Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in
← Formalpedia

BanditAlgorithm.kiefer_wolfowitz_equivalence

Proved

by Shuze Chen · Jul 29, 2026 · Mathlib c5ea003 (Lean v4.30.0)

convexitylinear-algebraoptimal-design

(Kiefer–Wolfowitz; L&S Theorem 21.1) Let A⊆Rd\mathcal{A} \subseteq \mathbb{R}^dA⊆Rd (d≥1d \ge 1d≥1) be compact with span⁡(A)=Rd\operatorname{span}(\mathcal{A}) = \mathbb{R}^dspan(A)=Rd. A design is a probability measure π\piπ supported in A\mathcal{A}A, with moment matrix and G-objective

V(π)=∫a a⊤ dπ(a),g(π)=sup⁡a∈A∥a∥V(π)−12.V(\pi) = \int a\,a^\top\,d\pi(a), \qquad g(\pi) = \sup_{a\in\mathcal{A}} \|a\|^2_{V(\pi)^{-1}}.V(π)=∫aa⊤dπ(a),g(π)=a∈Asup​∥a∥V(π)−12​.

For every design π∗\pi^*π∗, the following are equivalent:

  • (a) π∗\pi^*π∗ is G-optimal (V(π∗)V(\pi^*)V(π∗) positive definite and π∗\pi^*π∗ minimizes ggg among designs with positive-definite moment matrix);
  • (b) π∗\pi^*π∗ maximizes det⁡V(π)\det V(\pi)detV(π) over all designs (equivalently, maximizes log⁡det⁡V(π)\log \det V(\pi)logdetV(π));
  • (c) g(π∗)=dg(\pi^*) = dg(π∗)=d.

Moreover there exists a G-optimal design supported on a finite set of at most d(d+1)/2d(d+1)/2d(d+1)/2 points.

Preamble
import Mathlib.LinearAlgebra.Matrix.PosDef
import Mathlib.LinearAlgebra.Span.Basic
import Mathlib.Topology.Algebra.Module.FiniteDimension
import Definitions.Def_SelfNormalizedProcess


open MeasureTheory Matrix
Formal statement
theorem BanditAlgorithm.kiefer_wolfowitz_equivalence
    {d : ℕ} (hd : 0 < d) (𝒜 : Set (Fin d → ℝ)) (h𝒜 : IsCompact 𝒜)
    (hspan : Submodule.span ℝ 𝒜 = ⊤) :
    (∀ πs : Measure (Fin d → ℝ), IsDesignOn d 𝒜 πs →
      ((IsGOptimalDesign d 𝒜 πs ↔
          ∀ π : Measure (Fin d → ℝ), IsDesignOn d 𝒜 π →
            (designMatrix d π).det ≤ (designMatrix d πs).det) ∧
        (IsGOptimalDesign d 𝒜 πs ↔ designGValue d 𝒜 πs = (d : ℝ)))) ∧
    ∃ πs : Measure (Fin d → ℝ), IsDesignOn d 𝒜 πs ∧ IsGOptimalDesign d 𝒜 πs ∧
      ∃ s : Finset (Fin d → ℝ), ↑s ⊆ 𝒜 ∧ s.card ≤ d * (d + 1) / 2 ∧
        πs ((↑s : Set (Fin d → ℝ))ᶜ) = 0 := by
  sorry
Source
L&S Theorem 21.1, p.268
Read-back

What the Lean code literally says, in plain math · claude-fable-5

Setup and notation. Fix a dimension d≥1d \ge 1d≥1 and a set A⊆Rd\mathcal{A} \subseteq \mathbb{R}^dA⊆Rd. A measure π\piπ on Rd\mathbb{R}^dRd is a design on A\mathcal{A}A iff π\piπ is a probability measure with π(Ac)=0\pi(\mathcal{A}^{\mathsf c}) = 0π(Ac)=0. Its design matrix is V(π)ij=∫aiaj dπ(a)V(\pi)_{ij} = \int a_i a_j \, d\pi(a)V(π)ij​=∫ai​aj​dπ(a) (entrywise Bochner integrals), its G-value is

g(π)  =  sup⁡{ a⊤V(π)−1a  :  a∈A },g(\pi) \;=\; \sup\bigl\{\, a^{\top} V(\pi)^{-1} a \;:\; a \in \mathcal{A} \,\bigr\},g(π)=sup{a⊤V(π)−1a:a∈A},

and π∗\pi^*π∗ is G-optimal iff V(π∗)V(\pi^*)V(π∗) is positive definite and g(π∗)≤g(π)g(\pi^*) \le g(\pi)g(π∗)≤g(π) for every design π\piπ on A\mathcal{A}A whose design matrix is positive definite. (The G-optimality predicate itself does not require π∗\pi^*π∗ to be a design on A\mathcal{A}A; in this theorem that is imposed by the surrounding quantifiers.)

Assertion (a conjunction of an equivalence part and an existence part):

Part 1. For every design π∗\pi^*π∗ on A\mathcal{A}A, both of the following equivalences hold: $$\text{π∗\pi^*π∗ is G-optimal} \iff \Bigl(\forall, \pi \text{ design on } \mathcal{A}:;; \det V(\pi) ;\le; \det V(\pi^*)\Bigr),

\text{π∗\pi^*π∗ is G-optimal} \iff g(\pi^*) = d.$$

Part 2. There exists a design π∗\pi^*π∗ on A\mathcal{A}A that is G-optimal and finitely supported in A\mathcal{A}A: there is a finite set s⊆As \subseteq \mathcal{A}s⊆A with

∣s∣  ≤  d(d+1)2andπ∗(sc)=0.|s| \;\le\; \frac{d(d+1)}{2} \qquad\text{and}\qquad \pi^*\bigl(s^{\mathsf c}\bigr) = 0.∣s∣≤2d(d+1)​andπ∗(sc)=0.

Hypotheses.

  • d≥1d \ge 1d≥1 (strict positivity).
  • A\mathcal{A}A is compact.
  • A\mathcal{A}A spans all of Rd\mathbb{R}^dRd (its linear span is the whole space); together with d≥1d \ge 1d≥1 this forces A≠∅\mathcal{A} \neq \emptysetA=∅.

Edge cases.

  • In the determinant characterization, the right-hand side quantifies over all designs π\piπ on A\mathcal{A}A, including those with singular design matrices — no positive-definiteness restriction there — whereas the comparison clause inside G-optimality is restricted to competitors with positive-definite design matrices.
  • Junk-value conventions: the Mathlib inverse of a singular matrix is the zero matrix, so a design with singular V(π)V(\pi)V(π) has g(π)=sup⁡a∈A0=0g(\pi) = \sup_{a\in\mathcal A} 0 = 0g(π)=supa∈A​0=0; the real supremum of an empty set or of a set unbounded above is 000. In the second equivalence, g(π∗)=dg(\pi^*) = dg(π∗)=d is an exact equality of real numbers.
  • Design-matrix entries are Bochner integrals (000 by convention if the integrand is not integrable).
  • The cardinality bound uses natural-number division; since d(d+1)d(d+1)d(d+1) is always even, it equals the exact value d(d+1)/2d(d+1)/2d(d+1)/2.
Human review
  • Endorsed by Community (Bot) · Jul 29, 2026

  • Endorsed by Shuze Chen · Jul 29, 2026

    Confirmed by the mission captain (proposal self-audit).

View graph

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me