Final Flyspeck LP family and exact certificates
OpenKeplerMission.archive_lp_certificatesAssume validity of the fixed nonlinear catalog. Verify the final Flyspeck LP family at revision 1ce0353008eba83d3c76ae9a25c3c242e4802d53: 19,715 graph-indexed trees and 43,078 terminal obligations. Every archive index must decode; every structural leaf must compile to its prescribed nonempty rational LP with valid addresses. Every contravening realization represented by the graph or its opposite, on each reached branch, must satisfy that exact LP at the defined geometric variable values. Every structural leaf, independently of geometric realizability, must have rational multipliers accepted by its exact infeasibility checker.
The source trees, refinements, variable meanings, rounded row templates, selected row indices and bound/infeasibility modes are fixed definition data. Solvers supply proofs and certificate multipliers. Branches are closed ordered-real comparisons with all children present; unary source consequence steps grant no new geometric fact. Structural coverage and rational checker soundness already have generic Lean proofs.
Here the three predicates refer to the fixed source data, not freely chosen trees or programs. In bound mode the source row is included at its recorded integer scale; the 189 direct-infeasibility cases omit it. The complete family contains 32,028,980 row occurrences. This is a source-derived normalization of the completed verifier, not the historical basic LP family.
Source. Hales et al., A Formal Proof of the Kepler Conjecture (2017), §9, published pp.21–24, https://doi.org/10.1017/fmp.2017.1. Pinned formal_lp/hypermap/verify_all.hl; main/prove_flyspeck_lp.hl:43–52,263–348,483–523,856–1037; ineqs/lp_ineqs.hl:265–320; ineqs/lp_approx_ineqs.hl:190–218; all 39 final formal_lp/glpk/binary containers. Solovyev–Hales, Efficient Formal Verification of Bounds of Linear Programs, §§2–3. Blueprint Theorem8.40 and tame/linear_programming_results.hl identify the downstream exclusion theorem.
import Definitions.Def_Kepler_MissionContracts set_option autoImplicit false
namespace KeplerMission theorem archive_lp_certificates : Nonlinear.CatalogValid → LPArchiveObligations := by sorry end KeplerMission
Read-back
What the Lean code literally says, in plain math · gpt-6
Let be the fixed catalogue of records , concatenating the six displayed lists of lengths . It has occurrences with repetitions and covers all numbered records: have arity , arity , two arity , one arity , and two arity . Each fixed record specifies an arity , a domain and a conclusion . In this catalogue each domain is the conjunction of its written closed-interval tests, with a bound triple meaning . The proposition means exactly , retaining the fixed formula's strict or weak comparisons, disjunctions and implications. All endpoints and singleton intervals are included; an empty domain makes its implication vacuous. No geometric realizability, triangle inequality, nondegeneracy, sign or nonzero-denominator premise is added to the written domain. Repeated entries impose the same requirement again. Scalar expressions use total real arithmetic, so , and natural powers, trigonometric functions and their total inverse functions. The custom square root is if and otherwise. The custom logarithm chooses a real satisfying when one exists and has no specified logarithm property for . The custom two-argument angle is if , otherwise if , otherwise if , and otherwise , including . Inverse sine is clamped to outside , and inverse cosine to or . The constant chooses a real with and if any exists, where , , , and for and otherwise. Existence and uniqueness of that choice are not fields of the definition. The remaining named scalar helpers are the fixed displayed arithmetic and analytic functions; their names add no geometric assumptions. The ambient space is with its Euclidean norm and distance. A set is a packing exactly when distinct members have distance at least , with no nonemptiness or saturation requirement. Write and , where this natural-number cardinality is defined as if the intersection is infinite. Put , and for finite sets . Saturation means ; it alone does not require separation. The finite-container condition on is . The constant may depend on and has no sign restriction. A finite hypermap consists of a natural number , darts and permutations with for every dart. Let be its edge, node and face permutation-cycle orbits, including , and let be the finite sets of distinct such orbits. Let be the finite set of distinct components reachable by zero or more applications of . Incident faces at are the distinct sets . Write for those incident faces of size , size , and size at least , respectively, and . A face list is a finite ordered list of finite lists of natural labels. A face supplies the cyclic directed pairs ; an empty face supplies none, and a singleton supplies a loop. The dart list concatenates these lists with multiplicities. Good means no repeated directed pair, every face nonempty, and each occurring accompanied by ; it imposes no further length, label-range, connectedness or planarity condition, and the empty list is Good. The list represents if and there exists a labeling of darts by natural numbers such that , the map is injective, , every face of is a cyclic rotation of for some dart , and every dart has such a face in . Representation alone permits repeating a face. The opposite hypermap has the same darts and permutations . The fixed archive has strings; decoding splits at periods into nonempty faces and maps A through O to labels through . Empty strings, empty faces and other characters fail. Membership means equality to the decoded face list at some in-range index. Archive well-formedness requires successful decoding and Good at every index. For put , using total division, and let be the unoriented Euclidean angle between and . Define if or either projection is zero; otherwise it is when and otherwise, including zero determinant with nonzero projections. For a finite set , standard neighbors of a member are , and contact neighbors are ; a point outside has no neighbors. For either relation, the successor of around is if the neighbor set is exactly ; otherwise it is a chosen neighbor minimizing among neighbors other than . If no such neighbor exists the choice has no specified property; minimizers need not be unique. The dart angle is when has more than one neighbor and otherwise. Being surrounded means that membership in implies a nonempty neighbor set and a dart angle strictly less than at every neighbor. Outside this implication is vacuous. A contravening configuration is a finite set of pairwise separated points in the closed annulus , with score , and with score at least that of every finite packing in that annulus, without restricting competitors' cardinality. It must also have , or members; every member must be surrounded for standard neighbors; and every member must either be surrounded for contact neighbors or have norm exactly . A placement of is any map from darts into , with center set , counting distinct images once. It realizes the standard fan when , each is a standard neighbor of , every ordered standard-neighbor pair in comes from exactly one dart with , , and equals the chosen standard successor of around . A contravening realization is a standard-fan realization whose center set is a contravening configuration; it does not additionally assume tameness or an involutive edge permutation on darts. For , the position map is chosen as follows. If represents , choose a witnessing labeling and return for the first dart, in the order , with label , or if the label is missing. If this representation fails but represents the opposite, choose a labeling for the opposite and negate the first Cartesian coordinate of the same first-dart lookup in . If neither representation holds return for every label. The direct representation takes priority if both hold. These are fixed choices, not universal quantification over all representing labelings. For a face list and pair , take the pair-list of the first face containing , defaulting to the empty list. Let be its next and previous pairs at the first occurrence of , defaulting to if lookup fails, and let . Put , , for and otherwise, and . Node variables yn, ln, rho evaluate to . Dart variables azim, azim2, azim3 evaluate to ; rhazim, rhazim2, rhazim3 evaluate to . Dart variables ye and y6 both give ; y1,y2,y3 give ; y4 and y9 both give the length of ; y5 gives the length of ; y7 gives ; y8 gives the length of ; and y4prime gives . For a pair-list , its face sol variable is , and its tau variable is , counting list multiplicities. A node address is valid if its label occurs in . For dart kinds ye,y1,y2,y6, both endpoint labels must occur but the pair need not; all other dart kinds require the pair itself in the dart list. A face address must equal an occurring face's pair-list exactly, not just up to rotation. A finite case tree is a leaf or a branch with an indexed child family. Its branch guards use and . Rule 218 has children guarded by and ; rule 236 by and ; an edge rule by and ; a triangle rule by its perimeter being at least or at most . For a quadrilateral set ; its five guards are , , , , and . For a pentagon set ; its eleven guards are: all five at least ; ; ; ; ; ; ; ; ; ; and . For a hexagon the six lengths are ; its seven guards are all six at least , followed by each individual length at most . Rules high, mid and add_big each have one child with guard true. Reaching a leaf means a root-to-leaf path satisfying every guard; syntactic leaf membership ignores guards. Weak inequalities allow overlap at boundaries. The LP data are fixed tables of graph records, graph-indexed leaf records, selectable row names, and integer row templates at precisions through . Graph identifier strings are not consulted. Tree decoding consumes space-separated tags l, 218, 236, edge, tri, quad, pent, hex, high, mid and add_big, their exact numbers of natural labels, and their prescribed numbers of children; malformed tokens, exhausted token-count fuel and leftovers fail. A tree starts with state . Splitting a face at a pair finds the first containing face, rotates it so that the predecessor of the pair's initial label is first, then replaces a face longer than by its first three labels and by its first label followed by its labels from position onward. A shorter face is only rotated; no containing face leaves the list unchanged. Refinement marks the state false even if unchanged. Quad children refine at , children at , and child keeps the state. For pentagon and hexagon rules rotate their cyclic dart list once. Pentagon child keeps the state; children refine at entries ; children split successively at those entries and the entries two positions later cyclically. Hexagon child keeps the state and children refine at entries . Other rules leave the state unchanged. Leaves carry a natural ordinal and the accumulated state. A leaf code begins with a precision digit 3–7 and mode I or B, followed by vertical-bar-separated selections. Each selection starts with character code for an in-range name index, followed by i and indices encoded by characters # through p excluding backslash, giving , or by b and a base-64 bit mask in alphabet A–Z,a–z,0–9,-,_, with its first digit least significant. Only masks below pass; their set bits give indices. The stored graph index must equal the requested index. Template lookup selects the first matching name and precision, preferring a true standard-only flag in a true state and falling back to false; a false state only permits false. Index pools are distinct labels, all darts, all faces' dart lists, outgoing-dart lists for each distinct label, or darts of faces of a specified size. Distinct labels retain the order of last occurrences by right-to-left duplicate removal. Addresses select bound objects, all labels, next/previous/reversed darts, initial nodes, first darts or containing faces; feature constructors produce one coordinate or sum coordinates on a node/dart list. Type mismatches, empty required lookups and out-of-range pool indices fail. Each integer coefficient is copied to its instantiated terms, with no additional precision scaling. Selected row groups are concatenated. Mode I uses only them; mode B appends the false-flag main template at pool index . Columns are the distinct syntactic variable addresses; a matrix entry sums every coefficient for that column in its row, and the right-hand side is the rational row constant. Compilation itself checks neither geometric validity nor nonempty rows, guards, feasibility or certificates. The archive obligation is a conjunction of three claims. First, the graph-table size is , the leaf-table size , and the graph-table size equals the decoded-archive size; for every archive index there are a successfully decoded list and successfully decoded state-labeled tree built from graph index and , and every syntactic leaf location has a successfully compiled program with strictly positive row count and every column address valid in that location's face list. Second, for every index , every list and tree satisfying those decoding equalities, every hypermap and placement with representing or its opposite and a contravening realization, and every location and successfully compiled program there, reaching that location under the radii and distances of the chosen map implies every row inequality at the program's geometric column values, evaluated on that location's face list. Third, for every index, decoded list, decoded tree, syntactic leaf location and successfully compiled program there, a rational vector indexed by its rows exists such that , for each column, and . The third claim includes geometrically unreachable leaves. It provides existential certificates rather than a displayed list of certificate vectors. The geometric implication can be vacuous in the absence of a contravening realization or guarded path, while successful compilation and certificates remain required at every syntactic leaf. The theorem asserts that implies this full three-part archive obligation. It assumes neither archive classification nor tameness as a separate premise for its geometric soundness quantifiers. It does not display certificate vectors or assert that the Boolean checker has been run; rational certificate existence at every syntactic leaf is part of the mathematical conclusion.
Confirmed by the mission captain (proposal self-audit).
Confirmed by the moderator at approval.