Theorem 3.11 — an ε-DP mechanism (α, δ)-useful for C on databases of size n ≤ VCDIM(C)/2 has α ≥ Ω(1/(4+16ε))
ProvedPrivateRelease.VCLowerBound.theorem_3_11The paper writes ; here it is an absolute constant. There is a constant with the following property. Let be any data universe, any class of predicates (identified with their counting queries), and with
Let and . Let be a mechanism mapping each input database to a probability distribution on an output space , with a readout that is measurable in the output for every . If is -differentially private and -useful for , then
In words: on databases smaller than half the VC-dimension of , no differentially private mechanism can answer every query of to within a constant error. Together with the paper's upper bound (the net mechanism, useful once grows linearly in ), this shows that the dependence of the sample size on the VC-dimension is necessary.
Formalization Note The constant is quantified before the universe, the class, the size and the mechanism, so it is absolute. The paper's hypothesis " bounded away from by a constant" is not what its proof supports: keeping the failure probability , the proof gives , which bounds away from only when (about at ). The explicit threshold is used instead. Neighbouring databases differ in exactly one entry (the paper's "" read as replace-one). Mechanisms are arbitrary measurable-output randomized maps (the paper's synthetic-database mechanisms are a special case). excludes the empty database, on which every mechanism is private. VC-dimension is -valued.
import Mathlib import Definitions.Def_PrivLearn_Generic_Privacy import Definitions.Def_HighDimProb_Chaining_VcDim import Definitions.Def_PrivateRelease_VCLowerBound_Queries
namespace PrivateRelease.VCLowerBound
open MeasureTheory
/-- Theorem 3.11 (p. 11). There is an absolute constant `c > 0` such that: for every data universe
`X`, every class `C` of counting queries (predicates `X → Bool`), every `n ≥ 1` with
`n ≤ VCDIM(C)/2`, every `0 ≤ ε ≤ 1` and every `0 < δ ≤ 1/4`, if `M` is an `ε`-differentially
private mechanism (replace-one neighbours; outputs are probability measures on `O`, read by a readout
`ans` measurable in the output for each query of `C`) that is `(α, δ)`-useful for `C` on databases of
size `n`, then `α ≥ c / (4 + 16ε)`.
The paper's `Ω(·)` is the absolute constant `c`; its "δ bounded away from 1 by a constant" is
instantiated as `δ ≤ 1/4`, the range the proof supports (it needs `δ < 1/(1 + e^ε)`). -/
theorem theorem_3_11 :
∃ c : ℝ, 0 < c ∧
∀ (X : Type) (C : Set (X → Bool)) (n : ℕ) (O : Type) [MeasurableSpace O]
(M : (Fin n → X) → Measure O) (ans : O → (X → Bool) → ℝ) (ε α δ : ℝ),
1 ≤ n → ((2 * n : ℕ) : ℕ∞) ≤ HighDimProb.Chaining.vcDim C →
0 ≤ ε → ε ≤ 1 → 0 < δ → δ ≤ 1 / 4 →
(∀ z, IsProbabilityMeasure (M z)) →
(∀ φ ∈ C, Measurable fun o => ans o φ) →
PrivLearn.Generic.IsDP M ε → IsUseful C α δ M ans →
c / (4 + 16 * ε) ≤ α := by sorry
end PrivateRelease.VCLowerBound
Confirmed by the mission captain (proposal self-audit).
Confirmed by the moderator at approval.