zx,y,z has all seven of xxx, yyy, zzz, x+yx+yx+y, y+zy+zy+z, z+xz+xz+x, x+y+zx+y+zx+y+z inside AAA. The triple is unconstrained, so a degenerate one counts. Write f(n)f(n)f(n) for the largest size of a cube-free subset.

The conjecture. f(n)≤582nf(n) \le \frac{5}{8} 2^nf(n)≤85​2n for every nnn.

This is Conjecture 5.1 of Jason Long and Adam Zsolt Wagner, The largest projective cube-free subsets of Z2n\mathbb{Z}_{2^n}Z2n​, arXiv:1810.01225. It has been open since October 2018, and a 2026 journal paper still names it as conjectured: Yuchen Meng, On Cube-Free Problems, Electron. J. Combin. 33(1) (2026) #P1.16.

The constant is attained

The bound is sharp, and the extremal set is explicit: A={v:v mod 8∈{1,3,4,5,7}}A = \{v : v \bmod 8 \in \{1,3,4,5,7\}\}A={v:vmod8∈{1,3,4,5,7}}, the odd residues together with those congruent to 4 mod 8. Its size is 2n−1+2n−3=582n2^{n-1} + 2^{n-3} = \frac{5}{8} 2^n2n−1+2n−3=85​2n. In the layer language of Long and Wagner this is C3=L1∪L3C_3 = L_1 \cup L_3C3​=L1​∪L3​.

What is known

The conjecture holds for unions of layers. That is Long-Wagner Theorem 1.10 at d=3d = 3d=3, and it is the largest class on which the conjectured constant is proved.

For arbitrary sets the best published unconditional bound is f(n)<232nf(n) < \frac{2}{3} 2^nf(n)<32​2n. Meng calls this bound "quite trivial" and gives it in one paragraph for every cyclic group, so it should not be read as progress toward 5/85/85/8. The residual gap is exactly 23−58=124\frac{2}{3} - \frac{5}{8} = \frac{1}{24}32​−85​=241​, that is 2n/242^n/242n/24 elements.

Small values are f(1)=1f(1) = 1f(1)=1, f(2)=2f(2) = 2f(2)=2, f(3)=5f(3) = 5f(3)=5, f(4)=10f(4) = 10f(4)=10, f(5)=20f(5) = 20f(5)=20, f(6)=40f(6) = 40f(6)=40, f(7)=80f(7) = 80f(7)=80, matching 2n−1+2n−32^{n-1} + 2^{n-3}2n−1+2n−3 from n=3n = 3n=3 on.

State those values honestly. They come from solver searches, Gurobi in Long and Wagner for n≤7n \le 7n≤7 and an independent SAT reproduction. The SAT half that matters, the unsatisfiability of "a cube-free set of size 81 exists at n=7n = 7n=7", is a solver claim with no proof certificate checked and no kernel check behind it. The witness half is verified: a set of exactly 80 elements was produced and re-checked cube-free. So f(7)≥80f(7) \ge 80f(7)≥80 is solid and f(7)≤80f(7) \le 80f(7)≤80 is not certified. Nothing in this mission rests on either.

What the items are

The goal item is the conjecture itself, for n≥4n \ge 4n≥4, and it is open. Every other item is a milestone that is proved mathematics, and the two closed instances n=4n = 4n=4 and n=5n = 5n=5 are stated separately because they are the only cases of the goal that a proof assistant has actually settled here.

The chain runs: the base case mod 8 by exhaustion, monotonicity under subsets, the bridge between the membership form and the Finset form of the forbidden configuration, sharpness, the odd-residue tight case, the layer-union theorem, the two-thirds bound, and then n=4n = 4n=4 and n=5n = 5n=5.

Notes on the formalization

Six definitions live in one definition item, Def_Z2nCubeFreeLayers: HasCube, CubeFree, config, ConfigFree, layerIdx and IsLayerUnion. layerIdx is written through the 2-adic valuation rather than through a congruence, because the congruence form leaves 000 in no layer at all and needs the last layer special-cased.

CubeFree and ConfigFree are two encodings of the same condition and they are not definitionally equal, because config collapses duplicates on a degenerate triple. Their equivalence is a milestone rather than an assumption.

18 thms6 active usersReviewed
🏆Completed
Captain: tp

Freiman's maximal Hall rayTextbook

The Lagrange spectrum describes the asymptotic quality of rational approximation to irrational real numbers. The Markov spectrum is defined through minima of indefinite binary quadratic forms. Freiman determined the exact starting point of the maximal half-line contained in each spectrum.

This mission aims to formalize his theorem that this half-line is [cF,∞)[c_F,\infty)[cF​,∞), where

cF=2221564096+283748462491993569=4.527829566160879….c_F=\frac{2221564096+283748\sqrt{462}}{491993569} =4.527829566160879\ldots.cF​=4919935692221564096+283748462​​=4.527829566160879….

The formalization must establish membership of every real number at least cFc_FcF​, including the endpoint, and show that no half-line starting below cFc_FcF​ is contained in either spectrum.

The sources are Freiman's Russian monograph and an accompanying detailed reconstruction of its proof, with an English translation, exact computational certificates, and verification scripts. The project follows Freiman's continued fraction construction, incorporating the corrections and supplementary arguments established in the report.

The intended result is a complete Lean 4 proof. Its scope includes the equivalence of the classical and continued fraction definitions of the spectra, the infinite constructions that realize spectral values, and the exact finite calculations used in the argument.

Source material

  • Proof report (PDF) — the complete argument, exact certificate appendices and corrected English translation of Freiman's Russian text. Download PDF.
  • Verification package (ZIP) — the report, its LaTeX sources, the Russian source, certificate data, verification programs and reproduction instructions. Download ZIP.

Start with README.md and PROOF_GUIDE.md in the package. The files formalization/MISSION.md and formalization/MILESTONES.md describe the scope and proposed stages of the formalization. For reproducing the report, use the PDF and sources contained in the ZIP.

References to the report in the individual source fields use its printed page numbers.

114 thms6 active usersReviewed
🏆Completed
Captain: davidloeffler

Ordinary p-adic L-functions: Mazur–Tate–Teitelbaum interpolationResearch Paper

Why construct a p-adic L-function?

A modular form has a complex L-function whose critical values carry arithmetic information. To compare those values in p-adic families, their transcendental period factors must first be removed. The remaining algebraic numbers can then be embedded into a p-adic field. The result sought here is a single bounded measure encoding the critical values of all twists by characters of p-power conductor. This is the existence and interpolation theorem underlying the cyclotomic p-adic L-function (one of the most fundamental objects of Iwasawa theory).

The reference is the famous paper of Mazur, Tate and Teitelbaum, Chapter I, especially §§10–14 (MTT); but for simplicity we are treating only the ordinary case here (not the more general finite-slope case), and not attacking the results later in MTT (exceptional-zero conjectures, etc).

Modular forms, periods, and measures

Fix a prime ppp, a positive integer NNN, and a weight k≥2k\ge2k≥2. Let fff be a normalized cuspidal Hecke eigenform of weight kkk on Γ1(N)\Gamma_1(N)Γ1​(N) with nebentypus ϵ\epsilonϵ and Fourier coefficients ana_nan​ (necessarily algebraic). Fix embeddings ι∞:Q‾↪C\iota_\infty:\overline{\mathbb Q}\hookrightarrow\mathbb Cι∞​:Q​↪C and ιp:Q‾↪Cp\iota_p:\overline{\mathbb Q}\hookrightarrow\mathbb C_pιp​:Q​↪Cp​. No condition p∤Np\nmid Np∤N is imposed. The character ϵ\epsilonϵ is extended by zero on nonunits modulo NNN.

The form is ordinary when ∣ιp(ap)∣p=1|\iota_p(a_p)|_p=1∣ιp​(ap​)∣p​=1. The ordinary root α\alphaα is the root of

X2−ιp(ap)X+ιp(ϵ(p))pk−1X^2-\iota_p(a_p)X+\iota_p(\epsilon(p))p^{k-1}X2−ιp​(ap​)X+ιp​(ϵ(p))pk−1

with ∣α∣p=1|\alpha|_p=1∣α∣p​=1. This convention also covers the UpU_pUp​ case: if p∣Np\mid Np∣N, then ϵ(p)=0\epsilon(p)=0ϵ(p)=0 and the unit root is ιp(ap)\iota_p(a_p)ιp​(ap​) (MTT I.§12).

A measure means a continuous Cp\mathbb C_pCp​-linear functional on the continuous functions C(Zp×,Cp)C(\mathbb Z_p^\times,\mathbb C_p)C(Zp×​,Cp​). It is a bounded p-adic measure, rather than a positive real-valued measure. The Lean representation is Mathlib's AbstractMeasure on (PadicInt p)ˣ.

The two periods Ω+\Omega^+Ω+ and Ω−\Omega^-Ω− normalize the signed modular integrals. Write

Φj(r)=2π∫0∞f(r+it)(r+it)j dt,\Phi_j(r)=2\pi\int_0^\infty f(r+it)(r+it)^j\,dt,Φj​(r)=2π∫0∞​f(r+it)(r+it)jdt,

and use (Φj(r)+s(−1)jΦj(−r))/2(\Phi_j(r)+s(-1)^j\Phi_j(-r))/2(Φj​(r)+s(−1)jΦj​(−r))/2 for sign s∈{+1,−1}s\in\{+1,-1\}s∈{+1,−1}. A period system specifies nonzero periods, algebraic normalized values for 0≤j≤k−20\le j\le k-20≤j≤k−2, and finite generation over Z\mathbb ZZ of the lattice generated by these values. Period rationality and finite generation are separate mathematical obligations, combining Manin–Shimura rationality with the module-of-values construction in MTT I.§2; see also the explicit treatment of general eigenforms in Williams, §11.7.

Formalization targets

The goal is to construct an ordinary root, a period system, and a measure μ\muμ with the following interpolation property. Let χ\chiχ be a primitive Dirichlet character of conductor m=pnm=p^nm=pn, where n≥0n\ge0n≥0, and let 0≤j≤k−20\le j\le k-20≤j≤k−2. Put s=χ(−1)(−1)js=\chi(-1)(-1)^js=χ(−1)(−1)j. With the positive-exponential Gauss sum τ(χ)=∑a mod mχ(a)e2πia/m\tau(\chi)=\sum_{a\bmod m}\chi(a)e^{2\pi ia/m}τ(χ)=∑amodm​χ(a)e2πia/m, define the algebraic number Aχ,jA_{\chi,j}Aχ,j​ by

ι∞(Aχ,j)=mj+1j!(−2πi)jτ(χ−1)ΩsL(fχ−1,j+1).\iota_\infty(A_{\chi,j})= \frac{m^{j+1}j!}{(-2\pi i)^j\tau(\chi^{-1})\Omega^s} L(f_{\chi^{-1}},j+1).ι∞​(Aχ,j​)=(−2πi)jτ(χ−1)Ωsmj+1j!​L(fχ−1​,j+1).

The required identity is

∫Zp×ιp(χ(x))xj dμ(x)=ep(α,χ,j) ιp(Aχ,j),\int_{\mathbb Z_p^\times}\iota_p(\chi(x))x^j\,d\mu(x) =e_p(\alpha,\chi,j)\,\iota_p(A_{\chi,j}),∫Zp×​​ιp​(χ(x))xjdμ(x)=ep​(α,χ,j)ιp​(Aχ,j​),

where all algebraic character values in the following expression are transported by ιp\iota_pιp​:

ep(α,χ,j)=α−n(1−ιp(χ−1(p)ϵ(p))pk−2−jα)(1−ιp(χ(p))pjα).e_p(\alpha,\chi,j)=\alpha^{-n} \left(1-\frac{\iota_p(\chi^{-1}(p)\epsilon(p))p^{k-2-j}}{\alpha}\right) \left(1-\frac{\iota_p(\chi(p))p^j}{\alpha}\right).ep​(α,χ,j)=α−n(1−αιp​(χ−1(p)ϵ(p))pk−2−j​)(1−αιp​(χ(p))pj​).

This is the scalar period-normalized form of MTT I.§14. At n>0n>0n>0 both character values at ppp vanish, leaving α−n\alpha^{-n}α−n. At n=0n=0n=0 the primitive character is the character of modulus one, and both Euler factors remain. The latter case is included explicitly.

Seven milestones isolate period rationality and its finite lattice; existence and uniqueness of the ordinary root; the distribution relation for polynomial disk moments; uniform boundedness of constant disk masses; unique extension to a measure with every critical polynomial moment; the complex Birch–Mellin identity; and the deduction of interpolation from the two signed measures. Their source locations are recorded individually. The period milestone combines two standard inputs; the boundedness and extension milestones specialize the MTT construction to slope zero.

What the formalization supplies

The result supplies the analytic input for studying p-adic special values and their variation. It also supplies reusable infrastructure for normalized modular integrals, rational period systems, finite-order twists, and bounded measures on p-adic units. The classical existence theorem is known. The work proposed here is to prove the stated Lean theorems and connect the existing Mathlib analytic and algebraic infrastructure. Local compilation establishes that the declarations are well-typed; the mission statements remain unproved targets.

Where the difficulty lies

Listing algebraic critical values does not establish that one bounded measure interpolates them. Values on nested residue disks must satisfy compatibility, and ordinary boundedness must control the extension to continuous functions. Polynomial moments of positive degree must agree with that same extension. The unramified character requires its own Euler-factor calculation; simply applying the ramified formula at conductor one loses factors. On the complex side, rationality requires genuine periods of the modular form, not arbitrary chosen scaling constants. These are the obligations represented by the milestones.

Formalization scope and conventions

The cusp form is Mathlib's analytic CuspForm, with Fourier coefficients tied to its width-one q-expansion. The nebentypus transformation law and every prime Hecke eigenvalue equation are written explicitly. The prime Hecke operator includes both its translated sum and its second term; when the prime divides the level, the second term vanishes. The complex twist is the finite-translate expression for fχ−1f_{\chi^{-1}}fχ−1​, and its critical L-value is defined by the actual Mellin integral. Neither an arbitrary L-value table nor the desired measure is an input assumption.

The embeddings share the abstract algebraic closure of Q\mathbb QQ; there is no asserted continuous map from C\mathbb CC to Cp\mathbb C_pCp​. The algebraic bridge in each interpolation identity is existential and constrained by a complex equality. Test functions are existential continuous maps constrained pointwise to equal the specified character or disk function; this makes their continuity part of the conclusion instead of an unproved definition. All primes, including 222, are allowed. Natural-number subtractions occur only in theorem contexts with k≥2k\ge2k≥2 and j≤k−2j\le k-2j≤k−2.

The signed projections use a factor of 1/21/21/2. Their normalized measures are added, and the period sign is χ(−1)(−1)j\chi(-1)(-1)^jχ(−1)(−1)j. These conventions fix the powers, sign, Gauss sum, and periods in the displayed interpolation formula. Periods are not asserted to be canonical integral periods; rescaling by algebraic constants changes the normalization. Exceptional-zero derivative formulas, positive-slope distributions, tame-conductor twists, and Iwasawa main conjectures are outside this mission.

Selected references

  • B. Mazur, J. Tate and J. Teitelbaum, On p-adic analogues of the conjectures of Birch and Swinnerton-Dyer, Inventiones Mathematicae 84 (1986), 1–48, Chapter I, §§1–4 and 7–14. DOI; digitized original.
  • G. Shimura, On the periods of modular forms, Mathematische Annalen 229 (1977), 211–221. DOI.
  • C. Williams, An introduction to p-adic L-functions II: Modular forms, lecture notes, §§11.6–11.8, particularly Proposition 11.21, for period normalization of general eigenforms. Author's notes.
124 thms6 active usersReviewed
🏆Completed
Pure Mathematics·Captain: alya

Multiplicative Number Theory I: Siegel–Walfisz and the Three Primes TheoremTextbook

Primes in progressions, uniformly in the modulus

Applying the circle method to an additive problem about primes requires counting primes in arithmetic progressions with an error term uniform in the modulus: the modulus is not fixed in advance, it grows with the size of the numbers being represented. The Siegel–Walfisz theorem is the classical statement of that uniformity, valid for every modulus up to a fixed power of log⁡x\log xlogx, and it is the one analytic ingredient the standard proof of Vinogradov's three primes theorem cannot do without.

The history is a sequence of partial uniformities:

  • 1837. Dirichlet proves that every progression a mod qa \bmod qamodq with (a,q)=1(a,q)=1(a,q)=1 contains infinitely many primes, for each fixed qqq, with no rate (Dirichlet's theorem).
  • 1896–1899. De la Vallée Poussin proves the prime number theorem with the error term O(xe−clog⁡x)O(x e^{-c\sqrt{\log x}})O(xe−clogx​), and extends the zero-free region from ζ\zetaζ to L(s,χ)L(s,\chi)L(s,χ), obtaining the prime number theorem in progressions for each fixed qqq (PNT).
  • 1918–1935. Landau and Page isolate the obstruction to uniformity: a single real zero near s=1s=1s=1, attached to a quadratic character. Landau shows at most one of two distinct real primitive characters can have such a zero; Page shows at most one modulus below a given bound can, yielding unconditional uniformity for qqq up to a bounded power of log⁡x\log xlogx (Page's theorem).
  • 1935. Siegel proves L(1,χ)≫εq−εL(1,\chi) \gg_\varepsilon q^{-\varepsilon}L(1,χ)≫ε​q−ε for real primitive χ\chiχ, at the price of an ineffective constant (Siegel).
  • 1936. Walfisz combines Siegel's bound with the de la Vallée Poussin machinery and obtains uniformity for every fixed power q≤(log⁡x)Aq \le (\log x)^Aq≤(logx)A (Walfisz).
  • 1937. Vinogradov proves that every sufficiently large odd integer is a sum of three primes (Vinogradov's theorem).
  • 2013. Helfgott removes the "sufficiently large", settling ternary Goldbach for all odd n>5n > 5n>5 (arXiv:1312.7748).

Setting

The von Mangoldt function Λ(n)\Lambda(n)Λ(n) equals log⁡p\log plogp if n=pmn = p^mn=pm is a prime power and 000 otherwise. The Chebyshev function ψ(x)=∑n≤xΛ(n)\psi(x) = \sum_{n \le x} \Lambda(n)ψ(x)=∑n≤x​Λ(n) counts primes with weights; the prime number theorem is the assertion ψ(x)∼x\psi(x) \sim xψ(x)∼x.

A Dirichlet character modulo qqq is a multiplicative function χ:Z/qZ→C\chi : \mathbb{Z}/q\mathbb{Z} \to \mathbb{C}χ:Z/qZ→C, supported on the units and taking root-of-unity values there. The principal character χ=1\chi = 1χ=1 is the indicator of the units; a character is quadratic (real) if χ2=1\chi^2 = 1χ2=1 and χ≠1\chi \neq 1χ=1, and primitive if it is not induced by a character of a proper divisor of qqq. The Dirichlet LLL-function L(s,χ)=∑n≥1χ(n)n−sL(s,\chi) = \sum_{n\ge 1}\chi(n)n^{-s}L(s,χ)=∑n≥1​χ(n)n−s, defined for Re⁡s>1\operatorname{Re} s > 1Res>1, extends meromorphically to C\mathbb{C}C, entire except for a simple pole at s=1s = 1s=1 when χ\chiχ is principal.

The two counting functions of the mission are the twisted von Mangoldt sum and the progression sum

ψ(N,χ)=∑n<NΛ(n)χ(n),ψ(N;q,a)=∑n<Nn≡a (q)Λ(n),\psi(N,\chi) = \sum_{n < N} \Lambda(n)\chi(n), \qquad \psi(N;q,a) = \sum_{\substack{n < N \\ n \equiv a\ (q)}} \Lambda(n),ψ(N,χ)=n<N∑​Λ(n)χ(n),ψ(N;q,a)=n<Nn≡a (q)​∑​Λ(n),

related by finite character orthogonality. Write δχ=1\delta_\chi = 1δχ​=1 for χ\chiχ principal and δχ=0\delta_\chi = 0δχ​=0 otherwise. A zero β∈(0,1)\beta \in (0,1)β∈(0,1) of L(s,χ)L(s,\chi)L(s,χ) lying inside the classical zero-free region is an exceptional zero (a Siegel zero); the set of such zeros for a given χ\chiχ is the exceptional set EEE, which the results below constrain to have at most one element.

Formalization targets

The attack path follows Davenport, Multiplicative Number Theory, 3rd ed., §§14, 18, 20, 21, 22.

(1) zero_free_region (§14, pp. 88–96). There is an absolute c>0c>0c>0 such that for every q≥1q \ge 1q≥1 and every χ mod q\chi \bmod qχmodq,

L(s,χ)≠0for s≠1, Re⁡s ≥ 1−clog⁡(q(∣Im⁡s∣+2)),L(s,\chi) \neq 0 \quad\text{for } s \neq 1,\ \operatorname{Re} s \ \ge\ 1 - \frac{c}{\log\big(q(|\operatorname{Im} s| + 2)\big)},L(s,χ)=0for s=1, Res ≥ 1−log(q(∣Ims∣+2))c​,

with at most one exception, which is real, lies in (0,1)(0,1)(0,1), is a simple zero, and can occur only for quadratic non-principal χ\chiχ.

(2) pnt_dlvp (§18, pp. 111–114). For some c>0c > 0c>0 and all x≥2x \ge 2x≥2,

ψ(x)=x+O ⁣(x e−clog⁡x).\psi(x) = x + O\!\left(x\,e^{-c\sqrt{\log x}}\right).ψ(x)=x+O(xe−clogx​).

(3) psi_char_of_region (§20, pp. 121–125). For a region constant c>0c>0c>0 there are c1,c2>0c_1, c_2 > 0c1​,c2​>0 such that, whenever EEE is an exceptional set for χ mod q\chi \bmod qχmodq with respect to ccc and q≤exp⁡(c2log⁡N)q \le \exp(c_2\sqrt{\log N})q≤exp(c2​logN​),

ψ(N,χ)=δχN−∑β∈ENββ+O ⁣(Ne−c1log⁡N).\psi(N,\chi) = \delta_\chi N - \sum_{\beta \in E} \frac{N^\beta}{\beta} + O\!\left(N e^{-c_1\sqrt{\log N}}\right).ψ(N,χ)=δχ​N−β∈E∑​βNβ​+O(Ne−c1​logN​).

(4) siegel (§21, pp. 126–131). For every ε>0\varepsilon > 0ε>0 there is C(ε)>0C(\varepsilon) > 0C(ε)>0 such that for every real primitive non-principal χ mod q\chi \bmod qχmodq,

L(1,χ)>C(ε) q−ε.L(1,\chi) > C(\varepsilon)\, q^{-\varepsilon}.L(1,χ)>C(ε)q−ε.

(5) siegel_zero (§21, second form). For every ε>0\varepsilon > 0ε>0 there is C(ε)>0C(\varepsilon) > 0C(ε)>0 such that for every real primitive non-principal χ mod q\chi \bmod qχmodq,

L(σ,χ)≠0for all real σ>1−C(ε)q−ε.L(\sigma,\chi) \neq 0 \quad \text{for all real } \sigma > 1 - C(\varepsilon)q^{-\varepsilon}.L(σ,χ)=0for all real σ>1−C(ε)q−ε.

(6) siegelWalfisz (§22, pp. 132–134). For every A>0A > 0A>0 there are C,c>0C, c > 0C,c>0 such that for all q≥1q \ge 1q≥1, all χ mod q\chi \bmod qχmodq, and all N≥2N \ge 2N≥2 with q≤(log⁡N)Aq \le (\log N)^Aq≤(logN)A,

∥ψ(N,χ)−δχN∥≤CNe−clog⁡N.\big\lVert \psi(N,\chi) - \delta_\chi N \big\rVert \le C N e^{-c\sqrt{\log N}}.​ψ(N,χ)−δχ​N​≤CNe−clogN​.

This is literally the platform proposition ThreePrimes.SiegelWalfisz.

A corollary, not a milestone, records the progression form siegel_walfisz_ap: for (a,q)=1(a,q)=1(a,q)=1 and q≤(log⁡N)Aq \le (\log N)^Aq≤(logN)A,

ψ(N;q,a)=Nφ(q)+OA ⁣(Ne−clog⁡N).\psi(N;q,a) = \frac{N}{\varphi(q)} + O_A\!\left(N e^{-c\sqrt{\log N}}\right).ψ(N;q,a)=φ(q)N​+OA​(Ne−clogN​).

Goal (three_primes, §26). There is N0N_0N0​ such that every odd n≥N0n \ge N_0n≥N0​ is a sum of three primes. It follows from milestone (6) by the existing platform theorem deducing ThreePrimes.ThreePrimesExistence from ThreePrimes.SiegelWalfisz. The goal leaves N0N_0N0​ unspecified rather than hard-coding a numeric threshold, so it is not invalidated by later improvements to that threshold.

What the result gives, and what remains to be formalized

Siegel–Walfisz is the standard uniform input downstream of which sit the circle method for ternary Goldbach, the Bombieri–Vinogradov theorem, and much of sieve theory. Without it, the three primes theorem's major-arc analysis has no main term.

Platform status is the reason this mission exists. A complete, machine-checked formalization of the three primes theorem already exists in the namespace ThreePrimes (by user tabbott), following Vaughan, The Hardy–Littlewood Method, Ch. 3, and Davenport §26. It is conditional: it takes Siegel–Walfisz as an explicit hypothesis ThreePrimes.SiegelWalfisz. Discharging that hypothesis makes the three primes theorem unconditional, and is the whole content of this mission.

Mathlib contains the analytic continuation of L(s,χ)L(s,\chi)L(s,χ) (DirichletCharacter.LFunction), its functional equation, the non-vanishing of L(s,χ)L(s,\chi)L(s,χ) on Re⁡s≥1\operatorname{Re} s \ge 1Res≥1, Dirichlet's theorem, and the Chebyshev function. It does not contain the zero-free region for L(s,χ)L(s,\chi)L(s,χ), the explicit formula for ψ(x,χ)\psi(x,\chi)ψ(x,χ), Siegel's theorem, or Siegel–Walfisz. The platform additionally hosts the PNT+ project contour machinery for ζ\zetaζ — Borel–Carathéodory, the 3+4cos⁡θ+cos⁡2θ3 + 4\cos\theta + \cos 2\theta3+4cosθ+cos2θ inequality, a zero-free rectangle, and MediumPNT, ψ(x)=x+O(xexp⁡(−c(log⁡x)1/10))\psi(x) = x + O(x\exp(-c(\log x)^{1/10}))ψ(x)=x+O(xexp(−c(logx)1/10)). That is a template for the L(s,χ)L(s,\chi)L(s,χ) analogues, not a proof of them, and its error term is weaker than the de la Vallée Poussin form milestone (2) asks for.

Where the obvious argument fails

The first idea is to run the ζ\zetaζ argument character by character. It works for complex χ\chiχ and breaks for real ones. The positivity device that pushes zeros off Re⁡s=1\operatorname{Re} s = 1Res=1 compares χ\chiχ, χ2\chi^2χ2 and the trivial character at nearby points; when χ\chiχ is quadratic, χ2\chi^2χ2 is principal and contributes the pole of L(s,χ0)L(s,\chi_0)L(s,χ0​) at s=1s = 1s=1 at exactly the height where the putative zero sits, so the inequality degrades from "no zeros" to "at most one zero" and stops there. Every later step inherits that unexcluded zero: milestone (3) can only be stated with the Nβ/βN^\beta/\betaNβ/β term present, and milestone (6) is exactly the assertion that for q≤(log⁡N)Aq \le (\log N)^Aq≤(logN)A this term is small — which Siegel's ineffective bound supplies and nothing effective is known to.

A second shortcut, deducing uniformity from Mathlib's non-vanishing of L(s,χ)L(s,\chi)L(s,χ) on Re⁡s≥1\operatorname{Re} s \ge 1Res≥1 together with Dirichlet's theorem, also fails: those results are qualitative, carry no rate, and are not uniform in qqq.

Formalization scope

Sums run over n<Nn < Nn<N with N∈NN \in \mathbb{N}N∈N, matching Vino.vmSumChar and ThreePrimes.SiegelWalfisz; Davenport sums over n≤xn \le xn≤x. The two differ by the single term Λ(N)≤log⁡N\Lambda(N) \le \log NΛ(N)≤logN, negligible against every error term above. Milestone (2) alone uses a real argument, via Mathlib's Chebyshev.psi. L(s,χ)L(s,\chi)L(s,χ) is Mathlib's DirichletCharacter.LFunction, so no continuation is reconstructed.

The zero-free region is Davenport.InRegion c q s, namely Re⁡s≥1−c/log⁡(q(∣Im⁡s∣+2))\operatorname{Re} s \ge 1 - c/\log(q(|\operatorname{Im} s| + 2))Res≥1−c/log(q(∣Ims∣+2)); the exceptional zero is packaged as IsExceptionalSet c χ E: EEE is a subsingleton, every element is a real zero of L(⋅,χ)L(\cdot,\chi)L(⋅,χ) in (0,1)(0,1)(0,1) and can exist only for quadratic non-principal χ\chiχ, and L(s,χ)≠0L(s,\chi) \neq 0L(s,χ)=0 at every s≠1s \neq 1s=1 of the region outside EEE. Milestone (1) adds simplicity as L′(β,χ)≠0L'(\beta,\chi) \neq 0L′(β,χ)=0 for β∈E\beta \in Eβ∈E.

Milestone (3) takes the region constant c>0c > 0c>0 as a parameter rather than importing it from milestone (1), so the milestones can be attempted in any order. For large ccc the hypothesis IsExceptionalSet c χ E may be unsatisfiable for some χ\chiχ, making the statement vacuous there — a harmless weakening, not a falsehood, and not a trivializing reading: milestone (1) produces a definite small c>0c > 0c>0 with a witness EEE for every χ\chiχ, so instantiating milestone (3) at that ccc discharges the hypothesis rather than voiding it.

Siegel's theorem is stated for χ.IsQuadratic, χ ≠ 1, χ.IsPrimitive characters, with the conclusion a lower bound on Re⁡L(1,χ)\operatorname{Re} L(1,\chi)ReL(1,χ); since L(1,χ)L(1,\chi)L(1,χ) is real for real χ\chiχ, this is the value itself, not a weakening. The constants in milestones (4), (5) and (6) are ineffective; the statements are plain existentials, so ineffectivity is invisible to Lean, but no numeric constant can be extracted from anything downstream of them.

The principal character is included in the character-form statements, with main term NNN (if χ = 1 then (N : ℂ) else 0); milestones (3) and (6) therefore contain the prime number theorem itself and cannot be proved by restricting to non-principal χ\chiχ. Milestone (6) requires c>0c > 0c>0 strictly, which is what makes Ne−clog⁡NNe^{-c\sqrt{\log N}}Ne−clogN​ a genuine saving over the trivial ψ(N,χ)≪N\psi(N,\chi) \ll Nψ(N,χ)≪N; with c=0c = 0c=0 allowed it would be empty.

Beyond the six milestones, a complete development needs Hadamard factorization for L(s,χ)L(s,\chi)L(s,χ) as an entire function of order 111, the zero-counting estimate N(T,χ)N(T,\chi)N(T,χ) (§16, pp. 101–103), the truncated explicit formula for ψ(x,χ)\psi(x,\chi)ψ(x,χ) (§19, pp. 115–120), Perron-type contour truncation, and the imprimitive-to-primitive reduction ∣ψ(N,χ)−ψ(N,χ∗)∣≪(log⁡q)(log⁡N)|\psi(N,\chi) - \psi(N,\chi^{*})| \ll (\log q)(\log N)∣ψ(N,χ)−ψ(N,χ∗)∣≪(logq)(logN). All of it is reusable well beyond this mission, being the standard prerequisite for Bombieri–Vinogradov, Linnik's theorem, and effective Chebotarev. Contributions of these supporting results, of alternative routes to milestone (3) following Montgomery–Vaughan Ch. 11, of the π(x;q,a)\pi(x;q,a)π(x;q,a) versions, and of sharper constants are welcome.

Selected references

  • H. Davenport, Multiplicative Number Theory, 3rd ed., revised by H. L. Montgomery, GTM 74, Springer, 2000. §§14, 18, 20, 21, 22, 26. doi:10.1007/978-1-4757-5927-3
  • H. L. Montgomery and R. C. Vaughan, Multiplicative Number Theory I: Classical Theory, Cambridge University Press, 2007. Ch. 11–12 (Theorems 11.3, 11.14, 11.16, 12.10; Corollaries 11.10, 11.12, 11.17, 11.19). doi:10.1017/CBO9780511618314
  • R. C. Vaughan, The Hardy–Littlewood Method, 2nd ed., Cambridge University Press, 1997. Ch. 3. doi:10.1017/CBO9780511470929
  • C. L. Siegel, Über die Classenzahl quadratischer Zahlkörper, Acta Arithmetica 1 (1935), 83–86. eudml:205054
  • A. Walfisz, Zur additiven Zahlentheorie II, Mathematische Zeitschrift 40 (1936), 592–607. doi:10.1007/BF01218882
  • I. M. Vinogradov, Representation of an odd number as a sum of three primes, Doklady Akad. Nauk SSSR 15 (1937), 291–294. Vinogradov's theorem
  • H. A. Helfgott, The ternary Goldbach conjecture is true, 2013. arXiv:1312.7748
  • Siegel–Walfisz theorem, Wikipedia. link
  • Page theorem, Encyclopedia of Mathematics. link
  • A. Kontorovich et al., PrimeNumberTheoremAnd (PNT+), Lean formalization project. github
  • Mathlib, Mathlib.NumberTheory.LSeries.DirichletContinuation. docs
75 thms6 active usersReviewed
🏆Completed
Combinatorics·Captain: ShouqiaoWang

Erdős Problem 390: Exact Second-Order AsymptoticResearch Paper

Determine the exact second-order term in the least possible largest factor in a factorization of n!n!n! into distinct integers exceeding nnn, with the proposed rational constant 4029639598/259700381854029639598/259700381854029639598/25970038185.

97 thms6 active usersReviewed
🏆Completed
Linear OptimizationOperations ResearchOptimization·Captain: mikedeng1

An Application of Simultaneous Diophantine Approximation in Combinatorial Optimization: A Small Integral Objective with the Same Optimal Solutions and Dual BasesResearch Paper

Motivation

An algorithm for linear programming is strongly polynomial if the number of arithmetic operations it performs is bounded by a polynomial in the dimension of the problem alone (the number of variables and constraints), independently of the bit lengths of the numbers in the input. Many combinatorial optimization problems are linear programs over polyhedra of the form P={x∈Rn:Ax≤b}P = \{x \in \mathbb{R}^n : Ax \le b\}P={x∈Rn:Ax≤b} whose constraint matrix AAA has entries 0,+1,−10, +1, -10,+1,−1, but whose objective vector www is an arbitrary rational weight vector. Polynomial-time algorithms for such problems (for instance the ellipsoid-based algorithms of Grötschel, Lovász and Schrijver for maximum-weight cliques in perfect graphs, submodular flows, and matroid polyhedra) have running times that depend on the length of www.

Frank and Tardos (Combinatorica 1987) remove this dependence once and for all: they replace www by an integral objective w~\tilde ww~ whose entries have O(n3)O(n^3)O(n3) bits and which has exactly the same optimal solutions and the same optimal dual bases as www over every such polyhedron. Any algorithm that is polynomial in nnn and in the length of the objective then becomes strongly polynomial. The tool is simultaneous Diophantine approximation, used through the lattice-basis-reduction algorithm of Lenstra, Lenstra and Lovász (Math. Ann. 1982). The technique extends Tardos's strongly polynomial algorithm for linear programs with small constraint matrices (Oper. Res. 1986), which applies only to explicitly given programs.

Setting

For x∈Rnx \in \mathbb{R}^nx∈Rn write ∥x∥∞=max⁡j∣x(j)∣\|x\|_\infty = \max_j |x(j)|∥x∥∞​=maxj​∣x(j)∣ and ∥x∥1=∑j∣x(j)∣\|x\|_1 = \sum_j |x(j)|∥x∥1​=∑j​∣x(j)∣; sign⁡\operatorname{sign}sign takes the values −1,0,+1-1, 0, +1−1,0,+1.

Decomposition. Fix a positive integer NNN. A decomposition of w∈Rnw \in \mathbb{R}^nw∈Rn is an expression

w=∑i=1kλivi,λi>0, vi∈Zn.w = \sum_{i=1}^k \lambda_i v_i, \qquad \lambda_i > 0,\ v_i \in \mathbb{Z}^n.w=i=1∑k​λi​vi​,λi​>0, vi​∈Zn.

It satisfies condition (iii) if for i=2,…,ki = 2, \dots, ki=2,…,k the vector viv_ivi​ is nonzero and λi/λi−1≤1/(N∥vi∥∞)\lambda_i/\lambda_{i-1} \le 1/(N\|v_i\|_\infty)λi​/λi−1​≤1/(N∥vi​∥∞​): the coefficients decrease so quickly that each term is negligible against the previous one.

Preprocessing. Given a rational www and NNN, the paper's preprocessing algorithm finds a decomposition with k≤nk \le nk≤n, condition (iii), and the size bound (ii)' ∥vi∥∞≤2n2+nNn\|v_i\|_\infty \le 2^{n^2+n}N^n∥vi​∥∞​≤2n2+nNn, and outputs

w~=∑i=1kMk−ivi,M=2n2+nNn+1.\tilde w = \sum_{i=1}^k M^{k-i} v_i, \qquad M = 2^{n^2+n} N^{n+1}.w~=i=1∑k​Mk−ivi​,M=2n2+nNn+1.

Linear programs. Let AAA be an m×nm \times nm×n matrix with entries in {0,±1}\{0, \pm 1\}{0,±1} and b∈Rmb \in \mathbb{R}^mb∈Rm. The primal program is max⁡{wx:Ax≤b}\max\{wx : Ax \le b\}max{wx:Ax≤b} and the dual program is min⁡{yb:yA=w, y≥0}\min\{yb : yA = w,\ y \ge 0\}min{yb:yA=w, y≥0}. A point xˉ∈P\bar x \in Pxˉ∈P is www-maximal if wxˉ=max⁡(wx:x∈P)w\bar x = \max(wx : x \in P)wxˉ=max(wx:x∈P). A dual basis is a maximal set of row indices of AAA whose rows are linearly independent; it determines at most one yyy with yA=wyA = wyA=w supported on it (the basic dual solution), and it is an optimal dual basis if that yyy exists and is optimal for the dual program.

Formalization targets

Goal — Theorem 4.2 (p. 58)

For every w∈Qnw \in \mathbb{Q}^nw∈Qn, with N=(n+1)!+1N = (n+1)! + 1N=(n+1)!+1, there is w~∈Zn\tilde w \in \mathbb{Z}^nw~∈Zn with

∥w~∥∞≤24n3Nn(n+2)\|\tilde w\|_\infty \le 2^{4n^3} N^{n(n+2)}∥w~∥∞​≤24n3Nn(n+2)

such that for every 0,±10, \pm10,±1 matrix AAA with nnn columns and every bbb: (i) x∈Px \in Px∈P is www-maximal if and only if it is w~\tilde ww~-maximal; (ii) a set of rows of AAA is an optimal dual basis for www if and only if it is one for w~\tilde ww~. The vector w~\tilde ww~ depends on www only, not on AAA or bbb.

Milestones

  1. Dirichlet's theorem (p. 52): for N≥1N \ge 1N≥1 and α∈Rn\alpha \in \mathbb{R}^nα∈Rn there are p∈Znp \in \mathbb{Z}^np∈Zn and 1≤q≤Nn1 \le q \le N^n1≤q≤Nn with ∣qα(i)−p(i)∣<1/N|q\alpha(i) - p(i)| < 1/N∣qα(i)−p(i)∣<1/N for all iii.
  2. Theorem 3.1 (p. 53): every w∈Rnw \in \mathbb{R}^nw∈Rn has a decomposition with k≤nk \le nk≤n, ∥vi∥∞≤Nn\|v_i\|_\infty \le N^n∥vi​∥∞​≤Nn and condition (iii).
  3. Lemma 3.2 (pp. 54–55): under condition (iii), for integral bbb with ∥b∥1≤N−1\|b\|_1 \le N - 1∥b∥1​≤N−1, sign⁡(b⋅w)=sign⁡(b⋅vj)\operatorname{sign}(b \cdot w) = \operatorname{sign}(b \cdot v_j)sign(b⋅w)=sign(b⋅vj​) for the smallest jjj with b⋅vj≠0b \cdot v_j \ne 0b⋅vj​=0, and b⋅w=0b \cdot w = 0b⋅w=0 if there is no such jjj.
  4. Theorem 3.3 (p. 56): the preprocessed w~\tilde ww~ satisfies ∥w~∥∞≤24n3Nn(n+2)\|\tilde w\|_\infty \le 2^{4n^3}N^{n(n+2)}∥w~∥∞​≤24n3Nn(n+2) and sign⁡(w⋅b)=sign⁡(w~⋅b)\operatorname{sign}(w \cdot b) = \operatorname{sign}(\tilde w \cdot b)sign(w⋅b)=sign(w~⋅b) for all integral bbb with ∥b∥1≤N−1\|b\|_1 \le N-1∥b∥1​≤N−1.
  5. The case N=n+1N = n+1N=n+1 (p. 55): an integral w~\tilde ww~ with ∥w~∥∞≤24n3(n+1)n(n+2)\|\tilde w\|_\infty \le 2^{4n^3}(n+1)^{n(n+2)}∥w~∥∞​≤24n3(n+1)n(n+2) and w~(X)≤w~(Y)  ⟺  w(X)≤w(Y)\tilde w(X) \le \tilde w(Y) \iff w(X) \le w(Y)w~(X)≤w~(Y)⟺w(X)≤w(Y) for all subsets X,YX, YX,Y of coordinates.
  6. Lemma 4.1 (i) (p. 57): if sign⁡(w′⋅h)=sign⁡(w′′⋅h)\operatorname{sign}(w' \cdot h) = \operatorname{sign}(w'' \cdot h)sign(w′⋅h)=sign(w′′⋅h) for all integral hhh with ∥h∥1≤(n+1)!\|h\|_1 \le (n+1)!∥h∥1​≤(n+1)!, then w′w'w′ and w′′w''w′′ have the same maximizers over {Ax≤b}\{Ax \le b\}{Ax≤b} for every 0,±10, \pm10,±1 matrix AAA.
  7. Lemma 4.1 (ii) (p. 57): under the same hypothesis, a dual basis is optimal for w′w'w′ if and only if it is optimal for w′′w''w′′.

Significance

The result gives a general reduction: whenever a class of polyhedra with 0,±10, \pm10,±1 constraint matrices admits an optimization algorithm that is polynomial in nnn and in the length of the objective, it admits a strongly polynomial one. The paper applies this to maximum-weight cliques in perfect graphs, optimization over submodular flow polyhedra, and matroid polyhedra membership, and its Section 5 applies the same rounding to the integer programming algorithms of Lenstra and Kannan. The subset-sum corollary (milestone 5) is independently useful: every rational weight function on a finite set can be replaced by an integral one with O(n3)O(n^3)O(n3)-bit entries that orders all subset sums identically.

All statements of this mission have been proved on paper since 1987. None is formalized on Prove2Me, and Mathlib contains only the one-dimensional Dirichlet approximation theorem. The mission produces a machine-checked version of the exact statements, with the explicit constants of the paper; the complexity claims (operation counts, strong polynomiality) are not part of it.

Difficulty

The goal combines two independent parts. The number-theoretic part (milestones 1–5) needs a multidimensional Dirichlet theorem, an induction producing the decomposition, and exact inequality chains with the constants 2n2+nNn2^{n^2+n}N^n2n2+nNn and 24n3Nn(n+2)2^{4n^3}N^{n(n+2)}24n3Nn(n+2). The linear-programming part (milestones 6–7) needs bounds on the entries of inverses of nonsingular 0,±10, \pm10,±1 submatrices, the existence of optimal dual solutions supported on a dual basis, LP duality and complementary slackness. The obvious first idea, scaling www to an integer vector by a common denominator, preserves every sign but gives no bound on ∥w~∥∞\|\tilde w\|_\infty∥w~∥∞​ in terms of nnn; the bound is the content of the theorem. Likewise, rounding each coordinate of www separately to a fixed precision does not preserve the sign of w⋅bw \cdot bw⋅b when w⋅bw \cdot bw⋅b is tiny but nonzero.

Formalization scope

Vectors are functions on Fin n: the input www is rational (Fin n → ℚ) in the goal, in Theorem 3.3 and in the subset-sum corollary, as in the algorithm's input line; it is real in Theorem 3.1, Lemma 3.2 and Lemma 4.1, as on the page. Integral vectors are Fin n → ℤ, and AAA is a Matrix (Fin m) (Fin n) ℤ with every entry in {−1,0,1}\{-1, 0, 1\}{−1,0,1}, cast to R\mathbb{R}R; b∈Rmb \in \mathbb{R}^mb∈Rm is unrestricted. Decompositions are indexed by i∈{1,…,k}⊆Ni \in \{1, \dots, k\} \subseteq \mathbb{N}i∈{1,…,k}⊆N as in the paper. ∥b∥1\|b\|_1∥b∥1​ is always the explicit sum ∑j∣b(j)∣\sum_j |b(j)|∑j​∣b(j)∣, compared with N−1N - 1N−1 in Z\mathbb{Z}Z; ∥v∥∞\|v\|_\infty∥v∥∞​ of an integer vector is a natural number (supNorm). Sign equality uses SignType.sign and includes the zero case. Condition (iii) is stated multiplicatively together with vi≠0v_i \ne 0vi​=0, which the paper's quotient presupposes; without vi≠0v_i \ne 0vi​=0 Lemma 3.2 fails. An optimal dual basis is a maximal linearly independent set of row indices together with an optimal dual solution supported on it.

Two formalizations would make the goal trivial and are excluded: dropping the bound on ∥w~∥∞\|\tilde w\|_\infty∥w~∥∞​ (a multiple of www then works), and letting w~\tilde ww~ depend on AAA and bbb (the goal states ∃w~\exists \tilde w∃w~ before ∀A,b\forall A, b∀A,b). The 0,±10, \pm10,±1 assumption on AAA is part of every Section 4 statement.

A complete development needs a multidimensional pigeonhole argument, determinant and adjugate bounds for 0,±10, \pm 10,±1 matrices, and basic LP duality (strong duality, complementary slackness, basic optimal dual solutions); the last two are reusable across linear-programming missions. Proofs of individual milestones, reusable lemmas on LP duality, and alternative proofs of Dirichlet's theorem are all welcome.

Selected references

  • A. Frank and É. Tardos, An application of simultaneous diophantine approximation in combinatorial optimization, Combinatorica 7(1) (1987) 49–65. https://doi.org/10.1007/BF02579200
  • A. K. Lenstra, H. W. Lenstra Jr. and L. Lovász, Factoring polynomials with rational coefficients, Math. Ann. 261 (1982) 515–534. https://doi.org/10.1007/BF01457454
  • É. Tardos, A strongly polynomial algorithm to solve combinatorial linear programs, Operations Research 34(2) (1986) 250–256. https://doi.org/10.1287/opre.34.2.250
  • M. Grötschel, L. Lovász and A. Schrijver, The ellipsoid method and its consequences in combinatorial optimization, Combinatorica 1 (1981) 169–197. https://doi.org/10.1007/BF02579273
  • J. W. S. Cassels, An Introduction to the Theory of Numbers (title as printed in the paper's reference [2]), Springer, Berlin, 1971; cited in the paper as [2, Sect. 1.10] for Dirichlet's theorem.
11 thms5 active usersReviewed
🏆Completed
Operations ResearchOptimization·Captain: mikedeng1

Integer Factorization: Why Two-Item Joint Replenishment Is Hard 3: M Has a Divisor in [L, U] iff an Explicit Two-Item Periodic JRP Instance Has a Plan of Cost at Most L + U + 2M²(M + 1)Research Paper

Why the two-item periodic JRP is hard

The joint replenishment problem (JRP) is the multi-item extension of the economic order quantity (EOQ) model. Each item is reordered periodically and pays its own ordering and holding costs, and a joint ordering cost is shared by items ordered at the same time. Before this work no hardness result was known for the periodic JRP (p. 10), even though no exact polynomial-time algorithm was known either (Schulz and Telha, arXiv:2007.09045; Operations Research, 2024, as Integer Factorization: Why Two-Item Joint Replenishment Is Hard).

The paper explains this through number theory. In the periodic JRP the joint cost is incurred every gcd⁡(q1,q2)\gcd(q_1, q_2)gcd(q1​,q2​) periods, so the objective contains a greatest common divisor of the decision variables. The paper's Theorem 2 states that, assuming the Riemann hypothesis, the two-item periodic JRP is NP-hard under randomized reductions. The proof composes two reductions:

  • Shor's reduction from Partition to RangeDivisor ("does MMM have a divisor in [L,U][L, U][L,U]?"), given in the paper's appendix and based on Shor (2011); this is where the Riemann hypothesis enters;
  • a reduction from RangeDivisor to the two-item periodic JRP, whose correctness is Lemma 3 (pp. 13–14).

This mission formalizes Lemma 3. Mission 4 of this series formalizes the Partition half; missions 1 and 2 formalize the integer-factorization reductions behind Theorem 1.

Setting

A period is a positive integer qqq. An item with ordering cost KKK and holding cost HHH costs

EOQK,H(q)=Kq+Hq\mathrm{EOQ}_{K,H}(q) = \frac{K}{q} + HqEOQK,H​(q)=qK​+Hq

per unit time. The two-item periodic JRP (objective (3), p. 10) minimizes, over q1,q2∈Z+q_1, q_2 \in \mathbb{Z}_+q1​,q2​∈Z+​,

JRP(q1,q2)=EOQK1,H1(q1)+EOQK2,H2(q2)+K0gcd⁡(q1,q2).\mathrm{JRP}(q_1, q_2) = \mathrm{EOQ}_{K_1,H_1}(q_1) + \mathrm{EOQ}_{K_2,H_2}(q_2) + \frac{K_0}{\gcd(q_1, q_2)}.JRP(q1​,q2​)=EOQK1​,H1​​(q1​)+EOQK2​,H2​​(q2​)+gcd(q1​,q2​)K0​​.

As a decision problem (p. 13), it asks whether some (q1,q2)(q_1, q_2)(q1​,q2​) has cost at most a threshold zzz.

An instance of RangeDivisor (p. 12) is a triple of integers M≥U≥L>0M \ge U \ge L > 0M≥U≥L>0 satisfying

L+U<22LU;L + U < 2\sqrt{2LU};L+U<22LU​;

it is a yes-instance when MMM has a divisor qqq with L≤q≤UL \le q \le UL≤q≤U.

Given such a triple, the instance JRPM,U,L\mathrm{JRP}_{M,U,L}JRPM,U,L​ sets

K0=LU,K1=0,H1=1,K2=M3(M+1),H2=M(M+1),K_0 = LU,\quad K_1 = 0,\quad H_1 = 1,\quad K_2 = M^3(M+1),\quad H_2 = M(M+1),K0​=LU,K1​=0,H1​=1,K2​=M3(M+1),H2​=M(M+1),

and the threshold is zM,L,U=L+U+2M2(M+1)z_{M,L,U} = L + U + 2M^2(M+1)zM,L,U​=L+U+2M2(M+1), where 2M2(M+1)=EOQK2,H2(M)2M^2(M+1) = \mathrm{EOQ}_{K_2,H_2}(M)2M2(M+1)=EOQK2​,H2​​(M). Once item 2 is fixed at q2=Mq_2 = Mq2​=M, item 1 solves problem (5):

min⁡q1∈Z+ LUgcd⁡(q1,M)+q1.\min_{q_1 \in \mathbb{Z}_+} \ \frac{LU}{\gcd(q_1, M)} + q_1 .q1​∈Z+​min​ gcd(q1​,M)LU​+q1​.

In Lean these objects are JRPHard.Aperiodic.eoq, JRPHard.Periodic.periodicCost, JRPHard.Periodic.coefK2, JRPHard.Periodic.coefH2 (shared with missions 1 and 2), and IsRangeDivisorInstance, HasDivisorIn, coefK0, rangeCost, threshold, obj5 and fConv in the namespace JRPHard.RangeDiv.

Formalization targets

Goal: Lemma 3

For every RangeDivisor instance (M,L,U)(M, L, U)(M,L,U),

K0, K2, H2≤2M4and(∃ q∣M, L≤q≤U)  ⟺  (∃ q1,q2∈Z+: JRPM,U,L(q1,q2)≤L+U+2M2(M+1)).K_0,\ K_2,\ H_2 \le 2M^4 \quad\text{and}\quad \Big(\exists\, q \mid M,\ L \le q \le U\Big) \iff \Big(\exists\, q_1, q_2 \in \mathbb{Z}_+:\ \mathrm{JRP}_{M,U,L}(q_1, q_2) \le L + U + 2M^2(M+1)\Big).K0​, K2​, H2​≤2M4and(∃q∣M, L≤q≤U)⟺(∃q1​,q2​∈Z+​: JRPM,U,L​(q1​,q2​)≤L+U+2M2(M+1)).

Milestones (the steps of the proof, pp. 14–15)

  1. Item 2 is pinned: every plan with q2≠Mq_2 \ne Mq2​=M costs more than zM,L,Uz_{M,L,U}zM,L,U​.
  2. f(q)=LU/q+qf(q) = LU/q + qf(q)=LU/q+q is a lower bound on problem (5)'s objective, f(L)=f(U)=L+Uf(L) = f(U) = L + Uf(L)=f(U)=L+U, and fff is minimized at LU\sqrt{LU}LU​.
  3. gcd⁡(q,M)≠q⇒gcd⁡(q,M)≤q/2\gcd(q, M) \ne q \Rightarrow \gcd(q, M) \le q/2gcd(q,M)=q⇒gcd(q,M)≤q/2.
  4. If gcd⁡(q,M)≠q\gcd(q, M) \ne qgcd(q,M)=q, the objective of (5) at qqq is at least 22LU>L+U2\sqrt{2LU} > L + U22LU​>L+U.
  5. A divisor q∈[L,U]q \in [L, U]q∈[L,U] of MMM has objective at most L+UL + UL+U.
  6. A period with objective at most L+UL + UL+U divides MMM and lies in [L,U][L, U][L,U].

Significance

Lemma 3 is the step that carries hardness from number theory to inventory theory. With Shor's result it shows that, under the Riemann hypothesis, no polynomial-time exact algorithm for the two-item periodic JRP exists unless NP problems can be solved in randomized polynomial time. The paper concludes (p. 15) that no algorithm for the two-item problem may be simultaneously exact and polynomial on all inputs, so some concession, such as heuristics, must be made.

The result is proved in the paper; it has not been machine-checked. The mission produces a checked statement of the reduction's correctness with every coefficient explicit, and it corrects two imprecisions in the printed lemma (the threshold and the unspecified "sufficiently large" coefficients of item 2; see below). The objects (eoq, periodicCost) are the same ones used in mission 2 of this series.

Difficulty

Each step is elementary, but the statement mixes integer and real reasoning. The objective of (5) is not monotone or convex in qqq: its value jumps between LU/q+qLU/q + qLU/q+q at divisors of MMM and at least 2LU/q+q2LU/q + q2LU/q+q elsewhere. The argument must show that the gap between these two curves exceeds the window around L+UL + UL+U, and this is exactly what RangeDivisor's condition L+U<22LUL + U < 2\sqrt{2LU}L+U<22LU​ provides. Without that condition a non-divisor can be cheaper than L+UL + UL+U (for L=1L = 1L=1, U=100U = 100U=100, M=7M = 7M=7, the period q=14q = 14q=14 has objective 100/7+14<101100/7 + 14 < 101100/7+14<101). The pinning of q2=Mq_2 = Mq2​=M also has to beat the slack M+2LUM + 2\sqrt{LU}M+2LU​ against L+UL + UL+U, which is where M≥UM \ge UM≥U is used.

Formalization scope

This mission formalizes the correctness of the reduction behind Theorem 2 (its JRP half, Lemma 3); polynomial running time is not formalized. Theorem 2 itself, Shor's NP-completeness of RangeDivisor under randomized reductions, and "one can construct in polynomial time" are not stated. What remains of the polynomial-time claim is the explicit coefficients and the bound K0,K2,H2≤2M4K_0, K_2, H_2 \le 2M^4K0​,K2​,H2​≤2M4 (bit length at most 4log⁡2M+24\log_2 M + 24log2​M+2).

Conventions:

  • periods are natural numbers, and every quantified period is assumed positive (Lean's K/0=0K/0 = 0K/0=0 and gcd⁡(0,M)=M\gcd(0, M) = Mgcd(0,M)=M would otherwise create spurious cheap plans);
  • costs are real numbers; LLL, UUU, MMM and the coefficients are natural numbers cast to R\mathbb{R}R;
  • RangeDivisor's condition is stated with Real.sqrt exactly as printed;
  • "the optimal value is at most zzz" is the decision form "some plan has cost at most zzz" (p. 13); the minimum is attained, so the two agree.

Two disclosed departures from the printed lemma:

  • The threshold. The page writes "the optimal value of JRPM,U,L≤L+U\mathrm{JRP}_{M,U,L} \le L + UJRPM,U,L​≤L+U". The two-item cost also contains item 2's term 2M2(M+1)2M^2(M+1)2M2(M+1), so the literal comparison never holds and would make the lemma false. The threshold is zM,L,U=L+U+2M2(M+1)z_{M,L,U} = L + U + 2M^2(M+1)zM,L,U​=L+U+2M2(M+1), the zM,L,Uz_{M,L,U}zM,L,U​ announced in §3.1.
  • The item-2 coefficients. The page chooses "sufficiently large values of K2K_2K2​ and H2H_2H2​, as in … Lemma 2". The statement fixes Lemma 2's values K2=M3(M+1)K_2 = M^3(M+1)K2​=M3(M+1), H2=M(M+1)H_2 = M(M+1)H2​=M(M+1) rather than quantifying existentially, which would let any instance satisfy the lemma.

A formalization that drops the positivity of periods, states the threshold as L+UL + UL+U on the full two-item cost, or leaves K2,H2K_2, H_2K2​,H2​ existential does not capture Lemma 3 and is ruled out.

No library beyond Mathlib (Nat.gcd, Real.sqrt) is needed. Proofs of the milestones, and alternative proofs of the goal, are welcome.

Selected references

  • A. S. Schulz and C. Telha, Integer factorization and Riemann's hypothesis: Why two-item joint replenishment is hard, arXiv:2007.09045v1, 2020; published as Integer Factorization: Why Two-Item Joint Replenishment Is Hard, Operations Research, 2024. https://arxiv.org/abs/2007.09045
  • P. W. Shor, An NP-complete variant of factoring, Theoretical Computer Science Stack Exchange, 2011 (version 2011-03-01, as cited by the paper). https://cstheory.stackexchange.com/q/4785
  • S. Arora and B. Barak, Computational Complexity: A Modern Approach, Cambridge University Press, 2009. https://doi.org/10.1017/CBO9780511804090
10 thms4 active usersReviewed
🏆Completed
Algebra·Captain: mikedeng1

On Ideal Lattices and Learning with Errors over Rings: Multiplication by t ∈ I with tI⁻¹ Coprime to J Induces an R-Module Isomorphism M/JM ≅ IM/IJMResearch Paper

Background and motivation

Ring learning with errors (ring-LWE) is the algebraic variant of the learning-with-errors problem on which most practical lattice-based cryptography is built, including the key-encapsulation scheme ML-KEM standardized by NIST in 2024. Its hardness rests on the paper of Lyubashevsky, Peikert and Regev, On ideal lattices and learning with errors over rings (J. ACM 60(6), 2013, doi:10.1145/2535925; conference version at EUROCRYPT 2010). The paper's main theorem (Theorem 3.6, p. 19) is a polynomial-time quantum reduction from worst-case approximate shortest-vector problems on ideal lattices to the ring-LWE decision problem. Statements about reductions, running times and negligible probabilities are outside the scope of this mission.

What this mission formalizes is the algebraic tool both of the paper's reductions rest on, which the authors list among their main technical contributions (p. 7): a Chinese-remainder technique for clearing an ideal. An arbitrary ideal I\mathcal{I}I of the ring of integers RRR need not be principal, so a reduction that receives samples from a lattice I\mathcal{I}I cannot simply divide by a generator. Lemmas 2.14 and 2.15 show that, modulo an ideal J\mathcal{J}J such as ⟨q⟩\langle q\rangle⟨q⟩, multiplication by a well-chosen t∈It\in\mathcal{I}t∈I identifies R/qRR/qRR/qR with I/qI\mathcal{I}/q\mathcal{I}I/qI, and more generally M/JM\mathcal{M}/\mathcal{J}\mathcal{M}M/JM with IM/IJM\mathcal{I}\mathcal{M}/\mathcal{I}\mathcal{J}\mathcal{M}IM/IJM for every fractional ideal M\mathcal{M}M. Steps 1–3 of the BDD-to-LWE reduction of §4.2 consist of exactly these identifications. The authors note that the lemmas are "probably standard for experts in computational number theory" (p. 16); the formulation used in lattice cryptography is theirs, and it is reused throughout the later literature on algebraic lattices.

Setting

Let KKK be a number field of degree nnn and R=OKR = \mathcal{O}_KR=OK​ its ring of integers. An integral ideal is a nonzero ideal I⊆R\mathcal{I}\subseteq RI⊆R (the paper excludes {0}\{0\}{0}, footnote 2, p. 13). A fractional ideal is a set I⊂K\mathcal{I}\subset KI⊂K such that dId\mathcal{I}dI is an integral ideal for some nonzero d∈Rd\in Rd∈R; the nonzero fractional ideals form a group under multiplication, and I−1\mathcal{I}^{-1}I−1 denotes the inverse. Two integral ideals are coprime when I+J=R\mathcal{I}+\mathcal{J} = RI+J=R.

For t∈Rt\in Rt∈R the cleared ideal is t⋅I−1=⟨t⟩ I−1t\cdot\mathcal{I}^{-1} = \langle t\rangle\,\mathcal{I}^{-1}t⋅I−1=⟨t⟩I−1. When t∈It\in\mathcal{I}t∈I it is an integral ideal, and "t⋅I−1t\cdot\mathcal{I}^{-1}t⋅I−1 is coprime to J\mathcal{J}J" means

t⋅I−1⊆Randt⋅I−1+J=R.t\cdot\mathcal{I}^{-1}\subseteq R \quad\text{and}\quad t\cdot\mathcal{I}^{-1}+\mathcal{J}=R .t⋅I−1⊆Randt⋅I−1+J=R.

For a fractional ideal M\mathcal{M}M and t∈It\in\mathcal{I}t∈I, the map θt(u)=t⋅u\theta_t(u) = t\cdot uθt​(u)=t⋅u sends M\mathcal{M}M into IM\mathcal{I}\mathcal{M}IM, and therefore induces an RRR-linear map

θt: M⟶IM/IJM,u↦tu mod IJM.\theta_t:\ \mathcal{M}\longrightarrow \mathcal{I}\mathcal{M}/\mathcal{I}\mathcal{J}\mathcal{M},\qquad u\mapsto t u \bmod \mathcal{I}\mathcal{J}\mathcal{M}.θt​: M⟶IM/IJM,u↦tumodIJM.

The dual of a fractional ideal L\mathcal{L}L is L∨={x∈K:Tr⁡(xL)⊆Z}\mathcal{L}^\vee = \{x\in K:\operatorname{Tr}(x\mathcal{L})\subseteq\mathbb{Z}\}L∨={x∈K:Tr(xL)⊆Z}; R∨R^\veeR∨ is the codifferent, and I∨=I−1R∨\mathcal{I}^\vee = \mathcal{I}^{-1}R^\veeI∨=I−1R∨. For the cyclotomic field K=Q(ζ)K=\mathbb{Q}(\zeta)K=Q(ζ), ζ\zetaζ a primitive mmm-th root of unity, τk\tau_kτk​ (k∈Zm∗k\in\mathbb{Z}_m^*k∈Zm∗​) is the automorphism with τk(ζ)=ζk\tau_k(\zeta)=\zeta^kτk​(ζ)=ζk, and for a prime q≡1(modm)q\equiv 1\pmod mq≡1(modm) with a primitive mmm-th root of unity ω∈Zq\omega\in\mathbb{Z}_qω∈Zq​ the primes above qqq are qi=⟨q,ζ−ωi⟩\mathfrak{q}_i = \langle q,\zeta-\omega^i\rangleqi​=⟨q,ζ−ωi⟩, i∈Zm∗i\in\mathbb{Z}_m^*i∈Zm∗​. Calligraphic I,J,M\mathcal{I},\mathcal{J},\mathcal{M}I,J,M of the paper are written I, J, M in the milestone texts.

Formalization targets

Goal: Lemma 2.15 (p. 17)

For nonzero ideals I,J⊆R\mathcal{I},\mathcal{J}\subseteq RI,J⊆R, t∈It\in\mathcal{I}t∈I with t⋅I−1t\cdot\mathcal{I}^{-1}t⋅I−1 coprime to J\mathcal{J}J, and a nonzero fractional ideal M\mathcal{M}M,

θt: M→IM/IJM is surjective with kernel JM,soM/JM  ≅  IM/IJM\theta_t:\ \mathcal{M}\to\mathcal{I}\mathcal{M}/\mathcal{I}\mathcal{J}\mathcal{M}\ \text{is surjective with kernel}\ \mathcal{J}\mathcal{M},\quad\text{so}\quad \mathcal{M}/\mathcal{J}\mathcal{M}\;\cong\;\mathcal{I}\mathcal{M}/\mathcal{I}\mathcal{J}\mathcal{M}θt​: M→IM/IJM is surjective with kernel JM,soM/JM≅IM/IJM

as RRR-modules, via u mod JM↦tu mod IJMu\bmod\mathcal{J}\mathcal{M}\mapsto tu\bmod\mathcal{I}\mathcal{J}\mathcal{M}umodJM↦tumodIJM.

Milestones

  1. The existence content of Lemma 2.13 (a coprime pair has c∈Jc\in\mathcal{J}c∈J with c≡1 mod Ic\equiv 1\bmod\mathcal{I}c≡1modI), already proved on the platform and entered as a reference. Lemma 2.12 (Chinese Remainder Theorem) is also included as a reference item, without being a milestone.
  2. Lemma 2.14 (p. 16): for nonzero I,J\mathcal{I},\mathcal{J}I,J there exists a nonzero t∈It\in\mathcal{I}t∈I with t⋅I−1t\cdot\mathcal{I}^{-1}t⋅I−1 coprime to J\mathcal{J}J.
  3. The kernel claim of the proof of Lemma 2.15: u∈Mu\in\mathcal{M}u∈M and tu∈IJMtu\in\mathcal{I}\mathcal{J}\mathcal{M}tu∈IJM imply u∈JMu\in\mathcal{J}\mathcal{M}u∈JM.
  4. The surjectivity claim of the proof: if c∈t⋅I−1c\in t\cdot\mathcal{I}^{-1}c∈t⋅I−1 and c≡1 mod Jc\equiv1\bmod\mathcal{J}c≡1modJ, then for v∈IMv\in\mathcal{I}\mathcal{M}v∈IM, cv∈tMcv\in t\mathcal{M}cv∈tM and cv−v∈IJMcv-v\in\mathcal{I}\mathcal{J}\mathcal{M}cv−v∈IJM.

Companion statements

  • §4.2 step 2 (p. 23) and step 3 (p. 24): multiplication by ttt is a bijection R/qR→I/qIR/qR\to\mathcal{I}/q\mathcal{I}R/qR→I/qI and I∨/qI∨→R∨/qR∨\mathcal{I}^\vee/q\mathcal{I}^\vee\to R^\vee/qR^\veeI∨/qI∨→R∨/qR∨ for every integer q≥2q\ge2q≥2, the two instances of Lemma 2.15 the reduction uses.
  • Lemma 2.16 (p. 17): τj(qi)=qi/j\tau_j(\mathfrak{q}_i)=\mathfrak{q}_{i/j}τj​(qi​)=qi/j​ for all i,j∈Zm∗i,j\in\mathbb{Z}_m^*i,j∈Zm∗​.
  • Lemma 2.9 (p. 14): n1/pN(I)1/n≤λ1(I)≤n1/pN(I)1/nΔK1/nn^{1/p}N(\mathcal{I})^{1/n}\le\lambda_1(\mathcal{I})\le n^{1/p}N(\mathcal{I})^{1/n}\sqrt{\Delta_K^{1/n}}n1/pN(I)1/n≤λ1​(I)≤n1/pN(I)1/nΔK1/n​​ in every ℓp\ell_pℓp​ norm, p∈[1,∞]p\in[1,\infty]p∈[1,∞], stated as two items.

Significance

The isomorphism of Lemma 2.15 is what makes ideal lattices usable in worst-case to average-case reductions: it turns a discrete Gaussian sample from an arbitrary ideal I\mathcal{I}I into a uniform element of the fixed ring RqR_qRq​, and turns the ring-LWE secret in Rq∨R^\vee_qRq∨​ back into a coset of qI∨q\mathcal{I}^\veeqI∨. Lemma 2.16 is the corresponding tool for the search-to-decision reductions of §5, which move between the CRT components R/qiR/\mathfrak{q}_iR/qi​ of a completely split qqq. Lemma 2.9 gives the scale of the lattices involved.

On the formal side, none of Lemmas 2.14–2.16 is stated on the platform or in Mathlib in this form. Mathlib has the Chinese remainder theorem for ideals, inverses of fractional ideals in Dedekind domains, trace duals with I∨=I−1R∨\mathcal{I}^\vee=\mathcal{I}^{-1}R^\veeI∨=I−1R∨, and the isomorphism Gal(Q(ζm)/Q)≅(Z/mZ)∗\mathrm{Gal}(\mathbb{Q}(\zeta_m)/\mathbb{Q})\cong(\mathbb{Z}/m\mathbb{Z})^*Gal(Q(ζm​)/Q)≅(Z/mZ)∗; the mission connects these to the quotient modules and explicit primes that lattice cryptography works with. All statements are proved in the paper; what remains is the formal proof.

Difficulty

The obvious argument for Lemma 2.15 — both quotients have cardinality N(J)N(\mathcal{J})N(J), so an injective map is bijective — needs the multiplicativity of the norm on fractional ideals and finiteness of the quotients, and still needs the kernel computation, which uses unique factorization: from tu∈IJMtu\in\mathcal{I}\mathcal{J}\mathcal{M}tu∈IJM one has to cancel I\mathcal{I}I and M\mathcal{M}M inside the group of fractional ideals and then use coprimality of tI−1t\mathcal{I}^{-1}tI−1 and J\mathcal{J}J. Lemma 2.14 needs the factorization of I\mathcal{I}I along the primes of J\mathcal{J}J and a CRT choice of ttt; for J=0\mathcal{J}=0J=0 it would assert that I\mathcal{I}I is principal, which is why the nonzero convention matters. In Lemma 2.16 the delicate point is the direction of the action: τj\tau_jτj​ sends qi\mathfrak{q}_iqi​ to qi/j\mathfrak{q}_{i/j}qi/j​, not qij\mathfrak{q}_{ij}qij​.

Formalization scope

  • KKK is a NumberField, RRR is 𝓞 K, fractional ideals are FractionalIdeal (𝓞 K)⁰ K, and integral ideals are coerced into them. Ideals are nonzero, per footnote 2: every statement carries I ≠ ⊥ (and J ≠ ⊥, M ≠ 0 where the paper's convention applies); I ≠ ⊥ is essential because Lean defines 0−1=00^{-1}=00−1=0. Two kernel/surjectivity milestones drop the nonzero hypotheses on J\mathcal{J}J and M\mathcal{M}M, which only strengthens them.
  • "tI−1t\mathcal{I}^{-1}tI−1 coprime to J\mathcal{J}J" is the predicate ClearedCoprime: tI−1≤1t\mathcal{I}^{-1}\le 1tI−1≤1 and tI−1+J=1t\mathcal{I}^{-1}+\mathcal{J}=1tI−1+J=1 in the semiring of fractional ideals.
  • M/N\mathcal{M}/\mathcal{N}M/N is the quotient of the RRR-module M\mathcal{M}M by N∩M\mathcal{N}\cap\mathcal{M}N∩M; θt\theta_tθt​ is the given RRR-linear map M→IM/IJM\mathcal{M}\to\mathcal{I}\mathcal{M}/\mathcal{I}\mathcal{J}\mathcal{M}M→IM/IJM. The goal states surjectivity and the kernel of this map. A bare statement that some isomorphism M/JM≅IM/IJM\mathcal{M}/\mathcal{J}\mathcal{M}\cong\mathcal{I}\mathcal{M}/\mathcal{I}\mathcal{J}\mathcal{M}M/JM≅IM/IJM exists would be true for unrelated reasons and is not the lemma.
  • Duals are Mathlib's FractionalIdeal.dual ℤ ℚ. τj\tau_jτj​ is the inverse image of jjj under IsCyclotomicExtension.Rat.galEquivZMod, acting on ideals by images; ωi\omega^iωi uses the representative of iii in {0,…,m−1}\{0,\dots,m-1\}{0,…,m−1}. ℓp\ell_pℓp​ norms sum over all nnn complex embeddings; λ1\lambda_1λ1​ bounds are phrased through nonzero elements of I\mathcal{I}I.
  • Dropped algorithmic clauses: "such ttt can be found efficiently" (Lemma 2.14), "this isomorphism may be efficiently inverted" (Lemma 2.15), the "deterministic polynomial-time algorithm" of Lemma 2.13 (only the existence of ccc is referenced), and "which can be efficiently inverted" in §4.2. No complexity notion is encoded.
  • Contributions welcome: proofs of the milestones, of the goal from them, and of the companion statements; general lemmas on quotients M/JM\mathcal{M}/\mathcal{J}\mathcal{M}M/JM of fractional ideals are reusable beyond this mission.

Selected references

  • V. Lyubashevsky, C. Peikert, O. Regev, On ideal lattices and learning with errors over rings, J. ACM 60(6), Article 43, 2013. https://doi.org/10.1145/2535925
  • V. Lyubashevsky, C. Peikert, O. Regev, On ideal lattices and learning with errors over rings, EUROCRYPT 2010, LNCS 6110, pp. 1–23. https://doi.org/10.1007/978-3-642-13190-5_1
  • O. Regev, On lattices, learning with errors, random linear codes, and cryptography, J. ACM 56(6), 2009. https://doi.org/10.1145/1568318.1568324
  • NIST, FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism Standard, 2024. https://doi.org/10.6028/NIST.FIPS.203
7 thms4 active usersReviewed
🏆Completed
CombinatoricsGroup Theory·Captain: mikedeng1

New Proofs of Plünnecke-type Estimates for Product Sets in Groups 1: In an Abelian Group, |A + B| ≤ α|A| Gives One Nonempty X ⊆ A with |X + hB| ≤ αʰ|X| for Every hResearch Paper

Motivation

A basic question of additive combinatorics asks how a set grows under repeated addition. If a finite set AAA in an abelian group satisfies ∣A+B∣≤α∣A∣|A + B| \le \alpha |A|∣A+B∣≤α∣A∣ for some finite set BBB, how large can the iterated sumsets hB=B+⋯+BhB = B + \cdots + BhB=B+⋯+B be? Plünnecke's inequality gives the answer used throughout the subject: some nonempty part of AAA grows by at most a factor α\alphaα per added copy of BBB. Combined with Ruzsa's triangle inequality it becomes the Plünnecke–Ruzsa inequality ∣mB−nB∣≤αm+n∣A∣|mB - nB| \le \alpha^{m+n}|A|∣mB−nB∣≤αm+n∣A∣, which underlies Freĭman-type structure theorems, sum–product estimates and the polynomial Freĭman–Ruzsa programme.

Timeline.

  • 1970: H. Plünnecke proves the inequality for iterated sumsets in abelian groups with a graph-theoretic method (commutative layered graphs and Menger's theorem).
  • 1989: I. Z. Ruzsa simplifies Plünnecke's argument and combines it with the triangle inequality to bound ∣mB−nB∣|mB - nB|∣mB−nB∣.
  • 2011: G. Petridis gives a short elementary proof, without graphs (arXiv:1101.3507, Combinatorica 32, 2012). His argument also shows that one subset X⊆AX \subseteq AX⊆A works for every number of summands hhh, and it extends to triple products CXBCXBCXB in non-abelian groups.

Setting

Let GGG be a group with finite subsets AAA, BBB, CCC. The product set is AB={ab:a∈A, b∈B}AB = \{ab : a \in A,\ b \in B\}AB={ab:a∈A, b∈B}, and ∣⋅∣|\cdot|∣⋅∣ denotes cardinality. In an abelian group, written additively, the sumset is A+B={a+b:a∈A, b∈B}A + B = \{a + b : a \in A,\ b \in B\}A+B={a+b:a∈A, b∈B}, and for h≥0h \ge 0h≥0 the iterated sumset hBhBhB is B+⋯+BB + \cdots + BB+⋯+B with hhh summands, 0B={0}0B = \{0\}0B={0}. It is not the dilate {hb:b∈B}\{hb : b \in B\}{hb:b∈B}.

A nonempty subset X⊆AX \subseteq AX⊆A has minimal growth under BBB if

∣XB∣∣X∣≤∣ZB∣∣Z∣for every nonempty Z⊆A.\frac{|XB|}{|X|} \le \frac{|ZB|}{|Z|} \quad\text{for every nonempty } Z \subseteq A.∣X∣∣XB∣​≤∣Z∣∣ZB∣​for every nonempty Z⊆A.

Such an XXX exists whenever AAA is nonempty, since AAA has finitely many subsets. In Lean, GGG is a Group or AddCommGroup with decidable equality, the sets are Finset G with the pointwise operations of Mathlib (A * B, A + B, h • B), and cardinalities are #A cast to ℝ.

Formalization targets

Goal: Theorem 3.1

For finite AAA, BBB in an abelian group with AAA nonempty and ∣A+B∣≤α∣A∣|A + B| \le \alpha|A|∣A+B∣≤α∣A∣, there is a nonempty X⊆AX \subseteq AX⊆A with

∣X+hB∣≤αh∣X∣for every h≥0.|X + hB| \le \alpha^h |X| \qquad \text{for every } h \ge 0.∣X+hB∣≤αh∣X∣for every h≥0.

The point is the order of quantifiers: one XXX serves all hhh.

Milestones

  1. Proposition 2.1 (p. 5). If ∣XB∣/∣X∣≤∣ZB∣/∣Z∣|XB|/|X| \le |ZB|/|Z|∣XB∣/∣X∣≤∣ZB∣/∣Z∣ for every Z⊆XZ \subseteq XZ⊆X, then ∣CXB∣≤∣XB∣∣X∣ ∣CX∣|CXB| \le \frac{|XB|}{|X|}\,|CX|∣CXB∣≤∣X∣∣XB∣​∣CX∣ for every finite CCC, in any group. This is already on the platform, proved, as FamousTheorems.pluennecke_petridis (additive notation, cross-multiplied), and enters the mission as a reference.
  2. Theorem 1.5 (p. 3). In any group, ∣AB∣≤α∣A∣|AB| \le \alpha|A|∣AB∣≤α∣A∣ with AAA nonempty gives a nonempty X⊆AX \subseteq AX⊆A with
∣CXB∣≤α∣CX∣for every finite C.|CXB| \le \alpha |CX| \quad\text{for every finite } C.∣CXB∣≤α∣CX∣for every finite C.
  1. Inductive step of Theorem 3.1 (p. 7). For X⊆AX \subseteq AX⊆A of minimal growth and ∣A+B∣≤α∣A∣|A+B| \le \alpha|A|∣A+B∣≤α∣A∣:
∣X+hB∣≤α ∣X+(h−1)B∣(h≥1).|X + hB| \le \alpha\,|X + (h-1)B| \quad (h \ge 1).∣X+hB∣≤α∣X+(h−1)B∣(h≥1).

Significance

Theorem 3.1 is the form of Plünnecke's inequality used in applications. Two consequences follow directly. Taking A=BA = BA=B gives ∣hB∣≤αh∣B∣|hB| \le \alpha^h|B|∣hB∣≤αh∣B∣ whenever ∣2B∣≤α∣B∣|2B| \le \alpha|B|∣2B∣≤α∣B∣. Combining one XXX for all hhh with Ruzsa's triangle inequality gives ∣mB−nB∣≤αm+n∣A∣|mB - nB| \le \alpha^{m+n}|A|∣mB−nB∣≤αm+n∣A∣ (Theorem 1.2 of the paper). With a separate XXX for each hhh, the second step would need the same set for mmm and nnn, and that is exactly what Theorem 3.1 provides. Theorem 1.5 is the non-abelian ingredient: missions 2 and 3 of this series apply it to obtain explicit Plünnecke-type bounds for ∣Bh∣|B^h|∣Bh∣ and ∣SBh∣|SB^h|∣SBh∣ in arbitrary groups.

Formalizing it. The results are proved and classical. Mathlib already contains Proposition 2.1 (Finset.pluennecke_petridis_inequality_mul) and the Plünnecke–Ruzsa inequality Finset.pluennecke_ruzsa_inequality_nsmul_sub_nsmul_add. Its proof runs through a private lemma that bounds ∣X+hB∣|X + hB|∣X+hB∣ for one fixed minimiser, but no public statement in Mathlib or on the platform asserts Theorem 3.1 or Theorem 1.5 in the form "there exists a nonempty XXX for all hhh" (respectively "for all CCC"). This mission adds those statements as reusable, citable nodes in the paper's numbering.

Difficulty

A first attempt iterates the hypothesis directly: ∣A+2B∣≤α∣A+B∣|A + 2B| \le \alpha|A + B|∣A+2B∣≤α∣A+B∣ would follow if A+BA + BA+B again grew by a factor α\alphaα under BBB, but nothing controls the growth of A+BA + BA+B. The ratio ∣ZB∣/∣Z∣|ZB|/|Z|∣ZB∣/∣Z∣ is not monotone in ZZZ, and passing to subsets of AAA can only help if the subset is chosen correctly. Choosing a different good subset for each hhh gives Theorem 1.1 but loses the uniformity. The work is to show that one fixed subset controls all the products CXBCXBCXB simultaneously, and in the non-abelian Theorem 1.5 to keep the order of the factors CCC, XXX, BBB throughout.

Formalization scope

  • Theorem 3.1 and the inductive step are stated in an AddCommGroup with DecidableEq. Theorem 1.5 is stated in a Group, with no commutativity, as on the page. The factor order C⋅X⋅BC \cdot X \cdot BC⋅X⋅B is preserved.
  • hBhBhB is h • B (the hhh-fold sumset; 0 • B = {0}), and "for all hhh" ranges over all natural numbers, including the true case h=0h = 0h=0.
  • α\alphaα is an arbitrary real number; cardinalities are cast to ℝ. No hypothesis α≥1\alpha \ge 1α≥1 is added: it follows from the hypotheses once AAA and BBB are nonempty (with BBB empty they force only α≥0\alpha \ge 0α≥0, and every conclusion is still true).
  • Nonempty witness. The page says "there exists X⊆AX \subseteq AX⊆A". Since ∅+hB=∅\emptyset + hB = \emptyset∅+hB=∅, the empty set would satisfy the printed statements trivially, and that formalization is ruled out: the goal and Theorem 1.5 assume AAA nonempty and assert XXX nonempty, matching the paper's choice of XXX as a minimiser of a ratio defined on nonempty sets.
  • Minimal growth in the step milestone is written cross-multiplied, ∣X+B∣ ∣Z∣≤∣Z+B∣ ∣X∣|X+B|\,|Z| \le |Z+B|\,|X|∣X+B∣∣Z∣≤∣Z+B∣∣X∣, over nonempty Z⊆AZ \subseteq AZ⊆A; the step is stated for h≥1h \ge 1h≥1 with natural-number subtraction guarded by that hypothesis.
  • Ruzsa's covering lemma and Ruzsa's triangle inequality, quoted in §4, are in Mathlib (Finset.ruzsa_covering_mul, Finset.ruzsa_triangle_inequality_mul_mulInv_mul) and are not items of this mission.
  • No new definitions are needed. Welcome contributions: proofs of the three draft statements, and, separately, the deduction of Theorem 1.2 from Theorem 3.1.

Selected references

  • G. Petridis, New proofs of Plünnecke-type estimates for product sets in groups, arXiv:1101.3507v3, 2011; Combinatorica 32 (2012). https://arxiv.org/abs/1101.3507 , https://doi.org/10.1007/s00493-012-2818-5
  • H. Plünnecke, Eine zahlentheoretische Anwendung der Graphentheorie, J. Reine Angew. Math. 243 (1970) 171–183. https://doi.org/10.1515/crll.1970.243.171
  • I. Z. Ruzsa, An application of graph theory to additive number theory, Scientia, Ser. A 3 (1989) 97–109 (no online version).
  • T. Tao, V. Vu, Additive Combinatorics, Cambridge University Press, 2006. https://doi.org/10.1017/CBO9780511755149
4 thms4 active usersReviewed
🏆Completed
Captain: xuanji

The irrationality measure of π is at most 14.797074 (Rhin–Viola 1993)Research Paper

Motivation

The irrationality measure μ(π)\mu(\pi)μ(π) is the supremum of the μ\muμ for which ∣π−p/q∣<q−μ|\pi - p/q| < q^{-\mu}∣π−p/q∣<q−μ has infinitely many rational solutions p/qp/qp/q. Every irrational number has μ≥2\mu \ge 2μ≥2 (Dirichlet), almost every real number has μ=2\mu = 2μ=2, and it is conjectured that μ(π)=2\mu(\pi) = 2μ(π)=2. Known upper bounds:

  • Mahler (1953): 424242, the first proof that π\piπ is not a Liouville number.
  • Mignotte (1974): 20.620.620.6.
  • Chudnovsky (1982): 19.8899944…19.8899944\ldots19.8899944…
  • Rhin–Viola (1993): 14.79707414.79707414.797074.
  • Hata (1993): 8.016045…8.016045\ldots8.016045…
  • Salikhov (2008): 7.606308…7.606308\ldots7.606308…
  • Zeilberger–Zudilin (2020): 7.103205334137…7.103205334137\ldots7.103205334137…, the current record.

The campaign's first proved value is Mahler's 424242. This entry records Rhin–Viola's bound.

Formalization target

The campaign template with the value 14.79707414.79707414.797074 filled in: PiIrrationality.UpperBound (14.797074 : ℝ), i.e. μ(π)≤14.797074\mu(\pi) \le 14.797074μ(π)≤14.797074.

Value. The paper's Theorem states exactly that 7.3985377.3985377.398537 is an effective irrationality measure of ζ(2)\zeta(2)ζ(2), "whence 14.79707414.79707414.797074 is an effective irrationality measure of π\piπ". The value is used as stated, with no rounding.

How the bound arises

Rhin and Viola prove that 7.3985377.3985377.398537 is an effective irrationality measure of ζ(2)=π2/6\zeta(2) = \pi^2/6ζ(2)=π2/6, using a birational transformation acting on Beukers' double integrals and semi-infinite linear programming to optimise the arithmetic. A measure μ\muμ for π2\pi^2π2 gives 2μ2\mu2μ for π\piπ (if ∣π−p/q∣|\pi - p/q|∣π−p/q∣ is small then ∣π2−p2/q2∣|\pi^2 - p^2/q^2|∣π2−p2/q2∣ is small with denominator q2q^2q2), hence their 2×7.398537=14.7970742 \times 7.398537 = 14.7970742×7.398537=14.797074.

Significance

Each step down the list replaces Mahler's approximations with a sharper family. Formalizing 14.79707414.79707414.797074 would build reusable explicit machinery: integral constructions of rational approximations to π\piπ, bounds on their common denominators via prime-number estimates, and the standard lemma turning a sequence of good approximations into an irrationality-measure bound.

Selected references

  • G. Rhin, C. Viola, On the irrationality measure of ζ(2)\zeta(2)ζ(2), Ann. Inst. Fourier (Grenoble) 43 (1993), no. 1, 85–109. https://doi.org/10.5802/aif.1322
  • K. Mahler, On the approximation of π\piπ, Indag. Math. 15 (1953), 30–42.
  • F. Beukers, A rational approach to π\piπ, Nieuw Arch. Wiskd. (5) 1 (2000), 372–379.
  • Source table: https://teorth.github.io/optimizationproblems/constants/7a.html
13 thms4 active usersReviewed
🏆Completed
Dynamical SystemsMathematical Physics·Captain: Lucas

Ablowitz–Chakravarty–Halburd: the Chazy–Ramanujan correspondence and the Darboux–Halphen reduction of self-dual Yang–MillsResearch Paper

Motivation

In 1985 R. S. Ward conjectured that "many (and perhaps all?) of the ordinary and partial differential equations that are regarded as being integrable or solvable may be obtained from the self-dual gauge field equations (or its generalizations) by reduction". The self-dual Yang–Mills (SDYM) equations are therefore often called the master integrable system: choosing a gauge algebra and a symmetry group to reduce by produces, on the one hand, the classical soliton equations and the Painlevé transcendents, and on the other — once infinite-dimensional gauge algebras are allowed — a family of third-order equations whose solutions have movable natural barriers and are therefore not of Painlevé type.

This mission formalizes the endpoint of one such reduction chain, as surveyed by Ablowitz, Chakravarty and Halburd, Integrable systems and reductions of the self-dual Yang–Mills equations, J. Math. Phys. 44 (2003) 3147–3173, Section V. Reducing SDYM to functions of a single variable gives the Nahm equations; taking the gauge algebra to be the divergence-free vector fields on S3S^3S3 turns them into a matrix flow which, after diagonalizing the symmetric part, becomes the generalized Darboux–Halphen system. Its trace is governed by the Chazy equation, written down by Chazy in 1909, and — this is the paper's historical observation — the Chazy equation is equivalent to the differential system Ramanujan derived in 1916 for the Eisenstein series P=E2P = E_2P=E2​, Q=E4Q = E_4Q=E4​, R=E6R = E_6R=E6​. Chazy and Ramanujan worked on the same equation at nearly the same time and apparently did not know it.

Setting

Throughout, ttt and qqq are complex variables and all functions are complex-valued; a "solution on sss" means the stated derivative identities hold at every point of a set s⊆Cs \subseteq \mathbb{C}s⊆C.

The classical Chazy equation is the third-order equation

d3ydt3=2y d2ydt2−3(dydt)2.\frac{d^3y}{dt^3} = 2y\,\frac{d^2y}{dt^2} - 3\left(\frac{dy}{dt}\right)^2 .dt3d3y​=2ydt2d2y​−3(dtdy​)2.

The classical Darboux–Halphen system is the first-order system for ω1,ω2,ω3\omega_1,\omega_2,\omega_3ω1​,ω2​,ω3​

ω˙1=ω2ω3−ω1(ω2+ω3),\dot\omega_1 = \omega_2\omega_3 - \omega_1(\omega_2+\omega_3),ω˙1​=ω2​ω3​−ω1​(ω2​+ω3​),

together with its two cyclic images. It arose in Darboux's study of triply orthogonal surfaces and was solved by Halphen. Its generalized form adds a term τ2=τ12+τ22+τ32\tau^2 = \tau_1^2+\tau_2^2+\tau_3^2τ2=τ12​+τ22​+τ32​ to each right-hand side, where τ˙1=−τ1(ω2+ω3)\dot\tau_1 = -\tau_1(\omega_2+\omega_3)τ˙1​=−τ1​(ω2​+ω3​) and cyclically.

Ramanujan's system is

qdPdq=P2−Q12,qdQdq=PQ−R3,qdRdq=PR−Q22,q\frac{dP}{dq} = \frac{P^2-Q}{12},\qquad q\frac{dQ}{dq} = \frac{PQ-R}{3},\qquad q\frac{dR}{dq} = \frac{PR-Q^2}{2},qdqdP​=12P2−Q​,qdqdQ​=3PQ−R​,qdqdR​=2PR−Q2​,

satisfied by P(q)=1−24∑n≥1σ1(n)qnP(q) = 1-24\sum_{n\ge1}\sigma_1(n)q^nP(q)=1−24∑n≥1​σ1​(n)qn, Q(q)=1+240∑n≥1σ3(n)qnQ(q) = 1+240\sum_{n\ge1}\sigma_3(n)q^nQ(q)=1+240∑n≥1​σ3​(n)qn, R(q)=1−504∑n≥1σ5(n)qnR(q) = 1-504\sum_{n\ge1}\sigma_5(n)q^nR(q)=1−504∑n≥1​σ5​(n)qn, where σk(n)=∑d∣ndk\sigma_k(n)=\sum_{d\mid n}d^kσk​(n)=∑d∣n​dk.

Finally, the 3×33\times33×3 matrix flow obtained from the Nahm equations with the diff(S3)\mathrm{diff}(S^3)diff(S3) gauge algebra is

M˙=(Adj⁡M)T+MTM−(Tr⁡M)M,Adj⁡M=(det⁡M)M−1,\dot M = (\operatorname{Adj} M)^{T} + M^{T}M - (\operatorname{Tr} M)M,\qquad \operatorname{Adj}M = (\det M)M^{-1},M˙=(AdjM)T+MTM−(TrM)M,AdjM=(detM)M−1,

and the generalized Chazy equation with parameter nnn is

d3ydt3−2yd2ydt2+3(dydt)2=436−n2(6dydt−y2)2.\frac{d^3y}{dt^3} - 2y\frac{d^2y}{dt^2} + 3\left(\frac{dy}{dt}\right)^2 = \frac{4}{36-n^2}\left(6\frac{dy}{dt}-y^2\right)^2 .dt3d3y​−2ydt2d2y​+3(dtdy​)2=36−n24​(6dtdy​−y2)2.

Formalization targets

Goal — the Chazy–Ramanujan correspondence (eqs. (78) and (71))

If P,Q,RP,Q,RP,Q,R satisfy Ramanujan's system on a region of the punctured qqq-plane, then

y(t):=iπP ⁣(e2πit)y(t) := i\pi P\!\left(e^{2\pi i t}\right)y(t):=iπP(e2πit)

satisfies the classical Chazy equation on the preimage region. In particular y(t)=iπE2(t)y(t)=i\pi E_2(t)y(t)=iπE2​(t) is a solution of the Chazy equation, and knowing the general solution of Chazy gives the general solution of Ramanujan's system.

Supporting targets

The milestone list covers the reduction chain in both directions: the matrix flow M˙=(Adj⁡M)T+MTM−(Tr⁡M)M\dot M = (\operatorname{Adj}M)^T + M^TM-(\operatorname{Tr}M)MM˙=(AdjM)T+MTM−(TrM)M and its reduction to the Darboux–Halphen system (eqs. (51)–(54)), the first integrals (55), the passage y=−2(ω1+ω2+ω3)y = -2(\omega_1+\omega_2+\omega_3)y=−2(ω1​+ω2​+ω3​) from Darboux–Halphen to Chazy and back through the roots of a cubic, the SL(2)\mathrm{SL}(2)SL(2) symmetry (73) of the Chazy equation, Rankin's fourth-order equation for the discriminant cusp form, the change of variable q=e2iτq=e^{2i\tau}q=e2iτ between the two forms of Ramanujan's system, and the generalized Chazy equation (81).

Significance

The Chazy equation is the bridge between integrable systems and the theory of modular forms. Its particular solution y=iπE2y = i\pi E_2y=iπE2​ makes the quasi-modularity of the second Eisenstein series an ODE statement; via y=12(log⁡Δ)′y = \tfrac12 (\log\Delta)'y=21​(logΔ)′ it turns into Rankin's homogeneous fourth-order equation for the discriminant cusp form Δ\DeltaΔ, whose Fourier coefficients are the Ramanujan τ\tauτ-function. The SL(2,Z)\mathrm{SL}(2,\mathbb{Z})SL(2,Z) action on solutions is exactly the weight-2 quasi-modular transformation law. In the other direction, the general solution of Chazy is a ratio of hypergeometric functions with a movable natural barrier, which is why these reductions are used as the standard counterexample to the identification of integrability with the Painlevé property.

None of this material is currently in Mathlib: there is no Chazy equation, no Darboux–Halphen system, no Ramanujan differential system, and no Eisenstein-series ODE. The mission builds that layer from scratch. Each statement is a closed-form differential identity, so the development is self-contained: it needs no analytic continuation theory, no modular-forms library, and no existence theory for ODEs. What a solver must supply is careful derivative bookkeeping and polynomial algebra.

Status honesty: every statement in this mission is a classical, published result — Darboux, Halphen, Chazy (1909–1911), Ramanujan (1916), Rankin (1956), and Ablowitz–Chakravarty–Halburd (1990s–2003). Nothing here is open mathematics. What is open is the machine-checked proof; to the captain's knowledge no formalization of these identities exists.

Difficulty

The obvious approach — "differentiate three times and call ring" — fails for two reasons. First, the statements are about functions, not about polynomials: each differentiation step requires producing the derivative of a product, a quotient, or a composition from the hypotheses, and only then is the resulting algebraic identity a ring problem. Second, two of the targets go against the flow of the hypotheses. Recovering the Darboux–Halphen system from a Chazy solution means recovering ω˙i\dot\omega_iω˙i​ from the derivatives of the three elementary symmetric functions of the ωi\omega_iωi​: this is a linear system whose matrix is a Vandermonde matrix in ω1,ω2,ω3\omega_1,\omega_2,\omega_3ω1​,ω2​,ω3​, invertible precisely because the roots are assumed distinct — which is why the distinctness hypothesis is not decoration. Similarly, the matrix milestone needs the conjugation-equivariance of M↦(Adj⁡M)T+MTM−(Tr⁡M)MM \mapsto (\operatorname{Adj}M)^T + M^TM - (\operatorname{Tr}M)MM↦(AdjM)T+MTM−(TrM)M, which holds for the transpose only because the conjugating matrix is complex orthogonal.

Formalization scope

Everything is over C\mathbb{C}C, matching the paper. Solutions are represented pointwise on an arbitrary set s⊆Cs \subseteq \mathbb{C}s⊆C rather than on all of C\mathbb{C}C, because the solutions of interest have movable singularities and natural barriers; no openness, holomorphy or connectivity is assumed unless a statement needs it.

Higher derivatives are carried as explicit extra function arguments joined by HasDerivAt hypotheses rather than through iterated deriv. This avoids junk values entirely: a statement never asserts anything about the value of a derivative that does not exist. The same convention is used for the matrix flow, where the derivative is imposed entrywise, so that no norm or normed-space structure on the space of matrices needs to be chosen.

Divisions are arranged so that no denominator can vanish under the stated hypotheses: Ramanujan's system is written in the form q dP/dq=(P2−Q)/12q\,dP/dq = (P^2-Q)/12qdP/dq=(P2−Q)/12, with no division by qqq; the generalized Chazy equation carries the hypothesis n2≠36n^2 \ne 36n2=36; and the first-integral and discriminant statements carry explicit nonvanishing hypotheses.

There is no trivializing formalization available here. Every statement is an implication between two systems of differential equations whose hypotheses are satisfied by the classical explicit solutions (P=E2P=E_2P=E2​, Q=E4Q=E_4Q=E4​, R=E6R=E_6R=E6​ for the Ramanujan system; Halphen's solutions for Darboux–Halphen), so none of them is vacuous, and none is an identity that holds for arbitrary functions.

A complete development needs only Mathlib's derivative calculus (HasDerivAt and its product, quotient and composition rules), Complex.exp, and Matrix.adjugate with the basic adjugate identities. Contributions of reusable pieces are welcome: in particular a clean statement of the derivative of the elementary symmetric functions of a triple of functions, and the Vandermonde inversion step, would both be of use beyond this mission.

Selected references

  • M. J. Ablowitz, S. Chakravarty, R. G. Halburd, Integrable systems and reductions of the self-dual Yang–Mills equations, J. Math. Phys. 44 (2003) 3147–3173. doi:10.1063/1.1586967
  • J. Chazy, Sur les équations différentielles du troisième ordre et d'ordre supérieur dont l'intégrale générale a ses points critiques fixes, Acta Math. 34 (1911) 317–385. doi:10.1007/BF02393131
  • S. Ramanujan, On certain arithmetical functions, Trans. Cambridge Philos. Soc. 22 (1916) 159–184.
  • G. Halphen, Sur un système d'équations différentielles, C. R. Acad. Sci. Paris 92 (1881) 1101–1103.
  • R. A. Rankin, The construction of automorphic forms from the derivatives of a given form, J. Indian Math. Soc. 20 (1956) 103–116.
  • M. J. Ablowitz, S. Chakravarty, R. G. Halburd, The generalized Chazy equation and Schwarzian triangle functions, Asian J. Math. 2 (1998) 619–624. doi:10.4310/AJM.1998.v2.n4.a1
  • R. S. Ward, Integrable and solvable systems, and relations among them, Philos. Trans. R. Soc. London A 315 (1985) 451–457. doi:10.1098/rsta.1985.0051
15 thms4 active usersReviewed
🏆Completed
Combinatorics·Captain: aarontcao

Shao's three units theorem: density 5/8 forces a three-fold additive basisResearch Paper

Let mmm be an odd squarefree positive integer and let AAA be a set of units modulo mmm with ∣A∣>58φ(m)|A| > \frac{5}{8}\varphi(m)∣A∣>85​φ(m). Then A+A+A=Z/mZA + A + A = \mathbb{Z}/m\mathbb{Z}A+A+A=Z/mZ: every residue class, unit or not, is a sum of three elements of AAA.

This is Corollary 1.5 of Xuancheng Shao, A density version of the Vinogradov three primes theorem, Duke Math. J. 163 (2014) 489-512, arXiv:1206.6139v2. It is the local input to Shao's density version of the three primes theorem, and it is a clean finite statement in its own right.

The constant is sharp and the inequality is strict

At m=15m = 15m=15 the set {2,8,11,13,14}\{2, 8, 11, 13, 14\}{2,8,11,13,14} has five elements, so 5φ(15)=8⋅55\varphi(15) = 8 \cdot 55φ(15)=8⋅5 exactly, and 111 is not a sum of three of its elements. The hypothesis therefore fails by nothing at all and the conclusion already fails. If <<< is weakened to ≤\le≤, the statement is false.

Where the proof comes from

The corollary cannot be proved by induction on sets. Passing from mmm to a prime factor ppp splits AAA into fibers of different densities, and a set is the wrong object to carry through that split. The induction has to run on functions f:Z/mZ→[0,1]f : \mathbb{Z}/m\mathbb{Z} \to [0,1]f:Z/mZ→[0,1], and the corollary is the case f=1Af = 1_Af=1A​ of a weighted statement, Proposition 1.4. That is the one step from which the rest follows.

The weighted statement then splits at the primes 3 and 5. For mmm coprime to 30 the induction runs on the prime factors, using Cauchy-Davenport-Chowla for three sets modulo a prime, and it produces the stronger bilinear conclusion f(a)f(b)+f(b)f(c)+f(c)f(a)>58(f(a)+f(b)+f(c))f(a)f(b) + f(b)f(c) + f(c)f(a) > \frac{5}{8}(f(a) + f(b) + f(c))f(a)f(b)+f(b)f(c)+f(c)f(a)>85​(f(a)+f(b)+f(c)). The modulus 15 is handled separately by a linear program over the eight units. Two averaging inequalities, one symmetric and one asymmetric, are what turn a density above 5/85/85/8 into a single good triple in both halves.

What the milestones are

The nine milestones follow Shao's own numbering: the two averaging inequalities of Section 2 (Lemmas 2.1 and 2.2), the finite check at m=15m = 15m=15 (Lemma 2.3), the three-set Cauchy-Davenport-Chowla bound, the divisor reduction that lets the proof assume 15∣m15 \mid m15∣m, the induction away from 3 and 5 (Proposition 3.1), the modulus-15 case (Proposition 3.2), the weighted local result (Proposition 1.4), and the counting bridge that the units modulo mmm number φ(m)\varphi(m)φ(m).

Notes on the formalization

Every item is stated in Mathlib primitives alone, so the mission needs no definition items: IsUnit, Nat.totient, Odd, Squarefree, Finset, and Antitone. The set of units modulo mmm is written Finset.univ.filter (fun x => IsUnit x) at each use rather than through a defined abbreviation, so a reader auditing a statement has to trust only Mathlib. That is also why open scoped Classical appears in the preamble.

The density hypothesis is written 5 * Nat.totient m < 8 * A.card, which is ∣A∣>58φ(m)|A| > \frac{5}{8}\varphi(m)∣A∣>85​φ(m) cleared of division so the whole statement stays in N\mathbb{N}N with no rounding.

10 thms4 active usersReviewed
🏆Completed
Algebra·Captain: Lucas

Grothendieck-Teichmüller: the graded Lie algebra grt_1 and the Deligne-Drinfeld-Ihara conjectureOpen Problem

Motivation

The Grothendieck-Teichmüller group organises a family of symmetries that act on braided monoidal categories, on quantised universal enveloping algebras, on the little-discs operad, and on the ring of periods of the projective line minus three points. Three versions exist: a profinite one GT^\widehat{GT}GT, introduced by Grothendieck and Drinfeld and containing the absolute Galois group Gal(Q‾/Q)\mathrm{Gal}(\overline{\mathbb Q}/\mathbb Q)Gal(Q​/Q); a pro-ℓ\ellℓ one; and a pro-unipotent one GTGTGT, together with its graded companion GRTGRTGRT. This mission is about the graded, pro-unipotent side, which is the version that governs the homological-algebra and deformation-quantisation applications, and which is closest to a concrete, computable object: a Lie algebra of Lie polynomials in two variables, cut out by three explicit equations.

Its Lie algebra grt1\mathfrak{grt}_1grt1​ carries a distinguished family of elements σ3,σ5,σ7,…\sigma_3, \sigma_5, \sigma_7, \dotsσ3​,σ5​,σ7​,…, one in each odd degree at least 333, produced from the Knizhnik-Zamolodchikov associator. Deligne, Drinfeld and Ihara conjectured that grt1\mathfrak{grt}_1grt1​ is the free Lie algebra on such a family. A timeline of what is actually known:

  • 1990 - V. Drinfeld, On quasitriangular quasi-Hopf algebras and a group closely connected with Gal(Q‾/Q)\mathrm{Gal}(\overline{\mathbb Q}/\mathbb Q)Gal(Q​/Q), introduces GTGTGT, GRTGRTGRT, associators, and the defining equations of grt1\mathfrak{grt}_1grt1​; the Knizhnik-Zamolodchikov associator shows the set of associators is non-empty, hence σ3,σ5,…\sigma_3, \sigma_5, \dotsσ3​,σ5​,… exist and are non-zero.
  • 2012 - F. Brown, Mixed Tate motives over Z\mathbb ZZ (Annals of Mathematics 175, 949-976, doi:10.4007/annals.2012.175.2.10), proves that the ζf(r1,…,rn)\zeta^{\mathfrak f}(r_1,\dots,r_n)ζf(r1​,…,rn​) with rj∈{2,3}r_j \in \{2,3\}rj​∈{2,3} form a basis of the algebra of motivic multiple zeta values. One half of the conjecture follows: the Lie subalgebra of grt1\mathfrak{grt}_1grt1​ generated by the σ2p+1\sigma_{2p+1}σ2p+1​ is free on them.
  • The converse half - that these elements generate all of grt1\mathfrak{grt}_1grt1​ - is open.

Setting

Let F(x,y)\mathbb{F}(x,y)F(x,y) be the free Lie algebra over Q\mathbb QQ on two generators xxx and yyy, graded by total word length. For a Lie algebra AAA over Q\mathbb QQ and a,b∈Aa, b \in Aa,b∈A, write ψ(a,b)\psi(a,b)ψ(a,b) for the image of ψ∈F(x,y)\psi \in \mathbb{F}(x,y)ψ∈F(x,y) under the unique Lie algebra morphism sending x↦ax \mapsto ax↦a and y↦by \mapsto by↦b.

For n≥1n \ge 1n≥1, the Drinfeld-Kohno Lie algebra tn\mathfrak t_ntn​ is generated over Q\mathbb QQ by symbols tijt_{ij}tij​, 1≤i,j≤n1 \le i, j \le n1≤i,j≤n, subject to

tii=0,tij=tji,[tij,tkl]=0,[tij,tik+tjk]=0,t_{ii} = 0, \qquad t_{ij} = t_{ji}, \qquad [t_{ij}, t_{kl}] = 0, \qquad [t_{ij}, t_{ik} + t_{jk}] = 0,tii​=0,tij​=tji​,[tij​,tkl​]=0,[tij​,tik​+tjk​]=0,

the third relation for i,j,k,li,j,k,li,j,k,l pairwise distinct and the fourth for i,j,ki,j,ki,j,k pairwise distinct. It is the Lie algebra of infinitesimal braid relations: the associated graded of the pure braid Lie algebra, and the coefficient algebra of the Knizhnik-Zamolodchikov connection.

The graded Grothendieck-Teichmüller Lie algebra grt1\mathfrak{grt}_1grt1​ is the set of ψ∈F(x,y)\psi \in \mathbb{F}(x,y)ψ∈F(x,y) satisfying three equations:

ψ(x,y)=−ψ(y,x),\psi(x,y) = -\psi(y,x),ψ(x,y)=−ψ(y,x), ψ(x,y)+ψ(y,z)+ψ(z,x)=0where x+y+z=0,\psi(x,y) + \psi(y,z) + \psi(z,x) = 0 \quad \text{where } x + y + z = 0,ψ(x,y)+ψ(y,z)+ψ(z,x)=0where x+y+z=0, ψ(t12,t23)−ψ(t12,t23+t24)+ψ(t12+t13,t24+t34)−ψ(t13+t23,t34)+ψ(t23,t34)=0  in t4.\psi(t_{12},t_{23}) - \psi(t_{12},t_{23}+t_{24}) + \psi(t_{12}+t_{13},t_{24}+t_{34}) - \psi(t_{13}+t_{23},t_{34}) + \psi(t_{23},t_{34}) = 0 \ \text{ in } \mathfrak t_4 .ψ(t12​,t23​)−ψ(t12​,t23​+t24​)+ψ(t12​+t13​,t24​+t34​)−ψ(t13​+t23​,t34​)+ψ(t23​,t34​)=0  in t4​.

All three are linear in ψ\psiψ and degree preserving, so grt1\mathfrak{grt}_1grt1​ is a graded Q\mathbb QQ-subspace.

grt1\mathfrak{grt}_1grt1​ is not closed under the bracket of F(x,y)\mathbb{F}(x,y)F(x,y); it is closed under the Ihara (Poisson) bracket

{f,g}=[f,g]+Dfg−Dgf,\{f,g\} = [f,g] + D_f g - D_g f,{f,g}=[f,g]+Df​g−Dg​f,

where DfD_fDf​ is the derivation of F(x,y)\mathbb{F}(x,y)F(x,y) determined by Dfx=0D_f x = 0Df​x=0 and Dfy=[y,f]D_f y = [y,f]Df​y=[y,f]. Writing Der\mathrm{Der}Der for the Lie algebra of derivations of F(x,y)\mathbb{F}(x,y)F(x,y) under the commutator, the assignment f↦Dff \mapsto D_ff↦Df​ satisfies [Df,Dg]=D{f,g}[D_f, D_g] = D_{\{f,g\}}[Df​,Dg​]=D{f,g}​, and it is injective on grt1\mathfrak{grt}_1grt1​; this is the form in which the Lie structure of grt1\mathfrak{grt}_1grt1​ is expressed in the formal statements below.

Finally, for n1≥2n_1 \ge 2n1​≥2 and n2,…,nk≥1n_2,\dots,n_k \ge 1n2​,…,nk​≥1 the multiple zeta value is

ζ(n1,…,nk)=∑j1>j2>⋯>jk≥11j1n1j2n2⋯jknk.\zeta(n_1,\dots,n_k) = \sum_{j_1 > j_2 > \cdots > j_k \ge 1} \frac{1}{j_1^{n_1} j_2^{n_2} \cdots j_k^{n_k}} .ζ(n1​,…,nk​)=j1​>j2​>⋯>jk​≥1∑​j1n1​​j2n2​​⋯jknk​​1​.

These numbers are the coefficients of the Knizhnik-Zamolodchikov associator, which is why they enter a mission about grt1\mathfrak{grt}_1grt1​; they satisfy the stuffle and shuffle relations, whose common refinement (the double shuffle relations) is the arithmetic side of the same story.

Formalization targets

Goal - Deligne-Drinfeld-Ihara

∃ σ0,σ1,σ2,⋯∈grt1,deg⁡σp=2p+3,such that grt1 is the free Lie algebra on (σp)p≥0 for { ,}.\exists\, \sigma_0, \sigma_1, \sigma_2, \dots \in \mathfrak{grt}_1, \quad \deg \sigma_p = 2p+3, \quad \text{such that } \mathfrak{grt}_1 \text{ is the free Lie algebra} \text{ on } (\sigma_p)_{p \ge 0} \text{ for } \{\,,\}.∃σ0​,σ1​,σ2​,⋯∈grt1​,degσp​=2p+3,such that grt1​ is the free Lie algebra on (σp​)p≥0​ for {,}.

Concretely: the Lie algebra morphism from the free Lie algebra on countably many generators to Der\mathrm{Der}Der sending the ppp-th generator to DσpD_{\sigma_p}Dσp​​ is injective, and its image is exactly D(grt1)D(\mathfrak{grt}_1)D(grt1​). The statement fixes the degrees of the generators but not the generators themselves, which is the weakest form that still carries the content of the conjecture.

Milestone level - Brown's half

The same family exists with the morphism merely injective: the σ2p+1\sigma_{2p+1}σ2p+1​ generate a free Lie subalgebra. This is a theorem (Brown 2012); the open part of the goal is surjectivity.

Supporting levels

The Ihara bracket is a Lie bracket; grt1\mathfrak{grt}_1grt1​ is closed under it; the degree-333 element [x+y,[x,y]][x+y,[x,y]][x+y,[x,y]] lies in grt1\mathfrak{grt}_1grt1​; every odd degree ≥3\ge 3≥3 contains a non-zero element of grt1\mathfrak{grt}_1grt1​; multiple zeta values satisfy the stuffle and shuffle relations; and ζ(2,1)=ζ(3)\zeta(2,1) = \zeta(3)ζ(2,1)=ζ(3).

Significance

A positive answer would determine grt1\mathfrak{grt}_1grt1​ completely and, through the GTGTGT-GRTGRTGRT-associator torsor, describe the pro-unipotent Grothendieck-Teichmüller group by generators without relations. Downstream it would pin down the homotopy automorphisms of the rationalised little-discs operad and the Lie algebra of the motivic Galois group of mixed Tate motives over Z\mathbb ZZ up to the same freeness statement. Without it, even the dimension of grt1\mathfrak{grt}_1grt1​ in a given degree is only known to be bounded above by the Broadhurst-Kreimer style count, with equality unproved.

Formalizing this mission produces a machine-checked definition of tn\mathfrak t_ntn​, grt1\mathfrak{grt}_1grt1​ and the Ihara bracket - objects that have no Mathlib counterpart at present - and machine-checked proofs of the Lie-theoretic facts around them. Brown's theorem itself is proved in the literature but not formalized; the goal statement is genuinely open, and no part of this mission is closed by an existing Lean development known to the proposal.

Difficulty

The obvious approach to the goal - exhibit the generators and count dimensions degree by degree - fails in both directions. Upwards, no closed formula for σ2p+1\sigma_{2p+1}σ2p+1​ is known: they are extracted from the Knizhnik-Zamolodchikov associator, whose coefficients are regularised iterated integrals, and only their leading coefficients are controlled. Downwards, freeness of the subalgebra they generate is not an algebraic manipulation of the three defining equations: Brown derives it from the motivic theory of multiple zeta values, where the missing input is a basis theorem for a period algebra, not an identity in F(x,y)\mathbb{F}(x,y)F(x,y). Even the milestone "grt1\mathfrak{grt}_1grt1​ is closed under the Ihara bracket" is not a formality: the pentagon equation lives in t4\mathfrak t_4t4​ and must be transported through substitutions into a quotient Lie algebra.

Formalization scope

The formalization commits to the following conventions, all visible in the definition files.

  1. The base field is Q\mathbb QQ. The source works over a field KKK of characteristic zero; every statement here is over Q\mathbb QQ.
  2. grt1\mathfrak{grt}_1grt1​ is modelled inside the free Lie algebra FreeLieAlgebra ℚ (Fin 2), i.e. by Lie polynomials, not the completed Lie algebra F^(x,y)\widehat{\mathbb{F}}(x,y)F(x,y) of the source. The three defining equations are homogeneous, so the graded object determines the completed one; solvers should be aware that no topology or completion appears anywhere.
  3. tn\mathfrak t_ntn​ is the quotient of the free Lie algebra on ordered pairs of indices in Fin n by the Lie ideal generated by the four relation families above, so dkGen i j is ti+1,j+1t_{i+1,j+1}ti+1,j+1​ under the shift Fin 4 = {0,1,2,3} versus indices 1,2,3,41,2,3,41,2,3,4.
  4. Homogeneity is expressed by the rescaling characterisation: ψ\psiψ has degree nnn if ψ(cx,cy)=cnψ(x,y)\psi(cx,cy) = c^n \psi(x,y)ψ(cx,cy)=cnψ(x,y) for all c∈Qc \in \mathbb Qc∈Q. Over an infinite field this is equivalent to homogeneity for the word-length grading.
  5. The Ihara derivation uses Dfx=0D_f x = 0Df​x=0. The source writes Dfx=xD_f x = xDf​x=x in Remark 4.4 and in Section 7.3, but that convention contradicts Lemma 7.2 of the same notes and the computation {x,y}=[x,y]+[y,x]=0\{x,y\} = [x,y] + [y,x] = 0{x,y}=[x,y]+[y,x]=0 in Remark 7.2; Dfx=0D_f x = 0Df​x=0 is the convention under which both hold, and is the standard one.
  6. The Lie structure on grt1\mathfrak{grt}_1grt1​ is carried by the injection f↦Dff \mapsto D_ff↦Df​ into LieDerivation ℚ (FreeLieAlgebra ℚ (Fin 2)) (FreeLieAlgebra ℚ (Fin 2)), so that freeness can be stated as injectivity of a morphism out of a free Lie algebra without first installing a new Lie algebra structure. Note f↦Dff \mapsto D_ff↦Df​ is injective on grt1\mathfrak{grt}_1grt1​ but not on all of F(x,y)\mathbb{F}(x,y)F(x,y), where Dy=0D_y = 0Dy​=0; a supporting item records the injectivity actually used.
  7. Multiple zeta values are real numbers defined by an iterated tsum; for non-admissible words the series diverges and the definition returns Mathlib's junk value. Every statement about them therefore carries an admissibility hypothesis: all letters ≥1\ge 1≥1 and first letter ≥2\ge 2≥2. The stuffle and shuffle products are multisets of words, so no free module on words is needed.
  8. Nothing here is vacuous by construction: the defining equations of grt1\mathfrak{grt}_1grt1​ are linear conditions on a non-zero graded space, t4≠0\mathfrak t_4 \ne 0t4​=0, and the milestone [x+y,[x,y]]∈grt1[x+y,[x,y]] \in \mathfrak{grt}_1[x+y,[x,y]]∈grt1​, [x+y,[x,y]]≠0[x+y,[x,y]] \ne 0[x+y,[x,y]]=0 exhibits a non-zero element.

Contributions welcome: the Lie-theoretic milestones (Lemma 7.2, Corollary 7.1, closure of grt1\mathfrak{grt}_1grt1​, the degree-333 element) are self-contained and need no motivic input; the multiple zeta milestones need summability infrastructure for iterated series; Brown's theorem and the goal need a substantial development that does not yet exist in Lean.

Selected references

  • V. G. Drinfeld, On quasitriangular quasi-Hopf algebras and a group closely connected with Gal(Q‾/Q)\mathrm{Gal}(\overline{\mathbb Q}/\mathbb Q)Gal(Q​/Q), Leningrad Math. J. 2 (1991), 829-860.
  • F. Brown, Mixed Tate motives over Z\mathbb ZZ, Annals of Mathematics 175 (2012), 949-976, doi:10.4007/annals.2012.175.2.10.
  • T. Willwacher, The Grothendieck-Teichmüller Group, ETH Zürich lecture notes, 27 February 2014 (the source text for this mission).
  • T. Willwacher, M. Kontsevich's graph complex and the Grothendieck-Teichmüller Lie algebra, Invent. Math. 200 (2015), 671-760, doi:10.1007/s00222-014-0528-x.
29 thms4 active usersReviewed
🏆Completed
AlgebraRepresentation Theory·Captain: Lucas

Ngo's Fundamental Lemma II: Isogenies of Root Data and Paired GroupsResearch Paper

Motivation

Waldspurger's non-standard fundamental lemma is an identity between stable orbital integrals on the Lie algebras of two reductive groups that are not isomorphic, and not even isogenous as algebraic groups, but whose root data become identified after tensoring with Q\mathbb{Q}Q. The basic example is the pair (Sp2n,SO2n+1)(\mathrm{Sp}_{2n}, \mathrm{SO}_{2n+1})(Sp2n​,SO2n+1​), whose root systems CnC_nCn​ and BnB_nBn​ are exchanged by Langlands duality; the identity is what allows the twisted fundamental lemma to be deduced from the ordinary one. Waldspurger formulated the conjecture in L'endoscopie tordue n'est pas si tordue (2008); it is Theorem 1.12.7 of Bao Chau Ngo, Le lemme fondamental pour les algebres de Lie, Publ. Math. IHES 111 (2010), 1-169 (DOI), proved there in equal characteristic by the same Hitchin-fibration argument that gives the ordinary fundamental lemma.

Before any of that geometry can start, the two sides have to be compared: one needs a single Cartan subalgebra, a single Weyl group and a single space of characteristic polynomials serving both groups at once. Producing that comparison is a self-contained piece of linear algebra over the root data, carried out in Ngo's §1.12, and it is what this mission asks for.

Setting

Let G1G_1G1​ and G2G_2G2​ be split reductive groups over a field, pinned, with maximal tori T1T_1T1​ and T2T_2T2​. Each is determined by its root datum (X∗(Ti),X∗(Ti),Φi,Φi∨,Δi)(X^*(T_i), X_*(T_i), \Phi_i, \Phi_i^\vee, \Delta_i)(X∗(Ti​),X∗​(Ti​),Φi​,Φi∨​,Δi​), where Φi\Phi_iΦi​ is the set of roots, Φi∨\Phi_i^\veeΦi∨​ the set of coroots and Δi\Delta_iΔi​ the set of simple roots singled out by the pinning.

An isogeny of root data between G1G_1G1​ and G2G_2G2​ (Ngo, Definition 1.12.1) is a pair of isomorphisms of Q\mathbb{Q}Q-vector spaces

ψ∗:X∗(T2)⊗Q⟶X∗(T1)⊗Q,ψ∗:X∗(T1)⊗Q⟶X∗(T2)⊗Q\psi^* : X^*(T_2)\otimes\mathbb{Q} \longrightarrow X^*(T_1)\otimes\mathbb{Q}, \qquad \psi_* : X_*(T_1)\otimes\mathbb{Q} \longrightarrow X_*(T_2)\otimes\mathbb{Q}ψ∗:X∗(T2​)⊗Q⟶X∗(T1​)⊗Q,ψ∗​:X∗​(T1​)⊗Q⟶X∗​(T2​)⊗Q

which are transposes of one another, such that ψ∗\psi^*ψ∗ carries the set of lines Qα2\mathbb{Q}\alpha_2Qα2​ (α2∈Φ2\alpha_2 \in \Phi_2α2​∈Φ2​) bijectively onto the set of lines Qα1\mathbb{Q}\alpha_1Qα1​ (α1∈Φ1\alpha_1\in\Phi_1α1​∈Φ1​), matching lines of simple roots with lines of simple roots, and such that ψ∗\psi_*ψ∗​ has the same property for the lines spanned by coroots. Two semisimple groups with the same adjoint group are isogenous in this sense; so are a group and its Langlands dual, the interesting cases being Bn↔CnB_n \leftrightarrow C_nBn​↔Cn​, F4F_4F4​ and G2G_2G2​, where a short root α\alphaα is sent to αˇ\check\alphaαˇ and a long root to nαˇn\check\alphanαˇ with n=∣αlong∣2/∣αshort∣2n = |\alpha_{\mathrm{long}}|^2/|\alpha_{\mathrm{short}}|^2n=∣αlong​∣2/∣αshort​∣2. Groups obtained by twisting a pair of isogenous pinned groups by a common torsor are called paired.

A prime ppp is good with respect to ψ∗\psi^*ψ∗ when it divides neither of the indices

∣X∗(T1)/(X∗(T1)∩X∗(T2))∣and∣X∗(T2)/(X∗(T1)∩X∗(T2))∣,\bigl|X_*(T_1)/(X_*(T_1)\cap X_*(T_2))\bigr| \quad\text{and}\quad \bigl|X_*(T_2)/(X_*(T_1)\cap X_*(T_2))\bigr|,​X∗​(T1​)/(X∗​(T1​)∩X∗​(T2​))​and​X∗​(T2​)/(X∗​(T1​)∩X∗​(T2​))​,

the two lattices being compared inside the single Q\mathbb{Q}Q-vector space identified by ψ∗\psi_*ψ∗​.

Formalization targets

Goal (1.12.4 and 1.12.6): the Weyl groups are identified compatibly

ψ∗ w ψ∗−1∈W2for all w∈W1,and conversely,\psi_* \, w \, \psi_*^{-1} \in W_2 \quad \text{for all } w \in W_1, \qquad\text{and conversely,}ψ∗​wψ∗−1​∈W2​for all w∈W1​,and conversely,

i.e. conjugation by ψ∗\psi_*ψ∗​ carries the Weyl group W1W_1W1​ acting on X∗(T1)⊗QX_*(T_1)\otimes\mathbb{Q}X∗​(T1​)⊗Q onto the Weyl group W2W_2W2​ acting on X∗(T2)⊗QX_*(T_2)\otimes\mathbb{Q}X∗​(T2​)⊗Q. Ngo's reason is that the reflection attached to a root depends only on the line through that root, so the bijection of root lines transports reflections to reflections. This equivariance is what makes the induced isomorphism t1→t2\mathfrak{t}_1 \to \mathfrak{t}_2t1​→t2​ descend to an isomorphism ν:cG1→cG2\nu : \mathfrak{c}_{G_1} \to \mathfrak{c}_{G_2}ν:cG1​​→cG2​​ of the spaces of characteristic polynomials, which is Lemme 1.12.6 and which is what allows two points a1a_1a1​ and a2a_2a2​ with ν(a1)=a2\nu(a_1) = a_2ν(a1​)=a2​ to be compared at all.

Milestones

Two steps lead there: the reflection computation that makes a matched pair of root lines give a matched pair of reflections, and the integral statement behind Ngo's good-characteristic hypothesis — that when the two indices above are invertible in the base ring, the two lattices become identified after base change.

Significance

Theorem 1.12.7, the non-standard fundamental lemma, asserts that for two paired groups over Ov=k[[ϖ]]O_v = k[[\varpi]]Ov​=k[[ϖ]] with residue characteristic exceeding twice the Coxeter numbers, and for points a1a_1a1​ and a2a_2a2​ corresponding under ν\nuν, the stable orbital integrals of the characteristic functions of g1(Ov)\mathfrak{g}_1(O_v)g1​(Ov​) and g2(Ov)\mathfrak{g}_2(O_v)g2​(Ov​) agree. Waldspurger showed that this identity, together with the ordinary fundamental lemma, implies the twisted fundamental lemma. None of the objects in that statement — reductive group schemes over a discrete valuation ring, orbital integrals, Haar measures on the centralizer tori — exists in Mathlib today. The comparison of §1.12 does not need any of them: it is a statement about lattices, root systems and Weyl groups, and it is a strict prerequisite, since without the isomorphism ν\nuν the two sides of Theorem 1.12.7 cannot even be matched up.

Beyond this paper, the notion of an isogeny of root data and the good-characteristic base change of a pair of lattices are reusable: they are the standard bookkeeping behind Langlands duality for split groups, and neither is currently available.

Difficulty

The reflection step looks like a one-line computation and is one — but only once the two proportionality constants are known to agree. If ψ∗(α2)=c α1\psi^*(\alpha_2) = c\,\alpha_1ψ∗(α2​)=cα1​ and ψ∗(α1∨)=c′ α2∨\psi_*(\alpha_1^\vee) = c'\,\alpha_2^\veeψ∗​(α1∨​)=c′α2∨​, the conjugate of sα1s_{\alpha_1}sα1​​ is sα2s_{\alpha_2}sα2​​ exactly when c=c′c = c'c=c′, and that is forced by transposition together with ⟨α,α∨⟩=2\langle\alpha,\alpha^\vee\rangle = 2⟨α,α∨⟩=2. The genuine difficulty in the goal is different: the definition only says that ψ∗\psi^*ψ∗ and ψ∗\psi_*ψ∗​ permute lines, so one has to show that the bijection induced on root lines and the bijection induced on coroot lines are the same bijection. A solver who assumes this without proof has assumed the substance of 1.12.4.

The lattice milestone has its own trap: the quotient Λ1/(Λ1∩Λ2)\Lambda_1/(\Lambda_1\cap\Lambda_2)Λ1​/(Λ1​∩Λ2​) must be shown to have vanishing Tor\mathrm{Tor}Tor after base change, not merely to vanish, or the inclusion becomes only surjective.

Formalization scope

Root data are modelled by Mathlib's RootPairing ι ℚ M N, with MMM the character space, NNN the cocharacter space, and rational coefficients throughout, so that "tensoring with Q\mathbb{Q}Q" is built into the ambient objects rather than performed explicitly. A choice of simple roots is recorded as a subset of the index type rather than as a RootPairing.Base; nothing in the statements depends on that subset beyond its role in the definition of an isogeny. The Weyl group is the subgroup of linear automorphisms of the cocharacter space generated by the coreflections, which is the form in which it acts on the Cartan.

The goal is stated as a two-sided intertwining property rather than as an equality of subgroups: every element of W1W_1W1​ is intertwined by ψ∗\psi_*ψ∗​ with some element of W2W_2W2​ and conversely. This avoids introducing a conjugation homomorphism, and it is the form in which the statement is used. Both root pairings in the goal are required to be finite, reduced root systems, matching Ngo's hypothesis that G1G_1G1​ and G2G_2G2​ are reductive groups.

The good-characteristic condition is formalized exactly as Ngo writes it, by the invertibility in the base ring of the two indices, each expressed as the cardinality of an explicit quotient group; the conclusion is the bijectivity of the map induced on the tensor product by the inclusion of the intersection. If a quotient were infinite its cardinality is reported as 000, and invertibility of 000 then forces the base ring to be trivial, so no false statement hides in that corner.

No statement here is vacuous: any pair consisting of a root system and itself, with ψ∗\psi^*ψ∗ and ψ∗\psi_*ψ∗​ the identity, satisfies every hypothesis, and the pair (Bn,Cn)(B_n, C_n)(Bn​,Cn​) gives the intended non-trivial instances.

Selected references

  • Bao Chau Ngo, Le lemme fondamental pour les algebres de Lie, Publ. Math. IHES 111 (2010), 1-169. https://doi.org/10.1007/s10240-010-0026-7
  • J.-L. Waldspurger, L'endoscopie tordue n'est pas si tordue, Mem. Amer. Math. Soc. 908 (2008). https://doi.org/10.1090/memo/0908
  • J.-L. Waldspurger, Le lemme fondamental implique le transfert, Compositio Math. 105 (1997), 153-236. https://doi.org/10.1023/A:1000103112268
  • T. A. Springer, Reductive groups, in Automorphic Forms, Representations and L-functions, Proc. Sympos. Pure Math. 33 (1979), 3-27. https://doi.org/10.1090/pspum/033.1
4 thms4 active usersReviewed
🏆Completed
Operations ResearchOptimization·Captain: mikedeng1

Integer Factorization: Why Two-Item Joint Replenishment Is Hard 2: For Odd Composite M, Every Optimal Plan of an Explicit Two-Item Periodic JRP Instance Has q₂ = M and 1 < gcd(q₁, M) < MResearch Paper

Motivation

The joint replenishment problem (JRP) is a basic model of inventory coordination: several items are ordered from one supplier, each item pays its own ordering and holding costs, and an additional item-independent joint ordering cost rewards ordering the items at common times. Two accounting conventions are studied. In the periodic JRP (also called the general integer model; see the survey of Goyal and Satir, 1989) the joint cost is charged at every point of a common grid, whether or not an item is ordered there; in the aperiodic JRP it is charged only at actual order times.

For decades the literature produced heuristics and enumerative algorithms for the JRP without a polynomial-time exact algorithm and without evidence that none exists. Schulz and Telha (arXiv:2007.09045v1; published in Operations Research, 2024, as Integer Factorization: Why Two-Item Joint Replenishment Is Hard) showed that already the two-item problem is at least as hard as integer factorization, in both variants. For the periodic JRP the paper notes (p. 10): "No hardness results were previously known for the periodic JRP."

Timeline, as recorded in the paper (pp. 4–5):

  • 2011: Schulz and Telha announce that the two-item aperiodic JRP is at least as hard as integer factorization (Theorem 1(a)).
  • 2018: Cohen-Hillel and Yedidsion prove that the aperiodic JRP with an arbitrary number of items is strongly NP-hard.
  • 2020: the preprint arXiv:2007.09045v1 adds the periodic case (Theorem 1(b), via Lemma 2, the subject of this mission) and, assuming the Riemann hypothesis, NP-hardness of the two-item periodic JRP under randomized reductions (Theorem 2).

Setting

An item with ordering cost K≥0K \ge 0K≥0 and holding cost H≥0H \ge 0H≥0, replenished every qqq time units, where qqq is a positive integer, has the EOQ cost

EOQK,H(q)=Kq+Hq.\mathrm{EOQ}_{K,H}(q) = \frac{K}{q} + Hq .EOQK,H​(q)=qK​+Hq.

In the two-item periodic JRP, item i∈{1,2}i \in \{1,2\}i∈{1,2} has parameters (Ki,Hi)(K_i, H_i)(Ki​,Hi​) and an integer period qi≥1q_i \ge 1qi​≥1, and a joint ordering cost K0>0K_0 > 0K0​>0 is incurred every ρ\rhoρ time units, where ρ\rhoρ divides both periods. At an optimum ρ=gcd⁡(q1,q2)\rho = \gcd(q_1,q_2)ρ=gcd(q1​,q2​), and the problem is to minimize objective (3) of the paper,

JRP(q1,q2)=EOQK1,H1(q1)+EOQK2,H2(q2)+K0gcd⁡(q1,q2),q1,q2∈Z+.\mathrm{JRP}(q_1,q_2) = \mathrm{EOQ}_{K_1,H_1}(q_1) + \mathrm{EOQ}_{K_2,H_2}(q_2) + \frac{K_0}{\gcd(q_1,q_2)}, \qquad q_1,q_2 \in \mathbb{Z}^+ .JRP(q1​,q2​)=EOQK1​,H1​​(q1​)+EOQK2​,H2​​(q2​)+gcd(q1​,q2​)K0​​,q1​,q2​∈Z+.

An optimal solution is a pair of positive integers whose value is at most the value of every pair of positive integers.

Given a natural number MMM, the instance of Lemma 2 is

K0=M,K1=0,H1=1,H2=M(M+1),K2=M3(M+1),K_0 = M,\quad K_1 = 0,\quad H_1 = 1,\quad H_2 = M(M+1),\quad K_2 = M^3(M+1),K0​=M,K1​=0,H1​=1,H2​=M(M+1),K2​=M3(M+1),

with objective written JRPM\mathrm{JRP}_MJRPM​ and item 2's cost EOQ2(q)=K2/q+H2q\mathrm{EOQ}_2(q) = K_2/q + H_2 qEOQ2​(q)=K2​/q+H2​q. Fixing q2=Mq_2 = Mq2​=M leaves the single-variable problem (4):

min⁡ Mgcd⁡(q,M)+qs.t. q∈Z+.\min\ \frac{M}{\gcd(q,M)} + q \quad \text{s.t. } q \in \mathbb{Z}^+ .min gcd(q,M)M​+qs.t. q∈Z+.

An odd composite number is an odd integer M>1M > 1M>1 that is not prime.

Formalization targets

Goal: Lemma 2 (p. 11)

For every odd composite MMM: the coefficients of the instance above satisfy K0>0K_0 > 0K0​>0 and are natural numbers at most M5M^5M5; the instance has an optimal solution; and every optimal solution (q1,q2)(q_1,q_2)(q1​,q2​) satisfies

q2=Mand1<gcd⁡(q1,M)<M.q_2 = M \quad\text{and}\quad 1 < \gcd(q_1, M) < M .q2​=Mand1<gcd(q1​,M)<M.

The goal does not say which non-trivial divisor gcd⁡(q1,M)\gcd(q_1,M)gcd(q1​,M) is: optimal solutions need not be unique (for M=15M = 15M=15 both q1=3q_1 = 3q1​=3 and q1=5q_1 = 5q1​=5 are optimal).

Milestones (proof of Lemma 2, pp. 11–12)

  1. For q2≠Mq_2 \ne Mq2​=M: EOQ2(q2)≥EOQ2(M±1)=EOQ2(M)+H2M±1≥EOQ2(M)+M\mathrm{EOQ}_2(q_2) \ge \mathrm{EOQ}_2(M \pm 1) = \mathrm{EOQ}_2(M) + \frac{H_2}{M\pm 1} \ge \mathrm{EOQ}_2(M) + MEOQ2​(q2​)≥EOQ2​(M±1)=EOQ2​(M)+M±1H2​​≥EOQ2​(M)+M.
  2. For q2≠Mq_2 \ne Mq2​=M: JRPM(q1,q2)>M+EOQ2(M)+1=JRPM(M,M)\mathrm{JRP}_M(q_1,q_2) > M + \mathrm{EOQ}_2(M) + 1 = \mathrm{JRP}_M(M,M)JRPM​(q1​,q2​)>M+EOQ2​(M)+1=JRPM​(M,M).
  3. With q2=Mq_2 = Mq2​=M the instance reduces to problem (4): JRPM(q1,M)=EOQ2(M)+Mgcd⁡(q1,M)+q1\mathrm{JRP}_M(q_1,M) = \mathrm{EOQ}_2(M) + \frac{M}{\gcd(q_1,M)} + q_1JRPM​(q1​,M)=EOQ2​(M)+gcd(q1​,M)M​+q1​.
  4. An odd composite MMM has a divisor ppp with 3≤p≤M/33 \le p \le M/33≤p≤M/3.
  5. For such ppp: Mgcd⁡(p,M)+p≤2M3\frac{M}{\gcd(p,M)} + p \le \frac{2M}{3}gcd(p,M)M​+p≤32M​.
  6. If gcd⁡(q,M)=1\gcd(q,M) = 1gcd(q,M)=1 or gcd⁡(q,M)=M\gcd(q,M) = Mgcd(q,M)=M, then Mgcd⁡(q,M)+q≥M\frac{M}{\gcd(q,M)} + q \ge Mgcd(q,M)M​+q≥M.

Significance

The result. Lemma 2 says that an exact solver for the two-item periodic JRP, applied to an instance whose coefficients have size O(log⁡M)O(\log M)O(logM), returns a pair from which a non-trivial divisor of MMM is read off as gcd⁡(q1,M)\gcd(q_1, M)gcd(q1​,M). Repeating on the factors yields the full factorization, so a polynomial-time algorithm for the two-item periodic JRP would give a polynomial-time algorithm for integer factorization (Theorem 1(b), p. 12). Since the security of RSA-type cryptosystems rests on the belief that factoring is hard, the lemma explains why exact algorithms for even two items have not been found. Section 3 of the paper extends the same construction to a reduction from a range-divisor problem that is NP-complete under randomized reductions, assuming the Riemann hypothesis; that extension is a separate mission of this series.

Formalizing it. The result is proved in the paper, and the proof is short. To our knowledge it has no machine-checked proof. This mission produces a Lean statement of the reduction's correctness with the explicit instance, and its proof together with the intermediate steps of the paper's argument. One printed step needs a correction (milestone 4, see below), which a machine-checked proof makes explicit.

Difficulty

Two points need care. First, the claim concerns every optimal solution of a problem over all pairs of positive integers, so it needs both a global lower bound for every pair with q2≠Mq_2 \ne Mq2​=M and the existence of an optimum, which the paper does not state: the objective must be shown to attain its infimum over an infinite discrete domain. Second, the step separating non-trivial from trivial greatest common divisors depends on a divisor of a specific size: the printed claim "a non-trivial divisor ppp with 3≤p<M/33 \le p < M/33≤p<M/3" is false for M=9M = 9M=9, whose only non-trivial divisor is 3=M/33 = M/33=M/3. The corrected bound p≤M/3p \le M/3p≤M/3 still gives the value 2M/3<M2M/3 < M2M/3<M that the argument needs, but only because M≥9M \ge 9M≥9 for every odd composite MMM. A direct convexity argument for item 2 alone does not finish the proof: item 1's cost and the joint cost interact through gcd⁡(q1,q2)\gcd(q_1,q_2)gcd(q1​,q2​), which is not convex in either variable.

Formalization scope

This mission formalizes the correctness of the reduction behind Theorem 1(b); polynomial running time is not formalized. Theorem 1(b) itself, the recursion that turns one divisor into a full factorization, primality testing, and the treatment of even MMM (p. 10) are not stated.

Conventions committed to:

  • Periods are natural numbers cast to R\mathbb{R}R, and every optimality notion and every milestone ranges over positive periods only, because in Lean K/0=0K/0 = 0K/0=0 and gcd⁡(0,M)=M\gcd(0, M) = Mgcd(0,M)=M.
  • Costs are real numbers; the coefficients of the instance are natural-number expressions in MMM.
  • Objective (3) is the model and is defined directly; the derivation ρ=gcd⁡(q1,q2)\rho = \gcd(q_1,q_2)ρ=gcd(q1​,q2​) (p. 10, with B=1B = 1B=1) is not formalized.
  • "Odd composite" is encoded as Odd M ∧ 1 < M ∧ ¬ M.Prime.
  • "The size of the coefficients is at most 5log⁡(M)5\log(M)5log(M)" is stated as "every coefficient is at most M5M^5M5".

Disclosed differences from the printed lemma: the goal names the explicit instance of the proof's first sentence instead of "there is an instance" (a stronger statement); it adds the existence of an optimal solution, so that "every optimal solution satisfies …" is not vacuous; and milestone 4 uses p≤M/3p \le M/3p≤M/3 in place of the printed p<M/3p < M/3p<M/3. Milestones 1–3 and 6 are stated for every MMM with M≥2M \ge 2M≥2 (or every MMM), which contains the paper's case. A formalization with an existential instance, an unattained or empty set of optima, or periods allowed to be 000 would make the goal trivial or wrong; all three are excluded.

Infrastructure: the definitions (EOQ cost, objective (3), optimality over positive integer pairs) are short and local to this mission; the same objects appear in the companion missions of this series under their own namespaces. Mathlib supplies Nat.gcd, Nat.minFac and Nat.minFac_sq_le_self. Proofs of any milestone are welcome independently; the existence of an optimum is the one ingredient not present among the milestones.

Selected references

  • A. S. Schulz and C. Telha, Integer factorization and Riemann's hypothesis: Why two-item joint replenishment is hard, arXiv preprint, 2020. https://arxiv.org/abs/2007.09045v1 (published as Integer Factorization: Why Two-Item Joint Replenishment Is Hard, Operations Research, 2024).
  • S. K. Goyal and A. T. Satir, Joint replenishment inventory control: Deterministic and stochastic models, European Journal of Operational Research 38(1):2–13, 1989. https://doi.org/10.1016/0377-2217(89)90463-3
  • T. Cohen-Hillel and L. Yedidsion, The periodic joint replenishment problem is strongly NP-hard, Mathematics of Operations Research 43(4):1269–1289, 2018. https://doi.org/10.1287/moor.2017.0904
  • F. W. Harris, How many parts to make at once, Factory, The Magazine of Management 10(2):135–136, 152, 1913; reprinted in Operations Research 38(6):947–950, 1990. https://doi.org/10.1287/opre.38.6.947
  • M. Agrawal, N. Kayal and N. Saxena, PRIMES is in P, Annals of Mathematics 160(2):781–793, 2004. https://doi.org/10.4007/annals.2004.160.781
9 thms3 active usersReviewed
🏆Completed
CombinatoricsProbabilityTheoretical Computer Science·Captain: mikedeng1

A New Class of Random Number Generators 2: For Prime m = bʳ − bˢ + 1, Every Nontrivial Subtract-with-Borrow Sequence Is Periodic After r Steps, with Period the Order of b mod mResearch Paper

Motivation

A pseudorandom number generator replaces repeated random sampling with a deterministic update of a small state. Its useful lifetime depends on the length and structure of the resulting orbit. In Marsaglia and Zaman’s 1991 paper, the subtract-with-borrow generators use only digit subtraction and a one-bit borrow while attaining cycles that can be almost as long as the whole set of digit tuples. The mathematical question is exact: which fraction encodes an output sequence, when does an arbitrary seed enter a cycle, and how long is that cycle?

This mission concerns the paper’s first subtract-with-borrow rule, called Method 1 in §4.5. The paper also studies a second rule that reverses the order of the two subtracted digits. Its modulus and period analysis differ. The distinction matters because the same state format supports both rules while their arithmetic claims are different.

Setting

Choose an integer base b≥2b\ge2b≥2 and lags 0<s<r0<s<r0<s<r. A state is a row of rrr digits and one borrow bit, (x1,…,xr,c)(x_1,\ldots,x_r,c)(x1​,…,xr​,c), where each xix_ixi​ is in {0,…,b−1}\{0,\ldots,b-1\}{0,…,b−1} and c∈{0,1}c\in\{0,1\}c∈{0,1}. The leftmost digit x1x_1x1​ is the oldest. One update discards it, shifts the remaining digits left, and appends a new digit. Put t=xr+1−s−x1−ct=x_{r+1-s}-x_1-ct=xr+1−s​−x1​−c. If t≥0t\ge0t≥0, the appended digit is ttt and the new borrow is zero. If t<0t<0t<0, the appended digit is t+bt+bt+b and the new borrow is one. Write this deterministic map as fff.

The digits emitted after the seed obey xn=xn−s−xn−r−cx_n=x_{n-s}-x_{n-r}-cxn​=xn−s​−xn−r​−c modulo bbb, with ccc updated at each step. The associated modulus is m=br−bs+1m=b^r-b^s+1m=br−bs+1. For 0≤k<m0\le k<m0≤k<m, write dj(k/m)d_j(k/m)dj​(k/m) for the jjjth digit after the point in the base-bbb expansion of k/mk/mk/m, with j≥1j\ge1j≥1. The digit stream is read in reverse order when it is matched to an expansion: the latest generated digit in a finite block is the first fractional digit. A state is strictly periodic when it is already on a cycle under fff; otherwise it may pass through a transient before reaching one.

Two states have period one: (0,…,0,0)(0,\ldots,0,0)(0,…,0,0) and (b−1,…,b−1,1)(b-1,\ldots,b-1,1)(b−1,…,b−1,1). These are the trivial seeds. They are exceptions to the order-of-base period formula. A third useful object is the multiplicative order ord⁡m(b)\operatorname{ord}_m(b)ordm​(b), the least positive ppp for which bp≡1(modm)b^p\equiv1\pmod mbp≡1(modm). Since m≡1(modb)m\equiv1\pmod bm≡1(modb), the base is coprime to this modulus.

Formalization targets

Exact cycle period

For prime m=br−bs+1m=b^r-b^s+1m=br−bs+1 and any nontrivial seed zzz, the goal identifies the minimal state period after the transient:

period⁡f(fr(z))=ord⁡m(b).\operatorname{period}_f\bigl(f^r(z)\bigr)=\operatorname{ord}_m(b).periodf​(fr(z))=ordm​(b).

The assertion includes both that fr(z)f^r(z)fr(z) is on a cycle and that its period is exactly the order. It makes no primitive-root assumption. If bbb is a primitive root modulo mmm, the right side specializes to m−1=br−bsm-1=b^r-b^sm−1=br−bs, the full period discussed in §3 of the paper.

Supporting results

The milestones state that the fractional digits of k/mk/mk/m have least period ord⁡m(b)\operatorname{ord}_m(b)ordm​(b) when kkk and bbb are coprime to mmm; that a primitive root yields digit period m−1m-1m−1; that the two trivial seeds are precisely the fixed points; and that every seed reaches a cycle after at most rrr updates. They also formalize the reverse-digit relation for every finite generated block and the paper’s Method 1 inequalities that classify nontrivial seeds already on a cycle. These targets use the paper’s own claims in §§4.1, 4.3, and 4.5 rather than an arbitrary decomposition of the goal.

Significance

The result converts the orbit-length problem of a digit-and-borrow machine into a multiplicative-order calculation in a finite residue ring. A prime modulus and a primitive base produce a nontrivial cycle of length m−1m-1m−1; a nonprimitive base still has the exact order-of-base period. The seed classification separates states already on that cycle from states with an initial transient. These statements are what allow a proposed numerical parameter set to be assessed mathematically before the generator is used.

Marsaglia and Zaman proved these results in the cited paper. This mission asks for machine-checked Lean proofs of the statements, starting from an explicit finite-state update. The reusable output includes exact base-bbb digit arithmetic, links between digit periods and multiplicative order, and methods for reasoning about the eventual cycles of finite-state digit generators. The present proposal consists of compiled statements and definitions; the theorem bodies are open proof targets.

Difficulty

Finiteness alone shows that every state eventually repeats, but it gives neither the bound of rrr steps nor the exact cycle length. Likewise, observing that a generated digit block matches a prefix of some fraction does not by itself identify one period for the whole state orbit. The proof must keep track of the borrow bit and the direction in which the digit block is read. It must also show that a nontrivial seed does not collapse to one of the two fixed states. The source’s integer tableaux explain the arithmetic link, but turning their finite strings into a statement uniform over every seed and every block length is the main formalization challenge.

Formalization scope

Lean represents digits by Fin b, the borrow by Fin 2, and the row by a function on Fin r. Lean index zero is x1x_1x1​, so the digit used in the update, xr+1−sx_{r+1-s}xr+1−s​, has index r−sr-sr−s. The update branches on an ordinary integer comparison before any natural-number subtraction can truncate a negative value. The modulus is a natural number, and 0<s<r0<s<r0<s<r with b≥2b\ge2b≥2 makes br−bsb^r-b^sbr−bs an exact subtraction. The jjjth fractional digit is computed by an exact quotient and remainder; only j≥1j\ge1j≥1 has the mathematical meaning used in the theorems. The generated stream is one-based, and the first digit beyond the seed is xr+1x_{r+1}xr+1​.

The paper’s “after a few iterations” is pinned to its stated upper bound “at most rrr.” Its “period” is the minimal positive state period of fr(z)f^r(z)fr(z), not a mere period divisor or the period of an arbitrarily selected digit window. “Appropriately chosen” parameters mean a prime mmm for the goal and exclusion of the two named fixed seeds. The reverse-digit milestone permits the numerator kkk to depend on the finite endpoint, as the tableau argument does. No seed is excluded from the at-most-rrr milestone.

The discussion on pp. 473–474 prints the Method 1 seed inequalities in the opposite direction from the Method 1 listing on p. 472. The Lean seed-classification milestone uses the p. 472 directions, which agree with the step map on p. 466 and with direct finite checks. The §5 claim that every five-tuple except the 100100100 patterns xyxyxxyxyxxyxyx appears once in the special b=10,r=5,s=2b=10,r=5,s=2b=10,r=5,s=2 full cycle is left for a later extension. The other subtraction order, its modulus br−bs−1b^r-b^s-1br−bs−1, and the paper’s large parameter certificates are outside this mission.

An encoding that merely asserts the existence of some period, allows an impossible seed hypothesis, or replaces the update by a different subtraction order would make the goal vacuous or change the result. The intended development needs Mathlib’s ZMod, multiplicative order, finite iterations, periodic points, and natural-number quotient and remainder. Contributions proving the numbered milestones, strengthening their arithmetic interfaces, or closing the goal are in scope.

Selected references

  • G. Marsaglia and A. Zaman, A new class of random number generators, The Annals of Applied Probability 1(3), 462–480 (1991). DOI: 10.1214/aoap/1177005878.
17 thms3 active usersReviewed
🏆Completed
Linear algebraTheoretical Computer Science·Captain: mikedeng1

Factoring Polynomials with Rational Coefficients II: The Basis Reduction Algorithm Terminates and Returns a Reduced Basis of the LatticeResearch Paper

Why lattice basis reduction matters

A lattice is the set of integer combinations of nnn linearly independent vectors in Rn\mathbb R^nRn. Many computational problems — factoring polynomials over Q\mathbb QQ, simultaneous diophantine approximation, integer programming in fixed dimension, breaking knapsack cryptosystems, and the analysis of lattice-based cryptography — reduce to finding a good basis of a given lattice: one whose vectors are short and nearly orthogonal. In 1982 A. K. Lenstra, H. W. Lenstra, Jr. and L. Lovász gave a polynomial-time algorithm that turns any basis into a reduced one, now called the LLL algorithm (Math. Ann. 261, 1982). It was the key step of their polynomial-time factoring algorithm for Z[X]\mathbb Z[X]Z[X], and it has since become a standard tool of computational number theory, combinatorial optimization and cryptanalysis.

This mission formalizes the algorithm itself, as described in (1.15) of the paper, and the paper's proof (1.23) that it terminates and returns a reduced basis of the input lattice. A companion mission of the same series treats the properties of reduced bases ((1.6)–(1.12)); a third treats the factoring application (Sect. 2).

Setting

Let b1,…,bn∈Rnb_1,\dots,b_n\in\mathbb R^nb1​,…,bn​∈Rn be linearly independent and L=∑i=1nZbiL=\sum_{i=1}^n\mathbb Z b_iL=∑i=1n​Zbi​; the bib_ibi​ form a basis for LLL. The Gram–Schmidt vectors bi∗b_i^*bi∗​ and coefficients μij\mu_{ij}μij​ are defined by

bi∗=bi−∑j<iμijbj∗,μij=(bi,bj∗)(bj∗,bj∗).b_i^*=b_i-\sum_{j<i}\mu_{ij}b_j^*,\qquad \mu_{ij}=\frac{(b_i,b_j^*)}{(b_j^*,b_j^*)} .bi∗​=bi​−j<i∑​μij​bj∗​,μij​=(bj∗​,bj∗​)(bi​,bj∗​)​.

The basis is reduced if ∣μij∣≤12|\mu_{ij}|\le\tfrac12∣μij​∣≤21​ for 1≤j<i≤n1\le j<i\le n1≤j<i≤n and ∣bi∗+μi,i−1bi−1∗∣2≥34∣bi−1∗∣2|b_i^*+\mu_{i,i-1}b_{i-1}^*|^2\ge\tfrac34|b_{i-1}^*|^2∣bi∗​+μi,i−1​bi−1∗​∣2≥43​∣bi−1∗​∣2 for 1<i≤n1<i\le n1<i≤n.

The algorithm keeps a current basis bbb and a subscript k∈{1,…,n+1}k\in\{1,\dots,n+1\}k∈{1,…,n+1}, starting at k=2k=2k=2. While k≤nk\le nk≤n it performs one step:

  1. if k>1k>1k>1 and ∣μk,k−1∣>12|\mu_{k,k-1}|>\tfrac12∣μk,k−1​∣>21​, replace bkb_kbk​ by bk−rbk−1b_k-rb_{k-1}bk​−rbk−1​ with rrr an integer nearest to μk,k−1\mu_{k,k-1}μk,k−1​;
  2. case 1: if k≥2k\ge2k≥2 and ∣bk∗+μk,k−1bk−1∗∣2<34∣bk−1∗∣2|b_k^*+\mu_{k,k-1}b_{k-1}^*|^2<\tfrac34|b_{k-1}^*|^2∣bk∗​+μk,k−1​bk−1∗​∣2<43​∣bk−1∗​∣2, interchange bk−1b_{k-1}bk−1​ and bkb_kbk​ and set k:=k−1k:=k-1k:=k−1;
  3. case 2: otherwise, repeatedly take the largest l<kl<kl<k with ∣μkl∣>12|\mu_{kl}|>\tfrac12∣μkl​∣>21​ and replace bkb_kbk​ by bk−rblb_k-rb_lbk​−rbl​ with rrr an integer nearest to μkl\mu_{kl}μkl​, until ∣μkj∣≤12|\mu_{kj}|\le\tfrac12∣μkj​∣≤21​ for all j<kj<kj<k; then set k:=k+1k:=k+1k:=k+1.

The algorithm stops when k=n+1k=n+1k=n+1. Before and after every step the situation (1.16)–(1.17) holds: the first k−1k-1k−1 vectors satisfy both conditions of reducedness among themselves.

The termination proof uses the Gram determinants di=det⁡((bj,bl))1≤j,l≤id_i=\det\big((b_j,b_l)\big)_{1\le j,l\le i}di​=det((bj​,bl​))1≤j,l≤i​ (d0=1d_0=1d0​=1), the potential D=∏i=1n−1diD=\prod_{i=1}^{n-1}d_iD=∏i=1n−1​di​, and the minimum m(L)=min⁡{∣x∣2:x∈L, x≠0}m(L)=\min\{|x|^2:x\in L,\ x\ne0\}m(L)=min{∣x∣2:x∈L, x=0}.

Formalization targets

Goal: the algorithm terminates and returns a reduced basis

For every basis bbb of Rn\mathbb R^nRn (n≥1n\ge1n≥1):

¬ ∃ (st)t∈N: s0=(b,2), st→st+1 for all t,\neg\,\exists\,(s_t)_{t\in\mathbb N}:\ s_0=(b,2),\ s_t\to s_{t+1}\ \text{for all }t,¬∃(st​)t∈N​: s0​=(b,2), st​→st+1​ for all t,

every reachable state with k≤nk\le nk≤n admits a step, and every reachable state (b′,n+1)(b',n+1)(b′,n+1) has b′b'b′ a reduced basis for L=∑ZbiL=\sum\mathbb Z b_iL=∑Zbi​.

Milestones, in attack order

  • every step keeps bbb a basis for the same lattice (p. 519);
  • the situation (1.16)–(1.17) holds at k=2k=2k=2, implies reducedness at k=n+1k=n+1k=n+1, and is restored by every step (pp. 519–520);
  • di=∏j≤i∣bj∗∣2d_i=\prod_{j\le i}|b_j^*|^2di​=∏j≤i​∣bj∗​∣2, so di>0d_i>0di​>0, d0=1d_0=1d0​=1, dn=d(L)2d_n=d(L)^2dn​=d(L)2 (1.25);
  • in case 1, dk−1d_{k-1}dk−1​ drops by a factor <34<\tfrac34<43​, the other did_idi​ are unchanged, and DDD drops by a factor <34<\tfrac34<43​; case 2 changes no did_idi​ (1.23);
  • m(L)>0m(L)>0m(L)>0 is attained and di≥(3/4)i(i−1)/2m(L)id_i\ge(3/4)^{i(i-1)/2}m(L)^idi​≥(3/4)i(i−1)/2m(L)i for every basis of LLL (1.23);
  • along any run, case 2 occurs at most n−1n-1n−1 more times than case 1 (1.23).

Further targets (integral input, proof of (1.26))

For bi∈Znb_i\in\mathbb Z^nbi​∈Zn with ∣bi∣2≤B|b_i|^2\le B∣bi​∣2≤B, B≥2B\ge2B≥2: the number ccc of case-1 steps satisfies (4/3)c≤Bn(n−1)/2(4/3)^c\le B^{n(n-1)/2}(4/3)c≤Bn(n−1)/2; the identities (1.27)–(1.29) making the did_idi​ common denominators; and ∣bi∗∣2≤B|b_i^*|^2\le B∣bi∗​∣2≤B throughout.

Significance

The termination theorem is what makes reduced bases computable: the bounds of (1.6)–(1.12) on reduced bases are useful only because the algorithm produces such a basis from any input, and the factoring algorithm of Sect. 3 calls it as a subroutine. The explicit count (4/3)c≤Bn(n−1)/2(4/3)^c\le B^{n(n-1)/2}(4/3)c≤Bn(n−1)/2 is the step bound behind the paper's O(n4log⁡B)O(n^4\log B)O(n4logB) operation count (1.26).

On the formal side, Mathlib has Gram–Schmidt orthogonalization and Minkowski's convex body theorem, but no lattice basis reduction. A verified LLL implementation exists in Isabelle/HOL (the Archive of Formal Proofs entry A verified LLL algorithm, 2018), with its own algorithm description and representation. No Lean 4 formalization of the paper's algorithm or its termination proof exists, as far as could be determined. The result is proved; what is open here is its formalization.

Difficulty

The naive termination argument — "each case-1 step makes a vector shorter" — fails: case 1 can lengthen bkb_kbk​, and kkk moves back and forth. The paper's argument needs a potential that decreases by a fixed factor in case 1 and is invariant in case 2, the identity di=∏∣bj∗∣2d_i=\prod|b_j^*|^2di​=∏∣bj∗​∣2 to see that only dk−1d_{k-1}dk−1​ moves, and a lower bound on did_idi​ depending only on LLL. That lower bound rests on the Hermite-type estimate that a lattice of rank iii with Gram determinant ddd has a nonzero vector with ∣x∣2≤(4/3)(i−1)/2d1/i|x|^2\le(4/3)^{(i-1)/2}d^{1/i}∣x∣2≤(4/3)(i−1)/2d1/i, which is not in Mathlib and must be derived from the geometry of numbers for sublattices of lower rank. The invariant (1.16)–(1.17) requires tracking how the Gram–Schmidt data of the first kkk vectors change under a swap and under the size reductions of case 2.

Formalization scope

Rn\mathbb R^nRn is EuclideanSpace ℝ (Fin n), with Lean indices 0,…,n−10,\dots,n-10,…,n−1 for the paper's 1,…,n1,\dots,n1,…,n; bi∗b_i^*bi∗​ is Mathlib's unnormalised InnerProductSpace.gramSchmidt, and μij\mu_{ij}μij​ is (1.3) verbatim. A state is a pair (b,k)(b,k)(b,k) with kkk stored as the paper's subscript; b∗b^*b∗ and μ\muμ are recomputed from bbb, so the update formulae (1.22) are consequences, not definitions. One step is a relation: "the integer nearest to xxx" is any integer rrr with ∣x−r∣≤12|x-r|\le\tfrac12∣x−r∣≤21​, so every tie rule is covered. The loop of case 2 picks the largest bad index lll, as on the page, and runs until (1.21) holds. The relation follows the text of (1.15), not Fig. 1 (which never visits k=1k=1k=1 and stops at k=nk=nk=n). The standing hypotheses are n≥1n\ge1n≥1 and linear independence of the input basis.

A trivializing formalization is excluded: termination alone would hold for a relation that never fires, so the goal also asserts that a step exists at every reachable state with k≤nk\le nk≤n, and a sorry-free sanity file exhibits both cases firing for n=2n=2n=2. The goal does not mention DDD, did_idi​ or m(L)m(L)m(L), which appear only in milestones.

Not formalized: the operation count O(n4log⁡B)O(n^4\log B)O(n4logB) and binary-length bound of (1.26), which need a cost model; the bounds (1.30)–(1.34) on intermediate states and the bounds "throughout the course of the algorithm" on p. 524, which concern states inside a step; and Remark (1.37). Contributions welcome: a reusable Hermite-constant bound γi≤(4/3)(i−1)/2\gamma_i\le(4/3)^{(i-1)/2}γi​≤(4/3)(i−1)/2, Gram determinant identities, and invariance of Gram determinants under unimodular changes.

Selected references

  • A. K. Lenstra, H. W. Lenstra, Jr., L. Lovász, Factoring polynomials with rational coefficients, Math. Ann. 261 (1982), 515–534. https://doi.org/10.1007/BF01457454
  • J. W. S. Cassels, An Introduction to the Geometry of Numbers, Springer, 1959 (reference [4] of the paper). https://doi.org/10.1007/978-3-642-62035-5
  • R. Bottesch, J. Divasón, M. Haslbeck, S. Joosten, R. Thiemann, A. Yamada, A verified LLL algorithm, Archive of Formal Proofs, 2018. https://www.isa-afp.org/entries/LLL_Basis_Reduction.html
10 thms3 active usersReviewed
🏆Completed
Captain: xuanji

The irrationality measure of π is at most 7.606309 (Salikhov 2008)Research Paper

Motivation

The irrationality measure μ(π)\mu(\pi)μ(π) is the supremum of the μ\muμ for which ∣π−p/q∣<q−μ|\pi - p/q| < q^{-\mu}∣π−p/q∣<q−μ has infinitely many rational solutions p/qp/qp/q. Every irrational number has μ≥2\mu \ge 2μ≥2 (Dirichlet), almost every real number has μ=2\mu = 2μ=2, and it is conjectured that μ(π)=2\mu(\pi) = 2μ(π)=2. Known upper bounds:

  • Mahler (1953): 424242, the first proof that π\piπ is not a Liouville number.
  • Mignotte (1974): 20.620.620.6.
  • Chudnovsky (1982): 19.8899944…19.8899944\ldots19.8899944…
  • Rhin–Viola (1993): 14.79707414.79707414.797074.
  • Hata (1993): 8.016045…8.016045\ldots8.016045…
  • Salikhov (2008): 7.606308…7.606308\ldots7.606308…
  • Zeilberger–Zudilin (2020): 7.103205334137…7.103205334137\ldots7.103205334137…, the current record.

The campaign's first proved value is Mahler's 424242. This entry records Salikhov's bound.

Formalization target

The campaign template with the value 7.6063097.6063097.606309 filled in: PiIrrationality.UpperBound (7.606309 : ℝ), i.e. μ(π)≤7.606309\mu(\pi) \le 7.606309μ(π)≤7.606309.

Value. The bound is quoted as 7.606308…7.606308\ldots7.606308… (e.g. by Zeilberger–Zudilin), a truncation. This entry rounds the last digit up to 7.6063097.6063097.606309.

How the bound arises

Salikhov uses integrals of rational functions that are symmetric under a group of transformations (in the spirit of Rhin–Viola), which gives larger arithmetic savings in the common denominators than Hata's construction.

Significance

Each step down the list replaces Mahler's approximations with a sharper family. Formalizing 7.6063097.6063097.606309 would build reusable explicit machinery: integral constructions of rational approximations to π\piπ, bounds on their common denominators via prime-number estimates, and the standard lemma turning a sequence of good approximations into an irrationality-measure bound.

Selected references

  • V. Kh. Salikhov, On the irrationality measure of π\piπ, Russian Math. Surveys 63 (2008), no. 3, 570–572.
  • K. Mahler, On the approximation of π\piπ, Indag. Math. 15 (1953), 30–42.
  • F. Beukers, A rational approach to π\piπ, Nieuw Arch. Wiskd. (5) 1 (2000), 372–379.
  • Source table: https://teorth.github.io/optimizationproblems/constants/7a.html
11 thms3 active usersReviewed
🏆Completed
Captain: xuanji

The irrationality measure of π is at most 7.103205334138 (Zeilberger–Zudilin 2020)Research Paper

Motivation

The irrationality measure μ(π)\mu(\pi)μ(π) is the supremum of the μ\muμ for which ∣π−p/q∣<q−μ|\pi - p/q| < q^{-\mu}∣π−p/q∣<q−μ has infinitely many rational solutions p/qp/qp/q. Every irrational number has μ≥2\mu \ge 2μ≥2 (Dirichlet), almost every real number has μ=2\mu = 2μ=2, and it is conjectured that μ(π)=2\mu(\pi) = 2μ(π)=2. Known upper bounds:

  • Mahler (1953): 424242, the first proof that π\piπ is not a Liouville number.
  • Mignotte (1974): 20.620.620.6.
  • Chudnovsky (1982): 19.8899944…19.8899944\ldots19.8899944…
  • Rhin–Viola (1993): 14.79707414.79707414.797074.
  • Hata (1993): 8.016045…8.016045\ldots8.016045…
  • Salikhov (2008): 7.606308…7.606308\ldots7.606308…
  • Zeilberger–Zudilin (2020): 7.103205334137…7.103205334137\ldots7.103205334137…, the current record.

The campaign's first proved value is Mahler's 424242. This entry records Zeilberger–Zudilin's bound.

Formalization target

The campaign template with the value 7.1032053341387.1032053341387.103205334138 filled in: PiIrrationality.UpperBound (7.103205334138 : ℝ), i.e. μ(π)≤7.103205334138\mu(\pi) \le 7.103205334138μ(π)≤7.103205334138.

Value. The paper states its bound as 7.103205334137…7.103205334137\ldots7.103205334137…, a truncation. This entry rounds the last digit up to 7.1032053341387.1032053341387.103205334138 so that the goal follows from the published proof.

How the bound arises

Zeilberger and Zudilin modify Salikhov's integrals and use the Almkvist–Zeilberger algorithm (creative telescoping) to find recurrences for them, then optimise the arithmetic and analytic estimates. This is the current record.

Significance

Each step down the list replaces Mahler's approximations with a sharper family. Formalizing 7.1032053341387.1032053341387.103205334138 would build reusable explicit machinery: integral constructions of rational approximations to π\piπ, bounds on their common denominators via prime-number estimates, and the standard lemma turning a sequence of good approximations into an irrationality-measure bound.

Selected references

  • D. Zeilberger, W. Zudilin, The irrationality measure of π\piπ is at most 7.103205334137…7.103205334137\ldots7.103205334137…, Moscow J. Combin. Number Theory 9 (2020), no. 4, 407–419. https://arxiv.org/abs/1912.06345
  • K. Mahler, On the approximation of π\piπ, Indag. Math. 15 (1953), 30–42.
  • F. Beukers, A rational approach to π\piπ, Nieuw Arch. Wiskd. (5) 1 (2000), 372–379.
  • Source table: https://teorth.github.io/optimizationproblems/constants/7a.html
7 thms3 active usersReviewed
🏆Completed
Captain: xuanji

The irrationality measure of π is at most 8.016046 (Hata 1993)Research Paper

Motivation

The irrationality measure μ(π)\mu(\pi)μ(π) is the supremum of the μ\muμ for which ∣π−p/q∣<q−μ|\pi - p/q| < q^{-\mu}∣π−p/q∣<q−μ has infinitely many rational solutions p/qp/qp/q. Every irrational number has μ≥2\mu \ge 2μ≥2 (Dirichlet), almost every real number has μ=2\mu = 2μ=2, and it is conjectured that μ(π)=2\mu(\pi) = 2μ(π)=2. Known upper bounds:

  • Mahler (1953): 424242, the first proof that π\piπ is not a Liouville number.
  • Mignotte (1974): 20.620.620.6.
  • Chudnovsky (1982): 19.8899944…19.8899944\ldots19.8899944…
  • Rhin–Viola (1993): 14.79707414.79707414.797074.
  • Hata (1993): 8.016045…8.016045\ldots8.016045…
  • Salikhov (2008): 7.606308…7.606308\ldots7.606308…
  • Zeilberger–Zudilin (2020): 7.103205334137…7.103205334137\ldots7.103205334137…, the current record.

The campaign's first proved value is Mahler's 424242. This entry records Hata's bound.

Formalization target

The campaign template with the value 8.0160468.0160468.016046 filled in: PiIrrationality.UpperBound (8.016046 : ℝ), i.e. μ(π)≤8.016046\mu(\pi) \le 8.016046μ(π)≤8.016046.

Value. The paper computes the exponent as 7.016045…+17.016045\ldots + 17.016045…+1 and states the rounded bound 8.01618.01618.0161. This entry rounds the computed value's last digit up to 8.0160468.0160468.016046, which is still below the paper's 8.01618.01618.0161 and above 8.016045…8.016045\ldots8.016045….

How the bound arises

Hata obtains simultaneous approximations to 1,π,log⁡21, \pi, \log 21,π,log2 from complex contour integrals of Legendre type, with extra arithmetic savings from primes that divide the coefficients to a predictable extent. His linear-form measure is 7.016045…7.016045\ldots7.016045…, giving μ(π)≤8.016045…\mu(\pi) \le 8.016045\ldotsμ(π)≤8.016045… (stated in the paper as 8.01618.01618.0161). It stood as the record for about fifteen years.

Significance

Each step down the list replaces Mahler's approximations with a sharper family. Formalizing 8.0160468.0160468.016046 would build reusable explicit machinery: integral constructions of rational approximations to π\piπ, bounds on their common denominators via prime-number estimates, and the standard lemma turning a sequence of good approximations into an irrationality-measure bound.

Selected references

  • M. Hata, Rational approximations to π\piπ and some other numbers, Acta Arith. 63 (1993), no. 4, 335–349. http://matwbn.icm.edu.pl/ksiazki/aa/aa63/aa6344.pdf
  • K. Mahler, On the approximation of π\piπ, Indag. Math. 15 (1953), 30–42.
  • F. Beukers, A rational approach to π\piπ, Nieuw Arch. Wiskd. (5) 1 (2000), 372–379.
  • Source table: https://teorth.github.io/optimizationproblems/constants/7a.html
11 thms3 active usersReviewed
🏆Completed
Captain: marwahaha

Mahler's irrationality bound for π: 42Research Paper

Motivation

The irrationality of π\piπ rules out an exact representation as a rational number. A quantitative question asks how closely rational numbers can approximate it as their denominators grow. The irrationality measure records the threshold exponent for exceptionally accurate rational approximations. This mission formalizes the historical upper-bound milestone μ(π)≤42\mu(\pi)\le42μ(π)≤42 listed as C7aC_{7a}C7a​ in the optimization constants project.

Mahler's 1953 paper establishes a stronger, explicit inequality in Theorem 1. The mission extracts its consequence for the irrationality measure and states that consequence through a shared Lean predicate. The number 42 is the chosen historical milestone; it is neither a claim about the exact value of the measure nor a claim to the strongest bound mentioned anywhere in Mahler's paper. Mahler, original p. 33.

Setting

Write p∈Zp\in\mathbb Zp∈Z for a numerator and q∈Nq\in\mathbb Nq∈N for a positive denominator. The approximation error is the real number ∣π−p/q∣|\pi-p/q|∣π−p/q∣. The exponent BBB describes an upper bound on the irrationality measure through an eventual lower bound on this error.

The shared predicate PiIrrationality.UpperBound B means that for every real ε>0\varepsilon>0ε>0, some natural-number threshold QQQ satisfies

1qB+ε<∣π−pq∣\frac{1}{q^{B+\varepsilon}}<\left|\pi-\frac pq\right|qB+ε1​<​π−qp​​

for every integer ppp and every natural number q>0q>0q>0 with Q≤qQ\le qQ≤q. The threshold can depend on ε\varepsilonε and on the chosen bound BBB; it cannot depend on the later choices of ppp or qqq. Numerators may be negative, zero, or positive. Fractions need not be in lowest terms. This is the epsilon characterization used in the definition of C7aC_{7a}C7a​.

Formalization targets

The goal is

μ(π)≤42,\mu(\pi)\le42,μ(π)≤42,

represented by PiIrrationality.UpperBound (42 : ℝ). Expanded, the target is

∀ε>0  ∃Q∈N  ∀p∈Z  ∀q∈N,q>0 ∧ Q≤q ⟹ 1q42+ε<∣π−pq∣.\forall\varepsilon>0\;\exists Q\in\mathbb N\;\forall p\in\mathbb Z\;\forall q\in\mathbb N,\quad q>0\ \land\ Q\le q\ \Longrightarrow\ \frac1{q^{42+\varepsilon}}<\left|\pi-\frac pq\right|.∀ε>0∃Q∈N∀p∈Z∀q∈N,q>0 ∧ Q≤q ⟹ q42+ε1​<​π−qp​​.

The mission contains one shared definition and one goal theorem. The definition introduces the proposition without asserting any bound. The theorem has no additional hypotheses, and its proof is intentionally left open. Future historical-bound missions can import the same definition and state a different numeric bound without changing the quantity being tracked.

Significance

A finite upper bound restricts the quality of rational approximations to π\piπ and excludes approximation at arbitrarily large exponents. The formal result would supply a reusable quantitative fact beyond the assertion that π\piπ is irrational. The published mathematical result is known; the work requested here is a machine-checked proof of the stated consequence.

The shared definition also fixes the meaning of all entries in the accompanying campaign. A smaller bound makes a stronger claim. A proof of a stronger entry may establish this historical goal as a consequence, provided it uses the same definition and no extra hypotheses. The mission remains mathematically valid after further improvements to the numerical bound.

Difficulty

A proof that π\piπ is irrational only establishes nonzero approximation errors. The target requires a uniform lower estimate over every numerator once the denominator passes a threshold. Checking finitely many rational approximations cannot establish the quantified conclusion. A formal development must control the dependence of its estimates and thresholds, and justify every passage between an analytic estimate and the final rational-approximation inequality.

The exact theorem from Mahler should be distinguished from this goal: his explicit uniform inequality is stronger than the eventual epsilon statement recorded here. A proof may pass through that uniform result, but the goal does not require a particular proof method, a particular threshold, or a separate treatment of every auxiliary theorem in the original paper.

Formalization scope

The circle constant is Mathlib's Real.pi. Absolute value, division, and exponentiation in the displayed inequality are operations on the real numbers; in particular, q42+εq^{42+\varepsilon}q42+ε is a real power. The denominator is explicitly positive, so division by zero cannot satisfy the premises. Allowing Q=0Q=0Q=0 does not remove the positivity requirement on qqq.

The definition is stored in Definitions.Def_PiIrrationality_UpperBound. The goal imports this definition instead of introducing another version of it. The conclusion is not placed among the theorem's assumptions. The definition contains no proof placeholder; the sole sorry is the open proof of the goal theorem. Contributions may establish supporting estimates or a complete proof while preserving these conventions.

Selected references

  • K. Mahler, On the approximation of π, Nederl. Akad. Wetensch. Proc. Ser. A 56 = Indag. Math. 15 (1953), 30–42, Theorem 1, p. 33. EMS reprint.
  • Optimization problems project, The irrationality measure of π, constant C7aC_{7a}C7a​: definition and historical bounds. Source page.
3 thms3 active usersReviewed
PreviousPage 1 of 4Next

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me