Shadow Tomography of Quantum States establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
There are universal constants C>0 and p∈N and one explicit adaptive measurement constructor with the following property. Let D,M≥1 be integers, let E1,…,EM be known two-outcome measurement effects on CD (so 0⪯Ei⪯I), and let 0<ε,δ<1. The constructor depends on these known data and not on the unknown state.
Write LD=max{1,logD}, LM=max{1,logM}, Lδ=max{1,log(1/δ)}, Lε=max{1,log(1/ε)}, LLM=max{1,logLM}, and LLD=max{1,logLD}. The constructed procedure uses k independent copies of the unknown state, with
k≤⌈Cε−4LδLM4LD(1+LLM+LLD+Lε)p⌉.
For every density matrix ρ on CD, a run on ρ⊗k returns numbers b1,…,bM∈[0,1] satisfying
Pr[∀i∈{1,…,M},∣bi−Tr(Eiρ)∣≤ε]≥1−δ.
Collective measurements, adaptive measurements, temporary ancillas, and unrestricted known-data classical computation are permitted. The procedure composes physical quantum-OR decision programs, the paper's binary gentle search over signed amplified deviation effects, and classical matrix multiplicative weights. This estimates the entire specified list simultaneously without reconstructing the unknown density matrix in trace distance.
Formalization Note The finite adaptive instrument programs carry normalized Kraus families. The constructor supplies actual physical decision programs, not an assumed accuracy contract or a state oracle. The source composition is executed by chunk-local recursive definitions. The logarithm floors extend the asymptotic notation to D=1, M=1, and other finite boundary regimes; they introduce no additional asymptotic parameter dependence. No computation-time or gate-complexity assertion is made.
Target
Theorem 2 (Shadow Tomography Theorem); Problem 1
There are universal constants C>0 and p∈N and one explicit adaptive measurement constructor with the following property. Let D,M≥1 be integers, let E1,…,EM be known two-outcome measurement effects on CD (so 0⪯Ei⪯I), and let 0<ε,δ<1. The constructor depends on these known data and not on the unknown state.
Write LD=max{1,logD}, LM=max{1,logM}, Lδ=max{1,log(1/δ)}, Lε=max{1,log(1/ε)}, LLM=max{1,logLM}, and LLD=max{1,logLD}. The constructed procedure uses k independent copies of the unknown state, with
k≤⌈Cε−4LδLM4LD(1+LLM+LLD+Lε)p⌉.
For every density matrix ρ on CD, a run on ρ⊗k returns numbers b1,…,bM∈[0,1] satisfying
Pr[∀i∈{1,…,M},∣bi−Tr(Eiρ)∣≤ε]≥1−δ.
Collective measurements, adaptive measurements, temporary ancillas, and unrestricted known-data classical computation are permitted. The procedure composes physical quantum-OR decision programs, the paper's binary gentle search over signed amplified deviation effects, and classical matrix multiplicative weights. This estimates the entire specified list simultaneously without reconstructing the unknown density matrix in trace distance.
Formalization Note The finite adaptive instrument programs carry normalized Kraus families. The constructor supplies actual physical decision programs, not an assumed accuracy contract or a state oracle. The source composition is executed by chunk-local recursive definitions. The logarithm floors extend the asymptotic notation to D=1, M=1, and other finite boundary regimes; they introduce no additional asymptotic parameter dependence. No computation-time or gate-complexity assertion is made.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Quantum speedup of Monte Carlo methodsResearch Paper
Motivation
Quantum speedup of Monte Carlo methods establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
Let A be the coherent unitary representation of a randomized or quantum computation on n=h+k qubits, initially in ∣0n⟩, with no intermediate measurements and with access to its inverse. Measuring the last k qubits gives a bit string x, whose output is the fixed value φ(x)∈[0,1]. The value-dependent flag rotation is supplied exactly; the source assumes that φ is easily computable. Write μ=E[v(A)].
Attach a fresh flag and prepare ∣ψ⟩ by rotating it to 1−φ(x)∣0⟩+φ(x)∣1⟩. Set P=I⊗∣1⟩⟨1∣, U=2∣ψ⟩⟨ψ∣−I, and V=I−2P. For any positive integer t and 0<δ<1, Algorithm 1 applies amplitude estimation independently r(δ)=2⌈100log(1/δ)⌉+1 times and returns the median μ. One run uses uniform control on {0,…,t−1}, controlled powers of UV, the inverse Fourier transform of dimension t, and the estimate sin2(πj/t) for control outcome j.
There exist positive universal constants C,K,D, chosen before all sampler data and parameters, such that, with Lδ=max{1,log(1/δ)},
Here the actual schedule consumes r(δ) fresh copies of A∣0n⟩ and r(δ)(t−1) calls to U, counting controlled calls as uses.
For every 0<ε≤1:
If μ>0, there is a positive integer t≤D/(εμ) for which Pr[∣μ−μ∣≤εμ]≥1−δ.
There is a positive integer t≤D/ε for which Pr[∣μ−μ∣≤ε]≥1−δ.
If μ=0, the estimator returns zero with probability one for every positive integer t. The bounds hold for every coherent computation, including each instance of any oracle it uses. They quantify copies and reflections separately.
This is the bounded-output mean-estimation subroutine used by the paper's later Monte Carlo algorithms.
Formalization Note The selected result is Theorem 3 on PDF pages 8–9, rather than a later bounded-variance theorem. The printed reciprocal rates at ε=0 supply no finite exact-estimation claim; the reciprocal corollaries therefore use 0<ε≤1. The all-confidence bound Lδ agrees with O(log(1/δ)) as δ tends to zero. The unspecified repetition coefficient is fixed to the odd representative above. The theorem asserts no gate-time bound for computing φ.
Target
Theorem 3, §2.1 (continues on PDF p.9); Algorithm 1
Let A be the coherent unitary representation of a randomized or quantum computation on n=h+k qubits, initially in ∣0n⟩, with no intermediate measurements and with access to its inverse. Measuring the last k qubits gives a bit string x, whose output is the fixed value φ(x)∈[0,1]. The value-dependent flag rotation is supplied exactly; the source assumes that φ is easily computable. Write μ=E[v(A)].
Attach a fresh flag and prepare ∣ψ⟩ by rotating it to 1−φ(x)∣0⟩+φ(x)∣1⟩. Set P=I⊗∣1⟩⟨1∣, U=2∣ψ⟩⟨ψ∣−I, and V=I−2P. For any positive integer t and 0<δ<1, Algorithm 1 applies amplitude estimation independently r(δ)=2⌈100log(1/δ)⌉+1 times and returns the median μ. One run uses uniform control on {0,…,t−1}, controlled powers of UV, the inverse Fourier transform of dimension t, and the estimate sin2(πj/t) for control outcome j.
There exist positive universal constants C,K,D, chosen before all sampler data and parameters, such that, with Lδ=max{1,log(1/δ)},
Here the actual schedule consumes r(δ) fresh copies of A∣0n⟩ and r(δ)(t−1) calls to U, counting controlled calls as uses.
For every 0<ε≤1:
If μ>0, there is a positive integer t≤D/(εμ) for which Pr[∣μ−μ∣≤εμ]≥1−δ.
There is a positive integer t≤D/ε for which Pr[∣μ−μ∣≤ε]≥1−δ.
If μ=0, the estimator returns zero with probability one for every positive integer t. The bounds hold for every coherent computation, including each instance of any oracle it uses. They quantify copies and reflections separately.
This is the bounded-output mean-estimation subroutine used by the paper's later Monte Carlo algorithms.
Formalization Note The selected result is Theorem 3 on PDF pages 8–9, rather than a later bounded-variance theorem. The printed reciprocal rates at ε=0 supply no finite exact-estimation claim; the reciprocal corollaries therefore use 0<ε≤1. The all-confidence bound Lδ agrees with O(log(1/δ)) as δ tends to zero. The unspecified repetition coefficient is fixed to the odd representative above. The theorem asserts no gate-time bound for computing φ.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
There is a single efficient oracle procedure for certifying a pure target state using one copy of an arbitrary mixed lab state. The classical oracle returns the exact amplitudes of the target in the computational basis and in the full-register Hadamard basis, as in Definition 1 of the paper.
More precisely, there exist a polynomial resource bound p, a constant C>0, a threshold n0≥1, a nonnegative sequence ηn→0, and measurable sets Gn of normalized n-qubit target states such that, for all n≥n0,
ψ∼HaarnPr[ψ∈/Gn]≤C2−n.
For every ψ∈Gn and every density matrix ρ on the same n qubits, write F(ψ,ρ)=⟨ψ∣ρ∣ψ⟩. The procedure satisfies
Pr[accept]≥F(ψ,ρ),Pr[reject]≥21−F(ψ,ρ)−ηn.
It flips one fair classical bit and measures the first r=n−k qubits either all in the Z basis or all in the X basis, where k=min{n,⌈2log2(max{2,n})⌉}. Given the observed prefix, it reads the 2k oracle amplitudes for that prefix, computes the conditional target, and performs one projector/complement measurement on the fixed suffix of k qubits. In the X branch, the full-Hadamard oracle fiber is transformed by H⊗k to obtain the physical conditional target. A zero target fiber is always rejected. The executed oracle calls, scalar instructions, and suffix circuit gates are bounded by p(n), uniformly over normalized targets and every branch; the compiled accepting effect is the conditional target projector.
The same good set and error sequence apply simultaneously to all lab density matrices. This provides the paper's constant robustness with only one measurement involving logarithmically many qubits.
Formalization Note The suffix rounding fixes the proof's choice γ=1. Efficiency is relative to exact complex-answer classical oracle access and ideal scalar operations, with arbitrary one- and two-qubit unitaries for exact synthesis. No finite-precision or oracle-simulation cost is claimed. The Lean statement uses the concrete frozen conditional measurement program and its execution-derived resource counts, and gives the additive soundness of Theorem 1.
Target
Theorem 1
There is a single efficient oracle procedure for certifying a pure target state using one copy of an arbitrary mixed lab state. The classical oracle returns the exact amplitudes of the target in the computational basis and in the full-register Hadamard basis, as in Definition 1 of the paper.
More precisely, there exist a polynomial resource bound p, a constant C>0, a threshold n0≥1, a nonnegative sequence ηn→0, and measurable sets Gn of normalized n-qubit target states such that, for all n≥n0,
ψ∼HaarnPr[ψ∈/Gn]≤C2−n.
For every ψ∈Gn and every density matrix ρ on the same n qubits, write F(ψ,ρ)=⟨ψ∣ρ∣ψ⟩. The procedure satisfies
Pr[accept]≥F(ψ,ρ),Pr[reject]≥21−F(ψ,ρ)−ηn.
It flips one fair classical bit and measures the first r=n−k qubits either all in the Z basis or all in the X basis, where k=min{n,⌈2log2(max{2,n})⌉}. Given the observed prefix, it reads the 2k oracle amplitudes for that prefix, computes the conditional target, and performs one projector/complement measurement on the fixed suffix of k qubits. In the X branch, the full-Hadamard oracle fiber is transformed by H⊗k to obtain the physical conditional target. A zero target fiber is always rejected. The executed oracle calls, scalar instructions, and suffix circuit gates are bounded by p(n), uniformly over normalized targets and every branch; the compiled accepting effect is the conditional target projector.
The same good set and error sequence apply simultaneously to all lab density matrices. This provides the paper's constant robustness with only one measurement involving logarithmically many qubits.
Formalization Note The suffix rounding fixes the proof's choice γ=1. Efficiency is relative to exact complex-answer classical oracle access and ideal scalar operations, with arbitrary one- and two-qubit unitaries for exact synthesis. No finite-precision or oracle-simulation cost is claimed. The Lean statement uses the concrete frozen conditional measurement program and its execution-derived resource counts, and gives the additive soundness of Theorem 1.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let p be prime, B∈Fpm×n, and Fi⊆Fp satisfy ∣Fi∣=r for every i, where 0≤r<p. For x∈Fpn, define the signed objective f(x)=∑i=1m(21(Bx)i∈Fi−1). Let C⊥={c∈Fpm:BTc=0} and let d be its minimum nonzero Hamming weight, with d=+∞ when C⊥={0}.
Let P∈R[t] have degree ℓ, satisfy ∑xP(f(x))2=1, and obey 2ℓ+1≤d. Define PDQI(x)=P(f(x))2 and βh=[th]P(t)2. For every nonnegative integer k such that k+2ℓ<d,
This identity characterizes the low-order moments of the signed score under the DQI distribution through binomial moments.
Formalization Note Expectations are finite real sums. The code and its extended natural minimum distance are computed from B using the frozen field-code definitions. The squared-amplitude weights are the frozen real polynomial weights; for real amplitudes they equal the computational-basis probabilities of the frozen DQI state. No additional normalization denominator is introduced.
Target
Theorem 3, Appendix B, Eq. (B60)
Let p be prime, B∈Fpm×n, and Fi⊆Fp satisfy ∣Fi∣=r for every i, where 0≤r<p. For x∈Fpn, define the signed objective f(x)=∑i=1m(21(Bx)i∈Fi−1). Let C⊥={c∈Fpm:BTc=0} and let d be its minimum nonzero Hamming weight, with d=+∞ when C⊥={0}.
Let P∈R[t] have degree ℓ, satisfy ∑xP(f(x))2=1, and obey 2ℓ+1≤d. Define PDQI(x)=P(f(x))2 and βh=[th]P(t)2. For every nonnegative integer k such that k+2ℓ<d,
This identity characterizes the low-order moments of the signed score under the DQI distribution through binomial moments.
Formalization Note Expectations are finite real sums. The code and its extended natural minimum distance are computed from B using the frozen field-code definitions. The squared-amplitude weights are the frozen real polynomial weights; for real amplitudes they equal the computational-basis probabilities of the frozen DQI state. No additional normalization denominator is introduced.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let n≥0 be the number of qubits, d=2n, and let ρ∈Cd×d be a fixed density matrix (positive semidefinite with trace one) of exact rank r. There are absolute constants a,b,c0>0, independent of n,r,ρ, such that the following holds for every c≥c0.
Set m=⌈cdr(lnd)2⌉. Independently sample m unphased Pauli strings w(Ai), uniformly with replacement from all d2 tensor products of I,X,Y,Z, including the identity. Suppose their exact expectations yi=Tr(w(Ai)ρ) are known. Write O(A,y) for the set of minimizers of
The trace norm is the sum of the singular values; competitors need not be positive semidefinite and have no rank constraint. Then
APr[O(A,y)={ρ}]≤ae−bc.
Thus this specific convex program attains its minimum uniquely at the unknown state with exponentially small failure probability. The probability is over the design for each fixed state, and m counts exact expectation settings, rather than physical copies or computation time.
Formalization Note Natural logarithms and integer rounding pin down the paper's asymptotic notation using its closing proof on PDF p.3. The sampling law and optimizer set are frozen definitions depending only on public n,m, and on the design and supplied data, respectively. For n=0, d=r=1 and m=0; trace one alone gives unique recovery.
Target
Theorem 1 (Low-rank tomography), convex program (1)
Let n≥0 be the number of qubits, d=2n, and let ρ∈Cd×d be a fixed density matrix (positive semidefinite with trace one) of exact rank r. There are absolute constants a,b,c0>0, independent of n,r,ρ, such that the following holds for every c≥c0.
Set m=⌈cdr(lnd)2⌉. Independently sample m unphased Pauli strings w(Ai), uniformly with replacement from all d2 tensor products of I,X,Y,Z, including the identity. Suppose their exact expectations yi=Tr(w(Ai)ρ) are known. Write O(A,y) for the set of minimizers of
The trace norm is the sum of the singular values; competitors need not be positive semidefinite and have no rank constraint. Then
APr[O(A,y)={ρ}]≤ae−bc.
Thus this specific convex program attains its minimum uniquely at the unknown state with exponentially small failure probability. The probability is over the design for each fixed state, and m counts exact expectation settings, rather than physical copies or computation time.
Formalization Note Natural logarithms and integer rounding pin down the paper's asymptotic notation using its closing proof on PDF p.3. The sampling law and optimizer set are frozen definitions depending only on public n,m, and on the design and supplied data, respectively. For n=0, d=r=1 and m=0; trace one alone gives unique recovery.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
There are absolute constants C>0 and 0<ϵ0≤1/2 with the following property. For every integer dimension d≥1, supplied integer rank bound 1≤r≤d, and accuracy 0<ϵ≤ϵ0, one can choose a copy count n≥0 and a lawful collective measurement on n independent identical copies of a state, with a density matrix as its classical outcome, such that
n≤Cϵrd(lnϵd)2,ρ∼M(ρ⊗n)Pr[S(ρ∥ρ)≤ϵ]≥0.99.
The probability guarantee holds for every unknown positive semidefinite d×d matrix ρ of trace one and rank at most r. The measurement is chosen using only d,r,ϵ, before ρ. Here S is Umegaki quantum relative entropy with natural logarithms: S(ρ∥σ)=Tr(ρlnρ−ρlnσ) when suppρ⊆suppσ, and +∞ otherwise; zero-eigenvalue terms use their continuous limits. The estimate may have any rank.
This gives relative entropy tomography with O(rd/ϵ) copies, including singular input states. Larger positive accuracies follow by running at a fixed smaller accuracy. The explicit squared-logarithm bound is stated on PDF p.12 immediately after Theorem 2.34.
Formalization Note The measurement uses the frozen general operator-valued POVM on the space of density matrices, and its output distribution is the Born law on ρ⊗n. The extended divergence uses the frozen kernel-containment support guard.
Target
Corollary 1.8
There are absolute constants C>0 and 0<ϵ0≤1/2 with the following property. For every integer dimension d≥1, supplied integer rank bound 1≤r≤d, and accuracy 0<ϵ≤ϵ0, one can choose a copy count n≥0 and a lawful collective measurement on n independent identical copies of a state, with a density matrix as its classical outcome, such that
n≤Cϵrd(lnϵd)2,ρ∼M(ρ⊗n)Pr[S(ρ∥ρ)≤ϵ]≥0.99.
The probability guarantee holds for every unknown positive semidefinite d×d matrix ρ of trace one and rank at most r. The measurement is chosen using only d,r,ϵ, before ρ. Here S is Umegaki quantum relative entropy with natural logarithms: S(ρ∥σ)=Tr(ρlnρ−ρlnσ) when suppρ⊆suppσ, and +∞ otherwise; zero-eigenvalue terms use their continuous limits. The estimate may have any rank.
This gives relative entropy tomography with O(rd/ϵ) copies, including singular input states. Larger positive accuracies follow by running at a fixed smaller accuracy. The explicit squared-logarithm bound is stated on PDF p.12 immediately after Theorem 2.34.
Formalization Note The measurement uses the frozen general operator-valued POVM on the space of density matrices, and its output distribution is the Born law on ρ⊗n. The extended divergence uses the frozen kernel-containment support guard.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Improved quantum data analysis establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
There are a universal constant C>0 and a copy-count function nTS(m,ε,δ), depending only on the number of tests m and the accuracy and failure parameters ε,δ, with the following property. For every integer m≥1 and every 0<ε,δ<1/2, write L=log(1/δ). Then
nTS(m,ε,δ)≤⌈Cε2((logm)2+L)L⌉.
For every dimension d≥1, there is an online quantum protocol that begins with nTS(m,ε,δ) independent, unentangled copies of an unknown state ρ∈Cd×d, where ρ is positive semidefinite and trρ=1, together with a known ancillary state. Observable/threshold pairs (At,θt) are then presented in order, with 0≤At≤I and θt∈[0,1]. The protocol is fixed independently of ρ and the stream, and its decision at stage t depends only on the presented prefix and its retained quantum memory. It either passes or halts and selects the current index t. Selection asserts tr(ρAt)>θt−ε; after m passes it asserts tr(ρAi)≤θi for all i.
For every such state and stream,
Pr[the protocol selects t with tr(ρAt)>θt−ε,or passes on all m pairs with tr(ρAi)≤θi for every i]≥1−δ.
The stream may depend on preceding public pass responses. No promise that an expectation exceeds a threshold is required. Both kinds of claim are valid in the overlap θt−ε<tr(ρAt)≤θt.
This theorem bounds the sample cost of online search among quantum observables independently of the state dimension.
Formalization Note Natural logarithms and a ceiling express the source's uniform big-O copy bound. Physical Kraus instruments act on the initial tensor power of ρ and an ancillary state; the model uses only copy access. The selected index is zero-based in Lean.
Target
Theorem 1.1
There are a universal constant C>0 and a copy-count function nTS(m,ε,δ), depending only on the number of tests m and the accuracy and failure parameters ε,δ, with the following property. For every integer m≥1 and every 0<ε,δ<1/2, write L=log(1/δ). Then
nTS(m,ε,δ)≤⌈Cε2((logm)2+L)L⌉.
For every dimension d≥1, there is an online quantum protocol that begins with nTS(m,ε,δ) independent, unentangled copies of an unknown state ρ∈Cd×d, where ρ is positive semidefinite and trρ=1, together with a known ancillary state. Observable/threshold pairs (At,θt) are then presented in order, with 0≤At≤I and θt∈[0,1]. The protocol is fixed independently of ρ and the stream, and its decision at stage t depends only on the presented prefix and its retained quantum memory. It either passes or halts and selects the current index t. Selection asserts tr(ρAt)>θt−ε; after m passes it asserts tr(ρAi)≤θi for all i.
For every such state and stream,
Pr[the protocol selects t with tr(ρAt)>θt−ε,or passes on all m pairs with tr(ρAi)≤θi for every i]≥1−δ.
The stream may depend on preceding public pass responses. No promise that an expectation exceeds a threshold is required. Both kinds of claim are valid in the overlap θt−ε<tr(ρAt)≤θt.
This theorem bounds the sample cost of online search among quantum observables independently of the state dimension.
Formalization Note Natural logarithms and a ceiling express the source's uniform big-O copy bound. Physical Kraus instruments act on the initial tensor power of ρ and an ancillary state; the model uses only copy access. The selected index is zero-based in Lean.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
There are positive absolute constants C,C0,C1,C0′,C1′ and a function η:N→[0,1] with η(n)→0 as n→∞ such that the following holds. Let d=2n, 1≤r≤d, and m≥1 satisfy m≥Crd(logd)6. Sample P1,…,Pm independently and uniformly, with replacement, from all d2 unsigned tensor Pauli operators, including the identity. On the real space of Hermitian matrices define A(X)i=d/mTr(PiX) and A∗(v)=d/m∑iviPi.
With probability at least 1−η(n) over this sampling, simultaneously for every positive semidefinite matrix ρ (without a trace or rank restriction), every z∈Rm, and y=A(ρ)+z, both conclusions below hold. Write ρr for the spectral truncation retaining the largest r eigenvalues, and ρc=ρ−ρr. All optimizations range over Hermitian matrices and permit nonunique minimizers.
For every λ satisfying ∥A∗(z)∥≤λ, the problem minimizing ∥X∥tr subject to ∥A∗(A(X)−y)∥≤λ has a minimizer. Every such minimizer ρDS satisfies
∥ρDS−ρ∥tr≤C0rλ+C1∥ρc∥tr.
For every μ>0 satisfying ∥A∗(z)∥≤μ/2, the problem minimizing 21∥A(X)−y∥22+μ∥X∥tr has a minimizer. Every such minimizer ρLasso satisfies
∥ρLasso−ρ∥tr≤C0′rμ+C1′∥ρc∥tr.
Here ∥⋅∥ is the operator norm, ∥⋅∥2 is the Euclidean vector norm, and ∥X∥tr=TrX†X is the full trace norm. The two bounds separate noise from the spectral tail and apply to full-rank inputs as well as exactly low-rank ones.
Formalization Note The paper's qualitative “high probability” is represented by a vanishing failure function uniform in r,m. Positive Lasso regularization is an explicit correction of the omitted μ=0 domain; the source's regularized recovery argument requires it. This correction, the interpretation of unnormalized PSD inputs, and the qualitative probability convention require independent moderation.
Target
Theorem 1, §II.C
There are positive absolute constants C,C0,C1,C0′,C1′ and a function η:N→[0,1] with η(n)→0 as n→∞ such that the following holds. Let d=2n, 1≤r≤d, and m≥1 satisfy m≥Crd(logd)6. Sample P1,…,Pm independently and uniformly, with replacement, from all d2 unsigned tensor Pauli operators, including the identity. On the real space of Hermitian matrices define A(X)i=d/mTr(PiX) and A∗(v)=d/m∑iviPi.
With probability at least 1−η(n) over this sampling, simultaneously for every positive semidefinite matrix ρ (without a trace or rank restriction), every z∈Rm, and y=A(ρ)+z, both conclusions below hold. Write ρr for the spectral truncation retaining the largest r eigenvalues, and ρc=ρ−ρr. All optimizations range over Hermitian matrices and permit nonunique minimizers.
For every λ satisfying ∥A∗(z)∥≤λ, the problem minimizing ∥X∥tr subject to ∥A∗(A(X)−y)∥≤λ has a minimizer. Every such minimizer ρDS satisfies
∥ρDS−ρ∥tr≤C0rλ+C1∥ρc∥tr.
For every μ>0 satisfying ∥A∗(z)∥≤μ/2, the problem minimizing 21∥A(X)−y∥22+μ∥X∥tr has a minimizer. Every such minimizer ρLasso satisfies
∥ρLasso−ρ∥tr≤C0′rμ+C1′∥ρc∥tr.
Here ∥⋅∥ is the operator norm, ∥⋅∥2 is the Euclidean vector norm, and ∥X∥tr=TrX†X is the full trace norm. The two bounds separate noise from the spectral tail and apply to full-rank inputs as well as exactly low-rank ones.
Formalization Note The paper's qualitative “high probability” is represented by a vanishing failure function uniform in r,m. Positive Lasso regularization is an explicit correction of the omitted μ=0 domain; the source's regularized recovery argument requires it. This correction, the interpretation of unnormalized PSD inputs, and the qualitative probability convention require independent moderation.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Hamiltonian Simulation by QubitizationResearch Paper
Motivation
Hamiltonian Simulation by Qubitization establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
Let N,d≥1 be the system and auxiliary dimensions. Let U be a unitary on Cd⊗CN, let G be a unitary on Cd, and write ∣g⟩=G∣0⟩. Assume that the computed compression H=(⟨g∣⊗I)U(∣g⟩⊗I) is Hermitian. Access to controlled U,G and their inverses is by black-box queries; arbitrary single- and two-qubit gates are allowed. For real evolution time t and accuracy 0<ε<1, define
Q(t,ε)=min{q∈Z>0:q!2q4∣t∣q≤ε}.
There are positive universal constants cq,Cq,Cg,Cf,Cs and ε0∈(0,1) such that, for every N,d,t,ε, one can choose a circuit independently of the particular U,G that uses at most ⌈log2N⌉+⌈log2d⌉+2 qubits. For every such oracle pair with Hermitian compression, its successful system operator K, obtained by initializing and postselecting all auxiliary wires to zero, satisfies
∥K−JNe−iHt∥op≤ε,1−∥Kψ∥22≤Cfεfor every ψ∈CN with ∥ψ∥2=1,
where JN:CN↪(C2)⊗⌈log2N⌉ is the computational-basis embedding. Thus K includes all possible output amplitudes, even on unused system basis labels. If T is the total number of controlled oracle applications, including inverse applications, and L2 is the number of additional two-qubit gates, the same circuit satisfies
cqQ(t,ε)≤T≤CqQ(t,ε),L2≤CgQ(t,ε)logd.
For 0<ε≤ε0, the factorial scale also satisfies
Q(t,ε)≤Cs(∣t∣+log(1/ε)).
This is the paper's standard-form simulation procedure and resource guarantee. Its claimed optimality is a worst-case assertion over oracle encodings, supported by the sparse specialization on p.16; the displayed lower query inequality describes the chosen procedure rather than requiring every simulator of each individual Hamiltonian to use that many calls.
Formalization Note Finite-register oracles are extended by the identity on the orthogonal complement of their computational encodings, so neither dimension must be a power of two. The error is the spectral norm of the successful operator itself. The printed τ in Eq. (1) is undefined in this model; the exact factorial formula fixes ∣t∣. The proof's internal accuracy is rescaled to order ε2 to recover final error ε, and its odd-term sign is reconciled with the headline's e−iHt.
Target
Theorem 1, Eq. (1)
Let N,d≥1 be the system and auxiliary dimensions. Let U be a unitary on Cd⊗CN, let G be a unitary on Cd, and write ∣g⟩=G∣0⟩. Assume that the computed compression H=(⟨g∣⊗I)U(∣g⟩⊗I) is Hermitian. Access to controlled U,G and their inverses is by black-box queries; arbitrary single- and two-qubit gates are allowed. For real evolution time t and accuracy 0<ε<1, define
Q(t,ε)=min{q∈Z>0:q!2q4∣t∣q≤ε}.
There are positive universal constants cq,Cq,Cg,Cf,Cs and ε0∈(0,1) such that, for every N,d,t,ε, one can choose a circuit independently of the particular U,G that uses at most ⌈log2N⌉+⌈log2d⌉+2 qubits. For every such oracle pair with Hermitian compression, its successful system operator K, obtained by initializing and postselecting all auxiliary wires to zero, satisfies
∥K−JNe−iHt∥op≤ε,1−∥Kψ∥22≤Cfεfor every ψ∈CN with ∥ψ∥2=1,
where JN:CN↪(C2)⊗⌈log2N⌉ is the computational-basis embedding. Thus K includes all possible output amplitudes, even on unused system basis labels. If T is the total number of controlled oracle applications, including inverse applications, and L2 is the number of additional two-qubit gates, the same circuit satisfies
cqQ(t,ε)≤T≤CqQ(t,ε),L2≤CgQ(t,ε)logd.
For 0<ε≤ε0, the factorial scale also satisfies
Q(t,ε)≤Cs(∣t∣+log(1/ε)).
This is the paper's standard-form simulation procedure and resource guarantee. Its claimed optimality is a worst-case assertion over oracle encodings, supported by the sparse specialization on p.16; the displayed lower query inequality describes the chosen procedure rather than requiring every simulator of each individual Hamiltonian to use that many calls.
Formalization Note Finite-register oracles are extended by the identity on the orthogonal complement of their computational encodings, so neither dimension must be a power of two. The error is the spectral norm of the successful operator itself. The printed τ in Eq. (1) is undefined in this model; the exact factorial formula fixes ∣t∣. The proof's internal accuracy is rescaled to order ε2 to recover final error ε, and its odd-term sign is reconciled with the headline's e−iHt.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let n≥0 be an integer, d=2n, and ρ=∣ψ⟩⟨ψ∣ for a normalized n-qubit pure state ∣ψ⟩. Let σ be any density matrix on the same register, possibly mixed. For each phase-free Hermitian Pauli product Wk∈{I,X,Y,Z}⊗n, write χτ(k)=Tr(τWk)/d. The source's fidelity convention is F(ρ,σ)=Tr(ρσ), the square of root fidelity.
Fix ε>0 and 0<δ≤1. Independently draw exactly ℓ=⌈1/(ε2δ)⌉ settings k1,…,kℓ with replacement, each with probability χρ(k)2. Only settings with nonzero target coefficient are drawn. For each draw, measure Wki separately on
mi=⌈dχρ(ki)2ℓε22log(2/δ)⌉
fresh independent copies of σ, obtaining Born-rule outcomes Aij∈{−1,+1}, independent conditional on the settings. Set
This protocol estimates the fidelity to an arbitrary known pure target using single-copy Pauli measurements. Its copy cost is random; no efficient classical sampling bound is claimed for general targets.
Formalization Note The finite experiment space fixes exactly ℓ setting draws and their setting-dependent numbers of outcomes. Its probability weights are products of the target importance law and conditional Pauli outcome laws. The closed interval is not clipped to [0,1].
Target
Fidelity Estimation, equations (3)–(10)
Let n≥0 be an integer, d=2n, and ρ=∣ψ⟩⟨ψ∣ for a normalized n-qubit pure state ∣ψ⟩. Let σ be any density matrix on the same register, possibly mixed. For each phase-free Hermitian Pauli product Wk∈{I,X,Y,Z}⊗n, write χτ(k)=Tr(τWk)/d. The source's fidelity convention is F(ρ,σ)=Tr(ρσ), the square of root fidelity.
Fix ε>0 and 0<δ≤1. Independently draw exactly ℓ=⌈1/(ε2δ)⌉ settings k1,…,kℓ with replacement, each with probability χρ(k)2. Only settings with nonzero target coefficient are drawn. For each draw, measure Wki separately on
mi=⌈dχρ(ki)2ℓε22log(2/δ)⌉
fresh independent copies of σ, obtaining Born-rule outcomes Aij∈{−1,+1}, independent conditional on the settings. Set
This protocol estimates the fidelity to an arbitrary known pure target using single-copy Pauli measurements. Its copy cost is random; no efficient classical sampling bound is claimed for general targets.
Formalization Note The finite experiment space fixes exactly ℓ setting draws and their setting-dependent numbers of outcomes. Its probability weights are products of the target importance law and conditional Pauli outcome laws. The closed interval is not clipped to [0,1].
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let n,l≥0 be integers, L=2l+1, and δ∈[0,1]. Let A be a unitary on n qubits, ∣s⟩=A∣0⟩⊗n, and let ∣T⟩ be a unit vector with λ=∣⟨T∣s⟩∣2>0. The supplied target oracle is
U=I+∣T⟩⟨T∣⊗(X−I),
where X flips the additional qubit: U flips it on ∣T⟩ and acts identically on the orthogonal complement.
Define γ=1/cosh(arcosh(1/δ)/L) for δ>0, and γ=0 for δ=0. For j=1,…,l, set
αj=2(2π−arctan(tan(2πj/L)1−γ2)),βj=−αl−j+1.
With Ss(α)=I−(1−e−iα)∣s⟩⟨s∣, ST(β)=I−(1−eiβ)∣T⟩⟨T∣, and G(α,β)=−Ss(α)ST(β), define SL=G(αl,βl)⋯G(α1,β1); the empty product is I.
There is an absolute constant C>0 such that, for each n,l,δ, a single circuit template chosen before A,T,U implements SL up to a global phase on every data vector, returning its one ancillary qubit to ∣0⟩. It uses exactly 2l=L−1 plain U queries and 2l total calls to A or A†, no controlled oracle calls, and at most Cl(n+1)2 elementary gates from arbitrary single-qubit unitaries and CNOT. Preparation of the supplied input ∣s⟩ is outside these counts. Oracle calls are charged separately from elementary gates.
Writing TL for the Chebyshev polynomial of the first kind, both the constructed sequence and this physical circuit have target success probability
The guaranteed interval gives fixed-point amplitude amplification with an adjustable failure tolerance and exactly L−1 target-oracle queries. The endpoints l=0, λ=1, n=0, and δ=0,1 are included.
Formalization Note The joint overlap with ∣T⟩∣0⟩ is the physical success probability because the ancillary qubit is returned clean. The endpoint δ=0 uses the continuous limiting polynomial confirmed on PDF p.4, rather than division by zero.
Target
Equation (1); PDF p.2 uniform bound; p.3 Eqs. (10)–(11), Fig.2
Let n,l≥0 be integers, L=2l+1, and δ∈[0,1]. Let A be a unitary on n qubits, ∣s⟩=A∣0⟩⊗n, and let ∣T⟩ be a unit vector with λ=∣⟨T∣s⟩∣2>0. The supplied target oracle is
U=I+∣T⟩⟨T∣⊗(X−I),
where X flips the additional qubit: U flips it on ∣T⟩ and acts identically on the orthogonal complement.
Define γ=1/cosh(arcosh(1/δ)/L) for δ>0, and γ=0 for δ=0. For j=1,…,l, set
αj=2(2π−arctan(tan(2πj/L)1−γ2)),βj=−αl−j+1.
With Ss(α)=I−(1−e−iα)∣s⟩⟨s∣, ST(β)=I−(1−eiβ)∣T⟩⟨T∣, and G(α,β)=−Ss(α)ST(β), define SL=G(αl,βl)⋯G(α1,β1); the empty product is I.
There is an absolute constant C>0 such that, for each n,l,δ, a single circuit template chosen before A,T,U implements SL up to a global phase on every data vector, returning its one ancillary qubit to ∣0⟩. It uses exactly 2l=L−1 plain U queries and 2l total calls to A or A†, no controlled oracle calls, and at most Cl(n+1)2 elementary gates from arbitrary single-qubit unitaries and CNOT. Preparation of the supplied input ∣s⟩ is outside these counts. Oracle calls are charged separately from elementary gates.
Writing TL for the Chebyshev polynomial of the first kind, both the constructed sequence and this physical circuit have target success probability
The guaranteed interval gives fixed-point amplitude amplification with an adjustable failure tolerance and exactly L−1 target-oracle queries. The endpoints l=0, λ=1, n=0, and δ=0,1 are included.
Formalization Note The joint overlap with ∣T⟩∣0⟩ is the physical success probability because the ancillary qubit is returned clean. The endpoint δ=0 uses the continuous limiting polynomial confirmed on PDF p.4, rather than division by zero.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Generalized Quantum Signal ProcessingResearch Paper
Motivation
Generalized Quantum Signal Processing establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
Let d∈N and let P,Q∈C[x] be prescribed ordinary complex polynomials. For real angles define
R(θ,ϕ,λ)=(ei(λ+ϕ)cosθeiλsinθeiϕsinθ−cosθ).
For any positive integer N and any unitary N×N matrix U, put A(U)=diag(U,IN), with the control qubit as the first tensor factor, and
When d=0, this is just the initial rotation tensored with IN. There exist real vectors θ,ϕ∈Rd+1 and a real λ, chosen independently of N and U, such that
Sd(U)=(P(U)Q(U)∗∗)for every N≥1 and every unitary U
if and only if
degP≤d,degQ≤d,∣P(z)∣2+∣Q(z)∣2=1for every z∈C with ∣z∣=1.
Here P(U) and Q(U) denote polynomial evaluation at the matrix U, and the stars leave the second-column blocks unspecified. The zero polynomial satisfies the degree bound.
This theorem characterizes exactly the polynomial pairs synthesized by d forward signal applications and d+1 rotations; it imposes no real-coefficient or parity restriction.
Formalization Note Universal finite-dimensional unitary realization expresses the polynomial identity used by the proof; in particular, it includes every scalar unitary U=[z]. The rotation is the matrix printed in equation (6), without a determinant-one constraint.
Target
Theorem 3 (Generalized Quantum Signal Processing), Section III, equation (7)
Let d∈N and let P,Q∈C[x] be prescribed ordinary complex polynomials. For real angles define
R(θ,ϕ,λ)=(ei(λ+ϕ)cosθeiλsinθeiϕsinθ−cosθ).
For any positive integer N and any unitary N×N matrix U, put A(U)=diag(U,IN), with the control qubit as the first tensor factor, and
When d=0, this is just the initial rotation tensored with IN. There exist real vectors θ,ϕ∈Rd+1 and a real λ, chosen independently of N and U, such that
Sd(U)=(P(U)Q(U)∗∗)for every N≥1 and every unitary U
if and only if
degP≤d,degQ≤d,∣P(z)∣2+∣Q(z)∣2=1for every z∈C with ∣z∣=1.
Here P(U) and Q(U) denote polynomial evaluation at the matrix U, and the stars leave the second-column blocks unspecified. The zero polynomial satisfies the degree bound.
This theorem characterizes exactly the polynomial pairs synthesized by d forward signal applications and d+1 rotations; it imposes no real-coefficient or parity restriction.
Formalization Note Universal finite-dimensional unitary realization expresses the polynomial identity used by the proof; in particular, it includes every scalar unitary U=[z]. The rotation is the matrix printed in equation (6), without a determinant-one constraint.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the one-copy certification theorem of Gupta, He and O'Donnell.
Access model. For n≥1 qubits, the algorithm accesses a pure hypothesis state ∣hyp⟩∈(C2)⊗n, ∥∣hyp⟩∥=1, only through queries of Definition 15: for single-qubit projectors Π1,…,Πn on C2 (each Πk=Πk†=Πk2, the identity allowed), the query returns ⟨hyp∣Π1⊗⋯⊗Πn∣hyp⟩. It also flips fair coins, and it touches its single copy of the unknown n-qubit mixed state ρlab (positive semidefinite, trace one) only by projective measurements of one qubit at a time in an orthonormal basis {U∣0⟩,U∣1⟩}; the qubit, the basis, the queries and the coins may all depend adaptively on everything seen so far.
Theorem. There exist such an algorithm An for every n and a constant C, chosen before ∣hyp⟩ and ρlab, such that for every n≥1, every run of An makes at most Cn query, coin and measurement steps, and for every ∣hyp⟩ and ρlab, writing Fid=⟨hyp∣ρlab∣hyp⟩,
Repeating this test O(nε−1ln(1/δ)) times and applying a Chernoff bound gives the paper's Main Theorem: certification of every pure state with O(n2) single-qubit measurements on O(n) copies.
Formalization Note The output probability is computed on subnormalized post-measurement states (Lüders rule without renormalization). The running time is modelled by the number of query, coin and measurement steps on every execution path; classical post-processing between steps is not charged, which matches the source's O(1) per-step cost only up to this modelling choice.
Target
Theorem 1
This is the one-copy certification theorem of Gupta, He and O'Donnell.
Access model. For n≥1 qubits, the algorithm accesses a pure hypothesis state ∣hyp⟩∈(C2)⊗n, ∥∣hyp⟩∥=1, only through queries of Definition 15: for single-qubit projectors Π1,…,Πn on C2 (each Πk=Πk†=Πk2, the identity allowed), the query returns ⟨hyp∣Π1⊗⋯⊗Πn∣hyp⟩. It also flips fair coins, and it touches its single copy of the unknown n-qubit mixed state ρlab (positive semidefinite, trace one) only by projective measurements of one qubit at a time in an orthonormal basis {U∣0⟩,U∣1⟩}; the qubit, the basis, the queries and the coins may all depend adaptively on everything seen so far.
Theorem. There exist such an algorithm An for every n and a constant C, chosen before ∣hyp⟩ and ρlab, such that for every n≥1, every run of An makes at most Cn query, coin and measurement steps, and for every ∣hyp⟩ and ρlab, writing Fid=⟨hyp∣ρlab∣hyp⟩,
Repeating this test O(nε−1ln(1/δ)) times and applying a Chernoff bound gives the paper's Main Theorem: certification of every pure state with O(n2) single-qubit measurements on O(n) copies.
Formalization Note The output probability is computed on subnormalized post-measurement states (Lüders rule without renormalization). The running time is modelled by the number of query, coin and measurement steps on every execution path; classical post-processing between steps is not charged, which matches the source's O(1) per-step cost only up to this modelling choice.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the main theorem of Aaronson and Rall: approximate counting with the optimal query complexity, using Grover iterations only (no quantum Fourier transform).
Let S⊆[N] be a nonempty set of marked items and K=∣S∣. The algorithm (AR p.4) pads the list with 106N unmarked items, giving N′=(106+1)N items. Let U∣x⟩=(−1)[x∈S]∣x⟩ be the membership (phase) oracle, ∣ψ⟩ the uniform superposition over the N′ items, and G=(I−2∣ψ⟩⟨ψ∣)U. The only quantum operation is: prepare G(r−1)/2∣ψ⟩ for an odd r and measure it in the computational basis, at a cost of (r−1)/2 queries.
Step 1: for k=0,1,2,…, take rk to be the largest odd integer ≤1.05k. Run ⌈5000ln(5/δ)⌉ shots, and stop at the first k=kend at which at least 95% of the shots return a marked item.
Step 2: start from θmin=0.9⋅1.05−kend and θmax=1.65θmin. In round t, choose rt by the rotation lemma (eqs. (45)–(47)) and run ⌈250ln(1/δt)⌉ shots, where δt=(δε/65)0.9−t. With γ=θmax/θmin−1: if at least 12% of the shots are marked, set θmin:=θmax/(1+0.9γ); otherwise set θmax:=(1+0.9γ)θmin. Stop as soon as θmax≤(1+ε/5)θmin.
Output K^=N′sin2(θmax).
The theorem has three parts.
There is a function Q(N,K,ε,δ) and constants C>0, ε0>0, δ0∈(0,1) such that for all 1≤K≤N, all ε∈(0,ε0] and all δ∈(0,δ0],
Q(N,K,ε,δ)≤CN/Kε−1ln(1/δ).
For every N, every nonempty S and all ε,δ>0,
Pr[K(1−ε)<K^<K(1+ε) and the run makes fewer than Q(N,K,ε,δ) queries]≥1−δ.
The register of the algorithm, [N′], needs ⌈log2N′⌉=O(logN) qubits.
The function Q and the constants are fixed before N, S, ε and δ. The result matches the BHMT query complexity O(ε−1N/K) for approximate counting, and it is the basis of QFT-free amplitude estimation.
Formalization Note The theorem is stated for the paper's concrete algorithm (the frozen definitions acEventProb, acStep1Exit, acStep2), with every shot count "at least m" taken as exactly ⌈m⌉ and Mathlib's round used for the rotation lemma's roundings (the paper allows any tie-breaking). The sentence "fewer than Q queries whenever the estimate is accurate" is formalized as the joint event of accuracy and fewer than Q queries, which is what the proof establishes. That event implies the accuracy claim. The O-bound is uniform in N and K as ε,δ→0.
Target
Theorem 1
This is the main theorem of Aaronson and Rall: approximate counting with the optimal query complexity, using Grover iterations only (no quantum Fourier transform).
Let S⊆[N] be a nonempty set of marked items and K=∣S∣. The algorithm (AR p.4) pads the list with 106N unmarked items, giving N′=(106+1)N items. Let U∣x⟩=(−1)[x∈S]∣x⟩ be the membership (phase) oracle, ∣ψ⟩ the uniform superposition over the N′ items, and G=(I−2∣ψ⟩⟨ψ∣)U. The only quantum operation is: prepare G(r−1)/2∣ψ⟩ for an odd r and measure it in the computational basis, at a cost of (r−1)/2 queries.
Step 1: for k=0,1,2,…, take rk to be the largest odd integer ≤1.05k. Run ⌈5000ln(5/δ)⌉ shots, and stop at the first k=kend at which at least 95% of the shots return a marked item.
Step 2: start from θmin=0.9⋅1.05−kend and θmax=1.65θmin. In round t, choose rt by the rotation lemma (eqs. (45)–(47)) and run ⌈250ln(1/δt)⌉ shots, where δt=(δε/65)0.9−t. With γ=θmax/θmin−1: if at least 12% of the shots are marked, set θmin:=θmax/(1+0.9γ); otherwise set θmax:=(1+0.9γ)θmin. Stop as soon as θmax≤(1+ε/5)θmin.
Output K^=N′sin2(θmax).
The theorem has three parts.
There is a function Q(N,K,ε,δ) and constants C>0, ε0>0, δ0∈(0,1) such that for all 1≤K≤N, all ε∈(0,ε0] and all δ∈(0,δ0],
Q(N,K,ε,δ)≤CN/Kε−1ln(1/δ).
For every N, every nonempty S and all ε,δ>0,
Pr[K(1−ε)<K^<K(1+ε) and the run makes fewer than Q(N,K,ε,δ) queries]≥1−δ.
The register of the algorithm, [N′], needs ⌈log2N′⌉=O(logN) qubits.
The function Q and the constants are fixed before N, S, ε and δ. The result matches the BHMT query complexity O(ε−1N/K) for approximate counting, and it is the basis of QFT-free amplitude estimation.
Formalization Note The theorem is stated for the paper's concrete algorithm (the frozen definitions acEventProb, acStep1Exit, acStep2), with every shot count "at least m" taken as exactly ⌈m⌉ and Mathlib's round used for the rotation lemma's roundings (the paper allows any tie-breaking). The sentence "fewer than Q queries whenever the estimate is accurate" is formalized as the joint event of accuracy and fewer than Q queries, which is what the proof establishes. That event implies the accuracy claim. The O-bound is uniform in N and K as ε,δ→0.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is Montanaro's theorem on learning stabilizer states by Bell sampling.
A stabilizer state of n qubits is a unit vector ∣ψ⟩∈(C2)⊗n for which there is a commuting subgroup G of the n-qubit Pauli group, not containing −I, with ∣G∣=2n and M∣ψ⟩=∣ψ⟩ for all M∈G. A learner proceeds in rounds; each round takes some fresh copies of the unknown state together with ancilla qubits in ∣0⟩, applies a circuit of gates from {H,T,CNOT} whose gates may be switched on or off by bits computed (by Boolean circuits) from the outcomes of earlier rounds, and measures all its qubits in the computational basis. At the end a Boolean circuit maps all outcomes to a stabilizer tableau T, i.e. n signed Pauli strings P1,…,Pn, whose associated projector is ΠT=∏j21(I+Pj). The time of the learner is the total number of quantum gates, ancilla qubits and classical Boolean gates.
There are constants C>0, c>0 and N0 such that for every n≥N0 there is a single learner L, fixed independently of the unknown state, with the following properties:
every round of L acts on at most two copies of the state;
L uses at most Cn copies in total;
L runs in time at most Cn3;
for every n-qubit stabilizer state ∣ψ⟩,
Pr[L outputs T with ΠT=∣ψ⟩⟨ψ∣]≥1−e−cn.
The paper's Algorithm 1 achieves this with 5n+2 copies (Bell sampling on 2n+1 pairs, then single-copy Pauli measurements to fix the signs) and failure probability at most 2−n. The copy count matches the information-theoretic lower bound Ω(n) while acting on only two copies at a time.
Formalization Note Identification is up to global phase, as in the source: success is equality of the projector of the output tableau with ∣ψ⟩⟨ψ∣. The learner family over n is not required to be uniformly generated, since the theorem names no uniformity notion.
Target
Theorem 1
This is Montanaro's theorem on learning stabilizer states by Bell sampling.
A stabilizer state of n qubits is a unit vector ∣ψ⟩∈(C2)⊗n for which there is a commuting subgroup G of the n-qubit Pauli group, not containing −I, with ∣G∣=2n and M∣ψ⟩=∣ψ⟩ for all M∈G. A learner proceeds in rounds; each round takes some fresh copies of the unknown state together with ancilla qubits in ∣0⟩, applies a circuit of gates from {H,T,CNOT} whose gates may be switched on or off by bits computed (by Boolean circuits) from the outcomes of earlier rounds, and measures all its qubits in the computational basis. At the end a Boolean circuit maps all outcomes to a stabilizer tableau T, i.e. n signed Pauli strings P1,…,Pn, whose associated projector is ΠT=∏j21(I+Pj). The time of the learner is the total number of quantum gates, ancilla qubits and classical Boolean gates.
There are constants C>0, c>0 and N0 such that for every n≥N0 there is a single learner L, fixed independently of the unknown state, with the following properties:
every round of L acts on at most two copies of the state;
L uses at most Cn copies in total;
L runs in time at most Cn3;
for every n-qubit stabilizer state ∣ψ⟩,
Pr[L outputs T with ΠT=∣ψ⟩⟨ψ∣]≥1−e−cn.
The paper's Algorithm 1 achieves this with 5n+2 copies (Bell sampling on 2n+1 pairs, then single-copy Pauli measurements to fix the signs) and failure probability at most 2−n. The copy count matches the information-theoretic lower bound Ω(n) while acting on only two copies at a time.
Formalization Note Identification is up to global phase, as in the source: success is equality of the projector of the output tableau with ∣ψ⟩⟨ψ∣. The learner family over n is not required to be uniformly generated, since the theorem names no uniformity notion.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
where a∈[0,1] is unknown and ∣ψ0⟩,∣ψ1⟩ are unit vectors (not necessarily orthogonal); the last qubit is the flag qubit. Let θa=arcsina, so a=sin2θa, and let Q=AS0A†Sψ0 with S0=I−2∣0⟩⟨0∣n+1 and Sψ0=I−2∣ψ0⟩⟨ψ0∣⊗∣0⟩⟨0∣.
Run Iterative Quantum Amplitude Estimation (Algorithm 1 with the subroutine FindNextK, r=2) with Clopper–Pearson confidence intervals at per-round level α/T, where T=⌈log2(π/(8ε))⌉; each iteration measures the flag qubit of QkiA∣0⟩ a number of times and updates a confidence interval [θl,θu] for θa. Fix α=1/20, a target accuracy 2−200≤ε<π/8, and an integer number of shots 1≤Nshots≤Nmax(ε,α), where
Nmax(ε,α)=69log(α2log24επ).
Then:
the algorithm performs at most T rounds (a round is the set of iterations with the same power ki), each round has at most Nmax/Nshots iterations, and in particular the algorithm has terminated after T⌊Nmax/Nshots⌋ iterations;
on every run, θu−θl≤2ε and au−al≤2ε, where [al,au]=[sin2θl,sin2θu] is the returned interval;
Pr[θa∈/[θl,θu]]≤α;
Pr[a∈/[al,au]]≤α;
Pr[∣a−a~∣>ε]≤α for the estimate a~=(al+au)/2;
on every run the total number of applications of Q, Noracle=∑iNiki, satisfies
Noracle<ε14log(α2log24επ).
This is the Clopper–Pearson variant of the correctness theorem of IQAE: amplitude estimation without phase estimation, with a quadratic speedup over Monte Carlo up to a double-logarithmic factor and explicit small constants.
Formalization Note The algorithm is a Markov chain on its classical state; shot counts are binomial with the exact quantum probability of the flag outcome. The chain is run for T⌊Nmax/Nshots⌋+1 steps (the last step only evaluates the loop condition) and every reachable state must be halted. Two corrections of the page: the Clopper–Pearson bounds are used in their standard orientation (the paper prints amin and amax swapped in (C5)–(C6) and Alg. 1), and ε<π/8 is assumed, since for π/8≤ε<π/4 the printed algorithm has T=0 while its loop still runs.
Target
Appendix C, Theorem 2
Let A be a unitary on n+1 qubits such that
A∣0⟩n∣0⟩=1−a∣ψ0⟩n∣0⟩+a∣ψ1⟩n∣1⟩,
where a∈[0,1] is unknown and ∣ψ0⟩,∣ψ1⟩ are unit vectors (not necessarily orthogonal); the last qubit is the flag qubit. Let θa=arcsina, so a=sin2θa, and let Q=AS0A†Sψ0 with S0=I−2∣0⟩⟨0∣n+1 and Sψ0=I−2∣ψ0⟩⟨ψ0∣⊗∣0⟩⟨0∣.
Run Iterative Quantum Amplitude Estimation (Algorithm 1 with the subroutine FindNextK, r=2) with Clopper–Pearson confidence intervals at per-round level α/T, where T=⌈log2(π/(8ε))⌉; each iteration measures the flag qubit of QkiA∣0⟩ a number of times and updates a confidence interval [θl,θu] for θa. Fix α=1/20, a target accuracy 2−200≤ε<π/8, and an integer number of shots 1≤Nshots≤Nmax(ε,α), where
Nmax(ε,α)=69log(α2log24επ).
Then:
the algorithm performs at most T rounds (a round is the set of iterations with the same power ki), each round has at most Nmax/Nshots iterations, and in particular the algorithm has terminated after T⌊Nmax/Nshots⌋ iterations;
on every run, θu−θl≤2ε and au−al≤2ε, where [al,au]=[sin2θl,sin2θu] is the returned interval;
Pr[θa∈/[θl,θu]]≤α;
Pr[a∈/[al,au]]≤α;
Pr[∣a−a~∣>ε]≤α for the estimate a~=(al+au)/2;
on every run the total number of applications of Q, Noracle=∑iNiki, satisfies
Noracle<ε14log(α2log24επ).
This is the Clopper–Pearson variant of the correctness theorem of IQAE: amplitude estimation without phase estimation, with a quadratic speedup over Monte Carlo up to a double-logarithmic factor and explicit small constants.
Formalization Note The algorithm is a Markov chain on its classical state; shot counts are binomial with the exact quantum probability of the flag outcome. The chain is run for T⌊Nmax/Nshots⌋+1 steps (the last step only evaluates the loop condition) and every reachable state must be halted. Two corrections of the page: the Clopper–Pearson bounds are used in their standard orientation (the paper prints amin and amax swapped in (C5)–(C6) and Alg. 1), and ε<π/8 is assumed, since for π/8≤ε<π/4 the printed algorithm has T=0 while its loop still runs.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the semicircle law of decoded quantum interferometry (DQI) with perfect decoding.
Let p be a prime and r∈{1,…,p−1}. A max-LINSAT instance consists of a matrix B∈Fpm×n with rows b1,…,bm and subsets F1,…,Fm⊆Fp; constraint i is bi⋅x∈Fi for x∈Fpn. Put fi=+1 on Fi and −1 off it, and f(x)=∑ifi(bi⋅x). For a polynomial P with complex coefficients the DQI state is ∣P(f)⟩=∑x∈FpnP(f(x))∣x⟩. Let ⟨s⟩opt(ℓ) be the supremum, over all P of degree at most ℓ with ∥∣P(f)⟩∥=1, of the expected number of satisfied constraints when ∣P(f)⟩ is measured in the computational basis (outcome x with probability ∣P(f(x))∣2). Let d⊥ be the minimum Hamming weight of a nonzero codeword of C⊥={d∈Fpm:BTd=0}.
Fix μ≥0 and write ρ=r/p. Consider instances with ∣Fi∣=r for all i, m>n, ℓ=μm and 2ℓ+1<d⊥. Then, as m→∞,
uniformly over such instances: for every ε>0 there is M such that every such instance with m≥M has ⟨s⟩opt(ℓ)/m within ε of the right-hand side.
The theorem converts any decoding guarantee for the code C⊥ out to ℓ errors into an approximation guarantee for max-LINSAT, and it is the basis of the paper's comparison of DQI with classical optimizers (e.g. on Optimal Polynomial Intersection).
Formalization Note The source's limit over an arbitrary sequence of instances is stated in the equivalent uniform ε–M form, with M chosen after p,r,μ,ε and before the instance. The hypothesis m>n is taken from Lemma 9.2, on which the source's proof of the theorem rests. The optimum is over polynomials of degree at most ℓ (as in the proof, which optimizes over all unit coefficient vectors w∈Cℓ+1); ℓ=μm is required exactly, so values of μ for which μm is never an integer make the statement vacuous, as in the source.
Target
Theorem 4.1
This is the semicircle law of decoded quantum interferometry (DQI) with perfect decoding.
Let p be a prime and r∈{1,…,p−1}. A max-LINSAT instance consists of a matrix B∈Fpm×n with rows b1,…,bm and subsets F1,…,Fm⊆Fp; constraint i is bi⋅x∈Fi for x∈Fpn. Put fi=+1 on Fi and −1 off it, and f(x)=∑ifi(bi⋅x). For a polynomial P with complex coefficients the DQI state is ∣P(f)⟩=∑x∈FpnP(f(x))∣x⟩. Let ⟨s⟩opt(ℓ) be the supremum, over all P of degree at most ℓ with ∥∣P(f)⟩∥=1, of the expected number of satisfied constraints when ∣P(f)⟩ is measured in the computational basis (outcome x with probability ∣P(f(x))∣2). Let d⊥ be the minimum Hamming weight of a nonzero codeword of C⊥={d∈Fpm:BTd=0}.
Fix μ≥0 and write ρ=r/p. Consider instances with ∣Fi∣=r for all i, m>n, ℓ=μm and 2ℓ+1<d⊥. Then, as m→∞,
uniformly over such instances: for every ε>0 there is M such that every such instance with m≥M has ⟨s⟩opt(ℓ)/m within ε of the right-hand side.
The theorem converts any decoding guarantee for the code C⊥ out to ℓ errors into an approximation guarantee for max-LINSAT, and it is the basis of the paper's comparison of DQI with classical optimizers (e.g. on Optimal Polynomial Intersection).
Formalization Note The source's limit over an arbitrary sequence of instances is stated in the equivalent uniform ε–M form, with M chosen after p,r,μ,ε and before the instance. The hypothesis m>n is taken from Lemma 9.2, on which the source's proof of the theorem rests. The optimum is over polynomials of degree at most ℓ (as in the proof, which optimizes over all unit coefficient vectors w∈Cℓ+1); ℓ=μm is required exactly, so values of μ for which μm is never an integer make the statement vacuous, as in the source.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let (Gj) be any family of finite nonempty connected undirected unweighted simple cubic graphs, with Nj→∞. For each graph, choose a root and construct the one-round lightcone-ZY schedule Sj by recursive BFS, resolving unspecified ties by vertex labels. Each schedule starts in ∣+⟩⊗Nj and uses one gate e−iθZiYj/2 per directed edge, with a common real angle. Let L0(G,S;θ) be the expected cut computed by the isolated-boundary 0-local prescription, Cmax(G) the attained maximum cut, α0(G,S)=maxθL0(G,S;θ)/Cmax(G), and b0(G,S)=maxθL0(G,S;θ)/∣E(G)∣. Let N+(S) count the zero-in-degree vertices and put
For every ε>0, there is j0 such that for all j≥j0,
α0(Gj,Sj)≥B(kj)−ε,∣b0(Gj,Sj)−B(kj)∣≤ε,
and every arbitrary one-round orientation and gate order S on Gj with N+(S)=N+(Sj) satisfies
b0(Gj,S)≤B(kj)+ε.
Thus the lightcone schedule attains the asymptotically optimal edge-count certificate at its source count. The pointwise guarantee gives the corresponding worst-case guarantee over graph classes. Source density need not converge. Optimality concerns this certificate; it does not identify the full-circuit ratio with the certificate.
Target
Theorem 1, equation (7); proof pp.20–22
Let (Gj) be any family of finite nonempty connected undirected unweighted simple cubic graphs, with Nj→∞. For each graph, choose a root and construct the one-round lightcone-ZY schedule Sj by recursive BFS, resolving unspecified ties by vertex labels. Each schedule starts in ∣+⟩⊗Nj and uses one gate e−iθZiYj/2 per directed edge, with a common real angle. Let L0(G,S;θ) be the expected cut computed by the isolated-boundary 0-local prescription, Cmax(G) the attained maximum cut, α0(G,S)=maxθL0(G,S;θ)/Cmax(G), and b0(G,S)=maxθL0(G,S;θ)/∣E(G)∣. Let N+(S) count the zero-in-degree vertices and put
For every ε>0, there is j0 such that for all j≥j0,
α0(Gj,Sj)≥B(kj)−ε,∣b0(Gj,Sj)−B(kj)∣≤ε,
and every arbitrary one-round orientation and gate order S on Gj with N+(S)=N+(Sj) satisfies
b0(Gj,S)≤B(kj)+ε.
Thus the lightcone schedule attains the asymptotically optimal edge-count certificate at its source count. The pointwise guarantee gives the corresponding worst-case guarantee over graph classes. Source density need not converge. Optimality concerns this certificate; it does not identify the full-circuit ratio with the certificate.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let C be a class of concepts c:{0,1}n→{0,1}. Write T(C) for the classical sample complexity of exact learning C from membership queries: the least T such that some randomized algorithm (a probability distribution over adaptive query trees) asking at most T membership queries x↦c(x) outputs the target c with probability at least 2/3, for every c∈C. For C′⊆C, a∈{0,1}n and b∈{0,1} let γ⟨a,b⟩C′=∣{c∈C′:c(a)=b}∣/∣C′∣, and for ∣C∣≥2 put
There are absolute constants K1,K2,K3>0, independent of n and C, such that for every n and every class C:
(Lemma 4) if ∣C∣≥2, then T(C)≥K1/γ^C;
(Lemma 8) T(C)≥K2log2∣C∣;
(Lemma 11) if ∣C∣≥2, then T(C)≤K3log2∣C∣/γ^C.
That is, T(C)=Ω(1/γ^C), T(C)=Ω(log∣C∣) and T(C)=O(log∣C∣/γ^C). These are the classical bounds that, combined with their quantum analogues, show that quantum and classical exact learning from membership queries are polynomially equivalent in query complexity.
Formalization Noteγ^C is the frozen gammaParam, which is only meaningful for ∣C∣≥2; that hypothesis is explicit. In (2) the cases ∣C∣≤1 are harmless since log0=log1=0 in Lean. The query bound is required on every input string rather than only on targets in C; the resulting complexities coincide.
Target
Lemmas 4, 8, 11
Let C be a class of concepts c:{0,1}n→{0,1}. Write T(C) for the classical sample complexity of exact learning C from membership queries: the least T such that some randomized algorithm (a probability distribution over adaptive query trees) asking at most T membership queries x↦c(x) outputs the target c with probability at least 2/3, for every c∈C. For C′⊆C, a∈{0,1}n and b∈{0,1} let γ⟨a,b⟩C′=∣{c∈C′:c(a)=b}∣/∣C′∣, and for ∣C∣≥2 put
There are absolute constants K1,K2,K3>0, independent of n and C, such that for every n and every class C:
(Lemma 4) if ∣C∣≥2, then T(C)≥K1/γ^C;
(Lemma 8) T(C)≥K2log2∣C∣;
(Lemma 11) if ∣C∣≥2, then T(C)≤K3log2∣C∣/γ^C.
That is, T(C)=Ω(1/γ^C), T(C)=Ω(log∣C∣) and T(C)=O(log∣C∣/γ^C). These are the classical bounds that, combined with their quantum analogues, show that quantum and classical exact learning from membership queries are polynomially equivalent in query complexity.
Formalization Noteγ^C is the frozen gammaParam, which is only meaningful for ∣C∣≥2; that hypothesis is explicit. In (2) the cases ∣C∣≤1 are harmless since log0=log1=0 in Lean. The query bound is required on every input string rather than only on targets in C; the resulting complexities coincide.
Observation 17
A Blum integer is N=pq with p=qℓ-bit primes, p≡q≡3(mod4). Assume that no polynomial-time classical randomized algorithm factors a uniformly random Blum integer with non-negligible success probability: for every such algorithm A and every polynomial q, for all sufficiently large ℓ,
NPr[A(N) outputs a nontrivial factor of N]<q(ℓ)+11.
Then there is a concept class C=⋃n≥1Cn, Cn a set of Boolean functions on {0,1}n, such that:
C is efficiently quantum PAC learnable: for all n≥1 and accuracy and confidence parameters there is a quantum network over {H,T,CNOT} whose T quantum example gates QEX(c,D):∣0n,0⟩↦∑xD(x)∣x,c(x)⟩ sit at the bottom of the circuit, of size polynomial in n,1/ε,1/δ, which for every c∈Cn and every distribution D on {0,1}n outputs, with probability at least 1−δ, a Boolean circuit h with Prx∼D[h(x)=c(x)]≤ε;
C is not efficiently classically PAC learnable: no probabilistic Turing machine running in time polynomial in n,1/ε,1/δ achieves the same guarantee from independent labelled examples ⟨x,c(x)⟩, x∼D.
This shows that the information-theoretic equivalence of quantum and classical PAC learning does not extend to computationally efficient learning, under a standard cryptographic assumption.
Formalization Noteε=1/a and δ=1/b with integers a,b≥2, and polynomials in (n,1/ε,1/δ) are polynomials in n+a+b; this is equivalent up to polynomial factors. As in the source, the quantum learner is a non-uniform family of networks while the classical learner is a uniform machine.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the eigenstate filtering theorem of Lin and Tong.
An (m+n)-qubit unitary U is an (α,m,ε)-block-encoding of an n-qubit operator A if
A−α(⟨0m∣⊗I)U(∣0m⟩⊗I)≤ε,
where ∥⋅∥ is the operator norm and the m ancilla qubits form the first register. For a Hermitian n-qubit matrix H and a real number λ, let Pλ be the orthogonal projector onto the λ-eigenspace of H (which may be degenerate).
There are absolute constants C>0 and ε0∈(0,1) such that the following holds. For all n,m∈N and all reals α>0, Δ>0, λ and ε∈(0,ε0], there is a quantum circuit C on m+2+n qubits, built from two-qubit gates and black-box applications (possibly controlled, possibly inverted) of an (m+n)-qubit unitary UH, which uses
#queries≤CΔαlogε1,#other gates≤C(m+1)Δαlogε1,
and such that for every Hermitian H and every (α,m,0)-block-encoding UH of H for which λ is an eigenvalue of H with every other eigenvalue μ satisfying ∣μ−λ∣≥Δ, the unitary C[UH] is a (1,m+2,ε)-block-encoding of Pλ.
Applied to an initial state with overlap γ with the λ-eigenspace, this prepares the target eigenstate with logarithmic dependence on the precision; the paper uses it to solve the quantum linear systems problem with near-optimal query complexity.
Formalization Note The circuit depends only on the known data n,m,α,Δ,λ,ε, not on H or UH. Primitive gates are taken to be arbitrary two-qubit unitaries (the source does not fix a gate set and assumes exact phase factors). The printed gate bound O((mα/Δ)log(1/ε)) is stated with m+1 in place of m: at m=0 the printed bound would force zero gates, while the source's own Theorem 1' gives O((m+1)ℓ) gates.
Target
Theorem 3
This is the eigenstate filtering theorem of Lin and Tong.
An (m+n)-qubit unitary U is an (α,m,ε)-block-encoding of an n-qubit operator A if
A−α(⟨0m∣⊗I)U(∣0m⟩⊗I)≤ε,
where ∥⋅∥ is the operator norm and the m ancilla qubits form the first register. For a Hermitian n-qubit matrix H and a real number λ, let Pλ be the orthogonal projector onto the λ-eigenspace of H (which may be degenerate).
There are absolute constants C>0 and ε0∈(0,1) such that the following holds. For all n,m∈N and all reals α>0, Δ>0, λ and ε∈(0,ε0], there is a quantum circuit C on m+2+n qubits, built from two-qubit gates and black-box applications (possibly controlled, possibly inverted) of an (m+n)-qubit unitary UH, which uses
#queries≤CΔαlogε1,#other gates≤C(m+1)Δαlogε1,
and such that for every Hermitian H and every (α,m,0)-block-encoding UH of H for which λ is an eigenvalue of H with every other eigenvalue μ satisfying ∣μ−λ∣≥Δ, the unitary C[UH] is a (1,m+2,ε)-block-encoding of Pλ.
Applied to an initial state with overlap γ with the λ-eigenspace, this prepares the target eigenstate with logarithmic dependence on the precision; the paper uses it to solve the quantum linear systems problem with near-optimal query complexity.
Formalization Note The circuit depends only on the known data n,m,α,Δ,λ,ε, not on H or UH. Primitive gates are taken to be arbitrary two-qubit unitaries (the source does not fix a gate set and assumes exact phase factors). The printed gate bound O((mα/Δ)log(1/ε)) is stated with m+1 in place of m: at m=0 the printed bound would force zero gates, while the source's own Theorem 1' gives O((m+1)ℓ) gates.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Quantum Tanner codes (Leverrier, Zemor)Research Paper
Motivation
Quantum Tanner codes (Leverrier, Zemor) establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
This is the main technical theorem behind quantum Tanner codes.
Setting. Let G be a finite group and A=A−1, B=B−1⊆G with ∣A∣=∣B∣=Δ, satisfying the Total No-Conjugacy condition ag=gb for all a∈A, b∈B, g∈G. The left-right Cayley complex has vertices V=V0∪V1, Vi=G×{i}, and squares Q, the 4-sets {(g,0),(ag,1),(gb,1),(agb,0)}. For a vertex v=(g,i) the squares {v,(ag,1−i),(gb,1−i),(agb,i)} incident to v are in bijection with A×B, so the restriction xv of x∈F2Q to the squares at v is an A×B array. Let GA, GB be the bipartite double covers of Cay(G,A) and Cay(G,B); we require both to be Ramanujan: connected, and every adjacency eigenvalue other than ±Δ has absolute value at most 2Δ−1.
For codes CA⊆F2A, CB⊆F2B, the tensor code CA⊗CB consists of arrays whose columns lie in CA and whose rows lie in CB. The dual tensor code is CA⊗F2B+F2A⊗CB. It is w-robust if every codeword x of weight ∣x∣≤w vanishes outside A′×B∪A×B′ for some A′⊆A, B′⊆B with ∣A′∣≤∣x∣/dB and ∣B′∣≤∣x∣/dA, where dA,dB are the minimum distances. It is w-robust with p-resistance to puncturing if, for all A′⊆A, B′⊆B with ∣A′∣=∣B′∣=Δ−w′ and w′≤p, the dual tensor code of the punctured codes CA′, CB′ is w-robust. The quantum Tanner code C1 is
C1={x∈F2Q:xv∈CA⊗F2B+F2A⊗CBfor every v∈V1}.
Theorem. Fix ε∈(0,21), γ∈(21+ε,1) and δ>0. There is Δ0, depending only on ε,γ,δ, such that the following holds for every Δ≥Δ0 and every complex as above. Suppose every nonzero codeword of CA and of CB has weight at least δΔ, and the dual tensor code is Δ3/2−ε/2-robust with Δγ-resistance to puncturing. Let n=∣Q∣. Then for every x∈C1 with
0<∣x∣<4Δ3/2+εδn,
there are a vertex v∈V0 and a tensor codeword c∈CA⊗CB such that the word y∈F2Q that equals c on the squares at v and is 0 elsewhere lies in C1 and satisfies ∣x+y∣<∣x∣.
Applied repeatedly, the theorem shows that low-weight codewords of C1 lie in C0⊥, which gives the linear minimum distance of quantum Tanner codes. It also recovers the local testability of the Dinur et al. code.
Formalization Note The paper says "there exists an infinite family of square complexes". The formal statement instead holds for every left-right Cayley complex that satisfies the hypotheses the proof uses (TNC, Ramanujan double covers). The infinite family is the cited [DEL+21] construction. Minimum distances are taken in N∪{∞}, and the bounds ∣A′∣≤∣x∣/dB are written as ∣A′∣dB≤∣x∣.
Target
Theorem 1
This is the main technical theorem behind quantum Tanner codes.
Setting. Let G be a finite group and A=A−1, B=B−1⊆G with ∣A∣=∣B∣=Δ, satisfying the Total No-Conjugacy condition ag=gb for all a∈A, b∈B, g∈G. The left-right Cayley complex has vertices V=V0∪V1, Vi=G×{i}, and squares Q, the 4-sets {(g,0),(ag,1),(gb,1),(agb,0)}. For a vertex v=(g,i) the squares {v,(ag,1−i),(gb,1−i),(agb,i)} incident to v are in bijection with A×B, so the restriction xv of x∈F2Q to the squares at v is an A×B array. Let GA, GB be the bipartite double covers of Cay(G,A) and Cay(G,B); we require both to be Ramanujan: connected, and every adjacency eigenvalue other than ±Δ has absolute value at most 2Δ−1.
For codes CA⊆F2A, CB⊆F2B, the tensor code CA⊗CB consists of arrays whose columns lie in CA and whose rows lie in CB. The dual tensor code is CA⊗F2B+F2A⊗CB. It is w-robust if every codeword x of weight ∣x∣≤w vanishes outside A′×B∪A×B′ for some A′⊆A, B′⊆B with ∣A′∣≤∣x∣/dB and ∣B′∣≤∣x∣/dA, where dA,dB are the minimum distances. It is w-robust with p-resistance to puncturing if, for all A′⊆A, B′⊆B with ∣A′∣=∣B′∣=Δ−w′ and w′≤p, the dual tensor code of the punctured codes CA′, CB′ is w-robust. The quantum Tanner code C1 is
C1={x∈F2Q:xv∈CA⊗F2B+F2A⊗CBfor every v∈V1}.
Theorem. Fix ε∈(0,21), γ∈(21+ε,1) and δ>0. There is Δ0, depending only on ε,γ,δ, such that the following holds for every Δ≥Δ0 and every complex as above. Suppose every nonzero codeword of CA and of CB has weight at least δΔ, and the dual tensor code is Δ3/2−ε/2-robust with Δγ-resistance to puncturing. Let n=∣Q∣. Then for every x∈C1 with
0<∣x∣<4Δ3/2+εδn,
there are a vertex v∈V0 and a tensor codeword c∈CA⊗CB such that the word y∈F2Q that equals c on the squares at v and is 0 elsewhere lies in C1 and satisfies ∣x+y∣<∣x∣.
Applied repeatedly, the theorem shows that low-weight codewords of C1 lie in C0⊥, which gives the linear minimum distance of quantum Tanner codes. It also recovers the local testability of the Dinur et al. code.
Formalization Note The paper says "there exists an infinite family of square complexes". The formal statement instead holds for every left-right Cayley complex that satisfies the hypotheses the proof uses (TNC, Ramanujan double covers). The infinite family is the cited [DEL+21] construction. Minimum distances are taken in N∪{∞}, and the bounds ∣A′∣≤∣x∣/dB are written as ∣A′∣dB≤∣x∣.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the correctness and iteration bound of the sequential decoder for quantum Tanner codes (Leverrier–Zémor, Theorem 13 with the bound established in its proof).
Fix ε∈(0,1) and constants δ,κ>0. There is Δ0 (depending only on ε,δ,κ) such that the following holds for every Δ≥Δ0. Let G be a finite group with self-inverse subsets A=A−1, B=B−1 of size ∣A∣=∣B∣=Δ such that the left Cayley graph Cay(G,A) and the right Cayley graph Cay(G,B) are connected, non-bipartite (−Δ is not an adjacency eigenvalue) and Ramanujan (every adjacency eigenvalue λ=±Δ has ∣λ∣≤2Δ−1). Let CA⊆F2A, CB⊆F2B be linear codes with dimCA+dimCB=Δ, such that CA, CB, CA⊥, CB⊥ all have minimum distance at least δΔ, and both dual tensor codes CA⊗F2B+F2A⊗CB and CA⊥⊗F2B+F2A⊗CB⊥ are κ-product-expanding (every codeword x is c+r with ∣x∣≥κΔ(∥c∥+∥r∥), counting nonzero columns of c and nonzero rows of r). Let Q≅G×A×B be the set of squares of the quadripartite left-right Cayley complex, n=∣Q∣, and let Q=(C0,C1) be the quantum Tanner code.
Let e∈F2Q be a σx-type error with
∣e∣<2111min(16ε3,κ)(1−ε)δ2κ2Δn.
For each v∈V1=V01∪V10 let εv be any minimum-weight local vector on Q(v) with the same local syndrome as ev, and let Z=∑v∈V1εv be the mismatch. Consider any run of the sequential mismatch decomposition (Algorithm 2 with parameter ε, with any of its choices of vertex v∈Vij and nonzero local dual tensor codeword xv=cv+rv with ∣Z^∣−∣Z^+xv∣≥(1−ε)∣xv∣ and ∥cv∥+∥rv∥ minimal, updating C^j+=cv, R^i+=rv, Z^+=xv), started from C^=R^=0, Z^=Z, after m iterations. Then:
(1−ε)m≤4∣e∣, i.e. the decoder makes at most 4∣e∣/(1−ε) iterations, a number linear in n;
if Z^=0, a further iteration is possible (the decoder never returns Failure);
if Z^=0, the output e^=∑v∈V10εv+C^0+R^1 satisfies e+e^∈C0⊥, the span of the σx-generators (codewords of CA⊗CB on the Q-neighbourhoods of V0): e^ is equivalent to e up to the stabilizer group.
This is the paper's linear-time decoding guarantee: quantum Tanner codes built from Ramanujan left-right Cayley complexes and robust local codes admit a sequential decoder correcting every error of weight linear in the code length.
Formalization Note The squares are indexed injectively by G×A×B; vertices are G×{0,1}2 with the paper's labelling φv (p.10). Algorithm 2 is a nondeterministic step relation, so the statement quantifies over all runs and over all choices of the εv. Only the σx case is stated, as in the paper's proof (the σz case is symmetric). The group G ranges over Type (universe 0).
Target
Theorem 13
This is the correctness and iteration bound of the sequential decoder for quantum Tanner codes (Leverrier–Zémor, Theorem 13 with the bound established in its proof).
Fix ε∈(0,1) and constants δ,κ>0. There is Δ0 (depending only on ε,δ,κ) such that the following holds for every Δ≥Δ0. Let G be a finite group with self-inverse subsets A=A−1, B=B−1 of size ∣A∣=∣B∣=Δ such that the left Cayley graph Cay(G,A) and the right Cayley graph Cay(G,B) are connected, non-bipartite (−Δ is not an adjacency eigenvalue) and Ramanujan (every adjacency eigenvalue λ=±Δ has ∣λ∣≤2Δ−1). Let CA⊆F2A, CB⊆F2B be linear codes with dimCA+dimCB=Δ, such that CA, CB, CA⊥, CB⊥ all have minimum distance at least δΔ, and both dual tensor codes CA⊗F2B+F2A⊗CB and CA⊥⊗F2B+F2A⊗CB⊥ are κ-product-expanding (every codeword x is c+r with ∣x∣≥κΔ(∥c∥+∥r∥), counting nonzero columns of c and nonzero rows of r). Let Q≅G×A×B be the set of squares of the quadripartite left-right Cayley complex, n=∣Q∣, and let Q=(C0,C1) be the quantum Tanner code.
Let e∈F2Q be a σx-type error with
∣e∣<2111min(16ε3,κ)(1−ε)δ2κ2Δn.
For each v∈V1=V01∪V10 let εv be any minimum-weight local vector on Q(v) with the same local syndrome as ev, and let Z=∑v∈V1εv be the mismatch. Consider any run of the sequential mismatch decomposition (Algorithm 2 with parameter ε, with any of its choices of vertex v∈Vij and nonzero local dual tensor codeword xv=cv+rv with ∣Z^∣−∣Z^+xv∣≥(1−ε)∣xv∣ and ∥cv∥+∥rv∥ minimal, updating C^j+=cv, R^i+=rv, Z^+=xv), started from C^=R^=0, Z^=Z, after m iterations. Then:
(1−ε)m≤4∣e∣, i.e. the decoder makes at most 4∣e∣/(1−ε) iterations, a number linear in n;
if Z^=0, a further iteration is possible (the decoder never returns Failure);
if Z^=0, the output e^=∑v∈V10εv+C^0+R^1 satisfies e+e^∈C0⊥, the span of the σx-generators (codewords of CA⊗CB on the Q-neighbourhoods of V0): e^ is equivalent to e up to the stabilizer group.
This is the paper's linear-time decoding guarantee: quantum Tanner codes built from Ramanujan left-right Cayley complexes and robust local codes admit a sequential decoder correcting every error of weight linear in the code length.
Formalization Note The squares are indexed injectively by G×A×B; vertices are G×{0,1}2 with the paper's labelling φv (p.10). Algorithm 2 is a nondeterministic step relation, so the statement quantifies over all runs and over all choices of the εv. Only the σx case is stated, as in the paper's proof (the σz case is symmetric). The group G ranges over Type (universe 0).
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the ground state preparation theorem of Lin and Tong for the case where an upper bound on the ground energy is known.
Let N=2n and let H∈CN×N be Hermitian with eigenvalues λ0≤λ1≤⋯≤λN−1 and a ground state ∣ψ0⟩ (a unit eigenvector for λ0). Access is through two unitary oracles: an (α,m,0)-block-encoding UH of H, i.e. an (m+n)-qubit unitary with H=α(⟨0m∣⊗I)UH(∣0m⟩⊗I), and an n-qubit unitary UI preparing ∣ϕ0⟩=UI∣0n⟩. For known parameters α≥0, Δ>0, μ∈R, γ∈(0,1] the promises are
(P1) ∣⟨ϕ0∣ψ0⟩∣≥γ;
(P2) λ0≤μ−Δ/2<μ+Δ/2≤λ1.
There are absolute constants C,c>0 such that for every n,m,α,Δ,μ,γ and every ϵ∈(0,1) there is a quantum circuit of one- and two-qubit gates with oracle calls (plain, inverse or controlled) to UH and UI, on n+w qubits started in ∣0n+w⟩, together with a set of accepted outcomes of its w ancilla qubits, such that
and, for every instance (H,UH,UI) satisfying (P1) and (P2), measuring the ancillas gives an accepted outcome with probability at least c, and for every accepted outcome the post-measurement state ∣ψ~⟩ of the system register has fidelity ∣⟨ψ0∣ψ~⟩∣≥1−ϵ.
The circuit depends only on the known parameters, not on the instance. The query cost is logarithmic in the inverse precision, which the paper shows to be essentially optimal in γ and Δ.
Formalization Note The source writes O(n+m) qubits and O(γΔmαlogγϵ1) gates; these are stated with n+m+1 and m+1, since at n=m=0 (resp. m=0) the literal bound is zero while the construction needs ancillas and Hadamard gates (the paper's own Theorem 1 gives O((m+1)ℓ) gates). The constant success probability is the proof's reading of the theorem ("the procedure succeeds with some constant probability"). Fidelity is ∣⟨x∣y⟩∣, as in the paper's footnote 1.
Target
Theorem 6
This is the ground state preparation theorem of Lin and Tong for the case where an upper bound on the ground energy is known.
Let N=2n and let H∈CN×N be Hermitian with eigenvalues λ0≤λ1≤⋯≤λN−1 and a ground state ∣ψ0⟩ (a unit eigenvector for λ0). Access is through two unitary oracles: an (α,m,0)-block-encoding UH of H, i.e. an (m+n)-qubit unitary with H=α(⟨0m∣⊗I)UH(∣0m⟩⊗I), and an n-qubit unitary UI preparing ∣ϕ0⟩=UI∣0n⟩. For known parameters α≥0, Δ>0, μ∈R, γ∈(0,1] the promises are
(P1) ∣⟨ϕ0∣ψ0⟩∣≥γ;
(P2) λ0≤μ−Δ/2<μ+Δ/2≤λ1.
There are absolute constants C,c>0 such that for every n,m,α,Δ,μ,γ and every ϵ∈(0,1) there is a quantum circuit of one- and two-qubit gates with oracle calls (plain, inverse or controlled) to UH and UI, on n+w qubits started in ∣0n+w⟩, together with a set of accepted outcomes of its w ancilla qubits, such that
and, for every instance (H,UH,UI) satisfying (P1) and (P2), measuring the ancillas gives an accepted outcome with probability at least c, and for every accepted outcome the post-measurement state ∣ψ~⟩ of the system register has fidelity ∣⟨ψ0∣ψ~⟩∣≥1−ϵ.
The circuit depends only on the known parameters, not on the instance. The query cost is logarithmic in the inverse precision, which the paper shows to be essentially optimal in γ and Δ.
Formalization Note The source writes O(n+m) qubits and O(γΔmαlogγϵ1) gates; these are stated with n+m+1 and m+1, since at n=m=0 (resp. m=0) the literal bound is zero while the construction needs ancillas and Hadamard gates (the paper's own Theorem 1 gives O((m+1)ℓ) gates). The constant success probability is the proof's reading of the theorem ("the procedure succeeds with some constant probability"). Fidelity is ∣⟨x∣y⟩∣, as in the paper's footnote 1.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the product-decomposition theorem underlying quantum signal processing.
For an integer n≥0 let Pn be the set of Laurent polynomials F(t)=∑j=−nnCjtj with coefficients Cj∈Mat(2;C) such that F(η)∈SU(2) for every η∈C with ∣η∣=1. Such an F has degree n if Cn=0 or C−n=0. Let En⊆Pn consist of those F whose exponents lie in {−n,−n+2,…,n−2,n}, i.e. C−n+k=0 for every odd k. For a rank-one orthogonal projector P on C2 the primitive matrix is
EP(t)=tP+t−1(I−P).
Then:
For every n and all rank-one projectors P1,…,Pn, the product EP1(t)⋯EPn(t) belongs to En.
Every F∈En of degree n admits exactly one tuple (E0,P1,…,Pn), with E0∈SU(2) independent of t and each Pj a rank-one projector, such that
F(t)=E0EP1(t)EP2(t)⋯EPn(t)
as Laurent polynomials.
3. If n≥1 and F(t)=C−nt−n+⋯+Cntn is decomposed as in 2, then the last projector is
Pn=Tr(Cn†Cn)Cn†Cn.
The theorem characterizes exactly which polynomial functions U(1)→SU(2) are achievable by alternating controlled-W and controlled-W† with single-qubit rotations, and item 3 gives the peeling step of the classical algorithm that computes the rotation sequence.
Formalization Note The source's E0 is "a unitary"; because detEP(η)=1 and F(η)∈SU(2) on the unit circle, any unitary E0 in such a decomposition has determinant 1, so ranging over SU(2) is equivalent. Uniqueness is of the whole ordered tuple. The projector Pn is the factor at index n−1 of a 0-indexed family. That Cn=0 (so the trace is nonzero) is a fact the source proves, not a hypothesis.
Target
Theorem 2
This is the product-decomposition theorem underlying quantum signal processing.
For an integer n≥0 let Pn be the set of Laurent polynomials F(t)=∑j=−nnCjtj with coefficients Cj∈Mat(2;C) such that F(η)∈SU(2) for every η∈C with ∣η∣=1. Such an F has degree n if Cn=0 or C−n=0. Let En⊆Pn consist of those F whose exponents lie in {−n,−n+2,…,n−2,n}, i.e. C−n+k=0 for every odd k. For a rank-one orthogonal projector P on C2 the primitive matrix is
EP(t)=tP+t−1(I−P).
Then:
For every n and all rank-one projectors P1,…,Pn, the product EP1(t)⋯EPn(t) belongs to En.
Every F∈En of degree n admits exactly one tuple (E0,P1,…,Pn), with E0∈SU(2) independent of t and each Pj a rank-one projector, such that
F(t)=E0EP1(t)EP2(t)⋯EPn(t)
as Laurent polynomials.
3. If n≥1 and F(t)=C−nt−n+⋯+Cntn is decomposed as in 2, then the last projector is
Pn=Tr(Cn†Cn)Cn†Cn.
The theorem characterizes exactly which polynomial functions U(1)→SU(2) are achievable by alternating controlled-W and controlled-W† with single-qubit rotations, and item 3 gives the peeling step of the classical algorithm that computes the rotation sequence.
Formalization Note The source's E0 is "a unitary"; because detEP(η)=1 and F(η)∈SU(2) on the unit circle, any unitary E0 in such a decomposition has determinant 1, so ranging over SU(2) is equivalent. Uniqueness is of the whole ordered tuple. The projector Pn is the factor at index n−1 of a 0-indexed family. That Cn=0 (so the trace is nonzero) is a fact the source proves, not a hypothesis.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the optimal sample complexity of realizable PAC learning (Hanneke, Theorem 2 and Corollary 3).
Let X be a nonempty measurable space (the instance space) and let C be a set of measurable classifiers h:X→{−1,+1} with ∣C∣≥3 and finite VC dimension d. For a probability measure P on X, a target f⋆∈C and a classifier h, write erP(h;f⋆)=P(x:h(x)=f⋆(x)). For ε,δ∈(0,1) the sample complexity M(ε,δ)∈N∪{∞} is the smallest m for which some (possibly randomized) learning algorithm A, given the m i.i.d. P-distributed points labelled by f⋆, outputs a measurable classifier h^ with P(erP(h^;f⋆)≤ε)≥1−δ for every P and every f⋆∈C (and ∞ if no m works). Let Log(z)=ln(max{z,e}). Assume, as the paper does, that the events of the uniform convergence bound for sample-consistent classifiers are measurable.
Then there are numerical constants, independent of X and C (in particular of d):
ε0,δ0∈(0,1) and c0>0 such that for all ε∈(0,ε0), δ∈(0,δ0), M(ε,δ) is finite and
M(ε,δ)≤εc0(d+Logδ1);
ε1,δ1∈(0,1) and c1>0 such that for all ε∈(0,ε1), δ∈(0,δ1),
ε1(d+Logδ1)≤c1M(ε,δ).
This removes the logarithmic factor Log(1/ε) from the classical upper bound of Vapnik and Blumer et al., matching the lower bounds of Blumer et al. and Ehrenfeucht et al. up to constants.
Formalization NoteM(ε,δ) takes values in N∪{∞} (ℕ∞); part 2 is stated for finite values only, the infinite case being trivially true. Randomized algorithms use an arbitrary probability space independent of the sample. The PAC failure probability is the measure of the failure set (its outer measure if that set is not measurable).
Target
Theorem 2 and Corollary 3
This is the optimal sample complexity of realizable PAC learning (Hanneke, Theorem 2 and Corollary 3).
Let X be a nonempty measurable space (the instance space) and let C be a set of measurable classifiers h:X→{−1,+1} with ∣C∣≥3 and finite VC dimension d. For a probability measure P on X, a target f⋆∈C and a classifier h, write erP(h;f⋆)=P(x:h(x)=f⋆(x)). For ε,δ∈(0,1) the sample complexity M(ε,δ)∈N∪{∞} is the smallest m for which some (possibly randomized) learning algorithm A, given the m i.i.d. P-distributed points labelled by f⋆, outputs a measurable classifier h^ with P(erP(h^;f⋆)≤ε)≥1−δ for every P and every f⋆∈C (and ∞ if no m works). Let Log(z)=ln(max{z,e}). Assume, as the paper does, that the events of the uniform convergence bound for sample-consistent classifiers are measurable.
Then there are numerical constants, independent of X and C (in particular of d):
ε0,δ0∈(0,1) and c0>0 such that for all ε∈(0,ε0), δ∈(0,δ0), M(ε,δ) is finite and
M(ε,δ)≤εc0(d+Logδ1);
ε1,δ1∈(0,1) and c1>0 such that for all ε∈(0,ε1), δ∈(0,δ1),
ε1(d+Logδ1)≤c1M(ε,δ).
This removes the logarithmic factor Log(1/ε) from the classical upper bound of Vapnik and Blumer et al., matching the lower bounds of Blumer et al. and Ehrenfeucht et al. up to constants.
Formalization NoteM(ε,δ) takes values in N∪{∞} (ℕ∞); part 2 is stated for finite values only, the infinite case being trivially true. Randomized algorithms use an arbitrary probability space independent of the sample. The PAC failure probability is the measure of the failure set (its outer measure if that set is not measurable).
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.