User-Friendly Tail Bounds for Sums of Random Matrices III: The Matrix Chernoff Inequality for Sums of Independent Positive-Semidefinite Random MatricesResearch Paper
Motivation
The classical Chernoff bound controls the probability that a sum of independent, nonnegative, uniformly bounded random variables deviates from its mean, with exponentially small tails governed by the Kullback–Leibler divergence between two Bernoulli laws. Many problems in numerical linear algebra, graph sparsification, compressed sensing and randomized algorithms instead require control of a sum of independent random matrices: the smallest singular value of a random matrix with independent columns, the spectrum of a sampled Laplacian, or the conditioning of a random submatrix. For these, what matters is not a scalar sum but the extreme eigenvalues of a random positive-semidefinite matrix.
Ahlswede and Winter (2002) introduced a matrix version of the Laplace transform method and proved a matrix Chernoff bound for identically distributed summands. Tropp's paper (arXiv:1004.4389, Found. Comput. Math. 2012) replaced the Golden–Thompson step of their argument with Lieb's concavity theorem, obtaining a master tail bound for independent sums, and derived from it matrix Chernoff, Bernstein and Azuma inequalities that require no identical distribution and lose only a dimensional factor. This mission formalizes the matrix Chernoff inequalities of §5 of that paper.
Timeline:
2002, Ahlswede–Winter: matrix Laplace transform method; matrix Chernoff bound for i.i.d. summands via Golden–Thompson.
2010, Oliveira: a variant of the Laplace transform method used in Proposition 3.1 of the paper.
2010–2012, Tropp: master tail bound via Lieb's theorem (Theorem 3.6), and Theorem 5.1 / Corollary 5.2 for independent, non-identical psd summands.
Setting
All matrices are d×d complex matrices with d≥1. For a self-adjoint (Hermitian) matrix A, λmax(A) and λmin(A) are its algebraically largest and smallest eigenvalues. The semidefinite orderA≼B means that B−A is positive semidefinite (psd). Functions of a self-adjoint matrix are defined spectrally: if A=QΛQ∗ then f(A)=Qf(Λ)Q∗; this gives the matrix exponentialeA and, on positive-definite matrices, the matrix logarithmlogA.
A random matrix is a measurable map X:Ω→Cd×d on a probability space (Ω,F,P), and its expectationEX is taken entrywise. The matrix moment generating function of X is θ↦EeθX.
The objects of the mission are independent random Hermitian matrices X1,…,Xn that are almost surely psd contractions: Xk≽0 and λmax(Xk)≤1. Their average expectation has extreme eigenvalues
Theorem 5.1 matches the strongest scalar Chernoff bound for independent, non-identical Bernoulli trials, up to the factor d, which cannot be removed (coupon collector, Remark 5.6). Corollary 5.2 is the version used in applications: lower bounds on the smallest singular value of matrices with independent columns (Remark 5.4), spectral sparsification, column subset selection and random sampling of matrices. Remark 5.5 derives from it the expectation bound Eλmax(∑kXk)≤Cmax{μmax,Rlogd}.
The results are proved in the paper, from Lieb's concavity theorem. As far as is known, no machine-checked proof of a matrix Chernoff inequality exists in Lean or Mathlib. A formalization yields a reusable statement for the random-matrix and randomized-numerical-linear-algebra literature, and the milestones (the master bound, the single-logarithm corollary and the semidefinite mgf bound) are reusable beyond this mission.
Difficulty
The scalar Chernoff argument uses Eeθ(X+Y)=EeθXEeθY for independent X,Y. For matrices eA+B=eAeB unless A and B commute, so the trace of the mgf of a sum does not factor. The Golden–Thompson inequality handles two summands but does not extend to three, which is why the Ahlswede–Winter bound needed identical distributions. The master bound (Theorem 3.6) requires Lieb's concavity theorem, which has no counterpart in Mathlib. Corollary 3.9 in addition needs operator concavity of the matrix logarithm, and Lemma 5.8 needs the transfer of a scalar inequality to the semidefinite order through the spectral calculus.
Formalization scope
Matrices are Matrix (Fin d) (Fin d) ℂ with [NeZero d]; the semidefinite order is Mathlib's MatrixOrder (A ≤ B ↔ (B − A).PosSemidef). exp and log of a matrix are the continuous functional calculus cfc. λmax, λmin are sSup/sInf of the real spectrum. Expectation is entrywise. Random matrices are measurable with respect to the Borel σ-algebra on matrices, independence is iIndepFun, and the probability measure is a probability measure. The summands are Hermitian for every outcome; "psd" and "λmax≤1" hold almost surely. The sequence has n≥1 terms wherever an average 1/n appears. An infimum over θ>0 is stated as a bound for every admissible θ>0; integrability of eθXk is a hypothesis only in Theorem 3.6 and Corollary 3.9, where the summands are unbounded. In Lean log0=0, so at the boundary values μˉ∈{0,1} the divergence is finite where the paper's is +∞; this only weakens the stated bound.
A formalization in which d=0 (empty spectrum, λmax=0) or n=0 (the average 1/0=0) were allowed, or in which the range of α were dropped, would state a different, partly false theorem; these cases are excluded.
A complete development needs Lieb's theorem or another route to the master bound, operator concavity of the logarithm, the spectral mapping theorem and the transfer rule for the functional calculus on Hermitian matrices, monotonicity of the trace exponential, and the scalar optimization in θ. Contributions of any of these as stand-alone lemmas are welcome.
R. Ahlswede, A. Winter, Strong converse for identification via quantum channels, IEEE Trans. Inform. Theory 48 (2002) 569–579. https://doi.org/10.1109/18.985947
R. I. Oliveira, Sums of random Hermitian matrices and an inequality by Rudelson, Electron. Commun. Probab. 15 (2010) 203–212. https://arxiv.org/abs/1004.3821
Time-Inconsistent Stochastic Linear–Quadratic Control II: With a Scalar State and Deterministic Coefficients, Coupled Riccati Equations Give an Explicit Linear Feedback EquilibriumResearch Paper
Motivation
In a time-inconsistent control problem, a control that is optimal when planned at time t stops being optimal when the problem is re-solved at a later time. Two sources of time inconsistency are common in finance and economics. One is a variance term in the objective, as in continuous-time Markowitz mean–variance portfolio selection (Zhou–Li 2000; Basak–Chabakauri 2010). The other is a state-dependent target, as in Björk–Murgoci–Zhou 2014. Dynamic programming does not apply. A standard response is to look for an equilibrium: a control that no planner at any time t can improve by an infinitesimal deviation on [t,t+ε).
Hu, Jin and Zhou define open-loop equilibria for a general stochastic linear–quadratic (LQ) problem with both sources of time inconsistency. They give a sufficient condition through a flow of forward–backward SDEs, which is the subject of mission I of this series. This mission covers §4 of the paper: the scalar-state case with deterministic coefficients, where the equilibrium is computed explicitly from a system of coupled Riccati equations. Mission III covers §5, the mean–variance application with random coefficients.
Setting
On a probability space carrying a standard d-dimensional Brownian motion W with its filtration (Ft), the state X is scalar (n=1) and the control u takes values in Rl:
The coefficients are deterministic functions on [0,T]: As,bs,Qs∈R, Bs∈Rl, Cs,σs∈Rd, Ds∈Rd×l and Rs∈Rl×l symmetric. A,B,C,D,Q,R are bounded, b,σ are square integrable, Q≥0, R⪰0, and G≥0. At time t, in state xt, the planner evaluates
where Et=E[⋅∣Ft]. The third term (the variance-like term) and the fourth term (which depends on xt) make the problem time-inconsistent. A control u∗ with state X∗ is an equilibrium (Definition 2.1) if, for every t∈[0,T) and every Ft-measurable square-integrable v, the spike ut,ε,v=u∗+v1[t,t+ε) satisfies
ε↓0liminfεJ(t,Xt∗;ut,ε,v)−J(t,Xt∗;u∗)≥0.
With Γs(1)=μ1e∫sTArdr, ∣C∣2=C′C and K=(R+MD′D)−1, the coupled Riccati system (4.9) for deterministic (M,N) is
(i) R⪰δI, lQD′D+∣C∣2R+Γ(1)S(D′CB′)⪰0 and B=λD′C with λ≥0;
(ii) the first two conditions of (i) and D′D⪰δI;
(iii) R≡0, D′D⪰δI, Q+Γ(1)B′(D′D)−1(B+D′C)≥0 and Q+Γ(1)B′(D′D)−1D′C≥0.
Then
(4.9) has a unique positive solution pair (M,N) on [0,T],
and, for every solution Φ of (4.8), the closed-loop equation of (4.4) has a solution, and the feedback control along every closed-loop state is an equilibrium.
Milestones
Proposition 4.1: a positive solution (M,J) of the transformed system (4.10) gives the positive solution (M,M/J) of (4.9).
Theorem 4.2: existence and uniqueness of positive solutions of (4.10) and (4.9) in the standard case R⪰δI.
Theorem 4.3: existence for (4.13) and (4.9) in the singular case R≡0.
Three steps from the proof of Theorem 4.4:
α is bounded, so u∗ is admissible and X∗ has continuous paths with Esups∣Xs∗∣2<∞;
the ansatz p(s;t)=MsXs∗−NsEt[Xs∗]−Γs(1)Xt∗+Φs, k(s;t)=Ms[CsXs∗+Dsus∗+σs] solves the adjoint flow (3.10);
the identity Λ(s;t)=Ns[Xs∗−EtXs∗]Bs+Γs(1)(Xs∗−Xt∗)Bs holds, and Λ satisfies condition (3.4).
Significance
The theorem gives an equilibrium in closed form, as a linear feedback of the current state with deterministic gains. That makes the equilibrium computable and comparable with the classical, time-consistent LQ regulator. Setting h=μ1=0 recovers a standard LQ problem, but (4.9) differs from the classical Riccati equation even then: it is a nonsymmetric coupled system (footnote 2, p. 10), and the cases (i)–(iii) are the conditions under which it is solvable. The mean–variance results of §5 (mission III) follow the same pattern.
The result is proved in the paper; to our knowledge it has not been formalized. A formal proof needs global existence for a nonlinear, nonautonomous ODE system with Carathéodory coefficients, obtained by truncation and a priori bounds. It also needs linear SDEs with bounded feedback, Itô calculus for products of deterministic and Itô processes, and the sufficient condition of mission I. Uniqueness in case (iii) is claimed by Theorem 4.4 but not proved in Theorem 4.3; it is part of the goal.
Difficulty
The system (4.9) is quadratic in (M,N). Its solutions can blow up in finite time, and (R+MD′D)−1 can degenerate when M changes sign. Picard–Lindelöf therefore gives only local solutions, and a global solution needs a priori bounds 0<η≤M≤L and J≥1, with η and L independent of the truncation level. Those bounds are where the case hypotheses enter. In the stochastic half, the equilibrium property is not proved by computing J directly. It requires checking that the explicit candidate meets the flow-of-FBSDE sufficient condition, and the flow carries a parameter t and the conditional expectations Et[Xs∗] for every s≥t.
Formalization scope
The general model (data, standing assumptions, states, conditional cost, spike, equilibrium) is stated for arbitrary n and instantiated at n=1 through toData. It is built on the published substrate Peng1990_SMP_Stochastic (Brownian motion, natural filtration, LF2, Itô integrals, SDE solutions). The formalization commits to the following choices.
Definition 2.1 uses liminf in R, along every sequence εk↓0, almost surely for each sequence, and for every version of the state and of the perturbed states. The page writes lim, which need not exist.
The filtration is the natural, uncompleted filtration of W, not the augmented one.
The state from time t is encoded through the full horizon. The spike is additive on [t,t+ε).
"Essentially bounded" and "a.s., a.e." are read dP⊗ds-a.e.
Every ODE ((4.8), (4.9), (4.10), (4.13)) is stated in integral form on [0,T], because the coefficients are only bounded measurable. A solution includes invertibility of R+MD′D (resp. D′D) on [0,T]. Uniqueness means agreement on [0,T].
The constants δ,λ are uniform in s, and the case conditions hold for every s∈[0,T]. In lQD′D+∣C∣2R, l is the control dimension.
"Let Φ be a solution of (4.8)" means every solution. "u∗ is an equilibrium" means that a closed-loop state exists and that the feedback is an equilibrium along every closed-loop state.
Conditional-expectation families Et[Xs∗] are handled through arbitrary progressive versions. Condition (3.4) is stated exactly: its first part as a localization on Ft-sets, its second part with a jointly measurable version and "a.e. s".
The paper's "β uniformly bounded" is false when σ is only square integrable. The milestone states the true claim: α is essentially bounded on [0,T] (the coefficients are only essentially bounded) and β is square integrable.
The goal's conclusion is Definition 2.1 itself; it does not mention Λ, p or (3.4). Existence of the closed-loop state is asserted, not assumed. A formalization that assumes existence, or that replaces equilibrium by condition (3.4), is a different and weaker theorem.
Theorem 3.3 (the n=1 sufficient condition) is not posed here. Under the shared model it is mission I's goal at n=1. Contributions are welcome on the ODE layer (truncation, comparison and Gronwall bounds for Carathéodory systems), on linear SDEs with bounded feedback, and on the Itô product rule. These parts are reusable well beyond this paper.
Selected references
Y. Hu, H. Jin, X. Y. Zhou, Time-Inconsistent Stochastic Linear–Quadratic Control, arXiv:1111.0818v1, 2011; SIAM J. Control Optim. 50(3), 2012. https://arxiv.org/abs/1111.0818
S. Basak, G. Chabakauri, Dynamic mean–variance asset allocation, Review of Financial Studies 23(8), 2010. https://doi.org/10.1093/rfs/hhq028
X. Y. Zhou, D. Li, Continuous-time mean–variance portfolio selection: a stochastic LQ framework, Applied Mathematics and Optimization 42, 2000. https://doi.org/10.1007/s002450010003
S. Peng, A general stochastic maximum principle for optimal control problems, SIAM J. Control Optim. 28(4), 1990. https://doi.org/10.1137/0328054
Optimization Methods on Riemannian Manifolds and Their Application to Shape Space 1: Riemannian BFGS with Isometric Vector Transport Converges R-Linearly under Uniform ConvexityResearch Paper
Motivation
Many optimization problems in shape analysis, computer vision, numerical linear algebra and statistics have a feasible set that is not a vector space but a Riemannian manifold: spaces of curves modulo reparametrization, the Stiefel and Grassmann manifolds, fixed-rank matrices. On such a set the classical recipe "add a multiple of the search direction to the iterate" is not available, and line-search methods replace it by a retraction, a map that follows a tangent direction back onto the manifold (Absil, Mahony, Sepulchre 2008).
Quasi-Newton methods are the most widely used line-search methods in the Euclidean setting, and BFGS is the most popular of them. Transferring BFGS to a manifold raises a specific problem: the Hessian approximation Bk lives on the tangent space at xk, while the next one must live on the tangent space at xk+1, so a vector transportTk between tangent spaces enters the update.
Timeline:
Gabay (1982) proposed a Riemannian BFGS update with geodesics and parallel transport (doi:10.1007/BF00934767).
Absil, Mahony and Sepulchre (2008) and Qi, Gallivan and Absil (2010) generalized it to arbitrary retractions and vector transports.
Ring and Wirth (2012), the source of this mission, proved global convergence and an R-linear rate for transported BFGS on possibly infinite-dimensional Riemannian manifolds, assuming that the transports are isometries (doi:10.1137/11082885X).
Later work by Huang, Gallivan and Absil (2015) relaxed the conditions on the transport (doi:10.1137/140955483).
Setting
Let M be a smooth manifold modelled on a real Hilbert space E, with a Riemannian inner product gx and norm ∥⋅∥x on each tangent space TxM. For f:M→R, Df(x) is its differential, a functional on TxM with dual norm ∥Df(x)∥x.
A retraction is a family of smooth maps Rx:TxM→M with Rx(0)=x and DRx(0)=id. Write fRx=f∘Rx, a function on the vector space TxM, with derivatives DfRx and D2fRx.
Algorithm 1 produces iterates xk+1=Rxk(αkpk). The step αk>0 satisfies the Wolfe conditions with 0<c1<c2<1:
The BFGS direction solves Bk(pk,⋅)=−Df(xk) for a bounded bilinear form Bk on TxkM. With sk=αkpk and yk=DfRxk(sk)−DfRxk(0), the next form is defined on Txk+1M through an invertible linear map Tk:TxkM→Txk+1M:
The result. Proposition 10 is a global convergence guarantee for a quasi-Newton method on manifolds, with no restriction to a neighbourhood of the minimizer and no finite-dimensionality. It applies to Riemannian shape spaces of curves, where the paper's numerical experiments take place. The paper's superlinear-rate theory (Proposition 12, Corollary 13) starts from this linear rate.
Formalizing it. The result is proved on paper but has not been machine-checked. A formal proof also checks the delicate points of the infinite-dimensional argument, in particular the use of traces and Fredholm determinants of trace-class perturbations of the identity. The statement as printed needs a correction: the printed bound f(xk)−f(x∗)≤μk+1(f(x0)−f(x∗)) fails at k=0, and the formal goal bounds f(xk+1), as the appendix's own final display does.
Difficulty
The Euclidean proof idea of bounding the eigenvalues of Bk uniformly does not work for BFGS: those eigenvalues are not uniformly controlled. The Byrd–Nocedal argument replaces them by trace and determinant estimates, which show that a fixed fraction of the iterations have well-conditioned angles. In infinite dimensions the trace and the determinant of Bk do not exist. One must work with AkB^kAk−id, which is trace class, and with the Fredholm determinant, and show that isometric transports leave these quantities invariant. That invariance is exactly where the isometry hypothesis enters. Lemma 9 is also not a finite-dimensional triviality: positive definiteness of Bk+1 does not give coercivity, and a separate compactness-free argument is needed.
Formalization scope
The manifold is a Mathlib ChartedSpace E M, with E a complete real inner-product space, IsManifold 𝓘(ℝ, E) ∞ M, and a RiemannianBundle on TangentSpace 𝓘(ℝ, E). Every norm on a tangent space is the Riemannian one. Df(x) is mfderiv, read as a functional on TxM, and its norm is the operator norm.
Committed conventions and explicit readings:
One retraction familyR for all k. The paper allows a different retraction per step.
Smoothness of Rx is stated for the map out of the model space E, which carries the topology of TxM.
The run equationxk+1=Rxk(αkpk) is an explicit hypothesis: it is what identifies Txk+1M with the tangent space at the new point. The Bk and Tk (as continuous linear equivalences) are data constrained by the update formula.
Regularity and non-termination:αk>0, f differentiable, fRxk of class C2, and Df(xk)=0 for all k. Only runs that never stop are covered.
Symmetry of B0 is assumed in Lemma 9 as well. The lemma's proof uses it, and without it the first update can lose coercivity.
Convexity of Sk is part of "uniformly convex on the sublevel set". Without it, a double-well function whose sublevel set has two strongly convex components is a counterexample.
Reachability of x∗ by every Rxk is assumed, since the appendix uses Rxk−1(x∗).
Dropped assumptions: geodesic completeness, separability, the distance and the Levi-Civita connection are not used and are dropped.
Corrected index: the rate display and the goal bound f(xk+1), because the decrease obtained at a good index i improves xi+1.
A trivializing formalization is ruled out on three fronts. A sorry-free check on M=E=R, with Rx(v)=x+v, f(x)=x2/2 and xk+1=0.4xk, shows that the run hypotheses are satisfiable. Every quotient in a statement has a positive denominator along such a run. The rate μ is quantified after the run and before k.
Infrastructure that a complete development needs, and that is reusable beyond this mission:
calculus of f∘Rx on a tangent space with its Riemannian norm;
Taylor's formula with integral remainder;
trace-class operators and Fredholm determinants on Hilbert spaces, with Lidskii's theorem.
The last item is absent from Mathlib, and contributions toward it are welcome. The paper's other main result, convergence of Fletcher–Reeves conjugate gradients (Proposition 15), is a separate mission. The superlinear-rate results (Lemma 6, Propositions 5, 7, 8, 12, Corollaries 11, 13) and the numerical §4 are out of scope.
Selected references
W. Ring, B. Wirth, Optimization Methods on Riemannian Manifolds and Their Application to Shape Space, SIAM J. Optim. 22(2), 596–627, 2012. https://doi.org/10.1137/11082885X
P.-A. Absil, R. Mahony, R. Sepulchre, Optimization Algorithms on Matrix Manifolds, Princeton University Press, 2008. https://doi.org/10.1515/9781400830244
D. Gabay, Minimizing a differentiable function over a differential manifold, J. Optim. Theory Appl. 37, 177–219, 1982. https://doi.org/10.1007/BF00934767
R. H. Byrd, J. Nocedal, A tool for the analysis of quasi-Newton methods with application to unconstrained minimization, SIAM J. Numer. Anal. 26(3), 727–739, 1989. https://doi.org/10.1137/0726042
W. Huang, K. A. Gallivan, P.-A. Absil, A Broyden class of quasi-Newton methods for Riemannian optimization, SIAM J. Optim. 25(3), 1660–1685, 2015. https://doi.org/10.1137/140955483
Time-Inconsistent Stochastic Linear–Quadratic Control III: Explicit Equilibrium Mean–Variance Strategy with State-Dependent Risk Aversion and a Random Risk PremiumResearch Paper
Motivation
Mean–variance portfolio selection (Markowitz, 1952) trades off the expected terminal wealth of an investor against its variance. In a dynamic setting the problem is time-inconsistent: the variance is not a conditional expectation of a function of terminal wealth, so the dynamic-programming principle fails, and a strategy that is optimal when computed at time 0 is no longer optimal when re-evaluated at a later time. A standard response is to treat the investor at each time t as a separate player and to look for a subgame-perfect equilibrium strategy, which no future self wishes to deviate from locally (Björk–Murgoci, Ekeland–Lazrak, and others).
Hu, Jin and Zhou (arXiv:1111.0818v1; SIAM J. Control Optim. 50(3), 2012) define open-loop equilibria for a general class of time-inconsistent stochastic linear–quadratic (LQ) problems and characterize them through a flow of forward–backward SDEs. Their §5 applies this to mean–variance investment in a complete market with a random risk premium, where the weight on expected wealth depends on current wealth (a state-dependent risk aversion, motivated in Björk–Murgoci–Zhou, 2014). Earlier equilibrium results for mean–variance investment (Basak–Chabakauri, 2010; Björk–Murgoci–Zhou) work with deterministic or Markovian coefficients and within feedback classes.
This mission is the third of a series on the paper. Mission I formalizes the general sufficient condition (Theorem 3.2); Mission II treats deterministic coefficients and coupled Riccati equations (Theorem 4.4). This mission targets the explicit mean–variance equilibrium of Theorem 5.4.
Setting
Fix a horizon T>0 and a probability space carrying a standard d-dimensional Brownian motion W with its filtration (Ft); write Et=E[⋅∣Ft]. The market has a deterministic bounded interest rate r and a progressively measurable, essentially bounded risk premiumθ with values in Rd. A strategy is a progressively measurable u with E∫0T∣us∣2ds<∞ (the class LF2(0,T;Rd)); the wealth X under u solves
dXs=rsXsds+θs′usds+us′dWs,X0=x0.(5.2)
At time t, with current wealth xt, the investor's cost is
This is the case n=1 of the paper's general LQ problem, with A=r, B=θ, C=0, D=I, Q=R=0, G=h=1; the mission states it that way. For t∈[0,T), ε>0 and an Ft-measurable square-integrable v, the spikeust,ε,v=us+v1[t,t+ε)(s) perturbs u on a short window. A strategy u∗ with wealth X∗ is an equilibrium (Definition 2.1) if, for all such t and v,
ε↓0liminfεJ(t,Xt∗;ut,ε,v)−J(t,Xt∗;u∗)≥0a.s.
The equilibrium is built from Γs(1)=μ1e∫sTr, Γs=−μ2e∫sTr, and two backward SDEs: an indefinite stochastic Riccati equation for (M,U),
and a linear BSDE (5.13) for (Γ(2),γ(2)) whose coefficients involve M and U. A process Z gives a BMO martingaleZ⋅W if E[∫τT∣Zs∣2ds∣Fτ]≤C for all stopping times τ≤T.
Formalization targets
Goal: Theorem 5.4
If (M,U) solves (5.8) with M bounded and M≥c>0, and (Γ(2),γ(2)) solves (5.13) with Γ(2) bounded, then
is an equilibrium: the closed-loop wealth exists, and for every closed-loop wealth X∗ the strategy u∗ satisfies Definition 2.1.
Milestones
Proposition 5.1: (5.8) has a unique solution in L∞×L2 with M≥c>0, and U⋅W is BMO.
Proposition 5.2: (5.13) has a unique solution in L∞×L2, and γ(2)⋅W is BMO.
Proposition 5.3: the closed-loop wealth under the feedback exists with continuous paths, Esupt∣Xt∗∣2<∞, and u∗∈L2.
Proof of Theorem 5.4: the processes p(s;t), k(s;t) of (5.5) and (5.7) solve the adjoint equation (5.4), Λ(s;t)=p(s;t)θs+k(s;t) has the closed form displayed on p. 22, and Λ meets condition (3.4).
Significance
Theorem 5.4 gives the equilibrium of a time-inconsistent mean–variance investor in closed form, linear in current wealth, for a random risk premium. With a deterministic premium it reduces to explicit formulas (§5.4), and for μ1=0 it recovers the equilibrium of Basak–Chabakauri and Björk–Murgoci; for μ2=0 it differs from the feedback equilibrium of Björk–Murgoci–Zhou, which shows that open-loop and feedback equilibria are different notions. The random premium is what makes U=0 and the feedback gain unbounded.
The result is proved in the paper; nothing here is formalized elsewhere. The mission produces machine-checked statements of the equilibrium, of solvability of the Riccati-type BSDE (5.8), and of the integrability of a linear SDE with BMO-type coefficients, on the platform's published stochastic-calculus substrate. The definition of BMO martingales and the encoding of open-loop equilibria are reusable beyond this paper.
Difficulty
The verification step that most readers try first, plugging u∗ into the wealth equation and applying standard SDE estimates, fails: the gain α=(Γ(1)θ−U)/M is unbounded, because U is only BMO, so the closed-loop SDE is linear with non-Lipschitz-bounded random coefficients and neither existence of the wealth nor u∗∈L2 follows from standard theory (Proposition 5.3). The BSDE (5.8) has a driver with quadratic growth in U and a singular factor M−1; it is not covered by the standard theory of stochastic Riccati equations and its solution must be bounded away from zero for the feedback to make sense. Uniqueness in (5.8) and solvability of (5.13) rely on BMO-martingale and change-of-measure facts (Kazamaki) that are not in Mathlib. Finally, the equilibrium property is a statement about every t and every perturbation, and the sufficient condition (Theorem 3.3) needs the limit behaviour of conditional expectations Et[Λ(s;t)] as s↓t.
Formalization scope
Everything is built on the published definition Peng1990_SMP_Stochastic (Brownian motion, LF2, Itô integrals, SDEs and BSDEs as relations). The general LQ model, the spike, the conditional cost and Definition 2.1 are in Model; the adjoint equation on [t,T], Λ and condition (3.4) in Adjoint; the market, Γ(1), Γ, BMO, (5.8), (5.13) and (5.14) in Market. Conventions the statements commit to:
Lower limit. Definition 2.1 is stated with liminf in R, along every sequence εk↓0, almost surely for each sequence. The page writes lim; the limit need not exist, and the paper's own argument bounds the lower limit.
Filtration. The natural, uncompleted filtration of W instead of the augmented one; conditional expectations and progressive processes agree up to null sets.
States from time t are solutions on the whole horizon [0,T] for a control equal to u∗ before t.
Versions. Conditions involving conditional expectations at uncountably many times are stated through jointly measurable versions; "a.s., a.e." means ds⊗dP-a.e.; uniqueness of BSDE solutions is up to modification and ds⊗dP-null sets; BMO is in integrated form.
Market primitive. The risk premium θ is the primitive, as in (5.2); every bounded progressive θ comes from some bounded (μ,σ) with σσ′⪰εI.
Existence statements. Peng's SDE solutions already carry u∗∈L2 and suptE∣Xt∣2<∞, so Proposition 5.3 is stated as existence of a closed-loop solution with continuous paths and Esupt∣Xt∗∣2<∞. Theorem 5.4 asserts existence of the closed-loop wealth instead of assuming it.
The goal does not assume the BMO properties of U and γ(2) (they are conclusions of Propositions 5.1–5.2), does not assume θ deterministic or U=0 (that is the special case of §5.4), and keeps Q=R=0, G=h=1; a formalization that assumes any of these, or that admits the junk value M−1=0 on a non-null set, proves a different theorem. Theorem 3.3, the sufficient condition used in the last line of the proof, is the n=1 case of Mission I's goal and is not restated here. Welcome contributions: a BMO and Girsanov library on the Peng substrate, existence for quadratic BSDEs, and a proof of the sufficient condition.
Selected references
Y. Hu, H. Jin, X. Y. Zhou, Time-Inconsistent Stochastic Linear–Quadratic Control, arXiv:1111.0818v1, 2011; SIAM J. Control Optim. 50(3), 2012. https://arxiv.org/abs/1111.0818
N. Kazamaki, Continuous Exponential Martingales and BMO, Lecture Notes in Math. 1579, Springer, 1994. https://doi.org/10.1007/BFb0073585
M. Kobylanski, Backward stochastic differential equations and partial differential equations with quadratic growth, Ann. Probab. 28(2), 2000. https://doi.org/10.1214/aop/1019160253
S. Peng, A general stochastic maximum principle for optimal control problems, SIAM J. Control Optim. 28(4), 1990. https://doi.org/10.1137/0328054
A real number is normal in base b when every block of k base-b digits occurs in its expansion with limiting frequency b−k, exactly as it would in a sequence of independent uniformly random digits. It is normal (absolutely normal) when it is normal in every base b≥2. Whether the classical constants of analysis, above all π, are normal is one of the oldest open questions linking number theory and probability: it asks whether a number defined by geometry has digits that are statistically indistinguishable from random ones.
Timeline.
1909. Borel introduces normality and proves that Lebesgue-almost every real number is normal in every base (Borel 1909). The proof is non-constructive and gives no explicit example.
1933. Champernowne gives the first explicit normal numbers. The best known is 0.123456789101112…, the positive integers written one after another, which is normal in base ten (Champernowne 1933, Theorems I–IV). He conjectures that 0.235711131719…, built from the primes, is also normal.
1946. Copeland and Erdős prove that 0.a1a2a3… is normal in base b for every increasing sequence of positive integers an that contains more than Nθ terms up to N for every θ<1 and all large N. This settles Champernowne's conjecture for the primes (Copeland–Erdős 1946).
1997–2001. The Bailey–Borwein–Plouffe formula computes binary digits of π without the earlier ones (BBP 1997). Bailey and Crandall reduce the base-2 normality of π to a conjecture on a specific discrete dynamical system (Bailey–Crandall 2001). The conjecture remains open.
2002. Becher and Figueira give a computable absolutely normal number (Becher–Figueira 2002).
Large-scale digit computations of π are statistically consistent with normality. No base is known in which π is normal, and it is not even known that any particular digit occurs infinitely often in its decimal expansion.
Setting
A digit sequence is a function s:N→N; s0 is the first digit after the point. A word is a finite list w=(w0,…,wk−1) of naturals. For N∈N, the occurrence countcount(s,w,N) is the number of positions i<N with si+j=wj for every j<k. Overlapping occurrences each count.
The sequence s is normal in base b (IsNormalSeq b s) if, for every word w with all entries <b,
N→∞limNcount(s,w,N)=b−∣w∣.
The n-th base-b digit of a real x after the point is
digitb(x,n)=⌊xbn+1⌋modb.
The real x is normal in base b (IsNormalReal b x) if n↦digitb(x,n) is normal in base b. Two remarks:
The integer part of x plays no role.
For a rational number with two expansions, the floor selects the one not ending in repeated (b−1)'s.
Formalization targets
Goal: π is normal
∀b∈N,b≥2⟹π is normal in base b.
This is the conjecture in its standard form, normality in every base. The base-ten case is the special case b=10.
Milestones
None are listed. No decomposition of this problem into intermediate statements is known that would be a faithful attack path, and the mission does not invent one. Proposals for intermediate targets are welcome in the discussion; see the contributions listed under Formalization scope.
The known theorems of the subject (Champernowne's constructions, the Copeland–Erdős theorem, Borel's theorem) concern numbers built to be normal or almost every number; they are not steps toward π and are kept in the separate mission Explicit normal numbers: Champernowne and Copeland–Erdős.
Significance
A proof that π is normal in base b would give every finite digit pattern a definite limiting frequency in its expansion. It would be the first normality result for a classical constant not built to be normal. Every known normal number is constructed digit by digit (Champernowne, Copeland–Erdős, Sierpiński, Becher–Figueira) or shown to exist by a measure argument (Borel). Even the base-2 case would settle the Bailey–Crandall programme for π.
Formalization status. The goal is open mathematics. The definitions it is stated with are published and are shared with the mission Explicit normal numbers: Champernowne and Copeland–Erdős, where Champernowne's theorems and the Copeland–Erdős theorem have machine-checked proofs.
Difficulty
The constructive results all prove normality from the digit-by-digit description of the number. In particular, the Copeland–Erdős block criterion needs the expansion to be an explicit concatenation of blocks. π has no such description. Its known series (Machin-type formulas, BBP) give digits as values of exponential sums, and no known method controls the joint distribution of long digit blocks of such values.
Borel's theorem does not help: it only says that the exceptional set is null, and gives no criterion for deciding whether a given number lies in it. Neither high-precision digit statistics nor irrationality measures for π imply normality.
Formalization scope
All declarations live in the namespace Normal and use the definition bundle Normal_Core:
count, IsNormalSeq, digit, IsNormalReal;
ofDigits b s=∑nsnb−(n+1);
the concatenation operators flatten, digitsBE, concatDigits;
the Champernowne and Copeland–Erdős constants.
Committed conventions:
Digits are read after the point, with the floor convention above.
Frequencies are limits of real quotients.
Words of every length k≥0 are quantified, with entries <b.
The goal ranges over all natural bases b≥2. The degenerate bases 0 and 1 are excluded by hypothesis, not by convention.
The definitions agree with Borel's, and the mission does not admit a trivialising reading. A real number is not normal merely because it is irrational, and the empty word imposes only the trivial condition.
The bundle also contains a verbatim copy of the integer-arithmetic definition IsNormal from xiangyazi24/agafonov; its equivalence with IsNormalSeq is proved on the platform (Normal.isNormalSeq_iff_isNormal), so results stated in either form transfer.
Welcome contributions:
Borel's theorem, via the strong law of large numbers or a Chernoff bound for digit blocks;
equivalent characterisations of normality, such as Wall's criterion by uniform distribution of bnxmod1 and the reduction from all words to aligned blocks;
conditional reductions, such as the Bailey–Crandall hypothesis implying base-2 normality of π.
Selected references
É. Borel, Les probabilités dénombrables et leurs applications arithmétiques, Rend. Circ. Mat. Palermo 27 (1909), 247–271. https://doi.org/10.1007/BF03019651
D. G. Champernowne, The construction of decimals normal in the scale of ten, J. London Math. Soc. 8 (1933), 254–260. https://doi.org/10.1112/jlms/s1-8.4.254
Some Useful Functions for Functional Limit Theorems 1: Composition Preserves J₁ Convergence When the Outer Path Is Continuous or the Inner Path Is Continuous and Strictly IncreasingResearch Paper
Motivation
Random time changes occur when a process is observed on an operational clock rather than calendar time. In queueing models, for example, an arrival-count path may be evaluated at an evolving service clock. A functional limit theorem for the outer path and another for the clock are useful together only when evaluating one path at the times supplied by the other preserves convergence. Ward Whitt's 1980 paper studies several path operations with this question in mind; composition is its first main operation. The issue is specific to paths with jumps, because a small shift of the clock can move an evaluation across a jump.
Setting
Let T1,T2,T3 be nonempty intervals of real time, with T2⊆T3, and let (S,m) be a complete separable metric space. The càdlàg path spaceD(T,S) consists of paths that are right continuous and have left limits on T. Its subspace C(T,S) contains the continuous paths. The nondecreasing clock spaceD0(T1,T2) consists of càdlàg real-valued paths on T1 that are nondecreasing and take their values in T2. Its subspace C0(T1,T2) contains the continuous, strictly increasing clocks. For x∈D(T3,S) and y∈D0(T1,T2), composition is the path (x∘y)(t)=x(y(t)) on T1.
Convergence uses the Skorohod J1 topology. On a compact interval [a,b], let Λ[a,b] be the increasing homeomorphisms of [a,b] and let e(t)=t. With ρ[a,b] denoting uniform distance, Whitt's metric is
Thus close paths may have nearby jumps at different times, provided an increasing time change aligns them. On a general interval, convergence is checked on compact subintervals whose endpoints are continuity points of the limit or endpoints of the full interval. Whitt gives this definition in §2, then gives C, C0, and D0 in §3. All subsets carry relative topologies and products carry product topologies.
Formalization targets
Composition at a continuous outer path
For xn→x in D(T3,S) and yn→y in D0(T1,T2), the first milestone states
x∈C(T3,S)⟹xn∘yn→x∘y in D(T1,S).
The path-space definition and the two preparatory milestones are a small-oscillation partition for a càdlàg path, cited by Whitt from Billingsley, and Whitt's Lemma 2.2, which relates convergence on a compact interval to convergence on the two pieces made by splitting it at a continuity point.
Composition at a strictly increasing clock
The second case, and the combined goal, also allow the outer limit path to jump. Let ∂TT1 mean the endpoints of T1 that belong to T1. The corrected target is
[x∈C(T3,S)or(y∈C0(T1,T2)andx is continuous at y(t) for every t∈∂TT1)]⟹xn∘yn→x∘y in D(T1,S).
The goal includes both cases for simultaneously varying xn and yn. The endpoint condition is vacuous for an endpoint excluded from T1. It is part of the strictly increasing clock case only; it imposes no extra restriction when the outer limit path is continuous.
Significance
This theorem supplies a precise condition for carrying two path limits through a random time transformation. In particular, the assertion includes convergence of the composed paths as elements of a càdlàg space, not merely convergence of their values at individual times. The distinction matters at jumps: pointwise convergence does not control the placement or ordering of nearby jumps. The result is a deterministic continuity statement that can be paired with probabilistic mapping theorems when the corresponding random paths are available.
Whitt proved the composition theorem in 1980, subject to the endpoint issue described below. The formalization work here is to construct its path-space interface in Lean, state the corrected continuity theorem with every domain condition visible, and eventually replace the open sorry proofs with checked proofs. The interface can also support the paper's later results on reflection, first passage, and time reversal; those results are separate missions. No proof of this mission's goal is claimed yet.
Difficulty
The tempting argument is to use separate continuity of xn→x and yn→y and then substitute yn(t) into the first convergence. That argument loses control of evaluations near a jump of x. A J1 time change may align a jump of xn with the corresponding jump of x, while the clock yn may cross those times differently. Continuity of the outer limit path removes that difficulty in one case; in the other, the clock must be continuous and strictly increasing. The source explicitly shows that composition is not continuous on all of D×D0 (§3, p. 75).
The endpoints impose a further obstruction because increasing homeomorphisms of a closed time interval fix its endpoints. Bauer's Remark on p. 75 observes a failure at the right endpoint. There is a symmetric failure at the left endpoint, so the statement here includes both. This is a correction to the printed theorem, not a new claim that the uncorrected theorem is true.
Formalization scope
Paths are represented as total functions R→S, with only values on the named interval used. The domain assumptions OrdConnected and Nonempty express nonempty real intervals. The outer interval T3 is also required to have nonempty interior: the formal convergence predicate checks only compact intervals [a,b] with a<b, so on a one-point T3 it imposes nothing, and the C×D0 case would fail for constant outer paths with different values. A clock's range condition is explicit, as is nondecreasingness for every prelimit clock. Membership of all paths in the relevant càdlàg spaces is part of the convergence predicates. The output predicate likewise requires every composition and its limit to be càdlàg. This rules out the trivialization in which one merely proves convergence of selected point evaluations or assumes the compositions already have the conclusion's path-space properties.
The compact uniform distance and the infimum over time changes take values in [0,∞]. They use the actual metric on S, not a real supremum with a default value on an unbounded set. A time change is a total function whose restriction to the compact interval is continuous, strictly increasing, and onto. Continuity at a time means continuity relative to the path's interval. The general-interval convergence predicate checks the compact intervals specified by Whitt and requires each sequence member to belong to D. The theorem is written as sequential continuity; Whitt's J1 spaces are metrizable, making that equivalent to topological continuity. The real-valued clock space uses the relative topology inherited from real-valued càdlàg paths.
The endpoint correction is exact in the Lean statement. At the right endpoint, take T1=T2=T3=[0,1], y(t)=t, yn(t)=(1−1/n)t for n≥2, and x=1{1}. Then x∘yn is zero while (x∘y)(1)=1. At the left endpoint, take T1=T2=[0,1], T3=[−1,2], yn=y=e, x=1[0,2], and xn=1[1/n,2]. The outer paths converge in J1 on T3, but the compositions disagree at 0. Both examples show why continuity of x at the image of every included endpoint is required in the D×C0 case.
The development needs the càdlàg definition, J1 metric and convergence predicates, compact restriction lemma, and the finite oscillation partition. Their definitions and lemmas are reusable for other functionals on path spaces. Contributions that prove the milestones and goal under the stated hypotheses are welcome. This mission does not formalize the Borel measurability or probability-measure machinery discussed elsewhere in Whitt's paper; Theorem 3.1 itself is a deterministic continuity claim.
Selected references
Ward Whitt, Some Useful Functions for Functional Limit Theorems, Mathematics of Operations Research 5(1), 67–85, 1980. DOI: 10.1287/moor.5.1.67.
Efficiency of Coordinate Descent Methods on Huge-Scale Optimization Problems 5: RCDM with Adaptive Lipschitz Estimates (RACDM) Has Expected Error at Most 8nR₁²(x₀)/(16 + 3k)Research Paper
Motivation
Random coordinate descent minimizes a smooth convex function f:Rn→R by updating one coordinate at a time, chosen at random. Each iteration needs a single partial derivative instead of the full gradient, which is what makes the method usable on problems whose dimension is in the millions or billions ("huge-scale" problems). Nesterov's paper Efficiency of coordinate descent methods on huge-scale optimization problems (CORE Discussion Paper 2010/2; journal version SIAM J. Optim. 22 (2012) 341–362, doi:10.1137/100802001) gave the first global efficiency estimates for such methods and started a large literature on randomized block and coordinate methods.
The basic method RCDM of the paper takes, along coordinate i, a step of length 1/Li, where Li is a Lipschitz constant of the i-th partial derivative along the i-th coordinate. For simple functions these constants are known; for more complicated ones they are not, and a practical method has to estimate them on the fly. Section 6.1 of the paper analyses a backtracking strategy with restore for this purpose and proves that it keeps the efficiency of RCDM up to a constant factor. This mission formalizes that analysis, Theorem 7 of the paper.
Setting
Write ∇if(x)=∂f/∂xi(x) and ei for the i-th standard basis vector of Rn, n≥1. The function f is convex and differentiable, attains its minimum f∗=f(x∗), and its partial derivatives are coordinate-wise Lipschitz with constants Li>0 ((2.2) with one-dimensional blocks):
∣∇if(x+uei)−∇if(x)∣≤Li∣u∣(x∈Rn,u∈R,i=1,…,n).
The weighted norm and its dual are ∥x∥1=(∑iLixi2)1/2 and ∥g∥1∗=(∑igi2/Li)1/2 ((2.7) with α=1), and
R1(x0)=xmax{x∗∈X∗max∥x−x∗∥1:f(x)≤f(x0)}
measures the size of the initial level set, X∗ being the set of minimizers.
The random adaptive coordinate descent method RACDM(x0) (6.1) keeps estimates L^1,…,L^n, initialised with given lower bounds Li0∈(0,Li]. At iteration k it
draws i=ik uniformly from {1,…,n};
sets xk+1=xk−L^i−1∇if(xk)ei and, as long as ∇if(xk)⋅∇if(xk+1)<0, doubles L^i and recomputes xk+1;
halves L^i.
The loop test uses only the sign of one partial derivative and never a function value. With φk=Ef(xk) (the expectation over i0,…,ik−1) and Nk the number of partial derivatives computed in iterations 0,…,k, Theorem 7 states three facts about this method.
Formalization targets
Goal: Theorem 7, item 2, (6.2)
φk−f∗≤16+3k8nR12(x0),k≥0.
This is the rate of RCDM(0,x0), φk−f∗≤2nR12(x0)/(k+4) ((2.14)), with a larger constant.
Milestones
(6.4) — started from an estimate 0<L^i≤Li, the doubling loop terminates and the accepted estimate satisfies L^i≤2Li.
Theorem 7, item 1 — at the beginning of each iteration L^i≤Li for every i.
One-step decrease (proof of Theorem 7, p. 19) — f(xk)−f(xk+1)≥8Lik3(∇ikf(xk))2.
Expected decrease (proof of Theorem 7, p. 19) — f(xk)−Eikf(xk+1)≥8n3(∥∇f(xk)∥1∗)2.
The result shows that the constants Li in RCDM need not be known: a method that starts from any lower bounds and adjusts them by doubling and halving converges at the same O(nR12(x0)/k) rate, and pays on average about two partial derivatives per iteration plus a logarithmic one-time overhead. This is what makes random coordinate descent applicable to functions whose coordinate smoothness is not available in closed form, and the doubling-with-restore pattern recurs in later adaptive and accelerated coordinate methods (the paper itself indicates the same technique for its accelerated method, (6.5)).
The theorem is proved in the paper; to our knowledge no machine-checked proof exists. The known-constant analogues for scalar coordinates are on Prove2Me in Bubeck's §6.4 development (the one-step and expected decreases are proved there; the rate is open). This mission adds a formal model of the adaptive method itself, including its doubling loop as a first-failure search, and the three statements of Theorem 7 on top of the published coordinate-descent definitions.
Difficulty
The analysis of RCDM rests on the one-step bound f(x)−f(x−Li−1∇if(x)ei)≥(∇if(x))2/(2Li), which follows from the smoothness of f along the coordinate line. For RACDM the step uses an estimate L^i that may be smaller than Li, and then the same argument gives no decrease at all: a step that is too long can increase f. The method never checks function values, so the decrease has to be extracted from the sign test alone, and it holds only because f is convex along the line, not merely smooth. A second point is that the estimates are random and depend on the whole history, so the expected decrease must hold for every state the method can reach; this is what item 1 secures. The counting statement needs the exact number of loop iterations, so the loop has to be modelled as the least number of doublings after which the test fails, not as some number of doublings.
Formalization scope
The formalization works with scalar coordinates (N=n, as the paper does in §6.1) on EuclideanSpace ℝ (Fin n), coordinates indexed 0,…,n−1. It reuses the published definition ConvexOptAlg_CoordDescent_Defs: IsCoordSmooth f g L is (2.2) with an explicit gradient map g=∇f, wnorm L 1 and wnormDual L 1 are ∥⋅∥1 and ∥⋅∥1∗, and rcdExpect L 0 k is the expectation over k uniform draws as a finite weighted sum. The mission's own definition NesterovRCD.Adaptive.RACDM encodes the trial point, the number of doublings (a minimum over N), one iteration, the run along an explicit sequence of draws, and the count Nk.
The following choices are made explicitly.
Step 3 of (6.1) is printed "Set Lik:=21Lik"; it is read as L^ik:=21L^ik, as the paper's proof requires. The true constants Li never change and enter only hypotheses and bounds.
R1(x0) is not computed: the goal takes any R with ∥x−y∗∥1≤R for all x in the level set and all minimizers y∗. "X∗ nonempty" is a hypothesis; "X∗ bounded" follows from the existence of R.
Implicit hypotheses made explicit: n≥1; Li0>0 and Li0≤Li; in the milestones, 0<L^i≤Li on the entry state.
Convexity is assumed in the statements that need it (the decreases and the rate); (6.4) and items 1 and 3 hold without it and are stated without it.
Nk counts dj+1 evaluations of ∇ijf at iteration j with dj doublings, the count the paper's proof uses; counting ∇ijf(xj) as well would give 3(k+1)+∑ilog2(Li/Li0).
A trivializing encoding is ruled out: the loop count is the least d at which the sign test fails (an arbitrary admissible d would change the method and make the count meaningless), the draws are uniform, and the rate is stated in the norm of the true constants Li, not of the estimates. Contributions welcome: proofs of the milestones, a one-dimensional co-coercivity lemma for convex smooth functions of one variable (reusable well beyond this mission), and the recursion argument from the expected decrease to the rate.
Selected references
Yu. Nesterov, Efficiency of coordinate descent methods on huge-scale optimization problems, CORE Discussion Paper 2010/2, Université catholique de Louvain, 2010. Journal version: SIAM J. Optim. 22(2) (2012) 341–362. doi:10.1137/100802001
Yu. Nesterov, Introductory Lectures on Convex Optimization: A Basic Course, Kluwer, 2004 (reference [6] of the paper; inequality (2.1.17)). doi:10.1007/978-1-4419-8853-9
S. Bubeck, Convex Optimization: Algorithms and Complexity, Foundations and Trends in Machine Learning 8(3–4) (2015) 231–357, §6.4. arXiv:1405.4980
Time-Inconsistent Stochastic Linear–Quadratic Control I: A Flow of Forward–Backward SDEs Gives a Sufficient Condition for Open-Loop Equilibrium ControlsResearch Paper
Motivation
Dynamic programming rests on time consistency: a control that is optimal when viewed from time 0 stays optimal when viewed from any later time. Many problems of mathematical finance lack this property. The continuous-time mean–variance portfolio problem (Zhou–Li 2000) contains a variance, that is, a nonlinear function of an expectation, and state-dependent risk aversion (Björk–Murgoci–Zhou) lets the criterion itself depend on the current state. For such problems an optimal control computed today is abandoned tomorrow, and the HJB equation is not available.
One response, going back to the game-theoretic view of non-commitment (Ekeland–Lazrak, arXiv:math/0604264; Björk–Murgoci, SSRN 1694759), is to replace optimality by equilibrium: a control that no "future self" can improve by deviating on an infinitesimally short interval. Those works consider feedback (Markov) controls. Hu, Jin and Zhou (arXiv:1111.0818v1) define equilibrium within open-loop controls for a general stochastic linear–quadratic (LQ) problem with random coefficients, and characterize it by a flow of forward–backward SDEs, in the spirit of the stochastic maximum principle (Peng 1990). This mission formalizes that characterization: §2 and §3 of the paper, up to Theorem 3.2. The other two missions of the series build on it. Mission II treats a scalar state with deterministic coefficients (Theorem 4.4), and Mission III treats mean–variance portfolio selection (Theorem 5.4).
Setting
Let W=(W1,…,Wd) be a standard d-dimensional Brownian motion on (Ω,F,P) with its filtration (Ft), and let T>0. A control is a process u∈LF2(0,T;Rl), that is, progressively measurable with E∫0T∣us∣2ds<∞. Its stateX solves the linear SDE
Here A is a bounded deterministic n×n matrix function. B (l×n), Cj (n×n) and Dj (n×l) are essentially bounded progressive processes, and b,σj∈LF2(0,T;Rn). At time t, with state xt and Et=E[⋅∣Ft], the cost is
Q,R are bounded symmetric processes with Q,R⪰0, and G,h are symmetric with G⪰0. The last two terms make the problem time-inconsistent. Given u∗ with state X∗, the spike variation at t is ust,ε,v=us∗+v1[t,t+ε)(s) for v∈LFt2(Ω;Rl). The control u∗ is an equilibrium (Definition 2.1) if for every t∈[0,T) and every such v, almost surely
ε↓0liminfεJ(t,Xt∗;ut,ε,v)−J(t,Xt∗;u∗)≥0.
For each t, the first adjoint process(p(⋅;t),k(⋅;t)) solves on [t,T] the BSDE (3.1) with driver A′p+∑j(Cj)′kj+QX∗ and terminal value GXT∗−hEtXT∗−μ1Xt∗−μ2. The second adjoint process(P(⋅;t),K(⋅;t)) solves the matrix BSDE (3.2) with terminal value G. With these, define
Theorem 3.2 is the paper's general tool. Its two explicit results are applications of it. With a scalar state and deterministic coefficients, a pair of coupled Riccati-type equations gives a linear feedback equilibrium (Theorem 4.4). In mean–variance portfolio selection with state-dependent risk aversion and a possibly random risk premium, the equilibrium strategy is found through a quadratic BSDE (Theorem 5.4). Each is proved by exhibiting a solution of the flow (3.6) and checking (3.4). The theorem therefore separates the existence question (solving a flow of FBSDEs) from the equilibrium question. The paper notes that the general existence question remains open.
The results are proved in the paper and have no machine-checked proof. The mission produces a precise statement of open-loop equilibrium for a stochastic LQ problem with random coefficients, together with Lean statements of the spike expansion and of the adjoint flows. Mission II and Mission III restate the same model, and their final steps apply this theorem. Formal proofs of the milestones exercise Itô calculus for linear SDEs and BSDEs with bounded coefficients: product rules, conditional L2 estimates, and uniqueness and sign properties of linear BSDEs. This is infrastructure that Mathlib does not yet have.
Difficulty
The obvious argument is a first-order expansion of J in ε. It fails because the spike changes the control by v, which is not small, on a set of small measure. The state's deviation is then of order ε in L2, its square contributes at order ε, and a second-order term H(s;t) appears that a first-order adjoint cannot capture. Two features are absent from the classical maximum principle. The adjoint equations form a whole flow indexed by t, because the terminal value of (3.1) contains EtXT∗ and Xt∗. And every statement is conditional on Ft, so the expansion has to hold almost surely at the level of conditional expectations. That rules out arguments based on unconditional expectations.
Formalization scope
Brownian motion, LF2, Itô integrals and SDE solutions come from the published definition Peng1990_SMP_Stochastic. The formalization commits to the following conventions.
The filtration is the natural, uncompleted filtration of W. This changes no statement.
The state from time t (2.2) is the full-horizon state of the control that equals u∗ before t.
The spike is additive on [t,t+ε).
Definition 2.1 uses the lower limit, in R, along every sequence εk↓0, almost surely for each sequence, for every state of u∗ and of each perturbed control. The page writes "lim". That limit need not exist for merely bounded measurable R, and the proof of Theorem 3.2 only bounds the quotient from below.
Each adjoint BSDE lives on [t,T], not on [0,T]. Equation (3.2) is read entrywise, with symmetric values.
Condition (3.4) is encoded version-robustly. Part (a) is the generalized conditional expectation, via Ft-sets of full union. Part (b) requires a jointly measurable process that is, for almost every s, a version of Et[Λ(s;t)] and that tends to 0 as s↓t.
The O(⋅) estimates carry an explicit constant times ∣v∣2, and suprema are taken over rational times.
"Essentially bounded" and "a.s., a.e." mean ds⊗dP-almost everywhere.
The conclusion of the goal is Definition 2.1 itself. It mentions neither Λ nor the adjoint processes, so the goal cannot be closed by unfolding. A definition of equilibrium in terms of (3.4) or (3.5) would make Theorem 3.2 trivially true and is ruled out. Condition (3.5) of p. 6 is not a hypothesis of any statement. A degenerate, noise-free example checks that the hypotheses of the goal can hold together.
Contributions are welcome as follows. Proofs of the three milestones are reusable for Missions II and III and for any spike-variation argument. So are general lemmas on linear SDEs and BSDEs over Peng's Itô integral: uniqueness, conditional moment bounds, the Itô product rule, and positivity of linear matrix BSDEs.
S. Peng, A general stochastic maximum principle for optimal control problems, SIAM J. Control Optim. 28 (1990), 966–979. https://doi.org/10.1137/0328054
T. Björk, A. Murgoci, A general theory of Markovian time inconsistent stochastic control problems, SSRN 1694759, 2010. https://ssrn.com/abstract=1694759
I. Ekeland, A. Lazrak, Being serious about non-commitment: subgame perfect equilibrium in continuous time, arXiv:math/0604264, 2006. https://arxiv.org/abs/math/0604264
Differential Variational Inequalities 1: Under Any of Five Conditions on (K, F), the Initial-Value DVI with Lipschitz Data Has a Weak Carathéodory SolutionResearch Paper
Motivation
A differential variational inequality (DVI) couples an ordinary differential equation for a state x(t) with a finite-dimensional variational inequality that the algebraic variable u(t) must solve at every instant. The class contains complementarity systems from contact mechanics and electrical circuits with diodes, linear complementarity systems from control theory, differential Nash games, and the first-order optimality conditions of optimal control problems with inequality constraints. J.-S. Pang and D. E. Stewart introduced the unified framework in Differential variational inequalities, Math. Program. 113 (2008) (author's version, hal-01366027), and Section 6 of that paper settles the first question any such model raises: when does the initial-value problem have a solution on a whole prescribed time interval?
Before this work, existence results for these systems were tied to special structure: linear complementarity systems with "minimal" and "passive" data, or a given initial condition compatible with the complementarity kernel. Theorem 6.1 gives existence for every initial state under five separate conditions on the variational inequality, each describing a different class of DVIs.
Setting
Fix T>0 and write Ω=[0,T]×Rn. For a set K⊆Rm and a map Φ:Rm→Rm, the variational inequalityVI(K,Φ) asks for u∈K with (u′−u)TΦ(u)≥0 for all u′∈K; its solution set is SOL(K,Φ). The initial-value DVI studied here is
with K⊆Rm nonempty, closed and convex, f:Ω→Rn, B:Ω→Rn×m, G:Ω→Rm and F:Rm→Rm. Two standing assumptions hold throughout: (A)f, B, G are Lipschitz continuous on Ω; (B)B is bounded on Ω in operator norm.
A pair (x,u) is a weak solution (in the sense of Carathéodory) on [0,T] if x(0)=x0; u is integrable on [0,T] with u(t)∈K almost everywhere; x(t)−x(s)=∫st(f(τ,x(τ))+B(τ,x(τ))u(τ))dτ for 0≤s≤t≤T, with an integrable integrand; and for every continuous u~:[0,T]→K,
∫0T(u~(t)−u(t))T(G(t,x(t))+F(u(t)))dt≥0,(2.4)
with an integrable integrand. The existence proof passes through the differential inclusionx˙∈F(t,x) with the set-valued right-hand side
F(t,x)={f(t,x)+B(t,x)u:u∈SOL(K,G(t,x)+F)}.(6.4)
Further objects: the recession coneK∞; the dual coneC∗={v:uTv≥0∀u∈C}; the VI kernelK(K,D), the solution set of K∞∋v⊥Dv∈(K∞)∗; an R₀ pair(K,D), one with K(K,D)={0}; a psd-plus matrix D, one with uTDu≥0 for all u and uTDu=0⇒Du=0; and the linear growth property
sup{∥u∥:u∈SOL(K,q+F)}≤ρ(1+∥q∥).(6.5)
Formalization targets
Goal: Theorem 6.1
Under (A) and (B), if any one of the following holds, then (6.2) has a weak solution on [0,T] for every x0∈Rn:
(a) F continuous and monotone, and liminfu∈K,∥u∥→∞(u−uref)TF(u)/∥u∥2>0 for some uref∈K (6.6);
(b) F=ET∘Ψ∘E with K∞∩kerE={0} and Ψ continuous and strongly monotone on EK;
(c) 0∈K, F(u)=Du with D positive semidefinite and (K,D) an R₀ pair;
(d) K a polyhedron containing 0, F(u)=Du with D positive semidefinite, and G(Ω)⊆intK(K,D)∗;
(e) K a polyhedron containing the origin or no lines, F=D+Φ with D psd-plus, (K,D) an R₀ pair, and Φ continuous with ∥Φ(u)∥≤LΦ∥u∥ (6.10) and ∥Φ(u)−Φ(u′)∥≤LΦ′∥Du−Du′∥ (6.12) on K, for small enough LΦ, LΦ′.
Milestones
Lemma 6.1 (Deimling): an upper semicontinuous differential inclusion with nonempty closed convex values and linear growth has a weak solution on [0,T].
Lemma 6.2: (6.5) on G(Ω) makes F grow linearly, with constant ρf+ρσB(1+ρG), and upper semicontinuous.
Lemma 6.3 (Filippov): a measurable selection lemma.
Proposition 6.1: a weak solution of the inclusion yields a weak solution of the DVI.
Propositions 6.2–6.5: nonemptiness, convexity and linear growth of the static VI solution sets under (a), (b), (c)–(d), and (e) respectively; Proposition 6.5 carries the explicit bounds ρ(1+∥q∥)/(1−ρLΦ) (6.11) and LV∥q1−q2∥/(1−LVLΦ′) (6.13).
Significance
Theorem 6.1 is the existence result behind the rest of the paper: Sections 7 and 8 prove that time-stepping schemes converge to weak solutions of (6.2), and those results are informative only for problems that have solutions. Condition (d) gives existence for every initial state of linear complementarity systems x˙=p+Ax+Bu, C∋u⊥q+Cx+Du∈C∗ with q+CRn⊆intK(C,D)∗, where earlier results required passivity or a compatible initial state. Propositions 6.2–6.5 are results on static variational inequalities in their own right: the linear growth of solution sets in the data had not been a focus of VI theory.
The result is proved in the paper, modulo two cited theorems (Deimling's existence theorem for convex-valued differential inclusions and Filippov's measurable selection lemma). None of it is formalized. A Lean development would supply set-valued upper semicontinuity, Carathéodory solutions of differential inclusions, and existence and linear growth theory for VIs on closed convex and polyhedral sets: material with uses well beyond this paper.
Difficulty
The obvious route, solving the VI for u as a function of (t,x) and substituting into the ODE, fails: the solution map (t,x)↦SOL(K,G(t,x)+F) is in general set-valued and discontinuous, so the resulting right-hand side is neither single-valued nor continuous, and classical ODE existence does not apply. The detour through the differential inclusion (6.4) requires convex values, which hold when F is monotone but must be proved separately in case (e), where F=D+Φ is not monotone. It also requires linear growth (6.5), which for unbounded K is a genuine statement about the asymptotics of VI solutions and needs a different argument under each of the five conditions: coercivity, a recession-cone condition, the VI kernel, or a fixed-point argument on polyhedra. Finally, Deimling's theorem and Filippov's lemma are substantial results of set-valued analysis that are not in Mathlib.
Formalization scope
Points of Rk are EuclideanSpace ℝ (Fin k); matrices are continuous linear maps, ∥B(t,x)∥ is the operator norm and ET the adjoint. Data on Ω are curried functions on R×Rn of which only the values on [0,T]×Rn matter, and Lipschitz continuity on Ω uses the metric ∣t−t′∣+∥x−x′∥. SOL(K,Φ) is the published definition SolodovSvaiterVI.Alg21.viSol Φ K. Positive semidefinite matrices are not assumed symmetric. "Monotone" in (a) and Proposition 6.2 means monotone on K. The coercivity (6.6) is written in the equivalent form "(u−uref)TF(u)≥c∥u∥2 for u∈K with ∥u∥≥R". Upper semicontinuity is the open-neighbourhood form relative to Ω. In Proposition 6.4 (b) the Lipschitz property is stated on the dual cone K(K,D)∗, where the paper's proof establishes it (the statement prints K(K,D)). Nonemptiness of K, the paper's standing assumption on variational inequalities, is a hypothesis throughout.
The weak-solution definitions carry explicit integrability conditions on the integrands of the integral equation and of (2.4), and (2.4) is required for every continuous u~ with values in K. A definition without those integrability conditions (a Lean integral of a non-integrable function is zero), a variational condition tested only on constant u~, or (A)–(B) replaced by global boundedness of f and G would make the goal a different and weaker statement; none of these is used.
Contributions welcome at every level: proofs of the milestones, a general theory of upper semicontinuous set-valued maps and Carathéodory solutions of differential inclusions, and existence results for variational inequalities via recession cones and degree theory.
The Quantity Flexibility Contract and Supplier-Customer Incentives I: Without Commitment the Manufacturer Underproduces for Every Transfer Price and the Supply Chain Is InefficientResearch Paper
Motivation
A manufacturer must commit to production before a retailer knows how much it will buy. In practice the retailer sends a forecast first, and the manufacturer plans against it. When the forecast binds neither party, the retailer has no reason to report it honestly, and the manufacturer has no reason to plan for the market rather than for its own margin. Purchasing managers have described this to Tsay directly, and Lee, Padmanabhan and Whang (1997) document such "phantom ordering" in several case studies.
A. A. Tsay, The Quantity Flexibility Contract and Supplier-Customer Incentives (Management Science, 1999), models the situation as a two-stage newsvendor game with a demand-information update between production and purchase. Its first result, Proposition 1, is the benchmark the rest of the paper builds on. Even when both parties share the same beliefs about demand, a linear transfer price alone leaves the manufacturer underproducing relative to a central planner, and the supply chain loses expected profit, for every transfer price. That inefficiency motivates the quantity flexibility (QF) contract studied in the remainder of the paper and in the companion mission of this series.
Setting
Costs. The retail price is p and the unit transfer price paid by the retailer to the manufacturer (the EM) is c. The unit production cost is m, the unit salvage value is u (the same for either party), and the unit goodwill loss on unmet demand is s. The paper's standing assumptions (§3.1, p. 1344) are
p>c>m>0,u<m,s≥0.
Three critical fractiles recur:
κR=p+s−up+s−c,κEM=c−uc−m,κS=p+s−up+s−m.
Demand (§3.3). Market demand is X=μ+ε. The signalμ has distribution function Θ, which is differentiable and strictly increasing, and finite variance. The error ε∼N(0,σε2) is independent of μ. F is the distribution function of X, Φ is the standard normal distribution function, and zε=Φ−1(κR).
Timing (§3.2). The EM produces Q knowing only the prior. Then μ is observed and the retailer buys r≤Q. Then X is realized, and both parties salvage their surplus. Given μ, the retailer's expected profit from purchase r is
G(r∣μ)=EX∣μ{pmin[X,r]−cr−s[X−r]++u[r−X]+}.(1)
Without commitment the retailer buys rNC∗(Q,μ)=min[μ+zεσε,Q]. The EM's expected profit is
πEM,NC(Q)=(c−u)EμrNC∗(Q,μ)−(m−u)Q,
and the retailer's is πR,NC(Q)=EμG(rNC∗(Q,μ)∣μ). A central planner producing Q before the signal earns
ΠCC(Q)=EX{pmin[X,Q]−s[X−Q]++u[Q−X]+}−mQ.
Formalization targets
Goal: Proposition 1 (p. 1347)
Let QNC∗ maximize πEM,NC and QCC∗ maximize ΠCC. Then, for every transfer price c admitted by the standing assumptions,
§4, p. 1345. The centralized optimum exists and is unique:
QCC∗=F−1(p+s−up+s−m).
§5.1, (1), p. 1346. The closed form
G(r∣μ)=(p+s−c)r−sμ−(p+s−u)EX∣μ[r−X]+,
and the retailer's optimal purchase under r≤Q is min[μ+zεσε,Q].
3. §5.2, p. 1347. The EM's optimal production exists and is unique:
QNC∗=Θ−1(c−uc−m)+zεσε.
Significance
Proposition 1 shows that sharing demand information does not remove inefficiency. Under common beliefs and with no commitment, no linear transfer price makes the decentralized chain efficient. Adjusting c moves profit between the parties but cannot recover the planner's expected profit. This is the reason the paper studies richer contracts, and the efficiency result for the QF contract (the paper's Proposition 6) is measured against the benchmark QCC∗ defined here.
The paper prints no proofs ("All proofs are omitted due to space limitations", p. 1341). A machine-checked development therefore supplies arguments the published record does not contain. It also exhibits the exact hypotheses the result needs. In particular it covers the degenerate case σε=0, where the signal is perfect. No part of this mission has a prior formal proof. Newsvendor critical-fractile results exist on Prove2Me for single-decision models, but without the production stage and information update used here.
Difficulty
The EM and the planner solve newsvendor problems against different demand laws. The EM faces the retailer's purchase μ+zεσε, while the planner faces X=μ+ε. Their fractiles are κEM and κS. The obvious comparison, κEM<κS, settles the case σε=0 only. For σε>0 the two quantities are inverse distribution functions of different random variables. zε may be negative, and the planner's distribution is a convolution. A comparison of fractiles alone therefore does not order QNC∗ and QCC∗. The strict profit gap also needs more than optimality of QCC∗: it requires comparing the decentralized system profit at QNC∗ with the planner's profit at the same production, and then using uniqueness of the planner's optimum.
The analytic infrastructure is also substantial. It includes differentiating expectations of piecewise-linear functions under a Gaussian law and under a general prior, continuity and strict monotonicity of a convolution's distribution function, and existence of a root of F(Q)=κS.
Formalization scope
All objects live in the namespace TsayQF.NoCommit, in one definitions file Model.
Costs are a structure Data with fields p,c,m,u,s∈R and the standing assumptions (i)–(iii) as fields. "For any c" is quantification over all Data. No sign is imposed on u.
The prior is a probability measure ν on ℝ; Θ is cdf ν. "Differentiable and invertible" is Differentiable ℝ (cdf ν) together with StrictMono (cdf ν), and "mean and variance" is MemLp id 2 ν.
The error variance is v : ℝ≥0, so σε=v and v = 0 is allowed. The law of X is the pushforward of ν.prod (gaussianReal 0 v) under addition, and given μ demand has law gaussianReal μ v.
Inverse distribution functions are not Lean functions here. zε is a real z with hypothesis cdf (gaussianReal 0 1) z = kR D. The milestones state existence of a solution of each fractile equation and characterize the maximizers by it.
Expectations are Bochner integrals. Finite variance of μ makes every integrand integrable, so no expectation silently defaults to zero.
Optimality is IsMaxOn over Set.univ for productions and over Set.Iic Q for the purchase. Productions range over R; the paper's presumption that μ and X are almost certainly nonnegative is not imposed, because no result here needs it.
The goal quantifies over arbitrary maximizers. Milestones 1 and 3 show that maximizers exist, so the goal is not vacuous. A sorry-free sanity file checks the paper's §8 data (p,c,m,u,s)=(15,10,6,3,0) and shows that a normal prior satisfies the hypotheses on Θ.
The goal must not be weakened to non-strict inequalities, and the EM's demand must remain the retailer's purchase min[μ+zεσε,Q], not market demand. Either change trivializes the result or changes it. Reusable pieces are the newsvendor critical-fractile characterization for a general continuous strictly increasing distribution, and monotonicity and continuity of the distribution function of a sum of independent variables with one Gaussian summand. Proofs of the milestones as standalone lemmas are welcome.
Selected references
A. A. Tsay, The Quantity Flexibility Contract and Supplier-Customer Incentives, Management Science 45(10):1339–1358, 1999. https://doi.org/10.1287/mnsc.45.10.1339
A. V. Iyer, M. E. Bergen, Quick Response in Manufacturer-Retailer Channels, Management Science 43(4):559–570, 1997. https://doi.org/10.1287/mnsc.43.4.559
Hardness of Approximating Flow and Job Shop Scheduling Problems 2: Coloring Reduction Gap: Makespan 2L·lb if G Is L-Colorable, Independent Set of Size n/(8L) if Half the Jobs Finish by L·lbResearch Paper
Motivation
In the job shop problem, jobs are sequences of operations, each to be processed on a given machine for a given time, and the goal is a schedule of minimum makespan (the time at which the last job finishes). Two numbers bound the optimum from below: the longest job and the most loaded machine. Their maximum is written lb. The best approximation algorithms for job shops have a performance guarantee polylogarithmic in lb (Shmoys, Stein and Wein 1994; Goldberg, Paterson, Srinivasan and Sweedyk 2001). Whether flow shops and job shops admit a constant-factor approximation was Open Problem 7 of Schuurman and Woeginger (1999).
Mastrolilli and Svensson (J. ACM 58(5), 2011) answered it negatively for the generalized flow shop. Their Theorem 1.2 states that for all sufficiently large constants K it is NP-hard to distinguish generalized flow shop instances with a schedule of makespan 2K⋅lb from instances in which no schedule finishes more than half of the jobs within 81K(1/25)logK⋅lb. The proof is a gap-preserving reduction Γ from graph colouring. This mission formalizes the combinatorial heart of that reduction.
Timeline. Shmoys, Stein and Wein (1994) gave an O((loglb)2/logloglb)-approximation for job shops, improved by a logloglb factor by Goldberg et al. (2001). Williamson et al. (1997) proved that approximating flow shops with unit operations within a ratio better than 5/4 is NP-hard. Feige and Scheideler (2002) gave acyclic job shop instances with optimum Ω(lbloglb/logloglb) and asked whether flow shops admit a much better upper bound than O(lbloglblogloglb). Khot (2001) proved the colouring hardness this reduction starts from. Mastrolilli and Svensson (FOCS 2008; J. ACM 2011) proved Theorem 1.2 and its job shop variants.
Setting
A generalized flow shop (flow shop with jumps) is a job shop with a fixed linear order on the machines in which every job visits its machines in increasing order but may skip machines. Operations may have length 0. A zero-length operation still occupies its machine for an instant, so it cannot be processed strictly inside another operation on the same machine.
Let G=(V,E) be a simple graph with n vertices whose vertices are partitioned into d independent sets I1,…,Id. Vertex v∈If has frequencyf(v)=f. For an integer r write lb=r2d. The instance S(r,d) has r2d groups M1,…,Mr2d of machines, each with one machine mg,v per vertex. The machines are ordered by group first and, within a group, by decreasing frequency. A vertex v of frequency f owns r2(d−f) groups of r2f identical jobs. The job jg,iv has a long-operation of length r2(d−f) on each of the r2f machines ma+1,v,…,ma+r2f,v, where a=(g−1)r2f. It also has a short-operation of length 0 on every machine of every neighbour of v, in every group. A long-operation is good if the next long-operation of the same job starts at most 4r2r2(d−f) time units after it ends. Tg,v is the set of first halves of the good long-operations on mg,v, and L(Tg,v) is the time they cover.
χ(G) is the chromatic number of G and α(G) the size of its largest independent set.
Formalization targets
Goal: the gap of Γ
For every graph G with a proper colouring into d classes and every integer r≥8, with S=S(r,d):
(a)S is a generalized flow shop, every job has length r2d and every machine load r2d;(b)G is K-colourable⟹Cmax∗(S)≤2K⋅r2d;(c)0<L≤r,α(G)<8Ln⟹in every feasible schedule fewer than half of the jobs finish by L⋅r2d.
Milestones
Remark 3.6 (lengths, loads, operation count), Claim 3.8 (an independent set's jobs fit in 2⋅lb), Lemma 3.7 (completeness), Lemma 3.10 (most long-operations are good), Lemma 3.11 (adjacent vertices have disjoint T-intervals), Lemma 3.12 (one group carries lb⋅n/8 of first-half time), and Lemma 3.9 (soundness: an independent set of size n/(8L)).
Significance
The result. Together with Khot's colouring hardness, the gap shows that no polynomial-time algorithm approximates the generalized flow shop within any constant factor unless P = NP, and rules out an O((loglb)1−ϵ)-approximation under a stronger complexity assumption (Theorem 1.3). It also shows that on the no-instances of the reduction every schedule has makespan greater than L⋅lb, far above the trivial lower bound lb. Because soundness bounds the number of jobs finished early, the same reduction also gives hardness for the sum of completion times (footnote 2).
Formalizing it. The paper proves every statement of this mission; none is open. As far as the catalog shows, none has a machine-checked proof. The soundness argument rests on a timing property of zero-length operations: a job of higher frequency must wait for a long-operation of an adjacent lower-frequency job. Such properties are easy to state loosely and easy to get wrong, so a verified proof would be useful. A formal proof would also make explicit the thresholds the paper leaves as "sufficiently large r".
Difficulty
Completeness is constructive and routine once the job and machine indexing is under control. The difficulty is soundness. One might argue directly that jobs of adjacent vertices never overlap in time, but that is false: a schedule may run them in parallel at the cost of delays. The argument controls it only on average. It throws away the jobs that finish late and the long-operations followed by a long delay. It shows that the first halves of the remaining long-operations of adjacent vertices are disjoint in each machine group. Then it finds a moment covered by many such first halves. Each step needs a precise count: of good operations per job, of covered time per group, and of overlap multiplicity at a point. The degenerate conventions (empty colour classes, n=0, the last long-operation of a job) have to be handled throughout.
Formalization scope
The instance is the published JobShopLTAS.Core.Instance (machines and jobs Fin (r^{2d} n), real nonnegative processing times, disjunctive machine constraint under which a zero-length operation cannot sit strictly inside another operation on its machine), with its IsFeasibleSchedule and makespan. The graph has vertex set Fin n and the partition into independent sets is a Mathlib proper colouring G.Coloring (Fin d). Frequencies f(v)=c(v)+1 are 1-based, as are group indices. Within a group the paper leaves machines of equal frequency unordered; they are ordered by vertex index. Every job's operation list is its machine set sorted by the global order. L(Tg,v) is the Lebesgue measure of the union of the intervals.
Explicit readings of the paper's wording:
"sufficiently large r" is r≥8 (from (1−4/r)≥1/2 in the proof of Lemma 3.12 via Lemma 2.4); Lemma 3.11 needs only r≥2, Lemma 3.10 r≥1;
"χ(G)=L" in Lemma 3.7 is L-colourability, and "makespan lb⋅2L" is makespan at most 2Lr2d;
"at least half the jobs finish within lb⋅L" is 2⋅#{j:Cj≤Lr2d}≥r2dn, with Cj the end of the last operation of j, and L is real with 0<L≤r;
the operation count is Remark 3.6's (Δ+1)r2d for a degree bound Δ, not the section introduction's dr2d;
the goal's soundness is the contrapositive of Lemma 3.9; Lemma 3.9 itself is stated positively.
Not formalized: "NP-hard", "for all sufficiently large K", "in time polynomial in n and rd", Khot's Theorem 1.7, the choice d=Δ+1, r=K(1/25)logK, and the randomized Lemma 3.1 behind Theorem 1.3.
A model in which zero-length operations occupy no machine time would make soundness false, and stating soundness only for schedules of an independent set's jobs would make it vacuous. The goal is about every feasible schedule of S(r,d), built from (G,c,r), in the published model, where zero-length operations do conflict.
A complete development needs counting lemmas for the indexing of jobs and machines, sorting facts for the operation lists, and a measure-theoretic averaging argument (a point covered by many intervals). The averaging argument and the good-operation counting are shared with the flow shop gap of Theorem 1.1 and reusable there. Proofs of any milestone, and sorry-free sanity checks on small instances, are welcome.
Selected references
M. Mastrolilli, O. Svensson, Hardness of Approximating Flow and Job Shop Scheduling Problems, J. ACM 58(5), Article 20, 2011. https://doi.org/10.1145/2027216.2027218
S. Khot, Improved inapproximability results for MaxClique, chromatic number and approximate graph coloring, FOCS 2001, 600–609. https://doi.org/10.1109/SFCS.2001.959936
D. B. Shmoys, C. Stein, J. Wein, Improved approximation algorithms for shop scheduling problems, SIAM J. Comput. 23, 617–632, 1994. https://doi.org/10.1137/S009753979222676X
L. A. Goldberg, M. Paterson, A. Srinivasan, E. Sweedyk, Better approximation guarantees for job-shop scheduling, SIAM J. Discrete Math. 14(1), 67–92, 2001. https://doi.org/10.1137/S0895480199326104
Martingale Proofs of Many-Server Heavy-Traffic Limits for Markovian Queues 2: In the QED Regime the Scaled M/M/n/mₙ+M Queue Converges to a Diffusion Reflected at the Upper Barrier κResearch Paper
Motivation
Large service systems such as call centers, hospital wards and cloud server pools have many parallel servers, finite buffers and customers who leave when they wait too long. Their performance is usually analysed through heavy-traffic diffusion limits: the number of customers in the system, centred and rescaled, converges as the system grows to a diffusion process whose law is computable. The quality-and-efficiency-driven (QED) regime of Halfin and Whitt (Oper. Res. 29, 1981) is the scaling in which the number of servers n and the arrival rate grow together so that the probability of delay stays strictly between 0 and 1. Garnett, Mandelbaum and Reiman (M&SOM 4, 2002) proved the QED limit for the Erlang-A model with unlimited waiting room. Whitt (Math. Oper. Res. 30, 2005) added finite waiting rooms of size of order n, which produce a reflecting upper barrier in the limit.
Pang, Talreja and Whitt (Probab. Surveys 4, 2007) give a self-contained martingale proof of these limits. Theorem 1.2 of that paper, the target of this mission, covers the M/M/n/mn+M model with finite waiting room and abandonment. It contains the Erlang-B (loss) model (mn=0) and finite-buffer Erlang-C models (θ=0) as special cases.
Setting
Fix a service rate μ>0, an abandonment rate θ≥0, a constant β∈R and a barrier κ≥0. For n≥1, model n is an M/M/n/mn+M queue: n servers, a waiting room of mn∈{0,1,2,…} places, Poisson arrivals of rate λn, exponential services of rate μ, first-come first-served service, and an exponential patience of rate θ for each waiting customer. An arrival that finds all n+mn places occupied is blocked and lost.
The number in system Qn(t) is constructed from independent rate-1 Poisson processes A, S, R and an independent initial value Qn(0)≤n+mn by
where Un(t)=∫(0,t]1{Qn(s−)=n+mn}dA(λns) counts blocked arrivals. The QED scaling is
nnμ−λn→βμ,nmn→κ,
and the scaled process is Xn(t)=(Qn(t)−n)/n.
The limit is a reflected diffusion: a pair (X,U) of processes with right-continuous paths with left limits, X≤κ, U nondecreasing and nonnegative, a standard Brownian motion B independent of X(0), and
If Xn(0)⇒ν in R, then Xn⇒X in D, where X solves the reflected equation above with X(0)∼ν, and every solution with initial law ν has the same law:
Xn⇒Xin D[0,∞)(n→∞).
The goal fixes no rate of convergence and no stationary quantity; it asserts the process limit and its characterization by (9)–(10).
Milestones
Theorem 7.4: the martingale representation of Xn as Xn(0) plus scaled Poisson martingales Mn,i, a drift term, a Lipschitz feedback term and the scaled blocking process Vn=Un/n, with the predictable quadratic variations of the Mn,i.
(110): the limit noise B1(μt)−B2(μt)−B3(0) of three independent Brownian motions has the law of 2μB.
Theorem 7.3 (i): the deterministic reflected integral equation x=b+y+∫0⋅h(x)ds−u with barrier κ and Lipschitz h has a unique solution, depending continuously on (y,b) for uniform convergence on bounded intervals, and continuous when y is.
Significance
The theorem supplies the diffusion approximation behind square-root staffing rules for systems with finite buffers: it says that buffers of order n are visible in the limit as a barrier at κ, and that the limit for κ=0 (Erlang-B with or without abandonment) is a reflected Ornstein–Uhlenbeck-type process. Stationary blocking and delay probabilities of the limit then approximate those of the large finite system.
The result is proved in the literature (Whitt 2005; Pang, Talreja and Whitt 2007, whose proof of Theorem 1.2 is a sketch built on §7.1). It is not formalized anywhere. A formal proof would supply a checked martingale representation for a birth–death queue with blocking, a checked reflection map with state-dependent drift, and the continuous-mapping step through it. The unlimited-waiting-room case is posed separately on the platform as the Erlang-A limit of Garnett, Mandelbaum and Reiman and is not part of this mission.
Difficulty
The obvious route is the one used for the Erlang-A model: write Xn as a continuous function of the scaled Poisson noise and apply the continuous-mapping theorem. With a finite waiting room this fails as stated, because the blocking process Un is not a function of the noise alone. It depends on the path of Qn through the times the system is full. The proof must instead identify (Xn,Vn) as the image of the noise under a reflection map with a drift inside it, prove that this map is well defined and continuous, and control the martingale terms through random time changes whose limits are deterministic. The barrier in model n is mn/n, not κ, so the continuous-mapping step has to handle a moving barrier as well.
Formalization scope
Paths. Time is real; every path is a function on R of which only the values at t≥0 are used. "In D" is BellWilliams2001.ThresholdPolicy.IsCadlag. Brownian motion is ErlangA.Diffusion.IsStandardBM, indexed by R≥0; martingales are Mathlib Martingales indexed by R≥0.
Model. All systems live on one probability space with their own primitives An,Sn,Rn; Poisson processes are ManyServerQED.Scheduling.IsPoissonProcess. Qn(0) is independent of the primitives and Qn(t)≤n+mn for all t≥0. Blocked arrivals are counted with the left limit Qn(s−), correcting (114) as printed. θ=0 and κ=0 are allowed.
Weak convergence.Xn(0)⇒ν is convergence of expectations of bounded continuous functions. Xn⇒X in D is BellWilliams2001.ThresholdPolicy.CouplingConverges (Skorohod coupling with almost sure uniform convergence on compacts), equivalent to J1 weak convergence for a continuous limit. Uniform distances use supDist on R1.
Limit. The drift is ErlangA.Diffusion.drift; X(0) is independent of B; X and U are adapted to the filtration of X(0) and B; condition (10) is "the Lebesgue–Stieltjes measure of U, extended by 0 to negative times, gives zero mass to {t≥0:X(t)<κ}". Uniqueness is uniqueness in law of X. The limit space lives in Type.
Martingales. "Predictable quadratic variation V" means: V adapted with continuous, nondecreasing, nonnegative paths and M2−V a martingale. The filtration (118) is augmented by the measurable null sets, as the paper states.
Ruled out. Convergence of finite-dimensional distributions, a deterministic or almost surely convergent initial condition, a fixed barrier κ inside the prelimit model, or a solution concept that drops X≤κ or the barrier condition (10) would each make the statement weaker or vacuous; none is used.
Not in scope. The Skorohod J1 continuity in Theorem 7.3 (ii), the Erlang-A Theorem 7.1, and the non-Markovian arrivals of §7.3.
Contributions welcome: Stieltjes-integral and counting-process lemmas for Un, a reflection map with Lipschitz drift on D[0,∞), the Poisson functional central limit theorem, and martingale facts for randomly time-changed Poisson processes. The last three are reusable well beyond this mission.
S. Halfin, W. Whitt, Heavy-traffic limits for queues with many exponential servers, Operations Research 29 (1981) 567–588. https://doi.org/10.1287/opre.29.3.567
O. Garnett, A. Mandelbaum, M. Reiman, Designing a call center with impatient customers, Manufacturing & Service Operations Management 4 (2002) 208–227. https://doi.org/10.1287/msom.4.3.208.7753
Clarke Subgradients of Stratifiable Functions II: The Nonsmooth Kurdyka–Łojasiewicz Inequality for Lower Semicontinuous Functions Definable in an O-minimal StructureResearch Paper
Motivation
The Kurdyka–Łojasiewicz (KL) inequality is the analytic engine behind most global convergence proofs for descent methods on nonconvex problems: proximal point and proximal gradient schemes, alternating minimization, ADMM variants and subgradient flows all reach a critical point with finite trajectory length once the objective satisfies a KL inequality. Its origin is Łojasiewicz's gradient inequality for real-analytic functions ([Łojasiewicz, 1963]); Kurdyka extended it to differentiable functions definable in an o-minimal structure, with a reparametrization ψ of the values, on bounded sets (Kurdyka, Ann. Inst. Fourier 48 (1998)).
Optimization objectives are rarely smooth or finite everywhere: indicator functions of constraint sets, ℓ₁ penalties, rank functions and maxima take the value +∞ or have kinks. Bolte, Daniilidis, Lewis and Shiota (SIAM J. Optim. 18(2) (2007), 556–572) proved that every lower semicontinuous function definable in an o-minimal structure satisfies a KL inequality for Clarke subgradients, globally in space. This mission formalizes that result (Theorem 14) and the chain of statements in §4 of the paper on which its proof rests.
Timeline. Łojasiewicz (1963): gradient inequality for real-analytic functions near a critical point. Kurdyka (1998): the inequality ‖∇(ψ∘f)‖ ≥ 1 for C¹ definable functions on bounded sets. Bolte, Daniilidis and Lewis (SIAM J. Optim. 17(4) (2007)): nonsmooth Łojasiewicz inequality for lower semicontinuous subanalytic functions with the limiting subdifferential. Bolte, Daniilidis, Lewis and Shiota (2007): this paper, for definable functions, Clarke subgradients, and unbounded sets.
Setting
Write ℝⁿ for Euclidean space with norm ‖·‖ and inner product ⟨·,·⟩, and let f : ℝⁿ → ℝ ∪ {+∞} be lower semicontinuous, with domain dom f = {x : f(x) < +∞} and graph Graph f = {(x, f(x)) : x ∈ dom f} ⊆ ℝⁿ⁺¹. Π : ℝⁿ⁺¹ → ℝⁿ forgets the last coordinate.
Subdifferentials. A vector x* is a Fréchet subgradient of f at x ∈ dom f if liminf_{y→x, y≠x} [f(y) − f(x) − ⟨x*, y − x⟩]/‖y − x‖ ≥ 0. The limiting subdifferential ∂f(x) collects the limits of Fréchet subgradients x_k at points x_k → x with f(x_k) → f(x); the singular subdifferential ∂^∞f(x) collects the limits of t_k x_k with t_k ↘ 0⁺. The Clarke subdifferential is
∂∘f(x)=co(∂f(x)+∂∞f(x)) for x∈domf,∂∘f(x)=∅ otherwise,
with co the closed convex hull. It may be empty even on dom f, for example for −‖x‖^{1/2} at 0.
O-minimal structures. An o-minimal structure 𝒪 on (ℝ, +, ·) is a sequence of Boolean algebras 𝒪ₙ of subsets of ℝⁿ (the definable sets) that is stable under A ↦ A × ℝ, A ↦ ℝ × A and the projection Π, contains every algebraic set {p = 0}, and whose one-dimensional sets are exactly the finite unions of intervals and points. Semialgebraic sets, the globally subanalytic sets and the sets definable with the exponential each form such a structure. A function is definable if its graph is.
Stratifications. A C^p stratification of a set X is a locally finite partition of X into C^p submanifolds (strata) such that a stratum meeting the closure of another lies in its frontier. It is Whitney-(a) if tangent spaces T_{x_k}X_i converging to 𝒯 along x_k → x ∈ X_j satisfy T_xX_j ⊆ 𝒯, and a stratification of a set in ℝⁿ⁺¹ is nonvertical if e_{n+1} is tangent to no stratum. For x in a stratum X_i, ∇_R f(x) is the Riemannian gradient of f restricted to X_i.
For every lower semicontinuous definable f there are ρ > 0, a strictly increasing continuous definable ψ : [0, ρ) → ℝ, C¹ on (0, ρ) with ψ(0) = 0, and a continuous definable χ : ℝ₊ → (0, ρ) such that
Neither ρ, ψ nor χ is fixed: the goal asserts only their existence, so it is independent of any choice of exponent.
Milestones
Lemma 8 — a nonvertical definable C^p-Whitney stratification of Graph f whose projection stratifies dom f compatibly with given definable sets.
Corollary 9, (15) and (i) — on a definable stratification of dom f, ProjTxXx∂∘f(x)⊂{∇Rf(x)}, so ∥∇Rf(x)∥≤∥x∗∥.
Proposition 10 — a definable ψ with ψ(t) ≥ φ(t, s) uniformly in s ∈ [a, +∞), for t ∈ (0, χ(s)).
Theorem 11 — the smooth KL inequality ‖∇(ψ∘f)(x)‖ ≥ 1 for 0 < f(x) ≤ χ(‖x‖) on an unbounded definable submanifold.
Corollary 9 (ii)–(iii) (finitely many Clarke critical and asymptotic critical values) and Corollary 12 (the KL inequality around the zero set) are included as further statements.
Significance
The result. Theorem 14 makes the KL property available, with no further verification, for every lower semicontinuous objective built from semialgebraic, globally subanalytic or exp-definable pieces. Global convergence theorems for proximal alternating minimization, proximal gradient methods, PALM and nonconvex ADMM take a KL inequality as hypothesis; definability is how that hypothesis is checked in applications. The inequality is relative to the value 0, holds globally through χ(‖x‖), and controls every Clarke subgradient rather than only the one of least norm. Corollary 9 is a definable, nonsmooth Morse–Sard theorem.
Formalizing it. The theorem has been proved since 2007; it has not been formalized. Lean's Mathlib has no o-minimal geometry: no cell decomposition, monotonicity theorem, definable choice or Whitney stratification. A complete development of this mission would supply the first machine-checked KL inequality for a general class of nonsmooth functions, and the o-minimal infrastructure it needs is reusable for every result in optimization and real algebraic geometry that cites "tame" functions.
Difficulty
The statements are short; the proofs rest on geometry absent from Lean. Lemma 8 is proved in the paper by citation of a stratification theorem for definable maps ([Shiota, Geometry of Subanalytic and Semialgebraic Sets, 1997, II.1.17]). Proposition 10 and Theorem 11 use the monotonicity lemma for definable functions of one variable and definable selection. The natural first idea — apply Kurdyka's inequality on each stratum and take a minimum — fails twice: Kurdyka's inequality is local on bounded sets, and the reparametrizations ψ_i of different strata must be compared near 0, which needs the monotonicity lemma once more. Passing from the strata to Clarke subgradients needs the projection formula of Corollary 9, which in turn depends on nonverticality and the Whitney-(a) condition.
Formalization scope
ℝⁿ is EuclideanSpace ℝ (Fin n); ℝ ∪ {+∞} is EReal, with f never equal to ⊥ as a standing hypothesis; ℝⁿ⁺¹ carries the value in the last coordinate. The Fréchet and limiting subdifferentials are the published NonconvexSplitting.Shared.IsRegularSubgrad and LimitingSubdiff. The Clarke subdifferential uses closedConvexHull. An o-minimal structure is a structure with a family O n of sets of subsets of ℝⁿ satisfying Definition 6 (Boolean algebra as: ∅, complements, binary unions; one-dimensional sets as finite unions of order-connected sets). Definability of ψ, χ and of the strata is part of every conclusion that asserts it. Tangent spaces are spans of Mathlib's tangentConeAt; C^p submanifolds are local graphs; the Riemannian gradient on a set U is a vector g in the tangent space with HasFDerivWithinAt h ⟪g, ·⟫ U x.
Inequality (22) is stated as ψ′(|f(x)|)·‖x*‖ ≥ 1, never as 1/ψ′ ≤ ‖x*‖, so that ψ′ = 0 cannot make it hold through 1/0 = 0. The goal mentions no strata, no auxiliary functions of the proof and no Clarke critical points; a formalization that adds such hypotheses, drops definability of ψ and χ, or restricts to bounded sets is a different theorem.
Welcome contributions: the elementary closure properties of o-minimal structures (definability of sums, compositions, images), the monotonicity theorem for definable functions of one variable, definable choice, cell decomposition and Whitney stratification — all reusable well beyond this mission.
Selected references
J. Bolte, A. Daniilidis, A. Lewis, M. Shiota, Clarke subgradients of stratifiable functions, SIAM J. Optim. 18(2) (2007), 556–572. https://doi.org/10.1137/060670080
K. Kurdyka, On gradients of functions definable in o-minimal structures, Ann. Inst. Fourier 48 (1998), 769–783. https://doi.org/10.5802/aif.1638
J. Bolte, A. Daniilidis, A. Lewis, The Łojasiewicz inequality for nonsmooth subanalytic functions with applications to subgradient dynamical systems, SIAM J. Optim. 17(4) (2007), 1205–1223. https://doi.org/10.1137/050644641
A Re-Solving Heuristic with Bounded Revenue Loss for Network Revenue Management with Customer Choice: Mid-Point PAC Has Constant Revenue Loss Against the DLP, Uniformly in the Problem Size kResearch Paper
Motivation
Network revenue management decides, over a finite selling horizon, which products to offer to arriving customers when the products share limited resources: seats on flight legs, hotel room-nights, rental capacity. The exact dynamic program is intractable for realistic networks, so practice relies on heuristics built from a deterministic linear program (DLP), the fluid relaxation that replaces random demand by its mean. Its value is an upper bound on the revenue of every policy, and the quality of a heuristic is measured by its revenue loss against it.
For the fluid-based heuristics, the loss grows with the size of the system: a static policy derived from one DLP solution loses order k when capacities and demand rates are both scaled by k (Gallego and van Ryzin, 1997; Talluri and van Ryzin, 1998). Re-solving the DLP during the horizon is common practice, but for a long time it was unclear whether re-solving helps asymptotically; Cooper (2002) showed that naive re-solving can even hurt. Jasin and Kumar (Math. Oper. Res. 37(2), 2012, doi:10.1287/moor.1120.0537) proved that a re-solving heuristic with probabilistic allocation control (PAC) has a loss bounded by a constant independent of k, in a model that also covers customer choice through random resource consumption. Later work (Bumpensanti and Wang, 2020, arXiv:1802.06192) removed the nondegeneracy assumption with a different re-solving rule.
Setting
The horizon is [0,1]. Customer types q arrive as independent Poisson processes of rates λq≥0. Each of the noffersj belongs to one type q(j); Pq,j=1 iff q=q(j), and Sq={j:q(j)=q}. Presenting offer j consumes a random vector Aj≥0 of the m resources, i.i.d. across presentations, and earns revenue rj(Aj), with rj(0)=0; Aj=0 models a customer who buys nothing. Resource i starts with capacity Ci, and ξj bounds every Aij. Write Aˉ=E[A] and rˉj=E[rj(Aj)]. The DLP is
DLP[C,λ]:maxrˉ⊤xs.t.Aˉx≤C,Px≤λ,x≥0.
Assumption 2.1 requires DLP[C,λ] to be nondegenerate with a unique optimal solution Y; Assumption 2.2 requires that every optimum z of the LP without capacity constraints violates Aˉz≤C.
PAC re-solves at times 0=t0<t1<⋯<tM<1. At tℓ it solves DLP[C(tℓ),(1−tℓ)λ] with the remaining capacity, obtaining Y(tℓ); until tℓ+1 it picks offer j∈Sq for an arriving type-q customer with probability Yj(tℓ)/((1−tℓ)λq) and presents it only if the remaining capacity is at least ξj on every resource. In the k-th system capacities are kC and rates kλ; VDLPk is the DLP value and RPACk the revenue of PAC. Mid-point PAC re-solves at tl=1−2−l, l=1,…,Mk, with Mk the smallest integer such that 2−Mk≤1/k: about log2k re-solves.
Formalization targets
Goal: Theorem 5.2
There is ρ>0, independent of k, such that mid-point PAC satisfies
VDLPk−E[RPACk]≤ρfor all k≥1.
The goal fixes no constant: it asserts only that the loss is bounded uniformly in k.
Milestones
Observations B.1 and B.2: the fractional part Jy of Y is nonempty, and the augmented matrix W=[AˉB,y;PB2,y] is square and invertible.
App. B.2: the perturbed point YΔ=Y−HΔB is the unique optimum of DLP[C−Δ,λ] under explicit feasibility conditions.
Lemma C.4: the window deviation of the consumption has a sub-Gaussian exponential moment, E[erΔ~i]≤ekφ(t−s)r2 for ∣rξmax∣≤1.
Theorem 5.3, the general bound for any schedule:
VDLPk−E[RPACk]≤ρ+ρ^k∫01min{1,ρ′F(k,t)}dt.
App. C.6: for mid-point re-solving, G(k,t)≤4(1−t) before the last re-solve.
Further consequences: Theorem 5.1 (periodic PAC, loss ≤ρ+ρ^kh) and Corollary 5.1 (any schedule, loss ≤ρ+ρ^k).
Significance
The result shows that O(logk) re-solves suffice for a loss that does not grow with the size of the system, against an upper bound that is valid for every policy; so PAC is within a constant of the optimal policy, and the DLP bound, the optimal value and PAC are asymptotically equivalent to order O(1). Theorem 5.3 makes the trade-off between re-solving frequency and loss explicit for any schedule, and Corollary 5.1 guarantees that re-solving in this form never worsens the static O(k) bound.
The result is proved on paper. No part of it is formalized: the mission produces a machine-checked model of a Poisson network with random consumption and a re-solving policy, a statement of LP perturbation theory for nondegenerate programs, and compound-Poisson moment bounds, each reusable for other re-solving and fluid-approximation results in revenue management.
Difficulty
The obvious argument compares PAC with its fluid path and bounds the deviation of the remaining capacity by a martingale estimate over the whole horizon. That gives only O(k): deviations late in the horizon cannot be corrected. A constant bound needs re-solving to correct earlier deviations, which in turn needs the re-solved DLP solution to depend linearly and stably on the capacity deviation (the perturbation analysis of App. B) and a hitting-time estimate for when that linear regime fails. The capacity check and the coupling between the re-solved solutions and the random consumption make the process non-Markovian in the obvious state variables.
Formalization scope
Types are Fin NT, offers Fin n, resources Fin m. The model is a structure holding q(j), λ, C, the consumption laws Dj (measures on Rm), ξ and the revenue functions. Standing readings (IsValid): λ≥0 and C≥0; each Dj is a probability measure with 0≤Aij≤ξj almost surely (the page has ξj≥Aij on p. 317 and Aij<ξj on p. 327; the weaker one is used); revenue functions are measurable, vanish at 0, and are nonnegative and bounded by a common constant (implicit on the page). rˉj=E[rj(Aj)] is a reading fixed by App. A.1.
E[RPACk] is a backward recursion over the windows between re-solves. Each window holds a Poisson(kΛℓ) number of arrivals with i.i.d. types (superposition and marking), and the expected value is computed arrival by arrival with the capacity check on every resource. PAC is quantified over every DLP selector that returns an optimal solution and is measurable in the capacity, since the page leaves ties open after time 0. All constants are chosen after the instance and before k, the selector, the schedule, v and h. Nondegeneracy follows Bertsimas–Tsitsiklis: every basic feasible solution has exactly n active constraints.
Disclosed deviations from the page:
Theorem 5.3 adds integrability of v in t (stated in Lemma C.1) and writes v≤1/ξmax as vξmax≤1.
The C.6 bound G(k,t)≤4(1−t) is stated for t<tMk; the page's "for all t∈[0,1]" is false after the last re-solve.
Theorem 5.1's constants are chosen before h, which is what (6) requires.
The goal is stated as printed, although the printed proof uses v=1/ξmax, admissible only when ξmax≥1. Measuring every resource in a common smaller unit multiplies A, C and ξ by the same factor and changes neither VDLPk nor E[RPACk], so this assumption costs no generality.
A formalization in which PAC does not check capacity, or stops checking after a hitting time, earns exactly VDLP and would make the goal trivial; the model here applies the check at every arrival. A constant chosen after k would also be trivial, since the loss is at most k∑qλq times the revenue bound.
The source is the published Math. Oper. Res. version; printed page = PDF page + 311. Sample-path lemmas (B.2–B.4, C.1–C.3) are not stated. Contributions are welcome on the LP perturbation lemma, the compound-Poisson moment bound and the measurability of the PAC recursion, each of which stands alone.
Selected references
S. Jasin, S. Kumar, A Re-Solving Heuristic with Bounded Revenue Loss for Network Revenue Management with Customer Choice, Mathematics of Operations Research 37(2):313–345, 2012. https://doi.org/10.1287/moor.1120.0537
G. Gallego, G. van Ryzin, A Multiproduct Dynamic Pricing Problem and Its Applications to Network Yield Management, Operations Research 45(1):24–41, 1997. https://doi.org/10.1287/opre.45.1.24
K. Talluri, G. van Ryzin, An Analysis of Bid-Price Controls for Network Revenue Management, Management Science 44(11):1577–1593, 1998. https://doi.org/10.1287/mnsc.44.11.1577
P. Bumpensanti, H. Wang, A Re-Solving Heuristic with Uniformly Bounded Loss for Network Revenue Management, Management Science 66(7), 2020. https://arxiv.org/abs/1802.06192
D. Bertsimas, J. N. Tsitsiklis, Introduction to Linear Optimization, Athena Scientific, 1997.
Clarke Subgradients of Stratifiable Functions I: Every Clarke Subgradient of a Lower Semicontinuous Function with a Nonvertical Whitney-Stratified Graph Dominates the Stratum GradientResearch Paper
Motivation
First-order methods for nonsmooth, nonconvex optimization (proximal algorithms, alternating minimization, subgradient-type descent) are analysed through generalized derivatives. Convergence and complexity arguments need a lower bound on the size of those derivatives away from critical points. For the Clarke subdifferential of a general lower semicontinuous function no such bound is available: Clarke subgradients can be small, or even zero, at points where the function decreases steeply along a smooth piece of its domain.
Bolte, Daniilidis, Lewis and Shiota (SIAM J. Optim. 18(2), 2007) showed that the obstruction disappears for functions whose graph admits a Whitney stratification, a partition into smooth manifolds that fit together regularly. Semialgebraic functions, and more generally functions definable in an o-minimal structure, have such stratifications. For these functions every Clarke subgradient is at least as long as the gradient of the function along the stratum through the point. This projection formula is the step from the geometry of the graph to the nonsmooth Kurdyka–Łojasiewicz inequality of the same paper, which underlies the convergence theory of many splitting methods (Attouch–Bolte–Svaiter 2013; Bolte–Sabach–Teboulle 2014).
This mission covers §2–§3 of the paper: the definitions, the projection formula (Proposition 4) and its Corollary 5 (i). The Kurdyka–Łojasiewicz part (§4) is a separate mission of the same series.
Setting
Let f:Rn→R∪{+∞} be lower semicontinuous, with domain domf={x:f(x)<+∞} and graph Graphf={(x,f(x)):x∈domf}⊂Rn+1.
A Fréchet subgradient of f at x∈domf is a vector x∗ with liminfy→x,y=x[f(y)−f(x)−⟨x∗,y−x⟩]/∥y−x∥≥0; they form ∂^f(x).
The limiting subdifferential∂f(x) consists of limits x∗=limxk∗ with xk∗∈∂^f(xk), xk→x and f(xk)→f(x).
The singular limiting subdifferential∂∞f(x) consists of limits limtkyk∗ with yk∗∈∂^f(yk), yk→x, f(yk)→f(x) and tk↘0+.
The Clarke subdifferential is ∂∘f(x)=co{∂f(x)+∂∞f(x)} for x∈domf (closed convex hull) and ∅ otherwise.
A Cp stratification(Xi)i∈I of a nonempty set X is a locally finite partition of X into Cp submanifolds (the strata) such that Xi∩Xj=∅ implies Xj⊂Xi∖Xi for i=j. It has the Whitney-(a) property if, whenever xk∈Xi converge to x∈Xj (i=j) and the tangent spaces TxkXi converge to a subspace T, then TxXj⊂T; subspaces converge in the gap D(V,W)=max{supv∈V,∥v∥=1d(v,W),supw∈W,∥w∥=1d(w,V)}. A Whitney stratification is a C1 stratification with this property.
A stratification S=(Si)i∈I of Graphf is nonvertical if en+1=(0,…,0,1)∈/TuSi for every i and u∈Si (condition (H)). Let Π:Rn+1→Rn drop the last coordinate. For x∈domf let Sx be the stratum containing (x,f(x)) and TxXx=Π(T(x,f(x))Sx). Nonverticality makes the tangent space of Sx the graph of a linear form over TxXx; the vector representing it is the stratum gradient∇Rf(x)∈TxXx, characterized by (∇Rf(x),−1)⊥T(x,f(x))Sx.
Formalization targets
Goal: Corollary 5 (i), p. 563
For lower semicontinuous f whose graph admits a nonvertical Whitney stratification, and every x∈domf,
(12): ProjTxXx∂f(x)⊂{∇Rf(x)} and ProjTxXx∂∞f(x)⊂{0}.
Remark 2 (ii): 0∈∂∞f(x) for every x∈domf.
Further items state that the stratum gradient exists and is unique under (H), the equality ProjTxXx∂∘f(x)={∇Rf(x)} when ∂∘f(x)=∅ (Remark 4), the chain ∂^f⊂∂f⊂∂∘f of (7), nonverticality for locally Lipschitz functions (Remark 3), and the nonsmooth Morse–Sard theorem of Corollary 5 (ii).
Significance
The inequality (14) says that Clarke critical points of a stratifiable function are critical points of its restriction to a stratum, and that the Clarke subdifferential is never shorter than the smooth gradient along the stratum. Two consequences are drawn in the paper. With countably many strata and the classical Morse–Sard theorem it gives a nonsmooth Morse–Sard theorem: the set of Clarke critical values has measure zero (Corollary 5 (ii)). Combined with the o-minimal Łojasiewicz inequality for the restrictions f∣Xi it gives the nonsmooth Kurdyka–Łojasiewicz inequality for definable lower semicontinuous functions (§4), the hypothesis behind global convergence results for proximal and splitting algorithms on semialgebraic problems.
All results of this mission are proved in the paper. None has a machine-checked proof that we know of: Mathlib has the tangent cone, Fréchet differentiability and orthogonal projections, but no stratifications, no singular or Clarke subdifferential of an extended-valued function, and no projection formula. The work is to formalize the paper's proof, which reduces the projection formula to the behaviour of Fréchet normals under limits of tangent spaces.
Difficulty
The first step, (11), is local and smooth: along a C1 curve in the stratum the function is differentiable, and a Fréchet subgradient must agree with the derivative in tangent directions. The difficulty is the passage to limits in (12). A limiting subgradient at x is a limit of Fréchet subgradients at points xk which may lie in a different, higher-dimensional stratum Si; nothing in the smooth argument relates TxkXi to TxXx. The relation is supplied exactly by the Whitney-(a) property, together with the compactness of the Grassmannian and the local finiteness of the stratification. Without Whitney-(a) the inclusions fail, so a proof that never uses it is wrong. The singular part requires the same argument for rescaled subgradients tkyk∗, whose normals (tkyk∗,−tk) become horizontal in the limit.
Formalization scope
Rn is EuclideanSpace ℝ (Fin n), Rn+1 is EuclideanSpace ℝ (Fin (n+1)) with the function value as the last coordinate, and R∪{+∞} is EReal with f never −∞. The Fréchet and limiting subdifferentials are the published NonconvexSplitting.Shared.IsRegularSubgrad and LimitingSubdiff; the tangent space TuM (span of the tangent cone) and Cp submanifolds (coordinate slices of some dimension) are the published ProjLikeRetr.Retractor definitions. The closed convex hull in (6) is closedConvexHull, not convexHull. Strata may be empty; local finiteness is required at points of the stratified set; a gap supremum over an empty unit sphere is 0. The stratification hypothesis is taken of class C1, the weakest case of the paper's "Cp-Whitney".
The stratum gradient is defined intrinsically: g∈Π(TuS) with (g,−1)⊥TuS. It is not defined as a derivative of f along the whole projected set Π(Si). That set can fail to be a submanifold for a discontinuous lower semicontinuous f, and every statement would then hold vacuously at such points. A companion item proves existence and uniqueness of the stratum gradient under (H), so the goal is not vacuous. The goal quantifies over all elements of ∂∘f(x); this set may be empty (Remark 4), which is the page's restriction to x∈dom∂∘f, and no real-valued distance to ∂∘f(x) is used.
A complete development needs the tangent space of a C1 submanifold as the image of the chart derivative, convergence of subspaces and compactness of the Grassmannian of Rn+1, Fréchet normals to epigraphs, and the density of dom∂^f in domf for lower semicontinuous f. These pieces are reusable beyond this mission; the subspace gap and Whitney stratifications are prerequisites of the §4 mission. Contributions of any of the listed lemmas are welcome, as are proofs of the companion items.
Selected references
J. Bolte, A. Daniilidis, A. Lewis, M. Shiota, Clarke subgradients of stratifiable functions, SIAM J. Optim. 18(2):556–572, 2007. https://doi.org/10.1137/060670080
H. Attouch, J. Bolte, B. F. Svaiter, Convergence of descent methods for semi-algebraic and tame problems, Math. Program. 137:91–129, 2013. https://doi.org/10.1007/s10107-011-0484-9
J. Bolte, S. Sabach, M. Teboulle, Proximal alternating linearized minimization for nonconvex and nonsmooth problems, Math. Program. 146:459–494, 2014. https://doi.org/10.1007/s10107-013-0701-9
The Strong Second-Order Sufficient Condition and Constraint Nondegeneracy in Nonlinear Semidefinite Programming: At a Local Minimizer They Are Equivalent to Strong Regularity of the KKT PointResearch Paper
Motivation
Nonlinear semidefinite programming asks to minimize a smooth function subject to smooth equality constraints and a constraint that a smooth matrix-valued function be positive semidefinite. It covers robust control design, structural optimization, and nonconvex matrix problems such as low-rank approximation and nearest-correlation-matrix problems. Algorithms for it (sequential quadratic programming, augmented Lagrangian and semismooth Newton methods) converge fast locally only when the Karush–Kuhn–Tucker (KKT) point they approach is stable under perturbation, and the question is which checkable conditions guarantee that stability.
For classical nonlinear programming the answer has been known since the 1980s: at a local minimizer, Robinson's strong second order sufficient condition together with linear independence of the active gradients is equivalent to strong regularity of the KKT point (Robinson 1980; Jongen et al. 1987; Kojima 1980). D. Sun extended this equivalence to nonlinear semidefinite programs, where the constraint cone is not polyhedral and second-order analysis carries an extra curvature term.
Timeline.
1980: S. M. Robinson introduces strong regularity of generalized equations and shows that for nonlinear programs the strong second order sufficient condition plus linear independence of active gradients implies it (Math. Oper. Res. 5).
1997–2000: Shapiro, and Bonnans and Shapiro, develop second-order optimality conditions for cone-constrained problems, with the "sigma term" built from second order tangent sets and C²-cone reducibility (Bonnans–Shapiro 2000).
2002: Sun and Sun prove that the projector onto the positive semidefinite cone is strongly semismooth and compute its directional derivative.
2005–2006: D. Sun proves the equivalence theorem formalized here (preprint of May 15, 2005; journal version Math. Oper. Res. 31(4), 761–776).
Setting
X is a finite-dimensional real inner-product space, ℜm is Euclidean space, and Sp is the space of real symmetric p×p matrices with the Frobenius inner product⟨A,B⟩=Tr(ATB). S+p is the cone of positive semidefinite matrices. The problem is
(NLSDP)minf(x)s.t.h(x)=0,g(x)∈S+p,
with f:X→ℜ, h:X→ℜm, g:X→Sp twice continuously differentiable. Write G=(h,g) and K={0}×S+p. The Lagrangian is L(x,ζ,Γ)=f(x)+⟨ζ,h(x)⟩+⟨Γ,g(x)⟩, and the multiplier setM(x) consists of the (ζ,Γ) with JxL(x,ζ,Γ)=0, h(x)=0 and Γ in the normal cone NS+p(g(x)) (so Γ⪯0 and ⟨Γ,g(x)⟩=0). A triple (xˉ,ζˉ,Γˉ) with (ζˉ,Γˉ)∈M(xˉ) is a KKT point.
For a closed set D, TD(y)={d:∃tk↓0,dist(y+tkd,D)=o(tk)} is the tangent cone and lin(T) its lineality space. Robinson's constraint qualification at xˉ is JxG(xˉ)X+TK(G(xˉ))=ℜm×Sp; constraint nondegeneracy replaces TK by lin(TK). The critical cone is C(xˉ)={d:JxG(xˉ)d∈TK(G(xˉ)),Jxf(xˉ)d≤0}.
For B∈Sp with Moore–Penrose pseudo-inverse B†, set ΥB(Γ,A)=2⟨Γ,AB†A⟩. Let ΠS+p be the metric projector, A=g(xˉ)+Γ, and C(A;S+p)=TS+p(A+)∩(A+−A)⊥ with A+=ΠS+p(A). Then app(ζ,Γ)={d:Jxh(xˉ)d=0,Jxg(xˉ)d∈affC(A;S+p)} and C(xˉ)=⋂(ζ,Γ)∈M(xˉ)app(ζ,Γ). The strong second order sufficient condition (SSOSC) at xˉ is
The KKT map is F(x,ζ,Γ)=(∇xL(x,ζ,Γ),−h(x),−g(x)+ΠS+p(g(x)+Γ)) on Z=X×ℜm×Sp; its zeros are the KKT points. The KKT system is also the generalized equation0∈φ(z)+ND(z) with φ=(∇xL,−h,−g) and D=X×ℜm×S−p. A solution zˉ is strongly regular if, for all small δ, the linearized equation δ∈φ(zˉ)+Jφ(zˉ)(z−zˉ)+ND(z) has a unique solution near zˉ that depends Lipschitz-continuously on δ. Clarke's generalized Jacobian ∂F is the convex hull of the B-subdifferential∂BF, the set of limits of Jacobians at nearby differentiability points. Φ(δ)=F′(zˉ;δ) is the directional derivative. The uniform second order growth condition and strong stability quantify over all C2-smooth parameterizations (f(x,u),G(x,u)) of the problem.
Formalization targets
Goal: Theorem 21
At a local minimizer xˉ satisfying Robinson's CQ, with (ζˉ,Γˉ)∈M(xˉ), the following are equivalent:
(a) SSOSC at xˉ and constraint nondegeneracy;(b) every V∈∂F(xˉ,ζˉ,Γˉ) is nonsingular;(c) (xˉ,ζˉ,Γˉ) is strongly regular;(d) uniform second order growth and nondegeneracy;(e) strong stability and nondegeneracy;(f) F is a locally Lipschitz homeomorphism near (xˉ,ζˉ,Γˉ);(h) Φ is a globally Lipschitz homeomorphism;(j) every V∈∂Φ(0) is nonsingular.
Milestones
The matrix analysis of ΠS+p: Lemma 1 (a B-subdifferential chain rule), Lemma 2, Propositions 3 and 4 (the block structure of ∂BΠS+p and ∂ΠS+p), and Proposition 7 (the inequality ⟨ΔB,ΔΓ⟩≥−ΥB(Γ,ΔB)). Second-order theory: Proposition 8 (the strict CQ gives a unique multiplier and affC(xˉ)=app), Theorem 10 (the classical second-order conditions with the sigma term) and Lemma 11 (Υ equals the sigma term on C(xˉ)). The equivalences: Remark 15 (strong regularity iff a natural map is a Lipschitz homeomorphism), Proposition 16 ((a) ⇒ (b) ⇒ (c) at any KKT point), Lemma 18 (uniform growth ⇒ SSOSC) and Lemma 20 (∂BΦ(0)=∂BF(zˉ)).
Significance
The theorem identifies the SSOSC, a condition that can be checked from the problem data, with the stability notions that local algorithms need. Strong regularity is the hypothesis under which Newton-type methods for the KKT system converge locally and solutions vary Lipschitz-continuously with the data. Nonsingularity of ∂F gives quadratic convergence of semismooth Newton methods. Uniform growth and strong stability are what sensitivity analysis uses. Without the theorem, each of these properties has to be verified separately for semidefinite programs. The theorem also shows that the classical nonlinear programming equivalence survives on a non-polyhedral cone if the curvature term Υ is added.
The result is proved in the literature but has no machine-checked proof. Formalizing it requires the B-subdifferential and Clarke Jacobian of the PSD projector, second order tangent sets of S+p, and the Robinson–Kummer characterization of strong regularity. None of these exists in Mathlib. Items (g) and (i), which use the topological degree, are not formalized.
Difficulty
The obvious route is to copy the nonlinear programming proof: write strong regularity as nonsingularity of a reduced Jacobian on the active constraints. This fails because S+p is not polyhedral. The KKT map is only semismooth, and its generalized Jacobian at a non-strictly complementary point is a whole family of operators, parametrized by ∂ΠS+∣β∣(0). Nonsingularity has to be shown for every member of that family. The curvature of the cone appears only through Υ, which links the second-order condition to the Jacobian family. The converse directions combine several external theorems (Bonnans–Shapiro's stability theory, Clarke's inverse function theorem, Kummer's characterization), each needing nonsmooth infrastructure.
Formalization scope
All objects are defined in SunNLSDP.Equiv.Setting. Sp is the subspace of symmetric vectors in EuclideanSpace ℝ (n × n) for a finite index type n, so its inner product is exactly the Frobenius product. Y and Z are WithLp 2 products, carrying the sum of the inner products. B† is computed by the continuous functional calculus. The metric projector returns its argument when no minimiser exists; it is applied only to nonempty closed convex sets. Clarke's Jacobian, ∂B, the one-sided directional derivative, the normal cone and the lineality space are the published definitions NonsmoothNewton.Shared.clarkeJac, NonsmoothNewton.Local.dirDeriv and RobinsonSR.Reduction.Setting.
Conventions committed to:
The brace systems (41), (42), (49) are read as one coupled system: every (a,B) equals (Jxh(xˉ)d,Jxg(xˉ)d+T) for a single d. Read as two independent equations they would be strictly weaker.
"sup>0" is stated as "some multiplier gives a positive value". The non-strict supremum of Theorem 10 (44) and the support function are taken in the extended reals.
Local optimality is local minimality of f on the feasible set together with feasibility of xˉ.
"Nonsingular" means bijective.
Parameter spaces in Definitions 17 and 19 range over Banach spaces in the universe of X.
Lemma 2 and Remark 15 add nonemptiness of D.
Items (g) and (i) of Theorem 21 are omitted, because Brouwer degree is unavailable; no surrogate for the index is substituted. A formalization that reads the CQs or nondegeneracy as two decoupled equations, or states SSOSC only on C(xˉ) instead of C(xˉ), proves a different theorem and is ruled out.
Reusable infrastructure: the PSD projector and its generalized Jacobians, second order tangent sets, the Moore–Penrose pseudo-inverse of symmetric matrices, and the characterization of strong regularity by Lipschitz homeomorphisms. Proofs of individual milestones are welcome, as are lemmas on ΠS+p and on strong regularity of generalized equations.
Selected references
D. Sun, The strong second order sufficient condition and constraint nondegeneracy in nonlinear semidefinite programming and their implications, preprint dated May 15, 2005; Mathematics of Operations Research 31(4), 761–776, 2006. https://doi.org/10.1287/moor.1060.0195
S. M. Robinson, Strongly regular generalized equations, Mathematics of Operations Research 5(1), 43–62, 1980. https://doi.org/10.1287/moor.5.1.43
B. Kummer, Lipschitzian inverse functions, directional derivatives, and applications in C^{1,1} optimization, Journal of Optimization Theory and Applications 70, 559–580, 1991. https://doi.org/10.1007/BF00941302
On Augmented Lagrangian Methods with General Lower-Level Constraints III: Penalty Parameters Stay Bounded for Equality-Constrained ProblemsResearch Paper
Why the penalty parameter matters
Augmented Lagrangian methods solve a constrained problem by minimizing a sequence of penalized subproblems while updating estimates of the Lagrange multipliers. Each subproblem carries a penalty parameterρk. When ρk grows without bound the subproblems become ill-conditioned and hard to solve, and the method behaves like a plain external penalty method. Avoiding that growth is one of the main reasons for using multiplier updates at all, so conditions under which ρk stays bounded matter both in theory and in practice (Bertsekas 1982; Conn, Gould, Toint 1991).
Andreani, Birgin, Martínez and Schuverdt (SIAM J. Optim. 18 (2007); HAL hal-01295437) propose an augmented Lagrangian method, Algorithm 3.1, in which only some of the constraints are penalized. Their §5 shows that, under classical local hypotheses at the limit point and a subproblem tolerance tied to the current infeasibility, the penalty parameters remain bounded. This mission formalizes that result for equality-constrained problems (Theorem 5.4), together with the general case (Theorem 5.5) as a companion statement.
Setting
Let f:Rn→R, h1:Rn→Rm1, g1:Rn→Rp1, h2:Rn→Rm2, g2:Rn→Rp2 be continuously differentiable. Problem (2.1) is
Minimize f(x) subject to h1(x)=0,g1(x)≤0,h2(x)=0,g2(x)≤0.
The upper-level constraints h1,g1 are penalized by the PHR augmented Lagrangian
while the lower-level constraints h2,g2 stay in the subproblems.
Algorithm 3.1 fixes τ∈[0,1), γ>1, ρ1>0, a box [λˉmin,λˉmax], a bound μˉmax≥0 and tolerances εk→0. At outer iteration k≥1 it finds xk and lower-level multipliers vk,uk such that xk is an εk-approximate KKT point of minimizing L(⋅,λˉk,μˉk,ρk) over the lower-level set, in the sense of (3.1)–(3.4). It then forms the first-order multiplier estimates
and safeguarded estimatesλˉk+1,μˉk+1, which in §5 are the projections of λk+1,μk+1 on their boxes. Finally it updates the penalty parameter: with [σk]i=max{[g1(xk)]i,−[μˉk]i/ρk},
In §5.1 there are no inequality constraints (p1=p2=0): problem (5.1), with Lagrangian L0(x,λ,v)=f(x)+⟨h1(x),λ⟩+⟨h2(x),v⟩. Assumptions 1–6 at the limit x∗ of {xk} are: convergence, feasibility, linear independence of all constraint gradients, C2 near x∗, the second-order sufficient condition with multipliers λ∗,v∗, and λ∗ in the interior of the safeguard box.
Formalization targets
Goal: Theorem 5.4
Under Assumptions 1–6, τ>0, and εk≤ηk∥h1(xk)∥∞ for a sequence ηk→0,
ksupρk<∞.
Milestones, in attack order
Proposition 5.1: λk→λ∗, vk→v∗, and λˉk=λk for k large.
Lemma 5.2: there is ρˉ>0 such that for all π∈[0,1/ρˉ]
with αk=∇L(xk,λˉk,ρk)+∇h2(xk)vk and βk=h2(xk).
4. (5.10): if ρk→∞, then ∥h1(xk)∥∞≤C∥λk−λ∗∥∞/ρk for k large.
5. Contraction: if ρk→∞, then ∥h1(xk)∥∞≤(C/ρk)∥h1(xk−1)∥∞ for k large.
Companion statements
Theorem 5.5, the general problem (2.1) under Assumptions 7–13 (LICQ, C2, a second-order condition on the tangent subspace of all active constraints, multipliers inside the safeguard boxes, strict complementarity for the active upper-level inequalities), with εk≤ηkmax{∥h1(xk)∥∞,∥σk∥∞}; and two steps of its proof, (5.13) and (5.14).
Significance
Theorem 5.4 tells a user of the method when it does not degenerate: if the safeguard box contains the true multipliers and the subproblems are solved to a precision proportional to the current infeasibility, then the penalty parameter is eventually constant. The Remark after Theorem 5.5 draws the practical conclusion that the box should be large enough to contain the true multipliers. The result underlies the analysis of the ALGENCAN solver built on Algorithm 3.1.
The results are proved on paper. To our knowledge none of them, nor the PHR augmented Lagrangian method itself, has a machine-checked formalization. A formal proof would also pin down two gaps in the printed statements, recorded under Formalization scope: the case τ=0 and the early iterations in Lemma 5.3. The local analysis (a uniformly nonsingular KKT matrix and implicit-function error bounds for multiplier estimates) is reusable for other augmented Lagrangian and SQP methods.
Difficulty
Without the second-order structure there is no reason for ρk to stay bounded: the update test compares consecutive infeasibilities, and nothing in the global theory forces them to decrease geometrically. The local argument has to show that ∥h1(xk)∥∞ contracts by a factor of order 1/ρk, which requires error bounds for both xk and λk+1 that hold uniformly as 1/ρk varies in an interval containing 0. The uniformity in the perturbation parameter π=1/ρk, around the singular-looking limit π=0, is the central difficulty. Applying the implicit function theorem at each fixed ρ does not give it.
Formalization scope
Rn is EuclideanSpace ℝ (Fin n). Constraint maps are families of real functions indexed by Fin m, and problem (5.1) is (2.1) with p1=p2=0. The norm in (3.1), on x and on αk is Euclidean. Every ∥⋅∥∞, and the norms in (3.4), on λ and on βk, are the sup norm. The paper's norm is arbitrary and the constants absorb the change. A run of Algorithm 3.1 is a predicate on sequences: x 0 is x0, the outer iterations are k≥1, and the three tolerances of Step 2 are kept separate. The gradient in (3.1) is the true gradient of the defined augmented Lagrangian. "Continuous first derivatives" is C1 on Rn; "continuous second derivatives near x∗" is ContDiffAt ℝ 2. Hessians are derivatives of gradients. Every statement that uses a Hessian assumes C2 at x∗, so it cannot be a junk value. Assumption 5 is pinned to Fletcher's equality-constrained second-order sufficient condition. Linear independence is that of a family indexed by a sum type, so equal gradients count as dependent.
Added hypotheses, each stated in the item's Formalization Note:
τ>0 in Theorems 5.4 and 5.5. With τ=0 the theorem is false.
Lemma 5.3 holds for k≥k1 instead of every k. It is false at early iterations.
In Proposition 5.1, λ∗,v∗ are Lagrange multipliers at x∗.
In Theorem 5.5, the multipliers are KKT multipliers of (2.1), and strict complementarity holds for the active lower-level inequalities. Without it the theorem fails when τγ<1.
Statements that would trivialize the goal are excluded. These include a run predicate that no sequence satisfies, merging the three tolerances into εk, collapsing gradient families into sets, a junk Hessian, and assuming ρk→∞ or ρk≥ρˉ in the goal. The last two appear only as milestone hypotheses.
A complete development needs the PHR gradient formula, uniform invertibility of a continuous family of matrices on a compact interval, a quantitative inverse function estimate for C1 maps, and the convergence of multiplier estimates under LICQ. Proofs of any milestone, and reusable lemmas for these pieces, are welcome.
A. R. Conn, N. I. M. Gould, Ph. L. Toint, A globally convergent augmented Lagrangian algorithm for optimization with general constraints and simple bounds, SIAM J. Numer. Anal. 28(2), 1991, 545–572. https://doi.org/10.1137/0728030
Hardness of Approximating Flow and Job Shop Scheduling Problems 1: Every Schedule of the Flow Shop Instance F(r,d) Has Makespan at Least min(r, d/4)·lbResearch Paper
Motivation
In shop scheduling, jobs consist of chains of operations, each to be processed on a prescribed machine, and the goal is to minimize the makespan, the time at which the last operation finishes. Almost every approximation algorithm for job shops, acyclic job shops and flow shops is analysed against one quantity: the trivial lower boundlb=max(C,D), where the congestionC is the largest total processing time requested on one machine and the dilationD is the largest total processing time of one job. Any schedule has makespan at least lb.
How weak can this bound be? Leighton, Maggs and Rao (1994) showed that for acyclic job shops with unit-length operations the optimum is O(lb). For operations of arbitrary length, Feige and Scheideler (2002) proved an upper bound of O(lb⋅loglb⋅logloglb) for acyclic job shops, and gave acyclic job shop instances whose optimum is Ω(lb⋅loglb/logloglb). Flow shops, in which every job visits every machine in one common order, are much more structured, and no flow shop instance with optimum ω(lb) was known. Feige and Scheideler asked whether flow shops admit a significantly better upper bound. Mastrolilli and Svensson (J. ACM 2011, Theorem 1.1) answered this negatively by constructing flow shops whose optimal makespan is a factor Ω(loglb/logloglb) above lb.
2002 — Feige, Scheideler: upper bound O(lbloglblogloglb) for acyclic job shops, a nearly matching lower-bound family for acyclic job shops, and the open question for flow shops.
2011 — Mastrolilli, Svensson: flow shops with optimum Ω(lbloglb/logloglb).
Setting
A job shop instance has machines and jobs; job j is a sequence of operations O1j,…,Oμjj, operation Oij needs pij≥0 time units without interruption on machine mij. A feasible schedule assigns a start time s≥0 to every operation so that each operation starts after the previous operation of its job has completed, and no two operations on one machine overlap. A zero-length operation therefore still occupies an instant on its machine: it cannot be performed strictly inside another operation there. The makespan Cmax(s) is the largest completion time.
The instance F(r,d), for natural numbers r,d:
Machines.r2d groups M1,…,Mr2d; group Mg has machines mg,1,…,mg,d, one per frequency. The machines are ordered m1,d,…,m1,1,m2,d,…,m2,1,…: by group, and inside a group by decreasing frequency.
Jobs. For each frequency f=1,…,d there are r2(d−f) job groups Jgf, each of r2f identical jobs. Such a job runs for r2(d−f) time units on each of the machines ma+1,f,…,ma+r2f,f, a=(g−1)r2f, and for 0 time units on every other machine. Every job visits every machine in the common order, so F(r,d) is a flow shop.
Operations of positive length are long-operations, the others short-operations. For a schedule, the i-th long-operation of a job j of frequency f is good if the delay dj(i) from its end to the start of the next long-operation of j is at most 4r2r2(d−f); the last long-operation of a job is never good. Tg,f is the set of first halves [s,s+p/2) of the good long-operations on machine mg,f, and L(Tg,f) the total time they cover.
Formalization targets
Goal: Theorem 1.1, explicit form
For all natural numbers r≥8 and d: every job of F(r,d) has length r2d, every machine has load r2d (so lb=r2d), and every feasible schedule s satisfies
Cmax(s)≥r2d⋅min(r,4d).
With r=d this gives the paper's statement, an optimal makespan of Ω(lb⋅loglb/logloglb).
Milestones
§2.2.1, p. 20:10: every job length and machine load equals r2d.
Lemma 2.2: if Cmax(s)<r⋅lb, every job has at least a (1−4/r) fraction of good long-operations.
Lemma 2.3: for 1≤k<ℓ≤d, the intervals of Tg,k and Tg,ℓ are pairwise disjoint.
Lemma 2.4: if Cmax(s)<r⋅lb, some group g has ∑f=1dL(Tg,f)≥4lb⋅d.
Significance
The theorem shows that the lower bound lb, against which all known flow shop algorithms are analysed, can be off by a factor growing with lb. Any flow shop algorithm with guarantee o(loglb/logloglb) relative to the optimum must therefore use a stronger lower bound than max(C,D). The same frequency construction is the gap gadget behind the paper's inapproximability results for generalized flow shops and job shops (Theorems 1.2 and 1.3).
The result has been proved since 2011; as far as is known it has no machine-checked proof. The mission produces a formal model of the instance F(r,d), a formal proof of the explicit bound for every r≥8, d, and reusable statements about delays and first-half intervals in the published job shop model JobShopLTAS.Core.Instance.
Difficulty
The bound must hold for every feasible schedule, with no structural restriction such as a permutation or non-delay schedule. The obvious approach, comparing each machine's load with the makespan, only gives Cmax≥lb, since every machine carries exactly lb. The gain comes from interaction between machines of different frequencies in one group: a high-frequency job running in parallel with a low-frequency long-operation is held back by its zero-length operation on the low-frequency machine. Turning this into a quantitative bound requires controlling, for every job at once, how long it waits between consecutive long-operations, and that waiting is only bounded when the makespan is already small. Encoding the index arithmetic of F(r,d) (groups, frequencies, copies, positions of the long-operations) and the zero-length operations faithfully is a substantial part of the work.
Formalization scope
Model. The published definition JobShopLTAS.Core.Instance: machines Fin m, jobs Fin n, real processing times and start times, IsFeasibleSchedule Finset.univ s (nonnegative starts, chain precedence, disjunctive machine constraint s o + p o ≤ s o' ∨ s o' + p o' ≤ s o) and makespan Finset.univ s. Under that constraint a zero-length operation cannot sit strictly inside another operation on its machine, which the paper's argument needs.
Encoding.F(r,d) has r2dd machines and r2dd jobs. Machine position p is mg,i with p=(g−1)d+(d−i), so position order is the paper's machine order. Job q is jg,af with q=(f−1)r2d+(g−1)r2f+(a−1). Every job has one operation per machine, the i-th on position i; frequencies, groups and copies are 1-based.
Good operations. The next long-operation of a job is the next operation of positive length in its chain; a last long-operation is never good. L(T) is the Lebesgue measure of the union of the intervals of T.
Explicit constants replacing asymptotics. The paper's Ω(lb⋅loglb/logloglb) is replaced by the bound r2dmin(r,d/4) that §2.2.2 proves; the specialization r=d and the asymptotic estimate d=Θ(loglb/logloglb) are not formalized. "Sufficiently large r" becomes r≥8 (Lemma 2.4 and the goal: 1−4/r≥1/2) and r≥3 (Lemma 2.3: r2/2−1>r2/4); Lemma 2.2 holds for every r≥1. The standing assumption Cmax<r⋅lb of §2.2.2 is an explicit hypothesis of Lemmas 2.2 and 2.4. "Optimal makespan" is stated as a bound on every feasible schedule.
Ruled out. The goal quantifies over all feasible schedules of F(r,d) as constructed; assuming the good-fraction or disjointness properties, restricting to permutation schedules, or a model in which zero-length operations occupy no machine time would trivialize or falsify it.
Not in scope. The job shop warm-up of §2.1 (Lemma 2.1) and the reductions of §3–§4.
Welcome contributions: proofs of the counting facts about the encoding, of the milestones, and general lemmas about feasible schedules in JobShopLTAS.Core.Instance (completion time of a job bounds its delays; disjoint intervals in [0,Cmax] have total length at most Cmax).
Selected references
M. Mastrolilli, O. Svensson, Hardness of Approximating Flow and Job Shop Scheduling Problems, J. ACM 58(5), Article 20, 2011. https://doi.org/10.1145/2027216.2027218
F. T. Leighton, B. M. Maggs, S. B. Rao, Packet Routing and Job-Shop Scheduling in O(Congestion + Dilation) Steps, Combinatorica 14(2), 167–186, 1994. https://doi.org/10.1007/BF01215349
P. Schuurman, G. J. Woeginger, Polynomial Time Approximation Algorithms for Machine Scheduling: Ten Open Problems, J. Scheduling 2(5), 203–213, 1999. https://doi.org/10.1002/(SICI)1099-1425(199909/10)2:5<203::AID-JOS26>3.0.CO;2-5
Primal and Dual Linear Decision Rules in Stochastic and Robust Optimization 3: In Multistage Programs, the Primal and Dual Linear Decision Rule Problems Equal the LPs (4.2) and (4.6)Research Paper
Motivation
A linear multistage stochastic program chooses decisions over T stages while a random vector is revealed one piece at a time; each decision may depend only on what has been observed so far. Such programs model production planning, capacity expansion, hydro scheduling and portfolio problems. Computing their optimal value exactly is intractable in general: Shapiro and Nemirovski argue that even medium-accuracy solutions are out of reach when the number of stages grows (Shapiro–Nemirovski 2005), and already the one-stage problem is #P-hard (Dyer–Stougie 2006, Theorem 3.2, as cited by the paper).
Linear decision rules restrict every decision to be an affine function of the observations. Introduced for robust optimization by Ben-Tal, Goryashko, Guslitzer and Nemirovski (2004) and carried into stochastic programming by Shapiro and Nemirovski and by Chen, Sim, Sun and Zhang (2008), they turn the problem into a finite one whose optimal value is an upper bound. Kuhn, Wiesemann and Georghiou (Optimization Online 2009/02/2218; Math. Program. 130, 2011) apply the same restriction to the dual problem, which yields a lower bound. They show that, for polyhedral supports, both bounds are values of explicit linear programs. This mission formalizes the multistage version of that statement, Theorem 3 of the preprint.
Setting
Stages are t∈T={1,…,T}. The uncertainty is ξ=(ξ1,…,ξT)∈Rk with ξt∈Rkt and k=∑tkt; by convention k1=1 and ξ1=1. The history at stage t is ξt=(ξ1,…,ξt)∈Rkt, kt=∑s≤tks, and the truncation operatorPt=[I0]∈Rkt×k maps ξ to ξt. The law P of ξ has support Ξ={ξ:Wξ≥h}, a nonempty bounded polyhedron spanning Rk, whose first two constraints encode ξ1=1. Et denotes conditional expectation given ξt, and M=E(ξξ⊤) is the second-order moment matrix.
A stage-t decision is a square-integrable Borel function xt of ξt (written xt∈Lkt,nt2). The program MSP minimizes
with deterministic matrices Ats, ct(ξt)=CtPtξ and bt(ξt)=BtPtξ. The linear conditional mean assumption requires Et(ξ)=MtPtξ almost surely for some Mt∈Rk×kt; it holds, for example, for stagewise independent data.
The primal approximationMSPu sets xt(ξt)=XtPtξ and slacks st(ξt)=StPtξ. The dual approximationMSPl keeps general rules xt,st but imposes the slack equations only in the weak form E([∑sAtsxs+st−bt][Ptξ]⊤)=0. The linear programs (4.2) and (4.6) are written in the matrices Xt, multipliers Λt and slack matrices St, with Nt=MPt⊤(PtMPt⊤)−1.
Formalization targets
Goal: Theorem 3 (p. 22)
Under the standing assumptions, the linear conditional mean assumption, and strict feasibility of MSP,
val(MSPu)=val(4.2)and, if k≥2 or W^=0,val(MSPl)=val(4.6),
as extended-real optimal values. Both equalities are part of the goal.
Milestones
Lemma 2 (p. 20): for every xt∈Lkt,nt2 there is a unique Xt with XtPtM=E(xt(ξt)ξ⊤), and likewise for slacks.
Lemma 3 (p. 21): a moment condition StPtM=E(s(⋅)ξ⊤) with s≥0 can be met by a non-anticipative slack st(ξt) iff it can be met by a slack depending on the full ξ.
§4, (4.7) (p. 21): through (4.3), the equality constraints of MSPl are equivalent to ∑sAtsXsPsNtPt+StPt=BtPt.
Significance
The theorem makes both linear-decision-rule bounds on a multistage stochastic program computable by linear programming, with size polynomial in k, l, ∑tmt and ∑tnt and hence typically linear in the number of stages. The gap between the two values measures the suboptimality of the primal linear rule. These results underlie later work on piecewise-linear and lifted decision rules and on multistage robust and distributionally robust optimization.
The preprint omits the proof of Theorem 3 ("it widely parallels the argumentation in Section 2"), so a formal proof has to supply the multistage details: the conditional-expectation bookkeeping, the truncation operators and the transfer of the one-stage cone description to non-anticipative slacks. No part of this paper has been machine-checked before; the companion mission of this series formalizes the one-stage Theorem 1.
Difficulty
The obvious route repeats the one-stage argument stage by stage, and it breaks at the slack constraints of MSPl. A slack st must be a function of ξt alone, while the one-stage cone characterization of moment vectors E(s(ξ)ξ) concerns functions of the full ξ; Lemma 3 bridges them only through the linear conditional mean assumption and conditional expectations. A second difficulty is the closure gap between that cone and its polyhedral outer description: the equality of val(MSPl) and val(4.6) relies on strict feasibility, and a proof that ignores it is wrong. On the primal side, the passage from almost sure constraints to identities of matrices needs both that every point of Ξ is charged by P and that Ξ spans Rk.
Formalization scope
Vectors are functions Fin d → ℝ; stage t is the Fin T index t−1 and coordinate 1 is index 0. The history dimension is kbar kk t, the truncation is the restriction to the first kt coordinates, and Pt is also given as a 0/1 matrix. Et is Mathlib's condExp with respect to the σ-algebra generated by Pt. "Ξ is the support of P" means: Ξ closed, P(Ξc)=0, and every ball around a point of Ξ has positive mass. Decision rules are Borel functions of the history whose composition with Pt is in L2(P). Optimal values are infima in EReal (+∞ if infeasible, −∞ if unbounded), and "equivalent" means equal optimal values. The matrices Mt are data, with the conditional-mean identity as a hypothesis.
Three conventions are fixed where the page is silent or misprinted. Strict feasibility of MSP, not defined in §4, is the analogue of (2.9) for the standard form (4.1): slacks at least ε>0 almost surely. The equality constraint of MSPl is printed with st−bt inside ∑s; the formalization follows (4.7), where the sum covers only Atsxs. The sign condition in (4.5c) is printed as s~t(ξt)≥0 for a function of ξ, and is read as s~t(ξ)≥0. The theorem's last sentence (polynomial size, efficient solvability) is informal and not formalized. One hypothesis is added: the goal's second equality assumes k≥2 or that some row of W^ (the rows of W below (2.1b)) is nonzero (the first equality is stated without it). For k=1 the support is the single point {1}, and if W has no nonzero row beyond (2.1b) the cone of Proposition 3 is all of R; the printed second equality then fails (a strictly feasible one-stage instance has val(MSPl)=0 while (4.6) is unbounded below). The added hypothesis excludes exactly this case.
Expectations are Bochner integrals, which vanish on non-integrable functions; under the standing assumptions ξ is bounded almost surely, so all integrands involving square-integrable rules are integrable and no constraint is satisfied vacuously. Matrix.inv returns 0 on singular matrices, but PtMPt⊤ is positive definite under the standing assumptions. The linear conditional mean hypothesis cannot be dropped from Lemmas 2 and 3: without it Xt need not exist.
A complete development needs the support and moment facts of §2 (M≻0, almost sure constraints extend to Ξ), Farkas-type duality for the polyhedron Ξ, the tower property of conditional expectation, and the cone results of Propositions 3 and 4 of the preprint. These are reusable across the series. Proofs of the milestones, or of these supporting facts as separate lemmas, are welcome.
A. Ben-Tal, A. Goryashko, E. Guslitzer, A. Nemirovski, Adjustable robust solutions of uncertain linear programs, Math. Program. 99:351–376, 2004. https://doi.org/10.1007/s10107-003-0454-y
A. Shapiro, A. Nemirovski, On complexity of stochastic programming problems, in Continuous Optimization, Springer, 2005. https://doi.org/10.1007/0-387-26771-9_4
X. Chen, M. Sim, P. Sun, J. Zhang, A linear decision-based approximation approach to stochastic programming, Oper. Res. 56(2):344–357, 2008. https://doi.org/10.1287/opre.1070.0441
Primal and Dual Linear Decision Rules in Stochastic and Robust Optimization 1: With Fixed Recourse, the Primal and Dual Linear Decision Rule Problems Equal the LPs (2.3) and (2.8)Research Paper
Motivation
Linear stochastic programs with recourse model decisions that are taken after an uncertain parameter ξ has been observed: the decision is a decision rulex(ξ), a function of the data. Computing the optimal value exactly is intractable in general. Dyer and Stougie showed that already two-stage linear stochastic programs are #P-hard (Math. Program. 2006), and the same holds for the one-stage problem SP below even when P is uniform on a cube.
A widely used remedy restricts decision rules to be linear in ξ. Ben-Tal, Goryashko, Guslitzer and Nemirovski introduced this restriction in robust optimization (Math. Program. 2004); Shapiro and Nemirovski (2005) and Chen, Sim, Sun and Zhang (Oper. Res. 2008) carried it into stochastic programming. The restriction yields an upper bound, but on its own it says nothing about how much optimality is lost. Kuhn, Wiesemann and Georghiou (Optimization Online 2009/02/2218; published in Math. Program. 2011) also apply the linear restriction to the dual multipliers. This gives a lower bound, so the gap between the two computable bounds estimates the approximation error. This mission formalizes the paper's model result for the case of fixed recourse and polyhedral support (§2, Theorem 1).
Setting
Uncertainty is a probability measure P on (Rk,B(Rk)). The supportΞ of P is the smallest closed set of probability one. A decision rule is an element of Lk,n2, the Borel measurable, square-integrable functions Rk→Rn. Inequalities between vectors and matrices are componentwise.
The data are a fixed recourse matrixA∈Rm×n, matrices C∈Rn×k and B∈Rm×k giving the costs c(ξ)=Cξ and right-hand sides b(ξ)=Bξ, and W∈Rl×k, h∈Rl. The stochastic program is
SP:x∈Lk,n2minE(c(ξ)⊤x(ξ))s.t.Ax(ξ)≤b(ξ)P-a.s.
The standing assumptions of §2 are:
the support is the nonempty bounded polyhedron Ξ={ξ:Wξ≥h} (2.1a);
(2.1b) holds: the first two rows of W are e1⊤ and −e1⊤, the remaining rows form W, and h=(1,−1,0,…,0), so that ξ1=1 on Ξ;
Ξ spans Rk.
The second-order moment matrix is M=E(ξξ⊤). SP is strictly feasible (2.9) if some xˉ∈Lk,n2, sˉ∈Lk,m2 and ε>0 satisfy Axˉ(ξ)+sˉ(ξ)=b(ξ) and sˉ(ξ)≥εe almost surely.
The two approximations are as follows.
Primal linear decision rules, SPu: minimize Tr(MC⊤X) over X∈Rn×k, S∈Rm×k with AXξ+Sξ=Bξ and Sξ≥0 almost surely.
Dual linear decision rules, SPl: minimize E(c(ξ)⊤x(ξ)) over x∈Lk,n2, s∈Lk,m2 with E([Ax(ξ)+s(ξ)−b(ξ)]ξ⊤)=0 and s≥0 almost surely.
Formalization targets
Goal: Theorem 1 (p. 10)
Under the standing assumptions, W=0 (see Formalization scope) and strict feasibility,
§2.2 (p. 5). The almost-sure constraints of SPu hold on all of Ξ, and AXξ+Sξ=Bξ a.s. is equivalent to AX+S=B.
Proposition 1 (p. 5). If Ξ is nonempty, then z⊤ξ≥0 on Ξ if and only if z=W⊤λ for some λ≥0 with h⊤λ≥0.
Proposition 2 (p. 7).M is positive definite and invertible.
§2.4 (p. 7).valSPl equals the optimal value of the moment problem (2.6).
Proposition 3 (p. 7). If W=0, then ∅=intK⊆KP⊆K, for the polyhedral cone K={z:(W−he1⊤)z≥0} and the moment cone KP={E(s(ξ)ξ):s∈Lk,12,s≥0}.
Proposition 4 (p. 9). Under strict feasibility and W=0, (2.6) and (2.8) have the same optimal value.
Significance
Because SPu≥SP≥SPl, Theorem 1 brackets the value of an intractable stochastic program between two explicit linear programs. The sizes of these programs are polynomial in k,l,m,n. They depend on P only through its support and its second-order moment matrix. The difference val(2.3)−val(2.8) is therefore a computable certificate of how much the linear-decision-rule restriction can lose. Sections 3 and 4 of the paper extend the same scheme to random recourse (semidefinite programs) and to multistage problems; they are the subjects of the companion missions 2 and 3.
The theorem is proved in the paper. As far as a search of the platform shows, none of the statements above has a machine-checked proof. A formal proof would check the measure-theoretic steps that the paper passes over quickly. These are the passage from "almost surely" to "on the support", the density argument behind intK⊆KP, and the approximation argument of Proposition 4. A formal proof would also produce reusable results on robust counterparts of polyhedral constraints and on moment cones.
Difficulty
The primal half is robust-optimization duality. Its only delicate point is that almost-sure constraints become constraints on all of Ξ, which uses the fact that every point of the support is charged. The dual half is harder. The constraint "SM has rows in KP" is a family of moment problems over nonnegative square-integrable densities, and KP is in general not closed. Replacing it by the polyhedral cone K is exact only up to the boundary, and it is strict feasibility that removes the boundary effect. Without strict feasibility the optimal values of (2.6) and (2.8) are only known to bracket each other. The proof of Proposition 3 also needs a description of the closed cone generated by Ξ, and this description uses (2.1b).
Formalization scope
Vectors in Rk are Fin k → ℝ and matrices are Matrix (Fin m) (Fin k) ℝ. The paper's 1-based indices are 0-based in Lean, so e1 is index 0 and the rows of (2.1b) are rows 0 and 1. The data form a structure Setting, and the standing assumptions form one predicate Standing. The support is encoded by three conditions on Ξ: it is closed, P(Ξc)=0, and every ball centred in Ξ has positive mass. This is equivalent to "smallest closed set of probability one"; P(Ξ)=1 alone would not be enough. Decision rules are measurable functions with MemLp x 2 P. Expectations of vector- and matrix-valued quantities are written entrywise as Bochner integrals. Under the standing assumptions ξ is bounded almost surely, so every integrand involved is integrable and no integral defaults to 0.
"Equivalent" means equal optimal values. Each optimal value is the infimum of the objective over the feasible set in EReal: +∞ if the problem is infeasible and −∞ if it is unbounded below. A one-sided inequality between the values, or the bare statement that the problems are linear programs, is not Theorem 1 and does not close the goal. Strict feasibility is a hypothesis of both equalities, as printed. Proposition 1 is stated for any W,h with a nonempty polyhedron, since nonemptiness is the only property of Ξ it uses. Proposition 3, Proposition 4 and Theorem 1 carry one hypothesis the paper does not state, W=0 (some row of W below the first two is nonzero). The printed statements are false without it: for k=1, W=(1,−1)⊤, h=(1,−1)⊤, P=δ1 every assumption holds, W−he1⊤=0, so K=R while KP=[0,∞), and (2.8) loses the sign constraint S≥0 that (2.6) keeps. Under the standing assumptions the hypothesis is automatic whenever k≥2. Theorem 1's closing sentence ("the sizes of these linear programs are polynomial … efficiently solvable") is informal and is not formalized.
A complete development needs strong LP duality or Farkas' lemma for inequality systems, the support of a measure in Rk, density of L2-densities in nonnegative measures, and basic facts on interiors of polyhedral cones. The Farkas lemma is on the platform (LinearOptimization.farkas_lemma). Proofs of the milestones are welcome independently. Proposition 1 and Proposition 3 are reusable outside this paper.
Selected references
D. Kuhn, W. Wiesemann, A. Georghiou, Primal and dual linear decision rules in stochastic and robust optimization, Optimization Online 2009/02/2218 (2009); Math. Program. 130 (2011) 177–209. https://doi.org/10.1007/s10107-009-0331-4
A. Ben-Tal, A. Goryashko, E. Guslitzer, A. Nemirovski, Adjustable robust solutions of uncertain linear programs, Math. Program. 99 (2004) 351–376. https://doi.org/10.1007/s10107-003-0454-y
X. Chen, M. Sim, P. Sun, J. Zhang, A linear decision-based approximation approach to stochastic programming, Oper. Res. 56 (2008) 344–357. https://doi.org/10.1287/opre.1070.0441
A. Shapiro, A. Nemirovski, On complexity of stochastic programming problems, in Continuous Optimization, Springer (2005) 111–144. https://doi.org/10.1007/0-387-26771-9_4
Conditional Risk Mappings: A Positively Homogeneous Lower Semicontinuous Conditional Risk Mapping Is the Supremum of Countably Many Conditional ExpectationsResearch Paper
Motivation
Risk measures quantify the danger of an uncertain cost X by a single number. The axiomatic theory of coherent and convex risk measures (Artzner, Delbaen, Eber and Heath, Coherent measures of risk, 1999; Föllmer and Schied, Convex measures of risk and trading constraints, 2002) is static: the risk is evaluated once, with no information beyond what is known at time zero. Multistage stochastic optimization and dynamic risk management need risk evaluated conditionally: at time 1 part of the uncertainty has been resolved, and the risk of a time-2 cost should be a function of what is known at time 1.
Ruszczyński and Shapiro, in Conditional risk mappings (preprint of February 21, 2004; journal version Mathematics of Operations Research 31(3), 2006), extend their earlier static theory (Optimization of convex risk functions, Math. Oper. Res. 31(3), 2006) to this conditional setting. They define conditional risk mappings by three axioms, derive a pointwise conjugate duality, and show that positively homogeneous conditional risk mappings are, under regularity conditions, suprema of countably many conditional expectations. The last result explains the word conditional: the conditional expectation is the prototype, and every positively homogeneous conditional risk mapping is a worst case over a countable family of them.
Setting
Let Ω be a set with σ-algebras F1⊂F2; F1 is the information available when risk is evaluated. Let X2 be a real vector space of F2-measurable functions X:Ω→R, and X1⊂X2 a subspace of F1-measurable ones. Let Y2 be a real vector space of finite signed measures on (Ω,F2) with ∫∣X∣d∣μ∣<∞, and pair them by
⟨μ,X⟩=∫ΩXdμ.
Both spaces carry locally convex topologies that are compatible with this pairing: the continuous linear functionals on each space are exactly the pairings with elements of the other. Two standing conditions hold throughout: (C) if μ∈Y2 is not a nonnegative measure, some nonnegative X∈X2 has ⟨μ,X⟩<0; (C′)1B∈X1 for every B∈F1.
A conditional risk mapping is a map ρ:X2→X1 with, writing ρω(X)=[ρ(X)](ω):
(A1) convexity: ρω(tX+(1−t)Y)≤tρω(X)+(1−t)ρω(Y) for t∈[0,1];
(A2) monotonicity: Y(ω′)≥X(ω′) for all ω′ implies ρω(Y)≥ρω(X);
(A3) translation equivariance: ρ(X+Y)=ρ(X)+Y for every Y∈X1.
Costs are minimised: smaller X is better. All inequalities hold at everyω∈Ω, not almost surely. ρ is positively homogeneous if ρ(tX)=tρ(X) for t>0, and lower semicontinuous if each ρω is.
The conjugate is ρ∗(μ,ω)=supX{⟨μ,X⟩−ρω(X)}∈R and the risk envelope is A(ω)={μ:ρ∗(μ,ω)<∞}. PY2 denotes the probability measures in Y2, and PY2∣F1(ω) those ν with ν(B)=1B(ω) for all B∈F1. A map ω↦μω is weakly* F1-measurable if every ω↦⟨μω,X⟩ is F1-measurable. For such a selection of A, the operator [Qμ(ν)](A)=∫μω(A)dν(ω) acts on Y2. Assumption (K): PY2 is compact, and every such Qμ maps PY2 into itself with a closed graph. Finally, μ(⋅) is the conditional probability of ν given F1 if each ω↦μω(A) is F1-measurable and ∫Sμω(A)dν=ν(A∩S) for S∈F1, A∈F2; then Eν[X∣F1](ω)=⟨μω,X⟩.
Formalization targets
Goal: Theorem 2 (p. 11)
If X2 is separable, (K) holds and ρ is a positively homogeneous, lower semicontinuous conditional risk mapping, then there are probability measures νi∈PY2, i∈N, with
ρω(X)=i∈NsupEνi[X∣F1](ω)for all X∈X2,ω∈Ω,
each conditional expectation being the integral against a weakly* F1-measurable conditional probability of νi.
Milestones
domρ∗(⋅,ω)⊆PY2∣F1(ω) (proof of Theorem 1, pp. 5–6).
Theorem 1 (p. 5): ρω(X)=supμ∈PY2∣F1(ω){⟨μ,X⟩−ρ∗(μ,ω)}, and its converse.
(3.8) (p. 6): for positively homogeneous ρ, ρ∗(⋅,ω) is the indicator of a closed convex A(ω) and ρω(X)=supμ∈A(ω)⟨μ,X⟩.
Lemma 1 (p. 11): for separable X2, countably many weakly* measurable selections of A suffice.
Under (K), each Qμ has a fixed point in PY2 (p. 10).
Proposition 3 (p. 9): a fixed point νˉ of Qμ has μ as its conditional probability given F1.
Corollary 1 (p. 10, singleton envelopes give a conditional expectation) and Proposition 2 (p. 7, ρ(YX)=Yρ(X) for nonnegative F1-step functions Y) are included as further statements.
Significance
Theorem 2 identifies the positively homogeneous conditional risk mappings with suprema of conditional expectations. It is the conditional analogue of the representation of a coherent risk measure as a worst-case expectation over a set of probability measures. It shows that the axioms (A1)–(A3), stated at every ω, are the right abstraction of "conditional": nothing beyond conditional expectations and a supremum is needed to generate them. Theorem 1, the pointwise duality on which it rests, is what makes conditional risk mappings usable in multistage problems. Its envelope form (3.8) is what the paper's composition results and dynamic programming equations in §5–§7 manipulate.
The results are proved in the paper, partly by reference: the duality of Theorem 1 by applying the authors' earlier unconditional theorem "verbatim" at each ω, Lemma 1 through a measurable-selection theorem, and Theorem 2 through Kakutani's fixed-point theorem. None of them is formalized. A formalization would check these deferred steps. In particular the passage, in the proof of Lemma 1, from a dense subset of X2 to all of X2 uses only lower semicontinuity of ρω, and whether that suffices in every separable paired space is open to scrutiny.
Difficulty
Theorem 1 needs the Fenchel–Moreau theorem in a general locally convex space, paired through integrals against signed measures. Mathlib's convex duality is mostly finite-dimensional or normed, and the extended-real bookkeeping of conjugates is delicate. The main obstacle is Lemma 1. The envelope A(ω) can be uncountable, and choosing countably many selections that are simultaneously measurable in ω and exhaust the supremum for every X requires a measurable-selection theorem for multifunctions with values in Y2, a space that need not be metrizable. The obvious argument fixes a dense sequence Xn, picks ε-optimal measures for each Xn, and passes to general X by semicontinuity. As written, that last step appears to need more than the proof supplies: approximation of ⟨μ,X⟩ by ⟨μ,Xn⟩ uniformly over the chosen μ needs more than lower semicontinuity of ρω. The fixed-point step needs a Kakutani-type theorem in a locally convex space, which Mathlib does not provide.
Formalization scope
X2 and Y2 are abstract real vector spaces with their own topologies (instances of IsTopologicalAddGroup, ContinuousSMul ℝ, LocallyConvexSpace ℝ), realised by injective linear maps into Ω→R and into Mathlib's SignedMeasure Ω. They are not subspaces of Ω→R with the pointwise topology. The ambient MeasurableSpace Ω is F2; F1≤F2 is a structure field. The pairing is ∫Xdμ+−∫Xdμ−, and integrability against ∣μ∣ is a field, so no integral takes a junk value. Compatibility includes continuity of both pairings as well as the representation of continuous functionals. The paper's space Y1 is not modelled; no statement uses it.
Committed conventions:
every statement holds at every ω; there are no a.e. classes;
the conjugate and the supremum in (3.6) are in EReal;
suprema of real numbers ((3.8), (4.7), (4.9)) are least upper bounds (IsLUB), never sSup on R;
(K) is taken in its closed-graph form and quantifies over every weakly* measurable selection;
separability is that of the topology of X2.
Two hypotheses are added where the page relies on them implicitly. Ω is nonempty in the goal, Corollary 1 and the fixed-point milestone. 1A∈X2 for every A∈F2 is assumed in the goal, Proposition 3 and Corollary 1, because the paper derives measurability of ω↦μω(A) from weak* measurability.
The goal cannot be satisfied by an almost-everywhere version of a conditional expectation chosen separately for each X, which would allow ρ itself as a "version". Each Eνi[⋅∣F1] is integration against one kernel κi that is a conditional probability of νi. The goal mentions no selection, fixed point or Kakutani; Qμ appears only inside (K).
Contributions are welcome on all of the following:
Fenchel–Moreau duality for paired locally convex spaces;
measurable selections of weakly* measurable multifunctions;
a Kakutani–Fan–Glicksberg or Schauder–Tychonoff fixed-point theorem.
All three are reusable beyond this mission.
Selected references
A. Ruszczyński, A. Shapiro, Conditional risk mappings, preprint dated February 21, 2004; Mathematics of Operations Research 31(3):544–561, 2006. https://doi.org/10.1287/moor.1060.0204
A. Ruszczyński, A. Shapiro, Optimization of convex risk functions, Mathematics of Operations Research 31(3):433–452, 2006. https://doi.org/10.1287/moor.1050.0186
H. Föllmer, A. Schied, Convex measures of risk and trading constraints, Finance and Stochastics 6(4):429–447, 2002. https://doi.org/10.1007/s007800200072
P. Billingsley, Probability and Measure, 3rd ed., Wiley, 1995 (conditional probability, pp. 430–431).
Affine Processes on Positive Semidefinite Matrices II: Every Admissible Parameter Set Determines a Unique Affine Process on the PSD Cone with Generator (2.12)Research Paper
Motivation
Stochastic models of covariance matrices need processes that stay in the cone of positive semidefinite matrices. Wishart processes (Bru, 1991) and their extensions underlie multivariate stochastic-volatility and term-structure models in finance (see §1 of Cuchiero et al. for the literature). They are used because their Laplace transforms are explicit: they are exponential-affine in the initial state, and their exponents solve matrix Riccati equations. Cuchiero, Filipović, Mayerhofer and Teichmann (arXiv:0910.0137, Ann. Appl. Probab. 2011) classify all such affine processes on the cone. Theorem 2.4 of that paper says that affine processes on Sd+ correspond one-to-one to admissible parameter sets. This mission formalizes the converse direction of that correspondence: every admissible parameter set is realized by exactly one affine process.
Timeline:
Bru (1991, MR1132135) constructs Wishart processes for specific parameters.
Duffie, Filipović and Schachermayer (Ann. Appl. Probab. 2003, MR1994043) characterize affine processes on the canonical state space R+m×Rn, with existence through the martingale problem.
Cuchiero et al. (2011) give the full characterization on Sd+. The necessity of admissibility and the existence-and-uniqueness converse are proved in separate sections (§4 and §5).
Setting
Let Sd be the real symmetric d×d matrices with ⟨x,y⟩=Tr(xy), let Sd+ be the positive semidefinite cone, and let Sd++ be its interior. Write x⪯y when y−x∈Sd+. A time-homogeneous, possibly killed Markov process on Sd+ with transition kernels pt(x,dξ) is affine if it is stochastically continuous and
with Aijkl(x)=xikαjl+xilαjk+xjkαil+xjlαik. They also define the functions F(u) and R(u) of (2.16)–(2.17), which drive the generalized Riccati equations∂tφ=F(ψ), φ(0,u)=0 and ∂tψ=R(ψ), ψ(0,u)=u.
Formalization targets
Goal: Theorem 2.4, second part (= Proposition 5.9)
For every admissible parameter set there is a transition family (pt) and there are exponents (φ,ψ) such that:
(i) p is affine with exponents (φ,ψ);(ii) S+⊂D(Ap),Apf=(2.12);(iii) (φ,ψ) solves (2.14)–(2.15);(iv) every affine p′ whose generator equals (2.12) on S+ satisfies pt′=pt for t≥0.
Milestones, in attack order
Theorem 4.8: a comparison theorem for matrix ODEs whose vector field is quasi-monotone increasing (Volkmann).
Lemma 5.1: R is analytic on Sd++ and quasi-monotone increasing on Sd+.
Lemma 5.2: the growth bound ⟨u,R(u)⟩≤2K(∥u∥2+1).
Proposition 5.3: unique global R+×Sd++-valued Riccati solutions, analytic in (t,u).
Lemma 5.5: the regularized operators Aε,δ,n converge to A uniformly on S+.
Lemma 5.7 (second part): the boundary condition ⟨b−21∑Dσklσkl,u⟩≥0 on ∂Sd+.
Lemma 5.6: the regularized martingale problems have Sd+-valued càdlàg solutions.
Lemma 5.8: the martingale problem for A has an Sd+∪{Δ}-valued càdlàg solution.
Significance
Together with the necessity direction (companion mission I in this series), the goal makes admissibility an exact characterization. Every admissible parameter set, including those with jumps of infinite activity and state-dependent killing, defines a well-posed Markov model on Sd+. Its Laplace transform is then given by the Riccati flow, which is what makes the model computationally tractable. The intermediate results are reusable on their own:
the matrix comparison theorem applies to any ODE on symmetric matrices;
the Riccati well-posedness on Sd++ holds for vector fields that need not be Lipschitz at ∂Sd+;
the martingale-problem framework on a one-point compactification is used beyond this paper.
The theorem is proved in the paper; it is not formalized anywhere. No formal library contains affine processes, generalized Riccati equations on matrix cones, quasi-monotone comparison theorems or martingale problems with jumps. Formalizing them requires all of that infrastructure.
Difficulty
The obvious route is to solve the Riccati equation (2.15) on Sd+ by Picard iteration and to show invariance of the cone from the inward-pointing condition. That route fails because R need not be Lipschitz at ∂Sd+: the integral term can have unbounded derivative there (Remark 5.4). Standard invariance theorems therefore do not apply. Instead, quasi-monotonicity keeps the solution away from the boundary.
The obvious construction of the process is also blocked. Stroock's existence and uniqueness theory for martingale problems needs Rn and a uniformly elliptic diffusion part, and neither holds on the cone, where the diffusion degenerates at the boundary. Existence must go through regularized operators with bounded smooth coefficients, then tightness in the Skorokhod space of Sd+∪{Δ} and a limit. Uniqueness in law comes from the Riccati solutions. The killing terms c and γ are added last.
Formalization scope
Conventions committed to in Lean:
Md is the function type Fin d → Fin d → ℝ, with ⟨x,y⟩=∑ijxijyji and its norm.
Sd+ is the subtype of positive semidefinite matrices, with the subspace topology and Borel structure.
Partial derivatives ∂/∂xij are taken in the symmetrized directions 21(Eij+Eji).
The matrix measure μ is encoded as Hdν with a finite measure ν and a positive semidefinite density H. This encoding is equivalent; take ν=∑iμii.
The test space S+ is represented by Schwartz functions on Md, restricted to the cone. The generator is the uniform limit of (Ptf−f)/t.
Transition families are indexed by t∈R, and only t≥0 enters. Uniqueness is equality for t≥0, never ∃!.
Analyticity on Sd++ is analyticity of y↦G((y+y⊤)/2) on an open subset of Md.
Martingale problems carry an existentially quantified probability space, the natural filtration and càdlàg paths (the platform predicate EthierKurtz.HasCadlagPaths).
The cut-offs ϕn and ηε of §5.2 are arbitrary functions with the properties the paper lists. The paper fixes some and uses only those properties.
The case condition of (5.7) is tested on ϕn(x)x, the argument of ηε, rather than on x as printed. The printed reading makes sε,n discontinuous off Sd+, which contradicts the paper's claim sε,n∈Cb∞(Sd,Sd). The two readings agree on Sd+.
In Theorem 4.8, "locally Lipschitz" is read as Lipschitz in the state variable, locally uniformly in time. This is weaker than joint local Lipschitz continuity in (t,x).
Every statement that contains one of the integrals of (2.12), (2.16), (2.17) or (5.10) also asserts that its integrand is integrable.
Hypotheses not present on the page: none. Lemmas 5.1 and 5.2 assume less than the section's standing assumptions (not the drift condition (2.4)).
Trivializing formalizations are excluded:
Lean's value 0 for a non-integrable integral is ruled out by the integrability conclusions.
A pointwise generator would be weaker than the paper's notion, so the generator is the uniform limit.
An ∃! over transition families would be false at negative times, so uniqueness is stated for t≥0.
A martingale problem is not posed for a fixed probability space, and X0=x is required almost surely.
Needed infrastructure, reusable beyond this mission: matrix calculus on Sd (square roots, spectral derivatives), comparison theorems for quasi-monotone ODEs, analytic dependence of ODE solutions, tightness in Skorokhod space, and martingale problems on locally compact spaces. Contributions are welcome at any of these levels, as are alternative proofs of the milestones.
Selected references
C. Cuchiero, D. Filipović, E. Mayerhofer, J. Teichmann, Affine processes on positive semidefinite matrices, Ann. Appl. Probab. 21 (2011) 397–463; cited from arXiv:0910.0137v3. https://arxiv.org/abs/0910.0137v3
Theoretical and Numerical Comparison of Relaxation Methods for Mathematical Programs with Complementarity Constraints 3: Kadrani et al. Relaxation Limits Are M-Stationary under MPEC-CPLDResearch Paper
Motivation
Mathematical programs with complementarity constraints (MPCCs, also called MPECs) model optimization problems in which some constraints say that, for every index i, at least one of two nonnegative quantities Gi(x), Hi(x) must vanish. They arise in bilevel optimization, Stackelberg games, the design of equilibria in traffic and electricity markets, and contact problems in mechanics (Luo, Pang, Ralph 1996). Standard nonlinear-programming algorithms do not apply directly: at every feasible point of an MPEC the Mangasarian–Fromovitz constraint qualification fails, so the classical convergence theory of SQP or interior-point methods gives no guarantees.
Relaxation methods replace the MPEC by a sequence of better-behaved nonlinear programs R(tk) with a parameter tk↓0, solve each one approximately, and study the limits of the computed points. The question every relaxation method has to answer is what kind of stationary point such limits are, and under which constraint qualification.
Timeline of the result formalized here:
2001: Scholtes introduces the global relaxation GiHi≤t and proves that limits are C-stationary under MPEC-LICQ (SIAM J. Optim. 11).
2009: Kadrani, Dussault and Benchakroun propose a relaxation whose feasible set is the union of two shifted orthants (below), and prove that limits are M-stationary under MPEC-LICQ (SIAM J. Optim. 20).
2010–2013: Hoheisel, Kanzow and Schwartz compare five relaxation schemes; for the Kadrani et al. scheme they replace MPEC-LICQ by the much weaker MPEC-CPLD (Theorem 3.5 of the Würzburg preprint, published in Math. Program. 137).
with continuously differentiable data. At a feasible x∗ the index sets are Ig={i∣gi(x∗)=0}, I0+={i∣Gi(x∗)=0<Hi(x∗)}, I00={i∣Gi(x∗)=0=Hi(x∗)} (the biactive set) and I+0={i∣Gi(x∗)>0=Hi(x∗)}.
A feasible x∗ is weakly stationary if there are multipliers λ≥0 with λigi(x∗)=0, μ, γ, ν such that
with γi=0 on I+0 and νi=0 on I0+. It is M-stationary if the same multipliers satisfy, for every i∈I00, either γi>0 and νi>0, or γiνi=0.
The tightened program TNLP(x∗) replaces the complementarity constraints by Gi=0≤Hi on I0+, Gi≥0=Hi on I+0 and Gi=Hi=0 on I00. CPLD (constant positive linear dependence) for a nonlinear program says: whenever a set of active-constraint gradients is positive-linearly dependent at x∗ (a nontrivial vanishing combination with nonnegative coefficients on the inequalities), the same gradients stay linearly dependent on a neighbourhood of x∗. MPEC-CPLD is CPLD for TNLP(x∗).
A stationary point of RKDB(t) is a feasible point with KKT multipliers.
Formalization targets
Goal: Theorem 3.5
tk↓0,xk stationary for RKDB(tk),xk→x∗,MPEC-CPLD at x∗⟹x∗ is M-stationary for (1).
Milestones, in proof order
MPEC-CPLD written out in terms of the MPEC data (§2.2, display (3)).
The KKT conditions of RKDB(tk) recast with ηiG,k=−γik(Hi(xk)−tk), ηiH,k=−γik(Gi(xk)−tk): identity (11), disjointness (13), signs (14).
Eventual support inclusions (12) into I00∪I0+ and I00∪I+0.
Reduction to linearly independent gradients (15).
Boundedness of the multiplier sequence under MPEC-CPLD.
Weak stationarity of the limit x∗.
Significance
Local minimizers of an MPEC are M-stationary under weak constraint qualifications, whereas strong stationarity needs stronger ones such as MPEC-LICQ; a C-stationary point, the kind of limit the Scholtes relaxation delivers, may still admit first-order descent directions. Theorem 3.5 shows that the Kadrani et al. relaxation reaches M-stationary limits under a constraint qualification that is implied by MPEC-LICQ and MPEC-MFCQ and that holds, for instance, whenever all constraint functions are affine. It separates this scheme from the Scholtes and Steffensen–Ulbrich relaxations in the comparison of the paper.
The theorem is proved in the paper. As far as is known, no part of MPEC theory (constraint qualifications for MPECs, the stationarity hierarchy, relaxation schemes) has a machine-checked proof in Lean or Mathlib. This mission produces a formal account of the stationarity notions of Definition 2.3, of CPLD and MPEC-CPLD, and a complete formal proof of the convergence result, including the standard constraints g, h that the paper's proof skips for brevity.
Difficulty
The obvious argument passes to the limit in the KKT conditions of RKDB(tk). This fails because the multipliers need not be bounded: unlike under MPEC-LICQ or MPEC-MFCQ, MPEC-CPLD does not by itself bound KKT multipliers, and the KKT points of the relaxed programs need not satisfy any constraint qualification themselves (Example 3.6 of the paper). The second difficulty is the biactive set I00: the product constraint contributes multipliers ηG,k, ηH,k to both ∇Gi and ∇Hi, with signs that are not fixed a priori, so a naive limit of the multipliers only gives C-stationarity-type information, or none at all.
Formalization scope
Rn is EuclideanSpace ℝ (Fin n) and gradients are Mathlib's gradient; indices are 0-based (Fin m, Fin p, Fin l), and m,p,l may be zero. Explicit choices fixed by the formalization:
The standing assumption of p. 1 (all data C1) is a hypothesis P.IsC1 of every analytic statement.
"{tk}↓0" is tk>0, t nonincreasing, tk→0.
"Stationary point" of an NLP means feasible with KKT multipliers (p. 5).
Gradient sets are indexed families; linear (in)dependence is LinearIndependent ℝ of a family indexed by a disjoint union of subtypes, so repeated gradients count as dependent.
In positive-linear dependence (Definition 2.1), "not all of them being zero" refers to all coefficients; the sign constraint is on the inequality part only.
"Linearly dependent for all x∈N(x∗)" is ∀ᶠ y in 𝓝 x*.
Definition 2.3 is used with its two misprints corrected (μi∇hi(x∗); λigi(x∗)=0 for i≤m); weak and M-stationarity include feasibility of x∗, which the goal derives rather than assumes.
TNLP(x∗) has exactly the constraints the paper lists (subtype index sets, no padding with zero constraints).
The standard constraints g, h, skipped in the paper's proof, are kept in every statement; displays (12) and (15) are extended by their g, h parts.
Two trivializing readings are ruled out. M-stationarity uses one multiplier tuple for both the weak-stationarity equation and the condition on I00; separate multipliers would make the sign condition vacuous. MPEC-CPLD demands linear dependence on a whole neighbourhood of x∗, not only at x∗; the pointwise version is a different hypothesis.
A complete development needs the gradient calculus of products and compositions on EuclideanSpace, a Carathéodory-type lemma (a conic combination can be reduced to one over linearly independent vectors with the same signs), and compactness of bounded sequences in finite dimensions. The Carathéodory lemma and the CPLD/positive-linear-dependence layer are reusable for any constraint-qualification argument in nonlinear programming. Proofs of individual milestones, and of the lemma behind (15), are welcome independently of the goal.
Selected references
T. Hoheisel, C. Kanzow, A. Schwartz, Theoretical and numerical comparison of relaxation methods for mathematical programs with complementarity constraints, Preprint 299, Institute of Mathematics, University of Würzburg, 2010; Mathematical Programming 137 (2013) 257–288. https://doi.org/10.1007/s10107-011-0488-5
A. Kadrani, J.-P. Dussault, A. Benchakroun, A new regularization scheme for mathematical programs with complementarity constraints, SIAM Journal on Optimization 20 (2009) 78–103. https://doi.org/10.1137/070705490
S. Scholtes, Convergence properties of a regularization scheme for mathematical programs with complementarity constraints, SIAM Journal on Optimization 11 (2001) 918–936. https://doi.org/10.1137/S1052623499361233
S. Steffensen, M. Ulbrich, A new relaxation scheme for mathematical programs with equilibrium constraints, SIAM Journal on Optimization 20 (2010) 2504–2539. https://doi.org/10.1137/090748883
Validity of Heavy Traffic Steady-State Approximations in Generalized Jackson Networks: Scaled Stationary Queue Lengths Converge to the Stationary Distribution of the Reflected Brownian MotionResearch Paper
Motivation
Open networks of single-server queues with general (non-exponential) interarrival and service times, generalized Jackson networks (GJNs), model manufacturing lines, communication networks and service systems. Their stationary distributions are almost never available in closed form. The standard engineering approximation replaces the scaled queue-length vector by the stationary distribution of a reflected Brownian motion (RBM) in the orthant, which is the diffusion limit of the network in heavy traffic, when every station is close to full utilisation.
The diffusion limit itself (Reiman, 1984) is a statement about the process on finite time intervals. Using the RBM's stationary law as an approximation of the network's stationary law requires interchanging two limits: time to infinity (steady state) and traffic intensity to one (heavy traffic). For a long time this interchange was assumed rather than proved.
Timeline.
1984. Reiman proved the process-level heavy-traffic limit for open queueing networks started empty (doi:10.1287/moor.9.3.441).
1987. Harrison and Williams characterised when an orthant RBM has a stationary distribution and showed it is unique (doi:10.1080/17442508708833469).
1995. Dai related fluid-model stability to positive Harris recurrence of multiclass networks (doi:10.1214/aoap/1177004828).
2006. Gamarnik and Zeevi proved the interchange of limits for GJNs whose primitives have exponential moments (arXiv:math/0410066). This mission formalizes that result.
Setting
There are J stations. Station j receives external arrivals with i.i.d. interarrival times of law FA,j (rate αj, or no arrivals at all) and serves jobs first-in-first-out with i.i.d. service times of law FS,j (mean mj, rate μj=1/mj). A job finishing at j moves to k with probability pjk or leaves. The routing matrix P is substochastic with spectral radius below one. Interarrival and service times have uniformly bounded conditional exponential moments of their residual lives (conditions (1)–(2)). The traffic equation λ=α+P′λ gives the effective rates λ=[I−P′]−1α and the traffic intensitiesρj=λjmj.
The queue lengths Q(t) are not Markov. The state Qˉ(t)=(Q(t),a^(t),v^(t)), which adds the elapsed interarrival and service times, is a Markov process on X=Z+J×R+2J. A law π on X is stationary if Qˉ(0)∼π implies Qˉ(t)∼π for all t≥0.
Heavy traffic. Fix a critically loaded network Ξ (ρj=1 for all j) and a vector κ0>0. The network Ξn slows the arrivals of Ξ at station j by the factor 1−κj0/n, so that ρjn=1−κj/n<1 for an explicit κ>0 (display (17)). Let πn be any stationary distribution of Ξn, and let π^n be the law of Qn(0)/n under πn.
The RBM. For a Brownian motion W with drift β and covariance Γ, the RBM Z with parameters (β,Γ,I−P′) solves the Skorohod problem Z=W+[I−P′]Y≥0, with Y nondecreasing and increasing only when Z is on the boundary. Here β=−(I−P′)M−1κ and Γ is the explicit covariance matrix of Reiman's theorem, built from μ, α, P and the squared coefficients of variation ca,j2, cs,j2 of Ξ.
Formalization targets
Goal: Theorem 8 (p. 18)
π^n⇒πRBM(n→∞),
where πRBM is the unique stationary distribution of the (β,Γ,I−P′)-RBM. The formal goal asserts three things: a stationary distribution of the RBM exists, it is the only one, and π^n converges weakly to it, for every choice of stationary distributions πn.
Milestones
Theorems 5 and 6 (pp. 15–16). For a general Markov process, a geometric Lyapunov function Φ gives EπΦ≤ϕ(t0)K/(1−γ). A Lyapunov function with control of L2 gives an exponential tail Pπ(Φ>s)≲e−θs.
Proposition 1 (p. 11). The fluid model drains in time at most w′z/minjμj(1−ρj), where w=e′[I−P′]−1.
Lemma A.1 and Propositions 2–3 (pp. 17, 25). The net input deviates from its fluid path by O(n) uniformly over initial states. As a result, Φ(z,a,v)=w′z is a Lyapunov function for Ξn with drift −n over time nt0.
Theorem 7 and Corollary 1 (pp. 17–18).Pπn(n−1/2w′Qn(0)>s)≤C1e−c1s uniformly in n. Hence {π^n} is tight.
Theorems 4, 3 and 2 (cited). Reiman's process limit from a general initial law; Harrison and Williams's existence and uniqueness theorem for the RBM's stationary distribution; existence of πn.
Significance
The result. Theorem 8 justifies the use of the RBM's stationary distribution, which is computable or at least numerically tractable, as an approximation of steady-state queue lengths of a heavily loaded network. Theorem 7 also shows that each stationary queue is of order (1−ρ∗n)−1 uniformly in n. Together with Theorem 8 this gives convergence of all moments (Corollary 2 of the paper) and, through Theorems 9–12, steady-state approximations of sojourn times and product-form limits.
Formalizing it. No part of this argument is machine-checked. The formalization would add reusable infrastructure for queueing theory in Lean: a Markov-state model of a generalized Jackson network with residual times, Lyapunov bounds on stationary distributions of general Markov processes (Theorems 5–6), and the link between tightness and identification of limit points for stationary laws. Reiman's theorem (Theorem 4) and the Harrison–Williams theorem (Theorem 3) are cited by the paper and are themselves open formalization targets.
Difficulty
Tightness and Reiman's theorem do not combine on their own. Reiman's theorem describes the network on finite time intervals, started empty, while a stationary distribution describes it as time goes to infinity; nothing in the finite-horizon limit forces a limit point of π^n to be stationary for the RBM, or forces different subsequences to have the same limit. The interchange therefore needs the process limit from an arbitrary initial law and the uniqueness of the RBM's stationary law, besides tightness.
The tightness step is the technical core. Moment bounds must be uniform in n and in the initial residual times. A Lyapunov argument on the workload w′Q over a time horizon of order n requires deviation bounds of order n for renewal processes started at arbitrary ages. This is why the residual-life conditions (1)–(2) appear, and why the strong approximation of Lemma A.2 is used. A naive drift argument over a fixed time horizon fails: in heavy traffic the drift of w′Q per unit time is only of order n−1/2.
Formalization scope
Stations are Fin J, vectors Fin J → ℝ, P′ is Pᵀ, and the norm ∥⋅∥ is the ℓ1 norm, written as an explicit sum. The spectral-radius condition is Pm→0.
A network is its data (J,FA,FS,P) plus the predicate IsGJN (positive times, conditions (1)–(2), substochastic P). Aj and Sj count renewal epochs in [0,t]. The initial times aj(0), vj(0) are residual lives given the elapsed ages a^j(0), v^j(0). States carry their elapsed times as reals; the predicate InStateSpace cuts out X=Z+J×R+2J, and the uniform bounds over initial states (Lemma A.1, Propositions 2–3) and the initial laws of Theorem 4 range over X only.
A realization from an initial law is a probability space carrying the primitives with their joint law and processes Q,B satisfying the dynamics (4)–(5) almost surely. E[⋅∣Qˉ(0)=x] is the expectation under a realization from δx. Stationarity of π means: a realization from π exists, and every realization from π has Qˉ(t)∼π for all t≥0.
The heavy-traffic scaling is read as ajn=aj/(1−κj0/n). The printed aj(1−κj0/n) would overload every Ξn, so no πn would exist. κ is defined so that (17) holds exactly, and every statement about Ξn is for all large n.
The RBM is built on the published Reiman84.QueueLength.Paths (Brownian motion with drift and covariance, and the reflection pair). An RBM stationary law must be a probability measure carried by R+J. Weak convergence of laws on RJ uses Mathlib's topology on ProbabilityMeasure. Theorem 4's process convergence is in coupling form with the uniform topology on [0,T].
Quantities limsupn(⋅)<∞ are rendered as one finite bound valid for all large n. Expectations of nonnegative quantities are lower Lebesgue integrals in [0,∞]. Constants "depending only on Ξ" are quantified before n and before the stationary distributions.
Disclosed departures from the page:
ϕ(t0)<∞ is assumed in Theorem 5.
{Φ>K}=∅ is assumed in Theorem 6. Its tail constant (29) is stated as (γθ/2)−1, which is what the paper's proof yields, instead of the printed (1−γθ/2)−1.
Γ is positive definite in Theorem 3, the hypothesis of Harrison and Williams.
The derivative bound w′q˙(t)≤−minjμj(1−ρj) of Proposition 1 is stated for ρj≤1 at every station; the page states it unconditionally, and it fails when two stations are overloaded.
Theorems 5 and 6 are stated for the time-t0 transition kernel of the Markov process.
A trivializing formalization is ruled out explicitly. The goal keeps the existence and uniqueness of πRBM as conjuncts, stationarity requires a realization to exist, and the RBM's stationary law must live on the orthant. Hence neither an impossible network nor an empty RBM notion makes the goal vacuous.
Contributions are welcome on any milestone. The cited Theorems 2–4 are substantial on their own, and Theorems 5–6 are independent of queueing.
Selected references
D. Gamarnik and A. Zeevi, Validity of heavy traffic steady-state approximations in generalized Jackson networks, Ann. Appl. Probab. 16(1), 2006, 56–90. arXiv:math/0410066, doi:10.1214/105051605000000638
M. I. Reiman, Open queueing networks in heavy traffic, Math. Oper. Res. 9(3), 1984, 441–458. doi:10.1287/moor.9.3.441
J. M. Harrison and R. J. Williams, Brownian models of open queueing networks with homogeneous customer populations, Stochastics 22, 1987, 77–115. doi:10.1080/17442508708833469
J. G. Dai, On positive Harris recurrence of multiclass queueing networks: a unified approach via fluid limit models, Ann. Appl. Probab. 5(1), 1995, 49–77. doi:10.1214/aoap/1177004828
H. Chen and D. D. Yao, Fundamentals of Queueing Networks: Performance, Asymptotics, and Optimization, Springer, 2001 (reference [11] of the paper; Chapter 7).
A Theoretical Framework for the Pricing of Contingent Claims in the Presence of Model Uncertainty: Superreplication Price Equals a Supremum over Martingale Measures with Bracket BoundsResearch Paper
Motivation
Classical arbitrage pricing fixes one probabilistic model of the underlying asset and prices a contingent claim as an expectation under an equivalent martingale measure. When the volatility is not known, a seller who wants to be safe under every plausible model has to superreplicate: hold an initial capital and a trading strategy whose terminal value dominates the claim under all models at once. The uncertain volatility model (UVM) of Avellaneda, Levy and Parás (Appl. Math. Finance 1995) and Lyons (Appl. Math. Finance 1995) is the standard instance: the volatility is only known to lie in an interval [σ,σˉ].
The family of laws describing such uncertainty is not dominated by a single reference probability, so "almost surely" and the usual stochastic integral are not available. Denis and Martini (Ann. Appl. Probab. 2006) replace them by a capacity and a quasi-sure stochastic integral, and show that the superreplication price of a broad class of path-dependent European claims is a supremum of expectations over martingale laws. This framework is a precursor of quasi-sure analysis and G-expectations (Denis, Hu and Peng, Potential Anal. 2011; Soner, Touzi and Zhang, Electron. J. Probab. 2011).
Setting
Fix T>0. Ω is the space of continuous paths B=(Bt)t∈[0,T] with B0=0, with the uniform norm, Borel σ-field B and canonical filtration Ft=σ(Bs:s≤t). A martingale measure is a probability on Ω under which B is an (Ft)-martingale; Pm denotes the set of these.
A nonzero measure μˉ on [0,T] with continuous distribution function μˉt=μˉ([0,t]) bounds the bracket. Hypothesis H(μˉ) on a set P⊆Pm says d⟨B⟩tP≤dμˉt for every P∈P; H(μ,μˉ) adds a lower bound dμt≤d⟨B⟩tP. In the UVM, dμ=σ2dt and dμˉ=σˉ2dt.
The capacity of a bounded continuous φ is c(φ)=supP∈P∥φ∥L2(P), extended to all functions through lower semicontinuous majorants. A set is polar if its capacity is 0, and a property holds quasi-surely (q.s.) outside a polar set. L is the completion of Cb(Ω) under c. Elementary integrands h=∑ikti1]ti,ti+1] have integrals IT(h)=∑ikti(Bti+1−Bti), and H is their completion for ∥h∥H=supP(EP∫0Ths2dμˉs)1/2. K={IT(h):h∈H} is the space of attainable gains. The superreplication price of a claim f is
Λ(f)=inf{a∈R:∃g∈K,a+g≥fq.s.}.
Formalization targets
Goal: Theorem 3.1 for explicit claims
Assume H(μ,μˉ) and that μˉ is Hölder continuous. There is a set P′′⊂Pm of martingale measures satisfying H(μ,μˉ) such that
Λ(f)=sup{EPf:P∈P′′}
for every bounded continuous f of the form F(Bt1,…,Btd), G(∫0TF(Bs)ds) or G(suptBt), with G (and the cylindrical F) bounded continuous. The goal leaves P′′ unspecified, as the paper does.
Milestones
In attack order: the transfer of a.s. inequalities to q.s. ones (Lemma A.7); the pathwise moment bound (Bt−Bs)2n≤∫sthdB+Cμˉ(]s,t])n q.s. (Proposition 2.9) and its price form Λ((Bt−Bs)2n)≤C2nμˉ([s,t])n (Proposition 2.13); a universal bracket ⟨B⟩t∈L (Lemma 2.10) approximated by realized variance (Lemma 2.14); weak duality Λ(f)≥supP′EPf (Lemma 2.15); the representation Λ(f)=supQ∈QEQf~ over probabilities on the Stone–Čech compactification Ω~ (§5, p. 19) and the Cauchy–Schwarz inequality for Λ (Lemma 4.3); the martingale property and continuity of B~ under each Q (Proposition 5.2); the bracket bounds for the induced law Q∗ (Lemma 5.3); membership of the three claim families in the class Γ of f with EQf~=EQ∗f (Lemmas 5.4–5.6); and Theorem 3.1 for the literal class Γ.
Further statements: Theorem 6.1 (all martingale measures with H(μ,μˉ) form a valid P′′), Proposition 3.2 (the case domΛ=L), Proposition 2.12 (measures not charging polar sets inherit the bracket bounds), Theorem A.8 (closedness of K under H(aμˉ,μˉ)).
Significance
The theorem identifies the cheapest model-free hedge of path-dependent European claims (cylindrical payoffs, Asian-type averages, lookbacks on the maximum) with a worst-case expectation over martingale laws obeying the same bracket bounds. Theorem 6.1 specializes it to the generalized UVM, where the dual set is all martingale measures with dμ≤d⟨B⟩≤dμˉ; the paper notes this is new even for the Lebesgue case. The result supplies a rigorous non-dominated duality on which robust pricing bounds and G-expectation pricing rest.
The theorem is proved in the paper; no part of it is machine-checked. A formalization would produce the first Lean development of a capacity on path space, of a quasi-sure stochastic integral, and of a continuous-time quadratic variation on the canonical space. These objects are absent from Mathlib, which has discrete- and continuous-time martingales, the Stone–Čech compactification and the Riesz–Markov–Kakutani theorem, but no stochastic integral.
Difficulty
The family P is not dominated, so neither the Itô integral of a single model nor a common null set is available: every inequality obtained under one P by the Itô formula must be lifted to a quasi-sure one, and every limit taken in the capacity. The natural dual argument (Hahn–Banach on L) produces linear forms whose representation as measures on Ω is not available because domΛ need not be all of L. The paper's route works on bounded continuous claims and compactifies; the price is that the dual measures live on Ω~, where Bt is unbounded and must be extended by truncation, and the identity EQf~=EQ∗f linking Ω~ back to Ω holds only for a class of claims that has to be checked family by family.
Formalization scope
Ω is a subtype of C(Set.Icc 0 T, ℝ) (paths with B0=0) with the Borel σ-field of the sup-norm topology. Distribution functions are continuous StieltjesFunctions vanishing at 0 and positive at T. The quadratic variation is a predicate: an adapted process with P-a.s. continuous nondecreasing paths from 0 such that B2−A is a martingale. The capacity takes values in [0,∞] with the Appendix's Lebesgue extension; q.s. means outside a set of capacity zero. L, H and K are membership predicates on functions. K is the image of the completion H. Λ and every supremum are extended reals. Ω~ is Mathlib's StoneCech, and Q is the set of Borel probabilities on it dominated by Λ on Cb(Ω).
Standing assumptions, stated as hypotheses: H(μˉ) on P for all §2 results, H(μ,μˉ) where the page assumes it, and Hölder continuity of μˉ for every result of §4–§5 and the goal (p. 12: "From now on, we assume that μˉ is Hölder continuous"). The goal replaces the class Γ, which is defined only inside the proof, by the three families of Lemmas 5.4–5.6. The literal form is a milestone. Lemma 2.14 adds P=∅. Lemma 5.3 is stated for the law Q∗ on Ω.
The following trivializing formalizations are ruled out. An empty P with a real-valued Λ would make the goal 0=0; here both sides are −∞. Defining q.s. as "a.s. for every P" would make Lemma A.7 a tautology. Replacing K by the closure of elementary integrals would shrink Λ. Dropping the martingale condition from the quadratic-variation predicate would make H(μ,μˉ) satisfiable by any deterministic process.
A complete development needs Itô's formula and the Burkholder–Davis–Gundy inequalities for continuous martingales, Doob–Meyer uniqueness, a Kolmogorov continuity criterion, and the theory of regular Choquet capacities. These are reusable well beyond this mission, and contributions of any of them are welcome.
Selected references
L. Denis and C. Martini, A theoretical framework for the pricing of contingent claims in the presence of model uncertainty, Ann. Appl. Probab. 16(2):827–852, 2006. arXiv:math/0607111v1. https://arxiv.org/abs/math/0607111
M. Avellaneda, A. Levy and A. Parás, Pricing and hedging derivative securities in markets with uncertain volatilities, Appl. Math. Finance 2(2):73–88, 1995. https://doi.org/10.1080/13504869500000005
L. Denis, M. Hu and S. Peng, Function spaces and capacity related to a sublinear expectation: application to G-Brownian motion paths, Potential Anal. 34:139–161, 2011. https://doi.org/10.1007/s11118-010-9185-x
H. M. Soner, N. Touzi and J. Zhang, Quasi-sure stochastic analysis through aggregation, Electron. J. Probab. 16:1844–1879, 2011. https://doi.org/10.1214/EJP.v16-950