Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

Operations Research

2,338 missions · 1,111 completed

The discipline of applying mathematical analysis to complex decision problems in operations: allocating scarce resources, scheduling, routing, inventory, and the design of service and production systems. Drawing on mathematical programming, stochastic modeling, queueing, simulation, and game-theoretic reasoning, it seeks policies that perform provably well in systems shaped by constraints, congestion, and uncertainty.

Missions

Open1227Completed1111All2338
🏆Completed
Algorithmic Game TheoryMechanism DesignProbability·Captain: mikedeng1

An Introduction to the Theory of Mechanism Design X: Robust Mechanism Design — Belief Revelation on Finite Type SpacesTextbook

Motivation

Classical Bayesian mechanism design assumes that the designer knows the agents' beliefs about each other: typically a commonly known prior over independent private values. Wilson's critique (1987) observed that mechanisms tuned to such a prior can depend on details that no designer knows, and a literature on robust mechanism design replaced the fixed prior by a large family of possible beliefs. Chapter 10 of Börgers, An Introduction to the Theory of Mechanism Design (OUP 2015), develops this programme in the framework of Bergemann and Morris (2001, 2005): agents' information is described by a type space, the designer is uncertain which beliefs agents hold, and mechanisms are compared across all type profiles at once.

Timeline of the results formalized here:

  • 1980: Hylland shows that strategy-proof random mechanisms satisfying unanimity conditions are random dictatorships; Dutta, Peters and Sen (2007, 2008) give and correct the cardinal version used in the chapter.
  • 1985: Mertens and Zamir construct the universal type space of belief hierarchies; the space of finite types is emphasized by Dekel, Fudenberg and Morris (2006).
  • 1988: Crémer and McLean show that with correlated types satisfying a spanning condition, beliefs can be elicited at no cost (Proposition 6.4 of the book).
  • 2001–2005: Bergemann and Morris introduce payoff and belief types and prove that on finite type spaces only incentive constraints between types with the same beliefs matter (their Proposition 4.5, the goal of this mission).
  • 2010–2014: Smith, Börgers and Smith study the ranking of mechanisms without a common prior; random dictatorship with compromise comes from Börgers and Smith (2012, 2014).

Setting

There are finitely many agents i∈Ii \in Ii∈I, and agent iii has a set Θi\Theta_iΘi​ of payoff types. An outcome xxx gives agent iii the utility ui(x,θ)u_i(x,\theta)ui​(x,θ), which may depend on all payoff types. A type space T=(Ti,θ^i,β^i)i∈I\mathcal T = (T_i,\hat\theta_i,\hat\beta_i)_{i\in I}T=(Ti​,θ^i​,β^​i​)i∈I​ consists of nonempty sets TiT_iTi​ of types, a payoff type map θ^i:Ti→Θi\hat\theta_i : T_i \to \Theta_iθ^i​:Ti​→Θi​ and a belief map β^i:Ti→Δ(T−i)\hat\beta_i : T_i \to \Delta(T_{-i})β^​i​:Ti​→Δ(T−i​), where T−i=∏j≠iTjT_{-i} = \prod_{j\ne i}T_jT−i​=∏j=i​Tj​. Different types may share a payoff type and differ only in their beliefs, and vice versa. A common prior is a distribution μ\muμ on TTT from which every type's belief is obtained by conditioning. A type space has a large variety of certainties if for every θi\theta_iθi​ and θ−i\theta_{-i}θ−i​ some type with payoff type θi\theta_iθi​ is certain that the others' payoff types are θ−i\theta_{-i}θ−i​. The space of finite types T+\mathcal T^+T+ collects every infinite hierarchy of beliefs ("I believe that you believe that …") that is generated by a type of some finite type space.

A mechanism (S1,…,SN,g)(S_1,\dots,S_N,g)(S1​,…,SN​,g) has strategy sets SiS_iSi​ and an outcome rule g:S→Δ(X)g : S \to \Delta(X)g:S→Δ(X). Strategies σi:Ti→Δ(Si)\sigma_i : T_i \to \Delta(S_i)σi​:Ti​→Δ(Si​) form a Bayesian equilibrium if each type maximizes expected utility under its own belief; it is belief-independent if types with equal payoff types play alike, and ex post if each type's choice stays optimal when it becomes certain of the others' types. A direct mechanism asks agents for their types, a reduced direct mechanism only for their payoff types. In the quasi-linear case outcomes are (a,t1,…,tN)(a,t_1,\dots,t_N)(a,t1​,…,tN​) and ui=vi(a,θ)−tiu_i = v_i(a,\theta) - t_iui​=vi​(a,θ)−ti​, with tit_iti​ paid by agent iii; a direct mechanism is (q,t)(q,t)(q,t).

Formalization targets

Goal: belief revelation on finite type spaces (Proposition 10.6)

On a finite type space with quasi-linear utilities, suppose that for every agent no belief in {β^i(τi):τi∈Ti}\{\hat\beta_i(\tau_i) : \tau_i\in T_i\}{β^​i​(τi​):τi​∈Ti​} is a convex combination of the others, and that in the direct mechanism (q,t)(q,t)(q,t) no type wants to imitate another type with the same belief. Then there is a direct mechanism (q~,t~)(\tilde q,\tilde t)(q~​,t~) in which truth telling is a Bayesian equilibrium, with

q~(τ)=q(τ)  ∀τ∈T,∑τ−iβ^i(τi)(τ−i) t~i(τ)=∑τ−iβ^i(τi)(τ−i) ti(τ)  ∀i,τi.\tilde q(\tau) = q(\tau)\ \ \forall \tau\in T,\qquad \sum_{\tau_{-i}}\hat\beta_i(\tau_i)(\tau_{-i})\,\tilde t_i(\tau) = \sum_{\tau_{-i}}\hat\beta_i(\tau_i)(\tau_{-i})\, t_i(\tau)\ \ \forall i,\tau_i.q~​(τ)=q(τ)  ∀τ∈T,τ−i​∑​β^​i​(τi​)(τ−i​)t~i​(τ)=τ−i​∑​β^​i​(τi​)(τ−i​)ti​(τ)  ∀i,τi​.

The goal fixes neither the transfers t~\tilde tt~ nor any bound on them; it asserts the existence of a truthful mechanism with the same alternatives and the same interim payments.

Milestones

The other fourteen numbered results of the chapter: conditional independence of payoff types under a full-support common prior (10.1); three revelation principles (10.2–10.4); existence of Bayesian equilibria of finite mechanisms on T+\mathcal T^+T+ (10.5); betting between agents with inconsistent beliefs (10.7); ex post implementation of unique equilibrium outcomes and alternatives (10.8, 10.9); emptiness of the set of undominated auctions under interim Pareto welfare and under ex post revenue (10.10, 10.11); Hylland's characterization of random dictatorship (10.12); and three comparisons of random dictatorship with random dictatorship with compromise (10.13–10.15).

Significance

Proposition 10.6 reduces the design problem on a finite type space to incentive constraints among types with the same beliefs: belief types can always be elicited by side payments that leave interim utilities unchanged. With a common prior and Proposition 10.1 this yields optimal mechanisms by solving an independent-types problem for each profile of belief types (§10.8; Farinha Luz 2013 carries this out for auctions). Proposition 10.7 and its consequences 10.10–10.11 show why the same construction cannot be used without a common prior: inconsistent beliefs allow unbounded bets, so interim or revenue criteria admit no undominated mechanism. Propositions 10.12–10.15 show that relaxing belief independence escapes Hylland's impossibility result in the voting problem.

None of these results is formalized elsewhere to our knowledge. The book proves only some of them (10.1, 10.5, 10.8, 10.9, 10.13–10.15 are proved or outlined; 10.6 is sketched; the proofs of 10.2–10.4 are omitted as standard; 10.7 and 10.10–10.12 are stated without proof), so formalization also produces complete proofs of results the book leaves informal. Two printed statements are corrected (see Formalization scope).

Difficulty

The obvious approach to Proposition 10.6 applies the Crémer–McLean construction type by type. This fails because several types may share a belief: a side payment that depends on the reported belief cannot separate them, and the convex-independence condition concerns the set of distinct beliefs rather than the indexed family of types.

For the results on T+\mathcal T^+T+, a type is an infinite belief hierarchy, and a strategy must be one function on all finite types simultaneously. Existence (10.5) cannot be obtained by applying Nash's theorem to a single finite type space, because a type belongs to many finite type spaces and must play the same strategy in all of them. Hylland's theorem (10.12) requires a full characterization of strategy-proof random rules on a cardinal preference domain.

Formalization scope

  • Distributions Δ(X)\Delta(X)Δ(X) are countably supported (PMF X); expected utilities are sums. The book leaves the measure structure of type spaces unspecified (p.179, note 3); finite type spaces, T+\mathcal T^+T+ and point beliefs are covered exactly. A Bayesian equilibrium requires every type's expected utility to exist (absolute summability) under every mixed strategy.
  • A type's belief is a distribution on ∏j≠iTj\prod_{j\ne i}T_j∏j=i​Tj​. Beliefs in Proposition 10.6 are vectors in RT−i\mathbb R^{T_{-i}}RT−i​, and condition (i) is stated with the convex hull of the other distinct beliefs.
  • Quasi-linear direct mechanisms are deterministic, q:T→Aq : T\to Aq:T→A, ti:T→Rt_i : T\to\mathbb Rti​:T→R. Mixed misreports are allowed in every equilibrium notion.
  • T+\mathcal T^+T+ is built from belief hierarchies encoded level by level (L0=ΘiL_0 = \Theta_iL0​=Θi​, Ln+1=Θi×Δ(∏j≠iLn,j)L_{n+1} = \Theta_i\times\Delta(\prod_{j\ne i}L_{n,j})Ln+1​=Θi​×Δ(∏j=i​Ln,j​)) and the finite type spaces generating them. The universal type space (Definition 10.5) is not needed and not formalized.
  • §10.11: two agents Fin 2, candidates {a,b,c}\{a,b,c\}{a,b,c}, strict private vNM utilities with every strict utility attained; mechanisms map to lotteries over candidates; rankings are bijections C ≃ Fin 3.
  • Corrections of the page: in Proposition 10.7 the signs of the transfers in (v) are reversed on the page relative to the bet described on p.186 and are stated as described; Proposition 10.9 is false under a large variety of certainties alone and is stated under the common-certainty condition that its proof uses, on type spaces whose beliefs have finite support (with countably supported beliefs the reduced mechanism's expected utilities need not exist). Both are explained in the item notes.
  • The goal is not trivialized by taking (q~,t~)=(q,t)(\tilde q,\tilde t) = (q,t)(q~​,t~)=(q,t): condition (ii) constrains only types with the same belief, so the original mechanism is in general not incentive-compatible, and the conclusion demands full Bayesian incentive compatibility.

Welcome contributions: a finite Farkas/separation lemma in the form needed for 10.6 (the platform has Polyhedral.farkas_lemma), basic API for PMF-valued type spaces (products of mixed strategies, conditioning), and the hierarchy map of finite type spaces, which all T+\mathcal T^+T+ milestones share.

Selected references

  • T. Börgers, An Introduction to the Theory of Mechanism Design, Oxford University Press, 2015, Ch. 10. https://doi.org/10.1093/acprof:oso/9780199734023.001.0001
  • D. Bergemann, S. Morris, Robust Mechanism Design, Cowles Foundation Discussion Paper 1421, 2001; Econometrica 73 (2005) 1771–1813. https://doi.org/10.1111/j.1468-0262.2005.00638.x
  • J. Crémer, R. McLean, Full Extraction of the Surplus in Bayesian and Dominant Strategy Auctions, Econometrica 56 (1988) 1247–1257. https://doi.org/10.2307/1913096
  • J.-F. Mertens, S. Zamir, Formulation of Bayesian Analysis for Games with Incomplete Information, International Journal of Game Theory 14 (1985) 1–29. https://doi.org/10.1007/BF01770224
  • B. Dutta, H. Peters, A. Sen, Strategy-Proof Cardinal Decision Schemes, Social Choice and Welfare 28 (2007) 163–179. https://doi.org/10.1007/s00355-006-0152-4
  • T. Börgers, D. Smith, Robust Mechanism Design and Dominant Strategy Voting Rules, Theoretical Economics 9 (2014) 339–360. https://doi.org/10.3982/TE1100
19 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryCombinatoricsMechanism Design·Captain: mikedeng1

An Introduction to the Theory of Mechanism Design IX: Monotone Direct Mechanisms Are Dictatorial (Gibbard–Satterthwaite)Textbook

Motivation

Voting rules, committee procedures and any other method that turns individual rankings into one collective choice face the same question: can the rule be designed so that no participant ever gains by misreporting their ranking? The Gibbard–Satterthwaite theorem (Gibbard, 1973; Satterthwaite, 1975) answers no. When at least three alternatives can be chosen and all strict rankings are admissible, the only rules immune to manipulation are dictatorships. The result is the starting point of mechanism design without money. It explains why the positive results of the transferable-utility chapters of the book (Groves, VCG, posted prices) depend on quasi-linear preferences, and why research on voting turned to restricted preference domains and weaker solution concepts.

This mission formalizes Chapter 8 of Börgers, An Introduction to the Theory of Mechanism Design (Oxford University Press, 2015), §§8.2–8.3. The book's route to the theorem follows Reny (2001). Strategy-proofness implies Maskin monotonicity, and every monotone rule with full range over at least three alternatives is dictatorial. The second step is the Muller–Satterthwaite theorem (Muller and Satterthwaite, 1977), which is stronger than Gibbard–Satterthwaite because monotonicity is weaker than strategy-proofness. The chapter closes with the classical escape route: on single-peaked preferences (Moulin, 1980) the median voting rule is strategy-proof and not dictatorial.

Timeline. Arrow (1951/1963) proved the impossibility of non-dictatorial preference aggregation under independence of irrelevant alternatives. Gibbard (1973) and Satterthwaite (1975) proved the manipulation version independently, and Satterthwaite showed the two theorems are equivalent. Muller and Satterthwaite (1977) showed that on the full domain strategy-proofness is equivalent to a monotonicity condition (strong positive association). Moulin (1980) characterized strategy-proof rules on single-peaked domains that depend only on reported peaks. Reny (2001) gave the short common proof of Arrow's and the Muller–Satterthwaite theorems that the book follows.

Setting

There is a finite set I={1,…,N}I=\{1,\dots,N\}I={1,…,N} of agents and a finite set AAA of alternatives. Each agent iii has a preference relation RiR_iRi​ over AAA; a Ri ba\,R_i\,baRi​b reads "aaa is weakly preferred to bbb". Every RiR_iRi​ is a linear order: complete, transitive, and the only indifference is among identical alternatives. Its strict part is PiP_iPi​. The set of all linear orders over AAA is R\mathcal RR, and a profile is R=(R1,…,RN)∈RNR=(R_1,\dots,R_N)\in\mathcal R^NR=(R1​,…,RN​)∈RN. (Ri′,R−i)(R_i',R_{-i})(Ri′​,R−i​) is the profile obtained from RRR by replacing agent iii's preference with Ri′R_i'Ri′​.

A direct mechanism is a function f:RN→Af:\mathcal R^N\to Af:RN→A (Definition 8.1). It is

  • dominant strategy incentive-compatible (DSIC) if f(Ri,R−i) Ri f(Ri′,R−i)f(R_i,R_{-i})\,R_i\,f(R_i',R_{-i})f(Ri​,R−i​)Ri​f(Ri′​,R−i​) for all iii, RRR, Ri′R_i'Ri′​ (Definition 8.2);
  • dictatorial if some agent iii satisfies f(R) Ri af(R)\,R_i\,af(R)Ri​a for all profiles RRR and all a∈Aa\in Aa∈A (Definition 8.3);
  • monotone if f(R)=af(R)=af(R)=a and, for every iii, a Ri b⇒a Ri′ ba\,R_i\,b\Rightarrow a\,R_i'\,baRi​b⇒aRi′​b for all bbb, together imply f(R′)=af(R')=af(R′)=a (Definition 8.4);
  • set-monotone if f(R)∈Bf(R)\in Bf(R)∈B and, for every iii, Ri′R_i'Ri′​ differs from RiR_iRi​ only in the ranking of elements of BBB, together imply f(R′)∈Bf(R')\in Bf(R′)∈B (Definition 8.5);
  • unanimity-respecting if f(R)=af(R)=af(R)=a whenever every agent ranks aaa at the top (Definition 8.6).

"The range of fff is AAA" means that every alternative is chosen at some profile.

For §8.3 the alternatives are labelled 1,…,K1,\dots,K1,…,K. A preference is single-peaked if it has a top alternative k(i)k(i)k(i) and declines monotonically to the right and to the left of it. R^\hat{\mathcal R}R^ is the set of single-peaked preferences, and on the restricted domain R^N\hat{\mathcal R}^NR^N DSIC and dictatorship are read with all profiles and deviations taken from R^\hat{\mathcal R}R^.

Formalization targets

Goal: Proposition 8.5 (Muller–Satterthwaite)

∣A∣≥3,f(RN)=A,f monotone ⟹ ∃ i∈I  ∀R∈RN ∀a∈A: f(R) Ri a.|A|\ge 3,\quad f(\mathcal R^N)=A,\quad f\ \text{monotone}\ \Longrightarrow\ \exists\, i\in I\ \ \forall R\in\mathcal R^N\ \forall a\in A:\ f(R)\,R_i\,a.∣A∣≥3,f(RN)=A,f monotone ⟹ ∃i∈I  ∀R∈RN ∀a∈A: f(R)Ri​a.

This is the book's own capstone ("the core of the proof", p.144). No constant needs to be fixed, and the statement is strictly stronger than the necessity half of Gibbard–Satterthwaite.

Milestones

  • Proposition 8.2: DSIC ⇒\Rightarrow⇒ monotone.
  • Proposition 8.3: monotone ⇒\Rightarrow⇒ set-monotone.
  • Proposition 8.4: monotone and full range ⇒\Rightarrow⇒ respects unanimity.
  • Proposition 8.1 (Gibbard–Satterthwaite): for ∣A∣≥3|A|\ge3∣A∣≥3 and full range, fff is DSIC   ⟺  \iff⟺ fff is dictatorial.
  • Proposition 8.6: for ∣A∣≥3|A|\ge3∣A∣≥3 and at least two agents, there is a mechanism on R^N\hat{\mathcal R}^NR^N with range AAA that is DSIC on R^N\hat{\mathcal R}^NR^N and not dictatorial on R^N\hat{\mathcal R}^NR^N.

Significance

The result itself. Proposition 8.5 turns an incentive question into a purely ordinal one: any full-range rule that is Maskin monotone is a dictatorship once three alternatives are available. With Proposition 8.2 it gives Gibbard–Satterthwaite. Proposition 8.6 marks the boundary of the impossibility: with a one-dimensional ordering of alternatives and single-peaked preferences, the median voter rule escapes it.

Formalizing it. All results are classical and proved. The platform already has a proved Gibbard–Satterthwaite theorem (AGT.gibbard_satterthwaite, Algorithmic Game Theory III), derived from Arrow's theorem in the alternative Mathlib environment c5ea0035…. It uses strict-order profiles and a one-agent-deviation monotonicity. This mission adds Maskin monotonicity, the Muller–Satterthwaite theorem, Reny's direct proof route, and the single-peaked possibility result, none of which is on the platform, all in the default environment.

Difficulty

Propositions 8.2–8.4 are short. The difficulty is in Proposition 8.5. Its proof moves one alternative up or down agents' rankings one agent at a time, and it has to keep the chosen alternative pinned at every step using only monotonicity, set-monotonicity and unanimity. It needs a pivotal agent, whose identity depends on the pair of alternatives, and then an argument that the pivots for different alternatives coincide. The argument uses a third alternative ccc in an essential way. With two alternatives the conclusion is false (majority rule), so any argument that never uses ∣A∣≥3|A|\ge3∣A∣≥3 cannot succeed. Formally, each "move bbb just below aaa in agent jjj's ranking" is an explicit construction of a new linear order, together with a check that the monotonicity hypothesis applies. The figures on pp.146–149 describe these orders only partially ("the other alternatives in arbitrary order"). For Proposition 8.6, the obstacle is that DSIC must be checked against every single-peaked misreport, not only misreports of the peak.

Formalization scope

  • A linear order is the structure LinPref A (relation rel, completeness, transitivity, antisymmetry). A profile is ι → LinPref A for a finite agent type ι, and a direct mechanism is (ι → LinPref A) → A. AAA is a Fintype. "The range of fff is AAA" is Function.Surjective f, and ∣A∣≥3|A|\ge3∣A∣≥3 is 3 ≤ Fintype.card A.
  • Monotonicity is the book's Definition 8.4 for arbitrary pairs of profiles, with the lower-contour condition required for each agent separately. Dictatorship is ∃ i, ∀ R a, f R ≥_{R_i} a, with the agent chosen before the profile. A weaker monotonicity (one-agent deviations only) or a weaker dictatorship ("some agent's top is chosen at some profile") would trivialize the goal and is ruled out.
  • §8.3: the labelling is lab : A ≃ Fin K (labels 0,…,K−10,\dots,K-10,…,K−1). The restricted domain is a predicate on LinPref A, and DSIC, dictatorship and full range are relativized to profiles in the domain (IsDSICOn, IsDictatorialOn, HasFullRangeOn). Values of the mechanism off the domain are never consulted.
  • Two corrections of the page. The left-hand clause of single-peakedness is printed as (ℓ−1) Ri ℓ(\ell-1)\,R_i\,\ell(ℓ−1)Ri​ℓ and is used as ℓ Ri (ℓ−1)\ell\,R_i\,(\ell-1)ℓRi​(ℓ−1) (the book's words "decline monotonically to the left"). Proposition 8.6 carries the added hypothesis N≥2N\ge2N≥2, since with one agent every onto strategy-proof rule is dictatorial.
  • Proposition 8.6 is an existence statement. The median voting mechanism is the book's witness, but the statement does not fix it.
  • Reusable beyond this mission: the linear-order profile model, Maskin monotonicity and the restricted-domain notions, which apply to Arrow-type results, implementation theory and Moulin's characterization. Proofs of any milestone, or an independent formal proof of Proposition 8.5, are welcome.

Selected references

  • T. Börgers, An Introduction to the Theory of Mechanism Design, Oxford University Press, 2015, Ch. 8. https://doi.org/10.1093/acprof:oso/9780199734023.001.0001
  • A. Gibbard, "Manipulation of voting schemes: a general result", Econometrica 41 (1973) 587–601. https://doi.org/10.2307/1914083
  • M. A. Satterthwaite, "Strategy-proofness and Arrow's conditions", Journal of Economic Theory 10 (1975) 187–217. https://doi.org/10.1016/0022-0531(75)90050-2
  • E. Muller and M. A. Satterthwaite, "The equivalence of strong positive association and strategy-proofness", Journal of Economic Theory 14 (1977) 412–418. https://doi.org/10.1016/0022-0531(77)90140-5
  • P. J. Reny, "Arrow's theorem and the Gibbard–Satterthwaite theorem: a unified approach", Economics Letters 70 (2001) 99–105. https://doi.org/10.1016/S0165-1765(00)00332-3
  • H. Moulin, "On strategy-proofness and single peakedness", Public Choice 35 (1980) 437–455. https://doi.org/10.1007/BF00128122
  • S. Barberà, "An introduction to strategy-proof social choice functions", Social Choice and Welfare 18 (2001) 619–653. https://doi.org/10.1007/s003550100151
8 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryMechanism Design·Captain: mikedeng1

An Introduction to the Theory of Mechanism Design VIII: Dominant-Strategy Implementation of Efficient Decision Rules Is VCGTextbook

Motivation

A group of agents must choose one alternative from a set AAA (whether to build a public project, who receives an object, which of several policies to adopt). Each agent privately knows how much each alternative is worth to them, and money can be transferred. A designer who wants the welfare-maximizing alternative must ask the agents for their valuations, and must set payments so that no agent gains by misreporting, whatever the others report. This requirement, dominant strategy incentive compatibility, does not depend on what agents believe about one another, which is why it is the standard robustness benchmark in public economics, auction design and algorithmic game theory.

The Vickrey–Clarke–Groves (VCG) mechanisms solve this problem for every efficient decision rule. The central question of Chapter 7 of Börgers, An Introduction to the Theory of Mechanism Design (Oxford University Press, 2015), is whether they are the only solution, and what can be implemented in dominant strategies at all.

Timeline:

  • 1961–1973: Vickrey (1961), Clarke (1971) and Groves (1973) introduce the payments that make efficient decisions dominant-strategy incentive-compatible.
  • 1977: Green and Laffont (Econometrica 45) show that, when valuations range over a sufficiently rich connected domain, every efficient dominant-strategy mechanism has the Groves form.
  • 1979: Holmström (Econometrica 47) extends the uniqueness result to smoothly connected domains. Roberts (1979) characterizes decision rules with positive association of differences on unrestricted domains as weighted welfare maximizers.
  • 1987: Rochet (J. Math. Econ. 16) characterizes implementable decision rules by cyclical monotonicity, with no structure on alternatives or types.
  • 2001: Krishna and Maenner (Econometrica 69) prove payoff equivalence for convex type sets and utilities convex in the type.
  • 2009: Lavi, Mu'alem and Nisan (Soc. Choice Welf. 32) give two short proofs of Roberts' theorem.

Setting

There is a finite set III of agents and a set AAA of alternatives. Agent iii has a type θi\theta_iθi​ from an abstract set Θi\Theta_iΘi​. If alternative aaa is chosen and agent iii pays tit_iti​, agent iii's utility is ui(a,θi)−tiu_i(a,\theta_i) - t_iui​(a,θi​)−ti​. A type vector is θ∈Θ=∏iΘi\theta \in \Theta = \prod_i \Theta_iθ∈Θ=∏i​Θi​; θ−i∈Θ−i=∏j≠iΘj\theta_{-i} \in \Theta_{-i} = \prod_{j \ne i}\Theta_jθ−i​∈Θ−i​=∏j=i​Θj​ omits agent iii, and (θi′,θ−i)(\theta_i', \theta_{-i})(θi′​,θ−i​) replaces agent iii's type by θi′\theta_i'θi′​.

A direct mechanism (q,t1,…,tN)(q, t_1, \dots, t_N)(q,t1​,…,tN​) consists of a decision rule q:Θ→Aq : \Theta \to Aq:Θ→A and transfer rules ti:Θ→Rt_i : \Theta \to \mathbb Rti​:Θ→R. It is dominant strategy incentive-compatible (DSIC) if for all θ\thetaθ, iii and θi′\theta_i'θi′​,

ui(q(θ),θi)−ti(θ) ≥ ui(q(θi′,θ−i),θi)−ti(θi′,θ−i).u_i(q(\theta),\theta_i) - t_i(\theta) \ \ge\ u_i(q(\theta_i',\theta_{-i}),\theta_i) - t_i(\theta_i',\theta_{-i}).ui​(q(θ),θi​)−ti​(θ) ≥ ui​(q(θi′​,θ−i​),θi​)−ti​(θi′​,θ−i​).

A decision rule is efficient if q(θ)q(\theta)q(θ) maximizes ∑iui(a,θi)\sum_i u_i(a,\theta_i)∑i​ui​(a,θi​) over a∈Aa \in Aa∈A at every θ\thetaθ. A mechanism is VCG if qqq is efficient and every agent's transfer has the form

ti(θ)=−∑j≠iuj(q(θ),θj)+τi(θ−i)t_i(\theta) = -\sum_{j \ne i} u_j(q(\theta),\theta_j) + \tau_i(\theta_{-i})ti​(θ)=−j=i∑​uj​(q(θ),θj​)+τi​(θ−i​)

for some function τi\tau_iτi​ of the other agents' types. The chapter also uses positive association of differences (PAD: if q(θ)=aq(\theta) = aq(θ)=a and every agent's utility advantage of aaa over every other alternative strictly increases from θ\thetaθ to θ′\theta'θ′, then q(θ′)=aq(\theta') = aq(θ′)=a), flexibility (the range q(Θ)q(\Theta)q(Θ) has at least three elements), ex post individual rationality and ex post budget balance (∑iti(θ)=0\sum_i t_i(\theta) = 0∑i​ti​(θ)=0).

Formalization targets

Goal: uniqueness of VCG (Corollary 7.1, Green–Laffont–Holmström)

If every Θi\Theta_iΘi​ is a convex subset of a Euclidean space Rdi\mathbb R^{d_i}Rdi​ and every ui(a,⋅)u_i(a,\cdot)ui​(a,⋅) is convex and continuous on Θi\Theta_iΘi​, then every DSIC mechanism (q,t)(q,t)(q,t) with an efficient qqq is a VCG mechanism: for each iii there is τi:Θ−i→R\tau_i : \Theta_{-i} \to \mathbb Rτi​:Θ−i​→R with

ti(θ)=−∑j≠iuj(q(θ),θj)+τi(θ−i)for all θ.t_i(\theta) = -\sum_{j \ne i} u_j(q(\theta),\theta_j) + \tau_i(\theta_{-i}) \qquad \text{for all } \theta.ti​(θ)=−j=i∑​uj​(q(θ),θj​)+τi​(θ−i​)for all θ.

The goal leaves AAA, the number of agents and the dimensions did_idi​ free; it asserts only the form of the transfers.

Milestones

Every numbered result of Chapter 7 except Proposition 7.6 (see Formalization scope):

  1. Proposition 7.1: implementability iff cyclical monotonicity in each agent's type (Rochet).
  2. Proposition 7.2: on bounded, one-dimensional type sets, implementability iff monotonicity.
  3. Proposition 7.3: under the goal's convexity hypotheses, the transfers implementing a given qqq are unique up to τi(θ−i)\tau_i(\theta_{-i})τi​(θ−i​).
  4. Proposition 7.4: VCG mechanisms are DSIC.
  5. Proposition 7.5: weak monotonicity in every θi\theta_iθi​ implies PAD.
  6. Proposition 7.7 (Roberts): on unrestricted domains with finite AAA, a flexible qqq with range q(Θ)=Aq(\Theta) = Aq(Θ)=A satisfies PAD iff there are ki≥0k_i \ge 0ki​≥0, not all zero, and F:A→RF : A \to \mathbb RF:A→R with ∑ikiui(q(θ),θi)+F(q(θ))≥∑ikiui(a,θi)+F(a)\sum_i k_i u_i(q(\theta),\theta_i) + F(q(\theta)) \ge \sum_i k_i u_i(a,\theta_i) + F(a)∑i​ki​ui​(q(θ),θi​)+F(q(θ))≥∑i​ki​ui​(a,θi​)+F(a) for all a∈Aa \in Aa∈A.
  7. Proposition 7.8: affine maximizers with all ki>0k_i > 0ki​>0 are implementable.
  8. Proposition 7.9: ex post individual rationality holds iff it holds at the lowest type θ‾i\underline\theta_iθ​i​ with outside option a‾i\underline a_ia​i​.
  9. Proposition 7.10: with N≥2N \ge 2N≥2, a budget-balanced VCG mechanism for efficient qqq exists iff ∑iui(q(θ),θi)=∑ifi(θ−i)\sum_i u_i(q(\theta),\theta_i) = \sum_i f_i(\theta_{-i})∑i​ui​(q(θ),θi​)=∑i​fi​(θ−i​) for some fi:Θ−i→Rf_i : \Theta_{-i} \to \mathbb Rfi​:Θ−i​→R.

Significance

Corollary 7.1 turns the VCG construction from one solution into the complete answer. Any question about efficient dominant-strategy mechanisms (revenue, budget balance, individual rationality) reduces to a question about the functions τi\tau_iτi​. With Proposition 7.10 it gives a necessary and sufficient condition for efficient, budget-balanced dominant-strategy implementation. That condition fails in bilateral trade, and the failure does not use individual rationality. Roberts' theorem plays the same role for inefficient rules: on unrestricted domains, weighted welfare maximization is essentially all that can be implemented.

All of these results are proved in the literature, and none is formalized. The platform has VCG incentive compatibility and weak monotonicity for valuation-based types (the Algorithmic Game Theory IV mission). It has no uniqueness theorem, no revenue equivalence for multidimensional convex types, no Rochet theorem and no Roberts theorem. The book proves Corollary 7.1 from Proposition 7.3, but proves 7.3 itself only by reference to Krishna and Maenner. It states Roberts' theorem without proof.

Difficulty

The uniqueness claim does not follow from incentive compatibility alone. With finitely many types it is false, because any transfers inside the gaps left by the incentive constraints work (Börgers §5.8). The work lies in showing that, along every segment in the convex type set, an agent's equilibrium utility is pinned down by the decision rule. The equilibrium utility is a pointwise supremum of convex functions, one for each report, and the chosen alternative can change at uncountably many points of the segment. A differentiable envelope argument is therefore not directly available. At the boundary of the type set, convexity alone does not prevent upward jumps, which is why continuity is part of the hypotheses. Roberts' theorem needs a separate, combinatorial analysis of the sets of utility differences at which each alternative is chosen, and flexibility is essential there.

Formalization scope

Agents form a finite type ι with decidable equality. Types are arbitrary types Θ i, and utilities are u : ∀ i, A → Θ i → ℝ. The profile (θi′,θ−i)(\theta_i',\theta_{-i})(θi′​,θ−i​) is Function.update θ i θ'. Θ−i\Theta_{-i}Θ−i​ is the product Others Θ i over j ≠ i, so each τi\tau_iτi​ and fif_ifi​ is a function of the others' types only; a constant or a function of the full profile would change the theorem. In the goal and Proposition 7.3, Θi\Theta_iΘi​ is a convex set S i in EuclideanSpace ℝ (Fin (d i)).

Deviations from the page, each forced by a counterexample recorded in the item's natural-language statement:

  • Corollary 7.1 and Proposition 7.3 add continuity of ui(a,⋅)u_i(a,\cdot)ui​(a,⋅) on Θi\Theta_iΘi​. With convexity alone, a utility with a jump at the endpoint of [0,1][0,1][0,1] admits a non-VCG DSIC mechanism.
  • Proposition 7.7 is stated with ki≥0k_i \ge 0ki​≥0, not all zero, instead of ki>0k_i > 0ki​>0, and with the added hypothesis that qqq is onto AAA (the conclusion still ranges over all a∈Aa \in Aa∈A, as on the page). Dictatorships and affine maximizers over a proper subset of AAA are counterexamples to the printed version.
  • Proposition 7.6 (flexible PAD rules on unrestricted domains are implementable) is false as printed. It is not a milestone; the reason is in the mission's hard list.
  • Proposition 7.10 adds N≥2N \ge 2N≥2, since its proof divides by N−1N-1N−1.

The trivializing formalization to avoid is proving Proposition 7.4 (VCG ⇒\Rightarrow⇒ DSIC) in place of the goal (DSIC +++ efficient ⇒\Rightarrow⇒ VCG). A development that proves the goal needs reusable infrastructure: convex functions restricted to segments, absolute continuity of continuous convex functions on compact intervals, and an envelope theorem for suprema of convex functions. Proofs of Rochet's and Roberts' theorems in this abstract setting are also welcome.

Selected references

  • T. Börgers (with D. Krähmer and R. Strausz), An Introduction to the Theory of Mechanism Design, Oxford University Press, 2015, Chapter 7. https://doi.org/10.1093/acprof:oso/9780199734023.001.0001
  • W. Vickrey, Counterspeculation, Auctions, and Competitive Sealed Tenders, Journal of Finance 16, 1961. https://doi.org/10.1111/j.1540-6261.1961.tb02789.x
  • E. H. Clarke, Multipart Pricing of Public Goods, Public Choice 11, 1971. https://doi.org/10.1007/BF01726210
  • T. Groves, Incentives in Teams, Econometrica 41, 1973. https://doi.org/10.2307/1914085
  • J. Green and J.-J. Laffont, Characterization of Satisfactory Mechanisms for the Revelation of Preferences for Public Goods, Econometrica 45, 1977. https://doi.org/10.2307/1911219
  • B. Holmström, Groves' Scheme on Restricted Domains, Econometrica 47, 1979. https://www.jstor.org/stable/1911954
  • K. Roberts, The Characterization of Implementable Choice Rules, in J.-J. Laffont (ed.), Aggregation and Revelation of Preferences, North-Holland, 1979, pp. 321–348.
  • J.-C. Rochet, A Necessary and Sufficient Condition for Rationalizability in a Quasi-Linear Context, Journal of Mathematical Economics 16, 1987. https://doi.org/10.1016/0304-4068(87)90007-3
  • V. Krishna and E. Maenner, Convex Potentials with an Application to Mechanism Design, Econometrica 69, 2001. https://doi.org/10.1111/1468-0262.00233
  • R. Lavi, A. Mu'alem and N. Nisan, Two Simplified Proofs for Roberts' Theorem, Social Choice and Welfare 32, 2009. https://doi.org/10.1007/s00355-008-0333-3
  • P. Milgrom, Putting Auction Theory to Work, Cambridge University Press, 2004. https://doi.org/10.1017/CBO9780511813825
11 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryConvex OptimizationMechanism Design·Captain: mikedeng1

An Introduction to the Theory of Mechanism Design VI: Rochet's Theorem — Implementability Is Cyclical MonotonicityTextbook

Motivation

Almost every screening, auction and regulation model asks the same preliminary question: which allocation rules can be made incentive-compatible by some choice of payments? In the one-dimensional models of auction theory and nonlinear pricing the answer is monotonicity: higher types must receive higher allocations. Many applications are not one-dimensional, though. Examples are multi-object auctions, multi-product pricing, and lotteries over several outcomes. For those, a characterization that uses no structure at all is needed. Rochet (1987) gave one: an allocation rule is implementable exactly when it is cyclically monotone, a condition that originates in Rockafellar's characterization of subdifferentials of convex functions. Later work on dominant-strategy implementation, the "weak monotonicity" literature of algorithmic mechanism design, and revenue equivalence all build on it.

This mission formalizes Chapter 5 of Börgers, An Introduction to the Theory of Mechanism Design (Oxford University Press, 2015): all nine numbered results of the chapter.

Timeline. Rockafellar (1970, Theorem 24.8) characterized the cyclically monotone maps between vector spaces as the subgradient selections of convex functions. Rochet (1987) extended the idea to arbitrary alternatives and types with quasi-linear utility and proved that implementability is exactly cyclical monotonicity. Krishna and Maenner (2001) proved revenue equivalence on convex type spaces with utilities convex in the type. Bikhchandani, Chatterji, Lavi, Mu'alem, Nisan and Sen (2006) showed that for finitely many alternatives, weak monotonicity (the two-type case of cyclical monotonicity) already suffices on rich, order-based domains. Saks and Yu (2005) proved the same on convex domains.

Setting

A designer and one agent choose an alternative aaa from a set AAA. The agent has a type θ\thetaθ in a nonempty set Θ\ThetaΘ. With utility function u:A×Θ→Ru : A \times \Theta \to \mathbb Ru:A×Θ→R, her payoff from aaa when she pays ttt is u(a,θ)−tu(a,\theta) - tu(a,θ)−t. Neither AAA nor Θ\ThetaΘ carries any structure.

A direct mechanism is a decision rule q:Θ→Aq : \Theta \to Aq:Θ→A and a transfer rule t:Θ→Rt : \Theta \to \mathbb Rt:Θ→R. It is incentive-compatible if u(q(θ),θ)−t(θ)≥u(q(θ′),θ)−t(θ′)u(q(\theta),\theta) - t(\theta) \ge u(q(\theta'),\theta) - t(\theta')u(q(θ),θ)−t(θ)≥u(q(θ′),θ)−t(θ′) for all θ,θ′\theta,\theta'θ,θ′. A decision rule is implementable if some ttt makes it incentive-compatible. It is weakly monotone if u(q(θ1),θ1)−u(q(θ2),θ1)≥u(q(θ1),θ2)−u(q(θ2),θ2)u(q(\theta_1),\theta_1) - u(q(\theta_2),\theta_1) \ge u(q(\theta_1),\theta_2) - u(q(\theta_2),\theta_2)u(q(θ1​),θ1​)−u(q(θ2​),θ1​)≥u(q(θ1​),θ2​)−u(q(θ2​),θ2​) for all pairs of types. It is cyclically monotone if for every finite sequence of types θ1,…,θk\theta^1,\dots,\theta^kθ1,…,θk with θk=θ1\theta^k = \theta^1θk=θ1,

∑κ=1k−1(u(q(θκ),θκ+1)−u(q(θκ),θκ))≤0.\sum_{\kappa=1}^{k-1}\bigl(u(q(\theta^\kappa),\theta^{\kappa+1}) - u(q(\theta^\kappa),\theta^\kappa)\bigr) \le 0 .κ=1∑k−1​(u(q(θκ),θκ+1)−u(q(θκ),θκ))≤0.

A complete and transitive order RRR of AAA induces a partial order on types: θ≻Rθ′\theta \succ_R \theta'θ≻R​θ′ if θ\thetaθ values every RRR-higher alternative strictly more, relative to an RRR-lower one, than θ′\theta'θ′ does, and neither type distinguishes RRR-indifferent alternatives. The type set is one-dimensional if any two distinct types are ≻R\succ_R≻R​-comparable, and bounded if all utility differences lie in (−c,c)(-c,c)(−c,c) for some c>0c > 0c>0. It is rich if, for some reflexive and transitive relation RRR, every function v:A→Rv : A \to \mathbb Rv:A→R with aRb⇒v(a)≥v(b)aRb \Rightarrow v(a) \ge v(b)aRb⇒v(a)≥v(b) is some type's utility function. A mechanism is individually rational with outside option aaa if every type does at least as well as with aaa and no payment.

Formalization targets

Goal: Proposition 5.2 (Rochet)

q implementable  ⟺  q cyclically monotone,q \text{ implementable} \iff q \text{ cyclically monotone},q implementable⟺q cyclically monotone,

for arbitrary AAA, nonempty Θ\ThetaΘ and uuu.

Milestones

  1. Proposition 5.1: implementable ⇒\Rightarrow⇒ weakly monotone.
  2. Proposition 5.3: for lotteries over finitely many outcomes, Θ⊆RΩ\Theta \subseteq \mathbb R^\OmegaΘ⊆RΩ convex and u(p,θ)=p⋅θu(p,\theta) = p\cdot\thetau(p,θ)=p⋅θ, qqq is implementable iff there is a convex UUU on Θ\ThetaΘ with U(θ′)≥U(θ)+q(θ)⋅(θ′−θ)U(\theta') \ge U(\theta) + q(\theta)\cdot(\theta'-\theta)U(θ′)≥U(θ)+q(θ)⋅(θ′−θ) for all θ,θ′\theta,\theta'θ,θ′.
  3. Proposition 5.4: weakly monotone ⇒\Rightarrow⇒ (θ≻Rθ′⇒q(θ) R q(θ′)\theta \succ_R \theta' \Rightarrow q(\theta)\,R\,q(\theta')θ≻R​θ′⇒q(θ)Rq(θ′)), for every complete transitive RRR.
  4. Proposition 5.5: on one-dimensional type sets, weak monotonicity   ⟺  \iff⟺ monotonicity with respect to RRR.
  5. Proposition 5.6: AAA finite, Θ\ThetaΘ bounded and one-dimensional: monotone with respect to RRR ⇒\Rightarrow⇒ implementable.
  6. Proposition 5.7 (Bikhchandani et al.): AAA finite, rich and consistent domain: weakly monotone ⇒\Rightarrow⇒ implementable.
  7. Proposition 5.8 (revenue equivalence): on convex Θ⊆Rn\Theta \subseteq \mathbb R^nΘ⊆Rn with u(a,⋅)u(a,\cdot)u(a,⋅) convex and continuous, if (q,t)(q,t)(q,t) is incentive-compatible then (q,t′)(q,t')(q,t′) is iff t′=t+τt' = t + \taut′=t+τ for a constant τ\tauτ.
  8. Proposition 5.9: on one-dimensional type sets with a lowest type θ‾\underline\thetaθ​ and a worst alternative a‾\underline aa​, an incentive-compatible mechanism is individually rational with outside option a‾\underline aa​ iff u(q(θ‾),θ‾)−t(θ‾)≥u(a‾,θ‾)u(q(\underline\theta),\underline\theta) - t(\underline\theta) \ge u(\underline a,\underline\theta)u(q(θ​),θ​)−t(θ​)≥u(a​,θ​).

Significance

Rochet's theorem turns the existence of payments, an infinite system of linear inequalities in unknowns t(θ)t(\theta)t(θ), into a condition on the decision rule alone. It underlies the characterization of implementable rules in multidimensional screening, the taxation principle, and the dominant-strategy characterizations of Chapter 7 (applied agent by agent). Propositions 5.4–5.6 recover the "monotone allocation" results of the one-dimensional chapters from it. Proposition 5.8 is the general form of the payoff-equivalence lemmas used for optimal auctions.

All results are classical and proved on paper, except Propositions 5.7 and 5.8, whose proofs the book omits and refers to the literature. None of them is formalized on Prove2Me. The platform's algorithmic-game-theory series has the weak-monotonicity half in a multi-agent valuation model (types are valuations A→RA \to \mathbb RA→R), not the abstract-type statement, and has no cyclical-monotonicity or Rochet result.

Difficulty

Necessity is a two-line telescoping argument. Sufficiency needs a transfer rule built from the decision rule, and the first idea fails: prices attached to alternatives chosen pair by pair (which weak monotonicity supplies) need not be globally consistent. Figure 5.1 of the book gives a three-type example that is weakly monotone but not implementable. The transfer must come from a supremum over all finite chains of types starting at a fixed type. The supremum is finite only because of cyclical monotonicity, and no finiteness, compactness or boundedness is available. Proposition 5.8 needs an envelope argument along segments in Θ\ThetaΘ without differentiability. Proposition 5.7 needs a combinatorial argument that uses richness of the domain.

Formalization scope

Alternatives and types are arbitrary Lean types A, Θ with Nonempty Θ, and the utility is u : A → Θ → ℝ. A cycle of length k=m+1k = m+1k=m+1 is a map Fin (m+1) → Θ with equal first and last entries, and its mmm summands are indexed by Fin m. Relations are predicates A → A → Prop. For Propositions 5.3 and 5.8, types form a subset S of Ω → ℝ (resp. Fin n → ℝ) used as a subtype. Lotteries are stdSimplex ℝ Ω, and the subgradient inequality is required only at points of S.

The explicit statements are fixed as follows:

  • Proposition 5.8's conclusion is the exact translation form t′(θ)=t(θ)+τt'(\theta) = t(\theta) + \taut′(θ)=t(θ)+τ for one τ\tauτ and all θ\thetaθ.
  • Proposition 5.9's condition is the single inequality at θ‾\underline\thetaθ​.
  • Boundedness in Proposition 5.6 is Definition 5.9's strict two-sided bound with some c>0c > 0c>0.

Two statements are corrected from the page, each with a counterexample to the literal version recorded in its item:

  • Proposition 5.7 adds Bikhchandani et al.'s requirement that every type's utility respects RRR.
  • Proposition 5.8 adds continuity of u(a,⋅)u(a,\cdot)u(a,⋅) on Θ\ThetaΘ (automatic in the relative interior).

Both directions of Rochet's theorem are required. The necessity half alone, or a version with finite Θ\ThetaΘ, finite AAA or bounded utilities, is a different and much weaker theorem and does not close the goal.

The development needs finite telescoping sums, suprema of sets of reals (sSup with an explicit bounded-above argument), convex functions on sets and one-dimensional convex analysis (Proposition 5.8). The definitions file is reusable for Chapters 6–8 of the series. Contributions of alternative proofs, for example Proposition 5.6 through Rochet's theorem, are welcome.

Selected references

  • T. Börgers, An Introduction to the Theory of Mechanism Design, Oxford University Press, 2015, Chapter 5. https://doi.org/10.1093/acprof:oso/9780199734023.001.0001
  • J.-C. Rochet, "A necessary and sufficient condition for rationalizability in a quasi-linear context," Journal of Mathematical Economics 16 (1987) 191–200. https://doi.org/10.1016/0304-4068(87)90007-3
  • R. T. Rockafellar, Convex Analysis, Princeton University Press, 1970, Theorem 24.8.
  • V. Krishna and E. Maenner, "Convex potentials with an application to mechanism design," Econometrica 69 (2001) 1113–1119. https://doi.org/10.1111/1468-0262.00233
  • S. Bikhchandani, S. Chatterji, R. Lavi, A. Mu'alem, N. Nisan and A. Sen, "Weak monotonicity characterizes deterministic dominant-strategy implementation," Econometrica 74 (2006) 1109–1132. https://doi.org/10.1111/j.1468-0262.2006.00695.x
  • M. Saks and L. Yu, "Weak monotonicity suffices for truthfulness on convex domains," Proceedings of the 6th ACM Conference on Electronic Commerce (2005) 286–293. https://doi.org/10.1145/1064009.1064039
10 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryMechanism Design·Captain: mikedeng1

An Introduction to the Theory of Mechanism Design V: Dominant-Strategy Public Goods Mechanisms for Two Agents Are Fixed Cost SharesTextbook

Motivation

Bayesian mechanism design assumes that the designer knows a common prior from which every agent's beliefs about the others are derived. Chapter 4 of Börgers' An Introduction to the Theory of Mechanism Design (Oxford University Press, 2015, DOI 10.1093/acprof:oso/9780199734023.001.0001) drops that assumption. The designer is unwilling to rely on anything about what agents believe about each other, and therefore requires that truth telling be optimal for every type whatever the other agents report (dominant strategy incentive compatibility) and that participation be worthwhile after all reports are known (ex post individual rationality). The chapter revisits the three examples of Chapter 3 (single unit auctions, public goods, bilateral trade) and asks which mechanisms survive these requirements.

The answer differs sharply between examples. In auctions nothing is lost: an expected-revenue-maximizing auction can be implemented in dominant strategies. With a budget constraint, the class collapses. For a public good shared by two agents, the only dominant-strategy, ex post individually rational mechanisms that exactly balance the budget are fixed cost shares; in bilateral trade they are fixed-price mechanisms. These results go back to the dominant-strategy literature on public goods (Serizawa 1999, Econometrica) and on bilateral trade (Hagerty and Rogerson 1987, Journal of Economic Theory), as the book's §4.5 records (p.93), and they explain why simple posted-price and cost-sharing rules are common in practice.

Setting

Every agent iii has a type θi\theta_iθi​ in an interval. In the auction and the public good examples the interval is [θ‾,θˉ][\underline\theta,\bar\theta][θ​,θˉ] with 0≤θ‾<θˉ0 \le \underline\theta < \bar\theta0≤θ​<θˉ; Θ=[θ‾,θˉ]I\Theta = [\underline\theta,\bar\theta]^IΘ=[θ​,θˉ]I is the set of type vectors, and θ−i\theta_{-i}θ−i​ is θ\thetaθ without its iii-th entry. A direct mechanism asks every agent to report a type and maps the reports to an outcome.

  • Auction (§4.2). A seller has one good. The mechanism consists of allocation probabilities qi(θ)≥0q_i(\theta) \ge 0qi​(θ)≥0 with ∑iqi(θ)≤1\sum_i q_i(\theta) \le 1∑i​qi​(θ)≤1 and payments ti(θ)t_i(\theta)ti​(θ); buyer iii's utility is θiqi(θ)−ti(θ)\theta_i q_i(\theta) - t_i(\theta)θi​qi​(θ)−ti​(θ).
  • Public good (§4.3). A good costing c>0c > 0c>0 is produced (q(θ)=1q(\theta) = 1q(θ)=1) or not (q(θ)=0q(\theta) = 0q(θ)=0); agent iii pays ti(θ)t_i(\theta)ti​(θ) and has utility θiq(θ)−ti(θ)\theta_i q(\theta) - t_i(\theta)θi​q(θ)−ti​(θ). Ex post budget balance is the equality ∑iti(θ)=c q(θ)\sum_i t_i(\theta) = c\,q(\theta)∑i​ti​(θ)=cq(θ) for every θ\thetaθ.
  • Bilateral trade (§4.4). A seller with type θS∈[θ‾S,θˉS]\theta_S \in [\underline\theta_S,\bar\theta_S]θS​∈[θ​S​,θˉS​] and a buyer with type θB∈[θ‾B,θˉB]\theta_B \in [\underline\theta_B,\bar\theta_B]θB​∈[θ​B​,θˉB​]; trade takes place (q(θ)=1q(\theta) = 1q(θ)=1) or not; the seller receives tS(θ)t_S(\theta)tS​(θ) and has utility θS(1−q(θ))+tS(θ)\theta_S(1-q(\theta)) + t_S(\theta)θS​(1−q(θ))+tS​(θ); the buyer pays tB(θ)t_B(\theta)tB​(θ) and has utility θBq(θ)−tB(θ)\theta_B q(\theta) - t_B(\theta)θB​q(θ)−tB​(θ). Ex post exact budget balance is tB=tSt_B = t_StB​=tS​.

A mechanism is dominant strategy incentive-compatible if for every agent, every true type, every false report and every report profile of the others, truthful reporting yields at least as much utility. It is ex post individually rational if every type's utility at every type vector is at least its outside option: 000 for buyers and public good agents, θS\theta_SθS​ (keeping the good) for the seller. A canonical mechanism (Definitions 4.3–4.5) allocates according to strictly increasing continuous scores ψi(θi)\psi_i(\theta_i)ψi​(θi​) and charges each agent the smallest report with which the outcome would have been the same.

Formalization targets

Goal: Proposition 4.8, fixed cost shares

For N=2N = 2N=2 and a decision rule whose production set {θ∈Θ∣q(θ)=1}\{\theta \in \Theta \mid q(\theta) = 1\}{θ∈Θ∣q(θ)=1} is closed, a direct public good mechanism is dominant strategy incentive-compatible, ex post individually rational and ex post budget balanced if and only if there are τ1,τ2∈R\tau_1, \tau_2 \in \mathbb Rτ1​,τ2​∈R with τ1+τ2=c\tau_1 + \tau_2 = cτ1​+τ2​=c and, for all θ∈Θ\theta \in \Thetaθ∈Θ,

q(θ)=1, ti(θ)=τi  if θ1≥τ1 and θ2≥τ2;q(θ)=0, ti(θ)=0  otherwise.q(\theta) = 1,\ t_i(\theta) = \tau_i \ \text{ if } \theta_1 \ge \tau_1 \text{ and } \theta_2 \ge \tau_2; \qquad q(\theta) = 0,\ t_i(\theta) = 0 \ \text{ otherwise.}q(θ)=1, ti​(θ)=τi​  if θ1​≥τ1​ and θ2​≥τ2​;q(θ)=0, ti​(θ)=0  otherwise.

Both directions are part of the goal; the "only if" direction is the content.

Milestones

  • The revelation principle for dominant strategies (Proposition 4.1).
  • Characterizations of dominant strategy incentive compatibility: monotone allocation with the envelope payment formula in auctions (Proposition 4.2), threshold rules with payment jump τ^i−τi=θ^i\hat\tau_i - \tau_i = \hat\theta_iτ^i​−τi​=θ^i​ for public goods (Proposition 4.5) and bilateral trade (Proposition 4.9).
  • Ex post individual rationality reduces to the lowest type, or to the highest seller type (Propositions 4.3, 4.6, 4.10).
  • Canonical mechanisms are dominant strategy incentive-compatible and ex post individually rational, with zero rent for the lowest type (Propositions 4.4, 4.7, 4.11).
  • The bilateral trade analogue of the goal (Proposition 4.12): the only such mechanisms with tB=tSt_B = t_StB​=tS​ and closed trade set are no trade, or trade at a fixed price θ^\hat\thetaθ^ exactly when θS≤θ^≤θB\theta_S \le \hat\theta \le \theta_BθS​≤θ^≤θB​.

Significance

Proposition 4.4 shows that the optimal auctions of Chapter 3 remain available without any assumption on beliefs, while Propositions 4.8 and 4.12 show that under exact budget balance, dominant strategy implementation forces rules that ignore reported valuations except through a yes/no participation decision. Together they mark the boundary between settings where the Bayesian and the belief-free approaches coincide and settings where the belief-free requirement is severe. This contrast motivates the robust mechanism design of Chapter 10.

These results are proved in the book: Propositions 4.5 and 4.8 in full, the others with proofs omitted or "analogous". No machine-checked proof of them appears on the platform or in Mathlib. The platform has a single-parameter characterization in a different model (AGT.single_parameter_characterization: valuation profiles, win sets, normalized losers' payments) and the second-price dominance fact; neither covers public goods, bilateral trade, budget balance or randomized allocations. The mission would add a machine-checked belief-free counterpart of Chapter 3, including the two characterization theorems whose printed proofs leave cases to the reader.

Difficulty

The characterizations (Propositions 4.2, 4.5, 4.9) are standard single-agent arguments applied to every profile of the others. The goal is harder. Proposition 4.5 describes each agent's incentives separately, for each report of the other agent, with thresholds and payments that may vary with that report. Budget balance couples the two agents' payments at every type vector. The step that fails when attempted naively is going from "a threshold for each θ−i\theta_{-i}θ−i​" to "one fixed threshold for each agent": the thresholds may lie outside the type interval, several degenerate configurations occur (an agent whose report never matters, a good that is always or never produced), and the printed proof treats the degenerate cases by assuming θ‾=0\underline\theta = 0θ​=0 and leaves one of them "analogous". The closedness hypothesis is what makes the relevant minimal types exist; without it the boundary of the production set is not determined. Proposition 4.12 has the same structure with the seller's orientation reversed.

Formalization scope

  • Agents are a finite type with decidable equality (auctions, public goods), Fin 2 for the goal, and a pair (θS, θB) : ℝ × ℝ for bilateral trade. A deviation (θi′,θ−i)(\theta_i', \theta_{-i})(θi′​,θ−i​) is Function.update θ i x for θ ∈ Θ; quantifying over θ ∈ Θ quantifies over θ−i\theta_{-i}θ−i​.
  • Decision and trading rules are real-valued and take values in {0,1}\{0,1\}{0,1} on Θ\ThetaΘ; auction allocations lie in Δ\DeltaΔ on Θ\ThetaΘ. Values outside Θ\ThetaΘ play no role.
  • Budget balance in §§4.3–4.4 is the equality ∑iti=c q\sum_i t_i = c\,q∑i​ti​=cq (resp. tB=tSt_B = t_StB​=tS​). The inequality of Definition 3.5 would make the goal false.
  • Explicit formulas stated as in the book: the payment identity of Proposition 4.2, the relation τ^i−τi=θ^i\hat\tau_i - \tau_i = \hat\theta_iτ^i​−τi​=θ^i​ (Propositions 4.5, 4.9), the canonical payments of Definitions 4.3–4.5 (with the 1/n1/n1/n tie-splitting of Definition 4.3), the cost shares with τ1+τ2=c\tau_1 + \tau_2 = cτ1​+τ2​=c (Proposition 4.8) and the fixed price θ^\hat\thetaθ^ with trade iff θS≤θ^≤θB\theta_S \le \hat\theta \le \theta_BθS​≤θ^≤θB​ (Proposition 4.12). Minima and maxima in the canonical payments are written as sInf/sSup of sets that are nonempty and closed whenever they are used.
  • Thresholds θ^i\hat\theta_iθ^i​ range over R\mathbb RR and depend on θ−i\theta_{-i}θ−i​; cost shares τi\tau_iτi​ may be negative; the goal does not assume θ‾=0\underline\theta = 0θ​=0.
  • The general mechanism of Proposition 4.1 has arbitrary message sets and an outcome function to allocation probabilities and expected payments. Stating the revelation principle for a mechanism that is already direct would trivialize it and is ruled out.
  • The goal must not be weakened to one direction, to the existence of some fixed-share mechanism, or to budget balance as an inequality.

Contributions welcome: proofs of the characterization milestones (4.2, 4.5, 4.9), which the goal and Proposition 4.12 use; a proof of the goal covering the degenerate cases the book leaves to the reader; and the three-agent counterexample of p.90 as a separate statement.

Selected references

  • T. Börgers (with D. Krähmer and R. Strausz), An Introduction to the Theory of Mechanism Design, Oxford University Press, 2015, Chapter 4. DOI 10.1093/acprof:oso/9780199734023.001.0001
  • K. M. Hagerty and W. P. Rogerson, Robust trading mechanisms, Journal of Economic Theory 42 (1987) 94–107.
  • S. Serizawa, Strategy-proof and symmetric social choice functions for public good economies, Econometrica 67 (1999) 121–145.
  • D. Mookherjee and S. Reichelstein, Dominant strategy implementation of Bayesian incentive compatible allocation rules, Journal of Economic Theory 56 (1992) 378–399.
15 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryMechanism DesignProbability·Captain: mikedeng1

An Introduction to the Theory of Mechanism Design IV: The Myerson–Satterthwaite TheoremTextbook

Motivation

Stock exchanges, commodity markets and trading platforms are institutions for trade between parties who each know something the other does not. The simplest version is bilateral trade: one seller, one buyer, one indivisible good, and each side privately knows its own value. The question is whether any trading institution can make the two trade exactly when trade is efficient, with both taking part voluntarily and without a subsidy from outside. Myerson and Satterthwaite (1983) showed that, apart from trivial cases, none can. The result is one of the basic impossibility theorems of economic theory. It explains why bargaining under private information is inefficient, and it is the benchmark every later analysis of double auctions and market design compares against.

This mission formalizes Section 3.4 of Börgers, An Introduction to the Theory of Mechanism Design (Oxford University Press, 2015): the impossibility theorem, the pivot-mechanism argument that proves it, the second-best and profit-maximizing trading mechanisms, and the uniform example.

Timeline. Vickrey (1961) noted the tension between efficiency and budget balance in markets with private values. Chatterjee and Samuelson (1983) studied the sealed-offer double auction and its linear equilibrium for uniform values. Myerson and Satterthwaite (1983) proved the impossibility for general independent distributions with overlapping supports, and computed the second-best mechanism; for uniform values it coincides with the Chatterjee–Samuelson linear equilibrium. Börgers (2015) gives the pivot-mechanism proof formalized here.

Setting

A seller SSS owns one indivisible good; a buyer BBB may buy it. The seller's value θS\theta_SθS​ has distribution FSF_SFS​ with density fS>0f_S > 0fS​>0 on [θ‾S,θ‾S][\underline\theta_S, \overline\theta_S][θ​S​,θS​]; the buyer's value θB\theta_BθB​ has distribution FBF_BFB​ with density fB>0f_B > 0fB​>0 on [θ‾B,θ‾B][\underline\theta_B, \overline\theta_B][θ​B​,θB​]. The two intervals are nondegenerate and may differ, and the values are independent. The seller's utility is ttt if she sells for ttt and θS+t\theta_S + tθS​+t if she keeps the good and receives ttt; the buyer's is θB−t\theta_B - tθB​−t if he buys and pays ttt, and −t-t−t otherwise.

A direct mechanism is a trading rule q:Θ→{0,1}q : \Theta \to \{0,1\}q:Θ→{0,1} on Θ=[θ‾S,θ‾S]×[θ‾B,θ‾B]\Theta = [\underline\theta_S, \overline\theta_S] \times [\underline\theta_B, \overline\theta_B]Θ=[θ​S​,θS​]×[θ​B​,θB​] and transfers tSt_StS​ (received by the seller) and tBt_BtB​ (paid by the buyer). Conditioning on one agent's type gives the interim trade probabilities QS,QBQ_S, Q_BQS​,QB​, the interim transfers TS,TBT_S, T_BTS​,TB​, and the interim utilities US(θS)=TS(θS)+(1−QS(θS))θSU_S(\theta_S) = T_S(\theta_S) + (1 - Q_S(\theta_S))\theta_SUS​(θS​)=TS​(θS​)+(1−QS​(θS​))θS​ and UB(θB)=QB(θB)θB−TB(θB)U_B(\theta_B) = Q_B(\theta_B)\theta_B - T_B(\theta_B)UB​(θB​)=QB​(θB​)θB​−TB​(θB​). The mechanism is incentive-compatible if truthful reporting is a Bayesian equilibrium, individually rational if US(θS)≥θSU_S(\theta_S) \ge \theta_SUS​(θS​)≥θS​ and UB(θB)≥0U_B(\theta_B) \ge 0UB​(θB​)≥0 for all types, ex post budget balanced if tS(θ)=tB(θ)t_S(\theta) = t_B(\theta)tS​(θ)=tB​(θ) for every θ\thetaθ, and ex ante budget balanced if E[tS]=E[tB]\mathbb E[t_S] = \mathbb E[t_B]E[tS​]=E[tB​]. A first-best trading rule trades when θB>θS\theta_B > \theta_SθB​>θS​ and not when θB<θS\theta_B < \theta_SθB​<θS​, with any choice at ties. The seller's virtual cost is ψS=θS+FS/fS\psi_S = \theta_S + F_S/f_SψS​=θS​+FS​/fS​ and the buyer's virtual valuation is ψB=θB−(1−FB)/fB\psi_B = \theta_B - (1 - F_B)/f_BψB​=θB​−(1−FB​)/fB​; the distributions are regular if both are increasing.

Formalization targets

Goal: Proposition 3.12 (Myerson–Satterthwaite)

An incentive-compatible, individually rational and ex post budget balanced direct mechanism with a first-best trading rule exists if and only if

θ‾B≥θ‾Sorθ‾S≥θ‾B.\underline\theta_B \ge \overline\theta_S \quad\text{or}\quad \underline\theta_S \ge \overline\theta_B .θ​B​≥θS​orθ​S​≥θB​.

Milestones

  • Lemmas 3.9–3.11. The pivot mechanism is incentive-compatible and individually rational. Among all such mechanisms that implement a first-best rule, it maximizes E[tB−tS]\mathbb E[t_B - t_S]E[tB​−tS​]. That quantity is negative whenever θ‾B<θ‾S\underline\theta_B < \overline\theta_Sθ​B​<θS​ and θ‾B>θ‾S\overline\theta_B > \underline\theta_SθB​>θ​S​.
  • Proposition 3.13 (second best). With overlapping supports and regular distributions, the welfare-maximizing incentive-compatible, individually rational, ex ante budget balanced mechanisms are characterized by the trading rule
q(θ)=1  ⟺  θB−λ1+λ1−FB(θB)fB(θB)≥θS+λ1+λFS(θS)fS(θS)q(\theta) = 1 \iff \theta_B - \tfrac{\lambda}{1+\lambda}\tfrac{1 - F_B(\theta_B)}{f_B(\theta_B)} \ge \theta_S + \tfrac{\lambda}{1+\lambda}\tfrac{F_S(\theta_S)}{f_S(\theta_S)}q(θ)=1⟺θB​−1+λλ​fB​(θB​)1−FB​(θB​)​≥θS​+1+λλ​fS​(θS​)FS​(θS​)​

for some λ>0\lambda > 0λ>0, exact budget balance ∫q (ψB−ψS) f=θ‾S−∫ψSf\int q\,(\psi_B - \psi_S)\,f = \overline\theta_S - \int \psi_S f∫q(ψB​−ψS​)f=θS​−∫ψS​f, and the incentive-compatible payments with binding participation of θ‾S\overline\theta_SθS​ and θ‾B\underline\theta_Bθ​B​.

  • Proposition 3.14 (profit maximization). Profit E[tB−tS]\mathbb E[t_B - t_S]E[tB​−tS​] is maximized by trading iff ψB(θB)>ψS(θS)\psi_B(\theta_B) > \psi_S(\theta_S)ψB​(θB​)>ψS​(θS​), with the same payment formulas.
  • Propositions 3.15–3.16 (uniform values on [0,1][0,1][0,1]). The second best trades iff θB−θS>1/4\theta_B - \theta_S > 1/4θB​−θS​>1/4; the profit maximizer trades iff θB−θS>1/2\theta_B - \theta_S > 1/2θB​−θS​>1/2.

Significance

The theorem locates the source of inefficiency in bilateral bargaining in private information itself, not in any particular bargaining protocol: no mechanism, however clever, achieves efficient voluntary trade without a subsidy. It is the reason efficiency in markets is studied as a limit (large double auctions approach efficiency as the number of traders grows), and why a trading platform's fee structure is analyzed as a second-best problem. The pivot-mechanism argument is the same one that proves the impossibility of first-best public-goods provision (Proposition 3.7), so the two formalizations share their structure.

All results of this section are classical and proved on paper. None is formalized on Prove2Me, and Mathlib has no mechanism-design library. The platform has the Chatterjee–Samuelson linear equilibrium as an open statement about one particular game; this mission states results about all mechanisms. A complete development yields a reusable one-dimensional envelope/payoff-equivalence library for two agents with differently oriented types (the seller's incentive constraint runs from high types down), and the Lagrangian optimality argument for a linear objective under a single linear constraint.

Difficulty

The obvious attempt to prove impossibility looks for a contradiction between incentive compatibility and budget balance state by state. That fails: incentive compatibility and participation are interim constraints, so any single state admits budget-balanced transfers consistent with them, and the contradiction exists only after integrating over the prior. Two points need care. The seller's orientation is reversed: her trade probability is decreasing and her participation constraint binds at the highest type. And the deficit of the pivot mechanism must be shown to have positive probability, which uses that the supports overlap in a set with nonempty interior. The optimal-mechanism results additionally need that the trading rule implied by a Lagrange multiplier satisfies the monotonicity constraint, which is where regularity enters, and that a multiplier exists which makes the budget constraint bind.

Formalization scope

A type vector is a pair θ : ℝ × ℝ with θ.1 the seller's and θ.2 the buyer's value. The prior is Lebesgue measure on Θ\ThetaΘ with density fS(θS)fB(θB)f_S(\theta_S) f_B(\theta_B)fS​(θS​)fB​(θB​). Densities are measurable, strictly positive on the closed supports and integrate to one; nothing else, such as continuity, is assumed. The trading rule is real-valued with values in {0,1}\{0,1\}{0,1} on Θ\ThetaΘ (deterministic, as in Definition 3.9). The measurability the book omits (Ch. 2 note 2) is built into the admissible class: qqq, tSt_StS​, tBt_BtB​ are measurable with integrable transfers. "Increasing" is weak monotonicity, the book's convention.

Explicit formulas the statements carry: the first-best rule (3.61) with free tie rule, the pivot transfers of Definition 3.10, the rule (3.70) with parameter λ>0\lambda > 0λ>0, the exact budget equation of Proposition 3.13 (ii), the payment formulas TB(θB)=θBQB(θB)−∫θ‾BθBQBT_B(\theta_B) = \theta_B Q_B(\theta_B) - \int_{\underline\theta_B}^{\theta_B} Q_BTB​(θB​)=θB​QB​(θB​)−∫θ​B​θB​​QB​ and TS(θS)=θ‾S−(1−QS(θS))θS−∫θSθ‾S(1−QS)T_S(\theta_S) = \overline\theta_S - (1 - Q_S(\theta_S))\theta_S - \int_{\theta_S}^{\overline\theta_S}(1 - Q_S)TS​(θS​)=θS​−(1−QS​(θS​))θS​−∫θS​θS​​(1−QS​), the profit rule ψB>ψS\psi_B > \psi_SψB​>ψS​, and the thresholds 1/41/41/4 and 1/21/21/2.

The goal quantifies over every first-best trading rule and imposes budget balance as the ex post equality tS=tBt_S = t_BtS​=tB​. Dropping budget balance, weakening it to tS≤tBt_S \le t_BtS​≤tB​, or fixing one tie rule would give a different, and in the first case false, statement. The pointwise "if and only if … for all θ\thetaθ" characterizations of Propositions 3.13–3.16 are stated with necessity almost everywhere, since an optimal trading rule is determined only up to null sets. For Proposition 3.14 necessity is also restricted to {ψB≠ψS}\{\psi_B \ne \psi_S\}{ψB​=ψS​}: under weak regularity that tie set can have positive probability, and profit does not depend on the trading rule there.

Contributions welcome: proofs of the milestones, a two-agent payoff-equivalence lemma for the seller's reversed orientation, and a sorry-free construction of the pivot mechanism's integrability facts.

Selected references

  • R. B. Myerson and M. A. Satterthwaite, Efficient mechanisms for bilateral trading, Journal of Economic Theory 29 (1983) 265–281. https://doi.org/10.1016/0022-0531(83)90048-0
  • K. Chatterjee and W. Samuelson, Bargaining under incomplete information, Operations Research 31 (1983) 835–851. https://doi.org/10.1287/opre.31.5.835
  • W. Vickrey, Counterspeculation, auctions, and competitive sealed tenders, Journal of Finance 16 (1961) 8–37. https://doi.org/10.1111/j.1540-6261.1961.tb02789.x
  • T. Börgers, An Introduction to the Theory of Mechanism Design, Oxford University Press, 2015, §3.4. https://doi.org/10.1093/acprof:oso/9780199734023.001.0001
9 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryMechanism DesignOptimization+1·Captain: mikedeng1

An Introduction to the Theory of Mechanism Design III: Impossibility of First-Best Public Goods ProvisionTextbook

Motivation

Whether a community can finance a shared project out of voluntary contributions, when each member knows only her own benefit from it, is one of the founding questions of mechanism design. Bayesian mechanism design began with mechanisms for the provision of public goods: d'Aspremont and Gérard-Varet (1979) and Arrow (1979) showed that the efficient decision can be made Bayesian incentive compatible with a budget that balances in every state, provided agents cannot opt out. Once participation is voluntary, this is no longer possible, and Güth and Hellwig (1986) studied the best mechanism under that constraint. The same tension between efficiency, incentives, voluntary participation and budget balance drives the Myerson–Satterthwaite theorem for bilateral trade, which the next mission of this series formalizes.

This mission formalizes Section 3.3 of Tilman Börgers, An Introduction to the Theory of Mechanism Design (Oxford University Press, 2015), which treats the public goods problem in the independent private values model with a continuum of types. The section proves an impossibility theorem for first best provision and then characterizes the best mechanisms that respect the budget: the welfare-maximizing (second best) mechanism and the profit-maximizing one, with a worked two-agent uniform example.

Setting

A community of agents I={1,…,N}I = \{1, \dots, N\}I={1,…,N}, N≥2N \ge 2N≥2, decides whether to produce an indivisible, nonexcludable public good, g∈{0,1}g \in \{0,1\}g∈{0,1}, at cost c>0c > 0c>0. Agent iii pays a transfer tit_iti​ and obtains utility θig−ti\theta_i g - t_iθi​g−ti​. Her type θi\theta_iθi​ is private information, drawn independently across agents from a distribution FiF_iFi​ with density fif_ifi​, strictly positive on the common support [θ‾,θˉ][\underline\theta, \bar\theta][θ​,θˉ], 0≤θ‾<θˉ0 \le \underline\theta < \bar\theta0≤θ​<θˉ. The type space is Θ=[θ‾,θˉ]N\Theta = [\underline\theta, \bar\theta]^NΘ=[θ​,θˉ]N and f(θ)=∏ifi(θi)f(\theta) = \prod_i f_i(\theta_i)f(θ)=∏i​fi​(θi​).

A direct mechanism is a decision rule q:Θ→{0,1}q : \Theta \to \{0,1\}q:Θ→{0,1} and transfer rules ti:Θ→Rt_i : \Theta \to \mathbb Rti​:Θ→R. For agent iii reporting θi\theta_iθi​, Qi(θi)Q_i(\theta_i)Qi​(θi​) is the probability of production and Ti(θi)T_i(\theta_i)Ti​(θi​) the expected transfer, taken over the other agents' types, and Ui(θi)=Qi(θi)θi−Ti(θi)U_i(\theta_i) = Q_i(\theta_i)\theta_i - T_i(\theta_i)Ui​(θi​)=Qi​(θi​)θi​−Ti​(θi​). The mechanism is incentive compatible (IC) if θiQi(θi)−Ti(θi)≥θiQi(θi′)−Ti(θi′)\theta_i Q_i(\theta_i) - T_i(\theta_i) \ge \theta_i Q_i(\theta_i') - T_i(\theta_i')θi​Qi​(θi​)−Ti​(θi​)≥θi​Qi​(θi′​)−Ti​(θi′​) for all i,θi,θi′i, \theta_i, \theta_i'i,θi​,θi′​, and individually rational (IR) if Ui(θi)≥0U_i(\theta_i) \ge 0Ui​(θi​)≥0 for all i,θii, \theta_ii,θi​. It is ex post budget balanced if ∑iti(θ)≥c q(θ)\sum_i t_i(\theta) \ge c\,q(\theta)∑i​ti​(θ)≥cq(θ) for every θ\thetaθ, and ex ante budget balanced if this inequality holds after integrating both sides against fff.

Welfare is (∑iθi) g−∑iti(\sum_i \theta_i)\, g - \sum_i t_i(∑i​θi​)g−∑i​ti​. The first best decision rule is q∗(θ)=1q^*(\theta) = 1q∗(θ)=1 if ∑iθi≥c\sum_i \theta_i \ge c∑i​θi​≥c and 000 otherwise; a first best mechanism uses q∗q^*q∗ and transfers that add up to exactly c q∗(θ)c\,q^*(\theta)cq∗(θ) in every state. The pivot mechanism uses q∗q^*q∗ and

ti(θ)=θ‾ q∗(θ‾,θ−i)+(q∗(θ)−q∗(θ‾,θ−i))(c−∑j≠iθj).t_i(\theta) = \underline\theta\, q^*(\underline\theta,\theta_{-i}) + \big(q^*(\theta) - q^*(\underline\theta,\theta_{-i})\big)\Big(c - \sum_{j\ne i}\theta_j\Big).ti​(θ)=θ​q∗(θ​,θ−i​)+(q∗(θ)−q∗(θ​,θ−i​))(c−j=i∑​θj​).

The virtual valuation is ψi(θi)=θi−(1−Fi(θi))/fi(θi)\psi_i(\theta_i) = \theta_i - (1-F_i(\theta_i))/f_i(\theta_i)ψi​(θi​)=θi​−(1−Fi​(θi​))/fi​(θi​), and FiF_iFi​ is regular if ψi\psi_iψi​ is strictly increasing.

Formalization targets

Goal: Proposition 3.7

∃ an IC and IR first best mechanism  ⟺  Nθ‾≥c  or  Nθˉ≤c.\exists\ \text{an IC and IR first best mechanism} \iff N\underline\theta \ge c \ \text{ or }\ N\bar\theta \le c .∃ an IC and IR first best mechanism⟺Nθ​≥c  or  Nθˉ≤c.

In the two cases on the right, producing is efficient for every type vector or for none; in every other case efficient provision cannot be financed voluntarily.

Milestones

  1. Proposition 3.6: every ex ante budget balanced mechanism has an equivalent ex post budget balanced one.
  2. Lemma 3.6: the pivot mechanism is IC and IR.
  3. Lemma 3.7: among IC and IR mechanisms with decision rule q∗q^*q∗, the pivot mechanism has the largest expected budget surplus.
  4. Lemma 3.8: if Nθ‾<c<NθˉN\underline\theta < c < N\bar\thetaNθ​<c<Nθˉ, the pivot mechanism's expected budget surplus is negative.
  5. Proposition 3.8 (second best): under regularity and Nθ‾<c<NθˉN\underline\theta < c < N\bar\thetaNθ​<c<Nθˉ, an IC, IR, ex ante budget balanced mechanism maximizes expected welfare among such mechanisms iff for some λ>0\lambda > 0λ>0
q(θ)=1  ⟺  ∑iθi>c+∑iλ1+λ 1−Fi(θi)fi(θi),q(\theta) = 1 \iff \sum_i \theta_i > c + \sum_i \frac{\lambda}{1+\lambda}\,\frac{1-F_i(\theta_i)}{f_i(\theta_i)},q(θ)=1⟺i∑​θi​>c+i∑​1+λλ​fi​(θi​)1−Fi​(θi​)​,

the budget binds, ∫Θq(θ)[∑iψi(θi)−c]f(θ) dθ=0\int_\Theta q(\theta)\big[\sum_i \psi_i(\theta_i) - c\big] f(\theta)\,d\theta = 0∫Θ​q(θ)[∑i​ψi​(θi​)−c]f(θ)dθ=0, and Ti(θi)=θiQi(θi)−∫θ‾θiQi(x) dxT_i(\theta_i) = \theta_i Q_i(\theta_i) - \int_{\underline\theta}^{\theta_i} Q_i(x)\,dxTi​(θi​)=θi​Qi​(θi​)−∫θ​θi​​Qi​(x)dx. 6. Proposition 3.9 (profit maximization): under regularity, the profit-maximizing IC and IR mechanism produces iff ∑iθi>c+∑i(1−Fi(θi))/fi(θi)\sum_i \theta_i > c + \sum_i (1-F_i(\theta_i))/f_i(\theta_i)∑i​θi​>c+∑i​(1−Fi​(θi​))/fi​(θi​), with the same formula for TiT_iTi​. 7. Proposition 3.10 (Example 3.3: N=2N=2N=2, uniform types on [0,1][0,1][0,1], 0<c<20<c<20<c<2): the second best produces iff θ1+θ2>s\theta_1+\theta_2 > sθ1​+θ2​>s, where sss is the unique root in [0,1][0,1][0,1] of −23s3+s2−(1−12s2)c=0-\tfrac23 s^3 + s^2 - (1-\tfrac12 s^2)c = 0−32​s3+s2−(1−21​s2)c=0 if c<2/3c < 2/3c<2/3, and s=12+34cs = \tfrac12 + \tfrac34 cs=21​+43​c if c≥2/3c \ge 2/3c≥2/3. 8. Proposition 3.11 (same example): the profit maximizer produces iff θ1+θ2>1+12c\theta_1+\theta_2 > 1 + \tfrac12 cθ1​+θ2​>1+21​c.

Significance

Proposition 3.7 says that with voluntary participation no mechanism both takes efficient production decisions and pays for them, outside the degenerate cases. It is the reason the rest of the section, and much of the applied literature on public goods, studies constrained optimum mechanisms: Proposition 3.8 describes what the best budget-respecting mechanism gives up (it undersupplies the good, producing only when valuations exceed a bound strictly above the cost), and Proposition 3.9 quantifies the further distortion under a monopoly supplier. The example makes the three thresholds explicit and comparable.

All results of the section are classical and proved in the book, several of them only sketched there (Proposition 3.9 is stated without proof; Proposition 3.8 invokes an infinite-dimensional Kuhn–Tucker theorem whose applicability is not checked). None of them is formalized in Lean. The mission produces a machine-checked account of the envelope and revenue-equivalence arguments with interim expectations over independent types, a checked pivot-mechanism deficit computation, and a checked Lagrangian characterization; the uniform example additionally certifies the book's arithmetic.

Difficulty

The naive argument for the goal fails at the first step: a mechanism that implements q∗q^*q∗ with a balanced budget in every state is not obviously comparable to one that is only IC and IR, because IC constrains interim expectations while budget balance is ex post. The impossibility needs a reduction of the whole class of IC, IR mechanisms with rule q∗q^*q∗ to a single extremal one, which requires the payoff equivalence formula for interim utilities and an exact integral identity for expected revenue in terms of virtual valuations. The strict deficit of the pivot mechanism then needs a case analysis over which agents are pivotal and a positive-probability argument. For Proposition 3.8, pointwise maximization of a Lagrangian is not enough: one must show the multiplier exists and is positive, that the maximizer satisfies the monotonicity constraint, and that uniqueness holds only up to null sets.

Formalization scope

Agents are Fin N with N≥2N \ge 2N≥2; types are vectors in Fin N → ℝ; the type distribution is the product of the marginal measures fi(x) dxf_i(x)\,dxfi​(x)dx on [θ‾,θˉ][\underline\theta,\bar\theta][θ​,θˉ], which encodes independence. QiQ_iQi​ and TiT_iTi​ integrate the decision and transfer rules against this distribution with agent iii's coordinate overwritten by her report. Decision rules are deterministic, with values in {0,1}\{0,1\}{0,1} on Θ\ThetaΘ, as in Definition 3.4. Ties in the first best rule produce, as in the book's note 2 to Chapter 3; the second best and profit-maximizing rules use strict inequalities, as printed.

The book omits measurability and the existence of conditional expectations; the class of direct mechanisms here requires qqq and each tit_iti​ to be Borel measurable, each tit_iti​ integrable, and each conditional expectation of tit_iti​ given one agent's type to exist. The characterizations in Propositions 3.8–3.11 are stated in two directions: the stated rule, for every θ\thetaθ, is sufficient; necessity holds for almost every θ\thetaθ, since changing qqq on a null set of type vectors changes nothing that is optimized. The explicit formulas the mission commits to are: the pivot transfers above; the second best rule with multiplier λ>0\lambda > 0λ>0 and the binding budget identity; Ti(θi)=θiQi(θi)−∫θ‾θiQiT_i(\theta_i) = \theta_i Q_i(\theta_i) - \int_{\underline\theta}^{\theta_i} Q_iTi​(θi​)=θi​Qi​(θi​)−∫θ​θi​​Qi​; the cubic −23s3+s2−(1−12s2)c=0-\tfrac23 s^3 + s^2 - (1-\tfrac12 s^2)c = 0−32​s3+s2−(1−21​s2)c=0 for c<2/3c < 2/3c<2/3; s=12+34cs = \tfrac12 + \tfrac34 cs=21​+43​c for c≥2/3c \ge 2/3c≥2/3; and s=1+12cs = 1 + \tfrac12 cs=1+21​c for the profit maximizer.

A trivializing formalization of the goal takes "first best" to mean only the decision rule q∗q^*q∗; the pivot mechanism would then be a witness in every case, so first best here also requires transfers adding up to exactly c q∗(θ)c\,q^*(\theta)cq∗(θ) in every state.

Reusable infrastructure includes interim expectations over independent product distributions, the payoff and revenue equivalence lemmas for IC mechanisms, and the virtual-valuation identity for expected revenue; these are shared with the auction and bilateral trade chapters of the series. Contributions to any milestone, and to general lemmas about product measures with densities on boxes, are welcome.

Selected references

  • T. Börgers, An Introduction to the Theory of Mechanism Design, Oxford University Press, 2015, §3.3. https://doi.org/10.1093/acprof:oso/9780199734023.001.0001
  • C. d'Aspremont and L.-A. Gérard-Varet, Incentives and incomplete information, Journal of Public Economics 11 (1979) 25–45. https://doi.org/10.1016/0047-2727(79)90043-4
  • W. Güth and M. Hellwig, The private supply of a public good, Zeitschrift für Nationalökonomie, Supplement 5 (1986) 121–159.
  • R. B. Myerson and M. A. Satterthwaite, Efficient mechanisms for bilateral trading, Journal of Economic Theory 29 (1983) 265–281. https://doi.org/10.1016/0022-0531(83)90048-0
  • D. G. Luenberger, Optimization by Vector Space Methods, Wiley, 1969.
10 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryMechanism DesignOptimization+1·Captain: mikedeng1

An Introduction to the Theory of Mechanism Design II: Myerson's Optimal Single-Unit AuctionTextbook

Why revenue-maximizing auctions matter

A seller with one indivisible good and several potential buyers, each of whom privately knows how much the good is worth to them, has to choose a selling procedure: a posted price, an English auction, a sealed-bid auction with a reserve price, or something more elaborate. Which procedure raises the most expected revenue? Myerson's answer (Myerson 1981) is the foundation of optimal auction design. It underlies reserve-price setting in practice, the analysis of sponsored-search and ad-exchange auctions, and the modern algorithmic mechanism design literature, which treats Myerson's auction as the benchmark against which simple and approximately optimal auctions are measured.

This mission formalizes Section 3.2 of Tilman Börgers, An Introduction to the Theory of Mechanism Design (Oxford University Press, 2015), the textbook treatment of Myerson's result in the independent private values model with Bayesian incentive compatibility. It is the second mission of a series covering the book.

Timeline. Vickrey (1961) showed that the second-price auction makes truthful bidding a dominant strategy and compared auction formats. Myerson (1981) characterized the revenue-maximizing mechanism for independent private values with possibly asymmetric distributions; Riley and Samuelson (1981) obtained the symmetric case and the optimal reserve price independently. The revelation principle in the Bayesian form used here goes back to Myerson (1979) and Dasgupta, Hammond and Maskin (1979).

Setting

There are N≥2N \ge 2N≥2 potential buyers i∈I={1,…,N}i \in I = \{1,\dots,N\}i∈I={1,…,N}. Buyer iii values the good at θi\theta_iθi​; if he receives it and pays tit_iti​ his utility is θi−ti\theta_i - t_iθi​−ti​, and otherwise −ti-t_i−ti​. The seller's utility is ∑iti\sum_i t_i∑i​ti​. The valuations θ1,…,θN\theta_1,\dots,\theta_Nθ1​,…,θN​ are independent; θi\theta_iθi​ has cumulative distribution function FiF_iFi​ and density fif_ifi​ with fi(θi)>0f_i(\theta_i) > 0fi​(θi​)>0 on the common support [θ‾,θˉ][\underline\theta, \bar\theta][θ​,θˉ], where 0≤θ‾<θˉ0 \le \underline\theta < \bar\theta0≤θ​<θˉ. The type space is Θ=[θ‾,θˉ]N\Theta = [\underline\theta,\bar\theta]^NΘ=[θ​,θˉ]N and the joint density is f(θ)=∏ifi(θi)f(\theta) = \prod_i f_i(\theta_i)f(θ)=∏i​fi​(θi​).

A direct mechanism asks buyers to report their types and consists of an allocation rule q:Θ→Δq : \Theta \to \Deltaq:Θ→Δ, where Δ={(q1,…,qN):0≤qi≤1, ∑iqi≤1}\Delta = \{(q_1,\dots,q_N) : 0 \le q_i \le 1,\ \sum_i q_i \le 1\}Δ={(q1​,…,qN​):0≤qi​≤1, ∑i​qi​≤1}, and payment rules ti:Θ→Rt_i : \Theta \to \mathbb Rti​:Θ→R. Its interim quantities are the expected allocation probability, payment and utility of buyer iii conditional on his own type:

Qi(θi)=∫Θ−iqi(θi,θ−i)f−i(θ−i) dθ−i,Ti(θi)=∫Θ−iti(θi,θ−i)f−i(θ−i) dθ−i,Ui=θiQi−Ti.Q_i(\theta_i) = \int_{\Theta_{-i}} q_i(\theta_i,\theta_{-i}) f_{-i}(\theta_{-i})\,d\theta_{-i},\quad T_i(\theta_i) = \int_{\Theta_{-i}} t_i(\theta_i,\theta_{-i}) f_{-i}(\theta_{-i})\,d\theta_{-i},\quad U_i = \theta_i Q_i - T_i.Qi​(θi​)=∫Θ−i​​qi​(θi​,θ−i​)f−i​(θ−i​)dθ−i​,Ti​(θi​)=∫Θ−i​​ti​(θi​,θ−i​)f−i​(θ−i​)dθ−i​,Ui​=θi​Qi​−Ti​.

The mechanism is incentive-compatible if θiQi(θi)−Ti(θi)≥θiQi(θi′)−Ti(θi′)\theta_i Q_i(\theta_i) - T_i(\theta_i) \ge \theta_i Q_i(\theta_i') - T_i(\theta_i')θi​Qi​(θi​)−Ti​(θi​)≥θi​Qi​(θi′​)−Ti​(θi′​) for all i,θi,θi′i,\theta_i,\theta_i'i,θi​,θi′​ (truth-telling is a Bayesian Nash equilibrium) and individually rational if Ui(θi)≥0U_i(\theta_i) \ge 0Ui​(θi​)≥0 for all i,θii,\theta_ii,θi​. The virtual valuation of buyer iii is

ψi(θi)=θi−1−Fi(θi)fi(θi),\psi_i(\theta_i) = \theta_i - \frac{1 - F_i(\theta_i)}{f_i(\theta_i)},ψi​(θi​)=θi​−fi​(θi​)1−Fi​(θi​)​,

and the distribution FiF_iFi​ is regular if ψi\psi_iψi​ is strictly increasing.

Formalization targets

Goal: Myerson's optimal auction (Proposition 3.4)

Under regularity, among all incentive-compatible and individually rational direct mechanisms, a mechanism maximizes the seller's expected revenue E[∑iti(θ)]\mathbb E[\sum_i t_i(\theta)]E[∑i​ti​(θ)] exactly when, for every buyer iii,

qi(θ)={1if ψi(θi)>0 and ψi(θi)>ψj(θj) for all j≠i,0otherwise,Ti(θi)=θiQi(θi)−∫θ‾θiQi(x) dx,q_i(\theta) = \begin{cases}1 & \text{if } \psi_i(\theta_i) > 0 \text{ and } \psi_i(\theta_i) > \psi_j(\theta_j) \text{ for all } j \ne i,\\ 0&\text{otherwise,}\end{cases}\qquad T_i(\theta_i) = \theta_i Q_i(\theta_i) - \int_{\underline\theta}^{\theta_i} Q_i(x)\,dx,qi​(θ)={10​if ψi​(θi​)>0 and ψi​(θi​)>ψj​(θj​) for all j=i,otherwise,​Ti​(θi​)=θi​Qi​(θi​)−∫θ​θi​​Qi​(x)dx,

the allocation identity holding for almost every θ\thetaθ; and such a mechanism exists.

Milestones

  1. Proposition 3.1, the revelation principle: every Bayesian Nash equilibrium of every mechanism is replicated by truth-telling in an incentive-compatible direct mechanism.
  2. Lemmas 3.1–3.4: incentive compatibility makes QiQ_iQi​ increasing and UiU_iUi​ convex with Ui′=QiU_i' = Q_iUi′​=Qi​; payoff equivalence Ui(θi)=Ui(θ‾)+∫θ‾θiQiU_i(\theta_i) = U_i(\underline\theta) + \int_{\underline\theta}^{\theta_i} Q_iUi​(θi​)=Ui​(θ​)+∫θ​θi​​Qi​; revenue equivalence for TiT_iTi​.
  3. Proposition 3.2: incentive compatibility holds if and only if every QiQ_iQi​ is increasing and the revenue-equivalence formula holds.
  4. Proposition 3.3: under incentive compatibility, individual rationality is equivalent to Ti(θ‾)≤θ‾Qi(θ‾)T_i(\underline\theta) \le \underline\theta Q_i(\underline\theta)Ti​(θ​)≤θ​Qi​(θ​).
  5. Lemma 3.5: an optimal mechanism has Ti(θ‾)=θ‾Qi(θ‾)T_i(\underline\theta) = \underline\theta Q_i(\underline\theta)Ti​(θ​)=θ​Qi​(θ​).
  6. Eqs. (3.4)–(3.5): expected revenue equals expected virtual surplus ∑i∫Θqi(θ)ψi(θi)f(θ) dθ\sum_i \int_\Theta q_i(\theta)\psi_i(\theta_i) f(\theta)\,d\theta∑i​∫Θ​qi​(θ)ψi​(θi​)f(θ)dθ.
  7. Proposition 3.5: a mechanism maximizes expected welfare E[∑iqi(θ)θi]\mathbb E[\sum_i q_i(\theta)\theta_i]E[∑i​qi​(θ)θi​] among incentive-compatible, individually rational mechanisms if and only if it gives the good to the highest value (almost everywhere) and Ti(θi)≤θiQi(θi)−∫θ‾θiQiT_i(\theta_i) \le \theta_i Q_i(\theta_i) - \int_{\underline\theta}^{\theta_i}Q_iTi​(θi​)≤θi​Qi​(θi​)−∫θ​θi​​Qi​.

Significance

The theorem identifies the revenue-maximizing selling procedure among all procedures, not among a parametric family: by the revelation principle, no auction format, however elaborate, and no equilibrium of it can beat the mechanism of Proposition 3.4. Its consequences include the optimality of first- and second-price auctions with reserve price ψ−1(0)\psi^{-1}(0)ψ−1(0) when buyers are symmetric, the revenue equivalence of standard auction formats, the fact that an asymmetric optimal auction may sell to a buyer without the highest value, and the monopoly inefficiency that the optimal seller sometimes withholds the good. The envelope characterization of Bayesian incentive compatibility (Proposition 3.2) is the tool reused throughout the rest of the book, in public goods provision, bilateral trade and dynamic screening.

The result is classical and fully proved in the literature. What is missing is a machine-checked version at this generality: asymmetric distributions, an arbitrary lower support end θ‾≥0\underline\theta \ge 0θ​≥0, Bayesian (interim) rather than dominant-strategy constraints, and optimality over all incentive-compatible and individually rational mechanisms. Existing formalizations on the platform treat the i.i.d. case with values on [0,vˉ][0,\bar v][0,vˉ].

Difficulty

The obvious argument maximizes the virtual surplus ∑iqi(θ)ψi(θi)\sum_i q_i(\theta)\psi_i(\theta_i)∑i​qi​(θ)ψi​(θi​) pointwise and declares victory, but this ignores that the seller's feasible set is constrained by monotonicity of every QiQ_iQi​; the pointwise maximizer is feasible only because regularity makes ψi\psi_iψi​ increasing, and that has to be proved for the interim probabilities, which integrate over the other buyers' types. The revenue identity links interim payments, which integrate over the other buyers' types, to an integral over the whole type space weighted by the virtual valuation, and it is only valid for mechanisms whose lowest types' payments are pinned down. The necessity direction requires showing that ties and zero virtual values are null events, which rests on strict monotonicity of every ψi\psi_iψi​ and on the absolute continuity of the type distribution. Finally, the envelope step requires convexity and almost-everywhere differentiability of UiU_iUi​, with care at the endpoints of the type interval.

Formalization scope

Buyers form a finite type with at least two elements. The prior is the measure on RN\mathbb R^NRN with density ∏ifi(θi)\prod_i f_i(\theta_i)∏i​fi​(θi​) on Θ\ThetaΘ and no mass outside it; each fif_ifi​ is measurable, strictly positive on [θ‾,θˉ][\underline\theta,\bar\theta][θ​,θˉ] and integrates to 111; Fi(θi)=∫θ‾θifiF_i(\theta_i) = \int_{\underline\theta}^{\theta_i} f_iFi​(θi​)=∫θ​θi​​fi​. Allocation and payment rules are total functions whose values on Θ\ThetaΘ are constrained, and QiQ_iQi​, TiT_iTi​ are prior expectations with the iii-th coordinate fixed. "Increasing" is weak monotonicity, as in the book; regularity is strict monotonicity of ψi\psi_iψi​ on [θ‾,θˉ][\underline\theta,\bar\theta][θ​,θˉ] (Assumption 3.1).

The following conventions are committed to:

  • Measurability. The book omits measurability throughout. The comparison class for optimality consists of mechanisms with measurable qi,tiq_i, t_iqi​,ti​, integrable tit_iti​, and integrable sections θ−i↦ti(θi,θ−i)\theta_{-i}\mapsto t_i(\theta_i,\theta_{-i})θ−i​↦ti​(θi​,θ−i​). Without these hypotheses the Lean integrals would be 000 and revenue comparisons would be meaningless.
  • Almost-everywhere characterizations. Propositions 3.4 and 3.5 are printed with "for all θ∈Θ\theta \in \Thetaθ∈Θ". Changing qqq on a null set of type vectors changes neither incentives nor revenue nor welfare, so the "only if" directions hold only almost everywhere; they are stated for almost every θ\thetaθ, and the existence of a mechanism satisfying the allocation rule at every θ\thetaθ is stated separately. The payment conditions hold for every θi\theta_iθi​.
  • Explicit formulas. The goal states Myerson's allocation rule and the payment formula Ti(θi)=θiQi(θi)−∫θ‾θiQi(x) dxT_i(\theta_i) = \theta_i Q_i(\theta_i) - \int_{\underline\theta}^{\theta_i} Q_i(x)\,dxTi​(θi​)=θi​Qi​(θi​)−∫θ​θi​​Qi​(x)dx explicitly. Proposition 3.5 states the efficient rule qi(θ)=1q_i(\theta) = 1qi​(θ)=1 iff θi>θj\theta_i > \theta_jθi​>θj​ for all j≠ij \ne ij=i, and the payment inequality. A statement asserting only that some optimal mechanism exists, or only that the optimal auction is efficient, would not be this theorem.
  • Revelation principle. A general mechanism has arbitrary measurable message sets and an outcome function giving allocation probabilities in Δ\DeltaΔ and expected transfers; equilibria are in pure type-contingent strategies. A version in which the mechanism is already direct would be trivial and is not the statement.
  • Interim constraints. Incentive compatibility and individual rationality are Bayesian and interim, not dominant-strategy or ex post; the latter are the subject of a later mission.
  • Endpoints in Lemma 3.2. Differentiability of UiU_iUi​ and Ui′=QiU_i' = Q_iUi′​=Qi​ are stated at interior points of [θ‾,θˉ][\underline\theta,\bar\theta][θ​,θˉ].

The envelope and payoff-equivalence lemmas, and the revenue identity, are reused in later missions of this series, so proofs of the milestones are welcome independently of the goal.

Selected references

  • Tilman Börgers, An Introduction to the Theory of Mechanism Design, Oxford University Press, 2015, §3.2, pp. 31–45. https://doi.org/10.1093/acprof:oso/9780199734023.001.0001
  • Roger B. Myerson, Optimal Auction Design, Mathematics of Operations Research 6(1), 58–73, 1981. https://doi.org/10.1287/moor.6.1.58
  • John G. Riley and William F. Samuelson, Optimal Auctions, American Economic Review 71(3), 381–392, 1981. https://www.jstor.org/stable/1802786
  • William Vickrey, Counterspeculation, Auctions, and Competitive Sealed Tenders, Journal of Finance 16(1), 8–37, 1961. https://doi.org/10.1111/j.1540-6261.1961.tb02789.x
  • Roger B. Myerson, Incentive Compatibility and the Bargaining Problem, Econometrica 47(1), 61–73, 1979. https://doi.org/10.2307/1912346
  • Partha Dasgupta, Peter Hammond and Eric Maskin, The Implementation of Social Choice Rules: Some General Results on Incentive Compatibility, Review of Economic Studies 46(2), 185–216, 1979. https://doi.org/10.2307/2297045
12 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryFunctional AnalysisMechanism Design+1·Captain: mikedeng1

An Introduction to the Theory of Mechanism Design I: Screening and the Optimality of a Posted PriceTextbook

Motivation

A seller with one good and one buyer whose valuation she does not know faces the simplest problem of mechanism design: choose a selling procedure, anticipating that the buyer will act in his own interest given what he knows. The textbook answer, "post the monopoly price", is usually derived by optimizing over prices alone. The question that opens Börgers' An Introduction to the Theory of Mechanism Design (Oxford University Press, 2015, doi:10.1093/acprof:oso/9780199734023.001.0001) is whether the seller could do better with anything else: negotiation, lotteries, menus of price–probability pairs, or any extensive game she can commit to.

Chapter 2 answers this for one buyer, and in doing so introduces the tools the rest of the book, and most of auction theory, reuse: the revelation principle, the envelope characterization of incentive compatibility, payoff and revenue equivalence, and the virtual valuation. The book's exposition of §2.2 follows Manelli and Vincent (2007), and the nonlinear pricing model of §2.3 is due to Mussa and Rosen (1978, doi:10.1016/0022-0531(78)90085-6); both attributions are the book's own (§2.5, p.29).

Setting

The buyer's type θ\thetaθ is his valuation for the good. His utility is θ−t\theta-tθ−t if he receives the good and pays ttt, and −t-t−t if he only pays ttt. The seller's belief about θ\thetaθ is a cumulative distribution function FFF with density fff on an interval [θ‾,θˉ][\underline\theta,\bar\theta][θ​,θˉ], 0≤θ‾<θˉ0\le\underline\theta<\bar\theta0≤θ​<θˉ, with f(θ)>0f(\theta)>0f(θ)>0 throughout and F(θ)=∫θ‾θf(x) dxF(\theta)=\int_{\underline\theta}^{\theta}f(x)\,dxF(θ)=∫θ​θ​f(x)dx.

A direct mechanism is a pair q:[θ‾,θˉ]→[0,1]q:[\underline\theta,\bar\theta]\to[0,1]q:[θ​,θˉ]→[0,1], t:[θ‾,θˉ]→Rt:[\underline\theta,\bar\theta]\to\mathbb Rt:[θ​,θˉ]→R: the buyer reports a type θ′\theta'θ′, receives the good with probability q(θ′)q(\theta')q(θ′) and pays t(θ′)t(\theta')t(θ′). Write u(θ)=θq(θ)−t(θ)u(\theta)=\theta q(\theta)-t(\theta)u(θ)=θq(θ)−t(θ). The mechanism is incentive-compatible if u(θ)≥θq(θ′)−t(θ′)u(\theta)\ge\theta q(\theta')-t(\theta')u(θ)≥θq(θ′)−t(θ′) for all θ,θ′\theta,\theta'θ,θ′, and individually rational if u(θ)≥0u(\theta)\ge 0u(θ)≥0 for all θ\thetaθ. The seller's expected revenue is ∫θ‾θˉt(θ)f(θ) dθ\int_{\underline\theta}^{\bar\theta}t(\theta)f(\theta)\,d\theta∫θ​θˉ​t(θ)f(θ)dθ.

For the extreme-point argument, F\mathcal FF denotes the space of functions on [θ‾,θˉ][\underline\theta,\bar\theta][θ​,θˉ] with the L1L^1L1 norm, and M⊂FM\subset\mathcal FM⊂F the set of increasing functions with values in [0,1][0,1][0,1]. A point xxx of a convex set CCC is an extreme point if for every y≠0y\neq 0y=0 at least one of x+yx+yx+y, x−yx-yx−y lies outside CCC.

In the nonlinear pricing model of §2.3 the good is divisible, quantity q≥0q\ge 0q≥0 costs the seller cqcqcq with c>0c>0c>0, and the buyer's utility is θν(q)−t\theta\nu(q)-tθν(q)−t, with ν(0)=0\nu(0)=0ν(0)=0, ν′>0\nu'>0ν′>0, ν′′<0\nu''<0ν′′<0, θˉν′(0)>c\bar\theta\nu'(0)>cθˉν′(0)>c and lim⁡q→∞θˉν′(q)<c\lim_{q\to\infty}\bar\theta\nu'(q)<climq→∞​θˉν′(q)<c. The seller maximizes expected profit ∫(t−cq)f\int(t-cq)f∫(t−cq)f. The distribution FFF is regular if the virtual valuation θ−(1−F(θ))/f(θ)\theta-(1-F(\theta))/f(\theta)θ−(1−F(θ))/f(θ) is increasing.

Formalization targets

Goal: Proposition 2.5, a posted price is optimal

If p∗∈arg⁡max⁡p∈[θ‾,θˉ]p(1−F(p))p^*\in\arg\max_{p\in[\underline\theta,\bar\theta]}p(1-F(p))p∗∈argmaxp∈[θ​,θˉ]​p(1−F(p)), then the mechanism

q(θ)={1θ>p∗0θ<p∗,t(θ)={p∗θ>p∗0θ<p∗q(\theta)=\begin{cases}1&\theta>p^*\\0&\theta<p^*\end{cases},\qquad t(\theta)=\begin{cases}p^*&\theta>p^*\\0&\theta<p^*\end{cases}q(θ)={10​θ>p∗θ<p∗​,t(θ)={p∗0​θ>p∗θ<p∗​

maximizes expected revenue among all incentive-compatible, individually rational direct mechanisms. The comparison class contains every randomized rule qqq with values in [0,1][0,1][0,1]; the statement fixes no distribution and no constant.

Milestones on the way

  1. Proposition 2.1: every mechanism and optimal buyer strategy can be replaced by a truthful direct mechanism with the same outcomes.
  2. Lemmas 2.1–2.4: incentive compatibility forces qqq increasing, uuu increasing and convex with u′=qu'=qu′=q, and
u(θ)=u(θ‾)+∫θ‾θq(x) dx,t(θ)=t(θ‾)+(θq(θ)−θ‾q(θ‾))−∫θ‾θq(x) dx.u(\theta)=u(\underline\theta)+\int_{\underline\theta}^{\theta}q(x)\,dx,\qquad t(\theta)=t(\underline\theta)+\big(\theta q(\theta)-\underline\theta q(\underline\theta)\big)-\int_{\underline\theta}^{\theta}q(x)\,dx.u(θ)=u(θ​)+∫θ​θ​q(x)dx,t(θ)=t(θ​)+(θq(θ)−θ​q(θ​))−∫θ​θ​q(x)dx.
  1. Propositions 2.2–2.3 and Lemma 2.5: these conditions characterize incentive compatibility; individual rationality reduces to u(θ‾)≥0u(\underline\theta)\ge0u(θ​)≥0; at the optimum t(θ‾)=θ‾q(θ‾)t(\underline\theta)=\underline\theta q(\underline\theta)t(θ​)=θ​q(θ​).
  2. Lemma 2.6, Proposition 2.4, Lemma 2.7: MMM is compact and convex, a linear function continuous on a compact convex set attains its maximum at an extreme point, and the extreme points of MMM are the {0,1}\{0,1\}{0,1}-valued functions.
  3. Proposition 2.6: under regularity, q(θ)=0q(\theta)=0q(θ)=0 when ν′(0)(θ−1−F(θ)f(θ))≤c\nu'(0)\big(\theta-\tfrac{1-F(\theta)}{f(\theta)}\big)\le cν′(0)(θ−f(θ)1−F(θ)​)≤c, otherwise ν′(q(θ))(θ−1−F(θ)f(θ))=c\nu'(q(\theta))\big(\theta-\tfrac{1-F(\theta)}{f(\theta)}\big)=cν′(q(θ))(θ−f(θ)1−F(θ)​)=c, with t(θ)=θν(q(θ))−∫θ‾θν(q(x)) dxt(\theta)=\theta\nu(q(\theta))-\int_{\underline\theta}^{\theta}\nu(q(x))\,dxt(θ)=θν(q(θ))−∫θ​θ​ν(q(x))dx, maximizes expected profit.

Significance

Proposition 2.5 says that the elementary monopoly price is not a restriction of the seller's options but the solution of the unrestricted design problem, including every lottery and every indirect procedure. Its one-buyer argument is the template for Myerson's optimal auction (Chapter 3 of the book), whose revenue formula is the multi-buyer form of Lemma 2.4. Proposition 2.6 exhibits the two standard features of screening, no distortion at the top and downward distortion below, which recur in regulation, insurance and contract theory.

All results of the chapter are classical and proved in the book. None of them is formalized on Prove2Me, and Mathlib has neither the revelation principle, the envelope lemma for incentive-compatible mechanisms, nor a maximum principle for linear functions on compact convex sets (Mathlib has the Krein–Milman lemma, IsCompact.extremePoints_nonempty, but not Bauer's maximum principle). The mission therefore produces the first machine-checked foundation for the one-agent screening model on which chapters 3, 4 and 11 of the book build.

Difficulty

The obvious argument for the goal compares the posted price with other posted prices; that comparison is one line and is not the theorem. The content is the comparison with randomized mechanisms: an arbitrary increasing qqq with values in [0,1][0,1][0,1] may do better than every deterministic threshold rule unless one shows that expected revenue is linear in qqq and that its maximum over the infinite-dimensional set MMM is attained at an extreme point. That step needs compactness of MMM in L1L^1L1 and a maximum principle on compact convex sets in a normed space, neither of which is finite-dimensional linear programming. The envelope step (Lemma 2.3) needs absolute continuity of a convex function on a closed interval, including its endpoints, where uuu need not be differentiable. For Proposition 2.6 the pointwise maximizer of the virtual surplus must be shown to be monotone and to satisfy incentive compatibility, which is where regularity enters.

Formalization scope

Types are real numbers; every function of the type is a total function R→R\mathbb R\to\mathbb RR→R and every condition quantifies over [θ‾,θˉ][\underline\theta,\bar\theta][θ​,θˉ] only. "Increasing" means weakly increasing (the book's note 3). The distribution is a structure carrying the density fff, positive and integrable on [θ‾,θˉ][\underline\theta,\bar\theta][θ​,θˉ] with total mass 111, and FFF tied to it by F(θ)=∫θ‾θfF(\theta)=\int_{\underline\theta}^{\theta}fF(θ)=∫θ​θ​f. No measurability or integrability hypothesis is placed on mechanisms: incentive compatibility makes qqq monotone and ttt bounded and measurable, so every expected revenue is a genuine integral.

The explicit formulas are part of the statements: the posted-price mechanism of Proposition 2.5 with p∗∈arg⁡max⁡p(1−F(p))p^*\in\arg\max p(1-F(p))p∗∈argmaxp(1−F(p)); the payment formulas of Lemmas 2.3–2.4 and Proposition 2.2; t(θ‾)=θ‾q(θ‾)t(\underline\theta)=\underline\theta q(\underline\theta)t(θ​)=θ​q(θ​) in Lemma 2.5; and in Proposition 2.6 the two-case rule for qqq and the payment t(θ)=θν(q(θ))−∫θ‾θν(q(x)) dxt(\theta)=\theta\nu(q(\theta))-\int_{\underline\theta}^{\theta}\nu(q(x))\,dxt(θ)=θν(q(θ))−∫θ​θ​ν(q(x))dx. The goal fixes q(p∗)=1q(p^*)=1q(p∗)=1, t(p∗)=p∗t(p^*)=p^*t(p∗)=p∗ for existence and quantifies over every incentive-compatible, individually rational completion at the tie.

The space F\mathcal FF is L1([θ‾,θˉ])L^1([\underline\theta,\bar\theta])L1([θ​,θˉ]) of almost-everywhere classes, because the book's L1L^1L1 "norm" on bounded functions vanishes on null functions; MMM is the set of classes with an increasing [0,1][0,1][0,1]-valued representative, and Lemma 2.7 is an almost-everywhere statement, as the book's notes 4–6 already indicate. Proposition 2.4 is stated for a nonempty compact convex set in a real normed space and a linear map continuous on that set. The revelation principle models a general mechanism as the buyer's reduced strategy set, an arbitrary type, with a purchase probability and an expected payment for each strategy.

A goal that compared the posted price only with other posted prices, or only with deterministic mechanisms, would be trivial and is excluded: the competitors range over all incentive-compatible, individually rational direct mechanisms with qqq valued in [0,1][0,1][0,1].

Reusable beyond this mission: the one-agent envelope and revenue-equivalence lemmas (needed again in Chapters 3, 4 and 11), compactness of monotone functions in L1L^1L1, and the maximum principle for linear functions on compact convex sets. Contributions to any of these are welcome.

Selected references

  • T. Börgers (with D. Krähmer and R. Strausz), An Introduction to the Theory of Mechanism Design, Oxford University Press, 2015. doi:10.1093/acprof:oso/9780199734023.001.0001
  • M. Mussa and S. Rosen, "Monopoly and product quality", Journal of Economic Theory 18(2), 1978. doi:10.1016/0022-0531(78)90085-6
  • E. A. Ok, Real Analysis with Economic Applications, Princeton University Press, 2007 (Extreme Point Theorem, p.658), cited by the book at p.16.
16 thms2 active usersReviewed
🏆Completed
Control TheoryDynamic ProgrammingLinear algebra+2·Captain: mikedeng1

Bellman's Dynamic Programming IX: Markovian Decision Processes and the Maximal Perron RootTextbook

Motivation

Chapter XI of Richard Bellman's Dynamic Programming (Princeton University Press, 1957; DOI 10.2307/j.ctv1nxcw0f) studies decision processes whose state is a vector of nonnegative quantities, for example the probabilities that a system is in each of NNN states, or the stocks of NNN commodities, and whose transitions are linear maps chosen stage by stage by a controller. Maximizing a linear functional of the state at every stage leads to the nonlinear difference equation

xi(n+1)=max⁡q∑j=1Naij(q) xj(n),xi(0)=ci,x_i(n+1) = \max_q \sum_{j=1}^N a_{ij}(q)\, x_j(n), \qquad x_i(0) = c_i,xi​(n+1)=qmax​j=1∑N​aij​(q)xj​(n),xi​(0)=ci​,

and, in the limit of small time steps, to differential equations of the form dx/dt=max⁡q[A(q,t)x+b(q,t)]dx/dt = \max_q [A(q,t)x + b(q,t)]dx/dt=maxq​[A(q,t)x+b(q,t)] and, when two opposing controllers act, dx/dt=max⁡pmin⁡q[… ]dx/dt = \max_p \min_q[\dots]dx/dt=maxp​minq​[…].

These equations are the multiplicative counterpart of the additive Bellman equation. Their growth rate is the natural object for controlled population models, controlled Markov chains observed through their unnormalized state vectors, and economic growth models with a choice of technology. Bellman announced the discrete results in "A Markovian decision process" (J. Math. Mech. 6, 1957) the same year as the book, and R. A. Howard's Dynamic Programming and Markov Processes (MIT Press, 1960) developed policy iteration for the related average-reward problem. The central discrete result of the chapter, Theorem 2, is an early instance of what is now called nonlinear Perron–Frobenius theory (Lemmens and Nussbaum, 2012).

Setting

Fix N≥1N \ge 1N≥1. Row iii of the matrix carries its own control qiq_iqi​, ranging over a set SiS_iSi​; the joint control is q=(q1,…,qN)q = (q_1, \dots, q_N)q=(q1​,…,qN​) in S=S1×⋯×SNS = S_1 \times \dots \times S_NS=S1​×⋯×SN​, and A(q)=(aij(qi))A(q) = (a_{ij}(q_i))A(q)=(aij​(qi​)). Bellman insists on this row-wise structure (§ 3): "the set of q's for each row is distinct from the corresponding set for any other row ... so that there is no interaction between the various maximizations". The maximum of a vector over qqq is then taken row by row.

The Perron root φ(q)\varphi(q)φ(q) is the characteristic root of A(q)A(q)A(q) of largest absolute value, the spectral radius of A(q)A(q)A(q) as a complex matrix. The conditions (10.3) of the chapter are:

  1. for every yyy and every row the maximum of ∑jaij(qi)yj\sum_j a_{ij}(q_i) y_j∑j​aij​(qi​)yj​ over SiS_iSi​ is attained;
  2. 0<aij(q)≤m<∞0 < a_{ij}(q) \le m < \infty0<aij​(q)≤m<∞ on SSS;
  3. φ\varphiφ attains its maximum on SSS.

For the continuous processes, ∥x∥=∑i∣xi∣\|x\| = \sum_i |x_i|∥x∥=∑i​∣xi​∣ and ∥A∥=∑i,j∣aij∣\|A\| = \sum_{i,j}|a_{ij}|∥A∥=∑i,j​∣aij​∣, and a solution of dx/dt=F(t,x)dx/dt = F(t,x)dx/dt=F(t,x), x(0)=cx(0)=cx(0)=c, on [0,T][0,T][0,T] is a continuous xxx with x(t)=c+∫0tF(s,x(s)) dsx(t) = c + \int_0^t F(s, x(s))\,dsx(t)=c+∫0t​F(s,x(s))ds, which is the book's "satisfying the equation almost everywhere". The successive approximations are x0=cx_0 = cx0​=c, xn+1(t)=c+∫0tF(s,xn(s)) dsx_{n+1}(t) = c + \int_0^t F(s, x_n(s))\,dsxn+1​(t)=c+∫0t​F(s,xn​(s))ds.

Formalization targets

Goal: Chapter XI, Theorem 2

Under (10.3) there is exactly one λ>0\lambda > 0λ>0 for which

λyi=max⁡q∑j=1Naij(q) yj,i=1,…,N,\lambda y_i = \max_q \sum_{j=1}^N a_{ij}(q)\, y_j, \qquad i = 1,\dots,N,λyi​=qmax​j=1∑N​aij​(q)yj​,i=1,…,N,

has a solution with all yi>0y_i > 0yi​>0. That solution is unique up to a positive factor, and

λ=max⁡q∈Sφ(q).\lambda = \max_{q \in S} \varphi(q).λ=q∈Smax​φ(q).

Milestones

  1. § 4, Lemma. For row-wise maximized operators T1(x)=max⁡q[b1(q,t)+∫0tA(q,s)x ds]T_1(x) = \max_q[b_1(q,t) + \int_0^t A(q,s)x\,ds]T1​(x)=maxq​[b1​(q,t)+∫0t​A(q,s)xds] and T2(y)T_2(y)T2​(y) likewise, ∥T1(x)−T2(y)∥≤max⁡q[∥b1−b2∥+∫0t∥A(q,s)∥ ∥x−y∥ ds]\|T_1(x) - T_2(y)\| \le \max_q[\|b_1 - b_2\| + \int_0^t \|A(q,s)\|\,\|x-y\|\,ds]∥T1​(x)−T2​(y)∥≤maxq​[∥b1​−b2​∥+∫0t​∥A(q,s)∥∥x−y∥ds].
  2. Theorem 1. If ∥A(q,t)∥,∥b(q,t)∥≤f(t)\|A(q,t)\|, \|b(q,t)\| \le f(t)∥A(q,t)∥,∥b(q,t)∥≤f(t) with fff locally integrable and the maximum is attained, then dx/dt=max⁡q[A(q,t)x+b(q,t)]dx/dt = \max_q[A(q,t)x + b(q,t)]dx/dt=maxq​[A(q,t)x+b(q,t)], x(0)=cx(0) = cx(0)=c, has a unique solution, the uniform limit of the successive approximations.
  3. Theorem 3 (corrected). If moreover φ\varphiφ has a unique maximizer on SSS and c≥0c \ge 0c≥0, c≠0c \ne 0c=0, then the recurrence satisfies xi(n)∼a yi λnx_i(n) \sim a\,y_i\,\lambda^nxi​(n)∼ayi​λn with a=a(c)>0a = a(c) > 0a=a(c)>0.
  4. Theorem 4. The same well-posedness for dx/dt=max⁡pmin⁡q[A(p,q,t)x+b(p,q,t)]=min⁡qmax⁡p[… ]dx/dt = \max_p\min_q[A(p,q,t)x + b(p,q,t)] = \min_q\max_p[\dots]dx/dt=maxp​minq​[A(p,q,t)x+b(p,q,t)]=minq​maxp​[…] on [0,T][0,T][0,T].
  5. Theorem 5. If (Bp,q)≥d>0(Bp,q) \ge d > 0(Bp,q)≥d>0 on probability vectors, the solution of du/dt=max⁡pmin⁡q[(Ap,q)−(Bp,q)u]du/dt = \max_p\min_q[(Ap,q) - (Bp,q)u]du/dt=maxp​minq​[(Ap,q)−(Bp,q)u] satisfies
lim⁡t→∞u(t)=max⁡pmin⁡q(Ap,q)(Bp,q)=min⁡qmax⁡p(Ap,q)(Bp,q).\lim_{t\to\infty} u(t) = \max_p \min_q \frac{(Ap,q)}{(Bp,q)} = \min_q \max_p \frac{(Ap,q)}{(Bp,q)} .t→∞lim​u(t)=pmax​qmin​(Bp,q)(Ap,q)​=qmin​pmax​(Bp,q)(Ap,q)​.

Significance

Theorem 2 identifies the optimal long-run growth rate of a controlled multiplicative process with the largest Perron root among the admissible matrices, and shows that the optimal process has a single positive stationary direction. Theorem 3 turns this into the asymptotics of the value iteration x(n+1)=max⁡qA(q)x(n)x(n+1) = \max_q A(q)x(n)x(n+1)=maxq​A(q)x(n): after normalization by λn\lambda^nλn the iterates converge to a multiple of the eigenvector. Theorems 1 and 4 are the existence and uniqueness results that justify defining continuous-time controlled processes and differential games by these equations. Theorem 5 recovers the min-max theorem for ratios of bilinear forms (Chapter X) as the long-run limit of a scalar differential game.

The results are classical, and none of them is formalized. Mathlib has the spectral radius and irreducible matrices but no Perron–Frobenius theorem and no Brouwer fixed point theorem; the platform has a statement of the Perron theorem for a single positive matrix (ClassicalGaps.perron_positive_matrix). A formal proof of the goal therefore also produces a reusable monotone, positively homogeneous eigenvector theorem on the positive orthant.

Difficulty

The map y↦max⁡qA(q)yy \mapsto \max_q A(q)yy↦maxq​A(q)y is not linear, so the linear-algebra proof of the Perron theorem through the characteristic polynomial does not apply. Existence of a positive eigenvector needs a fixed point argument for a nonlinear map of the simplex (Bellman uses Brouwer's theorem). The identification λ=max⁡qφ(q)\lambda = \max_q \varphi(q)λ=maxq​φ(q) must connect the nonlinear eigenvalue with the spectra of the individual matrices, which requires the Perron theory of each A(q)A(q)A(q), including the fact that the Perron root dominates every complex eigenvalue in modulus. For Theorem 3, the iterates may switch controls infinitely often when SSS is infinite, so an argument that the optimal control is eventually constant does not settle convergence. For Theorems 1 and 4, the right-hand side is only measurable in ttt and Lipschitz in xxx with an integrable constant, so the classical Picard–Lindelöf theorem with a continuous right-hand side does not apply directly.

Formalization scope

Everything lives in the namespace BellmanDP.Markovian. Vectors are Fin N → ℝ and matrices are Matrix (Fin N) (Fin N) ℝ. Row iii's control type is Q i with admissible set S i, and the joint admissible set is Set.pi Set.univ S. The Perron root is (spectralRadius ℂ (A.map (algebraMap ℝ ℂ))).toReal, the largest modulus of a complex eigenvalue; it is not defined as a positive eigenvalue with a positive eigenvector, which would make the Perron–Frobenius content of the goal definitional. The maximized eigen-equation is stated with IsGreatest, so the maxima are attained. The goal and Theorem 3 assume N≥1N \ge 1N≥1; for N=0N = 0N=0 every λ\lambdaλ would qualify.

Conventions and repairs:

  • Theorem 3 prints "a unique q for which the maximum value of q is assumed". A control has no maximum value; the proof uses "q∗q^*q∗ ... the value of qqq for which λ=φ(q∗)\lambda = \varphi(q^*)λ=φ(q∗)", so the hypothesis is uniqueness of the maximizer of φ\varphiφ. For c=0c = 0c=0 the iterates vanish and xi(n)∼ayiλnx_i(n) \sim a y_i\lambda^nxi​(n)∼ayi​λn fails, so c≠0c \ne 0c=0 is assumed (the proof takes c>0c > 0c>0 "without loss of generality"). The asymptotic is stated as xi(n)/λn→ayix_i(n)/\lambda^n \to a y_ixi​(n)/λn→ayi​ with a>0a > 0a>0.
  • Theorems 1 and 4: the book's controls are functions of ttt with the maximum outside the integral; since the maximization is pointwise (§ 4), the statements use pointwise sets and the integral of the pointwise maximum. Measurability of t↦F(t,x)t \mapsto F(t,x)t↦F(t,x) is not stated in the book and is assumed. In Theorem 4 the max-min is taken row by row, and (2a) is encoded as the existence of a saddle point in each row.
  • § 4 Lemma: "≤max⁡q[… ]\le \max_q[\dots]≤maxq​[…]" is stated as "≤[… ]\le [\dots]≤[…] at some admissible joint qqq".
  • Theorem 5: the right-hand side is the max-min form; the equality of the two ratio values is part of the conclusion.

Degenerate readings are ruled out: the maxima are attained or taken over nonempty compact sets, never Lean's junk sSup of an unbounded set, and the Perron root is spectral rather than defined through the conclusion. Contributions welcome: a proof of the single-matrix Perron theorem in the form needed here, a Brouwer or Kakutani fixed point theorem for the simplex, and a Carathéodory existence theorem for dx/dt=F(t,x)dx/dt = F(t,x)dx/dt=F(t,x) with an integrable Lipschitz constant, each reusable well beyond this mission.

Selected references

  • R. Bellman, Dynamic Programming, Princeton University Press, 1957; Princeton Landmarks in Mathematics ed., 2010, Chapter XI. https://doi.org/10.2307/j.ctv1nxcw0f
  • R. Bellman, "A Markovian decision process", Journal of Mathematics and Mechanics 6 (1957), 679–684.
  • R. A. Howard, Dynamic Programming and Markov Processes, MIT Press, 1960.
  • O. Perron, "Zur Theorie der Matrices", Mathematische Annalen 64 (1907), 248–263. https://doi.org/10.1007/BF01449896
  • B. Lemmens and R. Nussbaum, Nonlinear Perron–Frobenius Theory, Cambridge University Press, 2012. https://doi.org/10.1017/CBO9781139026079
9 thms2 active usersReviewed
🏆Completed
Control TheoryDynamic ProgrammingOptimization+1·Captain: mikedeng1

Bellman's Dynamic Programming VI: Optimal Policies for the Continuous Gold-Mining ProcessTextbook

Motivation

Chapter II of Richard Bellman's Dynamic Programming (Princeton University Press, 1957) solves a discrete gold-mining process: a single machine can be used in one of two mines, each use extracts a fixed fraction of the gold remaining in that mine, and each use carries a fixed risk of destroying the machine. Maximizing the expected total gold leads to an index rule: work the mine whose ratio of expected yield to risk is larger. Chapter VIII, A Continuous Stochastic Decision Process, passes to continuous time. Decisions are taken at every instant, and effort may be divided between the mines. The optimal policy is characterized by first-order conditions on switching functions, the objects of Pontryagin's later maximum principle.

It is also an early continuous-time index policy of the kind later central to bandit theory. Chapter VIII treats two mines, then a third decision that works both mines at once.

Setting

Mine A holds x0≥0x_0 \ge 0x0​≥0 units of gold and mine B holds y0≥0y_0 \ge 0y0​≥0. At time ttt a proportion φ1(t)∈[0,1]\varphi_1(t) \in [0,1]φ1​(t)∈[0,1] of the machine's effort goes to A and φ2(t)=1−φ1(t)\varphi_2(t) = 1 - \varphi_1(t)φ2​(t)=1−φ1​(t) to B (Eq. (7.3)). With x(t),y(t)x(t), y(t)x(t),y(t) the gold remaining, p(t)p(t)p(t) the probability that the machine still works and f(t)f(t)f(t) the expected gold mined, the process is defined by Eq. (7.2):

dxdt=−φ1r1x,dydt=−φ2r2y,dpdt=−p (φ1q1+φ2q2),dfdt=p (φ1r1x+φ2r2y),\frac{dx}{dt} = -\varphi_1 r_1 x,\qquad \frac{dy}{dt} = -\varphi_2 r_2 y,\qquad \frac{dp}{dt} = -p\,(\varphi_1 q_1 + \varphi_2 q_2),\qquad \frac{df}{dt} = p\,(\varphi_1 r_1 x + \varphi_2 r_2 y),dtdx​=−φ1​r1​x,dtdy​=−φ2​r2​y,dtdp​=−p(φ1​q1​+φ2​q2​),dtdf​=p(φ1​r1​x+φ2​r2​y),

with x(0)=x0x(0) = x_0x(0)=x0​, y(0)=y0y(0) = y_0y(0)=y0​, p(0)=1p(0) = 1p(0)=1, f(0)=0f(0) = 0f(0)=0. The mining rates r1,r2r_1, r_2r1​,r2​ and the failure rates q1,q2q_1, q_2q1​,q2​ are positive. The objective is the expected total gold f(∞)=∫0∞f′(t) dtf(\infty) = \int_0^\infty f'(t)\,dtf(∞)=∫0∞​f′(t)dt.

In the three-choice problem (§ 12) a third decision CCC removes gold from A at rate r3r_3r3​ and from B at rate r4r_4r4​, and fails at rate q3q_3q3​. A control is a triple φ1,φ2,φ3≥0\varphi_1, \varphi_2, \varphi_3 \ge 0φ1​,φ2​,φ3​≥0 with φ1+φ2+φ3=1\varphi_1 + \varphi_2 + \varphi_3 = 1φ1​+φ2​+φ3​=1 (Eq. (12.2)). For a horizon TTT, the switching functions K1,K2,K3K_1, K_2, K_3K1​,K2​,K3​ of Eq. (12.5) are computed along a control. For instance,

K1(t)=−q1∫tTf′(s) ds+r1 p(T) x(T)−r1∫tTp′(s) x(s) ds.K_1(t) = -q_1\int_t^T f'(s)\,ds + r_1\,p(T)\,x(T) - r_1\int_t^T p'(s)\,x(s)\,ds.K1​(t)=−q1​∫tT​f′(s)ds+r1​p(T)x(T)−r1​∫tT​p′(s)x(s)ds.

They measure the first-order gain from shifting effort towards each decision at time ttt. The linear forms

C1=q1r2y−q2r1x,C2=q1r4y−(q3r1−q1r3)x,C3=(q3r2−q2r4)y−q2r3xC_1 = q_1 r_2 y - q_2 r_1 x,\qquad C_2 = q_1 r_4 y - (q_3 r_1 - q_1 r_3)x,\qquad C_3 = (q_3 r_2 - q_2 r_4) y - q_2 r_3 xC1​=q1​r2​y−q2​r1​x,C2​=q1​r4​y−(q3​r1​−q1​r3​)x,C3​=(q3​r2​−q2​r4​)y−q2​r3​x

and the quantity D=q1r2r3+q2r1r4−q3r1r2D = q_1 r_2 r_3 + q_2 r_1 r_4 - q_3 r_1 r_2D=q1​r2​r3​+q2​r1​r4​−q3​r1​r2​ (Eqs. (13.2)–(13.3)) organize the analysis.

Formalization targets

Goal: Chapter VIII, Theorem 1

For the two-choice process, the maximum of f(∞)f(\infty)f(∞) is attained by the policy

φ1=1 for q1r2y<q2r1x,φ2=1 for q1r2y>q2r1x,φ1=r2r1+r2, φ2=r1r1+r2 for q1r2y=q2r1x.\varphi_1 = 1 \text{ for } q_1 r_2 y < q_2 r_1 x,\qquad \varphi_2 = 1 \text{ for } q_1 r_2 y > q_2 r_1 x,\qquad \varphi_1 = \tfrac{r_2}{r_1+r_2},\ \varphi_2 = \tfrac{r_1}{r_1+r_2} \text{ for } q_1 r_2 y = q_2 r_1 x.φ1​=1 for q1​r2​y<q2​r1​x,φ2​=1 for q1​r2​y>q2​r1​x,φ1​=r1​+r2​r2​​, φ2​=r1​+r2​r1​​ for q1​r2​y=q2​r1​x.

The formal statement asserts that some admissible control follows this rule along its own trajectory, and that every such control maximizes f(∞)f(\infty)f(∞) over all measurable controls with values in [0,1][0,1][0,1].

Milestones

  1. Eq. (10.1): fA(∞)=r1x0/(q1+r1)f_A(\infty) = r_1 x_0/(q_1 + r_1)fA​(∞)=r1​x0​/(q1​+r1​) and fB(∞)=r2y0/(q2+r2)f_B(\infty) = r_2 y_0/(q_2 + r_2)fB​(∞)=r2​y0​/(q2​+r2​) for the pure policies.
  2. Lemmas 1–3 (§ 13): for a control that maximizes f(T)f(T)f(T), almost everywhere, Ki>KjK_i > K_jKi​>Kj​ forces φi=1\varphi_i = 1φi​=1 or φj=0\varphi_j = 0φj​=0; a strictly largest KiK_iKi​ forces φi=1\varphi_i = 1φi​=1; a strictly beaten KiK_iKi​ forces φi=0\varphi_i = 0φi​=0.
  3. Lemma 4 (§ 14): if C2=0C_2 = 0C2​=0 and C3=0C_3 = 0C3​=0 lie in the positive quadrant and D≠0D \ne 0D=0, no optimal control mixes AAA, BBB and CCC on an interval.
  4. Lemma 5 (§ 14): a mixture of exactly two decisions on an interval keeps the state on C1=0C_1 = 0C1​=0, C2=0C_2 = 0C2​=0 or C3=0C_3 = 0C3​=0 respectively, with the proportions that hold y/xy/xy/x fixed.
  5. § 15, Eq. (1) (corrected): fC(∞)=r3x0/(q3+r3)+r4y0/(q3+r4)f_C(\infty) = r_3 x_0/(q_3 + r_3) + r_4 y_0/(q_3 + r_4)fC​(∞)=r3​x0​/(q3​+r3​)+r4​y0​/(q3​+r4​).
  6. "Theorem 8" (§ 16, the chapter's third theorem): if D<0D < 0D<0 (with r3>r4r_3 > r_4r3​>r4​ and x0,y0>0x_0, y_0 > 0x0​,y0​>0), the three-choice problem is solved by the two-choice rule of Theorem 1, and every optimal control has φ3=0\varphi_3 = 0φ3​=0 almost everywhere.

Significance

Theorem 1 gives a closed-form optimal feedback policy for a continuous-time stochastic scheduling problem. The policy depends only on the slope y/xy/xy/x, and on the line q1r2y=q2r1xq_1 r_2 y = q_2 r_1 xq1​r2​y=q2​r1​x it is a mixed (chattering) policy: the discrete optimum becomes a mixture in the continuous limit. Lemmas 1–5 are a hand-made maximum principle for controls that enter linearly, read almost everywhere. "Theorem 8" says exactly when a composite decision is useless: D<0D < 0D<0 means that CCC removes gold at a higher failure cost than an equivalent mixture of AAA and BBB.

On the formal side, none of these results is formalized anywhere. Mathlib has no theory of controlled differential equations or of necessary conditions for optimal control. The platform's maximum principles (BertsekasDP.pontryagin_minimum_principle, VectorSpaceOpt.pontryagin_minimum_principle) assume smooth dynamics and a finite horizon with differentiable costs. They do not cover this process, with measurable controls and an improper-integral objective. A formal proof of Theorem 1 would be a complete optimality proof for a continuous-time index policy with chattering controls. The book's argument for Theorem 1 is partly informal; a complete proof, by that route or another, is the target.

Difficulty

The optimization is over an infinite-dimensional set of measurable controls on an infinite horizon, and the objective is not concave in the control. The first-order conditions of §§ 8–9 are necessary, not sufficient, so they do not by themselves prove that the rule is optimal. The book's argument combines them with qualitative facts (the rule is used thereafter once used above the line, and BBB is preferred near the yyy-axis). Making this rigorous requires comparing an arbitrary control with the rule, not just perturbing near an optimum. It is also not known in advance that an optimal control exists, so arguments of the form "let φ\varphiφ be optimal" need an existence step or a direct comparison. For the lemmas, the switching functions must be shown absolutely continuous, with the derivative formulas (13.1) holding almost everywhere, before "equal on an interval" can be turned into "Ck=0C_k = 0Ck​=0 on the interval".

Formalization scope

  • Process by closed forms. No differential equations are formalized. With Φi(t)=∫0tφi\Phi_i(t) = \int_0^t \varphi_iΦi​(t)=∫0t​φi​, the definitions are x=x0e−r1Φ1−r3Φ3x = x_0 e^{-r_1\Phi_1 - r_3\Phi_3}x=x0​e−r1​Φ1​−r3​Φ3​, y=y0e−r2Φ2−r4Φ3y = y_0 e^{-r_2\Phi_2 - r_4\Phi_3}y=y0​e−r2​Φ2​−r4​Φ3​, p=e−∑iqiΦip = e^{-\sum_i q_i\Phi_i}p=e−∑i​qi​Φi​, f(T)=∫0Tf′f(T) = \int_0^T f'f(T)=∫0T​f′. These are the unique absolutely continuous solutions of (7.2) and (12.1). The two-choice process is the three-choice one with φ3=0\varphi_3 = 0φ3​=0.
  • Controls are open-loop and measurable, with φi≥0\varphi_i \ge 0φi​≥0 and ∑iφi=1\sum_i \varphi_i = 1∑i​φi​=1. Decisions are indexed 0, 1, 2 for A,B,CA, B, CA,B,C.
  • f(∞)f(\infty)f(∞) is a lower Lebesgue integral with values in [0,∞][0,\infty][0,∞]. It has no junk value, and optimality is compared in [0,∞][0,\infty][0,∞].
  • Theorem 1's feedback rule is encoded as a predicate on open-loop controls: the rule holds along the control's own trajectory for almost every t≥0t \ge 0t≥0. The goal also asserts that such a control exists, which rules out the trivializing reading in which no control satisfies the rule and the optimality claim is vacuous.
  • Horizon of Lemmas 1–5. § 12 considers only T=∞T = \inftyT=∞, but the variation (12.4) and the switching functions (12.5) are written for a general TTT. Each lemma is formalized for both: every finite horizon TTT, with KiK_iKi​ built from that horizon, and T=∞T = \inftyT=∞, with KiK_iKi​ given by (12.5) at T=∞T = \inftyT=∞ (boundary term 000).
  • Implicit ranges. All rates q1,q2,q3,r1,…,r4q_1, q_2, q_3, r_1, \dots, r_4q1​,q2​,q3​,r1​,…,r4​ are taken positive, and x0,y0≥0x_0, y_0 \ge 0x0​,y0​≥0. Lemmas 4–5 and "Theorem 8" take x0,y0>0x_0, y_0 > 0x0​,y0​>0, the open quadrant the book analyses. Lemma 4 carries the book's assumption that C2=0C_2 = 0C2​=0 and C3=0C_3 = 0C3​=0 lie in the positive quadrant (q1r3<q3r1q_1 r_3 < q_3 r_1q1​r3​<q3​r1​, q2r4<q3r2q_2 r_4 < q_3 r_2q2​r4​<q3​r2​). "Theorem 8" carries the standing assumption r3>r4r_3 > r_4r3​>r4​ of § 15.
  • Misprint corrected. The value of the pure CCC-policy in the proof of Lemma 6 (§ 15, Eq. (1), p. 237) is printed r3x0/(q2+r3)+r4y0/(q3+r4)r_3 x_0/(q_2 + r_3) + r_4 y_0/(q_3 + r_4)r3​x0​/(q2​+r3​)+r4​y0​/(q3​+r4​). The first denominator must be q3+r3q_3 + r_3q3​+r3​: for x0=1x_0 = 1x0​=1, y0=0y_0 = 0y0​=0, q2=1q_2 = 1q2​=1, q3=2q_3 = 2q3​=2, r3=1r_3 = 1r3​=1 the process yields 1/31/31/3, not 1/21/21/2. The corrected identity is stated.
  • Numbering. The third theorem of the chapter is printed "Theorem 8" and is cited that way.
  • Left out. Theorem 2 (D>0D > 0D>0) specifies its solution only through Fig. 7 and an unspecified line LLL. Lemmas 6–8, 11 and the two Lemmas 12 describe regions of figures. The finite-horizon analysis of § 11 has no numbered result, and neither does the nonlinear utility of § 18.

Useful infrastructure: the derivative formulas (13.1) for the KiK_iKi​, a first-variation lemma for f(T)f(T)f(T) under bounded perturbations of a measurable control, and a comparison principle for deteriorating projects. The last is reusable for other continuous-time index policies. Proofs of any milestone, and alternative arguments for Theorem 1, are welcome.

Selected references

  • R. Bellman, Dynamic Programming, Princeton University Press, 1957; Princeton Landmarks in Mathematics edition, 2010. Chapter VIII, pp. 222–244. https://doi.org/10.2307/j.ctv1nxcw0f
  • L. S. Pontryagin, V. G. Boltyanskii, R. V. Gamkrelidze, E. F. Mishchenko, The Mathematical Theory of Optimal Processes, Interscience, 1962.
  • J. C. Gittins, Bandit processes and dynamic allocation indices, Journal of the Royal Statistical Society B 41 (1979), 148–177. https://doi.org/10.1111/j.2517-6161.1979.tb01068.x
11 thms2 active usersReviewed
🏆Completed
Dynamic ProgrammingOptimizationProbability·Captain: mikedeng1

Bellman's Dynamic Programming V: Optimality of a Constant Stock Level for the Optimal Inventory EquationTextbook

Motivation

The optimal inventory problem asks how much of an item to stock when demand is random, ordering costs money, and running short costs more. Arrow, Harris and Marschak formulated it as a sequential decision problem in 1951 (Optimal inventory policy, Econometrica 19), and Dvoretzky, Kiefer and Wolfowitz studied its structure in 1952–53. Chapter V of Richard Bellman's Dynamic Programming (1957) treats the problem through a single functional equation for the minimal expected discounted cost. It shows that when ordering and shortage costs are proportional to quantity, the optimal policy is described by one number, a constant stock level xˉ\bar xxˉ, computed from the demand distribution alone.

This result is an early form of the base-stock (order-up-to) policy. Base-stock policies are the standard structure in periodic-review inventory theory: Karlin (1958), Scarf's (s,S)(s,S)(s,S) theorem (1960) and Veinott (1965) extend it. Chapter V is also a worked example of a point the book makes throughout: the method of successive approximations determines the shape of an optimal policy, and not only its existence.

Setting

A single item is stocked over an unbounded sequence of periods. At the start of a period the stock is x≥0x \ge 0x≥0. The decision maker orders up to a level y≥xy \ge xy≥x, at cost k(y−x)k(y-x)k(y−x) with k>0k > 0k>0. A demand s≥0s \ge 0s≥0 then arrives, with probability density φ\varphiφ: φ(s)>0\varphi(s) > 0φ(s)>0 for s>0s > 0s>0, ∫0∞φ(s) ds=1\int_0^\infty \varphi(s)\,ds = 1∫0∞​φ(s)ds=1, and ∫0∞s φ(s) ds<∞\int_0^\infty s\,\varphi(s)\,ds < \infty∫0∞​sφ(s)ds<∞. If s≤ys \le ys≤y, the next period starts with stock y−sy - sy−s. If s>ys > ys>y, the excess s−ys - ys−y is bought at the penalty rate p>0p > 0p>0 and the next period starts with stock 000. Costs one period ahead are multiplied by a discount factor 0<a<10 < a < 10<a<1.

Write f(x)f(x)f(x) for the minimal expected discounted cost from stock xxx. Enumerating the cases gives Bellman's equation (5.1):

f(x)=min⁡y≥xT(y,x,f),f(x) = \min_{y \ge x} T(y,x,f),f(x)=y≥xmin​T(y,x,f), T(y,x,f)=k(y−x)+a[∫y∞p(s−y)φ(s) ds+f(0)∫y∞φ(s) ds+∫0yf(y−s)φ(s) ds].T(y,x,f) = k(y-x) + a\Big[\int_y^\infty p(s-y)\varphi(s)\,ds + f(0)\int_y^\infty \varphi(s)\,ds + \int_0^y f(y-s)\varphi(s)\,ds\Big].T(y,x,f)=k(y−x)+a[∫y∞​p(s−y)φ(s)ds+f(0)∫y∞​φ(s)ds+∫0y​f(y−s)φ(s)ds].

A policy assigns an order-up-to level y(x)≥xy(x) \ge xy(x)≥x to each stock xxx. It is optimal when y(x)y(x)y(x) attains the minimum. The mission takes the equation itself as the model; no stochastic process is built.

Formalization targets

Goal: Chapter V, Theorem 1 (with (4b) corrected)

The equation has exactly one solution fff among measurable functions bounded on [0,∞)[0,\infty)[0,∞). If ap>kap > kap>k, the equation

k=ap∫xˉ∞φ(s) ds+ak∫0xˉφ(s) dsk = ap\int_{\bar x}^\infty \varphi(s)\,ds + ak\int_0^{\bar x}\varphi(s)\,dsk=ap∫xˉ∞​φ(s)ds+ak∫0xˉ​φ(s)ds

has exactly one root xˉ≥0\bar x \ge 0xˉ≥0, and for every x≥0x \ge 0x≥0 the minimum is attained at

y(x)=max⁡(x,xˉ).y(x) = \max(x, \bar x).y(x)=max(x,xˉ).

If ap≤kap \le kap≤k, the minimum is attained at y(x)=xy(x) = xy(x)=x: never order.

Milestones

  1. Chapter IV, Theorem 6 (proportional costs): existence and uniqueness of a solution bounded on every finite interval, its continuity, and convergence of fn+1(x)=min⁡y≥xT(y,x,fn)f_{n+1}(x) = \min_{y\ge x} T(y,x,f_n)fn+1​(x)=miny≥x​T(y,x,fn​) from any non-negative continuous f0f_0f0​.
  2. Eq. (5.8): xˉ\bar xxˉ is the unique root of ∫0yφ(s) ds=(ap−k)/a(p−k)\int_0^{y}\varphi(s)\,ds = (ap-k)/a(p-k)∫0y​φ(s)ds=(ap−k)/a(p−k).
  3. Appendix, Theorem 9: the renewal equation u(x)=f(x)+∫0xu(x−s)φ(s) dsu(x) = f(x) + \int_0^x u(x-s)\varphi(s)\,dsu(x)=f(x)+∫0x​u(x−s)φ(s)ds with ∫0∞∣φ∣<1\int_0^\infty|\varphi| < 1∫0∞​∣φ∣<1 has a unique locally bounded solution. The solution is the limit of successive approximations, satisfies a derivative identity, and is non-negative when f,φ≥0f, \varphi \ge 0f,φ≥0.
  4. Theorem 3: in the undiscounted nnn-stage process with p>kp > kp>k, the optimal policy at each horizon is a constant stock level xˉn\bar x_nxˉn​, and xˉn\bar x_nxˉn​ increases with nnn.
  5. Theorem 4: with a fixed stock-out charge qqq added to the penalty, the constant-stock-level policy is still optimal when the last minimum of
ψ(y)=ky+a[∫y∞[p(s−y)+q]φ(s) ds−k∫0y(y−s)φ(s) ds]\psi(y) = ky + a\Big[\int_y^\infty [p(s-y)+q]\varphi(s)\,ds - k\int_0^y (y-s)\varphi(s)\,ds\Big]ψ(y)=ky+a[∫y∞​[p(s−y)+q]φ(s)ds−k∫0y​(y−s)φ(s)ds]

is its absolute minimum.

Significance

The theorem reduces an infinite-horizon stochastic control problem to a scalar equation. Rewriting it as ∫0xˉφ=(ap−k)/a(p−k)\int_0^{\bar x}\varphi = (ap-k)/a(p-k)∫0xˉ​φ=(ap−k)/a(p−k) gives the critical-fractile form familiar from the newsvendor problem, with the discount factor entering the fractile. The level depends on the demand law only through its distribution function, and the policy does not depend on the current stock except through max⁡(x,xˉ)\max(x,\bar x)max(x,xˉ). This is what makes the policy implementable and its parameters estimable from data, the point Bellman makes in § 1. Theorem 3 shows the same structure over a finite horizon, with levels that rise as more periods remain. Theorem 4 marks where the structure starts to depend on the demand density.

As far as a search of the platform shows (queries recorded in the mission files), none of these results has a machine-checked proof. Base-stock theorems on the platform, Veinott's multi-product theorem and Gallego–Özer's advance-demand model, use discrete periods, different excess-demand conventions and different state spaces. They do not cover a continuous-demand, lost-sales-at-penalty, discounted functional equation. Formalizing Chapter V would produce an explicit solution of a nonlinear integral equation of renewal type, a uniqueness theorem for that equation, and a Lean treatment of the renewal equation that other applied-probability missions can reuse.

Difficulty

Two steps resist the obvious argument. First, the minimization is over the unbounded set y≥xy \ge xy≥x, and the unknown fff enters through a convolution with φ\varphiφ. The operator f↦min⁡y≥xT(y,x,f)f \mapsto \min_{y\ge x}T(y,x,f)f↦miny≥x​T(y,x,f) is a contraction on bounded functions, which settles uniqueness in the bounded class. Uniqueness among functions bounded only on finite intervals (Chapter IV's class) is not a contraction statement, because the minimization reaches arbitrarily far to the right. Second, optimality of max⁡(x,xˉ)\max(x,\bar x)max(x,xˉ) for x>xˉx > \bar xx>xˉ requires f(y)+kyf(y) + kyf(y)+ky to be nondecreasing on [xˉ,∞)[\bar x,\infty)[xˉ,∞). There fff is defined only implicitly, as the solution of a renewal-type equation, and this monotonicity is a positivity statement about that solution, not a consequence of the first-order condition. Checking that the first-order condition holds at xˉ\bar xxˉ is not enough, and neither is checking that the candidate function satisfies the equation at the single level xˉ\bar xxˉ.

Formalization scope

Functions are ℝ → ℝ; only their values on [0,∞)[0,\infty)[0,∞) enter. Integrals over (y,∞)(y,\infty)(y,∞) are Lebesgue integrals and ∫0y\int_0^y∫0y​ are interval integrals. The equation is stated with an infimum (IsGLB), as Chapter IV writes it, and every policy statement asserts that the minimum is attained (IsLeast) at the stated level. Uniqueness is asserted on [0,∞)[0,\infty)[0,∞) (Set.EqOn … (Set.Ici 0)). Solution classes require measurability. This is the standing convention that makes ∫0yf(y−s)φ(s) ds\int_0^y f(y-s)\varphi(s)\,ds∫0y​f(y−s)φ(s)ds meaningful; without it a non-measurable function would make the integral default to 000. "φ(s)>0\varphi(s) > 0φ(s)>0" is read as positivity on (0,∞)(0,\infty)(0,∞).

Conventions and corrections, each stated in the items:

  • Theorem 1, (4b) is printed "for x≥xˉx \ge \bar xx≥xˉ, y=xˉy = \bar xy=xˉ". Read literally, a stock x>xˉx > \bar xx>xˉ would be "ordered down" to xˉ<x\bar x < xxˉ<x, which violates y≥xy \ge xy≥x. The proof (p. 163, "the minimum occurs at y=xy = xy=x") and Theorem 4's (7) give y=xy = xy=x, which is what the goal states. The printed text reads: "(4) a. for 0 ≤ x ≤ x̄, y = x̄, b. for x ≥ x̄, y = x̄."
  • The goal's uniqueness class is "uniformly bounded functions over x≥0x \ge 0x≥0" (p. 164). Chapter IV, Theorem 6 is stated in its own larger class.
  • Theorem 4 gives no range for qqq; q≥0q \ge 0q≥0 is assumed. Its phrase "the last minimum of ψ\psiψ is the absolute minimum" is read as: xˉ\bar xxˉ minimizes ψ\psiψ on [0,∞)[0,\infty)[0,∞) and ψ\psiψ is nondecreasing on [xˉ,∞)[\bar x,\infty)[xˉ,∞). The bracket of (6), unbalanced in print, is closed at the end.
  • Theorem 3 assumes "p>kp > kp>k"; k>0k > 0k>0 and the density conditions of Theorem 1 are carried over.
  • Theorem 9's derivative clause assumes fff continuously differentiable, where the book says "differentiable". The derivative identity is asserted for x>0x > 0x>0.

A trivializing formalization is ruled out. The goal does not assume the stated policy is optimal, does not assume fff is given, and does not take xˉ\bar xxˉ as a hypothesis. It asserts the existence of the root, the existence and uniqueness of the solution, and attainment of the minimum at max⁡(x,xˉ)\max(x,\bar x)max(x,xˉ) for every x≥0x \ge 0x≥0.

Theorems 2 (two items, joint density), 5 (one-period delivery lag) and 6 (strictly convex ordering cost) are not part of this mission. Theorem 2 is printed with a sign error in (6) and garbled marginals. Theorem 5 states no hypotheses. Theorem 6's (9b) contradicts itself at x=xˉx = \bar xx=xˉ. Welcome contributions include a Lean library for the renewal equation (existence by successive approximation, positivity, differentiation under the convolution), which Theorem 9 needs and which is independent of inventory theory, and the contraction estimate for min⁡y≥xT(y,x,⋅)\min_{y\ge x}T(y,x,\cdot)miny≥x​T(y,x,⋅) on bounded measurable functions.

Selected references

  • R. Bellman, Dynamic Programming, Princeton University Press, 1957; Princeton Landmarks in Mathematics ed., 2010, Chapter V and Chapter IV § 9. https://doi.org/10.2307/j.ctv1nxcw0f
  • R. Bellman, I. Glicksberg, O. Gross, On the optimal inventory equation, Management Science 2(1), 1955, 83–104. https://doi.org/10.1287/mnsc.2.1.83
  • K. J. Arrow, T. Harris, J. Marschak, Optimal inventory policy, Econometrica 19(3), 1951, 250–272. https://doi.org/10.2307/1906813
  • A. Dvoretzky, J. Kiefer, J. Wolfowitz, The inventory problem: I. Case of known distributions of demand, Econometrica 20(2), 1952, 187–222. https://doi.org/10.2307/1907847
  • A. F. Veinott, Optimal policy for a multi-product, dynamic, nonstationary inventory problem, Management Science 12(3), 1965, 206–222. https://doi.org/10.1287/mnsc.12.3.206
7 thms2 active usersReviewed
🏆Completed
Dynamic ProgrammingFunctional AnalysisOptimization·Captain: mikedeng1

Bellman's Dynamic Programming IV: Existence and Uniqueness for Functional Equations of Types One, Two and ThreeTextbook

Motivation

A multi-stage decision process is summarized by its optimal return function fff, which satisfies a functional equation. In Chapters I and II of Dynamic Programming (Princeton University Press, 1957), Richard Bellman proves existence and uniqueness for particular processes: allocation of resources, gold mining. Chapter IV abstracts these arguments into theorems about whole classes of equations. The same scheme reappears in later chapters (multi-stage games, the calculus of variations) and in every later treatment of dynamic programming.

Two points explain why the chapter is still worth formalizing. First, uniqueness is always claimed within a stated function class, and the choice of class is part of the theorem: an equation of this kind can have many solutions, and only one of them lies in the class that the process singles out. Second, the chapter covers equations that are not contractions in the supremum norm, in particular Type One, where the shrinking happens in the state rather than in the function values.

Setting

Let D⊆RND \subseteq \mathbb{R}^ND⊆RN carry the Euclidean norm ∥p∥\|p\|∥p∥, let SSS be a nonempty set of decisions, and let g,h:D×S→Rg, h : D \times S \to \mathbb{R}g,h:D×S→R and T:D×S→DT : D \times S \to DT:D×S→D. The general equation (1.1) is

f(p)=sup⁡q∈S[g(p,q)+h(p,q) f(T(p,q))].f(p) = \sup_{q \in S}\big[g(p,q) + h(p,q)\,f(T(p,q))\big].f(p)=q∈Ssup​[g(p,q)+h(p,q)f(T(p,q))].

Here ggg is the one-stage return, T(p,q)T(p,q)T(p,q) the next state and h(p,q)h(p,q)h(p,q) a multiplier: a discount factor or a survival probability.

An equation is of Type One with constant 0≤a<10 \le a < 10≤a<1 under the following conditions. DDD contains the null vector θ\thetaθ. ggg is bounded on bounded parts of DDD, uniformly in qqq, and g(θ,q)=0g(\theta, q) = 0g(θ,q)=0. ∣h∣≤1|h| \le 1∣h∣≤1. ∥T(p,q)∥≤a∥p∥\|T(p,q)\| \le a\|p\|∥T(p,q)∥≤a∥p∥. Finally, with v(c)=sup⁡∥p∥≤csup⁡q∣g(p,q)∣v(c) = \sup_{\|p\| \le c}\sup_q |g(p,q)|v(c)=sup∥p∥≤c​supq​∣g(p,q)∣, the series ∑n≥0v(anc)\sum_{n \ge 0} v(a^n c)∑n≥0​v(anc) converges for every ccc.

It is of Type Two under the following conditions. ggg is bounded on bounded parts of DDD. On each bounded part, ∣h∣≤a<1|h| \le a < 1∣h∣≤a<1 for some aaa. TTT maps DDD into DDD, and either ∥T(p,q)∥≤∥p∥\|T(p,q)\| \le \|p\|∥T(p,q)∥≤∥p∥ or DDD is bounded.

The successive approximations are f0(p)=sup⁡qg(p,q)f_0(p) = \sup_q g(p,q)f0​(p)=supq​g(p,q) and fn+1(p)=sup⁡q[g(p,q)+h(p,q)fn(T(p,q))]f_{n+1}(p) = \sup_q[g(p,q) + h(p,q) f_n(T(p,q))]fn+1​(p)=supq​[g(p,q)+h(p,q)fn​(T(p,q))].

The equation of the third type of § 8 lives on the probability simplex Δ\DeltaΔ of distributions p=(p0,…,pn)p = (p_0, \dots, p_n)p=(p0​,…,pn​), with vertices xkx_kxk​. It reads

f(p)=min⁡[ 1+∑k=0npkf(xk), min⁡1≤l≤M[1+f(Tlp)]](p≠x0),f(x0)=0.f(p) = \min\Big[\,1 + \sum_{k=0}^{n} p_k f(x_k),\ \min_{1 \le l \le M}\big[1 + f(T_l p)\big]\Big] \quad (p \ne x_0), \qquad f(x_0) = 0.f(p)=min[1+k=0∑n​pk​f(xk​), 1≤l≤Mmin​[1+f(Tl​p)]](p=x0​),f(x0​)=0.

Each TlT_lTl​ maps Δ\DeltaΔ into itself, and the 000-th coordinate of TlpT_l pTl​p is never 111. f(p)f(p)f(p) is the minimal expected time to drive a system into state 000 with certainty, by observing the state (cost 111, then continuing from the observed vertex) or by applying one of the operations TlT_lTl​ (cost 111).

Formalization targets

Goal: Chapter IV, Theorem 1

For a Type One equation there is exactly one solution on DDD, among functions continuous at θ\thetaθ and zero there, of

f(p)=sup⁡q∈S[g(p,q)+h(p,q) f(T(p,q))] (p≠θ),f(θ)=0.f(p) = \sup_{q \in S}\big[g(p,q) + h(p,q)\,f(T(p,q))\big] \ (p \ne \theta), \qquad f(\theta) = 0.f(p)=q∈Ssup​[g(p,q)+h(p,q)f(T(p,q))] (p=θ),f(θ)=0.

It is the pointwise limit of the successive approximations from f0=sup⁡qgf_0 = \sup_q gf0​=supq​g, and also from any f0f_0f0​ that is continuous and zero at θ\thetaθ and bounded on bounded parts of DDD. If ggg, hhh and TTT are continuous in ppp on bounded portions of DDD, uniformly in qqq, the solution is continuous on every bounded portion of DDD.

Milestones

  • Lemma 1 (the fundamental inequality): for nonnegative measures dGdGdG,
∣f2(p)−F2(p)∣≤sup⁡q[ ∣g−h∣+∫D∣f1−F1∣ dG].|f_2(p) - F_2(p)| \le \sup_q\Big[\,|g - h| + \int_{D} |f_1 - F_1|\,dG\Big].∣f2​(p)−F2​(p)∣≤qsup​[∣g−h∣+∫D​∣f1​−F1​∣dG].
  • Theorem 2: a Type Two equation has a unique solution bounded in every finite part of DDD, obtained by successive approximations and continuous under the same conditions as in Theorem 1.
  • Theorem 3 (stability, Type One): sup⁡∥p∥≤c∣F−f∣≤∑n≥0u(anc)\sup_{\|p\| \le c} |F - f| \le \sum_{n \ge 0} u(a^n c)sup∥p∥≤c​∣F−f∣≤∑n≥0​u(anc), where u(c)=sup⁡∥p∥≤csup⁡q∣G−g∣u(c) = \sup_{\|p\| \le c}\sup_q |G - g|u(c)=sup∥p∥≤c​supq​∣G−g∣.
  • Theorem 4 (stability, Type Two, corrected): sup⁡∥p∥≤c∣F−f∣≤u(c)/(1−a)\sup_{\|p\| \le c} |F - f| \le u(c)/(1-a)sup∥p∥≤c​∣F−f∣≤u(c)/(1−a).
  • Lemma 2: two bounded solutions of the third-type equation satisfy sup⁡p∣f(p)−g(p)∣=max⁡k∣f(xk)−g(xk)∣\sup_{p} |f(p) - g(p)| = \max_k |f(x_k) - g(x_k)|supp​∣f(p)−g(p)∣=maxk​∣f(xk​)−g(xk​)∣.
  • Theorem 5: if ∑k=1n(Tlp)k≤c1<1\sum_{k=1}^n (T_l p)_k \le c_1 < 1∑k=1n​(Tl​p)k​≤c1​<1 for every lll and ppp, the third-type equation has a unique bounded solution, and it is positive off x0x_0x0​.

Significance

Theorem 1 guarantees that the optimal return of a process whose decisions shrink the state is well defined and computable by iteration. It applies without assuming that the supremum over decisions is attained and without regularity of the maximizing decision. Theorems 3 and 4 give quantitative continuous dependence of the solution on the reward. This is what justifies approximating a process by a simpler one. Theorem 5 is a uniqueness result for an undiscounted minimum-time problem, where no contraction in the supremum norm is available.

All of these results are classical and proved in the book. None is formalized: the platform's related statements treat finite state spaces with a fixed policy (FoundationsML.ReinforcementLearning.bellman_equations_unique_solution), or Karlin's compact-decision-set setting with nonnegative rewards and an explicit vanishing-tail hypothesis (KarlinDP.Deterministic.unique_solution_of_vanishing_tail), or finite-state stochastic shortest paths (BertsekasDP.ssp_main_theorem). This mission adds machine-checked versions over a continuum of states and an arbitrary decision set, with the function classes stated exactly.

Difficulty

For Type One, the natural idea is to apply the Banach fixed-point theorem in the space of bounded functions. That fails: ∣h∣≤1|h| \le 1∣h∣≤1 allows no contraction in the supremum norm, and the solution need not be bounded on DDD. Contraction happens only along trajectories, ∥T(p,q)∥≤a∥p∥\|T(p,q)\| \le a\|p\|∥T(p,q)∥≤a∥p∥, so every estimate must be localized to balls ∥p∥≤c\|p\| \le c∥p∥≤c and summed along radii anca^n canc. Uniqueness then rests on continuity at θ\thetaθ rather than on a global norm.

The suprema over an arbitrary, possibly infinite, decision set are not attained in general, so no argument may select a maximizing decision. For the third-type equation, neither a contraction nor a shrinking of the state is available: the operations TlT_lTl​ need not move ppp towards x0x_0x0​. Uniqueness among bounded solutions requires controlling how long a solution can keep choosing an operation other than observation.

Formalization scope

The state space is EuclideanSpace ℝ (Fin N), DDD is a Set, the decision set is a nonempty type S, and functions are total, EuclideanSpace ℝ (Fin N) → ℝ. Only their values on DDD matter, and uniqueness is asserted on DDD. The equation is encoded with IsLUB, so the supremum is genuine and has no junk value. The successive approximations and the radii v(c)v(c)v(c), u(c)u(c)u(c) use real iSup/sSup, evaluated only where the book's boundedness conditions hold. "Continuous at θ\thetaθ" is continuity within DDD.

Conventions and corrections:

  • In Type One the book writes "for some a<1a < 1a<1". The formalization takes 0≤a<10 \le a < 10≤a<1, which loses no generality.
  • Condition (1a) of both types is read for every radius c1c_1c1​.
  • "Continuous in ppp in any bounded portion of DDD, uniformly for all qqq" is read as uniform equicontinuity on each {p∈D:∥p∥≤c}\{p \in D : \|p\| \le c\}{p∈D:∥p∥≤c}. For closed DDD this is the pointwise reading.
  • Theorem 4 is printed with "∣F(p)−(p)∣|F(p) - (p)|∣F(p)−(p)∣", a misprint for ∣F(p)−f(p)∣|F(p) - f(p)|∣F(p)−f(p)∣. As printed, it is also false under the bounded-domain alternative of Type Two. Take N=1N = 1N=1, D=[−2,2]D = [-2,2]D=[−2,2], T≡2T \equiv 2T≡2, h≡12h \equiv \tfrac12h≡21​, g≡0g \equiv 0g≡0, and G=1G = 1G=1 at p=2p = 2p=2, G=0G = 0G=0 elsewhere. Then ∣F(0)−f(0)∣=1|F(0) - f(0)| = 1∣F(0)−f(0)∣=1 while u(1)/(1−a)=0u(1)/(1-a) = 0u(1)/(1−a)=0. The formal statement adds that TTT maps {p∈D:∥p∥≤c}\{p \in D : \|p\| \le c\}{p∈D:∥p∥≤c} into the ball of radius ccc. This holds for every ccc under the first alternative, where the statement is the book's.
  • Lemma 1 is stated for nonnegative measures dG(p,q,⋅)dG(p,q,\cdot)dG(p,q,⋅) on RN\mathbb{R}^NRN, integrated over DDD. The right-hand supremum may be infinite, so it is expressed through its real upper bounds.
  • In § 8 the number of states is written both N+1N+1N+1 and n+1n+1n+1; the formalization uses n+1n+1n+1, with M≥1M \ge 1M≥1 transformations indexed by Fin M.

A trivializing formalization would state uniqueness among all solutions of the equation, which is false because constants solve it when g=0g = 0g=0 and h=1h = 1h=1. Equally trivializing would be to encode the supremum with a junk-valued sSup, so that unbounded return sets pass for solutions. Both are excluded: the class is part of each statement, and the equation is an IsLUB.

Theorem 6 of the chapter (the optimal inventory equation) is not part of this mission; it is treated in the inventory mission of the series. Welcome contributions include a reusable library for localized successive approximations and the equicontinuity lemmas that the continuity statements need.

Selected references

  • R. Bellman, Dynamic Programming, Princeton University Press, 1957; Princeton Landmarks in Mathematics edition, 2010, Chapter IV. https://doi.org/10.2307/j.ctv1nxcw0f
  • S. Karlin, "The structure of dynamic programming models", Naval Research Logistics Quarterly 2 (1955), 285–294. https://doi.org/10.1002/nav.3800020408
  • D. P. Bertsekas and J. N. Tsitsiklis, "An analysis of stochastic shortest path problems", Mathematics of Operations Research 16 (1991), 580–595. https://doi.org/10.1287/moor.16.3.580
10 thms2 active usersReviewed
🏆Completed
Dynamic ProgrammingOptimizationProbability·Captain: mikedeng1

Bellman's Dynamic Programming III: Index Rules for the Stochastic Gold-Mining ProcessTextbook

Motivation

Chapter II of Richard Bellman's Dynamic Programming (Princeton University Press, 1957) treats the stochastic gold-mining process, the first stochastic multi-stage decision process of the book whose optimal policy can be written down in closed form. There Bellman introduces decision regions, the sets of states at which a given first choice is optimal, and where he obtains an index rule: at every state, compute one number per alternative and choose the largest. The same kind of rule was later developed in general form as the Gittins index for multi-armed bandits (Gittins 1979), and the gold-mining process is an early instance of what that literature calls a deteriorating bandit, in which each alternative's index can only decrease when it is used.

Bellman first described the process in his 1954 survey The theory of dynamic programming, with the two-mine index rule stated as Eq. (8.3), and it appears on Prove2Me in a mission on that paper. The book gives the full chapter: existence and uniqueness, the rule for two mines, its extension to several outcomes per use and to any number of mines, the finite-horizon process, and a stability estimate.

Setting

Two mines, Anaconda and Bonanza, hold amounts of gold x≥0x \ge 0x≥0 and y≥0y \ge 0y≥0. A single machine is used in one mine at a time. Used in Anaconda, it mines the fraction r1r_1r1​ of the gold there and stays in working order with probability p1p_1p1​, or is destroyed without mining anything with probability 1−p11 - p_11−p1​. Bonanza has the corresponding data p2p_2p2​ and r2r_2r2​. Before each use the operator chooses a mine (choice A or B), and the process stops when the machine is destroyed. The aim is to maximize the expected total amount of gold mined.

The expected return f(x,y)f(x, y)f(x,y) under an optimal policy satisfies the functional equation

f(x,y)=max⁡[ Af(x,y),  Bf(x,y) ],x,y≥0,(5.1)f(x,y) = \max\Big[\,A_f(x,y),\; B_f(x,y)\,\Big], \qquad x, y \ge 0, \tag{5.1}f(x,y)=max[Af​(x,y),Bf​(x,y)],x,y≥0,(5.1)

where Af(x,y)=p1[r1x+f((1−r1)x, y)]A_f(x,y) = p_1\big[r_1x + f((1-r_1)x,\,y)\big]Af​(x,y)=p1​[r1​x+f((1−r1​)x,y)] is the return of an A-choice followed by optimal continuation and Bf(x,y)=p2[r2y+f(x, (1−r2)y)]B_f(x,y) = p_2\big[r_2y + f(x,\,(1-r_2)y)\big]Bf​(x,y)=p2​[r2​y+f(x,(1−r2​)y)] that of a B-choice. The NNN-stage returns are f1(x,y)=max⁡(p1r1x, p2r2y)f_1(x,y) = \max(p_1r_1x,\ p_2r_2y)f1​(x,y)=max(p1​r1​x, p2​r2​y) and fN+1=max⁡(AfN,BfN)f_{N+1} = \max(A_{f_N}, B_{f_N})fN+1​=max(AfN​​,BfN​​). The A-region of a value function is the set of points of the closed quadrant where the A-branch attains the maximum; the B-region is defined in the same way.

In the generalization, a use of mine iii has KKK outcomes: outcome kkk occurs with probability pikp_{ik}pik​, yields cikxic_{ik}x_icik​xi​ and leaves cik′xi=(1−cik)xic'_{ik}x_i = (1-c_{ik})x_icik′​xi​=(1−cik​)xi​ in the mine, and 1−∑kpik1 - \sum_k p_{ik}1−∑k​pik​ is the probability that the machine is destroyed. With nnn mines the equation is

f(x1,…,xn)=max⁡i∑k=1Kpik[cikxi+f(x1,…,cik′xi,…,xn)].(4)f(x_1,\dots,x_n) = \max_i \sum_{k=1}^{K} p_{ik}\big[c_{ik}x_i + f(x_1,\dots,c'_{ik}x_i,\dots,x_n)\big]. \tag{4}f(x1​,…,xn​)=imax​k=1∑K​pik​[cik​xi​+f(x1​,…,cik′​xi​,…,xn​)].(4)

"The solution" of an equation always means its unique solution in the class of functions bounded in every rectangle 0≤x≤Xˉ0 \le x \le \bar X0≤x≤Xˉ, 0≤y≤Yˉ0 \le y \le \bar Y0≤y≤Yˉ (or every box 0≤xi≤Xˉi0 \le x_i \le \bar X_i0≤xi​≤Xˉi​), per Bellman's footnote 7.

Formalization targets

Goal: Chapter II, Theorem 4 (the index rule for nnn mines)

Under pik≥0p_{ik} \ge 0pik​≥0, ∑kpik<1\sum_k p_{ik} < 1∑k​pik​<1, 0≤cik≤10 \le c_{ik} \le 10≤cik​≤1, cik+cik′=1c_{ik} + c'_{ik} = 1cik​+cik′​=1, equation (4) has a unique solution bounded on boxes, and at every state xxx any index maximizing

Di(x)=∑kpikcik1−∑kpik  xiD_i(x) = \frac{\sum_{k} p_{ik}c_{ik}}{1-\sum_{k} p_{ik}}\;x_iDi​(x)=1−∑k​pik​∑k​pik​cik​​xi​

attains the maximum in (4). Ties among the maximizers may be broken arbitrarily.

Milestones

  1. Theorem 1: for ∣pi∣<1|p_i| < 1∣pi​∣<1 and 0≤ri<10 \le r_i < 10≤ri​<1, (5.1) has a unique solution bounded in every rectangle, and it is continuous on the closed quadrant.
  2. Theorem 2: for 0≤pi<10 \le p_i < 10≤pi​<1, 0≤ri≤10 \le r_i \le 10≤ri​≤1, the solution takes the A-branch when p1r1x/(1−p1)>p2r2y/(1−p2)p_1r_1x/(1-p_1) > p_2r_2y/(1-p_2)p1​r1​x/(1−p1​)>p2​r2​y/(1−p2​), the B-branch when the reverse inequality holds, and both on equality.
  3. Theorem 3: the same rule for two mines with KKK outcomes per use.
  4. Theorem 5: for each NNN, the NNN-stage process has exactly two decision regions: a sector along the xxx-axis where A is optimal and a sector along the yyy-axis where B is optimal, separated by a ray through the origin.
  5. Theorem 6: as NNN grows, the regions of fNf_NfN​ move monotonically, and from some N0N_0N0​ on they coincide with those of fff.
  6. Theorem 7: if ggg solves (5.1) with an added term hhh, then ∣f−g∣≤max⁡R∣h∣/q|f - g| \le \max_R|h|/q∣f−g∣≤maxR​∣h∣/q on every rectangle RRR, where q=min⁡(1−p1,1−p2)q = \min(1-p_1, 1-p_2)q=min(1−p1​,1−p2​).

Significance

The index rule reduces the choice among nnn mines to computing nnn numbers. Each one depends only on its own mine, as the ratio of immediate expected gain to immediate expected loss. Without the theorem, an optimal policy for the NNN-stage process is a word in nnn letters whose number of candidates grows like nNn^NnN. The finite-horizon theorems show that the same rule is exactly optimal for every horizon beyond a finite N0N_0N0​, and the stability theorem bounds how much the solution moves when the equation is perturbed.

Theorem 2's content is also the target of the 1954-paper mission, where it is stated for the supremum of expected returns over choice sequences. Those statements (BellmanTheoryDP.GoldMining.gold_mining_decision_rule, …optimal_return_functional_equation) are included here as reference items. They concern a different object: the book's theorems are about the unique bounded solution of (5.1), and the two coincide once (5.1) is known to characterize the optimal return. None of the chapter's results has a machine-checked proof on the platform yet. The nnn-mine rule (Theorem 4) and the finite-horizon results (Theorems 5 and 6) are not stated anywhere on the platform.

Difficulty

The equation for the boundary between the regions involves the unknown function fff, so equating the two branches of (5.1) does not by itself locate the boundary. Comparing the orders "A then B" and "B then A" determines the index line, but only on the assumption that there are just two regions. Bellman's Figure 1 shows why that assumption carries real content: homogeneity alone only makes the regions unions of sectors, which could alternate. The assumption is not automatic either. In § 13 a third, compromise choice is added, and a counterexample shows that the three-choice problem need not have the analogous three-sector structure. For the finite-horizon process the boundary ray of fNf_NfN​ generally differs from the index line, and Theorems 5 and 6 are statements about how it differs.

Formalization scope

Namespace BellmanDP.GoldMining. Values are real functions ℝ → ℝ → ℝ (two mines) or (Fin n → ℝ) → ℝ (n mines); equations are imposed only on the closed quadrant or orthant, and uniqueness means agreement there. Mines are Fin n with n≥1n \ge 1n≥1 added (with no mine the maximum in (4) is empty). Outcomes are Fin K (Theorem 3's NNN). A maximum over two branches is max, and a maximum over mines is encoded as "every alternative is at most f(x)f(x)f(x) and one equals it". The class "bounded in any rectangle" is BoundedOnRectangles, and for nnn mines it is BoundedOnBoxes. The NNN-stage returns are goldIter N, with goldIter 0 = 0 so that goldIter 1 is the book's f1f_1f1​.

Choices made explicit:

  • Theorem 1 keeps the book's signed range ∣pi∣<1|p_i| < 1∣pi​∣<1 (footnote 2), while Theorems 2, 5, 6 and 7 use the range of § 8 and Theorem 2, 0≤pi<10 \le p_i < 10≤pi​<1, 0≤ri≤10 \le r_i \le 10≤ri​≤1.
  • The goal asserts existence and uniqueness of the bounded solution of (4) together with the index rule. This is how "the solution" is meant in the book; the extension of Theorem 1 to (4) is not a separate numbered result.
  • The goal's conclusion is the book's: a maximizer of DDD is optimal. It does not also assert that the other indices are suboptimal.
  • Theorem 5's printed statement is only "there are two decision regions". It is formalized as the ray-separation statement its proof establishes, and is titled as the precise reading. Theorem 6's "converge in a monotone fashion" is formalized as monotonicity of the regions as sets, in one of the two directions.
  • Theorem 7 adds the hypothesis that hhh is bounded in every rectangle, which is what gives the perturbed equation a solution in the class. max⁡R∣h∣\max_R|h|maxR​∣h∣ is expressed through any bound MMM of ∣h∣|h|∣h∣ on RRR.

A statement of the index rule that assumes the index policy's return satisfies (5.1) and calls it "the solution" without the bounded-class uniqueness would prove nothing about optimality. Here every theorem is about solutions in the bounded class, whose uniqueness is Theorem 1 (and part of the goal).

Contraction estimates on rectangles (Theorems 1 and 7) are reusable across the other functional-equation chapters of this series. Proofs of the goal via general index theory are welcome, provided they discharge the statements as written.

Selected references

  • Richard Bellman, Dynamic Programming, Princeton University Press, 1957; Princeton Landmarks in Mathematics ed., 2010, Chapter II, pp. 61–80. https://doi.org/10.2307/j.ctv1nxcw0f
  • Richard Bellman, The theory of dynamic programming, Bulletin of the American Mathematical Society 60 (1954), 503–515. https://doi.org/10.1090/S0002-9904-1954-09848-8
  • J. C. Gittins, Bandit processes and dynamic allocation indices, Journal of the Royal Statistical Society, Series B 41 (1979), 148–177. https://doi.org/10.1111/j.2517-6161.1979.tb01068.x
11 thms2 active usersReviewed
🏆Completed
Dynamic ProgrammingOptimization·Captain: mikedeng1

Bellman's Dynamic Programming II: Fibonacci Search for the Maximum of a Unimodal FunctionTextbook

Motivation

Many optimization routines contain an inner step that maximizes a function of one variable whose values are expensive to compute: a line search inside a multivariate method, a tuning parameter chosen by simulation, a stage of a dynamic program in which each evaluation requires solving a subproblem. When the only structural information is that the function has a single peak, the natural question is how to place the evaluations so that the peak is pinned down as tightly as possible with a fixed budget. Richard Bellman's Dynamic Programming (1957) takes up this question in Chapter I, § 22, as an illustration of the functional-equation method, and answers it with the Fibonacci numbers.

Timeline.

  • 1953. J. Kiefer, Sequential minimax search for a maximum (Proc. Amer. Math. Soc. 4, 502–506), proves that Fibonacci search is minimax optimal among sequential procedures for a unimodal function on an interval. doi:10.1090/S0002-9939-1953-0055639-3
  • 1957. Bellman, Dynamic Programming, Chapter I, § 22 (pp. 34–36), recasts the result in the language of the principle of optimality: Theorem 11 for the continuous problem and Theorem 12 for its discrete version.

Setting

Let L>0L > 0L>0. A function f:[0,L]→Rf : [0, L] \to \mathbb Rf:[0,L]→R is strictly unimodal with maximum at m∈[0,L]m \in [0, L]m∈[0,L] if fff is strictly increasing on [0,m][0, m][0,m] and strictly decreasing on [m,L][m, L][m,L]. No continuity is assumed, and the peak may sit at an endpoint. The point mmm is then the unique maximizer of fff.

A search procedure is a finite decision tree. At each internal node it names a point xxx at which fff is evaluated and moves to a subtree chosen by the observed value f(x)f(x)f(x); at a leaf it announces a closed interval [a,b][a, b][a,b]. The kkk-th evaluation point may depend on all values seen so far, but on nothing else about fff. The cost of the procedure on fff is the number of evaluations along the path that fff determines.

The procedure locates the maximum on [0,L][0, L][0,L] within unit length using at most nnn values if, for every strictly unimodal fff on [0,L][0, L][0,L] with maximum at mmm, it evaluates fff at most nnn times and announces [a,b][a, b][a,b] with b−a≤1b - a \le 1b−a≤1 and m∈[a,b]m \in [a, b]m∈[a,b]. Write Ln\mathcal L_nLn​ for the set of lengths L>0L > 0L>0 for which such a procedure exists, and following Bellman's Eq. (22.1),

Fn=sup⁡Ln.F_n = \sup \mathcal L_n .Fn​=supLn​.

The book's Fibonacci numbers are F0=F1=1F_0 = F_1 = 1F0​=F1​=1, Fn=Fn−1+Fn−2F_n = F_{n-1} + F_{n-2}Fn​=Fn−1​+Fn−2​ for n≥2n \ge 2n≥2 (in Lean, bookFib).

In the discrete version, fff is defined on the points 0,1,…,N−10, 1, \dots, N-10,1,…,N−1, strictly increasing up to its maximizer mmm and strictly decreasing after it. KnK_nKn​ is the largest NNN for which some procedure evaluates at most nnn values and then names mmm exactly, for every such fff.

Formalization targets

Goal: Chapter I, Theorem 11

sup⁡Ln=Fnfor every n≥0.\sup \mathcal L_n = F_n \qquad \text{for every } n \ge 0 .supLn​=Fn​for every n≥0.

The supremum is not attained once n≥2n \ge 2n≥2 (with two evaluations every length 2−ε2 - \varepsilon2−ε is searchable, the length 222 is not), which is why the statement is about the supremum rather than a maximum.

Milestones

  1. sup⁡L1=1\sup \mathcal L_1 = 1supL1​=1: one value carries no information (proof of Theorem 11, p. 34).
  2. sup⁡L2=2\sup \mathcal L_2 = 2supL2​=2 (p. 35).
  3. Eq. (22.3): for n≥2n \ge 2n≥2 every L∈LnL \in \mathcal L_nL∈Ln​ satisfies L<Fn−1+Fn−2L < F_{n-1} + F_{n-2}L<Fn−1​+Fn−2​.
  4. For n≥2n \ge 2n≥2 every 0<L<Fn−1+Fn−20 < L < F_{n-1} + F_{n-2}0<L<Fn−1​+Fn−2​ lies in Ln\mathcal L_nLn​ (p. 36).
  5. Eq. (22.4): F20>10,000F_{20} > 10{,}000F20​>10,000, hence for every L>0L > 0L>0 twenty evaluations locate the maximum within an interval of length 10−4L10^{-4} L10−4L.
  6. Eqs. (22.5)–(22.6): with r1,2=(1±5)/2r_{1,2} = (1 \pm \sqrt5)/2r1,2​=(1±5​)/2,
Fn=r2−1r2−r1r1 n+1−r1r2−r1r2 n,Fn+1Fn→r1.F_n = \frac{r_2 - 1}{r_2 - r_1} r_1^{\,n} + \frac{1 - r_1}{r_2 - r_1} r_2^{\,n}, \qquad \frac{F_{n+1}}{F_n} \to r_1 .Fn​=r2​−r1​r2​−1​r1n​+r2​−r1​1−r1​​r2n​,Fn​Fn+1​​→r1​.
  1. Theorem 12, corrected: K0=K1=1K_0 = K_1 = 1K0​=K1​=1, K2=2K_2 = 2K2​=2, K3=4K_3 = 4K3​=4, and
Kn=Fn+1−1(n≥3).K_n = F_{n+1} - 1 \qquad (n \ge 3).Kn​=Fn+1​−1(n≥3).

Significance

The result. Theorem 11 is an exact minimax statement: nnn evaluations shrink the interval of uncertainty for the peak of a unimodal function by a factor of at most Fn≈r1 n/5F_n \approx r_1^{\,n}/\sqrt5Fn​≈r1n​/5​, and no adaptive rule, however clever, does better. It certifies Fibonacci search as optimal and golden-section search as asymptotically optimal, which is the reason these methods are the default line searches when derivatives are unavailable. Eq. (22.4) quantifies the rate: twenty evaluations give four decimal digits.

Formalizing it. The theorem has been proved since 1953; the work here is a machine-checked proof of the full minimax statement over all adaptive procedures, including the lower bound. That half is a statement about every decision tree and requires an adversary argument, which is exactly the kind of reasoning that is informal in the book and easy to get wrong. The discrete Theorem 12 is misprinted in the book (see below), so a formal proof also settles the correct values. We are not aware of an existing formalization of the optimality of Fibonacci search in Lean or another proof assistant. The Binet formula and the ratio limit are in Mathlib for Mathlib's indexing (Real.coe_fib_eq, tendsto_fib_succ_div_fib_atTop); milestone 6 only transfers them to the book's indexing.

Difficulty

The upper bound L<Fn−1+Fn−2L < F_{n-1} + F_{n-2}L<Fn−1​+Fn−2​ must hold for every procedure, not only for procedures that follow the "compare two points, discard a piece, keep the surviving point" pattern of the book's figures. A procedure may place its second point depending on the first value, may re-evaluate points, may evaluate outside [0,L][0, L][0,L], and may branch on the exact values rather than on their order. The book's argument tacitly restricts to that pattern, so the lower bound has to be established for arbitrary trees, where the information carried by exact values, repeated or wasted evaluations and branch-dependent placements all have to be accounted for. The bookkeeping is delicate because the surviving sets are half-open or open intervals, and whether the endpoints are included decides that the supremum is not attained.

The naive attempt of proving a bound only for "one new point per step inside the current bracket" procedures does not prove the goal: the goal quantifies over all decision trees.

Formalization scope

  • Model fixed. Deterministic adaptive procedures (decision trees branching on the exact real value observed), exact function values, cost equal to the number of evaluations; this is one of the models that Bellman's footnote 8 alludes to ("It is actually not easy to specify precisely what we mean by an optimal search procedure"). Functions are ℝ → ℝ, constrained only on [0,L][0, L][0,L]; evaluations outside [0,L][0, L][0,L] are allowed and useless.
  • Output. A closed interval [a,b][a, b][a,b] with a≤ba \le ba≤b, b−a≤1b - a \le 1b−a≤1 containing the maximizer. It need not lie inside [0,L][0, L][0,L] or have length exactly one; for L≥1L \ge 1L≥1 this is equivalent to Bellman's "sub-interval of unit length".
  • Indexing. The book's FnF_nFn​ is a separate definition bookFib with F0=F1=1F_0 = F_1 = 1F0​=F1​=1; in Mathlib's indexing FnF_nFn​ is Nat.fib (n + 1). The goal is stated for every n≥0n \ge 0n≥0; the book calls F0F_0F0​ a convention, and in this model sup⁡L0=1\sup \mathcal L_0 = 1supL0​=1 agrees with it.
  • Sup, not max. Theorem 11 is stated with IsLUB, never as "a procedure exists for L=FnL = F_nL=Fn​", which is false for n≥2n \ge 2n≥2. Theorem 12 is stated with IsGreatest, which asserts that the maximum exists.
  • Implicit ranges. Eq. (22.3) is stated unconditionally for all n≥2n \ge 2n≥2 (the book proves it under the induction hypothesis). "Within 10−410^{-4}10−4 of the original interval length" is read as an interval of length at most 10−4L10^{-4} L10−4L.
  • Misprint corrected. Theorem 12 prints Kn=1+FnK_n = 1 + F_nKn​=1+Fn​ for n≥3n \ge 3n≥3. On seven points, four evaluations suffice: evaluate points 3 and 5; if f(3)>f(5)f(3) > f(5)f(3)>f(5) the peak is among points 1–4 with f(3)f(3)f(3) known, and evaluating point 2 and then point 1 or 4 finds it; the case f(5)>f(3)f(5) > f(3)f(5)>f(3) is symmetric, and f(3)=f(5)f(3) = f(5)f(3)=f(5) forces the peak at point 4. So K4≥7>6=1+F4K_4 \ge 7 > 6 = 1 + F_4K4​≥7>6=1+F4​. The mission states Kn=Fn+1−1K_n = F_{n+1} - 1Kn​=Fn+1​−1 for n≥3n \ge 3n≥3, which agrees with the printed K3=4K_3 = 4K3​=4 and keeps all printed initial values. The printed text is kept verbatim in the milestone.
  • Ruling out trivializations. The procedure never sees fff except through the values it requests, and it must succeed for every strictly unimodal fff with one fixed tree; "some interval of length one contains the maximizer" with no procedure, or a procedure allowed to depend on fff, would make the problem trivial and is not what is stated.
  • Contributions welcome. A reusable decision-tree framework for query-complexity lower bounds, lemmas about which finite sets of observed values are consistent with a strictly unimodal function, and the Fibonacci search tree itself as a construction.

Selected references

  • R. Bellman, Dynamic Programming, Princeton University Press, 1957; Princeton Landmarks in Mathematics ed., 2010, Chapter I, § 22, pp. 34–36. doi:10.2307/j.ctv1nxcw0f
  • J. Kiefer, Sequential minimax search for a maximum, Proceedings of the American Mathematical Society 4 (1953), 502–506. doi:10.1090/S0002-9939-1953-0055639-3
9 thms2 active usersReviewed
🏆Completed
Dynamic ProgrammingOptimization·Captain: mikedeng1

Bellman's Dynamic Programming I: Existence and Uniqueness for the Multi-Stage Allocation EquationTextbook

Motivation

Chapter I of Richard Bellman's Dynamic Programming (Princeton University Press, 1957) opens the book with a multi-stage allocation process: a resource is divided, stage after stage, between two activities, each of which yields an immediate return and leaves behind a depleted remainder that is re-divided at the next stage. The chapter uses this process as its prototype for "a number of multi-stage processes, of diverse origin, but similar analytic structure" (§ 8, p. 11), and the techniques it introduces here — the functional equation of the infinite process, successive approximations, approximation in policy space, transfer of convexity and concavity through the recurrence, and a stability estimate — reappear throughout the book and in the later theory of Markov decision processes.

When the number of stages is large, Bellman replaces the finite sequence of recurrences by a single equation for the infinite process. As the book stresses (p. 11), this replacement is only useful once one knows that the equation has a solution and possesses "no extraneous solutions". This mission formalizes that existence and uniqueness theorem and the chapter's main structural results that rest on it.

Setting

A quantity x≥0x \ge 0x≥0 is split into y∈[0,x]y \in [0,x]y∈[0,x], assigned to a first activity with return g(y)g(y)g(y), and x−yx - yx−y, assigned to a second activity with return h(x−y)h(x-y)h(x−y). After the stage the first allocation has been reduced to ayayay and the second to b(x−y)b(x-y)b(x−y), and the process continues with the quantity ay+b(x−y)ay + b(x-y)ay+b(x−y). Writing

T(f,y)=g(y)+h(x−y)+f(ay+b(x−y)),T(f,y) = g(y) + h(x-y) + f\big(ay + b(x-y)\big),T(f,y)=g(y)+h(x−y)+f(ay+b(x−y)),

the total return f(x)f(x)f(x) of the infinite process satisfies the allocation equation (Bellman's (8.1))

f(x)=max⁡0≤y≤xT(f,y),x≥0.f(x) = \max_{0 \le y \le x} T(f,y), \qquad x \ge 0.f(x)=0≤y≤xmax​T(f,y),x≥0.

The standing hypotheses of Chapter I, Theorem 1 are:

  1. ggg and hhh are continuous on [0,∞)[0,\infty)[0,∞) and g(0)=h(0)=0g(0) = h(0) = 0g(0)=h(0)=0;
  2. with m(x)=max⁡0≤y≤xmax⁡(∣g(y)∣,∣h(y)∣)m(x) = \max_{0 \le y \le x} \max(|g(y)|, |h(y)|)m(x)=max0≤y≤x​max(∣g(y)∣,∣h(y)∣) and c=max⁡(a,b)c = \max(a,b)c=max(a,b), the series ∑n=0∞m(cnx)\sum_{n=0}^\infty m(c^n x)∑n=0∞​m(cnx) converges for every x≥0x \ge 0x≥0;
  3. 0≤a<10 \le a < 10≤a<1 and 0≤b<10 \le b < 10≤b<1.

The successive approximations from an initial function f0f_0f0​ are fN+1(x)=max⁡0≤y≤xT(fN,y)f_{N+1}(x) = \max_{0 \le y \le x} T(f_N, y)fN+1​(x)=max0≤y≤x​T(fN​,y). A policy is a function y0(x)y_0(x)y0​(x) with 0≤y0(x)≤x0 \le y_0(x) \le x0≤y0​(x)≤x; its return is the total of the stage returns obtained by using y0y_0y0​ at every stage.

In Lean all objects live in the namespace BellmanDP.Allocation: allocT is TTT, allocM is mmm, AllocationHyp g h a b bundles the three hypotheses, IsAllocationSolution g h a b f is the equation with the maximum attained, allocIter is the sequence fNf_NfN​, and policyReturn is the return of a policy.

Formalization targets

Goal: Chapter I, Theorem 1

Under the three hypotheses, there is a function fff with

f(x)=max⁡0≤y≤x[g(y)+h(x−y)+f(ay+b(x−y))](x≥0),f(0)=0, f continuous at 0,f(x) = \max_{0 \le y \le x}\big[g(y) + h(x-y) + f(ay + b(x-y))\big] \quad (x \ge 0), \qquad f(0) = 0,\ f \text{ continuous at } 0,f(x)=0≤y≤xmax​[g(y)+h(x−y)+f(ay+b(x−y))](x≥0),f(0)=0, f continuous at 0,

this fff is continuous on [0,∞)[0,\infty)[0,∞), and every solution continuous at 000 with value 000 there coincides with fff on [0,∞)[0,\infty)[0,∞).

Milestones

  1. Theorem 2 — from any f0f_0f0​ continuous on [0,∞)[0,\infty)[0,∞) with f0(0)=0f_0(0) = 0f0​(0)=0, the successive approximations converge to fff uniformly on every finite interval.
  2. Theorem 3 — started from the return of a continuous policy, the successive approximations increase monotonically and converge to fff uniformly on every finite interval.
  3. Lemma 1 — if G(x,y)G(x,y)G(x,y) is jointly concave on x,y≥0x,y \ge 0x,y≥0, then x↦max⁡0≤y≤xG(x,y)x \mapsto \max_{0 \le y \le x} G(x,y)x↦max0≤y≤x​G(x,y) is concave.
  4. Theorem 4 — if ggg and hhh are convex, fff is convex and for each xxx the maximum is attained at y=0y = 0y=0 or y=xy = xy=x.
  5. Theorem 5 — if ggg and hhh are strictly concave, fff is strictly concave and the maximizing yyy is unique for every xxx.
  6. Theorem 9 — for the general equation f(x)=max⁡0≤y≤x[u(x,y)+f(ay+b(x−y))]f(x) = \max_{0\le y\le x}[u(x,y) + f(ay+b(x-y))]f(x)=max0≤y≤x​[u(x,y)+f(ay+b(x−y))], the continuous solutions for returns uuu and vvv satisfy ∣f(x)−F(x)∣≤∑n≥0D(cnx)|f(x) - F(x)| \le \sum_{n \ge 0} D(c^n x)∣f(x)−F(x)∣≤∑n≥0​D(cnx), where D(z)D(z)D(z) is the maximum of ∣u−v∣|u - v|∣u−v∣ over 0≤y≤x≤z0 \le y \le x \le z0≤y≤x≤z.

Significance

Theorem 1 is what gives meaning to "the solution" of the allocation equation, which every later result of the chapter refers to. Without the side condition at 000 uniqueness fails: when g=h=0g = h = 0g=h=0, every constant function and the indicator of (0,∞)(0,\infty)(0,∞) solve the equation. Theorems 2 and 3 turn the existence proof into computational procedures (value iteration and policy improvement), and Theorem 3's monotonicity is the prototype of the policy-improvement property. Theorems 4 and 5 are the first structural results on optimal policies — all-or-nothing allocation under convex returns, a unique interior-or-boundary allocation under strictly concave returns — and Theorem 9 bounds the error made by replacing a return function with a simpler approximation.

These are classical results with published proofs in the book. No machine-checked version of any of them is known to this mission; the work is to formalize the proofs, building reusable infrastructure for functional equations of the form f(x)=max⁡y∈D(x)[r(x,y)+f(τ(x,y))]f(x) = \max_{y \in D(x)}[r(x,y) + f(\tau(x,y))]f(x)=maxy∈D(x)​[r(x,y)+f(τ(x,y))] with a contracting transition τ\tauτ.

Difficulty

The equation is not a contraction in the supremum norm on [0,∞)[0,\infty)[0,∞): ggg and hhh may be unbounded, so no global Banach fixed-point argument applies. Control comes instead from the shrinking of the argument, ay+b(x−y)≤cxay + b(x-y) \le cxay+b(x−y)≤cx, which propagates a local estimate near 000 out to every finite interval, and the summability hypothesis (1b) is what makes the resulting series converge uniformly on bounded sets. Uniqueness cannot come from a norm estimate either; it rests on continuity at 000 alone. The maximum in the equation must be shown to be attained, which requires continuity of the limit function; the book notes (p. 13) that the monotone argument for nonnegative g,hg,hg,h gives only a supremum. For Theorems 4 and 5, convexity and concavity must be carried through each approximation and preserved in the limit, and strict concavity must be recovered for the limit, where a pointwise limit of strictly concave functions is only concave.

Formalization scope

  • Functions are ℝ → ℝ; only their values on [0,∞)[0,\infty)[0,∞) enter any hypothesis or conclusion. Continuity at 000 is one-sided (ContinuousWithinAt f (Set.Ici 0) 0), and uniqueness is equality on [0,∞)[0,\infty)[0,∞).
  • The maximum in the equation is encoded as IsGreatest of {T(f,y):0≤y≤x}\{T(f,y) : 0 \le y \le x\}{T(f,y):0≤y≤x}, so a solution attains its maximum at every x≥0x \ge 0x≥0. The maxima inside definitions (mmm, fN+1f_{N+1}fN+1​, the triangle maximum of Theorem 9) are real suprema (sSup) of images of compact nonempty sets of continuous functions, which equal the book's maxima under the stated hypotheses.
  • The later theorems refer to "the solution" of Theorem 1 by quantifying over solutions that are continuous at 000 and vanish there; they never quantify over arbitrary solutions of the equation, for which the conclusions are false.
  • Theorem 3's "converges uniformly" is stated uniformly on every finite interval [0,R][0,R][0,R], the sense in which Theorem 2 and the series (11.10) used in its proof converge. Its initial function is defined explicitly as the series of stage returns along the trajectory of the policy.
  • Theorem 4's "yyy will equal 000 or xxx" is stated as: an endpoint is a maximizer. It does not say every maximizer is an endpoint, which fails for g=h=0g = h = 0g=h=0.
  • Each theorem carries its own parameter range as printed: 0≤a,b<10 \le a, b < 10≤a,b<1 for Theorems 1–5, 0<a,b<10 < a, b < 10<a,b<1 for Theorem 9.
  • Not included: Theorem 6 (the policy structure under strict concavity, which uses f′f'f′ without a hypothesis making fff differentiable), Theorems 7 and 8 (explicit solutions), Theorem 10 (the multi-dimensional process), and Theorems 11–12 on Fibonacci search, which form a separate mission.

Welcome contributions: a general existence-and-uniqueness theorem for equations f(x)=sup⁡y∈D(x)[r(x,y)+f(τ(x,y))]f(x) = \sup_{y \in D(x)}[r(x,y) + f(\tau(x,y))]f(x)=supy∈D(x)​[r(x,y)+f(τ(x,y))] with ∥τ(x,y)∥≤c∥x∥\|\tau(x,y)\| \le c\|x\|∥τ(x,y)∥≤c∥x∥, and a lemma that parametric maxima over [0,x][0,x][0,x] of continuous functions are continuous in xxx.

Selected references

  • R. Bellman, Dynamic Programming, Princeton University Press, 1957; Princeton Landmarks in Mathematics edition, 2010. https://doi.org/10.2307/j.ctv1nxcw0f — Chapter I, §§ 8–14 and 18, pp. 11–29.
  • R. Bellman, "On the theory of dynamic programming", Proceedings of the National Academy of Sciences 38 (1952), 716–719. https://doi.org/10.1073/pnas.38.8.716
10 thms2 active usersReviewed
🏆Completed
OptimizationProbability·Captain: mikedeng1

Analysis and Algorithms for Service Parts Supply Chains IV: Backorder Convexity and Everett's TheoremTextbook

Motivation

Service parts (spares for aircraft, machines, and networks) are typically managed item by item with a one-for-one replenishment policy, the (s−1,s)(s-1, s)(s−1,s) policy: every unit withdrawn to meet a demand triggers an order for one replacement, so the inventory position stays at the stock level sss. A firm stocking thousands of such items at one location has to choose all the stock levels together, trading a budget on inventory investment against a service measure. Chapter 3 of Muckstadt, Analysis and Algorithms for Service Parts Supply Chains (Springer 2005, DOI 10.1007/b138879) sets up the three standard service measures (fill rate, ready rate, expected backorders), shows which of them have the convexity that optimization needs, and solves two multi-item stocking problems: minimum expected backorders under an investment budget, by Lagrangian relaxation justified by Everett's theorem, and maximum average fill rate, by a greedy marginal-analysis rule.

The Lagrangian method goes back to Everett (Operations Research 1963); the search for the multiplier in one-constraint problems of this kind is Fox and Landi (Operations Research 1970); the compound Poisson (s−1,s)(s-1,s)(s−1,s) model is Feeney and Sherbrooke (Management Science 1966). The same separable Lagrangian structure underlies the multi-echelon METRIC-type models later in the book.

Setting

A single item is stocked at one location, demand not met from stock is backordered, and customer orders arrive as a Poisson process of rate λ>0\lambda > 0λ>0. An order is for jjj units with probability uju_juj​, where u0=0u_0 = 0u0​=0 and the mean order size uˉ=∑jjuj\bar u = \sum_j j u_juˉ=∑j​juj​ is finite (compound Poisson demand; simple Poisson demand is u1=1u_1 = 1u1​=1). Resupply times have mean τˉ>0\bar\tau > 0τˉ>0. The steady-state probability that xxx units are in resupply is

p(0∣λτˉ)=e−λτˉ,p(x∣λτˉ)=∑j≥1e−λτˉ(λτˉ)jj! ux(j)(x≥1),p(0 \mid \lambda\bar\tau) = e^{-\lambda\bar\tau}, \qquad p(x \mid \lambda\bar\tau) = \sum_{j \ge 1} e^{-\lambda\bar\tau}\frac{(\lambda\bar\tau)^j}{j!}\,u^{(j)}_x \quad (x \ge 1),p(0∣λτˉ)=e−λτˉ,p(x∣λτˉ)=j≥1∑​e−λτˉj!(λτˉ)j​ux(j)​(x≥1),

where ux(j)u^{(j)}_xux(j)​ is the probability that jjj orders total xxx units. In this mission p(⋅∣λτˉ)p(\cdot \mid \lambda\bar\tau)p(⋅∣λτˉ) is the definition of the model, not a consequence of Palm's theorem. The mean lead-time demand is μ=λτˉuˉ\mu = \lambda\bar\tau\bar uμ=λτˉuˉ, and the book also writes p(x∣μ)p(x \mid \mu)p(x∣μ).

For a stock level s∈{0,1,2,… }s \in \{0, 1, 2, \dots\}s∈{0,1,2,…}:

  • the ready rate is R(s)=∑x≤sp(x∣λτˉ)R(s) = \sum_{x \le s} p(x \mid \lambda\bar\tau)R(s)=∑x≤s​p(x∣λτˉ);
  • the expected backorders are B(s)=∑x>s(x−s) p(x∣λτˉ)B(s) = \sum_{x > s}(x - s)\,p(x \mid \lambda\bar\tau)B(s)=∑x>s​(x−s)p(x∣λτˉ);
  • the expected on-hand inventory is ∑x≤s(s−x) p(x∣λτˉ)\sum_{x \le s}(s - x)\,p(x \mid \lambda\bar\tau)∑x≤s​(s−x)p(x∣λτˉ);
  • under simple Poisson demand the fill rate is F(s)=∑x<sp(x∣λτˉ)F(s) = \sum_{x < s} p(x \mid \lambda\bar\tau)F(s)=∑x<s​p(x∣λτˉ).

Forward differences are Δf(s)=f(s+1)−f(s)\Delta f(s) = f(s+1) - f(s)Δf(s)=f(s+1)−f(s) and Δ2f(s)=Δf(s+1)−Δf(s)\Delta^2 f(s) = \Delta f(s+1) - \Delta f(s)Δ2f(s)=Δf(s+1)−Δf(s); discrete convexity means Δ2f≥0\Delta^2 f \ge 0Δ2f≥0.

With nnn items, unit costs ci>0c_i > 0ci​>0 and budget bbb, Problem 4 (3.40) is

min⁡∑iBi(si)s.t.∑ici [si−μi+Bi(si)]≤b,si∈{0,1,… }.\min \sum_i B_i(s_i) \quad \text{s.t.} \quad \sum_i c_i\,[s_i - \mu_i + B_i(s_i)] \le b,\quad s_i \in \{0,1,\dots\}.mini∑​Bi​(si​)s.t.i∑​ci​[si​−μi​+Bi​(si​)]≤b,si​∈{0,1,…}.

For a multiplier θ>0\theta > 0θ>0, the item-wise criterion defines si∗(θ)s_i^*(\theta)si∗​(θ) as the least sss with ∑x≤sp(x∣μi)≥1/(1+θci)\sum_{x \le s} p(x \mid \mu_i) \ge 1/(1 + \theta c_i)∑x≤s​p(x∣μi​)≥1/(1+θci​), and C(θ)=∑ici [si∗(θ)−μi+Bi(si∗(θ))]C(\theta) = \sum_i c_i\,[s_i^*(\theta) - \mu_i + B_i(s_i^*(\theta))]C(θ)=∑i​ci​[si∗​(θ)−μi​+Bi​(si∗​(θ))].

Formalization targets

Goal: the Lagrangian stock levels solve Problem 4

For every θ>0\theta > 0θ>0, each si∗(θ)s_i^*(\theta)si∗​(θ) exists and

∑ici [si−μi+Bi(si)]≤C(θ) ⟹ ∑iBi(si∗(θ))≤∑iBi(si)\sum_i c_i\,[s_i - \mu_i + B_i(s_i)] \le C(\theta) \ \Longrightarrow\ \sum_i B_i(s_i^*(\theta)) \le \sum_i B_i(s_i)i∑​ci​[si​−μi​+Bi​(si​)]≤C(θ) ⟹ i∑​Bi​(si∗​(θ))≤i∑​Bi​(si​)

for every vector sss of nonnegative integer stock levels. That is, s∗(θ)s^*(\theta)s∗(θ) is optimal for Problem 4 at budget b=C(θ)b = C(\theta)b=C(θ). This is what the book asserts by combining Theorem 10 (p. 57, with the remark on p. 58) and the criterion of p. 61, and it is the basis of its bisection algorithm (p. 63). The goal fixes no numerical constant.

Milestones

  1. Section 3.3, p. 53: ΔF(s)=p(s∣λτˉ)\Delta F(s) = p(s \mid \lambda\bar\tau)ΔF(s)=p(s∣λτˉ) and Δ2F(s)=p(s∣λτˉ) (λτˉ/(s+1)−1)\Delta^2 F(s) = p(s \mid \lambda\bar\tau)\,(\lambda\bar\tau/(s+1) - 1)Δ2F(s)=p(s∣λτˉ)(λτˉ/(s+1)−1), so under simple Poisson demand FFF is discretely concave exactly on s≥⌊λτˉ⌋s \ge \lfloor\lambda\bar\tau\rfloors≥⌊λτˉ⌋ (resp. s≥λτˉ−1s \ge \lambda\bar\tau - 1s≥λτˉ−1 for integer λτˉ\lambda\bar\tauλτˉ).
  2. Section 3.3, p. 55: ΔB(s)=−(1−R(s))\Delta B(s) = -(1 - R(s))ΔB(s)=−(1−R(s)) and Δ2B(s)=p(s+1∣λτˉ)\Delta^2 B(s) = p(s+1 \mid \lambda\bar\tau)Δ2B(s)=p(s+1∣λτˉ).
  3. Theorem 10 (Everett), p. 57.
  4. Section 3.4.2, p. 60: E[On-hand]=s−λτˉuˉ+B(s)E[\text{On-hand}] = s - \lambda\bar\tau\bar u + B(s)E[On-hand]=s−λτˉuˉ+B(s).
  5. Section 3.4.2, p. 61: the least sss with R(s)≥1/(1+θc)R(s) \ge 1/(1+\theta c)R(s)≥1/(1+θc) minimizes f(s)=(1+θc)B(s)+θcsf(s) = (1 + \theta c)B(s) + \theta c sf(s)=(1+θc)B(s)+θcs.
  6. Section 3.4.2, p. 61: s∗(θ)s^*(\theta)s∗(θ) and C(θ)C(\theta)C(θ) are nonincreasing in θ\thetaθ.
  7. Section 3.4.2, p. 63: at θmax⁡=max⁡ici−1(1/p(0∣μi)−1)\theta_{\max} = \max_i c_i^{-1}(1/p(0 \mid \mu_i) - 1)θmax​=maxi​ci−1​(1/p(0∣μi​)−1) every si∗(θmax⁡)=0s_i^*(\theta_{\max}) = 0si∗​(θmax​)=0.
  8. Section 3.4.3, p. 65: every solution produced by the greedy marginal-analysis rule for Problem 5 (3.41), maximum average fill rate subject to ∑icisi≤b\sum_i c_i s_i \le b∑i​ci​si​≤b and si≥⌊λiτˉi⌋s_i \ge \lfloor\lambda_i\bar\tau_i\rfloorsi​≥⌊λi​τˉi​⌋, is optimal at the budget it uses.

Significance

The goal reduces a coupled integer program over thousands of items to one scalar search: for a fixed multiplier each item is solved by a single scan of its distribution function, and each multiplier yields a point on the exact efficient frontier of expected backorders against investment. Milestone 8 does the same for fill rates on the region where they are concave, and milestone 1 explains why that region, s≥⌊λτˉ⌋s \ge \lfloor\lambda\bar\tau\rfloors≥⌊λτˉ⌋, is imposed in practice. Milestone 4 is the identity that turns an investment budget into the constraint of Problem 4.

All results are proved in the book (Theorem 10 with a complete proof; the others by short derivations, the greedy optimality by a sketch). None of them is formalized, as far as the platform shows: there is no Everett-type Lagrangian sufficiency theorem, no compound Poisson backorder function, and no discrete marginal-analysis optimality result. The mission produces a reusable layer for later chapters: the compound Poisson steady-state law with its backorder function, and the Lagrangian machinery the book reuses for multi-echelon systems.

Difficulty

The algebra of first differences is elementary; the difficulties are elsewhere. B(s)B(s)B(s) is an infinite series whose convergence rests on the finiteness of the mean order size, and exchanging the difference with the sum, and identifying ∑xx p(x∣λτˉ)\sum_x x\,p(x \mid \lambda\bar\tau)∑x​xp(x∣λτˉ) with λτˉuˉ\lambda\bar\tau\bar uλτˉuˉ, requires manipulating a doubly infinite sum over order counts and convolution powers. Existence of s∗(θ)s^*(\theta)s∗(θ) requires that the compound Poisson probabilities sum to one. For milestone 8 the obvious argument ("greedy is optimal for concave separable objectives") fails for knapsack constraints with unequal costs at arbitrary budgets; it holds only at the budgets the greedy run generates, and only on the region where every FiF_iFi​ is concave; dropping the floor constraints si≥⌊λiτˉi⌋s_i \ge \lfloor\lambda_i\bar\tau_i\rfloorsi​≥⌊λi​τˉi​⌋ makes it false.

Formalization scope

Stock levels are natural numbers; probabilities, rates, costs and multipliers are reals. The compound Poisson law is a structure with fields λ,τˉ>0\lambda, \bar\tau > 0λ,τˉ>0, an order-size distribution uuu with u0=0u_0 = 0u0​=0, uj≥0u_j \ge 0uj​≥0, ∑juj=1\sum_j u_j = 1∑j​uj​=1, and summable jujj u_jjuj​ (the finite mean is added: without it BBB is infinite). Expected on-hand inventory is the finite sum E[(s−X)+]E[(s - X)^+]E[(s−X)+]. Items are indexed by an arbitrary finite type (nonempty where a maximum over items is taken).

Pinnings and deviations, each stated in the item's Formalization Note:

  • θ>0\theta > 0θ>0 and c>0c > 0c>0. The book allows θ≥0\theta \ge 0θ≥0 in (3.38); at θ=0\theta = 0θ=0 the threshold 111 is never reached and f=Bf = Bf=B has no minimizer.
  • Theorem 10 without convexity and for an arbitrary set SSS: the book assumes f,gf, gf,g convex, but its proof does not use it and the applications are to integer vectors (labelled generalization).
  • BBB's identities for compound Poisson demand. The book derives them under simple Poisson demand and uses them for compound demand on p. 61; strict convexity and strict decrease are stated only for simple Poisson demand, as in the book.
  • Optimality is always against every feasible vector, never an infimum; the greedy procedure is a relation on sequences, covering every tie-breaking rule.
  • Problem 5 keeps the constraints si≥⌊λiτˉi⌋s_i \ge \lfloor\lambda_i\bar\tau_i\rfloorsi​≥⌊λi​τˉi​⌋.

A trivializing formalization is ruled out: the goal is stated for the book's own backorder function BBB built from the compound Poisson law, not for an arbitrary convex function nor for a BBB defined through its differences.

Welcome contributions: summability and normalization lemmas for the compound Poisson law, a general discrete Lagrangian lemma for separable objectives, and proofs of the milestones in any order.

Selected references

  • J. A. Muckstadt, Analysis and Algorithms for Service Parts Supply Chains, Springer, 2005, Chapter 3, pp. 47–65. https://doi.org/10.1007/b138879
  • H. Everett III, Generalized Lagrange multiplier method for solving problems of optimum allocation of resources, Operations Research 11(3):399–417, 1963. https://doi.org/10.1287/opre.11.3.399
  • B. L. Fox and D. M. Landi, Searching for the multiplier in one-constraint optimization problems, Operations Research 18(2):253–262, 1970. https://doi.org/10.1287/opre.18.2.253
  • G. J. Feeney and C. C. Sherbrooke, The (s−1, s) inventory policy under compound Poisson demand, Management Science 12(5):391–411, 1966. https://doi.org/10.1287/mnsc.12.5.391
13 thms2 active usersReviewed
🏆Completed
AnalysisProbabilityStochastic Systems·Captain: mikedeng1

Elements of Queueing Theory I: The Swiss Army Formula of Palm CalculusTextbook

The Swiss Army Formula of Palm Calculus

Background

Chapter 1 of Baccelli and Brémaud's Elements of Queueing Theory builds the calculus that the rest of the book runs on. Its subject is the relation between two ways of looking at the same stationary system: from a clock fixed in time, and from a customer arriving into it. The two are not the same — the interval a random instant falls into is longer than a typical interval, a fact every queueing student meets as the inspection paradox — and the object that makes the difference precise is the Palm probability P⁰_N.

The chapter defines P⁰_N by the Matthes definition in terms of counting,

λ t P⁰_N(A) = E[ Σ_{n ∈ ℤ} 1_A(θ_{T_n}) 1_{(0,t]}(T_n) ],                          (1.2.1)

and everything else is a theorem about it. That ordering is deliberate here too: P⁰_N is carried in the formalization as a predicate satisfying (1.2.1), not as a measure constructed to make Mecke's formula true. If it were the latter, Mecke's formula would be a definition and the inversion formula and the goal theorem would inherit that emptiness.

From (1.2.1) the chapter derives, in order: that P⁰_N is invariant under the point shift (1.2.16); Mecke's formula (1.2.17), which the literature also knows as the generalized Campbell formula; the inversion formula of Ryll-Nardzewski and Slivnyak (1.2.25), which runs back from P⁰_N to P; the mean-value formulas (1.3.2)–(1.3.3); the Neveu exchange formula (1.3.4), which relates two point processes stationary for the same flow; and the Miyazawa rate conservation principle (1.3.10), which balances the drift of a process between its jumps against the rate at which it jumps.

The goal

§1.3.7 then collects all of them into one identity. Its name is the book's own:

Depending on which blade is selected, a Swiss army knife transforms itself into various useful tools. The formula obtained in this subsection is called the Swiss army formula of Palm calculus because it contains the main formulas of this theory, as well as some new ones.

Theorem 1.3.1 (p.29). For arrivals {T_n} with counting measure A and intensity λ_A, departures {τ_n} with counting measure D — not assumed ordered — sojourn times W_n = τ_n − T_n ≥ 0 forming a sequence of marks of A, the number in system {X(t)} with X(b) − X(a) = A((a,b]) − D((a,b]), a non-decreasing corlol integrator {B(t)} and a non-negative process {Z(t)}, all compatible with a measurable flow under which P is invariant:

λ_A E⁰_A [ ∫_(0,W_0] Z(s) dB(s) ] = (1/t) E [ ∫_(0,t] X(s−) Z(s) dB(s) ].              (1.3.28)

Selecting the blade Z ≡ 1, B(t) = t turns it into λ_A E⁰_A[W_0] = E[X(0)] — Little's law, here in its full stationary-ergodic form rather than as a deterministic sample-path identity. Other choices give the inversion formula, the Miyazawa conservation principle and the rate conservation law.

The local meaning of P⁰_N

One milestone stands slightly apart. Theorem 1.5.1 (p.45) is what licenses the whole reading of P⁰_N as "what an arriving customer sees":

lim_{t→0} sup_{A ∈ F} | P⁰_N(A) − P(θ_{T_1} ∈ A | T_1 ≤ t) | = 0.                       (1.5.3)

The supremum is inside the limit. The convergence is uniform over every measurable event, which is what Dobrushin's estimate of §1.5.1 buys and what a pointwise limit would not give.

What this mission provides

Nothing in this chapter exists on the platform or in Mathlib: not stationary marked point processes, not Palm probability, not the Campbell measure. Four of the five missions in this series import the vocabulary built here, and the two definition items — the substrate of §§1.1–1.2 and the setting of §1.3.7 — are as much of the deliverable as the theorems are.

Formalization scope

  • The flow {θ_t} is a one-parameter group with (t, ω) ↦ θ_t ω jointly measurable (p.5 (a)); a point process is its strictly increasing points {T_n}_{n ∈ ℤ} with T_0 ≤ 0 < T_1, infinitely many on each side (Hypothesis 1.1.1), with finite non-null intensity λ = E[N((0,1])].
  • P⁰_N is characterized by (1.2.1) for every t > 0, which determines it uniquely; nothing is axiomatized. A formalization that introduced P⁰_N as any measure satisfying Mecke's formula would make the milestones and the goal trivial and is ruled out.
  • Every "for all non-negative measurable" formula (Mecke, inversion, mean-value, Neveu, Wald, the goal) is stated in [0, ∞] with lower Lebesgue integrals, for all such functions, not only bounded or integrable ones.
  • Three hypotheses the book uses without listing them are explicit: the Swiss army formula assumes the integrator {B(t)} is θ_t-compatible (the proof uses it, and without it the identity fails); it is stated for t > 0, the only values at which 1/t and (0, t] give it content; and the Miyazawa principle assumes Y'(0) ∈ L¹(P), which its E[Y'(0)] presupposes.
  • Theorem 1.5.1 keeps the supremum over all events inside the limit (one δ for every A).
11 thms2 active usersReviewed
🏆Completed
CombinatoricsGraph TheoryLinear Optimization+1·Captain: mikedeng1

Linear Programming: Foundations and Extensions III: Network Flows, the Integrality Theorem and König's TheoremTextbook

Motivation

Minimum-cost network flow problems are the largest special class of linear programs met in practice: transportation, distribution, assignment, communication and electric networks, facility location and financial planning all reduce to moving material along the arcs of a directed network from supply nodes to demand nodes at least cost. Chapter 14 of R. J. Vanderbei's Linear Programming: Foundations and Extensions (4th ed., Springer 2014, DOI 10.1007/978-1-4614-7630-6) develops the network simplex method, and closes with two structural facts that explain why this class is special: simplex bases are spanning trees of the network, and a network problem with integer supplies has integer basic solutions. Vanderbei then uses integrality to prove a classical theorem of combinatorics, König's theorem on regular bipartite graphs. Chapter 15, §5 treats the maximum-flow problem on the same objects and proves the Max-Flow Min-Cut Theorem.

The combinatorial results are older than linear programming. D. König proved in 1916 that every regular bipartite graph has a perfect matching (Math. Ann. 77). The Max-Flow Min-Cut Theorem is due to Ford and Fulkerson (1956, Canad. J. Math. 8) and, independently, Elias, Feinstein and Shannon (1956). The integrality of network bases is the total unimodularity of incidence matrices, known since the 1950s (Hoffman and Kruskal, 1956).

Setting

A network (N,A)(N,A)(N,A) has a finite set NNN of mmm nodes and a set of directed arcs A⊆{(i,j):i,j∈N, i≠j}A\subseteq\{(i,j): i,j\in N,\ i\ne j\}A⊆{(i,j):i,j∈N, i=j}. Node iii carries a supply bib_ibi​ (negative values are demands) with ∑ibi=0\sum_i b_i=0∑i​bi​=0, and arc (i,j)(i,j)(i,j) carries a cost cijc_{ij}cij​. The flow xijx_{ij}xij​ on arc (i,j)(i,j)(i,j) is the decision variable. The node–arc incidence matrix AAA has in the column of (i,j)(i,j)(i,j) an entry +1+1+1 in row jjj, −1-1−1 in row iii, and 000 elsewhere. The network flow problem (14.1) is

minimize cTxsubject toAx=−b, x≥0.\text{minimize } c^{T}x\quad\text{subject to}\quad Ax=-b,\ x\ge 0 .minimize cTxsubject toAx=−b, x≥0.

A flow satisfying Ax=−bAx=-bAx=−b is balanced; a balanced flow with x≥0x\ge0x≥0 is feasible. Paths ignore arc directions; the network is connected if every two nodes are joined by a path, which is assumed throughout Chapter 14. A spanning tree is a set of arcs that, on all of NNN and without directions, is connected and has no cycle. Fixing a root node rrr and deleting its row gives the matrix A~\tilde AA~. A set TTT of arcs is a basis if its columns form an invertible square submatrix of A~\tilde AA~, and a basic feasible solution is a feasible flow vanishing off some basis.

For maximum flow, a source sss, a sink ttt and finite upper bounds uiju_{ij}uij​ are given; all bi=0b_i=0bi​=0 and an extra arc (t,s)(t,s)(t,s) of infinite capacity is added. A feasible flow satisfies 0≤xij≤uij0\le x_{ij}\le u_{ij}0≤xij​≤uij​, xts≥0x_{ts}\ge0xts​≥0 and flow balance. A cut is a node set CCC with s∈Cs\in Cs∈C, t∉Ct\notin Ct∈/C, and its capacity is κ(C)=∑(i,j)∈A, i∈C, j∉Cuij\kappa(C)=\sum_{(i,j)\in A,\ i\in C,\ j\notin C}u_{ij}κ(C)=∑(i,j)∈A, i∈C, j∈/C​uij​.

Formalization targets

Goal: König's Theorem (Theorem 14.3, p. 216)

If nnn girls and nnn boys are such that every girl knows exactly k≥1k\ge1k≥1 boys and every boy knows exactly kkk girls (knowing being symmetric), then there is a bijection σ\sigmaσ from girls to boys with

girl i knows boy σ(i)for all i.\text{girl } i \text{ knows boy } \sigma(i)\qquad\text{for all } i .girl i knows boy σ(i)for all i.

Milestones

  1. Theorem 14.1 (p. 205): for a connected network, a set TTT of arcs indexes a basis of A~\tilde AA~ if and only if TTT is a spanning tree.
  2. Theorem 14.2, Integrality Theorem (p. 216): with integer supplies, every basic feasible solution is integral,
xij∈Zfor all (i,j)∈A.x_{ij}\in\mathbb Z\qquad\text{for all }(i,j)\in A .xij​∈Zfor all (i,j)∈A.
  1. Eq. (15.8) (p. 234): xts≤κ(C)x_{ts}\le\kappa(C)xts​≤κ(C) for every feasible flow and every cut.
  2. Theorem 15.1, Max-Flow Min-Cut (p. 234):
max⁡{xts}=min⁡Cκ(C),\max\{x_{ts}\}=\min_C \kappa(C),max{xts​}=Cmin​κ(C),

both extrema attained.

The goal is independent of the network definitions in its statement; the milestones are the book's route to it (14.1, 14.2) and the chapter's other duality theorem on the same objects (15.8, 15.1).

Significance

König's theorem is the base case of matching theory: it gives perfect matchings in regular bipartite graphs, hence edge colourings of bipartite graphs with Δ\DeltaΔ colours, and via Birkhoff–von Neumann-type arguments the decomposition of doubly stochastic matrices. The Integrality Theorem is the reason assignment, transportation and shortest-path problems can be solved as linear programs without an integrality constraint. Theorem 14.1 is the correspondence the network simplex method is built on. Max-Flow Min-Cut is the prototype of combinatorial min–max theorems.

All four theorems are classical and proved. This mission adds machine-checked versions in the book's own formulation: the incidence matrix with Vanderbei's sign convention Ax=−bAx=-bAx=−b, bases as square submatrices of A~\tilde AA~ with a chosen root, and maximum flow as a circulation through an added return arc. The platform already has network integrality, a tree-solution characterisation and max-flow min-cut in the Bertsimas–Tsitsiklis formulation and a Keller–Trotter max-flow statement; none is stated in this form, and Mathlib has Hall's marriage theorem but no regular-bipartite corollary.

Difficulty

The combinatorial content is small; the difficulty is in the passage between matrices and graphs. Theorem 14.1 needs both directions: the book shows that a spanning tree gives a triangularisable, hence invertible, submatrix and leaves the converse (independent columns form a spanning tree) as an exercise, which requires showing that any cycle, including a pair of antiparallel arcs, yields a linearly dependent set of columns and that m−1m-1m−1 acyclic arcs span. The book's proof of König's theorem applies the Integrality Theorem to the girl–boy network, which need not be connected, while Chapter 14 assumes connectedness throughout: the statement of 14.2 does not apply to it verbatim. The step "a feasible problem has a basic optimal solution" is also used and is not stated in the chapter.

Formalization scope

  • Nodes are a Fintype with decidable equality; arcs are a Finset (N × N), so parallel arcs are excluded as in the book, and IsNetwork excludes loops. Flows are real functions on ordered pairs; only their values on arcs matter.
  • "Connected" is preconnectedness of the undirected simple graph of the arcs; a spanning tree is an arc set whose undirected graph is a tree and in which no two arcs join the same pair of nodes.
  • A basis is m−1m-1m−1 linearly independent columns of the (m−1)(m-1)(m−1)-row matrix A~\tilde AA~, the same as an invertible square submatrix. The root rrr is arbitrary, as in the book ("say, the last one").
  • Integer data means integer supplies; costs do not enter Theorem 14.2, since a basic optimal solution is a basic feasible solution.
  • In König's theorem both sides are Fin n, knowing is one relation between girls and boys, and k≥1k\ge1k≥1 is a hypothesis: the book's proof divides by kkk, and for k=0<nk=0<nk=0<n the claim is false. No connectedness is assumed.
  • For maximum flow, the return arc (t,s)(t,s)(t,s) is a separate variable; s≠ts\ne ts=t and uij≥0u_{ij}\ge0uij​≥0 are hypotheses that the book leaves implicit. Maximum and minimum are stated with attainment.
  • No statement involves a constant the book leaves implicit.

A formalization of the goal as a matching of size nnn in some larger graph, or with the degree conditions on one side only, would be a different theorem; the conclusion is a bijection between exactly the nnn girls and the nnn boys using only acquainted pairs.

Useful infrastructure, reusable beyond this mission: the incidence matrix and its total unimodularity, the undirected graph of an arc set. Proofs of König's theorem through Hall's theorem (Mathlib Finset.all_card_le_biUnion_card_iff_exists_injective) are welcome alongside the book's route.

Selected references

  • R. J. Vanderbei, Linear Programming: Foundations and Extensions, 4th ed., Springer, 2014. DOI 10.1007/978-1-4614-7630-6
  • D. König, Über Graphen und ihre Anwendung auf Determinantentheorie und Mengenlehre, Math. Ann. 77 (1916), 453–465. DOI 10.1007/BF01456961
  • L. R. Ford and D. R. Fulkerson, Maximal flow through a network, Canad. J. Math. 8 (1956), 399–404. DOI 10.4153/CJM-1956-045-5
  • A. J. Hoffman and J. B. Kruskal, Integral boundary points of convex polyhedra, in Linear Inequalities and Related Systems, Ann. of Math. Studies 38, Princeton University Press, 1956, 223–246.
7 thms2 active usersReviewed
🏆Completed
Markov ChainProbabilityStochastic Systems·Captain: mikedeng1

Stochastic Dynamic Programming and the Control of Queueing Systems XIV: Conforming Approximating Sequences for Markov ChainsTextbook

Motivation

Countable-state Markov chains are the standard model of queues with unbounded buffers, but any numerical computation of their long-run behaviour works on a finite state space. The usual remedy is truncation: restrict the chain to a finite set SNS_NSN​ and redistribute the probability of leaving SNS_NSN​ back into it. Whether the steady state probabilities and average costs of the truncated chains converge to those of the original chain depends on how that probability is redistributed. Gibson and Seneta studied this question for the stationary distributions of chains without costs (Gibson and Seneta, J. Appl. Prob., 1987). Sennott extended it to chains with costs and expected first passage costs (Sennott, Adv. Appl. Prob. 29, 1997; ZOR Math. Meth. Oper. Res. 45, 1997), and used it as the basis of the approximating sequence method for average-cost Markov decision chains (Sennott, 1999, Chapter 8). This mission covers Appendix C, Sections C.4–C.5 of the 1999 book, the Markov-chain results that the book's average-cost approximation theorems use.

Setting

A Markov chain with costs Γ\GammaΓ on a denumerable state space SSS has transition probabilities PijP_{ij}Pij​ with ∑jPij=1\sum_jP_{ij}=1∑j​Pij​=1 and a finite nonnegative cost C(i)C(i)C(i) at each state. For a set G⊆SG\subseteq SG⊆S and a start iii, TiG≥1T_{iG}\ge 1TiG​≥1 is the first passage time to GGG. The taboo probability GPik(t){}_GP^{(t)}_{ik}G​Pik(t)​ is the probability of moving from iii to kkk in ttt steps with no intermediate state in GGG. The expected visits Guik{}_Gu_{ik}G​uik​ count the visits to kkk at times 0≤t<TiG0\le t<T_{iG}0≤t<TiG​. The mean first passage time is miG=E[TiG]m_{iG}=E[T_{iG}]miG​=E[TiG​], infinite when GGG is missed with positive probability. The first passage cost is ciG=E[∑t<TiGC(Xt)]c_{iG}=E\big[\sum_{t<T_{iG}}C(X_t)\big]ciG​=E[∑t<TiG​​C(Xt​)]. A state iii is positive recurrent when mii<∞m_{ii}<\inftymii​<∞, and the steady state probability is πi=mii−1\pi_i=m_{ii}^{-1}πi​=mii−1​. On a positive recurrent class RRR the average cost is JR=∑j∈RπjC(j)J_R=\sum_{j\in R}\pi_jC(j)JR​=∑j∈R​πj​C(j). The chain is zzz standard when miz<∞m_{iz}<\inftymiz​<∞ and ciz<∞c_{iz}<\inftyciz​<∞ for every iii. Such a chain has one positive recurrent class R∋zR\ni zR∋z with JR<∞J_R<\inftyJR​<∞, and every other state is transient.

An approximating sequence (AS) (ΓN)N≥N0(\Gamma_N)_{N\ge N_0}(ΓN​)N≥N0​​ consists of increasing nonempty finite sets SNS_NSN​ with ⋃NSN=S\bigcup_NS_N=S⋃N​SN​=S and, for each NNN, a chain ΓN\Gamma_NΓN​ on SNS_NSN​ with the same costs and transition probabilities Pij(N)→PijP_{ij}(N)\to P_{ij}Pij​(N)→Pij​. The quantities of ΓN\Gamma_NΓN​ are written miG(N)m_{iG}(N)miG​(N), ciG(N)c_{iG}(N)ciG​(N), πi(N)\pi_i(N)πi​(N) and J(i)(N)J(i)(N)J(i)(N). An AS is conforming (for a zzz standard Γ\GammaΓ) if, for large NNN, ΓN\Gamma_NΓN​ is unichain with zzz in its positive recurrent class, and miz(N)→mizm_{iz}(N)\to m_{iz}miz​(N)→miz​ and ciz(N)→cizc_{iz}(N)\to c_{iz}ciz​(N)→ciz​ for all iii. It is conforming on RRR if πi(N)→πi\pi_i(N)\to\pi_iπi​(N)→πi​ and J(i)(N)→JRJ(i)(N)\to J_RJ(i)(N)→JR​ on RRR.

An augmentation type approximating sequence (ATAS) keeps the original probabilities inside SNS_NSN​ and redistributes the probability of each excluded target r∉SNr\notin S_Nr∈/SN​ according to an augmentation distribution q⋅(i,r,N)q_\cdot(i,r,N)q⋅​(i,r,N) on SNS_NSN​:

Pij(N)=Pij+∑r∈S−SNPir qj(i,r,N),j∈SN.P_{ij}(N)=P_{ij}+\sum_{r\in S-S_N}P_{ir}\,q_j(i,r,N),\qquad j\in S_N.Pij​(N)=Pij​+r∈S−SN​∑​Pir​qj​(i,r,N),j∈SN​.

It sends excess probability to GGG if every q⋅(i,r,N)q_\cdot(i,r,N)q⋅​(i,r,N) is concentrated on GGG.

Formalization targets

Goal: Proposition C.5.2

For a zzz standard chain Γ\GammaΓ and a finite nonempty G⊆SG\subseteq SG⊆S,

every ATAS that sends excess probability to G is conforming,\text{every ATAS that sends excess probability to } G \text{ is conforming},every ATAS that sends excess probability to G is conforming,

and if G⊆RG\subseteq RG⊆R it is also conforming on RRR. No rate of convergence and no constants are involved, and GGG need not contain zzz.

Milestones

  1. Proposition C.4.2: for fixed ttt, lim⁡NGPik(t)(N)=GPik(t)\lim_N{}_GP^{(t)}_{ik}(N)={}_GP^{(t)}_{ik}limN​G​Pik(t)​(N)=G​Pik(t)​; also lim inf⁡NGuik(N)≥Guik\liminf_N{}_Gu_{ik}(N)\ge{}_Gu_{ik}liminfN​G​uik​(N)≥G​uik​ and lim inf⁡NmiG(N)≥miG\liminf_Nm_{iG}(N)\ge m_{iG}liminfN​miG​(N)≥miG​.
  2. Proposition C.4.3: πi(N)→0\pi_i(N)\to0πi​(N)→0 off the positive recurrent states, and along subsequences πi(Ns)→bπi\pi_i(N_s)\to b\pi_iπi​(Ns​)→bπi​ on a class, with 0≤b≤10\le b\le10≤b≤1.
  3. Proposition C.4.5: lim inf⁡NciG(N)≥ciG\liminf_Nc_{iG}(N)\ge c_{iG}liminfN​ciG​(N)≥ciG​.
  4. Proposition C.4.6: on a positive recurrent class, convergence of π\piπ, of mzzm_{zz}mzz​ and of all miGm_{iG}miG​ are equivalent. Given these, convergence of J(i)J(i)J(i), of czzc_{zz}czz​ and of all ciGc_{iG}ciG​ are equivalent.
  5. Proposition C.4.9: conformity implies πi(N)→πi\pi_i(N)\to\pi_iπi​(N)→πi​ for all iii, and that the constant average costs J(N)J(N)J(N) of ΓN\Gamma_NΓN​ converge to JRJ_RJR​.

Further results

  1. Proposition C.5.3: an ATAS is conforming when, for N≥N∗N\ge N^*N≥N∗, the augmentation distributions satisfy ∑j≠zqj(i,r,N)mjz≤mrz\sum_{j\ne z}q_j(i,r,N)m_{jz}\le m_{rz}∑j=z​qj​(i,r,N)mjz​≤mrz​ and ∑j≠zqj(i,r,N)cjz≤crz\sum_{j\ne z}q_j(i,r,N)c_{jz}\le c_{rz}∑j=z​qj​(i,r,N)cjz​≤crz​.
  2. Corollary C.5.4: for a 000 standard chain on {0,1,2,… }\{0,1,2,\dots\}{0,1,2,…} with an upper Hessenberg transition matrix, truncated to SN={0,…,N}S_N=\{0,\dots,N\}SN​={0,…,N} with the excess sent to NNN, the ATAS is conforming.

Significance

The result. Conformity is the hypothesis under which the book's approximating sequence method works for average-cost queueing control (Chapter 8). The method computes optimal policies for finite truncations and passes to the limit. That argument needs the first passage times and costs to a distinguished state to converge along the chains induced by fixed policies. Propositions C.5.2 and C.5.3 turn this analytic requirement into conditions on the truncation scheme that can be checked in practice: send the overflow to a fixed finite set, or to states from which reaching zzz is no more expensive. Examples C.4.4 and C.4.7 of the book show that an arbitrary approximating sequence can fail. The limit of the steady state probabilities can be a strict multiple bπb\pibπ with b<1b<1b<1. First passage costs can converge to the wrong value even when the steady state probabilities converge.

Formalizing it. The results are proved in the book, some in abbreviated form ("the proof for the costs is similar and is omitted"). The Prove2Me library had no statement on truncation or augmentation of countable Markov chains when this mission was drafted (September 2026). A formalization supplies the omitted cost arguments, makes the passage between lim inf⁡\liminfliminf bounds and limits in [0,∞][0,\infty][0,∞] explicit, and produces a reusable library of first passage quantities for countable chains.

Difficulty

The lower bounds of Propositions C.4.2 and C.4.5 are the routine part. The difficulty is the matching upper bound: in ΓN\Gamma_NΓN​, a first passage that leaves SNS_NSN​ is restarted elsewhere, which can lengthen it without bound. Taking limits termwise in the first passage equation miz(N)=1+∑j≠zPij(N)mjz(N)m_{iz}(N)=1+\sum_{j\ne z}P_{ij}(N)m_{jz}(N)miz​(N)=1+∑j=z​Pij​(N)mjz​(N) fails, because no dominating function is available and mass can escape to infinity. Example C.4.4 exhibits exactly this. Unichain structure is also not automatic: ΓN\Gamma_NΓN​ may have several recurrent classes, or a recurrent class not containing zzz, and ruling this out is part of the conclusion rather than an assumption.

Formalization scope

The Lean development works in SennottDP.ChainASM. A chain is a structure MC S with P : S → S → ℝ≥0∞, ∑' j, P i j = 1 and C : S → ℝ≥0. Theorems assume [Countable S] [Infinite S], matching the book's denumerable state space. Taboo probabilities, expected visits, miGm_{iG}miG​, ciGc_{iG}ciG​, πj=(mjj)−1\pi_j=(m_{jj})^{-1}πj​=(mjj​)−1 and JR=∑j∈RπjC(j)J_R=\sum_{j\in R}\pi_jC(j)JR​=∑j∈R​πj​C(j) are defined as sums in [0,∞][0,\infty][0,∞]. miG=∑t≥0P(TiG>t)m_{iG}=\sum_{t\ge0}P(T_{iG}>t)miG​=∑t≥0​P(TiG​>t) is infinite whenever GGG is missed with positive probability. The average cost J(i)J(i)J(i) is the lim sup⁡\limsuplimsup of the Cesàro cost averages.

An AS is a structure carrying N0N_0N0​, the finite sets SNS_NSN​ (as Finset S) and Pij(N)P_{ij}(N)Pij​(N). ΓN\Gamma_NΓN​ is built as an MC on the subtype of SNS_NSN​, and a set GGG is read in ΓN\Gamma_NΓN​ as G∩SNG\cap S_NG∩SN​. Quantities of ΓN\Gamma_NΓN​ are lifted to functions of NNN and of states of SSS with the value 000 where they are undefined (N<N0N<N_0N<N0​ or a state outside SNS_NSN​). For fixed states this affects finitely many NNN, and all statements are limits, lim inf⁡\liminfliminfs or eventual equalities. All convergence is in [0,∞][0,\infty][0,∞]. The conformity predicate includes the standing assumption that Γ\GammaΓ is zzz standard. The positive recurrent class RRR of a zzz standard chain is the communicating class of zzz.

A trivializing formalization is excluded: the AS of Example C.4.4, whose positive recurrent class {N}\{N\}{N} excludes z=0z=0z=0, is not conforming under these definitions. The ATAS predicate requires the augmentation distributions to be probability distributions and to reproduce Pij(N)P_{ij}(N)Pij​(N) exactly by (C.27).

A complete development needs first passage decompositions for countable chains, the renewal-reward identity JR=czz/mzzJ_R=c_{zz}/m_{zz}JR​=czz​/mzz​, and dominated and Fatou-type limit theorems for sums (the book's Appendix A). The first passage library and the lifted-quantity conventions can be reused by the average-cost approximation chapters. Contributions of intermediate lemmas are welcome, especially the finite-state unichain facts of Section C.3 and the identities of Propositions C.1.4 and C.2.2.

Proposition C.5.5 (lower Hessenberg chains, from Gibson and Seneta) is stated in the book without proof and without naming the distinguished state, and is not included.

Selected references

  • L. I. Sennott, Stochastic Dynamic Programming and the Control of Queueing Systems, Wiley, 1999, Appendix C, Sections C.4–C.5. https://doi.org/10.1002/9780470317037
  • L. I. Sennott, "The computation of average optimal policies in denumerable state Markov decision chains", Advances in Applied Probability 29 (1997) 114–137 (cited in the book as Sennott 1997a).
  • L. I. Sennott, "On computing average cost optimal policies with application to routing to parallel queues", ZOR Mathematical Methods of Operations Research 45 (1997) 45–62 (cited in the book as Sennott 1997b).
  • D. Gibson and E. Seneta, "Augmented truncations of infinite stochastic matrices", Journal of Applied Probability (1987).
10 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryCombinatorics·Captain: mikedeng1

Theory of Games and Economic Behavior VI: Splitting Sets and the Decomposition Partition of a GameTextbook

Motivation

Chapter IX of von Neumann and Morgenstern's Theory of Games and Economic Behavior asks when a game played by many participants is really several separate games played side by side. The authors' motivation (41.1) is methodological: the general theory of the nnn-person game becomes unmanageable as nnn grows, and one way to gain insight into large games is to isolate classes of games that can be analysed exactly. The first such class consists of games whose players fall into groups that have no dealings with each other — the book's example is the internal economies of two countries whose connections are disregarded (41.2.4). Such a game is the composition of its constituents, and the question of the chapter is how to recognise a composite game from its characteristic function alone and how far a given game can be decomposed.

The answer (§43) is a structure theorem. The groups of players that can be split off form a Boolean algebra of sets; its atoms, the minimal splitting sets, form a partition of the set of players, the decomposition partition ΠΓ\Pi_\GammaΠΓ​; and every splitting set is a union of blocks of ΠΓ\Pi_\GammaΠΓ​. The book remarks (41.3.3) that the splitting condition (41:7) is exactly Carathéodory's criterion of measurability, transported from measures to characteristic functions. The mission formalizes §43, together with the criterion (42:G) of §42 on which it rests.

Setting

Let III be a finite set of players. A characteristic function is a real number v(S)v(S)v(S) for every subset S⊆IS \subseteq IS⊆I (every coalition, including the empty set ⊖\ominus⊖ and III). Write −S=I−S-S = I - S−S=I−S. From 42.4.1 on the book works in the domain of constant-sum games, whose characteristic functions are, by (42:D), exactly the functions satisfying

(42:6:a) v(⊖)=0,(42:6:b) v(S)+v(−S)=v(I),(42:6:c) v(S)+v(T)≦v(S∪T)  if S∩T=⊖.\text{(42:6:a)}\ v(\ominus) = 0,\qquad \text{(42:6:b)}\ v(S) + v(-S) = v(I),\qquad \text{(42:6:c)}\ v(S) + v(T) \leqq v(S \cup T)\ \text{ if } S \cap T = \ominus .(42:6:a) v(⊖)=0,(42:6:b) v(S)+v(−S)=v(I),(42:6:c) v(S)+v(T)≦v(S∪T)  if S∩T=⊖.

For J⊆IJ \subseteq IJ⊆I with complement K=I−JK = I - JK=I−J, the game is decomposable with respect to JJJ and KKK if there are constant-sum games Δ\DeltaΔ on the players JJJ and H\mathrm HH on the players KKK with v(R)=vΔ(R∩J)+vH(R∩K)v(R) = v_\Delta(R \cap J) + v_{\mathrm H}(R \cap K)v(R)=vΔ​(R∩J)+vH​(R∩K) for all R⊆IR \subseteq IR⊆I — formula (41:3). The JJJ-constituent Δ\DeltaΔ is the game on JJJ with vΔ(S)=v(S)v_\Delta(S) = v(S)vΔ​(S)=v(S) for S⊆JS \subseteq JS⊆J (41:4).

A splitting set (43.1) is a J⊆IJ \subseteq IJ⊆I satisfying (41:6),

v(S∪T)=v(S)+v(T)for S⊆J, T⊆I−J.v(S \cup T) = v(S) + v(T) \quad \text{for } S \subseteq J,\ T \subseteq I - J .v(S∪T)=v(S)+v(T)for S⊆J, T⊆I−J.

The game is indecomposable if ⊖\ominus⊖ and III are its only splitting sets (43.3.1). A minimal splitting set is a splitting set J≠⊖J \neq \ominusJ=⊖ none of whose proper subsets J′≠⊖J' \neq \ominusJ′=⊖ is splitting (43.3.2), and ΠΓ\Pi_\GammaΠΓ​ is the system of all minimal splitting sets. The game is inessential (42:F) if it is strategically equivalent to the zero game, i.e. v(S)+∑k∈Sαk0=0v(S) + \sum_{k \in S} \alpha^0_k = 0v(S)+∑k∈S​αk0​=0 for all SSS, for some reals αk0\alpha^0_kαk0​ (the transformation (42:5)).

Formalization targets

Goal: (43:F), (43:G), (43:H)

For every vvv satisfying (42:6:a)–(42:6:c):

J1≠J2∈ΠΓ⇒J1∩J2=⊖,⋃J∈ΠΓJ=I,K splitting  ⟺  K=J1∪⋯∪Jp, Ji∈ΠΓ.J_1 \neq J_2 \in \Pi_\Gamma \Rightarrow J_1 \cap J_2 = \ominus, \qquad \bigcup_{J \in \Pi_\Gamma} J = I, \qquad K \text{ splitting} \iff K = J_1 \cup \dots \cup J_p,\ J_i \in \Pi_\Gamma .J1​=J2​∈ΠΓ​⇒J1​∩J2​=⊖,J∈ΠΓ​⋃​J=I,K splitting⟺K=J1​∪⋯∪Jp​, Ji​∈ΠΓ​.

The goal combines the partition property and the characterization of all splitting sets; it is the book's own summary of §43.3 and does not presuppose that ΠΓ\Pi_\GammaΠΓ​ is a partition.

Milestones

In attack order: the criterion (42:G) (decomposability   ⟺  \iff⟺ (41:6)   ⟺  \iff⟺ (41:7)); the closure properties (43:A) (complements), (43:B) (⊖\ominus⊖, III), (43:C) (intersections and unions); (43:D) (splitting sets of a constituent) and (43:E) (a constituent is indecomposable iff its set is minimal); (43:F), (43:G) separately; (43:I) (a minimal splitting set is disjoint from, or inside, any splitting set); the restatement (43:H*) (KKK splits iff every block of ΠΓ\Pi_\GammaΠΓ​ lies inside or outside KKK); and the two extreme cases (43:J) (ΠΓ\Pi_\GammaΠΓ​ = all singletons iff the game is inessential) and (43:K) (ΠΓ={I}\Pi_\Gamma = \{I\}ΠΓ​={I} iff the game is indecomposable).

Significance

The decomposition partition is canonical: every constant-sum game splits uniquely into indecomposable constituents, and (43:E) identifies them as the constituents on the blocks of ΠΓ\Pi_\GammaΠΓ​. The two extreme cases (43:J), (43:K) show that inessentiality and indecomposability are opposite ends of one scale. Chapter IX uses this structure in §§44–47, where solutions of decomposable games are related to solutions of their constituents ((46:A)–(46:I)); a formal decomposition partition is the prerequisite for that later work, and a candidate follow-up mission.

The results are classical and proved in the book. The mission's contribution is a machine-checked version: a formal definition layer for splitting sets of a set function on a finite set, the Boolean-algebra closure, and the atomic decomposition. The combinatorial core — that the sets satisfying a Carathéodory-type additivity condition form a Boolean algebra of a finite set, whose atoms partition it — is reusable outside game theory (for instance for finitely additive decompositions of set functions). No machine-checked version of these results is known to exist; they are formalized here for the first time as far as a search of the platform shows.

Difficulty

The individual steps are elementary, but the obvious argument for the key closure property (43:C) fails: to show that J′∪J′′J' \cup J''J′∪J′′ is splitting one cannot simply add the identities (41:6) for J′J'J′ and for J′′J''J′′, since a pair S⊆J′∪J′′S \subseteq J' \cup J''S⊆J′∪J′′, T⊆I−(J′∪J′′)T \subseteq I - (J' \cup J'')T⊆I−(J′∪J′′) is not of the form those identities control, and J′∩J′′J' \cap J''J′∩J′′ may be nonempty — the book's footnote on p. 354 singles out overlapping splitting sets as the case its proof is really about. Likewise (43:D) is not a tautology: that a set self-contained within a self-contained set is self-contained in the whole game has to be proved (footnote 1, p. 355). Formally, the main work is bookkeeping of set identities and the passage between subsets of JJJ (players of the constituent) and subsets of III.

Formalization scope

  • Players. The set of players III is an arbitrary finite type ι with decidable equality (the book's I=(1,…,n)I = (1, \dots, n)I=(1,…,n); in Chapter IX players are also named 1′,…,k′,1′′,…,l′′1', \dots, k', 1'', \dots, l''1′,…,k′,1′′,…,l′′). Coalitions are Finset ι, −S-S−S and I−JI - JI−J are the complement Sᶜ in III, and vvv is a function Finset ι → ℝ.
  • Standing hypotheses. Every theorem assumes (42:6:a)–(42:6:c) (the structure IsConstantSum), the chapter's domain from 42.5.3 on ("in the remainder of this chapter we will continue to consider constant-sum games", p. 353). v(I)v(I)v(I) is arbitrary: the statements are not restricted to zero-sum games, which would be a weaker special case. (43:K) additionally assumes III nonempty ([Nonempty ι], the book's n≧1n \geqq 1n≧1); every other statement holds without it. (43:E) assumes J≠⊖J \neq \ominusJ=⊖, since the book's constituent is a game and has at least one player.
  • Characteristic functions only. Games are represented by their characteristic functions, as the book does throughout §§42–43 by (42:D). Decomposability quantifies over constant-sum characteristic functions vΔv_\DeltavΔ​, vHv_{\mathrm H}vH​ on the subtypes ↥J, ↥Jᶜ; the JJJ-constituent is vvv restricted to subsets of ↥J. Sums of sets are unions; "disjunct" is Disjoint.
  • Π_Γ. decompositionPartition v is the set of minimal splitting sets; that it is a partition is proved, not assumed. An aggregate of minimal splitting sets is a finite family A, its sum A.sup id; the empty aggregate gives ⊖\ominus⊖.
  • No trivialization. A definition of splitting sets that quantified over T⊆IT \subseteq IT⊆I instead of T⊆I−JT \subseteq I - JT⊆I−J, or complements taken in an ambient type larger than III, would change the theorems; here the complement is in the finite type of players itself. With III empty all statements except (43:K) hold trivially, and (43:K) carries the nonemptiness hypothesis.
  • Contributions welcome. Proofs of the milestones in the listed order; general Mathlib-style lemmas on Boolean subalgebras of Finset ι and their atoms, which would shorten (43:F)–(43:H).

Selected references

  • J. von Neumann and O. Morgenstern, Theory of Games and Economic Behavior, 60th-anniversary edition, Princeton University Press, 2007 (page-for-page reprint of the 3rd edition, 1953), Chapter IX, §§41–43, pp. 339–357. https://doi.org/10.1515/9781400829460
  • C. Carathéodory, Vorlesungen über reelle Funktionen, Teubner, Leipzig–Berlin, 1918, Chapter V (the measurability criterion to which (41:7) corresponds, cited by the book on p. 343).
16 thms2 active usersReviewed
🏆Completed
Convex OptimizationInformation TheoryLinear algebra+1·Captain: naimengye

Decoding by Linear Programming: Exact Recovery by ℓ1 Minimization under the Restricted Isometry ConditionResearch Paper

Motivation

Consider the classical error-correcting problem. An input vector f∈Rnf \in \mathbb{R}^nf∈Rn (the plaintext) is encoded as Af∈RmAf \in \mathbb{R}^mAf∈Rm by a coding matrix AAA with m>nm > nm>n, and an unknown, arbitrary vector of errors eee corrupts the result, so that only y=Af+ey = Af + ey=Af+e is observed. Can fff be recovered exactly, and by an algorithm whose running time is polynomial in mmm? Candès and Tao (2005) answer both questions at once: if a matrix FFF annihilating AAA satisfies a restricted orthonormality condition, then fff is the unique solution of the convex program min⁡g∥y−Ag∥ℓ1\min_g \|y - Ag\|_{\ell^1}ming​∥y−Ag∥ℓ1​, which is a linear program, whenever at most SSS entries of yyy are corrupted, whatever their positions and values. Read for the matrix FFF alone, the same theorem says that ℓ1\ell^1ℓ1 minimization (basis pursuit) returns the sparsest solution of an underdetermined linear system. That statement is the mathematical core of compressed sensing, and the restricted isometry constants introduced in this paper became the standard tool of the field.

Timeline. Donoho and Huo (2001), followed by Elad–Bruckstein, Donoho–Elad and Gribonval–Nielsen, proved the equivalence of ℓ0\ell^0ℓ0 and ℓ1\ell^1ℓ1 minimization for matrices formed by concatenating two orthonormal bases, for sparsity of order m\sqrt{m}m​, through incoherence. Candès, Romberg and Tao (2004) and Candès and Tao (2004) obtained recovery with overwhelming probability for random matrices at sparsity of order m/log⁡mm/\log mm/logm. Donoho (2004) showed for Gaussian matrices that a constant, unspecified fraction ρm\rho mρm of nonzero entries can be tolerated. The present paper (December 2004, published 2005) gives a deterministic sufficient condition, δS+θS,S+θS,2S<1\delta_S + \theta_{S,S} + \theta_{S,2S} < 1δS​+θS,S​+θS,2S​<1, valid for every matrix, and specializes it to Gaussian matrices with explicit numerical values of the tolerable fraction. Later work, for instance Candès (2008) with the condition δ2S<2−1\delta_{2S} < \sqrt{2} - 1δ2S​<2​−1, sharpened the sufficient condition; those later results are not part of this mission.

Setting

Let FFF be a real p×mp \times mp×m matrix with columns v1,…,vm∈Rpv_1, \dots, v_m \in \mathbb{R}^pv1​,…,vm​∈Rp, and let HHH be the linear span of these columns. For an index set T⊆{1,…,m}T \subseteq \{1,\dots,m\}T⊆{1,…,m} and real coefficients c=(cj)j∈Tc = (c_j)_{j \in T}c=(cj​)j∈T​, write FTc=∑j∈TcjvjF_T c = \sum_{j \in T} c_j v_jFT​c=∑j∈T​cj​vj​. A vector c∈Rmc \in \mathbb{R}^mc∈Rm is supported on TTT when cj=0c_j = 0cj​=0 for all j∉Tj \notin Tj∈/T; with this convention FTcF_T cFT​c is just the product FcFcFc. Norms are the Euclidean norm ∥c∥=(∑jcj2)1/2\|c\| = (\sum_j c_j^2)^{1/2}∥c∥=(∑j​cj2​)1/2 and the ℓ1\ell^1ℓ1 norm ∥c∥ℓ1=∑j∣cj∣\|c\|_{\ell^1} = \sum_j |c_j|∥c∥ℓ1​=∑j​∣cj​∣.

Definition 1.1. For an integer SSS, the SSS-restricted isometry constant δS\delta_SδS​ is the smallest quantity such that

(1−δS)∥c∥2≤∥FTc∥2≤(1+δS)∥c∥2(1 - \delta_S)\|c\|^2 \le \|F_T c\|^2 \le (1 + \delta_S)\|c\|^2(1−δS​)∥c∥2≤∥FT​c∥2≤(1+δS​)∥c∥2

for all TTT of cardinality at most SSS and all real coefficients (cj)j∈T(c_j)_{j \in T}(cj​)j∈T​. The S,S′S, S'S,S′-restricted orthogonality constant θS,S′\theta_{S,S'}θS,S′​ is the smallest quantity such that

∣⟨FTc,FT′c′⟩∣≤θS,S′ ∥c∥ ∥c′∥|\langle F_T c, F_{T'} c' \rangle| \le \theta_{S,S'} \, \|c\| \, \|c'\|∣⟨FT​c,FT′​c′⟩∣≤θS,S′​∥c∥∥c′∥

for all disjoint T,T′T, T'T,T′ with ∣T∣≤S|T| \le S∣T∣≤S and ∣T′∣≤S′|T'| \le S'∣T′∣≤S′. The paper writes θS\theta_SθS​ for θS,S\theta_{S,S}θS,S​. These numbers measure how far the columns of FFF are from an orthonormal system when only linear combinations of at most SSS columns are considered.

The two optimization problems are

(P1)min⁡d∈Rm∥d∥ℓ1  subject to  Fd=f,(P1′)min⁡g∈Rn∥y−Ag∥ℓ1.(P_1)\quad \min_{d \in \mathbb{R}^m} \|d\|_{\ell^1} \ \text{ subject to } \ Fd = f, \qquad\qquad (P_1')\quad \min_{g \in \mathbb{R}^n} \|y - Ag\|_{\ell^1}.(P1​)d∈Rmmin​∥d∥ℓ1​  subject to  Fd=f,(P1′​)g∈Rnmin​∥y−Ag∥ℓ1​.

A vector is the unique minimizer of one of these problems when it is feasible and every other feasible vector has a strictly larger objective value.

Formalization targets

Goal: Theorem 1.5 (decoding by linear programming)

Let AAA be a real m×nm \times nm×n matrix of full rank with m>nm > nm>n, and FFF a real p×mp \times mp×m matrix with FA=0FA = 0FA=0. Let S≥1S \ge 1S≥1 satisfy

δS(F)+θS,S(F)+θS,2S(F)<1.(1.10)\delta_S(F) + \theta_{S,S}(F) + \theta_{S,2S}(F) < 1 . \tag{1.10}δS​(F)+θS,S​(F)+θS,2S​(F)<1.(1.10)

If y=Af+ey = Af + ey=Af+e where eee is supported on a set of size at most SSS, then fff is the unique minimizer of (P1′)(P_1')(P1′​).

Core: Theorem 1.4 (exact recovery by ℓ1\ell^1ℓ1 minimization)

Let S≥1S \ge 1S≥1 satisfy (1.10) for FFF, and let ccc be supported on a set TTT with ∣T∣≤S|T| \le S∣T∣≤S. Then ccc is the unique minimizer of (P1)(P_1)(P1​) with f:=Fcf := Fcf:=Fc.

Theorem 1.5 is the companion of Theorem 1.4 for the decoding problem, and the mission's milestones are the four lemmas the paper proves on the way: Lemma 1.2 (the δ\deltaδ numbers control the θ\thetaθ numbers), Lemma 1.3 (uniqueness of sparse representations under δ2S<1\delta_{2S} < 1δ2S​<1), and the two dual sparse reconstruction properties, Lemma 2.1 (ℓ2\ell^2ℓ2 version) and Lemma 2.2 (ℓ∞\ell^\inftyℓ∞ version).

Significance

The result. The guarantee is deterministic and uniform: one condition on FFF, checkable in principle from the matrix alone, ensures that a single linear program recovers every sufficiently sparse vector, with no probability of failure. In the decoding reading, a fixed fraction of the ciphertext can be corrupted arbitrarily and the plaintext is still recovered exactly by convex optimization. The paper shows in its Section 3 that Gaussian matrices satisfy (1.10) with overwhelming probability at explicit values of S/mS/mS/m, and in Section 5 that the same hypothesis yields near-optimal recovery of compressible signals from few measurements; both are consequences of the deterministic core formalized here.

Formalizing it. The theorems are proved in the paper, and no machine-checked proof of them exists. Prove2Me holds a formalization of a different restricted-isometry sufficient condition taken from a textbook (HighDimProb.SparseRecovery.rip_implies_exact_recovery); it uses a different definition of the isometry constant and a different hypothesis, so nothing there can be reused as is. This mission produces the definitions of δS\delta_SδS​ and θS,S′\theta_{S,S'}θS,S′​ exactly as in Definition 1.1, the dual-certificate lemmas, and the two theorems, in a form that later missions on compressed sensing can import. The probabilistic Theorem 1.6, Lemma 3.1 and Corollary 1.7, and the compressible-signal Theorem 5.1, are not targets: see the scope section for why.

Difficulty

The whole proof rests on a dual certificate: a vector w∈Hw \in Hw∈H with ⟨w,vj⟩=sgn⁡(cj)\langle w, v_j \rangle = \operatorname{sgn}(c_j)⟨w,vj​⟩=sgn(cj​) for j∈Tj \in Tj∈T and ∣⟨w,vj⟩∣<1|\langle w, v_j \rangle| < 1∣⟨w,vj​⟩∣<1 for j∉Tj \notin Tj∈/T. Given such a www, the argument of Section 2.2 is a short chain of inequalities. The first idea every newcomer has is w=FT(FT∗FT)−1sgn⁡(c)w = F_T (F_T^* F_T)^{-1} \operatorname{sgn}(c)w=FT​(FT∗​FT​)−1sgn(c); this interpolates the signs on TTT and, by restricted orthogonality, its inner products off TTT are small in an ℓ2\ell^2ℓ2 sense, but not in the ℓ∞\ell^\inftyℓ∞ sense required. That is exactly Lemma 2.1: the ℓ∞\ell^\inftyℓ∞ bound holds only outside an exceptional set of at most S′S'S′ indices. Lemma 2.2 removes the exceptional set by an infinite alternating iteration, prescribing values on the previous exceptional set while keeping the values on TTT fixed, and summing a geometrically convergent series.

Two points deserve attention from solvers. First, the paper's proof of Lemma 2.2 prescribes values on sets of size up to 2S2S2S (T0∪TnT_0 \cup T_nT0​∪Tn​) at each step, while the per-step factors it quotes, θS,2S/(1−δS)\theta_{S,2S}/(1-\delta_S)θS,2S​/(1−δS​), are what Lemma 2.1 gives for a set of size SSS; a proof of the printed constant in (2.4) has to account for this, and the hypothesis of Theorem 1.4 leaves room for a proof with slightly worse per-step factors. Second, Lemma 2.1 is printed with θS\theta_SθS​ in its ℓ2\ell^2ℓ2 bound on the exceptional set, while the inequality (2.3) its proof establishes gives θS,S′\theta_{S,S'}θS,S′​; the mission states the lemma with θS,S′\theta_{S,S'}θS,S′​, which coincides with the printed form in the case S′=SS' = SS′=S used by Lemma 2.2.

Formalization scope

Matrices are Matrix (Fin p) (Fin m) ℝ; a coefficient vector on TTT is a vector in Fin m → ℝ supported on the finite set TTT, and FTcF_T cFT​c is F.mulVec c. The Euclidean and ℓ1\ell^1ℓ1 norms and the inner product are explicit finite sums, so every statement can be checked by hand against the paper. HHH is the span of the columns.

The constants δS\delta_SδS​ and θS,S′\theta_{S,S'}θS,S′​ are the infimum of the set of nonnegative δ\deltaδ (resp. θ\thetaθ) satisfying the defining inequalities for all admissible sets and coefficients. This set is nonempty, closed and bounded below, so the infimum is attained and is the paper's smallest quantity; on the paper's domain the smallest such quantity is nonnegative, so the extra clause only fixes a harmless value in degenerate cases such as S=0S = 0S=0. The definitions are total in S,S′S, S'S,S′, and each theorem carries the paper's domain conditions (S≥1S \ge 1S≥1, and 2S≤m2S \le m2S≤m, 3S≤m3S \le m3S≤m or S+S′≤mS + S' \le mS+S′≤m as needed) as explicit hypotheses. The hypotheses are satisfiable, since a matrix with orthonormal columns has δS=θS,S′=0\delta_S = \theta_{S,S'} = 0δS​=θS,S′​=0, so none of the statements is vacuous.

"Unique minimizer" is a strict inequality against every competitor. "Full rank" for the m×nm \times nm×n matrix AAA with m>nm > nm>n is injectivity of g↦Agg \mapsto Agg↦Ag; both are standing assumptions of the paper's Section 1.1 and appear as hypotheses of Theorem 1.5. In Lemma 2.1, "a constant K>0K > 0K>0 depending only on δS\delta_SδS​" is a positive function of the real number δS\delta_SδS​, quantified before all other data.

Out of scope, with the reason for each: Theorem 1.6 refers to a threshold r∗(p,m)r^*(p,m)r∗(p,m) "given in Section 3.5", which the paper does not contain, and to "overwhelming probability" with unspecified constants; Lemma 3.1 is proved only for mmm and ppp "large enough", with an unspecified threshold and an o(1)o(1)o(1) term quoted from the literature; Corollary 1.7 rests on Theorem 1.6; Theorem 5.1 has an unspecified constant CCC and is explicitly not proved in the paper. A future mission can add these once precise statements are fixed.

Contributions that are welcome: proofs of the four milestone lemmas and of the two theorems; reusable lemmas on the attainment and monotonicity of the constants, on the Gram matrix FT∗FTF_T^* F_TFT∗​FT​ and its inverse under δS<1\delta_S < 1δS​<1, and on the duality inequality of Section 2.2. Statements that weaken the hypotheses (for instance to δ2S<2−1\delta_{2S} < \sqrt{2} - 1δ2S​<2​−1) belong to a separate mission.

Selected references

  • E. J. Candès and T. Tao, Decoding by linear programming, IEEE Trans. Inform. Theory 51 (12), 2005, 4203–4215. https://doi.org/10.1109/TIT.2005.858979 (arXiv: https://arxiv.org/abs/math/0502327)
  • E. J. Candès, J. Romberg and T. Tao, Robust uncertainty principles: exact signal reconstruction from highly incomplete frequency information, IEEE Trans. Inform. Theory 52 (2), 2006. https://arxiv.org/abs/math/0409186
  • E. J. Candès and T. Tao, Near optimal signal recovery from random projections: universal encoding strategies?, IEEE Trans. Inform. Theory 52 (12), 2006. https://arxiv.org/abs/math/0410542
  • D. L. Donoho and X. Huo, Uncertainty principles and ideal atomic decomposition, IEEE Trans. Inform. Theory 47, 2001, 2845–2862. https://doi.org/10.1109/18.959265
  • S. S. Chen, D. L. Donoho and M. A. Saunders, Atomic decomposition by basis pursuit, SIAM J. Sci. Comput. 20, 1999, 33–61. https://doi.org/10.1137/S1064827596304010
  • E. J. Candès, The restricted isometry property and its implications for compressed sensing, C. R. Acad. Sci. Paris, Ser. I 346, 2008, 589–592. https://doi.org/10.1016/j.crma.2008.03.014
9 thms2 active usersReviewed
🏆Completed
Optimization·Captain: mikedeng1

Global Convergence of Splitting Methods for Nonconvex Composite Optimization IV: Descent and Stationary Cluster Points of the Proximal Gradient MethodResearch Paper

Motivation

Many problems in statistics, signal processing and machine learning minimize a sum of a smooth loss and a nonsmooth regularizer: least squares with an ℓ0\ell_0ℓ0​ or ℓ1/2\ell_{1/2}ℓ1/2​ penalty, and constrained problems in which the regularizer is the indicator of a nonconvex set. The proximal gradient method (also called forward–backward splitting) is the standard first-order algorithm for such problems. Each step takes a gradient step on the smooth part and then applies the proximal mapping of the nonsmooth part, which for many nonconvex regularizers (hard thresholding, projection onto sparse vectors) has a closed form.

For a smooth part hhh whose gradient is LLL-Lipschitz, the classical analysis allows any constant step size β∈(0,1/L)\beta \in (0, 1/L)β∈(0,1/L), and every cluster point of the iterates is stationary; Li and Pong cite Bredies and Lorenz (Minimization of non-convex, non-smooth functionals by iterative thresholding, preprint, 2009) for this. Attouch, Bolte and Svaiter (Math. Program., 2013) added convergence of the whole sequence when h+Ph + Ph+P has the Kurdyka–Łojasiewicz property. When hhh is nonconvex, however, LLL is governed by the most negative curvature of hhh as much as by the most positive one, and the admissible step sizes can be much smaller than the convex part of hhh alone would require.

Li and Pong (SIAM J. Optim., 2015; preprint arXiv:1407.0753v6) show that the concave part of hhh imposes no restriction on the step size: it suffices to bound the curvature of hhh after it has been offset by a convex function. This mission formalizes that result, Theorem 4 of their paper. It is the fourth mission of a series on the paper; the first three treat its results on the alternating direction method of multipliers.

Setting

Work in Rn\mathbb{R}^nRn with the Euclidean inner product ⟨⋅,⋅⟩\langle\cdot,\cdot\rangle⟨⋅,⋅⟩ and norm ∥⋅∥\|\cdot\|∥⋅∥. The problem is

min⁡x∈Rn  h(x)+P(x),\min_{x \in \mathbb{R}^n}\; h(x) + P(x),x∈Rnmin​h(x)+P(x),

under the paper's standing assumptions: h:Rn→Rh : \mathbb{R}^n \to \mathbb{R}h:Rn→R is twice continuously differentiable with a bounded Hessian ∇2h\nabla^2 h∇2h; P:Rn→(−∞,+∞]P : \mathbb{R}^n \to (-\infty, +\infty]P:Rn→(−∞,+∞] is proper (never −∞-\infty−∞, finite somewhere) and closed (lower semicontinuous); and for every τ>0\tau > 0τ>0 and uuu the proximal problem min⁡yτP(y)+12∥y−u∥2\min_y \tau P(y) + \frac12\|y - u\|^2miny​τP(y)+21​∥y−u∥2 has a minimizer. Neither hhh nor PPP is assumed convex.

A vector vvv is a regular subgradient of PPP at xxx (with P(x)<∞P(x) < \inftyP(x)<∞) if P(z)≥P(x)+⟨v,z−x⟩−ε∥z−x∥P(z) \ge P(x) + \langle v, z - x\rangle - \varepsilon\|z - x\|P(z)≥P(x)+⟨v,z−x⟩−ε∥z−x∥ for all zzz near xxx, for every ε>0\varepsilon > 0ε>0. The limiting subdifferential ∂P(x)\partial P(x)∂P(x) collects the limits v=lim⁡vtv = \lim v^tv=limvt of regular subgradients vtv^tvt at points xt→xx^t \to xxt→x with P(xt)→P(x)P(x^t) \to P(x)P(xt)→P(x). A point xxx is stationary if

0∈∇h(x)+∂P(x).0 \in \nabla h(x) + \partial P(x).0∈∇h(x)+∂P(x).

Given a step size β>0\beta > 0β>0 and an arbitrary starting point x0x^0x0, the proximal gradient method generates (xt)t≥0(x^t)_{t \ge 0}(xt)t≥0​ by

xt+1∈Arg min⁡x{⟨∇h(xt),x−xt⟩+12β∥x−xt∥2+P(x)}.(43)x^{t+1} \in \operatorname*{Arg\,min}_x \Bigl\{ \langle \nabla h(x^t), x - x^t\rangle + \frac{1}{2\beta}\|x - x^t\|^2 + P(x) \Bigr\}. \tag{43}xt+1∈xArgmin​{⟨∇h(xt),x−xt⟩+2β1​∥x−xt∥2+P(x)}.(43)

Any minimizer may be selected. A cluster point of (xt)(x^t)(xt) is the limit of a subsequence xtix^{t_i}xti​.

The step-size condition involves a convex function qqq and a constant ℓ>0\ell > 0ℓ>0 with

−ℓI⪯∇2h(x)+∇2q(x)⪯ℓIfor all x,(44)-\ell I \preceq \nabla^2 h(x) + \nabla^2 q(x) \preceq \ell I \quad \text{for all } x, \tag{44}−ℓI⪯∇2h(x)+∇2q(x)⪯ℓIfor all x,(44)

where ⪯\preceq⪯ is the Loewner order on symmetric linear maps.

Formalization targets

Goal: Theorem 4

Suppose qqq is twice continuously differentiable and convex, ℓ>0\ell > 0ℓ>0, (44) holds, and (xt)(x^t)(xt) is generated by (43) with β∈(0,1/ℓ)\beta \in (0, 1/\ell)β∈(0,1/ℓ). Then

h(xt+1)+P(xt+1)≤h(xt)+P(xt)for all t,h(x^{t+1}) + P(x^{t+1}) \le h(x^t) + P(x^t) \quad \text{for all } t,h(xt+1)+P(xt+1)≤h(xt)+P(xt)for all t,

and every cluster point x∗x^*x∗ of (xt)(x^t)(xt), if one exists, satisfies 0∈∇h(x∗)+∂P(x∗)0 \in \nabla h(x^*) + \partial P(x^*)0∈∇h(x∗)+∂P(x∗).

The goal does not assert that a cluster point exists, nor that the whole sequence converges; both are false without further assumptions.

Milestones

In the order of the paper's proof:

  1. Eq. (3): robustness of ∂\partial∂ under xt→xx^t \to xxt→x, f(xt)→f(x)f(x^t) \to f(x)f(xt)→f(x), vt→vv^t \to vvt→v.
  2. Eq. (45): under (44), (h+q)(v)≤(h+q)(u)+⟨∇h(u)+∇q(u),v−u⟩+ℓ2∥v−u∥2(h+q)(v) \le (h+q)(u) + \langle \nabla h(u) + \nabla q(u), v - u\rangle + \frac{\ell}{2}\|v - u\|^2(h+q)(v)≤(h+q)(u)+⟨∇h(u)+∇q(u),v−u⟩+2ℓ​∥v−u∥2.
  3. Eq. (46): h(xt+1)+P(xt+1)≤h(xt)+P(xt)+(ℓ2−12β)∥xt+1−xt∥2h(x^{t+1}) + P(x^{t+1}) \le h(x^t) + P(x^t) + \bigl(\frac{\ell}{2} - \frac{1}{2\beta}\bigr)\|x^{t+1} - x^t\|^2h(xt+1)+P(xt+1)≤h(xt)+P(xt)+(2ℓ​−2β1​)∥xt+1−xt∥2.
  4. The summed bound after (46): (12β−ℓ2)∑t=0N−1∥xt+1−xt∥2+h(xN)+P(xN)≤h(x0)+P(x0)\bigl(\frac{1}{2\beta} - \frac{\ell}{2}\bigr)\sum_{t=0}^{N-1}\|x^{t+1} - x^t\|^2 + h(x^N) + P(x^N) \le h(x^0) + P(x^0)(2β1​−2ℓ​)∑t=0N−1​∥xt+1−xt∥2+h(xN)+P(xN)≤h(x0)+P(x0).
  5. Vanishing steps: if a cluster point exists, ∥xt+1−xt∥→0\|x^{t+1} - x^t\| \to 0∥xt+1−xt∥→0.
  6. Function-value convergence: if xti→x∗x^{t_i} \to x^*xti​→x∗, then P(xti+1)→P(x∗)P(x^{t_i+1}) \to P(x^*)P(xti​+1)→P(x∗).
  7. Eq. (47): 0∈∇h(xt)+1β(xt+1−xt)+∂P(xt+1)0 \in \nabla h(x^t) + \frac{1}{\beta}(x^{t+1} - x^t) + \partial P(x^{t+1})0∈∇h(xt)+β1​(xt+1−xt)+∂P(xt+1) for every ttt.

Significance

The result. For h=h1−h2h = h_1 - h_2h=h1​−h2​ a difference of convex C2C^2C2 functions with ∇h1\nabla h_1∇h1​ being L1L_1L1​-Lipschitz, (44) holds with q=h2q = h_2q=h2​ and ℓ=L1\ell = L_1ℓ=L1​, so the step size may be taken in (0,1/L1)(0, 1/L_1)(0,1/L1​) whatever the curvature of h2h_2h2​. For an indefinite quadratic h(x)=12⟨x,Qx⟩h(x) = \frac12\langle x, Qx\rangleh(x)=21​⟨x,Qx⟩ the admissible range becomes (0,1/λmax⁡(Q))(0, 1/\lambda_{\max}(Q))(0,1/λmax​(Q)) instead of (0,1/max⁡i∣λi(Q)∣)(0, 1/\max_i|\lambda_i(Q)|)(0,1/maxi​∣λi​(Q)∣), and for a concave quadratic every positive step size is admissible. Because the method is a descent method under this rule, its iterates stay in a sublevel set of h+Ph + Ph+P, so the sequence is bounded whenever h+Ph + Ph+P is coercive. The same estimates feed the whole-sequence convergence argument for Kurdyka–Łojasiewicz functions.

Formalizing it. The theorem is proved in the paper; to the best of current knowledge it has no machine-checked proof. Formalizing it requires the limiting subdifferential of an extended-real-valued function, its closedness property (3), and a Fermat rule for a smooth-plus-nonsmooth sum, none of which is in Mathlib. These are reusable for any nonconvex first-order method analysed through cluster points.

Difficulty

The descent part rests on (45), a descent inequality for h+qh + qh+q whose Lipschitz constant is read off from a two-sided Hessian bound; the familiar descent lemma is stated for hhh alone and does not apply, since ∇h\nabla h∇h may have a much larger Lipschitz constant than ℓ\ellℓ.

The stationarity part is where the naive argument fails. Passing to the limit in (47) needs not only xti+1→x∗x^{t_i+1} \to x^*xti​+1→x∗ but also P(xti+1)→P(x∗)P(x^{t_i+1}) \to P(x^*)P(xti​+1)→P(x∗), because the limiting subdifferential is closed only under PPP-attentive convergence. Lower semicontinuity gives one inequality; the other must come from the minimizing property (43) compared against x∗x^*x∗. The objective may be +∞+\infty+∞ at x0x^0x0, so summability of the steps has to be extracted without assuming a finite starting value.

Formalization scope

The space is EuclideanSpace ℝ (Fin n). hhh and qqq are real-valued; PPP takes values in EReal, and every objective value h(x)+P(x)h(x) + P(x)h(x)+P(x) is compared in EReal, never through EReal.toReal. The Hessian is the derivative of the gradient map, a continuous linear self-map; the Loewner order is Mathlib's partial order A ≤ B ↔ (B - A).IsPositive, and both sides of (44) are kept. The regular subgradient is encoded in its ε\varepsilonε-neighbourhood form, and the limiting subdifferential requires all three convergences xt→xx^t \to xxt→x, P(xt)→P(x)P(x^t) \to P(x)P(xt)→P(x), vt→vv^t \to vvt→v. Stationarity is ∃w∈∂P(x), ∇h(x)+w=0\exists w \in \partial P(x),\ \nabla h(x) + w = 0∃w∈∂P(x), ∇h(x)+w=0. The update (43) is a relation on sequences: xt+1x^{t+1}xt+1 minimizes the bracket over all of Rn\mathbb{R}^nRn, with no uniqueness and a free starting point. A cluster point is the limit of xφ(i)x^{\varphi(i)}xφ(i) for a strictly increasing φ\varphiφ.

Trivializing formalizations are ruled out: (44) is not replaced by "∇h\nabla h∇h is ℓ\ellℓ-Lipschitz", which is the classical special case q=0q = 0q=0; P(x0)<∞P(x^0) < \inftyP(x0)<∞, boundedness of the sequence and existence of a cluster point are not assumed; and a limiting subdifferential without P(xt)→P(x)P(x^t) \to P(x)P(xt)→P(x) is not used, since that would make stationarity a weaker statement.

Contributions welcome: the closedness (3) and the Fermat rule behind (47) for the limiting subdifferential, a descent lemma from a two-sided Hessian bound, and the telescoping and limit arguments of the proof.

Selected references

  • G. Li and T. K. Pong, Global convergence of splitting methods for nonconvex composite optimization, SIAM J. Optim. 25(4), 2015. Preprint arXiv:1407.0753v6. https://arxiv.org/abs/1407.0753 · https://doi.org/10.1137/140998135
  • H. Attouch, J. Bolte and B. F. Svaiter, Convergence of descent methods for semi-algebraic and tame problems: proximal algorithms, forward–backward splitting, and regularized Gauss–Seidel methods, Math. Program. 137, 2013. https://doi.org/10.1007/s10107-011-0484-9
  • K. Bredies and D. A. Lorenz, Minimization of non-convex, non-smooth functionals by iterative thresholding, preprint, 2009 (reference [9] of Li–Pong; no stable link recorded there).
  • R. T. Rockafellar and R. J.-B. Wets, Variational Analysis, Springer, 1998. https://doi.org/10.1007/978-3-642-02431-3
13 thms2 active usersReviewed
🏆Completed
Optimization·Captain: mikedeng1

Global Convergence of Splitting Methods for Nonconvex Composite Optimization II: The Proximal ADMM Sequence Is Bounded Under CoercivityResearch Paper

Motivation

The alternating direction method of multipliers (ADMM) splits a problem of the form min⁡xh(x)+P(Mx)\min_x h(x) + P(\mathcal M x)minx​h(x)+P(Mx) into a sequence of simpler subproblems, one in which the nonsmooth term PPP enters only through its proximal map and one in which only the smooth term hhh appears. For convex problems its convergence theory is classical. In signal processing and statistics, however, the method is routinely run on nonconvex models, such as ℓ0\ell_0ℓ0​- or ℓ1/2\ell_{1/2}ℓ1/2​-regularized least squares, where PPP is nonconvex and possibly discontinuous and convex theory does not apply.

Li and Pong (arXiv:1407.0753, SIAM J. Optim. 25(4), 2015) gave a convergence analysis of a proximal variant of the ADMM for this nonconvex setting. Their Theorem 1 shows that every cluster point of the iterates is a stationary point. That statement is only informative if cluster points exist. Theorem 2, the subject of this mission, gives conditions on hhh, PPP and M\mathcal MM under which the whole sequence of iterates is bounded, so that cluster points exist and Theorem 1 applies.

Setting

Let n,m≥0n, m \ge 0n,m≥0. The data are:

  • h:Rn→Rh : \mathbb{R}^n \to \mathbb{R}h:Rn→R, twice continuously differentiable with bounded Hessian ∇2h\nabla^2 h∇2h;
  • P:Rm→(−∞,+∞]P : \mathbb{R}^m \to (-\infty, +\infty]P:Rm→(−∞,+∞], proper (never −∞-\infty−∞, finite somewhere) and closed (lower semicontinuous);
  • M:Rn→Rm\mathcal M : \mathbb{R}^n \to \mathbb{R}^mM:Rn→Rm linear, with adjoint M∗\mathcal M^*M∗;
  • a penalty β>0\beta > 0β>0 and a convex, twice continuously differentiable ϕ:Rn→R\phi : \mathbb{R}^n \to \mathbb{R}ϕ:Rn→R.

The augmented Lagrangian is

Lβ(x,y,z)=h(x)+P(y)−⟨z,Mx−y⟩+β2∥Mx−y∥2,L_\beta(x, y, z) = h(x) + P(y) - \langle z, \mathcal M x - y\rangle + \frac{\beta}{2}\|\mathcal M x - y\|^2 ,Lβ​(x,y,z)=h(x)+P(y)−⟨z,Mx−y⟩+2β​∥Mx−y∥2,

and the Bregman distance of ϕ\phiϕ is Dϕ(x1,x2)=ϕ(x1)−ϕ(x2)−⟨∇ϕ(x2),x1−x2⟩D_\phi(x_1, x_2) = \phi(x_1) - \phi(x_2) - \langle\nabla\phi(x_2), x_1 - x_2\rangleDϕ​(x1​,x2​)=ϕ(x1​)−ϕ(x2​)−⟨∇ϕ(x2​),x1​−x2​⟩. A sequence (xt,yt,zt)t≥0(x^t, y^t, z^t)_{t\ge 0}(xt,yt,zt)t≥0​ is generated by the proximal ADMM if, from arbitrary x0,z0x^0, z^0x0,z0,

yt+1∈Arg min⁡yLβ(xt,y,zt),xt+1∈Arg min⁡x{Lβ(x,yt+1,zt)+Dϕ(x,xt)},zt+1=zt−β(Mxt+1−yt+1).y^{t+1} \in \operatorname*{Arg\,min}_y L_\beta(x^t, y, z^t), \quad x^{t+1} \in \operatorname*{Arg\,min}_x \{L_\beta(x, y^{t+1}, z^t) + D_\phi(x, x^t)\}, \quad z^{t+1} = z^t - \beta(\mathcal M x^{t+1} - y^{t+1}).yt+1∈yArgmin​Lβ​(xt,y,zt),xt+1∈xArgmin​{Lβ​(x,yt+1,zt)+Dϕ​(x,xt)},zt+1=zt−β(Mxt+1−yt+1).

For a linear self-map T\mathcal TT, write ∥x∥T2=⟨x,Tx⟩\|x\|^2_{\mathcal T} = \langle x, \mathcal T x\rangle∥x∥T2​=⟨x,Tx⟩, and write ⪰\succeq⪰, ≻\succ≻ for the semidefinite and definite order of symmetric maps. Assumption 1 asks for σ>0\sigma > 0σ>0 with MM∗⪰σI\mathcal M\mathcal M^* \succeq \sigma\mathcal IMM∗⪰σI (so M\mathcal MM is surjective), bounds Q1⪰∇2h⪰Q2\mathcal Q_1 \succeq \nabla^2 h \succeq \mathcal Q_2Q1​⪰∇2h⪰Q2​, maps T1⪰T2⪰0\mathcal T_1 \succeq \mathcal T_2 \succeq 0T1​⪰T2​⪰0 with T12⪰[∇2ϕ]2⪰T22\mathcal T_1^2 \succeq [\nabla^2\phi]^2 \succeq \mathcal T_2^2T12​⪰[∇2ϕ]2⪰T22​, δ>0\delta > 0δ>0 with Q2+βM∗M+T2⪰δI\mathcal Q_2 + \beta\mathcal M^*\mathcal M + \mathcal T_2 \succeq \delta\mathcal IQ2​+βM∗M+T2​⪰δI, a bound Q3⪰[∇2h+∇2ϕ]2\mathcal Q_3 \succeq [\nabla^2 h + \nabla^2\phi]^2Q3​⪰[∇2h+∇2ϕ]2, and γ∈(0,1)\gamma \in (0,1)γ∈(0,1) with

δI+T2≻2σβ(1γQ3+11−γT12).\delta\mathcal I + \mathcal T_2 \succ \frac{2}{\sigma\beta}\Bigl(\frac1\gamma\mathcal Q_3 + \frac1{1-\gamma}\mathcal T_1^2\Bigr).δI+T2​≻σβ2​(γ1​Q3​+1−γ1​T12​).

Formalization targets

Goal: Theorem 2 (p. 11)

Suppose Assumption 1 holds and, with the same σ\sigmaσ and γ\gammaγ, there is 0<ζ<2βγ0 < \zeta < 2\beta\gamma0<ζ<2βγ with

h0:=inf⁡x{h(x)−1σζ∥∇h(x)∥2}>−∞.(29)h_0 := \inf_x\Bigl\{h(x) - \frac{1}{\sigma\zeta}\|\nabla h(x)\|^2\Bigr\} > -\infty. \tag{29}h0​:=xinf​{h(x)−σζ1​∥∇h(x)∥2}>−∞.(29)

Suppose that either (i) M\mathcal MM is invertible and lim inf⁡∥y∥→∞P(y)=∞\liminf_{\|y\|\to\infty} P(y) = \inftyliminf∥y∥→∞​P(y)=∞, or (ii) lim inf⁡∥x∥→∞h(x)=∞\liminf_{\|x\|\to\infty} h(x) = \inftyliminf∥x∥→∞​h(x)=∞ and inf⁡yP(y)>−∞\inf_y P(y) > -\inftyinfy​P(y)>−∞. Then

sup⁡t≥0 (∥xt∥+∥yt∥+∥zt∥)<∞.\sup_{t \ge 0}\ \bigl(\|x^t\| + \|y^t\| + \|z^t\|\bigr) < \infty .t≥0sup​ (∥xt∥+∥yt∥+∥zt∥)<∞.

Milestones

The milestones are the numbered displays of the paper's proof:

  • Eq. (13): M∗zt+1=∇h(xt+1)+∇ϕ(xt+1)−∇ϕ(xt)\mathcal M^* z^{t+1} = \nabla h(x^{t+1}) + \nabla\phi(x^{t+1}) - \nabla\phi(x^t)M∗zt+1=∇h(xt+1)+∇ϕ(xt+1)−∇ϕ(xt).
  • Eq. (20): the one-step estimate Lβ(wt+1)≤Lβ(wt)+12∥xt+1−xt∥2σβγQ3−δI−T22+12∥xt−xt−1∥2σβ(1−γ)T122L_\beta(w^{t+1}) \le L_\beta(w^t) + \tfrac12\|x^{t+1}-x^t\|^2_{\frac{2}{\sigma\beta\gamma}\mathcal Q_3 - \delta\mathcal I - \mathcal T_2} + \tfrac12\|x^t - x^{t-1}\|^2_{\frac{2}{\sigma\beta(1-\gamma)}\mathcal T_1^2}Lβ​(wt+1)≤Lβ​(wt)+21​∥xt+1−xt∥σβγ2​Q3​−δI−T2​2​+21​∥xt−xt−1∥σβ(1−γ)2​T12​2​ for t≥1t \ge 1t≥1.
  • Eq. (30): the merit quantity Lβ(wt)+12∥xt−xt−1∥2σβ(1−γ)T122L_\beta(w^t) + \tfrac12\|x^t - x^{t-1}\|^2_{\frac{2}{\sigma\beta(1-\gamma)}\mathcal T_1^2}Lβ​(wt)+21​∥xt−xt−1∥σβ(1−γ)2​T12​2​ stays below its value at t=1t = 1t=1.
  • Eq. (31): σ∥zt∥2≤1γ∥∇h(xt)∥2+11−γ∥xt−xt−1∥T122\sigma\|z^t\|^2 \le \frac1\gamma\|\nabla h(x^t)\|^2 + \frac1{1-\gamma}\|x^t - x^{t-1}\|^2_{\mathcal T_1^2}σ∥zt∥2≤γ1​∥∇h(xt)∥2+1−γ1​∥xt−xt−1∥T12​2​ for t≥1t \ge 1t≥1.
  • Eq. (32): a lower estimate of that value at t=1t = 1t=1 by μh(xt)+(1−μ)h0+cσ∥∇h(xt)∥2+P(yt)+β2∥Mxt−yt−zt/β∥2+…\mu h(x^t) + (1-\mu)h_0 + \frac{c}{\sigma}\|\nabla h(x^t)\|^2 + P(y^t) + \frac\beta2\|\mathcal M x^t - y^t - z^t/\beta\|^2 + \ldotsμh(xt)+(1−μ)h0​+σc​∥∇h(xt)∥2+P(yt)+2β​∥Mxt−yt−zt/β∥2+…, where c=1−μζ−12βγ>0c = \frac{1-\mu}{\zeta} - \frac{1}{2\beta\gamma} > 0c=ζ1−μ​−2βγ1​>0.

Significance

The result. Theorem 2 supplies the existence of cluster points that Theorem 1 assumes. The two together give an unconditional statement: under Assumption 1, (29) and either coercivity condition, the proximal ADMM has a cluster point and every one of them is stationary. The hypotheses cover the models that motivate the paper. Least squares with a coercive nonconvex regularizer falls under case (i) with M=I\mathcal M = \mathcal IM=I, and a strongly convex quadratic hhh with a regularizer that is bounded below and a general surjective M\mathcal MM falls under case (ii) (Examples 4–6 of the paper). Boundedness is also a standing hypothesis of the paper's Theorem 3, the Kurdyka–Łojasiewicz argument for convergence of the whole sequence.

Formalizing it. The result has been proved since 2015. As far as a search of the platform shows, neither it nor the underlying Lyapunov-type estimates for the ADMM has been machine-checked. This mission formalizes the known proof. The estimates (20), (30) and (31) are shared with the stationarity analysis of the same algorithm, so they serve any later formal work on nonconvex ADMM variants.

Difficulty

The obvious approach is to bound the iterates by the monotone quantity of Eq. (30). That quantity involves LβL_\betaLβ​, which contains −⟨z,Mx−y⟩-\langle z, \mathcal M x - y\rangle−⟨z,Mx−y⟩ and is not bounded below a priori, so its decrease alone does not bound anything. The dual term has to be absorbed. It is controlled through ∇h(xt)\nabla h(x^t)∇h(xt) and the last primal step, and the part involving ∥∇h(xt)∥2\|\nabla h(x^t)\|^2∥∇h(xt)∥2 is then paid for out of hhh itself. Condition (29) exists to make exactly this trade possible, which is why it couples ζ\zetaζ to the γ\gammaγ of Assumption 1. The two cases then extract boundedness in opposite orders: (i) goes from yty^tyt through ztz^tzt to xtx^txt using invertibility of M\mathcal MM, and (ii) goes from xtx^txt through ztz^tzt to yty^tyt. In case (i) the lower bound on PPP that the argument needs is not assumed and must itself be derived from coercivity and lower semicontinuity.

Formalization scope

  • Spaces and values. Spaces are EuclideanSpace ℝ (Fin n) and EuclideanSpace ℝ (Fin m), and M\mathcal MM is a continuous linear map with Mathlib's adjoint. PPP, LβL_\betaLβ​ and every inequality containing them live in EReal, stated additively so that no extended-real subtraction occurs.
  • Assumption 1 is one definition with its witnesses σ,δ,γ,Q1,Q2,T1,T2,Q3\sigma, \delta, \gamma, \mathcal Q_1, \mathcal Q_2, \mathcal T_1, \mathcal T_2, \mathcal Q_3σ,δ,γ,Q1​,Q2​,T1​,T2​,Q3​ as explicit parameters, and ⪰\succeq⪰ is Mathlib's Loewner order on self-maps. ∥x∥T2\|x\|^2_{\mathcal T}∥x∥T2​ is ⟨x,Tx⟩\langle x, \mathcal T x\rangle⟨x,Tx⟩ for every T\mathcal TT, including indefinite ones.
  • Condition (29) takes ζ\zetaζ and a real lower bound h0h_0h0​ as parameters, with the same σ\sigmaσ and γ\gammaγ as Assumption 1.
  • The algorithm is a relation on sequences. An argmin is a global minimizer, not necessarily unique. x0x^0x0 and z0z^0z0 are free, and y0y^0y0 is unconstrained. No existence of minimizers is asserted.
  • Coercivity is stated in its ∀r ∃R\forall r\,\exists R∀r∃R form, and "invertible" is bijectivity of M\mathcal MM.
  • Boundedness means one radius for all three blocks and all t≥0t \ge 0t≥0.

Ruling out trivial versions. A formalization that bounds only xtx^txt, fixes γ\gammaγ or ζ\zetaζ to an example's values, lets (29) use a fresh γ\gammaγ, adds a lower bound on PPP in case (i), or assumes minimizers that make the sequence constant proves a different, weaker theorem, and is not the target.

Definitions needed. Proper and closed extended-valued functions, the Hessian as fderiv of gradient, the augmented Lagrangian, the Bregman distance, the proximal-ADMM relation and Assumption 1 are all provided. They mirror the definitions of the companion mission on cluster points of the same algorithm. A solver will need standard facts beyond them: first-order optimality for a differentiable function, the mean-value bound ∥∇ϕ(a)−∇ϕ(b)∥2≤∥a−b∥T122\|\nabla\phi(a) - \nabla\phi(b)\|^2 \le \|a-b\|^2_{\mathcal T_1^2}∥∇ϕ(a)−∇ϕ(b)∥2≤∥a−b∥T12​2​ from the Hessian sandwich, and strong convexity of the xxx-subproblem. Proofs of individual milestones are welcome independently.

Selected references

  • G. Li and T. K. Pong, Global Convergence of Splitting Methods for Nonconvex Composite Optimization, SIAM J. Optim. 25(4), 2015; preprint arXiv:1407.0753v6. https://arxiv.org/abs/1407.0753 (DOI 10.1137/140998135)
  • S. Boyd, N. Parikh, E. Chu, B. Peleato and J. Eckstein, Distributed Optimization and Statistical Learning via the Alternating Direction Method of Multipliers, Found. Trends Mach. Learn. 3(1), 2011. https://doi.org/10.1561/2200000016
  • H. Attouch, J. Bolte and B. F. Svaiter, Convergence of descent methods for semi-algebraic and tame problems, Math. Program. 137, 2013. https://doi.org/10.1007/s10107-011-0484-9
9 thms2 active usersReviewed
🏆Completed
Dynamic ProgrammingMachine LearningReinforcement Learning·Captain: mikedeng1

Approximately Optimal Approximate Reinforcement Learning II: Near-Optimality of a Policy with Small Policy AdvantageResearch Paper

Motivation

Approximate policy iteration and policy-gradient methods stop when they can no longer find a direction of improvement. Kakade and Langford (ICML 2002) asked what such a stopping point guarantees. Their algorithm, conservative policy iteration, halts at a policy π\piπ for which no policy can improve much on π\piπ as measured under a restart distribution μ\muμ; the quantity that is small is the optimal policy advantage OPT(Aπ,μ)\mathrm{OPT}(\mathbb A_{\pi,\mu})OPT(Aπ,μ​). Theorem 6.2 of the paper translates this local condition into a global statement: the performance of π\piπ is close to optimal, with a loss controlled by how well μ\muμ covers the states an optimal policy visits.

The bound is the origin of the distribution mismatch coefficient ∥dπ∗,μ~/μ∥∞\|d_{\pi^*,\tilde\mu}/\mu\|_\infty∥dπ∗,μ~​​/μ∥∞​, which reappears in the analysis of approximate dynamic programming (concentrability coefficients, Munos 2003), of conservative and trust-region methods, and of the convergence of policy gradient methods (Agarwal, Kakade, Lee, Mahajan 2021), where it governs the rate. The performance difference lemma (Lemma 6.1) used in its proof has become a standard tool of reinforcement learning theory.

Setting

A finite Markov decision process has a finite nonempty state set SSS, a finite nonempty action set AAA, transition probabilities P(s′;s,a)P(s';s,a)P(s′;s,a) (for each s,as,as,a a probability distribution over s′s's′), a reward function R:S×A→[0,R]\mathcal R:S\times A\to[0,R]R:S×A→[0,R] with R>0R>0R>0, and a discount factor 0≤γ<10\le\gamma<10≤γ<1. A stochastic policy π(a;s)\pi(a;s)π(a;s) is, for each state sss, a probability distribution over actions. A state distribution is a probability vector μ\muμ on SSS.

The normalized value function is Vπ(s)=(1−γ)E[∑t≥0γtR(st,at)∣π,s]V_\pi(s)=(1-\gamma)E[\sum_{t\ge0}\gamma^t\mathcal R(s_t,a_t)\mid\pi,s]Vπ​(s)=(1−γ)E[∑t≥0​γtR(st​,at​)∣π,s], where s0=ss_0=ss0​=s, at∼π(⋅;st)a_t\sim\pi(\cdot;s_t)at​∼π(⋅;st​) and st+1∼P(⋅;st,at)s_{t+1}\sim P(\cdot;s_t,a_t)st+1​∼P(⋅;st​,at​). The state–action value is Qπ(s,a)=(1−γ)R(s,a)+γ∑s′P(s′;s,a)Vπ(s′)Q_\pi(s,a)=(1-\gamma)\mathcal R(s,a)+\gamma\sum_{s'}P(s';s,a)V_\pi(s')Qπ​(s,a)=(1−γ)R(s,a)+γ∑s′​P(s′;s,a)Vπ​(s′) and the advantage is Aπ(s,a)=Qπ(s,a)−Vπ(s)A_\pi(s,a)=Q_\pi(s,a)-V_\pi(s)Aπ​(s,a)=Qπ​(s,a)−Vπ​(s). The discounted future state distribution from μ\muμ is

dπ,μ(s)=(1−γ)∑t≥0γtPr⁡(st=s;π,μ),s0∼μ,d_{\pi,\mu}(s)=(1-\gamma)\sum_{t\ge0}\gamma^t\Pr(s_t=s;\pi,\mu),\qquad s_0\sim\mu,dπ,μ​(s)=(1−γ)t≥0∑​γtPr(st​=s;π,μ),s0​∼μ,

and the performance of π\piπ from μ\muμ is ημ(π)=∑sμ(s)Vπ(s)\eta_\mu(\pi)=\sum_s\mu(s)V_\pi(s)ημ​(π)=∑s​μ(s)Vπ​(s).

The policy advantage of π′\pi'π′ with respect to π\piπ and μ\muμ is Aπ,μ(π′)=∑sdπ,μ(s)∑aπ′(a;s)Aπ(s,a)\mathbb A_{\pi,\mu}(\pi')=\sum_sd_{\pi,\mu}(s)\sum_a\pi'(a;s)A_\pi(s,a)Aπ,μ​(π′)=∑s​dπ,μ​(s)∑a​π′(a;s)Aπ​(s,a): the expected advantage of π′\pi'π′ over π\piπ on the states π\piπ itself visits. Its maximum over all stochastic policies is OPT(Aπ,μ)=max⁡π′Aπ,μ(π′)\mathrm{OPT}(\mathbb A_{\pi,\mu})=\max_{\pi'}\mathbb A_{\pi,\mu}(\pi')OPT(Aπ,μ​)=maxπ′​Aπ,μ​(π′) (Definition 4.3). An optimal policy π∗\pi^*π∗ satisfies Vπ(s)≤Vπ∗(s)V_\pi(s)\le V_{\pi^*}(s)Vπ​(s)≤Vπ∗​(s) for every policy π\piπ and every state sss. For nonnegative f,gf,gf,g on SSS, ∥f/g∥∞=max⁡sf(s)/g(s)\|f/g\|_\infty=\max_sf(s)/g(s)∥f/g∥∞​=maxs​f(s)/g(s) (p. 5).

Formalization targets

Goal: Theorem 6.2 (p. 6)

If OPT(Aπ,μ)<ε\mathrm{OPT}(\mathbb A_{\pi,\mu})<\varepsilonOPT(Aπ,μ​)<ε and π∗\pi^*π∗ is optimal, then for every state distribution μ~\tilde\muμ~​

ημ~(π∗)−ημ~(π)≤ε1−γ∥dπ∗,μ~dπ,μ∥∞≤ε(1−γ)2∥dπ∗,μ~μ∥∞.\eta_{\tilde\mu}(\pi^*)-\eta_{\tilde\mu}(\pi)\le\frac{\varepsilon}{1-\gamma}\left\|\frac{d_{\pi^*,\tilde\mu}}{d_{\pi,\mu}}\right\|_\infty\le\frac{\varepsilon}{(1-\gamma)^2}\left\|\frac{d_{\pi^*,\tilde\mu}}{\mu}\right\|_\infty.ημ~​​(π∗)−ημ~​​(π)≤1−γε​​dπ,μ​dπ∗,μ~​​​​∞​≤(1−γ)2ε​​μdπ∗,μ~​​​​∞​.

The goal states both inequalities and the outer bound. The evaluation distribution μ~\tilde\muμ~​ is arbitrary and unrelated to the restart distribution μ\muμ; taking μ~=D\tilde\mu=Dμ~​=D, the start distribution, gives Corollary 4.5 (p. 5).

Milestone: Lemma 6.1 (p. 6)

For any policies π~\tilde\piπ~, π\piπ and any starting distribution μ\muμ,

ημ(π~)−ημ(π)=11−γE(a,s)∼π~dπ~,μ[Aπ(s,a)].\eta_\mu(\tilde\pi)-\eta_\mu(\pi)=\frac{1}{1-\gamma}E_{(a,s)\sim\tilde\pi d_{\tilde\pi,\mu}}\big[A_\pi(s,a)\big].ημ​(π~)−ημ​(π)=1−γ1​E(a,s)∼π~dπ~,μ​​[Aπ​(s,a)].

The states are weighted by the future state distribution of the new policy π~\tilde\piπ~, the advantage is that of the old policy π\piπ.

Significance

Theorem 6.2 is the quality guarantee for conservative policy iteration: combined with the paper's Theorem 4.4 (the algorithm stops with OPT(Aπ,μ)<2ε\mathrm{OPT}(\mathbb A_{\pi,\mu})<2\varepsilonOPT(Aπ,μ​)<2ε after polynomially many calls), it bounds the suboptimality of the returned policy for any target distribution, independently of the size of the state space except through the mismatch coefficient. It also explains the role of the restart distribution: a more uniform μ\muμ makes ∥dπ∗,μ~/μ∥∞\|d_{\pi^*,\tilde\mu}/\mu\|_\infty∥dπ∗,μ~​​/μ∥∞​ small. Lemma 6.1 is used throughout later theory, from trust-region policy optimization to the global convergence of policy gradient methods.

Both results are proved in the paper, with short arguments. The contribution of this mission is a machine-checked version of the infinite-horizon discounted statement in the paper's normalization, with the ∥⋅∥∞\|\cdot\|_\infty∥⋅∥∞​ ratios handled exactly, including states where a denominator vanishes. Neither the discounted performance difference lemma for stochastic policies nor the distribution mismatch bound is known to be formalized in Mathlib; a finite-horizon performance difference identity has been formalized separately and is a different statement.

Difficulty

The mathematics is short; the difficulty is in the infinite-horizon bookkeeping. The value function and dπ,μd_{\pi,\mu}dπ,μ​ are infinite series, and Lemma 6.1 relates the series of two different policies: its natural one-line argument uses the Bellman equation for VπV_\piVπ​, which is not the definition here, together with interchanges of infinite sums over time with finite sums over states and actions, each of which needs summability. Theorem 6.2 then needs two facts that are not stated as results in the paper: that OPT(Aπ,μ)\mathrm{OPT}(\mathbb A_{\pi,\mu})OPT(Aπ,μ​) equals ∑sdπ,μ(s)max⁡aAπ(s,a)\sum_sd_{\pi,\mu}(s)\max_aA_\pi(s,a)∑s​dπ,μ​(s)maxa​Aπ​(s,a) (the supremum over policies is attained by a greedy policy, and max⁡aAπ(s,a)≥0\max_aA_\pi(s,a)\ge0maxa​Aπ​(s,a)≥0), and that dπ,μ(s)≥(1−γ)μ(s)d_{\pi,\mu}(s)\ge(1-\gamma)\mu(s)dπ,μ​(s)≥(1−γ)μ(s). Reading the ℓ∞\ell_\inftyℓ∞​ ratio with real division would give a false statement when a denominator is zero; the statement avoids this.

Formalization scope

States and actions are finite nonempty types; policies and kernels are real-valued functions π s a (the paper's π(a;s)\pi(a;s)π(a;s)) and P s a s' (the paper's P(s′;s,a)P(s';s,a)P(s′;s,a)), with their distribution properties as explicit hypotheses. The published definitions IsTransitionKernel, IsPolicy, InducedTransition, OccupationDist, InducedReward and PolicyValue from the Foundations of Machine Learning series are reused; VπV_\piVπ​ is (1−γ)(1-\gamma)(1−γ) times PolicyValue, the defining series. OPT\mathrm{OPT}OPT is the supremum of the policy advantages over stochastic policies, which is the paper's maximum. Optimality of π∗\pi^*π∗ is relative to stationary stochastic policies, the paper's policy class; the existence of an optimal policy (the paper's "well known result", p. 2) is not part of this mission.

Every hypothesis is explicit: rewards in [0,R][0,R][0,R] with R>0R>0R>0, 0≤γ<10\le\gamma<10≤γ<1, PPP a kernel, π\piπ and π∗\pi^*π∗ stochastic policies, μ\muμ and μ~\tilde\muμ~​ state distributions. Each ∥f/g∥∞\|f/g\|_\infty∥f/g∥∞​ bound is stated multiplicatively: "X≤K∥f/g∥∞X\le K\|f/g\|_\inftyX≤K∥f/g∥∞​" is "X≤KCX\le KCX≤KC for every CCC with f(s)≤Cg(s)f(s)\le Cg(s)f(s)≤Cg(s) for all sss". When some g(s)=0<f(s)g(s)=0<f(s)g(s)=0<f(s) no such CCC exists and the bound is empty, which matches ∥f/g∥∞=+∞\|f/g\|_\infty=+\infty∥f/g∥∞​=+∞; no full-support assumption is made on μ\muμ or μ~\tilde\muμ~​. The hypothesis OPT(Aπ,μ)<ε\mathrm{OPT}(\mathbb A_{\pi,\mu})<\varepsilonOPT(Aπ,μ​)<ε is on the supremum itself, not on the closed form ∑sdπ,μ(s)max⁡aAπ(s,a)\sum_sd_{\pi,\mu}(s)\max_aA_\pi(s,a)∑s​dπ,μ​(s)maxa​Aπ​(s,a), which is a step of the proof; a formalization that assumed the closed form, or that divided by dπ,μd_{\pi,\mu}dπ,μ​ in real arithmetic, would not be this theorem. The proof of the theorem uses only that π∗\pi^*π∗ is a policy; optimality is kept as a hypothesis because the paper states it.

The proof on p. 7 twice writes dπ,μ(s)≤(1−γ)μ(s)d_{\pi,\mu}(s)\le(1-\gamma)\mu(s)dπ,μ​(s)≤(1−γ)μ(s); the inequality it uses, and the one stated on p. 5, is dπ,μ(s)≥(1−γ)μ(s)d_{\pi,\mu}(s)\ge(1-\gamma)\mu(s)dπ,μ​(s)≥(1−γ)μ(s). This slip is in the proof, not in the statement. Pages are PDF pages; the paper has no printed page numbers.

Useful reusable infrastructure: summability and Bellman equations for the normalized discounted value, dπ,μd_{\pi,\mu}dπ,μ​ as a probability distribution with dπ,μ≥(1−γ)μd_{\pi,\mu}\ge(1-\gamma)\mudπ,μ​≥(1−γ)μ, and attainment of OPT\mathrm{OPT}OPT by a greedy policy. Contributions of any of these as separate lemmas are welcome.

Selected references

  • S. Kakade, J. Langford, Approximately Optimal Approximate Reinforcement Learning, Proceedings of the 19th International Conference on Machine Learning (ICML), 2002. https://dl.acm.org/doi/10.5555/645531.656005
  • R. Munos, Error Bounds for Approximate Policy Iteration, ICML 2003. https://dl.acm.org/doi/10.5555/3041838.3041903
  • A. Agarwal, S. Kakade, J. Lee, G. Mahajan, On the Theory of Policy Gradient Methods: Optimality, Approximation, and Distribution Shift, Journal of Machine Learning Research 22(98), 2021. https://jmlr.org/papers/v22/19-736.html
  • J. Schulman, S. Levine, P. Abbeel, M. Jordan, P. Moritz, Trust Region Policy Optimization, ICML 2015. https://arxiv.org/abs/1502.05477
10 thms2 active usersReviewed
PreviousPage 37 of 45Next

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me