Let n∈N, N=2n, and let A∈CN×N be Hermitian positive definite with ∥A∥2=1. Let b∈CN be a unit vector. Here ∥⋅∥2 denotes the operator norm for matrices and the Euclidean norm for vectors. Write
κ=∥A∥2∥A−1∥2,x=∥A−1b∥2A−1b,x=∣0⟩⊗x.
The condition number is the actual value determined by A, and satisfies κ≥1.
Set Qb=I−∣b⟩⟨b∣ and
H0=(0QbQb0),H1=(0QbAAQb0).
For p>0, AQC(p) uses the schedule fp:[0,1]→[0,1] specified by
Thus fp(1)=1. The schedule is fp(s)=s when κ=1; when κ>1 and p=1, it is κ(1−κ−s)/(κ−1); otherwise it is the closed formula in Eq. (6). For positive runtime T, the normalized evolution ψT:[0,1]→C2N solves
For every fixed p∈(1,2) there is a constant Cp>0, independent of n,A,b,κ,T and the requested accuracy, such that this evolution exists for every T>0 and every solution satisfies
∣ψT(1)⟩⟨ψT(1)∣−∣x⟩⟨x∣2≤TCpκ.
Consequently, for every ϵ>0 there exists a successful positive runtime T≤Cpκ/ϵ: the evolution exists at this runtime and every solution has the displayed error at most ϵ.
For each endpoint p∈{1,2} there are constants Cp>0 and κ0,p≥2, independent of all input data and accuracy, such that whenever κ≥κ0,p and ϵ>0, there exists a positive runtime with
T≤ϵCpκlogκ
at which the evolution exists and every solution has operator norm error at most ϵ.
This result establishes the runtime and accuracy guarantee for the continuous AQC(p) linear-system solver with positive definite matrices.
Formalization Note The error compares density matrices on the full 2N-dimensional register. The endpoint big-O clause is asymptotic in κ; the threshold avoids interpreting κlogκ=0 at κ=1 as an upper bound on a positive runtime. The frozen condition-number range binder is automatic on the stated input class.
Target
Theorem 1, Section 3, Eq. (7)
Let n∈N, N=2n, and let A∈CN×N be Hermitian positive definite with ∥A∥2=1. Let b∈CN be a unit vector. Here ∥⋅∥2 denotes the operator norm for matrices and the Euclidean norm for vectors. Write
κ=∥A∥2∥A−1∥2,x=∥A−1b∥2A−1b,x=∣0⟩⊗x.
The condition number is the actual value determined by A, and satisfies κ≥1.
Set Qb=I−∣b⟩⟨b∣ and
H0=(0QbQb0),H1=(0QbAAQb0).
For p>0, AQC(p) uses the schedule fp:[0,1]→[0,1] specified by
Thus fp(1)=1. The schedule is fp(s)=s when κ=1; when κ>1 and p=1, it is κ(1−κ−s)/(κ−1); otherwise it is the closed formula in Eq. (6). For positive runtime T, the normalized evolution ψT:[0,1]→C2N solves
For every fixed p∈(1,2) there is a constant Cp>0, independent of n,A,b,κ,T and the requested accuracy, such that this evolution exists for every T>0 and every solution satisfies
∣ψT(1)⟩⟨ψT(1)∣−∣x⟩⟨x∣2≤TCpκ.
Consequently, for every ϵ>0 there exists a successful positive runtime T≤Cpκ/ϵ: the evolution exists at this runtime and every solution has the displayed error at most ϵ.
For each endpoint p∈{1,2} there are constants Cp>0 and κ0,p≥2, independent of all input data and accuracy, such that whenever κ≥κ0,p and ϵ>0, there exists a positive runtime with
T≤ϵCpκlogκ
at which the evolution exists and every solution has operator norm error at most ϵ.
This result establishes the runtime and accuracy guarantee for the continuous AQC(p) linear-system solver with positive definite matrices.
Formalization Note The error compares density matrices on the full 2N-dimensional register. The endpoint big-O clause is asymptotic in κ; the threshold avoids interpreting κlogκ=0 at κ=1 as an upper bound on a positive runtime. The frozen condition-number range binder is automatic on the stated input class.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the entanglement-assisted lower bound of Cleve, van Dam, Nielsen and Tapp, a consequence of Holevo's theorem.
Consider a two-party qubit protocol in which Alice holds an input x∈{0,1}n on n of her qubits. All other qubits start in ∣0⟩, except for a block of qubits in an arbitrary shared state ∣Φ⟩ (fixed before the input, its qubits distributed between Alice and Bob in any way). The protocol is a fixed sequence of steps, each of which is a unitary applied by one party to qubits it currently holds, or the sending of one qubit to the other party. Let nAB be the number of qubits Alice sends to Bob; the number nBA of qubits Bob sends to Alice is unrestricted. At the end Bob performs a measurement (a POVM) acting only on the qubits he holds.
If Bob's measurement, with outcomes in {0,1}n, returns x with probability 1 for every input x, then
nAB≥⌈2n⌉.
More generally, let X be uniformly distributed on {0,1}n and Y the outcome of any measurement of Bob. For every natural number m, if I(X:Y)≥m (mutual information in bits), then nAB≥⌈m/2⌉.
The bound holds regardless of the prior entanglement and of the communication from Bob to Alice. It is the information-theoretic ingredient of the paper's linear lower bounds on the communication complexity of the inner product function.
Formalization Note The protocol model is the shared TwoPartyProtocol (pure shared state; mixed states and intermediate measurements are simulated with ancillas, as the paper notes on p.13). The ceiling ⌈k/2⌉ is written as natural-number division (k+1)/2. In clause 1 the outcome set is {0,1}n itself; a measurement with another outcome set followed by a decoding map is a coarse-grained measurement of this form, and clause 2 covers arbitrary outcome sets.
Target
Theorem 1
This is the entanglement-assisted lower bound of Cleve, van Dam, Nielsen and Tapp, a consequence of Holevo's theorem.
Consider a two-party qubit protocol in which Alice holds an input x∈{0,1}n on n of her qubits. All other qubits start in ∣0⟩, except for a block of qubits in an arbitrary shared state ∣Φ⟩ (fixed before the input, its qubits distributed between Alice and Bob in any way). The protocol is a fixed sequence of steps, each of which is a unitary applied by one party to qubits it currently holds, or the sending of one qubit to the other party. Let nAB be the number of qubits Alice sends to Bob; the number nBA of qubits Bob sends to Alice is unrestricted. At the end Bob performs a measurement (a POVM) acting only on the qubits he holds.
If Bob's measurement, with outcomes in {0,1}n, returns x with probability 1 for every input x, then
nAB≥⌈2n⌉.
More generally, let X be uniformly distributed on {0,1}n and Y the outcome of any measurement of Bob. For every natural number m, if I(X:Y)≥m (mutual information in bits), then nAB≥⌈m/2⌉.
The bound holds regardless of the prior entanglement and of the communication from Bob to Alice. It is the information-theoretic ingredient of the paper's linear lower bounds on the communication complexity of the inner product function.
Formalization Note The protocol model is the shared TwoPartyProtocol (pure shared state; mixed states and intermediate measurements are simulated with ancillas, as the paper notes on p.13). The ceiling ⌈k/2⌉ is written as natural-number division (k+1)/2. In clause 1 the outcome set is {0,1}n itself; a measurement with another outcome set followed by a decoding map is a coarse-grained measurement of this form, and clause 2 covers arbitrary outcome sets.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the ℓ∞ pure-state tomography result of van Apeldoorn, Cornelissen, Gilyén and Nannicini (arXiv:2207.08800, Proposition 22), cited in Nannicini's lecture notes as Theorem 5.17.
Let d≥1 and n=⌈log2d⌉. Let ∣ψ⟩=∑j=0d−1αj∣j⟩ be a pure state, so α∈Cd and ∥α∥2=1. It is stored on n qubits, with basis states ∣j⟩ for j≥d having amplitude 0. Let U be an n-qubit unitary with U∣0⟩=∣ψ⟩. The algorithm can apply U and U†, possibly controlled, but sees U only through these applications. The gate set has all single-qubit gates, CNOT, and the indexed-SWAP gate
There are absolute constants C>0 and c∈N such that the following holds for every d≥1, ε>0 and δ∈(0,1). Write L=log(2+d)+log(2+1/ε)+log(2+1/δ).
There is a quantum algorithm, fixed before U, with the following resources:
at most Cεdlog(2+d/δ) applications of U and U†;
at most Cεdlog(2+d/δ)log(2+d/ε) indexed-SWAP gates, each acting on a memory of d qubits;
at most C(d+d/ε)Lc additional gates (single-qubit gates and CNOTs).
For every such ψ and U, with probability at least 1−δ it outputs α~∈Rd with
∥Re(α)−α~∥∞≤ε.
If ε≥1/d, there is such an algorithm with at most CLc/ε2 applications of U and U† and at most CLc/ε4 gates in total, with the same guarantee.
The result reaches the optimal d/ε dependence for ℓ∞-estimation of the amplitudes. Combined with the paper's ℓ∞-to-ℓq conversion, it yields the ℓq tomography bounds (Theorem 23 of the paper; Corollary 5.18 in Nannicini).
Formalization Note Both clauses use the coherent-circuit model: one oracle circuit over the paper's gate set, started in ∣0⟩ and measured once, with classical post-processing (medians, rescaling) in a read-out function. The paper allows adaptive classical control. The adaptive algorithm of clause 2 is simulated by deferred measurement, and the paper's convention of counting classical computation up to polylog factors absorbs the cost. The logarithms log(d/δ) and log(d/ε) are written log(2+⋅) so the bounds do not vanish in the degenerate corner d=1, δ→1. The O~ factors are Lc. On index values ≥D, which the paper leaves unspecified, the indexed-SWAP gate acts as the identity.
Target
Proposition 22
This is the ℓ∞ pure-state tomography result of van Apeldoorn, Cornelissen, Gilyén and Nannicini (arXiv:2207.08800, Proposition 22), cited in Nannicini's lecture notes as Theorem 5.17.
Let d≥1 and n=⌈log2d⌉. Let ∣ψ⟩=∑j=0d−1αj∣j⟩ be a pure state, so α∈Cd and ∥α∥2=1. It is stored on n qubits, with basis states ∣j⟩ for j≥d having amplitude 0. Let U be an n-qubit unitary with U∣0⟩=∣ψ⟩. The algorithm can apply U and U†, possibly controlled, but sees U only through these applications. The gate set has all single-qubit gates, CNOT, and the indexed-SWAP gate
There are absolute constants C>0 and c∈N such that the following holds for every d≥1, ε>0 and δ∈(0,1). Write L=log(2+d)+log(2+1/ε)+log(2+1/δ).
There is a quantum algorithm, fixed before U, with the following resources:
at most Cεdlog(2+d/δ) applications of U and U†;
at most Cεdlog(2+d/δ)log(2+d/ε) indexed-SWAP gates, each acting on a memory of d qubits;
at most C(d+d/ε)Lc additional gates (single-qubit gates and CNOTs).
For every such ψ and U, with probability at least 1−δ it outputs α~∈Rd with
∥Re(α)−α~∥∞≤ε.
If ε≥1/d, there is such an algorithm with at most CLc/ε2 applications of U and U† and at most CLc/ε4 gates in total, with the same guarantee.
The result reaches the optimal d/ε dependence for ℓ∞-estimation of the amplitudes. Combined with the paper's ℓ∞-to-ℓq conversion, it yields the ℓq tomography bounds (Theorem 23 of the paper; Corollary 5.18 in Nannicini).
Formalization Note Both clauses use the coherent-circuit model: one oracle circuit over the paper's gate set, started in ∣0⟩ and measured once, with classical post-processing (medians, rescaling) in a read-out function. The paper allows adaptive classical control. The adaptive algorithm of clause 2 is simulated by deferred measurement, and the paper's convention of counting classical computation up to polylog factors absorbs the cost. The logarithms log(d/δ) and log(d/ε) are written log(2+⋅) so the bounds do not vanish in the degenerate corner d=1, δ→1. The O~ factors are Lc. On index values ≥D, which the paper leaves unspecified, the indexed-SWAP gate acts as the identity.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the polynomial eigenvalue transformation theorem of Gilyén, Su, Low and Wiebe, which removes the parity constraint of quantum singular value transformation at the price of a factor 1/2.
For an s-qubit operator A, real numbers α>0, ε≥0 and a∈N, an (a+s)-qubit unitary U is an (α,a,ε)-block-encoding of A if
A−α(⟨0∣⊗a⊗I)U(∣0⟩⊗a⊗I)≤ε,
where ∥⋅∥ is the operator norm and the ancilla register comes first.
There is an absolute constant C>0 such that the following holds. Let s,a,d∈N, let δ≥0, and let P∈R[x] be a polynomial of degree at most d with ∣P(x)∣≤21 for all x∈[−1,1]. Then there exist w∈N and a quantum circuit U~ on (a+2)+s+w qubits, built from one- and two-qubit gates and calls to a black box U on a+s qubits, with
at most d uncontrolled applications of U or U†,
at most one controlled application of the black box,
at most C(a+1)max(d,1) other gates,
such that for every α>0, ε≥0, every Hermitian s-qubit matrix A with ∥A∥≤α and every (α,a,ε)-block-encoding U of A, the circuit U~ (with the last w qubits as clean ancillas, started and returned exactly in ∣0⟩) implements a unitary V on (a+2)+s qubits that is a
(1,a+2,4dε/α+δ)-block-encoding of P(A/α).
This theorem is the workhorse for implementing smooth functions of Hermitian matrices (Hamiltonian simulation, matrix inversion, Gibbs sampling) through block-encodings.
Formalization Note The circuit is chosen before α,ε,A,U, so it depends only on s,a,d,P,δ. The source's O((a+1)d) is encoded with max(d,1) since a constant polynomial still needs a few gates. The source's last sentence (classical computability of the circuit description in time poly(d,log(1/δ))) is not formalized, because the source fixes no bit model for the real coefficients of P. The controlled query may be controlled-U or controlled-U†. The hypothesis ∥A∥≤α corrects the printed statement: the source's proof uses Lemma 22, which needs ∥A/α∥≤1, and without it the printed statement fails (e.g. A=[2], U=[1], α=ε=1, P=T8/2, d=8).
Correction to the printed source.
Printed: Suppose that U is an (α, a, ε)-encoding of a Hermitian matrix A (no condition ‖A‖ ≤ α; Definition 43 only forces ‖A‖ ≤ α + ε).
Corrected: Added the hypothesis specNorm A ≤ α, i.e. ‖A/α‖ ≤ 1.
Reason: The proof (p.49) applies Lemma 22 (p.23), which requires both matrices to have operator norm at most 1. Without it the statement is false: s = a = 0, α = ε = 1, A = [2], U = [1] is a (1, 0, 1)-encoding of A; with P = T_8/2, d = 8, δ = 0 one gets P(A/α) = T_8(2)/2 ≈ 9408, while every block of a unitary has norm ≤ 1 and the claimed error is 32.
Target
Theorem 56
This is the polynomial eigenvalue transformation theorem of Gilyén, Su, Low and Wiebe, which removes the parity constraint of quantum singular value transformation at the price of a factor 1/2.
For an s-qubit operator A, real numbers α>0, ε≥0 and a∈N, an (a+s)-qubit unitary U is an (α,a,ε)-block-encoding of A if
A−α(⟨0∣⊗a⊗I)U(∣0⟩⊗a⊗I)≤ε,
where ∥⋅∥ is the operator norm and the ancilla register comes first.
There is an absolute constant C>0 such that the following holds. Let s,a,d∈N, let δ≥0, and let P∈R[x] be a polynomial of degree at most d with ∣P(x)∣≤21 for all x∈[−1,1]. Then there exist w∈N and a quantum circuit U~ on (a+2)+s+w qubits, built from one- and two-qubit gates and calls to a black box U on a+s qubits, with
at most d uncontrolled applications of U or U†,
at most one controlled application of the black box,
at most C(a+1)max(d,1) other gates,
such that for every α>0, ε≥0, every Hermitian s-qubit matrix A with ∥A∥≤α and every (α,a,ε)-block-encoding U of A, the circuit U~ (with the last w qubits as clean ancillas, started and returned exactly in ∣0⟩) implements a unitary V on (a+2)+s qubits that is a
(1,a+2,4dε/α+δ)-block-encoding of P(A/α).
This theorem is the workhorse for implementing smooth functions of Hermitian matrices (Hamiltonian simulation, matrix inversion, Gibbs sampling) through block-encodings.
Formalization Note The circuit is chosen before α,ε,A,U, so it depends only on s,a,d,P,δ. The source's O((a+1)d) is encoded with max(d,1) since a constant polynomial still needs a few gates. The source's last sentence (classical computability of the circuit description in time poly(d,log(1/δ))) is not formalized, because the source fixes no bit model for the real coefficients of P. The controlled query may be controlled-U or controlled-U†. The hypothesis ∥A∥≤α corrects the printed statement: the source's proof uses Lemma 22, which needs ∥A/α∥≤1, and without it the printed statement fails (e.g. A=[2], U=[1], α=ε=1, P=T8/2, d=8).
Correction to the printed source.
Printed: Suppose that U is an (α, a, ε)-encoding of a Hermitian matrix A (no condition ‖A‖ ≤ α; Definition 43 only forces ‖A‖ ≤ α + ε).
Corrected: Added the hypothesis specNorm A ≤ α, i.e. ‖A/α‖ ≤ 1.
Reason: The proof (p.49) applies Lemma 22 (p.23), which requires both matrices to have operator norm at most 1. Without it the statement is false: s = a = 0, α = ε = 1, A = [2], U = [1] is a (1, 0, 1)-encoding of A; with P = T_8/2, d = 8, δ = 0 one gets P(A/α) = T_8(2)/2 ≈ 9408, while every block of a unitary has norm ≤ 1 and the claimed error is 32.
Corollary 62
This is the robust block-Hamiltonian simulation result of Gilyén, Su, Low and Wiebe (Corollary 62 of arXiv:1806.01838v1, Corollary 63 in the published version).
Block-encodings are as in Definition 43: an (a+s)-qubit unitary U is an (α,a,η)-block-encoding of an s-qubit operator H if ∥H−α(⟨0∣⊗a⊗I)U(∣0⟩⊗a⊗I)∥≤η in operator norm.
There is an absolute constant C>0 such that the following holds. Let s,a∈N, t∈R, ε∈(0,1) and α>0. Then there exist w≤C and a circuit on (a+2)+s+w qubits, made of two-qubit gates and calls to a black box U on a+s qubits, using
at most 6α∣t∣+9ln(12/ε) uncontrolled applications of U or U†,
at most 3 applications of controlled-U or its inverse,
at most C(a+1)(α∣t∣+ln(2/ε)) two-qubit gates,
such that for every Hermitian s-qubit matrix H and every (α,a,ε/∣2t∣)-block-encoding U of H, the circuit (with its last w qubits as clean ancillas) implements a unitary V that is a
(1,a+2,ε)-block-encoding of eitH.
This gives Hamiltonian simulation with additive query complexity in α∣t∣ and log(1/ε), robust to an imprecise block-encoding of the Hamiltonian.
Formalization Note The circuit may depend on s,a,t,ε,α but not on H or U. The source's gate bound O(a(⋯)) is encoded as O((a+1)(⋯)), since the two new ancillas need gates even when a=0. At t=0 the source's ε/∣2t∣ is undefined; in Lean ε/0=0, so there the hypothesis is an exact block-encoding.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the conversion of a probability oracle into an approximate phase oracle (Gilyén–Arunachalam–Wiebe, Theorem 14).
Let X be a finite set and H the Hilbert space with orthonormal basis {∣x⟩:x∈X}. A probability oracle for p:X→[0,1] with an n-qubit auxiliary register is a unitary Up on H⊗C2n with
for some normalized states ψgood(x),ψbad(x) (the flag is the last qubit). A phase oracle for p on an auxiliary register is a unitary Op with Op∣x⟩∣0⟩=eip(x)∣x⟩∣0⟩ for all x∈X.
There is an absolute constant C>0 such that for every ε∈(0,1/3), every finite X and every n≥1 there are a number a≤Cloglog(1/ε) of extra qubits and a quantum circuit O on H⊗C2n+a, built from input-independent unitaries and at most Clog(1/ε) (uncontrolled) applications of Up and Up†, such that for every p, every probability oracle Up for p, every phase oracle Op for p on n+a auxiliary qubits, and every unit vector ∣ψ⟩∈H,
O∣ψ⟩∣0⟩⊗(n+a)−Op∣ψ⟩∣0⟩⊗(n+a)≤ε.
This shows that the probability oracles arising from parametrized quantum circuits can be used wherever a phase oracle is needed, at only logarithmic overhead in the precision.
Formalization Note The circuit is fixed before p and Up; the source's n-qubit auxiliary register is written n=m+1. The source's "for all ∣ψ⟩∈H" is read for unit vectors, as in the proof.
Target
Theorem 14
This is the conversion of a probability oracle into an approximate phase oracle (Gilyén–Arunachalam–Wiebe, Theorem 14).
Let X be a finite set and H the Hilbert space with orthonormal basis {∣x⟩:x∈X}. A probability oracle for p:X→[0,1] with an n-qubit auxiliary register is a unitary Up on H⊗C2n with
for some normalized states ψgood(x),ψbad(x) (the flag is the last qubit). A phase oracle for p on an auxiliary register is a unitary Op with Op∣x⟩∣0⟩=eip(x)∣x⟩∣0⟩ for all x∈X.
There is an absolute constant C>0 such that for every ε∈(0,1/3), every finite X and every n≥1 there are a number a≤Cloglog(1/ε) of extra qubits and a quantum circuit O on H⊗C2n+a, built from input-independent unitaries and at most Clog(1/ε) (uncontrolled) applications of Up and Up†, such that for every p, every probability oracle Up for p, every phase oracle Op for p on n+a auxiliary qubits, and every unit vector ∣ψ⟩∈H,
O∣ψ⟩∣0⟩⊗(n+a)−Op∣ψ⟩∣0⟩⊗(n+a)≤ε.
This shows that the probability oracles arising from parametrized quantum circuits can be used wherever a phase oracle is needed, at only logarithmic overhead in the precision.
Formalization Note The circuit is fixed before p and Up; the source's n-qubit auxiliary register is written n=m+1. The source's "for all ∣ψ⟩∈H" is read for unit vectors, as in the proof.
Lemma 16
This is the conversion of a phase oracle into a probability oracle (Gilyén–Arunachalam–Wiebe, Lemma 16).
Let X be a finite set, H the Hilbert space with orthonormal basis {∣x⟩:x∈X}, and let Op be a phase oracle for p:X→R on H⊗C2w, i.e. a unitary with Op∣x⟩∣0⟩⊗w=eip(x)∣x⟩∣0⟩⊗w for all x∈X.
There is an absolute constant C>0 such that for all ε,δ∈(0,1/2), every finite X and every w there are k and a quantum circuit Up on H⊗C2k+1, built from input-independent unitaries and at most Clog(1/ε)/δ invocations of Op, Op† or their controlled versions, such that for every p:X→[δ,1−δ], every phase oracle Op for p and every x∈X there are p′(x)∈[0,1] and a unit vector ∣Φ⊥⟩ with
Together with Theorem 14 this shows that phase and probability oracles are interconvertible with logarithmic overhead in the precision when the probabilities are bounded away from 0 and 1.
Formalization Note The register ∣0⟩⊗k consists of the w auxiliary qubits of Op and a further qubits (k=w+a); the last qubit is the flag. The source's "for every x∈Rn" is read as x∈X, the domain of p.
Theorem 23
This is the higher-order gradient algorithm of Gilyén–Arunachalam–Wiebe (Theorem 23).
Let f:[−R,R]d→R be accessed through fractional phase queries: for a finite set of query points X⊆[−R,R]d chosen by the algorithm, and every r∈[−1,1], a unitary Ofr with Ofr∣x⟩∣0⟩=eirf(x)∣x⟩∣0⟩ for x∈X; each application of some Ofr counts as one query. For x=0 write ∂rkf(x)=dτkdkf(x+τr)τ=0 (taken within the cube) with r=x/∥x∥, ∥⋅∥ the Euclidean norm.
There is an absolute constant C>0 such that for all d, m∈Z+, R>0, B≥0, ε>0, ρ∈(0,1) and every a-priori gradient bound M>0 there is a quantum algorithm (query points, start state, circuit and classical post-processing of the final measurement, all independent of f) using at most
phase queries with the following property: for every f that is (2m+1)-times differentiable on [−R,R]d, satisfies ∣∂r2m+1f(x)∣≤B for all x∈[−R,R]d∖{0}, r=x/∥x∥, and ∥∇f(0)∥∞≤M, and for every fractional phase oracle for f, the output g satisfies
Pr[∥g−∇f(0)∥∞≤ε]≥1−ρ.
The bound shows that higher-degree central difference formulas reduce the query cost of Jordan's gradient algorithm, exponentially in d for low-degree polynomials.
Formalization Note The known gradient bound M is the hypothesis of Theorem 21 that the proof uses (the query count is independent of M). The factor log(d/ρ) is written 1+log(d/ρ), the proof's repetition count ⌈Clog(d/ρ)⌉≥1. Queries are uncontrolled and non-adjoint, as the proof applies them.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Fix positive smoothness bounds ℓ,ρ, confidence 0<δ<1, and a nonnegative starting gap Δ. Let f:Rn→R be twice differentiable, with globally ℓ-Lipschitz gradient in Euclidean norm and globally ρ-Lipschitz Hessian in operator norm. Assume f attains its finite global minimum f∗, and let the public initial point x0 satisfy f(x0)−f∗=Δ. For 0<ε≤ℓ2/ρ, set g=Δ(logn)2ε−7/4.
There are C>0, a nonnegative integer a, and thresholds n0≥2, g0≥1, depending only on the fixed public parameters. In the regime n≥n0 and g≥g0, a quantum evaluation-query program can be chosen using n,ε,x0 and those public parameters before f and its oracle. For every coherent value-output unitary satisfying Uf∣x,0,0⟩=∣x,f(x),0⟩, its joint output and evaluation-call law obeys
Here Q counts forward and inverse evaluation-oracle applications. There are no free gradient, Hessian or simulation queries. If Δ=0, the program returns x0 without queries, including in dimension one. Positive-gap small dimensions and scales are outside this asymptotic statement.
This is the authors' ideal-oracle existence claim, with the displayed log2n and ε−7/4 dependence and their broad convention O(g)=O(gpoly(logg)). The formal counterpart combines Theorem 4, Eq. (66), pages 18–19, Remark 2 on page 20, and the accelerated evaluation-only extension asserted after Theorem 5 and in Remark 3 on page 24. It does not assert an exact local minimum or correctness of a specific finite-accuracy implementation.
Formalization Note The frozen ideal real-label register and adaptive evaluation-program semantics provide the joint law. The Hessian lower bound is its equivalent quadratic-form inequality on every real vector. Measurability is concluded for the chosen program, and the gap is computed from an attained minimum. The action of the oracle on dirty value registers is left unrestricted.
Target
Theorem 1 (Main result, informal)
Fix positive smoothness bounds ℓ,ρ, confidence 0<δ<1, and a nonnegative starting gap Δ. Let f:Rn→R be twice differentiable, with globally ℓ-Lipschitz gradient in Euclidean norm and globally ρ-Lipschitz Hessian in operator norm. Assume f attains its finite global minimum f∗, and let the public initial point x0 satisfy f(x0)−f∗=Δ. For 0<ε≤ℓ2/ρ, set g=Δ(logn)2ε−7/4.
There are C>0, a nonnegative integer a, and thresholds n0≥2, g0≥1, depending only on the fixed public parameters. In the regime n≥n0 and g≥g0, a quantum evaluation-query program can be chosen using n,ε,x0 and those public parameters before f and its oracle. For every coherent value-output unitary satisfying Uf∣x,0,0⟩=∣x,f(x),0⟩, its joint output and evaluation-call law obeys
Here Q counts forward and inverse evaluation-oracle applications. There are no free gradient, Hessian or simulation queries. If Δ=0, the program returns x0 without queries, including in dimension one. Positive-gap small dimensions and scales are outside this asymptotic statement.
This is the authors' ideal-oracle existence claim, with the displayed log2n and ε−7/4 dependence and their broad convention O(g)=O(gpoly(logg)). The formal counterpart combines Theorem 4, Eq. (66), pages 18–19, Remark 2 on page 20, and the accelerated evaluation-only extension asserted after Theorem 5 and in Remark 3 on page 24. It does not assert an exact local minimum or correctness of a specific finite-accuracy implementation.
Formalization Note The frozen ideal real-label register and adaptive evaluation-program semantics provide the joint law. The Hessian lower bound is its equivalent quadratic-form inequality on every real vector. Measurability is concluded for the chosen program, and the gap is computed from an attained minimum. The action of the oracle on dirty value registers is left unrestricted.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let H be a complete complex Hilbert space and T≥1 an integer. Write Wj=WT(j/T) for unitary walk operators on H, for 0≤j≤T. Choose at each step a spectral band σP(j) and its complement σQ(j). For each valid window j,j+1,…,j+k, with k=0,1,2, enclose the two bands in disjoint closed proper arcs of the unit circle. Use compatible choices in which shorter-window arcs lie in the corresponding longer-window arcs. Let Δk(j)>0 be their minimum angular separation, in radians. The choices may be loose: these quantities need not equal the actual spectral gap.
Define Δ(j)=Δ2(j) when j+2≤T, Δ(j)=Δ1(j) when j+1=T, and Δ(T)=Δ0(T). Let Δˇ(j)=min0≤i≤T,∣i−j∣≤1Δ(i). For nonnegative bounds c1(j),c2(j), possibly dependent on T, suppose
Set c^k(j)=max{ck(i):0≤i,i+k≤T,∣i−j∣≤1}, with value zero if this set is empty, and assume 4c^1(j)/Δˇ(j)≤T at every grid index j.
Let Pj be the spectral projection onto σP(j) and Qj=I−Pj. Construct Sj=Pj+1Pj+Qj+1Qj, vj=(SjSj†)1/2 and Vj=vj−1Sj. Define the chronological evolutions by U0=U0A=I, Uj+1=WjUj, and Uj+1A=VjWjUjA. Then for every integer 0≤n≤T,
Here ∥⋅∥ is the full operator norm and empty sums equal zero. This quantitative discrete adiabatic estimate retains the dependence on the first two forward differences and the chosen angular gaps.
Formalization Note The frozen spectral-window structure encodes compatible nested arc choices and T≥T∗; spectral projections use continuous functional calculus. Finite ordinal intervals encode exactly the displayed integer summation ranges, including n=0 and T=1. The chronological product and neighboring minimum follow the proof's conventions where the introductory indexing and the appendix's word “maximum” are misprinted.
Target
Theorem 3, Section II.B, Eq. (15)
Let H be a complete complex Hilbert space and T≥1 an integer. Write Wj=WT(j/T) for unitary walk operators on H, for 0≤j≤T. Choose at each step a spectral band σP(j) and its complement σQ(j). For each valid window j,j+1,…,j+k, with k=0,1,2, enclose the two bands in disjoint closed proper arcs of the unit circle. Use compatible choices in which shorter-window arcs lie in the corresponding longer-window arcs. Let Δk(j)>0 be their minimum angular separation, in radians. The choices may be loose: these quantities need not equal the actual spectral gap.
Define Δ(j)=Δ2(j) when j+2≤T, Δ(j)=Δ1(j) when j+1=T, and Δ(T)=Δ0(T). Let Δˇ(j)=min0≤i≤T,∣i−j∣≤1Δ(i). For nonnegative bounds c1(j),c2(j), possibly dependent on T, suppose
Set c^k(j)=max{ck(i):0≤i,i+k≤T,∣i−j∣≤1}, with value zero if this set is empty, and assume 4c^1(j)/Δˇ(j)≤T at every grid index j.
Let Pj be the spectral projection onto σP(j) and Qj=I−Pj. Construct Sj=Pj+1Pj+Qj+1Qj, vj=(SjSj†)1/2 and Vj=vj−1Sj. Define the chronological evolutions by U0=U0A=I, Uj+1=WjUj, and Uj+1A=VjWjUjA. Then for every integer 0≤n≤T,
Here ∥⋅∥ is the full operator norm and empty sums equal zero. This quantitative discrete adiabatic estimate retains the dependence on the first two forward differences and the chosen angular gaps.
Formalization Note The frozen spectral-window structure encodes compatible nested arc choices and T≥T∗; spectral projections use continuous functional calculus. Finite ordinal intervals encode exactly the displayed integer summation ranges, including n=0 and T=1. The chronological product and neighboring minimum follow the proof's conventions where the introductory indexing and the appendix's word “maximum” are misprinted.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let Ω={O1,…,Om} be a finite family of known implementable completely positive trace-preserving maps on an n-qubit device. Maps may include noisy initialization and need not be unitary or unital. Let β be a length-L word in a fixed finite unitary gate family, with composite unitary Uβ. Assume a supplied exact quasi-probability representation, fixed before all experimental outcomes:
UβXUβ†=γβα∈ΩL∑Pβ(α)σβ(α)Oα(X)for every operator X,
where γβ≥1, Pβ is a probability distribution on length-L noisy words, σβ(α)∈{−1,1}, and Oα=OαL∘⋯∘Oα1. Each experiment starts from a fresh ρ0=∣0⟩⟨0∣⊗n and ends with ideal computational-basis measurement of every qubit. Let A=diag(ax) with ax∈[−1,1]. Set E(α)=Tr(AOα(ρ0)) and E∗=Tr(AUβρ0Uβ†).
Conditioned on any noisy word, the readout ax has mean E(α) and variance at most 1. Moreover,
E∗=γβα∑Pβ(α)σβ(α)E(α).
For a full trial, first draw α∼Pβ, then draw its fresh conditional readout x and report Y=γβσβ(α)ax. This gives ∣Y∣≤γβ, EY=E∗ and Var(Y)≤γβ2. For every positive integer M, perform M independent full trials and compute the paper's estimator
The computed experiment uses exactly M noisy-circuit runs and ML channel applications, all on the same n-qubit register. For every δ>0, the rounded Eq. (9) budget M=⌈(γβ/δ)2⌉ is positive and satisfies
γβ2≤Mδ2<γβ2+δ2,Pr{∣E−E∗∣≥cδ}≤2e−c2/2(c>0).
These universal numerical bounds witness the paper's bounded-variance, Monte Carlo precision and γβ2 run-overhead claims. The overhead describes a sufficient sampling budget relative to the noiseless δ−2 scale, without claiming optimality for every observable.
Formalization Note The theorem uses the supplied QPR distribution directly and makes no classical runtime claim; the paper's efficient sampling and computable-sign premises concern its implementation. Locality and depth preservation require the chosen QPR construction and are not inferred from the decomposition alone. The displayed tail bound spells out “O(δ) w.h.p.”: choosing a sufficiently large fixed c makes the failure small, but fixed c does not imply a failure probability vanishing with δ.
Let Ω={O1,…,Om} be a finite family of known implementable completely positive trace-preserving maps on an n-qubit device. Maps may include noisy initialization and need not be unitary or unital. Let β be a length-L word in a fixed finite unitary gate family, with composite unitary Uβ. Assume a supplied exact quasi-probability representation, fixed before all experimental outcomes:
UβXUβ†=γβα∈ΩL∑Pβ(α)σβ(α)Oα(X)for every operator X,
where γβ≥1, Pβ is a probability distribution on length-L noisy words, σβ(α)∈{−1,1}, and Oα=OαL∘⋯∘Oα1. Each experiment starts from a fresh ρ0=∣0⟩⟨0∣⊗n and ends with ideal computational-basis measurement of every qubit. Let A=diag(ax) with ax∈[−1,1]. Set E(α)=Tr(AOα(ρ0)) and E∗=Tr(AUβρ0Uβ†).
Conditioned on any noisy word, the readout ax has mean E(α) and variance at most 1. Moreover,
E∗=γβα∑Pβ(α)σβ(α)E(α).
For a full trial, first draw α∼Pβ, then draw its fresh conditional readout x and report Y=γβσβ(α)ax. This gives ∣Y∣≤γβ, EY=E∗ and Var(Y)≤γβ2. For every positive integer M, perform M independent full trials and compute the paper's estimator
The computed experiment uses exactly M noisy-circuit runs and ML channel applications, all on the same n-qubit register. For every δ>0, the rounded Eq. (9) budget M=⌈(γβ/δ)2⌉ is positive and satisfies
γβ2≤Mδ2<γβ2+δ2,Pr{∣E−E∗∣≥cδ}≤2e−c2/2(c>0).
These universal numerical bounds witness the paper's bounded-variance, Monte Carlo precision and γβ2 run-overhead claims. The overhead describes a sufficient sampling budget relative to the noiseless δ−2 scale, without claiming optimality for every observable.
Formalization Note The theorem uses the supplied QPR distribution directly and makes no classical runtime claim; the paper's efficient sampling and computable-sign premises concern its implementation. Locality and depth preservation require the chosen QPR construction and are not inferred from the decomposition alone. The displayed tail bound spells out “O(δ) w.h.p.”: choosing a sufficiently large fixed c makes the failure small, but fixed c does not imply a failure probability vanishing with δ.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Efficient quantum tomography establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
Let d,n≥1 be integers and let ρ be an arbitrary complex d×d density matrix, including a singular one. Write α for its decreasingly sorted spectrum. On n independent copies ρ⊗n, perform weak Schur sampling and then Keyl's normalized highest-weight POVM in the Schur module of the observed partition. The first outcome λ is a partition of n with at most d rows and has distribution SWn(α). Conditional on any positive-probability partition, the second outcome U∈U(d) has law Kλ(ρ). Put λ=(λ1/n,…,λd/n), padding the rows by zeros, and report ρ=Udiag(λ)U†. Then
Eλ∼SWn(α),U∼Kλ(ρ)[∥ρ−ρ∥F2]≤n4d−3,
where ∥A∥F2=∑i,j∣Aij∣2. The measurement is fixed by d,n before the unknown input state is supplied. This is the paper's expected-risk guarantee for the named estimator.
Formalization Note The theorem also certifies a lawful continuous-outcome POVM, chosen before ρ, whose Born law is the frozen computed joint law. The nonnegative risk is a Lebesgue integral in [0,∞]; the finite bound ensures finiteness. The joint density relative to counting measure on partitions and probability Haar measure is dim(Spλ)dim(Vλd)Δλ(U†ρU), combining source equations (8), (9), and (11). This removes division by a zero Schur probability without excluding singular states.
Target
Theorem 1.2
Let d,n≥1 be integers and let ρ be an arbitrary complex d×d density matrix, including a singular one. Write α for its decreasingly sorted spectrum. On n independent copies ρ⊗n, perform weak Schur sampling and then Keyl's normalized highest-weight POVM in the Schur module of the observed partition. The first outcome λ is a partition of n with at most d rows and has distribution SWn(α). Conditional on any positive-probability partition, the second outcome U∈U(d) has law Kλ(ρ). Put λ=(λ1/n,…,λd/n), padding the rows by zeros, and report ρ=Udiag(λ)U†. Then
Eλ∼SWn(α),U∼Kλ(ρ)[∥ρ−ρ∥F2]≤n4d−3,
where ∥A∥F2=∑i,j∣Aij∣2. The measurement is fixed by d,n before the unknown input state is supplied. This is the paper's expected-risk guarantee for the named estimator.
Formalization Note The theorem also certifies a lawful continuous-outcome POVM, chosen before ρ, whose Born law is the frozen computed joint law. The nonnegative risk is a Lebesgue integral in [0,∞]; the finite bound ensures finiteness. The joint density relative to counting measure on partitions and probability Haar measure is dim(Spλ)dim(Vλd)Δλ(U†ρU), combining source equations (8), (9), and (11). This removes division by a zero Schur probability without excluding singular states.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Sample-optimal tomography of quantum statesResearch Paper
Motivation
Sample-optimal tomography of quantum states establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
Let d,n≥1 be integers. Let Λd,n be the partitions of n with at most d rows, let λˉ=diag(λ1/n,…,λd/n), and let Πλ be the projector onto the full Schur–Weyl summand Qλ⊗Pλ of (Cd)⊗n. Write sλ for the Schur character polynomial, so dimQλ=sλ(1,…,1).
Independently of the unknown state, there exists a lawful continuous collective POVM with outcomes (λ,U)∈Λd,n×U(d), reference measure given by counting measure on Λd,n times normalized Haar measure on U(d), and density
M(λ,U)=sλ(λˉ)dimQλΠλ(UλˉU†)⊗nΠλ.
Its reported density matrix is ρ^(λ,U)=UλˉU†.
For every positive semidefinite matrix ρ∈Cd×d with Trρ=1, the Born outcome law on the input ρ⊗n is a probability measure. Writing r=rankρ, for every δ∈[0,1] it satisfies
This is the original finite-copy fidelity guarantee for the equation-(10) measurement. The same measurement works for every unknown state and automatically gives the bound corresponding to its actual rank.
Target
§V, equations (10) and (14)
Let d,n≥1 be integers. Let Λd,n be the partitions of n with at most d rows, let λˉ=diag(λ1/n,…,λd/n), and let Πλ be the projector onto the full Schur–Weyl summand Qλ⊗Pλ of (Cd)⊗n. Write sλ for the Schur character polynomial, so dimQλ=sλ(1,…,1).
Independently of the unknown state, there exists a lawful continuous collective POVM with outcomes (λ,U)∈Λd,n×U(d), reference measure given by counting measure on Λd,n times normalized Haar measure on U(d), and density
M(λ,U)=sλ(λˉ)dimQλΠλ(UλˉU†)⊗nΠλ.
Its reported density matrix is ρ^(λ,U)=UλˉU†.
For every positive semidefinite matrix ρ∈Cd×d with Trρ=1, the Born outcome law on the input ρ⊗n is a probability measure. Writing r=rankρ, for every δ∈[0,1] it satisfies
This is the original finite-copy fidelity guarantee for the equation-(10) measurement. The same measurement works for every unknown state and automatically gives the bound corresponding to its actual rank.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the main convex-optimization guarantee of the Lee–Sidford–Wong cutting plane method (Theorem 42), the result cited as Theorem 5.23 in Nannicini's lecture notes.
For r>0 let B∞(r)={x∈Rn:∥x∥∞≤r}. For a set K⊆Rn, MinWidth(K)=inf∥a∥2=1supx,y∈K⟨a,x−y⟩. Given a convex f:Rn→R, a convex set Γ and η,δ≥0, an (η,δ)-separation oracle on Γ for f is a map that, on every input x∈Γ, either asserts f(x)≤miny∈Γf(y)+η, or outputs a half space H={z:c⊤z≤c⊤x+b} with c=0, b≤δ∥c∥2 and {z∈Γ:f(z)≤f(x)}⊆H.
There are universal constants c,C>0 such that the following holds. Let n≥1, R>0, 0<α<1 and w>0, and put
κ=wR,L=log(2+αnκ),δ=n3/2Lcαw.
There is a randomized algorithm A, depending only on n,R,α,w, that queries an oracle at points of Rn and returns a point x∈Rn, with the following property. For every η≥0, every convex f:Rn→R, every convex set Ω⊆B∞(R) with MinWidth(Ω)=w containing a global minimizer x∗ of f, and every (η,δ)-separation oracle O on B∞(R) for f:
on every run, the returned point satisfies
f(x)−y∈Ωminf(y)≤η+α(y∈Ωsupf(y)−y∈Ωminf(y));
the expected number of oracle calls is at most CnL.
The oracle only needs to satisfy its specification at points of B∞(R). The result turns a cutting plane method into an optimization method whose number of oracle calls is linear in the dimension up to a logarithm, and many of the paper's applications rest on it.
Formalization Note A randomized algorithm is a probability mass function over deterministic adaptive query strategies (decision trees with real-vector queries). The paper prints lnκ in δ. Its proof gives log(nκ/α), and κ≤1 is possible, which would make the printed δ non-positive, so L=log(2+nκ/α) is used in both places. Only the oracle part of the running time is formalized. The additional arithmetic time n3logO(1)(nκ/α) is omitted because the paper fixes no machine model for real arithmetic.
Target
Theorem 42
This is the main convex-optimization guarantee of the Lee–Sidford–Wong cutting plane method (Theorem 42), the result cited as Theorem 5.23 in Nannicini's lecture notes.
For r>0 let B∞(r)={x∈Rn:∥x∥∞≤r}. For a set K⊆Rn, MinWidth(K)=inf∥a∥2=1supx,y∈K⟨a,x−y⟩. Given a convex f:Rn→R, a convex set Γ and η,δ≥0, an (η,δ)-separation oracle on Γ for f is a map that, on every input x∈Γ, either asserts f(x)≤miny∈Γf(y)+η, or outputs a half space H={z:c⊤z≤c⊤x+b} with c=0, b≤δ∥c∥2 and {z∈Γ:f(z)≤f(x)}⊆H.
There are universal constants c,C>0 such that the following holds. Let n≥1, R>0, 0<α<1 and w>0, and put
κ=wR,L=log(2+αnκ),δ=n3/2Lcαw.
There is a randomized algorithm A, depending only on n,R,α,w, that queries an oracle at points of Rn and returns a point x∈Rn, with the following property. For every η≥0, every convex f:Rn→R, every convex set Ω⊆B∞(R) with MinWidth(Ω)=w containing a global minimizer x∗ of f, and every (η,δ)-separation oracle O on B∞(R) for f:
on every run, the returned point satisfies
f(x)−y∈Ωminf(y)≤η+α(y∈Ωsupf(y)−y∈Ωminf(y));
the expected number of oracle calls is at most CnL.
The oracle only needs to satisfy its specification at points of B∞(R). The result turns a cutting plane method into an optimization method whose number of oracle calls is linear in the dimension up to a logarithm, and many of the paper's applications rest on it.
Formalization Note A randomized algorithm is a probability mass function over deterministic adaptive query strategies (decision trees with real-vector queries). The paper prints lnκ in δ. Its proof gives log(nκ/α), and κ≤1 is possible, which would make the printed δ non-positive, so L=log(2+nκ/α) is used in both places. Only the oracle part of the running time is formalized. The additional arithmetic time n3logO(1)(nκ/α) is omitted because the paper fixes no machine model for real arithmetic.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the quantum algorithm for finding the first marked element of an ordered list (Lin–Lin, Theorem 10).
A list of N elements is given as a black box x∈{0,1}N, where xi=1 means that element i is marked; it is accessed through the standard query oracle Ox:∣i,b⟩↦∣i,b⊕xi⟩. An algorithm consists of rounds; each round applies UTOxUT−1⋯OxU0 to a fixed start state with unitaries Ut independent of x, measures in the computational basis, and chooses the next round (or halts with an answer) from the outcome. For an input x let first(x) be the position of the first marked element, or ⊥ if none is marked.
There is an absolute constant C>0 such that for every N there is an algorithm A, fixed before the input, such that for every x∈{0,1}N:
Pr[A outputs first(x)]≥9/10;
if the first marked element is the d-th element of the list, then the expected number of queries satisfies
E[#queries of A on x]≤Cd;
if no element is marked, then A outputs ⊥ with probability 1, and every run uses at most CN queries.
The point is that the cost adapts to the position of the first marked element rather than to the length of the list; this is the search subroutine used to simulate classical query algorithms whose query results can be guessed.
Formalization Note Algorithms are finite trees of query rounds with measurements in between. Positions are 0-indexed, so the d-th element is index d−1 and the bound reads Ci+1. The error constant 1/10 is the one achieved by the paper's proof (Appendix C). The source's time bounds are not formalized, because the paper fixes no model of time; only the query bounds are stated.
Target
Theorem 10
This is the quantum algorithm for finding the first marked element of an ordered list (Lin–Lin, Theorem 10).
A list of N elements is given as a black box x∈{0,1}N, where xi=1 means that element i is marked; it is accessed through the standard query oracle Ox:∣i,b⟩↦∣i,b⊕xi⟩. An algorithm consists of rounds; each round applies UTOxUT−1⋯OxU0 to a fixed start state with unitaries Ut independent of x, measures in the computational basis, and chooses the next round (or halts with an answer) from the outcome. For an input x let first(x) be the position of the first marked element, or ⊥ if none is marked.
There is an absolute constant C>0 such that for every N there is an algorithm A, fixed before the input, such that for every x∈{0,1}N:
Pr[A outputs first(x)]≥9/10;
if the first marked element is the d-th element of the list, then the expected number of queries satisfies
E[#queries of A on x]≤Cd;
if no element is marked, then A outputs ⊥ with probability 1, and every run uses at most CN queries.
The point is that the cost adapts to the position of the first marked element rather than to the length of the list; this is the search subroutine used to simulate classical query algorithms whose query results can be guessed.
Formalization Note Algorithms are finite trees of query rounds with measurements in between. Positions are 0-indexed, so the d-th element is index d−1 and the bound reads Ci+1. The error constant 1/10 is the one achieved by the paper's proof (Appendix C). The source's time bounds are not formalized, because the paper fixes no model of time; only the query bounds are stated.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the headline MaxCut guarantee of the Quantum Approximate Optimization Algorithm (QAOA) at depth p=1.
Let G=(V,E) be a connected 3-regular simple graph on n vertices. For a bit string z∈{0,1}n let C(z) be the number of edges ⟨jk⟩∈E with zj=zk; as an operator, C=∑⟨jk⟩∈E21(1−σjzσkz) is diagonal in the computational basis. Let B=∑j=1nσjx, let ∣s⟩=2−n/2∑z∣z⟩ be the uniform superposition, and for angles γ,β let
the expected cut value of the string obtained by measuring ∣γ,β⟩ in the computational basis. Then there exist angles γ∈[0,2π] and β∈[0,π] such that
F1(γ,β)≥0.6924⋅z∈{0,1}nmaxC(z).
Equivalently, M1=maxγ,βF1(γ,β) is at least 0.6924 times the size of the maximum cut. The constant 0.6924 is the numerically computed (rounded-down) worst-case ratio, attained in the limit of graphs without triangles; the source's derivation is partly numerical.
Formalization Note The graph is a SimpleGraph (Fin n) with Connected and IsRegularOfDegree 3. The approximation ratio is measured, as in the source's argument (34), through the expectation F1 at the best angles; the source's informal remark that order nlogn repetitions find a string with cut value near M1 is not part of the statement.
Target
Abstract and §V (unnumbered)
This is the headline MaxCut guarantee of the Quantum Approximate Optimization Algorithm (QAOA) at depth p=1.
Let G=(V,E) be a connected 3-regular simple graph on n vertices. For a bit string z∈{0,1}n let C(z) be the number of edges ⟨jk⟩∈E with zj=zk; as an operator, C=∑⟨jk⟩∈E21(1−σjzσkz) is diagonal in the computational basis. Let B=∑j=1nσjx, let ∣s⟩=2−n/2∑z∣z⟩ be the uniform superposition, and for angles γ,β let
the expected cut value of the string obtained by measuring ∣γ,β⟩ in the computational basis. Then there exist angles γ∈[0,2π] and β∈[0,π] such that
F1(γ,β)≥0.6924⋅z∈{0,1}nmaxC(z).
Equivalently, M1=maxγ,βF1(γ,β) is at least 0.6924 times the size of the maximum cut. The constant 0.6924 is the numerically computed (rounded-down) worst-case ratio, attained in the limit of graphs without triangles; the source's derivation is partly numerical.
Formalization Note The graph is a SimpleGraph (Fin n) with Connected and IsRegularOfDegree 3. The approximation ratio is measured, as in the source's argument (34), through the expectation F1 at the best angles; the source's informal remark that order nlogn repetitions find a string with cut value near M1 is not part of the statement.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the main result of Farhi, Goldstone and Gutmann on the level-one Quantum Approximate Optimization Algorithm (QAOA) for bounded-occurrence Max E3LIN2.
An instance of Max E3LIN2 on n bits is a set of m linear equations over F2, each of the form xa+xb+xc=d(mod2) with three distinct variables a,b,c and right-hand side d∈{0,1}, at most one equation per triple {a,b,c}. Let C(z) be the number of equations satisfied by z∈{0,1}n, viewed as the diagonal operator C∣z⟩=C(z)∣z⟩; let B=X1+⋯+Xn and ∣s⟩=2−n/2∑z∣z⟩. For real γ,β put
∣γ,β⟩=e−iβBe−iγC∣s⟩,
so that F(γ,β)=⟨γ,β∣C∣γ,β⟩=∑z∣⟨z∣γ,β⟩∣2C(z) is the expected number of equations satisfied by the string obtained by measuring ∣γ,β⟩ in the computational basis.
Theorem. There is D0 such that for every integer D≥D0, every n, and every such instance in which each bit occurs in at most D+1 equations, there exists γ with ∣γ∣≤10D1/21 such that
F(γ,4π)≥(21+101D1/2lnD1)m.
A uniformly random string satisfies m/2 equations on average; the theorem shows that one round of QAOA beats random guessing by a term of order 1/(D1/2lnD), uniformly over all bounded-occurrence instances, and in particular that every such instance has an assignment satisfying that many equations.
Formalization Note The source's qualifier "for large D" is rendered as an existential threshold D0 quantified before D, n and the instance. The objective is the unshifted count of satisfied equations; the paper's shifted operator (6) differs by the constant m/2, which only contributes a global phase to e−iγC.
Target
§II main result (unnumbered), eqs. (43)–(45)
This is the main result of Farhi, Goldstone and Gutmann on the level-one Quantum Approximate Optimization Algorithm (QAOA) for bounded-occurrence Max E3LIN2.
An instance of Max E3LIN2 on n bits is a set of m linear equations over F2, each of the form xa+xb+xc=d(mod2) with three distinct variables a,b,c and right-hand side d∈{0,1}, at most one equation per triple {a,b,c}. Let C(z) be the number of equations satisfied by z∈{0,1}n, viewed as the diagonal operator C∣z⟩=C(z)∣z⟩; let B=X1+⋯+Xn and ∣s⟩=2−n/2∑z∣z⟩. For real γ,β put
∣γ,β⟩=e−iβBe−iγC∣s⟩,
so that F(γ,β)=⟨γ,β∣C∣γ,β⟩=∑z∣⟨z∣γ,β⟩∣2C(z) is the expected number of equations satisfied by the string obtained by measuring ∣γ,β⟩ in the computational basis.
Theorem. There is D0 such that for every integer D≥D0, every n, and every such instance in which each bit occurs in at most D+1 equations, there exists γ with ∣γ∣≤10D1/21 such that
F(γ,4π)≥(21+101D1/2lnD1)m.
A uniformly random string satisfies m/2 equations on average; the theorem shows that one round of QAOA beats random guessing by a term of order 1/(D1/2lnD), uniformly over all bounded-occurrence instances, and in particular that every such instance has an assignment satisfying that many equations.
Formalization Note The source's qualifier "for large D" is rendered as an existential threshold D0 quantified before D, n and the instance. The objective is the unshifted count of satisfied equations; the paper's shifted operator (6) differs by the constant m/2, which only contributes a global phase to e−iγC.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Exact Vacuum Atlas II: Certified Coordinate Transport and New Schwarzschild ChartsResearch Paper
Motivation
A metric tensor is a coordinate-free object, but every concrete exact solution of Einstein's vacuum
equations is written down in coordinates, and the same spacetime appears in the literature in many charts:
Schwarzschild in standard, Eddington–Finkelstein, Painlevé–Gullstrand and isotropic coordinates, Kerr in
Boyer–Lindquist and ingoing form, and so on. Checking that a chart is a vacuum solution means computing the
Ricci tensor of its metric components; checking that two charts describe the same solution means exhibiting
a coordinate change and verifying that the metric components pull back. Release I of the Exact Vacuum
Atlas (a separate, earlier mission) certified seven such charts (Minkowski ×2, Schwarzschild ×3, Kerr ×2)
together with four coordinate relations.
Release II adds the missing method: a proof that the coordinate Ricci tensor used throughout the Atlas
transforms as a tensor under any smooth coordinate change, so that a vacuum certificate can be
transported along a coordinate relation instead of being recomputed. It then uses this to certify new
Schwarzschild charts (Painlevé–Gullstrand, both signs; isotropic, both radial branches, in spherical and
Cartesian form) and to give the Painlevé–Gullstrand certificate two distinct proof routes with an audited separation of their specified dependencies; they still share definitions, data and Mathlib.
Setting
All objects are coordinate-level data on open subsets of Rn (n=4 in every application):
a metric is a matrix gij(x) of real functions, a candidate inverse g^ij(x) is another such
matrix, and the coordinate Ricci tensor Ric(g,g^)ij is defined by the usual Christoffel
formulas from partial derivatives of slices (definition bundle Atlas_Core_Basic of release I). A
vacuum certificate for (g,g^) on an open set U records eight obligations: U open and
nonempty, g symmetric, g^g=I on U, g and g^ of class C∞ on U, an explicit
Lorentz frame E with ETgE=η (signature (−,+,+,+)), and all sixteen Ricci
components zero on U. A coordinate relation records a smooth bijection Φ:U→V with inverse
Ψ, a Jacobian matrix J whose entries are genuine derivatives, and the pull-back identity
JT(h∘Φ)J=g on U. Mathlib provides real analysis, matrices and multivariable
calculus. In the pinned Mathlib revision 0df444a360eaa60ab8c11dca51a86af692955474, the project did not find the complete indefinite-metric connection and Ricci definitions required by this development. The registered B3 coordinate definitions supplement that fixed version; this is not a claim about all current or future versions of Mathlib.
Formalization targets
Goal (ExactVacuumAtlas.Release02.ricci_law)
For any dimension n, open sets U,V, a smooth map Φ:U→V with a genuine Jacobian J and a
right inverse K (JK=I on U), and regular metric data (h,h^) on V (symmetric, genuinely
invertible, C∞; no curvature condition), if g=JT(h∘Φ)J and
g^=K(h^∘Φ)KT on U then
The proof goes through the Christoffel transformation with its second-derivative term K∂iJ
(the Christoffel symbols are not a tensor), the tensoriality of the matrix curvature Fcd=∂cΓd−∂dΓc+[Γc,Γd] (the K∂J and ∂K terms
cancel), and the contraction to the Ricci tensor. The final Ricci theorem does not assume the Ricci transformation law. The intermediate curvature lemma has an explicit connection-transformation premise, which the proved Christoffel transformation discharges in the metric application. The registered Ricci tensor is not redefined.
Milestones (each a theorem item; the Goal and the definitions are never milestones)
certificate_transport — a vacuum certificate on V, a coordinate relation U→V, the explicit conditions that U is open and nonempty, a right inverse of the genuine Jacobian on U, and any genuine left inverse g^ of g yield a vacuum certificate on U (all eight obligations, 4D).
pg_route_direct — Painlevé–Gullstrand metric −dT2+(dr+ε2M/rdT)2+r2dΩ2,
M≥0, ε2=1, certified on {r>0,0<θ<π} (regular-coordinate points with r=2M included when M>0; no global event-horizon statement)
by direct computation (release-II sprint 01).
pg_route_transport — the same statement, proved a second time by transporting the
Eddington–Finkelstein certificate of release I along the PG↔EF relation. The independence of this
route is a constant-level dependency-closure audit (no PG table, PG certificate or PG root is reached),
not a conjunction of two proofs.
control_direct, control_transport, control_witness — a non-vacuum control family: the
cylinder metric pulled back by β↦β+λsinα (non-affine for λ=0, and the identity for λ=0); the sixteen Ricci components
(R22=1+λ2c2s2, R23=R32=λcs2, R33=s2, rest 0;
c=cosα, s=sinα) are proved twice (tables, and the transformation law from the
release-I cylinder values), with the nonzero witness R23(0,1,π/4,0)=2/4 at λ=1.
isotropic_branches — the two radial relations r=ρ(1+2ρM)2 between the isotropic chart
and the standard chart: outer branch ρ>M/2 (M≥0) and inner branch 0<ρ<M/2
(M>0), both onto r>2M.
isotropic_main — isotropic Schwarzschild −A2dt2+B4(dρ2+ρ2dΩ2),
B=1+2ρM, A=(1−2ρM)/B, certified for every M≥0 on {ρ>0,ρ=M/2,0<θ<π} (both branches transported from the standard certificate and glued; M=0 is
Minkowski).
isotropic_sph_cart_relation — the spherical ↔ Cartesian isotropic chart relation on the slit chart
(−π<φ<π on the spherical side and rxy+x>0 on the Cartesian side), with ρ>0 and ρ=M/2 on both sides and 0<θ<π on the spherical side, for every real M. This is a relation of the specified coordinate data; the vacuum certificates below are restricted to M≥0.
isotropic_cartesian — the Cartesian isotropic certificate −A(ρ)2dt2+B(ρ)4(dx2+dy2+dz2)
for every M≥0 on the natural domain {ρ>0,ρ=M/2} (no axis or slit cut: the slit
certificate is transported along the reflection x↦−x and the relabelling (x,y,z)↦(y,z,x)
and the three domains are glued).
pg_main, pg_coverage, pg_std_restricted — the sprint-01 PG roots: both signs; M=0 and the
regular data at r=2M for M>0; the PG↔EF relation on the whole domain and the composite standard → EF → PG relation on r=2M only.
Significance
The transformation law is the reusable link between a full certificate in one coordinate representation and a certificate in another. Transport also discharges the required source-domain, inverse-matrix, regularity and Lorentz-signature obligations; a bare table of zero Ricci components alone is not treated as a full certificate.
Difficulty
The law is a long but elementary computation (second derivatives of the Jacobian, Cramer's rule for the
smoothness of the inverse Jacobian, symmetry of mixed partials, index bookkeeping over Fin n); the
isotropic charts need genuine inverse functions with square roots, arccos and a half-angle arctan,
with smoothness and bijectivity on explicit open domains. Nothing is stated at the manifold level.
Formalization scope
Coordinate-level statements on open subsets of R4 (the law itself on Rn). Not
claimed: an identification with a Mathlib manifold Ricci tensor in the pinned development; any global, event-horizon or maximal-extension theorem; PG or isotropic vacuum certificates for negative mass; certification of ρ=M/2 (for M>0 this is the excluded degenerate isotropic sphere, while for M=0 it is the excluded origin); that the union of the two isotropic branches is a single bijection; that the inner
branch is the interior r<2M.
Selected references
Müller, T., Grave, F.: Catalogue of Spacetimes, arXiv:0904.4184v3 (§2.2.3 isotropic, PG);
Martel, K., Poisson, E.: Regular coordinate systems for Schwarzschild and other spherical spacetimes,
arXiv:gr-qc/0001069; Carroll, S.: Lecture Notes on General Relativity, arXiv:gr-qc/9712019 (§3,
transformation of the connection and curvature); release I of the Exact Vacuum Atlas (platform mission on this site).
Source and licence
New material of release II is released under Apache-2.0; the Kerr, release-I and third-party sources keep their recorded origins and licences. A public Git repository is not yet available: every node's source field cites the local release-candidate commit 11fb317259353b71a41d6daed466c495cffd7db4 with file, line range and SHA-256 of the staged file. Environment: Lean v4.33.1, Mathlib 0df444a360eaa60ab8c11dca51a86af692955474. Local audits: no sorry, no native_decide; axiom closure ⊆ {propext, Classical.choice, Quot.sound}.
Explicit Littlewood bounds under the 7/8 zero-free half-planeResearch Paper
Motivation
The value L(1,χ) of a Dirichlet L-function at s=1 controls class numbers of quadratic fields, the least quadratic non-residue, and the distribution of primes in arithmetic progressions. For a real character χ modulo q the size of L(1,χ) is governed by the zeros of L(s,χ) near s=1: a real zero close to 1 (a Siegel zero) would make L(1,χ) abnormally small, and no unconditional argument rules this out effectively.
Littlewood's bound (1928) states that under the generalized Riemann hypothesis for L(s,χ),
L(1,χ)≫loglogq1,
which is optimal up to the constant. Explicit constants under GRH were given by Lamzouri, Li and Soundararajan (2015).
The mission The Quasi-Riemann Hypothesis: A Zero-Free Half-Plane Re(s) > 7/8 formalizes a preprint (OpenAI, 30 September 2026) claiming that every Dirichlet L-function is zero-free in ℜs>7/8. That claim is not yet verified. This mission asks what a zero-free half-plane would give: an explicit Littlewood-type lower bound for L(1,χ) under the hypothesis ℜs>7/8⇒L(s,χ)=0 for the single character concerned.
Timeline.
1928. Littlewood proves L(1,χ)≫1/loglogq under GRH.
1959. Rademacher gives explicit Phragmén–Lindelöf convexity bounds for Dirichlet L-functions.
2003. Granville and Soundararajan describe the distribution of L(1,χd).
2004. Ji and Lu give an explicit lower bound L(1,χ)>1/(7.7388logq) when no real zero lies in a narrow interval below 1.
2010. Dusart publishes explicit estimates for sums over primes, including ∑p≤x1/p.
2015. Lamzouri, Li and Soundararajan give explicit Littlewood constants under GRH.
2026. The 7/8 preprint appears, and Daugherty, Ryan and Ward prove explicit Littlewood bounds under a zero-free half-plane ℜs>a for one character.
Setting
A Dirichlet characterχ modulo q≥1 is a multiplicative function Z/qZ→C that vanishes off the units. It is primitive if its conductor equals q, and real if all its values are real (they then lie in {−1,0,1}). Its L-function is
L(s,χ)=n≥1∑χ(n)n−s(ℜs>1),
continued meromorphically to C, with a pole only for the trivial character. For a primitive character modulo q≥3 the continuation is entire and L(1,χ)=0.
The hypothesis used throughout is
H7/8(χ):L(s,χ)=0for all s with ℜs>7/8.
It concerns one character, not a family, and the half-plane is open. For primitive χ, GRH for L(s,χ) implies H7/8(χ).
Formalization targets
Goal: a Littlewood lower bound under H7/8
There are constants c>0 and q0 such that for every primitive real character χ modulo q≥q0 satisfying H7/8(χ),
L(1,χ)≥loglogqc.
Milestone: explicit constant
For q≥10100 the constant c=0.0617 is admissible:
H7/8(χ)⟹L(1,χ)≥loglogq0.0617.
Milestone: explicit two-sided bound
For the same χ and q≥10100,
∣logL(1,χ)∣≤logloglogq+3.2914.
Milestone: Dusart's bound for ∑1/p
With B=γ+∑p(log(1−1/p)+1/p) (Mertens' constant), for every real x≥10372,
p≤x∑p1−loglogx−B≤10log2x1+15log3x4.
Milestone: Rademacher's convexity bound
For every primitive character χ modulo q≥3 and every s with −21≤ℜs≤23,
∣L(s,χ)∣≤ζ(23)(2πq∣1+s∣)(3/2−ℜs)/2.
Significance
The result. A zero-free half-plane at a fixed distance from ℜs=1 makes the Littlewood bound effective with explicit constants. Through the class number formula it gives explicit lower bounds for class numbers of quadratic fields of large discriminant, and it excludes Siegel zeros for the character concerned. The hypothesis is weaker than GRH, and, if the 7/8 preprint is correct, it holds for every primitive character. In that case the goal and the explicit milestones become unconditional explicit theorems.
Formalizing it. The explicit bounds are proved in the preprint by Daugherty, Ryan and Ward (doi:10.5281/zenodo.23400116, Theorem 2), with constants certified in interval arithmetic. None of the statements here has a machine-checked proof. A formalization would give an independently checked conditional result that composes directly with a Lean proof of the zero-free half-plane. It would also add explicit analytic number theory to Mathlib: the convexity bound, explicit prime-sum estimates, and logarithms of L-functions on zero-free regions.
Difficulty
The classical proof of Littlewood's bound under GRH uses the zeros' location on the critical line to bound logL(s,χ) just to the left of s=1. Under the weaker hypothesis H7/8 only a fixed strip next to ℜs=1 is zero-free, and logL grows like logq there. The control must be strong enough that an exponentially smoothed prime sum of length (logq)ν dominates, with every constant explicit and uniform in q. The prime sums in turn need explicit, not asymptotic, estimates for ∑p≤x1/p.
Formalization scope
The L-function is Mathlib's DirichletCharacter.LFunction, primitivity is DirichletCharacter.IsPrimitive, and "real" is stated as Imχ(a)=0 for every a∈Z/qZ. The value L(1,χ) is compared through its real part, and the two-sided milestone uses the principal complex logarithm. Mertens' constant is written out as γ+∑p(log(1−1/p)+1/p) with Mathlib's tsum over primes. The hypothesis H7/8(χ) is a hypothesis on the single character in each statement, never a family-wide assumption. It is satisfiable, for example under GRH, so the conditional statements are not vacuous.
A complete development needs:
holomorphic logarithms of L(s,χ) on zero-free half-planes;
Mellin inversion for e−y;
an explicit Phragmén–Lindelöf convexity bound;
explicit estimates for sums over primes;
rational certificates for the numerical constants.
The convexity bound and the prime-sum estimates are reusable well beyond this mission. Contributions toward any of these are welcome.
Selected references
J. E. Littlewood, On the class-number of the corpus P(−k), Proc. London Math. Soc. (2) 27 (1928), 358–372.
H. Rademacher, On the Phragmén–Lindelöf theorem and some applications, Math. Z. 72 (1959/60), 192–204.
A. Granville and K. Soundararajan, The distribution of values of L(1,χd), Geom. Funct. Anal. 13 (2003), 992–1028.
C.-G. Ji and H.-W. Lu, Lower bound of real primitive L-function at s=1, Acta Arith. 111 (2004), 405–409. https://doi.org/10.4064/aa111-4-2
P. Dusart, Estimates of some functions over primes without R.H., preprint (2010), Theorem 6.10. https://arxiv.org/abs/1002.0442
Y. Lamzouri, X. Li and K. Soundararajan, Conditional bounds for the least quadratic non-residue and related problems, Math. Comp. 84 (2015), 2391–2412; corrigendum, Math. Comp. 86 (2017), 2551–2554. https://arxiv.org/abs/1309.3595
B. W. Daugherty, S. Ryan and G. Ward, Certified harmonic-measure barriers and explicit Littlewood bounds from zero-free regions, preprint (2026). https://doi.org/10.5281/zenodo.23400116
Infinite-Dimensional Fisher Markets and Tractable Fair Division 1: The Eisenberg–Gale Programs Attain Their Optima, One at a Pure Allocation, and Optimal Pairs Are Exactly the Market EquilibriaResearch Paper
Why continuum Fisher markets matter
A Fisher market divides a supply of goods among buyers with fixed budgets. In a finite market, each good is a separate coordinate. Fair division can instead involve a continuum of items, such as locations along an interval or points in a region, where a buyer's valuation varies measurably from point to point. Finite dimensional existence and duality arguments do not automatically apply: the allocation is now a function, and the feasible set need not be compact in its natural function space. Gao and Kroer formulate a market and two Eisenberg–Gale programs for this setting, then prove that their optima exist and characterize equilibrium Gao and Kroer, §3.
The result also connects market equilibrium to fair division. A pure allocation assigns measurable regions of the item space to buyers, allowing overlap only on null sets. Existence of a pure optimizer means that a market outcome can be represented by such a division, rather than by fractional shares at each item. The same paper derives Pareto optimality, budget weighted envy freeness, and proportionality for equilibrium allocations Gao and Kroer, Theorems 1 and 3.
Market, allocations, and programs
The item spaceΘ is a compact subset of Rd with restricted Lebesgue measure μ. There are n buyers. Buyer i has a budget Bi>0 and a nonnegative integrable valuation densityvi with ∫Θvidμ>0. The utility of a bounded nonnegative bundlexi is ⟨vi,xi⟩=∫Θvixidμ. An allocationx=(xi) is feasible when ∑ixi≤1 almost everywhere. It is pure when each xi equals the indicator of a measurable set Θi⊆Θ, up to almost everywhere equality, and these sets are pairwise disjoint up to null sets. Leftover items are allowed.
A nonnegative integrable price densityp defines a buyer's affordable bundles by ⟨p,xi⟩≤Bi. A market equilibrium(x,p) is a feasible allocation and price at which every buyer maximizes utility among affordable bundles and ⟨p,1−∑ixi⟩=0. Thus unallocated supply may remain only where it has zero price. The paper's primal Eisenberg–Gale program, PEG, maximizes weighted log utility over feasible allocations. Its dual program, DEG, minimizes total price minus weighted log multipliers subject to p≥βivi almost everywhere Gao and Kroer, pp. 6–8.
Formalization targets
The goal is the three part Theorem 1. In the notation above, it asserts attainment of the primal objective at a pure allocation, attainment of the dual objective with a unique multiplier vector β∗ and price p∗=maxiβi∗vi almost everywhere, and the equivalence
(x,p) is a market equilibrium⟺x optimizes PEGand(p,β∗) optimizes DEG.
The milestone list follows the results the paper uses to reach that goal. Lemma A.1 gives a convex, compact range for utility matrices and, under atomlessness, identifies mixed and partition based ranges. Lemma 1 specializes this to the market's feasible utility set U, proving that U is compact and convex and equals the pure utility set U′. Lemma 2 establishes attainment and uniqueness in the finite dimensional reduction of the dual problem. Lemma 3 gives weak duality with the paper's constant C=∑iBi−∑iBilogBi and its three optimality conditions. Theorem 2 expands the equivalence between optimality and equilibrium, including budget exhaustion and the utility formula ⟨vi,xi⟩=Bi/βi. These are the paper's numbered results on pp. 8–10 and a1 Gao and Kroer, §3 and Appendix A.1.
The proposal also states Theorem 3, Lemma 4, and Corollaries 1–3 as companion results. They record the resulting fairness properties, normalized equilibrium bounds, winning sets, a construction of dual prices from a pure optimum, and a test for a pure equilibrium Gao and Kroer, pp. 10–11.
What the result provides
Theorem 1 shows that the two programs give actual allocations and prices in the continuum market, not merely limiting objective values. The pure optimizer provides measurable regions for buyers. The dual multipliers give a unique utility price for each buyer, while the price density is determined almost everywhere. Theorem 2 makes these program outputs economically interpretable: each buyer exhausts its budget at equilibrium. Theorem 3 then supplies efficiency and fairness guarantees for those allocations Gao and Kroer, Theorems 1–3.
These results are proved in the cited paper. This mission asks for machine checked Lean proofs of those mathematical statements. Its definitions of allocations, demand, equilibrium, the two programs, and feasible utilities could also support formalization of the paper's later geometric and quasilinear results. The draft declarations compile as open statements; compilation does not establish the theorems.
Why the proof is difficult
The feasible allocations are bounded in an infinite dimensional function space, but that does not make the set compact in the topology used for the optimization problem. The paper instead needs compactness of the finite dimensional set of achievable utility vectors. The range result in Lemma A.1 is therefore central, and its atomless conclusion must be strong enough to replace fractional allocations by measurable partitions Gao and Kroer, Lemma 1 and Appendix A.1.
Standard constraint qualification arguments also do not supply the required duality theorem here: the positive cone in L1(Θ) has empty interior. The proposal consequently asks for the paper's specific weak duality inequality, attainment, and optimality characterization rather than assuming a general finite dimensional duality theorem applies Gao and Kroer, Remark 1.
Formalization scope
Lean uses real valued measurable functions on the ambient Euclidean space with measure μ=volume∣Θ. It identifies prices and allocations up to μ almost everywhere equality, as the paper identifies L1 and L∞ equivalence classes. Bundles must belong to L∞(μ) and prices and valuations must be integrable; these conditions prevent a nonintegrable product from receiving Lean's default integral value of zero. The number of buyers may be zero, consistent with the finite index formulation, while the standing positivity hypotheses apply to every buyer present.
The real logarithm in Lean returns zero at zero. The optimization predicates instead require positive utility or positive dual multipliers and compare only with other positive points, matching the paper's log0=−∞ objective convention. The maximization over buyers is the finite supremum supiβivi. Price and allocation uniqueness is stated almost everywhere; multiplier uniqueness is exact. Lemma A.1 uses the paper's divisible measure condition for atomlessness and fixes its unnamed almost everywhere partition convention by requiring ∑jxj=1 everywhere. Corollary 3 explicitly requires each denominator vi(Θi) to be positive. Lemma 4 alone assumes the normalizations vi(Θ)=1 and ∑iBi=1, which the paper recalls before its statement.
The goal remains the full three part theorem. It does not assume the range theorem, duality equality, or optimality conditions it is meant to establish. Contributions to the measure range theorem, utility set compactness, the dual reduction, and the equilibrium characterization are all within scope.
Selected references
Yuan Gao and Christian Kroer, Infinite-Dimensional Fisher Markets and Tractable Fair Division, Operations Research, 2023; formalization follows arXiv:2010.03025v5, 2021, §§2–3 and Appendix A.1.
In a two-player one-round nonlocal game, a verifier samples a pair of questions, sends one to each of two players who cannot communicate, and accepts or rejects the pair of answers. The players may share an arbitrary quantum state and measure it; the entangled value of the game is the supremum of their acceptance probability over all such strategies. Nonlocal games are the operational form of Bell's theorem, the model behind device-independent cryptography and self-testing, and the engine of the complexity class MIP∗ of languages decidable by a polynomial-time verifier interacting with entangled provers (Cleve, Høyer, Toner, Watrous, 2004, arXiv:quant-ph/0404076).
With classical provers, multiprover interactive proofs decide exactly NEXP (Babai, Fortnow, Lund, 1991, doi:10.1007/BF01200056). For entangled provers the lower bounds grew in steps: NEXP⊆MIP∗ (Ito, Vidick, 2012, arXiv:1207.0550), NEEXP⊆MIP∗ (Natarajan, Wright, 2019, arXiv:1904.05870), and finally MIP∗=RE (Ji, Natarajan, Vidick, Wright, Yuen, 2020, arXiv:2001.04383): every recursively enumerable language, the halting problem included, has a two-prover one-round interactive proof with entangled provers, and the entangled value of a game cannot be approximated by any algorithm. Through the equivalences of Fritz (2012, arXiv:1008.1168), Junge, Navascués, Palazuelos, Pérez-García, Scholz, Werner (2011, arXiv:1008.1142) and Ozawa (2013, arXiv:1212.1700), the theorem gives a negative answer to Tsirelson's problem and to Connes' embedding problem for von Neumann algebras.
Synchronous games, their value, and game descriptions
Everything below is defined from scratch; the formal development uses exactly these objects.
A synchronous gameG=(X,A,μ,D) has a finite question alphabet X and a finite answer alphabet A, shared by both players, a probability distribution μ on X×X, and a decision predicate D(x,y,a,b)∈{0,1} which, on equal questions x=y, rejects every pair of unequal answers a=b.
A synchronous strategy of dimension d≥1 assigns to each question x a projective measurement(Max)a∈A on Cd: positive semidefinite matrices summing to the identity, each idempotent. Both players use the same measurements, and probabilities are taken in the normalized trace τ(M)=Tr(M)/d. The value of the strategy is
the acceptance probability when the players measure a maximally entangled state of dimension d. The synchronous valueωs(G) is the supremum of ω(G,M) over all synchronous strategies of all dimensions. A synchronous strategy is a tensor-product strategy, so ωs(G)≤ω∗(G), the entangled value.
A game descriptiong is a finite object from which a synchronous game is read off: natural numbers nX,nA fixing X={0,…,nX} and A={0,…,nA}, a finite list of weighted question pairs (x,y,w) and a finite list of accepted tuples (x,y,a,b). The game Gg has μ(x,y) proportional to the total weight listed for (x,y) (the point mass at (0,0) if the total weight is zero), and D accepts exactly the listed tuples, except that unequal answers to equal questions are rejected. Descriptions are coded as natural numbers, so a map from machines to descriptions can be computable.
Turing machines are Gödel numbers c∈C of partial recursive functions, an equivalent model of computation; "c halts on the empty input" means that c applied to 0 is defined.
Formalization targets
Goal: halting reduces to the synchronous game value
There is a computable map g from machines to game descriptions such that for every machine c,
c halts on the empty input⟹ωs(Gg(c))=1,c does not halt⟹ωs(Gg(c))≤21.
This is Theorem 12.2 of arXiv:2001.04383 in synchronous form, with the running time of g relaxed from polynomial to computable. It leaves the running time and the choice of value unfixed, and it is the weakest statement that already makes the game value uncomputable: no algorithm decides whether a game has synchronous value 1 or at most 21.
Stronger: polynomial time, and the entangled value
The paper's statement has g computable in polynomial time, and both the synchronous and the entangled value satisfy the two clauses. With polynomial time the goal gives RE⊆MIP∗ for the class MIP1,1/2∗(2,1) of two-prover one-round proofs with completeness 1 and soundness 21, and with the elementary inclusion MIP∗⊆RE this is MIP∗=RE. These statements need a model of polynomial time and a definition of tensor-product strategies, and will be added as milestones once those definitions are published here.
Significance
The result. Approximating ω∗(G) to within a constant is as hard as the halting problem. A hierarchy of semidefinite programs converges from above to the commuting-operator value ωco(G), so the two values cannot coincide for every game: a negative answer to Tsirelson's problem and, by the equivalences cited above, to Connes' embedding problem, open since 1976. On the complexity side, MIP∗=RE is the exact characterization of the power of entangled provers.
Formalizing it. The theorem is proved and its proof is machine-checked: HaltingGameValue.halting_reduces_to_gameValue in the Lean 4 development vidick/MIPRE-formalization proves exactly the goal above over Mathlib, with propext, Classical.choice and Quot.sound as its only axioms. The development is about 1,200 modules and 410,000 lines, including vendored components and a separate library for the low individual degree test; its blueprint records every statement, the dependency graph and the correspondence with the paper. This mission makes the result a fixed, auditable target: the definitional layer above is written over Mathlib alone, so the goal can be checked from first principles, and the components of the proof whose developments are self-contained are published as milestones with their proofs, to be imported, reused and re-proved. The first milestone, the recursive compression lemma of Marks, Nezhadi and Yuen (Lemma 5.1 of their manuscript; blueprint node lem:recursive-compression), comes with a complete proof over a dependency tree of 22 definition bundles and 60 theorems: a cost model of computation, an efficient universal machine, the s-m-n and Kleene recursion theorems, succinct descriptions.
Difficulty
The obvious approach fails at once: a verifier runs in time polynomial in its input, while a machine may run for arbitrarily long before halting, so no fixed game can check halting by simulation. What makes RE reachable is gap-preserving compression: a polynomial-time transformation of verifiers such that the compressed verifier, at index n, has value 1 when the original verifier at index 2n does, and value at most 21 when the original does. The compressed game is exponentially cheaper than the game it certifies, and a fixed-point argument through Kleene's recursion theorem, in the abstract form of the recursive compression lemma, turns compression into the halting reduction. Compression rests on three components, each with a central ingredient that is a theorem in its own right: question reduction by introspection, in which the players sample their own questions and a Pauli basis self-test built on the quantum low individual degree test certifies that they did; answer reduction, in which the players prove through a probabilistically checkable proof that their answers would have been accepted; and gap amplification by parallel repetition. In each component soundness must hold against strategies of unbounded dimension, where no finite enumeration or compactness argument is available, and the quantitative losses must compose so that the threshold 21 is preserved exactly.
Formalization scope
The goal is stated with the synchronous value, projective measurements on Cd with d≥1, and the normalized trace in place of a state vector; the real part of the trace is taken in the strategy value, and the synchronous value is the supremum, in R, over all strategies of all dimensions (the values lie in [0,1]). Game descriptions are interpreted with the fallback distribution above, so that the interpretation is total. Machines are Mathlib's Nat.Partrec.Code and computability is Mathlib's Computable; polynomial time is not fixed by the goal.
No trivializing formalization is available: the game depends on c only through g, and the two clauses demand values 1 and at most 21 on complementary sets of machines, so no map that ignores its argument, or produces only descriptions of zero total weight, satisfies the statement.
A complete development needs four layers: (i) a model of computation with costs, with polynomial-time maps, an efficient universal machine, the s-m-n and Kleene recursion theorems and succinct descriptions, which is the recursive compression milestone's dependency tree and is reusable in any undecidability argument by compression; (ii) normal form verifiers, conditionally linear samplers, the Pauli basis test and the quantum low individual degree test; (iii) the three transformations, with answer reduction over a PCP decider built from a succinct Cook–Levin theorem and direct parallel repetition in value form, and their soundness; (iv) the halting reduction from compression and the passage from the tensor-product to the synchronous value. Statements and proofs of these components over the shared definitional layer are welcome, as are alternative proofs of the goal from the same definitions, the polynomial-time and entangled-value strengthenings, and the inclusion MIP∗⊆RE.
Selected references
Z. Ji, A. Natarajan, T. Vidick, J. Wright, H. Yuen, MIP* = RE, 2020 (revised 2022). arXiv:2001.04383
Z. Ji, A. Natarajan, T. Vidick, J. Wright, H. Yuen, Quantum soundness of the classical low individual degree test, 2020. arXiv:2009.12982
A. Marks, S. S. Nezhadi, H. Yuen, The recursive compression method for proving undecidability results, manuscript.
J. Lin, Tracially embeddable strategies: lifting MIP* tricks to MIP^co, 2023. arXiv:2304.01940
A. Natarajan, J. Wright, NEEXP ⊆ MIP*, FOCS 2019. arXiv:1904.05870
T. Ito, T. Vidick, A multi-prover interactive proof for NEXP sound against entangled provers, FOCS 2012. arXiv:1207.0550
R. Cleve, P. Høyer, B. Toner, J. Watrous, Consequences and limits of nonlocal strategies, CCC 2004. arXiv:quant-ph/0404076
L. Babai, L. Fortnow, C. Lund, Non-deterministic exponential time has two-prover interactive protocols, Computational Complexity 1 (1991). doi:10.1007/BF01200056
T. Fritz, Tsirelson's problem and Kirchberg's conjecture, Reviews in Mathematical Physics 24 (2012). arXiv:1008.1168
M. Junge, M. Navascués, C. Palazuelos, D. Pérez-García, V. B. Scholz, R. F. Werner, Connes' embedding problem and Tsirelson's problem, Journal of Mathematical Physics 52 (2011). arXiv:1008.1142
N. Ozawa, About the Connes embedding conjecture: algebraic approaches, Japanese Journal of Mathematics 8 (2013). arXiv:1212.1700
Quantifying the Impact of Impact Investing II: Moments of Impact-Ranked Omitted-Factor Returns under Cross-Sectionally Correlated Gaussian Impact FactorsResearch Paper
Why impact-ranked portfolios can earn excess returns
Impact investing selects securities by a non-financial score, an ESG rating, a carbon intensity, a measure of social benefit, and asks whether such a selection earns an excess return. A. W. Lo and R. Zhang (SSRN 3944367; published in Management Science, DOI 10.1287/mnsc.2022.01168) model the score as an impact factorX and study the returns of securities ranked by X with the tools of induced order statistics (concomitants), introduced by Bhattacharya (1974) and David (1973).
Section 4.3 of the paper gives an equilibrium reading of the apparent excess return. In a K-factor asset-pricing model with no mispricing, an investor who accounts only for the first factor sees the contribution λi of the omitted factors 2,…,K to security i's return as alpha. If the impact factor is correlated with these omitted factors, ranking by impact selects omitted-factor risk, and the selected portfolio appears to earn an excess return. Empirical studies of sin stocks (Blitz and Fabozzi, 2017) and ESG scores (Madhavan, Sobczyk and Ang, 2021) report exactly this effect. Proposition 5 quantifies it in closed form.
Setting
There are N securities. For security i, Xi is its impact factor and λi the total net contribution of the omitted factors to its return. Write X=(X1,…,XN) and λ=(λ1,…,λN), random vectors on a probability space (Ω,F,P).
Order statistics. Sorting the entries of X increasingly gives X1:N≤⋯≤XN:N, the order statistics of X. If π is the sorting permutation, Xi:N=Xπ(i), and the induced order statisticλ[i:N]=λπ(i) is the omitted-factor return of the security with the i-th smallest impact factor. The order is induced by X, never by λ (display (6), p. 11).
Assumption (A2) (p. 19). The vector (X,λ) is Gaussian with exchangeable first and second moments: E[Xi]=μx, E[λi]=μλ, Var(Xi)=σx2, Var(λi)=σλ2, Corr(Xi,λi)=ρx,λ, and for i=j, Corr(Xi,Xj)=ρx, Corr(λi,λj)=ρλ, Corr(Xi,λj)=ρ~x,λ. The paper normalises μx=0 and σx=1 and keeps a free premium μλ. The adjusted correlation is
ρadj=1−ρxρx,λ−ρ~x,λ.(24)
Formalization targets
Goal: Proposition 5 (pp. 19–20)
Under (A2), for every rank i and every pair of ranks i=j,
The goal states (27) with the factor σλ2 on the last term. The paper prints (ρλ−ρxρadj2) without it. That is a slip: replacing λ by cλ with c>0 multiplies the left side by c2 and leaves every correlation unchanged, so the printed formula fails whenever σλ=1. With a=ρadjσλ, the correct value is ρλσλ2+a2(Cov(Xi:N,Xj:N)−ρx), which is the goal's right side.
Milestones
(A.42)–(A.43), p. 68: with P=aI+bL, L=11T/N, a=ρadjσλ and b=(1+(N−1)ρxρx,λ+(N−1)ρ~x,λ−ρadj)σλ, the residual λ−PX is independent of X.
(A.44) = (25), p. 68: the mean formula.
(26), p. 20: the variance formula.
Significance
The result. Proposition 5 shows that the apparent alpha of the security ranked i-th by impact is μλ+ρadjσλE[Xi:N]. A selection rule that looks unrelated to return characteristics still produces nonzero excess returns when it is correlated with omitted priced factors, and the size of the effect is governed by the single number ρadj. The authors use this to argue that impact estimates are unreliable until all known factors are accounted for, and that a persistent impact premium may signal a new factor (an "ESG factor" or a "carbon factor"). The variance and covariance formulas give the risk of any portfolio of impact-ranked securities, through the moments of Gaussian order statistics.
Formalizing it. The paper proves (25) in full and states that (26)–(27) "can be proven similarly"; the printed (27) is off by the factor σλ2. A machine-checked proof settles the corrected constants. No part of this result, and no theory of induced order statistics, is formalized in Lean or elsewhere to our knowledge. The development needs a usable library on concomitants of Gaussian order statistics, which would serve the rest of the paper (Propositions 2, 4 and 6) and the data-snooping analysis of Lo and MacKinlay (1990), which uses the same tools.
Difficulty
The mean formula looks like linearity of expectation, but λ[i:N]=λπ(i) is evaluated at a random index π(i) that depends on X, so E[λπ(i)] is not E[λk] for any fixed k. The decomposition of milestone 1 is what handles this. It requires the full joint Gaussian law of (X,λ), because uncorrelated is not independent otherwise. It also needs a correction term bXˉ through the cross-sectional average, because the cross-correlations ρx and ρ~x,λ make E[λ∣X] depend on all of X. In Lean, the sorting permutation must be shown measurable in X, and the moments of the order statistics must be shown finite.
Formalization scope
X and λ are families Fin N → Ω → ℝ on a probability space. (A2) is the predicate IsA2: joint Gaussianity of the 2N-vector (Mathlib's HasGaussianLaw on (Fin N → ℝ) × (Fin N → ℝ)), plus the moments (22)–(23) stated as covariances with σx=1.
Joint Gaussianity. (A2) as printed asks only that each pair (Xi,λi) be bivariate normal. The proof (A.40) treats (X,λ) as one Gaussian vector that "completely characterizes the joint distribution". The joint reading is the one formalized; under pairwise normality alone the results fail in general.
Normalisations are hypotheses.μx=0 and σx=1 (the paper's "without loss of generality") are fields of IsA2. μλ is free.
Added parameter hypotheses.σλ>0 (implicit in "correlation") and ρx<1 (implicit in the division in (24)). No positive-semidefiniteness condition is added: it follows from the existence of the random vector.
Ranks are 0-based (Fin N): Lean's rank i is the paper's i+1. Sorting uses Tuple.sort, which breaks ties by index; ties have probability zero and the statements hold for any tie-breaking rule. Moments are Mathlib's integral, variance and covariance. The milestones use N where the page writes n in (n−1).
Trivializing readings are ruled out. The hypotheses are satisfiable for every N: a sanity file builds a witness from a standard Gaussian vector. All variables are Gaussian or bounded by Gaussians, so no expectation is Lean's junk value 0 for a non-integrable function.
Out of scope: the multi-factor return model beyond the definition of λ; Proposition 2 and the impact-portfolio results (a separate mission); Treynor–Black weights (Proposition 7); combined portfolios (Proposition 8); asymptotic statements (Propositions 3, A.1, A.2).
Contributions welcome: measurability of Tuple.sort as a function of the data; integrability and moments of Gaussian order statistics; moments of a vector independent of X read at an X-dependent random index. Each of these is reusable well beyond this mission.
P. K. Bhattacharya, Convergence of Sample Paths of Normalized Sums of Induced Order Statistics, Annals of Statistics 2(5), 1974.
H. A. David, Concomitants of Order Statistics, Bulletin of the International Statistical Institute 45, 1973. (No DOI.)
A. W. Lo and A. C. MacKinlay, Data-Snooping Biases in Tests of Financial Asset Pricing Models, Review of Financial Studies 3(3), 1990. https://doi.org/10.1093/rfs/3.3.431
D. Blitz and F. J. Fabozzi, Sin Stocks Revisited: Resolving the Sin Stock Anomaly, Journal of Portfolio Management 44(1), 2017.
A. Madhavan, A. Sobczyk and A. Ang, Toward ESG Alpha: Analyzing ESG Exposures through a Factor Lens, Financial Analysts Journal 77(1), 2021.
Plasticity: c₀-type balls onto balls inside ℓ∞Research Paper
Motivation
A metric space is plastic if every nonexpansive bijection of it onto itself is an isometry.
The mission "Plasticity: c₀ and c₀₀" proved, among other things, that a nonexpansive bijection from the unit ball of a space between c00(Γ) and c0(Γ) onto the unit ball of a space between c00(Δ) and c0(Δ) is a signed permutation of coordinates whenever the target matches signs (card Plasticity.CUB37).
A scan of unused hypotheses showed that the first step, the normal form, never uses that the target lies in c0(Δ).
This mission records the consequence: the target may be any space between c00(Δ) and ℓ∞(Δ), because the existence of such a bijection forces it into c0(Δ).
Setting
X is a linear subspace with c00(Γ)⊆X⊆c0(Γ) and Y one with c00(Δ)⊆Y⊆ℓ∞(Δ), both real with the supremum norm, for arbitrary index sets Γ,Δ (definitions Plasticity_SeqSpace).
F is a nonexpansive bijection of the closed unit ball of X onto that of Y; nothing is assumed about its inverse.
Target
(goal)X=c00(Γ)orYrealizes all sign patterns⟹F(x)σn=αnxnfor a bijectionσand signsαn=±1.(milestone)Y⊆c0(Δ).
Significance
The milestone excludes nonexpansive bijections onto balls that the usual extreme-point argument cannot reach: for Y=c0⊕R(1,0,1,0,…) the ball has no extreme points, yet no ball between c00 and c0 is mapped onto it by a nonexpansive bijection.
The goal is the card Plasticity.CUB37 without its target hypothesis.
Formalization scope
The normal form for targets inside ℓ∞(Δ) is a separate card (Plasticity.SeqSpace.exists_signed_permutation_inward), the proof of Plasticity.CUB37.normal_form with the unused hypothesis removed; the goal then imports the Proved card Plasticity.CUB37.
Selected references
N. Leo, Plasticity of the unit ball of c and c0, J. Math. Anal. Appl. 507 (2022), arXiv:2106.06276.
B. Cascales, V. Kadets, J. Orihuela, E. J. Wingler, Plasticity of the unit ball of a strictly convex Banach space, RACSAM 110 (2016), 723–727.
Punish Underperformance with Suspension: Optimal Dynamic Contracts in the Presence of Switching Cost I: Condition 1, High Switching Cost, Not-Hiring Value Functions Meet the Optimality ConditionsResearch Paper
Motivation
Many service relationships let a firm pause an agent instead of firing them: a sales representative who brings in no customers for a while is suspended, a contractor is laid off for a season and recalled. Pausing is not free. Every restart carries a switching costK (re-training, re-establishing a territory, setting up the work environment), so a principal who suspends too readily pays for it. Cao, Sun and Tian (Management Science, 2024) study the optimal dynamic contract for this trade-off in continuous time, building on the Poisson-arrival moral-hazard model of Sun and Tian (2018). Their main result (Theorem 2) splits the parameter space into three regimes: never hire, hire and keep the agent working forever, and a control-band contract with suspension episodes of fixed length. This mission covers the first regime under the paper's Condition 1.
Setting
A principal earns a revenue R per arrival of a Poisson process. Without effort the arrival rate is μ≥0; an agent who works, at private cost b>0 per unit time, raises it to μ>μ. Write Δμ=μ−μ. The principal's cost rate while the agent works is c≥b, every start of work costs K>0, and the principal and the agent discount at rates 0<r≤ρ. Assumption 1 is RΔμ>c. The derived constants are
β=Δμb,wˉ=ρβμ,v=rμR,Vˉ(w)=rRμ−c−(ρ−r)w.
The state of a contract is the agent's promised utilityw≥0. The paper's verification theorem reduces optimality to a pair of functions: VI for the working state and V∅ for the suspended state. For a function f on R+, with f′ its left derivative, the operators are
and V(w)=Vˉ(w~) for w≥w~. Vw~ may be convex near 0; wˇ(w~) is the point up to which Vw~′′>0, and the concavificationVw~ replaces Vw~ on [0,wˇ(w~)) by its tangent line at wˇ(w~). Condition 1 is "μ≥ρ−r or R<R^" with
R^=[bc+Δμ(ρ−r−μ)(ρ−r)μ⋅ρρ−μ]β.
Under it there is a unique w^∈[0,wˉ) with Vw^(0)=v (Lemma 3). Three hats occur in the paper: w^ of Definition 1 (a payment threshold), w^ of Lemma 3 (used here), and w^ of Proposition 6 (not used here). For K<Vˉ(w^)−v, Lemma 4 gives a tangent pair(θˉK,mK): the line mKw+v touches Vw^−K at θˉK. Finally Kˉ1=inf{K∈(0,Vˉ(w^)−v]∣mK<1} (K1).
Formalization targets
Goal: Proposition 3 (p. 22)
Under Condition 1 and Kˉ1≤K≤Vˉ(w^)−v, for the pair (θˉK,mK) of (29),
VI=Vw^,V∅(w)={mKw+v,Vw^(w)−K,w≤θˉK,w>θˉK,
satisfy (20)–(22).
Milestones
Lemma EC.2: existence and uniqueness of Vw~, w~∈[0,wˉ).
Lemma EC.2(iii)–(iv): Vw~ increasing; Vw~ decreasing and Vw~′ increasing in w~.
Lemma 2(i): the sign pattern of Vw~′′ around wˇ(w~), and wˇ(w~)≤(1−r/ρ)β.
Lemma 2(ii)–(iii): Vw~ increasing and concave; comparison in w~.
Lemma 3: w^ exists and is unique; Vw^′(0)>1 when wˇ(w^)>0.
Proposition 2: for K≥Vˉ(w^)−v, (Vw^,v) satisfies (20)–(22).
Lemma 4: tangent pairs exist; θˉK increases and mK decreases in K; θˉK→wˇ(w^) as K↓0.
Significance
Propositions 2 and 3 are the analytic certificates behind Theorem 2(i): combined with the verification theorem (Theorem 1), they show that under Condition 1 and K≥Kˉ1 the principal's utility from any incentive-compatible contract promising w is at most V∅(w)−w≤v, so never hiring the agent is optimal, and Kˉ1 is exactly the switching-cost threshold of that regime. The same objects (Vw~, Vw^, the tangent pairs) reappear in the low-cost control-band regime (Propositions 6–7), so a formal development of the delay ODE and its concavification is reused there.
The paper proves all these results; none is formalized. The mission formalizes the deterministic half of the guess-and-verify argument. The stochastic contract model (point processes, promise keeping, incentive compatibility), Theorem 1 and the optimality theorems are outside its scope.
Difficulty
The obvious approach, verifying (20)–(22) by direct computation, works for the linear pieces but not for Vw^, which has no closed form: (25) is a delay equation solved backwards from w~ in steps of length β, and the closed form (EC.52) of the paper holds only on the last step [(w~−β)+,w~]. Every property of Vw^ used in the goal (monotonicity, the single change of convexity, the comparison in w~ that makes w^ unique) has to be extracted from the equation itself, across the kinks of w↦(w+β)∧w~. On the second branch of V∅, A∅V∅≥0 is not a pointwise identity either: it requires mK≤1, which is where K≥Kˉ1 enters.
Formalization scope
Parameters form a structure with real fields; the standing assumptions 0≤μ<μ, 0<b≤c, K>0, 0<r≤ρ, RΔμ>c are a hypothesis of every theorem. μ≥0 and b>0 are disclosed additions (a rate and a cost).
Functions are ℝ → ℝ; every statement quantifies over w≥0 only. In AI,A∅, f′ is the left derivative (derivWithin f (Set.Iic w) w, the paper's p. 15 convention); in statements about Vw~ and Vw~, derivatives are taken within R+; in (25), within [0,w~].
(20) is required for w>0: at w=0 a left derivative of a function on R+ does not exist. (21) and (22) are as printed.
Vw~ is a chosen solution of (25)–(26) (Lemma EC.2 is the milestone that makes this meaningful); wˇ(w~) is a supremum defined through the sign of V′′, and w^ an infimum; Kˉ1 is an infimum. None is defined by the property a theorem asserts about it.
The goal holds for every pair satisfying (29); the pair is unique, and at K=Vˉ(w^)−v it is (w^,0). The second branch of (30) is extended beyond w^, as the paper's proof uses.
"Increasing/decreasing" mean strictly. The contract-utility claim U(Γ)=v of Proposition 2 is not stated.
Ruled out: weakening (20)–(22) (dropping the upper bound K in (21), or (22)), or defining Vw~ by its closed form (EC.52), which is valid only near w~.
Needed infrastructure: existence and uniqueness for linear ODEs with a terminal condition, extended step by step across a delay; one-sided derivatives of piecewise functions; concavity from sign conditions on second derivatives. Proofs of the milestones, and reusable lemmas about delay equations of this form, are welcome.
Selected references
P. Cao, P. Sun, F. Tian, Punish Underperformance with Suspension: Optimal Dynamic Contracts in the Presence of Switching Cost, Management Science, 2024. https://doi.org/10.1287/mnsc.2023.4845 (cited from the authors' manuscript with e-companion).
Design and Analysis of Switchback Experiments 2: Under the Optimal Design the Horvitz–Thompson Estimator Is Asymptotically Normal as the Number of Epochs n → ∞Research Paper
Motivation
Online platforms such as ride-hailing, delivery and marketplace companies routinely test a new policy (a pricing rule, a dispatching algorithm) by switching it on and off over time on a single unit, a city or a market, rather than by randomizing over users. These switchback experiments avoid the interference that user-level randomization creates in two-sided markets, but they face a different problem: a treatment administered at one time keeps affecting outcomes for several periods afterwards (carryover effects). Bojinov, Simchi-Levi and Zhao, Design and Analysis of Switchback Experiments (arXiv:2009.00148, Management Science 69(7), 2023), derive the minimax-optimal design when the carryover lasts at most m periods, and then ask how to do inference with it. This mission formalizes the inference half: under the optimal design, the Horvitz–Thompson estimator of the lag-m effect is asymptotically normal as the number of epochs grows, which is what justifies the paper's normal-approximation test and confidence intervals.
The result is a finite-population central limit theorem: the potential outcomes are fixed, non-random numbers, and all randomness comes from the experimenter's coin flips. It belongs to the line of design-based limit theorems of Li and Ding (2017), Aronow et al. (2017) and Bojinov et al. (2021). Its probabilistic engine is the central limit theorem of Romano and Wolf (2000) for triangular arrays of ϕ-dependent random variables, which goes back to the m-dependent central limit theorem of Hoeffding and Robbins (1948).
Setting
There are T time periods t∈[T]={1,…,T}. An assignment pathw1:T∈{0,1}T records treatment (wt=1) or control (wt=0) in each period. The potential outcomes are real numbers Yt(w1:T). They are assumed non-anticipating (Assumption 1: Yt depends only on w1:t) and to have m-carryover effects (Assumption 2: for t>m, Yt does not depend on w1:t−m−1). Assumption 3 bounds them: ∣Yt(w1:T)∣≤B. Write Yt(1m+1) and Yt(0m+1) for the outcome after m+1 consecutive treatments, respectively controls. The lag-m causal effect is
τm=T−m1t=m+1∑T[Yt(1m+1)−Yt(0m+1)].
A regular switchback design flips an independent coin with success probability qk∈(0,1) at each randomization pointt0=1<t1<⋯<tK, and every period copies the most recent coin. The Horvitz–Thompson estimatorτ^m weights the observed outcome at time t by the inverse probability that the last m+1 assignments were all treatments (respectively all controls).
In the n-replica experimentT=nm, and the optimal design of the paper's Theorem 2 uses fair coins at
T∗={1,2m+1,3m+1,…,(n−2)m+1}.
The periods split into n−1 blocks {(k+1)m+1,…,(k+2)m}, k=0,…,n−2, with block sums Yˉk(1m+1), Yˉk(0m+1) and block errors 1ˉk, so that τ^m−τm=(T−m)−1∑k1ˉk. Assumption 4 (non-negligible variance) requires Var(τ^m)≥c/n for some c>0 and all large n.
Formalization targets
Goal: Theorem 3 (asymptotic normality)
For fixed m, under Assumptions 1–2, Assumption 3 with one bound B for all n, and Assumption 4,
Var(τ^m)τ^m−τmDN(0,1)(n→∞).
The statement fixes no rate and does not require Var(τ^m) to converge.
Milestones
Block decomposition (EC.4.1–EC.4.2): τ^m−τm=(T−m)−1∑k=0n−21ˉk with E1ˉk=0.
1-dependence (proof of Theorem 3): the block errors 1ˉ0,…,1ˉn−2 form a 1-dependent sequence.
Lemma 2: the closed form (10) of Var(τ^m) in terms of the block sums.
Block-variance bound (proof of Theorem 3): Bn,k,a2≤16kB2/(n−1)2 for the scaled partial sums.
Lemma EC.1 (Romano–Wolf): the central limit theorem for ϕ-dependent triangular arrays.
Companions
Corollary 1, the conservative bound Var(τ^m)≤VarU(τ^m) with the unbiased estimator σ^U2, and Corollary 2(i), that (10) still holds when the design is built for an overestimated order p>m.
Significance
Theorem 3 is what turns the optimal design into a usable inferential procedure: together with Corollary 1 it gives the test statistic ∣τ^m∣/σ^U2 and its normal p-value, a conservative large-sample test of the null of no lag-m effect that needs no model for the outcomes. Corollary 2 extends the guarantee to a misspecified carryover order p>m. Lemma EC.1 is a general tool, applicable to any statistic that decomposes into a sum of weakly dependent pieces, such as block designs, time-series bootstraps and spatial experiments.
The paper proves these results. None of them is formalized: Mathlib has the central limit theorem for i.i.d. sequences only, and no central limit theorem for dependent arrays exists on the platform. The work here is to formalize the known proof: the exact second-moment computations of the design, the 1-dependence of the blocks, and a proof of the Romano–Wolf theorem itself, which the paper takes from the literature.
Difficulty
The randomness is a finite set of coin flips and the outcomes change with n, so no i.i.d. structure is available: the block errors are neither independent nor identically distributed, and the classical Lindeberg–Lévy theorem does not apply. The obvious reduction, treating neighbouring blocks as independent, fails, because adjacent blocks share a coin. This is why the cross terms appear in (10), and why a dependent-array central limit theorem is needed. The variance normalisation is random-design specific and may oscillate in n, so the limit theorem has to be proved with a self-normalisation that does not converge. Lemma EC.1 is the main obstacle: a ϕ-dependent central limit theorem for triangular arrays with Lyapunov-type moment conditions, which is not in Mathlib.
Formalization scope
A path is a function ℕ → Bool of which only 1,…,T is read; potential outcomes are ℕ → Path → ℝ. The design law is encoded as independent coins at the randomization points, mapped to paths; in the n-replica experiment the probability space is the uniform measure on the coin vectors of T∗. Row n of the sequence has T=nm and potential outcomes Y n. Rows n<4 exist in Lean but are degenerate and irrelevant to the limit. Convergence in distribution is Mathlib's TendstoInDistribution, and the limit is gaussianReal 0 1. Ω(n−1) and O(1) are explicit constants with an eventual threshold. The estimand, estimator and variance in the goal are the model's definitions, not a hand-written formula in the coins.
Three hypotheses are added to the printed statements, each necessary and disclosed in the item's Formalization Note:
Theorem 3 assumes Assumption 3 with one B for all n. The page omits it, the proof uses it, and without it the statement is false.
Lemma EC.1 assumes dn→∞. This is Romano and Wolf's sixth condition for fixed ϕ, and without it the lemma fails with dn=1.
Lemma EC.1 assumes Ln>0, which the ratios in its conditions 4–5 presuppose.
The goal does not assume 1-dependence, the variance formula or any condition of Lemma EC.1; those are milestones, so the goal cannot be discharged by a hypothesis.
A complete development needs:
finite-coin product measures and the independence of functions of disjoint coordinates;
exact second-moment computations for the design;
a ϕ-dependent central limit theorem for triangular arrays.
The last two, Lemma EC.1 and Definition EC.1, are reusable well beyond this mission. Contributions to any milestone, including alternative proofs of Lemma EC.1, are welcome.
Selected references
I. Bojinov, D. Simchi-Levi, J. Zhao, Design and Analysis of Switchback Experiments, Management Science 69(7), 2023. https://arxiv.org/abs/2009.00148 (v4)
J. P. Romano, M. Wolf, A more general central limit theorem for m-dependent random variables with unbounded m, Statistics & Probability Letters 47, 115–124, 2000.
W. Hoeffding, H. Robbins, The central limit theorem for dependent random variables, Duke Mathematical Journal 15(3), 773–780, 1948.
X. Li, P. Ding, General forms of finite population central limit theorems with applications to causal inference, Journal of the American Statistical Association 112, 1759–1769, 2017.
I. Bojinov, N. Shephard, Time series experiments and causal estimands: exact randomization tests and trading, Journal of the American Statistical Association 114, 1665–1682, 2019.
Plasticity: finite-dimensional faces without completenessResearch Paper
Motivation
A metric space is plastic if every nonexpansive bijection of it onto itself is an isometry; Cascales, Kadets, Orihuela and Wingler (2016) asked whether the closed unit ball of every real Banach space is plastic.
The mission "Plasticity: unit spheres covered by finite-dimensional faces" proved that a nonexpansive bijection F between unit balls carries every finite-dimensional face of the target ball back onto a face of the same dimension (card Plasticity.Faces.matchesFace_of_finiteDimensional, stated for normed spaces), and that F is a linear isometry whenever the target sphere is covered by finite-dimensional faces, for Banach spaces.
That covering theorem was proved through a sphere-preservation theorem whose proof needs completeness.
This mission removes completeness from the covering theorem and its plasticity corollary, by the ending that Angosto, Kadets and Zavarzina (2019) used for polyhedral faces.
Setting
X and Y are real normed spaces, not necessarily complete, with closed unit balls BX,BY and unit spheres SX,SY.
A sphere face of BY is a nonempty convex set C⊆SY that is an extreme subset of BY (definitions Plasticity_Faces).
F:BX→BY is a nonexpansive bijection; nothing is assumed about the continuity of F−1.
Target
(goal)SYcovered by finite-dimensional sphere faces⟹Fis the restriction of a surjective linear isometryX→Y.(plasticity)SXcovered by finite-dimensional sphere faces⟹BXis plastic.
Significance
The result. Completeness plays no role in the mechanism: the face theorem already holds for normed spaces, and the ending needs only the geometry of planes and the Mazur–Ulam theorem.
The steps are: F maps SX into SY; by induction on the face dimension, F is isometric on each scaled preimage face along chords that end at boundary points where it is already homogeneous (Zavarzina's Lemma 2.5, proved here by differentiating one inequality at a point of a plane where the norm is differentiable along a line, which Rademacher's theorem supplies), and two points of a face at equal distances from all its boundary points coincide, so F is homogeneous on every ray; then F is an isometry of the balls, and its homogeneous extension is linear by Mazur–Ulam.
Formalizing it. The face theorem is a Proved card in the earlier mission; this mission adds the ending, so that the statements are machine-checked in their natural generality.
Formalization scope
Real scalars; the face theorem Plasticity.Faces.matchesFace_of_finiteDimensional and the basic facts Plasticity.BallMap.* are imported Proved cards.
New inputs are separate cards: Zavarzina's isometry lemma for homogeneous points (Plasticity.BallMap.norm_map_sub_map_eq_of_map_smul, using Rademacher's theorem from Mathlib for the density of smooth points), two elementary facts about relative boundaries of bounded sets, and homogeneity on preimage faces (Plasticity.Faces.map_smul_of_map_mem_face).
Statements are not to be weakened by assuming completeness, continuity of the inverse or a bound on the face dimensions.
Selected references
C. Angosto, V. Kadets, O. Zavarzina, Non-expansive bijections, uniformities and polyhedral faces, J. Math. Anal. Appl. 471 (2019), arXiv:1808.08534.
O. Zavarzina, Non-expansive bijections between unit balls of Banach spaces, Ann. Funct. Anal. 9 (2018), arXiv:1704.06961.
B. Cascales, V. Kadets, J. Orihuela, E. J. Wingler, Plasticity of the unit ball of a strictly convex Banach space, RACSAM 110 (2016), 723–727.
S. Mazur, S. Ulam, Sur les transformations isométriques d'espaces vectoriels normés, C. R. Acad. Sci. Paris 194 (1932), 946–948.
Plasticity: unit spheres covered by finite-dimensional facesResearch Paper
Motivation
A metric space is plastic if every nonexpansive bijection of it onto itself is an isometry; every totally bounded metric space is plastic (Freudenthal–Hurewicz 1936), and Cascales, Kadets, Orihuela and Wingler (2016) asked whether the closed unit ball of every real Banach space is plastic.
They proved it for strictly convex spaces, whose unit sphere consists of one-point faces.
Angosto, Kadets and Zavarzina (2019) proved it, in the stronger two-space form, when the unit sphere is a union of finite-dimensional polyhedral extreme subsets: then every nonexpansive bijection from the unit ball of any Banach space onto that ball is an isometry.
This mission formalizes a theorem that removes the polyhedrality: it suffices that every point of the sphere lies in some finite-dimensional face, of any shape, for instance a round disc.
The results come from an unpublished research project on the plasticity problem.
Setting
X and Y are real normed spaces with closed unit balls BX,BY and unit spheres SX,SY; the covering and plasticity forms assume them complete.
A sphere face of BY is a nonempty convex set C⊆SY that is an extreme subset of BY: if a point of C lies in the open segment between two points of BY, both points lie in C.
Its dimension is that of its affine hull; ∂C and extC are its relative boundary and its extreme points.
F:BX→BY is a nonexpansive bijection; nothing is assumed about the continuity of F−1.
Target
(F17)Ca finite-dimensional sphere face ofBY⟹D=F−1(C)is a compact sphere face ofBXwithdimD=dimC,F−1(−C)=−D,F−1(∂C)=∂D,F−1(extC)=extD,F(tD)=tC(0≤t≤1).(F17, covering form; goal)X,YBanach,SYcovered by finite-dimensional sphere faces⟹Fis the restriction of a surjective linear isometryX→Y.(F17, plasticity)XBanach,SXcovered by finite-dimensional sphere faces⟹BXis plastic.
Significance
The result. For a polytope face, the relative boundary is a finite union of smaller polytopes, so an induction on dimension keeps the preimage of the boundary compact; this is the step of Angosto–Kadets–Zavarzina that needs polyhedrality.
For a curved face the boundary has a continuum of extreme points, and the inverse map, not known to be continuous, could a priori scatter their preimages.
The new step traps the whole boundary preimage in one compact face: the preimage of a relative-interior point is shown to lie strictly between any boundary preimage and another one, by following a path across the scaled boundary, which the induction hypothesis covers exactly.
Spaces such as ℓp-sums of a Euclidean space with a three-dimensional space whose ball is a cylinder have only finite-dimensional faces, some of them discs, and are covered by the new theorem but not by the polyhedral one or by strict convexity.
Formalizing it. The proofs exist only in the project's notes and were checked by AI referees; a machine-checked proof is the independent confirmation sought.
The covering form ends with the project's theorem that a nonexpansive surjection between unit balls mapping the sphere into the sphere is linear, already formalized (card Plasticity.U10); this is the only step that uses completeness.
Difficulty
No regularity of the inverse map, no strict convexity, polyhedrality or separability is assumed, the face theorem does not assume completeness, and the faces may have any finite dimension.
The topology needed is classical but absent from Mathlib: invariance of domain and of dimension, and the impossibility of retracting a ball onto its boundary sphere.
Formalization scope
Real scalars. Faces are expressed with Mathlib's IsExtreme, dimensions as Module.finrank ℝ (vectorSpan ℝ C), relative boundaries as intrinsicFrontier ℝ C (definitions Plasticity_Faces).
A ball map is a function F : X → Y constrained on the closed unit ball by Set.BijOn and LipschitzOnWith 1; the preimage of C is closedBall 0 1 ∩ F ⁻¹' C.
The plasticity form uses HasPlasticUnitBall (definitions Plasticity_Basic).
Statements are not to be weakened by assuming continuity of the inverse, polyhedrality or a bound on the face dimensions.
Published inputs (the basic facts of Zavarzina's Theorem 2.3, invariance of dimension, no retraction) are separate cards.
Selected references
C. Angosto, V. Kadets, O. Zavarzina, Non-expansive bijections, uniformities and polyhedral faces, J. Math. Anal. Appl. 471 (2019), arXiv:1808.08534.
B. Cascales, V. Kadets, J. Orihuela, E. J. Wingler, Plasticity of the unit ball of a strictly convex Banach space, RACSAM 110 (2016), 723–727.
O. Zavarzina, Non-expansive bijections between unit balls of Banach spaces, Ann. Funct. Anal. 9 (2018), arXiv:1704.06961.
H. Freudenthal, W. Hurewicz, Dehnungen, Verkürzungen, Isometrien, Fund. Math. 26 (1936), 120–122.
L. E. J. Brouwer, Beweis der Invarianz des n-dimensionalen Gebiets, Math. Ann. 71 (1912).
Exact Vacuum Atlas I: Four-Dimensional Vacuum Metrics in Multiple Coordinate SystemsResearch Paper
Motivation
Exact vacuum solutions of Einstein's equations are the reference objects of classical general relativity: Minkowski
space (flat spacetime), the Schwarzschild solution (1916, static spherically symmetric vacuum) and the Kerr solution
(1963, stationary axisymmetric vacuum) are the metrics against which every statement about gravitational fields, black
holes and gravitational waves is calibrated. Each of them is written in several coordinate systems, and the catalogue
literature (Müller–Grave, Catalogue of Spacetimes, arXiv:0904.4184; Visser,
The Kerr spacetime: a brief introduction, arXiv:0706.0622) lists these forms side
by side. The verification that a given coordinate expression is Ricci-flat, and that two expressions of the same solution
are related by an explicit coordinate change, is routinely delegated to computer algebra and is almost never printed.
Timeline: Schwarzschild (1916) found the static solution; Eddington (1924) and Finkelstein (1958) gave the coordinates
regular across r=2M; Kerr (1963) found the rotating solution in the ingoing form used here; Boyer and Lindquist (1967)
introduced the coordinates of the standard form. A previous Prove2Me mission (Kerr Vacuum Solution Verification in
Boyer–Lindquist Coordinates, root KerrBL.vacuum_Kerr, 21 theorems, all Proved) established the coordinate
Ricci-flatness of the Boyer–Lindquist form; this mission reuses two of its published theorems and two of its definition
bundles unchanged (the remaining nodes stay their platform-side dependencies).
Setting
A coordinate point is x=(x0,x1,x2,x3)∈R4 (in Lean, a function {0,1,2,3}→R). A
coordinate metric is a 4×4 matrix g=(gij) of real functions of x; a candidate inverseg^ is
another such matrix. The slice derivative∂if(x) is the derivative of u↦f(x[xi:=u]) at
u=xi; on the open domains used here every slice is C∞, so ∂i is the genuine derivative. With
(definition bundle Atlas_Core_Basic), the vacuum certificateVacuumCertificate(g,g^,U) for a set
U⊆R4 asserts: U is open and nonempty; g is symmetric on U; g^g=I on U; all components
of g and g^ are C∞ on U; at every point of U there is an invertible matrix E with
ETgE=diag(−1,1,1,1) (Lorentzian signature, bridged to Mathlib's signature (3,1) of the
quadratic form); and every component Rbd vanishes on U. A coordinate relationCoordRelation(g1,g2,U,V,Φ,Ψ,J) asserts: Ψ∘Φ=id on U, Φ∘Ψ=id
on V, Φ maps U bijectively onto V, Φ is C∞ on U and Ψ on V, every entry Jki(x) is the
genuine derivative of the slice u↦Φ(x[xi:=u])k, and JT(g2∘Φ)J=g1 on U. Units
G=c=1, signature (−,+,+,+), Σ=r2+a2cos2θ, Δ=r2−2Mr+a2.
These definitions form the registered local definition layer of the project: the pinned Mathlib has no Lorentzian metric,
Levi-Civita connection or Ricci tensor, so they are supplied as reviewed coordinate-level definitions on top of Mathlib's
deriv, ContDiffOn, Matrix and quadratic-form signature.
where Cert(g,U) is VacuumCertificate(g,g^,U) with the explicit candidate inverse g^ of
each row, and R1–R4 are coordinate relations with explicit maps: R1/R2 standard Schwarzschild to ingoing/outgoing
Eddington–Finkelstein on {r>0,r=2M,0<θ<π} with v=t+r+2Mlog∣r−2M∣, resp. u=t−r−2Mlog∣r−2M∣
(Jacobian determinant 1; the logarithm is Mathlib's Real.log, for which logx=log∣x∣ when x=0, so one
formula covers both sides of r=2M); R3 Boyer–Lindquist to ingoing Kerr on {Σ=0,Δ=0,sinθ=0} with
(t,r,θ,φ)↦(t+r+H1(r),r,θ,−φ−H2(r)), H1′=2Mr/Δ, H2′=a/Δ, explicit
H1,H2 for all real M,a (three branches of M2−a2; Jacobian determinant −1); R4 spherical chart
{r>0,0<θ<π,0<φ<2π} to R4∖{y=0,x≥0} with the usual map (Jacobian determinant
r2sinθ).
Coverage (ExactVacuumAtlas.Release01.coverage)
For M>0 the EF domain contains a point with r=2M; for a2<M2 the Boyer–Lindquist domain contains a point with
Δ<0; for 0<M, a2≤M2 the ingoing Kerr domain contains a point with Δ=0; at these points all Ricci
components vanish. The certified domains are therefore not narrowed to an exterior region.
A Lorentzian 4×4 matrix in the frame sense has Mathlib signature sigPos=3, sigNeg=1.
Significance
The result gives machine-checked coordinate Ricci-flatness for the seven standard forms of the three basic vacuum
solutions, on explicit open domains whose conditions do not exclude the interior region of Schwarzschild (0<r<2M for M>0),
either sign of Δ or negative r for Kerr, the regular-coordinate portion of r=2M with 0<θ<π (EF, M>0),
or the points with Δ=0 at which Σ=0 and sinθ=0 (ingoing Kerr); which of these sets are nonempty
depends on the parameters, and the coverage theorem gives sufficient conditions. The Lorentzian signature is verified
pointwise. The four coordinate relations are proved as explicit maps with explicit inverses and Jacobians, not as
abstract existence statements.
Status: every item of the mission has a kernel-checked proof in the project (axioms propext, Classical.choice,
Quot.sound only; no sorry, no native_decide); nothing is open. The mission publishes a finished formalization.
What it does not contain: any statement about manifolds, atlases, event horizons, maximal extensions, causal
structure or global geometry; any classification claim about four-dimensional vacuum metrics; any coordinate-covariance
theorem for the coordinate Ricci tensor; any relation between it and a Mathlib manifold Ricci tensor (which does not
exist in the pinned Mathlib). The catalogue is a finite list of seven coordinate representations of three solutions.
Difficulty
The obvious route, a general tensor-calculus library (connection, curvature, pull-back functoriality) over Mathlib
manifolds, is unavailable: the pinned Mathlib has no indefinite-metric connection or curvature. Each coordinate representation has a complete formal certificate. The development combines direct coordinate
calculations with formally proved parameter specialisations and equality-based reuse: the Cartesian Minkowski,
Eddington–Finkelstein and ingoing Kerr rows are verified by direct coordinate calculations; the Boyer–Lindquist row
reuses the published KerrBL.ricci_flat_Kerr and KerrBL.ginv_mul_g_Kerr; the standard Schwarzschild row takes its
Ricci-flatness from the Boyer–Lindquist result at a=0, and the spherical Minkowski row is transported from the
standard Schwarzschild certificate at M=0, in both cases through proved componentwise equalities of the metric data
on the common domain. No coordinate-covariance theorem is used or claimed. The ingoing Kerr row is the hard case: the metric is non-diagonal (the radial coordinate
vector is null, grr=0, while for a=0 the covector dv is not null, since gvv=a2sin2θ/Σ), the Ricci components are rational functions whose vanishing holds only modulo sin2θ+cos2θ=1,
and every derivative must be a genuine derivative, never a default value of deriv. For R3 the antiderivative of
1/Δ has three different closed forms depending on the sign of M2−a2, all covered without restricting the
parameters.
Formalization scope
Lean representation: coordinate metrics on R4 as above; ContDiffOn ℝ ∞; Matrix (Fin 4) (Fin 4) ℝ;
Mathlib sigPos/sigNeg for the signature bridge. Conventions committed: G=c=1, (−,+,+,+), coordinate order
(t∣v∣u,r,θ,φ), EF matrix entry gvr=1 (from 2dvdr), ingoing Kerr entries read off
with the half-Hessian convention from Visser eq. (E:K1), φ∈R (no 2π identification). No
trivialising formalization: every domain is proved nonempty with explicit witnesses; the candidate inverse is verified,
never assumed; the Ricci tensor is built from the metric data, not hypothesised.
Reusable infrastructure: the core bundles (Atlas_Core_Basic, Atlas_Core_Certificate, Atlas_Core_Relation), the
diagonal-frame criterion isLorentzian_of_diag, the signature bridge sigPos_sigNeg_of_isLorentzian, and the
closed-form tables. Welcome contributions (not part of this release): Painlevé–Gullstrand, isotropic, Kruskal–Szekeres,
Kerr–Schild and Doran forms; Kasner, pp-waves, Taub–NUT; a coordinate-covariance theorem for the coordinate Ricci tensor.
R. P. Kerr, Gravitational field of a spinning mass as an example of algebraically special metrics, Phys. Rev. Lett. 11 (1963) 237. https://doi.org/10.1103/PhysRevLett.11.237
R. H. Boyer, R. W. Lindquist, Maximal analytic extension of the Kerr metric, J. Math. Phys. 8 (1967) 265. https://doi.org/10.1063/1.1705193
R. M. Wald, General Relativity, University of Chicago Press (1984), eqs. (3.1.30), (3.4.4)–(3.4.5) (cited for the conventions; not independently re-checked by the reviewer).