This is the entanglement-assisted lower bound of Cleve, van Dam, Nielsen and Tapp, a consequence of Holevo's theorem.
Consider a two-party qubit protocol in which Alice holds an input x∈{0,1}n on n of her qubits. All other qubits start in ∣0⟩, except for a block of qubits in an arbitrary shared state ∣Φ⟩ (fixed before the input, its qubits distributed between Alice and Bob in any way). The protocol is a fixed sequence of steps, each of which is a unitary applied by one party to qubits it currently holds, or the sending of one qubit to the other party. Let nAB be the number of qubits Alice sends to Bob; the number nBA of qubits Bob sends to Alice is unrestricted. At the end Bob performs a measurement (a POVM) acting only on the qubits he holds.
If Bob's measurement, with outcomes in {0,1}n, returns x with probability 1 for every input x, then
nAB≥⌈2n⌉.
More generally, let X be uniformly distributed on {0,1}n and Y the outcome of any measurement of Bob. For every natural number m, if I(X:Y)≥m (mutual information in bits), then nAB≥⌈m/2⌉.
The bound holds regardless of the prior entanglement and of the communication from Bob to Alice. It is the information-theoretic ingredient of the paper's linear lower bounds on the communication complexity of the inner product function.
Formalization Note The protocol model is the shared TwoPartyProtocol (pure shared state; mixed states and intermediate measurements are simulated with ancillas, as the paper notes on p.13). The ceiling ⌈k/2⌉ is written as natural-number division (k+1)/2. In clause 1 the outcome set is {0,1}n itself; a measurement with another outcome set followed by a decoding map is a coarse-grained measurement of this form, and clause 2 covers arbitrary outcome sets.
Target
Theorem 1
This is the entanglement-assisted lower bound of Cleve, van Dam, Nielsen and Tapp, a consequence of Holevo's theorem.
Consider a two-party qubit protocol in which Alice holds an input x∈{0,1}n on n of her qubits. All other qubits start in ∣0⟩, except for a block of qubits in an arbitrary shared state ∣Φ⟩ (fixed before the input, its qubits distributed between Alice and Bob in any way). The protocol is a fixed sequence of steps, each of which is a unitary applied by one party to qubits it currently holds, or the sending of one qubit to the other party. Let nAB be the number of qubits Alice sends to Bob; the number nBA of qubits Bob sends to Alice is unrestricted. At the end Bob performs a measurement (a POVM) acting only on the qubits he holds.
If Bob's measurement, with outcomes in {0,1}n, returns x with probability 1 for every input x, then
nAB≥⌈2n⌉.
More generally, let X be uniformly distributed on {0,1}n and Y the outcome of any measurement of Bob. For every natural number m, if I(X:Y)≥m (mutual information in bits), then nAB≥⌈m/2⌉.
The bound holds regardless of the prior entanglement and of the communication from Bob to Alice. It is the information-theoretic ingredient of the paper's linear lower bounds on the communication complexity of the inner product function.
Formalization Note The protocol model is the shared TwoPartyProtocol (pure shared state; mixed states and intermediate measurements are simulated with ancillas, as the paper notes on p.13). The ceiling ⌈k/2⌉ is written as natural-number division (k+1)/2. In clause 1 the outcome set is {0,1}n itself; a measurement with another outcome set followed by a decoding map is a coarse-grained measurement of this form, and clause 2 covers arbitrary outcome sets.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the ℓ∞ pure-state tomography result of van Apeldoorn, Cornelissen, Gilyén and Nannicini (arXiv:2207.08800, Proposition 22), cited in Nannicini's lecture notes as Theorem 5.17.
Let d≥1 and n=⌈log2d⌉. Let ∣ψ⟩=∑j=0d−1αj∣j⟩ be a pure state, so α∈Cd and ∥α∥2=1. It is stored on n qubits, with basis states ∣j⟩ for j≥d having amplitude 0. Let U be an n-qubit unitary with U∣0⟩=∣ψ⟩. The algorithm can apply U and U†, possibly controlled, but sees U only through these applications. The gate set has all single-qubit gates, CNOT, and the indexed-SWAP gate
There are absolute constants C>0 and c∈N such that the following holds for every d≥1, ε>0 and δ∈(0,1). Write L=log(2+d)+log(2+1/ε)+log(2+1/δ).
There is a quantum algorithm, fixed before U, with the following resources:
at most Cεdlog(2+d/δ) applications of U and U†;
at most Cεdlog(2+d/δ)log(2+d/ε) indexed-SWAP gates, each acting on a memory of d qubits;
at most C(d+d/ε)Lc additional gates (single-qubit gates and CNOTs).
For every such ψ and U, with probability at least 1−δ it outputs α~∈Rd with
∥Re(α)−α~∥∞≤ε.
If ε≥1/d, there is such an algorithm with at most CLc/ε2 applications of U and U† and at most CLc/ε4 gates in total, with the same guarantee.
The result reaches the optimal d/ε dependence for ℓ∞-estimation of the amplitudes. Combined with the paper's ℓ∞-to-ℓq conversion, it yields the ℓq tomography bounds (Theorem 23 of the paper; Corollary 5.18 in Nannicini).
Formalization Note Both clauses use the coherent-circuit model: one oracle circuit over the paper's gate set, started in ∣0⟩ and measured once, with classical post-processing (medians, rescaling) in a read-out function. The paper allows adaptive classical control. The adaptive algorithm of clause 2 is simulated by deferred measurement, and the paper's convention of counting classical computation up to polylog factors absorbs the cost. The logarithms log(d/δ) and log(d/ε) are written log(2+⋅) so the bounds do not vanish in the degenerate corner d=1, δ→1. The O~ factors are Lc. On index values ≥D, which the paper leaves unspecified, the indexed-SWAP gate acts as the identity.
Target
Proposition 22
This is the ℓ∞ pure-state tomography result of van Apeldoorn, Cornelissen, Gilyén and Nannicini (arXiv:2207.08800, Proposition 22), cited in Nannicini's lecture notes as Theorem 5.17.
Let d≥1 and n=⌈log2d⌉. Let ∣ψ⟩=∑j=0d−1αj∣j⟩ be a pure state, so α∈Cd and ∥α∥2=1. It is stored on n qubits, with basis states ∣j⟩ for j≥d having amplitude 0. Let U be an n-qubit unitary with U∣0⟩=∣ψ⟩. The algorithm can apply U and U†, possibly controlled, but sees U only through these applications. The gate set has all single-qubit gates, CNOT, and the indexed-SWAP gate
There are absolute constants C>0 and c∈N such that the following holds for every d≥1, ε>0 and δ∈(0,1). Write L=log(2+d)+log(2+1/ε)+log(2+1/δ).
There is a quantum algorithm, fixed before U, with the following resources:
at most Cεdlog(2+d/δ) applications of U and U†;
at most Cεdlog(2+d/δ)log(2+d/ε) indexed-SWAP gates, each acting on a memory of d qubits;
at most C(d+d/ε)Lc additional gates (single-qubit gates and CNOTs).
For every such ψ and U, with probability at least 1−δ it outputs α~∈Rd with
∥Re(α)−α~∥∞≤ε.
If ε≥1/d, there is such an algorithm with at most CLc/ε2 applications of U and U† and at most CLc/ε4 gates in total, with the same guarantee.
The result reaches the optimal d/ε dependence for ℓ∞-estimation of the amplitudes. Combined with the paper's ℓ∞-to-ℓq conversion, it yields the ℓq tomography bounds (Theorem 23 of the paper; Corollary 5.18 in Nannicini).
Formalization Note Both clauses use the coherent-circuit model: one oracle circuit over the paper's gate set, started in ∣0⟩ and measured once, with classical post-processing (medians, rescaling) in a read-out function. The paper allows adaptive classical control. The adaptive algorithm of clause 2 is simulated by deferred measurement, and the paper's convention of counting classical computation up to polylog factors absorbs the cost. The logarithms log(d/δ) and log(d/ε) are written log(2+⋅) so the bounds do not vanish in the degenerate corner d=1, δ→1. The O~ factors are Lc. On index values ≥D, which the paper leaves unspecified, the indexed-SWAP gate acts as the identity.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the polynomial eigenvalue transformation theorem of Gilyén, Su, Low and Wiebe, which removes the parity constraint of quantum singular value transformation at the price of a factor 1/2.
For an s-qubit operator A, real numbers α>0, ε≥0 and a∈N, an (a+s)-qubit unitary U is an (α,a,ε)-block-encoding of A if
A−α(⟨0∣⊗a⊗I)U(∣0⟩⊗a⊗I)≤ε,
where ∥⋅∥ is the operator norm and the ancilla register comes first.
There is an absolute constant C>0 such that the following holds. Let s,a,d∈N, let δ≥0, and let P∈R[x] be a polynomial of degree at most d with ∣P(x)∣≤21 for all x∈[−1,1]. Then there exist w∈N and a quantum circuit U~ on (a+2)+s+w qubits, built from one- and two-qubit gates and calls to a black box U on a+s qubits, with
at most d uncontrolled applications of U or U†,
at most one controlled application of the black box,
at most C(a+1)max(d,1) other gates,
such that for every α>0, ε≥0, every Hermitian s-qubit matrix A with ∥A∥≤α and every (α,a,ε)-block-encoding U of A, the circuit U~ (with the last w qubits as clean ancillas, started and returned exactly in ∣0⟩) implements a unitary V on (a+2)+s qubits that is a
(1,a+2,4dε/α+δ)-block-encoding of P(A/α).
This theorem is the workhorse for implementing smooth functions of Hermitian matrices (Hamiltonian simulation, matrix inversion, Gibbs sampling) through block-encodings.
Formalization Note The circuit is chosen before α,ε,A,U, so it depends only on s,a,d,P,δ. The source's O((a+1)d) is encoded with max(d,1) since a constant polynomial still needs a few gates. The source's last sentence (classical computability of the circuit description in time poly(d,log(1/δ))) is not formalized, because the source fixes no bit model for the real coefficients of P. The controlled query may be controlled-U or controlled-U†. The hypothesis ∥A∥≤α corrects the printed statement: the source's proof uses Lemma 22, which needs ∥A/α∥≤1, and without it the printed statement fails (e.g. A=[2], U=[1], α=ε=1, P=T8/2, d=8).
Correction to the printed source.
Printed: Suppose that U is an (α, a, ε)-encoding of a Hermitian matrix A (no condition ‖A‖ ≤ α; Definition 43 only forces ‖A‖ ≤ α + ε).
Corrected: Added the hypothesis specNorm A ≤ α, i.e. ‖A/α‖ ≤ 1.
Reason: The proof (p.49) applies Lemma 22 (p.23), which requires both matrices to have operator norm at most 1. Without it the statement is false: s = a = 0, α = ε = 1, A = [2], U = [1] is a (1, 0, 1)-encoding of A; with P = T_8/2, d = 8, δ = 0 one gets P(A/α) = T_8(2)/2 ≈ 9408, while every block of a unitary has norm ≤ 1 and the claimed error is 32.
Target
Theorem 56
This is the polynomial eigenvalue transformation theorem of Gilyén, Su, Low and Wiebe, which removes the parity constraint of quantum singular value transformation at the price of a factor 1/2.
For an s-qubit operator A, real numbers α>0, ε≥0 and a∈N, an (a+s)-qubit unitary U is an (α,a,ε)-block-encoding of A if
A−α(⟨0∣⊗a⊗I)U(∣0⟩⊗a⊗I)≤ε,
where ∥⋅∥ is the operator norm and the ancilla register comes first.
There is an absolute constant C>0 such that the following holds. Let s,a,d∈N, let δ≥0, and let P∈R[x] be a polynomial of degree at most d with ∣P(x)∣≤21 for all x∈[−1,1]. Then there exist w∈N and a quantum circuit U~ on (a+2)+s+w qubits, built from one- and two-qubit gates and calls to a black box U on a+s qubits, with
at most d uncontrolled applications of U or U†,
at most one controlled application of the black box,
at most C(a+1)max(d,1) other gates,
such that for every α>0, ε≥0, every Hermitian s-qubit matrix A with ∥A∥≤α and every (α,a,ε)-block-encoding U of A, the circuit U~ (with the last w qubits as clean ancillas, started and returned exactly in ∣0⟩) implements a unitary V on (a+2)+s qubits that is a
(1,a+2,4dε/α+δ)-block-encoding of P(A/α).
This theorem is the workhorse for implementing smooth functions of Hermitian matrices (Hamiltonian simulation, matrix inversion, Gibbs sampling) through block-encodings.
Formalization Note The circuit is chosen before α,ε,A,U, so it depends only on s,a,d,P,δ. The source's O((a+1)d) is encoded with max(d,1) since a constant polynomial still needs a few gates. The source's last sentence (classical computability of the circuit description in time poly(d,log(1/δ))) is not formalized, because the source fixes no bit model for the real coefficients of P. The controlled query may be controlled-U or controlled-U†. The hypothesis ∥A∥≤α corrects the printed statement: the source's proof uses Lemma 22, which needs ∥A/α∥≤1, and without it the printed statement fails (e.g. A=[2], U=[1], α=ε=1, P=T8/2, d=8).
Correction to the printed source.
Printed: Suppose that U is an (α, a, ε)-encoding of a Hermitian matrix A (no condition ‖A‖ ≤ α; Definition 43 only forces ‖A‖ ≤ α + ε).
Corrected: Added the hypothesis specNorm A ≤ α, i.e. ‖A/α‖ ≤ 1.
Reason: The proof (p.49) applies Lemma 22 (p.23), which requires both matrices to have operator norm at most 1. Without it the statement is false: s = a = 0, α = ε = 1, A = [2], U = [1] is a (1, 0, 1)-encoding of A; with P = T_8/2, d = 8, δ = 0 one gets P(A/α) = T_8(2)/2 ≈ 9408, while every block of a unitary has norm ≤ 1 and the claimed error is 32.
Corollary 62
This is the robust block-Hamiltonian simulation result of Gilyén, Su, Low and Wiebe (Corollary 62 of arXiv:1806.01838v1, Corollary 63 in the published version).
Block-encodings are as in Definition 43: an (a+s)-qubit unitary U is an (α,a,η)-block-encoding of an s-qubit operator H if ∥H−α(⟨0∣⊗a⊗I)U(∣0⟩⊗a⊗I)∥≤η in operator norm.
There is an absolute constant C>0 such that the following holds. Let s,a∈N, t∈R, ε∈(0,1) and α>0. Then there exist w≤C and a circuit on (a+2)+s+w qubits, made of two-qubit gates and calls to a black box U on a+s qubits, using
at most 6α∣t∣+9ln(12/ε) uncontrolled applications of U or U†,
at most 3 applications of controlled-U or its inverse,
at most C(a+1)(α∣t∣+ln(2/ε)) two-qubit gates,
such that for every Hermitian s-qubit matrix H and every (α,a,ε/∣2t∣)-block-encoding U of H, the circuit (with its last w qubits as clean ancillas) implements a unitary V that is a
(1,a+2,ε)-block-encoding of eitH.
This gives Hamiltonian simulation with additive query complexity in α∣t∣ and log(1/ε), robust to an imprecise block-encoding of the Hamiltonian.
Formalization Note The circuit may depend on s,a,t,ε,α but not on H or U. The source's gate bound O(a(⋯)) is encoded as O((a+1)(⋯)), since the two new ancillas need gates even when a=0. At t=0 the source's ε/∣2t∣ is undefined; in Lean ε/0=0, so there the hypothesis is an exact block-encoding.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the conversion of a probability oracle into an approximate phase oracle (Gilyén–Arunachalam–Wiebe, Theorem 14).
Let X be a finite set and H the Hilbert space with orthonormal basis {∣x⟩:x∈X}. A probability oracle for p:X→[0,1] with an n-qubit auxiliary register is a unitary Up on H⊗C2n with
for some normalized states ψgood(x),ψbad(x) (the flag is the last qubit). A phase oracle for p on an auxiliary register is a unitary Op with Op∣x⟩∣0⟩=eip(x)∣x⟩∣0⟩ for all x∈X.
There is an absolute constant C>0 such that for every ε∈(0,1/3), every finite X and every n≥1 there are a number a≤Cloglog(1/ε) of extra qubits and a quantum circuit O on H⊗C2n+a, built from input-independent unitaries and at most Clog(1/ε) (uncontrolled) applications of Up and Up†, such that for every p, every probability oracle Up for p, every phase oracle Op for p on n+a auxiliary qubits, and every unit vector ∣ψ⟩∈H,
O∣ψ⟩∣0⟩⊗(n+a)−Op∣ψ⟩∣0⟩⊗(n+a)≤ε.
This shows that the probability oracles arising from parametrized quantum circuits can be used wherever a phase oracle is needed, at only logarithmic overhead in the precision.
Formalization Note The circuit is fixed before p and Up; the source's n-qubit auxiliary register is written n=m+1. The source's "for all ∣ψ⟩∈H" is read for unit vectors, as in the proof.
Target
Theorem 14
This is the conversion of a probability oracle into an approximate phase oracle (Gilyén–Arunachalam–Wiebe, Theorem 14).
Let X be a finite set and H the Hilbert space with orthonormal basis {∣x⟩:x∈X}. A probability oracle for p:X→[0,1] with an n-qubit auxiliary register is a unitary Up on H⊗C2n with
for some normalized states ψgood(x),ψbad(x) (the flag is the last qubit). A phase oracle for p on an auxiliary register is a unitary Op with Op∣x⟩∣0⟩=eip(x)∣x⟩∣0⟩ for all x∈X.
There is an absolute constant C>0 such that for every ε∈(0,1/3), every finite X and every n≥1 there are a number a≤Cloglog(1/ε) of extra qubits and a quantum circuit O on H⊗C2n+a, built from input-independent unitaries and at most Clog(1/ε) (uncontrolled) applications of Up and Up†, such that for every p, every probability oracle Up for p, every phase oracle Op for p on n+a auxiliary qubits, and every unit vector ∣ψ⟩∈H,
O∣ψ⟩∣0⟩⊗(n+a)−Op∣ψ⟩∣0⟩⊗(n+a)≤ε.
This shows that the probability oracles arising from parametrized quantum circuits can be used wherever a phase oracle is needed, at only logarithmic overhead in the precision.
Formalization Note The circuit is fixed before p and Up; the source's n-qubit auxiliary register is written n=m+1. The source's "for all ∣ψ⟩∈H" is read for unit vectors, as in the proof.
Lemma 16
This is the conversion of a phase oracle into a probability oracle (Gilyén–Arunachalam–Wiebe, Lemma 16).
Let X be a finite set, H the Hilbert space with orthonormal basis {∣x⟩:x∈X}, and let Op be a phase oracle for p:X→R on H⊗C2w, i.e. a unitary with Op∣x⟩∣0⟩⊗w=eip(x)∣x⟩∣0⟩⊗w for all x∈X.
There is an absolute constant C>0 such that for all ε,δ∈(0,1/2), every finite X and every w there are k and a quantum circuit Up on H⊗C2k+1, built from input-independent unitaries and at most Clog(1/ε)/δ invocations of Op, Op† or their controlled versions, such that for every p:X→[δ,1−δ], every phase oracle Op for p and every x∈X there are p′(x)∈[0,1] and a unit vector ∣Φ⊥⟩ with
Together with Theorem 14 this shows that phase and probability oracles are interconvertible with logarithmic overhead in the precision when the probabilities are bounded away from 0 and 1.
Formalization Note The register ∣0⟩⊗k consists of the w auxiliary qubits of Op and a further qubits (k=w+a); the last qubit is the flag. The source's "for every x∈Rn" is read as x∈X, the domain of p.
Theorem 23
This is the higher-order gradient algorithm of Gilyén–Arunachalam–Wiebe (Theorem 23).
Let f:[−R,R]d→R be accessed through fractional phase queries: for a finite set of query points X⊆[−R,R]d chosen by the algorithm, and every r∈[−1,1], a unitary Ofr with Ofr∣x⟩∣0⟩=eirf(x)∣x⟩∣0⟩ for x∈X; each application of some Ofr counts as one query. For x=0 write ∂rkf(x)=dτkdkf(x+τr)τ=0 (taken within the cube) with r=x/∥x∥, ∥⋅∥ the Euclidean norm.
There is an absolute constant C>0 such that for all d, m∈Z+, R>0, B≥0, ε>0, ρ∈(0,1) and every a-priori gradient bound M>0 there is a quantum algorithm (query points, start state, circuit and classical post-processing of the final measurement, all independent of f) using at most
phase queries with the following property: for every f that is (2m+1)-times differentiable on [−R,R]d, satisfies ∣∂r2m+1f(x)∣≤B for all x∈[−R,R]d∖{0}, r=x/∥x∥, and ∥∇f(0)∥∞≤M, and for every fractional phase oracle for f, the output g satisfies
Pr[∥g−∇f(0)∥∞≤ε]≥1−ρ.
The bound shows that higher-degree central difference formulas reduce the query cost of Jordan's gradient algorithm, exponentially in d for low-degree polynomials.
Formalization Note The known gradient bound M is the hypothesis of Theorem 21 that the proof uses (the query count is independent of M). The factor log(d/ρ) is written 1+log(d/ρ), the proof's repetition count ⌈Clog(d/ρ)⌉≥1. Queries are uncontrolled and non-adjoint, as the proof applies them.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Fix positive smoothness bounds ℓ,ρ, confidence 0<δ<1, and a nonnegative starting gap Δ. Let f:Rn→R be twice differentiable, with globally ℓ-Lipschitz gradient in Euclidean norm and globally ρ-Lipschitz Hessian in operator norm. Assume f attains its finite global minimum f∗, and let the public initial point x0 satisfy f(x0)−f∗=Δ. For 0<ε≤ℓ2/ρ, set g=Δ(logn)2ε−7/4.
There are C>0, a nonnegative integer a, and thresholds n0≥2, g0≥1, depending only on the fixed public parameters. In the regime n≥n0 and g≥g0, a quantum evaluation-query program can be chosen using n,ε,x0 and those public parameters before f and its oracle. For every coherent value-output unitary satisfying Uf∣x,0,0⟩=∣x,f(x),0⟩, its joint output and evaluation-call law obeys
Here Q counts forward and inverse evaluation-oracle applications. There are no free gradient, Hessian or simulation queries. If Δ=0, the program returns x0 without queries, including in dimension one. Positive-gap small dimensions and scales are outside this asymptotic statement.
This is the authors' ideal-oracle existence claim, with the displayed log2n and ε−7/4 dependence and their broad convention O(g)=O(gpoly(logg)). The formal counterpart combines Theorem 4, Eq. (66), pages 18–19, Remark 2 on page 20, and the accelerated evaluation-only extension asserted after Theorem 5 and in Remark 3 on page 24. It does not assert an exact local minimum or correctness of a specific finite-accuracy implementation.
Formalization Note The frozen ideal real-label register and adaptive evaluation-program semantics provide the joint law. The Hessian lower bound is its equivalent quadratic-form inequality on every real vector. Measurability is concluded for the chosen program, and the gap is computed from an attained minimum. The action of the oracle on dirty value registers is left unrestricted.
Target
Theorem 1 (Main result, informal)
Fix positive smoothness bounds ℓ,ρ, confidence 0<δ<1, and a nonnegative starting gap Δ. Let f:Rn→R be twice differentiable, with globally ℓ-Lipschitz gradient in Euclidean norm and globally ρ-Lipschitz Hessian in operator norm. Assume f attains its finite global minimum f∗, and let the public initial point x0 satisfy f(x0)−f∗=Δ. For 0<ε≤ℓ2/ρ, set g=Δ(logn)2ε−7/4.
There are C>0, a nonnegative integer a, and thresholds n0≥2, g0≥1, depending only on the fixed public parameters. In the regime n≥n0 and g≥g0, a quantum evaluation-query program can be chosen using n,ε,x0 and those public parameters before f and its oracle. For every coherent value-output unitary satisfying Uf∣x,0,0⟩=∣x,f(x),0⟩, its joint output and evaluation-call law obeys
Here Q counts forward and inverse evaluation-oracle applications. There are no free gradient, Hessian or simulation queries. If Δ=0, the program returns x0 without queries, including in dimension one. Positive-gap small dimensions and scales are outside this asymptotic statement.
This is the authors' ideal-oracle existence claim, with the displayed log2n and ε−7/4 dependence and their broad convention O(g)=O(gpoly(logg)). The formal counterpart combines Theorem 4, Eq. (66), pages 18–19, Remark 2 on page 20, and the accelerated evaluation-only extension asserted after Theorem 5 and in Remark 3 on page 24. It does not assert an exact local minimum or correctness of a specific finite-accuracy implementation.
Formalization Note The frozen ideal real-label register and adaptive evaluation-program semantics provide the joint law. The Hessian lower bound is its equivalent quadratic-form inequality on every real vector. Measurability is concluded for the chosen program, and the gap is computed from an attained minimum. The action of the oracle on dirty value registers is left unrestricted.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let H be a complete complex Hilbert space and T≥1 an integer. Write Wj=WT(j/T) for unitary walk operators on H, for 0≤j≤T. Choose at each step a spectral band σP(j) and its complement σQ(j). For each valid window j,j+1,…,j+k, with k=0,1,2, enclose the two bands in disjoint closed proper arcs of the unit circle. Use compatible choices in which shorter-window arcs lie in the corresponding longer-window arcs. Let Δk(j)>0 be their minimum angular separation, in radians. The choices may be loose: these quantities need not equal the actual spectral gap.
Define Δ(j)=Δ2(j) when j+2≤T, Δ(j)=Δ1(j) when j+1=T, and Δ(T)=Δ0(T). Let Δˇ(j)=min0≤i≤T,∣i−j∣≤1Δ(i). For nonnegative bounds c1(j),c2(j), possibly dependent on T, suppose
Set c^k(j)=max{ck(i):0≤i,i+k≤T,∣i−j∣≤1}, with value zero if this set is empty, and assume 4c^1(j)/Δˇ(j)≤T at every grid index j.
Let Pj be the spectral projection onto σP(j) and Qj=I−Pj. Construct Sj=Pj+1Pj+Qj+1Qj, vj=(SjSj†)1/2 and Vj=vj−1Sj. Define the chronological evolutions by U0=U0A=I, Uj+1=WjUj, and Uj+1A=VjWjUjA. Then for every integer 0≤n≤T,
Here ∥⋅∥ is the full operator norm and empty sums equal zero. This quantitative discrete adiabatic estimate retains the dependence on the first two forward differences and the chosen angular gaps.
Formalization Note The frozen spectral-window structure encodes compatible nested arc choices and T≥T∗; spectral projections use continuous functional calculus. Finite ordinal intervals encode exactly the displayed integer summation ranges, including n=0 and T=1. The chronological product and neighboring minimum follow the proof's conventions where the introductory indexing and the appendix's word “maximum” are misprinted.
Target
Theorem 3, Section II.B, Eq. (15)
Let H be a complete complex Hilbert space and T≥1 an integer. Write Wj=WT(j/T) for unitary walk operators on H, for 0≤j≤T. Choose at each step a spectral band σP(j) and its complement σQ(j). For each valid window j,j+1,…,j+k, with k=0,1,2, enclose the two bands in disjoint closed proper arcs of the unit circle. Use compatible choices in which shorter-window arcs lie in the corresponding longer-window arcs. Let Δk(j)>0 be their minimum angular separation, in radians. The choices may be loose: these quantities need not equal the actual spectral gap.
Define Δ(j)=Δ2(j) when j+2≤T, Δ(j)=Δ1(j) when j+1=T, and Δ(T)=Δ0(T). Let Δˇ(j)=min0≤i≤T,∣i−j∣≤1Δ(i). For nonnegative bounds c1(j),c2(j), possibly dependent on T, suppose
Set c^k(j)=max{ck(i):0≤i,i+k≤T,∣i−j∣≤1}, with value zero if this set is empty, and assume 4c^1(j)/Δˇ(j)≤T at every grid index j.
Let Pj be the spectral projection onto σP(j) and Qj=I−Pj. Construct Sj=Pj+1Pj+Qj+1Qj, vj=(SjSj†)1/2 and Vj=vj−1Sj. Define the chronological evolutions by U0=U0A=I, Uj+1=WjUj, and Uj+1A=VjWjUjA. Then for every integer 0≤n≤T,
Here ∥⋅∥ is the full operator norm and empty sums equal zero. This quantitative discrete adiabatic estimate retains the dependence on the first two forward differences and the chosen angular gaps.
Formalization Note The frozen spectral-window structure encodes compatible nested arc choices and T≥T∗; spectral projections use continuous functional calculus. Finite ordinal intervals encode exactly the displayed integer summation ranges, including n=0 and T=1. The chronological product and neighboring minimum follow the proof's conventions where the introductory indexing and the appendix's word “maximum” are misprinted.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Let Ω={O1,…,Om} be a finite family of known implementable completely positive trace-preserving maps on an n-qubit device. Maps may include noisy initialization and need not be unitary or unital. Let β be a length-L word in a fixed finite unitary gate family, with composite unitary Uβ. Assume a supplied exact quasi-probability representation, fixed before all experimental outcomes:
UβXUβ†=γβα∈ΩL∑Pβ(α)σβ(α)Oα(X)for every operator X,
where γβ≥1, Pβ is a probability distribution on length-L noisy words, σβ(α)∈{−1,1}, and Oα=OαL∘⋯∘Oα1. Each experiment starts from a fresh ρ0=∣0⟩⟨0∣⊗n and ends with ideal computational-basis measurement of every qubit. Let A=diag(ax) with ax∈[−1,1]. Set E(α)=Tr(AOα(ρ0)) and E∗=Tr(AUβρ0Uβ†).
Conditioned on any noisy word, the readout ax has mean E(α) and variance at most 1. Moreover,
E∗=γβα∑Pβ(α)σβ(α)E(α).
For a full trial, first draw α∼Pβ, then draw its fresh conditional readout x and report Y=γβσβ(α)ax. This gives ∣Y∣≤γβ, EY=E∗ and Var(Y)≤γβ2. For every positive integer M, perform M independent full trials and compute the paper's estimator
The computed experiment uses exactly M noisy-circuit runs and ML channel applications, all on the same n-qubit register. For every δ>0, the rounded Eq. (9) budget M=⌈(γβ/δ)2⌉ is positive and satisfies
γβ2≤Mδ2<γβ2+δ2,Pr{∣E−E∗∣≥cδ}≤2e−c2/2(c>0).
These universal numerical bounds witness the paper's bounded-variance, Monte Carlo precision and γβ2 run-overhead claims. The overhead describes a sufficient sampling budget relative to the noiseless δ−2 scale, without claiming optimality for every observable.
Formalization Note The theorem uses the supplied QPR distribution directly and makes no classical runtime claim; the paper's efficient sampling and computable-sign premises concern its implementation. Locality and depth preservation require the chosen QPR construction and are not inferred from the decomposition alone. The displayed tail bound spells out “O(δ) w.h.p.”: choosing a sufficiently large fixed c makes the failure small, but fixed c does not imply a failure probability vanishing with δ.
Let Ω={O1,…,Om} be a finite family of known implementable completely positive trace-preserving maps on an n-qubit device. Maps may include noisy initialization and need not be unitary or unital. Let β be a length-L word in a fixed finite unitary gate family, with composite unitary Uβ. Assume a supplied exact quasi-probability representation, fixed before all experimental outcomes:
UβXUβ†=γβα∈ΩL∑Pβ(α)σβ(α)Oα(X)for every operator X,
where γβ≥1, Pβ is a probability distribution on length-L noisy words, σβ(α)∈{−1,1}, and Oα=OαL∘⋯∘Oα1. Each experiment starts from a fresh ρ0=∣0⟩⟨0∣⊗n and ends with ideal computational-basis measurement of every qubit. Let A=diag(ax) with ax∈[−1,1]. Set E(α)=Tr(AOα(ρ0)) and E∗=Tr(AUβρ0Uβ†).
Conditioned on any noisy word, the readout ax has mean E(α) and variance at most 1. Moreover,
E∗=γβα∑Pβ(α)σβ(α)E(α).
For a full trial, first draw α∼Pβ, then draw its fresh conditional readout x and report Y=γβσβ(α)ax. This gives ∣Y∣≤γβ, EY=E∗ and Var(Y)≤γβ2. For every positive integer M, perform M independent full trials and compute the paper's estimator
The computed experiment uses exactly M noisy-circuit runs and ML channel applications, all on the same n-qubit register. For every δ>0, the rounded Eq. (9) budget M=⌈(γβ/δ)2⌉ is positive and satisfies
γβ2≤Mδ2<γβ2+δ2,Pr{∣E−E∗∣≥cδ}≤2e−c2/2(c>0).
These universal numerical bounds witness the paper's bounded-variance, Monte Carlo precision and γβ2 run-overhead claims. The overhead describes a sufficient sampling budget relative to the noiseless δ−2 scale, without claiming optimality for every observable.
Formalization Note The theorem uses the supplied QPR distribution directly and makes no classical runtime claim; the paper's efficient sampling and computable-sign premises concern its implementation. Locality and depth preservation require the chosen QPR construction and are not inferred from the decomposition alone. The displayed tail bound spells out “O(δ) w.h.p.”: choosing a sufficiently large fixed c makes the failure small, but fixed c does not imply a failure probability vanishing with δ.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Efficient quantum tomography establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
Let d,n≥1 be integers and let ρ be an arbitrary complex d×d density matrix, including a singular one. Write α for its decreasingly sorted spectrum. On n independent copies ρ⊗n, perform weak Schur sampling and then Keyl's normalized highest-weight POVM in the Schur module of the observed partition. The first outcome λ is a partition of n with at most d rows and has distribution SWn(α). Conditional on any positive-probability partition, the second outcome U∈U(d) has law Kλ(ρ). Put λ=(λ1/n,…,λd/n), padding the rows by zeros, and report ρ=Udiag(λ)U†. Then
Eλ∼SWn(α),U∼Kλ(ρ)[∥ρ−ρ∥F2]≤n4d−3,
where ∥A∥F2=∑i,j∣Aij∣2. The measurement is fixed by d,n before the unknown input state is supplied. This is the paper's expected-risk guarantee for the named estimator.
Formalization Note The theorem also certifies a lawful continuous-outcome POVM, chosen before ρ, whose Born law is the frozen computed joint law. The nonnegative risk is a Lebesgue integral in [0,∞]; the finite bound ensures finiteness. The joint density relative to counting measure on partitions and probability Haar measure is dim(Spλ)dim(Vλd)Δλ(U†ρU), combining source equations (8), (9), and (11). This removes division by a zero Schur probability without excluding singular states.
Target
Theorem 1.2
Let d,n≥1 be integers and let ρ be an arbitrary complex d×d density matrix, including a singular one. Write α for its decreasingly sorted spectrum. On n independent copies ρ⊗n, perform weak Schur sampling and then Keyl's normalized highest-weight POVM in the Schur module of the observed partition. The first outcome λ is a partition of n with at most d rows and has distribution SWn(α). Conditional on any positive-probability partition, the second outcome U∈U(d) has law Kλ(ρ). Put λ=(λ1/n,…,λd/n), padding the rows by zeros, and report ρ=Udiag(λ)U†. Then
Eλ∼SWn(α),U∼Kλ(ρ)[∥ρ−ρ∥F2]≤n4d−3,
where ∥A∥F2=∑i,j∣Aij∣2. The measurement is fixed by d,n before the unknown input state is supplied. This is the paper's expected-risk guarantee for the named estimator.
Formalization Note The theorem also certifies a lawful continuous-outcome POVM, chosen before ρ, whose Born law is the frozen computed joint law. The nonnegative risk is a Lebesgue integral in [0,∞]; the finite bound ensures finiteness. The joint density relative to counting measure on partitions and probability Haar measure is dim(Spλ)dim(Vλd)Δλ(U†ρU), combining source equations (8), (9), and (11). This removes division by a zero Schur probability without excluding singular states.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Sample-optimal tomography of quantum statesResearch Paper
Motivation
Sample-optimal tomography of quantum states establishes the selected mathematical guarantees below. The mission turns those original paper results into precise Lean proof targets.
Setting
Let d,n≥1 be integers. Let Λd,n be the partitions of n with at most d rows, let λˉ=diag(λ1/n,…,λd/n), and let Πλ be the projector onto the full Schur–Weyl summand Qλ⊗Pλ of (Cd)⊗n. Write sλ for the Schur character polynomial, so dimQλ=sλ(1,…,1).
Independently of the unknown state, there exists a lawful continuous collective POVM with outcomes (λ,U)∈Λd,n×U(d), reference measure given by counting measure on Λd,n times normalized Haar measure on U(d), and density
M(λ,U)=sλ(λˉ)dimQλΠλ(UλˉU†)⊗nΠλ.
Its reported density matrix is ρ^(λ,U)=UλˉU†.
For every positive semidefinite matrix ρ∈Cd×d with Trρ=1, the Born outcome law on the input ρ⊗n is a probability measure. Writing r=rankρ, for every δ∈[0,1] it satisfies
This is the original finite-copy fidelity guarantee for the equation-(10) measurement. The same measurement works for every unknown state and automatically gives the bound corresponding to its actual rank.
Target
§V, equations (10) and (14)
Let d,n≥1 be integers. Let Λd,n be the partitions of n with at most d rows, let λˉ=diag(λ1/n,…,λd/n), and let Πλ be the projector onto the full Schur–Weyl summand Qλ⊗Pλ of (Cd)⊗n. Write sλ for the Schur character polynomial, so dimQλ=sλ(1,…,1).
Independently of the unknown state, there exists a lawful continuous collective POVM with outcomes (λ,U)∈Λd,n×U(d), reference measure given by counting measure on Λd,n times normalized Haar measure on U(d), and density
M(λ,U)=sλ(λˉ)dimQλΠλ(UλˉU†)⊗nΠλ.
Its reported density matrix is ρ^(λ,U)=UλˉU†.
For every positive semidefinite matrix ρ∈Cd×d with Trρ=1, the Born outcome law on the input ρ⊗n is a probability measure. Writing r=rankρ, for every δ∈[0,1] it satisfies
This is the original finite-copy fidelity guarantee for the equation-(10) measurement. The same measurement works for every unknown state and automatically gives the bound corresponding to its actual rank.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the main convex-optimization guarantee of the Lee–Sidford–Wong cutting plane method (Theorem 42), the result cited as Theorem 5.23 in Nannicini's lecture notes.
For r>0 let B∞(r)={x∈Rn:∥x∥∞≤r}. For a set K⊆Rn, MinWidth(K)=inf∥a∥2=1supx,y∈K⟨a,x−y⟩. Given a convex f:Rn→R, a convex set Γ and η,δ≥0, an (η,δ)-separation oracle on Γ for f is a map that, on every input x∈Γ, either asserts f(x)≤miny∈Γf(y)+η, or outputs a half space H={z:c⊤z≤c⊤x+b} with c=0, b≤δ∥c∥2 and {z∈Γ:f(z)≤f(x)}⊆H.
There are universal constants c,C>0 such that the following holds. Let n≥1, R>0, 0<α<1 and w>0, and put
κ=wR,L=log(2+αnκ),δ=n3/2Lcαw.
There is a randomized algorithm A, depending only on n,R,α,w, that queries an oracle at points of Rn and returns a point x∈Rn, with the following property. For every η≥0, every convex f:Rn→R, every convex set Ω⊆B∞(R) with MinWidth(Ω)=w containing a global minimizer x∗ of f, and every (η,δ)-separation oracle O on B∞(R) for f:
on every run, the returned point satisfies
f(x)−y∈Ωminf(y)≤η+α(y∈Ωsupf(y)−y∈Ωminf(y));
the expected number of oracle calls is at most CnL.
The oracle only needs to satisfy its specification at points of B∞(R). The result turns a cutting plane method into an optimization method whose number of oracle calls is linear in the dimension up to a logarithm, and many of the paper's applications rest on it.
Formalization Note A randomized algorithm is a probability mass function over deterministic adaptive query strategies (decision trees with real-vector queries). The paper prints lnκ in δ. Its proof gives log(nκ/α), and κ≤1 is possible, which would make the printed δ non-positive, so L=log(2+nκ/α) is used in both places. Only the oracle part of the running time is formalized. The additional arithmetic time n3logO(1)(nκ/α) is omitted because the paper fixes no machine model for real arithmetic.
Target
Theorem 42
This is the main convex-optimization guarantee of the Lee–Sidford–Wong cutting plane method (Theorem 42), the result cited as Theorem 5.23 in Nannicini's lecture notes.
For r>0 let B∞(r)={x∈Rn:∥x∥∞≤r}. For a set K⊆Rn, MinWidth(K)=inf∥a∥2=1supx,y∈K⟨a,x−y⟩. Given a convex f:Rn→R, a convex set Γ and η,δ≥0, an (η,δ)-separation oracle on Γ for f is a map that, on every input x∈Γ, either asserts f(x)≤miny∈Γf(y)+η, or outputs a half space H={z:c⊤z≤c⊤x+b} with c=0, b≤δ∥c∥2 and {z∈Γ:f(z)≤f(x)}⊆H.
There are universal constants c,C>0 such that the following holds. Let n≥1, R>0, 0<α<1 and w>0, and put
κ=wR,L=log(2+αnκ),δ=n3/2Lcαw.
There is a randomized algorithm A, depending only on n,R,α,w, that queries an oracle at points of Rn and returns a point x∈Rn, with the following property. For every η≥0, every convex f:Rn→R, every convex set Ω⊆B∞(R) with MinWidth(Ω)=w containing a global minimizer x∗ of f, and every (η,δ)-separation oracle O on B∞(R) for f:
on every run, the returned point satisfies
f(x)−y∈Ωminf(y)≤η+α(y∈Ωsupf(y)−y∈Ωminf(y));
the expected number of oracle calls is at most CnL.
The oracle only needs to satisfy its specification at points of B∞(R). The result turns a cutting plane method into an optimization method whose number of oracle calls is linear in the dimension up to a logarithm, and many of the paper's applications rest on it.
Formalization Note A randomized algorithm is a probability mass function over deterministic adaptive query strategies (decision trees with real-vector queries). The paper prints lnκ in δ. Its proof gives log(nκ/α), and κ≤1 is possible, which would make the printed δ non-positive, so L=log(2+nκ/α) is used in both places. Only the oracle part of the running time is formalized. The additional arithmetic time n3logO(1)(nκ/α) is omitted because the paper fixes no machine model for real arithmetic.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the quantum algorithm for finding the first marked element of an ordered list (Lin–Lin, Theorem 10).
A list of N elements is given as a black box x∈{0,1}N, where xi=1 means that element i is marked; it is accessed through the standard query oracle Ox:∣i,b⟩↦∣i,b⊕xi⟩. An algorithm consists of rounds; each round applies UTOxUT−1⋯OxU0 to a fixed start state with unitaries Ut independent of x, measures in the computational basis, and chooses the next round (or halts with an answer) from the outcome. For an input x let first(x) be the position of the first marked element, or ⊥ if none is marked.
There is an absolute constant C>0 such that for every N there is an algorithm A, fixed before the input, such that for every x∈{0,1}N:
Pr[A outputs first(x)]≥9/10;
if the first marked element is the d-th element of the list, then the expected number of queries satisfies
E[#queries of A on x]≤Cd;
if no element is marked, then A outputs ⊥ with probability 1, and every run uses at most CN queries.
The point is that the cost adapts to the position of the first marked element rather than to the length of the list; this is the search subroutine used to simulate classical query algorithms whose query results can be guessed.
Formalization Note Algorithms are finite trees of query rounds with measurements in between. Positions are 0-indexed, so the d-th element is index d−1 and the bound reads Ci+1. The error constant 1/10 is the one achieved by the paper's proof (Appendix C). The source's time bounds are not formalized, because the paper fixes no model of time; only the query bounds are stated.
Target
Theorem 10
This is the quantum algorithm for finding the first marked element of an ordered list (Lin–Lin, Theorem 10).
A list of N elements is given as a black box x∈{0,1}N, where xi=1 means that element i is marked; it is accessed through the standard query oracle Ox:∣i,b⟩↦∣i,b⊕xi⟩. An algorithm consists of rounds; each round applies UTOxUT−1⋯OxU0 to a fixed start state with unitaries Ut independent of x, measures in the computational basis, and chooses the next round (or halts with an answer) from the outcome. For an input x let first(x) be the position of the first marked element, or ⊥ if none is marked.
There is an absolute constant C>0 such that for every N there is an algorithm A, fixed before the input, such that for every x∈{0,1}N:
Pr[A outputs first(x)]≥9/10;
if the first marked element is the d-th element of the list, then the expected number of queries satisfies
E[#queries of A on x]≤Cd;
if no element is marked, then A outputs ⊥ with probability 1, and every run uses at most CN queries.
The point is that the cost adapts to the position of the first marked element rather than to the length of the list; this is the search subroutine used to simulate classical query algorithms whose query results can be guessed.
Formalization Note Algorithms are finite trees of query rounds with measurements in between. Positions are 0-indexed, so the d-th element is index d−1 and the bound reads Ci+1. The error constant 1/10 is the one achieved by the paper's proof (Appendix C). The source's time bounds are not formalized, because the paper fixes no model of time; only the query bounds are stated.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the headline MaxCut guarantee of the Quantum Approximate Optimization Algorithm (QAOA) at depth p=1.
Let G=(V,E) be a connected 3-regular simple graph on n vertices. For a bit string z∈{0,1}n let C(z) be the number of edges ⟨jk⟩∈E with zj=zk; as an operator, C=∑⟨jk⟩∈E21(1−σjzσkz) is diagonal in the computational basis. Let B=∑j=1nσjx, let ∣s⟩=2−n/2∑z∣z⟩ be the uniform superposition, and for angles γ,β let
the expected cut value of the string obtained by measuring ∣γ,β⟩ in the computational basis. Then there exist angles γ∈[0,2π] and β∈[0,π] such that
F1(γ,β)≥0.6924⋅z∈{0,1}nmaxC(z).
Equivalently, M1=maxγ,βF1(γ,β) is at least 0.6924 times the size of the maximum cut. The constant 0.6924 is the numerically computed (rounded-down) worst-case ratio, attained in the limit of graphs without triangles; the source's derivation is partly numerical.
Formalization Note The graph is a SimpleGraph (Fin n) with Connected and IsRegularOfDegree 3. The approximation ratio is measured, as in the source's argument (34), through the expectation F1 at the best angles; the source's informal remark that order nlogn repetitions find a string with cut value near M1 is not part of the statement.
Target
Abstract and §V (unnumbered)
This is the headline MaxCut guarantee of the Quantum Approximate Optimization Algorithm (QAOA) at depth p=1.
Let G=(V,E) be a connected 3-regular simple graph on n vertices. For a bit string z∈{0,1}n let C(z) be the number of edges ⟨jk⟩∈E with zj=zk; as an operator, C=∑⟨jk⟩∈E21(1−σjzσkz) is diagonal in the computational basis. Let B=∑j=1nσjx, let ∣s⟩=2−n/2∑z∣z⟩ be the uniform superposition, and for angles γ,β let
the expected cut value of the string obtained by measuring ∣γ,β⟩ in the computational basis. Then there exist angles γ∈[0,2π] and β∈[0,π] such that
F1(γ,β)≥0.6924⋅z∈{0,1}nmaxC(z).
Equivalently, M1=maxγ,βF1(γ,β) is at least 0.6924 times the size of the maximum cut. The constant 0.6924 is the numerically computed (rounded-down) worst-case ratio, attained in the limit of graphs without triangles; the source's derivation is partly numerical.
Formalization Note The graph is a SimpleGraph (Fin n) with Connected and IsRegularOfDegree 3. The approximation ratio is measured, as in the source's argument (34), through the expectation F1 at the best angles; the source's informal remark that order nlogn repetitions find a string with cut value near M1 is not part of the statement.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
This is the main result of Farhi, Goldstone and Gutmann on the level-one Quantum Approximate Optimization Algorithm (QAOA) for bounded-occurrence Max E3LIN2.
An instance of Max E3LIN2 on n bits is a set of m linear equations over F2, each of the form xa+xb+xc=d(mod2) with three distinct variables a,b,c and right-hand side d∈{0,1}, at most one equation per triple {a,b,c}. Let C(z) be the number of equations satisfied by z∈{0,1}n, viewed as the diagonal operator C∣z⟩=C(z)∣z⟩; let B=X1+⋯+Xn and ∣s⟩=2−n/2∑z∣z⟩. For real γ,β put
∣γ,β⟩=e−iβBe−iγC∣s⟩,
so that F(γ,β)=⟨γ,β∣C∣γ,β⟩=∑z∣⟨z∣γ,β⟩∣2C(z) is the expected number of equations satisfied by the string obtained by measuring ∣γ,β⟩ in the computational basis.
Theorem. There is D0 such that for every integer D≥D0, every n, and every such instance in which each bit occurs in at most D+1 equations, there exists γ with ∣γ∣≤10D1/21 such that
F(γ,4π)≥(21+101D1/2lnD1)m.
A uniformly random string satisfies m/2 equations on average; the theorem shows that one round of QAOA beats random guessing by a term of order 1/(D1/2lnD), uniformly over all bounded-occurrence instances, and in particular that every such instance has an assignment satisfying that many equations.
Formalization Note The source's qualifier "for large D" is rendered as an existential threshold D0 quantified before D, n and the instance. The objective is the unshifted count of satisfied equations; the paper's shifted operator (6) differs by the constant m/2, which only contributes a global phase to e−iγC.
Target
§II main result (unnumbered), eqs. (43)–(45)
This is the main result of Farhi, Goldstone and Gutmann on the level-one Quantum Approximate Optimization Algorithm (QAOA) for bounded-occurrence Max E3LIN2.
An instance of Max E3LIN2 on n bits is a set of m linear equations over F2, each of the form xa+xb+xc=d(mod2) with three distinct variables a,b,c and right-hand side d∈{0,1}, at most one equation per triple {a,b,c}. Let C(z) be the number of equations satisfied by z∈{0,1}n, viewed as the diagonal operator C∣z⟩=C(z)∣z⟩; let B=X1+⋯+Xn and ∣s⟩=2−n/2∑z∣z⟩. For real γ,β put
∣γ,β⟩=e−iβBe−iγC∣s⟩,
so that F(γ,β)=⟨γ,β∣C∣γ,β⟩=∑z∣⟨z∣γ,β⟩∣2C(z) is the expected number of equations satisfied by the string obtained by measuring ∣γ,β⟩ in the computational basis.
Theorem. There is D0 such that for every integer D≥D0, every n, and every such instance in which each bit occurs in at most D+1 equations, there exists γ with ∣γ∣≤10D1/21 such that
F(γ,4π)≥(21+101D1/2lnD1)m.
A uniformly random string satisfies m/2 equations on average; the theorem shows that one round of QAOA beats random guessing by a term of order 1/(D1/2lnD), uniformly over all bounded-occurrence instances, and in particular that every such instance has an assignment satisfying that many equations.
Formalization Note The source's qualifier "for large D" is rendered as an existential threshold D0 quantified before D, n and the instance. The objective is the unshifted count of satisfied equations; the paper's shifted operator (6) differs by the constant m/2, which only contributes a global phase to e−iγC.
Significance
These are known results from the cited paper. The current contribution consists of source-reviewed, compiler-checked theorem statements and mathematical definitions. Formal proofs remain open. Only the listed selected results are in scope; no whole-paper completeness is claimed.
Difficulty
A complete solution must establish every quantified conclusion under the exact stated hypotheses, including error, probability and resource conditions wherever present. The source assumptions and conventions are recorded in the attached statements and independent readbacks.
Formalization scope
Definitions preserve the existing reviewed Lean interfaces. Every target proof is currently sorry, so each target is Open. Printed-source corrections, where necessary, are labeled with the printed claim, the change and its reason.
Infinite-Dimensional Fisher Markets and Tractable Fair Division 1: The Eisenberg–Gale Programs Attain Their Optima, One at a Pure Allocation, and Optimal Pairs Are Exactly the Market EquilibriaResearch Paper
Why continuum Fisher markets matter
A Fisher market divides a supply of goods among buyers with fixed budgets. In a finite market, each good is a separate coordinate. Fair division can instead involve a continuum of items, such as locations along an interval or points in a region, where a buyer's valuation varies measurably from point to point. Finite dimensional existence and duality arguments do not automatically apply: the allocation is now a function, and the feasible set need not be compact in its natural function space. Gao and Kroer formulate a market and two Eisenberg–Gale programs for this setting, then prove that their optima exist and characterize equilibrium Gao and Kroer, §3.
The result also connects market equilibrium to fair division. A pure allocation assigns measurable regions of the item space to buyers, allowing overlap only on null sets. Existence of a pure optimizer means that a market outcome can be represented by such a division, rather than by fractional shares at each item. The same paper derives Pareto optimality, budget weighted envy freeness, and proportionality for equilibrium allocations Gao and Kroer, Theorems 1 and 3.
Market, allocations, and programs
The item spaceΘ is a compact subset of Rd with restricted Lebesgue measure μ. There are n buyers. Buyer i has a budget Bi>0 and a nonnegative integrable valuation densityvi with ∫Θvidμ>0. The utility of a bounded nonnegative bundlexi is ⟨vi,xi⟩=∫Θvixidμ. An allocationx=(xi) is feasible when ∑ixi≤1 almost everywhere. It is pure when each xi equals the indicator of a measurable set Θi⊆Θ, up to almost everywhere equality, and these sets are pairwise disjoint up to null sets. Leftover items are allowed.
A nonnegative integrable price densityp defines a buyer's affordable bundles by ⟨p,xi⟩≤Bi. A market equilibrium(x,p) is a feasible allocation and price at which every buyer maximizes utility among affordable bundles and ⟨p,1−∑ixi⟩=0. Thus unallocated supply may remain only where it has zero price. The paper's primal Eisenberg–Gale program, PEG, maximizes weighted log utility over feasible allocations. Its dual program, DEG, minimizes total price minus weighted log multipliers subject to p≥βivi almost everywhere Gao and Kroer, pp. 6–8.
Formalization targets
The goal is the three part Theorem 1. In the notation above, it asserts attainment of the primal objective at a pure allocation, attainment of the dual objective with a unique multiplier vector β∗ and price p∗=maxiβi∗vi almost everywhere, and the equivalence
(x,p) is a market equilibrium⟺x optimizes PEGand(p,β∗) optimizes DEG.
The milestone list follows the results the paper uses to reach that goal. Lemma A.1 gives a convex, compact range for utility matrices and, under atomlessness, identifies mixed and partition based ranges. Lemma 1 specializes this to the market's feasible utility set U, proving that U is compact and convex and equals the pure utility set U′. Lemma 2 establishes attainment and uniqueness in the finite dimensional reduction of the dual problem. Lemma 3 gives weak duality with the paper's constant C=∑iBi−∑iBilogBi and its three optimality conditions. Theorem 2 expands the equivalence between optimality and equilibrium, including budget exhaustion and the utility formula ⟨vi,xi⟩=Bi/βi. These are the paper's numbered results on pp. 8–10 and a1 Gao and Kroer, §3 and Appendix A.1.
The proposal also states Theorem 3, Lemma 4, and Corollaries 1–3 as companion results. They record the resulting fairness properties, normalized equilibrium bounds, winning sets, a construction of dual prices from a pure optimum, and a test for a pure equilibrium Gao and Kroer, pp. 10–11.
What the result provides
Theorem 1 shows that the two programs give actual allocations and prices in the continuum market, not merely limiting objective values. The pure optimizer provides measurable regions for buyers. The dual multipliers give a unique utility price for each buyer, while the price density is determined almost everywhere. Theorem 2 makes these program outputs economically interpretable: each buyer exhausts its budget at equilibrium. Theorem 3 then supplies efficiency and fairness guarantees for those allocations Gao and Kroer, Theorems 1–3.
These results are proved in the cited paper. This mission asks for machine checked Lean proofs of those mathematical statements. Its definitions of allocations, demand, equilibrium, the two programs, and feasible utilities could also support formalization of the paper's later geometric and quasilinear results. The draft declarations compile as open statements; compilation does not establish the theorems.
Why the proof is difficult
The feasible allocations are bounded in an infinite dimensional function space, but that does not make the set compact in the topology used for the optimization problem. The paper instead needs compactness of the finite dimensional set of achievable utility vectors. The range result in Lemma A.1 is therefore central, and its atomless conclusion must be strong enough to replace fractional allocations by measurable partitions Gao and Kroer, Lemma 1 and Appendix A.1.
Standard constraint qualification arguments also do not supply the required duality theorem here: the positive cone in L1(Θ) has empty interior. The proposal consequently asks for the paper's specific weak duality inequality, attainment, and optimality characterization rather than assuming a general finite dimensional duality theorem applies Gao and Kroer, Remark 1.
Formalization scope
Lean uses real valued measurable functions on the ambient Euclidean space with measure μ=volume∣Θ. It identifies prices and allocations up to μ almost everywhere equality, as the paper identifies L1 and L∞ equivalence classes. Bundles must belong to L∞(μ) and prices and valuations must be integrable; these conditions prevent a nonintegrable product from receiving Lean's default integral value of zero. The number of buyers may be zero, consistent with the finite index formulation, while the standing positivity hypotheses apply to every buyer present.
The real logarithm in Lean returns zero at zero. The optimization predicates instead require positive utility or positive dual multipliers and compare only with other positive points, matching the paper's log0=−∞ objective convention. The maximization over buyers is the finite supremum supiβivi. Price and allocation uniqueness is stated almost everywhere; multiplier uniqueness is exact. Lemma A.1 uses the paper's divisible measure condition for atomlessness and fixes its unnamed almost everywhere partition convention by requiring ∑jxj=1 everywhere. Corollary 3 explicitly requires each denominator vi(Θi) to be positive. Lemma 4 alone assumes the normalizations vi(Θ)=1 and ∑iBi=1, which the paper recalls before its statement.
The goal remains the full three part theorem. It does not assume the range theorem, duality equality, or optimality conditions it is meant to establish. Contributions to the measure range theorem, utility set compactness, the dual reduction, and the equilibrium characterization are all within scope.
Selected references
Yuan Gao and Christian Kroer, Infinite-Dimensional Fisher Markets and Tractable Fair Division, Operations Research, 2023; formalization follows arXiv:2010.03025v5, 2021, §§2–3 and Appendix A.1.
Quantifying the Impact of Impact Investing II: Moments of Impact-Ranked Omitted-Factor Returns under Cross-Sectionally Correlated Gaussian Impact FactorsResearch Paper
Why impact-ranked portfolios can earn excess returns
Impact investing selects securities by a non-financial score, an ESG rating, a carbon intensity, a measure of social benefit, and asks whether such a selection earns an excess return. A. W. Lo and R. Zhang (SSRN 3944367; published in Management Science, DOI 10.1287/mnsc.2022.01168) model the score as an impact factorX and study the returns of securities ranked by X with the tools of induced order statistics (concomitants), introduced by Bhattacharya (1974) and David (1973).
Section 4.3 of the paper gives an equilibrium reading of the apparent excess return. In a K-factor asset-pricing model with no mispricing, an investor who accounts only for the first factor sees the contribution λi of the omitted factors 2,…,K to security i's return as alpha. If the impact factor is correlated with these omitted factors, ranking by impact selects omitted-factor risk, and the selected portfolio appears to earn an excess return. Empirical studies of sin stocks (Blitz and Fabozzi, 2017) and ESG scores (Madhavan, Sobczyk and Ang, 2021) report exactly this effect. Proposition 5 quantifies it in closed form.
Setting
There are N securities. For security i, Xi is its impact factor and λi the total net contribution of the omitted factors to its return. Write X=(X1,…,XN) and λ=(λ1,…,λN), random vectors on a probability space (Ω,F,P).
Order statistics. Sorting the entries of X increasingly gives X1:N≤⋯≤XN:N, the order statistics of X. If π is the sorting permutation, Xi:N=Xπ(i), and the induced order statisticλ[i:N]=λπ(i) is the omitted-factor return of the security with the i-th smallest impact factor. The order is induced by X, never by λ (display (6), p. 11).
Assumption (A2) (p. 19). The vector (X,λ) is Gaussian with exchangeable first and second moments: E[Xi]=μx, E[λi]=μλ, Var(Xi)=σx2, Var(λi)=σλ2, Corr(Xi,λi)=ρx,λ, and for i=j, Corr(Xi,Xj)=ρx, Corr(λi,λj)=ρλ, Corr(Xi,λj)=ρ~x,λ. The paper normalises μx=0 and σx=1 and keeps a free premium μλ. The adjusted correlation is
ρadj=1−ρxρx,λ−ρ~x,λ.(24)
Formalization targets
Goal: Proposition 5 (pp. 19–20)
Under (A2), for every rank i and every pair of ranks i=j,
The goal states (27) with the factor σλ2 on the last term. The paper prints (ρλ−ρxρadj2) without it. That is a slip: replacing λ by cλ with c>0 multiplies the left side by c2 and leaves every correlation unchanged, so the printed formula fails whenever σλ=1. With a=ρadjσλ, the correct value is ρλσλ2+a2(Cov(Xi:N,Xj:N)−ρx), which is the goal's right side.
Milestones
(A.42)–(A.43), p. 68: with P=aI+bL, L=11T/N, a=ρadjσλ and b=(1+(N−1)ρxρx,λ+(N−1)ρ~x,λ−ρadj)σλ, the residual λ−PX is independent of X.
(A.44) = (25), p. 68: the mean formula.
(26), p. 20: the variance formula.
Significance
The result. Proposition 5 shows that the apparent alpha of the security ranked i-th by impact is μλ+ρadjσλE[Xi:N]. A selection rule that looks unrelated to return characteristics still produces nonzero excess returns when it is correlated with omitted priced factors, and the size of the effect is governed by the single number ρadj. The authors use this to argue that impact estimates are unreliable until all known factors are accounted for, and that a persistent impact premium may signal a new factor (an "ESG factor" or a "carbon factor"). The variance and covariance formulas give the risk of any portfolio of impact-ranked securities, through the moments of Gaussian order statistics.
Formalizing it. The paper proves (25) in full and states that (26)–(27) "can be proven similarly"; the printed (27) is off by the factor σλ2. A machine-checked proof settles the corrected constants. No part of this result, and no theory of induced order statistics, is formalized in Lean or elsewhere to our knowledge. The development needs a usable library on concomitants of Gaussian order statistics, which would serve the rest of the paper (Propositions 2, 4 and 6) and the data-snooping analysis of Lo and MacKinlay (1990), which uses the same tools.
Difficulty
The mean formula looks like linearity of expectation, but λ[i:N]=λπ(i) is evaluated at a random index π(i) that depends on X, so E[λπ(i)] is not E[λk] for any fixed k. The decomposition of milestone 1 is what handles this. It requires the full joint Gaussian law of (X,λ), because uncorrelated is not independent otherwise. It also needs a correction term bXˉ through the cross-sectional average, because the cross-correlations ρx and ρ~x,λ make E[λ∣X] depend on all of X. In Lean, the sorting permutation must be shown measurable in X, and the moments of the order statistics must be shown finite.
Formalization scope
X and λ are families Fin N → Ω → ℝ on a probability space. (A2) is the predicate IsA2: joint Gaussianity of the 2N-vector (Mathlib's HasGaussianLaw on (Fin N → ℝ) × (Fin N → ℝ)), plus the moments (22)–(23) stated as covariances with σx=1.
Joint Gaussianity. (A2) as printed asks only that each pair (Xi,λi) be bivariate normal. The proof (A.40) treats (X,λ) as one Gaussian vector that "completely characterizes the joint distribution". The joint reading is the one formalized; under pairwise normality alone the results fail in general.
Normalisations are hypotheses.μx=0 and σx=1 (the paper's "without loss of generality") are fields of IsA2. μλ is free.
Added parameter hypotheses.σλ>0 (implicit in "correlation") and ρx<1 (implicit in the division in (24)). No positive-semidefiniteness condition is added: it follows from the existence of the random vector.
Ranks are 0-based (Fin N): Lean's rank i is the paper's i+1. Sorting uses Tuple.sort, which breaks ties by index; ties have probability zero and the statements hold for any tie-breaking rule. Moments are Mathlib's integral, variance and covariance. The milestones use N where the page writes n in (n−1).
Trivializing readings are ruled out. The hypotheses are satisfiable for every N: a sanity file builds a witness from a standard Gaussian vector. All variables are Gaussian or bounded by Gaussians, so no expectation is Lean's junk value 0 for a non-integrable function.
Out of scope: the multi-factor return model beyond the definition of λ; Proposition 2 and the impact-portfolio results (a separate mission); Treynor–Black weights (Proposition 7); combined portfolios (Proposition 8); asymptotic statements (Propositions 3, A.1, A.2).
Contributions welcome: measurability of Tuple.sort as a function of the data; integrability and moments of Gaussian order statistics; moments of a vector independent of X read at an X-dependent random index. Each of these is reusable well beyond this mission.
P. K. Bhattacharya, Convergence of Sample Paths of Normalized Sums of Induced Order Statistics, Annals of Statistics 2(5), 1974.
H. A. David, Concomitants of Order Statistics, Bulletin of the International Statistical Institute 45, 1973. (No DOI.)
A. W. Lo and A. C. MacKinlay, Data-Snooping Biases in Tests of Financial Asset Pricing Models, Review of Financial Studies 3(3), 1990. https://doi.org/10.1093/rfs/3.3.431
D. Blitz and F. J. Fabozzi, Sin Stocks Revisited: Resolving the Sin Stock Anomaly, Journal of Portfolio Management 44(1), 2017.
A. Madhavan, A. Sobczyk and A. Ang, Toward ESG Alpha: Analyzing ESG Exposures through a Factor Lens, Financial Analysts Journal 77(1), 2021.
Punish Underperformance with Suspension: Optimal Dynamic Contracts in the Presence of Switching Cost I: Condition 1, High Switching Cost, Not-Hiring Value Functions Meet the Optimality ConditionsResearch Paper
Motivation
Many service relationships let a firm pause an agent instead of firing them: a sales representative who brings in no customers for a while is suspended, a contractor is laid off for a season and recalled. Pausing is not free. Every restart carries a switching costK (re-training, re-establishing a territory, setting up the work environment), so a principal who suspends too readily pays for it. Cao, Sun and Tian (Management Science, 2024) study the optimal dynamic contract for this trade-off in continuous time, building on the Poisson-arrival moral-hazard model of Sun and Tian (2018). Their main result (Theorem 2) splits the parameter space into three regimes: never hire, hire and keep the agent working forever, and a control-band contract with suspension episodes of fixed length. This mission covers the first regime under the paper's Condition 1.
Setting
A principal earns a revenue R per arrival of a Poisson process. Without effort the arrival rate is μ≥0; an agent who works, at private cost b>0 per unit time, raises it to μ>μ. Write Δμ=μ−μ. The principal's cost rate while the agent works is c≥b, every start of work costs K>0, and the principal and the agent discount at rates 0<r≤ρ. Assumption 1 is RΔμ>c. The derived constants are
β=Δμb,wˉ=ρβμ,v=rμR,Vˉ(w)=rRμ−c−(ρ−r)w.
The state of a contract is the agent's promised utilityw≥0. The paper's verification theorem reduces optimality to a pair of functions: VI for the working state and V∅ for the suspended state. For a function f on R+, with f′ its left derivative, the operators are
and V(w)=Vˉ(w~) for w≥w~. Vw~ may be convex near 0; wˇ(w~) is the point up to which Vw~′′>0, and the concavificationVw~ replaces Vw~ on [0,wˇ(w~)) by its tangent line at wˇ(w~). Condition 1 is "μ≥ρ−r or R<R^" with
R^=[bc+Δμ(ρ−r−μ)(ρ−r)μ⋅ρρ−μ]β.
Under it there is a unique w^∈[0,wˉ) with Vw^(0)=v (Lemma 3). Three hats occur in the paper: w^ of Definition 1 (a payment threshold), w^ of Lemma 3 (used here), and w^ of Proposition 6 (not used here). For K<Vˉ(w^)−v, Lemma 4 gives a tangent pair(θˉK,mK): the line mKw+v touches Vw^−K at θˉK. Finally Kˉ1=inf{K∈(0,Vˉ(w^)−v]∣mK<1} (K1).
Formalization targets
Goal: Proposition 3 (p. 22)
Under Condition 1 and Kˉ1≤K≤Vˉ(w^)−v, for the pair (θˉK,mK) of (29),
VI=Vw^,V∅(w)={mKw+v,Vw^(w)−K,w≤θˉK,w>θˉK,
satisfy (20)–(22).
Milestones
Lemma EC.2: existence and uniqueness of Vw~, w~∈[0,wˉ).
Lemma EC.2(iii)–(iv): Vw~ increasing; Vw~ decreasing and Vw~′ increasing in w~.
Lemma 2(i): the sign pattern of Vw~′′ around wˇ(w~), and wˇ(w~)≤(1−r/ρ)β.
Lemma 2(ii)–(iii): Vw~ increasing and concave; comparison in w~.
Lemma 3: w^ exists and is unique; Vw^′(0)>1 when wˇ(w^)>0.
Proposition 2: for K≥Vˉ(w^)−v, (Vw^,v) satisfies (20)–(22).
Lemma 4: tangent pairs exist; θˉK increases and mK decreases in K; θˉK→wˇ(w^) as K↓0.
Significance
Propositions 2 and 3 are the analytic certificates behind Theorem 2(i): combined with the verification theorem (Theorem 1), they show that under Condition 1 and K≥Kˉ1 the principal's utility from any incentive-compatible contract promising w is at most V∅(w)−w≤v, so never hiring the agent is optimal, and Kˉ1 is exactly the switching-cost threshold of that regime. The same objects (Vw~, Vw^, the tangent pairs) reappear in the low-cost control-band regime (Propositions 6–7), so a formal development of the delay ODE and its concavification is reused there.
The paper proves all these results; none is formalized. The mission formalizes the deterministic half of the guess-and-verify argument. The stochastic contract model (point processes, promise keeping, incentive compatibility), Theorem 1 and the optimality theorems are outside its scope.
Difficulty
The obvious approach, verifying (20)–(22) by direct computation, works for the linear pieces but not for Vw^, which has no closed form: (25) is a delay equation solved backwards from w~ in steps of length β, and the closed form (EC.52) of the paper holds only on the last step [(w~−β)+,w~]. Every property of Vw^ used in the goal (monotonicity, the single change of convexity, the comparison in w~ that makes w^ unique) has to be extracted from the equation itself, across the kinks of w↦(w+β)∧w~. On the second branch of V∅, A∅V∅≥0 is not a pointwise identity either: it requires mK≤1, which is where K≥Kˉ1 enters.
Formalization scope
Parameters form a structure with real fields; the standing assumptions 0≤μ<μ, 0<b≤c, K>0, 0<r≤ρ, RΔμ>c are a hypothesis of every theorem. μ≥0 and b>0 are disclosed additions (a rate and a cost).
Functions are ℝ → ℝ; every statement quantifies over w≥0 only. In AI,A∅, f′ is the left derivative (derivWithin f (Set.Iic w) w, the paper's p. 15 convention); in statements about Vw~ and Vw~, derivatives are taken within R+; in (25), within [0,w~].
(20) is required for w>0: at w=0 a left derivative of a function on R+ does not exist. (21) and (22) are as printed.
Vw~ is a chosen solution of (25)–(26) (Lemma EC.2 is the milestone that makes this meaningful); wˇ(w~) is a supremum defined through the sign of V′′, and w^ an infimum; Kˉ1 is an infimum. None is defined by the property a theorem asserts about it.
The goal holds for every pair satisfying (29); the pair is unique, and at K=Vˉ(w^)−v it is (w^,0). The second branch of (30) is extended beyond w^, as the paper's proof uses.
"Increasing/decreasing" mean strictly. The contract-utility claim U(Γ)=v of Proposition 2 is not stated.
Ruled out: weakening (20)–(22) (dropping the upper bound K in (21), or (22)), or defining Vw~ by its closed form (EC.52), which is valid only near w~.
Needed infrastructure: existence and uniqueness for linear ODEs with a terminal condition, extended step by step across a delay; one-sided derivatives of piecewise functions; concavity from sign conditions on second derivatives. Proofs of the milestones, and reusable lemmas about delay equations of this form, are welcome.
Selected references
P. Cao, P. Sun, F. Tian, Punish Underperformance with Suspension: Optimal Dynamic Contracts in the Presence of Switching Cost, Management Science, 2024. https://doi.org/10.1287/mnsc.2023.4845 (cited from the authors' manuscript with e-companion).
Design and Analysis of Switchback Experiments 2: Under the Optimal Design the Horvitz–Thompson Estimator Is Asymptotically Normal as the Number of Epochs n → ∞Research Paper
Motivation
Online platforms such as ride-hailing, delivery and marketplace companies routinely test a new policy (a pricing rule, a dispatching algorithm) by switching it on and off over time on a single unit, a city or a market, rather than by randomizing over users. These switchback experiments avoid the interference that user-level randomization creates in two-sided markets, but they face a different problem: a treatment administered at one time keeps affecting outcomes for several periods afterwards (carryover effects). Bojinov, Simchi-Levi and Zhao, Design and Analysis of Switchback Experiments (arXiv:2009.00148, Management Science 69(7), 2023), derive the minimax-optimal design when the carryover lasts at most m periods, and then ask how to do inference with it. This mission formalizes the inference half: under the optimal design, the Horvitz–Thompson estimator of the lag-m effect is asymptotically normal as the number of epochs grows, which is what justifies the paper's normal-approximation test and confidence intervals.
The result is a finite-population central limit theorem: the potential outcomes are fixed, non-random numbers, and all randomness comes from the experimenter's coin flips. It belongs to the line of design-based limit theorems of Li and Ding (2017), Aronow et al. (2017) and Bojinov et al. (2021). Its probabilistic engine is the central limit theorem of Romano and Wolf (2000) for triangular arrays of ϕ-dependent random variables, which goes back to the m-dependent central limit theorem of Hoeffding and Robbins (1948).
Setting
There are T time periods t∈[T]={1,…,T}. An assignment pathw1:T∈{0,1}T records treatment (wt=1) or control (wt=0) in each period. The potential outcomes are real numbers Yt(w1:T). They are assumed non-anticipating (Assumption 1: Yt depends only on w1:t) and to have m-carryover effects (Assumption 2: for t>m, Yt does not depend on w1:t−m−1). Assumption 3 bounds them: ∣Yt(w1:T)∣≤B. Write Yt(1m+1) and Yt(0m+1) for the outcome after m+1 consecutive treatments, respectively controls. The lag-m causal effect is
τm=T−m1t=m+1∑T[Yt(1m+1)−Yt(0m+1)].
A regular switchback design flips an independent coin with success probability qk∈(0,1) at each randomization pointt0=1<t1<⋯<tK, and every period copies the most recent coin. The Horvitz–Thompson estimatorτ^m weights the observed outcome at time t by the inverse probability that the last m+1 assignments were all treatments (respectively all controls).
In the n-replica experimentT=nm, and the optimal design of the paper's Theorem 2 uses fair coins at
T∗={1,2m+1,3m+1,…,(n−2)m+1}.
The periods split into n−1 blocks {(k+1)m+1,…,(k+2)m}, k=0,…,n−2, with block sums Yˉk(1m+1), Yˉk(0m+1) and block errors 1ˉk, so that τ^m−τm=(T−m)−1∑k1ˉk. Assumption 4 (non-negligible variance) requires Var(τ^m)≥c/n for some c>0 and all large n.
Formalization targets
Goal: Theorem 3 (asymptotic normality)
For fixed m, under Assumptions 1–2, Assumption 3 with one bound B for all n, and Assumption 4,
Var(τ^m)τ^m−τmDN(0,1)(n→∞).
The statement fixes no rate and does not require Var(τ^m) to converge.
Milestones
Block decomposition (EC.4.1–EC.4.2): τ^m−τm=(T−m)−1∑k=0n−21ˉk with E1ˉk=0.
1-dependence (proof of Theorem 3): the block errors 1ˉ0,…,1ˉn−2 form a 1-dependent sequence.
Lemma 2: the closed form (10) of Var(τ^m) in terms of the block sums.
Block-variance bound (proof of Theorem 3): Bn,k,a2≤16kB2/(n−1)2 for the scaled partial sums.
Lemma EC.1 (Romano–Wolf): the central limit theorem for ϕ-dependent triangular arrays.
Companions
Corollary 1, the conservative bound Var(τ^m)≤VarU(τ^m) with the unbiased estimator σ^U2, and Corollary 2(i), that (10) still holds when the design is built for an overestimated order p>m.
Significance
Theorem 3 is what turns the optimal design into a usable inferential procedure: together with Corollary 1 it gives the test statistic ∣τ^m∣/σ^U2 and its normal p-value, a conservative large-sample test of the null of no lag-m effect that needs no model for the outcomes. Corollary 2 extends the guarantee to a misspecified carryover order p>m. Lemma EC.1 is a general tool, applicable to any statistic that decomposes into a sum of weakly dependent pieces, such as block designs, time-series bootstraps and spatial experiments.
The paper proves these results. None of them is formalized: Mathlib has the central limit theorem for i.i.d. sequences only, and no central limit theorem for dependent arrays exists on the platform. The work here is to formalize the known proof: the exact second-moment computations of the design, the 1-dependence of the blocks, and a proof of the Romano–Wolf theorem itself, which the paper takes from the literature.
Difficulty
The randomness is a finite set of coin flips and the outcomes change with n, so no i.i.d. structure is available: the block errors are neither independent nor identically distributed, and the classical Lindeberg–Lévy theorem does not apply. The obvious reduction, treating neighbouring blocks as independent, fails, because adjacent blocks share a coin. This is why the cross terms appear in (10), and why a dependent-array central limit theorem is needed. The variance normalisation is random-design specific and may oscillate in n, so the limit theorem has to be proved with a self-normalisation that does not converge. Lemma EC.1 is the main obstacle: a ϕ-dependent central limit theorem for triangular arrays with Lyapunov-type moment conditions, which is not in Mathlib.
Formalization scope
A path is a function ℕ → Bool of which only 1,…,T is read; potential outcomes are ℕ → Path → ℝ. The design law is encoded as independent coins at the randomization points, mapped to paths; in the n-replica experiment the probability space is the uniform measure on the coin vectors of T∗. Row n of the sequence has T=nm and potential outcomes Y n. Rows n<4 exist in Lean but are degenerate and irrelevant to the limit. Convergence in distribution is Mathlib's TendstoInDistribution, and the limit is gaussianReal 0 1. Ω(n−1) and O(1) are explicit constants with an eventual threshold. The estimand, estimator and variance in the goal are the model's definitions, not a hand-written formula in the coins.
Three hypotheses are added to the printed statements, each necessary and disclosed in the item's Formalization Note:
Theorem 3 assumes Assumption 3 with one B for all n. The page omits it, the proof uses it, and without it the statement is false.
Lemma EC.1 assumes dn→∞. This is Romano and Wolf's sixth condition for fixed ϕ, and without it the lemma fails with dn=1.
Lemma EC.1 assumes Ln>0, which the ratios in its conditions 4–5 presuppose.
The goal does not assume 1-dependence, the variance formula or any condition of Lemma EC.1; those are milestones, so the goal cannot be discharged by a hypothesis.
A complete development needs:
finite-coin product measures and the independence of functions of disjoint coordinates;
exact second-moment computations for the design;
a ϕ-dependent central limit theorem for triangular arrays.
The last two, Lemma EC.1 and Definition EC.1, are reusable well beyond this mission. Contributions to any milestone, including alternative proofs of Lemma EC.1, are welcome.
Selected references
I. Bojinov, D. Simchi-Levi, J. Zhao, Design and Analysis of Switchback Experiments, Management Science 69(7), 2023. https://arxiv.org/abs/2009.00148 (v4)
J. P. Romano, M. Wolf, A more general central limit theorem for m-dependent random variables with unbounded m, Statistics & Probability Letters 47, 115–124, 2000.
W. Hoeffding, H. Robbins, The central limit theorem for dependent random variables, Duke Mathematical Journal 15(3), 773–780, 1948.
X. Li, P. Ding, General forms of finite population central limit theorems with applications to causal inference, Journal of the American Statistical Association 112, 1759–1769, 2017.
I. Bojinov, N. Shephard, Time series experiments and causal estimands: exact randomization tests and trading, Journal of the American Statistical Association 114, 1665–1682, 2019.
Partial Recovery in the Graph Alignment Problem I: If D(P‖Q)/α = o(log n/n), No Algorithm Recovers a Fraction α of a Correlated Erdős–Rényi AlignmentResearch Paper
Motivation
Graph alignment asks for the correspondence between the vertices of two graphs that are noisy copies of each other with hidden labels. It arises in the de-anonymization of social networks, where an anonymized friendship graph is matched against a public one (Narayanan–Shmatikov 2009), and in computational biology, where protein–protein interaction networks of related species are aligned. The standard random model is the correlated Erdős–Rényi model of Pedarsani–Grossglauser 2011, for which exact recovery thresholds are known (Cullina–Kiyavash 2016) and almost-exact recovery is known to be impossible when nqs=O(1) (Cullina–Kiyavash–Mittal–Poor 2018).
Hall and Massoulié (arXiv:2007.00533) study the weaker goal of partial recovery: output a permutation that agrees with the hidden one on a constant fraction α of the vertices. This mission formalizes their impossibility theorem; a companion mission (II) formalizes their possibility theorem.
Setting
Fix n and scalars 0≤q<s≤1. A parent graph G∼G(n,q/s) is copied twice and each copy keeps every edge independently with probability s, giving graphs GA and GB′ with adjacency matrices A and B′. Every unordered pair {i,j} of distinct vertices independently carries the pair (Aij,Bij′)∈{0,1}2 with law P (equation (3)):
p00=1−2q+qs,p01=p10=q(1−s),p11=qs.
Two independent edges of G(n,q) have law Q (equation (4)):
q00=1−2q+q2,q01=q10=q(1−q),q11=q2.
The Kullback–Leibler divergence is D(P∥Q)=∑x∈{0,1}2P(x)logQ(x)P(x).
A hidden permutation π∗ of the vertices, drawn uniformly from the n! permutations, relabels GB′ into GB: Bπ∗(i)π∗(j)=Bij′. An algorithm sees only (A,B) and returns a permutation π^, possibly at random. Its quality is the overlap
β(π^,π∗)=n1i=1∑n1π^(i)=π∗(i).
The mutual informationI(π∗;(A,B)) is that of the joint law of π∗ and the observation, and Mα=maxπ∗∣{π∣β(π,π∗)≥α}∣ counts the permutations that are α-close to a given one, out of M=n!.
Formalization targets
Goal: Theorem 2.1 (p. 8)
Let αn∈(0,1), bounded below by a constant c>0 for large n. If
αnD(P∥Q)=o(nlogn),
then for every sequence of algorithms,
P[β(π^,π∗)<αn]→1(n→∞).
Milestones
Theorem 3.1 (generalized Fano inequality): P[d(Z^,Z)>d]≥1−log(M/Md)I(Z;X^)+1 for any Markov chain Z→X^→Z^ with Z uniform.
Inequality (8): I(π∗;(A,B))≤Eπ∗[D(P((A,B)=⋅∣π∗)∥Q)], with Q the law of two independent G(n,q) graphs.
The display after (8), p. 13: I(π∗;(A,B))≤(2n)D(P∥Q).
Significance
The theorem gives a sufficient condition, in terms of a single per-pair divergence, under which no algorithm (efficient or not) recovers even a fraction α of the alignment. Together with the companion possibility result (Theorem 2.3: partial recovery is possible when nqs exceeds an explicit constant under sparsity conditions), it brackets the partial-recovery threshold; the paper's Corollary 2.2 specializes it to nqs=o(1) in the regime n−k≤q=o(n−1/2).
On the formal side, the mission produces a finite, self-contained model of correlated random graphs with a planted permutation, a generalized Fano inequality for finite hypothesis classes with an arbitrary distance, and the bound of mutual information by a product divergence. The Fano inequality and the mutual-information bounds are reusable for other information-theoretic lower bounds (community detection, planted matching, testing). The paper proves the results on paper; none of them is formalized, and no Fano inequality is proved on the platform.
Difficulty
The Fano inequality (Theorem 3.1) is cited from Lemma 20 of Banerjee–Hegde–Massoulié (2012) and not proved in the paper, and the entropy calculus it rests on is not in Mathlib in a finite, real-valued form. The counting step (Proposition 3.3) concerns rencontres numbers; the paper uses the asymptotic Dn,k∼e−1n!/k!, which is valid only for fixed k, while the statement needs control uniform in k. Bounding I(π∗;(A,B)) requires relating the conditional law of the observation, a relabelled product law, to the unlabelled reference law Q on a space of 4n2 matrix pairs, most of which have probability zero.
A natural first idea for the goal, taking α arbitrary as printed, fails: if αn=1/n, the identity algorithm succeeds whenever π∗ has a fixed point, with probability tending to 1−e−1, even when the divergence condition holds. The argument needs log(M/Mα) to grow like nαnlogn, which needs αn bounded below.
Formalization scope
Vertices are Fin n; a vertex pair is an off-diagonal element of Sym2 (Fin n); an edge state is a Bool × Bool with first coordinate A, second B′. The probability of a configuration is the product of P over pairs, and B is computed through π∗−1. Every probability is a finite sum; logarithms are natural. Standing assumptions on the parameters are 0≤q<s≤1 (pp. 5 and 7); the remark "we assume s<1" of p. 6 is not used and not imposed.
Algorithms are real stochastic kernels from the observed pair (A,B) to permutations, so randomized algorithms are included and deterministic ones are the 0/1 kernels. The algorithm's argument is the observation only: it does not see π∗ or GB′. Mutual information and Kullback–Leibler divergence are defined as finite sums (Lean's 0⋅log0=0).
Hypotheses added relative to the page, each disclosed in the item's note:
Theorem 2.1: αn≥c>0 for large n (the printed statement is false for αn→0 fast).
Theorem 3.1 and Corollary 3.2: Md<M (resp. Mα<n!), without which log(M/Md)=0 and the bound is meaningless.
Theorem 3.1: the observation space is finite; no metric axioms on d are assumed.
Proposition 3.3 reads (nα)! as ⌈nα⌉!.
Trivializing formalizations are ruled out: the algorithm cannot be given π∗ (an oracle wins) or nothing (the statement becomes empty); the little-o hypothesis is a limit of a ratio, not an inequality; the configuration law is built from (3) and sums to 1, not chosen by the solver.
Infrastructure a complete development needs: finite entropy and mutual information with the chain rule and data processing; Gibbs' inequality; derangement and rencontres counts (numDerangements in Mathlib); Stirling-type lower bounds on logk!. Contributions are welcome on each milestone independently; the Fano inequality is the piece with the widest reuse.
The source is the arXiv preprint v5 (13 Jan 2022); its numbering is used throughout.
Selected references
G. Hall, L. Massoulié, Partial Recovery in the Graph Alignment Problem, arXiv:2007.00533v5, 2022; Operations Research, 2023. https://arxiv.org/abs/2007.00533
D. Cullina, N. Kiyavash, Improved achievability and converse bounds for Erdős–Rényi graph matching, SIGMETRICS 2016. https://arxiv.org/abs/1602.01042
D. Cullina, N. Kiyavash, P. Mittal, H. V. Poor, Partial recovery of Erdős–Rényi graph alignment via k-core alignment, arXiv:1809.03553, 2018. https://arxiv.org/abs/1809.03553
S. Banerjee, N. Hegde, L. Massoulié, The price of privacy in untrusted recommendation engines, Allerton 2012, pp. 920–927 (Lemma 20: the generalized Fano inequality); cited as [3] in the paper.
Multilevel Langevin Pathwise Average for Gibbs Approximation III: C² Strongly Contractive Drift, 𝔞 = 2 — L²-Error ≲ [f]₁ε at Cost ((½+√2)/(√2−1))Υ₂²log(γ₀⁻¹)ε⁻²/(γ₀α)Research Paper
Motivation
Sampling from a Gibbs distributionπU∝e−Udλd on Rd is a basic task in Bayesian statistics, statistical physics and machine learning. A standard approach simulates the Langevin diffusiondXt=−∇U(Xt)dt+2dBt, whose invariant distribution is πU, through its Euler scheme, and averages a test function f along one long trajectory. The discretization introduces a bias of the order of the step size, so a single-step-size average with accuracy ε costs more than ε−2 steps. Dalalyan (arXiv:1412.7392) and Durmus–Moulines (arXiv:1605.01559) quantified this for strongly log-concave targets; for occupation measures of the Euler scheme the best previous bound was of order dε−4 (Durmus–Moulines, Bernoulli 2019, denoted [DM19] in the paper).
Egéa and Panloup (arXiv:2109.07753, Math. Oper. Res., 2025) combine Giles's multilevel Monte Carlo idea (Oper. Res. 2008) with pathwise averages. Each level is one long trajectory, not many independent samples. This mission formalizes their result for a uniformly strongly contractive, twice differentiable drift. In that case the multilevel occupation measure reaches accuracy ε at a cost of order dε−2, the order of an unbiased Monte Carlo method.
Setting
Let b:Rd→Rd be L-Lipschitz and satisfy Assumption (Cα): ⟨b(y)−b(x),y−x⟩≤−α∣x−y∣2 for all x,y, with α∈(0,L∧1]. Let σ>0. The additive diffusion is Xtx=x+∫0tb(Xsx)ds+σBt, driven by a standard d-dimensional Brownian motion B. Let π be its invariant distribution. Its Euler scheme with step γ is Xˉ0γ,x=x, Xˉ(n+1)γγ,x=Xˉnγγ,x+γb(Xˉnγγ,x)+σ(B(n+1)γ−Bnγ), with invariant distribution πγ. Write sη=η⌊s/η⌋ and [f]1 for the Lipschitz constant of f.
Given a first step γ0, steps γr=γ02−r, horizons T0>⋯>TR, a warm start τ, and independent Brownian motions B(0),…,B(R), the multilevel occupation measure (7) is
where both schemes of level r start at x0 and are driven by B(r). Its cost is C(Y)=T0/γ0+∑r=1R(Tr/γr+Tr/γr−1).
When b is C2 with bounded derivatives, set ∥∇b∥2,∞=supx∥∇b(x)∥F (Frobenius norm of the Jacobian) and ∥Δb∥2,∞2=supx∑i∣Δbi(x)∣2. The constant (19) is
Take γ0∈(0,2L2α∧21], Rε=⌈log2(Υ2/ε)⌉, Tr=Υ22log(γ0−1)α−1ε−22−3r/2 and τ=α−1∣logε∣+(2α)−1logΥ2. There is a universal constant C1 such that for every ε∈(0,1) with 2log(Υ2ε−2)≤log(γ0−1)(Υ2/ε)1/2,
The constant C1 is the same for all d, b, σ, f, x0, γ0 and ε.
Companion: (22)
Under α/L2≤1, σ2α−1d≥1 and dimension-free bounds on ∣b(x0)∣, ∥∇b∥2,∞ and ∥Δb∥2,∞, the choice γ0=α/(2L2), Υ~22=σ2α−1d gives C(Y)≤2−122+1α3σ2L2logα2L2dε−2.
Milestones
The milestones follow the paper's proof in order:
Lemma 5.1 (i), (iii): stability of the scheme and the assumptions (H1), (H4).
Lemma 5.2 (ii): a one-step error of order γ3.
Proposition 5.1 (ii), (iii): a uniform-in-time strong error β2(x)γ2 and (H2) with a=2.
Proposition 5.2: W1(π,πγ)≤β2(x⋆)γ.
Proposition 2.2: (H2)–(H4) with constants controlled by Υ2.
Remark 4.1: the paper's general complexity theorem, with constants known up to universal factors.
Significance
The result. Theorem 2.3 gives an explicit algorithm whose cost to reach L2 accuracy ε on π(f) is of order ε−2, uniformly over Lipschitz f. Under (22) the cost is O(dε−2). Apart from constants depending on α and L, this is the complexity of a Monte Carlo method without bias, an improvement over the dε−4 known for single-level occupation measures. Corollary 2.2 of the paper applies it to Gibbs distributions with a C3 potential.
Formalizing it. The theorem is proved in the paper. A machine-checked version needs a formal multilevel estimator over infinite horizons, uniform-in-time strong error bounds for the Euler scheme, and an application of Itô's formula to b(y+σBt), none of which exists in Lean. Formalizing also checks the paper's constants. For instance, the printed exponential rate in the W2 contraction behind (H1) is α, while its proof gives α/2, and the milestone states α/2. No part of this result has been machine-checked.
Difficulty
Two steps resist a direct approach. First, the order-one strong error (Lemma 5.2(ii), Proposition 5.1(ii)). Bounding the one-step error by the Lipschitz constant alone gives order γ2 per step, hence order γ1/2 globally; this is Lemma 5.2(i) and the a=1 regime, with an extra log3ε in the cost. The gain to γ3 needs the second-order structure of b along the Brownian path, through a martingale term and the Laplacian of b. Second, the error must be controlled uniformly over infinite horizons. Every estimate has to combine the contraction (Cα) with the step-size restriction γ≤α/(2L2); a Gronwall argument on a finite horizon gives constants that grow with time.
For the goal itself, the cost bound (21) is arithmetic once the parameters are fixed. The content is the error bound with a constant that is universal, not merely independent of ε.
Formalization scope
Rd is the published EthierKurtz.SDEState d, and Brownian motions are the published EthierKurtz.IsStandardBrownian.
The diffusion is a pathwise solution of Xt=x+∫0tb(Xs)ds+σWt with continuous paths. No stochastic integral appears in any statement.
π is a probability measure invariant for the diffusion's transition laws. πγ is any probability invariant for the Euler step x↦x+γb(x)+σγZ, with Z standard Gaussian.
∥⋅∥2 is eLpNorm · 2 P, valued in [0,∞]. The schemes are evaluated at grid times, except in (H4) and (47), which use the continuous-time scheme.
C2 with bounded partial derivatives is ContDiff ℝ 2 b plus a uniform bound on the first and second Fréchet derivatives.
∥∇b∥2,∞ and ∥Δb∥2,∞2 follow pp. 31–32, which correct the misplaced squares of (18).
"≲uc" is an existential constant quantified before every datum.
The ε0 of Theorem 2.3 is read as membership in its defining set.
The cost formula is used for every Tr.
Added hypotheses: σ>0 wherever the page leaves it implicit; C2 regularity in Lemma 5.2(ii) and Propositions 5.1–5.2; γ<1 in Proposition 5.2; d≥1 in Proposition 5.1(iii); α≤1 in Proposition 2.2.
The goal does not assume (H1)–(H4), Proposition 2.2 or any variance or bias estimate. It assumes only (Cα), Lipschitz and C2 regularity of b, σ>0, invariance of π and the parameter choices. Those results appear only as milestones.
Contributions that would be reusable elsewhere: uniform-in-time moment and strong-error bounds for Euler schemes of contractive SDEs, Itô's formula for a C2 function of Brownian motion, and the general multilevel complexity theorem (Remark 4.1). Proofs of the milestones are welcome independently.
Selected references
M. Egéa, F. Panloup, Multilevel-Langevin pathwise average for Gibbs approximation, Math. Oper. Res., 2025; arXiv:2109.07753v2. https://arxiv.org/abs/2109.07753
A. Durmus, É. Moulines, High-dimensional Bayesian inference via the unadjusted Langevin algorithm, Bernoulli 25(4A), 2019. https://doi.org/10.3150/18-BEJ1073
A. S. Dalalyan, Theoretical guarantees for approximate sampling from smooth and log-concave densities, J. R. Stat. Soc. B 79(3), 2017. https://arxiv.org/abs/1412.7392
A. Durmus, É. Moulines, Nonasymptotic convergence analysis for the unadjusted Langevin algorithm, Ann. Appl. Probab. 27(3), 2017. https://arxiv.org/abs/1507.05021
A Dynamic Principal Agent Problem with One-sided Commitment: The Principal's Value Function Is the Minimal Continuous Viscosity Solution of the Type-Indexed HJB SystemResearch Paper
Motivation
In a principal–agent problem with moral hazard, a principal (an employer) pays an agent whose effort she cannot observe; she sees only an output process whose drift the effort controls. Continuous-time versions of the problem, starting with Holmström–Milgrom (1987) and Sannikov (2008), are solved by turning the agent's continuation utility into a state variable and writing a Hamilton–Jacobi–Bellman (HJB) equation for the principal's value.
Most of this literature assumes two-sided commitment: the agent cannot leave. In labour markets the agent can quit whenever an outside offer beats his continuation utility, and the principal must then hire someone else. Zhang and Zhu (arXiv:2208.06473; Mathematics of Operations Research, 2025) study this one-sided commitment: the principal is committed to the contract, the agent is free to quit at a stopping time of his choice, and after each quitting the principal pays a cost and hires a new agent, possibly of another type. The principal's value then depends on every future hire, and the paper characterises it by a coupled system of HJB equations.
Setting
Fix a horizon T>0 and a payment cap C0>0. A standard Brownian motion B on (Ω,F,P) is the output. Agents have types θ∈Θ. An agent of type θ receiving a payment rate η≤C0 and exerting effort α has running utility f(θ;s,η) and running cost h(θ;s,α); f is increasing and concave in η, h is convex in α (Assumption 2.2). Effort shifts the drift of B through the Girsanov measurePα (weak formulation). The agent's optimal effort against a sensitivity process Z is α=Ih(θ;⋅,Z), the inverse of ∂αh, and Eθ,Z denotes expectation under the corresponding measure.
A contract started at time t is described in forward form by (η,Z): the agent's continuation utility is
with H(θ;s,z)=supα[αz−h(θ;s,α)] and the constraint XT=0. The agent's utility is capped by the upper barrierLtθ=∫tTf(θ;s,C0)ds. He quits at the first time X reaches the lower barrierLtθ=Rtθ−ctθ, where Rθ is his market value and cθ≥1/Λ0 his quitting cost (Assumptions 2.7, 3.1). The relevant domain is
Dθ={(t,x):0≤t<T,Ltθ<x≤Ltθ}.
When the i-th agent quits at τi<T, the principal pays cτiP and hires an agent of type ζτi at utility Rτiζτi (the quitting sequence (5.8)). The principal's value is
The last condition couples the equations for different types. The goal also asserts that the value sets in (6.1) are nonempty and bounded above, so that u∞ is a genuine real-valued function.
Milestones
Lemma 3.4: explicit contracts with ∫tT[C0−ηs]ds≤δ under which the agent never quits.
Lemma 2.5 (2.20): a priori estimates for admissible contracts.
Proposition 2.8 and Lemma 3.6: the self-enforcing value V0P and the new-hire value u0 are uniformly continuous with modulus Cρ.
Theorem 4.5: with at most one quitting, u1 is the minimal continuous viscosity solution of the same equation with boundary datum u0.
Proposition 5.4: a non-recursive representation of un (at most n quittings).
Proposition 6.1: Pζ,Z(τn<T)≤C/n, and ∣un−u∞∣≤C/n.
Proposition 6.2: monotonicity and uniform continuity of u∞, regularity of u∞, and the boundary conditions.
(6.7): the dynamic programming principle for u∞.
Significance
The theorem identifies the principal's value under one-sided commitment as a PDE object, which makes it computable and comparable with other contracting regimes. Along the way the paper shows that the principal sees only finitely many quittings (Proposition 6.1) and that tolerating more quittings never lowers her value, so contracts that prevent quitting altogether (self-enforcing contracts) are in general suboptimal. The coupling through u∞ turns the problem into an infinite system of HJB equations indexed by agent types, a structure that also appears in switching and re-hiring problems.
The result is proved in the paper; none of it is formalized. A formalization would add to the platform a continuous-time moral-hazard model in the weak formulation, hitting-time stopping driven by an Itô integral, a quitting sequence with random restarts and type switching, and a viscosity-solution notion for a fully nonlinear HJB equation on a time-dependent domain. The paper's own proof leaves several steps to the reader (the dynamic programming principle, the viscosity property, comparison for a truncated equation), so a complete development would also supply these.
Difficulty
The obvious route is "dynamic programming principle, then viscosity property, then comparison". Each step is harder here than in a textbook control problem. The control z is unbounded, so the Hamiltonian can be +∞ and the viscosity property must be derived without a finite Hamiltonian. The process is stopped at a hitting time of a moving barrier and restarted at a random level with a new type, so the dynamic programming principle must handle restarts. Minimality cannot come from a standard comparison principle, because the boundary datum at Lθ depends on the competitor itself and no growth condition is imposed on competitors; the paper argues through approximation by un and Theorem 4.5 instead.
Formalization scope
All objects are defined in the namespace DynPrincipalAgent.HJB. Process time is R≥0; deterministic data are functions of real time. The Itô integral is the published Peng1990.SMP.IsItoIntegral, with a continuous version required wherever hitting times read paths. Controls started at t are progressively measurable for the filtration Ft of Bs−Bt. Value functions are real suprema of value sets that record an expectation only when it is genuine (integrable payoffs, almost surely integrable drifts and running rewards, summable quitting costs); these conditions hold for every admissible control.
Pinned readings, all disclosed in the items: viscosity solutions are the standard Crandall–Ishii–Lions notion with C2 test functions on R2, tested on the interior of Dθ, with the supremum in the HJB operator never formed; the boundary condition at Lθ requires a real right limit compared against every u(θ′;t,Rtθ′)−ctP; Θ carries a σ-algebra and f, h, ∂αh are jointly measurable; Assumption 2.7 (ii) is read as ∣Rsθ−Rs′θ∣≤ρ(∣s−s′∣); a modulus of continuity is nondecreasing, vanishes at 0+ and satisfies ρ(δ)≥δ; generic constants depend only on (T,C0,Λ0,Λ1) and are fixed before the model; H and H~ take the closed forms of (2.11)–(2.12). The agent's BSDE and reflected BSDE (Propositions 2.3, 3.2), §7's standard contracts and the economic interpretation of Rθ, cθ, cP are out of scope.
A formalization in which a value function equals a junk value (an empty or unbounded real supremum, a Bochner integral of a non-integrable payoff, a hitting time of an empty set) or in which the viscosity notion is vacuous does not count: the goal states that the value sets are nonempty and bounded, and the definitions avoid junk by construction. Competitors in the minimality clause satisfy exactly the printed boundary conditions, with no added growth bound.
Reusable infrastructure: Girsanov measures for BMO drifts, forward utility processes, hitting times of continuous semimartingales, and viscosity solutions of HJB equations on non-cylindrical domains. Contributions on any milestone, and on general lemmas such as the dynamic programming principle for controlled diffusions stopped at hitting times, are welcome.
Selected references
J. Zhang, Z. Zhu, A Dynamic Principal Agent Problem with One-sided Commitment, Mathematics of Operations Research, 2025. Preprint arXiv:2208.06473v3. https://arxiv.org/abs/2208.06473
B. Holmström, P. Milgrom, Aggregation and Linearity in the Provision of Intertemporal Incentives, Econometrica 55 (1987). https://doi.org/10.2307/1913238
M. G. Crandall, H. Ishii, P.-L. Lions, User's guide to viscosity solutions of second order partial differential equations, Bull. AMS 27 (1992). https://doi.org/10.1090/S0273-0979-1992-00266-5
Comparison Between Mean-Variance and Monotone Mean-Variance Preferences Under Jump Diffusion and Stochastic Factor Model: Optimal MMV and MV Utilities Coincide If and Only If Assumption 1 HoldsResearch Paper
Motivation
Mean-variance (MV) preferences, Uθ(X)=E[X]−2θVar(X), are the standard objective of portfolio selection since Markowitz. They are not monotone: an investor can prefer a terminal wealth X to a wealth X′≥X that is larger in every state, because the extra upside raises the variance. Monotone mean-variance (MMV) preferences (Maccheroni, Marinacci, Rustichini and Taboga, 2009) repair this. They are the largest monotone preferences that agree with MV preferences on the domain of monotonicityGθ={f∈L2:f−E[f]≤1/θ}.
A natural question is when switching from MV to MMV changes the optimal investment. In continuous-time markets driven only by Brownian motions, the optimal strategies under the two preferences coincide (Trybuła and Zawisza, 2019, for a stochastic factor model; Strub and Li, 2020, for continuous semimartingale markets), and whether this persists with jumps was left open by Trybuła and Zawisza. Li, Liang and Pang study a market whose risky asset also jumps and whose coefficients depend on a stochastic factor. They show that the two problems agree if and only if a pathwise condition on the jumps, Assumption 1, holds.
Setting
On a probability space (Ω,F,P) live two independent Brownian motions W1,W2 and an independent Poisson random measure N(ds,dp) with finite Lévy measure ν and compensated measure N~. The filtration {Ft} is generated by W1,W2,N. A stochastic factor follows
dZs=a(Zs)ds+b(Zs)(ρWdWs1+ρˉWdWs2),Zt=z,
with ρW2+ρˉW2=1. Investing the amount πs in the risky asset gives the (discounted) wealth
on [t,T], with γ>−1. Write Σ(z)=σ(z)2+∫γ(z,p)2ν(dp) and λ(z)=(μ(z)−r)2/Σ(z).
The MMV preference is
Vθ(X)=Qinf{EQ[X]+2θ1(EP[(dPdQ)2]−1)}.
The infimum runs either over the Doléans-Dade measuresQt or over all of Q0={Q≪P:E[(dQ/dP)2]<∞}. A measure in Qt has density ET, where E is the stochastic exponential of ∫η1dW1+∫η2dW2+∫∫ϕdN~ with ET≥0, E[ET]=1 and ET∈L2.
The optimal utilities from (x,z,t) are suprema over the admissible strategies of the paper's Definitions 2 and 3: predictable π whose wealth has E[sups∣Xsπ∣2]<∞, under P for MV and under every Q∈Qt for MMV. Both solutions are expressed through the solution G=−eF of the nonlinear parabolic PDE (20),
Through ζ(z,s)=−(μ(z)−r−σ(z)b(z)ρWGz/G)/Σ(z) it also enters Assumption 1. Let τ be the first jump time after t at which ζ(Zs,s)γ(Zs,ΔLs)=−1. Assumption 1 requires ζγ≥−1 at every jump in (t,T] up to time τ.
Formalization targets
Goal: Theorem 9
π∈Bx,z,tsupUθ(XTπ)=π∈Ax,1/(2θ),z,tsupVθ(XTπ)⟺Assumption 1 holds at (z,t).
The same holds when Vθ ranges over Q0 instead of Qt.
Milestones
Theorem 3 links the market player's density process to the wealth: 2YsG(Zs,s)=Xsπ∗−x+2yG(z,t).
Theorem 4 solves the MMV problem: the value is V(x,y,z,t)=−x+G(z,t)y, with an explicit saddle point.
Theorem 6 solves the auxiliary quadratic problem: UD(x,z,t)=−(x−D)2/G(z,t).
Theorem 7 gives the Lagrange multiplier and the optimal target.
(39) gives the optimal MV strategy.
The moment identitiesE[RT]=E[RT2]=H(z,t)=−1/G(z,t).
Theorem 8: under Assumption 1 the optimal strategies coincide.
Lemma 4: the optimal MV wealth lies in Gθ if and only if Assumption 1 holds.
(44)–(45): the mean and variance of the optimal wealth.
Significance
The result separates the two preferences by an observable property of the market. The Brownian theory gives agreement for free. With jumps the MV-optimal wealth can leave Gθ, and that happens exactly when a jump of size ζγ<−1 can occur before the first jump with ζγ=−1. In that case MMV and MV investors hold different portfolios. The paper's §5.4 examines in market data whether Assumption 1 is reasonable. The explicit closed forms (the value −x+G(z,t)y, the variance −(G(z,t)+1)/θ2 of the optimal wealth, the efficient frontier) are what applied work uses.
The result is proved on paper, in an arXiv preprint later published in Mathematics of Operations Research (2025). None of it is machine-checked. A formal proof would check the verification arguments for a stochastic differential game with jumps, a Feynman–Kac representation with a jump density, and the comparison with Maccheroni et al.'s monotone hull. The paper's own proofs are brief at several of these steps. The underlying infrastructure (Itô calculus with Poisson jumps, Doléans-Dade exponentials, verification theorems) would be reusable for most of continuous-time portfolio theory.
Difficulty
The obvious argument would show Uθ=Vθ along the optimal wealth and conclude. Lemma 4 shows this argument breaks: the optimal MV wealth need not lie in Gθ. Remark 7 also notes that membership in Gθ alone does not identify the optimal values; both optimal strategies must be found and compared.
Finding them needs a verification theorem for a two-player stochastic differential game with jumps (Theorems 1 and 4). That in turn needs Itô's formula for jump diffusions and martingale properties of Doléans-Dade exponentials that may vanish (Lemma 2, Mémin's criterion). Identifying the two strategies needs the moment identities E[RT]=E[RT2]=H, which come from a Feynman–Kac argument with a jump-driven density (Lemma 3). The converse direction needs a stopping argument at the first "bad" jump. None of this exists in Mathlib, which has Brownian motion but no stochastic integral and no Poisson process.
Formalization scope
Time is [0,∞); every process lives on [t,T] with t<T, and ∫ts is a difference of integral processes whose integrands vanish before t.
Brownian integrals are the L2 Itô integrals of Peng1990.SMP.Stochastic. The admissible classes A, B, Mt therefore contain only strategies whose Brownian integrands are in L2; all strategies used in the paper qualify.
The Poisson random measure is JacodTodorov10.LLN.IsFPoisson with ν finite and ν({0})=0. The compensated integral is the pathwise sum over atoms minus the compensator integral.
The filtration is the natural (uncompleted) filtration of (W1,W2,N).
Processes are adapted with càdlàg paths; Xs− is Mathlib's Function.leftLim. Feedback strategies come with an existence claim, never as bare assumptions.
All optimal values are infima/suprema in EReal over the full admissible classes. Measures in Q0 are probability measures.
Mt is defined by the defining equation (5) of the stochastic exponential. The printed formula (4) has ΔX where ΔM is meant and is not used.
Proposition 1 is not formalized: its hypotheses do not deliver a classical solution. G is a hypothesis: G=−eF with F bounded, C2,1 with bounded derivatives, solving (20). The Conditions of Proposition 1 are kept as printed. Σ,λ,β>0 is a standing hypothesis (implicit on p. 12).
Assumption 1 uses τ in [0,∞] (inf∅=∞), and "a.s." holds simultaneously for all s∈(t,T].
Printed slips: (37) evaluates Gz/G at (Zs,t); it is read at (Zs,s). Lemma 4's "Equation (1)" means (20)/(21).
Divisions by 1−E[RT] and Var[RT] carry the hypotheses E[RT]=1, Var[RT]>0.
A formalization that replaces either optimal utility by a closed form or by the utility of one fixed strategy is out of scope: it assumes Theorems 4 and 7 and empties the goal. So is one that removes the jumps, freezes the factor, or replaces Assumption 1 by a sufficient condition such as γ≥0; each of these makes the "only if" vacuous or false. Contributions that build general infrastructure (an Itô formula for jump diffusions, Doléans-Dade exponentials, a Feynman–Kac theorem) are especially welcome.
Selected references
B. Li, Z. Liang, L. Pang, Comparison Between Mean-Variance and Monotone Mean-Variance Preferences Under Jump Diffusion and Stochastic Factor Model, arXiv:2211.14473v2, 2023. https://arxiv.org/abs/2211.14473
F. Maccheroni, M. Marinacci, A. Rustichini, M. Taboga, Portfolio selection with monotone mean-variance preferences, Mathematical Finance 19(3):487–521, 2009. https://doi.org/10.1111/j.1467-9965.2009.00376.x
J. Trybuła, D. Zawisza, Continuous-time portfolio choice under monotone mean-variance preferences—stochastic factor case, Mathematics of Operations Research 44(3):966–987, 2019 (cited as [Trybuła and Zawisza 2019] in arXiv:2211.14473v2).
M. S. Strub, D. Li, A note on monotone mean–variance preferences for continuous processes, Operations Research Letters 48(4):397–400, 2020 (cited as [Strub and Li 2020] in arXiv:2211.14473v2).
P. Protter, Stochastic Integration and Differential Equations, 2nd ed., Springer, 2005, ISBN 978-3-662-10061-5.
Multilevel Langevin Pathwise Average for Gibbs Approximation II: Strongly Contractive Drift, 𝔞 = 1 — L²-Error ≲ [f]₁ε at Cost (5log γ₀⁻¹/2αγ₀)Υ₁²ε⁻²⌈log₂(Υ₁²ε⁻²)⌉³Research Paper
Motivation
Sampling from a Gibbs distributionπU∝e−Udλd on Rd, or computing integrals π(f) against it, is a basic task of Bayesian statistics, statistical physics and stochastic optimization. A standard route is to simulate a diffusion whose invariant law is the target, for instance the overdamped Langevin equation dXt=−∇U(Xt)dt+2dBt, discretize it with the Euler scheme, and average a function along one long trajectory. Discretization introduces a bias of order of the step size, and the long-time average introduces a variance that decays like the inverse of the horizon, so reaching root-mean-square accuracy ε with a single Euler scheme costs more than ε−2 steps.
Egéa and Panloup (arXiv:2109.07753, Mathematics of Operations Research, 2025) adapt Giles's multilevel Monte Carlo idea (Giles 2008) to this infinite-horizon setting: they combine a coarse pathwise average with corrections between coupled Euler schemes of successively halved steps, run over decreasing horizons. Their general complexity theorem (Theorem 2.1) is stated under four abstract assumptions (H₁)–(H₄). This mission formalizes the first concrete instance the paper gives: an additive diffusion with a strongly contractive drift, where the assumptions are verified with explicit dependence on the dimension and the cost is of order ε−2log3(ε−1).
Setting
Let ∣⋅∣ and ⟨⋅,⋅⟩ be the Euclidean norm and inner product on Rd. Let b:Rd→Rd be L-Lipschitz and satisfy the contractivity assumption(Cα):
⟨b(y)−b(x),y−x⟩≤−α∣x−y∣2(x,y∈Rd),
with 0<α≤L. For b=−∇U this is uniform strong convexity of U. Let σ>0 and let W be a standard d-dimensional Brownian motion. The additive diffusion started at x is Xtx=x+∫0tb(Xsx)ds+σWt; a probability π is invariant for it if ∫P(Xtx∈A)π(dx)=π(A) for all t and Borel A.
The Euler scheme with step γ>0 is Xˉ0γ,x=x, Xˉ(n+1)γγ,x=Xˉnγγ,x+γb(Xˉnγγ,x)+σ(W(n+1)γ−Wnγ), extended to continuous time by Xˉt=x+∫0tb(Xˉs)ds+σWt, s=γ⌊s/γ⌋. A probability πγ invariant for one step of the scheme is its invariant distribution.
The multilevel occupation measure with start x0, coarse step γ0, levels r=0,…,R, steps γr=γ02−r, horizons Tr and warm-start time τ is
where level r uses its own Brownian motion B(r), independent across levels, and both schemes of a level share it. Its cost is C(Y)=T0/γ0+∑r=1R(Tr/γr+Tr/γr−1), the number of simulated Euler steps. Write [f]1 for the Lipschitz constant of f and
Υ12=1∨(α−2∣b(x0)∣2+α−1σ2d).
Formalization targets
Goal: Theorem 2.2
There is a universal constant C1 such that, for α∈(0,L∧1], γ0∈(0,2L2α∧21], the parameters
The constant C1 does not depend on d, b, σ, f, x0 or ε; all dependence on the problem sits in the explicit cost.
Milestones
Lemma 5.1 (i)–(iii): uniform second-moment bound (47), existence and uniqueness of πγ, the L2 contraction E∣Xˉtγ,x−Xˉtγ,y∣2≤∣x−y∣2e−αt, the bound W2(δx,πγ)≤c1(x), and from these (H₁) and (H₄).
Lemma 5.2 (i): the one-step error between diffusion and Euler step.
Proposition 5.1 (i) and (iii) with a=1: ∥Xnγx−Xˉnγγ,x∥22≤β1(x)γ uniformly in n, hence (H₂).
Proposition 5.2 with a=1, δ=21: W1(π,πγ)≤β1(x⋆)γ, hence (H₃).
Proposition 2.1: all four assumptions with max(αc22/L2,αc32/L2,c42)≲Υ12.
Remark 4.1: Theorem 2.1 (ii) for the additive scheme when the constants are known up to universal factors.
Theorem 2.2 (15): the refinement with Υ~12=σ2α−1d and γ0=α/(2L2).
Significance
The goal gives a complexity of order ε−2log3(ε−1) for approximating π(f) by a pathwise average of Euler schemes, within a logarithmic factor of the ε−2 of an unbiased Monte Carlo method, with constants explicit in d, α, L, σ. When ∣b(x0)∣≲d, the cost is of order dε−2(log3d+log3ε). The intermediate results (uniform-in-time strong error of the Euler scheme, Wasserstein bias of its invariant law, step-independent contraction) are standard tools of Langevin Monte Carlo and are reusable on their own.
The results are proved in the paper; none of them is machine-checked. A formal proof would certify both the abstract multilevel argument as instantiated here and the explicit constants. The formal statements also pin three printed slips: the ceiling in (14) (cube of the ceiling, not ceiling of the cube), the first line of (12) (the function c1 of Lemma 5.1 (ii)), and the factor in (15).
Difficulty
The obvious argument controls bias and variance separately for each level. The bias of a pathwise average involves the long-time behaviour of the scheme, and the variance of a correcting level involves the L2 distance between two coupled schemes over an unbounded horizon: both require estimates uniform in time, which fail for a merely Lipschitz drift (the strong error of the Euler scheme grows exponentially on finite horizons). Contractivity is what makes the strong error O(γ) uniformly in n, and the delicate point is to obtain this with constants that do not degrade with d or with the step. The complexity bound then requires balancing Rε, the horizons and the warm start so that the long-time bias, the discretization bias and the variances all sit at level ε, with a universal constant.
Formalization scope
Rd is EuclideanSpace ℝ (Fin d) (published EthierKurtz.SDEState); Brownian motions are published EthierKurtz.IsStandardBrownian, one per level, mutually independent as path-valued variables. The diffusion is a pathwise solution of the integral equation with continuous paths; no Itô integral is needed because the noise is additive. Invariance of π and πγ is stated through transition probabilities. L2 norms are eLpNorm … 2 in [0,∞], so an infinite moment is never read as zero. W1 is used in its Kantorovich–Rubinstein form, W2(δx,⋅) as an explicit integral, and the clause W2(L(Xˉt),πγ)≤W2(δx,πγ)e−αt as the existence of a coupling with that quadratic cost (Mathlib has no Wasserstein distance; optimal couplings exist, so the forms agree). (H₁)–(H₃) are stated at grid times, (H₄) over all t≥0. "≲uc" is an existential constant quantified before every datum.
Standing assumptions carried as hypotheses: bL-Lipschitz, (Cα), 0<α≤L (and α≤1 where the paper requires it), σ>0. Added and disclosed: the §5.1 hypotheses in Lemma 5.2, γ<1 in Proposition 5.2 (needed by Proposition 5.1), integrability of f under π, existence of πγ and c~4>0 in Remark 4.1. The goal's ε0 (a maximum of a set that need not be an interval) is replaced by the inequality defining it.
The goal assumes only the contractive setting, the diffusion's invariance of π and the parameter choices; it does not assume (H₁)–(H₄), a bias or a variance bound, which appear only as milestones, so it cannot be discharged by restating its hypotheses.
A complete development needs: second-moment and Grönwall estimates for the Euler scheme and the diffusion, existence and uniqueness of invariant laws of Feller chains under a Lyapunov condition, independence and variance decompositions for the multilevel estimator, and the abstract Theorem 2.1. The Gaussian-increment and Wasserstein tools are reusable well beyond this mission. Proofs of any milestone, and a Mathlib-style W2 for general laws, are welcome.
Selected references
M. Egéa, F. Panloup, Multilevel-Langevin pathwise average for Gibbs approximation, Mathematics of Operations Research, 2025; preprint arXiv:2109.07753v2, 2024. https://arxiv.org/abs/2109.07753
A. S. Dalalyan, Theoretical guarantees for approximate sampling from smooth and log-concave densities, J. R. Stat. Soc. B 79(3), 2017. https://doi.org/10.1111/rssb.12183
A. Durmus, É. Moulines, Nonasymptotic convergence analysis for the unadjusted Langevin algorithm, Ann. Appl. Probab. 27(3), 2017. https://doi.org/10.1214/16-AAP1238
Stochastic Control Problems with State Reflections Arising from Relaxed Benchmark Tracking: Verification Theorem for the Optimal Feedback Investment-Consumption StrategyResearch Paper
Motivation
A fund manager who tracks a benchmark (a stock index, a price index, the cost of higher education) wants the managed wealth to stay above the benchmark at all times. Under a strict floor constraint Vt≥Mt the set of admissible strategies can be empty when the benchmark is random. Bo, Huang and Yu (arXiv:2302.08302, Math. Oper. Res.) relax the constraint: the manager may inject capital At so that Vt+At≥Mt, and pays β>0 per unit injected. The problem becomes a consumption–investment problem with a running-maximum cost, of the type studied with viscosity methods by Barron–Ishii (1989) and Bokanowski et al. (2015). The paper obtains instead a classical solution of the associated HJB equation and an explicit optimal feedback control. The reduction from the constrained problem to the auxiliary problem below is due to Bo, Liao and Yu (2021) and is not part of this mission.
Setting
A market has d risky assets with return vector μ=0 and invertible volatility matrix σ; the riskless rate is 0. On a filtered probability space satisfying the usual conditions with a d-dimensional Brownian motion W, write Wγ=∑jγjWj and Wη=∑jηjWj with ∣γ∣=∣η∣=1. The benchmark is Mt=mt+Zt, where Z is a geometric Brownian motion with drift μZ and volatility σZ≥0 driven by Wη, and mt is the running maximum of Bt=b+μBt+σBWtγ, σB≥0.
A strategy (θ,c) invests θt∈Rd and consumes at rate ct≥0; the class Ur consists of progressively measurable pairs for which the wealth equation is well defined on every bounded interval. The auxiliary states are the reflected wealth surplusX≥0, started at x,
where LX is the minimal nondecreasing process keeping X≥0 (the injected capital), and the reflected distance It=mt−Bt≥0 started at h. With power utility U(c)=cp/p, p∈(−∞,0)∪(0,1), and discount rate ρ>0, the objective is
J(x,h,z;θ,c)=E[∫0∞e−ρtU(ct)dt−β∫0∞e−ρtdLtX].
The candidate value function is built from a probabilistic representation. On a space with independent Brownian motions B0,B1,B2, let Rr be a reflected drifted Brownian motionr+(α2/2−ρ)t+αBt1+Ltr≥0, let Hh be a correlated one with local time Kh, and let Nz be a geometric Brownian motion. With the coefficients α,κ1,κ2,ϱ1,ϱ2 of (2.9) and (3.4),
For model parameters with μZ>κ2 and σB=0 there is ρ0>0 such that for every ρ>ρ0: (i) u is a classical solution of the HJB equation (4.2) with the Neumann conditions ux(0,h,z)=β and uh(x,0,z)=ux(x,0,z), with ux>0 and uxx<0; (ii) for every admissible strategy and every (x,h,z)∈R+3,
J(x,h,z;θ,c)≤u(x,h,z),
with equality for the feedback strategy θ∗=−(σσ⊤)−1uxxμux−σBσγuxh+σZσηz(uxx−uxz), c∗=ux1/(p−1) along a solution of the reflected feedback system (4.4). The threshold ρ0 is asserted to exist, not fixed: the paper's formula (4.45) for it depends on ρ and is not self-contained.
Milestones, in the order of the proof
Lemma 3.2. The first two terms l(r,z) of v solve the Neumann problem (3.8) and equal the explicit form (3.9).
Lemma 3.4. For σB=0, φ(r,h)=−βE[∫0∞e−ρs−RsrdGsh] is C2 on R+2, where Gh is the local time of a reflected Brownian motion independent of Rr.
Lemma 3.3.Gh and Rr are independent and φ solves the Neumann problem (3.15).
Proposition 3.5.ψ=φ+ξ solves (3.38), and every bounded classical solution of (3.38) equals the last term of v.
Remark 3.6.ψr+ψrr>0.
Theorem 3.1.u^ is strictly convex in y and solves the dual PDE (2.8) with (2.10), (2.11).
Theorem 4.1(i) and (4.7): the linear growth ∣θ∗∣≤Co(1+x+z), ∣c∗∣≤Cq(1+x).
Significance
The theorem settles two questions about the relaxed tracking formulation: the optimal portfolio–consumption pair exists in feedback form, and the value function is a classical (not only viscosity) solution of an HJB equation with two Neumann boundary conditions. Together with the paper's Lemma 4.4, it shows that the expected discounted capital injection of the optimal strategy is finite, so the relaxed problem is well posed. The dual representation also gives the value in a separated form, three expectations of functionals of reflected Brownian motions, which is what makes the derivatives and the feedback explicit.
The result is proved in the paper; nothing here is open. No part of it is formalized. A formal proof would need Itô's formula for reflected processes, the smoothness of expectations of local-time functionals, and the duality argument; any of the milestones on its own is a self-contained target.
Difficulty
The last term of v couples the reflected process Rr with the local time Kh of a second reflected process correlated with it through ϱ1. Differentiating E[∫e−ρs−RsrdKsh] in (r,h) directly fails: the local time is not differentiable in its starting point in any pathwise sense, and the correlation prevents conditioning one process on the other. The paper first treats the independent case (Lemmas 3.3–3.4), where the expectation factors through the law of Gh, and then removes the correlation by a homogenization of the Neumann conditions (Proposition 3.5). A second difficulty is the verification step itself: the admissible class is unbounded and the state reflects at two boundaries, so the local martingale terms must be controlled by moment bounds that depend on the growth (4.7) of the feedback.
Formalization scope
Parameters. One structure holds μ,σ,μZ,σZ,μB,σB,γ,η,β,p; the standing assumptions are d≥1, detσ=0, μ=0, σZ,σB≥0, γ⋅γ=η⋅η=1, β>0, p<1, p=0. All coefficients (α,κ1,κ2,ϱ1,ϱ2,C1,C2,ℓ) are definitions.
Carriers.v, u^, u are defined on any probability space with a standard 3-dimensional Brownian motion (published EthierKurtz.IsStandardBrownian), and every statement holds for every such space. The control problem lives on any filtered space satisfying the usual conditions with an F-Brownian motion (published RankBasedSDI.LoadBalancing.UsualConditions, IsFBrownian).
Processes in closed form.Rr,Hh,Kh,Lr,Gh are given by Skorokhod formulas (published skorokhodReg), Z and Nz as explicit exponentials. The only stochastic integral is ∫θ⊤σdW, through the published EthierKurtz.HasBrownianItoIntegral with a continuous version required.
Expectations and objective. Expectations of nonnegative integrands are lintegrals; statements about v assert their finiteness. Stieltjes integrals use the Lebesgue–Stieltjes measure of the path. The objective is compared in the extended reals as utility≤u+β⋅cost, which agrees with J≤u whenever J is defined and never produces ∞−∞; cp is computed in [0,∞] so that 0p=∞ for p<0.
Classical solutions.C2 on the closed domain (ContDiffOn ℝ 2), the PDE on the open set the paper names, Neumann conditions pointwise on the faces; derivatives are taken within the closed coordinate domains. The suprema in (4.2) are least upper bounds (IsLUB), the consumption supremum over c>0.
Added hypotheses.μZ>κ2 and σB=0 in Theorem 4.1 and σB=0, ρ>α2∣p∣/(2(1−p))+μZ in Theorem 3.1 are used by the proofs but not printed in the statements; they are added. Lemma 3.2 and the milestone Theorem 4.1(i) also carry Theorem 3.1's ρ>α2p/(2(1−p)): when μZ<0 Lemma 3.2's printed condition does not imply it, and without it the first expectation in v is infinite.
Ruled out. Defining u as the supremum of J would make (ii) circular, and specializing to d=1, σB=0, ϱ1=0 or a fixed ρ changes the theorem; none of these is used. A statement "for every solution of (4.4)" would be vacuous if (4.4) had no solution, so the optimal pair is asserted to exist.
The definitions of reflected processes, Stieltjes integrals against local times, and classical Neumann solutions are reusable beyond this mission. Proofs of any milestone, and of the deterministic facts (0<ℓ<1, ∣ϱi∣≤1, (3.9) solving (3.8)), are welcome.
Selected references
G. Bo, Y. Huang, X. Yu, Stochastic control problems with state-reflections arising from relaxed benchmark tracking, arXiv:2302.08302v4 (Math. Oper. Res.). https://arxiv.org/abs/2302.08302
L. Bo, H. Liao, X. Yu, Optimal tracking portfolio with a ratcheting capital benchmark, SIAM J. Control Optim. 59(3), 2346–2380, 2021.
J. M. Harrison, Brownian Motion and Stochastic Flow Systems, Wiley, New York, 1985.
W. Łaukajtys, L. Słomiński, Penalization methods for the Skorokhod problem and reflecting SDEs with jumps, Bernoulli 19(5A), 1750–1775, 2013.
E. N. Barron, H. Ishii, The Bellman equation for minimizing the maximum cost, Nonlinear Anal. TMA 13(9), 1067–1090, 1989.
Correlated Equilibria for Mean Field Games with Progressive Strategies: Correlated MFG Solutions Yield ε_N-Correlated Equilibria of the N-Player Game Against Progressive Deviations, ε_N → 0Research Paper
Motivation
A correlated equilibrium (Aumann, 1974) is an equilibrium of a game with a mediator: the mediator draws a profile of recommendations from a known distribution and tells each player privately what to play. The distribution is an equilibrium if no player gains by deviating from the recommendation they receive. Correlated equilibria can give higher payoffs than Nash equilibria, they are cheaper to compute, and many adaptive learning procedures converge to them.
Mean field games describe symmetric games with many players, each of whom interacts with the others only through the empirical distribution of their states. The standard justification of a mean field model is an approximation theorem: a solution of the limit game induces approximate equilibria of the games with N players, with an error that vanishes as N→∞.
Correlated solutions of discrete-time mean field games were introduced by Campi and Fischer (arXiv:2004.07936) for restricted strategies, in which both the recommendations and the deviations are Markov in the player's own state. Bonesini, Campi and Fischer (arXiv:2212.01656) keep restricted recommendations but allow the deviating player to use progressive strategies, which see the whole history of the system, together with a private randomization device. This mission formalizes their main approximation result, Theorem 6.2.
Setting
Time runs over [[0,T]]. States lie in a finite set X and actions in a finite set Γ. Noise variables are uniform on Z=[0,1]; their law is ν. The set P(X) of probability measures on X carries the metric dist(μ,μ~)=21∑x∣μ(x)−μ~(x)∣. A player's state moves by
Xt+1=Ψ(t,Xt,μt,ut,ξt+1),
where μt is the distribution of the other players' states, ut∈Γ is the player's action and ξt+1∼ν is idiosyncratic noise. The player pays a running cost f(t,Xt,μt,ut) and a terminal cost F(XT,μT).
A restricted strategyφ∈R is a map (t,x)↦φ(t,x)∈Γ. A progressive strategyφ∈R chooses the action at time t as a Borel function of the player's state history x(t) and the history m(t) of the measure flow.
N-player game. The mediator draws (Φ1,…,ΦN) from a correlated suggestionγN. Every player j applies Φj to their own state path and to the empirical measure μj,N of the other N−1 players. A strategy modification of player i replaces Φi by a progressive strategy Φ~i. At time t the component Φ~i(t,⋅) may depend on Φi and on an independent uniform variable ϑt; the set of joint laws of (Φi,Φ~i) obtained this way is NγiNN. Player i's expected cost is JiN(mN,γN,γ~). The suggestion γN is an ε-correlated equilibrium if no player gains more than ε by any modification.
Mean field game. The mediator draws a pair (Φ,μ) from ρ∈P(R×P(X)T+1): a restricted recommendation and a random flow of measures. The representative player may deviate through any map w:R→R. The pair ρ is a correlated solution if following the recommendation is optimal (Opt), and if, in that case, μt is the conditional law of Xt given the whole flow μ (Con).
Formalization targets
Goal: Theorem 6.2
Assume (A1)–(A3), and let ρ be a correlated solution with initial law m0 satisfying (R1)–(R2). Write ρ(dφ,dm)=ρ1(dφ∣m)ρ2(dm). Then there are εN≥0 with εN→0 such that, for every N≥2,
γN(C1×⋯×CN)=∫j=1∏Nρ1(Cj∣m)ρ2(dm)
is an εN-correlated equilibrium with initial law m0⊗N.
Milestones
The milestones follow the proof:
the identification of γN (Remark 6.3) and the two disintegrations (6.4), (6.5);
convergence of the cost when nobody deviates, (6.2);
the conditional dynamic programming principle for the value function Vφ of a player who received the suggestion φ (Proposition 5.5), and the equivalence of closed-loop and open-loop solutions (Proposition 5.6);
three limits in the coupling of the deviation argument, (6.20), Claim 6.4 and (6.34);
the lower bound for a deviating player, (6.3).
An additional milestone, (4.3), states that the cost does not depend on the realization.
Significance
The theorem justifies correlated mean field solutions as models of large games with a mediator. It applies when the mediator's recommendations and the population flow are genuinely random, and when deviators may use the full history of the system. The paper's Section 7 gives an explicit example satisfying all its hypotheses. In that example the flow of measures is non-deterministic, so the correlated solution is not a mixture of Nash solutions.
No part of this result has a machine-checked proof. Formalizing it requires:
a complete account of correlated equilibria for dynamic games in Lean: suggestions, randomized strategy modifications, realizations;
a conditional law of large numbers for empirical measures;
the open-loop/closed-loop equivalence of Section 5.
These components are reusable beyond this paper.
Difficulty
When the flow μ is deterministic, the usual propagation-of-chaos argument for Nash approximation applies. Here it does not, for three reasons.
The flow is random, and every player's recommendation is correlated with it. Convergence must therefore be proved conditionally on the flow, and the disintegrations (6.4)–(6.5) are needed for this.
The deviating player sees the empirical measures of the others and may use extra randomness. The limit of their behaviour is not a closed-loop strategy of the mean field game. Optimality against it requires the open-loop formulation, Proposition 5.6, whose proof uses a conditional dynamic programming principle under (R1).
The empirical measure seen by the deviator is perturbed by the deviation itself. Claim 6.4 and (6.34) control this perturbation through the continuity assumption (A2).
Formalization scope
Lean conventions:
Spaces.X and Γ are Fintypes with the discrete σ-algebra. P(X) is stdSimplex ℝ X with its subspace topology and Borel σ-algebra. ν is volume on unitInterval.
Indexing. States and flows are indexed by Fin (T+1), and actions and noises by Fin T; the noise ξt+1 has index t. Players are Fin N, and the paper's player 1 is index 0.
Strategies. Progressive strategies are non-anticipative, measurable functions of full paths. N-player strategies read empirical measures of N−1 points, so RN is finite and carries the discrete σ-algebra.
The private coin. Condition v) of Definition 3.1 says that Φ~i(t,⋅) is σ(Φi,ϑt)-measurable. It is stated literally. NγN is defined from kernels as in (3.1).
Realizations. A realization is a structure on a probability space Ω : Type. Conditions i)–iv) form a single product-law identity, and the dynamics hold almost surely. Completeness of the spaces and filtrations is dropped. Costs are the expected costs of realizations, and every inequality or limit between costs is required for every realization (or sequence of realizations) of each side.
Equilibrium. In the εN-equilibrium, one εN serves every player and every modification. All N-player statements assume N≥2, and sequences run along N=n+2.
(Con) conditions on σ(μ) of the whole flow, via Lean's condExp.
(R2) is read in distribution (Remark 6.1). ρ1 is any kernel that disintegrates ρ along its second marginal.
Implicit hypotheses made explicit. Joint measurability of Ψ is added. (A3) is stated as Lipschitz continuity in the measure argument with one constant.
Vφ (Proposition 5.5) is defined through the explicit representation (5.10) of the conditional cost, a sum over flows weighted by Pφ(μ=m′∣μ(t)=m(t)), rather than by conditioning on events. The proposition is stated with Vφ(t+1,…) on the right, as in its proof; the printed statement has t.
(6.3) is stated for every sequence of modifications, which is equivalent to the paper's near-minimizing sequence. A liminf bound is written as "for every δ>0, eventually".
Ruled out: none of the following is a faithful formalization of this mission:
a deterministic flow (a Dirac ρ2);
deviations without the private coin, or restricted to R;
(Con) conditioned on μ(t) only;
an arbitrary kernel in place of the disintegration ρ1.
Sorry-free checks in the workspace show that realizations of both games and the coupling exist, so the realization predicates are not vacuous.
Needed infrastructure, and welcome contributions:
conditional laws of large numbers for empirical measures of finite-state particles;
propagation of chaos in the sense of Kac–Sznitman;
disintegration lemmas for finite product kernels.
Selected references
O. Bonesini, L. Campi, M. Fischer, Correlated Equilibria for Mean Field Games with Progressive Strategies, arXiv preprint, 2022. https://arxiv.org/abs/2212.01656
L. Campi, M. Fischer, Correlated equilibria and mean field games: a simple model, Mathematics of Operations Research 47(3):2240–2259, 2022. https://arxiv.org/abs/2004.07936
A. D. Gottlieb, Markov Transitions and the Propagation of Chaos, PhD thesis, University of California, Berkeley, 1998 (the chaos theorem cited as Theorem A.1). https://arxiv.org/abs/math/0001076
Reducing Marketplace Interference Bias Via Shadow Prices 1: In a Symmetric Experiment the Shadow-Price Estimator Is No More Biased Than the RCT Estimator in the Fluid LimitResearch Paper
Motivation
Online marketplaces (ride hailing, delivery, freelancing, retail supply chains) test changes to their product with randomized controlled trials: a fraction ρ of the arriving customers is treated, the rest is kept as control, and the difference in outcomes is scaled up to estimate what would happen if everybody were treated. In a market with limited supply this estimate is biased. Treated and control customers compete for the same drivers or the same inventory, so the outcome of one group depends on the size of the other. This effect is called marketplace interference, and it makes the standard estimator overstate the effect of a treatment.
Bright, Delarue and Lobel (arXiv:2205.02274v4) model the platform's matching decision as a linear program and propose to estimate the treatment effect from the shadow prices of that program, which measure the marginal value of one more unit of demand of each type. This mission formalizes their fluid-limit comparison between the standard RCT estimator and the shadow-price estimator: in a symmetric experiment, the shadow-price estimator is never more biased.
Setting
A matching network is a finite directed graph with one demand node uid for each demand type i∈[nd] (only incoming arcs), one supply node ujs for each supply type j∈[ns] (only outgoing arcs), and intermediate nodes. Each arc (u,w) has a value vu,w∈R per unit of flow and a capacity ku,w≥0. Given a demand vector d and a supply vector s, the platform solves the LP (2)
Φ(d,s)=max(u,w)∑vu,wxu,w
over arc flows x with 0≤x≤k, flow into each uid at most di, flow out of each ujs at most sj, and flow balance at each intermediate node. Its dual (5) has a nonnegative price ai for each demand constraint, a price bj for each supply constraint, a price ξu,w for each capacity and a free potential at each intermediate node. The price ai is the shadow price of demand type i.
Demand arrives at rate λ≥0 under global control and at rate λ+β≥0 under global treatment; supply arrives at rate π≥0. An experiment treats a fraction ρ∈(0,1) of demand, so the platform observes the market at the intermediate rate λ+ρβ. The partial-treatment value function is Ψ(η)=Φ(λ+ηβ,π) for η∈[0,1], and the global treatment effect in the fluid limit is
Δ=Ψ(1)−Ψ(0)=Φ(λ+β,π)−Φ(λ,π).
Two estimators are computed from the experiment state alone. The RCT estimator is Δ^RCT=vˉ∗⋅β, where vˉi∗ is the average value per unit of type-i demand in the optimal flow of Φ(λ+ρβ,π), computed along the supply-to-demand paths that carry it ((9)–(10)). The shadow-price estimator is Δ^SP=aρ⋅β, where aρ is the demand part of the optimal dual solution of Φ(λ+ρβ,π) ((11)). Two assumptions stand throughout: the optimal primal and dual solutions of Φ(λ+ρβ,π) are unique (Assumption 2), and β is sign-consistent, β≥0 or β≤0 componentwise (Assumption 3).
Formalization targets
Goal: Theorem 4 (p. 21)
In a symmetric experiment, ρ=21,
Δ^SP−Δ≤Δ^RCT−Δ.
The statement fixes no constant other than the symmetric design. It holds for every network, every admissible rate vector and every path decomposition of the optimal flow.
Milestones
Proposition 1 (p. 13): Ψ is concave and piecewise linear with finitely many pieces on [0,1].
Theorem 2 (p. 14): if β≥0, then vˉ∗⋅(λ+β)≥Ψ(1) and vˉ∗⋅λ≤Ψ(0), with the reverse inequalities if β≤0. Consequently ∣Δ^RCT∣≥∣Δ∣.
Proposition 6 (p. 21): Ψ′(η)=aη⋅β off finitely many points, and Δ=∫01aη⋅βdη.
Companion results
Theorem 9 (p. 27): for ρ<21 and β≤0, the estimator Δ^SP+=(1−2ρ)Δ^RCT+2ρΔ^SP is no more biased than Δ^RCT.
Theorem 10 (p. 27): for any ρ, if (vˉ∗−a0)⋅β≥(a0−a1)⋅β, then BiasSP≤BiasRCT; if (a0−a1)⋅β=0, then BiasSP=0.
Significance
Theorem 4 says that a platform running a 50/50 experiment never does worse by replacing the average value vˉ∗ with the marginal value aρ. The comparison does not depend on the network, on the capacities, or on how strongly treatment and control interfere. Theorem 2 shows that the standard estimator is biased in a known direction, and Theorem 4 shows that a different use of the same experiment data reduces that bias. The SP estimator needs only the dual solution of an LP the platform already solves.
All results of this mission are proved in the paper (Appendix C), and none has a machine-checked proof. The milestones are statements about parametric linear programs: concavity and piecewise linearity of the optimal value in the right-hand side, and the identification of its derivative with the optimal dual. These hold well beyond this paper and are absent from the platform.
Difficulty
Two steps resist the naive argument. The bound vˉ∗⋅λ≤Ψ(0) needs a feasible flow for the control market built from the experiment's optimal flow. Scaling the arc flow does not give one, because types share arcs. The flow has to be scaled path by path and type by type, which is why vˉ∗ is defined through paths. The identification Ψ′(η)=aη⋅β needs LP sensitivity analysis in a parametric right-hand side: strong duality at every η, and the fact that dual optima are supergradients of Ψ. Because Ψ has kinks, the identification holds only off finitely many points. Finally, a pointwise comparison of aρ with vˉ∗ does not give Theorem 4. The proof compares integrals of aη⋅β over [0,ρ] and [ρ,1], and the symmetric design is what balances the two sides.
Formalization scope
Everything is defined in MarketInterference.FluidBias. The network is a structure with arcs E and intermediate nodes I, both finite. An arc's tail is a supply node or an intermediate node, and its head is a demand node or an intermediate node, so the sink and source convention holds by construction. Demand types are Fin nd, and Lean index i is the paper's type i+1. Φ is the supremum of the objective over the feasible set. For d,s≥0 that set contains 0 and lies in the box [0,k], so the supremum is a maximum. The dual (5) is encoded arc by arc, and the four printed constraint families (5b)–(5e) are its four tail/head cases. Optimality of a primal or dual solution is stated explicitly. Strong duality is not assumed.
The estimators are the right-hand sides of (9)–(11). They are computed from an optimal primal flow, one of its path decompositions, and an optimal dual solution of the experiment LP. Neither is defined from Ψ or from its derivative. A formalization that defined Δ^SP as Ψ′(ρ), or Δ^RCT through Ψ, would trivialize the goal and is ruled out. With intermediate nodes, the decomposition of the optimal flow into paths, which (10) treats as given, is not unique. The theorems therefore hold for every decomposition. Paths are lists of distinct arcs. In (10), a type with λi+ρβi=0 has βi=0, and Lean's x/0=0 makes its term vanish. Assumption 2 is stated as uniqueness of the whole optimal primal flow and of the whole dual solution (a,b,m,ξ), as printed. Assumption 3 is a disjunction of the two sign conditions. Assumption 1 (random tie-breaking) concerns only the finite random market and is not added. The limits in Corollary 1 and Propositions 2 and 5 are not needed here: Δ, Δ^RCT and Δ^SP are defined directly in the fluid model. Proposition 6's derivative is stated with HasDerivAt off a finite set, and its dual selection η↦aη is arbitrary. The statements follow arXiv:2205.02274v4. Its printed slips are corrected as disclosed: the ill-defined y∗ of (10) is read as any path decomposition, and "uis" on p. 9 is read as uid.
A complete development needs LP strong duality and complementary slackness for this network LP, parametric-LP results (concavity and piecewise linearity of the optimal value along a ray, and dual optima as supergradients), path decompositions of flows, and the fundamental theorem of calculus for piecewise linear functions. The parametric-LP layer can be reused for any LP-based value function. Proofs of any milestone are welcome, as are general lemmas on network LPs.
Selected references
I. Bright, A. Delarue, I. Lobel, Reducing Marketplace Interference Bias Via Shadow Prices, arXiv:2205.02274v4, 2024; Management Science, 2025. https://arxiv.org/abs/2205.02274
D. Bertsimas, J. N. Tsitsiklis, Introduction to Linear Optimization, Athena Scientific, 1997, Chapter 5 (sensitivity analysis; Theorem 5.1).
R. Johari, H. Li, I. Liskovich, G. Y. Weintraub, Experimental Design in Two-Sided Platforms: An Analysis of Bias, Management Science, 2022 (cited by the paper as [Johari et al. 2022]). https://arxiv.org/abs/2002.11142