Koch, Mean-Field Theory: Hartree-Fock and BCS I: The Brillouin TheoremTextbook
Motivation
The Hartree-Fock method approximates the ground state of an interacting many-electron system by the best single Slater determinant. It is the starting point of essentially all of quantum chemistry and of mean-field theories in condensed-matter physics: post-Hartree-Fock methods (configuration interaction, coupled cluster, perturbation theory) expand around it, and its orbital energies are the standard first estimate of ionization and excitation energies. E. Koch's lecture notes Mean-Field Theory: Hartree-Fock and BCS (Jülich Autumn School on Correlated Electrons, 2016) derive the method entirely within second quantization: Slater determinants are products of creation operators acting on a vacuum, variations are generated by one-body unitaries eiλM^, and the stationarity condition becomes an algebraic statement about matrix elements. The central result of the Hartree-Fock section is the Brillouin theorem: a Slater determinant is stationary exactly when the Hamiltonian does not couple it to its single excitations.
Timeline of the ideas involved: Hartree introduces the self-consistent field (1928); Fock and Slater add exchange through antisymmetrized wave functions (1930); Koopmans relates orbital energies to ionization energies (1934); Brillouin formulates the single-excitation condition (1934); Thouless gives the representation of Slater determinants by exponentials of one-body operators (1960).
Setting
Fix K orthonormal reference orbitals ϕ0,…,ϕK−1; an orbital is a coefficient vector φ∈CK with ⟨φ∣χ⟩=∑μφμχμ. The Fock space has orthonormal basis ∣S⟩, S⊆{0,…,K−1} (the set of occupied orbitals). The creation operatorci† maps ∣S⟩ to (−1)#{j∈S:j>i}∣S∪{i}⟩ if i∈/S and to 0 otherwise; the annihilation operatorci is its adjoint, and for a general orbital cφ†=∑μφμcμ†. The vacuum is ∣0⟩=∣∅⟩.
The Slater determinant of orbitals α1,…,αN is ∣Φ⟩=cαN†⋯cα1†∣0⟩. A one-body operator with matrix M is M^=∑αβMαβcα†cβ. For a hermitian M the operators eiλM^ map Slater determinants to Slater determinants, and the energy functional along such a variation is
the Fock matrix of the determinant with occupied reference orbitals S is Fnm=Tnm+∑m′∈S(Unm′,mm′−Unm′,m′m), with diagonal entries the orbital energiesεm.
It asserts no specific Hamiltonian, no particle number and no basis choice; it is the basis-independent form of the source's condition (63).
Milestones
The milestone list follows the source's own steps: the anticommutation relations (15); the overlap formula (7)/(46); the action of cφ, cφ† on a determinant (42); the one-body density matrix (43) and Wick's theorem (45); the transformation of vacuum and creators under eiλM^ (57), (59); the first-order variation (61)–(62). For the two-body Hamiltonian it adds the Fock-matrix form of the Brillouin condition (64), the Hartree-Fock energy, Koopmans' theorem (66) and the electron-hole excitation energy (67).
Significance
The Brillouin theorem turns the nonlinear variational problem over all Slater determinants into a condition on finitely many matrix elements; for a two-body Hamiltonian it says that the occupied–virtual block of the Fock matrix vanishes, which is the self-consistency condition solved by every Hartree-Fock code. Koopmans' theorem and the particle-hole formula give the physical interpretation of the orbital energies.
All results are classical and proved in the source and in standard textbooks. What this mission adds is a machine-checked account of second quantization on a finite orbital basis: the anticommutation relations, determinant overlaps and Wick's theorem for Slater determinants are reusable for any later formalization of configuration interaction, coupled cluster or BCS theory.
Difficulty
The source's arguments are short manipulations of operator identities, but each hides bookkeeping that is easy to get wrong: fermionic signs when operators are reordered, the identification of Slater determinants with ordered products of creators, and the Laplace expansion behind Wick's theorem. The variational step requires differentiating a matrix exponential on Fock space and identifying the derivative with a commutator. The direction from the Brillouin condition back to stationarity needs the hermiticity of H^ and a decomposition of an arbitrary hermitian M into occupied–occupied, virtual–virtual and occupied–virtual blocks; the first two blocks act on ∣Φ⟩ only by a scalar. The Fock-matrix milestones additionally need the exchange symmetry Unn′,mm′=Un′n,m′m of two-body matrix elements stated in Sec. 2.3.2; without it the stated formulas fail.
Formalization scope
Fock space over K orbitals is represented concretely: vectors are functions on Finset (Fin K) and operators are complex matrices indexed by Finset (Fin K). Creators carry the sign (−1)#{j∈S:j>i}, so ordered products of creators of increasing orbitals give +∣S⟩. All quantities are complex; the exponential is NormedSpace.exp; stationarity is HasDerivAt … 0 0 for a function R→C. Orthonormality of the occupied orbitals is an explicit hypothesis wherever the source assumes it. The source works with a possibly infinite orbital basis; here the basis is finite, as in the variational setting of its Sec. 3.
The equivalence in the goal cannot be satisfied vacuously: hermiticity of H^ and orthonormality of the orbitals are both satisfiable, and both sides quantify over all admissible M, respectively all occupied and virtual orbitals.
Two printed formulas are not taken verbatim: Eq. (60) lacks the minus sign in the exponent and is omitted, and Eq. (61) prints the first-order commutator in the opposite order; the milestone records the correct derivative i⟨Φ∣[M^,H^]∣Φ⟩, which leaves (62) unchanged.
Contributions welcome: a general API for products of creation and annihilation operators in this model (sign lemmas, normal ordering), which all milestones share.
Selected references
E. Koch, Mean-Field Theory: Hartree-Fock and BCS, in E. Pavarini, E. Koch, J. van den Brink, G. Sawatzky (eds.), Quantum Materials: Experiments and Theory, Modeling and Simulation Vol. 6, Forschungszentrum Jülich, 2016. http://www.cond-mat.de/events/correl16
A. Szabo and N. S. Ostlund, Modern Quantum Chemistry: Introduction to Advanced Electronic Structure Theory, Dover, 1996.
T. Koopmans, Über die Zuordnung von Wellenfunktionen und Eigenwerten zu den einzelnen Elektronen eines Atoms, Physica 1 (1934) 104–113.
Zeroth Law of Thermodynamics: Thermal Equilibrium and the Existence of TemperatureTextbook
Motivation
The zeroth law of thermodynamics is the principle that makes temperature a meaningful notion. In the formulation of Fowler and Guggenheim, and in the standard textbooks of Guggenheim, Buchdahl and Bailyn, it states: if two systems are both in thermal equilibrium with a third system, then they are in thermal equilibrium with each other. It was named by R. H. Fowler in the 1930s, after the first, second and third laws were already established, because it is logically prior to them: it is what justifies the use of thermometers and the assignment of a single "temperature" to each equilibrated system.
Mathematically, the content of the law is a statement about a binary relation. Together with the convention that each system is in equilibrium with itself, it turns thermal equilibrium into an equivalence relation, and an equivalence relation is exactly what is needed to "tag" every system with a label (an empirical temperature) so that two systems are in equilibrium precisely when their labels agree. This mission formalizes that chain of reasoning as presented in the Wikipedia article Zeroth law of thermodynamics.
Setting
Let S be a set (a type) whose elements are thermodynamic systems, each in its own state of internal equilibrium, and let TE be a binary relation on S; TE(A,B) reads "A is in thermal equilibrium with B". No further structure is assumed.
The zeroth law (right-Euclidean form) is the property
∀A,B,C∈S,TE(A,C)∧TE(B,C)⟹TE(A,B).
Planck's form (left-Euclidean form) is the property
∀A,B,C∈S,TE(C,A)∧TE(C,B)⟹TE(A,B).
Reflexivity is the convention TE(A,A) for all A.
A map t:S→T into any set T is an empirical temperature for TE if
∀A,B∈S,TE(A,B)⟺t(A)=t(B).
Formalization targets
Goal: existence of temperature
(∀A,TE(A,A))∧zeroth law⟹∃T,∃t:S→T,t is an empirical temperature for TE.
This is the "existence of temperature" postulate of Fowler and Guggenheim: the condition for thermal equilibrium is equality of a single-valued function of the state. The labelling set T is left arbitrary, as in the source ("the labeling may be quite arbitrary").
Milestones
Reflexivity + zeroth law ⇒TE is an equivalence relation.
Reflexivity + Planck's form ⇒TE is an equivalence relation.
Under reflexivity, the zeroth law and Planck's form are equivalent.
Consequence: symmetry of thermal equilibrium.
Consequence: transitivity of thermal equilibrium.
A reflexive, transitive relation need not be an equivalence relation.
An equivalence relation partitions the systems into classes of mutual equilibrium.
An equivalence relation admits an empirical-temperature tagging.
Significance
The result is the logical foundation of thermometry: it is what allows any one system to serve as a thermometer for all others, and it underlies every empirical temperature scale and, via the second law, the absolute scale. The statements here are elementary and are known; the value of the mission is a clean, reusable formal vocabulary for thermal equilibrium (the two Euclidean forms of the law and the notion of an empirical temperature) on which formalizations of later parts of axiomatic thermodynamics can build.
Difficulty
None of the steps is deep. The point that needs care is that the zeroth law alone does not give an equivalence relation: reflexivity is an additional convention, and the source stresses that a reflexive and transitive relation is not automatically symmetric. Each milestone therefore states its reflexivity hypothesis explicitly.
Formalization scope
Systems form an arbitrary type S (possibly empty), and thermal equilibrium is an arbitrary relation TE : S → S → Prop. Equivalence relations are Lean's Equivalence; partitions use Mathlib's Setoid.IsPartition. The labelling type of an empirical temperature lives in the same universe as S. The richer structure of real-valued temperature (ordering into "hotter" and "colder", continuity) is explicitly not part of the zeroth law according to the source and is out of scope. Definitions ZerothLaw, ZerothLawPlanck, IsEmpiricalTemperature are shared by all statements, in the namespace ZerothLawThermo.
R. Fowler, E. A. Guggenheim, Statistical Thermodynamics, Cambridge University Press, 1939 (corrected 1965), p. 56.
E. H. Lieb, J. Yngvason, The physics and mathematics of the second law of thermodynamics, Physics Reports 310 (1999) 1–96. https://arxiv.org/abs/cond-mat/9708200
Classical Conservation Laws: Momentum, Energy and MassTextbook
Motivation
The conservation of momentum, of mechanical energy and of mass are the three bookkeeping laws on which elementary Newtonian mechanics and continuum mechanics rest. In Newtonian mechanics each of them is not an extra postulate but a theorem: momentum conservation follows from Newton's second and third laws, conservation of mechanical energy follows from Newton's second law when the forces are derived from a potential, and conservation of total mass in a fluid follows from the continuity equation. This mission asks for machine-checked proofs of these classical derivations, in the form in which they appear in the encyclopedia articles Momentum, Conservation of energy and Conservation of mass.
Historically, Huygens (1669) listed both the total momentum and the total vis viva ∑imivi2 as invariants of collisions; Leibniz (1676–1689) promoted the vis viva; the distinction between elastic and inelastic collisions and the general principle of energy conservation were clarified only in the 19th century. Lomonosov (1756) and Lavoisier (1773) established conservation of mass in chemical reactions; its continuum form is the continuity equation of fluid dynamics.
Setting
All motion takes place in Euclidean space Rd (any dimension d; d=3 is the physical case), with the standard inner product ⟨⋅,⋅⟩ and norm ∥⋅∥.
A system of N particles has masses mi>0, positions xi(t), velocities vi(t)=x˙i(t) and accelerations ai(t)=v˙i(t), for i=1,…,N and all times t∈R.
Newton's second law: miai(t) equals the net force on particle i.
Newton's third law for internal forces: the force Fij exerted on i by j satisfies Fij=−Fji.
The total momentum is P(t)=∑imivi(t), the centre of mass is R(t)=M−1∑imixi(t) with M=∑imi, the kinetic energy is ∑i21mi∥vi∥2.
A pair potential is a function φij=φji of the distance rij=∥xi−xj∥; the force it produces on i is −φij′(rij)(xi−xj)/rij (e.g. gravity, φij(r)=−Gmimj/r).
A fluid has density ρ(t,x) and velocity field u(t,x); the continuity equation is ∂tρ+∇⋅(ρu)=0, and the total mass is ∫Rnρ(t,x)dx.
Target
The goal theorem is the conservation of both total momentum and total mechanical energy for an isolated N-body system interacting through symmetric pair potentials, along any collision-free trajectory:
P(t)=P(s),i∑21mi∥vi(t)∥2+i<j∑φij(∥xi(t)−xj(t)∥)=the same expression at s.
Milestones:
Conservation of momentum under Newton's third law (any internal forces).
Uniform rectilinear motion of the centre of mass, with velocity P/M.
Conservation of mechanical energy for a particle in a conservative force field F=−∇V.
The work–energy theorem: change in kinetic energy equals the work ∫⟨F,v⟩dt.
Head-on elastic collision of two bodies: the final velocities are either the initial ones or the classical formulas.
Perfectly inelastic collision: common final velocity and the kinetic energy lost, 21mA+mBmAmB(uA−uB)2.
Conservation of total mass for a compactly supported C1 solution of the continuity equation.
Significance
These are the textbook consequences of Newton's laws used throughout mechanics, astronomy and engineering: momentum conservation determines the outcome of collisions and explosions, energy conservation gives first integrals that reduce equations of motion, and mass conservation is the first of the Euler equations of fluid dynamics. The results themselves are classical and fully known; the work in this mission is formalization. The platform already contains specialised instances (for example a two-body centre-of-mass statement and energy conservation in the Kepler problem); this mission states the general N-body, arbitrary-dimension versions and the continuum mass law, which can be reused by later mechanics missions.
Difficulty
The algebraic milestones (collisions) are elementary. The analytic ones require care: energy conservation needs the chain rule for V∘x and for the norm ∥xi−xj∥, which is differentiable only away from collisions; the work–energy theorem needs the fundamental theorem of calculus for a continuous integrand; mass conservation needs differentiation under the integral sign and the vanishing of the integral of the divergence of a compactly supported C1 vector field, a form of the divergence theorem that must be assembled from one-dimensional integration by parts.
Formalization scope
Space is EuclideanSpace ℝ (Fin d); time is ℝ; trajectories are defined for all times, and derivatives are given explicitly through HasDerivAt hypotheses (x˙i=vi, v˙i=ai) rather than through deriv.
Masses are strictly positive. The N-body goal assumes that no two particles ever coincide (collision-free trajectory), so that the pair forces are defined; pair potentials are only required to be differentiable on (0,∞).
No definitions are introduced; every quantity is written out explicitly in each statement.
In milestone 5 the trivial outcome (velocities unchanged) is kept as an explicit alternative instead of being excluded by a hypothesis, so the statement is never vacuous.
In milestone 7 the continuity equation is written with partial derivatives deriv / fderiv, the density and the velocity field are jointly C1 in (t,x), and the density vanishes outside a fixed ball for all times. The integral is the Lebesgue integral on Rn.
Convergence Analysis of Sampling-Based Decomposition Methods for Risk-Averse Multistage Stochastic Convex Programs 1: Almost Sure Convergence of the Risk-Averse Sampling-Based Decomposition AlgorithmResearch Paper
Motivation
Multistage stochastic programs model sequential decisions under uncertainty: hydro-thermal scheduling, portfolio management and capacity planning are standard examples. Their dynamic programming equations involve recourse functions (cost-to-go functions) of the decision history, which cannot be computed exactly. Stochastic Dual Dynamic Programming (SDDP), introduced by Pereira and Pinto in 1991, approximates each recourse function from below by a maximum of affine cuts, built at trial points generated by simulating sampled scenarios. SDDP is the method of choice in the energy industry for long-horizon stochastic planning.
Two extensions motivate this mission. Risk-averse planning replaces the expectation at each stage by a coherent risk measure (for instance the Conditional Value-at-Risk), and many applications have convex but nonlinear stage problems. Guigues (2016) proves that the risk-averse sampling algorithm for convex stage problems converges almost surely.
Timeline.
1991: Pereira and Pinto introduce SDDP for linear multistage problems.
2008: Philpott and Guan prove almost sure finite convergence of SDDP-type methods for linear problems with finitely many scenarios.
2011: Shapiro analyses the sample-average SDDP method and formulates its risk-averse variant with nested conditional risk measures; 2013: Philpott, de Matos and Finardi treat SDDP with coherent risk measures in dual form.
2015: Girardeau, Leclère and Philpott prove almost sure (asymptotic) convergence of sampling-based decomposition methods for risk-neutral multistage stochastic convex programs.
2016: Guigues extends that analysis to risk-averse problems in dual form, with nonlinear constraints and interstage independent processes (arXiv:1408.4439, SIAM J. Optim.); the convergence theorem is Theorem 4.1.
Setting
There are T stages with decisions xt∈Rn and a given x0. A history x1:t=(x1,…,xt) is identified with the vector [x1;…;xt]∈Rnt with its Euclidean norm. The random data ξt are interstage independent (H1). For t≥2, ξt takes M values ξt,1,…,ξt,M with probabilities Φt,j>0, and ξ1 is deterministic. A realization ξt,j consists of a cost ft(⋅,Ψt,j) with values in R∪{+∞}, convex constraints gt(x0,⋅,Ψt,j)≤0 and linear constraints ∑τ=0tAt,τ,jxτ=bt,j. Together with a compact set Xt, they define the feasible set Xt(x0:t−1,ξt,j).
The risk measure of stage t is given in dual form,
The first-stage value is Q1(x0)=Q1(x0,ξ1). Assumption (H2) requires convexity, lower semicontinuity and properness of the data, and fixes an ε>0 such that the costs are finite and the feasible sets nonempty on the ε-fattening[X1×⋯×Xt−1]ε. It also asks for a relative-interior point of the nonlinear constraints.
Algorithm 1 keeps cutting-plane models Qtk, starting from Qt0≡−∞. At iteration k it computes decisions xmk at every node m of the scenario tree, by solving the stage problems with Qt+1k−1 in place of Qt+1. It then samples one scenario n1k,…,nTk, with indices ξtk satisfying the independence assumption (H3), and adds at each sampled node one cut
Here pk attains the supremum in ρt, and πk,m is a subgradient of Qtk−1(⋅,ξm).
Formalization targets
Goal: Theorem 4.1 (p. 12)
Almost surely, for t=2,…,T+1 and every node n of stage t−1,
k→∞limQt(x[n]k)−Qtk(x[n]k)=0.
Almost surely, moreover, Q1k(x0,ξ1)→Q1(x0), and every accumulation point of the first-stage decisions (x1k) is an optimal solution of the first-stage problem.
Milestones
Proposition 2.2: subgradient bound ∥s∥≤(M0−m0)/ε for the value function of a convex program.
Proposition 3.1: Qt is convex, finite and continuous on [X1×⋯×Xt−1]ε^, 0<ε^<ε.
Lemma 3.2: valid cuts Qtk≤Qt, bounded cut coefficients and slopes, and Lipschitz models for k≥T−t+1.
Lemma 3.4: Qtk(x[nt−1k]k)=θtk.
Lemma 3.5: a uniform Lipschitz constant L for the models.
(4.26), (4.28), (4.29), (4.31): the steps of the proof of Theorem 4.1. These are the error propagation along the tree, the limit along the iterations through a node, the almost sure limit along the other iterations, and the first-stage bound.
Significance
Theorem 4.1 guarantees that the algorithm's lower bound Q1k(x0,ξ1) converges to the true risk-averse optimal value, and that its first-stage decisions approach optimal ones. It covers nonlinear convex stages, where finite convergence arguments for polyhedral problems do not apply. It also covers every risk measure with a dual representation, including CV@R and its combinations with expectation. Practitioners rely on this to justify stopping rules based on the lower bound.
The result is proved on paper. To our knowledge neither Theorem 4.1 nor its risk-neutral counterpart (Girardeau–Leclère–Philpott, Theorem 3.1) has been machine-checked; the risk-neutral statements are posed, unproved, on this platform. A formalization would check a proof that combines convex analysis (value functions of convex programs, subgradient bounds, Lipschitz continuity on fattenings), cutting-plane bookkeeping and a probabilistic argument (strong law of large numbers along a predictable subsequence).
Difficulty
The cuts are built only along sampled scenarios, so at a given node the approximation is refined only at the iterations whose scenario passes through it. The obvious induction argument controls the error Qt−Qtk only along those iterations. Extending it to all iterations is the probabilistic core (4.29). It needs the samples to be independent of everything the algorithm has computed so far, and it needs a strong law of large numbers along the subsequence of iterations at which the error is still large. A second difficulty is passing from the current model Qt+1k to the previous one Qt+1k−1. This needs uniform Lipschitz bounds on the models (Lemmas 3.2, 3.5), which in turn rest on the fattening in (H2) and on the subgradient bound of Proposition 2.2.
Formalization scope
Histories and norms. Histories are L2 products of copies of Rn (PiLp 2), so fattenings, inner products and Lipschitz constants use the Euclidean norm on Rn(t−1). Fattenings are closed thickenings.
Extended reals. Values are in EReal, infima are +∞ on empty feasible sets, and weights pjΦt,j are real numbers (with 0⋅(±∞)=0). Limits of gaps are taken in EReal, so that convergence to 0 forces the gaps to become finite.
Data and indices. The recourse functions are constructed by the backward recursion from the data. The scenario tree is the product tree indexed by histories of realization indices, so (H1) is built into the model. Stage 1 uses the data of the first realization index.
Runs. A run is pinned to fixed deterministic choice rules (minimizers, maximizing pk, subgradients), so it uses only present and past samples. The goal holds for every choice of rules.
Departures from the printed text, disclosed in the items.
The cut slope πk,m is any subgradient of Qtk−1(⋅,ξm). The printed formula on p. 9 uses a partial subgradient of ft, which is not a subgradient when ft is nonsmooth, and the proof only uses the subgradient property.
Pt=∅ is assumed; it is implicit, because ρt is a real-valued coherent risk measure.
In Proposition 2.2, M0 is an extended-real supremum. The proof's claim that M0 is finite does not follow from lower semicontinuity.
Lemma 3.2's vacuous "almost surely" is dropped.
One ε serves all stages in (H2).
Ruled out. A formalization in which the decisions or cuts ignore the models, or in which Pt=∅ or every stage value is +∞, would make the limits trivial. The decisions must minimize against Qt+1k−1, the cut must use the attained supremum, and the companion item run_exists shows that under (H2), with closed Pt, rules producing a run exist for every sample path.
Infrastructure and contributions. A complete development needs value functions of parametric convex programs, subgradient bounds for convex functions on fattenings, Lipschitz continuity of finite maxima of affine functions, and a strong law of large numbers along predictably selected subsequences (Lemma A.3 of Girardeau–Leclère–Philpott). The last two are reusable well beyond this mission. Contributions to any milestone, or to these general lemmas, are welcome.
Selected references
V. Guigues, Convergence analysis of sampling-based decomposition methods for risk-averse multistage stochastic convex programs, SIAM J. Optim. 26(4), 2016; preprint arXiv:1408.4439v4. https://arxiv.org/abs/1408.4439
P. Girardeau, V. Leclère, A. B. Philpott, On the convergence of decomposition methods for multistage stochastic convex programs, Math. Oper. Res. 40(1), 2015. https://doi.org/10.1287/moor.2014.0664
M. V. F. Pereira, L. M. V. G. Pinto, Multi-stage stochastic optimization applied to energy planning, Math. Program. 52, 1991. https://doi.org/10.1007/BF01582895
A. B. Philpott, Z. Guan, On the convergence of stochastic dual dynamic programming and related methods, Oper. Res. Lett. 36(4), 2008. https://doi.org/10.1016/j.orl.2008.01.013
A. B. Philpott, V. L. de Matos, E. Finardi, On solving multistage stochastic programs with coherent risk measures, Oper. Res. 61(4), 2013. https://doi.org/10.1287/opre.2013.1175
Stochastic Dual Dynamic Integer Programming 1: With Valid, Tight and Finite Cuts, Stochastic Nested Decomposition Finds an Optimal Solution in Finitely Many Iterations with Probability OneResearch Paper
Motivation
Multistage stochastic programs model decisions taken over time while uncertain data are revealed: generation scheduling in hydro-thermal power systems, capacity expansion, unit commitment, portfolio management. When the uncertainty is represented by a finite scenario tree, the problem becomes one very large deterministic program, and decomposition algorithms solve it stage by stage. For linear problems the standard methods are nested Benders decomposition and its sampling variant, stochastic dual dynamic programming (SDDP), introduced by Pereira and Pinto (1991). Both rely on the convexity of the value functions, which they approximate from below by linear cuts.
Many applications need integer decisions (on/off status of generators, investment choices), and integer variables destroy convexity. Zou, Ahmed and Sun (Math. Program. 175 (2019) 461–502) observed that when the state variables passed between stages are binary, exact convex polyhedral representations still exist on the binary points. They proposed stochastic nested decomposition (SND) and its stage-wise independent special case SDDiP, and identified three properties of cuts (valid, tight, finite) under which the algorithms converge. This mission formalizes that convergence theorem, Theorem 2 of the paper.
Timeline. Birge (1985) gave nested decomposition for multistage linear programs; Pereira and Pinto (1991) introduced SDDP. Philpott and Guan (2008) proved almost sure finite convergence of SDDP-type methods for linear problems, and Girardeau, Leclère and Philpott (2015) extended convergence to convex problems. Zou, Ahmed and Sun (2019) proved finite convergence with probability one for mixed integer problems with binary states and abstract valid, tight and finite cuts, and showed that their Lagrangian cuts have the first two properties.
Setting
Let T be a scenario tree with stages 1,…,T, root 1, parent map a(n) and children C(n). The nodes of the last stage are the scenarios. Node probabilities satisfy pn>0, p1=1, and pn=∑m∈C(n)pm before the last stage, and qnm=pm/pn. Each node has a linear cost fn(xn,yn) and a nonempty compact mixed integer polyhedral set Xn (assumption (A1)). The state xn∈{0,1}d is binary, the local variables yn are general, and the root's parent state xˉ0 is fixed. The problem in local-copy form (2.1) is
Its value functions satisfy the recursion (2.3): Qn(xa(n))=min{fn(xn,yn)+Qn(xn)} over the nodal feasible set, with the expected cost-to-go functionQn(x)=∑m∈C(n)qnmQm(x).
The SND algorithm keeps an under-approximation ψni of each Qn: the maximum of a lower bound Ln and the aggregated cuts ∑m∈C(n)qnm(vmℓ+(πmℓ)⊤x) collected so far (3.2). Each iteration i samples M scenarios with replacement. In the forward step it solves the nodal problems Pni(xa(n)i,ψni) from the root down, which yields the forward tree solution {(xni,yni)} of (3.6). In the backward step, at every sampled node it generates one cut per child at the state xni and adds their aggregate to ψn. Cuts are valid if Qm(x)≥vmi+(πmi)⊤x on {0,1}d (3.4). They are tight if they equal the value Qmi(xni,ψmi+1) of the child's updated nodal problem at xni (3.5). They are finite if only finitely many distinct cuts occur. Assumption (A3) requires the nodal solver to return the same optimal solution whenever it is given the same problem.
Formalization targets
Goal: Theorem 2 (p. 474)
With sampling with replacement, valid, tight and finite cuts, and a solver satisfying (A3), the following holds with probability one:
∃i0∀i≥i0:{(xni,yni)}n∈Tis an optimal solution of (2.1).
Milestones, in the order the proof uses them
Valid cuts give under-approximations, ψni≤Qn and Qni≤Qn (proof of Claim 1, p. 475).
Claim 1: if ψni(xni)=Qn(xni) for all n, the forward solution is optimal for (2.1) (p. 475).
With finitely many possible cuts, the approximations {ψni} change only in finitely many iterations (pp. 474–475).
(3.8a)–(3.8f): a sampled node whose children are exact becomes exact after its backward step (p. 476).
Under sampling with replacement, every scenario is sampled in infinitely many iterations, almost surely (p. 476).
Claim 2: almost surely, no infinite block of unchanged approximations has a non-optimal forward solution (p. 475).
Significance
Theorem 2 separates the convergence of nested decomposition from the choice of cuts. Any cut family with the three properties yields an exact algorithm for multistage stochastic integer programs with binary states. The paper verifies the properties for integer optimality cuts and, through its Theorem 3, shows that Lagrangian cuts from the local-copy reformulation are valid and tight. The convergence of SDDiP, the variant used in computations, follows from the same theorem, and binary expansion of general integer states extends the reach to mixed integer state spaces.
The result is proved in the paper; no machine-checked proof exists. A formal development would turn its informal points into checked statements: that the minima are attained, that the DP recursion is equivalent to the extensive form, and that the finiteness of cuts is global. It would also supply a reusable framework (scenario trees with node probabilities, cut-based approximations, sampled runs) for the convergence theory of SDDP-type methods.
Difficulty
No single step is deep; the difficulty is the interaction of the pieces. A tempting argument says the approximations stop changing, so the algorithm stops at an optimum. But a stalled run need not be optimal: if a node at which ψn is inexact is never sampled again, nothing changes and the forward solution stays suboptimal. The proof must therefore combine three things: the deterministic finiteness of changes, an almost sure statement about sampling, and the exactness chain (3.8). That chain depends on tightness with respect to the updated approximation of the child, and it fails if tightness refers to the approximation from before the backward step. The equivalence between optimality for the DP recursion and for the extensive form (2.1), used without proof in Claim 1, also requires a backward induction over the tree.
Formalization scope
The tree is the platform definition StochasticProg.Multistage.Tree H, with stage t of the paper equal to stage = t − 1. Binary vectors are Fin d → Bool, embedded in Rd. The copy variable zn is eliminated through zn=xa(n). Minima are written as infima over sets that the standing assumptions make nonempty, bounded below and attained. Lean iterations are numbered from 0, and the run is infinite (stopping criteria and bounds play no role).
Readings of informal words. "Optimal solution of (2.1)" means a feasible tree solution of least cost ∑npnfn among all feasible tree solutions. "After a finite number of iterations" means from some iteration on, in every iteration (∀ᶠ i in atTop). "With probability one" refers to a probability space carrying independent draws, M≥1 per iteration, each with law {pn:n∈ST}. "Finite" cuts means one finite set for the whole run, as the proof uses it, not a different finite set per iteration. (A3) means the solver is a function of the node, the parent state and the approximation, and returns an optimal solution.
Added hypotheses, which the paper uses without stating them: pn>0; every nodal problem is feasible for every binary parent state, which replaces (A2) (not used by Theorem 2); and the lower bounds under-estimate, Ln≤Qn, which is Algorithm 1's "initial under-approximation".
Trivializing formalizations are ruled out: tightness refers to the child's approximation after its own update, optimality is for the true extensive form and not relative to ψ, and the probability statement is over independent sampling, not over a fixed sample sequence assumed to visit every scenario.
Contributions welcome: the attainment lemmas for nodal minima, the DP/extensive-form equivalence on trees, and the second Borel–Cantelli argument for repeated sampling. All of these are reusable for other SDDP-type convergence results.
M. V. F. Pereira, L. M. V. G. Pinto, Multi-stage stochastic optimization applied to energy planning, Math. Program. 52 (1991) 359–375. https://doi.org/10.1007/BF01582895
A. B. Philpott, Z. Guan, On the convergence of stochastic dual dynamic programming and related methods, Oper. Res. Lett. 36 (2008) 450–455. https://doi.org/10.1016/j.orl.2008.01.013
P. Girardeau, V. Leclère, A. B. Philpott, On the convergence of decomposition methods for multistage stochastic convex programs, Math. Oper. Res. 40 (2015) 130–145. https://doi.org/10.1287/moor.2014.0664
J. R. Birge, Decomposition and partitioning methods for multistage stochastic linear programs, Oper. Res. 33 (1985) 989–1007. https://doi.org/10.1287/opre.33.5.989
Stochastic Dual Dynamic Integer Programming 2: Lagrangian Cuts from the Local-Copy Reformulation Are Valid and Tight at Binary StatesResearch Paper
Motivation
Multistage stochastic integer programs model sequential decisions under uncertainty in which some decisions are discrete: unit commitment in power systems, capacity expansion, production planning with setups. Their linear (continuous) counterparts are routinely solved by nested decomposition methods such as stochastic dual dynamic programming (SDDP; Pereira and Pinto, 1991), which approximate each node's expected cost-to-go function from below by a maximum of linear cuts. With integer variables the cost-to-go functions are no longer convex, and cuts from linear programming duality are in general not exact at the points where they are generated.
Zou, Ahmed and Sun (Math. Program. 175 (2019) 461–502) restrict the state variables passed between stages to be binary and introduce a local copy zn of the parent's state at every node. Dualizing only the copy constraint zn=xa(n) gives a class of cuts, the Lagrangian cuts, which the authors call "one of the major results of the paper" (p. 478). Their Theorem 3 shows that these cuts are valid (they never overestimate the true value function) and tight (they reproduce the current approximate value at the binary state where they are generated). Together with finiteness, these are the sufficient conditions of the paper's Definition 2 under which SND and SDDiP find an optimal solution in finitely many iterations with probability one (Theorem 2 of the paper, the subject of a companion mission).
Setting
Fix a node n of the scenario tree and an iteration i of the algorithm. The node has:
a nodal constraint setXn⊆Rd×Rd×Rℓ of triples (zn,xn,yn), where xn is the node's state, yn its local variables and zn the local copy of the parent's state. By assumption (A1)Xn is nonempty, compact and mixed integer polyhedral: the points of a polyhedron {w:Aw≥b} with some coordinates integer;
a linear objective fn(xn,yn)=c⊤xn+e⊤yn;
children m∈C(n) with conditional probabilities qnm≥0, a lower bound Ln, and the children's cut coefficients (vmℓ,πmℓ) for ℓ=1,…,i.
Let Xn′={(z,x,y)∈Xn:x∈{0,1}d,z∈[0,1]d} and let Xn′′ add a variable θ≥Ln that dominates every aggregated cut. The Lagrangian function and Lagrangian dual (4.3)–(4.4) are
An optimal π^ and v^=Lni(π^) define the Lagrangian cut θ≥v^+π^⊤xa(n). Given true value functions Qm of the children and Qn=∑mqnmQm, the true nodal value (2.3) is Qn(xa)=min{fn(x,y)+Qn(x):(z,x,y)∈Xn,z=xa,x∈{0,1}d}.
Formalization targets
Goal: Theorem 3 at one node
For binary x^∈{0,1}d and π^ optimal for (Rni):
v^+π^⊤x^=Qni(x^,ψni+1)(tightness, (3.5)),
and, if the children's cuts are valid for Qm on {0,1}d and Qn≥Ln there,
Qn(xa)≥v^+π^⊤xafor all xa∈{0,1}d(validity, (3.4)).
The paper's statement for the whole collection of cuts of an iteration follows by applying this at every sampled node from the last stage backwards, exactly as its proof does by induction.
Milestones
(4.5): v^+π^⊤x^=min{fn+θ:(z,x,y,θ)∈conv(Xn′′),z=x^}, for any parent state at which (Rni) has an optimal solution.
Binary face: for binary x^, conv(Xn′′)∩{z=x^}=conv(Xn′′∩{z=x^}).
Tightness (display after (4.5)).
Validity, base case: at a last-stage node, Qn(xa)≥Lni(π)+π⊤xa.
Validity, induction step ((4.6) and the display after it).
Significance
Tightness at binary states is what separates Lagrangian cuts from the cuts of continuous relaxations or of a direct Lagrangian relaxation of the constraints coupling stages: the paper's Example 2 shows a direct relaxation whose cut is not tight even at a binary state, and Example 1 shows that with a non-binary state the duality gap is positive. With valid, tight and finite cuts, SND and SDDiP become exact algorithms for multistage stochastic integer programs with binary states, and through binarization they approximate problems with general mixed-integer states.
The result is proved in the paper; no machine-checked proof of it is known. Formalizing it requires a Lean statement of Geoffrion's theorem for this nodal problem (Lagrangian duality equals optimization over the convex hull of a mixed integer set), which is of independent use for integer programming, and the binary-face fact for sets inside the unit cube.
Difficulty
The validity half is weak duality and is short. The difficulty is in tightness. Step (4.5) is a strong duality statement for a nonconvex set: it needs that the convex hull of Xn′′ is a polyhedron, which follows only because Xn is compact and mixed integer polyhedral (so Xn′ is a finite union of polytopes), and then linear programming duality with attainment over that polyhedron. Neither the polyhedrality of convex hulls of finite unions of polytopes with a common recession direction nor finite-dimensional LP strong duality in the needed form is readily available in Mathlib. A tempting shortcut, Lagrangian duality from convex analysis with a Slater point, does not apply: a binary x^ lies on the boundary of the projection of conv(Xn′′) onto z, so the constraint qualification fails and polyhedrality is genuinely needed.
Formalization scope
States, copies and multipliers are vectors in Rd (Fin d → ℝ); a state is binary when each coordinate is 0 or 1. Points of Xn′′ are tuples (z, x, y, θ). Assumption (A1) is three fields of the node structure (nonempty, compact, mixed integer polyhedral after concatenating coordinates). Cuts are indexed by Fin i and children by Fin nC; probabilities are only required to be nonnegative. A last-stage node is nC = 0 with L = 0. The constraint z∈[0,1]d (2.1c) is kept in Xn′ and folded into Xn in (2.3) and (3.1), as in the paper.
Readings of informal words:
"min" in ψni+1, Lni, Qni, Qn: the definitions use sInf of the set of objective values, and every theorem states the minimum as an attained least element (IsLeast) or as a lower bound over all feasible points, so no junk value of sInf on an empty or unbounded set is used. The hypothesis Xn′′=∅ makes Lni a genuine minimum.
"π^ optimal for (4.3)": maximizes π↦Lni(π)+π⊤x^ over all of Rd.
"the cuts are valid": Qn(xa)≥v^+π^⊤xa is stated as a lower bound over every feasible point of (2.3), which is the paper's convention Qn=+∞ on infeasible states.
The induction hypothesis of the validity proof is made explicit: all children's cuts ℓ=1,…,i are valid, and Qn≥Ln on binary states.
Tightness is stated with ψni+1; the proof's last line writes ψni, a misprint.
A trivializing formalization is ruled out: Qni is the primal value of the forward problem (3.1) with ψni+1 from (3.2) and is never defined through the dual, and validity is required at every binary xa, not only at x^.
A complete development needs: polyhedrality of convex hulls of bounded mixed integer sets, LP strong duality with attainment (or Geoffrion's theorem directly), Carathéodory-type reasoning in product spaces, and the fact that a binary point which is a positive convex combination of points of [0,1]d equals each of them. The first two are reusable well beyond this mission. Proofs of individual milestones are welcome independently; the validity milestones are accessible first.
A. M. Geoffrion, Lagrangean relaxation for integer programming, Math. Program. Study 2 (1974) 82–114. https://doi.org/10.1007/BFb0120690
M. V. F. Pereira, L. M. V. G. Pinto, Multi-stage stochastic optimization applied to energy planning, Math. Program. 52 (1991) 359–375. https://doi.org/10.1007/BF01582895
Universality of Power-of-d Load Balancing in Many-Server Systems 2: JSQ(d(N)) with d(N)/(√N log N) → ∞ Has the Same Halfin–Whitt Diffusion Limit as the Join-the-Shortest-Queue PolicyResearch Paper
Motivation
A data center or cloud platform routes each incoming task to one of N parallel servers. Sending each task to a server with the shortest queue, the join-the-shortest-queue (JSQ) policy, minimizes waiting in a strong sense, but the dispatcher must learn all N queue lengths for every arrival. The power-of-d schemes cut this communication: the dispatcher samples d servers and joins the shortest of them. Mukherjee, Borst, van Leeuwaarden and Whiting ask how large d=d(N) must be for the sampled scheme to perform as well as JSQ as N→∞. They answer at two scales. At the fluid scale (mission 1 of this series) d(N)→∞ suffices. At the diffusion scale of the Halfin–Whitt regime, the subject of this mission, d(N)/(NlogN)→∞ suffices, and d(N)/(NlogN)→0 does not.
Timeline:
Halfin and Whitt (1981) introduced the heavy-traffic regime (N−λ(N))/N→β>0 for many-server systems.
Eschenfeldt and Gamarnik (2018, arXiv:1502.00999) proved the diffusion limit of ordinary JSQ in this regime, the system (2.4) below.
Mukherjee, Borst, van Leeuwaarden and Whiting (Stochastic Systems 8(4), 2018; arXiv:1612.00723v2) proved that JSQ(d(N)) has the same diffusion limit when d(N)/(NlogN)→∞ (Theorem 2.4), and that the limit differs when d(N)/(NlogN)→0 (Theorem 2.5).
Setting
There are N servers, each with a buffer of size b∈{2,3,…}∪{∞} that counts the task in service. Tasks arrive as a Poisson process of rate λ(N), and each needs a unit-mean exponential amount of work, served at unit rate. A task sent to a full server is discarded. Under JSQ(d) the dispatcher samples d servers without replacement (1≤d≤N) and sends the task to a server with the shortest queue among them. For d=N this is JSQ.
The state is the occupancy vectorQ=(Q1,…,Qb), where Qi is the number of servers with at least i tasks. The conventions are Q0=N and Qi=0 for i>b. With the servers ordered by nondecreasing queue length, the c-th ordered server has queue length I(c)=max{i≥0:Qi≥N−c+1}. An arrival at position c raises QI(c)+1 by one when I(c)<b. A departure at position k lowers QI(k) by one when I(k)≥1. JSQ(d) routes to the smallest position in a uniform d-subset of {1,…,N}.
In the Halfin–Whitt regime(N−λ(N))/N→β>0, the diffusion-scaled state is
Qˉ1=−NN−Q1,Qˉi=NQi(i≥2).
Here −Qˉ1 is the scaled number of idle servers.
Formalization targets
Goal: Theorem 2.4 (pp. 7–8)
Let β>0, b≥2 and k≥2. Assume Qˉk+1(0)=0 for large N and (Qˉ1(0),…,Qˉk(0))⇒ν. If d(N)/(NlogN)→∞, then Qˉd(N)⇒Qˉ in Dℓ1[0,∞), where Qˉi≡0 for i≥k+1 and
Here W is a standard Brownian motion and U1 is the nonnegative nondecreasing regulator with ∫0∞1[Qˉ1<0]dU1=0. The goal also asserts that this solution is unique.
Milestones
Uniqueness clause of Theorem 2.4: (2.4), with the constraint Qˉ1≤0, has at most one solution for every driving path.
Theorem 2.4 for d(N)=N: the JSQ diffusion limit of [8, Theorem 2], stated along an arbitrary sequence of server counts Nj→∞.
Proposition 5.1 (p. 32): if JSQ has the diffusion limit along every such sequence, then so does JSQ(d(N)) with d(N)/(NlogN)→∞.
The goal follows from 1–3.
Significance
The result. Theorem 2.4 shows that O(NlogN) queue-length queries per arrival already achieve diffusion-level optimality: over any finite horizon only OP(N) servers are idle and only OP(N) hold two or more tasks, exactly as under JSQ. With Theorem 2.5 it identifies NlogN as the minimal order of d(N). The diffusion limit is also the input for the steady-state analyses of JSQ in this regime (Braverman; Banerjee and Mukherjee).
Formalizing it. The result is proved on paper; nothing in it is machine-checked. A formalization needs:
a rigorous construction of the many-server JSQ(d) process;
the stochastic-coupling comparison of §3;
weak convergence of ℓ1-valued processes;
a reflected integral equation of Skorokhod type.
The Eschenfeldt–Gamarnik limit (milestone 2) is cited by the paper, not proved in it, so its formalization is a separate, substantial contribution.
Difficulty
JSQ(d(N)) cannot be compared with JSQ path by path. The same arrival is routed to different servers under the two schemes, so their occupancy vectors drift apart and do not stay ordered. The obvious generator-based diffusion argument for JSQ(d(N)) itself does not close either. The routing probabilities depend on the whole ordered queue-length profile through (d⋅)/(dN)-type terms, and these do not reduce to a function of Qˉ1,Qˉ2 at scale N unless d(N) is large enough.
The threshold is sharp: for d(N)≪NlogN the limit is different (Theorem 2.5). Any argument therefore has to use the growth rate quantitatively, controlling at scale oP(N) over a finite horizon how often JSQ(d(N)) fails to make a near-shortest choice. A qualitative fluid-type argument cannot do this. A second difficulty is the limit itself: (2.4) is a reflected equation whose regulator enters two coordinates, so even its well-posedness needs a Skorokhod-type argument with feedback.
Formalization scope
Lean conventions:
Levels and positions use the paper's index base: Q i is Qi for i≥1, with Q 0 = N, and positions are 1,…,N. The initial vector Fin k → ℝ lists levels 1,…,k.
Bufferb : ℕ∞ with 2 ≤ b; ⊤ is an infinite buffer.
Process construction is by uniformization. A Poisson clock of rate λ+N is built from i.i.d. expMeasure (λ + N) interarrival times through the published renewalCount/partialSum. Its i.i.d. marks are arrivals, with probability λ/(λ+N) and a uniform d-subset, or departures at a uniform position. Marks are independent of the clock and of a random initial state. The model is therefore the paper's in law. Sampling is without replacement, so JSQ(N) is JSQ.
Path space.DS[0,∞) is read as ℓ1-valued càdlàg paths, as the proof controls ℓ1 distances. Weak convergence to the continuous limit is stated in coupling form: a common probability space with copies of the laws and almost sure uniform convergence in ℓ1 on compacts.
Initial convergence is joint convergence in law of (Qˉ1(0),…,Qˉk(0)), via bounded continuous test functions. The page's coordinatewise convergence does not determine the limit. The limit's initial value is independent of W.
Solution concept of (2.4) includes Qˉ1≤0, implicit in the paper; without it U1≡0 satisfies the complementarity condition and uniqueness fails. ∫1[Qˉ1<0]dU1=0 is a Lebesgue–Stieltjes measure condition. W is Mathlib's IsBrownianReal.
"Same diffusion limit" in Proposition 5.1 is the paper's reduction: the JSQ result, for all server-count sequences, implies the JSQ(d(N)) result.
Trivializing formalizations are ruled out. The goal asserts the existence of the limit (Brownian motion, initial value and solution), not merely that every limit point solves (2.4). The system hypotheses are satisfiable: the mark law has total mass one, which is checked in Lean. The convergence is of the whole ℓ1 path, including the tail above level k.
Infrastructure needed and welcome:
a library for ℓ1-valued càdlàg processes;
the one-sided Skorokhod map with Lipschitz feedback, reusable for many reflected limits;
the S-coupling of §3, posed as milestones in mission 1 of this series;
a formal proof of the Eschenfeldt–Gamarnik JSQ limit.
Selected references
D. Mukherjee, S. C. Borst, J. S. H. van Leeuwaarden, P. A. Whiting, Universality of power-of-d load balancing in many-server systems, Stochastic Systems 8(4), 2018. arXiv:1612.00723v2, doi:10.1287/stsy.2018.0016
P. Eschenfeldt, D. Gamarnik, Join the shortest queue with many servers. The heavy-traffic asymptotics, Mathematics of Operations Research 43(3), 2018. arXiv:1502.00999
S. Halfin, W. Whitt, Heavy-traffic limits for queues with many exponential servers, Operations Research 29(3), 1981. doi:10.1287/opre.29.3.567
A. Braverman, Steady-state analysis of the join-the-shortest-queue model in the Halfin–Whitt regime, Mathematics of Operations Research 45(3), 2020. arXiv:1801.05121
Strong and Weak Equilibria for Time-Inconsistent Stochastic Control in Continuous Time 2: Under Pseudo-Exponential Discounting, a Two-State Generator Is a Weak but Not a Strong EquilibriumResearch Paper
Motivation
An agent whose preferences change over time cannot simply optimize once: a plan that is optimal today may be abandoned tomorrow by the agent's own "future selves". This is time inconsistency, and its standard source is non-exponential discounting, studied since Strotz (1955). The usual response, going back to Strotz and made rigorous in continuous time by Ekeland and Lazrak (2006), is to look for an equilibrium strategy: a strategy from which no future self wants to deviate. In continuous time "no incentive to deviate" is encoded through a first-order condition, which Huang and Zhou call a weak equilibrium.
Björk, Khapko and Murgoci (2017, Remark 3.5) observed that this first-order condition need not express the absence of an incentive to deviate: it only says that a derivative vanishes or is nonnegative, and a stationary point need not be a maximum. Huang and Zhou (Math. Oper. Res. 46(2), 2021; read here as arXiv:1809.09243v3) introduce a strong equilibrium, which requires the agent's payoff to be no better after any short deviation, and study the two notions for continuous-time Markov chains with controlled generators. This mission formalizes their main example (Example 4.3): a concrete two-state model in which a weak equilibrium fails to be strong, so that an agent in one state strictly gains from deviating on every short interval.
Setting
The state space is S={1,…,N}. A generator is a matrix Q∈RN×N whose i-th row Qi lies in Ei={q:qj≥0(j=i),qi=−∑j=iqj}. Admissible rows form sets Di⊆Ei, and the control space is Q={Q:Qi∈Di∀i}. A payoff function f(t,i,q) gives the payment rate at time difference t in state i when row q is in force. The expected payoff of using Q from state i is
The concatenationQ⊗εQ∗ uses Q on [0,ε] and Q∗ afterwards. A generator Q∗∈Q is a weak equilibrium if liminfε↓0[F(i,Q∗)−F(i,Q⊗εQ∗)]/ε≥0 for all i∈S, Q∈Q, and a strong equilibrium if for all i,Q there is ε>0 with F(i,Q∗)≥F(i,Q⊗ε′Q∗) for every ε′∈(0,ε].
The paper's first-order and second-order quantities are
with G the payoff computed with the time derivative ft in place of f.
In the two-state model of §4, S={1,2}, Di=Ei, every generator is Q∼(a,b)=[−aba−b] with a,b≥0, and f(t,1,(−a,a))=δ(t)g1(a), f(t,2,(b,−b))=δ(t)g2(b) with the pseudo-exponential discountδ(t)=λe−ρt+(1−λ)e−ρ′t. Example 4.3 takes λ=21, ρ=1, ρ′=2, g1(a)=−a2, and g2(b)=144193+65b for b<127, g2(b)=2−(1−b)2 for b≥127.
Formalization targets
Goal: Example 4.3
Q∗∼(125,127)is a weak equilibrium and not a strong equilibrium.
The statement is fully explicit and has no hypotheses.
Milestones
(4.3)–(4.4): closed forms of F1−F2 and G1−G2 for Q∼(a,b) under pseudo-exponential discounting.
(4.5), (4.6), (4.8): ΓQ∗(Q1), ΓQ∗(Q2) and ΛQ∗(2,Q) in the two-state model.
Theorem 3.1: under (2.3) and (3.3), Q∗ is weak iff ΓQ∗(Qi∗)≥ΓQ∗(Qi) for all (i,Q).
(4.11): at Q∗, Γ1 is maximized uniquely at a∗ and argmaxb≥0Γ2(b)=[0,7/12].
Proposition 3.3: the second-order test on the set R of equality cases.
(4.12): Λ2(a∗,b)=−b/12−579/288 on [0,7/12], so Λ2(a∗,b∗)<Λ2(a∗,b) for b∈[0,7/12).
Further statements
Remark 4.1: for Q∼(5/12,b), b∈[0,7/12), F(2,Q∗)<F(2,Q⊗εQ∗) for all small ε>0. And (4.13): the equation 65≤2a=21(1+a1+2+a1)(a2+144193) has a unique solution aˉ≥0, and Qˉ∗∼(aˉ,0) is a strong equilibrium.
Significance
The example shows that the weak equilibrium concept, the standard one in the time-inconsistency literature since Ekeland and Lazrak, admits strategies that an agent would abandon: Remark 4.1 exhibits a deviation that strictly increases the payoff on every short interval. Together with (4.13), it shows that in one and the same model a weak-but-not-strong equilibrium and a strong equilibrium coexist, so the choice of equilibrium concept changes which strategies are predicted. The example is the paper's justification for introducing strong equilibria.
The result is proved in the paper, through the first-order characterization (Theorem 3.1), the second-order test (Proposition 3.3, resting on the second-order expansion Lemma 3.2) and explicit computations in the two-state model. None of it has been machine-checked. A formal proof would provide checked versions of Theorem 3.1 and Proposition 3.3 for finite-state chains, reusable for any other example, and an independent check of the arithmetic of Example 4.3, where the source contains at least one misprinted formula.
Difficulty
Both conjuncts of the goal concern the small-ε behaviour of F(2,Q⊗εQ∗), an integral of products of matrix exponentials. Weakness reduces to a first-order comparison by Theorem 3.1, but its proof needs the expansion (3.6) with an o(ε) remainder controlled uniformly enough to pass under the integral over [0,∞). Failure of strong equilibrium cannot be read off the first-order term: at b∗=7/12 the maximizer of Γ2 is not unique, every b∈[0,7/12) ties at first order, and the decision moves to the second-order coefficient Λ of Lemma 3.2, whose derivation needs a second-order expansion of the concatenated payoff. The regularity hypotheses of Lemma 3.2 and of (3.3) must also be verified for the example's discount function.
Formalization scope
States are Fin N; the paper's state k is index k−1, so in the two-state model state 1 is 0 : Fin 2 and state 2 is 1 : Fin 2. Expectations are written through the transition matrices etQ (NormedSpace.exp (t • Q)) and Fubini, exactly as the paper computes on p. 23; no Markov process is constructed. Payoffs are Bochner integrals over (0,∞). The weak-equilibrium condition is written as "for every η>0, eventually as ε↓0 the quotient is ≥−η", which is liminf≥0 without a real-valued liminf. The norm in (2.3) is the sup norm, equivalent to the paper's Euclidean norm because (2.3) quantifies over every c>0.
Standing assumptions: Di⊆Ei, continuity of f in t (2.2) and the integrability condition (2.3). Theorem 3.1 adds the shift bound (3.3)–(3.5); Proposition 3.3 assumes the conditions of Lemma 3.2, with the derivative ft tied to f. The closed forms (4.3)–(4.4) assume ρ,ρ′>0 (the page allows ρ,ρ′≥0, but with a zero rate the payoff integral diverges); the algebraic identities (4.5)–(4.8) keep the page's ρ,ρ′≥0; Example 4.3 has ρ=1, ρ′=2. Statement (4.11) gives Γ2(b)=g2(b)−65b and the argmax; the page's case formula for b≥7/12 contains a misprint and is not used.
No trivializing reading is available: the goal has no hypotheses, F is built from etQ and the concatenation uses Q before and Q∗ after ε, so neither conjunct holds by a junk value. Integrability of every payoff follows from (2.3) and is never assumed.
Theorem 3.1 and the second-order package are also drafted in the companion mission on existence of equilibria; they are restated here in the sub-namespace StrongWeakEq.TwoState. The goal needs the verification of (2.3), (3.3) and the Lemma 3.2 conditions for the example (convexity of δ gives (3.15)), the closed forms of etQ for two-state generators, and the expansions of the paper. Contributions of proofs of the general results (Theorem 3.1, Proposition 3.3) are welcome independently of the example.
Strict Constraint Qualifications and Sequential Optimality Conditions for Constrained Optimization IV: CAKKT-Regularity Implies Abadie's Constraint QualificationResearch Paper
Motivation
Algorithms for smooth nonlinear programming, such as augmented Lagrangian, interior point and sequential quadratic programming methods, do not stop at exact Karush–Kuhn–Tucker (KKT) points. They stop at points where the KKT conditions hold approximately. Sequential optimality conditions make this precise: they are properties of sequences xk→x∗ with approximate multipliers, satisfied at every local minimizer without any constraint qualification, and verified by the iterates of practical methods. To conclude that a limit point is a KKT point, one still needs a condition on the constraints. Andreani, Martínez, Ramos and Silva (Optimization Online 5197, 2015; Math. Oper. Res. 43(3), 2018, doi:10.1287/moor.2017.0879) identify, for each of several sequential conditions, the weakest such condition. They call it the weakest strict constraint qualification associated with that condition, and they place each one within the classical hierarchy of constraint qualifications.
This mission concerns the Complementary AKKT condition (CAKKT) of Andreani, Martínez and Svaiter (SIAM J. Optim. 20(6), 2010). CAKKT is strictly stronger than AKKT and is satisfied by the limit points of an augmented Lagrangian method under a weak Łojasiewicz-type hypothesis. The paper's §6.1 compares the associated weakest strict CQ, CAKKT-regularity, with Abadie's constraint qualification, one of the classical conditions of nonlinear programming. The answer is that CAKKT-regularity implies Abadie's CQ, and the converse fails.
Timeline:
1967: Abadie introduces the condition LΩ(x∗)=TΩ(x∗).
1969: Guignard weakens it to equality of the polars.
1971: Gould and Tolle prove that Guignard's condition is the weakest CQ guaranteeing KKT at local minimizers.
2010: Andreani, Martínez and Svaiter introduce CAKKT.
2016: Andreani, Martínez, Ramos and Silva characterize the weakest strict CQ for AKKT, the cone continuity property (SIAM J. Optim. 26(1)).
2015/2018: the present paper defines CAKKT-regularity and proves Theorems 4.3 and 6.4.
Setting
Let h1,…,hm,g1,…,gp:Rn→R be continuously differentiable, and let
Ω={x∈Rn:hi(x)=0(i≤m),gj(x)≤0(j≤p)}.
For feasible x∗, J(x∗)={j:gj(x∗)=0} is the set of active inequalities. The polar of a set K is K∘={v:⟨v,k⟩≤0∀k∈K}.
The tangent coneTΩ(x∗) is the set of d for which there are tk↓0 and dk→d with x∗+tkdk∈Ω.
The linearized cone is LΩ(x∗)={d:⟨∇hi(x∗),d⟩=0∀i,⟨∇gj(x∗),d⟩≤0∀j∈J(x∗)}.
The regular normal coneNΩ(z) is the set of w with ⟨w,y−z⟩≤o(∥y−z∥) for y∈Ω.
The limiting normal coneNΩ(x∗) is the set of limits of wk∈NΩ(zk) along zk→x∗ in Ω.
Abadie's CQ holds at x∗ when LΩ(x∗)=TΩ(x∗).
An objective f satisfies CAKKT at x∗ if there are xk→x∗, λk∈Rm and μk∈R+p with
For x∈Rn and r≥0, let KC(x,r) be the set of vectors ∑iλi∇hi(x)+∑j∈J(x∗)μj∇gj(x) with μ≥0 and ∑i∣λihi(x)∣+∑j∈J(x∗)∣μjgj(x)∣≤r. The point x∗ is CAKKT-regular if (x,r)⇉KC(x,r) is outer semicontinuous at (x∗,0):
(x,r)→(x∗,0)limsupKC(x,r)⊆KC(x∗,0).
Formalization targets
Goal: Theorem 6.4
x∗∈ΩCAKKT-regular⟹LΩ(x∗)=TΩ(x∗).
Milestones
The inclusion TΩ(x∗)⊆LΩ(x∗) always holds, so the content of the goal is the reverse inclusion. The milestones are the statements the paper's proof uses, in attack order:
Lemma 6.1: every y∈TΩ(xˉ)∘ equals −∇F(xˉ) for a C1 function F that has a strict global minimum over Ω at xˉ.
Lemma 6.2: such a y is the limit of multiplier combinations ωk at points xk→xˉ. The multipliers satisfy μjk=ckmax{0,gj(xk)}, and the complementarity residual rk tends to 0.
NS(z)=TS(z)∘ for every set S.
TΩ(x∗)⊆LΩ(x∗).
KC(x∗,0)=LΩ(x∗)∘.
Under CAKKT-regularity, NΩ(x∗)⊆LΩ(x∗)∘.
NS(z)∘⊆TS(z) for closed S.
Companion: Theorem 4.3
x∗CAKKT-regular⟺(∀f∈C1:CAKKT at x∗⇒KKT at x∗),
with the equivalence of the two formulations (4.12)–(4.13) and (4.14)–(4.15) of CAKKT as a milestone.
Significance
Theorem 6.4 places CAKKT-regularity in the classical hierarchy. Every point at which CAKKT forces KKT for all objectives also satisfies Abadie's CQ, and therefore Guignard's. The paper's Example 6.1 shows that Abadie's CQ does not imply CAKKT-regularity. A convergence theorem for an algorithm that produces CAKKT sequences therefore cannot be stated under Abadie's CQ alone. Together with Theorem 4.3, this fixes exactly what a CAKKT-based method needs from the constraints.
The results are proved in the paper. None of them, and none of the variational-analysis facts they rest on, is formalized on Prove2Me, and Mathlib has no regular or limiting normal cones of nonconvex sets. The work is to formalize the paper's proof together with the parts of Rockafellar–Wets it cites: Theorem 6.11 (gradients of smooth functions as normals), Proposition 6.5, and Theorems 6.26 and 6.28(b). The last is Clarke's theorem that the regular tangent cone of a closed set is the polar of its limiting normal cone. These facts are reusable well beyond this mission.
Difficulty
The inclusion TΩ⊆LΩ is elementary. The reverse inclusion cannot be obtained from CAKKT-regularity at x∗ alone, because CAKKT-regularity is a statement about multiplier combinations, which live on the polar side. The argument therefore has to pass through normal cones at points xk=x∗ near x∗. At such points the active set may differ from J(x∗), and the complementarity residual must be controlled uniformly. Returning from polars to cones requires the passage from the limiting normal cone to the tangent cone (milestone 7). That is a deep fact about closed sets in finite dimension; it is not a formal manipulation of cones. Equality of polars would only give Guignard's CQ.
Formalization scope
Rn is EuclideanSpace ℝ (Fin n), indices are Fin m and Fin p, and gradients are Mathlib's gradient. The objects are:
Constraints. The constraints are a structure Constraints n m p of two index families. Every theorem assumes IsC1 (each hi and gj is C1, the paper's standing hypothesis) and feasibility of x∗.
KKT is the multiplier form, with μ≥0 and μj=0 off J(x∗).
Cones. The tangent cone uses positive scalars tk→0 (Mathlib's tangentConeAt allows negative scalars and is not used). The regular normal cone is empty off the set. The limiting normal cone and outer semicontinuity use the sequential Painlevé–Kuratowski outer limit, and the outer limit in CAKKT-regularity is taken over pairs with r≥0.
CAKKT includes xk→x∗. The page's (4.12)–(4.13) omit it, but p. 1 and (4.14)–(4.15) make it part of the condition.
Sums over J(x∗) are written over all indices, with the multipliers forced to 0 off J(x∗).
Abadie's CQ is the equality of cones of p. 5. The proof's "TΩ(x∗)=LΩ(x∗)∘" is a misprint and is not copied.
Closedness of Ω is not assumed; it follows from continuity.
The following would trivialize the goal and are excluded:
a normal cone that is nonempty outside the set;
the convex normal cone used for the nonconvex Ω;
KKT without the sign or complementarity conditions;
for Theorem 4.3, an objective quantified outside the equivalence;
Abadie's CQ weakened to equality of polars.
A complete development needs Clarke's tangent–normal polarity for closed sets in Rn, the existence of C1 functions realizing regular normals, and a penalty argument for Lemma 6.2. Proofs of the general variational-analysis milestones (3 and 7) are especially welcome, since they serve any mission on nonconvex constraint sets.
R. Andreani, J. M. Martínez, B. F. Svaiter, A new sequential optimality condition for constrained optimization and algorithmic consequences, SIAM J. Optim. 20(6):3533–3554, 2010. https://doi.org/10.1137/090777189
R. Andreani, J. M. Martínez, A. Ramos, P. J. S. Silva, A cone-continuity constraint qualification and algorithmic consequences, SIAM J. Optim. 26(1):96–110, 2016. https://doi.org/10.1137/15M1008488
F. J. Gould, J. W. Tolle, A necessary and sufficient qualification for constrained optimization, SIAM J. Appl. Math. 20(2):164–172, 1971. https://doi.org/10.1137/0120021
Learning Unknown Service Rates in Queues 2: Q-UCB Has Queue-Regret at Most 6K v_u(t) log² t / t + (24.004 + UK)/(6t²) in the Late StageResearch Paper
Motivation
Many service systems must match jobs to servers whose quality is not known in advance: crowdsourcing platforms routing tasks to worker types, wireless schedulers assigning users to channels, and switches in data networks. The scheduler learns server quality only by trying servers, and every poor assignment lets work pile up. The natural performance measure is therefore not the cumulative reward loss of classical bandits but the queue-regret: the expected excess backlog compared with a genie that knows the best assignment.
Krishnasamy, Sen, Johari and Shakkottai, Learning Unknown Service Rates in Queues: A Multiarmed Bandit Approach (Operations Research, 2021; arXiv:1604.06377), show that queue-regret has two regimes. In an early stage it grows like the regret of a bandit. In a late stage, once the queue regularly empties, past mistakes are forgotten at every empty instant and the queue-regret decays. This mission formalizes their upper bound for the late stage: a UCB scheduler with forced exploration, Q-UCB, has queue-regret of order log3t/t.
Setting
A discrete-time switch has U queues and K≥U servers. In every slot t≥1, queue u receives an arrival Au(t)∼Bernoulli(λu) and link (u,k) offers a potential service Ruk(t)∼Bernoulli(μuk), all independent and i.i.d. over slots. The scheduler picks a matchingκ(t), an injective assignment of a server κu(t) to every queue, and queue u evolves as
The scheduler observes only past schedules and the services offered on scheduled links.
Write μu∗=maxkμuk, ku∗ for its maximizer, ϵu=μu∗−λu, and Δ=minu,k=ku∗(μu∗−μuk). Assumption 1: each queue has a unique best server and the best servers are distinct, so k∗ is the unique optimal matching. Assumption 2: ϵu>0 for all u. The genie queue Qu∗ always uses ku∗. Assumption 3: the system starts from the stationary law of Q∗. The queue-regret is
Ψu(t)=E[Qu(t)−Qu∗(t)].
Q-UCB (Algorithm 1) explores in slot t with probability min{1,3Klog2t/t}, scheduling a uniformly random member of a fixed family X of K matchings that together cover all UK links. Otherwise it exploits: for each queue it picks the server with the largest index μ^uk(t)+log2t/(2Nuk(t)), with μ^uk the empirical mean and Nuk the number of past assignments of link (u,k), and schedules a matching closest in Hamming distance to these choices. Fix β>1 and set
For every t≥5800 with t≥exp(4/(Δ2(1−1/β)3)), w(t)/logt≥2/ϵu and vu(t)+vu′(t)≤t/2,
Ψu(t)≤6Ktvu(t)log2t+6t224.004+UK.
The constants are the paper's, stated exactly.
Milestones (§8.2, pp. 24–34)
Lemma 10: the number of forced-exploration slots in a window exceeds 5max(logt,K(log3t2−log3t1)) with probability at most t−4. Over [1,t] it exceeds Kw(t) with probability at most t−2K.
Lemma 11: with probability at least 1−UK/(6t3), no exploit slot in (w(t),t] schedules a sub-optimal link (event E1).
Lemma 12: pathwise, Qu(t)−Qu∗(t) is at most the number of sub-optimal schedules since queue u was last empty, at time t−Bu(t).
Lemmas 13–17: on E1∩E2, a coarse queue bound 2Kw(t) (13), a first bound on the regenerative cycle (14), a maximal inequality for the arrival-minus-service walk (15), a refined polylogarithmic queue bound (16), and the refined cycle bound Bu(t)≤vu(t) (17), each failing with probability O(t−3).
Significance
The theorem shows that a simple learning scheduler loses only O(Klog3t/(ϵu2t)) in expected backlog in the late stage. Together with the paper's Ω(1/t) lower bound for consistent policies (Theorem 3), this places the optimal late-stage queue-regret within a polylogarithmic factor. The analysis method has two parts: a high-probability statement that the learner has locked onto the optimal matching, and a regenerative argument that converts it into a bound on queue length. It applies to other learning-in-queues problems in the same way.
All results are proved in the paper (§8.2). None of them has a machine-checked proof. The mission produces a formal model of the learning switch, including the algorithm with arbitrary tie-breaking, the coupled genie and the stationary start, and checks the explicit constants. These constants rely on numerical facts stated in the proofs, for example a positivity check for x≥log5800 in Lemma 10(b) and the absorption of lower-order terms into 24.004, which a formal proof must verify.
Difficulty
The obvious argument says that UCB eventually identifies the best server, so the queue behaves like the genie's. This fails for two reasons. First, the regret is an expectation of a queue length, and a queue remembers every early mistake until it next empties. So one must bound the current regenerative cycle, and that bound itself depends on the queue length, which forces the recursion of Lemmas 13, 14, 16 and 17. Second, UCB's standard logarithmic-regret analysis bounds the expected number of sub-optimal pulls. It says nothing about whether a sub-optimal pull happens in a specific late window. Forced exploration at rate log2t/t is what makes all indices concentrate at once, and Lemma 11 requires a union bound over every link, slot and sample count with explicit exponents.
Formalization scope
Probability space. One canonical space: the initial queue vector together with an i.i.d. sequence of slot seeds, namely uniforms for arrivals, links and the explore coin, and a uniform explore index.
Arrivals and services are threshold events of the uniforms.
Q(0) has the product geometric law P(Qu(0)=n)=(1−ρu)ρun with ρu=λu(1−μu∗)/((1−λu)μu∗), the stationary law of the genie chain under the printed recursion.
Indexing and coupling. Queues and servers are Fin U and Fin K, and slots are t≥1. The genie shares arrivals, services and Q(0) with the system. This coupling is implicit in the paper's proofs and does not change Ψu.
Algorithm. Q-UCB is formalized for every covering family X and every tie-breaking rule, deterministic in the slot and history, for the UCB argmax and the Hamming projection.
Nuk(t) counts slots 1,…,t−1.
An unsampled link has index +∞.
Bu(t)=t when queue u never emptied on [0,t].
Disclosed additions.
K≥2 in every statement; K=1 is trivial, and the constants fail there.
t,t1≥1 in Lemma 10(a).
logw(t)≥(2logt)2/3 in Lemma 10(b); the printed statement is false without it, and its proof uses it.
Lemmas 14 and 16 take the "arbitrary function" vu natural-valued.
Excluded trivializations. Theorem 5 also asserts that Qu(t)−Qu∗(t) is integrable, so Ψu(t) cannot be a default value of a non-integrable integral. Every probability bound concerns the actual events, and every hypothesis set is satisfiable. For example, with U=1, K=2, λ=0.5, μ=(0.9,0.1), β=2, the range of Theorem 5 contains t=⌈e50⌉.
Out of scope. Theorem 5 and Lemma 11 for Q-ThS (Algorithm 2) are not formalized, and neither is Corollary 6.
Infrastructure needed and welcome. Chernoff bounds for sums of independent non-identically distributed Bernoulli variables (Lemma 10), Hoeffding's inequality and a maximal suffix-sum bound (Lemmas 14, 15), measurability of the algorithm's trajectory in the seeds, and regenerative-cycle arguments for the reflected random walk. The Chernoff and stationary-queue lemmas are reusable well beyond this mission.
The source is the arXiv v4 preprint; the paper's proofs are in its §8 and §9.
P. Auer, N. Cesa-Bianchi, P. Fischer, Finite-time Analysis of the Multiarmed Bandit Problem, Machine Learning 47, 2002. https://doi.org/10.1023/A:1013689704352
Universality of Power-of-d Load Balancing in Many-Server Systems 1: JSQ(d(N)) with d(N) → ∞ Has the Same Fluid Limit as the Join-the-Shortest-Queue PolicyResearch Paper
Motivation
Large data centers and cloud platforms route each incoming job to one of N parallel servers through a single dispatcher. The join-the-shortest-queue (JSQ) policy, which sends each job to a server with the fewest jobs, has strong optimality properties for identical exponential servers, but it needs the queue length of every server at every arrival, which is costly when N is in the thousands. The power-of-d scheme JSQ(d) polls only d servers chosen at random and joins the shortest among them. For fixed d≥2 it improves dramatically over random routing, which is the supermarket model of Mitzenmacher and of Vvedenskaya, Dobrushin and Karpelevich, but it does not match JSQ.
Mukherjee, Borst, van Leeuwaarden and Whiting (arXiv:1612.00723, Stochastic Systems 2018) ask how fast d=d(N) must grow for JSQ(d(N)) to behave like JSQ in the large-N limit. This mission concerns their fluid-scale answer: any growth d(N)→∞ suffices.
Timeline.
1996–2001: Vvedenskaya–Dobrushin–Karpelevich and Mitzenmacher derive the fluid limit of JSQ(d) for fixed d (the supermarket ODE).
2015–2018: Eschenfeldt and Gamarnik obtain the Halfin–Whitt diffusion limit of ordinary JSQ (arXiv:1502.00999).
2016–2018: Mukherjee et al. prove the first transient fluid limit of ordinary JSQ in ℓ1 (their Theorem 4.1). They show that JSQ(d(N)) has the same fluid limit whenever d(N)→∞ (Theorem 2.1) and the same diffusion limit whenever d(N)/(NlogN)→∞ (Theorem 2.4, a separate mission).
Setting
There are N identical servers, each with a buffer of size b∈{1,2,…}∪{∞} counting the job in service. Jobs arrive as a Poisson process of rate λ(N) and need independent unit-mean exponential service. A job sent to a full server is discarded. The occupancy vector is Q(t)=(Q1(t),Q2(t),…), where Qi(t) is the number of servers with at least i jobs, with the convention Q0≡N. If the servers are listed in nondecreasing order of queue length, the c-th ordered server holds I(c)=max{i≥0:Qi≥N−c+1} jobs. A dispatch scheme picks an ordered position c∈{1,…,N} for each arrival, and the arrival raises QI(c)+1 by one (or is discarded if I(c)=b).
The schemes are:
JSQ picks c=1;
JSQ(d) picks the lowest position among d positions sampled uniformly without replacement, so JSQ(N) is JSQ;
MJSQ(n) picks c=n+1;
CJSQ(n) is the class of all rules that pick some c≤n+1;
JSQ(n,d) keeps the JSQ(d) choice when it is at most n+1 and otherwise picks uniformly among the first n+1 positions.
Two systems are S-coupled when they share the arrival clock and the departure clock of the k-th ordered server for every k.
The fluid-scaled state is q(t)=Q(t)/N. It lives in
S={q∈[0,1]b:qi≤qi−1(i≥2),i≥1∑qi<∞},
which carries the ℓ1 distance. For q∈S let m(q)=min{i:qi+1<1}. The coefficients pi(q) of (4.4) send all incoming work to level m(q)−1 while the rate λ can be absorbed there, and the excess to level m(q): if m(q)=0 then p0=1; otherwise pm−1=min{(1−qm+1)/λ,1}, pm=1−pm−1, and all other pi vanish.
Formalization targets
Goal: Theorem 2.1
Assume λ(N)/N→λ<1, d(N)→∞ and qd(N)(0)→q∞ in S. Then every subsequence of {qd(N)(t)}t≥0 has a further subsequence converging weakly (Skorohod J1) to a limit satisfying
The statement fixes no rate for d(N), which is what makes it the right goal.
Milestones
The milestones follow the paper's proof.
§3, coupling. Proposition 3.1 is a deterministic stack ordering. Proposition 3.2 and Corollary 3.3 sandwich any CJSQ(n) scheme between JSQ and MJSQ(n). Proposition 3.5 bounds the ℓ1 distance of two S-coupled systems by 2Δ(t), and Proposition 3.6 bounds Δ for JSQ(d) against JSQ(n,d).
§4.1, JSQ fluid limit. Proposition 4.3 makes the martingales negligible, Lemmas 4.6 and 4.7 characterize compactness and tightness in ℓ1, Lemma 4.8 gives level confinement, and Theorem 4.1 is the fluid limit of JSQ itself.
§4.2. Proposition 4.9 is the reduction "JSQ fluid limit ⇒ JSQ(d(N)) fluid limit".
Significance
The result. Theorem 2.1 shows that on the fluid scale the optimality of JSQ costs nothing beyond d(N)→∞ queue inquiries per job, far fewer than N. In particular the fluid limit is the same as that of JSQ, which is fluid-optimal. The coupling framework of §3 (the class CJSQ(n), stack orderings, S-coupling) is not tied to JSQ(d). The paper uses the same tools for the diffusion-scale Theorem 2.4, for batch arrivals and for the interchange of limits, Proposition 2.2.
Formalizing it. Proofs of the paper's results exist; no machine-checked version does. The mission produces:
a reusable model of many-server systems with ordered-position dispatch;
a formal stack-ordering and S-coupling toolkit;
compactness and tightness criteria for ℓ1-valued random sequences;
a complete fluid-limit theorem for a load-balancing policy.
The proof of Theorem 4.1 in the paper is sketched in places (the time-scale separation is argued "analogously" to Hunt and Kurtz), so a formal proof would also settle those steps.
Difficulty
The obvious argument would compare JSQ(d(N)) directly with JSQ: the two disagree whenever the d(N) sampled servers miss every shortest queue. When a constant fraction of servers is idle this is rare, but when few servers share the minimum queue length the disagreement rate does not vanish, and a direct coupling fails. The paper instead passes through CJSQ(n(N)) with n(N)/N→0, which is close to JSQ(d(N)) for a suitable n(N) and sandwiched between JSQ and MJSQ(n(N)).
The second difficulty is the topology. The sandwich controls tail sums ∑i≥mQi, so the fluid limit of JSQ is needed in ℓ1, not coordinatewise. With b=∞ the state space is infinite-dimensional, and tightness requires uniform control of tails. Finally, the JSQ fluid limit itself involves a separation of time scales: the drift pi(q) is discontinuous in q and arises as an averaged stationary behaviour of a fast process.
Formalization scope
Occupancy. Occupancy vectors are finitely supported functions ℕ →₀ ℕ with the paper's level index; coordinate 0 holds Q0=N. The buffer is b∈N∞ with b≥1; both finite and infinite b are covered.
Construction. Systems are built by uniformization: a Poisson clock of rate λ+N with i.i.d. Uniform[0,1] marks. A mark decides arrival versus departure, the departure position, the random d-subset (sampling without replacement) and the uniform choice of JSQ(n,d). S-coupled systems share the clock and the marks.
Schemes. A scheme maps the event index, the current state and the current mark to a position. CJSQ(n) rules must be measurable in the mark.
Fluid states. Fluid states are functions ℕ → ℝ with q0=1. S carries the ℓ1 distance, computed in [0,∞].
Coefficients.pm−1 is written as "1 if λ≤1−qm+1, else (1−qm+1)/λ", which equals (4.4) for λ>0 and never divides by zero.
Limit equation. A solution of (2.1) must take values in S, have integrable integrands, and satisfy every equation i=1,…,b.
Weak convergence. Weak J1 convergence to a continuous limit is stated in coupling form: copies of the processes on one probability space converge almost surely uniformly on compacts in ℓ1. "Any subsequence has a further subsequence" asserts the existence of the limit.
Initial states. Theorem 2.1 has deterministic initial states with ℓ1 convergence and allows λ=0. Theorem 4.1, Proposition 4.3 and Lemma 4.8 have random initial states converging in probability, and λ>0.
Stochastic order.≤st for processes means the existence of an ordered coupling with the right path laws. Proposition 3.6's conditional probability is stated for each value of the integer A(T).
Correction. Proposition 3.1 as printed quantifies over m≤b. For finite b the proof also needs the ordering of the discarded counts, m=b+1, and the formal statement orders every level m≥1.
A formalization that states only "every limit point solves (2.1)", or that measures convergence coordinatewise, would be vacuous or weaker: it is ruled out by requiring the limit's existence and ℓ1 convergence.
Needed infrastructure. The development needs Poisson clocks and thinning, martingale bounds for counting processes, compactness in ℓ1, tightness and Prokhorov's theorem on Polish spaces, and the Skorohod representation. The ℓ1 compactness and tightness criteria (Lemmas 4.6, 4.7) and the stack ordering (Proposition 3.1) are reusable on their own. Proofs of any milestone are welcome, as are proofs of Theorem 2.1 that bypass Theorem 4.1.
Selected references
D. Mukherjee, S. C. Borst, J. S. H. van Leeuwaarden, P. A. Whiting, Universality of Power-of-d Load Balancing in Many-Server Systems, Stochastic Systems 8(4), 2018. arXiv:1612.00723v2, https://arxiv.org/abs/1612.00723
P. Eschenfeldt, D. Gamarnik, Join the Shortest Queue with Many Servers. The Heavy-Traffic Asymptotics, Mathematics of Operations Research 43(3), 2018. https://arxiv.org/abs/1502.00999
M. Mitzenmacher, The Power of Two Choices in Randomized Load Balancing, IEEE Transactions on Parallel and Distributed Systems 12(10), 2001. https://doi.org/10.1109/71.963420
N. D. Vvedenskaya, R. L. Dobrushin, F. I. Karpelevich, Queueing System with Selection of the Shortest of Two Queues: An Asymptotic Approach, Problems of Information Transmission 32(1), 1996.
Prophet Secretary Through Blind Strategies 1: A Nonincreasing Blind Strategy Earns at Least 0.669 of the Prophet's Expected Maximum When Values Arrive in Uniformly Random OrderResearch Paper
Motivation
In the prophet inequality a gambler observes independent nonnegative random values V1,…,Vn with known laws one at a time and must decide irrevocably, after seeing each one, whether to stop and keep it. Her expected reward is compared with that of a prophet who knows all realizations and earns E(maxiVi). When the values arrive in a fixed adversarial order the best guarantee is 1/2 (Krengel, Sucheston and Garling, 1977; Samuel-Cahn, 1984). Prophet inequalities are the stopping-theoretic core of posted-price mechanisms in online auctions, where a guarantee for the gambler translates into a welfare or revenue approximation for sequential pricing.
The prophet secretary problem keeps arbitrary independent laws but lets the values arrive in a uniformly random order, as in the secretary problem.
2015: Esfandiari, HajiAghayi, Liaghat and Monemizadeh introduce the problem and give a 1−1/e≈0.632 guarantee with n time-dependent thresholds (ESA 2015).
2017: Ehsani, Hajiaghayi, Kesselheim and Singla obtain 1−1/e with a single threshold, using random tie-breaking (SODA 2018).
2018: Azar, Chiplunkar and Kaplan surpass 1−1/e by a small margin and give an upper bound of 11/15 for deterministic distribution-insensitive algorithms (EC 2018).
2019: Correa, Saona and Ziliotto break 1−1/e, proving 0.669 with blind strategies, and show that no algorithm beats 3−1 (arXiv:1807.07483; Mathematical Programming, doi:10.1007/s10107-020-01544-8). This mission formalizes the 0.669 guarantee.
Setting
An instance is a list of laws F1,…,Fn of independent nonnegative random variables V1,…,Vn, all continuous. A uniformly random permutation σ of [n]={1,…,n}, independent of the values, is the arrival order: at time j the gambler sees Vσj.
The time threshold algorithmTTAτ1,…,τn stops at the first time j with Vσj>τj. Its stopping time is T=inf{j∈[n]:Vσj>τj} and the gambler's reward is VσT1T<∞, written VσT.
A blind strategy is a nonincreasing function α:[0,1]→[0,1]. Given an instance, draw u1,…,un independently and uniformly from [0,1], let u[j] be the j-th smallest, and choose thresholds by
P(i∈[n]maxVi≤τj)=α(u[j]).
The strategy is called blind because α fixes the levels of the distribution of the maximum at which the gambler stops, independently of the instance and of n. The deterministic blind strategy (Definition 3.1) uses α(j/n) in place of α(u[j]). A piecewise-constant strategy αα1,…,αm(x)=∑j∈[m]αj1[mj−1,mj)(x) uses at most m distinct levels.
Formalization targets
Goal: Theorem 1.1
There is a nonincreasing α:[0,1]→[0,1] such that, for every n and every continuous instance,
E(VσT)≥0.669E(i∈[n]maxVi),
where T is the stopping time of the blind strategy α. One α serves every instance.
Milestones, in the order the proof uses them
§3, display after Definition 3.1: the blind strategy's value is the limit of the deterministic blind strategy's values on the instance padded with m zeros, as m→∞.
Lemma 3.1: an exact formula for P(VσT>t) for nonincreasing thresholds.
Lemma 4.2: a weighted replacement of the union bound ∑iP(Vi>t)≥P(maxiVi>t).
Lemma 4.3: for α=αα1,…,αm with αm>0, E(VσT)≥minj∈[m+1]fj(α1,…,αm)E(maxiVi) for explicit functions fj.
Corollary 4.4: some 1≥α1≥⋯≥αm≥0 gives the constant 0.66975; the paper reports that m=30 suffices.
Significance
Theorem 1.1 raised the guarantee for the prophet secretary problem from just above 1−1/e to 0.669, and it separates random-order arrival from adversarial arrival by more than the classical single-threshold analysis. The strategies are distribution-insensitive in a precise sense: the gambler needs only the distribution of the maximum, not the individual laws, and α does not depend on n. The milestones are general facts about multi-threshold stopping in random order (Lemmas 3.1, 3.3, 4.1, 4.2) that apply to any nonincreasing thresholds, not only to blind ones.
The result is proved in the paper, with one numerical step: Corollary 4.4 evaluates the bound of Lemma 4.3 at a specific vector (α1,…,α30) found by optimization, which the paper does not print. No part of this argument has a machine-checked proof. The formalization would make the reduction from blind to deterministic strategies, the stopping-time estimates and the final numerical certificate explicit and checked. The paper also shows that no blind strategy guarantees more than 0.675 (Theorem 1.2, outside this mission); any later improvement of the constant leaves this goal, which asserts only 0.669, intact.
Difficulty
The obvious argument fixes a threshold and bounds the probability that some value exceeds it; with one threshold this cannot beat 1−1/e, and with time-varying thresholds the events "the gambler has not stopped by time k" and "value i arrives at time k" are dependent, because the arrival of i at time k removes i from the earlier times. The union bound ∑iP(Vi>t)≥P(maxiVi>t) loses exactly the constant one is trying to gain. The analysis must therefore bound the law of the stopping time uniformly over all instances (Lemma 3.3), sharpen the conditional survival probability (Lemma 4.1) and the union bound (Lemma 4.2), and then pass to the limit of large instances. The final constant depends on a numerical optimization over m=30 levels, so the closing step is a certified evaluation of an explicit but long expression involving m-th roots and logarithms.
Formalization scope
All statements import one definitions file, BlindProphetSec.Blind.Setting.
Instances: μ : Fin n → Measure ℝ with IsProbabilityMeasure, NullSingletonClass (continuity, the paper's standing assumption of §1.2 and §3) and μ i (Set.Iio 0) = 0 (nonnegativity). Independence is built in: the values are the coordinates of Measure.pi μ. Indices and times are 0-based; the paper's time j is j.val + 1.
Random order: the average over all n! permutations. A conditional probability P(⋅∣σk=i) is written nP(⋅,σk=i).
Expectations are lower Lebesgue integrals in [0,∞], so E(maxiVi)=∞ is allowed; the paper's ratios are stated multiplied out, cE(maxiVi)≤E(VσT). The reward is 0 if the gambler never stops.
Thresholds of blind strategies are encoded through their levels: stop at time j iff α(u[j])<P(maxiVi≤Vσj). For continuous laws this agrees almost surely with Vσj>τj when the level is positive; level 1 means "never stop", and at level 0, where the paper's threshold is not unique, the encoding takes the largest threshold.
Pinned hypotheses: E(maxiVi)<∞ in the §3 limit display; t≥0 in Lemma 3.1 (the printed identity fails for t<0 because the reward is 0 on {T=∞}); α1<1 in Lemma 4.3, so that every term of fj is the paper's and none is a 0/0 junk value.
Generalizations: Lemmas 3.1, 4.1 and 4.2 are stated without continuity, and 4.1, 4.2 without nonnegativity, as printed.
A trivializing formalization is ruled out: the strategy α (and the vector α1,…,αm of Corollary 4.4) is quantified before n and the instance, the constants 0.669 and 0.66975 are exact rationals, and expectations cannot collapse to 0 through non-integrability.
A complete development needs order statistics of uniform samples, exchangeability arguments for uniformly random permutations, convergence of the padded deterministic strategies, and a certified numerical evaluation of fj. The random-order stopping vocabulary is reusable for other prophet secretary results, including the 3−1 upper bound of the companion mission. Contributions to any milestone, including partial results such as Lemma 3.2 (P(T≥k∣σk=i)≥P(T>k)), are welcome. The PDF used is the arXiv preprint, version 2 (arXiv:1807.07483v2, 12 March 2019); all labels and pages refer to it.
H. Esfandiari, M. Hajiaghayi, V. Liaghat, M. Monemizadeh, Prophet Secretary, Proceedings of ESA 2015, pp. 496–508.
S. Ehsani, M. Hajiaghayi, T. Kesselheim, S. Singla, Prophet Secretary for Combinatorial Auctions and Matroids, Proceedings of SODA 2018, pp. 700–714.
Y. Azar, A. Chiplunkar, H. Kaplan, Prophet Secretary: Surpassing the 1 − 1/e Barrier, Proceedings of EC 2018, pp. 303–318.
E. Samuel-Cahn, Comparison of Threshold Stop Rules and Maximum for Independent Nonnegative Random Variables, The Annals of Probability 12(4), pp. 1213–1216.
(More) Efficient Reinforcement Learning via Posterior Sampling: PSRL Has Bayesian Regret O(τS√(AT log(SAT))) in Episodic Finite MDPsResearch Paper
Motivation
An agent that interacts repeatedly with an unknown Markov decision process must trade exploration against exploitation. The dominant design principle for provably efficient reinforcement learning has been optimism in the face of uncertainty: UCRL2 (Jaksch, Ortner & Auer, 2010) and REGAL (Bartlett & Tewari, 2009) build confidence sets around the unknown model and act according to the most favourable model in them. Computing that optimistic policy can be expensive, and confidence sets built separately for every state–action pair can be loose.
Posterior sampling for reinforcement learning (PSRL), proposed by Strens (2000), replaces optimism by randomization: at the start of each episode it samples one MDP from the posterior distribution and follows the optimal policy of that sample. It is the reinforcement-learning analogue of Thompson sampling for bandits. Osband, Russo & Van Roy (2013) gave the first regret guarantee for PSRL, and with it the first regret guarantee for an RL algorithm not based on optimism. Their argument transfers the Bayesian-regret analysis of Thompson sampling by Russo & Van Roy (2014) from bandits to MDPs.
Timeline:
2000: Strens proposes PSRL as a heuristic.
2010: Jaksch, Ortner and Auer prove O~(DSAT) regret for UCRL2 in non-episodic MDPs with diameter D.
2013: Osband, Russo and Van Roy prove the O(τSATlog(SAT)) Bayesian regret bound for PSRL in episodic MDPs, the result of this mission.
Setting
A finite-horizon MDPM=(S,A,RM,PM,τ,ρ) has S states, A actions and horizon τ. Choosing action a in state s yields a reward drawn from a distribution RaM(s) on [0,1], with mean RaM(s), and moves the state to s′ with probability PaM(s′∣s). Every episode starts from a state drawn from the initial distribution ρ. A policyμ maps a state and a step i∈{1,…,τ} to an action, and its value is the expected total mean reward from step i on,
Vμ,iM(s)=EM,μ[j=i∑τRajM(sj)si=s].
A policy is optimal for M if it maximizes Vμ,iM(s) for every s and i; μM denotes a fixed choice of optimal policy for each M.
The true MDP M∗ is random with priorf. In episode k, PSRL samples Mk from the posterior f(⋅∣Htk) given the history Htk of all earlier states, actions and rewards, and follows μk=μMk for τ steps. With μ∗=μM∗, the regret of episode k and the cumulative regret are
In Lean, MDPs are indexed by a parameter θ in a measurable space Θ (MDPFamily), the value is value F θ π j with 0-based steps, and the run is the structure PSRLRun.
Formalization targets
Goal: Theorem 1
There is an absolute constant C>0 such that, for all S,A,τ≥1, every prior f, every measurable optimal-policy selector, every PSRL run with M∗∼f and every T,
E[Regret(T,πτPS)]≤CτSATlog(SAT).
This is the paper's O(⋅) statement. It does not fix the constant, which the paper's appendix computes with errors.
Milestones, in the order of the proof
Lemma 1: given Htk, M∗ and Mk have the same conditional law.
Theorem 2, (4): E[∑k≤mΔk]=E[∑k≤mΔ~k], where Δ~k=∑sρ(s)(Vμk,1Mk(s)−Vμk,1M∗(s)).
Lemma 2, (5): the dynamic programming equation Vμ,iM=Tμ(⋅,i)MVμ,i+1M.
(6): E[Δ~k∣M∗,Mk] equals the expected sum of one-step Bellman errors along the visited states.
(7): the pathwise split of ∑kΔ~k on the event {Mk,M∗∈Mk}.
P(M∗∈/Mk)≤1/m for the paper's confidence sets (Lemma 17 of Jaksch et al.).
Theorem 1 holds for every prior, with no assumption on the MDP class beyond finiteness and bounded rewards. It shows that a single posterior sample per episode, rather than an optimistic search over a confidence set, already achieves the T rate of the optimistic algorithms. The reduction it rests on (Lemma 1 and Theorem 2) applies to any problem in which the agent can sample from the posterior.
The theorem has a paper proof but, as far as is known, no machine-checked proof. A formalization adds three things. First, an exact model of the episodic Bayesian setting, with posterior sampling stated as a conditional law. Second, corrected versions of two steps: the factor in (8), which the page's argument does not justify as printed, and the square-root sum of Appendix B, which is false as printed. Third, reusable pieces: a path-defined finite-horizon value with its dynamic programming equation, a conditional-expectation form of the posterior-sampling identity, and deterministic counting lemmas for visit counts.
Difficulty
The proof combines three kinds of argument, each with its own obstacle in Lean.
Conditioning. Lemma 1 and Theorem 2 identify conditional laws given the history. The history is a random element whose length grows with k, and the posterior-sampling assumption only speaks about indicators of Mk. Extending it to functions of (M,Htk) and applying the tower property needs care with sub-σ-algebras. The same issue appears in (8): the confidence event depends on Htk, so it is not measurable with respect to σ(M∗,Mk), the σ-algebra on which (6) conditions. The working argument conditions on (M∗,Mk,Htk) instead.
Concentration over adaptive counts. The bound P(M∗∈/Mk)≤1/m needs an L1 deviation inequality for empirical transition distributions (Weissman et al.) and Hoeffding's inequality for rewards. Both must hold uniformly over the random number of visits, which the agent's own behaviour determines. Applying the inequalities at a fixed number of samples is not valid, because the sample size is random.
Counting. The appendix sums N−1/2 along the visited pairs; the paper's chain loses a factor of 2 at its integral comparison.
Formalization scope
Model. States and actions are Fin S and Fin A. Steps and episodes are 0-based: Lean step j is the paper's step j+1, and Lean episode k is the paper's episode k+1, with tk=kτ+1. MDPs are a measurable family over a parameter space Θ: transition rows satisfy the published IsTransitionKernel, and reward laws are Markov kernels supported on [0,1]. The initial distribution ρ is fixed. The value is defined from the state laws along the trajectory, not by the Bellman recursion.
The run.PSRLRun consists of measurable random elements on a probability space. Posterior sampling, the reset from ρ, rewards and transitions are stated as conditional expectations of indicators. Three assumptions the paper leaves implicit are made explicit:
the state is reset from ρ at every episode start;
the state reached after the last action of an episode is observed;
the sampling step uses fresh randomness.
The optimal-policy selector is any measurable map that is optimal at every step.
Constants and corrections.O(⋅) is one absolute constant, quantified before every other object; a constant that depends on S, A, τ, the prior or T would make the goal trivial, because the regret is at most ⌈T/τ⌉τ. Milestone 7 uses the factor τ+1, which the page's chain proves, where the page prints τ, and milestone 9 uses 8SAmτ where the page prints the false bound 2SAT; both corrections are disclosed in the statements.
Ruled out. The value is not defined by the recursion, which would make Lemma 2 definitional. Measurability is required, so the expectations are not junk zeros. The posterior-sampling clause concerns indicators of Mk only, so it does not already contain Lemma 1.
Needed infrastructure. Conditional expectations with respect to σ-algebras generated by random elements; finite-horizon Markov chain laws; Weissman's L1 inequality and Hoeffding's inequality at random sample sizes; elementary bounds on ∑jj−1/2. The counting milestones (8, 9) and Lemma 2 are self-contained and a good place to start. Proofs of the conditioning steps (milestones 1, 2, 4) are reusable for any posterior-sampling analysis.
Selected references
I. Osband, D. Russo, B. Van Roy, (More) Efficient Reinforcement Learning via Posterior Sampling, NIPS 2013; arXiv:1306.0940v5. https://arxiv.org/abs/1306.0940
D. Russo, B. Van Roy, Learning to Optimize via Posterior Sampling, Mathematics of Operations Research 39(4), 2014; arXiv:1301.2609. https://arxiv.org/abs/1301.2609
M. Strens, A Bayesian Framework for Reinforcement Learning, Proceedings of the 17th International Conference on Machine Learning (ICML), 2000 (reference [16] of the paper).
P. L. Bartlett, A. Tewari, REGAL: A Regularization Based Algorithm for Reinforcement Learning in Weakly Communicating MDPs, UAI 2009; arXiv:1205.2661. https://arxiv.org/abs/1205.2661
T. Weissman, E. Ordentlich, G. Seroussi, S. Verdú, M. J. Weinberger, Inequalities for the L1 Deviation of the Empirical Distribution, HP Labs Technical Report HPL-2003-97, 2003.
Quadratic Matrix Inequalities with Applications to Data-Based Control V: A Reduced LMI in P Alone and an Explicit Data-Based Stabilizing GainResearch Paper
Motivation
Data-driven control asks for a controller computed directly from measured trajectories of an unknown system, without first identifying a model. When the measurements are corrupted by noise, many systems explain the same data, and a controller is acceptable only if it works for all of them. Van Waarde, Camlibel, Eising and Trentelman (arXiv:2203.12959) model the noise by a quadratic matrix inequality (QMI). The set of systems consistent with the data is then itself the solution set of a QMI, and the design question becomes whether one QMI implies another. Their Theorem 5.1 gives a necessary and sufficient linear matrix inequality (LMI) for the existence of a common stabilizing controller, with no rank or Slater-type assumption on the data. It improves van Waarde, Camlibel, Mesbahi, IEEE TAC 2022, Thm. 14, which needed a generalized Slater condition.
The LMI of Theorem 5.1 has size 4n+m+1 and 2n(n+1)+nm+1 unknowns. Section 5.2 of the paper removes the controller variable: Theorem 5.3 gives an LMI of size 4n+1 in the Lyapunov matrix P and one scalar β, and then writes a stabilizing controller as a closed-form expression in P and the data. This mission formalizes that reduction and the Section 3 results on QMI solution sets that it rests on.
Setting
All matrices are real. Sk is the set of symmetric k×k matrices, A≥0 (A>0) means symmetric positive semidefinite (definite), and A† is the Moore–Penrose pseudo-inverse. For Π∈Sq+r, partitioned with Π11 of size q×q and Π22 of size r×r,
Zr(Π)={Z∈Rr×q:[IqZ]⊤Π[IqZ]≥0},
and Zr+(Π) is the same set with >0. The generalized Schur complement is Π∣Π22=Π11−Π12Π22†Π21, and Πq,r is the class of Π∈Sq+r with Π22≤0, Π∣Π22≥0 and kerΠ22⊆kerΠ12. For W∈Rq×p, Zr(Π)W={ZW:Z∈Zr(Π)} and ΠW=diag(W,Ir)⊤Πdiag(W,Ir).
Data. An unknown system x(t+1)=Asx(t)+Bsu(t)+w(t) produces X=[x(0)⋯x(T)] and U−=[u(0)⋯u(T−1)]; X− and X+ are the first and last T columns of X. The noise matrix W−=[w(0)⋯w(T−1)] is unknown but satisfies W−⊤∈ZT(Φ) for a given Φ∈Πn,T. The consistent systems are
Σ={(A,B):X+=AX−+BU−+W−for someW−⊤∈ZT(Φ)}.
The data are informative for quadratic stabilization if there are K and P>0 with P−(A+BK)P(A+BK)⊤>0 for all (A,B)∈Σ.
Formalization targets
Goal: Theorem 5.3
With Θ=Φ12+X+Φ22 and V=[X−;U−]: the data are informative if and only if some P>0, β>0 satisfy
stabilizes every (A,B)∈Σ. Under Φ22<0 and rankV=n+m the same holds with strict inequalities, β=0, and (VΦ22V⊤)−1. The goal states all four parts.
Milestones
Lemma A.1: A⊤A≤B⊤B iff A=SB with S⊤S≤I (and the strict version), with S=AB†.
Lemma A.2: the solutions of AM=B.
Theorem 3.3: all solutions of a QMI, Z=−Π22†Π21+((−Π22)†)1/2S(Π∣Π22)1/2+(I−Π22†Π22)T.
Theorems 3.4 and 3.5: Zr(Π)W=Zr(ΠW) and its strict analogue.
Corollaries 3.6 and 3.7: a QMI solution with ZW=Y exists iff Y∈Zr(ΠW).
Theorem 5.1: informativity iff the LMI in (P,L,β) is feasible, with K=LP−1.
Significance
Theorem 5.3 separates the computation of a Lyapunov matrix from the computation of the controller. The LMI drops from size 4n+m+1 to 4n+1 and loses the nm entries of L. A controller then follows from P by one explicit formula, with no second optimization. The noise class Πn,T covers energy bounds, bounds on individual samples, noise confined to a known subspace, and exact data, so the result applies where earlier conditions requiring Φ22<0 or a Slater point fail.
The Section 3 results are general facts about QMIs: an explicit parameterization of all solutions, also when the solution set is unbounded, and the identification of the image of a solution set under a linear map. They are reusable wherever QMIs appear in robust control: Petersen's lemma, the elimination lemma, dissipativity analysis.
All results are proved in the paper, with the exception of the proof of Theorem 3.5, which is only described as similar to that of Theorem 3.4. None is formalized. The work here is the formal development: a pseudo-inverse calculus for real matrices, generalized Schur complements, matrix square roots in the Loewner order, and the block-matrix identities of Section 5.
Difficulty
The QMI reformulation of the stabilization problem is short. The difficulty lies in degenerate matrices. Π22 is typically singular, so every step works with pseudo-inverses, kernel inclusions and generalized Schur complements, and identities that are routine for invertible blocks need range conditions. The closed-form gain (5.10) comes from a block pseudo-inverse formula for a positive semidefinite matrix whose blocks may all be singular, and checking it requires tracking which ranges contain which. The strict statements need a separate argument: a strict inequality A⊤A<B⊤B does not pass to W⊤A⊤AW<W⊤B⊤BW without full column rank of W, which is why Theorem 3.5 and Corollary 3.7 assume it.
The first idea, to eliminate L from (5.5) by completing the square, runs into the same singular blocks: the minimizing L involves pseudo-inverses of data-dependent matrices whose ranges are not controlled by the LMI alone.
Formalization scope
Lean conventions:
Index sets are arbitrary finite types, so q, r, p are cardinalities. The data dimensions n, m, T are natural numbers, with X an n×(T+1) matrix.
A≥0 is Mathlib's PosSemidef (which includes symmetry); A>0 is PosDef.
A† is defined as the matrix satisfying the four Penrose conditions, which exists and is unique. Mathlib's A⁻¹, which returns 0 on singular matrices, appears only in (5.11a) and in K=LP−1, where the matrices are invertible.
Square roots are CFC.sqrt in the Loewner order. Kernel inclusions are stated on vectors. Full column rank of W∈Rq×p is rank W = p.
The statements of Theorems 5.1 and 5.3 carry the hypothesis that the data were generated by some (As,Bs), i.e. Σ=∅; the paper assumes this when it says the data are generated by (2.1) with noise model (2.3). Without it, informativity holds vacuously and the equivalences fail. "Stabilizing gain" is asserted with the P of the LMI: the Lyapunov inequality P−(A+BK)P(A+BK)⊤>0 and (A+BK)k→0 for every (A,B)∈Σ. Corollaries 3.6 and 3.7 print the hypothesis kerΠ22⊆kerΠ21, which is dimensionally impossible; it is read as kerΠ22⊆kerΠ12. The printed dimensions in Lemma A.2 are corrected to those its formula requires.
A formalization in which Σ may be empty, or in which A† is replaced by the total inverse, would make the goal vacuous or false. Both are ruled out above.
Theorem 5.1 is restated here as a milestone. It is also the goal of the companion mission IV, and solvers may prove it there.
Reusable infrastructure is welcome as separate contributions: uniqueness and the basic identities of the matrix pseudo-inverse; the generalized Schur complement criterion for positive semidefiniteness of a block matrix; Douglas-type factorization (Lemma A.1); square roots of positive semidefinite matrices commuting with pseudo-inverses.
Selected references
H. J. van Waarde, M. K. Camlibel, J. Eising, H. L. Trentelman, Quadratic matrix inequalities with applications to data-based control, SIAM J. Control Optim., 2023; preprint arXiv:2203.12959v3 (the version cited here). https://arxiv.org/abs/2203.12959
H. J. van Waarde, M. K. Camlibel, M. Mesbahi, From noisy data to feedback controllers: nonconservative design via a matrix S-lemma, IEEE Trans. Automat. Control, 67 (2022), pp. 162–175. https://doi.org/10.1109/TAC.2020.3047577
H. J. van Waarde, J. Eising, H. L. Trentelman, M. K. Camlibel, Data informativity: a new perspective on data-driven analysis and control, IEEE Trans. Automat. Control, 65 (2020), pp. 4753–4768. https://doi.org/10.1109/TAC.2020.2966717
Quadratic Matrix Inequalities with Applications to Data-Based Control II: Matrix Finsler's Lemma — Z⁰ᵣ(N) ⊆ Zᵣ(M) iff M − αN ⪰ 0 for Some α ≥ 0Research Paper
Motivation
Finsler's lemma (P. Finsler, 1937) states that for symmetric matrices M,N∈Sn, the quadratic form x⊤Mx is positive on every nonzero x with x⊤Nx=0 if and only if M−αN>0 for some real α. Together with the S-lemma of Yakubovich it is one of the basic tools for converting a statement about all vectors satisfying a quadratic constraint into a single linear matrix inequality (LMI) in a multiplier, which can then be checked by semidefinite programming. Both results are used throughout robust control, where uncertainty is described by quadratic constraints.
In data-driven control the unknown object is a matrix, not a vector: the system matrices (A,B) consistent with noisy measurements form a set of the form
Zr(N)={Z∈Rr×q:[IZ]⊤N[IZ]⩾0},
and a controller has to work for every element of such a set. H. J. van Waarde, M. K. Camlibel, J. Eising and H. L. Trentelman (arXiv:2203.12959, SIAM J. Control Optim. 2023) develop matrix-valued versions of the S-lemma and of Finsler's lemma for exactly this purpose. Their matrix S-lemma (Theorem 4.7) requires a Slater-type condition: N must have a positive eigenvalue. This mission concerns the complementary case in which N has no positive eigenvalue, where the inequality defining Zr(N) degenerates into an equality and a Finsler-type statement is needed.
Setting
All matrices are real. For a symmetric matrix A, A⩾0 (A>0) means positive semidefinite (definite); A⩽0 means −A⩾0. A† is the Moore–Penrose pseudo-inverse, the unique matrix X with AXA=A, XAX=X and AX, XA symmetric.
Fix integers q⩾1 and r⩾0. A symmetric matrix M∈Sq+r is partitioned as
M=[M11M21M12M22],
with M11 of size q×q and M22 of size r×r, and likewise N. For Z∈Rr×q write FM(Z):=[IZ]⊤M[IZ]∈Sq, and define
Zr(M)={Z:FM(Z)⩾0},Zr0(N)={Z:FN(Z)=0}.
The generalized Schur complement is M∣M22:=M11−M12M22†M21, and the classΠq,r consists of the symmetric M with M22⩽0, M∣M22⩾0 and kerM22⊆kerM12. For N∈Πq,r, the condition N∣N22=0 is equivalent to N having no positive eigenvalue; then Zr(N)=Zr0(N). Finally, set
A companion item formalizes Example 4.9 (p. 13): for N=[−111−1] and M=[100−1] all hypotheses except the one on Θ hold, the inclusion holds, and no α⩾0 works.
Significance
The theorem turns an inclusion between two sets of matrices, a statement quantified over infinitely many Z, into feasibility of a scalar-multiplier LMI. In the paper it is one of four matrix S-lemma variants (Theorems 4.7, 4.8, 4.10, 4.11) that together cover the cases arising in data-based control: whether the data-consistent set Zr(N) has a Slater point, and whether the conclusion is non-strict or strict. Theorem 4.8 is the variant for noise models whose quadratic description has no interior, for instance exact equality constraints on the noise. Example 4.9 shows that the kernel hypothesis on Θ is genuinely needed, so the statement marks the boundary of when the lossless reduction holds.
The paper gives a complete proof. No machine-checked proof of this theorem, of the matrix S-lemma, or of Finsler's lemma in matrix form is known to exist, in Lean or elsewhere. Formalizing it produces reusable infrastructure: the Moore–Penrose pseudo-inverse of real matrices with its Penrose identities, the generalized Schur complement criterion for positive semidefiniteness of a block matrix, and congruence manipulations of 2×2 block matrices, none of which is currently in Mathlib in this form.
Difficulty
The "if" direction is a one-line computation. For the "only if" direction the classical vector Finsler lemma is not directly applicable: it concerns vectors x with x⊤Nx=0, while the hypothesis here only controls matrices Z with FN(Z)=0, which is a much smaller family when q>1, and the conclusion is non-strict. The natural first idea, applying the vector S-lemma, fails because N has no positive eigenvalue, so its Slater condition is violated. Instead one must exploit the structure of Πq,r: the pseudo-inverse appears because N22 and M22 are typically singular, and every manipulation must track kernels and ranges exactly.
Formalization scope
The blocks are indexed by arbitrary finite types ι (size q) and κ (size r); a matrix in Sq+r is Matrix (ι ⊕ κ) (ι ⊕ κ) ℝ, its blocks are toBlocks₁₁ etc., and Rr×q is Matrix κ ι ℝ. A⩾0 is Mathlib's PosSemidef, which includes symmetry. The pseudo-inverse is defined by Hilbert's choice among matrices satisfying the four Penrose conditions; since such a matrix exists and is unique, this is the pseudo-inverse and not a junk value. Kernel inclusions are stated with matrix–vector products.
One hypothesis is added and disclosed: q⩾1 (Nonempty ι) in the second statement of Theorem 4.8 and in the milestones that need it. The proof picks a nonzero vector of Rq, and at q=0 the equivalence is false (r=1, N=[0], M=[−1]). The first statement keeps a real multiplier of any sign; the second requires α⩾0, as printed. The hypothesis N∣N22=0 together with N∈Πq,r makes Zr0(N) nonempty, so the inclusion is never vacuous; a formalization in which Zr0(N) could be empty, or in which N22† were replaced by the inverse (which is 0 on singular blocks in Lean), would not be this theorem.
Needed infrastructure: existence and uniqueness of the Moore–Penrose pseudo-inverse (needed to work with the definition at all), symmetry of A† for symmetric A, the generalized Schur complement criterion for [AB⊤BC]⩾0, and positive semidefiniteness under congruence by an invertible matrix. These lemmas are reusable beyond this mission and contributions of them are welcome, as are proofs of the companion Example 4.9.
Selected references
H. J. van Waarde, M. K. Camlibel, J. Eising, H. L. Trentelman, Quadratic matrix inequalities with applications to data-based control, SIAM J. Control Optim., 2023; preprint arXiv:2203.12959v3. https://arxiv.org/abs/2203.12959
P. Finsler, Über das Vorkommen definiter und semidefiniter Formen in Scharen quadratischer Formen, Comment. Math. Helv. 9 (1937), 188–192. https://doi.org/10.1007/BF01258188
H. J. van Waarde, J. Eising, H. L. Trentelman, M. K. Camlibel, Data informativity: a new perspective on data-driven analysis and control, IEEE Trans. Automat. Control 65 (2020), 4753–4768. https://doi.org/10.1109/TAC.2020.2966717
Shortest Paths in Graphs of Convex Sets I: The Perspective Mixed-Integer Convex Program (5.5) Has the Same Optimal Value as the Shortest-Path Problem in a Graph of Convex SetsResearch Paper
Motivation
Many planning problems combine a discrete choice with a continuous one. A robot moving through a cluttered room chooses which free regions to traverse and where exactly to cross between them; a vehicle chooses a sequence of operating modes and a trajectory within each mode. Marcucci, Umenberger, Parrilo and Tedrake (arXiv:2101.11565, SIAM J. Optim. 2024, doi:10.1137/22M1523790) abstract this as the shortest-path problem in a graph of convex sets (SPP in GCS): a shortest-path problem in which each vertex is not a point but a convex set, and the length of an edge depends on where in its two sets the path enters and leaves. The paper shows that the problem is NP-hard even in simple cases, and then gives a mixed-integer convex formulation that is exact and whose convex relaxation is strong in practice. That formulation underlies the GCS motion planners developed later by the same group.
Setting
A graph of convex sets consists of a finite directed graph G=(V,E), a source vertex s, a target vertex t=s, a nonempty compact convex set Xv⊆Rn for each vertex v, and for each edge e=(u,v) an edge lengthℓe:Rn×Rn→R≥0∪{∞}, which is proper, closed and convex. No symmetry or triangle inequality is assumed. An s-t path is a sequence p=(v0,…,vK) of distinct vertices with v0=s, vK=t and (vk,vk+1)∈E; Ep is the set of its edges. The SPP in GCS (2.1) is
SPP(G):=inf{e=(u,v)∈Ep∑ℓe(xu,xv):p an s-t path,xv∈Xv for v∈p}.
The perspective of a set X is the closed cone X~:=cl{(x,λ):λ≥0,x∈λX} (Definition 4.1). The perspective of a functionf is f~(x,λ):=inf{σ:(x,σ,λ)∈epif}, the function whose epigraph is the perspective of the epigraph of f (Definition 4.4). For λ>0 it equals λf(x/λ).
With Evin and Evout the edges entering and leaving v, the MICP (5.5) has a flow ye∈{0,1} and two vectors ze,ze′∈Rn per edge:
Its optimal value is MICP(G). The paper derives (5.5) from a biconvex program (5.2), the shortest-path LP (5.1) together with vertex positions xv∈Xv and the bilinear constraints ze=yexu, ze′=yexv. Lemma 5.4 turns every valid linear inequality on the flows at a vertex into a valid perspective constraint.
Formalization targets
Goal: Theorem 5.7 (p. 10)
Under the standing assumptions of §2 and the assumption of p. 7 that no edge enters s and no edge leaves t,
MICP(G)=SPP(G).
Both sides are infima in the extended reals and equal +∞ when there is no s-t path.
Milestones
Remark 4.2 (p. 5): for bounded closed X, X~={(x,λ):λ≥0,x∈λX}.
Remark 4.5 (p. 6): f~(x,λ)=λf(x/λ) for λ>0, f~=∞ for λ<0, f~(0,0)=0 for proper closed convex f.
Lemma 5.4 (p. 9): a valid inequality ∑e∈Evceye+d≥0 for (5.2) lifts to the valid constraint (∑Evinceze′+∑Evoutceze+dxv,∑Evceye+d)∈X~v.
Remark 5.5 (p. 9): the equality version of Lemma 5.4.
Path and cycles (proof of Theorem 5.7): binary flows satisfying (5.5b)–(5.5d) form the vertex-disjoint union of an s-t path and cycles.
Simplification of (5.5e) (proof of Theorem 5.7): ye=0 forces ze=ze′=0 at cost 0; ye=1 forces ze∈Xu, ze′∈Xv at cost ℓe(ze,ze′).
Flow along the path (proof of Theorem 5.7): for consecutive path edges e,f, ze′=zf.
A companion item states the recovery part of Theorem 5.7 (second and third sentences): an optimal MICP solution yields an optimal path and optimal positions xu=ze, xv=ze′.
Significance
Theorem 5.7 is what makes (5.5) usable: it says that the mixed-integer program, whose only nonconvexity is ye∈{0,1}, solves the SPP in GCS exactly. The SPP in GCS is NP-hard by Theorem 3.1, so exactness is the most one can ask of a polynomial-size formulation, and dropping integrality gives a convex program whose value is a lower bound for branch and bound. The perspective construction of Lemma 5.4 is a general recipe, closely related to the reformulation-linearization technique, for convexifying products of flows and positions.
On the formal side, the paper's proof is half a page and leaves several points to the reader: why the integer flows decompose into a path and cycles, why the closure in the perspective cone disappears for compact sets, and why the perspective function vanishes at the origin. A machine-checked proof makes these steps explicit. The result has not been formalized before, and the mission also produces reusable statements about perspectives of sets and functions in extended-real arithmetic and about the decomposition of unit s-t flows with degree bounds.
Difficulty
The inequality MICP(G)≤SPP(G) is the routine half: a path and its positions give a feasible point of (5.5) of the same cost. The other half requires reading a path out of an arbitrary feasible point. Integer flows satisfying (5.5b)–(5.5d) need not be a path: they may also contain disjoint cycles, and the degree constraint (5.5c) is what prevents a cycle from sharing a vertex with the path (Example 5.10 shows the value drops without it). The cost of a cycle must be shown to be nonnegative, and the perspective constraints must be shown to collapse to ze=ze′=0 on zero-flow edges. That step uses compactness of Xv. For unbounded sets the zero slice of X~v is the recession cone, and the argument fails. The cost at zero flow is ℓ~e(0,0,0), defined by a closure, and its value 0 uses properness and convexity of ℓe, not just the formula λℓe(⋅/λ).
Formalization scope
Rn is Fin n → ℝ. Edge lengths and all optimal values are EReal; optimal values are infima (⨅/sInf), equal to +∞ on an empty feasible set. Attainment is not assumed.
The graph is a structure with a finite edge set E : Finset (V × V) over a finite vertex type, a source, a target, sets X v and lengths ℓ e. The standing assumptions of §2 (s=t; Xv nonempty, compact, convex; ℓe≥0 proper closed convex) are the predicate IsGCS. The assumption ∣Esin∣=∣Etout∣=0 of p. 7 is the separate predicate NoInSNoOutT, a hypothesis of the goal, of the path-and-cycles milestone and of the recovery item.
Paths are duplicate-free vertex lists from s to t along edges; Ep is the list of consecutive pairs.
The perspective of a function is Definition 4.4's infimum over the closed perspective cone of the epigraph. The formula λf(x/λ) is not used as a definition: in Lean it would evaluate to 0 at λ=0 for every argument and erase the content of (5.5e). The integrality constraint ye∈{0,1} is part of the feasible set; without it the goal is false (§9.4 reports relaxation gaps).
Disclosed additions: Lemma 5.4 and Remark 5.5 assume no self-loop at v, which the page's partition of Ev into incoming and outgoing edges presupposes. The recovery item takes the s-t path contained in {e:ye=1}, since the page's claim that this set is itself a path fails when an optimal solution carries a zero-length cycle.
Needed infrastructure: closures of cones over compact sets, extended-real infima, and the combinatorics of unit flows on finite digraphs. Proofs of any milestone, and reusable lemmas on perspectives, are welcome.
Selected references
T. Marcucci, J. Umenberger, P. A. Parrilo, R. Tedrake, Shortest Paths in Graphs of Convex Sets, SIAM Journal on Optimization 34(1), 2024; arXiv:2101.11565v5. https://arxiv.org/abs/2101.11565
R. K. Ahuja, T. L. Magnanti, J. B. Orlin, Network Flows: Theory, Algorithms, and Applications, Prentice Hall, 1993 (flow decomposition, shortest-path LP).
T. Marcucci, M. Petersen, D. von Wrangel, R. Tedrake, Motion Planning around Obstacles with Convex Optimization, Science Robotics 8(84), 2023. https://doi.org/10.1126/scirobotics.adf7843
Real-Time Dynamic Pricing for Revenue Management with Reusable Resources, Advance Reservation, and Deterministic Service Time Requirements II: Average-Loss Bound for Batch-Adjusted DPCResearch Paper
Motivation
Hotel rooms, rental cars, cloud servers, operating rooms and rental equipment are reusable resources: a customer occupies capacity for a fixed service time, and the capacity returns to the firm afterwards. Many of these settings also allow advance reservation, where a request made today is for a service that starts later. Lei and Jasin study dynamic pricing in this setting. Prices are posted period by period, demand is non-stationary, and the firm wants revenue close to the best achievable while never booking more units than it owns.
Classical network revenue management, where capacity is sold once and never returns, has an extensive asymptotic theory. In that literature, controls that re-solve or adjust a fluid (deterministic) plan are known to lose a vanishing fraction of the optimal revenue as demand and capacity grow (Gallego and van Ryzin 1997; Jasin 2014). Reusable resources break the standard argument, because each sale removes capacity for a window of time and not for the rest of the horizon. Lei and Jasin give the first control for reusable resources with non-stationary arrivals, deterministic service times and advance reservation whose average loss is o(θ−1/2) in the scale parameter θ (Lei and Jasin, Operations Research 2020).
Setting
A firm manages I resource types with integer capacities Ci≥1 and sells K≥1 service types over periods t=1,…,T. At most one request arrives per period. A type-k request made at the beginning of period t uses aik∈{0,1} units of resource i during periods t+ℓk,…,t+ℓk+nk−1. Here nk is the service time and ℓk the reservation lead time.
In each period the firm chooses a demand-rate vectorλt∈Ωλ=[0,λU]K, which is equivalent to choosing prices. A type-k request then arrives with probability λkt, independently of the past given λt, and the expected revenue rate is rt(λt). The deterministic relaxation DET-H maximizes ∑t=1Trt(λt) over λt∈Ωλ, subject to
k=1∑Ks:s+ℓk≤t≤s+ℓk+nk−1∑aikλks≤Cifor every resource i and period t≤T.
Its optimal value JHD bounds the optimal expected revenue, and the average loss of a control π is L(π)=(JHD−E[Rπ])/T. Let λD be an optimal solution of DET-H. The quantity nk is the smallest number of periods with λkt,D>0 inside any service cycle of type k that carries positive demand.
The control DPC-B(m,ϵ) splits the horizon, for each type k, into adjacent batchesTkb, each with mk positive-rate periods. In period t it posts
where βk(t) is the batch containing t. The rate is set to 0 when fewer than aik units of some resource i are free at the service start t+ℓk. The buffer ϵk protects capacity, and the batch term corrects for the demand surprises of the previous batch.
Formalization targets
Goal: Theorem 3, display (8)
There is a constant M3>0, depending only on K, the curvature constant Ψ of Assumption A5 and a bound R on ∣rt∣, such that for every instance, every valid batch partition with mk≤nk and every ϵk in the stated range,
The constant is uniform in T, C, nk, ℓk, mk and ϵk, which is what makes the bound informative.
Milestones
Lemma EC.3: on the good event G(ϵ,m,δ), the free capacity satisfies Ct⪰e and the corrected rates stay inside (0,λU).
(EC.22): on G, the posted rate equals the unprojected corrected rate.
Lemma EC.4, as proved in (EC.23): P(Gˉ)≤∑kmk4Texp{min{maxiCi,mk}γk2−8Kminjϵj−1γk} for all γk∈(0,1].
E[(∑s∈TkbΔks)2]≤mk for every batch.
E([∇rt(λt,D)]⊤(ηδt⊙ηet))=0.
A companion item states Lemma 2 in this setting: stretching λD in time solves DET-H for the θ-th system of display (7).
Significance
Along the scaling (7), Theorem 3 with mk≈nk2/3 gives an average loss of O(θ−2/3log1/2θ). The non-adaptive control DPC of the same paper achieves O(θ−1/2log1/2θ) (its Theorem 1). The result shows that batch-level feedback improves on the square-root barrier for reusable resources, and it does so with heterogeneous service times and advance reservation, which cover car rental and hotel bookings.
Theorem 3 and its lemmas are proved in the paper's e-companion. No machine-checked proof of them, and no formal model of reusable-resource revenue management, is known. The mission produces a Lean model of the setting: capacity windows with lead times, the availability table C~(t,s), an adapted control on finite sample paths, and its exact path law. On top of that model it states the paper's main bound in full. Several printed steps need repair (see the scope section), so a formal proof would also settle the exact constants.
Difficulty
The obvious route bounds each period's loss by a Taylor expansion around λt,D and controls the deviations by a martingale inequality. That route needs the control to coincide with the unprojected corrected rate for the whole horizon, that is, no capacity shortfall and no clipping. Capacity is a moving window of overlapping services with different lengths and lead times, so a shortfall at one period depends on requests made up to nk+ℓk periods earlier, in other batches and other types. The batch correction makes the rates depend on past errors, so the errors are martingale differences, not independent variables. The concentration bound must hold uniformly over batches whose number grows with T, with a variance proxy min{maxiCi,mk} that is not the batch length. The early periods, before any service of type k has completed, need a separate threshold (the two cases of (EC.17)).
Formalization scope
All objects are defined in the namespace ReusablePricing.DPCB. The conventions are fixed as follows.
Periods are 1,…,T. A sample path is a function Fin T → Option (Fin K), recording no request or one request of a type in each period. Expectations are finite sums against the exact path law: the product over periods of the one-period law, whose probabilities are the rates posted given the past. The demand law is never left as a hypothesis.
Decisions are rates. A turn-off is rate 0. Prices and A1–A3 do not appear. The bound R on ∣rt∣ over Ωλ replaces the proofs' ru. KλU≤1 is assumed, as implied by at most one request per period.
Capacity windows are empty for t≤ℓk. Ct=C~(t,t), and C~ is defined by its defining sentence on p. 18, not by the update rule of Step 2a, whose indices do not match its own explanation. Admission is tested for services starting within the horizon.
n in (EC.17) is minknk. The events of (EC.16) are read over the batches Tkb. Statements "on G" are made on paths of positive probability.
Lemma EC.4 is stated with the 8K that its proof establishes, not the printed 4K.
Goal statements carry every standing hypothesis of Section 6: optimality of λD, the convention λkt,D∈{0}∪(0,λU), A4, A5, and the existence of a demand-carrying cycle for every type, which nk presupposes. The sanity check exhibits instances, with and without lead time, where all hypotheses of Theorem 3 hold and the ϵ-range is nonempty.
The constant M3 is quantified before the instance, after only K, Ψ and R. Choosing it after the instance would make the bound trivial, because the loss never exceeds 2R.
A complete development needs Freedman- or Doob-type inequalities for bounded martingale differences on finite path spaces, second-order Taylor bounds for C2 functions on boxes in RK, and window-counting lemmas for capacity. The first two are reusable well beyond this mission. Contributions of any of the milestones, of general martingale tools for finite adapted processes, or of a proof of the companion Lemma 2 are welcome.
Selected references
Y. Lei and S. Jasin, Real-Time Dynamic Pricing for Revenue Management with Reusable Resources, Advance Reservation, and Deterministic Service Time Requirements, Operations Research, 2020. https://doi.org/10.1287/opre.2019.1906 (author manuscript: SSRN 2816718, https://ssrn.com/abstract=2816718)
G. Gallego and G. van Ryzin, A Multiproduct Dynamic Pricing Problem and Its Applications to Network Yield Management, Operations Research 45(1), 1997. https://doi.org/10.1287/opre.45.1.24
S. Jasin, Reoptimization and Self-Adjusting Price Control for Network Revenue Management, Operations Research 62(5), 2014. https://doi.org/10.1287/opre.2014.1276
A Large Family of Maximum Scattered Linear Sets of PG(1, q^n) and Their Associated MRD Codes 2: For Odd q = p^r and t > 4, a Lower Bound on the Number of PΓL-Classes of the Linear Sets L_{h,t}Research Paper
Motivation
A linear set of the projective line PG(1,qn) is the set of points ⟨u⟩Fqn spanned by the nonzero vectors u of an Fq-subspace U⊆Fqn2. The extremal ones, the maximum scattered linear sets, are given by scattered polynomialsf over Fqn, and each such f also gives an Fqn-linear maximum rank-distance (MRD) codeCf={ax+bf(x):a,b∈Fqn} of minimum distance n−1 (Sheekey, Adv. Math. Commun. 10, 2016). Rank-distance codes are used in network coding, and linear sets appear in the study of semifields, blocking sets and two-intersection sets.
Linear sets and codes are classified up to equivalence: two linear sets are the same object if a collineation of the line, an element of PΓL(2,qn), maps one onto the other. The question is therefore not only whether new scattered polynomials exist but how many inequivalent linear sets they produce.
2000–2001. The monomials xqs, gcd(s,n)=1 (Blokhuis–Lavrauw 2000), all give a single linear set of PG(1,qn) (pseudoregulus type); the binomials δxqs+xqn−s (Lunardon–Polverino 2001) give at most φ(n) times a function of q classes.
2018. Csajbók, Marino and Polverino (J. Combin. Theory Ser. A 157, 2018) develop the equivalence theory of linear sets of PG(1,qn), including coefficient identities that two q-polynomials defining the same linear set must satisfy.
2021. Longobardi and Zanella (J. Algebraic Combin. 2021) give a third family, again with at most φ(n)/2 classes.
2021. Longobardi, Marino, Trombetti and Zhou (arXiv:2102.08287v3) construct the family ψh,t (Theorem 3.1, the companion mission) and show (Theorem 5.1) that it contains a number of PΓL-classes growing exponentially in n. This mission formalizes that count.
Setting
Let p be an odd prime, r≥1, q=pr, t≥1, n=2t, and let F=Fqn be the finite field of order q2t. Its subfield Fq is {c:cq=c}.
A q-polynomial is a map f(x)=∑i=0n−1αixqi with αi∈F (qpoly). It is scattered (IsScatteredPoly) if for all z,y∈F∗, f(z)/z=f(y)/y forces z=cy with c∈Fq.
The graph of f is Uf={(x,f(x)):x∈F}⊆F2 (graph). A point⟨v⟩Fqn of PG(1,qn) is the set of all F-multiples of a nonzero v∈F2 (point), and the linear set of f is the point set
Lf={⟨(x,f(x))⟩Fqn:x∈F∗}(linSet).
For a field automorphism σ and an invertible 2×2 matrix A over F, the map v↦Avσ (σ acting on coordinates, act) is an element of ΓL(2,qn); with σ=id it is in GL(2,qn). Two subsets U,W⊆F2 are GL- or ΓL-equivalent (GLEquiv, GammaLEquiv) if such a map sends U onto W. Two point sets are PGL- or PΓL-equivalent (PGLEquiv, PGammaLEquiv) if the induced map on points, P↦{Avσ:v∈P}, sends one onto the other.
H={h∈F:hqt+1=−1} (hSet), Uh=Uψh,t and Lh,t=Lψh,t. For t≥3 and h∈H∖Fqt, ψh,t is scattered and Lh,t is a maximum scattered linear set (Theorem 3.1).
Formalization targets
Goal: Theorem 5.1
For t>4, the number M of PΓL(2,qn)-classes met by the sets Lh,t, h∈H, satisfies
It is stated as: some S⊆H of at least that size has pairwise PΓL-inequivalent Lh,t. The goal fixes the paper's constants; the proof on p. 26 in fact counts classes exactly in terms of class sizes, so a sharper bound is a natural follow-up.
Milestones
Proposition 3.2 (p. 7): h∈H⇒hq2+1=1 and hqt−2=−h.
∣H∣=qt+1 (p. 26).
Display (29) (p. 16): for h,k∈H, Uh∼GLUk iff h=±k (t≡2) or h=ℓk with ℓq2+1=1 (t≡2mod4).
Theorem 4.2 (a)–(b) (p. 16), in the Uh form: Uh∼ΓLUk iff h=±kρ (resp. ℓkρ) for some ρ∈Aut(Fqn).
Proof of Corollary 4.3 (p. 18): the GL-class of Uh in the family has ξh=2 (resp. q2+1) members, and its ΓL-class at most nrξh.
Lemma 2.2 (p. 5, from Csajbók–Marino–Polverino): Lf=Lg forces α0=β0 and two families of coefficient identities.
Display (37) (pp. 20–21): PGL-equivalence of Lf,Lg as an equality of sets of quotients.
The case b=0 of (37) (p. 21): c=0.
Lemma 5.2 (p. 21): the case b=0 for ψh,t,ψk,t gives (h/k)q2+1=1 and Uh∼ΓLUk.
Lemma 5.3 (p. 22): the case b=1, with its three conclusions.
Significance
The result. Theorem 5.1 shows that maximum scattered linear sets of PG(1,qn), and hence Fqn-linear MRD codes, exist in numbers exponential in n up to equivalence, whereas each previously known infinite family yields at most φ(n) times a function of q classes (Table 1, p. 3). Remark 5.4 draws the consequence that the family is new. Its intermediate results, the classification of the GL- and ΓL-equivalences between the Uh (Theorem 4.2) and the reduction of PGL-equivalence to sets of quotients, are the standard tools for any later classification of this family.
Formalizing it. The theorem has a complete published proof; none of it is machine-checked. The platform has no action of GL(2,qn) or ΓL(2,qn) on the projective line, no linear sets of PG(1,qn) as point sets, and no coefficient identities for q-polynomials defining the same linear set. The mission produces these, then the class counts. Lemma 2.2 is a result of an earlier paper (Csajbók–Marino–Polverino 2018) cited without proof, so formalizing it means formalizing part of that paper too.
Difficulty
Equality of two linear sets is equality of sets of points, which says nothing directly about the polynomials: different q-polynomials can define the same linear set (all xqs with gcd(s,n)=1 do). The obvious idea, that PΓL-equivalent linear sets come from ΓL-equivalent subspaces Uh, fails in general (p. 3), so the count cannot be read off Theorem 4.2. The step that needs the restriction t>4 is the comparison of coefficients in the q-polynomial identities, which for t=3,4 is open (Remark 5.5). A second difficulty is bookkeeping: the exponents qt±1, q2t−1, the negative powers of h and the case split on tmod4 must all be tracked through every identity.
Formalization scope
Field.F is a finite field with CharP F p, p prime, Odd p ("q odd"), q = p ^ r with 0 < r, and Fintype.card F = q ^ (2 * t). r is the exponent of q=pr, as in Theorem 5.1, so ∣Aut(Fqn)∣=rn. Lemma 2.2, (37) and the b=0 step are stated for general n≥1 and Fintype.card F = q ^ n, without "q odd", as printed.
Exponents.xqi is x ^ q ^ i; negative powers of h are field quotients (h / h ^ q ^ (t+1) for h1−qt+1), exact since h=0 on H. Natural-number subtractions t−1, 2t−1, 3t−2, n−k, qi−1 are exact in the stated ranges.
Geometry. The plane is Fin 2 → F; points are sets of scalar multiples; linear sets are sets of points. Equivalences are stated as images of sets under v↦Avσ with detA a unit and σ:F≃F a ring automorphism.
Pinned readings.
"Scattered" is the p. 2 quotient definition with Fq={c:cq=c}.
Proposition 3.2's hqt−2 is read as hq3t−2 (equal for t≥2), and "q odd" is added.
Theorem 4.2 (a)–(b), stated for codes Ch,t, is formalized as the ΓL-equivalence of Uh,Uk, which the proof establishes and which is the code equivalence by Theorem 2.1 (from Sheekey 2016). The automorphism-group sentence is omitted.
Lemma 5.3's hypothesis "(41) holds" is read in the setting of p. 21: b=1, cˉ=c−da=0, gˉ=∑γiyqi inverse to x↦ax+g(x) (47), and d+cˉγ0=0 (40).
In (37), ax+bg(x)=0 for x=0 is part of the condition (stated on p. 21 for b=1).
"The total number M of inequivalent Lh,t" is the number of classes met by {Lh,t:h∈H}, formalized through a pairwise-inequivalent subset of H. H is not restricted to h∈/Fqt, as in the count ∣H∣=qt+1 of p. 26; "maximum scattered" is descriptive.
Trivializing formalizations ruled out. Equivalence is stated on point sets, never on quotient sets {f(x)/x}, where Lean's y/0=0 could merge inequivalent sets; the goal requires pairwise inequivalence, not distinctness of the parameters h (note ψ−h,t=ψh,t); and the hypotheses are satisfiable, with bound ⌊244/40⌋=6 at q=3, t=5.
Citation basis. All indices and pages refer to arXiv:2102.08287v3 (printed page = PDF page). The Combinatorica version is not used.
Welcome contributions. The ΓL(2,qn) action on F2 and on point sets, the cardinality of {h:hqt+1=−1}, and Lemma 2.2 are reusable beyond this mission. Proofs of any milestone, and of Theorem 3.1 in the companion mission, are welcome.
Selected references
G. Longobardi, G. Marino, R. Trombetti, Y. Zhou, A large family of maximum scattered linear sets of PG(1, q^n) and their associated MRD codes, arXiv:2102.08287v3, 2021 (Combinatorica 43, 2023). https://arxiv.org/abs/2102.08287v3
B. Csajbók, G. Marino, O. Polverino, Classes and equivalence of linear sets in PG(1, q^n), J. Combin. Theory Ser. A 157, 402–426, 2018.
J. Sheekey, A new family of linear maximum rank distance codes, Adv. Math. Commun. 10(3), 475–488, 2016.
G. Longobardi, C. Zanella, Linear sets and MRD-codes arising from a class of scattered linearized polynomials, J. Algebraic Combin., 2021. https://doi.org/10.1007/s10801-020-01011-9
A. Blokhuis, M. Lavrauw, Scattered spaces with respect to a spread in PG(n, q), Geometriae Dedicata 81(1), 231–243, 2000.
G. Lunardon, O. Polverino, Blocking sets and derivable partial spreads, J. Algebraic Combin. 14(1), 49–56, 2001.
B. Csajbók, C. Zanella, On the equivalence of linear sets, Des. Codes Cryptogr. 81(2), 269–281, 2016.
Real-Time Dynamic Pricing for Revenue Management with Reusable Resources, Advance Reservation, and Deterministic Service Time Requirements I: Average-Loss Bound for Deterministic Price ControlResearch Paper
Motivation
Hotel rooms, rental cars, cloud servers, hospital beds and event spaces are reusable resources: a customer occupies a unit for a while and then returns it. Pricing them differs from classical revenue management, where a sold unit is gone for good. A sale now blocks capacity only for the length of the service, so the binding constraint is how many services overlap at once. Lei and Jasin (Oper. Res. 2020) study dynamic pricing in this setting with deterministic service times and, in the general model, advance reservations. They measure a pricing control by its average loss against a deterministic (fluid) benchmark.
The paper has two main results. Theorem 1 bounds the loss of a static heuristic, the Deterministic Price Control DPC(ϵ). Theorem 3 bounds the loss of an adaptive variant and is treated in the companion mission (II). This mission formalizes Theorem 1, the lemmas its proof rests on (Lemmas EC.1–EC.2 and the displays (EC.14), (EC.15) of the e-companion), and two structural lemmas of the model: the fluid upper bound J∗≤JD (Lemma 1) and the scaling of the fluid solution (Lemma 2).
Setting
A firm manages I resource types with integer capacities C=(Ci)⪰e and offers J service types over periods t=1,…,T. At most one request arrives per period. A type-j request uses aij∈{0,1} units of resource i for n consecutive periods (a service cycle), and n divides T.
The firm posts a demand-rate vectorλt∈Ωλ=[0,λU]J with λU≤1. A type-j request then arrives with probability λjt, independently of earlier periods given the posted rates, and the firm earns the revenue rate rt(λt). Writing Djs∈{0,1} for realized arrivals and (x)+=max{1,x}, the capacity free at the beginning of period t is
with optimal solution λD=(λt,D). The revenue rates are strictly concave, bounded by R in absolute value, and have interior maximizers (A4). Near λt,D their gradients and Hessians are bounded by Ψ (A5, with margins φL,φU).
The quantity n of display (2) is the smallest number of periods with λjs,D>0 in any service cycle that carries positive demand for some type j.
DPC(ϵ) posts, in period t, the rate λjt,D−(ϵ/n)1{λjt,D>0}, clamped to [0,λU], for every type j with Ct⪰Aj. It turns off every other type (rate 0). The average loss of a control π is L(π)=(JD−E[Rπ])/T.
Companion statements: Lemma 1 (J∗≤JD for every feasible non-anticipating control) and Lemma 2 (for integer θ≥1, λ⌈t/θ⌉,D solves the DET of the θ-th system T(θ)=θT, C(θ)=θC, n(θ)=θn).
Significance
Along the scaling (1), choosing ϵ of order θlogθ in Theorem 1 gives an average loss of O(θ−1/2log1/2θ). A control computed entirely before the selling horizon is therefore asymptotically optimal for reusable resources, with an explicit rate. This bound is the baseline against which the paper's adaptive control (Theorem 3, rate O(θ−2/3log1/2θ)) is measured.
The proof shows a pattern common to fluid-based revenue management: a high-probability event on which the heuristic follows the fluid plan exactly, a martingale maximal inequality bounding the complement, and a Taylor bound for the cost of the buffer. Reusable resources add one ingredient: capacity is checked over sliding windows of length n.
The results are proved on paper; none is machine-checked. The formalization would provide a checked version of the model (sliding-window capacity, at most one arrival per period, turn-off), of the high-probability analysis, and of the uniform constant. The printed proof has slips that a checked proof must repair. In particular, the exponent obtained by EC.3's choice of γ is −nn−2⋅36min{⋅}(ϵ−1)2; it differs from the printed one by an amount that a larger M1 absorbs.
Difficulty
The obvious argument says that DPC keeps an ϵ buffer, so it rarely runs out of capacity. The difficulty is that "rarely" has to hold uniformly over every sliding window of n periods. The rates DPC posts are themselves random, because a type is turned off whenever the realized free capacity is short.
Lemma EC.1 breaks this circularity by induction over periods on a fixed event. A capacity window of length n−1 straddles two consecutive cycles, which costs a factor 3 in δ, and only the periods with positive deterministic demand carry a buffer, which is why n appears. The demand errors form a martingale-difference sequence with predictable, path-dependent rates, so (EC.15) needs a pathwise bound on the cumulative rate within a cycle. That bound comes from the DET constraint, not from independence.
Finally, the constant M1 must not depend on the instance. A bound in which M1 may depend on T or C is trivial, since the loss never exceeds 2R.
Formalization scope
Everything is stated in demand rates, as the paper does for DET and in all its proofs. Prices, A1–A3 and the price-derivative part of A5 do not appear. A turned-off type has rate 0.
A sample path is a function from {1,…,T} to "no request" or "one request of type j". Its probability is the product of the per-period probabilities under the rates the control posts, so expectations are finite sums. Expected revenue is E[∑trt(λt)], the tower-property form of the proofs. Periods are 1,…,T, and window sums whose upper limit falls below the lower limit are empty.
The standing hypotheses, bundled as Standing φL φU Ψ R n̲, are:
I,J,n,T≥1, n∣T, aij∈{0,1} with a 1 in every column, C⪰e, λU∈(0,1];
JλU≤1 (added: one arrival per period on all of Ωλ);
λD optimal for DET, with λjt,D∈{0}∪(0,λU);
A4 with the explicit bound R on ∣rt∣, which replaces the paper's ru;
A5, with the Hessian condition as a bound on the quadratic form;
n as in (2), stated as an attained minimum, so n≥1;
the cycle assumption of p. 11.
The statements "on G(ϵ,δ)" are claimed for every path of positive probability in the event. Theorem 1 quantifies M1 after J, Ψ, R and before everything else. This rules out the trivial reading in which M1 is chosen per instance. Step 2 uses n where the printed line has n, and R for ru. θ in Lemma 2 is an integer.
Two definition files carry the model: ReusablePricing.DPC.Model holds the instance, DET, A4–A5, n and the θ-th system; ReusablePricing.DPC.Control holds the path law, DPC, loss, events and general controls. A complete proof needs a finite-path martingale toolkit: a Doob-type maximal inequality for exponential submartingales on a finite product space, and the Bernoulli moment-generating-function bound. It also needs a multivariate mean-value or Taylor estimate on a box and an induction over sliding capacity windows. The martingale tools are reusable beyond this mission. Contributions of those general lemmas, of proofs of individual milestones, and of the optional asymptotic corollary (4) are welcome.
Selected references
Y. Lei and S. Jasin, Real-Time Dynamic Pricing for Revenue Management with Reusable Resources, Advance Reservation, and Deterministic Service Time Requirements, Operations Research 68(3), 2020. https://doi.org/10.1287/opre.2019.1906 (author manuscript: SSRN 2816718, https://ssrn.com/abstract=2816718)
G. Gallego and G. van Ryzin, A Multiproduct Dynamic Pricing Problem and Its Applications to Network Yield Management, Operations Research 45(1), 1997. https://doi.org/10.1287/opre.45.1.24
S. Jasin, Reoptimization and Self-Adjusting Price Control for Network Revenue Management, Operations Research 62(5), 2014. https://doi.org/10.1287/opre.2014.1294
Online Stochastic Matching: New Algorithms with Better Bounds 2: The Per-Advertiser Inequality Behind the 0.706 Ratio for General Arrival Rates, in the Limit f − s ≤ 1 − ln 2Research Paper
Motivation
Online stochastic matching models display advertising and similar allocation problems in which requests arrive one at a time and must be served immediately. A bipartite graph links a set A of advertisers to a set I of impression types; n requests arrive, each of a type drawn independently with P(type i)=ri/n, and each request must be assigned at once and irrevocably to an unmatched interested advertiser, or dropped. Performance is measured by the competitive ratioE[ALG]/E[OPT], where OPT is the maximum matching of the realized graph.
Without distributional knowledge the best possible ratio is 1−1/e (Karp, Vazirani and Vazirani, 1990). Knowing the type distribution allows more:
Feldman, Mehta, Mirrokni and Muthukrishnan (2009) first beat 1−1/e, with 0.670, when every arrival rate is integral; Bahmani and Kapralov improved this to 0.699.
Manshadi, Oveis Gharan and Saberi (2011) obtained 0.705 for integral rates and 0.702 for general arrival rates, using offline statistics drawn by sampling.
Jaillet and Lu (2014) introduced Random Lists Algorithms with modified LPs and obtained 1−2e−2≈0.729 for integral rates (Theorem 1), 0.725 for vertex weights (Theorem 2) and 0.706 for general rates (Theorem 3).
This mission concerns the analytic core of Theorem 3, the general-rates bound.
Setting
For an advertiser a, let f=fa≤1 be the LP flow into a. Its neighbours a1∈Aa∗, which include a dummy advertiser ad with fad=1, are indexed by j=1,…,k. For each neighbour, xj=ma,a1=ma1,a≥0 is the expected number of random lists ⟨a,a1⟩, and yj=fa1≤1 is the neighbour's flow, so that xj≤yj. Write s=∑jxj≤f and β=maxjxj.
In Lean these are h, g, bracket f x y and R f β s in RandomListsMatching.GeneralRates.
Formalization targets
Goal: the per-advertiser bound
For 0<f≤1, any k≥0 and reals with 0≤xj≤yj≤1, s=∑jxj≤f and f−s≤1−ln2,
fB(f;x,y)≥0.706.
The paper bounds ∑apa/∑afa below by minaB(fa;⋅)/fa (p. 15), so this inequality is the whole of what Theorem 3's numerical constant rests on.
Milestones
Claim 3 (three clauses, p. 15): for y∈[0,1], h(y,⋅) is convex and decreasing on [0,y] and g(y,⋅) is concave and increasing on [0,y]; for x≥0, g(⋅,x) is increasing on [x,∞).
Inequality (5), analytic part (p. 15): for 0≤x≤y≤1, h(y,0)−h(y,x)≤−x∂2h(y,0)≤e−1x.
Claim 4, corrected (p. 16): R(f,β,s)≥0.706 on 1≥f≥s≥β>0, f−s≤1−ln2.
Significance
The result. Theorem 3 gives 0.706 for online stochastic matching with general (non-integral) arrival rates, improving the 0.702 of Manshadi et al. The probabilistic half of its proof reduces matching probabilities to the closed forms h and g; the paper then states that "in the remaining part of the section, we only use algebraic manipulations and the following properties of functions g and h". That remaining part, posed here, is an exact real inequality, and it is where the constant 0.706 is decided.
Formalizing it. The paper proves Claim 3 in one line ("can be easily verified by taking first and second order partial derivatives") and Claim 4 by a grid computation over cubes of side 0.001, with no recorded error analysis. A machine-checked proof replaces both. It also settles the regime of the constant: Claim 4 as printed, with the constraint f−s≤(1−ln2)+1/n "for n≥100", is false, and the bound holds in the limit form stated here. None of these statements has a formal proof anywhere, to the extent of the search made for this mission.
Difficulty
The margin is small. The minimum of R over the feasible region is about 0.706028, attained near (f,β,s)=(1,0.565,ln2) on the boundary f−s=1−ln2; the margin over 0.706 is under 3⋅10−5. Any argument that loses a constant factor in the estimates of e−x, or replaces ln2 by a rational bound that is not tight to five digits, fails. The bound is a three-variable statement with the minimum on a boundary face, so a one-variable monotonicity argument does not settle it.
The second difficulty is the function h itself. Its two-case definition is continuous but the quotient form has a removable singularity at x=y, which is exactly the end of the interval [0,y] on which Claim 3 asserts convexity and concavity. Derivative computations that are routine away from the diagonal need care there.
The natural first idea for the goal, to apply Claim 4 directly to the bracket, does not type-check: the bracket depends on the whole family (xj,yj), and the reduction to three variables through the chord and cross-sum bounds is a separate step.
Formalization scope
All quantities are real numbers. e is Real.exp 1, ln2 is Real.log 2, and 0.706 is the exact rational (0.706 : ℝ).
h keeps the paper's case split at x=y. The neighbour family is indexed by Fin k, and k=0 is allowed.
"Increasing" and "decreasing" are non-strict (MonotoneOn, AntitoneOn); convexity is ConvexOn ℝ (Set.Icc 0 y). The derivative in (5) is deriv (fun t => h y t) 0, the derivative in the second argument; the page's ∂h/∂y is a slip.
Pinned hypotheses. The goal requires f>0 (an advertiser with fa=0 contributes 0/0 in the paper and 0 in Lean). Claim 4 and the reduction require β>0, because s/β is 0 in Lean at β=0 and R(1,0,1)≈0.607; in the paper β=0 forces s=0, a case the goal covers directly. The hypotheses xj≤yj≤1 are the paper's ma1,a≤sa1≤fa1≤1.
Claim 4 is corrected. As printed it is false: at n=100, (f,β,s)=(1,0.55886,ln2−0.01) meets the printed constraints and gives R≈0.70521. The goal fails at n=100 as well (about 0.70543). Both are stated in the limit f−s≤1−ln2, the regime in which the paper claims Theorem 3 ("n is large enough so that a factor of 1+O(1/n) is negligible", p. 6). The constant 0.706 is unchanged.
Out of scope. Theorem 3 itself, LP (4), the list construction of §5.3, Claim 2 and the bound on pa are not posed. They rest on "≈" replacements of binomial sums and on an asymptotic independence whose proof "is omitted in the paper", so they have no exact finite-n statement.
No trivializing reading. The goal's hypotheses are met, for example, by k=1, f=1, x1=0.7, y1=1, and the conclusion is not vacuous there. Its hypotheses do not exclude the minimizer, and the division by f is guarded.
A complete development needs the derivative calculus of h on [0,y], including the diagonal, and certified interval bounds for e−x and ln2. The latter is reusable well beyond this mission. Proofs of Claim 3 or Claim 4 alone are welcome contributions.
Selected references
P. Jaillet and X. Lu, Online Stochastic Matching: New Algorithms with Better Bounds, Mathematics of Operations Research, 2014; authors' accepted manuscript, rev. June 2013. https://doi.org/10.1287/moor.2013.0621
V. H. Manshadi, S. Oveis Gharan and A. Saberi, Online Stochastic Matching: Online Actions Based on Offline Statistics, Mathematics of Operations Research 37(4):559–573, 2012. https://doi.org/10.1287/moor.1120.0551
J. Feldman, A. Mehta, V. Mirrokni and S. Muthukrishnan, Online Stochastic Matching: Beating 1 − 1/e, FOCS 2009, pp. 117–126. https://arxiv.org/abs/0905.4100
R. M. Karp, U. V. Vazirani and V. V. Vazirani, An Optimal Algorithm for On-line Bipartite Matching, STOC 1990, pp. 352–358. https://doi.org/10.1145/100216.100262
On the tightness of SDP relaxations of QCQPs 5: The Multiplicity Bound k ≥ aff dim{b(γ) : γ ∈ F} + 1 Cannot Be Lowered by OneResearch Paper
Motivation
A quadratically constrained quadratic program (QCQP) minimizes a quadratic function subject to quadratic inequality and equality constraints. QCQPs contain max-cut, binary programming, the trust-region subproblem and many problems from signal processing and control, and are NP-hard in general. The standard convex approach is the Shor semidefinite relaxation, which lifts x to the matrix Y=(1xx⊤xx⊤) and relaxes xx⊤ to an arbitrary positive semidefinite completion. Two questions decide how useful the relaxation is for a given QCQP: is its optimal value equal to the QCQP's (SDP exactness), and does its projected epigraph equal the convex hull of the QCQP's epigraph (convex hull exactness)?
A. L. Wang and F. Kılınç-Karzan (arXiv:1911.09195v3, Math. Program. 2021) give sufficient conditions for both, in terms of the faces of a dual set Γ and a symmetry parameter k, the quadratic eigenvalue multiplicity. Their Theorems 1 and 2 require Γ to be polyhedral and k≥affdim{b(γ):γ∈F}+1 on every semidefinite face F. This mission formalizes §4.3 of the paper, which shows that neither hypothesis can be weakened on its own.
Timeline. Fujie and Kojima (1997) recorded the dual description of the SDP value used here. Ye and Zhang (2003) and Beck and Eldar (2006) gave sufficient conditions under which the trust-region subproblem with one additional quadratic inequality has a tight SDP relaxation; Locatelli (2016) gave an exactness condition for a variant of the trust-region subproblem, and Burer and Ye (2019) for diagonal QCQPs. Wang and Kılınç-Karzan (2020) unified these conditions through the facial structure of Γ, and showed in their Propositions 2 and 3 that their own hypotheses are sharp.
Setting
A QCQP in N variables with m≥1 constraints, mI of them inequalities, is
with qi(x)=x⊤Aix+2bi⊤x+ci, Ai∈SN. Its epigraph is D={(x,t):q0(x)≤2t,x feasible}. With Qi=(cibibi⊤Ai) and Y=(1xx⊤X), the SDP relaxation minimizes ⟨Q0,Y⟩ subject to ⟨Qi,Y⟩≤0 or =0 and Y⪰0; its value is OptSDP, and DSDP is the set of (x,t) for which some feasible X has ⟨Q0,Y⟩≤2t.
For γ∈Rm write A(γ)=A0+∑iγiAi, b(γ)=b0+∑iγibi and q(γ,x)=q0(x)+∑iγiqi(x). The dual set is
Γ={γ∈Rm:A(γ)⪰0,γi≥0∀i∈[[mI]]}.
Assumption 1: the QCQP is feasible and A(γ∗)≻0 for some γ∗ with γi∗≥0 on the inequalities. Assumption 2: supγ∈Γq(γ,x) is attained whenever it is finite. Assumption 3: Γ is polyhedral. A faceF of Γ is definite if some γ∈F has A(γ)≻0, and semidefinite otherwise. The quadratic eigenvalue multiplicity is the largest k such that every Ai equals Ik⊗Ai for some Ai∈Sn, N=kn.
The Lean development uses the same names: QCQP N m, Opt, OptSDP, D, DSDP, Gamma, bγ, qγ, Assumption1–Assumption3, IsSemidefiniteFace, IsQuadEigMult, affdim.
The milestones pin the paper's witness, the QCQP (13): min{−x12−xn+12−⋯−x(k−1)n+12:∥x∥2≤1,x(j−1)n+1=0∀j}.
Lemma 1: under Assumption 1, DSDP={(x,t):supγ∈Γq(γ,x)≤2t} and OptSDP=minxsupγ∈Γq(γ,x).
Assumption 1 holds for (13).
For (13), Γ={γ:γ1≥1}, so Assumption 3 holds.
For (13), affdim{b(γ):γ1=1}=k.
For (13), OptSDP≤supγ∈Γq(γ,0)=−1 and Opt=0.
Companion: Proposition 3
There is a QCQP in N=2 variables with m=2 constraints satisfying Assumptions 1 and 2, with multiplicity k=1 and k≥affdim{b(γ):γ∈F}+1 on every semidefinite face, but with Opt=OptSDP. The companion items about its witness (14) state Γ=B(0,2−1/2), supγ∈Γq(γ,x^)=q0(x^)+∥x^∥2, OptSDP=1/2 and Opt=1.
Significance
The result. Theorems 1 and 2 of the paper are the general sufficient conditions behind many earlier exactness results for SDP relaxations. Propositions 2 and 3 show that the two hypotheses are each necessary in the sense that relaxing either one by the smallest possible amount produces a counterexample: lowering the multiplicity bound by one, or replacing polyhedrality by mere attainment of the dual supremum. Anyone trying to extend the theorems therefore has to change the form of the conditions, not just their constants.
Formalizing it. Both propositions are proved in the paper; none of this has been machine-checked. A formal proof requires Lemma 1, a strong-duality statement for a parametric SDP that is reusable across the whole paper, and explicit computations of faces, affine dimensions and multiplicities for two concrete families. The multiplicity claim in particular ("the largest k") is asserted but not argued on the page, and a formal proof must supply it.
Difficulty
The concrete computations for (13) and (14) are elementary in isolation; the work lies in three places. First, Lemma 1 is a conic duality statement, including attainment of the outer minimum, that depends on Assumption 1; it is the bridge from the SDP to the dual set, and Mathlib has no semidefinite duality theory to build on. Second, the face structure: one must show that the hyperplane {γ1=1} is the only semidefinite face of the halfspace Γ of (13), and that every face of the disk Γ of (14) gives a single point b(γ)=b0. Third, "the multiplicity is k" requires ruling out every larger block structure Ik′⊗Ai, not only exhibiting one of size k. A naive witness with only Ai=Ik⊗Ai shown would establish a lower bound on the multiplicity, which is not the statement.
Formalization scope
Points of RN are Fin N → ℝ; the paper's constraint i is index i−1 of Fin m, and constraint i is an inequality exactly when its index is below mI. Opt and OptSDP are infima in EReal, so infeasible and unbounded programs take the values ±∞ rather than a junk real. A supremum bound supγ∈Γq(γ,x)≤2t is written as q(γ,x)≤2t for every γ∈Γ. Faces are nonempty convex extreme subsets of Γ. The quadratic eigenvalue multiplicity is the greatest k admitting a block form, under the identification of block j, entry s with coordinate s+nj. Proposition 3 says "n=2 variables"; the construction lives in R2, so the formal statement uses N=2.
The goal is existential, as on the page, and a solver may exhibit any witness; it cannot be met trivially, because the multiplicity must equal k exactly, the dimensions N=nk, m=k+1 are fixed by the type, and both Opt=OptSDP and conv(D)=DSDP are required.
The QCQP (13) is given in full: the page states only the matrices Ai, and the linear terms encode the constraints x(j−1)n+1=0 as qj+1(x)=x(j−1)n+1. Lemma 1 is the reusable piece, and proofs of it are welcome independently of this mission; so are general lemmas on faces of halfspaces and balls and on Kronecker block structure.
T. Fujie, M. Kojima, Semidefinite programming relaxation for nonconvex quadratic programs, Journal of Global Optimization 10 (1997) 367–380. https://doi.org/10.1023/A:1008282830093
S. Burer, Y. Ye, Exact semidefinite formulations for a class of (random and non-random) nonconvex quadratic programs, Mathematical Programming 181 (2019) 1–17. https://doi.org/10.1007/s10107-019-01367-2
M. Locatelli, Exactness conditions for an SDP relaxation of the extended trust region problem, Optimization Letters 10(6) (2016) 1141–1151. https://doi.org/10.1007/s11590-016-1001-0
A. Beck, Y. C. Eldar, Strong duality in nonconvex quadratic optimization with two quadratic constraints, SIAM Journal on Optimization 17(3) (2006) 844–860. https://doi.org/10.1137/050644471
On the tightness of SDP relaxations of QCQPs 4: Quadratic Eigenvalue Multiplicity k ≥ m + 1 Gives conv(D ∩ H) = D_SDP ∩ H and Opt = Opt_SDPResearch Paper
Motivation
A quadratically constrained quadratic program (QCQP) minimizes a quadratic function subject to quadratic inequality and equality constraints. QCQPs model trust-region subproblems, max-cut and other binary programs, phase retrieval, and many problems in signal processing and control; in general they are NP-hard. The standard tool for bounding and solving them is the Shor semidefinite relaxation (Shor 1990), which lifts the variable x to a matrix Y=(1xx⊤X)⪰0 and replaces every quadratic term by a linear function of Y. The relaxation is a convex program, so it can be solved efficiently, but it is only useful when one knows that it is tight: that its optimal value equals that of the QCQP, or, more strongly, that it describes the convex hull of the QCQP's epigraph.
Wang and Kılınç-Karzan (arXiv:1911.09195v3, Math. Program. 2021) give sufficient conditions for tightness. Section 6 of the paper concerns QCQPs with symmetry: when every quadratic form is k identical copies of one smaller form, Ai=Ik⊗Ai. Such problems arise as quadratic matrix programs in the sense of Beck 2007, where the variable is a matrix and the objective and constraints are traces of quadratic matrix expressions. Beck showed (Corollary 4.4) that k≥m gives value exactness under a regularity assumption; Theorem 7 of the paper gives the convex-hull result for k≥m+2; this mission's Theorem 8 covers k≥m+1.
Setting
Fix N≥1 variables and m=mI+mE≥1 constraints. For i∈[[0,m]] let qi(x)=x⊤Aix+2bi⊤x+ci with Ai∈SN symmetric, bi∈RN, ci∈R. The QCQP is
and its projected epigraphDSDP is the set of (x,t) for which some X satisfies the constraints with ⟨Q0,Y⟩≤2t. Always conv(D)⊆DSDP and Opt≥OptSDP.
For γ∈Rm write A(γ)=A0+∑iγiAi and q(γ,x)=q0(x)+∑iγiqi(x), and let Γ={γ:A(γ)⪰0,γi≥0∀i∈[[mI]]}. Assumption 1 requires that the QCQP be feasible and that some γ∗ with γi∗≥0 on the inequalities have A(γ∗)≻0.
The quadratic eigenvalue multiplicity (Definition 3) is the largest integer k such that N=kn and every Ai, i∈[[0,m]], equals Ik⊗Ai for some Ai∈Sn. Finally,
H={(x,t)∈RN+1:2t=OptSDP}
is the hyperplane on which the SDP relaxation attains its value.
Formalization targets
Goal: Theorem 8 (p. 30)
Under Assumption 1, if k≥m+1, then
conv(D∩H)=DSDP∩HandOpt=OptSDP.
Milestones (App. B, pp. 35–36)
Lemma 1 (p. 7): DSDP={(x,t):supγ∈Γq(γ,x)≤2t} and OptSDP=minxsupγ∈Γq(γ,x).
Dual attainment: every (x^,t^)∈DSDP∩H has Z∈Sn with
Feasibility of (20): if k≥m+1, some unit y∈Rk has ⟨Aix^+bi,y⊗z⟩=0 for all i∈[[m]].
The objective direction vanishes: on DSDP∩H, with Z=zz⊤+Z′, Z′⪰0, and y as in (20), ⟨A0x^+b0,y⊗z⟩=0.
Rank induction: if k≥m+1, every (x^,t^)∈H with some Z satisfying (19) lies in conv(D∩H).
Significance
Theorem 8 says that one copy of symmetry fewer than Theorem 7 requires still makes the SDP relaxation exact in value, and identifies the relaxation's optimal set: every optimal point of the relaxation, projected to (x,t), is a convex combination of optimal epigraph points of the QCQP. In particular the relaxation's optimal points can be decomposed into QCQP optima, which is what makes the relaxation a solution method and not only a bound. Remark 14 of the paper places the result between Beck's k≥m (only D∩H=∅) and Theorem 7's k≥m+2 (the full convex hull), and records the conjecture that all three thresholds are sharp.
The theorem is proved in the paper (Appendix B). No machine-checked proof of it, or of the multiplicity results of Section 6, is known to exist. A formal proof needs a Lean development of the Shor relaxation, its Lagrangian dual, conic strong duality with dual attainment for an SDP with sign-constrained multipliers, and the Kronecker structure of the data.
Difficulty
The inclusion conv(D∩H)⊆DSDP∩H is routine. The converse needs, for an SDP-optimal point, a decomposition into feasible QCQP points that are themselves optimal. A rank-one decomposition of the SDP matrix X−xx⊤ does not suffice in general: its terms leave the feasible set unless the perturbation directions are orthogonal to all the linear parts Aix^+bi, including the objective's. With multiplicity k≥m+2 there is room for all m+1 orthogonality conditions; with k≥m+1 only the m constraint conditions can be imposed, and the objective condition has to come from elsewhere. The difficulty sits in that last condition and in the conic duality step, whose dual must attain its value under Assumption 1 alone (no polyhedrality of Γ, no attainment assumption).
Formalization scope
The Lean development lives in the namespace QCQPTightness.MultTight. The data are a structure QCQP N m with symmetric Ai, constraints indexed by Fin m, and constraint i an inequality exactly when (i : ℕ) < mI (the paper's inequalities come first). Vectors are Fin N → ℝ; points of RN+1 are pairs (x, t). Opt and OptSDP are infima in EReal, and H is defined from that EReal value; this is why the goal states Opt=OptSDP as a separate conjunct: if OptSDP were ±∞, H would be empty and the first conjunct trivial. ⟨Q,Y⟩ is (Q * Y).trace; Y⪰0 is PosSemidef; Sk−1 is y ⬝ᵥ y = 1. The identification Rk⊗Rn≅RN sends block j, entry s to coordinate s + n * j.
Standing assumptions: the goal carries m≥1 (p. 1) and Assumption 1. The multiplicity is the largest k (IsGreatest), as on the page. The milestones take an explicit representation Ai=Ik⊗Ai instead, which makes them apply to every representation, and drop m≥1 and Assumption 1 where the step does not use them. The rank-induction milestone carries (x^,t^)∈H, which the page's sentence omits but its proof uses ("by minimality of t^"); without it the claim is false.
A trivializing formalization would assume system (19), or the vanishing of ⟨A0x^+b0,y⊗z⟩, in the goal; the goal assumes neither, and both are milestones to be proved.
Reusable infrastructure: the QCQP and Shor-relaxation definitions are shared with the other missions of this series, and a general SDP strong-duality statement exists on the platform (ConvexOptimization.sdp_strong_duality) in a different form (a minimization without sign-constrained variables). Contributions welcome: proofs of the milestones, a conic duality lemma with sign-constrained multipliers, and Kronecker-product lemmas such as (Ik⊗A)(y⊗z)=y⊗Az.
Diffusion Approximation for Fully Coupled Stochastic Differential Equations 2: The Slow Component Converges Weakly to the Averaged SDE at an Explicit Rate (Regime 1)Research Paper
Motivation
Many stochastic models evolve on two time scales: a fast component that equilibrates quickly and a slow component driven by it. Planetary motion, climate models, geophysical flows and intracellular reaction networks are standard examples, and multiscale numerical methods for them approximate the slow component by a reduced equation. Such approximations are only useful with an error bound, and for the fully coupled case, where the fast and slow equations each depend on both components and the slow equation contains a large fluctuating drift, rates of convergence were missing.
Röckner and Xie (Ann. Probab. 49 (2021) 1205–1236) treat this case with only Hölder continuous coefficients and obtain explicit rates in four regimes. This mission poses the first regime, the classical averaging principle.
Timeline. Papanicolaou, Stroock and Varadhan (1977) proved the diffusion approximation for αε=βε=γε with a compact fast state space and time-independent coefficients. Pardoux and Veretennikov (2001, 2003, 2005) treated a noncompact homogeneous case with c≡0 and αε=γε by martingale problems and the Poisson equation. Rates for the averaging principle when c=H≡0 were obtained by several authors, e.g. Givon (2007) and Liu (2010). Röckner and Xie (2021) give rates for the fully coupled system with Hölder coefficients in all four regimes.
Setting
Let x∈Rd1 (fast) and y∈Rd2 (slow), d1,d2≥1. For small parameters αε,βε,γε>0 tending to 0, with αε2/βε→0, the two-scale system (1.4) is
with X0ε=x, Y0ε=y and independent Brownian motions W1,W2.
Freezing y gives the frozen equationdXty=b(Xty,y)dt+σ(Xty,y)dWt1 (1.7), with generator L0(x,y)=∑ijaij∂xixj2+∑ibi∂xi, a=σσ∗/2, and invariant probability measure μy. A function is centered if its μy-average vanishes for every y. The standing assumptions are: (Aσ), uniform nondegeneracy of σσ∗; (Ab), lim∣x∣→∞supy⟨x,b(x,y)⟩=−∞; (AG), uniform nondegeneracy of GG∗; (AH), H is centered; and (2.7), the analogue of (Ab) for b+κc, κ>0 small.
The averaged coefficients of Regime 1 are F^1(t,y)=∫F(t,x,y)μy(dx) and G^1=(∫GG∗(t,x,y)μy(dx))1/2, and the averaged equation (2.9) is dY^t1=F^1(t,Y^t1)dt+G^1(t,Y^t1)dWt2, Y^01=y.
Regularity is measured in weighted Hölder classes: Cpδ,ϑ (index δ in x, ϑ in y, polynomial growth in x), its bounded version Cbδ,ϑ, the time-dependent Cpϑ/2,δ,ϑ, the class Lp∞ of measurable functions of polynomial growth, and Cb2+ϑ(Rd2) for test functions.
Formalization targets
Goal: Theorem 2.3(i)
In Regime 1, αε/γε→0 and αε2/(βεγε)→0, assume b,σ∈Cbδ,ϑ, F,H,G∈Cpϑ/2,δ,ϑ with ϑ∈(0,2], c∈Lp∞ and αεϑ/γε→0. Then for every T>0 and φ∈Cb2+ϑ,
Lemma 4.1: mollification in (t,y) at scales n−2 and n−1 costs n−ϑ and gains n2−ϑ on ∂t and ∇y2.
Lemma 4.2: for centered f, E∫0tf(s,Xsε,Ysε)ds≤Ct(αεϑ+αεϑ∧1αε/γε+αε2/βε).
Lemma 4.4(i): in Regime 1, Eγε−1∫0tfds≤Ct(αεϑ/γε+αε2/γε2+αε2/(βεγε)).
Lemma 5.1 (k=1): G^1=G^1G^1∗/2 is uniformly nondegenerate and F^1,G^1∈Cbϑ/2,ϑ.
Significance
The result. The theorem gives a rate for the weak error of the averaging principle under Hölder regularity only, and the rate depends only on the regularity in the slow variable y, not on δ. It covers the fully coupled case, in which the slow equation contains the singular drift γε−1H, and it identifies the extra condition αεϑ/γε→0 under which this drift averages out. For c=H≡0 it reduces to the rate αεϑ (Remark 2.5), optimal for ϑ=2. Error bounds of this kind are what heterogeneous multiscale methods need to be quantitative.
Formalizing it. The result is proved in the paper; nothing in it is machine-checked. A formalization needs an Itô calculus for weak solutions, the elliptic Poisson equation in x with parameter y (the companion mission's Theorem 2.1), and the parabolic Kolmogorov equation of the averaged SDE. The two fluctuation lemmas are stated for general centered functions and are reusable for other limit theorems.
Difficulty
The obvious argument writes Eφ(YTε)−Eφ(Y^T1) through the Kolmogorov equation of the averaged SDE and Itô's formula, which leaves E∫0T(L1−L^1)u~ds and γε−1E∫0TH⋅∇yu~ds. Both integrands are centered but only Hölder continuous in (t,y), so the standard corrector argument, which applies Itô's formula to the solution of the Poisson equation along (Xε,Yε), needs derivatives in t and y that do not exist. The term with γε−1 is a central-limit-scale fluctuation, which is why its control needs the regime conditions. Existence and regularity of the averaged coefficients also have to come from the Poisson equation, since μy is not explicit.
Formalization scope
Spaces are EuclideanSpace ℝ (Fin d). Coefficients are b,c:Rd1×Rd2→Rd1, σ a d1×d1 matrix, F,H:R+×Rd1×Rd2→Rd2, G a d2×d2 matrix. The Itô layer (Brownian motion, Itô integral, Itô processes, SDE solutions) is the published Peng1990.SMP.Stochastic. A solution of (1.4) is a weak solution: any filtered probability space, any Brownian motion for that filtration, any progressive process satisfying the integral equation. The theorem compares every weak solution of (1.4) with every weak solution of (2.9). The paper does not prove existence for (1.4), so the statement is conditional on solutions, as it is used in the paper. A sanity file shows the parameter hypotheses are consistent (αε=ε, βε=γε=ε1/2) and that (2.7) holds for a bounded dissipative drift.
Committed conventions and readings of the page:
μy is any family of probability measures that are infinitesimally invariant for L0 with a=σσ∗/2, the generator of (1.7). Under the standing assumptions this is the unique invariant measure.
(2.7) is read with κ=αε2/βε, the factor that actually multiplies c in the fast drift, for all small κ>0.
G^1 is any measurable matrix field with G^1G^1∗=∫GG∗dμy, which covers the printed square root.
The Hölder classes include polynomial growth, constrain all lower y-derivatives, and take their constants uniformly in time, including in the time-Hölder clause.
The constants CT, Ct, C0 exist after all data are fixed (coefficients, μ, T, φ, x, y, the parameter functions) and before ε or n.
Lemma 4.1 takes f on all of R in time, since (4.1) evaluates f at negative times, and assumes the kernels have the finite moments ∫∣r∣ϑ/2ρ1<∞, ∫∣z∣ϑρ2<∞ that its proof uses; without them (4.2) fails for a Cauchy-type kernel.
Solutions are Itô processes in the sense of the referenced layer: progressive, with supt≤TE∣Zt∣2<∞ and square-integrable diffusion integrands.
Lemma 4.4(i) carries the Regime 1 limits of its label.
Lemmas 4.2 and 4.4(i) are one-sided, as printed, and include integrability of the path integral in their conclusion.
A formalization in which the expectations are junk Bochner integrals, the constant depends on ε, or a single strong solution is fixed would be a different and weaker statement; the posed statements rule these out.
Not posed: Regimes 2–4 of Theorem 2.3 and Lemma 4.4(ii)–(iv). The printed G^3=G^4 differs by a factor 2 in the HΦ∗ term from the generator used in the proof, so a faithful statement needs a correction that is left to moderation. Regime 2 needs the Poisson solution Φ in the averaged drift. Lemma 5.2 is also not posed: as printed, uk(t,y)=Eφ(Y^tk(y)) solves (5.1) only for time-independent coefficients, and its class Cb(2+ϑ)/2,2+ϑ has time index above 1, which the paper's notations do not define. Contributions toward Itô's formula for these processes, the Poisson equation (companion mission 1) and parabolic Schauder theory are welcome.
Selected references
M. Röckner, L. Xie, Diffusion approximation for fully coupled stochastic differential equations, Ann. Probab. 49(3) (2021) 1205–1236. https://doi.org/10.1214/20-AOP1475
G. Papanicolaou, D. Stroock, S. R. S. Varadhan, Martingale approach to some limit theorems, Duke Turbulence Conference, Duke Univ. Math. Ser. III (1977).
E. Pardoux, A. Yu. Veretennikov, On the Poisson equation and diffusion approximation. I, Ann. Probab. 29 (2001) 1061–1085. https://doi.org/10.1214/aop/1015345596
E. Pardoux, A. Yu. Veretennikov, On Poisson equation and diffusion approximation. II, Ann. Probab. 31 (2003) 1166–1192. https://doi.org/10.1214/aop/1055425774
D. Givon, Strong convergence rate for two-time-scale jump-diffusion stochastic differential systems, Multiscale Model. Simul. 6 (2007) 577–594. https://doi.org/10.1137/060673345
D. Liu, Strong convergence of principle of averaging for multiscale stochastic dynamical systems, Commun. Math. Sci. 8 (2010) 999–1020.
S. Peng, A general stochastic maximum principle for optimal control problems, SIAM J. Control Optim. 28 (1990) 966–979 (source of the Itô layer). https://doi.org/10.1137/0328054
Bridging Bayesian and Minimax Mean Square Error Estimation via Wasserstein Distributionally Robust Optimization 2: The Fully Adaptive Frank-Wolfe Algorithm Converges LinearlyResearch Paper
Motivation
The Frank-Wolfe algorithm (also called the conditional gradient method) minimizes a smooth convex function over a compact convex set using only a linear minimization oracle in place of a projection. Each step solves a linearized problem over the feasible set and moves toward its solution. This makes it the method of choice when projections are expensive but linear subproblems are cheap or have closed-form solutions: nuclear-norm balls, polytopes, and the semidefinite feasible sets that come up in distributionally robust estimation.
Nguyen, Shafieezadeh-Abadeh, Kuhn and Mohajerin Esfahani (arXiv:1911.03539v2, Math. Oper. Res. 48(1), 2023) need such a method for a nonlinear semidefinite program that computes Wasserstein minimax mean square error estimators. Its feasible set is not strongly convex in the traditional sense, and the linear subproblems can only be solved approximately. Section 6.1 of the paper analyses a fully adaptive Frank-Wolfe algorithm under these conditions: it uses an inexact oracle, a backtracking estimate of the smoothness constant, and a weakened, gradient-dependent notion of strong convexity of the feasible set. The section proves a linear convergence rate. This mission formalizes that rate and the lemmas of its proof.
Timeline. Frank and Wolfe (1956) introduced the method for quadratic programs. Levitin and Polyak (1966) proved linear convergence over strongly convex sets when the gradient is bounded away from zero, with the adaptive stepsize (6.4); Garber and Hazan (2015) revisited this regime. Pedregosa, Négiar, Askari and Jaggi (2020) introduced the backtracking line search with adaptive smoothness parameters β_t used here, and proved its sublinear O(1/t) rate. Section 6.1 combines that line search with inexact oracles and blockwise strong convexity with respect to f.
Setting
The decision variable is s=(s[1],…,s[K]) with blocks s[k]∈Rdk, and Rd1×⋯×RdK carries the Euclidean norm ∥s∥2=∑k∥s[k]∥2. The problem is
f⋆=s∈Sminf(s),
where S=×k=1KS[k] is a product of convex compact sets and f is convex and differentiable on S. The partial gradient with respect to block k is ∇[k]f(s).
An inexact oracle with precisionδ∈[0,1] is a map F:S→S with
(F(s)−s)⊤∇f(s)≤δz∈Smin(z−s)⊤∇f(s).
For δ=1 it returns an exact solution of the linearized problem. At a point s the search direction is d=F(s)−s and the surrogate duality gap is g=−d⊤∇f(s)≥0.
Assumption 6.1 consists of three conditions:
β-smoothness: ∥∇f(s)−∇f(sˉ)∥≤β∥s−sˉ∥ on S;
α-strong convexity of the blocks with respect tof: for all s,sˉ∈S, θ∈[0,1] and k,
Algorithm 1 starts from s0∈S with parameters β−1>0, τ>1 and ζ>1. At iteration t it sets dt=F(st)−st and gt=−dt⊤∇f(st). It then picks βt as the smallest element of (βt−1/ζ)⋅{1,τ,τ2,…} that passes the sufficient-decrease test
The result. Theorem 6.2 gives a linear rate for a Frank-Wolfe method that never needs the global smoothness constant β, that tolerates approximate linear subproblems, and that works on feasible sets which are strongly convex only in the weak, gradient-dependent sense of Assumption 6.1 (ii). In the paper it justifies the algorithm used to compute Nash equilibria of Wasserstein minimax MMSE estimation problems at dimensions where interior-point SDP solvers run out of memory. The analysis is generic and applies to any problem meeting Assumption 6.1.
Formalizing it. The result is proved in the paper, but the printed constant is wrong. In Lemma 6.3 (ii) the factor δθ(1−θ)/(1−δθ) is maximized at θ⋆=(1−1−δ)/δ, where it equals (1−1−δ)2/δ; the page drops the square. Lemma 6.3 (ii), (6.12) and Theorem 6.2 are therefore false as printed for δ∈(0,1). A two-dimensional instance (unit disk, linear objective, δ=0.19) violates the printed rate after one step. The printed and corrected rates agree for an exact oracle (δ=1). The mission states the corrected constant throughout and quotes the printed text in the milestones. No machine-checked proof of a linear rate for Frank-Wolfe with adaptive line search is known to us.
Difficulty
The obvious argument, "β-smoothness plus a contraction per step", does not go through directly. The line search may pick βt far below β, so the contraction factor in case (ii) is controlled by βt and needs the separate fact that βt never exceeds max{τβ,β−1}. That fact depends on βt being the smallest accepted trial value, and it fails for an arbitrary accepted one. The lower bound of Lemma 6.3 (ii) comes from testing the oracle inequality against a point built from Assumption 6.1 (ii). That point is assembled block by block, and the step back to ∥dt∥2 uses the Euclidean (not the sup) norm on the product space. The constant then comes from an explicit one-variable optimization, which is where the printed proof errs.
Formalization scope
The space is PiLp 2 (fun k : Fin K => EuclideanSpace ℝ (Fin (d k))), so ‖·‖ is Euclidean and ∇[k]f(s) is the block gradient f s k. Conventions:
f is a function on the whole space, convex on S and differentiable at every point of S;
f⋆ is a real number that is the least element of f(S);
the minimum in (6.2) is written as "≤ δ (z − s)ᵀ∇f(s) for all z ∈ 𝒮", which is equivalent on the compact set 𝒮;
each of β,α,ε is positive and δ∈[0,1];
the run of Algorithm 1 is infinite (no stopping criterion), and "smallest element" is encoded as an index j that passes with all i<j failing;
at dt=0, where the page's stepsize is undefined, Lean's 0/0=0 gives ηt=0.
Disclosed changes relative to the page:
the square in (1−1−δ)2 in Lemma 6.3 (ii), (6.12) and Theorem 6.2;
δ>0 in Lemma 6.3 (ii), and δθ<1 in (6.8), where the page divides by these quantities;
nonzero partial gradients at the point in (6.8) and Lemma 6.3 (ii), so the normalization of Assumption 6.1 (ii) is defined;
(6.10) is stated with −ηtgt, which is what (6.5) gives (the printed −gt is valid only when ηt=1);
the inner-loop iteration count, which contains a typo, is replaced by termination;
minima over k are expressed through an arbitrary lower bound m of all ∥∇[k]f(s)∥.
Trivializing readings are excluded. A sorry-free companion file exhibits, for every δ∈[0,1], an instance (interval [−1,1], linear objective, exact oracle) satisfying every hypothesis of the goal, together with an explicit infinite run whose initial suboptimality is positive. The run predicate forces the smallest accepted βt, and the norm is Euclidean.
Everything needed is in Mathlib: gradients in Hilbert spaces, convexity, PiLp. The descent lemma along a segment for a function with Lipschitz gradient on a convex set, used for (6.9), is reusable beyond this mission. Contributions welcome: proofs of the milestones, and a Lean proof that the printed constant fails on the disk instance.
Selected references
V. A. Nguyen, S. Shafieezadeh-Abadeh, D. Kuhn, P. Mohajerin Esfahani, Bridging Bayesian and Minimax Mean Square Error Estimation via Wasserstein Distributionally Robust Optimization, Math. Oper. Res. 48(1), 2023. arXiv:1911.03539v2, doi:10.1287/moor.2021.1176
M. Frank, P. Wolfe, An algorithm for quadratic programming, Naval Res. Logist. Q. 3, 1956. doi:10.1002/nav.3800030109
E. S. Levitin, B. T. Polyak, Constrained minimization methods, USSR Comput. Math. Math. Phys. 6(5), 1966. doi:10.1016/0041-5553(66)90114-5
D. Garber, E. Hazan, Faster rates for the Frank-Wolfe method over strongly-convex sets, ICML 2015. arXiv:1406.1305
F. Pedregosa, G. Négiar, A. Askari, M. Jaggi, Linearly convergent Frank-Wolfe with backtracking line-search, AISTATS 2020. arXiv:1806.05123
Douglas-Rachford Splitting and ADMM for Nonconvex Optimization: Tight Convergence Results IV: The Image Function (Bg) Is Lsc on B dom g Exactly When Condition (5.5) HoldsResearch Paper
Why the image function matters for ADMM
The alternating direction method of multipliers (ADMM) solves problems of the form minx,zf(x)+g(z) subject to Ax+Bz=b. Themelis and Patrinos (arXiv:1709.05747v4, SIAM J. Optim. 30(1):149–181, 2020) show that, for nonconvex f and g, ADMM is the Douglas–Rachford splitting method applied to a reformulated problem whose second term is the image functionφ2=(Bg), (Bg)(s)=inf{g(z)∣Bz=s}. Their convergence theory for DRS requires the nonsmooth term to be proper and lower semicontinuous (Assumption IIa4), so whether (Bg) inherits lower semicontinuity from g decides whether the theory applies to a given ADMM instance.
Image functions, also called epi-compositions or infimal post-compositions, are classical objects of variational analysis (Rockafellar and Wets, Variational Analysis; Bauschke and Combettes, Convex Analysis and Monotone Operator Theory in Hilbert Spaces; Auslender and Teboulle, Asymptotic Cones and Functions). For convex g the question of when (Bg) is closed has a long history through recession functions; Section 5.4.1 of the paper gives a characterization that needs no convexity.
Setting
Let R=R∪{+∞}. For g:Rn→R the domain is domg={z∣g(z)<∞}; g is lower semicontinuous (lsc) if its epigraph is closed, and level bounded if every set {z∣g(z)≤α}, α∈R, is bounded.
Fix a matrix B∈Rp×n. The image function of g under B (Definition 5.1) is
(Bg)(s)=z∈Rninf{g(z)∣Bz=s},s∈Rp,
with values in [−∞,+∞]. Its domain is Bdomg: outside that set the infimum is over values +∞ only.
Condition (5.5) at a point zˉ∈domg compares the best value of g on the affine fibre zˉ+kerB with the values of g far away along directions that B nearly annihilates:
∥d∥→∞Bd→0liminfg(zˉ+d)≥d∈kerBinfg(zˉ+d).
The right side equals (Bg)(Bzˉ).
Formalization targets
Goal: Theorem 5.11, on Bdomg
For every lsc g:Rn→R and every B∈Rp×n,
(Bg)is lsc at every sˉ∈Bdomg⟺(5.5)holds at every zˉ∈domg.
Milestones
The right side of (5.5) is (Bg)(Bzˉ).
The "if" direction: (5.5) on domg gives lower semicontinuity of (Bg) at every point of Bdomg.
The "only if" direction: lower semicontinuity of (Bg) on Bdomg forces (5.5) on domg.
Companion results
The "In particular" clause of Theorem 5.11, as printed: if g is lsc and level bounded, then (Bg) is lsc on all of Rp.
The properness clause of Proposition 5.10: if g is proper and lsc and, for some β>0, minz{g(z)+2β∥Bz−s∥2} is attained for every s, then (Bg) is proper.
Significance
Theorem 5.11 turns Assumption IIa4, a property of a derived function, into a checkable condition on g and B. Its level-bounded corollary covers every lsc g with bounded sublevel sets, and the characterization explains why the pathological example (5.4) of the paper, in which g is even C1, fails: a minimizing sequence on the fibre escapes to infinity while B applied to it converges. Combined with the convergence theorem for ADMM in the same paper (Theorem 5.6), this identifies the ADMM instances to which the tight DRS stepsize theory applies.
The theorem is proved in the paper. As far as is known, no machine-checked proof of it, or of any closedness criterion for image functions, exists in Lean or in Mathlib. A formalization fixes the exact range of the equivalence, which the printed statement gets wrong (see Formalization scope), and supplies reusable infrastructure: the image function in EReal, and liminfs along the filter "∥d∥→∞, Bd→0".
Difficulty
Lower semicontinuity of (Bg) at sˉ asks that values of g on fibres {Bz=s}, s→sˉ, not drop below (Bg)(sˉ). The natural argument picks near-minimizers zk on these fibres and passes to a limit; this works only when the zk stay bounded, and nothing in lsc of g alone prevents them from escaping to infinity. The difficulty is to account exactly for the unbounded case, which must be compared with the fibre through sˉ by a translation zk−zˉ, and that requires a point zˉ∈domg with Bzˉ=sˉ. The converse requires turning a failure of (5.5), stated as a filter liminf, into a sequence witnessing the failure of lower semicontinuity.
Formalization scope
Rn and Rp are EuclideanSpace ℝ (Fin n) and EuclideanSpace ℝ (Fin p); B is a continuous linear map between them. Every dimension, including 0, is allowed.
R is EReal, and g is assumed never to take the value −∞. The image function is the EReal infimum infz,Bz=sg(z), which may be −∞ and is +∞ off Bdomg. Properness of g is not assumed in the goal: if domg=∅ both sides hold.
Lower semicontinuity at a point is Mathlib's LowerSemicontinuousAt, the neighbourhood form of the page's sequential level-set criterion.
The liminf in (5.5) is taken in the complete lattice [−∞,+∞] along the meet of the cobounded filter (∥d∥→∞) and the preimage under B of the neighbourhood filter of 0. When no such d exist (e.g. B injective) the filter is trivial, the liminf is +∞, and (5.5) holds, as an empty liminf does on the page.
Correction. As printed, Theorem 5.11 asserts lsc of (Bg) everywhere, and its "if" direction is then false. Take n=2, p=1, B=[10], and g the indicator of the closed set {(x,y):x>0,xy≥1}. Condition (5.5) holds at every zˉ∈domg, since its right side is 0 and g≥0; but (Bg)(s)=0 for s>0 and +∞ for s≤0, so (Bg) is not lsc at 0. The proof begins "given sˉ∈dom(Bg)" and covers exactly Bdomg; both directions establish the corrected equivalence, which is the goal. The "In particular" clause is true as printed and is stated with lsc everywhere. The lsc clause of Proposition 5.10 fails for the same reason and is not formalized.
Assumption IIa2 enters Proposition 5.10 only through the solvability of minz{g(z)+2β∥Bz−s∥2} for every s.
A trivializing formalization is ruled out: the goal assumes only lsc of g and linearity of B, as on the page, and is not restricted to proper or level-bounded g (that is the separate companion).
Contributions welcome: proofs of the milestones, a general Mathlib-style lemma that the infimum of an lsc function over the fibres of a linear map is lsc on its domain under (5.5), and the closedness of image functions under level-boundedness.
A. Auslender, M. Teboulle, Asymptotic Cones and Functions in Optimization and Variational Inequalities, Springer, 2003 (cited as 2002 in the paper). https://doi.org/10.1007/b97594