The study of information encoded in the states of quantum systems, where the qubit, superposition, and entanglement replace the classical bit and measurement is inherently probabilistic. Governed by the constraints of quantum mechanics, it underpins quantum computing and cryptography and the theory of optimal quantum measurements.
Missions
🏆Completed
Captain: Goku
Quantum Computing: Lecture Notes 6: Abelian HSP: the standard algorithm samples uniformly from H^⊥Textbook
Motivation
This mission develops Chapter 6 of Quantum Computing: Lecture Notes by Ronald de Wolf. The chapter's selected results describe the mathematical guarantees below.
Setting and conventions
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
This is the correctness statement of the standard quantum algorithm for the Abelian hidden subgroup problem.
Let G=ZN1×⋯×ZNℓ be a finite Abelian group written additively (Ni≥1), with characters χg(h)=∏i=1ℓωNigihi, ωN=e2πi/N, and quantum Fourier transform FG=FN1⊗⋯⊗FNℓ, ∣k⟩↦∣χk⟩=∣G∣−1/2∑g∈Gχk(g)∣g⟩. Let S be a finite set, H≤G a subgroup, and f:G→S a function hiding H:
f(g)=f(g′)⟺g+H=g′+H.
The standard algorithm starts in ∣0⟩∣0⟩ (registers of dimensions ∣G∣ and ∣S∣), prepares ∣G∣−1/2∑g∣g⟩∣0⟩, computes f in superposition with one query, ∣g⟩∣0⟩↦∣g⟩∣f(g)⟩, (measures the second register,) applies FG to the first register and measures it. For every g∈G the outcome g occurs with probability
Pr[output g]={∣H∣/∣G∣0if χg(h)=1 for all h∈H(i.e. χg∈H⊥),otherwise.
Since ∣H⊥∣=∣G∣/∣H∣, the algorithm samples uniformly from the labels of the elements of H⊥; each sample gives a linear constraint on H, which is how the algorithm generalizes Simon's algorithm, period finding and discrete logarithms.
Formalization Note The finite set S is given an arbitrary additive group structure so that computing f is the unitary ∣g,b⟩↦∣g,b+f(g)⟩, which maps ∣g,0⟩ to ∣g,f(g)⟩ as in the source. The intermediate measurement of the second register (step 4) is omitted: it does not change the distribution of the first register, so the output law is the first-register marginal of the state before the final measurement. The source's claim that H can then be found efficiently from few samples is asserted without proof and is not part of this statement.
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Supporting targets
§6.2.2: Abelian HSP: the standard algorithm samples uniformly from H^⊥.
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
An Introduction to Quantum Error Correction and Fault-Tolerant Quantum Computation 2: Quantum Gilbert–Varshamov, quantum Hamming, and asymptotic rate boundsTextbook
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
An [[n,k,d]] code is a subspace C of (C2)⊗n of dimension 2k such that every operator E acting on at most d−1 qubits satisfies ⟨ψ∣E∣ψ⟩=c′(E) for all unit vectors ∣ψ⟩∈C, with c′(E) independent of ∣ψ⟩ (eq. (34)); that is, C has distance at least d. Put t=⌊(d−1)/2⌋. The code is nondegenerate if, for every unit vector ∣ψ⟩∈C, the Gram matrix (⟨ψ∣Pa†Pb∣ψ⟩)a,b over the phase-free Pauli operators Pa of weight at most t is nonsingular. Let H(x)=−xlog2x−(1−x)log2(1−x).
(Quantum Gilbert–Varshamov bound.) If d≥1 and
(j=0∑d−13j(jn))2k≤2n,
then an [[n,k,d]] code exists.
2. (Quantum Hamming bound.) Every nondegenerate [[n,k,d]] code satisfies
(j=0∑t3j(jn))2k≤2n.
(Asymptotic rates.) Let 0<p<1/2 and ε>0. There is N such that for every n≥N:
every nondegenerate [[n,k,d]] code with d≥2pn has k/n≤1−plog23−H(p)+ε;
if 1−2plog23−H(2p)>0, there is a nondegenerate [[n,k,d]] code with d≥2pn and k/n≥1−2plog23−H(2p)−ε.
The first two bounds are counting arguments. The third gives the rate window, eq. (37), between which the best nondegenerate codes lie.
Formalization Note The source's 'distance d' is read as distance at least d, so existence is meaningful also for k=0. The hypothesis d≥1 excludes d=0, where (36) is an empty sum and the claim would demand a 2k-dimensional code for every k. The asymptotic clause is read as an ε–N statement. The lower rate bound is asserted only when it is positive.
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Supporting targets
Theorem 1: No-Cloning: no quantum operation copies every state.
Theorem 2: Correctable errors are closed under linear combinations; weight-t Pauli errors give all t-qubit errors.
Theorem 3: Knill–Laflamme condition for quantum error correction.
Theorem 4: Quantum Gilbert–Varshamov, quantum Hamming, and asymptotic rate bounds.
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
Selected references
Daniel Gottesman, An Introduction to Quantum Error Correction and Fault-Tolerant Quantum Computation, 2009, v1. https://arxiv.org/pdf/0904.2557v1.
Quantum algorithms for optimizers 7: A (‖A‖_F, Õ(q), ξ)-block-encoding of a classical matrix from QRAM, with an explicit cost modelTextbook
Motivation
This mission develops Chapter 7 of Quantum algorithms for optimizers by Giacomo Nannicini. The chapter's selected results describe the mathematical guarantees below.
Setting and conventions
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
Fix constants C0∈R and c0∈N (those of the assumption p=O(1)). There are constants C>0 and c∈N such that the following holds. Let q,p∈N, d=2q, ξ>0, write L=log(2+d)+log(2+1/ξ), and assume p≤C0Lc0. Then there exist
a QRAM (Def. 5.39) with 2b addresses and words of r bits, of size 2br≤Cd2(p+1)Lc;
a straight-line real-arithmetic program of at most Cd2Lc operations (+,−,×,÷,⋅,arccos, complex argument, rational constants) and an addressing map, which compute the QRAM contents from the entries of the matrix;
a quantum circuit V on w+q qubits with w≤C(q+1)Lc, making at most CLc uncontrolled calls to the QRAM (or its inverse) and using at most CLc two-qubit gates,
all independent of the matrix, such that for every A∈Cd×d whose entries satisfy ∣Reaij∣,∣Imaij∣≤2p, the unitary V(UQRAM(A)) obtained with the QRAM loaded by the program is an (∥A∥F,w,ξ)-block-encoding of A:
∥A∥F(⟨0∣w⊗I)V(∣0⟩w⊗I)−A≤ξ.
This is the data-structure route to block-encodings of classically stored dense matrices, with subnormalization the Frobenius norm and only polylogarithmic quantum cost.
Formalization Note Corrected statement. The source gives no cost model for classical arithmetic, does not say in which parameters p is polylogarithmic, and does not say how the costs depend on ξ. Here classical cost is the length of a straight-line real-arithmetic program (the model of the Cor. 5.45 chunk), p=O(1) means p≤C0Lc0 for arbitrary C0,c0, all O bounds are polylogarithmic in d and 1/ξ, and the QRAM size is O(d2p) rather than O(d2p) because the word size must grow with log(1/ξ). A p-bit entry is modelled by the magnitude bound 2p on its real and imaginary parts.
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Proposition 7.14: Product of block-encodings (error term corrected).
Proposition 7.18: Linear combination of block-encodings (error term corrected for α < 1).
Lemma 7.20: Block-encoding of the diagonal matrix of inner products ⟨ϕ_j|ψ_j⟩.
Proposition 7.21: Block-encoding from sparse-access oracles (rotation cost and entry encoding made explicit).
Lemma 7.37: A bounded polynomial of degree Õ(β) approximating exp(2βx)/4 on [−1, 0].
Lemma 7.39: Block-encoding a density matrix from a unitary preparing its purification.
Proposition 7.41: One-copy trace estimator: a random variable with bias ≤ θ/4 for Tr(Aρ) and constant variance.
Proposition 7.38: Gibbs-state preparation from a block-encoding of H, for the polynomial of Lemma 7.37 made explicit.
Proposition 7.29: A (‖A‖_F, Õ(q), ξ)-block-encoding of a classical matrix from QRAM, with an explicit cost model.
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
Quantum Computing: Lecture Notes 4: Phase estimation returns an exactly n-bit phase with probability 1Textbook
Motivation
This mission develops Chapter 4 of Quantum Computing: Lecture Notes by Ronald de Wolf. The chapter's selected results describe the mathematical guarantees below.
Setting and conventions
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
Let U be a unitary matrix acting on a finite-dimensional space, and let ∣ψ⟩ be a unit eigenvector of U with eigenvalue e2πiφ, where φ∈[0,1):
U∣ψ⟩=e2πiφ∣ψ⟩.
Fix n≥0, put N=2n, and suppose φ can be written exactly with n bits, i.e. 2nφ=k for a natural number k (necessarily k<N). Run phase estimation: start in ∣0n⟩∣ψ⟩, apply the quantum Fourier transform FN to the first n qubits, apply the controlled power ∣j⟩∣ψ⟩↦∣j⟩Uj∣ψ⟩, then apply FN−1=FN∗ to the first n qubits and measure them in the computational basis (bit strings read most significant bit first). Then
after the controlled power the state is (FN∣k⟩)⊗∣ψ⟩, i.e. N1∑j=0N−1e2πiφj∣j⟩∣ψ⟩=FN∣2nφ⟩∣ψ⟩;
the measurement of the first register yields the outcome k=2nφ=φ1…φn with probability 1.
This is the exact case of phase estimation, the subroutine underlying Shor's algorithm, quantum counting and many Hamiltonian algorithms.
Formalization Note The final state is the shared phaseEstimationState, (FN∗⊗I)Λ(U)(FN⊗I)∣0n⟩∣ψ⟩ with Λ(U)∣j⟩∣ϕ⟩=∣j⟩Uj∣ϕ⟩; the probability of outcome k on the first register is the marginal ∑b∣⟨k,b∣⋅⟩∣2. The source's general-case claim (an n-bit approximation with additive error O(2−n) 'with high probability') supplies no probability constant and is not stated.
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Supporting targets
§4.5: The n-qubit QFT has an exact circuit of at most n^2 Hadamard, controlled-R_s and swap gates.
§4.6: Phase estimation returns an exactly n-bit phase with probability 1.
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
Lecture Notes on Quantum Algorithms 8: Principal ideals of Z[√d] coincide iff the generators differ by a unitTextbook
Motivation
This mission develops Chapter 8 of Lecture Notes on Quantum Algorithms by Andrew Childs. The chapter's selected results describe the mathematical guarantees below.
Setting and conventions
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
Let d be a squarefree integer with d≥2, and let Z[d]={x+yd:x,y∈Z}. For ξ∈Z[d] write ξZ[d] for the principal ideal generated by ξ.
For all ξ,ζ∈Z[d],
ξZ[d]=ζZ[d]⟺ξ=ζϵ for some unit ϵ of Z[d].
Thus the map ξ↦ξZ[d] is multiplicatively periodic, with the units as its periods; this periodicity, with period the fundamental unit, underlies the periodic function used in Hallgren's algorithm for Pell's equation.
Formalization NoteZ[d] is Mathlib's ℤ√d, the principal ideal ξZ[d] is Ideal.span {ξ}, and a unit is IsUnit. The statement holds also for ξ=0 (both sides then force ζ=0), so no nonzero hypothesis is added.
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Supporting targets
Proposition 8.1: Units of Z[√d] are exactly the elements of norm ±1.
Proposition 8.2: Principal ideals of Z[√d] coincide iff the generators differ by a unit.
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
Lecture Notes on Quantum Algorithms 26: One compressed phase query raises ‖P ψ‖ by at most √(2/2^m)Textbook
Motivation
This mission develops Chapter 26 of Lecture Notes on Quantum Algorithms by Andrew Childs. The chapter's selected results describe the mathematical guarantees below.
Setting and conventions
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
Let n,m≥0, Σ={0,1}m, and let W be a finite workspace. Consider the Hilbert space with computational basis ∣x,z,w,y⟩, where x∈[n] is the query input, z∈Σ the query output, w∈W the workspace and y∈(Σ∪{⊥})n the oracle register. The compressed phase oracle is
Φ=(I⊗H⊗m⊗I⊗C⊗n)Λ(I⊗H⊗m⊗I⊗C⊗n).
Here H is the Hadamard gate, C is the compression unitary of §26.1 (it swaps ∣⊥⟩ and ∣0^⟩ and fixes ∣y^⟩ for y=0), and Λ∣x,z,w,y⟩=∣x,z⊕yx,w,y⟩ (the identity when yx=⊥). Let P be the projection onto the basis states whose oracle register contains a zero, i.e. yx∗=0m for some x∗. Then for every state ∣ψ⟩ (unit vector),
∥PΦ∣ψ⟩∥≤∥P∣ψ⟩∥+2m2.
Iterated over t queries, this shows that the compressed-oracle probability of having recorded a zero is O(t2/2m). Combined with Lemma 26.1, this gives the Ω(2m/2) query lower bound for unstructured search against a random oracle.
Formalization Note∣ψ⟩ is an arbitrary unit vector of the full space; no reachability condition is imposed, and the proof uses none. The register order is ((x,z),w),y, as in (26.30).
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Supporting targets
Lemma 26.1: Standard vs compressed oracle: √p ≤ √p′ + √(k/2^m).
Fact 26.2: One compressed phase query raises ‖P ψ‖ by at most √(2/2^m).
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
Quantum Computing: Lecture Notes 18: Perfect quantum bit commitment is impossible: perfect concealing implies no bindingTextbook
Motivation
This mission develops Chapter 18 of Quantum Computing: Lecture Notes by Ronald de Wolf. The chapter's selected results describe the mathematical guarantees below.
Setting and conventions
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
This is the impossibility of perfect quantum bit commitment.
In de Wolf's model, a quantum bit-commitment protocol is represented by the two joint pure states ∣ϕ0⟩,∣ϕ1⟩∈CdA⊗CdB that Alice and Bob share at the end of the commit phase when Alice honestly commits to the bit b=0 or b=1. Here CdA is Alice's space and CdB is Bob's. Restricting to pure states loses no generality. The protocol is perfectly concealing if Bob's reduced density matrix does not depend on b, where TrA is the partial trace over Alice's register.
Let dA,dB≥0 and let ∣ϕ0⟩,∣ϕ1⟩ be unit vectors in CdA⊗CdB with
TrA(∣ϕ0⟩⟨ϕ0∣)=TrA(∣ϕ1⟩⟨ϕ1∣).
Then there is a unitary U on Alice's space CdA such that
(U⊗I)∣ϕ0⟩=∣ϕ1⟩.
So after committing to 0, Alice can turn the joint state into the honest commitment to 1 by acting on her own register only. The protocol is then not binding at all, and no quantum bit-commitment protocol is both perfectly concealing and perfectly binding.
Formalization Note Alice's space is indexed by Fin dA and Bob's by Fin dB. The joint space is indexed by Fin dA × Fin dB with Alice's register first. TrA(∣ϕ⟩⟨ϕ∣) is traceLeft (pureDensity phi), and U⊗I is Matrix.kronecker U 1 with U in Matrix.unitaryGroup. When dA=0 or dB=0 no unit vector exists, so the statement is vacuous in those cases, as in the source.
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Supporting targets
§18.4: Perfect quantum bit commitment is impossible: perfect concealing implies no binding.
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
Quantum algorithms for optimizers 4: Quantum minimum finding (Dürr–Høyer), with explicit bit width, interruption and gate modelTextbook
Motivation
This mission develops Chapter 4 of Quantum algorithms for optimizers by Giacomo Nannicini. The chapter's selected results describe the mathematical guarantees below.
Setting and conventions
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
Let f:{0,1}n→Z take values of bit width b, i.e. ∣f(j)∣<2b for all j, and let Uf:∣j⟩∣k⟩↦∣j⟩∣k⊕f(j)⟩ evaluate f in binary. Algorithm 2 with budget T starts from a uniformly random incumbent ℓ and repeatedly runs Algorithm 1 (search with an unknown number of marked items) with the marking unitary Um:∣j⟩∣y⟩↦∣j⟩∣y⊕I(f(j)<f(ℓ))⟩, replacing ℓ by the returned index k whenever f(k)<f(ℓ); a call of Algorithm 1 that would exceed the budget is interrupted at the T-th application of Uf, and the algorithm then returns ℓ. Each application of Um counts as one application of Uf and is charged 3n+2b+1 additional gates; each round of Algorithm 1 with m qubits of precision is charged m+m(m+1)/2 further gates (Hadamards and the inverse QFT).
There are absolute constants c,C>0 such that for every n, b, every such f and every δ∈(0,1) the following holds. Run Algorithm 2 independently k=⌈log3(1/δ)⌉ times with budget T=⌈c2n⌉ and output an f-minimal one of the k returned indices. Then:
with probability at least 1−δ the output is a global minimizer of f;
on every outcome, the total number of applications of Uf (including the k evaluations used to select the output) is at most
C2n(1+log(1/δ)),
and the number of additional gates is at most C2n(n+b+1)(1+log(1/δ)).
This is the quadratic quantum speedup for unstructured minimization, the basis of the optimization applications of Grover search.
Formalization Note The source's O~(2n) gate bound is stated with the suppressed polylogarithmic factors n+b+1 and 1+log(1/δ) explicit, the interruption rule for the budget is made explicit, and T, k are the choices of the source's proof. Algorithm 1 is the shared formalization of the earlier corollary; the outcome law is a weight on (returned index, applications of Uf, gates).
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Supporting targets
Theorem 4.6: Amplitude amplification: overlap 2/3 with the good state using O(1/√p) applications of S and R.
Corollary 4.9: Search with a known number of marked elements in O(√(2^n/|M|)) oracle calls.
Corollary 4.10: Finding all marked elements with O(√(|M| 2^n)) oracle calls.
Lemma 4.11: Oblivious amplitude amplification: the partner state Ψ⊥ is orthogonal to |0⟩|ψ⟩ and has no flag-0 support.
Theorem 4.12: Oblivious amplitude amplification: each iteration rotates by 2θ.
Proposition 4.15: Eigenstates of the Grover operator in amplitude estimation.
Proposition 4.19: Angle error to probability error for sin².
Proposition 4.21: Error bound of amplitude estimation with m qubits.
Corollary 4.22: Amplitude estimation to additive error ε with O(log 1/ε) qubits and O(1/ε) queries.
Lemma 4.28: Near-orthogonality of the two amplitude-estimation output states.
Theorem 4.29: Quantum search without knowing the number of marked items: O(1/θ) expected queries.
Corollary 4.30: Search without knowing |M| with O(√(2^n/|M|)) expected oracle calls.
Theorem 4.31: Quantum minimum finding (Dürr–Høyer), with explicit bit width, interruption and gate model.
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
Lecture Notes on Quantum Algorithms 24: Effective spectral gap lemmaTextbook
Motivation
This mission develops Chapter 24 of Lecture Notes on Quantum Algorithms by Andrew Childs. The chapter's selected results describe the mathematical guarantees below.
Setting and conventions
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
Let H be a finite-dimensional complex inner product space and let Π and Δ be orthogonal projections on H. Put U=(2Π−I)(2Δ−I), a unitary. For ω≥0, let Pω be the orthogonal projector onto the span of the eigenvectors of U whose eigenvalues are eiθ with ∣θ∣<ω. If ∣ϕ⟩∈H is a unit vector with Δ∣ϕ⟩=0, then
∥PωΠ∣ϕ⟩∥≤2ω.
The lemma is the key step in showing that the phase-estimation algorithm built from a dual adversary solution rejects inputs with f(x)=0: the start state has little weight on eigenvectors of small phase.
Formalization NoteΠ and Δ are given as the orthogonal projections onto submodules K and L; 2P−I is Mathlib's reflection through the subspace. The eigenvalue set is {eiθ:θ∈R,∣θ∣<ω}, which is the same set as with θ restricted to (−π,π].
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Supporting targets
Theorem 24.1: The dual of the general adversary bound.
Theorem 24.2: Adversary bound of a composed function is at most the product.
Lemma 24.3: Effective spectral gap lemma.
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
Quantum Computing: Lecture Notes 12: |t⁻_x⟩ is close to the large-eigenphase part of U_xTextbook
Motivation
This mission develops Chapter 12 of Quantum Computing: Lecture Notes by Ronald de Wolf. The chapter's selected results describe the mathematical guarantees below.
Setting and conventions
The linked theorem statements and shared definitions specify the register types, oracle access, normalization, and resource conventions. Their source locators and independent readbacks accompany each target.
Chapter goal
In the setting of Claim 3 (a feasible solution {uxj,vxj} of the dual SDP for ADV±(f) with objective value A>0, the states ∣tx±⟩, ∣ψy⟩, the projectors Λ, Πx and the unitary Ux=(2Πx−I)(2Λ−I)), let Θ=1/(1000A). For every x∈D there is a vector ∣φ⟩ in the span of the eigenvectors of Ux whose eigenvalues eiθ, θ∈(−π,π], satisfy ∣θ∣>Θ, such that
∣tx−⟩−∣φ⟩≤201+2000A1.
Equivalently, the component of ∣tx−⟩ in the eigenspaces of Ux with eigenphase ∣θ∣≤Θ has norm at most 1/20+1/(2000A). Together with Claim 3, this lets phase estimation with precision Θ/2 distinguish ∣tx+⟩ from ∣tx−⟩.
Formalization Note The eigenphase θ is the principal argument Complex.arg, which takes values in (−π,π]; the span of eigenvectors is the supremum of the eigenspaces of Ux over the eigenvalues with ∣argμ∣>Θ. The informal "close" is pinned to the bound the source's proof establishes, and it is stated for every A>0 (the proof's own hypothesis; the source adds "we may assume A≥1" only to call the bound small).
Significance
These are known mathematical results. Their Lean statements have been checked and reviewed against the cited source; formal proofs remain open for contributors.
Supporting targets
§12.1, Claim 1: Generalized adversary method: the final progress measure is small.
§12.1, Claim 2: Generalized adversary method: one query changes the progress measure by at most 2 max_i ‖Γ_i‖.
§12.3, unnumbered: A dual-adversary solution of value A gives an O(A)-query bounded-error algorithm.
§12.3, Claim 3: |t⁺_x⟩ is within 0.01 of an eigenvalue-1 eigenvector of U_x.
§12.3, Claim 4: |t⁻_x⟩ is close to the large-eigenphase part of U_x.
Formalization scope
Prove the existing statements under their stated hypotheses and definitions. Any correction to a printed source claim remains explicit in its target description. All listed target proofs are currently sorry; no proof is claimed. The mission goal is the designated chapter capstone; the remaining targets are separate milestones. Parts a, b, c and d are merged into their original chapter.
Seiberg–Seifnashri–Shao 2024: Non-invertible Kramers–Wannier symmetry on the Ising chainResearch Paper
Motivation
Kramers–Wannier duality was found in 1941 as a map between the high- and low-temperature phases of the two-dimensional Ising model (Kramers–Wannier 1941). In its quantum form it exchanges the transverse field Xj and the nearest-neighbour coupling Zj−1Zj of the transverse-field Ising chain, and it fixes the critical point. In conformal field theory it is implemented by a topological defect line (Fröhlich–Fuchs–Runkel–Schweigert 2004), the prototypical non-invertible symmetry: its fusion with itself is a sum of operators, not a single invertible one (Shao, TASI lectures 2023).
On a finite periodic chain the duality cannot be a unitary operator, because it maps the Z2-even sector to itself and annihilates the odd sector. Seiberg–Shao 2023 and Seiberg–Seifnashri–Shao 2024 wrote the exact lattice operator D on the tensor-product Hilbert space (C2)⊗L. They showed that its algebra closes only after the lattice translation is included: D2=(1+η)T−1. This is a lattice relation that a fusion category does not describe, since the continuum fusion rule N2=1+η appears only at low energy. The same identity drives the LSM-type constraint proved in that paper.
Timeline. 1941: Kramers and Wannier find the duality of the 2D Ising model. 2004: Fröhlich, Fuchs, Runkel and Schweigert realise it as a conformal defect. 2016: Aasen–Mong–Fendley construct the lattice defects. 2023–2024: Seiberg, Seifnashri and Shao find the exact operator algebra on the tensor-product Hilbert space, including the translation factor.
Setting
Fix L≥1 qubits on a ring, with site indices in Z/L (Fin L with modular arithmetic). A computational-basis state is labelled by a configuration s=(s0,…,sL−1)∈(Z/2)L (Config L). Operators are complex 2L×2L matrices indexed by configurations (Op L). Write sgn(a)=(−1)a.
Pauli operators.Xj∣s⟩=∣s+ej⟩ flips spin j (pauliX), and Zj∣s⟩=(−1)sj∣s⟩ (pauliZ).
Z2 symmetry.η=∏jXj flips every spin (eta).
Translation.T∣s⟩=∣s′⟩ with sk′=sk−1 (transl), so that TXjT−1=Xj+1.
Kramers–Wannier operator (kwD):
⟨t∣D∣s⟩=2−L/2(−1)∑ktk(sk+sk+1).
This explicit formula is the definition used throughout. Relations (1.5) together with Dη=D determine D up to a scalar, and (1.4) fixes the scalar up to a sign. Every statement below is invariant under D↦−D, so this is the operator of Seiberg–Seifnashri–Shao in that paper's normalisation (footnote 1). Its equality with their matrix-product presentation (2.64) is not formalised here.
Formalization targets
Goal: the non-invertible fusion rule (eqs. (1.4), (2.65), (F.18))
Translation and adjoint (eq. (2.65), Table 1): TD=DT and D†=DT.
Non-invertibility (§1.1): D is not a unit, and kerD=0.
Significance
The result. The goal identity is the defining relation of the lattice Kramers–Wannier symmetry. Together with milestones 4–5 it shows that D/2 restricted to the η-even sector squares to a translation, so D is a square root of T−1 there. The paper uses this to derive its LSM-type constraint, and also to show that the lattice symmetry is not a fusion category, because the continuum rule N2=1+η only emerges at low energy. Milestones 2–3 are the lattice Kramers–Wannier map on Z2-invariant operators, so D commutes with the critical Ising Hamiltonian H=−∑j(Zj−1Zj+Xj).
Formalizing it. The identities are proved in the physics literature by tensor-network manipulations ((F.14)–(F.18)) and checked numerically, but none of this is machine-checked. This mission produces a reusable Lean setup for qubit chains: Pauli strings on (Z/2)L, Z2 and translation symmetries, and an exact non-invertible operator with its full operator algebra for every chain length. No mission on the platform or file in Mathlib currently formalizes a non-invertible lattice symmetry.
Difficulty
Each identity is easy to check for a fixed small L by brute force. The content is that it holds for all L at once, on a 2L-dimensional space. The difficulty is bookkeeping with periodic indices: sums over (Z/2)L of characters (−1)⟨t,⋅⟩, reindexing k↦k±1 in Fin L (including L=1, where k+1=k, and L=2, where k+1=k−1), and the exact normalisation 2−L/2, so that the right-hand side carries no stray factor 2L. The goal also involves the matrix inverse T−1, so a proof must establish that T is invertible rather than rely on Lean's junk value.
Formalization scope
Representation. Operators are Matrix (Fin L → ZMod 2) (Fin L → ZMod 2) ℂ; products are matrix products; T−1 is Mathlib's matrix inverse (transl L)⁻¹; † is conjTranspose. Every theorem assumes [NeZero L], i.e. L≥1.
Conventions committed to.Zj=(−1)sj on basis states, translation to the right (sk′=sk−1), and D normalised by 2−L/2 as in eqs. (1.4)/(2.65). Other conventions (left translation, unnormalised D) change the statements to T instead of T−1 or add a factor 2L; the conventions here reproduce the paper's equations verbatim.
No trivialisation.kwD is an explicit formula, not a hypothesis. The goal fixes both sides completely, and milestone 1 pins the translation convention against eq. (2.10).
Out of scope. The defect Hamiltonians, the MPO presentation (2.64) itself, the Z2- and duality-twisted operators of §§2.3.3–2.3.4, and the LSM constraint of §4.
Reusable. Pauli operators, translation and η on qubit chains; character-sum lemmas over (Z/2)L. Contributions of general Mathlib lemmas on Walsh–Hadamard-type sums are welcome.
Selected references
H. A. Kramers, G. H. Wannier, Statistics of the Two-Dimensional Ferromagnet. Part I, Phys. Rev. 60, 252–262 (1941). doi:10.1103/PhysRev.60.252
J. Fröhlich, J. Fuchs, I. Runkel, C. Schweigert, Kramers–Wannier duality from conformal defects, Phys. Rev. Lett. 93, 070601 (2004). arXiv:cond-mat/0404051
D. Aasen, R. S. K. Mong, P. Fendley, Topological Defects on the Lattice I: The Ising model, J. Phys. A 49, 354001 (2016). arXiv:1601.07185
N. Seiberg, S.-H. Shao, Majorana chain and Ising model – (non-invertible) translations, anomalies, and emanant symmetries, SciPost Phys. 16, 064 (2024). arXiv:2307.02534
S.-H. Shao, What's Done Cannot Be Undone: TASI Lectures on Non-Invertible Symmetries (2023). arXiv:2308.00747
Source: N. Seiberg, S. Seifnashri, S.-H. Shao, Non-invertible symmetries and LSM-type constraints on a tensor product Hilbert space, SciPost Phys. 16, 154 (2024). arXiv:2401.12281
Harlow TASI 2017: Entanglement Wedge Reconstruction, Quantum RT and JLMS are EquivalentResearch Paper
Motivation
In the AdS/CFT correspondence a quantum theory of gravity in an asymptotically anti-de Sitter spacetime is equivalent to a conformal field theory on its boundary. A central question is how local bulk physics is encoded in the boundary theory, and in particular which bulk region is described by a given boundary subregion R. Harlow's TASI 2017 lectures (arXiv:1802.01040) review the answer that emerged from quantum error correction: the boundary Hilbert space is a code, bulk effective field theory lives in a code subspace, and the boundary subregion R can reconstruct every bulk operator in its entanglement wedge. The lectures state as their main technical target the theorem that this entanglement wedge reconstruction, the quantum Ryu–Takayanagi (RT) formula with a central area operator, and the JLMS formula (equality of boundary and bulk relative entropies) are mathematically equivalent. All of these statements are finite-dimensional linear algebra, which makes them formalizable now.
Timeline. Almheiri, Dong and Harlow proposed the quantum-error-correction interpretation of AdS/CFT in 2014 (arXiv:1411.7041). Jafferis, Lewkowycz, Maldacena and Suh derived the JLMS relation in 2015 (arXiv:1512.06431), and Dong, Harlow and Wall established the implications between JLMS and reconstruction for factors in 2016 (arXiv:1601.05416). Harlow proved the general three-way equivalence for arbitrary finite-dimensional von Neumann algebras in 2016 (arXiv:1607.03901, Comm. Math. Phys. 2017). The TASI lectures (2017, published 2018) present this theorem as Theorem 5.2.
Setting
All Hilbert spaces are finite-dimensional. The boundary space factorizes as H=HR⊗HR. A code subspaceHcode⊆H is described by an isometry V whose columns ∣i~⟩ are an orthonormal basis of Hcode. An operator OR on HRrepresents a logical operator O~ if OR∣ψ~⟩=O~∣ψ~⟩ and OR†∣ψ~⟩=O~†∣ψ~⟩ for every code state.
A von Neumann algebraM on Hcode is a set of operators closed under sums, products and adjoints and containing all multiples of the identity; M′ is its commutant and ZM=M∩M′ its center. Every such M is block diagonal, Hcode=⨁αHrα⊗Hrα with M=⨁αL(Hrα)⊗Irα. For a state ρ~ with diagonal blocks pαρ~rαrα, the algebraic entropy is S(ρ~,M)=−∑αpαlogpα+∑αpαS(ρ~rα), and the algebraic relative entropyS(ρ~∣σ~,M) is defined analogously (eqs. (5.16), (5.18)).
For Hcode⊆HR⊗HR and a von Neumann algebra M on Hcode, the following are equivalent:
(1) every O~∈M is represented on R and every O~′∈M′ on R;(2) ∃LR∈ZM:S(ρ~R)=Tr(ρ~LR)+S(ρ~,M),S(ρ~R)=Tr(ρ~LR)+S(ρ~,M′)∀ρ~;(3) S(ρ~R∣σ~R)=S(ρ~∣σ~,M),S(ρ~R∣σ~R)=S(ρ~∣σ~,M′)∀ρ~,σ~.
Milestones
Theorem 4.1: four equivalent characterizations of a correctable erasure of R (operator reconstruction on R; PXRP=λP; decoupling of a reference system from R; the explicit encoding ∣i~⟩=UR(∣i⟩R1∣χ⟩R2R)).
Eq. (4.25): the quantum Singleton bound m≥2n+k for codes whose accessibility depends only on the number of qudits.
Theorem 5.1: every von Neumann algebra on a finite-dimensional Hilbert space is a block-diagonal direct sum of factors, with the matching descriptions of M′ and ZM.
Significance
Theorem 5.2 turns three separately motivated features of holography into a single mathematical statement. Since the RT formula is independently derived from the gravitational path integral, the theorem implies subregion duality in the entanglement wedge; it also shows that a non-trivial area operator requires an algebra with non-trivial center. Theorem 4.1 is the subsystem-code special case, and Theorem 5.1 is the structure result that gives the algebraic entropies their meaning.
The results are proved in the literature (Harlow 2017 for Theorem 5.2; Theorems 4.1 and 5.1 are standard), but the lectures state Theorem 5.2 without proof, and none of these statements has a machine-checked proof that this mission is aware of. The mission produces formal statements and, eventually, formal proofs of the finite-dimensional structure theory of operator-algebra quantum error correction.
Difficulty
The three conditions live at different levels: (1) is a statement about operators, (2) about von Neumann entropies of single states, and (3) about relative entropies of pairs of states. Passing between them requires control of the full block structure of M relative to the bipartition RR, not only of a single factor, and the classical term ∑αpαlog(pα/qα) of (5.18) couples different blocks, so the general case does not reduce to the factor case treated earlier in the literature. Relative entropies can be infinite (when supports are not nested), so the equalities in (3) are equalities of extended reals and every argument must remain valid at +∞.
Formalization scope
Hilbert spaces are coordinate spaces Cι for finite index types, operators are complex matrices, tensor products are Kronecker products, and Hcode is the image of an isometry V (an operator OR acts on code states as OR⊗IR applied to V). States are density matrices (positive semidefinite, trace one). Von Neumann entropy and relative entropy are defined from eigen-decompositions; relative entropy takes values in the extended reals. A von Neumann algebra is a ∗-subalgebra of matrices; the algebraic entropies are computed in a block decomposition U of M, which every statement takes as an arbitrary decomposition realizing M (the value does not depend on the choice). The RT identity is stated as an equality of complex numbers. Theorem 4.1 assumes a nonzero code subspace; the Singleton bound assumes d≥2 and k≥1; both conditions are implicit in the lectures and are needed for the statements to be true.
A trivializing reading is excluded: the hypotheses of every statement are satisfiable, and the goal is a full equivalence of three non-trivial conditions rather than any single implication.
Useful reusable infrastructure: partial traces and their interaction with Kronecker products, entropies of block-diagonal states, relative entropy (Klein's inequality and its equality case), and the structure theory of finite-dimensional ∗-algebras of matrices. Contributions of proofs of the individual implications (1)⇒(2), (2)⇒(3), (3)⇒(1) as sketches are welcome.
D. Harlow, The Ryu–Takayanagi Formula from Quantum Error Correction, Comm. Math. Phys. 354 (2017) 865–912. https://arxiv.org/abs/1607.03901
A. Almheiri, X. Dong, D. Harlow, Bulk Locality and Quantum Error Correction in AdS/CFT, JHEP 04 (2015) 163. https://arxiv.org/abs/1411.7041
D. Jafferis, A. Lewkowycz, J. Maldacena, S. J. Suh, Relative entropy equals bulk relative entropy, JHEP 06 (2016) 004. https://arxiv.org/abs/1512.06431
X. Dong, D. Harlow, A. C. Wall, Reconstruction of Bulk Operators within the Entanglement Wedge in Gauge-Gravity Duality, Phys. Rev. Lett. 117 (2016) 021601. https://arxiv.org/abs/1601.05416
Semidefinite Programming Hierarchies for Constrained Bilinear Optimization II: De Finetti Without Symmetry — Random Subsystems Are 3k^{3/2}d_B³ log d_B/√(n−k+1)-Close to Product in ExpectationResearch Paper
Motivation
Quantum information often describes a system through a state shared among many small registers. One would like to replace the state on a few registers by a product of their individual states, because product states are easier to estimate and optimize over. The usual finite quantum de Finetti theorems obtain such approximations from permutation symmetry. A physical preparation, however, need not be symmetric. Berta, Borderi, Fawzi and Scholz give a quantitative statement that instead selects the retained registers at random and conditions on measurements of other registers. Their Theorem 2.5 is the target here.
The authors place this result alongside their hierarchy for constrained bilinear optimization, but the theorem without symmetry is independent of the hierarchy. In §2.6 they compare its polynomial dependence on the local dimension and the number of retained registers with the earlier no-symmetry approximation discussed in their reference [12]. The result identifies exactly what random selection and measurement can supply when a global permutation-invariance hypothesis is unavailable.
Setting
Let B be a quantum system of dimension dB, and let ρ be an arbitrary density operator on n copies of B. Choose a uniformly random permutation of these copies. Its first k positions form an ordered tuple i=(i1,…,ik) of systems to retain; the remaining r=n−k positions form an ordered tuple j=(j1,…,jr) available for measurement. There is no symmetry condition on ρ.
A measurement on B has finitely many outcomes z and positive operators Mz whose sum is the identity. Measure the first m systems j1,…,jm, where 0≤m≤r, and condition the retained state on the observed outcomes. Write ρi∣z for that conditional state and ρis∣z for its marginal on the sth retained system. The trace norm ∥X∥1=TrX†X measures the error between ρi∣z and ρi1∣z⊗⋯⊗ρik∣z. The expectation is over the uniform permutation and the measurement outcomes, with their Born-rule probabilities.
The distortion with side information of a fixed measurement is the largest ratio between an input trace norm and the norm left after measuring only its B factor. The input ranges over Hermitian operators on A⊗B, over every finite-dimensional side system A, with zero partial trace on both A and B. The paper's f(B∣⋅) is the infimum of this distortion over all measurements on Bequation (10). A state two-design is a finite family of rank-one projectors whose average second tensor power is the projector onto the symmetric subspace with the normalization in Lemma D.1. The projectors give an explicit measurement with distortion at most dB2(dB+1).
Formalization targets
The principal target is the explicit form of Theorem 2.5. For 1≤k≤n, put r=n−k. With the two-design measurement, some m∈{0,…,r} satisfies
Here the z in the expectation is the outcome string for the first m members of j. The same m is chosen before taking that expectation. This rate is stated with its constants and its two consecutive inequalities; an existence assertion without the error bound would lose the theorem's content.
The milestone path also states the telescoping trace-norm inequality of equation (12), the measurement estimate of Lemma D.1, and the final averaged inequality on p. 11. A companion milestone treats any fixed POVM with its own distortion. That formulation captures the proof's arbitrary-measurement step without treating the infimum f(B∣⋅) as if every measurement attained it.
Significance
For an arbitrary multipartite state, random ordering and conditioning give one measured prefix length at which the selected registers have small expected distance from a product. The explicit rate is polynomial in dB and k and decays as 1/n−k+1. It therefore gives a quantitative approximation guarantee under a selection rule that can be applied without first establishing exchangeability Berta et al., §2.6.
The theorem is proved in the paper; the work here is to express its state, measurement, conditional distribution, and norm bound in Lean and to connect the estimate to reusable finite-dimensional quantum-information definitions. The local statements are currently proof obligations, not machine-checked proofs. The published density-operator, trace-norm, and partial-trace definitions are reused. Once proved, the statements can serve as a precise interface for subsequent formal work on randomized subsystem selection and information-theoretic decoupling.
Difficulty
Randomly choosing systems does not turn the original state into a product state. A direct bound on the distance to a product can be large even when each one-system marginal is simple, because correlations among the retained systems remain. Equation (12) breaks the total error into successive correlation terms; the paper controls their average by measuring other systems and using information-theoretic estimates. A second difficulty is that a measurement can erase distinctions between different input operators. The two-design estimate supplies a dimension-dependent bound on that loss, uniformly over the size of a side system.
The printed theorem leaves the measurement MB unspecified while using the minimum distortion over all measurements. A trivial measurement cannot satisfy that reading. The proof explicitly permits the measurement built from a state two-design, with dB2(dB+1) replacing f(B∣⋅); that is the measurement used in the goal proof of Theorem 2.5, p. 10.
Formalization scope
The B system has basis Fin dB; n copies have basis Fin n → Fin dB. The formalization writes n=k+r, assumes k≥1, and ranges over m≤r. A state is a positive semidefinite complex matrix with trace one. Permutations act on the copy coordinates, and their finite uniform average models the paper's random ordered tuples. Measurement outcomes are finite words; the conditional state divides the unnormalized post-measurement state by its probability. A zero-probability outcome uses Lean's zero inverse and contributes zero to the weighted expectation. The existence of a state and of a nonempty two-design rules out zero-dimensional and empty-outcome instances in the goal.
The fixed-measurement distortion and f(B∣⋅) take values in extended nonnegative reals, so a measurement that destroys a nonzero operator has infinite distortion. The logarithm is base two except for ln2. The definitions use the paper's unnormalized trace norm, with no factor 1/2. No mutual-information estimate or Pinsker inequality is assumed in the goal: both belong to possible proofs. Contributions proving the stated milestones, the positivity and normalization of the conditional states, or reusable trace-norm facts for finite tensor products all advance the target.
Selected references
M. Berta, F. Borderi, O. Fawzi and V. B. Scholz, Semidefinite programming hierarchies for constrained bilinear optimization, Mathematical Programming, 2021; arXiv:1810.12197v3.
Semidefinite Programming Hierarchies for Constrained Bilinear Optimization I: The Linearly Constrained de Finetti SDP Hierarchy Satisfies Q ≤ SDPₙ ≤ Q + ‖G‖∞·d_B²(d_B+1)·√((2 ln 2) log d_A / n)Research Paper
Motivation
Many problems in quantum information theory ask for the maximum of a linear functional over pairs of quantum states, one on each of two systems, subject to linear constraints on each state. The best success probability of an approximate quantum error-correcting code of given size is of this form: the encoder and the decoder are quantum channels, their Choi matrices are states with fixed marginals, and the objective is bilinear in the two (Berta, Borderi, Fawzi & Scholz, arXiv:1810.12197, §4). Such constrained bilinear programs are nonconvex. Seesaw methods give lower bounds that often converge in practice, but they offer no guarantee of global optimality. What is needed is a hierarchy of efficiently computable outer bounds that converges to the optimum, with an explicit rate.
For the unconstrained problem, the optimisation over separable states, such a hierarchy is classical: the Doherty–Parrilo–Spedalieri hierarchy of n-extendible states, whose convergence follows from finite quantum de Finetti theorems (Christandl, König, Mitchison & Renner 2007; Brandão & Harrow 2013). The standard de Finetti approximant is, however, a mixture of product states that need not satisfy the linear constraints, so it says nothing about the constrained problem. The paper proves a de Finetti theorem with linear constraints (Theorem 2.3) and derives from it a semidefinite hierarchy for constrained bilinear programs with a convergence guarantee (Theorem 3.1).
Setting
A d-dimensional quantum system has operator space S=Cd×d; a state is a positive semidefinite W∈S with TrW=1. Let A and B be systems of dimensions dA and dB. The data are an objective GAB∈SA⊗SB, arbitrary linear maps ΛA→CA:SA→SCA and ΓB→CB:SB→SCB, and matrices XCA, YCB. The constrained bilinear program is
For n≥1 let B1,…,Bn be copies of B. A state WAB1n on A⊗B1⋯Bn is symmetric with respect to A if it is invariant under every permutation UB1nπ of the copies B1,…,Bn, π∈Sn. Write WB1n=TrAWAB1n, WB1n−1=TrBnWB1n and WAB1=TrB2nWAB1n. The level-n program is
SDPn=maxTr[GABWAB1]s.t. WAB1na state, symmetric with respect to A,(ΛA→CA⊗IB1n)(WAB1n)=XCA⊗WB1n,(IB1n−1⊗ΓBn→CB)(WB1n)=WB1n−1⊗YCB.
It is a semidefinite program of size polynomial in dA and dBn.
The rate involves the trace norm∥X∥1=Tr∣X∣, the Schatten ∞-norm∥G∥∞ (largest singular value), and the minimal distortion with side information of B,
the infimum over measurements MB on B and the supremum over all finite-dimensional A; f(A,B) is the analogue with product measurements MA⊗MB. Throughout, log is base 2.
The page states 0≤SDPn−Q≤poly(d)/n with d=max{dA,dB}. The goal makes explicit the rate the proof gives.
Milestones, in attack order
Lemma 2.1 (p. 6): for a permutation-invariant classical-quantum state ρAZ1n there is 0≤m<n with Ez1m∥ρAZm+1∣z1m−ρA∣z1m⊗ρZm+1∣z1m∥12≤(2ln2)logdA/n.
Lemma D.1 (p. 29): for a state two-design {Pz} and MB with effects tdBPz, ∥(IA⊗MB)(ξAB)∥1≥∥ξAB∥1/(dB2(dB+1)) for every Hermitian ξAB.
Existence of state two-designs in every dimension (p. 29).
f(B∣⋅)≤dB2(dB+1) (p. 6).
Conditional constraints (p. 8): the states obtained by measuring B1,…,Bm and conditioning satisfy Λ(ρA∣z1m)=XCA and Γ(ρBm+1∣z1m)=YCB.
Theorem 2.3 (p. 7): under the constraints of SDPn, ∥ρAB−∑ipiσAi⊗ωBi∥1≤min{f(A,B),f(B∣⋅)}(2ln2)logdA/n with states Λ(σAi)=XCA, Γ(ωBi)=YCB.
Eq. (3) (p. 2): Q equals the maximum over mixtures of feasible product states.
Hölder step (p. 11): Tr[GW]≤Tr[GV]+∥G∥∞∥W−V∥1.
0≤SDPn−Q (p. 11).
Significance
Theorem 3.1 turns a nonconvex problem into a sequence of semidefinite programs whose values decrease to the optimum at rate O(1/n), with a constant that depends polynomially on dB and logarithmically on dA. Every level is a certified upper bound; together with any feasible point it brackets Q. The same argument applied to channel fidelities gives converging outer bounds on the success probability of approximate quantum error correction (§4 of the paper), and the constrained de Finetti theorem is the key step there as well. Theorem 2.3 is of independent interest: it is the first finite de Finetti theorem in which the approximating separable state inherits linear constraints of the extension.
The results are proved in the paper; none of them has been machine-checked. A complete formalization requires the quantum relative entropy and mutual information with their chain rule, the quantum Pinsker inequality, state two-designs and their existence, and a weighted Hölder inequality for Schatten norms; most of this is absent from Mathlib, and each piece is reusable beyond this mission.
Difficulty
The obvious route measures every copy Bi with a fixed informationally complete measurement and uses the resulting classical de Finetti statement. This approximates ρAB by a mixture of product states, but the states in the mixture need not satisfy Γ(ωi)=Y, and projecting them onto the constraint set destroys the error bound. The paper instead conditions on the outcomes of only m copies and keeps Bm+1 quantum; the constraint on Bn then transfers to the conditional state of Bm+1 by symmetry. Making this rigorous needs the chain rule of conditional mutual information with classical conditioning, and the distortion of the measurement must be bounded independently of the side system A, which is what Lemma D.1 provides. The Schatten-norm estimate there is elementary but requires a weighted Hölder inequality and a careful choice of weight.
Formalization scope
Systems are finite index types: A⊗B1⋯BN is indexed by Fin dA × (Fin N → Fin dB), ⊗ is Mathlib's Kronecker product, and the permutation action permutes the word in Fin N → Fin dB. States, trace norm and partial traces are the published definitions WildeQIT_IsDensityOperator, WildeQIT_traceNorm and WildeQIT_partialTrace. The linear maps Λ, Γ are arbitrary C-linear maps (not assumed positive or trace preserving), applied blockwise to one tensor factor. The objective is the real part of Tr[GW], equal to Tr[GW] for Hermitian G. Each "max" is the supremum of the set of objective values over the feasible set, never over all matrices. Wherever the page has n≥1 copies of B, the Lean has n + 1: SDPval … n is the page's SDPn+1, and the bounds have denominator n+1. The distortions f(A,B) and f(B∣⋅) take values in [0,∞]; the standalone bound on f(B∣⋅) assumes dB≥1.
No feasibility hypothesis is added to the goal. The feasible sets of Q and of every level are empty or nonempty together, and the empty case reads 0≤0≤0+…. The goal mentions only Q, SDPn, G, dA, dB and n; a formalization in which Q or SDPn were free real numbers, or in which the de Finetti mixture was not required to satisfy the constraints, would be a different and much weaker statement.
Contributions are welcome at every milestone, and especially in the reusable infrastructure: quantum relative entropy and mutual information on matrices, the quantum Pinsker inequality, unitary and state designs, and Hölder inequalities for Schatten norms.
Selected references
M. Berta, F. Borderi, O. Fawzi, V. B. Scholz, Semidefinite programming hierarchies for constrained bilinear optimization, Mathematical Programming, 2021; arXiv:1810.12197v3. https://arxiv.org/abs/1810.12197
F. G. S. L. Brandão, A. W. Harrow, Quantum de Finetti theorems under local measurements with applications, STOC 2013. https://arxiv.org/abs/1210.6367
M. Christandl, R. König, G. Mitchison, R. Renner, One-and-a-half quantum de Finetti theorems, Communications in Mathematical Physics 273, 2007. https://arxiv.org/abs/quant-ph/0602130
A. C. Doherty, P. A. Parrilo, F. M. Spedalieri, Complete family of separability criteria, Physical Review A 69, 2004. https://arxiv.org/abs/quant-ph/0308032
Quantum Algorithm for Systems of Linear Equations with Exponentially Improved Dependence on Precision II: A Discretized Gaussian Fourier Double Sum Is ε-Close to 1/x on [−1, −1/κ] ∪ [1/κ, 1]Research Paper
Motivation
A quantum algorithm for a system of linear equations must turn operations it can implement into an approximation of the inverse of the system matrix. For a Hermitian matrix, time evolution e−iAt is such an operation. Childs, Kothari and Somma use a Fourier expansion of the scalar reciprocal 1/x to express an approximation to A−1 as a finite linear combination of these evolutions. Their paper reports an exponential improvement in the dependence on the requested precision over earlier linear-systems methods. The scalar approximation in Lemma 11 is the mathematical input to their Fourier algorithm and to the query and gate analyses in Theorem 3. This mission isolates that approximation and the Gaussian estimates stated around it. Theorem 3's complexity claims themselves are outside the present formalization. Childs, Kothari and Somma, §3, pp. 10–14.
Setting
Fix a condition numberκ≥1. The scalar spectral domain is
Dκ=[−1,−1/κ]∪[1/κ,1].
It contains the real eigenvalues permitted after the paper's normalization and excludes zero, where the reciprocal is undefined. For an accuracy ε>0, two functions are ε-close on Dκ when their difference has magnitude at most ε at every point of that domain. A complex-valued approximant is compared with 1/x as a complex number. The paper gives this domain and closeness convention before the Fourier construction. Childs, Kothari and Somma, pp. 9–10.
The intermediate function gyJ,zK(x) is a truncated Gaussian Fourier integral. It integrates ze−z2/2e−ixyz over −zK≤z≤zK and then over 0≤y≤yJ, multiplying by i/2π. The finite approximant hJ,K,Δy,Δz(x) is a Gaussian Fourier double sum with the same normalization and phase. Its samples are yj=jΔy for j=0,…,J−1 and zk=kΔz for k=−K,…,K; each term carries both mesh widths. Thus J,K count the retained samples, while Δy,Δz control their spacing. The sign in the phase and the factor i are part of the definitions. Childs, Kothari and Somma, (18), p. 10, and (21), p. 11.
Formalization targets
Truncation
Lemma 12 says that for cutoffs of scale
yJ=Θ(κlog(κ/ε)),zK=Θ(log(κ/ε)),
the function gyJ,zK is ε-close to 1/x on Dκ. The proposal includes the paper's explicit error bound (27) and its Gaussian tail bound (28), as well as the Gaussian Poisson-summation identity of Lemma 13. These are separate reusable targets, not replacements for the approximation theorem. Childs, Kothari and Somma, Lemmas 12–13 and (27)–(28), pp. 11–12.
The Θ statements impose upper and lower bounds with absolute constants, uniformly across κ and ε. The requested approximation error is exactly ε, matching the lemma's claim. The four scales specify both the size of the finite expansion and its mesh. Childs, Kothari and Somma, Lemma 11, p. 10.
Significance
The finite sum provides the paper's Fourier route from scalar reciprocal approximation to a linear combination of time-evolution operators. Its sample counts and spacings are the quantities that enter the algorithm's implementation costs. A result that only asserted approximation after arbitrarily many samples would not express the bound used there. The truncated integral and Poisson identity also remain useful for other Gaussian quadrature and Fourier-sampling arguments. Childs, Kothari and Somma, §§3.1–3.2, pp. 11–14.
The paper proves these claims on paper. This proposal asks for machine-checked Lean proofs of the scalar statements, including the complex normalization, the finite and infinite sum conventions, and the uniform scale bounds. It does not assert that the quantum algorithm, its Hamiltonian simulation subroutines, or its query and gate complexity theorems have been formalized.
Difficulty
The infinite Gaussian Fourier representation alone does not specify a finite implementable expansion. Restricting both integrals introduces two truncation errors, while replacing them by samples adds discretization and periodic-aliasing effects. These errors have to be controlled simultaneously with J, K, Δy, and Δz at the scales stated in Lemma 11. Merely taking the mesh arbitrarily fine gives approximation without the theorem's finite-size bounds. The proof also uses a complex Fourier phase although its target is real, and its infinite sums must have their ordinary convergent meaning. Childs, Kothari and Somma, proof of Lemma 11, pp. 13–14.
Formalization scope
The Lean development uses R for x,κ,ε and the cutoff and mesh parameters, C for g and h, and the complex norm for closeness. Finite sums use exactly 0≤j<J and −K≤k≤K; the integral for g is iterated and has nonnegative upper cutoffs. The optional identity (20) is also an iterated integral, with the z integral evaluated before the y integral. Infinite sums in Lemma 13 are over Z. The Gaussian integrals and series in the statements are convergent, so Lean's totalized integral and sum conventions do not supply artificial zero values.
The paper's condition-number convention is recorded as κ≥1 and Corollary 10's operating range as 0<ε<1/2. Those conditions keep Dκ nonempty and log(κ/ε) positive. The unnumbered reciprocal-exponential bound from p. 13 has x=0 explicitly, because the printed fractions have no value at zero. The Θ bounds quantify their constants before the problem parameters. In particular, choices with unbounded sample counts or vanishing mesh widths cannot satisfy the goal solely by brute-force approximation.
A complete development needs reusable Gaussian integration and tail estimates, complex exponential identities, summability of Gaussian integer series, and Poisson summation in Mathlib's analytic setting. Contributions that establish these general facts, the stated milestones, or Lemma 11 with its original bounds all fit this scope. This mission uses the reviewed shared definition of Dκ. Childs, Kothari and Somma, pp. 9–14.
Selected references
A. M. Childs, R. Kothari and R. D. Somma, Quantum algorithm for systems of linear equations with exponentially improved dependence on precision, SIAM Journal on Computing 46(6), 2017; arXiv:1511.02306v2.
Projective Measurements Are Equilibration Processes (finite dimension)Research Paper
Motivation
Projective measurement is usually taught together with state update: an observable is measured, a value is obtained, and the conditional state is assigned. These are two different questions. The first is the prediction of the outgoing ensemble from the incoming ensemble and the measured observable alone, before the outcome is known; the second is the incorporation of the outcome once it is known. The technical brief by G. Carcassi for the Assumptions of Physics collaboration (AoP technical briefs) isolates the first question and treats the measurement as a black-box process that only relates incoming and outgoing ensembles, without committing to a mechanism.
Within this view the standard prediction, the nonselective (Lüders) post-measurement ensemble, admits several characterizations that come from different traditions: the algebraic pinching map, the long-time limit of a dephasing Lindblad equation (open quantum systems, see Lindblad 1976), and a closest-point principle, either in Hilbert–Schmidt distance or in quantum relative entropy (Umegaki 1962). The brief's Theorem 1 states that these characterizations select the same process.
Setting
Fix a finite index set n; the Hilbert space is Cn and operators are complex n×n matrices. A density matrix is a positive semidefinite matrix ρ with trρ=1. An observable is a Hermitian matrix X with spectral decomposition
X=x∑xPx,
where x ranges over the distinct eigenvalues of X and Px is the orthogonal projection onto the x-eigenspace.
The pinching of ρ is PX(ρ)=∑xPxρPx.
The dephasing Lindblad equation with vanishing Hamiltonian and jump operator X is dtdρ=XρX−21{X2,ρ}, t≥0.
The Hilbert–Schmidt distance is ∥ρ−σ∥HS=(tr(ρ−σ)∗(ρ−σ))1/2.
The relative entropy is D(ρ∥σ)=tr(ρlogρ)−tr(ρlogσ) when suppρ⊆suppσ and +∞ otherwise; the von Neumann entropy is S(ρ)=−tr(ρlogρ).
The spectral equilibration processΦX is an unknown map on density matrices. The brief's four conditions on it are:
EQ-MEAS: ΦX(ρ)=∑xPxρPx.
EQ-LIND: ΦX(ρ)=limt→∞ρ(t) for the Lindblad evolution with ρ(0)=ρ.
EQ-HS: ΦX(ρ)=argmin{∥ρ−σ∥HS2:σ a density matrix,[σ,X]=0}.
EQ-KL: ΦX(ρ)=argmin{D(ρ∥σ):σ a density matrix,[σ,X]=0}.
Formalization targets
Goal: Theorem 1 (finite-dimensional form)
For every Hermitian X and every map Φ,
EQ-MEAS⟺EQ-LIND,EQ-MEAS⟺EQ-HS,EQ-MEAS⟺EQ-KL.
Milestones
The milestones follow the steps of the brief's proof: the block decomposition ρ=∑x,yPxρPy (eq. 2); the blockwise solution Pxρ(t)Py=e−2t(x−y)2Pxρ(0)Py (eqs. 4–5); convergence ρ(t)→PX(ρ) (eqs. 9–10) and EQ-LIND ⇔ EQ-MEAS; the equivalence [σ,X]=0⟺PX(σ)=σ; PX preserves density matrices; the Pythagorean identity (eq. 11) and EQ-HS ⇔ EQ-MEAS; the relative-entropy chain rule (eq. 12); D(ρ∥PXρ)=S(PXρ)−S(ρ) (eq. 13); non-negativity and definiteness of D; and EQ-KL ⇔ EQ-MEAS.
Significance
The result says that "projective measurement" can be specified without reference to wave-function collapse: any of the three dynamical or variational descriptions pins down the same input–output map. Downstream, this justifies treating repeatable measurements as equilibration processes whose outputs are fixed points, and treating the outcome-update step as classical conditioning on a mixture.
The mathematics in finite dimension is classical; this mission asks for a machine-checked proof of the equivalence in Lean 4 with Mathlib. A complete development produces reusable pieces: spectral projections and the pinching map for Hermitian matrices, explicit solutions and asymptotics of a dephasing Lindblad semigroup, and an extended-real relative entropy with Klein's inequality.
Difficulty
The Hilbert–Schmidt part is linear algebra once block-diagonality is in place. The Lindblad part requires uniqueness of solutions of a linear matrix ODE on the closed half-line, to transfer the explicit blockwise formula to an arbitrary solution. The relative-entropy part is the most delicate: it needs the interaction between the functional-calculus logarithm and block structure (logσ is block diagonal when σ commutes with X), the support conventions that make D take the value +∞, and Klein's inequality with its equality case for matrices, which the development must supply if the library does not already provide it.
Formalization scope
Finite dimension only. The Hilbert space is Cn for a finite type n, so all observables are bounded with pure point spectrum and every density matrix has finite entropy. The brief also covers separable infinite-dimensional spaces and unbounded observables (where Condition [B]FINENT is a genuine restriction); that regime is not part of this mission.
Spectral data.Px is built from Mathlib's eigen-decomposition of a Hermitian matrix and is defined for every real x (zero when x is not an eigenvalue); the pinching sums over the finite set of distinct eigenvalues.
Lindblad solutions. A solution is any function R→Mn(C) with the given initial value whose derivative within [0,∞) satisfies the equation for t≥0. EQ-LIND requires existence of a solution and convergence of every solution, so it cannot hold vacuously.
Argmin. "Φ(ρ)=argmin" is encoded as "Φ(ρ) is a feasible minimizer"; uniqueness is a consequence proved by the theorem, not an assumption.
Logarithm and relative entropy.log is the continuous functional calculus applied to Real.log (so log0=0, i.e. the logarithm on the support); D takes values in the extended reals and equals +∞ unless kerσ⊆kerρ.
Convergence is in the entrywise topology, which coincides with the trace-norm and Hilbert–Schmidt topologies in finite dimension.
Contributions of general-purpose lemmas (Klein's inequality, uniqueness for linear ODEs on half-lines, properties of pinching) are welcome as separate theorems.
H. Umegaki, Conditional expectation in an operator algebra. IV. Entropy and information, Kodai Math. Sem. Rep. 14 (1962) 59–85. https://doi.org/10.2996/kmj/1138844604
Search via Quantum Walk 2: Phase Estimation Repeated k Times on the Szegedy Walk W(P) Fixes |π⟩ and Reflects A + B ⊖ |π⟩ up to Error 2^{1−k}Research Paper
Motivation
Many classical search algorithms are random walks: a Markov chain P on a finite state space X is run until it hits a marked state. Szegedy (2004) attached to every such chain a unitary quantum walkW(P), and Magniez, Nayak, Roland and Santha (SIAM J. Comput. 2011, arXiv:quant-ph/0608026) used it to search quadratically faster than the classical walk for every reversible ergodic chain. The search runs Grover-style rotations, and each rotation needs the reflection ref(π) about the stationary state ∣π⟩. Preparing ∣π⟩ exactly can cost far more than one step of the walk, so the paper builds an approximate reflection R(P) from the walk alone, by phase estimation. Theorem 6 of the paper is the guarantee for that circuit, and this mission formalizes it.
Timeline:
Jordan, 1875. Two subspaces of a Euclidean space decompose it into one- and two-dimensional invariant pieces ("principal angles").
Cleve, Ekert, Macchiavello and Mosca, 1998 (Proc. R. Soc. A). The phase-estimation circuit C(U) and its output distribution (Theorem 5 of the paper).
Szegedy, 2004. The walk W(P), and its spectrum in terms of the singular values of the discriminant matrix (Theorem 4 of the paper).
Magniez, Nayak, Roland and Santha, 2007/2011. The circuit R(P) and Theorem 6, the search algorithm (Theorem 7), and the bound Δ(P)≥2δ(P) relating the phase gap to the eigenvalue gap.
Setting
X is a finite set of size n. A Markov chain is a row-stochastic matrix P=(pxy)x,y∈X. It is ergodic if some power of P has all entries positive. A stationary distributionπ satisfies πx>0, ∑xπx=1 and ∑xπxpxy=πy. The time-reversed chainP∗ is defined by πxpxy=πypyx∗, and P is reversible if P∗=P.
The space is H=CX×X with basis ∣x⟩∣y⟩. Put ∣px⟩=∑ypxy∣y⟩ and ∣py∗⟩=∑xpyx∗∣x⟩, and
A=Span(∣x⟩∣px⟩:x∈X),B=Span(∣py∗⟩∣y⟩:y∈X).
For a subspace K, ref(K)=2ΠK−Id, where ΠK is the orthogonal projector onto K. The quantum walk is W(P)=ref(B)⋅ref(A), and the stationary state is ∣π⟩=∑xπx∣x⟩∣px⟩.
The discriminant matrix is D(P)=(pxypyx∗)x,y. Its singular values lie in [0,1]. The phase gapΔ(P) is 2θ, where θ is the smallest angle in (0,π/2) such that cosθ is a singular value of D(P).
The phase-estimation circuitC(U) acts on Cι⊗C2s. It is
C(U)=(Id⊗F†)(j<2s∑Uj⊗∣j⟩⟨j∣)(Id⊗H⊗s),
where H⊗s is the Walsh–Hadamard matrix and F is the 2s-point Fourier transform.
The circuit R(P) uses s=⌈log2(2π/Δ(P))⌉ and acts on H⊗(C2s)⊗k. It is built in three steps:
V applies C(W(P))k times, each time to the system register and a fresh ancilla register.
F=0 multiplies by −1 every basis state with a non-zero estimate in some register.
Then R(P)=V†F=0V.
Formalization targets
Goal: Theorem 6, properties 2 and 3
For P ergodic and reversible on n≥2 states, and every integer k≥0:
The milestones follow the order in which the paper's proof uses them:
Theorem 4 (Szegedy). The spectrum of W(P) on A+B. On that space W(P) has the eigenvalues 1 (on A∩B), −1, and e±2iθ for cosθ a singular value of D(P) in (0,1), with matching multiplicities. The mission has two items for it: the full statement, and the direction the proof uses.
§3.2. For ergodic reversible P, ∣π⟩ is the only 1-eigenvector of W(P) in A+B, up to scalars, and every other eigenvalue μ there satisfies ∣1−μ∣≥∣1−eiΔ(P)∣.
Theorem 5, properties 2 and 3.C(U) fixes ∣ψ⟩∣0s⟩ when Uψ=ψ. If Uψ=e2iθψ with θ∈(0,π), it outputs ∣ψ⟩∣ω⟩ with ∣⟨0s∣ω⟩∣=∣sin(2sθ)∣/(2ssinθ).
Single-copy bound. For Δ/2≤θ≤π−Δ/2 and the s above, ∣sin(2sθ)∣/(2ssinθ)≤1/2.
k-copy bound. For ψ∈A+B with ψ⊥∣π⟩, the all-zero-estimate component ψ0 of V∣ψ⟩∣0ks⟩ has ∥ψ0∥≤2−k∥ψ∥. For every ψ, ∥(R(P)+Id)∣ψ⟩∣0ks⟩∥=2∥ψ0∥.
Significance
Theorem 6 replaces the reflection about ∣π⟩ with a circuit that only calls the walk. Its cost scales as 1/Δ(P) rather than as the cost of preparing ∣π⟩. Combined with Δ(P)≥2δ(P), where δ(P) is the eigenvalue gap, this gives the search cost S+ε1(δ1U+C) of Theorem 7, up to logarithmic factors. The same approximate-reflection device recurs in later quantum-walk and amplitude-amplification algorithms.
The results are proved in the paper, which takes Theorem 4 from Szegedy and Theorem 5 from Cleve et al. As far as the platform index shows, none of Theorems 4, 5 or 6 has a machine-checked proof. The mission produces three reusable components: a Lean definition of the Szegedy walk and of the phase-estimation circuit, a formal Jordan-type spectral theorem for products of two reflections, and the analysis of phase estimation on an eigenvector.
Difficulty
Most of the work is linear algebra. The proof of Theorem 6 has a short outline: expand ψ in eigenvectors of W(P), apply Theorem 5 to each, and bound each amplitude by 1/2. Three steps carry the weight:
Theorem 4. The eigen-decomposition of W(P) on A+B is Jordan's two-subspace decomposition, with the multiplicities read off the singular value decomposition of D(P). The decomposition has to be built, and the cases at singular values 0 and 1 have to be handled separately.
Uniqueness of ∣π⟩. This step needs ergodicity, through Perron–Frobenius, and reversibility, because D(P) is then symmetric and its singular values are the moduli of the eigenvalues of P. Without reversibility D(P) can have the singular value 1 twice, and property 3 then fails.
Repetition. The k phase estimations share one system register. Their product acts on an eigenvector as a tensor power on the ancillas. This needs the eigenvectors of the unitary W(P) restricted to the invariant subspace A+B to be orthogonal.
Formalization scope
H is EuclideanSpace ℂ (X × X), with the first coordinate the first register.
The ancilla register is indexed by Fin (2^s), and k registers by Fin k → Fin (2^s); the all-zeros state is the zero index.
ref(K) is Mathlib's Submodule.reflection.
The stationary distribution π is passed as data with its defining hypotheses. "Ergodic" is Matrix.IsPrimitive.
Singular values of the real matrix D(P) are LinearMap.singularValues.
When D(P) has no singular value in (0,1), the paper leaves Δ(P) undefined, and the formalization sets Δ(P)=π.
log2 is Real.logb 2 and the ceiling is Nat.ceil.
Deviations from the page.
Reversibility, the standing assumption of §3.2, is a hypothesis of the goal.
Property 3 is stated for vectors and is homogeneous in ∥ψ∥.
Theorem 5 is stated for any finite-dimensional unitary, not only 2m×2m, and with ∣sin(2sθ)∣, because the printed right-hand side can be negative.
The single-copy bound also covers the eigenvalue −1.
Only exact statements are formalized. The cost halves (gate counts, calls to c-W(P), "s∈log2(1/Δ)+O(1)", the qubit count, uniformity) are out of scope.
The circuit R(P) is the explicit composition above, built from C(W(P)). It is neither "some circuit with properties 2–3" nor anything defined through the projector onto ∣π⟩, either of which would make the goal a tautology.
Contributions welcome: proofs of the milestones, Jordan's lemma for two subspaces as a standalone result, and the bound Δ(P)≥2δ(P) of §3.3.
Search via Quantum Walk 1: Recursive Amplitude Amplification with Approximate Reflections R(βᵢ), βᵢ = 18γ/(4π³i²), Finds a Marked Element with Probability at Least 1/12 − 3γResearch Paper
Motivation
Grover's algorithm finds a marked element among N with O(N) queries by alternating two reflections: one about the initial state and one that flips the sign of marked states. In quantum-walk search, the initial state ∣π⟩ encodes the stationary distribution of a Markov chain, and the reflection about ∣π⟩ is too expensive to implement exactly. Magniez, Nayak, Roland and Santha (arXiv:quant-ph/0608026, SIAM J. Comput. 2011) obtain the reflection approximately, by phase estimation on the quantum walk, and need a search procedure that tolerates the approximation error without paying extra cost to reduce it. Their Section 4 supplies one: a variant of the recursive amplitude amplification (RAA) of Høyer, Mosca and de Wolf (ICALP 2003) in which the reflection about ∣π⟩ is replaced, at recursion level i, by an approximate circuit of precision βi=4π318γ/i2. The two lemmas of that section, stated "in full generality for potential further applications" (p. 11), are the exact engine of the paper's headline Theorem 3 (search with cost S+ε1(δ1U+C)).
Timeline: Grover (1996) gives quadratic speedup for unstructured search; Brassard, Høyer, Mosca and Tapp (2002) generalize it to amplitude amplification; Høyer, Mosca and de Wolf (2003) introduce RAA to tolerate a bounded-error marking reflection; Szegedy (2004) defines quantum walks for arbitrary reversible chains with detection guarantees; Magniez, Nayak, Roland and Santha (STOC 2007, SIAM 2011) adapt RAA to an approximate initial-state reflection and obtain search, not only detection, for every reversible ergodic chain.
Setting
Let X be a finite set and M⊆X a set of marked elements. The state space is H=CX×X. The initial state∣π⟩∈H is any unit vector (Lemmas 1 and 2 never use its quantum-walk form), and the marked weight is pM=∥ΠM∣π⟩∥2, where ΠM projects onto the basis states ∣x⟩∣y⟩ with x∈M.
For each level i≥1 an extra registerKi (a finite-dimensional space with a basis state ∣0⟩) is given together with a unitary Ri on H⊗Ki, playing the role of R(βi):
On H⊗K1⊗⋯⊗KT the marked subspaceM~ consists of states whose first register is marked, and ref(M~⊥)=Id−2ΠM~.
Approximate RAA(i,γ) is the unitary Ai with A0=Id and
Ai=Ai−1⋅Oi⋅Ai−1†⋅ref(M~⊥)⋅Ai−1,
where Oi multiplies by −1 every basis state in which some register Kj, j<i, is not ∣0⟩, and otherwise applies Ri to H⊗Ki. Write ∣φi⟩=Ai∣π⟩∣0S⟩ and sinϕi=∥ΠM~∣φi⟩∥.
Tolerant RAA(tmax,γ) first samples x (succeeding with probability pM); otherwise, for i=1,…,tmax, it applies Ai to the state left over from the previous failed measurement, ∣ψi⟩=Ai∣νi−1⊥⟩ with ∣ν0⊥⟩=∣π⟩∣0S⟩, and measures {ΠM~,Id−ΠM~}; a failure collapses the state to ∣νi⊥⟩=ΠM~⊥∣ψi⟩/∥ΠM~⊥∣ψi⟩∥.
Formalization targets
Goal: Lemma 2 (p. 15)
Let 0<γ≤1/40, let ε>0 satisfy pM≥ε whenever pM>0, and let tmax be the smallest non-negative integer with 3tmaxsin−1ε∈[π/4,3π/4]. The probability Psucc that Tolerant RAA(tmax,γ) ends with a marked element satisfies
M=∅⇒Psucc=0,pM>0⇒Psucc≥121−3γ.
Lemma 1 (p. 12)
With t the smallest non-negative integer such that 3tsin−1pM∈[π/4,3π/4], for every γ>0,
∥ΠM~At∣π⟩∣0S⟩∥≥21−γ.
Milestones
In the order of the proofs: Fact 1 (the error operator Ei=Ai−1OiAi−1†−ref(φi−1) kills ∣φi−1⟩ and has norm ≤βi on states with clean registers K≥i); the one-level bound ∣sinϕi+1−sin3ϕi∣≤βi+1∣sin2ϕi∣; the two trigonometric inequalities on [0,π/4]; the surrogate bound e~i≤γϕˉi/π≤γ; Lemma 1; the three terms of the drift recursion (5); and the accumulated drift δt=∥∣ψt⟩−∣φt⟩∥≤π/8+9γ/8.
Significance
Lemma 2 turns any family of approximate reflections whose error decays like 1/i2 into a search procedure that succeeds with constant probability, needs only a lower bound ε on pM, and costs O(3tmax)=O(1/ε) calls. Combined with the phase-estimation reflection of the paper's Theorem 6 it yields Theorem 3, the general quantum-walk search theorem that has become the standard tool for walk-based algorithms (element distinctness, triangle finding, group commutativity). Nothing in the lemma refers to Markov chains, so it applies to any setting with an approximate reflection about the initial state.
The results are proved in the paper. None of them is machine-checked: the platform holds a formal Grover search with one marked basis state and exact reflections, but no amplitude amplification with approximate or recursive reflections. A formal proof would also settle the steps the paper passes over quickly, notably that the trigonometric inequalities, claimed for angles in [0,π/4], are applied to the actual angles ϕi, which may exceed π/4 by O(γ) at the last level.
Difficulty
The ideal analysis (every reflection exact, angle tripled at each level) is a two-dimensional rotation argument. With approximate reflections the state leaves the plane spanned by ∣μ0⟩ and ∣μ0⊥⟩, and each level both triples the error already present and injects a new one; the errors stay bounded only because ∑iβi converges and the injection at level i is weighted by sin2ϕi. Fact 1 is not a restatement of the hypothesis on R(β): it holds only because step 4 flips the phase of states whose earlier registers are dirty, and because Ai−1 never touches K≥i. In Lemma 2 the attempts reuse the leftover state, not a fresh ∣π⟩∣0S⟩, so the state at the decisive attempt t has drifted; bounding the drift needs the normalised unmarked parts ∣μk⊥⟩ to move little from level to level, which again depends on the error bounds of Lemma 1.
Formalization scope
H⊗K1⊗⋯⊗KT is EuclideanSpace ℂ (X × X × ((j : Fin T) → κ (j+1))); operators are complex matrices. Registers are 0-based in Lean (index j is Kj+1).
Ri is required only at the precisions βi actually used, which is weaker than the paper's "for any β>0". Property 3 is stated in the homogeneous form ≤βi∥ψ∥.
"Undo" is the conjugate transpose. t and tmax are explicit naturals with "satisfies the condition and no smaller one does". sin−1 is Real.arcsin; the interval is closed.
The success probability of Tolerant RAA is defined from the measurement rule, pM+(1−pM)(1−∏i=1tmax(1−∥ΠM~∣ψi⟩∥2)), with post-measurement states computed from the actual ∣ψi⟩; registers are not reset. The classical sample succeeds with probability ∥ΠM∣π⟩∥2, which is ∑x∈Mπx in the paper's walk setting.
"M non-empty" in Lemma 2 is read as pM>0, as in the paper's proof. Edge-case hypotheses: ∥π∥=1; ϕi≤π/3 in the one-level bound (so sin3ϕi≥0); pM<1 in the last drift term; 1≤i<t and T≥t in the drift bounds.
Cost is not formalized: property 1 of R(β), the cost c2 of −ref(M) and every "incurs a cost of order" clause are out of scope. The data-structure subscript d is omitted, as in the paper's own error analysis.
A formalization in which step 4 applies an exact reflection about ∣π⟩ or ∣φi−1⟩, or in which the success probability is computed from ideal angles instead of the actual states, would make the lemmas statements about exact RAA; the definitions apply the given Ri and measure the actual states.
Contributions welcome: proofs of the trigonometric milestones and of e~i≤γϕˉi/π (pure real analysis), Fact 1 (finite-dimensional linear algebra with a block structure on registers), and the vector inequality ∥u/∥u∥−v/∥v∥∥≤2∥u−v∥/∥v∥ that the drift bounds share. The register and controlled-unitary infrastructure is reusable for other recursive quantum algorithms.
Selected references
F. Magniez, A. Nayak, J. Roland, M. Santha, Search via Quantum Walk, SIAM J. Comput. 40(1), 2011; arXiv:quant-ph/0608026v4. https://arxiv.org/abs/quant-ph/0608026
G. Brassard, P. Høyer, M. Mosca, A. Tapp, Quantum amplitude amplification and estimation, Contemp. Math. 305, 2002. https://arxiv.org/abs/quant-ph/0005055
Exact quantum factoring over a fixed finite gate setOpen Problem
Motivation
Bounded-error factoring and exact factoring have different correctness requirements. Repetition until success and increasingly accurate rotations do not automatically give a fixed-gate, worst-case polynomial exact algorithm. The pinned manuscript supplies the research context.
Setting
Circuit instructions use NOT, CNOT, Toffoli, Hadamard and phase primitives, their inverses and singly controlled versions. A classical finite-stack machine generates each encoded circuit from unary input length.
The theorem states that the defined proposition MainTheorem holds, i.e. there is a family of quantum circuits indexed by input bit length ℓ with three properties. Circuits are lists of instructions on q qubits, each applying one of 20 named gates (the primitives NOT, CNOT, Toffoli, Hadamard and phase, each optionally inverted and optionally given one extra control) to distinct wires; the output state is obtained by applying the instructions in order to the basis state holding the binary digits of N, least significant bit first, on the first ℓ wires, with all other wires zero. First, the family is uniform: a single Turing machine (TM2) with finite stack alphabets computes in polynomial time the encoding of the ℓth circuit from the unary string of length ℓ, where the encoding writes the qubit count, instruction count and each instruction's gate code, inverse and control flags and wire indices in unary. Second, the numbers of qubits and of instructions of the ℓth circuit are both bounded by one fixed polynomial in ℓ with natural-number coefficients. Third, for every ℓ and every integer N ≥ 2 whose binary length is exactly ℓ, the circuit has at least ℓ + n² qubits, where n = max(128, ℓ), and the total squared amplitude on basis states whose output is correct equals exactly 1. A basis state is correct if reading n consecutive blocks of n bits after the input wires, each block as a binary number, gives the nondecreasing list of prime factors of N with multiplicity, padded with zeros to length n.
Significance and status
The output is a sorted list of prime factors with multiplicity in fixed binary blocks, padded with zeros. The target is an existence theorem for a uniform circuit family, not an uploaded executable factoring program. The target is currently Open on Prove2Me. The manuscript's mathematical argument and a machine-checked proof of the selected statement are separate deliverables.
Difficulty
Uniform generation, polynomial qubit and gate bounds, a fixed finite gate alphabet, and probability-one correctness must all hold together.
Formalization scope
The exact published goal, its hypotheses and its referenced definition blocks specify the requested formalization. The explanatory formula above is a summary; all quantifiers and additional clauses in the linked statement remain required.
The available published material supplies this goal and its necessary definitions. Additional manuscript lemmas are not represented as attached milestones.
Selected references
OpenAI, Exact quantum factoring over a fixed finite gate set, preprint, 2026. Manuscript.
Regular trajectories, pruning and quantum parityOpen Problem
Motivation
The parity function tests whether a shallow quantum circuit can combine information from all input bits. Polynomially many ancillary qubits make the measured-output formulation substantially stronger than a restriction to clean final registers. The pinned manuscript supplies the research context.
Setting
Allowed gates are arbitrary one-qubit unitaries and Toffoli gates with finitely many controls. Gates within a layer have disjoint supports. Inputs occupy the first n qubits, with zero ancillas.
The theorem states that, for any positive integers d, k and C, there is a threshold n₀ such that for every n ≥ n₀ and every total qubit count N with n ≤ N ≤ C(n+1)^k, the following holds. Take any circuit given as a list of at most d physical layers on N qubits, where a layer is a list of gates with pairwise disjoint supports and each gate is either a one-qubit unitary on a single qubit or a Toffoli gate with an arbitrary finite set of control qubits and a target outside that set (flipping the target exactly when all controls are 1). The circuit's matrix is the product of the layer matrices, with the first layer acting first. For every choice of output qubit out among the N qubits, there exists an n-bit input x such that successProbability, the total Born probability over all final computational-basis strings y whose out-th bit equals the parity (sum mod 2) of x, is strictly less than 2/3. Here the input state is x placed on the first n qubits with all remaining qubits set to 0, and the remaining qubits are summed over with no requirement that they be clean. So fixed-depth circuits with polynomially many qubits cannot compute parity with worst-case success probability at least 2/3. The theorem is admitted in the source (proof is sorry).
Significance and status
The published goal fixes success threshold 2/3 and positive integer depth, polynomial exponent and coefficient. It does not state the manuscript's full range of positive advantages. The target is currently Open on Prove2Me. The manuscript's mathematical argument and a machine-checked proof of the selected statement are separate deliverables.
Difficulty
The bound covers arbitrary gates, all choices of output qubit and polynomially many total qubits. Discarded registers can retain unrestricted garbage.
Formalization scope
The exact published goal, its hypotheses and its referenced definition blocks specify the requested formalization. The explanatory formula above is a summary; all quantifiers and additional clauses in the linked statement remain required.
The available published material supplies this goal and its necessary definitions. Additional manuscript lemmas are not represented as attached milestones.
Selected references
OpenAI, Regular trajectories, pruning and quantum parity, preprint, 2026. Manuscript.
Entanglement with zero distillable secret key in local dimension tenOpen Problem
Motivation
Positive partial transpose imposes strong constraints on quantum maps, but composition may retain entanglement. Explicit finite-dimensional examples make that distinction a precise algebraic target. The pinned manuscript supplies the research context.
Setting
The selected maps act on complex 10 by 10 matrices. Complete positivity is quantified over matrix amplifications, while separability is expressed by finite sums of positive tensor factors.
The theorem states that there exist maps Φ₁ and Φ₂ from 10×10 complex matrices to 10×10 complex matrices, equal to the defined maps phiOne and phiTwo, each of which is PPT, meaning complex-linear, completely positive, and such that composing with the transpose of the output is also completely positive (complete positivity means that applying the map to one factor of any positive semidefinite block matrix on ℂᵏ⊗ℂ¹⁰, for every k≥1, yields a positive semidefinite matrix). Here phiOne sends A to the 6×6 matrix obtained from the transpose of A by embedding it as a symmetric tensor in ℂ⁴⊗ℂ⁴, applying the tensor square of an explicit 4×4 pencil map built from four integer 6×4 blocks, and compressing to the antisymmetric subspace, then padding it to a 10×10 matrix in the first six coordinates. phiTwo is the Hilbert–Schmidt adjoint of an associated complementary map, which uses a Hodge-type complement matrix, applied to the compression of its input onto the first six coordinates. Moreover, letting Z be the Choi matrix of the composition Φ₂∘Φ₁, a 100×100 matrix with entries given by the images of the matrix units, Z is nonzero; no nonzero product vector u⊗v with u,v∈ℂ¹⁰ lies in the range of Z, that is, whenever Z applied to some w∈ℂ¹⁰ˣ¹⁰ equals u⊗v then u=0 or v=0; and Φ₂∘Φ₁ is not entanglement breaking, where entanglement breaking means completely positive and sending every positive semidefinite amplification to a separable matrix, a finite sum of Kronecker products of positive semidefinite matrices. This theorem is admitted in the source, not proved.
Significance and status
The selected target is the explicit pair of PPT maps in dimension ten, including its nonzero Choi matrix and product-vector obstruction. It does not state a secret-key distillation theorem. The separate 21-dimensional channel is retained as an additional reference. The target is currently Open on Prove2Me. The manuscript's mathematical argument and a machine-checked proof of the selected statement are separate deliverables.
Difficulty
PPT properties and non-entanglement-breaking composition require different certificates. The range condition must exclude every nonzero product vector.
Formalization scope
The exact published goal, its hypotheses and its referenced definition blocks specify the requested formalization. The explanatory formula above is a summary; all quantifiers and additional clauses in the linked statement remain required.
Additional published targets are included as separate references:
Exact Fourier certificates for complex Hadamard matrices of order sixOpen Problem
Motivation
Character sums express phase constraints on complex Hadamard matrices. In dimension six these constraints also bear on how many mutually unbiased bases can coexist. The pinned manuscript supplies the research context.
Setting
A complex Hadamard matrix has unit-modulus entries and conjugate-transpose product 6I. Equivalence permits row and column permutations and unit phases. Tao's cubic matrix supplies the exceptional class.
The theorem states a conjunction of two claims about 6x6 complex matrices and mutually unbiased bases in C^6. First, for every complex Hadamard matrix H of order 6 (all entries of modulus 1 and HH = 6I, where H is the conjugate transpose) that is not equivalent to the specific matrix tao, every permutation π of the six coordinates gives g(H, alpha∘π) = 0. Here the character of a column x at an integer exponent vector a is the product over i of x_i^{a_i}, g(H,a) is (1/6) times the sum over the six columns k of H of the character of column k at a, and alpha is the exponent vector (1,1,1,-1,-1,-1), so alpha∘π is alpha with its entries permuted. Equivalence of H and K means K_{ij} = u_i H_{r(i),c(j)} v_j for some row and column permutations r, c and unit-modulus complex phase vectors u and v. The matrix tao has entries ω^{e_{ij}}, where ω = exp(2πi/3) and e is a fixed 6x6 exponent matrix with zero first row and column and a five-cycle pattern of exponents 0, 1, 2 in the remaining 5x5 block. Second, for every natural number n, if there exist n orthonormal bases of C^6 that are pairwise mutually unbiased, meaning |<b_i, b'_j>|^2 = 1/6 for all vectors of two distinct bases, then n ≤ 5. This is stated as an admitted theorem, not a verified proof.
Significance and status
The goal is the conjunction of Fourier vanishing outside the specified equivalence class and the bound on attainable families. The cube-fiber statement is an additional published supporting target with its own hypotheses. The target is currently Open on Prove2Me. The manuscript's mathematical argument and a machine-checked proof of the selected statement are separate deliverables.
Difficulty
Orthogonality immediately kills certain degree-two characters, but the target concerns a balanced degree-six character and a separate global bound on families of bases.
Formalization scope
The exact published goal, its hypotheses and its referenced definition blocks specify the requested formalization. The explanatory formula above is a summary; all quantifiers and additional clauses in the linked statement remain required.
Additional published targets are included as separate references:
Classical capacity and entropy inequalities for generalized amplitude dampingResearch Paper
Motivation: the classical capacity of a thermal qubit channel
A quantum channel models how a physical system, used to carry information, is corrupted by its environment. The classical capacity of a channel is the largest rate, in bits per use, at which classical messages can be sent with vanishing error when the sender may encode into arbitrary — possibly entangled — states of many uses and the receiver may measure all outputs jointly. The Holevo–Schumacher–Westmoreland coding theorem (Holevo 1998; Schumacher–Westmoreland 1997) expresses this capacity as a regularized limit of the Holevo information over ever larger blocks of uses. Since Holevo information is not additive in general (Hastings 2009), computing the capacity of any specific channel requires a channel-specific additivity argument, and exact formulas are known only for a few families.
Generalized amplitude damping is the standard model of a qubit relaxing toward a thermal state: it loses or gains an excitation with probabilities set by a damping strength γ and a stationary excited population ν, and its coherences decay. It is one of the basic noise models of quantum information theory.
2002 — Additivity for unital qubit channels (King 2002) and for entanglement-breaking channels (Shor 2002) settles some parameter regions of the family; Bennett, Shor, Smolin and Thapliyal describe the two-signal optimization for ordinary amplitude damping (BSST 2002).
2005 — Giovannetti and Fazio derive the optimized one-use expression for ordinary amplitude damping (Giovannetti–Fazio 2005); Berry studies qubit channels achieving capacity with two states (Berry 2005).
2007 — Hou and Fang characterize the one-use Holevo optimum of the generalized channel (Hou–Fang 2007).
2009 — Hastings shows that Holevo information is not additive in general (Hastings 2009).
2018 — Leditzky, Kaur, Datta and Wilde note that the unrestricted classical capacity of amplitude damping had not been determined (LKDW 2018).
2020 — Khatri, Sharma and Wilde collect upper bounds for the generalized family (KSW 2020).
2026 — Tang, Zhu, Bai and Wang prove additivity for qubit channels with a pure output, including ordinary amplitude damping (arXiv:2609.28592); Fang gives a close converse bound for the generalized family (arXiv:2609.14621).
2026 — An OpenAI preprint, Classical capacity and entropy inequalities for generalized amplitude damping (OpenAI Math Release, September 24, 2026), claims the capacity for all (γ,ν)∈[0,1]2. The preprint has not been peer reviewed, and its results are not formally verified.
Setting
For γ,ν∈[0,1] the generalized amplitude-damping channel acts on a qubit density matrix by
Aγ,ν(1−qzˉzq)=(1−t1−γzˉ1−γzt),t=(1−γ)q+γν,
and n independent uses act as Aγ,ν⊗n on 2n×2n matrices. With S(P)=−TrPlnP, the Holevo information in bits is
over all finite ensembles of input states (entangled across uses when N=A⊗n). The classical capacityC(N) is the supremum of rates R for which there are n-use codes — arbitrary input states for each of Mn equiprobable messages and one joint measurement of all outputs — with average error tending to zero and liminfnn−1log2Mn≥R; there is no shared entanglement or feedback. Write h for binary entropy in nats, g(u)=h((1+1−4u)/2) and vγ,ν(p)=γν(1−ν)+γ(1−γ)(p−ν)2.
Formalization targets
Goal: additivity and capacity formula (Theorem 1.1)
the maximum is attained, C(Aγ,ν)=χ(Aγ,ν), and for every maximizer p the equiprobable independent products of the two signals ϕ±=1−p∣0⟩±p∣1⟩ attain χ(Aγ,ν⊗n) at every block length. The goal is published on the platform with status Open.
Significance
The result itself. The theorem gives a closed one-variable formula for the classical capacity of every generalized amplitude-damping channel, removing the regularization over block lengths: entangled input signals across uses give no advantage, and a simple product code with two signals per use is optimal. This settles the ordinary amplitude-damping case listed as open by LKDW 2018 and extends beyond the pure-output criterion of Tang et al. to the thermal regime, where the channel has no pure output. The source further proves additivity of Holevo capacity, minimum output entropy and classical capacity when the channel is used in parallel with any finite-dimensional partner channel (Corollary 1.2); that corollary is not part of this goal.
Formalizing it. The goal ties together an operational capacity (codes and error probabilities), an entropic quantity (a supremum over unrestricted ensembles on 2n-dimensional matrices), and a scalar optimization. A machine-checked proof would certify both the matrix entropy inequality at the heart of the argument and the converse direction of the coding theorem. Mathlib does not currently contain quantum channel capacity theory, so the definitions here are new infrastructure.
Difficulty
Optimizing a single use gives a lower bound on capacity; the difficulty is the matching upper bound for all n simultaneously, where an input may be entangled across all uses. Holevo additivity is false for general channels, so no abstract argument applies, and for interior thermal occupation 0<ν<1 with γ>0 the channel has no pure output, which rules out the recent pure-output criterion. The proof needs a lower bound on the entropy of the output of an arbitrary entangled block input, i.e. a matrix entropy inequality for 2×2 block-structured states that is tight on product inputs. Identifying the capacity with the regularized Holevo quantity also requires the full coding theorem and a Fano-type converse.
Formalization scope
Matrices are indexed by Fin n → Fin 2; the n-use channel is given by tensor products of the four standard Kraus operators of generalized amplitude damping, which reproduce the displayed action exactly.
Entropy is Tr (cfc negMulLog P) (nats, 0ln0=0); Holevo values are divided by ln2 (bits). holevo γ ν n is the sSup over all finite ensembles of arbitrary 2n-dimensional states, with no product or purity restriction.
capacity is the sSup of operationally achievable rates: codes with any positive number of messages, arbitrary state encodings, an arbitrary POVM decoder, average error tending to 0, and the liminf rate condition. It is defined operationally, not by regularization, so the identity C=χ includes the coding theorem.
The scalar objective uses Real.binEntropy (nats); the maximizer is over p∈[0,1]. The final clause also asserts that the phase-product signals are states.
Parameters range over the closed square [0,1]2, including boundary cases (identity channel at γ=0, full replacement at γ=1).
Needed infrastructure: matrix entropy and its concavity, CPTP maps and Kraus representations, Holevo's bound, Fano's inequality, the HSW coding theorem for finite ensembles, and Fekete-type superadditivity. These are reusable for any quantum Shannon-theory mission.
Selected references
P. Hausladen, R. Jozsa, B. Schumacher, M. Westmoreland, W. K. Wootters, Classical information capacity of a quantum channel, Phys. Rev. A 54 (1996), 1869–1876. https://doi.org/10.1103/PhysRevA.54.1869
B. Schumacher and M. D. Westmoreland, Sending classical information via noisy quantum channels, Phys. Rev. A 56 (1997), 131–138. https://doi.org/10.1103/PhysRevA.56.131
A. S. Holevo, The capacity of the quantum channel with general signal states, IEEE Trans. Inf. Theory 44 (1998), 269–273. https://doi.org/10.1109/18.651037
P. W. Shor, Additivity of the classical capacity of entanglement-breaking quantum channels, J. Math. Phys. 43 (2002), 4334–4340. https://doi.org/10.1063/1.1498000
C. H. Bennett, P. W. Shor, J. A. Smolin, A. V. Thapliyal, Entanglement-assisted capacity of a quantum channel and the reverse Shannon theorem, IEEE Trans. Inf. Theory 48 (2002), 2637–2655. https://doi.org/10.1109/TIT.2002.802612
L.-Z. Hou and M.-F. Fang, The Holevo capacity of a generalized amplitude-damping channel, Chinese Physics 16 (2007), 1843–1847. https://doi.org/10.1088/1009-1963/16/7/006
M. B. Hastings, Superadditivity of communication capacity using entangled inputs, Nature Physics 5 (2009), 255–257. https://doi.org/10.1038/nphys1224
F. Leditzky, E. Kaur, N. Datta, M. M. Wilde, Approaches for approximate additivity of the Holevo information of quantum channels, Phys. Rev. A 97 (2018), 012332. https://doi.org/10.1103/PhysRevA.97.012332
S. Khatri, K. Sharma, M. M. Wilde, Information-theoretic aspects of the generalized amplitude-damping channel, Phys. Rev. A 102 (2020), 012401. https://doi.org/10.1103/PhysRevA.102.012401
Z. Tang, C. Zhu, G. Bai, X. Wang, Classical capacity and entanglement cost of the amplitude damping channel, arXiv:2609.28592 (2026). https://arxiv.org/abs/2609.28592v1
K. Fang, A pretty-tight converse on the classical capacity of generalized amplitude-damping channels, arXiv:2609.14621 (2026). https://arxiv.org/abs/2609.14621v1
Product-projection localization and the QAC0 parity lower boundResearch Paper
Motivation
Parity, PARITYn(x)=x1⊕⋯⊕xn, is the standard test of whether a shallow circuit can aggregate information from all of its inputs. Classically, constant-depth circuits with unbounded fan-in AND/OR gates (AC0) cannot compute it: Furst, Saxe and Sipser (Math. Systems Theory 1984) and Ajtai (APAL 1983) proved superpolynomial lower bounds, and Håstad's switching lemma gave nearly optimal exponential ones (STOC 1986). The quantum analogue QAC0 allows arbitrary one-qubit unitaries and Toffoli gates of unbounded arity, but gates in one layer must act on disjoint qubits, so a wire cannot control many simultaneous gates. Moore (arXiv:quant-ph/9903046, 1999) showed that coherent parity and quantum fanout are equivalent under Hadamard conjugation, and conjectured that neither is in QAC0. Because fanout makes constant-depth quantum circuits very powerful (Høyer–Špalek, ToC 2005), whether PARITY∈/QAC0 has been a central question about shallow quantum computation.
Background
1999 — Moore introduces the quantum circuit classes and the parity/fanout conjecture.
2002 — Green, Homer, Moore and Pollett develop quantum counting classes and modular-gate equivalences (QIC 2002).
2006 — Fang, Fenner, Green, Homer and Zhang: depth Ω(log(n/(a+1))) for exact clean parity with a ancillas (QIC 2006).
2020–2021 — Padé, Fenner, Grier and Thierauf rule out exact clean parity at entangling depth two (arXiv:2005.12169); Rosenthal bounds approximate parity unitaries (ITCS 2021).
2024–2025 — Pauli-spectrum lower bounds with restricted ancillas (Nadimpalli, Parham, Vasconcelos, Yuen, STOC 2024); no fixed parity advantage with barely superlinear ancillas (Anshu, Dong, Ou, Yao, STOC 2025), extended by Dong, Ou and Yao (arXiv:2510.00593).
2026 — Joshi, Tal, Vasconcelos and Wright: exact parity lower bounds at entangling depth three without size restriction (STOC 2026); Gretta, Gupta and Joshi relate the question to Fourier concentration (arXiv:2604.02793).
September 2026 — Two OpenAI preprints claim the lower bound for every fixed depth and every polynomial number of qubits, by independent arguments: product-projection localization (source) and regular trajectories with pruning (source).
This mission asks for a formal proof of the parity lower bound stated as Theorem 1 of an OpenAI preprint dated September 24, 2026 (source). The preprint has not been peer reviewed and its claims have not been independently verified; on the platform the Lean goal is open.
Setting
A circuit acts on N qubits, with state space (C2)⊗N and computational basis indexed by bit strings y∈{0,1}N. The allowed gates are arbitrary one-qubit unitaries and generalized Toffoli gates∣z1,…,zt,b⟩↦∣z1,…,zt,b⊕z1⋯zt⟩ on distinct control and target qubits. A layer is a set of gates with pairwise disjoint supports, and a depth-d circuit is a product W=Ld⋯L1 of at most d layers. Gates and their complex entries may depend on n but not on the input.
On input x∈{0,1}n with n≤N, the circuit starts in ∣x⟩⊗∣0⟩⊗(N−n). One designated output qubit is measured in the computational basis; all other qubits are discarded in arbitrary states, and the input need not be preserved. The success probability on x is
A circuit computes parity with worst-case advantageε if this probability is at least 1/2+ε for every x.
Formalization targets
Goal: the parity lower bound (Theorem 1, p. 1)
Fix an integer d≥0, a real c≥1 and 0<ε≤1/2. Then for all sufficiently large n, for every N with n≤N≤nc, every circuit of depth at most d on N qubits and every choice of output qubit, there is an input x∈{0,1}n with
Pr[output=PARITYn(x)]<21+ε.
With ε=1/6 this is the usual bounded-error statement PARITY∈/QAC0 in the measured-output model.
Significance
The result itself. It answers Moore's question for every fixed depth and every polynomial bound on the total number of qubits, with arbitrary final garbage and any fixed positive advantage, whereas earlier results fixed the entangling depth or restricted the number of ancillas. Through Hadamard conjugation it also excludes constant-depth polynomial-size coherent fanout. The preprint derives further consequences (Section 7): state-preparation obstructions (Corollary 8, p. 14), a qualitative quantum LMN-type Fourier tail bound (Corollary 9, p. 16), and, via reductions of Xu and Li, lower bounds for majority and other symmetric functions (Corollaries 10–11, pp. 17–18). The structural Theorem 2 (p. 5), localization of conjugated product projections, is of independent interest.
Formalizing it. The statement is elementary (finite matrices, Born probabilities) while the proof is a two-level induction with polynomial approximation, so a formal proof would give a fully checked circuit lower bound in quantum complexity, an area with few machine-checked results. A companion OpenAI preprint gives an independent proof by regular trajectories and pruning.
Difficulty
Light-cone arguments fail at once: a single Toffoli gate may touch every qubit, so after one layer an output can depend on all inputs. Spectral and Pauli-weight methods previously needed ancilla bounds such as O~(n1+2−d). The preprint's route controls transitions from a product condition to states with many mismatches, [M≥Nt]U[D=0]U†[M=0]≤e−Ns for all fixed 0≤s<t (Theorem 2, p. 5). The obstacle is that reflection expansions cost exponentially in the projection's support, and low-degree polynomial surrogates for a product projection are accurate only at low mismatch counts; the uncontrolled high-count error is handled by a second induction on thresholds that exchanges the roles of the two counts.
Formalization scope
Word N := Fin N → Fin 2; operators are complex matrices indexed by words. Gate.local q u is a one-qubit unitary tensored with identities; Gate.toffoli controls target is the permutation matrix flipping the target when all controls are 1 (an empty control set gives a NOT gate, itself a one-qubit unitary).
PhysicalLayer N is a list of gates whose supports are pairwise disjoint; its matrix is the product of the gate matrices. physicalCircuitMatrix layers applies the layers in list order (rightmost matrix acts first).
inputWord x pads x with zeros; successProbability W out x sums ∣Wy,(x,0)∣2 over all y whose output bit equals the parity of x, so final garbage is unrestricted.
The output qubit out : Fin N is arbitrary, including an input qubit. The quantifier order is: depth, size bound and advantage fixed first; then a threshold n0; then every n≥n0, every N in range, every circuit and every output qubit.
No intermediate measurement, postselection or fanout gate is in the model; the statement is a pure statement about unitary matrices, with no complexity-class machinery.
ParityStatement takes the size bound as a real exponent: N≤nc with c≥1 real, n≤N, and depth layers.length ≤ d with d≥0, exactly as in Theorem 1. Its conclusion is the negation of "for every x, success ≥1/2+ε".
Welcome contributions: a reusable Lean model of unitary circuits on qubits, spectral projections of commuting count operators, and Chebyshev-type polynomial approximation with coefficient bounds (Lemma 3, p. 6).
M. Furst, J. B. Saxe, M. Sipser, Parity, circuits, and the polynomial-time hierarchy, Math. Systems Theory 17 (1984), 13–27. https://doi.org/10.1007/BF01744431
The entropy photon-number inequalityResearch Paper
Motivation
Shannon's entropy power inequality bounds the entropy of a sum of independent random vectors below by the entropies of the summands; it is a basic tool for classical Gaussian channel capacities. In optical communication, addition is replaced by passive mixing of bosonic modes at a beam splitter. Guha, Erkmen and Shapiro conjectured the sharp bosonic analogue, the entropy photon-number inequality (EPnI), stated in terms of the photon number of the thermal state with the same entropy (ITA 2008). If true, it settles the minimum output entropy of thermal attenuators at fixed input entropy and the capacity regions of bosonic broadcast and wiretap channels, which had been reduced to this inequality (PRA 2007).
This mission asks for a formal proof of the EPnI for finite-energy inputs in any finite number of modes, as stated in an OpenAI preprint dated September 24, 2026 (source). The preprint has not been peer reviewed and its claims have not been independently verified; on the platform the Lean goal is open.
Background
1948–1965 — Shannon introduces entropy power; Stam (1959) and Blachman (IEEE IT 1965) prove the entropy power inequality.
2004 — Capacity of the pure-loss bosonic channel (PRL 2004) and the minimum-output-entropy conjecture (PRA 2004).
2007–2008 — Guha, Shapiro and Erkmen relate broadcast capacity to a minimum-output-entropy conjecture; Guha, Erkmen and Shapiro state the EPnI.
2011 — Special cases (one-mode number-diagonal inputs) by Das, Sharma and Muthukrishnan (arXiv:1107.2365).
2014 — König and Smith prove a quantum entropy power inequality, including S(ρC)≥ηS(ρA)+(1−η)S(ρB) (IEEE IT 2014); De Palma, Mari and Giovannetti prove the exponential form eS(ρC)/n≥ηeS(ρA)/n+(1−η)eS(ρB)/n (Nat. Photonics 2014).
2015 — Giovannetti, Holevo and García-Patrón solve the Gaussian optimizer conjecture for unconstrained minimum output entropy (CMP 2015).
2016–2018 — De Palma, Trevisan and Giovannetti settle one-mode constrained problems (IEEE IT 2017; PRL 2017); De Palma and Trevisan give a rigorous finite-energy conditional EPI (CMP 2018).
September 2026 — The OpenAI preprint claims the two-input EPnI for all finite-energy inputs (Theorem 1.1, p. 2).
Setting
An n-mode bosonic system has Fock space ℓ2(Nn) with number basis ∣k⟩, k∈Nn. A state is a positive trace-one operator ρ; it has finite energy if Trρ∑jaj†aj=∑k(k1+⋯+kn)⟨k∣ρ∣k⟩<∞. The von Neumann entropy is S(ρ)=−Trρlogρ (natural log). The thermal entropy per mode is
g(t)=(t+1)log(t+1)−tlogt,t≥0,
increasing from 0 to ∞, and the entropy photon number of ρ is N(ρ)=g−1(S(ρ)/n), the mean photon number per mode of the product thermal state with the same entropy. For independent inputs ρA,ρB and transmissivity 0≤η≤1, the beam-splitter outputρC is the reduced state of the modes cj=ηaj+1−ηbj after passive mixing of ρA⊗ρB. No independence among the modes within either input is assumed.
Formalization targets
Goal: Theorem 1.1 (p. 2)
For every finite n≥1, every pair of finite-energy n-mode states ρA,ρB and every 0≤η≤1,
g−1(nS(ρC))≥ηg−1(nS(ρA))+(1−η)g−1(nS(ρB)).
Thermal inputs with a common mean photon number within each port give equality.
Significance
The result itself. The EPnI is sharper than the exponential quantum entropy power inequality when the two input entropies differ, which is exactly the regime needed for constrained minimum output entropy. The preprint derives the exact minimum output entropy at fixed input entropy for every tensor power of an identical thermal attenuator, with inputs entangled across modes (Corollary 1.2, p. 2), and the exact capacity region of the degraded two-receiver pure-loss broadcast channel (Corollary 7.1, p. 26), completing the converse of Guha, Shapiro and Erkmen.
Formalizing it. The statement involves infinite-dimensional Fock space, trace-class positive operators, continuous functional calculus for the entropy, and the partial trace after a passive unitary. The Lean development builds these concretely in the number basis. A formal proof would give machine-checked infrastructure for quantum entropy on infinite-dimensional spaces, which Mathlib currently lacks. No machine-checked version of any quantum entropy power inequality is known.
Difficulty
Heat-flow (quantum Fisher information) proofs give the linear and exponential bounds, but these are attained only for equal entropies and do not recover the thermal comparison at unequal entropy levels. The preprint instead minimizes a regularized functional over pairs of inputs and must show that minimizers are thermal. This requires an interpolation theorem for diagonal form comparisons (Theorem 3.1, p. 8), attainment and Gibbs regularity of minimizers in infinite dimensions (Lemma 4.1, Proposition 4.2, pp. 15–16), a component entropy-Hessian estimate, and a stationarity identity whose cancellation forces convergence to thermal inputs (Section 6). Compactness relies on the finite-energy hypothesis; without it entropies can be infinite.
Formalization scope
Fock n is lp (fun _ : Fin n → ℕ => ℂ) 2. A State is a positive bounded operator whose diagonal in the number basis sums (HasSum) to 1.
FiniteEnergy ρ is summability of ∑k∣k∣⟨k∣ρ∣k⟩.
entropy ρ is the sum of diagonal entries of cfc(−tlogt)(ρ); for finite-energy states it is finite, so the tsum is the true entropy.
gInv s = sInf {t ≥ 0 | s ≤ g t}, the inverse of g on [0,∞).
IsBeamSplitterOutput η ρA ρB ρC requires every number-basis entry of ρC to be the (convergent) partial-trace sum of the explicitly given beam-splitter coefficients applied to ρA⊗ρB; the inputs are arbitrary density matrices, so internal entanglement is allowed.
The hypotheses are satisfiable (e.g. vacuum or thermal inputs) and the conclusion is the inequality as stated.
S. Guha, B. I. Erkmen, J. H. Shapiro, The entropy photon-number inequality and its consequences, ITA Workshop 2008, 128–130. https://doi.org/10.1109/ITA.2008.4601037
S. Guha, J. H. Shapiro, B. I. Erkmen, Classical capacity of bosonic broadcast communication and a minimum output entropy conjecture, Phys. Rev. A 76 (2007), 032303. https://doi.org/10.1103/PhysRevA.76.032303
G. De Palma, A. Mari, V. Giovannetti, A generalization of the entropy power inequality to bosonic quantum systems, Nat. Photonics 8 (2014), 958–964. https://doi.org/10.1038/nphoton.2014.252
G. De Palma, D. Trevisan, The conditional entropy power inequality for bosonic quantum systems, Comm. Math. Phys. 360 (2018), 639–662. https://doi.org/10.1007/s00220-017-3082-8
V. Giovannetti, A. S. Holevo, R. García-Patrón, A solution of Gaussian optimizer conjecture for quantum channels, Comm. Math. Phys. 334 (2015), 1553–1571. https://doi.org/10.1007/s00220-014-2150-6
V. Giovannetti, S. Guha, S. Lloyd, L. Maccone, J. H. Shapiro, H. P. Yuen, Classical capacity of the lossy bosonic channel: the exact solution, Phys. Rev. Lett. 92 (2004), 027902. https://doi.org/10.1103/PhysRevLett.92.027902