The mathematical discipline of drawing inferences from data under uncertainty: estimation, hypothesis testing, prediction, and the quantification of confidence. Grounded in probability, it spans classical and Bayesian inference, experimental design, and modern high-dimensional and nonparametric theory, asking what data can reveal and with what guarantees.
The Markov Chain Central Limit TheoremResearch Paper
Markov chain Monte Carlo turns hard integration problems into long simulations: to estimate an expectation Eπf one runs a Markov chain with stationary distribution π and reports the sample average fˉn. The ergodic theorem guarantees fˉn→Eπf, but honest error bars require more: a central limit theorem
n(fˉn−Eπf)→dN(0,σf2).
On general state spaces this is famously delicate - a merely ergodic chain with a square-integrable functional can fail the CLT, so the classical theory trades convergence rates (drift, minorization, geometric or polynomial total-variation rates) and mixing conditions (α-, ρ-, φ-mixing) against moment conditions on f. This mission formalizes G. L. Jones's survey "On the Markov chain central limit theorem" (Probability Surveys, 2004): the drift-condition CLTs of Meyn-Tweedie and Jarner-Roberts, the classical mixing CLTs of Ibragimov-Linnik, Doukhan-Massart-Rio and Billingsley, the characterizations via uniform integrability and boundedness in probability, and their assembly into the summary theorem: six practically checkable regimes - from polynomial ergodicity with bounded functionals to uniform ergodicity with second moments - each of which guarantees the CLT for every initial distribution. The stationarity, total-variation and mixing infrastructure is general state space and reusable well beyond this mission.
Every time a streaming service guesses what you would rate a film you have never seen, it is solving a matrix completion problem: fill in the missing entries of a vast user-by-item table from the few that are observed. The question became famous during the Netflix Prize (2006-2009), and it looks hopeless - infinitely many matrices fit the observed entries - until one assumes the structure that makes recommendation possible: the table is essentially low rank, because tastes are governed by a few latent factors. In their landmark 2009 paper 'Exact Matrix Completion via Convex Optimization' (Foundations of Computational Mathematics), Emmanuel Candes and Benjamin Recht proved that an n-by-n matrix of rank r can be recovered exactly, with high probability, from only about n^1.2 * r * log n randomly observed entries - not by the NP-hard route of minimizing rank, but by minimizing the nuclear norm, a convex surrogate (the sum of the singular values) solvable efficiently. The proof, in the lineage of Candes-Romberg-Tao compressed sensing, turns on two ideas: an incoherence condition ensuring the singular vectors are spread out rather than spiky, and a dual certificate witnessing optimality, whose existence rests on delicate random-matrix concentration. It transformed a practical engineering puzzle into rigorous theory and seeded a decade of work across machine learning, signal processing, computer vision, and sensor localization. This mission formalizes the Candes-Recht exact-recovery theorem in Lean, decomposed into its dual-certificate construction and the probabilistic concentration reductions at its core.
High-Dimensional Statistics I: Gaussian Concentration of Lipschitz FunctionsTextbook
Motivation
A recurring question in high-dimensional statistics is how tightly a scalar quantity built from
many random inputs concentrates around its mean, even as the number of inputs grows without
bound. Two classical answers organize the whole toolkit: martingale methods, which control a
sum of dependent increments one conditional step at a time, and Gaussian-specific isoperimetry,
which shows that essentially any regular (Lipschitz) function of a high-dimensional Gaussian
vector concentrates as tightly as a single Gaussian coordinate, regardless of dimension. This
mission formalizes one representative theorem from each line: the general martingale
Bernstein bound (Wainwright, High-Dimensional Statistics, 2019, Theorem 2.19) and the
Gaussian concentration of Lipschitz functions (Theorem 2.26), following Chapter 2 of the same
book.
Setting
A random variable X with mean μ=E[X] is sub-Gaussian with parameter σ
(Definition 2.2) if E[eλ(X−μ)]≤eσ2λ2/2 for all
λ∈R; it is sub-exponential with parameters (ν,α) (Definition 2.7,
a strictly milder condition) if the same bound holds only for ∣λ∣<1/α, with the
convention 1/0=+∞ so that α=0 recovers the sub-Gaussian case exactly.
A sequence {Dk}k≥1, adapted to a filtration {Fk}, is a martingale
difference sequence if each Dk is Fk-measurable and
E[Dk∣Fk−1]=0. Such sequences arise throughout statistics via the
Doob martingale construction: given a function f of independent variables
X1,…,Xn, setting Dk:=E[f(X)∣X1,…,Xk]−E[f(X)∣X1,…,Xk−1] telescopes to f(X)−E[f(X)]=∑kDk, converting a deviation
question about f(X) into a martingale concentration question.
A function f:Rn→R is L-Lipschitz with respect to the Euclidean norm
if ∣f(x)−f(y)∣≤L∥x−y∥2 for all x,y (Eq. (2.38)).
Formalization targets
Goal — Theorem 2.26 (Gaussian concentration of Lipschitz functions)
Let (X1,…,Xn) be i.i.d. standard Gaussian and f be L-Lipschitz with respect to the
Euclidean norm. Then f(X)−E[f(X)] is sub-Gaussian with parameter at most L, and
hence
P[∣f(X)−E[f(X)]∣≥t]≤2e−t2/2L2for all t≥0.
The bound is dimension-free: it depends on n only through f's Lipschitz constant, not the
ambient dimension itself.
For any differentiable f and convex φ,
E[φ(f(X)−E[f(X)])]≤E[φ(2π⟨∇f(X),Y⟩)] for X,Y∼N(0,In) independent — the interpolation identity Theorem 2.26's
proof is built on.
Given a martingale difference sequence with a per-index sub-exponential conditional
moment-generating-function bound E[eλDk∣Fk−1]≤eλ2νk2/2 for ∣λ∣<1/αk, the sum ∑kDk is itself sub-exponential
with parameters (∑kνk2,maxkαk), and satisfies the two-regime
concentration inequality of Eq. (2.28): sub-Gaussian for small deviations, sub-exponential for
large ones. This is the chapter's central general-purpose martingale concentration tool.
Significance
Theorem 2.19 is the source of two of the most-cited concentration inequalities in the field —
the Azuma–Hoeffding inequality (Corollary 2.20) and the bounded-differences/McDiarmid
inequality (Corollary 2.21), both already faithfully covered elsewhere on the platform
(azuma_hoeffding_two_sided, bounded_diff_martingale_two_sided) and included here as
kind: reference milestones rather than redrafted. Theorem 2.26's Gaussian Lipschitz
concentration is separately significant: it is the tool behind dimension-free operator-norm
bounds for random matrices, concentration of the empirical spectral distribution, and much of
the machinery of Chapters 5 and 6 of the same book.
Formalizing it. No faithful prior art exists on the platform for either the martingale
Bernstein bound or Lipschitz-Gaussian concentration itself (a fresh search for "martingale
Bernstein," "sub-exponential martingale," "Gaussian interpolation," and "Lipschitz
concentration" returned no hits; the existing Vershynin-book item
HighDimProb.Isoperimetry.lipschitz_concentration_sphere concentrates a Lipschitz function on
the sphere, a different underlying space and a different proof from Theorem 2.26's Gaussian
vector). Both goal-adjacent theorems and the Gaussian interpolation lemma are drafted here as
open goals (:= by sorry); the two Azuma–Hoeffding/bounded-differences corollaries are reused
from the platform's existing, already-proved formalizations.
Difficulty
The naive approach to Theorem 2.26 — try to bound f(X)−E[f(X)] directly via a
Lipschitz-type argument in Rn — has no obvious route to a dimension-free bound,
since a union bound over coordinates (or over an ε-net of the domain) picks up a
factor that grows with n. The resolution, Lemma 2.27's interpolation identity, instead
exploits a special structural fact about the Gaussian distribution — its rotation invariance —
to replace the nonlinear quantity f(X)−E[f(X)] with the linear, and hence exactly
computable, Gaussian quantity ⟨∇f(X),Y⟩, at the mild cost of a
non-optimal constant. Theorem 2.19's difficulty is bookkeeping rather than a conceptual
obstruction: the recursive conditioning step (Eq. (2.29)) must be iterated exactly n times
while keeping track of the interplay between the two parameters νk,αk per
difference, and Proposition 2.9's two-regime tail bound (small-deviation sub-Gaussian behavior,
large-deviation sub-exponential behavior) must be carried through unchanged into the final
statement — dropping either regime understates what the theorem proves.
Formalization scope
Expectations are Bochner integrals against an explicit probability measure, with integrability
required as an explicit hypothesis in IsSubGaussian and IsSubExponential (Mathlib's Bochner
integral silently returns 0 for a non-integrable function, which this mission's definitions
rule out as a trivializing formalization). The sub-exponential condition's domain restriction
|λ| < 1/α is realized as the disjunction α = 0 ∨ |λ| < 1/α, since Lean's real division
convention 1/0 = 0 is exactly backwards from the book's own stated 1/0 = +\infty convention
for the degenerate sub-Gaussian case.
"X,Y∼N(0,In) independent" (Lemma 2.27, Theorem 2.26) is formalized via Mathlib's
HasGaussianLaw predicate together with explicit coordinatewise mean-zero and
identity-covariance hypotheses, which together pin down the standard multivariate normal law,
plus IndepFun. The inner product ⟨∇f(X),Y⟩ is realized as
fderiv ℝ f (X ω) (Y ω), the Fréchet derivative applied to Y(ω) — equal to
⟨∇f(X(ω)),Y(ω)⟩ by the Riesz representation of the gradient on a
Hilbert space, avoiding the need to separately construct a gradient vector field.
Theorem 2.19's printed parameter pair for part (a), "(∑kνk2,α∗)," is formalized
as (∑kνk2,α∗): Definition 2.7 parametrizes the sub-exponential MGF bound
by ν (with ν2 appearing in the exponent), so a literal transcription of the printed
pair's first entry would silently square the effective parameter and make part (a), read
literally, inconsistent with part (b)'s own tail-bound formula (which the book derives from
part (a) via the general sub-exponential tail bound, Proposition 2.9). The corrected pairing is
the one the book's own proof actually establishes; see MODERATION_NOTES.md for the full
derivation.
Out of scope for this mission: Proposition 2.5 (plain Hoeffding for a sum of independent
sub-Gaussians), used in the book only as background for Theorem 2.26's proof and not redrafted,
since the goal theorem's own statement does not depend on it once Lemma 2.27 is in hand.
Selected references
M. J. Wainwright, High-Dimensional Statistics: A Non-Asymptotic Viewpoint, Cambridge
University Press, 2019. DOI: 10.1017/9781108627771.
Chapter 2.
K. Azuma, "Weighted sums of certain dependent random variables," Tôhoku Mathematical
Journal, 19:357–367, 1967.
W. Hoeffding, "Probability inequalities for sums of bounded random variables," Journal of the
American Statistical Association, 58:13–30, 1963.
Distributionally Robust Optimization: A Review: Variation²/4 ≤ Hellinger ≤ Kullback–Leibler ≤ J-Divergence, so the J, KL and Hellinger Balls of Radius ε Lie in the Variation Ball of Radius 2√εResearch Paper
Motivation
Distributionally robust optimization evaluates a decision against a set of plausible probability laws rather than against a single estimated law. A common way to specify that set is to choose a nominal law P0 and allow every law P whose discrepancy from P0 is below a radius ε. Different discrepancies produce different ambiguity sets, so comparing them tells a modeler what one constraint guarantees about another. Rahimian and Mehrotra collect such constructions in their survey and state a chain of comparisons among variation, Hellinger, Kullback–Leibler, and J-divergences in Lemma 5.4 (arXiv:1908.05659v1, pp. 31, 34–35). The chain connects four common ways of controlling model error without requiring a finite outcome space or a common density chosen in advance.
The source is the 2019 arXiv v1 preprint of a survey. Its proof of Lemma 5.4 cites earlier work rather than giving a full derivation. The preprint also prints an additional J-to-χ2 comparison that is false; this mission isolates the part that holds for every pair of probability measures. The distinction matters when an ambiguity set is used to certify a bound under a different divergence: an inclusion based on the false link can certify laws that are outside the intended set.
Setting
Let (Ξ,F) be a measurable space, and let M(Ξ,F) be its probability measures. Given P1,P2∈M(Ξ,F), a ϕ-divergenceDϕ(P1,P2) compares their densities using a function ϕ:[0,∞)→[0,∞] with ϕ(1)=0. The paper assumes ϕ is convex. To account for measures that are not mutually absolutely continuous, take the common dominating measure ν=P1+P2 and write p=dP1/dν and q=dP2/dν. The integrand is qϕ(p/q) when q>0 and pϕ′(∞) when q=0, where ϕ′(∞)=limt→∞ϕ(t)/t; a point with p=q=0 contributes zero (§5.1.2, p. 31).
The first two divergences are the full L1 variation discrepancy and the unhalved squared Hellinger discrepancy. In particular, Dϕv=2dTV, where dTV is the total variation distance defined later in the paper. The J generator has ϕj(0)=+∞, understood as its limit at zero; ϕkl(0)=1 under 0log0=0. The recession slopes of the four generators, in the displayed order, are 1,1,+∞,+∞ (Table 1, p. 31; §5.1.3, p. 35).
For a nominal probability measure P0 and a nonnegative radiusε, equation (5.9) defines the ambiguity ball
Pϕ(P0;ε)={P∈M(Ξ,F):Dϕ(P,P0)≤ε}.
Formalization targets
The three milestone comparisons are the valid initial part of (5.10), for every P,P0∈M(Ξ,F):
The middle comparison is also stated in footnote 18. The mission goal is the corrected Lemma 5.4: it joins these three comparisons to the resulting valid part of (5.11), for every nominal P0 and radius ε:
Each inclusion has the direction induced by the preceding divergence inequality: a stronger divergence constraint gives a smaller ball. The first comparison retains the paper's factor 1/4, and the final ball retains its radius 2ε (Lemma 5.4, p. 34).
Significance
The result allows a J-divergence or KL-divergence ambiguity model to carry a simultaneous bound in Hellinger and full variation divergence. A Hellinger radius ε yields the explicit variation radius 2ε; this makes the scale change visible when comparing two models built with different discrepancies. Without a general-measure statement, a finite-outcome approximation does not itself cover continuous laws or pairs with a singular component.
The paper presents the inequalities as known and cites sources for them. A finite-alphabet TV–Hellinger–KL chain and a general-measure KL–affinity bound already have machine-checked results in the platform catalog. The work here is to formalize the four generators with one shared general-measure divergence, close the remaining inequalities in that representation, and connect them to the ambiguity-ball inclusions. This also provides reusable definitions for other distributionally robust models that use the same divergence convention.
Difficulty
Writing the density ratio only with respect to P0 loses the part of P singular to P0. That would change both variation and Hellinger divergence and make the stated chain an unreliable comparison of the paper's objects. At the opposite boundary, P can vanish on a set that P0 charges. There the J generator must be infinite, although a direct use of a total real logarithm at zero can assign it an incorrect finite value. These two edge cases make an apparently routine pointwise comparison insufficient for the full measurable-space theorem.
Formalization scope
Lean represents P and P0 as ProbabilityMeasure Ξ on an arbitrary MeasurableSpace Ξ. It computes Radon–Nikodym densities relative to P+P0, evaluates the divergence with an extended nonnegative Lebesgue integral, and represents both divergence values and radii in ENNReal. The generic definition computes the recession slope as a limsup; for the four Table 1 generators this is the limit in the paper. The formal ambiguity ball contains probability measures only. A top radius is allowed by the type; the finite nonnegative radii are the paper's intended model parameters. The generic operation does not take a convexity certificate, but the four named generators are the only ones used in the theorem.
The formalization must not turn a nondominated pair into divergence zero or assign ϕj(0)=0: either choice changes the claimed chain. It must also retain the full variation divergence, without the half factor used for total variation distance. The definitions of the common-measure divergence, its four generators, and the ambiguity ball are intended for reuse. Contributions establishing properties of the recession slopes, comparison lemmas on arbitrary measurable spaces, and their ambiguity-set consequences are within scope.
The paper's final inequality in (5.10), Dϕj≤Dϕca2, and the associated first inclusion in (5.11) are removed. They are false even on a two-point space: with P0=(1/2,1/2) and P=(0,1), J-divergence is +∞ while the order-two χ-divergence is 1. Thus P lies in the latter ball of radius 1 but outside the J ball of that radius. The source's footnote 18 separately notes an error in a cited Hellinger–KL comparison; the corrected Hellinger–KL inequality is retained (pp. 34–35).
Selected references
H. Rahimian and S. Mehrotra, Distributionally Robust Optimization: A Review, arXiv preprint arXiv:1908.05659v1, 2019. Preprint.
Rademacher and Gaussian Complexities: Risk Bounds and Structural Results 3: Monotone, Absolutely Homogeneous, Convex-Hull Invariant and Subadditive R_n, and the 2L Bound for L-Lipschitz Maps Fixing 0Research Paper
Motivation
Generalization bounds in statistical learning theory control the gap between the empirical and the true performance of a predictor chosen from a class F. Bartlett and Mendelson (JMLR 3, 2002) showed that this gap is governed by the Rademacher complexity of a loss class built from F, and that, unlike the VC dimension, this complexity can be estimated from data. Their bounds are useful only if the Rademacher complexity of a large class can be bounded in terms of simpler classes: voting methods take convex combinations of base classifiers, neural networks compose fixed squashing functions with linear combinations, and loss classes compose a class with a Lipschitz loss. Section 3.1 of the paper collects the elementary rules for such constructions in one statement, Theorem 12. These rules are used throughout the later literature on margin bounds, boosting, and neural-network generalization (e.g. Koltchinskii and Panchenko, Ann. Statist. 2002).
This mission formalizes those rules, as stated in the published journal article (J. Mach. Learn. Res. 3 (2002), pp. 463–482), Theorem 12 on p. 469.
Setting
Let X be a measurable space, μ a probability measure on it, and n≥0 an integer. A class is a set F of functions f:X→R; no boundedness is assumed.
For a sample x=(x1,…,xn)∈Xn, the empirical Rademacher complexity of F (Definition 2, p. 464) is
the expectation over independent uniform random signs σ1,…,σn. The Rademacher complexity is its expectation over an i.i.d. sample from μ:
Rn(F)=∫XnR^n(F)(x)dμ⊗n(x).
In the Lean development these are empiricalRademacher n F x and rademacherComplexity μ n F, both valued in [0,∞].
The constructions on classes are those of §2, p. 467: convF is the class of convex combinations of functions from F; −F={−f:f∈F}; absconvF is the class of convex combinations of functions from F∪−F; cF={cf:f∈F}; for ϕ:R→R, ϕ∘F={ϕ∘f:f∈F}; and ∑i=1kFi={f1+⋯+fk:fi∈Fi}.
The goal is the conjunction, each part quantified over its own classes.
Milestones
Parts 1, 3, 2 and 4 are milestones, in the order of the paper's proof. Part 7 remains a theorem item in the mission and a conjunct of the goal.
Significance
The result. Theorem 12 reduces the complexity of a constructed class to the complexities of its building blocks. Part 2 says that convex combinations come for free, which is why margin bounds for boosting depend only on the base class. Part 4 converts a complexity bound for a class into one for a Lipschitz loss composed with it, which is how the risk bounds of the paper's §2 are applied to concrete losses. Parts 1, 3 and 7 are the bookkeeping rules that combine the others; the paper uses parts 1 and 3 to show part 7 is tight.
Formalizing it. The results are proved, and part 4 is due to Ledoux and Talagrand (Probability in Banach Spaces, Springer 1991, Corollary 3.17). The platform already has a one-sided contraction lemma in a different normalization (UnderstandingML.contraction_lemma, Shalev-Shwartz and Ben-David's Lemma 26.9: per-coordinate Lipschitz maps, 1/m normalization, no absolute value, bounded nonempty sets of vectors), referenced here as supporting material, and a convex-hull identity for Mohri et al.'s empirical complexity without absolute value. None of the five parts is formalized for Definition 2's complexity (factor 2/n, absolute value inside the supremum, expectation over the sample, arbitrary classes). The mission provides machine-checked versions in exactly that normalization, reusable by the other missions of this paper and by any later development of Rademacher-complexity bounds.
Difficulty
Parts 1, 2, 3 and 7 are pointwise statements about finite averages of suprema, but they have to be carried through the expectation over the sample and through suprema that may be infinite. Part 2 needs the supremum of the absolute value of a linear functional over a convex hull to equal its supremum over the set, including the symmetric hull conv(F∪−F).
Part 4 is the substantial one. The natural first idea, comparing ∣∑iσiϕ(f(xi))∣ with Lϕ∣∑iσif(xi)∣ term by term for each sign vector, fails: the inequality holds only after averaging over the signs, and only with the factor 2 caused by the absolute value. Without the hypothesis ϕ(0)=0 the statement fails (a constant ϕ≡1 has Lϕ=0 but Rn(ϕ∘F)>0 for nonempty F and n≥1), so any argument must use it.
Formalization scope
Representation. Classes are Set (X → ℝ). Signs are averaged over all 2n vectors Fin n → Bool (encoded ±1). Complexities take values in ℝ≥0∞: a class unbounded on the sample has complexity +∞, the empty class has complexity 0, and Rn is the lower Lebesgue integral against Measure.pi (fun _ : Fin n => μ) with μ a probability measure. This is the paper's meaning for arbitrary classes. A real-valued formalization would not be: a real supremum over an unbounded set and a Bochner integral of a non-integrable function both evaluate to 0. That would make the upper bounds false for unbounded classes and every comparison trivially satisfied for others. No boundedness hypothesis is added anywhere, since Theorem 12 is about arbitrary classes. convF is convexHull ℝ F (finite convex combinations, no closure); absconvF is convexHull ℝ (F ∪ -F); cF is c • F; ∣c∣ enters as ENNReal.ofReal |c|, and 0⋅∞=0 makes c=0 consistent. The Lipschitz map in part 4 is LipschitzWith Lφ φ on all of R, as printed. The classes of part 7 are indexed by Fin k and summed pointwise. At n=0 all complexities are 0 and every part holds trivially, matching the page.
Added hypothesis. Part 7 (and its conjunct in the goal) assumes that each sample function x↦R^n(Fi)(x) is almost-everywhere measurable for μ⊗n. The paper does not discuss measurability. The lower integral is monotone and positively homogeneous without it, so parts 1–4 need no such hypothesis, but it is not additive, and part 7 needs additivity. The hypothesis holds whenever each Fi is a countable class of measurable functions.
Omitted parts. Parts 5 and 6 of Theorem 12 are not posed. Part 5, Rn(F+h)≤Rn(F)+∥h∥∞/n, is false as printed: its proof (p. 470) bounds Esup∣∑σi(f+h)(xi)∣ correctly but drops the factor 2/n of Definition 2, and the correct conclusion is Rn(F)+2∥h∥∞/n. For F={0}, h≡1, n=1 the left side is 2 and the printed right side is 1. Part 6 is derived from part 5. A corrected part 5 would not be the paper's statement, so neither is included. The remark after the theorem that parts 1–3 hold for the Gaussian complexity, and the others with an extra lnn factor, is also not included.
Contributions welcome. Proofs of the milestones; a proof of part 4 from the platform's one-sided contraction lemma, converted to Definition 2's normalization; and general lemmas about empiricalRademacher (finiteness on finite classes, measurability for countable classes) that the other missions of this paper can reuse.
Selected references
P. L. Bartlett and S. Mendelson, Rademacher and Gaussian Complexities: Risk Bounds and Structural Results, Journal of Machine Learning Research 3 (2002), 463–482. https://www.jmlr.org/papers/v3/bartlett02a.html
V. Koltchinskii and D. Panchenko, Empirical margin distributions and bounding the generalization error of combined classifiers, Annals of Statistics 30 (2002), 1–50. https://doi.org/10.1214/aos/1015362183
S. Shalev-Shwartz and S. Ben-David, Understanding Machine Learning: From Theory to Algorithms, Cambridge University Press, 2014, Lemma 26.9. https://doi.org/10.1017/CBO9781107298019
Rademacher and Gaussian Complexities: Risk Bounds and Structural Results 2: With Probability 1 − δ, Every ±1 Classifier in F Has Error ≤ Training Error + R_n(F)/2 + √(ln(1/δ)/(2n))Research Paper
Motivation
A binary classifier is judged by its misclassification probability, the chance that it mislabels a fresh example. That probability is unknown; what a learner sees is the training error, the fraction of mistakes on the sample it was trained on. A generalization bound controls the gap between the two simultaneously for every classifier in a class, so that a classifier chosen by looking at the data still has a guaranteed error. The classical bounds of Vapnik and Chervonenkis measure the class by its VC dimension, a fixed combinatorial quantity that does not depend on the data distribution, and the paper recalls evidence that such fixed complexity penalties cannot be universally effective for model selection (p. 464).
Bartlett and Mendelson's paper in the Journal of Machine Learning Research (2002) studies two data-dependent alternatives, the Rademacher and Gaussian complexities, and proves risk bounds and structural rules for them. This mission formalizes the paper's classification bound, Theorem 5(b), which replaces the VC penalty by half the Rademacher complexity of the class. The source is the published JMLR article (jmlr.org/papers/v3/bartlett02a), pp. 463–482; all page numbers below are the journal's.
Timeline. Uniform convergence of empirical frequencies with a VC-dimension rate is due to Vapnik and Chervonenkis (1971). Rademacher penalties for model selection were introduced by Koltchinskii (2001) and by Bartlett, Boucheron and Lugosi (2002), who also proved Theorem 5(a) with the maximum discrepancy. The 2002 paper proves part (b) in Appendix B (p. 480) by adapting its proof of the general risk bound, Theorem 8 (p. 467).
Setting
Let X be a measurable space and P a probability distribution on X×{±1}; a pair (X,Y)∼P is an example X with label Y. Let F be a set of {±1}-valued functions on X (the classifiers), and let (Xi,Yi)i=1n be an i.i.d. sample drawn from Pn.
The misclassification probability of f∈F is P(Y=f(X)).
The training error of f is P^n(Y=f(X))=n1#{i:Yi=f(Xi)}, where P^n is the empirical measure of the sample (p. 463).
Let σ1,…,σn be independent uniform {±1}-valued random variables, independent of the sample. The empirical Rademacher complexity of a class G of real functions on X at the points x1,…,xn is
R^n(G)(x)=Eσg∈Gsupn2i=1∑nσig(xi),
and the Rademacher complexity is Rn(G)=ER^n(G)(X1,…,Xn) with X1,…,Xn i.i.d. (Definition 2, p. 464). Note the factor 2/n and the absolute value.
In Theorem 5, Rn(F) is the Rademacher complexity of F itself, viewed as a class of real functions with values ±1, under the marginal of P on X.
With the 0–1 lossL(Y,f(X))=1(Y=f(X)), the largest gap on a sample is Φ=suph∈L∘F(Eh−E^nh)=supf∈F(P(Y=f(X))−P^n(Y=f(X))).
Formalization targets
Goal: Theorem 5(b), p. 465
For every 0<δ<1, with probability at least 1−δ over the sample, every f∈F satisfies
P(Y=f(X))≤P^n(Y=f(X))+2Rn(F)+2nln(1/δ).
The bound is uniform: the probability that some f violates it is at most δ.
Milestones (Appendix B, p. 480)
Bounded differences. Replacing one example changes Φ by at most 1/n.
McDiarmid step. With probability at least 1−δ, every f∈F satisfies
P(Y=f(X))≤P^n(Y=f(X))+EΦ+2nln(1/δ).
Symmetrization.EΦ≤Rn(F)/2.
Supporting platform items, referenced and not restated: McDiarmid's inequality for i.i.d. samples (StabGen.Uniform.mcdiarmid_inequality, open) and the symmetrization lemma in the normalization of Shalev-Shwartz and Ben-David (UnderstandingML.representativeness_le_rademacher, proved).
Significance
The result. Theorem 5(b) is a distribution-dependent risk bound for classification whose complexity term can be estimated from a single sample. The paper shows (Theorem 6, p. 465) that it is never much worse than the VC bound, since the empirical Rademacher complexity of a {±1} class is O(d/n) in terms of its empirical VC dimension d, and it can be much better. It also serves as the template for margin bounds for large-margin classifiers, kernel machines and voting methods in Section 4 of the paper.
Formalizing it. The result is proved in the paper; no machine-checked proof is known to exist. A formal proof needs McDiarmid's inequality, a symmetrization argument with a ghost sample, and the reduction of the 0–1 loss class to the classifier class through the identity 1(Y=f(X))=(1−Yf(X))/2. The milestones split these, so they can be proved independently. The symmetrization milestone also corrects a printed slip (see Formalization scope).
Difficulty
The bounded-difference step and the final union of the two halves are short. The difficulty is in the symmetrization. The supremum over an uncountable class is not automatically measurable, so the expectations in the paper's chain need not exist as written; a proof must work with exactly the random variables it integrates and use only the measurability it is given. The exchange of a sample point with its ghost copy, the conditioning on the sample, and the replacement of σiYi by σi must each be justified on finite sign averages and product measures. The obvious shortcut, bounding the gap by the Rademacher complexity of the loss class L∘F, does not give the stated term: with the absolute value of Definition 2, the loss class's complexity is not Rn(F)/2, because (1−Yif(Xi))/2 contributes a sign sum that does not depend on f.
Formalization scope
Lean conventions:
Labels {±1} are the units Z×={1,−1}, coerced to R; the real class of F is {x↦(f(x):R)}. Sample indices are 0,…,n−1; the sample law is the product measure Pn.
The Rademacher complexities take values in [0,∞]: the sign expectation is the exact average over the 2n sign vectors, and the sample expectation is a lower Lebesgue integral. An unbounded class therefore has complexity +∞, not a junk 0. The goal compares values in [0,∞] with ENNReal.ofReal on the real terms.
"With probability at least 1−δ, every f in F" is encoded as: the outer Pn-measure of {S:∃f∈F,the bound fails} is at most δ.
Hypotheses added relative to the page, each necessary or a reading of the page:
n≥1: at n=0 Lean's 2/0=0 makes R0(F)=0 and the bound false.
0<δ<1, as in Theorem 8 (p. 467).
Every f∈F is measurable, and three random variables are measurable: the gap supremum Φ, the double-sample supremum (S,S′)↦supf(P^n′−P^n)(Y=f(X)), and x↦R^n(F)(x). The paper does not discuss measurability; these are exactly the variables the proof integrates, as in the proved platform item UnderstandingML.representativeness_le_rademacher. They hold, for instance, for countable classes.
The two intermediate milestones assume F nonempty, so that the real suprema in them are genuine.
Corrected slip: the chain on p. 480 ends "=Esupfn1∑iσif(Xi)=Rn(F)/2". The last equality is only "≤": Rn carries an absolute value, and for F={f} the left side of that step is 0 while Rn(F)/2>0. The symmetrization milestone states the chain's conclusion with ≤, which is all Theorem 5(b) needs.
Not a valid formalization: a version with a real-valued supremum or Bochner integral for Rn (which would read 0 on an unbounded or non-integrable class and make the bound false or free), one that drops the absolute value or uses the 1/n normalization, or one that measures Rn of the loss class instead of F. Theorem 5(a) (maximum discrepancy, due to Bartlett, Boucheron and Lugosi) is not part of this mission.
Contributions welcome: proofs of the three milestones and the goal; the general McDiarmid inequality (the referenced open item); and reusable lemmas on measurable suprema of classifier families.
Selected references
P. L. Bartlett, S. Mendelson, Rademacher and Gaussian Complexities: Risk Bounds and Structural Results, Journal of Machine Learning Research 3 (2002) 463–482. https://www.jmlr.org/papers/v3/bartlett02a.html
V. Koltchinskii, Rademacher penalties and structural risk minimization, IEEE Transactions on Information Theory 47(5) (2001) 1902–1914. https://doi.org/10.1109/18.930926
V. N. Vapnik, A. Ya. Chervonenkis, On the uniform convergence of relative frequencies of events to their probabilities, Theory of Probability and its Applications 16 (1971) 264–280. https://doi.org/10.1137/1116025
Rademacher and Gaussian Complexities: Risk Bounds and Structural Results 1: With Probability 1 − δ, Expected Loss ≤ Empirical Dominating Cost + R_n(φ̃∘F) + √(8 ln(2/δ)/n) for Every f in FResearch Paper
Motivation
A learning algorithm picks a predictor f from a class F after looking at n training examples, and the quantity of interest is its expected loss on a fresh example. Since f depends on the data, its training error is a biased estimate of that loss, and a risk bound quantifies the bias uniformly over the class: with high probability, every f∈F has expected loss at most an observable sample average plus a complexity penalty. Classical penalties (VC dimension, covering numbers, fat-shattering dimension) are fixed in advance; data-dependent penalties such as the Rademacher complexity can be estimated from the sample itself and adapt to the distribution, which matters for model selection by complexity regularization.
Bartlett and Mendelson, Rademacher and Gaussian Complexities: Risk Bounds and Structural Results (JMLR 3, 2002, jmlr.org), state such a bound in a general decision-theoretic setting (Theorem 8, p. 467): the loss is any [0,1]-valued function of an outcome and an action, and the sample average is taken of a dominating costϕ≥L, which may be Lipschitz and hence amenable to the structural results of the paper's §3 even when L is a discontinuous 0–1 loss. Multiclass classification with error-correcting output codes is the paper's example. The ingredients — McDiarmid's inequality (McDiarmid, 1989) and symmetrization — are standard; the paper combines them for this setting with a centred cost class. The source is the published JMLR article (pp. 463–482); all page numbers below are its printed pages.
Setting
Let X be an input space, Y an output space and A an action space with a distinguished action 0∈A, each a measurable space. A probability measure P on X×Y generates independent examples (X1,Y1),…,(Xn,Yn), and (X,Y) is a fresh draw from P.
A loss is L:Y×A→[0,1]; a costϕ:Y×A→[0,1]dominates it if ϕ(y,a)≥L(y,a) for all y,a.
F is a class of maps X→A; the expected loss of f is EL(Y,f(X))=∫L(y,f(x))dP(x,y).
The empirical mean of h:X×Y→R is E^nh=n1∑i=1nh(Xi,Yi).
The centred cost class is ϕ~∘F={(x,y)↦ϕ(y,f(x))−ϕ(y,0):f∈F}.
For a class G of real functions on a space Z and a sample z1,…,zn, the empirical Rademacher complexity is
R^n(G)=Eσg∈Gsupn2i=1∑nσig(zi),
with σ1,…,σn independent uniform signs, and the Rademacher complexity is Rn(G)=ER^n(G), the expectation over an i.i.d. sample (Definition 2, p. 464). The factor is 2/n and the absolute value is inside the supremum.
In Lean these are RadGauss.RiskBound.empiricalRademacher, rademacherComplexity, empMean, supDev (the uniform deviation suph∈G(Eh−E^nh)), doubleSupDev and phiTildeComp.
Formalization targets
Goal: Theorem 8 (p. 467)
For every integer n≥1 and every 0<δ<1, with probability at least 1−δ over the sample, every f∈F satisfies
EL(Y,f(X))≤E^nϕ(Y,f(X))+Rn(ϕ~∘F)+n8ln(2/δ).
The event is uniform over F. The constant 8 is the printed one.
Milestones (the steps of the paper's proof)
Theorem 9 (McDiarmid's inequality), p. 467: for independent, not necessarily identically distributed Xi and f with bounded differences ci,
P{f(X1,…,Xn)−Ef(X1,…,Xn)≥t}≤e−2t2/∑ici2.
Bounded differences, p. 467: replacing one example changes suph∈ϕ~∘F(Eh−E^nh) by at most 2/n.
Concentration, p. 467: with probability at least 1−δ/2,
hsup(Eh−E^nh)≤Ehsup(Eh−E^nh)+2ln(2/δ)/n.
Combined bound, p. 468: with probability at least 1−δ, for all f∈F,
The platform's Proved UnderstandingML.representativeness_le_rademacher (Shalev-Shwartz and Ben-David, Lemma 26.2) is included as a supporting reference: it is the middle inequality of milestone 5 in the 1/n, absolute-value-free normalization.
Significance
Theorem 8 bounds the expected loss of any predictor in the class, including one selected by the data, by quantities the learner can compute or estimate: the empirical cost and the Rademacher complexity of the centred cost class, which concentrates around its empirical version. Combined with the paper's structural results (§3: contraction by Lipschitz maps, convex hulls, sums), it yields margin bounds for voting methods, neural networks and kernel machines (§4) from complexities of simple base classes. Centring by ϕ(y,0) matters: with the absolute value inside the supremum, Rn(ϕ∘F) can exceed Rn(ϕ~∘F) by order 1/n even for a single function.
The result is proved in the paper. As far as the platform's catalog shows, it has no machine-checked proof in this normalization; McDiarmid's inequality in the non-identically distributed form, the 2/n bounded-difference step and the absolute-value Rademacher symmetrization with factor 2/n are not on the platform. A Lean proof would give a reusable risk-bound template for any loss dominated by a bounded cost.
Difficulty
The obvious argument — bound Eϕ(Y,f(X))−E^nϕ(Y,f(X)) for a fixed f by Hoeffding's inequality — does not survive the choice of f after seeing the data: the deviation must be controlled uniformly over F, and F is typically infinite. The supremum over F is a single random variable, but its expectation is not obviously small, and relating it to the Rademacher complexity requires a ghost sample and a sign-swap symmetry of the product measure. In a formal development, the supremum of an uncountable family is not automatically measurable; the expectations the argument manipulates must be genuine, not lower integrals, which is why the statements carry explicit measurability hypotheses. McDiarmid's inequality itself, for independent but not identically distributed coordinates, is a martingale-difference concentration argument that is not in Mathlib in this form.
Formalization scope
Sample and law. A sample is S : Fin n → X × Y, its law the product Measure.pi (fun _ => P). "With probability at least 1−δ, every f∈F satisfies …" is encoded by bounding the (outer) measure of {S∣∃f∈F,¬bound} by δ, with 0<δ<1.
Complexities in [0,∞].R^n is an average over all 2n sign vectors (Fin n → Bool, true=+1) of [0,∞]-valued suprema; Rn is its Lebesgue integral. The goal is stated in [0,∞], with the real terms embedded by ENNReal.ofReal (all are nonnegative). A real supremum or a Bochner integral would silently return 0 on an unbounded class or a non-integrable integrand, making the bound trivially false or vacuous; this is ruled out by the choice of codomain.
Added hypotheses, all implicit in the paper.n≥1 (at n=0 Lean's 1/0=0 makes the bound read EL≤0, which is false); measurability of L, ϕ and every f∈F; a distinguished action 0 ([Zero A]).
Measurability guard. The goal and milestones 3–5 assume measurability of exactly the random variables the proof integrates: the uniform deviation S↦suph∈ϕ~∘F(Eh−E^nh), the empirical Rademacher complexity S↦R^n(ϕ~∘F), and the double-sample deviation (S,S′)↦suph(n1∑ih(Si′)−E^nh). These hold, for example, for countable F; the same guard is used by UnderstandingML.representativeness_le_rademacher.
No printed slip was found in the statements formalized here. In Theorem 9, if every ci=0 the printed exponent has a zero denominator; Lean reads it as 0 and the bound as 1, which is true.
Not formalized: the paper's Theorem 10 and the applications; this mission covers Definition 2 and §2 up to the end of the proof of Theorem 8.
Contributions welcome: a proof of McDiarmid's inequality for Measure.pi (reusable well beyond this mission), the ghost-sample symmetrization with the sign-swap invariance of Pn⊗Pn, and the final assembly.
Selected references
P. L. Bartlett and S. Mendelson, Rademacher and Gaussian Complexities: Risk Bounds and Structural Results, Journal of Machine Learning Research 3 (2002), 463–482. https://www.jmlr.org/papers/v3/bartlett02a.html
C. McDiarmid, On the method of bounded differences, Surveys in Combinatorics 1989, London Math. Soc. Lecture Note Series 141, Cambridge University Press, 148–188. https://doi.org/10.1017/CBO9781107359949.008
S. Shalev-Shwartz and S. Ben-David, Understanding Machine Learning: From Theory to Algorithms, Cambridge University Press, 2014, Chapter 26. https://doi.org/10.1017/CBO9781107298019
V. Koltchinskii and D. Panchenko, Empirical margin distributions and bounding the generalization error of combined classifiers, Annals of Statistics 30 (2002), 1–50. https://doi.org/10.1214/aos/1015362183
Optimal Best Arm Identification with Fixed Confidence IV: Asymptotic Optimality of the Track-and-Stop StrategyResearch Paper
Motivation
In best arm identification with fixed confidence, a learner samples K unknown distributions (arms) sequentially and must, as early as possible, name the arm with the largest mean, while being wrong with probability at most a prescribed risk δ. The problem models adaptive A/B/n testing, clinical and simulation-based selection among alternatives, and the "ranking and selection" problem of operations research and simulation optimization. The quantity of interest is the sample complexityEμ[τδ], the expected number of samples a strategy takes before stopping.
Timeline of the question this mission formalizes:
Chernoff (1959) introduced sequential tests based on generalized likelihood ratios for adaptive design of experiments, with a finite set of hypotheses (doi:10.1214/aoms/1177706205).
Kaufmann, Cappé and Garivier (2016, JMLR) proved a change-of-measure lower bound on the sample complexity of every δ-PAC strategy (arXiv:1407.4443).
Garivier and Kaufmann (COLT 2016) identified the exact constant T∗(μ) in that lower bound and gave the first strategy, Track-and-Stop, whose sample complexity matches it asymptotically as δ→0 (arXiv:1602.04589). This mission covers the upper-bound half of that paper.
Setting
A canonical one-parameter exponential family is a family of laws νθ, θ∈Θ, on R with density exp(θx−b(θ)) with respect to a reference measure ξ; b is twice differentiable and strictly convex, and νθ has mean b˙(θ). Bernoulli, Poisson and Gaussian laws with known variance are examples. The divergence d(μ,μ′) is the Kullback–Leibler divergence between the members with means μ and μ′.
A bandit model μ=(μ1,…,μK) assigns a member of the family to each arm. The class S consists of models with a unique optimal arm a∗(μ). At each round t=1,2,… the learner picks an arm At as a function of past observations, observes a reward drawn from that arm's law, and at a stopping time τδ recommends an arm. Na(t) is the number of draws of arm a in the first t rounds and μ^a(t) its empirical mean.
With Alt(μ)={λ∈S:a∗(λ)=a∗(μ)} and ΣK the probability simplex, the characteristic time is
T∗(μ)−1=w∈ΣKsupλ∈Alt(μ)infa=1∑Kwad(μa,λa),
and the maximizer w∗(μ) are the optimal proportions of arm draws.
Track-and-Stop combines two ingredients:
a sampling rule that tracks the plug-in proportions w∗(μ^(t)) while forcing each arm to be drawn about t times: C-Tracking tracks the cumulated sum of projections of w∗(μ^(s)) onto ΣKϵs={w∈ΣK:wa≥ϵs}, ϵs=(K2+s)−1/2/2; D-Tracking draws an under-sampled arm when some Na(t)<t−K/2, and otherwise the arm maximizing twa∗(μ^(t))−Na(t);
Chernoff's stopping rule, which stops at the first t at which some arm a beats every other arm b in a generalized likelihood ratio test, Za,b(t)>β(t,δ), here with β(t,δ)=log(r(t)/δ).
Formalization targets
Goal: Theorem 14 (p. 13)
For α∈[1,e/2] and r(t)=O(tα), Chernoff's stopping rule with β(t,δ)=log(r(t)/δ) combined with C-Tracking or D-Tracking satisfies
Lemma 7 (p. 7): C-Tracking ensures Na(t)≥t+K2−2K and maxa∣Na(t)−∑s<twa∗(μ^(s))∣≤K(1+t).
Lemma 8 (p. 7): D-Tracking ensures Na(t)≥(t−K/2)+−1, and proportions within 3(K−1)ϵ of w∗(μ) after a time tϵ that does not depend on the trajectory, once the plug-in targets are within ϵ.
Proposition 9 (p. 8): under either rule, Na(t)/t→wa∗(μ) almost surely.
Lemma 18 (p. 27): an explicit x with c1x≥log(c2xα) for α∈[1,e/2].
Proposition 13 (p. 11): with any sampling rule whose proportions converge almost surely to w∗, τδ<∞ almost surely and limsupδ→0τδ/log(1/δ)≤αT∗(μ) almost surely.
Significance
Theorem 1 of the same paper shows Eμ[τδ]≥T∗(μ)kl(δ,1−δ) for every δ-PAC strategy, and kl(δ,1−δ)∼log(1/δ). Theorem 14 with α=1 therefore shows that the lower bound is attained: T∗(μ) is the exact asymptotic sample complexity of best arm identification in exponential family models, and Track-and-Stop is asymptotically optimal.
The result is proved in the paper. What is not available is a machine-checked proof for exponential families. The platform already holds a Lean development of the Gaussian case following Lattimore and Szepesvári, Bandit Algorithms, Ch. 33, stated for one existentially chosen policy with a different threshold. This mission asks for the universal statement: every run of either tracking rule, for every exponential family, with the paper's thresholds. The tracking lemmas (Lemmas 15, 7, 8) are deterministic combinatorics and reusable by any tracking-based algorithm.
Difficulty
The obvious argument plugs the almost-sure behaviour of Proposition 13 into an expectation. That step fails: almost-sure convergence of τδ/log(1/δ) does not control E[τδ], because on the rare events where the empirical means are far from μ the stopping time may be very large. Theorem 14 needs a quantitative concentration of μ^(t) on events whose complements have summable probability, which in turn relies on the forced exploration guaranteed by the t lower bounds on Na(t) (the concentration step of App. D, Lemmas 19–20).
A second obstacle is the regularity of w∗: the tracking lemmas only transfer convergence of μ^(t) to convergence of Na(t)/t through the continuity of μ↦w∗(μ) on S, proved from the characterization of w∗ in §2.2 (Proposition 6). The GLR statistic also needs its closed form (7) near μ, which requires the empirical means to lie in the interior of the mean space.
Formalization scope
Model. The exponential family is a structure (ξ,Θ,b) with Θ a nonempty open interval, each νθ normalized, b twice continuously differentiable and b¨>0 on Θ. Openness and b¨>0 are added to the paper's "convex, twice differentiable"; strict convexity is what makes νμ unique. Bandit models are parameter vectors θ∈ΘK with K≥2; arms are indexed 0,…,K−1. S is the set of parameter vectors with a unique arm of largest mean b˙(θa).
Protocol. Policies, the trajectory law Pμ, pull counts, empirical means and T∗(μ) are the platform's published definitions (BanditPolicy, BanditTrajectory, TrackAndStop). T∗ uses Kullback–Leibler divergences of the arm laws over the class S and takes values in [0,∞]. Trajectory coordinate t is round t+1. An arm never drawn has empirical mean 0.
Target map.w∗(μ^(t)) is undefined in the paper when μ^(t)∈/S (an unsampled arm, ties, a mean outside b˙(Θ)). Every tracking statement quantifies over every target map with values in ΣK that returns optimal proportions on S, over every choice of L∞ projections, and over every tie-breaking, including randomized ones.
Stopping rule. The two maxima in Za,b(t) are suprema over Θ in the extended reals. Za,b(t)>β is written without subtracting infinities. The stopping time is the first t≥1 at which the test succeeds, +∞ if none. "r(t)=O(tα)" is r(t)≤Dtα for t≥1; r>0 is added so that log(r(t)/δ) is defined.
Values in [0,∞]. Expectations of τδ, the ratios and T∗ live in [0,∞]. No statement converts them to reals, so an infinite expected stopping time is never read as 0.
Corrections, disclosed. Proposition 9's printed Pw is Pμ. Lemma 18 adds c2/c1α>1 and x>0, without which its expressions are undefined.
Ruled out. Specializing to Gaussian arms, or asserting that some sampling policy achieves the bound, would restate existing platform results and is not this theorem: the goal is about every C-Tracking or D-Tracking run in every exponential family.
Welcome contributions. Exponential-family facts (b˙ is the mean, the KL formula, concentration of empirical means); the continuity of w∗ (Proposition 6, App. A.3); Lemma 17 (App. B.2), from which Lemma 8 follows; the closed form (7) of the GLR statistic.
Selected references
A. Garivier, E. Kaufmann, Optimal Best Arm Identification with Fixed Confidence, COLT 2016, JMLR W&CP 49. arXiv:1602.04589v2
E. Kaufmann, O. Cappé, A. Garivier, On the Complexity of Best-Arm Identification in Multi-Armed Bandit Models, JMLR 17, 2016. arXiv:1407.4443
Optimal Best Arm Identification with Fixed Confidence I: Non-Asymptotic Lower Bound on the Sample ComplexityResearch Paper
Motivation
Best arm identification with fixed confidence is the pure-exploration counterpart of the multi-armed bandit problem. A learner faces K unknown reward distributions ("arms"), samples them sequentially, and must stop and name the arm with the largest mean, being wrong with probability at most a prescribed δ. The question is how many samples this requires. It arises in adaptive A/B testing, in the selection of the best of several simulated systems (ranking and selection in simulation optimization), and in clinical trials that must declare the best treatment with a guaranteed error rate.
Lower bounds for this problem were first stated in terms of the gaps between means (Mannor and Tsitsiklis, 2004). Kaufmann, Cappé and Garivier (2016) replaced ad hoc changes of measure by a single "transportation" lemma relating expected sample counts, Kullback–Leibler divergences and the error probability. Garivier and Kaufmann (COLT 2016, arXiv:1602.04589v2) combine this lemma over all alternative models at once, in the spirit of Graves and Lai (1997), and obtain a lower bound whose constant T∗(μ) is exactly matched, as δ→0, by their Track-and-Stop strategy. This mission formalizes that lower bound (Theorem 1 of the paper, p. 3).
Setting
A canonical one-parameter exponential family is given by a reference measure ξ on R, an open interval Θ⊂R and a function b, twice continuously differentiable on Θ with b¨>0, such that the laws νθ with density exp(θx−b(θ)) with respect to ξ are probability measures for θ∈Θ. The mean of νθ is b˙(θ). Bernoulli laws and Gaussian laws of known variance are examples.
A bandit model is a vector θ=(θ1,…,θK)∈ΘK; arm a returns i.i.d. rewards with law νθa and mean μa=b˙(θa). Arm a∗(μ) is the unique optimal arm if μa∗>μa for every a=a∗. Let S be any set of bandit models of the family each having a unique optimal arm, and put Alt(μ)={λ∈S:a∗(λ)=a∗(μ)}.
A strategy consists of a sampling ruleπ (the arm At drawn at round t depends, possibly with extra randomization, on the first t−1 observations), a stopping timeτ of the natural filtration Ft=σ(A1,X1,…,At,Xt), and an Fτ-measurable decisiona^τ. It is δ-PAC on S if for every μ∈S, Pμ(τ<∞)=1 and Pμ(a^τ=a∗(μ))≤δ. Na(t) is the number of draws of arm a among the first t rounds.
Write d(μa,λa)=KL(νθa,νλa) for the divergence between two arm laws, kl(x,y)=xlogyx+(1−x)log1−y1−x, and ΣK for the probability simplex on the K arms. The characteristic time is defined by eq. (1):
T∗(μ)−1=w∈ΣKsupλ∈Alt(μ)infa=1∑Kwad(μa,λa).
Formalization targets
Goal: Theorem 1 (p. 3)
For δ∈(0,1/2], every δ-PAC strategy on S and every μ∈S,
Eμ[τ]≥T∗(μ)kl(δ,1−δ).
The statement fixes no constant beyond those of the paper, and it holds for every δ, not only in the limit.
Milestone: eq. (2) (p. 4)
For every λ∈S with a∗(λ)=a∗(μ),
a=1∑Kd(μa,λa)Eμ[Na(τ)]≥kl(δ,1−δ).
This is Lemma 1 of Kaufmann et al. (2016), which the paper quotes without proof; Theorem 1 follows from it for every alternative simultaneously.
Significance
Theorem 1 identifies T∗(μ) as the exact problem-dependent complexity of fixed-confidence best arm identification: since kl(δ,1−δ)∼log(1/δ), it gives liminfδ→0Eμ[τδ]/log(1/δ)≥T∗(μ), and the paper's Track-and-Stop strategy attains this rate (the subject of mission IV of this series). The bound also explains which proportions of draws an optimal strategy must use: the maximizer w∗(μ) of eq. (1) (mission II).
Both results are proved in the literature. Neither is formalized in the paper's generality. The platform holds the textbook form of Lattimore and Szepesvári (Theorem 33.5), which is stated for an arbitrary class with the weaker constant log(1/(4δ)); for δ≤1/2, kl(δ,1−δ)≥log(1/(2.4δ))>log(1/(4δ)), so Theorem 1 is strictly stronger. A formal proof here yields the transportation lemma for exponential families on the platform's infinite-horizon bandit model, which later missions (II–IV, and any lower bound by change of measure) can reuse.
Difficulty
The obvious proof applies the finite-horizon divergence decomposition KL(Pμn,Pλn)=∑aEμ[Na(n)]d(μa,λa) at a deterministic horizon n. That fails here: τ is random and unbounded, the decision is Fτ-measurable, and the relevant divergence is between the laws of the stopped observations. The step from a fixed horizon to a stopping time, together with the data-processing inequality that turns the error guarantees under two models into kl(δ,1−δ), is the central difficulty. A second, smaller difficulty is to identify the paper's divergence d and its means b˙(θ) with the measure-theoretic KL divergence and mean of the arm laws of the exponential family.
Formalization scope
Lean namespace OptimalBAI.LowerBound. The bandit protocol is the platform's (BanditAlgorithm.BanditPolicy, banditTrajMeasure, IsBanditStoppingTime, IsSoundBAI, baiComplexity); kl is the platform's bernoulliRelativeEntropy and Na(t) is trajPullCount. Conventions:
arms are Fin K, 0-based (the paper's arm a is index a−1); trajectory coordinate t is round t+1;
Θ is a nonempty open interval and b¨>0 on Θ (added: the paper says b is convex and twice differentiable; strict convexity is what makes "the unique distribution with mean μ" meaningful); the paper's d is written as the KL divergence of the arm laws (its first equality on p. 3), and the unique optimal arm is defined through the parameter means b˙(θa);
S is an arbitrary set of models with a unique optimal arm, not the specific set the paper fixes from p. 4 on;
δ-PAC keeps both halves of the paper's definition (almost-sure stopping and error at most δ);
T∗(μ), divergences and expectations of τ take values in [0,∞], never truncated to reals; T∗=0 when Alt(μ)=∅ and T∗=∞ when the supremum in eq. (1) is 0;
δ≤1/2 is added. The paper states δ∈(0,1), but the theorem and eq. (2) are false for δ∈(1/2,1): with two unit-variance Gaussian arms, drawing arm 1 once and naming arm 1 exactly when the fractional part of the reward is below 1/2 is 0.9-PAC, while T∗(μ)→∞ as the two means merge. At δ=1/2 the bound is 0.
A statement with log(1/(4δ)) in place of kl(δ,1−δ), or restricted to Gaussian arms, is the platform's existing textbook theorem and does not count as this mission's goal; nor does any version that drops the almost-sure stopping clause or truncates E[τ] or T∗ to real numbers.
Needed infrastructure: the transportation lemma at a stopping time (data processing for KL through an Fτ-measurable event, Wald-type identity for the stopped log-likelihood ratio), the identities "mean of νθ=b˙(θ)" and "KL of two family members =b(θ′)−b(θ)−b˙(θ)(θ′−θ)", and E[τ]=∑aE[Na(τ)]. All are reusable beyond this mission. Contributions of any of these lemmas, of eq. (2) alone, or of the Gaussian and Bernoulli special cases as stepping stones are welcome.
Selected references
A. Garivier, E. Kaufmann, Optimal Best Arm Identification with Fixed Confidence, COLT 2016 (JMLR W&CP 49), arXiv:1602.04589v2. https://arxiv.org/abs/1602.04589
E. Kaufmann, O. Cappé, A. Garivier, On the Complexity of Best-Arm Identification in Multi-Armed Bandit Models, Journal of Machine Learning Research 17(1), 2016. https://arxiv.org/abs/1407.4443
T. L. Graves, T. L. Lai, Asymptotically Efficient Adaptive Choice of Control Laws in Controlled Markov Chains, SIAM Journal on Control and Optimization 35(3), 1997. https://doi.org/10.1137/S0363012994275440
S. Mannor, J. N. Tsitsiklis, The Sample Complexity of Exploration in the Multi-Armed Bandit Problem, Journal of Machine Learning Research 5, 2004. https://www.jmlr.org/papers/v5/mannor04b.html
Generalization Bounds in the Predict-then-Optimize Framework I: Natarajan-Dimension Generalization Bound for Polyhedral Feasible RegionsResearch Paper
Motivation
In many operational problems (shortest paths, assignment, planning) the decision solves a linear program whose cost vector is unknown at decision time and is predicted from contextual features. The predict-then-optimize pipeline fits a model f that maps a feature vector x to a predicted cost vector c^=f(x), and then acts on the decision that is optimal for c^. Elmachtoub and Grigas (Smart "Predict, then Optimize", Management Science 2022) proposed to measure the quality of such a model not by the prediction error but by the SPO loss (Smart Predict-then-Optimize loss): the excess true cost of the decision induced by the prediction over the best decision in hindsight.
The question is whether a small SPO loss on the training sample implies a small SPO loss on new data, uniformly over the models a training procedure may return. The SPO loss is neither convex nor continuous in the prediction, so the standard Lipschitz-based bounds for regression do not apply. El Balghiti, Elmachtoub, Grigas and Tewari (arXiv:1905.11488v3, Mathematics of Operations Research 2023; a preliminary version appeared at NeurIPS 2019) give the first such generalization bounds. This mission formalizes their first one, for polyhedral feasible regions, which treats every vertex of the feasible region as a class label of a multiclass classification problem. The bound has since been used by later work, e.g. Hu, Kallus and Mao (Fast rates for contextual linear optimization, Management Science 2022), who sharpen it by a logn factor (as noted on p. 4 of the paper).
Setting
A feasible regionS⊆Rd is nonempty, compact and convex. For a cost vector c∈Rd the nominal problem is minw∈Sc⊤w. An optimization oracle is a fixed map w∗:Rd→S with w∗(c)∈argminw∈Sc⊤w for every c; nothing is assumed about how it breaks ties. The SPO loss of a prediction c^ when the realized cost is c is
ℓSPO(c^,c)=c⊤w∗(c^)−c⊤w∗(c)≥0.
The linear optimization gap is ωS(c)=maxw∈Sc⊤w−minw∈Sc⊤w, and for a set C of cost vectors ωS(C)=supc∈CωS(c); the SPO loss of a cost in C lies in [0,ωS(C)].
Data are pairs (x,c) drawn from a distribution D on X×C. A hypothesis classH is a family of predictors f:X→Rd. The SPO risk is RSPO(f)=ED[ℓSPO(f(x),c)], and on an i.i.d. sample (x1,c1),…,(xn,cn) the empirical SPO risk is R^SPO(f)=n1∑iℓSPO(f(xi),ci). The empirical Rademacher complexity with respect to the SPO loss is
with independent uniform signs σi∈{±1}, and RSPOn(H) is its expectation over the sample.
The decisions induced by H form the class w∗(H)={x↦w∗(f(x)):f∈H}. A class FN-shatters a finite set X⊆X if there are two labelings g1,g2 that differ at every point of X such that every mixture of them (follow g1 on a subset T, g2 on the rest) is realized by some member of F. The Natarajan dimensiondN(F) is the largest size of an N-shattered set. When S is a polyhedron, S denotes its finite set of extreme points.
Formalization targets
Goal: Theorem 2, second display (p. 11)
For a polyhedral S and every δ>0, with probability at least 1−δ over an i.i.d. sample of size n, every f∈H satisfies
Theorem 1 (p. 9): with probability 1−δ, RSPO(f)≤R^SPO(f)+2RSPOn(H)+ωS(C)log(1/δ)/(2n) for all f∈H.
Massart step (Appendix B.1, p. 31): for a fixed sample with costs in C, R^SPOn(H)≤ωS(C)2log∣F∣X∣/n, where F∣X is the set of decision vectors (w∗(f(x1)),…,w∗(f(xn))).
Natarajan lemma (cited on p. 31; proved on the platform as UnderstandingML.natarajan_lemma): a class from an m-point set to k labels with Natarajan dimension d has at most mdk2d members.
Empirical bound (Appendix B.1, p. 31): for a fixed sample, R^SPOn(H)≤ωS(C)2dN(w∗(H))log(n∣S∣2)/n.
Theorem 2, first display (p. 11): the same bound for the expected complexity RSPOn(H).
Significance
The bound controls the out-of-sample decision cost of every predictor in the class, not only of an empirical risk minimizer, so it applies to any training procedure (SPO+ surrogate minimization, decision trees, heuristics) that returns a member of H. Its dependence on the feasible region is only through ωS(C) and log∣S∣: the number of vertices of a combinatorial polytope is typically exponential in d, and enters only logarithmically. For linear predictors x↦Bx the paper's Corollary 2 bounds dN(w∗(Hlin)) by dp, giving a rate of order dplog(n∣S∣)/n.
The results are proved in the paper; this mission formalizes them. No statement about predict-then-optimize or the SPO loss is known to have a machine-checked proof. The platform already has the Natarajan lemma (proved) and several Massart-type lemmas for generic classes; this mission connects that multiclass machinery to decision losses, and its Theorem 1 is a reusable Rademacher generalization bound for a loss with range [0,ω].
Difficulty
The obvious route through Lipschitz contraction fails: the SPO loss jumps when the prediction crosses a point where the optimum is not unique, so the Rademacher complexity of the composed class cannot be bounded by that of H times a Lipschitz constant. Any argument through the finitely many vertices of S needs the decisions w∗(f(xi)) to take finitely many values on a sample, i.e. the oracle to return vertices; for an oracle that returns a non-vertex optimal point under ties, w∗(H) may take infinitely many values on a sample. On the probabilistic side, the passage from the empirical to the expected complexity and the McDiarmid concentration step (Theorem 1) require the suprema over an uncountable class to be measurable, which the paper does not discuss.
Formalization scope
Lean works in Rd = EuclideanSpace ℝ (Fin d); cost vectors and decisions live in the same space and c⊤w is the inner product. The standing assumptions of §2 are hypotheses of every theorem: S nonempty, compact and convex; w∗ an arbitrary oracle (a hypothesis IsOracle S w, never a specific selection); C nonempty and bounded, with the cost component of D in C almost surely (or, for fixed-sample statements, every ci∈C); n≥1. "Polyhedron" means the solution set of finitely many linear inequalities; with compactness it is a polytope, and ∣S∣ is the cardinality of Set.extremePoints ℝ S. The expectation over signs is the exact average over the 2n sign vectors; RSPO and RSPOn are Bochner integrals. "With probability at least 1−δ" is stated as: the product measure of the set of samples on which some f∈H violates the bound is at most δ.
The formalization commits to the following disclosed additions:
In the empirical bound, Theorem 2 and its first display, the oracle returns extreme points of S. This is the proof's own "w.l.o.g." (p. 31), made explicit because p. 10 allows non-vertex outputs under ties. The hypothesis is needed: on the unit square, an oracle that returns distinct interior points of an edge under ties can have dN(w∗(H))=1 and empirical complexity near 21, which exceeds the printed bound for large n.
The Natarajan dimension is not defined as a number (a supremum in N would silently be 0 for unboundedly large shattered sets). Statements carry a natural number k bounding the size of every N-shattered set, in place of dN(w∗(H)). This is equivalent when dN is finite; the printed bound is vacuous otherwise.
Theorem 1 and the goal carry three measurability hypotheses: each loss function z↦ℓSPO(f(z1),z2) is measurable; the uniform deviation supf(RSPO(f)−R^SPO(f)) and, for each sign vector, the signed supremum supfn1∑iσiℓSPO(f(xi),ci) are almost-everywhere measurable functions of the sample. Without them the integral defining RSPOn could default to 0.
The Massart step assumes F∣X finite, the case in which its printed right-hand side is finite.
A formalization that let dN be an sSup in N, or chose a specific tie-breaking oracle inside the definitions, would prove a different and in part trivial statement; both are excluded.
Infrastructure needed: McDiarmid's bounded-differences inequality and symmetrization for the product measure; Massart's finite-class lemma (a proved version is on the platform as RademacherMassart.rad_le_massart, with its own normalization); the Natarajan lemma (proved, UnderstandingML.natarajan_lemma, stated with its own but identical notion of N-shattering over finite types); finiteness and nonemptiness of the extreme points of a nonempty polytope. Theorem 1 and the Massart step do not use polyhedrality and are reusable for any bounded decision loss. Contributions of these infrastructure lemmas are welcome.
Selected references
O. El Balghiti, A. N. Elmachtoub, P. Grigas, A. Tewari, Generalization Bounds in the Predict-then-Optimize Framework, arXiv:1905.11488v3, 2022; Mathematics of Operations Research, 2023. https://arxiv.org/abs/1905.11488
A. N. Elmachtoub, P. Grigas, Smart "Predict, then Optimize", Management Science 68(1), 9–26, 2022. https://arxiv.org/abs/1710.08005
P. L. Bartlett, S. Mendelson, Rademacher and Gaussian complexities: risk bounds and structural results, Journal of Machine Learning Research 3, 463–482, 2002. https://www.jmlr.org/papers/v3/bartlett02a.html
S. Shalev-Shwartz, S. Ben-David, Understanding Machine Learning: From Theory to Algorithms, Cambridge University Press, 2014 (Lemma 29.4). https://doi.org/10.1017/CBO9781107298019
M. Mohri, A. Rostamizadeh, A. Talwalkar, Foundations of Machine Learning, 2nd ed., MIT Press, 2018 (Theorem 3.3, Corollary 3.8). https://cs.nyu.edu/~mohri/mlbook/
Chapter 2's tail bounds mostly rest on moment-generating-function control, obtained either
directly (sub-Gaussianity) or through explicit combinatorial arguments (Hoeffding, bounded
differences). The entropic method offers a different, more structural route: bound a
specific information-theoretic quantity — the φ-entropy of eλX — and convert
that bound mechanically into a tail bound via a short ODE argument (the Herbst argument). This
method's real payoff appears once it is combined with the tensorization property of entropy
across independent coordinates, which is what lets it handle Lipschitz functions of many
independent variables — including cases, such as separately convex functions, that elude the
purely martingale-based techniques of Chapter 2. This mission formalizes the entropic method's
two foundational entropy-to-tail conversions and its central Lipschitz-concentration
application, following Wainwright, High-Dimensional Statistics: A Non-Asymptotic Viewpoint
(Cambridge University Press, 2019), Chapter 3.
Setting
For φ(u):=ulogu (u>0), φ(0):=0, the φ-entropy of a nonnegative
random variable Z is H(Z):=E[ZlogZ]−E[Z]logE[Z] (Eqs. (3.1)-(3.2)).
Writing φX(λ):=E[eλX] for the moment generating function of X,
the entropy of eλX has the explicit form H(eλX)=λφX′(λ)−φX(λ)logφX(λ) (Eq. (3.3)).
A function f:Rn→R is separately convex if, for each coordinate k, the
univariate function obtained by fixing every coordinate but the k-th is convex — strictly
weaker than joint convexity of f itself. f is L-Lipschitz with respect to the Euclidean
norm if ∣f(x)−f(x′)∣≤L∥x−x′∥2 for all x,x′.
Let {Xi}i=1n be independent, each supported on [a,b], and f separately convex and
L-Lipschitz. Then for all δ>0,
P[f(X)≥E[f(X)]+δ]≤exp(−4L2(b−a)2δ2).
Milestone — Proposition 3.2 (the Herbst argument)
If H(eλX)≤21σ2λ2φX(λ) for all λ∈I
(I=[0,∞) or R), then logE[eλ(X−E[X])]≤21λ2σ2 for all λ∈I — the basic entropy-to-sub-Gaussian-tail
conversion.
Milestone — Proposition 3.3 (the Bernstein entropy bound)
The sub-exponential analogue: if H(eλX)≤λ2{bφX′(λ)+φX(λ)(σ2−bE[X])} for λ∈[0,1/b), then logE[eλ(X−E[X])]≤σ2λ2(1−bλ)−1 on the same range.
Significance
Propositions 3.2 and 3.3 are the two basic entropy-to-tail conversions the entire chapter's
entropic method rests on — every subsequent Lipschitz-concentration result in the chapter
(including Theorem 3.4 and the more advanced Theorem 3.24) is obtained by first establishing an
entropy bound of one of these two forms and then invoking the corresponding proposition.
Theorem 3.4 is itself the direct analogue, for independent bounded variables, of Chapter 2's
Gaussian Lipschitz concentration (Theorem 2.26) — but crucially requires the extra hypothesis of
separate convexity, which the Gaussian case does not need and which cannot be dropped in
general.
Formalizing it. No faithful prior art exists on the platform. The one candidate flagged in
BRIEF.md, Talagrand.lipschitz_concentration, was read in full: it is a weighted-Hamming-
distance concentration bound for functions on a finite-alphabet product spaceFin n → α,
proved via Talagrand's convex-distance method — a different underlying space (finite alphabet
vs. real-valued bounded coordinates) and a different Lipschitz norm (weighted Hamming vs.
Euclidean) from Theorem 3.4, and not reused here. A search for "log-Sobolev" and "Herbst" turned
up bousquet_herbst_cgf_le_phi_via_herbst/bousquet_herbst_cgf_le_phi_double_integration: these
are abstract calculus lemmas about a generic function G satisfying an ODE-type growth
condition (G′′≤vex), concluding G(L)≤v(eL−1−L) — a genuinely different statement
shape from Proposition 3.2/3.3's entropy-to-CGF conversions (which conclude a quadratic, not
exponential, bound on logE[eλ(X−EX)]), and not a faithful match. All
three theorems here are drafted as open goals (:= by sorry).
Difficulty
The naive approach to Theorem 3.4 — try to adapt the bounded-differences (martingale) method of
Chapter 2 directly — fails, because the bounded-differences method needs f to have small
coordinatewise oscillation in an absolute sense, while separate convexity alone gives no such
uniform bound (a separately convex function can vary arbitrarily fast within the interior of its
domain, only its slope is controlled by the Lipschitz condition). The entropic method
sidesteps this by working with the φ-entropy of eλf(X) directly: entropy has
a tensorization property across independent coordinates (not itself part of this mission, but
what the entropic method's proof of Theorem 3.4 uses) that reduces a multivariate entropy bound
to a sum of "one coordinate at a time" contributions, each of which convexity and the Lipschitz
condition jointly control — a route with no analogue in the bounded-differences approach.
Formalization scope
Separate convexity and Euclidean-Lipschitzness are both restated locally in this chapter's own
sub-namespace (HighDimStat.Concentration), per this book series' rule against importing
another chapter's draft definitions, even though Chapter 2 already defines an
IsLLipschitz for the same Euclidean condition. φ_X'(\lambda)$ (Proposition 3.3) is realized via Mathlib's deriv, a legitimate way to state a hypothesis on a derivative without separately proving differentiability, appropriate at the draft-statement stage. Explicit Integrable`
hypotheses guard the Bochner integral's junk value on non-integrable functions throughout (trap
2), not literal in the book's own propositions but implied by what "the entropy H(eλX) exists" (an explicit qualifier the book itself makes when introducing Eq. (3.2)) means.
Goal substitution, disclosed.BRIEF.md recommends Theorem 3.24 (the two-sided, jointly
convex analogue) as the primary goal, but explicitly names Theorem 3.4 as a fallback "if 3.24's
dependence on the unnumbered transportation-cost inequality (Eq. 3.73, attributed to Samson)
proves too heavy to state faithfully in the time available." Theorem 3.24's proof route depends
on Theorem 3.19 (a general "transportation cost implies concentration" result for an abstract
metric measure space, itself needing a from-scratch formalization of the transportation-cost
inequality (3.58) and the concentration function αP,(X,ρ)) plus the
unproven-in-chapter Eq. (3.73). Building this full stack faithfully was judged to exceed this
chunk's time budget; Theorem 3.4 is drafted instead, using this mission's own budget on
Propositions 3.2 and 3.3 (the two most load-bearing entropy-to-tail conversions of the chapter)
rather than the heavier transportation-cost machinery. Theorem 3.19, Theorem 3.24, and Eq.
(3.73) are all out of scope for this mission and named here as natural follow-on work.
Selected references
M. J. Wainwright, High-Dimensional Statistics: A Non-Asymptotic Viewpoint, Cambridge
University Press, 2019. DOI: 10.1017/9781108627771.
Chapter 3.
M. Ledoux, The Concentration of Measure Phenomenon, American Mathematical Society, 2001.
I. Herbst, unpublished (the argument bearing his name is attributed in Ledoux (2001) and
standard references on log-Sobolev inequalities).
High-Dimensional Statistics IX: Nuclear-Norm Regularization for Low-Rank Matrix RegressionTextbook
Motivation
Many estimation problems are naturally posed over matrices rather than vectors: recommender
systems (Netflix-style matrix completion), multivariate regression with correlated responses,
vector autoregressive time series, and phase retrieval all reduce to estimating an unknown
matrix Θ∗ that is low-rank, or well approximated by one. A rank constraint alone makes
the natural least-squares estimator non-convex and generally intractable; replacing it with the
nuclear norm — the sum of the matrix's singular values, the tightest convex surrogate for rank
— yields a tractable semidefinite program. Wainwright's High-Dimensional Statistics (2019),
Chapter 10, shows that this substitution costs nothing statistically: nuclear-norm-regularized
least squares achieves error rates matching what one could hope for even knowing the rank in
advance, by specializing Chapter 9's general decomposable-regularizer framework (mission
09-decomposability) directly to the nuclear norm.
Setting
For matrices A,B∈Rd1×d2, the trace inner product is
⟨⟨A,B⟩⟩:=trace(ATB)=∑j1,j2Aj1j2Bj1j2
(Eq. 10.1), inducing the Frobenius norm∥∣A∣∥F. Given design matrices
X1,…,Xn∈Rd1×d2 and responses yi=⟨⟨Xi,Θ∗⟩⟩+wi, the observation operatorXn(Θ):=(⟨⟨Xi,Θ⟩⟩)i=1n and its adjoint
Xn∗(u):=∑iuiXi (Eqs. 10.2-10.3) are the matrix analogs of a vector design
matrix and its transpose. The nuclear norm∥∣Θ∣∥nuc:=∑jσj(Θ)
(Eq. 10.5) — the sum of singular values — is a decomposable regularizer (in the sense of
Chapter 9) with respect to the subspace pair spanned by the top singular vectors of any target
matrix, and its dual norm (Table 9.1) is the ℓ2-operator (spectral) norm∥∣⋅∣∥2. The estimator under study is nuclear-norm-regularized least squares,
Suppose Xn satisfies the restricted strong convexity condition (10.17),
∥Xn(Δ)∥22/(2n)≥κ/2∥∣Δ∣∥F2−c0nd1+d2∥∣Δ∣∥nuc2 for all Δ, with κ>0,
c0≥0. Conditioned on the good event G(λn)={∥∣n1∑iwiXi∣∥2≤λn/2}, any optimal Θ^ satisfies, for any r∈{1,…,d′} with
r≤κn/(128c0(d1+d2)),
Under the alternative Φ∗-curvature condition (10.20) (a curvature bound on the gradient
map rather than the Taylor error), with rank(Θ∗)<κ/(64τn): conditioned
on G(λn)={∥∣n1Xn∗(w)∣∥2≤λn/2}, any optimal
Θ^ satisfies ∥∣Θ^−Θ∗∣∥2≤32λn/κ — an
operator-norm bound the book notes is, in conjunction with the cone-like constraint (10.15),
strictly stronger than Proposition 10.6's Frobenius-norm bound.
Significance
Proposition 10.6 is this chapter's direct payoff from Chapter 9's general machinery: it shows
that the deterministic backbone of the Lasso's guarantee (mission 07-sparse-linear) extends
essentially verbatim to the matrix setting, with the sparsity level s replaced by the target
rank r and the ambient dimension d replaced by d1+d2 — exactly the "degrees of freedom"
scaling one would predict by counting the parameters needed to specify a rank-r matrix. Every
one of the chapter's later corollaries (matrix compressed sensing, multivariate regression,
matrix completion) is obtained by verifying the restricted strong convexity condition (10.17)
holds with high probability for a specific random design, then reading the rate directly off
Proposition 10.6 — the same two-step recipe Chapter 9's own Theorem 9.19 established abstractly.
Proposition 10.7's operator-norm bound is what subsequently controls the individual singular
values of the estimation error, needed for exact-rank-recovery guarantees.
Difficulty
Both results are direct specializations of Chapter 9's general oracle inequalities (Theorem
9.19 and Theorem 9.24 respectively) to the nuclear norm as regularizer and the Frobenius/operator
norm pair, so their formalization difficulty lies almost entirely in getting the matrix-specific
objects right rather than in new proof machinery: the nuclear norm requires an actual notion of
singular values (realized via the eigenvalues of the Gram matrix ΘTΘ, using
Mathlib's Hermitian-matrix spectral theorem), the operator norm requires the correct rectangular
generalization of the symmetric-matrix Rayleigh-quotient characterization used in mission
08-pca, and the restricted-strong-convexity and curvature conditions must be instantiated
against the correctly-adjointed observation operator Xn∗. A further subtlety is
keeping Proposition 10.6's Frobenius-norm conclusion and Proposition 10.7's operator-norm
conclusion cleanly distinct — the book itself warns against conflating the norms used across
different chapters of Part II (the vector ℓ2-norm of chunks 07-sparse-linear/08-pca
versus the matrix Frobenius and operator norms here).
Formalization scope
Scope cut, disclosed here and in STATUS.md.BRIEF.md recommends Corollary 10.10 (the
sample-complexity bound for the Σ-Gaussian random matrix ensemble) as the goal theorem.
Corollary 10.10 is a genuinely probabilistic statement — it asserts a bound holding "with
probability at least 1−2e−2nδ2" over n i.i.d. draws of design matrices from a
Σ-Gaussian ensemble (Theorem 10.8's own high-probability restricted-strong-convexity
certification for that ensemble) — and formalizing it faithfully would require a genuine
multivariate-Gaussian-measure infrastructure on matrix space (a probability space, an i.i.d.
sequence of Σ-covariance-structured Gaussian matrices, and Mathlib's measure-theoretic
probability API) that is disproportionate to this mission's time budget, and orthogonal to what
Chapter 10 itself contributes (the chapter's own text stresses that Propositions 10.6 and 10.7
are the chapter's deterministic core, with probability entering only in Section 10.3's
ensemble-specific certification — precisely mirroring chunk 09-decomposability's own
"Theorem 9.19 is actually a deterministic result" framing). This mission instead takes
Proposition 10.6 as its goal — explicitly named in BRIEF.md's own candidate list as "the
nuclear-norm oracle inequality, an explicit corollary of Theorem 9.19" — the natural, tractable,
still highly citable deterministic title result of Section 10.2, together with its companion
Proposition 10.7. Theorem 10.8 (the Σ-Gaussian ensemble's RSC certification), Corollary
10.9 (noiseless exact recovery) and Corollary 10.10 itself are left for a future mission with a
dedicated probability-theory budget. The cone-like constraint (Eq. 10.15) — whose own faithful
statement requires the same explicit subspace-pair machinery
(M(Ur,Vr),Mˉ(Ur,Vr)) chunk 09-decomposability built for the
general theory — is similarly left out, since Propositions 10.6 and 10.7's own numbered
statements never expose these subspaces directly (only their proofs do, via instantiating
Theorem 9.19/9.24). singularValues and nuclearNorm are noncomputable, defined via
Mathlib's Hermitian-matrix eigenvalue spectral theorem; c0 ≥ 0 and λn > 0 are made explicit,
matching this book's running conventions for RSC tolerance constants and regularization weights
(see MODERATION_NOTES.md).
Selected references
Wainwright, M. J. High-Dimensional Statistics: A Non-Asymptotic Viewpoint. Cambridge
University Press, 2019. Chapter 10. DOI: 10.1017/9781108627771.
Negahban, S., Wainwright, M. J. "Estimation of (near) low-rank matrices with noise and
high-dimensional scaling." Annals of Statistics, 39(2), 2011, 1069–1097.
Recht, B., Fazel, M., Parrilo, P. A. "Guaranteed minimum-rank solutions of linear matrix
equations via nuclear norm minimization." SIAM Review, 52(3), 2010, 471–501.
Foundations of Machine Learning V: Kernel Methods and the Representer TheoremTextbook
Motivation
Linear methods like SVMs work only when the classes are linearly separable, but most real
data is not. Chapter 6 shows how to get non-linear decision boundaries for free: replace the
input space's inner product with a kernelK that implicitly computes an inner product in a
(possibly very high- or infinite-dimensional) feature space, without ever explicitly computing
the feature mapping. This works for any positive definite symmetric (PDS) kernel — and the
chapter's central theorem shows that such a kernel always induces a genuine Hilbert space (the
reproducing kernel Hilbert space, RKHS) in which the kernel is literally an inner product. The
chapter's capstone, the representer theorem, then shows that a broad class of optimization
problems over this (possibly infinite-dimensional) Hilbert space always has a solution
expressible as a finite linear combination of kernel evaluations at the training points —
turning an infinite-dimensional problem into a finite, m-dimensional one.
Setting
A kernel K:X×X→R is PDS (Definition 6.3) if for every finite sample
{x1,…,xm}⊆X, the Gram matrix [K(xi,xj)] is symmetric positive
semidefinite. Theorem 6.8 shows every PDS kernel is an inner product K(x,x′)=⟨Φ(x),Φ(x′)⟩ in some Hilbert space H (the RKHS), which further has the
reproducing propertyh(x)=⟨h,K(x,⋅)⟩ for every h∈H — evaluating h
at a point is itself an inner product with the kernel section at that point. Theorem 6.10
shows PDS kernels are closed under sum, product, tensor product, pointwise limit, and
power-series composition, letting complex kernels (Gaussian, and many others) be built from
simple ones (polynomial kernels) without re-verifying positive-semidefiniteness from scratch.
Section 6.3's representer theorem (Theorem 6.11) then considers minimizing, over h∈H, an
objective F(h)=G(∥h∥H)+L(h(x1),…,h(xm)) that depends on h only through its norm
and its values at m fixed points.
Formalization targets
Theorem 6.8 (RKHS existence, milestone). For a PDS kernel K, there exist a Hilbert space
H and Φ:X→H with K(x,x′)=⟨Φ(x),Φ(x′)⟩, and H has the
reproducing property h(x)=⟨h,K(x,⋅)⟩ for all h∈H, x∈X.
Theorem 6.10 (closure properties, milestone). PDS kernels are closed under sum, product,
tensor product, pointwise limit, and power-series composition with non-negative coefficients.
Theorem 6.11 — the mission's goal. For any non-decreasing G:R→R and any
loss L:Rm→R∪{+∞}, argminh∈HG(∥h∥H)+L(h(x1),…,h(xm)) admits a solution h⋆=∑i=1mαiK(xi,⋅); if G
is increasing, every solution has this form.
Significance
Theorem 6.11 is the chapter's payoff and one of the most widely used structural results in
kernel methods: it explains, in one general statement covering SVMs, kernel ridge regression,
Gaussian process MAP estimation and many other algorithms simultaneously, why the dual
(finite, m-coefficient) formulation always suffices — the RKHS's infinite dimensionality
never has to be confronted directly. Theorem 6.8 is the structural fact the whole chapter (and
every later kernelized algorithm in the book, chapters 9-11, 15) depends on: without it, "PDS
kernel" would be a purely combinatorial condition on Gram matrices with no guarantee it
corresponds to any actual inner product. No prior art on the Prove2Me platform is faithful to
any of this chapter's content: GET /theorems?q=Representer theorem and q=reproducing kernel return no faithful match (one unrelated hit concerns a Gaussian-measure reproducing
kernel in a different, probabilistic context, not this chapter's PDS-kernel/RKHS
construction). All six items are drafted fresh.
Difficulty
Theorem 6.8's proof is a genuine construction: define H0 as finite linear combinations of
kernel sections Φ(x)=K(x,⋅), define an inner product on H0 using K itself,
verify it is well-defined (independent of the representation), positive semidefinite (via the
PDS hypothesis), and — via the Cauchy-Schwarz-for-PDS-kernels lemma (Lemma 6.7) — actually
positive definite, then complete H0 to a genuine Hilbert space H in which it is dense,
and finally extend the reproducing property from the dense subspace H0 to all of H by a
continuity argument. This is substantial analysis, not a restatement. Theorem 6.11's proof
uses the orthogonal decomposition H=H1⊕H1⊥ (where H1=span{K(xi,⋅)}) and the reproducing property to show the orthogonal component h⊥ never helps
and, when G is strictly increasing, strictly hurts — a short argument, but one that depends
essentially on Theorem 6.8's reproducing property holding for the specificH constructed,
not just any Hilbert space with the kernel as its inner product.
Formalization scope
IsPDS uses the book's own second SPSD characterization (c^T K c ≥ 0 for every finite sample
and coefficient vector c) rather than the non-negative-eigenvalues characterization, avoiding
spectral theory for a Prop-valued definition; the book states the two are equivalent.
IsRKHSOf and IsMinimizer are formalization scaffolding, not book-numbered definitions:
IsRKHSOf packages Theorem 6.8's own two displayed equations (6.8, 6.9) as a reusable
predicate shared between Theorem 6.8 (its conclusion) and Theorem 6.11 (its "H its
corresponding RKHS" hypothesis), using an explicit evaluation map ev : H → X → ℝ to stand in
for "elements of H are functions on X," since Mathlib's abstract Hilbert spaces are not
themselves spaces of functions; IsMinimizer packages argmin. Both X in Theorem 6.8's
existential and Theorem 6.11's ambient type are plain Type rather than Type*, avoiding
universe-polymorphic quantification over the constructed Hilbert space's own type — a harmless
simplification, since every application in this book instantiates X at a concrete, small
type (typically RN or a finite set). Theorem 6.11's loss codomain ℝ ∪ {+∞} is
WithTop ℝ, not EReal (which would also admit -∞, an unstated generalization the book's
own display does not license, since EReal's ⊤+⊥=⊥ collapse is a genuine faithfulness risk
the book's own L:\mathbb R^m\to\mathbb R\cup\{+\infty\} avoids by construction). WithTop ℝ
on its own does not avoid every collapse, though: an unconstrained L may be the constant
function ⊤ (a legal instance of ℝ∪\{+\infty\}), forcing the objective identically ⊤ and
every point to vacuously minimize it, which would make the theorem's second conjunct false. An
added hypothesis, ∃ h₀, F h₀ ≠ ⊤, makes explicit the book's own implicit assumption that the
objective is finite somewhere — see the Formalization scope note below. Theorem 6.11's two
clauses are otherwise kept exactly as distinct as the book states them: existence needs only
Monotone G (non-decreasing); "any solution has this form" needs StrictMono G (increasing)
as an added hypothesis on the second conjunct only — per this chunk's own BRIEF.md, the crux
of the theorem, and the trap this mission is most careful to avoid collapsing. Theorem 6.10's
five closure clauses are stated as one conjunction (matching the book's single theorem, not
five separate items); the power-series clause keeps the book's own radius-of-convergence
domain restriction and adds an explicit summability hypothesis guarding the ∑' term.
Not formalized: Theorem 6.2 (Mercer's condition) — not needed by the goal's own proof chain
(it is an equivalent characterization of PDS mentioned before the RKHS construction, not a
premise Theorem 6.8's or 6.11's proof invokes) and its own hypotheses (compact X⊂RN, continuous K, an eigenfunction expansion of a compact self-adjoint integral
operator) are real analytic content this mission's budget does not include; Lemma 6.7
(Cauchy-Schwarz for PDS kernels) and Lemma 6.9 (normalized PDS kernels) — supporting lemmas for
Theorem 6.8's proof, not independently numbered results the goal cites; Theorem 6.12/Corollary
6.13 (Rademacher complexity/margin bounds for kernel-based hypotheses) — the chapter's optional
further milestone, connecting to chunks 03/05's machinery, cut for budget; §6.5-6.8
(sequence kernels, weighted transducers, rational kernels, Bochner's theorem, approximate
feature maps) — explicitly out of scope per this chunk's own BRIEF.md, a distinct,
applications-heavy topic.
Selected references
M. Mohri, A. Rostamizadeh, A. Talwalkar, Foundations of Machine Learning, 2nd ed., MIT
Press, 2018, Chapter 6, §6.1-6.4.
B. Schölkopf, R. Herbrich, A. J. Smola, "A generalized representer theorem," COLT 2001,
Lecture Notes in Computer Science 2111, 2001, 416-426.
N. Aronszajn, "Theory of reproducing kernels," Transactions of the American Mathematical
Society 68(3), 1950, 337-404.
High-Dimensional Probability IV: Norms of Random Matrices with Sub-gaussian EntriesTextbook
Motivation
Random matrices with independent entries appear whenever a system is measured through many
noisy, roughly independent channels: shot noise in a sensor array, edges in an Erdős–Rényi-type
random graph, or the design matrix of a linear model with independent covariates. A basic
question about any such matrix A is how far it can stretch a vector — its operator norm∥A∥ — since this single number controls the stability of every linear statistic computed
from A: least-squares estimates, spectral clustering, covariance estimation, and random
projections all reduce, at some point, to bounding ∥A∥.
The theory traces to Marchenko and Pastur's 1967 asymptotic law for the spectrum of large random
matrices, and to Bai and Yin's 1988 almost-sure limit ∥A∥/n→2 for n×n
matrices with i.i.d. mean-zero, unit-variance entries. Those results are asymptotic: they say
what happens as the dimension n→∞, for a fixed matrix shape. The result formalized
here, Theorem 4.4.5 of Vershynin's High-Dimensional Probability (2018)
(DOI 10.1017/9781108231596), belongs to the more recent
non-asymptotic strand of the theory: it gives an explicit, dimension-free bound that holds at
every fixed m,n, with an explicit failure probability — the form of statement needed for
finite-sample guarantees in statistics and data science, rather than limiting behavior.
Setting
Let A be an m×n real matrix. Equip Rn and Rm with the Euclidean
norm ∥⋅∥2; A acts as a linear map ℓ2n→ℓ2m. Its operator norm
(§4.1.2) is
∥A∥:=x∈Sn−1max∥Ax∥2,
the largest factor by which A can stretch a unit vector; equivalently, the largest singular
value of A.
A real random variable X is sub-gaussian with the mission's own convention (matching the
Orlicz ψ2 norm this series already carries as a published definition,
HighDimProb.Concentration.subgaussianNorm) if
∥X∥ψ2:=inf{t>0:Eexp(X2/t2)≤2}<∞.
Bounded random variables and Gaussians are sub-gaussian; a Bernoulli(p) variable and a
±1-valued coin flip both qualify, which is why the theorem below directly covers
random matrices with i.i.d. Rademacher or Gaussian entries as special cases.
The mission's proof technique is the ε-net argument, developed in §4.2 and used nowhere
before this chapter of the book: a metric space (T,d), a subset K⊆T, and
ε>0 give rise to an ε-netN⊆K — a finite set such that every point
of K is within ε of some point of N — and a covering numberN(K,d,ε), the smallest cardinality of such a net. The technique reduces a statement that
must hold uniformly over an infinite (compact) set to a statement about finitely many points,
paid for by a union bound whose cost is controlled by the covering number.
for any m×n random matrix A with independent, mean-zero, sub-gaussian entries
Aij and K=maxi,j∥Aij∥ψ2. This is the weakest stable form of the
bound — it fixes no numerical value for C, only its existence and absoluteness (independence
from m, n, A, t), so later refinements of the constant do not invalidate it.
Significance
The result itself. The bound ∥A∥≲m+n is sharp up to the constant:
for entries of unit variance, E∥A∥≥41(m+n) for large m,n
(the book's Exercise 4.4.7), so no non-asymptotic bound of this shape can be improved beyond
constants. It is the entry point to the rest of the book's random matrix theory: Corollary 4.4.8
specializes it to symmetric matrices, and it underlies the community-detection (§4.5) and
covariance-estimation (§4.7) applications later in the same chapter, neither of which is part of
this mission.
Formalizing it. The theorem is a classical, fully proved result; nothing about its truth is
open. What this mission contributes is a machine-checked formal statement — together with the
two pieces of chapter infrastructure its own textbook proof names by number (Corollary 4.2.13,
Exercise 4.4.3(a)) — and a third, self-contained application of the same covering-number
machinery (Theorem 4.3.5) that exercises the shared IsEpsNet/coveringNumber definitions on a
different metric space (the Hamming cube), independently of the Euclidean case. Mathlib and the
Prove2Me platform currently have no ε-net, covering-number, or packing-number infrastructure
(checked by q=random matrix, q=operator norm, q=covering number, q=net on the platform,
and by filename search in Mathlib): this mission is the first to introduce it, restated inside
its own namespace since it is not otherwise available to build on.
Difficulty
The obvious first approach is to bound ∥A∥=maxx∈Sn−1∥Ax∥2 directly by union-bounding a concentration inequality over the sphere Sn−1. This fails outright: Sn−1 is
infinite (indeed uncountable) for n≥2, so no union bound over its points can converge — the
naive approach gives ∞⋅(tail probability). The ε-net argument is the fix, but
it is not just "discretize and hope": the reduction from the sphere to a finite net
(quadratic_form_on_net, Exercise 4.4.3(a)) loses a multiplicative factor 1/(1−2ε)
that must be tracked, and the net's cardinality (covering_numbers_of_euclidean_ball_and_sphere,
Corollary 4.2.13) is exponential in the dimension (9n at ε=1/4) — so the
per-point tail probability from Hoeffding-type concentration must itself decay fast enough
(quadratically in the exponent) to survive multiplying by 9m+n many points. Getting the
union bound to close requires choosing the threshold u in the tail bound proportionally to
m+n+t, not to t alone — the m+n term is exactly what pays for
the net's exponential size.
Formalization scope
A is represented as Ω → Matrix (Fin m) (Fin n) ℝ; its entries A ω i j are the individual
real random variables. Independence of the mn entries is iIndepFun over the index type
Fin m × Fin n; mean-zero is the vanishing of each entry's Bochner integral. The operator norm
is the norm of the associated continuous linear map between EuclideanSpace ℝ (Fin n) and
EuclideanSpace ℝ (Fin m) (matrixOpNorm, every linear map between finite-dimensional normed
spaces being automatically continuous), matching the book's maxₓ∈Sⁿ⁻¹ ‖Ax‖₂ exactly. The
sub-gaussian norm K reuses this series' own published definition,
HighDimProb.Concentration.subgaussianNorm, rather than a re-derivation. Covering numbers
(coveringNumber) are restricted to finite (Finset) ε-nets, the only kind this chapter uses;
this is a deliberate restriction, not a general-purpose covering-number formalization, and is
disclosed as such. A hard-coded numeral for C, or an unquantified "with high probability" in
place of the explicit failure probability 2exp(−t2), would each trivialize the statement and
is ruled out: C is existentially bound ahead of every other quantifier, and t>0 is a free
parameter with its own explicit bound, exactly as the book states it.
Definitions reusable beyond this mission: IsEpsNet and coveringNumber are stated for a
general PseudoMetricSpace and apply unchanged to any later chapter's covering-number needs
(e.g. Chapter 8's VC-dimension covering numbers), though per this series' rule that drafts cannot
import drafts, a later chunk would restate rather than import them until this mission is
published. matrixOpNorm is likewise chapter-agnostic. Contributions completing the sorry
proofs of any of the four theorem items are welcome and independent of one another; the covering
number and net-reduction items (covering_numbers_of_euclidean_ball_and_sphere,
quadratic_form_on_net) are the standard prerequisites for the goal's own volumetric/ε-net
proof.
Selected references
Vershynin, R. High-Dimensional Probability: An Introduction with Applications in Data
Science. Cambridge University Press, 2018. DOI 10.1017/9781108231596
Bai, Z. D., Yin, Y. Q. "Necessary and sufficient conditions for almost sure convergence of the
largest eigenvalue of a Wigner matrix." Annals of Probability 16 (1988), 1729–1741.
Marchenko, V. A., Pastur, L. A. "Distribution of eigenvalues for some sets of random matrices."
Mathematics of the USSR-Sbornik 1 (1967), 457–483.
Foundations of Reinforcement Learning III: Structured Bandits and the Decision-Estimation CoefficientTextbook
Motivation
Every algorithm in the first three chapters of Foster and Rakhlin's Foundations of
Reinforcement Learning and Interactive Decision Making — ε-Greedy and UCB for the
multi-armed bandit, Inverse Gap Weighting and SquareCB for contextual bandits — is a
special case of the same two-step recipe: estimate a model of the world with an online
regression oracle, then convert the estimate into a decision that trades exploration
against exploitation. Chapter 4 asks whether this recipe can be made generic: given
any structured decision-making problem, specified only by a function class F and a
decision space Π, is there a single quantity that governs the best achievable
regret, the way A/γ governs the multi-armed bandit and d/γ
governs the linear bandit? The chapter's answer is the Decision-Estimation
Coefficient (DEC), introduced by Foster, Kakade, Qian, and Rakhlin [40] as a
complexity measure that both upper- and lower-bounds achievable regret for a general
decision-making protocol, unifying results that were previously proved from scratch,
case by case, for each structured setting. This mission formalizes the chapter's
central upper bound (Proposition 13) together with the machinery that makes it
computable in two concrete cases — the multi-armed bandit (Proposition 14) and the
linear bandit (Propositions 16–17).
Setting
Fix a finite decision space Π and a class F⊆RΠ of candidate
mean-reward functions, with a ground-truth f⋆∈F (realizability). Over T
rounds, at each round t the learner observes an estimate f^t produced by an
online regression oracle, plays a decision distribution pt∈Δ(Π)
(possibly depending on f^t and the history), and the regret is
Reg:=t=1∑Tf⋆(π⋆)−t=1∑TEπ∼pt[f⋆(π)],
where π⋆=argmaxπf⋆(π). The oracle's cumulative estimation
error is assumed bounded: ∑t=1TEπ∼pt[(f^t(π)−f⋆(π))2]≤EstSq(F,T,δ) with probability at least 1−δ
(Definition 7). Writing πf:=argmaxπf(π), the DEC game value at a
reference model f^ and scale γ>0 is the min-max quantity
and the DEC of F itself is decγ(F):=supf^∈co(F)decγ(F,f^). The Estimation-to-Decisions (E2D) algorithm plays,
at each round, a pt certifying (i.e. attaining or beating) the value of this min-max
game at f^t.
Formalization targets
Goal — Proposition 13 (E2D regret bound)
Reg≤decγ(F)⋅T+γ⋅EstSq(F,T,δ)
with probability at least 1−δ, for any exploration parameter γ>0. This
is the weakest stable statement the chapter proves about E2D: it holds for an
arbitrary function class and an arbitrary regression oracle, with no structural
assumption on F beyond realizability, and the chapter's later sections instantiate
it rather than strengthen it.
Milestones
Lemma 9 (Decoupling), general form: for any distribution ν over a finite
model class and any fˉ, Ef∼ν[f(πf)−fˉ(πf)]≤A⋅Ef∼νEπ∼p[(f(π)−fˉ(π))2] —
the estimation-to-decisions bridge the whole chapter's approach rests on, decoupling
the model index from the played decision.
Proposition 14 (IGW minimizes the DEC): for the multi-armed bandit (Π=[A],
F=RA), Inverse Gap Weighting is the exact minimizer of the DEC game,
giving decγ(F)=(A−1)/(4γ) — the first concrete computation of
an abstract quantity, recovering Chapter 3's rate from Proposition 13 alone.
Proposition 16 (G-optimal design): existence, for any compact
full-dimensional-span set Z⊆Rd, of a distribution p with
supz∈Z⟨Σp−1z,z⟩≤d — the classical convex-analysis
primitive Proposition 17 needs.
Proposition 17 (DEC for linear bandits): combining the G-optimal design with
inverse gap weighting gives decγ(F)≲d/γ for the linear
bandit function class, leading via Proposition 13 to a dT regret bound.
Significance
The Decision-Estimation Coefficient is, in the book's own words, "the main result" of
this line of work: Foster, Kakade, Qian, and Rakhlin [40] show it is not merely an
upper bound but (in a suitable localized form, developed further in Chapter 6) a
tight characterization of the minimax regret for structured bandits and, more
generally, for the interactive decision-making protocol the rest of the book studies.
Proposition 13 is the mechanism that makes this useful in practice: it reduces regret
analysis for a new structured problem to a single, purely convex-analytic computation
of decγ(F), in place of a bespoke exploration argument. Propositions
14–17 are the demonstration that this reduction is not vacuous — they recompute, via
the DEC alone, the two rates (multi-armed and linear bandit) that earlier chapters of
the book derived by direct, setting-specific arguments, and the match is exact.
Formalizing this chapter therefore captures the book's unifying abstraction itself,
not just one more instance of it. No formalization of the Decision-Estimation
Coefficient, in any form, currently exists on the platform (see Formalization scope).
Difficulty
The obvious formalization mistake is to state Proposition 13's conclusion with
decγ(F) left as an unconstrained free real-number parameter satisfying
only the inequality the theorem asserts — a formalization under which the "theorem"
would be a triviality about an arbitrary real number, since nothing about the actual
min-max game would ever be checked. The chapter's content is precisely the opposite:
that this specific minimax quantity can be computed (Proposition 14) or bounded
via a concrete strategy (Proposition 17), and — as Chapter 6 shows for a lower bound
outside this chunk's scope — that no smaller quantity would do. A second difficulty is
proof-theoretic rather than notational: the book's own proof of Proposition 13 bounds
regret by an unconstrained supremum over all reference functions f^:Π→R, and only identifies this with the official, co(F)-restricted
decγ(F) of Eq. (4.16) via Proposition 24 — a fact stated on p. 80,
outside this chapter's numbered range, whose own proof the book defers to an exercise.
A formalization that quietly imports Proposition 24 to close this gap would rest the
goal theorem on an unverified fact; this mission instead states the hypothesis the
book's own text uses to motivate restricting to co(F) in the first place
(online estimation algorithms produce f^t∈co(F)), so the goal is
faithful to what is actually established within the chapter's own pages.
Formalization scope
Every item fixes a finite decision space (Fin A, Fin n, or a generic Fintype S)
and states the DEC as the literal sInf-of-sSup transcription of the min-max game
(Eqs. (4.15)–(4.16)), never as an opaque bound — this is the trivializing
formalization the chunk's own reading of the chapter rules out (see Difficulty).
piStar : (S → ℝ) → S is a hypothesized global maximizer selector throughout,
constrained to be a genuine argmax only on the function class in scope (F or
Set.univ), matching how the book treats πf as a fixed but arbitrary
tie-breaking choice. The goal theorem (Proposition 13) adds the explicit hypothesis
hfhat : ∀ t, fhat t ∈ convexHull ℝ F, replacing an appeal to the out-of-range
Proposition 24 (see Difficulty); this is the one place this mission's statement is not
a line-by-line transcription of the book's own displayed proof steps, and it is
recorded here and in MODERATION_NOTES.md. Proposition 14's and Proposition 17's
≲ are replaced by the explicit constants the book's own proofs establish
((A−1)/(4γ) exactly, and (4d+1)/(2γ) respectively — the latter obtained
by summing the three terms the proof of Proposition 17 isolates). Proposition 14's
Lean statement splits the book's single equality decγ(F,f^)=(A−1)/(4γ) into an upper bound on the literal decGf, a lower bound restricted
to full-support distributions, and IGW's own exact game value, because the book's
min over the whole simplex is not provable as a literal Lean equality: a
distribution with a zero-weight arm makes the inner supremum genuinely unbounded, and
Lean's total Real.sSup returns a junk value smaller than (A−1)/(4γ) there
(caught in moderation, MODERATION_NOTES.md); the three-conjunct statement recovers
exactly the book's real content without asserting that false literal equality. Lemma 9
is restated
inside FoundationsRL.Structured rather than imported from the Chapter 2 mission,
since draft items across chunks cannot import one another; its source citation still
points to its original location (p. 32). Proposition 16 is not drafted: the
platform's existing BanditAlgorithm.kiefer_wolfowitz_equivalence (Lattimore &
Szepesvári, Theorem 21.1) states the identical existence claim — compact set with
full-dimensional span, a design with G-value at most d — as one clause of a larger
equivalence, and is reused as a reference item rather than redrafted. Proposition 22
(primal/dual DEC equivalence, §4.4) is deliberately excluded: the book states it "under
mild regularity conditions" it does not pin down in the statement itself, which is
exactly the kind of unquantified hypothesis this series' faithfulness standard
excludes from a goal or milestone. Contributions extending this mission with Chapter
6's lower bound (matching decγ(F) from below, establishing tightness)
or with a formalization of Proposition 24 itself (removing this mission's hfhat
hypothesis) are welcome.
Selected references
D. Foster, S. Kakade, J. Qian, and A. Rakhlin, The Statistical Complexity of Interactive Decision Making, arXiv:2112.13487, 2021. https://arxiv.org/abs/2112.13487
D. Foster and A. Rakhlin, Foundations of Reinforcement Learning and Interactive Decision Making, arXiv:2312.16730, 2023. https://arxiv.org/abs/2312.16730
T. Lattimore and C. Szepesvári, Bandit Algorithms, Cambridge University Press, 2020.
J. Kiefer and J. Wolfowitz, The Equivalence of Two Extremum Problems, Canadian Journal of Mathematics, 1960.
Recovering Best Statistical Guarantees via the Empirical Divergence-Based Distributionally Robust Optimization 2: Empirical Burg-Ball DRO Bounds Converge Almost Surely to E[h(x;ξ)]Research Paper
Motivation
Many stochastic optimization models contain an expected-value constraint
Z0(x)=E0[h(x;ξ)]≤0,
where ξ is a random object with unknown law P0, x is a decision and h is a known loss. When P0 is known only through an i.i.d. sample ξ1,…,ξn, data-driven distributionally robust optimization (DRO) replaces E0 by the worst case over a ball of distributions around the data. H. Lam, Recovering Best Statistical Guarantees via the Empirical Divergence-Based Distributionally Robust Optimization (arXiv:1605.09349v1, 2016; Operations Research 67(4), 2019), studies a ball of reweightings of the sample itself, measured by the Burg entropy, and links its radius to empirical likelihood (Owen 2001).
Lam's Theorem 2 shows that, for a fixed decision x, the minimum and maximum of Ew[h(x;ξ)] over this ball bracket Z0(x) with probability tending to 1−α when the radius is χ1,1−α2/(2n). Theorem 3, the goal of this mission, complements it: the two bounds also converge almost surely to Z0(x). A confidence statement says the robust bounds are rarely wrong; consistency says they are eventually tight, so that the robust constraint does not stay conservative as data accumulate.
This mission is the second of a three-mission series on the pointwise theory of the paper (1: coverage, Theorem 2; 3: reduction to a Burg ball on a finite support, Proposition 1).
Setting
Let ξ1,ξ2,… be i.i.d. random elements of a measurable space Ξ with law P0. Fix a decision x∈Rm and write Z0(x)=E0[h(x;ξ)].
The Burg generator is ϕ(t)=−logt+t−1 for t>0 and ϕ(t)=+∞ for t≤0. The empirical Burg-entropy divergence ball of radius η is the set of weight vectors
with the printed conventions at λ=0 and for arguments outside the domain of the logarithm.
3. The elementary inequality (p. 34): −log(1−t)≤t+2t2 for ∣t∣≤1/2.
4. (77) (p. 34): if maxi∣h~i∣≤λ/2 with λ>0, then
The uniform-weight lower bound (p. 34): Zn(x)−Z0(x)≥n1∑ih~i.
Milestones 2, 4 and 5 are deterministic statements about an arbitrary data vector; only Lemma 3 and the goal are probabilistic.
Significance
The result. Theorem 3 shows that the empirical DRO with the χ12 calibration is a consistent estimator of the constraint function at every fixed decision, not only a confidence bound. Together with Theorem 2 it places the empirical Burg-ball DRO on the same footing as the classical normal-approximation confidence interval: correct asymptotic coverage and shrinkage to the truth. The deterministic bounds (76)–(77) are also reusable on their own: they control the worst-case reweighting of any finite sample by its first two empirical moments.
Formalizing it. The theorem is proved in the paper; no machine-checked proof is known. The mission asks for a formal proof of the printed argument, specialized to one decision. A closely related open target exists on the platform: GenEmpLik.Expansion.lemma_1 (Duchi, Glynn and Namkoong) states the expansion of the robust mean, sample mean plus ρsn2/n+o(n−1/2), for a smooth generator class under stationary ergodic data. Combined with the strong law it would give the upper half of Theorem 3, but it is a different statement with different hypotheses and is itself unproved, so it is not used as a milestone here.
Difficulty
The tempting argument, "the ball shrinks to the empirical distribution and the empirical mean converges", does not close by itself: h(x;ξ) is only square integrable, not bounded, and the maximizing weight shifts mass towards the largest observations, so the gap Zn(x)−n1∑ih(x;ξi) has to be controlled against the extremes of the sample rather than by the size of the ball alone. The printed proof routes this through the convex dual (76). That step needs a constraint qualification, the conjugate of the Burg generator with its boundary conventions (an infinite value outside the domain of the logarithm, and the degenerate multiplier λ=0), and a choice of multiplier that dominates every centred observation while still letting all three terms of (77) vanish. The almost-sure statement then combines Lemma 3 with two strong laws on one event of full probability.
Formalization scope
Data. The sample ξ1,…,ξn is ξ 0, …, ξ (n-1): a sequence of measurable maps that is independent (iIndepFun) and identically distributed (IdentDistrib with ξ 0). Z0(x) is the Bochner integral of h x ∘ ξ 0, and the moment conditions are MemLp (h x ∘ ξ 0) 2 (finite mean and variance) together with positive variance, which makes the integral the true mean.
Decision. The paper's x∈Θ⊂Rm is an arbitrary point of EuclideanSpace ℝ (Fin m); Θ plays no role in a pointwise statement and is dropped.
Quantile.q is pinned by N(0,1){y:y2≤q}=1−α, which determines it uniquely. The radius q/(2n) is passed as ρ=q/2 to the published GenEmpLik.Expansion.robustMean, whose ball has radius ρ/n.
Values.Zn is robustMean burg (q/2); Zn is robustLower burg (q/2) from the frozen shared EmpiricalDRO.Coverage.Setting module, a real infimum over the same published ball (PhiDivRobust.Counterpart.probUncertaintySet). For n≥1 the value sets are nonempty and bounded, so the real sSup/sInf are the attained maximum and minimum.
Divergence.burg is valued in EReal with +∞ for t≤0, so a zero weight is excluded from the ball by an infinite divergence and never by a junk value of Real.log. The dual summand dualTerm is EReal-valued with the printed conventions: +∞ for t≥λ>0; 0 or +∞ at λ=0.
Generalizations, disclosed. The deterministic milestones hold for every data vector; (76) is stated for every q>0 (the Slater point needs q>0), (77) for every λ>0 satisfying the hypothesis, and the uniform-weight bound for every radius ρ≥0. In the goal, positive variance and the value of α are kept as printed although the conclusion does not need them.
Ruled out. Junk logarithms at zero weights, a junk sSup/sInf of an empty value set, a free radius detached from the χ12 quantile, and a dropped variance condition are all excluded by the encoding above. The paper's printed (75) writes Zn(x) where its radius qn/(2n) makes it Zn∗(x); at a single decision the two coincide.
Not posed. The paper's headline result, Theorem 4 (uniform coverage over Θ with a χ2-process quantile qn), and the uniform statements Theorems 5–7 need Donsker and Glivenko–Cantelli classes, weak convergence in ℓ∞(Θ) and conditional quantiles of Gaussian-process suprema, none of which has library support yet; they are left out.
Reuse. Lemma 3 for nonnegative variables is the proved platform theorem NumStochOpt.ListScheduling.lemma_8_1_i_max_over_sqrt_ae, included as a reference. Mathlib's ProbabilityTheory.strong_law_ae supplies the laws of large numbers. Contributions welcome: the duality (76) for general ϕ-divergence balls, and the deterministic bound (77).
A. Ben-Tal, D. den Hertog, A. De Waegenaere, B. Melenberg, G. Rennen, Robust solutions of optimization problems affected by uncertain probabilities, Management Science 59(2), 2013. https://doi.org/10.1287/mnsc.1120.1641
J. C. Duchi, P. W. Glynn, H. Namkoong, Statistics of robust optimization: a generalized empirical likelihood approach, Mathematics of Operations Research 46(3), 2021. https://arxiv.org/abs/1610.03425
I-Divergence Geometry of Probability Distributions and Minimization Problems 1: Cyclic I-Projections onto Linear Sets of a Finite Space Converge to the I-Projection onto Their IntersectionResearch Paper
Motivation
Fitting a probability distribution to prescribed margins or moments is a basic task in statistics and information theory. Starting from a reference distribution, one can enforce one constraint at a time by choosing the closest distribution in I-divergence, then cycle through the constraints. In a contingency table this procedure is iterative proportional fitting. A single projection onto the intersection is the desired answer, but each step of the iteration sees only one constraint set. Csiszár's 1975 paper proves that cyclic I-projections converge to the joint I-projection when the underlying set is finite and the constraint sets are linear. This mission formalizes that result together with the geometric statements needed to identify its limit.
Setting
Let (X,X) be a measurable space. A probability distribution (PD) is a probability measure on it. For PDs P and Q, the I-divergenceI(P∥Q) is the Kullback–Leibler divergence: integrate the logarithm of the density of P relative to Q against P, with value +∞ when P is not absolutely continuous with respect to Q or the integral diverges. It takes values in [0,+∞] and vanishes exactly when P=Q. The logarithmic conventions are log0=−∞ and 0⋅(±∞)=0 (Csiszár 1975, (1.1)–(1.3)).
Given a PD R and a set E of PDs that contains at least one P with finite I(P∥R), an I-projectionQ of R onto E minimizes I(P∥R) over P∈E and itself has finite divergence. The variation distance is the L1 distance between the densities of two PDs relative to a common dominating measure. A set of PDs is linear here when every real affine combination of two members that is still a PD also belongs to the set. This includes distributions satisfying fixed linear moment constraints (Csiszár 1975, pp. 147 and 150–151).
For the goal, X is finite. Choose k≥1 linear sets E1,…,Ek, and write E=⋂i=1kEi. Beginning with Q0=R, let Qn be the I-projection of Qn−1 onto Ei when n=mk+i and 1≤i≤k. The common feasible set is assumed nonempty and contains a PD absolutely continuous with respect to R. These assumptions ensure that the intended finite-divergence projection problem is present (Csiszár 1975, Theorem 3.2).
Formalization targets
The goal is the convergence statement of Theorem 3.2:
∀x∈X,Qn({x})⟶Q({x}),Q=projEI(R).
The goal also asserts existence of the cyclic sequence. On finite X, convergence of every point mass is equivalent to convergence in variation distance. The target fixes no rate. Its milestones include existence on variation-closed convex sets (Theorem 2.1), the identity (2.6) and the tangent-hyperplane Lemma 2.1, the Pythagorean characterization and transitivity of I-projections (Theorems 2.2–2.3), the density form under general linear constraints (Theorem 3.1) and the finite-moment exponential-density characterization (Corollary 3.1(A)), and the finite-space identity used in Theorem 3.2's proof. The two displayed identities in that proof are also targets:
They specify the divergence relationships that the eventual convergence theorem must preserve (Csiszár 1975, (3.14)–(3.15)).
Significance
The theorem justifies enforcing finitely many linear distribution constraints one at a time while still obtaining the same I-projection as a simultaneous minimization. It gives a precise limit for the iterative proportional fitting procedure discussed by Csiszár, including cases in which the initial distribution has zero probabilities; strict positivity of R is not required (Csiszár 1975, p. 155). The accompanying identities make the relation between a partial iterate and the final solution explicit. The result was proved in 1975. The work here is to provide machine-checked proofs of that known result and its supporting geometry, while keeping the source's extended-value and boundary conventions visible.
Difficulty
Successive projections minimize divergence over different sets. Minimization for one set by itself does not identify the minimizer over their intersection, and ordinary metric projection facts do not directly apply because I-divergence is asymmetric and can be infinite. The paper's statements need to handle zero densities and feasible distributions at infinite divergence without turning extended-real expressions into default values. On the finite space, convergence of a subsequence is available, but the formal claim must still identify every possible limit as the joint I-projection. These are the mathematical and representation difficulties faced by a complete proof (Csiszár 1975, §§2–3).
Formalization scope
Lean uses Measure X and Mathlib's InformationTheory.klDiv : ℝ≥0∞ for I(P∥Q). A projection is a finite-divergence minimizer over the stated feasible set; no real-valued infimum or implicit arbitrary witness replaces it. Variation distance uses the densities relative to P+Q, which dominates both PDs and gives the value of (1.6). Variation closure is expressed by sequential convergence in this distance. The integral ∫logqRdP is represented in extended reals using positive and negative logarithmic parts and ENNReal.log; the theorem hypotheses keep the indeterminate +∞−(+∞) case out. Density equations are R-almost everywhere, and a claim that Q has an R-density explicitly includes Q≪R.
For moment constraints, every integral is accompanied by integrability. Real affine combinations are tested through their values on measurable sets; the candidate combination must be a PD. The goal assumes a finite carrier with measurable singleton sets and k≥1. Lean indexes the sets by Fin k from zero, so Qs (n+1) is projected onto the set at n % k; this is the paper's rule (3.13) shifted by one. The goal asserts existence of a recursive sequence before speaking about every such sequence, and the required feasible witness has P≪R. These choices rule out an empty cyclic schedule, junk integrals, and a vacuous convergence assertion. Reusable contributions include the variation-distance and I-projection interfaces, their Pythagorean geometry, and the finite-moment density characterization; the mission's main closure remains Theorem 3.2.
Selected references
I. Csiszár, I-Divergence Geometry of Probability Distributions and Minimization Problems, The Annals of Probability 3(1), 146–158 (1975). DOI: 10.1214/aop/1176996454.
Two Moments Suffice for Poisson Approximations: The Chen-Stein Method 2: A Dependent Bernoulli Process Is Within 2(2b₁+2b₂+b₃) of a Poisson Process in Total VariationResearch Paper
Motivation
Many counting problems in probability, combinatorics and statistics ask for the law of the number of occurrences of rare, weakly dependent events: long head runs in coin tossing, matching segments between two DNA sequences, isolated vertices or small subgraphs in a random graph, clusters of points in a scan statistic. Chen's 1975 adaptation of Stein's method gives an explicit error bound for approximating such a count by a Poisson law. Arratia, Goldstein and Gordon (Ann. Probab. 17 (1989) 9–25) recast it in terms of a neighbourhood of dependence for each event. In this form the error bound needs only the first two moments of the indicators whenever each event is independent of the events outside its neighbourhood. The paper's examples (head runs, DNA sequence matching, birthday-type problems) made this form standard in applied probability.
The paper has two main results. Theorem 1 bounds the distance between the law of the total count and a Poisson law; it is essentially contained in Chen (1975). Theorem 2, which the authors describe as new, is a process version. It compares the joint law of all the indicators, that is, where the events occur, with a Poisson process. Theorem 3, a corollary, compares a dependent family of events with an independent family having the same marginal probabilities. This mission formalizes Theorem 2, the finite-dimensional bound it is derived from, the steps of its proof in §6, and Theorem 3.
Setting
Let (Ω,F,P) be a probability space and I an index set. For α∈I let Xα be a Bernoulli random variable, Xα∈{0,1}, with
pα=P(Xα=1)>0,λ=α∈I∑pα∈(0,∞).
For each α fix a set Bα⊆I with α∈Bα, the neighbourhood of dependence of α. Put pαβ=E(XαXβ) and
Roughly, b1 measures the size of the neighbourhoods, b2 the expected number of neighbours of an occurrence, and b3 the dependence between an event and the events outside its neighbourhood. In many applications Xα is independent of σ(Xβ:β∈/Bα), so b3=0.
The dependent Bernoulli process is X=(Xα)α∈I, a random element of Z+I. The Poisson process on I with intensity p(⋅) is Y=(Yα)α∈I with the Yα mutually independent and Yα Poisson with mean pα.
Distances are measured in the paper's total variation norm,
which is twice the usual total variation distance.
Formalization targets
Goal: Theorem 2
∥L(X)−L(Y)∥≤2(2b1+2b2+b3).
The bound has no dependence on λ and no assumption on I beyond countability (which the setting forces).
Milestones, in attack order
TiSih=h (§6, p. 22). For functions on Z+d, the coordinatewise Stein operators (Tif)(j)=jif(j)−λif(j+ei) and
(Sih)(j+ei)=−(λiP(Zi=ji))−1E{h(j1,…,Zi,…,jd)1(Zi≤ji)} satisfy TiSih=h.
Bounds on fi=Si(h−Pih) (§6, p. 22), where Pih averages h over a Poisson(λi) i-th coordinate. For ∥h∥≤1, ∥fi∥<2(1∧1.4λi−1/2) and ∥Δkfi∥<4(1∧1.4λi−1/2).
Display (15) (p. 24).E{(Xα−pα)(f(U+Xβek)−f(U))}≤2∥f∥(pαβ+pαpβ) for any random U.
Displays (13)–(14), the step i=1 (p. 23). With Wj=∑α∈I(j)Xα the block sums of a partition and Z1 an independent Poisson(λ1),
Theorem 3 (p. 12). For an independent Bernoulli process X′ with the same marginals as X, ∥L(X)−L(X′)∥≤2(2b1+2b2+b3)+4∑pα2.
The remark after Theorem 3.∥L(X′)−L(Y)∥≤2∑pα2, so 4∑pα2 in Theorem 3 can be replaced by 2∑pα2.
Significance
The result. Theorem 2 says that when b1, b2, b3 are small, the set of indices at which the dependent events occur is close in law to a Poisson process with the same intensity. The bound covers every event about the locations, not just the total count. It is in the strong total variation norm and needs only moment information when b3=0. Theorem 3 turns this into a decoupling statement: a dependent family of rare events is almost indistinguishable from an independent family with the same marginals. The process bound is the form used when the positions of rare events matter, for example in the distribution of the location of the longest match in sequence comparison and in scan statistics.
Formalizing it. The results are proved in the paper; none is machine-checked. A formal development would give a Lean statement and proof of a Chen–Stein bound with explicit constants, for countable index sets and arbitrary dependence. It would also include the coordinatewise Stein operators on Z+d and the bounds on their solutions, which are reusable for other multivariate Poisson approximations. A companion mission formalizes Theorem 1, including Lemma 1 (the bounds on the one-variable Stein solution) on which milestone 2 rests.
Difficulty
The total variation distance between two laws on Z+I cannot be bounded coordinate by coordinate, because the Xα are dependent. The one-variable Stein equation controls only the law of a single integer-valued statistic. The paper passes through finite-dimensional block sums and replaces the coordinates one at a time. At each replacement the error has to be charged to the terms of b1,b2,b3 indexed by the current block, so that the total over all blocks reproduces 2b1+2b2+b3 without a factor d. Two further points need care. First, the bound ∥Δkf1∥≤2∥f1∥ is the only one available for differences in a coordinate other than the one being replaced; this is why the constants are larger than in Theorem 1. Second, the infinite index set requires a limiting argument from finitely many blocks to the full process.
Formalization scope
The index set is a countable type. The page says "arbitrary index set", but pα>0 and ∑pα<∞ force countability; the assumption also makes X measurable as a map into NI with the product σ-algebra.
The Xα are measurable, N-valued and bounded by 1. pα is P(Xα=1). The standing hypotheses pα>0, ∑pα=λ and λ>0 are explicit.
b1,b2,b3 and sα are [0,∞]-valued, and every bound is an inequality in [0,∞], so a divergent series is never read as 0. The conditional expectation in sα is taken with respect to a σ-algebra generated by measurable maps, hence a genuine sub-σ-algebra.
The norm ∥L(U)−L(V)∥ is twice the published definition MarkovChainCLT.tvDist (supremum over measurable sets of ∣μ(A)−ν(A)∣). Dropping the factor 2 would make the goal twice as strong and false in general.
Y (and X′ in Theorem 3) lives on its own probability space. Mutual independence of the Yα and of the Xα′ is a hypothesis. Without it the law of the process is not determined by the marginals and the statements are false.
Block sums Wj are N-valued tsums, equal to the true sums almost surely. A partition is a surjection I→{1,…,d} (Fin d), so Lean's coordinate 0 is the paper's coordinate 1.
(Sih)(j) is set to 0 when ji=0, as for S in §4. The strict inequalities in milestone 2 use the actual sup norms over Z+d.
Needed infrastructure: product measures and independence on NI, Poisson laws (Mathlib's poissonMeasure), conditional expectation, and a one-variable Stein bound (Lemma 1). Contributions of proofs of any milestone, of the general step i of §6, and of the one-dimensional Lemma 1 are welcome.
Selected references
R. Arratia, L. Goldstein, L. Gordon, Two moments suffice for Poisson approximations: the Chen-Stein method, Ann. Probab. 17(1) (1989) 9–25. https://doi.org/10.1214/aop/1176991491
A. D. Barbour, G. K. Eagleson, Poisson approximation for some statistics based on exchangeable trials, Adv. Appl. Probab. 15(3) (1983) 585–600. https://doi.org/10.2307/1426620
Two Moments Suffice for Poisson Approximations: The Chen-Stein Method 1: Total Variation Bound 2[(b₁+b₂)(1−e^{−λ})/λ + b₃′(1∧1.4λ^{−1/2})] for a Sum of Dependent IndicatorsResearch Paper
Motivation
Counts of rare events often look Poisson even when the events are dependent. For example, a local pattern in a random graph can overlap another copy of the pattern, so the corresponding occurrence indicators are not independent. The useful question is quantitative: how far is the distribution of the total count from a Poisson distribution with the same mean? Arratia, Goldstein and Gordon give a bound in terms of three quantities that can be estimated from neighbourhoods of dependence. Their 1989 paper applies the Chen–Stein method to the count and then to the full point process. This mission concerns the count bound, Theorem 1.
The authors explain that the result is essentially contained in Chen’s earlier work, while their one-variable proof prepares the process result in Theorem 2. The bound remains useful as a precise statement of the dependence conditions under which the Poisson approximation works. The process theorem belongs to the companion mission.
Setting
Let I index Bernoulli indicatorsXα, each taking values in {0,1} on a probability space with law P. Write pα=P(Xα=1)>0, and let
W=α∈I∑Xα,λ=EW=α∈I∑pα∈(0,∞).
For each α, choose a dependence neighbourhoodBα⊆I containing α. The neighbourhoods need not be symmetric, and the theorem imposes no independence condition: dependence on indicators outside Bα is measured directly. Define pαβ=E(XαXβ) and
b1b2=α∑β∈Bα∑pαpβ,=α∑β∈Bαβ=α∑pαβ.
The remaining quantities use conditional expectation. Let Vα=∑β∈/BαXβ, and let Fα be the sigma algebra generated by all Xβ outside Bα. Put
Conditioning on the count Vα retains less information than conditioning on all far indicators, so sα′≤sα. Let Z have the Poisson law with mean λ. The paper defines ∥L(W)−L(Z)∥ as twice the usual supremum over events: 2supA∣P(W∈A)−P(Z∈A)∣.
Formalization targets
Theorem 1: total variation and the zero-count event
The goal is the complete four-clause statement of Theorem 1, including its strict final inequality:
The intermediate targets are the Stein-operator inverse identity, the bound on a telescoping term, display (11) relating the approximation error to b1,b2,b3′, and the two clauses of Lemma 1. The goal keeps the coefficients and both forms of b3 fixed, as the paper states them.
Significance
The result reduces a distributional approximation question to local sums of probabilities and conditional-dependence errors. When b1, b2 and b3 are small, the entire law of the count is close to its Poisson comparison law, and the probability of no occurrence has its own sharper bound. The latter is useful whenever a model asks whether at least one rare event occurs. The result applies without demanding exact independence outside the chosen neighbourhoods; the residual dependence appears in b3.
The paper proves these results. The formalization task is to give the known estimates machine-checked statements and proofs with the constants and probability conventions exposed. Mathlib supplies the Poisson measure and conditional expectation, while the mission adds the paper-specific neighbourhood sums and Stein operators. The formalized theorem can be reused for count approximations in other dependent-indicator models once those models supply bounds on the three error quantities. No machine-checked proof is claimed here: the theorem items are proposed targets with sorry bodies.
Difficulty
A first approximation based only on EW misses overlapping event pairs. Bounding pair dependence through b2 alone also misses dependence between one indicator and the aggregate of far indicators. The authors' third term measures that remaining effect by conditional expectation. The proof must control the Stein solution uniformly while preserving its precise constants; replacing that control with a qualitative bound would not recover Theorem 1. In the countably infinite setting, the sums and conditional expectations also require careful handling of convergence and measurability. The proof of Lemma 1 is attributed in the paper to Barbour and Eagleson; it is a substantive target here rather than an assumed bound.
Formalization scope
The Lean index type is countable. Under the paper's assumptions pα>0 and ∑αpα<∞, only countably many indices can exist, so this representation retains the stated probabilistic setting. Indicators are measurable natural-number-valued functions with values at most one. The parameter λ is a positive real equipped with the exact HasSum statement for the probabilities. The Poisson law is Mathlib's poissonMeasure at λ converted to a nonnegative real parameter.
The sums defining b1,b2,b3,b3′ use extended nonnegative reals, so divergence becomes +∞ rather than the real tsum default zero. The random counts W and Vα use natural-number tsum; their divergent-input default can occur only on a null set under the finite-mean hypotheses and therefore does not change their laws. Measurability of these counts follows from countability and measurability of each indicator. The far-field sigma algebra is generated by the measurable indicators, and the formalization checks that it lies below the ambient sigma algebra, avoiding a default-zero conditional expectation. The paper's total variation norm is exactly 2 * MarkovChainCLT.tvDist, with the factor two retained.
The source writes a strict final inequality without discussing infinite error sums. The Lean statement conditions that single strict clause on b1+b2+b3<∞; otherwise both sides can be infinite and strict comparison is false. The other three clauses allow infinite bounds, as the source does. Lemma 1 fixes the Stein inverse at zero exactly as the paper chooses and uses explicit pointwise sup-norm bounds over all nonnegative integers. Display (11) allows ∣h(k)∣≤1, a strengthening of the displayed ∥h∥=1 case. These choices rule out loss of the norm's factor two, disappearing divergent sums, default-zero mapped measures or conditional expectations, and an unannounced independence assumption.
Selected references
Richard Arratia, Larry Goldstein and Louis Gordon, Two moments suffice for Poisson approximations: the Chen-Stein method, Annals of Probability 17(1), 9–25, 1989. DOI 10.1214/aop/1176991491.
Data-Driven Robust Optimization VI: The Moment Set U^CS Has Support Function μ̂ᵀv + Γ₁‖v‖ + √(1/ε − 1)‖Cv‖, an Upper Bound on the Worst-Case Value at RiskResearch Paper
Motivation
In robust optimization, a constraint is checked against every parameter value in an uncertainty set. This turns uncertainty into a deterministic optimization problem, but the set must be chosen carefully: a large set can make decisions unnecessarily conservative, while a small one can miss likely outcomes. Bertsimas, Gupta and Kallus use data to calibrate sets through statistical confidence regions. Their question is whether feasibility for every parameter in the set protects a decision against a fresh uncertain outcome with a specified probability. This mission treats the part of their construction based on estimated first and second moments. Bertsimas, Gupta and Kallus, §8.1.
The moment region originates in a concentration result attributed in the paper to Shawe-Taylor and Cristianini. That result bounds the distance between sample and population means and covariances when the uncertain vector is supported in a Euclidean ball. Bertsimas, Gupta and Kallus also discuss replacing those analytic thresholds with bootstrap thresholds; they describe the resulting coverage as approximate. The present target concerns the mathematical relation between a fixed moment region and its uncertainty set, leaving the statistical calibration of the thresholds to its cited source. Shawe-Taylor and Cristianini, 2003; Bertsimas, Gupta and Kallus, pp. 24–25.
Setting
Let the uncertain vector u~ take values in Rd. A probability law P belongs to the moment confidence regionPCS when it is supported in the Euclidean ball of radius R, its mean mP is within Γ1 of an estimate μ^, and its covariance SP is within Γ2 of an estimate Σ^ in Frobenius norm. The covariance is SP=EP[u~u~⊤]−mPmP⊤. The thresholds Γ1,Γ2 are nonnegative and can be chosen by either calibration procedure discussed in the paper. Bertsimas, Gupta and Kallus, Theorem 9 and (33).
For a vector v, Value at RiskVaRεP(v) is the smallest threshold t for which P(u~⊤v≤t)≥1−ε. The support function of a set U is δ∗(v∣U)=supu∈Uu⊤v. The authors construct the set
Here 0<ε<1 is the allowed violation probability, I is the identity matrix, and C is a matrix factor of the adjusted covariance. The estimates and C stay fixed while ε varies. Bertsimas, Gupta and Kallus, (34)–(35).
Formalization targets
The first milestone bounds the quantile for every law in the moment region:
The second milestone evaluates the two linear maxima over the Euclidean balls in UεCS and identifies ∥Cv∥2 with the quadratic form above. The goal, the deterministic part of Theorem 10, says the displayed bound equals δ∗(v∣UεCS) for every v, while the set is nonempty, convex and compact. This gives the support-function criterion of Theorem 1 for each law in the region. A companion formalizes Theorem 13(a): the resulting support constraint is separately convex in (v,t) and in ε for 0<ε<3/4. Bertsimas, Gupta and Kallus, Theorems 10 and 13(a).
Significance
The support formula turns a distributional statement about an entire region of probability laws into a deterministic bound on a linear projection. It gives the robust model an explicit quantity to compare with a constraint threshold. The companion convexity result describes which risk levels allow separate convex optimization in the decision variables and the violation probability. Together they explain why the particular set in (35) is useful beyond the fact that it contains plausible uncertain vectors. Bertsimas, Gupta and Kallus, §§8.1 and 9.
The paper proves the mathematical construction and cites statistical results for the region's coverage. In Lean, the published Value-at-Risk and support-function definitions are already available, while this paper's moment region and set (35) need their own definitions. Formalizing the result therefore establishes a reusable interface between moment bounds, quantiles and set support. The theorem statements in this proposal are open proof targets; compiling them checks their types, not their proofs.
Difficulty
A bound on the mean and covariance does not directly bound a high quantile of every projection. The bound must work simultaneously for every probability law in the moment region, including discrete laws and singular covariances. The factor (1−ε)/ε is essential: replacing it by a standard deviation or a Gaussian quantile would change the claim. On the set side, the ordinary norm of a Lean function vector is a sup norm, whereas both balls in (35) are Euclidean. Getting the norm wrong changes the support function. Bertsimas, Gupta and Kallus, (34)–(35).
Formalization scope
Vectors are functions on Fin d, whose coordinates start at zero. enorm and frob explicitly compute the Euclidean and Frobenius norms. The ball-support condition in PCS secures finite first and second moments; no density is assumed. The goal fixes R≥0, Γ1,Γ2≥0, 0<ε<1, and C⊤C=Σ^+Γ2I. This factor relation makes the quadratic form nonnegative; a separate positive-semidefinite assumption on Σ^ is unnecessary. The matrix need not be triangular because (35) and its support depend on C⊤C. The uncertainty set's nonemptiness and compactness appear in the goal so the real support-function supremum cannot take Lean's default value for an empty or unbounded set.
Theorem 10's sampling claim is represented by its deterministic criterion for each P∈PCS. The confidence-region coverage of Theorem 9 is cited, and the bootstrap coverage discussed on p. 25 is approximate; neither is asserted as an exact probability theorem here. Equation (34) prints an equality for a supremum over PCS, yet that region restricts support to a ball, and the page does not establish attainment under that restriction. This mission uses the upper-bound direction needed for Theorem 10 and does not assert the equality or Remark 16's exact equivalence. The scope includes a sharp quantile bound, the exact support formula and the 3/4 convexity range; a definition that merely makes the claim true by construction would miss these targets. Bertsimas, Gupta and Kallus, pp. 24–25 and 29.
Selected references
D. Bertsimas, V. Gupta and N. Kallus, Data-Driven Robust Optimization, arXiv:1401.0212v2, 2014; revised in Mathematical Programming 167 (2018), 235–292. arXiv preprint.
J. Shawe-Taylor and N. Cristianini, Estimating the Moments of a Random Vector with Applications, 2003. University of Southampton ePrint.
G. C. Calafiore and L. El Ghaoui, On Distributionally Robust Chance-Constrained Linear Programs, Journal of Optimization Theory and Applications 130 (2006), 1–22. DOI.
Variance-based Regularization with Convex Objectives III: Localized-Rademacher Risk Bounds for the Robust MinimizerResearch Paper
Why variance-regularized risk bounds
In statistical learning, one picks a function f from a class F to make the population risk E[f] small, with access only to an i.i.d. sample x1,…,xn from an unknown distribution P. Empirical risk minimization replaces E[f] by the empirical mean EPn[f], and its classical guarantees decay like 1/n regardless of how concentrated f is. Bernstein-type inequalities show that the deviation of EPn[f] from E[f] scales with the standard deviation of f, so a procedure that minimizes "empirical risk plus a standard-deviation penalty" can, in principle, achieve faster rates when the variance at the optimum is small (Maurer and Pontil, 2009). The penalized objective is non-convex even when every f is convex in its parameters, which makes it hard to optimize.
J. C. Duchi and H. Namkoong (arXiv:1610.02581v3, 2017) replace the penalty by a distributionally robust objective: the worst-case risk over all reweightings of the sample within a χ2-divergence ball. This objective is convex whenever the losses are, and (Theorem 1 of the paper) it equals the empirical mean plus a standard-deviation penalty up to an error of order 1/n. This mission formalizes the paper's guarantee for the minimizer of that robust objective in terms of localized Rademacher complexities (Section 3.2, Theorem 4), the sharpest of the paper's three generalization analyses. It is the third of four missions on the paper.
Setting
Let P be a probability measure on a measurable space X and x1,…,xn, n≥1, an i.i.d. sample from P with empirical distribution Pn. Let M≥1 and let F be a collection of measurable functions f:X→[0,M] (losses).
The χ2 ball of radius ρ≥0 is the set Pn of weight vectors p∈Rn with pi≥0, ∑ipi=1 and 21∑i(npi−1)2≤ρ; equivalently, the distributions P on the sample with Dϕ(P∥Pn)≤ρ/n for ϕ(t)=21(t−1)2.
The robust risk of f is supP:Dϕ(P∥Pn)≤ρ/nEP[f]=supp∈Pn∑ipif(xi), and a robust minimizerf minimizes it over F.
The empirical Rademacher complexity is Rn(F)=Eε[supf∈Fn1∑iεif(xi)] with i.i.d. uniform signs εi∈{−1,1}, and E[Rn(F)] averages it over the sample.
A function ψ:R+→R+ is sub-root if it is nonnegative, nondecreasing, and r↦ψ(r)/r is nonincreasing on r>0.
The localization inequality (20) asks that, for all r≥0,
ψn(r)≥E[Rn({cf:f∈F,c∈[0,1],E[c2f2]≤r})],
with ψn sub-root, and rn⋆>0 is a point with rn⋆≥ψn(rn⋆).
Formalization targets
Goal: Theorem 4, inequality (23), as its proof establishes it
Let 0<t<n and let ρ satisfy (21): nρ≥8(n45M(t+log⌈logtn⌉)+18rn⋆). With probability at least 1−4e−t, every robust minimizer f satisfies
In attack order: Bousquet's form of Talagrand's inequality (Lemma B.2); the elementary root bound (Lemma D.4); the contraction principle (Lemma D.5, a published theorem); the uniform Bernstein inequality with Rademacher complexity (Lemma D.1); its localized version in terms of rn⋆ (Lemma D.2); localized second-moment bounds (Lemma D.3); the deterministic expansion (10) of Theorem 1,
The bound (23) says that the robust minimizer competes with the best trade-off between risk and standard deviation in the class, and that the complexity of the class enters only through the fixed point rn⋆ of a localized complexity bound. For bounded VC classes rn⋆ is of order ndlog(n/d) (Bartlett, Bousquet and Mendelson, 2005, Corollary 3.7), so when the optimal function has small variance the excess risk is of order ρ/n, faster than the 1/n of uniform covering arguments; and localized complexities apply to classes, such as balls of reproducing kernel Hilbert spaces, whose covering numbers are too large for the covering-number analysis of the paper's Theorem 3 (mission II of this series).
The paper's result is proved, not open. No part of it, and none of the localized-complexity machinery of Bartlett, Bousquet and Mendelson, is formalized in Lean or Mathlib to our knowledge. The mission produces a checked version of the theorem with every constant explicit and, along the way, the localization lemmas D.1–D.3, which are reusable for any localized-complexity analysis. Reading the proof also exposed three arithmetic slips in the printed statements; the mission states what the proof establishes (see Formalization scope).
Difficulty
The obvious route applies a uniform concentration inequality to F and then a Bernstein bound to each f. Talagrand's inequality applied to the whole class gives a deviation governed by the largest variance in the class and by the global complexity E[Rn(F)], which yields only 1/n rates. Obtaining a deviation that scales with each function's own second moment requires peeling the class into shells of comparable second moment and a fixed-point argument on the sub-root bound, with a union bound whose cost appears as log⌈logtn⌉. The two directions of the localized inequalities (population to sample, and sample to population for second moments) must then be combined with the deterministic expansion (10) while keeping the constants explicit. A further subtlety is the self-normalized rescaling f↦r/(E[f2]∨r)f, which differs from the variance normalization of Bartlett et al. and is what makes the bound compatible with the robust objective.
Formalization scope
Lean conventions. The sample is the coordinate map of the product measure Pn on Fin n → X. Distributions on the sample are weight vectors in the χ2 ball; the robust risk is the real supremum over that ball (attained, since the ball is nonempty and compact for n≥1, ρ≥0). Population means and variances are ∫ x, f x ∂P and ProbabilityTheory.variance f P for measurable bounded f; empirical means and variances are normalized by 1/n. The empirical Rademacher complexity is the published UnderstandingML_Rademacher definition evaluated on {(f(x1),…,f(xn))}. Its expectation is a Bochner integral, and every hypothesis that bounds it also asserts that the integrand is integrable: otherwise the integral is 0, (20) would hold for free, and the theorem would be false. Probability bounds are stated for the failure event under Pn (an outer measure when the event is not measurable). The goal speaks about every minimizer of the robust risk, so it is not vacuous when the set of minimizers is empty. The condition rn⋆>0 is part of the page's "root" (and the proof divides by rn⋆); with rn⋆=0 allowed, ψ(r)=r would remove the complexity term from (21). The condition t<n makes log⌈logtn⌉ defined.
Corrections of printed statements, each recorded in the item's docstring and Formalization Note (the milestone texts stay verbatim):
(22) is stated with probability 1−2e−t; the paper prints 1−e−t, and its proof (p. 41) concludes 1−2e−t.
(23) is stated with probability 1−4e−t (printed 1−3e−t; the proof adds two fixed-f events to the two of (22)) and with 45n182ρ (printed 45n91ρ; the proof's step ρ+t≤91ρ/45 multiplies 2Var(f)/n).
Lemma D.3 is stated with the additive term 72M2(1+η)rn⋆+(4(1+η)+314)nM2t and, in the reversed direction, the coefficient 1+1+η1, as its proof yields (printed: nMt(4+37M) and 1+1+ηη), under Theorem 4's standing hypothesis M≥1.
Lemma D.5 is linked to the published contraction lemma UnderstandingML.contraction_lemma, which states it at a fixed sample for nonempty bounded classes and allows a different Lipschitz map per coordinate.
Contributions welcome: proofs of the milestones in any order; Lemma B.2 (Bousquet's inequality) is the deepest single ingredient and is reusable well beyond this mission, as are the peeling Lemma D.1 and the sub-root fixed-point Lemma D.2.
Selected references
J. C. Duchi and H. Namkoong, Variance-based regularization with convex objectives, arXiv:1610.02581v3, 2017. https://arxiv.org/abs/1610.02581
O. Bousquet, A Bennett concentration inequality and its application to suprema of empirical processes, Comptes Rendus Mathématique 334(6), 2002. https://doi.org/10.1016/S1631-073X(02)02292-6
A. Maurer and M. Pontil, Empirical Bernstein bounds and sample variance penalization, COLT 2009. https://arxiv.org/abs/0907.3740
Optimal Best Arm Identification with Fixed Confidence III: δ-PAC Guarantee of Chernoff's Stopping Rule for Bernoulli BanditsResearch Paper
Motivation
In best arm identification with fixed confidence, a learner samples K unknown distributions ("arms") one at a time, and must eventually stop and name the arm with the largest mean, with an error probability at most a prescribed risk δ, while using as few samples as possible. The problem goes back to the sequential design of experiments (Chernoff, 1959; Even-Dar, Mannor and Mansour, 2006) and underlies adaptive A/B testing, clinical trial design and hyperparameter selection.
Any fixed-confidence strategy consists of three parts: a sampling rule, a stopping rule and a decision rule. Garivier and Kaufmann (arXiv:1602.04589, COLT 2016) proposed the Track-and-Stop strategy, the first shown to match the asymptotic lower bound on the expected sample complexity. Its stopping rule is a generalized likelihood ratio (GLR) test, Chernoff's stopping rule. Its correctness, the guarantee that the recommended arm is wrong with probability at most δ, must hold whatever the sampling rule, which is what allows the sampling rule to be tuned freely for efficiency. This mission formalizes that guarantee for Bernoulli arms, Theorem 10 of the paper, with its explicit threshold β(t,δ)=log(2t(K−1)/δ).
Setting
The arms are A={1,…,K}. A Bernoulli bandit model is a mean vector μ=(μ1,…,μK)∈[0,1]K: pulling arm a returns reward 1 with probability μa and 0 otherwise, independently of the past. The class S contains the models with a unique optimal arma∗(μ), i.e. μa∗>μi for all i=a∗.
At round t the learner chooses an arm At as a (possibly randomized) function of the past observations and observes a reward Xt. Write Na(t) for the number of pulls of arm a among the first t rounds, sa(t) for the number of those pulls that returned 1, and μ^a(t)=Na(t)−1∑s≤tXs1{As=a} for the empirical mean. The likelihood of arm a's observations under mean u is pu(XNa(t)a)=usa(t)(1−u)Na(t)−sa(t).
The GLR statistic for "arm a is at least as good as arm b" is
Chernoff's stopping rule with exploration rateβ(t,δ) is
τδ=inf{t≥1:∃a∈A,∀b=a,Za,b(t)>β(t,δ)},
and the decision rule recommends a^τδ∈argmaxaμ^a(τδ).
The Krichevsky–Trofimov (KT) distribution on binary sequences x∈{0,1}n is kt(x)=∫01(πu(1−u))−1pu(x)du, the Bernoulli likelihood mixed over the Beta(1/2,1/2) prior.
Formalization targets
Goal: Theorem 10
For every δ∈(0,1), every sampling strategy, and the threshold β(t,δ)=log(2t(K−1)/δ),
∀μ∈S,Pμ(τδ<∞,a^τδ=a∗)≤δ.
Milestone: Lemma 11 (Willems, Shtarkov and Tjalkens, 1995)
kt is a probability law on {0,1}n, and for n≥1,
x∈{0,1}nsupu∈[0,1]supkt(x)pu(x)≤2n.
Milestone: the pairwise crossing bound of Appendix C.1
With Ta,b=inf{t:Za,b(t)>β(t,δ)}, for all arms with μa<μb,
Pμ(Ta,b<∞)≤K−1δ.
Significance
Theorem 10 decouples correctness from efficiency. Because the guarantee holds for every sampling strategy, any sampling rule, including the C-Tracking and D-Tracking rules of Track-and-Stop, the uniform rule, or a heuristic, inherits δ-correctness as soon as it is paired with Chernoff's stopping rule at this threshold. The asymptotic optimality result of the paper (Theorem 14) then only has to control the sample complexity. The threshold is explicit, with no unspecified constant, in contrast to the deviational threshold of Proposition 12.
The result is proved in the paper, in Appendix C.1, and rests on Lemma 11, which the paper quotes from the universal coding literature without proof. As far as the platform's catalog shows, none of these results is formalized. The platform holds a machine-checkable statement of the analogous result for Gaussian arms with the Lattimore–Szepesvári threshold (BanditAlgorithm.chernoff_stopping_rule_sound, Lemma 33.7 of Bandit Algorithms), which is a different model and a different threshold. Formalizing Theorem 10 adds a proof of Lemma 11 (the KT regret bound, reusable in information theory and universal prediction), the Bernoulli GLR statistic, and a change of measure from the true bandit law to a Bayesian mixture law on the trajectory space.
Difficulty
The obvious approach bounds, for each fixed t, the probability that Za,b(t) exceeds β(t,δ) by a concentration inequality and sums over t. This fails: the sampling strategy is arbitrary and adaptive, so Na(t) and Nb(t) are random and depend on the past rewards, and a fixed-sample-size deviation bound does not apply; a union bound over the possible values of the counts loses more than the threshold allows. The maximum likelihood in the numerator of Za,b is also not a probability density, so the likelihood ratio cannot directly be read as a change of measure. The argument must control the whole trajectory law under an arbitrary randomized policy, and must handle empty samples (an arm never pulled contributes likelihood 1) and the boundary means 0 and 1.
Formalization scope
The formalization is in Lean 4 with Mathlib and reuses the platform's canonical bandit model: StochasticBandit, BanditPolicy (a Markov kernel per round from the observed history to the next arm, so randomized strategies are included), banditTrajMeasure (the law of the infinite trajectory, where coordinate s is round s+1) and IsSoundBAI from BanditTrajectory; bernoulliBandit from bernoulliRelativeEntropy; and only the pull counts trajPullCount and empirical means trajEmpiricalMean from TrackAndStop. The Gaussian GLR and threshold of TrackAndStop are not used.
Conventions committed to:
Arms are Fin K. Bernoulli means range over [0,1], degenerate laws included; the paper's exponential-family mean space is (0,1), so the [0,1] statement implies the paper's.
Za,b(t) is defined as the ratio of the two maxima over [0,1]2, not by the closed form (7), which holds only when μ^a(t)≥μ^b(t). Both maxima are attained and positive.
The stopping rule ranges over t≥1; at t=0 there is no observation and the paper's β(0,δ)=log0 is undefined. τδ=∞ when the rule never fires.
The decision rule is quantified: the goal holds for every recommendation that maximizes the empirical mean at τδ, whatever the tie-breaking.
Probabilities of events are outer measures under the trajectory law; no measurability is assumed.
K≥1 only. For K=1 the statement is trivially true (no suboptimal arm).
Disclosed deviations from the page: Lemma 11's ratio bound is stated for n≥1, since at n=0 the printed bound reads 1≤0; the use of the lemma in Appendix C.1 is unaffected. Appendix C.1 calls the result "Proposition 10" (a slip for Theorem 10) and prints the KT density as 1/πu(1−u) (a slip for 1/(πu(1−u)) of Lemma 11, which is the normalized one); the formalization follows Lemma 11.
A trivializing formalization is ruled out: stating the result for Gaussian arms or with the Lattimore–Szepesvári threshold is the platform's existing Lemma 33.7 and is not Theorem 10, and a free decision rule without the argmax hypothesis would make the claim false rather than faithful.
Contributions welcome: a proof of Lemma 11; a change-of-measure lemma for banditTrajMeasure under a mixture of environments; and the union-bound reduction from the goal to the pairwise claim.
Selected references
A. Garivier, E. Kaufmann, Optimal Best Arm Identification with Fixed Confidence, COLT 2016 (JMLR W&CP 49), arXiv:1602.04589v2, 2016. https://arxiv.org/abs/1602.04589
F. M. J. Willems, Y. M. Shtarkov, T. J. Tjalkens, The context-tree weighting method: basic properties, IEEE Transactions on Information Theory 41(3), 1995. https://doi.org/10.1109/18.382012
R. Krichevsky, V. Trofimov, The performance of universal encoding, IEEE Transactions on Information Theory 27(2), 1981. https://doi.org/10.1109/TIT.1981.1056331
On the Uniform Convergence of Relative Frequencies of Events to Their Probabilities III: Uniform Convergence and the Entropy per ObservationResearch Paper
Motivation
Estimating a probability by the relative frequency of the event in an independent sample is justified for one event by the law of large numbers. Statistics and learning theory need more: the frequencies of a whole class of eventsS must approach their probabilities simultaneously, so that a quantity chosen after looking at the data (the empirical risk minimizer, the empirical distribution function) is still close to its expectation. Glivenko's theorem on the empirical distribution function is the classical instance; empirical risk minimization rests on the same property for the class of loss sets of a model.
Vapnik and Chervonenkis, On the Uniform Convergence of Relative Frequencies of Events to Their Probabilities, Theory Probab. Appl. 16 (1971), treat this question in two parts. The first gives a distribution-free sufficient condition through the growth function (Theorems 1–3). The second, which this mission formalizes, gives a condition that is necessary and sufficient for a fixed distribution: Theorem 4, the entropy criterion.
Timeline. 1933: Glivenko and Cantelli prove uniform convergence for the class of rays {x≤a} on the line. 1968: Vapnik and Chervonenkis announce the results in Dokl. Akad. Nauk SSSR 181. 1971: the full paper appears, with the growth-function bound and the entropy criterion. Later work (Talagrand 1987; Dudley, Giné and Zinn 1991) recasts such criteria as the theory of Glivenko–Cantelli classes.
Setting
Let X be a set carrying a probability measure P, and S a collection of measurable subsets of X (events). A sample of size l is a sequence x1,…,xl of independent draws from P; repetitions are allowed. For A∈S the relative frequencyνA(l) is the fraction of sample terms lying in A, and PA=P(A). The maximal deviation is
π(l)(x1,…,xl)=A∈SsupνA(l)−PA.
The relative frequencies converge in probability to the probabilities uniformly over S when P{π(l)>ε}→0 as l→∞ for every ε>0.
Each A∈S induces in a sample the subsample of terms lying in A. The indexΔS(x1,…,xl) is the number of different subsamples induced by the sets of S; it lies between 0 and 2l. The entropy of S in samples of size l is
HS(l)=Elog2ΔS(x1,…,xl).
For a sample of size 2l, split into halves x1,…,xl and xl+1,…,x2l with relative frequencies νA′ and νA′′, the semi-sample deviation is ρ(l)=supA∈S∣νA′−νA′′∣. Finally Φ(n,r) is defined by the recurrence Φ(n,r)=Φ(n,r−1)+Φ(n−1,r−1), Φ(0,r)=Φ(n,0)=1.
Necessity. Lemma 1 (Sauer–Shelah in sequence form); step 1°, 1−P(C′)≥(1−P(Q))2 with C′={ρ(l)>2ε}; (26), P{ΔS>Φ([ql],l)}→1 when 0<q<41 and qlog2(2e/q)<c; and (29), P{π(l)>ε}→1 when moreover 0<ε<q/7.
Significance
Theorem 4 characterizes uniform convergence for a given distribution exactly, with no gap between the necessary and the sufficient condition. It separates the cases the growth-function bound cannot: a class may have mS(l)=2l for every l (all open subsets of [0,1]) and still satisfy HS(l)/l→0 under a particular P, or fail it. The entropy HS(l) is the distribution-dependent quantity from which later work on Glivenko–Cantelli classes and on consistency of empirical risk minimization proceeds; the 1981 paper of the same authors extends the criterion to classes of functions. The quantitative form (29) states more than the negation of convergence: when the entropy rate is positive, the maximal deviation stays above a fixed ε with probability tending to one.
The result has been proved since 1971; it has not been formalized. The platform holds Sauer–Shelah variants over sets of distinct points and PAC bounds with other constants, but no statement of the VC entropy or of Theorem 4. The mission produces machine-checked statements of the entropy criterion and of its supporting lemmas with the paper's own constants (l≥2/ε2, 2e−ε2l/8, δ=ε2/16, ε<q/7).
Difficulty
The sufficiency half is a variant of the proof of the growth-function bound; its new ingredient is the concentration of l−1log2ΔS (Lemma 4), which needs subadditivity and a law of large numbers over independent blocks of the sample rather than a single mean estimate. The hypergeometric tail estimate behind the permutation bound is omitted in the paper ("a simple but long computation").
Necessity is harder. The obvious attempt, bounding P{π(l)>ε} from below by exhibiting a single bad event, fails: S may be uncountable and no single A deviates with non-vanishing probability. A positive entropy rate has to be converted into a combinatorial statement about typical samples ((26) combines Lemma 4 with an estimate of Φ([ql],l)), and that statement back into a lower bound on a probability over the product measure; the constants q<41 and ε<q/7 must be tracked through both conversions, and the conclusion limP{π(l)>ε}=1 needs the unweakened inequality of step 1°.
Formalization scope
A sample of size l is a function Fin l → X (positions 0,…,l−1) and its law is the product measure Measure.pi (fun _ => P), with P a probability measure. A subsample is a set of positions, so the index counts distinct Finset (Fin l) of the form {i:xi∈A}. The halves of x : Fin (l + l) → X are x ∘ Fin.castAdd l and x ∘ Fin.natAdd l. PA is P.real A; the suprema π(l) and ρ(l) are real suprema over the subtype of S (values in [0,1]; 0 for S=∅). HS(l) is a Bochner integral of Real.logb 2 of the index, and [ql] is ⌊q * l⌋₊. Probabilities are values in [0,∞], except in the inequalities between probabilities (step 1°, the sufficiency estimate), which use Measure.real.
Measurability. The paper assumes, and the statements carry as hypotheses, that the events of S are measurable (p. 264), that π(l) is a random variable (p. 265), that ρ(l) is measurable (p. 268), and that the index is measurable in the sample (p. 273). Each statement carries the ones its proof uses. Without them the Bochner integral defining HS(l) can be the junk value 0 and the equivalence can fail; replacing them by "S countable" would weaken the theorem. The goal is not trivialized by degenerate cases: the equivalence is not vacuous for any class, and S=∅ gives the true instance HS=0, π(l)=0.
Corrections of the printed text. Lemma 2 is printed for l>2/ε2; its proof gives l≥2/ε2, which is stated. On p. 275 Lemma 2 is recalled as "2P(C)≥21P(Q)", meaning P(C)≥21P(Q). On p. 276 the first display carries a stray upper limit "4" on the integral, and the region of integration is printed {log2ΔS≤2δ} where {log2ΔS≤2δl} is meant. The event C′ is defined with ">2ε" (p. 276) but integrated in step 3° as θ(⋅−2ε), which counts "≥2ε"; the strict form is stated, and the estimate of step 3° is itself strict. Step 1° is stated unweakened. Milestone texts are verbatim.
Contributions welcome: a reusable development of the index and its submultiplicativity, the hypergeometric tail bound for sampling without replacement, a block law of large numbers for subadditive functionals of i.i.d. samples, and the permutation-invariance argument for product measures on Fin (l + l) → X.
Selected references
V. N. Vapnik and A. Ya. Chervonenkis, On the uniform convergence of relative frequencies of events to their probabilities, Theory of Probability and Its Applications 16(2) (1971), 264–280. https://doi.org/10.1137/1116025
V. N. Vapnik and A. Ya. Chervonenkis, Necessary and sufficient conditions for the uniform convergence of means to their expectations, Theory of Probability and Its Applications 26(3) (1981), 532–553. https://doi.org/10.1137/1126059
R. M. Dudley, E. Giné and J. Zinn, Uniform and universal Glivenko–Cantelli classes, Journal of Theoretical Probability 4(3) (1991), 485–510. https://doi.org/10.1007/BF01210321
A Distributional Interpretation of Robust Optimization II: Box-Robust Sample Average Optimization Is ConsistentResearch Paper
Why robustify a sampled stochastic program
Many decision problems under uncertainty take the form of a stochastic program: choose a decision v from a feasible set F to maximise the expected utility Ex∼μ[f(v,x)], where the distribution μ of the uncertain parameter x∈Rm is known only through i.i.d. samples x1,…,xn. The standard remedy, sample average approximation, maximises n1∑if(v,xi) instead. Its consistency (convergence of the optimal expected utility of its solutions to the true optimum) is classical, but it needs regularity assumptions of its own, for example those of King and Wets (Stochastics and Stochastic Reports, 1991), cited on p. 98 of the paper; the paper presents its construction as a route to consistency under weaker conditions.
Robust optimization (RO) takes a different route: it protects each sample by an uncertainty set and optimises against the worst point in it. Xu, Caramanis and Mannor (Math. Oper. Res. 2012) show that RO over several overlapping uncertainty sets is equivalent to a distributionally robust stochastic program (their Theorem 2.1, the subject of mission I of this series). Section 3 of the paper uses that equivalence to show that a specific robustification of the sampled problem, with ℓ∞ boxes of shrinking radius around each sample, is consistent under only boundedness and equicontinuity of f. This mission formalizes that result, Theorem 3.1.
Setting
Equip Rm with the sup norm ∥z∥∞=maxk∣zk∣, its Borel σ-algebra and Lebesgue measure dx. The data are:
a set of decisions V and a nonempty feasible setF⊆V;
a utilityf:V×Rm→R, Borel measurable in x for each v;
a true densityh∗ on Rm (nonnegative, ∫h∗dx=1) and i.i.d. samples x1,x2,… with distribution h∗(x)dx;
radiiϵ(n)>0.
For a sample x1,…,xn the boxes are Zi={xi+δ∣∥δ∥∞≤ϵ(n)}, and the box-robust sample objective is
The RO solution v(n) is a maximiser of Jn over F. The equicontinuity modulus of f is
d(ϵ)=v,x,∥δ∥∞≤ϵsup∣f(v,x)−f(v,x+δ)∣.
The proof works with the distribution setPn of probability measures μ with μ(⋃i∈SZi)≥∣S∣/n for every S⊆{1,…,n}, and with the uniform box kernel density estimator
hn is the density of a probability measure in Pn.
Jn(v)≤∫f(v,x)hn(x)dx for every v.
Oscillation over a box: supZif(v,⋅)−infZif(v,⋅)≤d(2ϵ(n)).
Eq. (7): with Mn=C∫∣hn−h∗∣dx, for every v,
Jn(v)−Mn≤∫f(v,x)h∗(x)dx≤Jn(v)+Mn+d(2ϵ(n)).
Strong L1 consistency of the box kernel density estimator: if ϵ(n)→0 and nϵ(n)m→∞, then ∫∣hn−h∗∣dx→0 almost surely.
Milestones 1–4 are deterministic statements about a fixed sample; milestone 5 is the only probabilistic input.
Significance
Theorem 3.1 gives consistency of a tractable robust reformulation of a sampled stochastic program under conditions the paper notes are weaker than those of King and Wets for sampled stochastic programs: f need only be bounded and equicontinuous in x, uniformly in v, and the true distribution need only have a density. It also gives an explicit schedule for the size of the uncertainty set, ϵ(n)→0 with nϵ(n)m→∞, the bandwidth condition of kernel density estimation. Section 4 of the paper applies the same distributional interpretation to regularised learning methods such as the support vector machine and the Lasso.
The result is proved in the paper, with the L1 consistency of kernel density estimators (Devroye 1983; Devroye and Györfi 1985) cited rather than proved. No part of it is formalized in Lean or on this platform as far as a search of the platform found. A complete development would produce, besides Theorem 3.1, a machine-checked strong L1 consistency theorem for kernel density estimators, which is a basic result of nonparametric statistics in its own right.
Difficulty
The deterministic part (milestones 1–4) is measure-theoretic bookkeeping: the kernel integrates to one only because the box is a sup-norm ball of volume (2ϵ)m, and every infimum and supremum must be handled with care, since f need not attain them.
The obstacle is milestone 5. Almost-sure L1 convergence of hn to an arbitrary density h∗, with no continuity or support assumption, does not follow from the strong law of large numbers applied pointwise: hn(x) is an average of n terms whose law changes with n through ϵ(n), and almost-sure convergence at each fixed x does not give convergence of the integral along a single sample path. The theorem needs both a bias estimate valid for every integrable density and a concentration estimate for the random L1 error. Mathlib has Lebesgue differentiation and the strong law, but no kernel density estimator and no such concentration result.
Formalization scope
Rm is Fin m → ℝ, whose Mathlib norm is the sup norm; boxes are Metric.closedBall. The integrals ∫f(v,x)h∗(x)dx are Bochner integrals against Lebesgue measure of integrable integrands.
The samples are a sequence X : ℕ → Ω → Fin m → ℝ on a probability space, independent (iIndepFun) and each with law volume.withDensity h*; x1,x2,… become X 0, X 1, …, and the n-th problem uses the first n. "With probability one" is ∀ᵐ ω ∂P.
The goal quantifies over every selection v(n) of maximisers, with no measurability assumed; a version with one chosen maximiser would be weaker and is ruled out.
Readings and corrections of the printed text:
the kernel argument printed (x−xi)/ϵ on p. 98 is read as (x−xi)/ϵ(n), as the proof on p. 99 writes it;
"maxv,x∣f(v,x)∣≤C" is read as the uniform bound ∣f∣≤C and the "max" in d(ϵ) as a supremum;
"d(ϵ)↓0" is read as d(ϵ)→0 as ϵ↓0;
implicit hypotheses made explicit: F=∅, ϵ(n)>0, measurability of f(v,⋅), h∗ a Lebesgue density;
the monotonicity in "ϵ(n)↓0, nϵ(n)m↑∞" is kept in the goal; milestone 5 uses the limits only, as the paper states it;
the paper's Mn ("there exists {Mn}→0") is made explicit as Mn=C∫∣hn−h∗∣, so Eq. (7) is stated for every sample.
Remark 3.2 and Appendix B (an integrable envelope in place of boundedness) are not part of this mission.
Every real infimum and supremum ranges over a nonempty set of values bounded by C in absolute value, so no statement holds through a junk value; a formalization in which the supremum over F or the box infimum could be vacuous is excluded.
The definitions (boxes, Pn, the kernel, the estimator, Jn, d) live in one definition file. Pn duplicates, with weights 1/n, the distribution set of mission I; the duplication is deliberate because draft missions cannot import each other.
Welcome contributions: the kernel density estimator and its strong L1 consistency as reusable infrastructure, and any of the deterministic milestones.
Selected references
H. Xu, C. Caramanis, S. Mannor, A Distributional Interpretation of Robust Optimization, Mathematics of Operations Research 37(1):95–110, 2012. https://doi.org/10.1287/moor.1110.0531
L. Devroye, The equivalence of weak, strong and complete convergence in L1 for kernel density estimates, Annals of Statistics 11(3):896–904, 1983.
L. Devroye, L. Györfi, Nonparametric Density Estimation: The L1 View, Wiley, 1985.
A. J. King, R. J.-B. Wets, Epi-consistency of convex stochastic programs, Stochastics and Stochastic Reports 34(1), 1991 (reference [22] of the paper).
Learnability, Stability and Uniform Convergence III: For an ERM, Leave-One-Out Stability, Universal Consistency and Universal Generalization Are EquivalentResearch Paper
Motivation
Algorithmic stability asks how much the output of a learning algorithm changes when its training sample is perturbed. Since Devroye and Wagner (IEEE Trans. Inf. Theory 1979) it has served as a route to generalization bounds that does not go through the complexity of the hypothesis class. Bousquet and Elisseeff (JMLR 2002) popularised uniform stability, and Mukherjee, Niyogi, Poggio and Rifkin (Adv. Comput. Math. 2006) showed that for empirical risk minimisation in supervised learning, a leave-one-out type of stability is necessary and sufficient for consistency.
Shalev-Shwartz, Shamir, Srebro and Sridharan (JMLR 11, 2010) study stability in Vapnik's General Learning Setting, where uniform convergence can fail even though the problem is learnable. In Appendix A.2 they compare replace-one and leave-one-out (LOO) stability. For an empirical risk minimiser they prove that LOO stability is equivalent to consistency and to generalization, provided each property holds with one rate for all distributions (Theorem 31, p. 2667). This mission formalizes that theorem and the lemmas of Section 5.3 on which its proof rests.
Timeline:
1979, Devroye–Wagner: leave-one-out estimates for local rules.
2002, Kutin–Niyogi (UAI 2002): a taxonomy of stability notions.
2006, Mukherjee et al.: LOO stability characterises consistency of ERM in supervised learning.
2010, Shalev-Shwartz et al.: in the General Learning Setting, for ERMs, LOO stability, universal consistency and universal generalization are equivalent (Theorem 31). Universally consistent AERMs need not be LOO stable (Example 6).
Setting
A learning problem consists of an instance space Z with a σ-algebra, a nonempty hypothesis class H, and an objective f:H×Z→R with ∣f(h;z)∣≤B for all h,z. For a probability measure D on Z:
the risk is F(h)=Ez∼D[f(h;z)] and the optimal risk is F∗=infhF(h);
for a sample S=(z1,…,zm)∼Dm of m i.i.d. draws, the empirical risk is FS(h)=m1∑if(h;zi), and FS(h^S)=infhFS(h) denotes the minimal empirical risk;
a learning ruleA maps each sample of size m≥1 to a hypothesis A(S). It is an ERM if FS(A(S))=FS(h^S) for every sample. It is an AERM with rate εerm if E[FS(A(S))−FS(h^S)]≤εerm(m);
A is consistent with rate ε if ES∼Dm[F(A(S))−F∗]≤ε(m). It generalizes with rate ε if E[∣F(A(S))−FS(A(S))∣]≤ε(m), and it on-average generalizes if ∣E[F(A(S))−FS(A(S))]∣≤ε(m);
writing S∖i for S with zi removed, A is LOO stable with rate ε (Definition 29) if
Lemma 14: an AERM that on-average generalizes with rate εoag generalizes with rate εoag+2εerm+2B/m.
Lemma 15: under the same hypotheses the rule is consistent with rate εoag+εerm.
Lemma 16 (Main Converse Lemma): in a learnable problem, E∣FS(h^S)−F∗∣≤2εcons(m′)+2B/m+2Bm′2/m for 2≤m′≤m/2.
Lemma 17: Eq. (12), together with an AERM that is consistent, gives generalization with rate εemp+εerm+εcons.
First display of the proof of Theorem 31: a generalizing ERM is LOO stable with rate εgen(m−1).
Second display: a LOO stable ERM on-average generalizes on samples of size m−1 with rate εstable(m)+2B/m.
Significance
Theorem 31 shows that for exact ERMs, LOO stability is not only sufficient but necessary for consistency. It transfers the supervised-learning characterisation of Mukherjee et al. to the General Learning Setting, where uniform convergence is no longer available as an intermediate. The hypothesis is sharp in one direction: Example 6 of the paper gives a universally consistent AERM that is not LOO stable. The equivalence therefore depends on exact minimisation, and an asymptotic minimiser does not suffice.
The lemmas are useful on their own. Lemmas 14 and 15 are the standard bridges between on-average generalization, generalization and consistency. Lemma 16 says that the minimal empirical risk estimates F∗ consistently in every learnable problem, even when no ERM learns. Lemma 16 also underlies Theorem 7, the paper's main characterisation of learnability, which is the subject of mission I of this series.
The results are proved in the paper. As far as is known they have not been formalized in any proof assistant. The platform has the textbook side of this framework (Shalev-Shwartz and Ben-David, Understanding Machine Learning, Chapter 13). Those statements are in Rd and use a replace-one stability notion; they do not cover leave-one-out stability or the General Learning Setting.
Difficulty
The implications between stability and generalization change the sample size: S∖i has m−1 points, so a statement about the rule at size m has to be compared with the rule at size m−1 under the marginal law of the reduced sample. The step from universal consistency to generalization needs Lemma 16. That lemma estimates F∗ from a sample on which the ERM itself may be inconsistent, and it is the only place where universality of the consistency rate is used. Per-distribution consistency of an ERM does not imply generalization (Example 1 of the paper). An argument that fixes D throughout therefore cannot succeed.
Formalization scope
Samples are tuples S:Finm→Z with law Measure.pi (the i.i.d. product), and S∖i is Fin.removeNth i S. A learning rule is a family Am:Zm→H. Its value at m=0 is never used, and LOO stability is required only for m≥2. FS(h^S) is the infimum infhFS(h) and no minimiser is chosen. An ERM is a rule attaining this infimum at every sample. A rate is non-increasing on m≥1 and tends to 0. Universal properties are stated as "there exists ε with IsRate ε such that for every probability measure D …", with the rate chosen before the distribution. The bound B is any bound on ∣f∣; the paper's B is sup∣f∣, and all its rates increase with B.
Measurability is not discussed in the paper. The formalization assumes that each f(h;⋅) is measurable and that the rule is measurable in the sense that (S,z)↦f(Am(S);z) is jointly measurable. Lemmas 14–17 also assume that S↦infhFS(h) is measurable. For a measurable ERM this holds automatically, so Theorem 31 makes no such assumption. Without these assumptions Lean's integral of a non-measurable function is 0 and every rate bound would hold trivially. For the same reason Utility Lemma 13 assumes X,Y integrable. The ERM hypothesis of the goal must not be weakened to an AERM: the statement would then be false (Example 6).
One statement corrects the printed text. In the second display of the proof of Theorem 31 (p. 2668), the chain adds 2B/m and then drops it. The milestone states the bound the argument proves, εstable(m)+2B/m. The rate-free Theorem 31 is unaffected.
The development needs product measures, independence and variance bounds, all available in Mathlib, and the marginals of Measure.pi under removal of a coordinate. The definitions of risks, rules and stability notions can be reused by other stability results. Proofs of any milestone are welcome, and so are alternative proofs of the goal.
Selected references
S. Shalev-Shwartz, O. Shamir, N. Srebro, K. Sridharan, Learnability, Stability and Uniform Convergence, Journal of Machine Learning Research 11 (2010) 2635–2670. https://jmlr.org/papers/v11/shalev-shwartz10a.html
S. Mukherjee, P. Niyogi, T. Poggio, R. Rifkin, Learning theory: stability is sufficient for generalization and necessary and sufficient for consistency of empirical risk minimization, Advances in Computational Mathematics 25 (2006) 161–193. https://doi.org/10.1007/s10444-004-7634-z
S. Kutin, P. Niyogi, Almost-everywhere algorithmic stability and generalization error, UAI 2002. https://arxiv.org/abs/1301.0579
L. Devroye, T. Wagner, Distribution-free performance bounds for potential function rules, IEEE Transactions on Information Theory 25(5) (1979) 601–604. https://doi.org/10.1109/TIT.1979.1056087