Prove2Me
Navigate
DiscoverCollectionsFormalpediaGalaxyBlogsUsersMomentumMy Missions+
Prove2Me
Log in
← Formalpedia

Theorem 3.11 — an ε-DP mechanism (α, δ)-useful for C on databases of size n ≤ VCDIM(C)/2 has α ≥ Ω(1/(4+16ε))

Proved
PrivateRelease.VCLowerBound.theorem_3_11

by mikedeng1 · Oct 7, 2026 · Mathlib 0df444a (Lean v4.33.1)

differential-privacylower-boundp2o-batch-pfp2bp2o-gran-per-chapterp2o-plan-paperp2o-v1query-releasevc-dimension

The paper writes Ω(⋅)\Omega(\cdot)Ω(⋅); here it is an absolute constant. There is a constant c>0c > 0c>0 with the following property. Let XXX be any data universe, CCC any class of predicates φ:X→{0,1}\varphi : X \to \{0,1\}φ:X→{0,1} (identified with their counting queries), and n≥1n \ge 1n≥1 with

n≤VCDIM(C)2.n \le \frac{\mathrm{VCDIM}(C)}{2}.n≤2VCDIM(C)​.

Let 0≤ϵ≤10 \le \epsilon \le 10≤ϵ≤1 and 0<δ≤1/40 < \delta \le 1/40<δ≤1/4. Let MMM be a mechanism mapping each input database z∈Xnz \in X^nz∈Xn to a probability distribution on an output space OOO, with a readout ans\mathrm{ans}ans that is measurable in the output for every φ∈C\varphi \in Cφ∈C. If MMM is ϵ\epsilonϵ-differentially private and (α,δ)(\alpha,\delta)(α,δ)-useful for CCC, then

α ≥ c4+16ϵ.\alpha \ \ge\ \frac{c}{4 + 16\epsilon}.α ≥ 4+16ϵc​.

In words: on databases smaller than half the VC-dimension of CCC, no differentially private mechanism can answer every query of CCC to within a constant error. Together with the paper's upper bound (the net mechanism, useful once nnn grows linearly in VCDIM(C)\mathrm{VCDIM}(C)VCDIM(C)), this shows that the dependence of the sample size on the VC-dimension is necessary.

Formalization Note The constant ccc is quantified before the universe, the class, the size and the mechanism, so it is absolute. The paper's hypothesis "0<δ<10 < \delta < 10<δ<1 bounded away from 111 by a constant" is not what its proof supports: keeping the failure probability δ\deltaδ, the proof gives (1−δ)(1−2α)≤eϵ(δ+2α)(1-\delta)(1-2\alpha) \le e^{\epsilon}(\delta+2\alpha)(1−δ)(1−2α)≤eϵ(δ+2α), which bounds α\alphaα away from 000 only when δ<1/(1+eϵ)\delta < 1/(1+e^{\epsilon})δ<1/(1+eϵ) (about 0.270.270.27 at ϵ=1\epsilon = 1ϵ=1). The explicit threshold δ≤1/4\delta \le 1/4δ≤1/4 is used instead. Neighbouring databases differ in exactly one entry (the paper's "∣DΔD′∣≤1|D\Delta D'| \le 1∣DΔD′∣≤1" read as replace-one). Mechanisms are arbitrary measurable-output randomized maps (the paper's synthetic-database mechanisms are a special case). n≥1n \ge 1n≥1 excludes the empty database, on which every mechanism is private. VC-dimension is N∪{∞}\mathbb N \cup \{\infty\}N∪{∞}-valued.

Preamble
import Mathlib
import Definitions.Def_PrivLearn_Generic_Privacy
import Definitions.Def_HighDimProb_Chaining_VcDim
import Definitions.Def_PrivateRelease_VCLowerBound_Queries
Formal statement
namespace PrivateRelease.VCLowerBound

open MeasureTheory

/-- Theorem 3.11 (p. 11). There is an absolute constant `c > 0` such that: for every data universe
`X`, every class `C` of counting queries (predicates `X → Bool`), every `n ≥ 1` with
`n ≤ VCDIM(C)/2`, every `0 ≤ ε ≤ 1` and every `0 < δ ≤ 1/4`, if `M` is an `ε`-differentially
private mechanism (replace-one neighbours; outputs are probability measures on `O`, read by a readout
`ans` measurable in the output for each query of `C`) that is `(α, δ)`-useful for `C` on databases of
size `n`, then `α ≥ c / (4 + 16ε)`.

The paper's `Ω(·)` is the absolute constant `c`; its "δ bounded away from 1 by a constant" is
instantiated as `δ ≤ 1/4`, the range the proof supports (it needs `δ < 1/(1 + e^ε)`). -/
theorem theorem_3_11 :
    ∃ c : ℝ, 0 < c ∧
      ∀ (X : Type) (C : Set (X → Bool)) (n : ℕ) (O : Type) [MeasurableSpace O]
        (M : (Fin n → X) → Measure O) (ans : O → (X → Bool) → ℝ) (ε α δ : ℝ),
        1 ≤ n → ((2 * n : ℕ) : ℕ∞) ≤ HighDimProb.Chaining.vcDim C →
        0 ≤ ε → ε ≤ 1 → 0 < δ → δ ≤ 1 / 4 →
        (∀ z, IsProbabilityMeasure (M z)) →
        (∀ φ ∈ C, Measurable fun o => ans o φ) →
        PrivLearn.Generic.IsDP M ε → IsUseful C α δ M ans →
        c / (4 + 16 * ε) ≤ α := by sorry

end PrivateRelease.VCLowerBound
Source
Blum, Ligett, Roth, A Learning Theory Approach to Non-Interactive Database Privacy, arXiv:1109.2229v1 (2011), p. 11, Theorem 3.11 (proof pp. 11–12)
Human review
  • Endorsed by Shuze Chen · Oct 8, 2026

    Confirmed by the moderator at approval.

  • Endorsed by mikedeng1 · Oct 8, 2026

    Confirmed by the mission captain (proposal self-audit).

View graph

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paperProve2Me Team
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me