Prove2Me
Navigate
DiscoverFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in
← Formalpedia

Seven compositional Kepler milestone interfaces

Definition
Kepler_MissionContracts

by Minghui · Sep 27, 2026 · Mathlib c5ea003 (Lean v4.30.0)

discrete-geometrykeplersphere-packing

The ambient space is R3\mathbb R^3R3 with its Euclidean norm and distance. A set VVV is a packing exactly when distinct members have distance at least 222, with no nonemptiness or saturation requirement. Write B(a,r)={x:∥x−a∥<r}B(a,r)=\{x:\|x-a\|<r\}B(a,r)={x:∥x−a∥<r} and NV(a,r)=#(V∩B(a,r))N_V(a,r)=\#(V\cap B(a,r))NV​(a,r)=#(V∩B(a,r)), where this natural-number cardinality is defined as 000 if the intersection is infinite. Put w(t)=(63/25−t)/(63/25−2)=(63−25t)/13w(t)=(63/25-t)/(63/25-2)=(63-25t)/13w(t)=(63/25−t)/(63/25−2)=(63−25t)/13, A={x:2≤∥x∥≤63/25}A=\{x:2\leq\|x\|\leq63/25\}A={x:2≤∥x∥≤63/25} and S(s)=∑v∈sw(∥v∥)S(s)=\sum_{v\in s}w(\|v\|)S(s)=∑v∈s​w(∥v∥) for finite sets sss. Saturation means ∀x∈R3 ∃v∈V, ∥x−v∥<2\forall x\in\mathbb R^3\,\exists v\in V,\ \|x-v\|<2∀x∈R3∃v∈V, ∥x−v∥<2; it alone does not require separation. The finite-container condition on VVV is ∃c∈R ∀r≥1, NV(0,r)≤πr3/18+cr2\exists c\in\mathbb R\,\forall r\geq1,\ N_V(0,r)\leq\pi r^3/\sqrt{18}+cr^2∃c∈R∀r≥1, NV​(0,r)≤πr3/18​+cr2. The constant may depend on VVV and has no sign restriction. Let C\mathcal CC be the fixed catalogue of records 000,…,538000,\ldots,538000,…,538, concatenating the six displayed lists of lengths 81,230,109,127,5,2881,230,109,127,5,2881,230,109,127,5,28. It has 580580580 occurrences with repetitions and covers all 539539539 numbered records: 488488488 have arity 666, 464646 arity 555, two arity 111, one arity 999, and two arity 101010. Each fixed record jjj specifies an arity njn_jnj​, a domain DjD_jDj​ and a conclusion QjQ_jQj​. In this catalogue each domain is the conjunction of its written closed-interval tests, with a bound triple (a,t,b)(a,t,b)(a,t,b) meaning a≤t≤ba\leq t\leq ba≤t≤b. The proposition CCC means exactly ∀j∈C ∀x∈Rnj, Dj(x)⇒Qj(x)\forall j\in\mathcal C\,\forall x\in\mathbb R^{n_j},\ D_j(x)\Rightarrow Q_j(x)∀j∈C∀x∈Rnj​, Dj​(x)⇒Qj​(x), retaining the fixed formula's strict or weak comparisons, disjunctions and implications. All endpoints and singleton intervals are included; an empty domain makes its implication vacuous. No geometric realizability, triangle inequality, nondegeneracy, sign or nonzero-denominator premise is added to the written domain. Repeated entries impose the same requirement again. Scalar expressions use total real arithmetic, so a/0=0a/0=0a/0=0, and natural powers, trigonometric functions and their total inverse functions. The custom square root is σ(t)=t\sigma(t)=\sqrt tσ(t)=t​ if t≥0t\geq0t≥0 and −−t-\sqrt{-t}−−t​ otherwise. The custom logarithm chooses a real zzz satisfying ez=te^z=tez=t when one exists and has no specified logarithm property for t≤0t\leq0t≤0. The custom two-argument angle is α(x,y)=arctan⁡(y/x)\alpha(x,y)=\arctan(y/x)α(x,y)=arctan(y/x) if ∣y∣<x|y|<x∣y∣<x, otherwise π/2−arctan⁡(x/y)\pi/2-\arctan(x/y)π/2−arctan(x/y) if y>0y>0y>0, otherwise −π/2−arctan⁡(x/y)-\pi/2-\arctan(x/y)−π/2−arctan(x/y) if y<0y<0y<0, and otherwise π\piπ, including α(0,0)=π\alpha(0,0)=\piα(0,0)=π. Inverse sine is clamped to ±π/2\pm\pi/2±π/2 outside [−1,1][-1,1][−1,1], and inverse cosine to 000 or π\piπ. The constant h−h_-h−​ chooses a real hhh with 6/5≤h<13/106/5\leq h<13/106/5≤h<13/10 and M(h)=L(h)M(h)=L(h)M(h)=L(h) if any exists, where h0=63/50h_0=63/50h0​=63/50, h+=6627/5000h_+=6627/5000h+​=6627/5000, M(h)=(2−h)(h−h+)(9h2−17h+3)/(5(2−1)(h+−1))M(h)=(\sqrt2-h)(h-h_+)(9h^2-17h+3)/(5(\sqrt2-1)(h_+-1))M(h)=(2​−h)(h−h+​)(9h2−17h+3)/(5(2​−1)(h+​−1)), and L(h)=(h0−h)/(h0−1)L(h)=(h_0-h)/(h_0-1)L(h)=(h0​−h)/(h0​−1) for h≤h0h\leq h_0h≤h0​ and 000 otherwise. Existence and uniqueness of that choice are not fields of the definition. The remaining named scalar helpers are the fixed displayed arithmetic and analytic functions; their names add no geometric assumptions. A finite hypermap HHH consists of a natural number ddd, darts {0,…,d−1}\{0,\ldots,d-1\}{0,…,d−1} and permutations e,n,fe,n,fe,n,f with e(n(f(a)))=ae(n(f(a)))=ae(n(f(a)))=a for every dart. Let Ea,Na,FaE_a,N_a,F_aEa​,Na​,Fa​ be its edge, node and face permutation-cycle orbits, including aaa, and let E,N,F\mathcal E,\mathcal N,\mathcal FE,N,F be the finite sets of distinct such orbits. Let K\mathcal KK be the finite set of distinct components reachable by zero or more applications of e,n,fe,n,fe,n,f. Incident faces at aaa are the distinct sets Ia={Fb:b∈Na}\mathcal I_a=\{F_b:b\in N_a\}Ia​={Fb​:b∈Na​}. Write Ta,Qa,Xa\mathcal T_a,\mathcal Q_a,\mathcal X_aTa​,Qa​,Xa​ for those incident faces of size 333, size 444, and size at least 555, respectively, and (pa,qa,xa)=(∣Ta∣,∣Qa∣,∣Xa∣)(p_a,q_a,x_a)=(|\mathcal T_a|,|\mathcal Q_a|,|\mathcal X_a|)(pa​,qa​,xa​)=(∣Ta​∣,∣Qa​∣,∣Xa​∣). The condition called tame requires e2=ide^2=\mathrm{id}e2=id; ∣N∣+∣E∣+∣F∣=d+2∣K∣|\mathcal N|+|\mathcal E|+|\mathcal F|=d+2|\mathcal K|∣N∣+∣E∣+∣F∣=d+2∣K∣; ∣K∣=1|\mathcal K|=1∣K∣=1; Na∩Fa={a}N_a\cap F_a=\{a\}Na​∩Fa​={a} for every dart; e(a)≠ae(a)\neq ae(a)=a; b∈Ea∩Na⇒b=ab\in E_a\cap N_a\Rightarrow b=ab∈Ea​∩Na​⇒b=a; b∈Nab\in N_ab∈Na​ and e(b)∈Ne(a)⇒b=ae(b)\in N_{e(a)}\Rightarrow b=ae(b)∈Ne(a)​⇒b=a; at least three distinct faces; 3≤∣Fa∣≤63\leq|F_a|\leq63≤∣Fa​∣≤6 and 3≤∣Na∣≤73\leq|N_a|\leq73≤∣Na​∣≤7 for every dart; ∣N∣∈{13,14,15}|\mathcal N|\in\{13,14,15\}∣N∣∈{13,14,15}; and, whenever ∣Fa∣≥5|F_a|\geq5∣Fa​∣≥5, both ∣Na∣≤6|N_a|\leq6∣Na​∣≤6 and ∣Na∣=6⇒(pa,qa,xa)=(5,0,1)|N_a|=6\Rightarrow(p_a,q_a,x_a)=(5,0,1)∣Na​∣=6⇒(pa​,qa​,xa​)=(5,0,1). It further requires a real function WWW on all finite subsets of the dart set with W(Fa)≥a∣Fa∣W(F_a)\geq a_{|F_a|}W(Fa​)≥a∣Fa​∣​ for every dart, ∑F∈IaW(F)≥bpa,qa\sum_{F\in\mathcal I_a}W(F)\geq b_{p_a,q_a}∑F∈Ia​​W(F)≥bpa​,qa​​ when xa=0x_a=0xa​=0, ∑F∈TaW(F)≥63/100\sum_{F\in\mathcal T_a}W(F)\geq63/100∑F∈Ta​​W(F)≥63/100 when (pa,qa,xa)=(5,0,1)(p_a,q_a,x_a)=(5,0,1)(pa​,qa​,xa​)=(5,0,1), and ∑F∈FW(F)<1541/1000\sum_{F\in\mathcal F}W(F)<1541/1000∑F∈F​W(F)<1541/1000. The face constants are a3=0,a4=206/1000,a5=4819/10000,a6=712/1000a_3=0,a_4=206/1000,a_5=4819/10000,a_6=712/1000a3​=0,a4​=206/1000,a5​=4819/10000,a6​=712/1000, with ak=1541/1000a_k=1541/1000ak​=1541/1000 otherwise. In the order (p,q)=(0,3),(0,4),(1,2),(1,3),(2,1),(2,2),(2,3),(3,1),(3,2),(4,0),(4,1),(5,0),(5,1),(6,0),(7,0)(p,q)=(0,3),(0,4),(1,2),(1,3),(2,1),(2,2),(2,3),(3,1),(3,2),(4,0),(4,1),(5,0),(5,1),(6,0),(7,0)(p,q)=(0,3),(0,4),(1,2),(1,3),(2,1),(2,2),(2,3),(3,1),(3,2),(4,0),(4,1),(5,0),(5,1),(6,0),(7,0), the exceptional values of bp,qb_{p,q}bp,q​ are 618/1000,97/100,656/1000,618/1000,797/1000,412/1000,12851/10000,311/1000,817/1000,347/1000,366/1000,4/100,1136/1000,686/1000,145/100618/1000,97/100,656/1000,618/1000,797/1000,412/1000,12851/10000,311/1000,817/1000,347/1000,366/1000,4/100,1136/1000,686/1000,145/100618/1000,97/100,656/1000,618/1000,797/1000,412/1000,12851/10000,311/1000,817/1000,347/1000,366/1000,4/100,1136/1000,686/1000,145/100; every other pair has value 1541/10001541/10001541/1000. Values of WWW away from actual faces are unrestricted. An empty hypermap is a permitted structure but cannot be tame. A face list LLL is a finite ordered list of finite lists of natural labels. A face [v0,…,vk−1][v_0,\ldots,v_{k-1}][v0​,…,vk−1​] supplies the cyclic directed pairs (vi,vi+1 mod k)(v_i,v_{i+1\bmod k})(vi​,vi+1modk​); an empty face supplies none, and a singleton supplies a loop. The dart list concatenates these lists with multiplicities. Good means no repeated directed pair, every face nonempty, and each occurring (u,v)(u,v)(u,v) accompanied by (v,u)(v,u)(v,u); it imposes no further length, label-range, connectedness or planarity condition, and the empty list is Good. The list represents HHH if e2=ide^2=\mathrm{id}e2=id and there exists a labeling ℓ\ellℓ of darts by natural numbers such that ℓ(a)=ℓ(b)⇔b∈Na\ell(a)=\ell(b)\Leftrightarrow b\in N_aℓ(a)=ℓ(b)⇔b∈Na​, the map a↦(ℓ(a),ℓ(f(a)))a\mapsto(\ell(a),\ell(f(a)))a↦(ℓ(a),ℓ(f(a))) is injective, (ℓ(e(a)),ℓ(f(e(a))))=(ℓ(f(a)),ℓ(a))(\ell(e(a)),\ell(f(e(a))))=(\ell(f(a)),\ell(a))(ℓ(e(a)),ℓ(f(e(a))))=(ℓ(f(a)),ℓ(a)), every face of LLL is a cyclic rotation of [ℓ(a),ℓ(f(a)),…,ℓ(f∣Fa∣−1(a))][\ell(a),\ell(f(a)),\ldots,\ell(f^{|F_a|-1}(a))][ℓ(a),ℓ(f(a)),…,ℓ(f∣Fa​∣−1(a))] for some dart aaa, and every dart has such a face in LLL. Representation alone permits repeating a face. The opposite hypermap has the same darts and permutations f∘n,n−1,f−1f\circ n,n^{-1},f^{-1}f∘n,n−1,f−1. The fixed archive has 19,71519{,}71519,715 strings; decoding splits at periods into nonempty faces and maps A through O to labels 000 through 141414. Empty strings, empty faces and other characters fail. Membership means equality to the decoded face list at some in-range index. Archive well-formedness requires successful decoding and Good at every index. For a,u,v∈R3a,u,v\in\mathbb R^3a,u,v∈R3 put Pa(u)=u−⟨u,a⟩a/∥a∥2P_a(u)=u-\langle u,a\rangle a/\|a\|^2Pa​(u)=u−⟨u,a⟩a/∥a∥2, using total division, and let θ\thetaθ be the unoriented Euclidean angle between Pa(u)P_a(u)Pa​(u) and Pa(v)P_a(v)Pa​(v). Define Z(a,u,v)=0Z(a,u,v)=0Z(a,u,v)=0 if a=0a=0a=0 or either projection is zero; otherwise it is 2π−θ2\pi-\theta2π−θ when det⁡(a,u,v)<0\det(a,u,v)<0det(a,u,v)<0 and θ\thetaθ otherwise, including zero determinant with nonzero projections. For a finite set sss, standard neighbors of a member vvv are {u∈s:u≠v, ∥u−v∥≤63/25}\{u\in s:u\neq v,\ \|u-v\|\leq63/25\}{u∈s:u=v, ∥u−v∥≤63/25}, and contact neighbors are {u∈s:u≠v, ∥u−v∥=2}\{u\in s:u\neq v,\ \|u-v\|=2\}{u∈s:u=v, ∥u−v∥=2}; a point outside sss has no neighbors. For either relation, the successor of www around vvv is www if the neighbor set is exactly {w}\{w\}{w}; otherwise it is a chosen neighbor u≠wu\neq wu=w minimizing Z(v,w,u)Z(v,w,u)Z(v,w,u) among neighbors other than www. If no such neighbor exists the choice has no specified property; minimizers need not be unique. The dart angle is Z(v,w,successor⁡(v,w))Z(v,w,\operatorname{successor}(v,w))Z(v,w,successor(v,w)) when vvv has more than one neighbor and 2π2\pi2π otherwise. Being surrounded means that membership in sss implies a nonempty neighbor set and a dart angle strictly less than π\piπ at every neighbor. Outside sss this implication is vacuous. A contravening configuration is a finite set sss of pairwise separated points in the closed annulus 2≤∥v∥≤63/252\leq\|v\|\leq63/252≤∥v∥≤63/25, with score S(s)=∑v∈s(63−25∥v∥)/13>12S(s)=\sum_{v\in s}(63-25\|v\|)/13>12S(s)=∑v∈s​(63−25∥v∥)/13>12, and with score at least that of every finite packing in that annulus, without restricting competitors' cardinality. It must also have 131313, 141414 or 151515 members; every member must be surrounded for standard neighbors; and every member must either be surrounded for contact neighbors or have norm exactly 222. A placement of HHH is any map ppp from darts into R3\mathbb R^3R3, with center set sp={p(a):a a dart}s_p=\{p(a):a\text{ a dart}\}sp​={p(a):a a dart}, counting distinct images once. It realizes the standard fan when p(a)=p(b)⇔b∈Nap(a)=p(b)\Leftrightarrow b\in N_ap(a)=p(b)⇔b∈Na​, each p(e(a))p(e(a))p(e(a)) is a standard neighbor of p(a)p(a)p(a), every ordered standard-neighbor pair (v,w)(v,w)(v,w) in sps_psp​ comes from exactly one dart aaa with p(a)=v,p(e(a))=wp(a)=v,p(e(a))=wp(a)=v,p(e(a))=w, p(e(e(a)))=p(a)p(e(e(a)))=p(a)p(e(e(a)))=p(a), and p(e(n(a)))p(e(n(a)))p(e(n(a))) equals the chosen standard successor of p(e(a))p(e(a))p(e(a)) around p(a)p(a)p(a). A contravening realization is a standard-fan realization whose center set is a contravening configuration; it does not additionally assume tameness or an involutive edge permutation on darts. Contravention extraction means that existence of any finite packing in the annulus with score strictly greater than 121212 implies existence of a contravening configuration, including its global score-maximality, cardinality and surrounding conditions. Tame realization means that for every contravening configuration sss there exist a finite hypermap HHH and placement ppp whose image center set is exactly sss, which realizes the standard fan and for which HHH satisfies all the tame requirements. The existential hypermap and placement may depend on sss, with no uniqueness, canonical labels or separate prescribed weight function. For L,H,pL,H,pL,H,p, the position map q:N→R3q:\mathbb N\to\mathbb R^3q:N→R3 is chosen as follows. If LLL represents HHH, choose a witnessing labeling and return p(a)p(a)p(a) for the first dart, in the order 0,…,d−10,\ldots,d-10,…,d−1, with label vvv, or 000 if the label is missing. If this representation fails but LLL represents the opposite, choose a labeling for the opposite and negate the first Cartesian coordinate of the same first-dart lookup in ppp. If neither representation holds return 000 for every label. The direct representation takes priority if both hold. These are fixed choices, not universal quantification over all representing labelings. For a face list L′L'L′ and pair a=(u,v)a=(u,v)a=(u,v), take the pair-list of the first face containing aaa, defaulting to the empty list. Let a+,a−a^+,a^-a+,a− be its next and previous pairs at the first occurrence of aaa, defaulting to aaa if lookup fails, and let a−−=(a−)−a^{--}=(a^-)^-a−−=(a−)−. Put za=Z(q(u),q(v),q((a−)1))z_a=Z(q(u),q(v),q((a^-)_1))za​=Z(q(u),q(v),q((a−)1​)), s0=3arccos⁡(1/3)−πs_0=3\arccos(1/3)-\pis0​=3arccos(1/3)−π, λ(t)=(63−25t)/13\lambda(t)=(63-25t)/13λ(t)=(63−25t)/13 for t≤63/25t\leq63/25t≤63/25 and 000 otherwise, and Rv=1+(s0/π)(1−λ(∥q(v)∥))R_v=1+(s_0/\pi)(1-\lambda(\|q(v)\|))Rv​=1+(s0​/π)(1−λ(∥q(v)∥)). Node variables yn, ln, rho evaluate to ∥q(v)∥,λ(∥q(v)∥),∣Rv∣\|q(v)\|,\lambda(\|q(v)\|),|R_v|∥q(v)∥,λ(∥q(v)∥),∣Rv​∣. Dart variables azim, azim2, azim3 evaluate to za,za+,za−z_a,z_{a^+},z_{a^-}za​,za+​,za−​; rhazim, rhazim2, rhazim3 evaluate to ∣Ra1∣za,∣R(a+)1∣za+,∣R(a−)1∣za−|R_{a_1}|z_a,|R_{(a^+)_1}|z_{a^+},|R_{(a^-)_1}|z_{a^-}∣Ra1​​∣za​,∣R(a+)1​​∣za+​,∣R(a−)1​​∣za−​. Dart variables ye and y6 both give ∥q(u)−q(v)∥\|q(u)-q(v)\|∥q(u)−q(v)∥; y1,y2,y3 give ∥q(u)∥,∥q(v)∥,∥q((a−)1)∥\|q(u)\|,\|q(v)\|,\|q((a^-)_1)\|∥q(u)∥,∥q(v)∥,∥q((a−)1​)∥; y4 and y9 both give the length of a+a^+a+; y5 gives the length of a−a^-a−; y7 gives ∥q((a−−)1)∥\|q((a^{--})_1)\|∥q((a−−)1​)∥; y8 gives the length of a−−a^{--}a−−; and y4prime gives ∥q(v)−q((a−)1)∥\|q(v)-q((a^-)_1)\|∥q(v)−q((a−)1​)∥. For a pair-list FFF, its face sol variable is ∣∑a∈F(za−π)+2π∣|\sum_{a\in F}(z_a-\pi)+2\pi|∣∑a∈F​(za​−π)+2π∣, and its tau variable is ∣∑a∈FzaRa1+(π+s0)(2−∣F∣)∣|\sum_{a\in F}z_aR_{a_1}+(\pi+s_0)(2-|F|)|∣∑a∈F​za​Ra1​​+(π+s0​)(2−∣F∣)∣, counting list multiplicities. A node address is valid if its label occurs in L′L'L′. For dart kinds ye,y1,y2,y6, both endpoint labels must occur but the pair need not; all other dart kinds require the pair itself in the dart list. A face address must equal an occurring face's pair-list exactly, not just up to rotation. A finite case tree is a leaf or a branch with an indexed child family. Its branch guards use rv=∥q(v)∥r_v=\|q(v)\|rv​=∥q(v)∥ and luv=∥q(u)−q(v)∥l_{uv}=\|q(u)-q(v)\|luv​=∥q(u)−q(v)∥. Rule 218 has children guarded by 109/50≤rv109/50\leq r_v109/50≤rv​ and rv≤109/50r_v\leq109/50rv​≤109/50; rule 236 by rv≤59/25r_v\leq59/25rv​≤59/25 and 59/25≤rv59/25\leq r_v59/25≤rv​; an edge rule by 9/4≤luv9/4\leq l_{uv}9/4≤luv​ and luv≤9/4l_{uv}\leq9/4luv​≤9/4; a triangle rule by its perimeter being at least or at most 25/425/425/4. For a quadrilateral set a=lv0v2,b=lv1v3,t=8a=l_{v_0v_2},b=l_{v_1v_3},t=\sqrt8a=lv0​v2​​,b=lv1​v3​​,t=8​; its five guards are a≤b∧a≤ta\leq b\land a\leq ta≤b∧a≤t, b≤a∧b≤tb\leq a\land b\leq tb≤a∧b≤t, a≤b∧t≤a≤3a\leq b\land t\leq a\leq3a≤b∧t≤a≤3, b≤a∧t≤b≤3b\leq a\land t\leq b\leq3b≤a∧t≤b≤3, and 3≤a∧3≤b3\leq a\land3\leq b3≤a∧3≤b. For a pentagon set (a,b,c,d,e)=(lv0v2,lv1v3,lv2v4,lv3v0,lv4v1)(a,b,c,d,e)=(l_{v_0v_2},l_{v_1v_3},l_{v_2v_4},l_{v_3v_0},l_{v_4v_1})(a,b,c,d,e)=(lv0​v2​​,lv1​v3​​,lv2​v4​​,lv3​v0​​,lv4​v1​​); its eleven guards are: all five at least ttt; a≤t≤c,da\leq t\leq c,da≤t≤c,d; b≤t≤d,eb\leq t\leq d,eb≤t≤d,e; c≤t≤e,ac\leq t\leq e,ac≤t≤e,a; d≤t≤a,bd\leq t\leq a,bd≤t≤a,b; e≤t≤b,ce\leq t\leq b,ce≤t≤b,c; a,c≤ta,c\leq ta,c≤t; b,d≤tb,d\leq tb,d≤t; c,e≤tc,e\leq tc,e≤t; d,a≤td,a\leq td,a≤t; and e,b≤te,b\leq te,b≤t. For a hexagon the six lengths are lv0v2,lv1v3,lv2v4,lv3v5,lv4v0,lv5v1l_{v_0v_2},l_{v_1v_3},l_{v_2v_4},l_{v_3v_5},l_{v_4v_0},l_{v_5v_1}lv0​v2​​,lv1​v3​​,lv2​v4​​,lv3​v5​​,lv4​v0​​,lv5​v1​​; its seven guards are all six at least ttt, followed by each individual length at most ttt. Rules high, mid and add_big each have one child with guard true. Reaching a leaf means a root-to-leaf path satisfying every guard; syntactic leaf membership ignores guards. Weak inequalities allow overlap at boundaries. The LP data are fixed tables of 19,71519{,}71519,715 graph records, 43,07843{,}07843,078 graph-indexed leaf records, 216216216 selectable row names, and 1,5251{,}5251,525 integer row templates at precisions 333 through 777. Graph identifier strings are not consulted. Tree decoding consumes space-separated tags l, 218, 236, edge, tri, quad, pent, hex, high, mid and add_big, their exact numbers of natural labels, and their prescribed numbers of children; malformed tokens, exhausted token-count fuel and leftovers fail. A tree starts with state (L,true)(L,\mathrm{true})(L,true). Splitting a face at a pair finds the first containing face, rotates it so that the predecessor of the pair's initial label is first, then replaces a face longer than 333 by its first three labels and by its first label followed by its labels from position 222 onward. A shorter face is only rotated; no containing face leaves the list unchanged. Refinement marks the state false even if unchanged. Quad children 0,20,20,2 refine at (v1,v2)(v_1,v_2)(v1​,v2​), children 1,31,31,3 at (v0,v1)(v_0,v_1)(v0​,v1​), and child 444 keeps the state. For pentagon and hexagon rules rotate their cyclic dart list once. Pentagon child 000 keeps the state; children 1,…,51,\ldots,51,…,5 refine at entries 0,…,40,\ldots,40,…,4; children 6,…,106,\ldots,106,…,10 split successively at those entries and the entries two positions later cyclically. Hexagon child 000 keeps the state and children 1,…,61,\ldots,61,…,6 refine at entries 0,…,50,\ldots,50,…,5. Other rules leave the state unchanged. Leaves carry a natural ordinal and the accumulated state. A leaf code begins with a precision digit 3–7 and mode I or B, followed by vertical-bar-separated selections. Each selection starts with character code 256+k256+k256+k for an in-range name index, followed by i and indices encoded by characters # through p excluding backslash, giving 0,…,760,\ldots,760,…,76, or by b and a base-64 bit mask in alphabet A–Z,a–z,0–9,-,_, with its first digit least significant. Only masks below 2772^{77}277 pass; their set bits give indices. The stored graph index must equal the requested index. Template lookup selects the first matching name and precision, preferring a true standard-only flag in a true state and falling back to false; a false state only permits false. Index pools are distinct labels, all darts, all faces' dart lists, outgoing-dart lists for each distinct label, or darts of faces of a specified size. Distinct labels retain the order of last occurrences by right-to-left duplicate removal. Addresses select bound objects, all labels, next/previous/reversed darts, initial nodes, first darts or containing faces; feature constructors produce one coordinate or sum coordinates on a node/dart list. Type mismatches, empty required lookups and out-of-range pool indices fail. Each integer coefficient is copied to its instantiated terms, with no additional precision scaling. Selected row groups are concatenated. Mode I uses only them; mode B appends the false-flag main template at pool index 000. Columns are the distinct syntactic variable addresses; a matrix entry sums every coefficient for that column in its row, and the right-hand side is the rational row constant. Compilation itself checks neither geometric validity nor nonempty rows, guards, feasibility or certificates. The archive obligation is a conjunction of three claims. First, the graph-table size is 19,71519{,}71519,715, the leaf-table size 43,07843{,}07843,078, and the graph-table size equals the decoded-archive size; for every archive index iii there are a successfully decoded list LLL and successfully decoded state-labeled tree built from graph index iii and LLL, and every syntactic leaf location has a successfully compiled program with strictly positive row count and every column address valid in that location's face list. Second, for every index iii, every list LLL and tree satisfying those decoding equalities, every hypermap HHH and placement ppp with LLL representing HHH or its opposite and (H,p)(H,p)(H,p) a contravening realization, and every location and successfully compiled program there, reaching that location under the radii and distances of the chosen map qqq implies every row inequality ∑jAkjxj≤bk\sum_j A_{kj}x_j\leq b_k∑j​Akj​xj​≤bk​ at the program's geometric column values, evaluated on that location's face list. Third, for every index, decoded list, decoded tree, syntactic leaf location and successfully compiled program there, a rational vector yyy indexed by its rows exists such that yk≥0y_k\geq0yk​≥0, ∑kykAkj=0\sum_k y_kA_{kj}=0∑k​yk​Akj​=0 for each column, and ∑kykbk<0\sum_k y_kb_k<0∑k​yk​bk​<0. The third claim includes geometrically unreachable leaves. It provides existential certificates rather than a displayed list of certificate vectors. The geometric implication can be vacuous in the absence of a contravening realization or guarded path, while successful compilation and certificates remain required at every syntactic leaf. This bundle defines seven propositions, without proving any of them. Milestone 1 says every packing extends to a saturated packing and both have finite open-ball intersections at every center and every real radius, with the original count at most the extension's count. Milestone 2 is CCC. Milestone 3 says that CCC and the universal annulus bound S(s)≤12S(s)\leq12S(s)≤12 for every finite packing s⊆As\subseteq As⊆A imply the finite-container condition for every saturated packing. Milestone 4 says CCC implies both contravention extraction and tame realization as expanded here. Milestone 5 asserts archive well-formedness and that every tame hypermap is represented by an archived list either directly or after taking its opposite. Milestone 6 says CCC implies the conjunction of the three LP archive obligations. Milestone 7 is the same universal annulus bound. The implications do not assert their premises; the conjunction in Milestone 4 requires both conclusions, and no nonemptiness or existence of a violating configuration is silently added.

Source and scope. Primary §§3–9; composed interfaces to the exact source catalog, local annulus theorem and finite-container conclusion. The final goal is not a premise of any milestone.

Definition code
import Definitions.Def_Kepler_PackingModel
import Definitions.Def_Kepler_NonlinearCatalogModel
import Definitions.Def_Kepler_GeometricLPModel

set_option autoImplicit false

namespace KeplerMission

/-- M1: extend an arbitrary packing and control its finite container counts. -/
abbrev Milestone1 : Prop := PackingFoundationContract

/-- M2: every actual formula in all six source-selected nonlinear families is valid. -/
abbrev Milestone2 : Prop := Nonlinear.CatalogValid

/-- M3: source global geometric reduction. The nonlinear catalog and the local
annulus estimate imply the finite-container bound for saturated packings.
Hales et al. (2017), sections 4.2, 4.5; Blueprint OXLZLEZ/RDWKARC/DLWCHEM. -/
def Milestone3 : Prop :=
  Nonlinear.CatalogValid → AnnulusContract → SaturatedContainerContract

/-- M4: extract a maximizing local counterexample and realize it as a tame
standard-fan hypermap. Blueprint FCDJDOT/YXISOKH/MQMSMAB. -/
def Milestone4 : Prop :=
  Nonlinear.CatalogValid → ContraventionExtractionStatement ∧ TameRealizationStatement

/-- M5: the fixed archive decodes correctly and covers every tame hypermap,
up to node relabeling and orientation reversal. -/
abbrev Milestone5 : Prop := TameArchiveClassification

/-- M6: the pinned final Flyspeck family decodes to all required case leaves;
actual geometric values satisfy each reached, source-specified rational LP;
every structural leaf has an exact rational infeasibility certificate.
Hales et al. (2017), section 9, final formal_lp revision 1ce0353, WTEMDTA. -/
def Milestone6 : Prop := Nonlinear.CatalogValid → LPArchiveObligations

/-- M7: the local annulus theorem, the precise geometric conclusion of M4–M6.
Hales et al. (2017), section 4.2, equation (1). -/
abbrev Milestone7 : Prop := AnnulusContract

end KeplerMission
Source
Hales et al. (2017), A Formal Proof of the Kepler Conjecture, https://doi.org/10.1017/fmp.2017.1; Primary §§3–9; composed interfaces to the exact source catalog, local annulus theorem and finite-container conclusion. The final goal is not a premise of any milestone.; https://github.com/flyspeck/flyspeck/tree/1ce0353008eba83d3c76ae9a25c3c242e4802d53
Read-back

What the Lean code literally says, in plain math · gpt-6

The ambient space is R3\mathbb R^3R3 with its Euclidean norm and distance. A set VVV is a packing exactly when distinct members have distance at least 222, with no nonemptiness or saturation requirement. Write B(a,r)={x:∥x−a∥<r}B(a,r)=\{x:\|x-a\|<r\}B(a,r)={x:∥x−a∥<r} and NV(a,r)=#(V∩B(a,r))N_V(a,r)=\#(V\cap B(a,r))NV​(a,r)=#(V∩B(a,r)), where this natural-number cardinality is defined as 000 if the intersection is infinite. Put w(t)=(63/25−t)/(63/25−2)=(63−25t)/13w(t)=(63/25-t)/(63/25-2)=(63-25t)/13w(t)=(63/25−t)/(63/25−2)=(63−25t)/13, A={x:2≤∥x∥≤63/25}A=\{x:2\leq\|x\|\leq63/25\}A={x:2≤∥x∥≤63/25} and S(s)=∑v∈sw(∥v∥)S(s)=\sum_{v\in s}w(\|v\|)S(s)=∑v∈s​w(∥v∥) for finite sets sss. Saturation means ∀x∈R3 ∃v∈V, ∥x−v∥<2\forall x\in\mathbb R^3\,\exists v\in V,\ \|x-v\|<2∀x∈R3∃v∈V, ∥x−v∥<2; it alone does not require separation. The finite-container condition on VVV is ∃c∈R ∀r≥1, NV(0,r)≤πr3/18+cr2\exists c\in\mathbb R\,\forall r\geq1,\ N_V(0,r)\leq\pi r^3/\sqrt{18}+cr^2∃c∈R∀r≥1, NV​(0,r)≤πr3/18​+cr2. The constant may depend on VVV and has no sign restriction. Let C\mathcal CC be the fixed catalogue of records 000,…,538000,\ldots,538000,…,538, concatenating the six displayed lists of lengths 81,230,109,127,5,2881,230,109,127,5,2881,230,109,127,5,28. It has 580580580 occurrences with repetitions and covers all 539539539 numbered records: 488488488 have arity 666, 464646 arity 555, two arity 111, one arity 999, and two arity 101010. Each fixed record jjj specifies an arity njn_jnj​, a domain DjD_jDj​ and a conclusion QjQ_jQj​. In this catalogue each domain is the conjunction of its written closed-interval tests, with a bound triple (a,t,b)(a,t,b)(a,t,b) meaning a≤t≤ba\leq t\leq ba≤t≤b. The proposition CCC means exactly ∀j∈C ∀x∈Rnj, Dj(x)⇒Qj(x)\forall j\in\mathcal C\,\forall x\in\mathbb R^{n_j},\ D_j(x)\Rightarrow Q_j(x)∀j∈C∀x∈Rnj​, Dj​(x)⇒Qj​(x), retaining the fixed formula's strict or weak comparisons, disjunctions and implications. All endpoints and singleton intervals are included; an empty domain makes its implication vacuous. No geometric realizability, triangle inequality, nondegeneracy, sign or nonzero-denominator premise is added to the written domain. Repeated entries impose the same requirement again. Scalar expressions use total real arithmetic, so a/0=0a/0=0a/0=0, and natural powers, trigonometric functions and their total inverse functions. The custom square root is σ(t)=t\sigma(t)=\sqrt tσ(t)=t​ if t≥0t\geq0t≥0 and −−t-\sqrt{-t}−−t​ otherwise. The custom logarithm chooses a real zzz satisfying ez=te^z=tez=t when one exists and has no specified logarithm property for t≤0t\leq0t≤0. The custom two-argument angle is α(x,y)=arctan⁡(y/x)\alpha(x,y)=\arctan(y/x)α(x,y)=arctan(y/x) if ∣y∣<x|y|<x∣y∣<x, otherwise π/2−arctan⁡(x/y)\pi/2-\arctan(x/y)π/2−arctan(x/y) if y>0y>0y>0, otherwise −π/2−arctan⁡(x/y)-\pi/2-\arctan(x/y)−π/2−arctan(x/y) if y<0y<0y<0, and otherwise π\piπ, including α(0,0)=π\alpha(0,0)=\piα(0,0)=π. Inverse sine is clamped to ±π/2\pm\pi/2±π/2 outside [−1,1][-1,1][−1,1], and inverse cosine to 000 or π\piπ. The constant h−h_-h−​ chooses a real hhh with 6/5≤h<13/106/5\leq h<13/106/5≤h<13/10 and M(h)=L(h)M(h)=L(h)M(h)=L(h) if any exists, where h0=63/50h_0=63/50h0​=63/50, h+=6627/5000h_+=6627/5000h+​=6627/5000, M(h)=(2−h)(h−h+)(9h2−17h+3)/(5(2−1)(h+−1))M(h)=(\sqrt2-h)(h-h_+)(9h^2-17h+3)/(5(\sqrt2-1)(h_+-1))M(h)=(2​−h)(h−h+​)(9h2−17h+3)/(5(2​−1)(h+​−1)), and L(h)=(h0−h)/(h0−1)L(h)=(h_0-h)/(h_0-1)L(h)=(h0​−h)/(h0​−1) for h≤h0h\leq h_0h≤h0​ and 000 otherwise. Existence and uniqueness of that choice are not fields of the definition. The remaining named scalar helpers are the fixed displayed arithmetic and analytic functions; their names add no geometric assumptions. A finite hypermap HHH consists of a natural number ddd, darts {0,…,d−1}\{0,\ldots,d-1\}{0,…,d−1} and permutations e,n,fe,n,fe,n,f with e(n(f(a)))=ae(n(f(a)))=ae(n(f(a)))=a for every dart. Let Ea,Na,FaE_a,N_a,F_aEa​,Na​,Fa​ be its edge, node and face permutation-cycle orbits, including aaa, and let E,N,F\mathcal E,\mathcal N,\mathcal FE,N,F be the finite sets of distinct such orbits. Let K\mathcal KK be the finite set of distinct components reachable by zero or more applications of e,n,fe,n,fe,n,f. Incident faces at aaa are the distinct sets Ia={Fb:b∈Na}\mathcal I_a=\{F_b:b\in N_a\}Ia​={Fb​:b∈Na​}. Write Ta,Qa,Xa\mathcal T_a,\mathcal Q_a,\mathcal X_aTa​,Qa​,Xa​ for those incident faces of size 333, size 444, and size at least 555, respectively, and (pa,qa,xa)=(∣Ta∣,∣Qa∣,∣Xa∣)(p_a,q_a,x_a)=(|\mathcal T_a|,|\mathcal Q_a|,|\mathcal X_a|)(pa​,qa​,xa​)=(∣Ta​∣,∣Qa​∣,∣Xa​∣). The condition called tame requires e2=ide^2=\mathrm{id}e2=id; ∣N∣+∣E∣+∣F∣=d+2∣K∣|\mathcal N|+|\mathcal E|+|\mathcal F|=d+2|\mathcal K|∣N∣+∣E∣+∣F∣=d+2∣K∣; ∣K∣=1|\mathcal K|=1∣K∣=1; Na∩Fa={a}N_a\cap F_a=\{a\}Na​∩Fa​={a} for every dart; e(a)≠ae(a)\neq ae(a)=a; b∈Ea∩Na⇒b=ab\in E_a\cap N_a\Rightarrow b=ab∈Ea​∩Na​⇒b=a; b∈Nab\in N_ab∈Na​ and e(b)∈Ne(a)⇒b=ae(b)\in N_{e(a)}\Rightarrow b=ae(b)∈Ne(a)​⇒b=a; at least three distinct faces; 3≤∣Fa∣≤63\leq|F_a|\leq63≤∣Fa​∣≤6 and 3≤∣Na∣≤73\leq|N_a|\leq73≤∣Na​∣≤7 for every dart; ∣N∣∈{13,14,15}|\mathcal N|\in\{13,14,15\}∣N∣∈{13,14,15}; and, whenever ∣Fa∣≥5|F_a|\geq5∣Fa​∣≥5, both ∣Na∣≤6|N_a|\leq6∣Na​∣≤6 and ∣Na∣=6⇒(pa,qa,xa)=(5,0,1)|N_a|=6\Rightarrow(p_a,q_a,x_a)=(5,0,1)∣Na​∣=6⇒(pa​,qa​,xa​)=(5,0,1). It further requires a real function WWW on all finite subsets of the dart set with W(Fa)≥a∣Fa∣W(F_a)\geq a_{|F_a|}W(Fa​)≥a∣Fa​∣​ for every dart, ∑F∈IaW(F)≥bpa,qa\sum_{F\in\mathcal I_a}W(F)\geq b_{p_a,q_a}∑F∈Ia​​W(F)≥bpa​,qa​​ when xa=0x_a=0xa​=0, ∑F∈TaW(F)≥63/100\sum_{F\in\mathcal T_a}W(F)\geq63/100∑F∈Ta​​W(F)≥63/100 when (pa,qa,xa)=(5,0,1)(p_a,q_a,x_a)=(5,0,1)(pa​,qa​,xa​)=(5,0,1), and ∑F∈FW(F)<1541/1000\sum_{F\in\mathcal F}W(F)<1541/1000∑F∈F​W(F)<1541/1000. The face constants are a3=0,a4=206/1000,a5=4819/10000,a6=712/1000a_3=0,a_4=206/1000,a_5=4819/10000,a_6=712/1000a3​=0,a4​=206/1000,a5​=4819/10000,a6​=712/1000, with ak=1541/1000a_k=1541/1000ak​=1541/1000 otherwise. In the order (p,q)=(0,3),(0,4),(1,2),(1,3),(2,1),(2,2),(2,3),(3,1),(3,2),(4,0),(4,1),(5,0),(5,1),(6,0),(7,0)(p,q)=(0,3),(0,4),(1,2),(1,3),(2,1),(2,2),(2,3),(3,1),(3,2),(4,0),(4,1),(5,0),(5,1),(6,0),(7,0)(p,q)=(0,3),(0,4),(1,2),(1,3),(2,1),(2,2),(2,3),(3,1),(3,2),(4,0),(4,1),(5,0),(5,1),(6,0),(7,0), the exceptional values of bp,qb_{p,q}bp,q​ are 618/1000,97/100,656/1000,618/1000,797/1000,412/1000,12851/10000,311/1000,817/1000,347/1000,366/1000,4/100,1136/1000,686/1000,145/100618/1000,97/100,656/1000,618/1000,797/1000,412/1000,12851/10000,311/1000,817/1000,347/1000,366/1000,4/100,1136/1000,686/1000,145/100618/1000,97/100,656/1000,618/1000,797/1000,412/1000,12851/10000,311/1000,817/1000,347/1000,366/1000,4/100,1136/1000,686/1000,145/100; every other pair has value 1541/10001541/10001541/1000. Values of WWW away from actual faces are unrestricted. An empty hypermap is a permitted structure but cannot be tame. A face list LLL is a finite ordered list of finite lists of natural labels. A face [v0,…,vk−1][v_0,\ldots,v_{k-1}][v0​,…,vk−1​] supplies the cyclic directed pairs (vi,vi+1 mod k)(v_i,v_{i+1\bmod k})(vi​,vi+1modk​); an empty face supplies none, and a singleton supplies a loop. The dart list concatenates these lists with multiplicities. Good means no repeated directed pair, every face nonempty, and each occurring (u,v)(u,v)(u,v) accompanied by (v,u)(v,u)(v,u); it imposes no further length, label-range, connectedness or planarity condition, and the empty list is Good. The list represents HHH if e2=ide^2=\mathrm{id}e2=id and there exists a labeling ℓ\ellℓ of darts by natural numbers such that ℓ(a)=ℓ(b)⇔b∈Na\ell(a)=\ell(b)\Leftrightarrow b\in N_aℓ(a)=ℓ(b)⇔b∈Na​, the map a↦(ℓ(a),ℓ(f(a)))a\mapsto(\ell(a),\ell(f(a)))a↦(ℓ(a),ℓ(f(a))) is injective, (ℓ(e(a)),ℓ(f(e(a))))=(ℓ(f(a)),ℓ(a))(\ell(e(a)),\ell(f(e(a))))=(\ell(f(a)),\ell(a))(ℓ(e(a)),ℓ(f(e(a))))=(ℓ(f(a)),ℓ(a)), every face of LLL is a cyclic rotation of [ℓ(a),ℓ(f(a)),…,ℓ(f∣Fa∣−1(a))][\ell(a),\ell(f(a)),\ldots,\ell(f^{|F_a|-1}(a))][ℓ(a),ℓ(f(a)),…,ℓ(f∣Fa​∣−1(a))] for some dart aaa, and every dart has such a face in LLL. Representation alone permits repeating a face. The opposite hypermap has the same darts and permutations f∘n,n−1,f−1f\circ n,n^{-1},f^{-1}f∘n,n−1,f−1. The fixed archive has 19,71519{,}71519,715 strings; decoding splits at periods into nonempty faces and maps A through O to labels 000 through 141414. Empty strings, empty faces and other characters fail. Membership means equality to the decoded face list at some in-range index. Archive well-formedness requires successful decoding and Good at every index. For a,u,v∈R3a,u,v\in\mathbb R^3a,u,v∈R3 put Pa(u)=u−⟨u,a⟩a/∥a∥2P_a(u)=u-\langle u,a\rangle a/\|a\|^2Pa​(u)=u−⟨u,a⟩a/∥a∥2, using total division, and let θ\thetaθ be the unoriented Euclidean angle between Pa(u)P_a(u)Pa​(u) and Pa(v)P_a(v)Pa​(v). Define Z(a,u,v)=0Z(a,u,v)=0Z(a,u,v)=0 if a=0a=0a=0 or either projection is zero; otherwise it is 2π−θ2\pi-\theta2π−θ when det⁡(a,u,v)<0\det(a,u,v)<0det(a,u,v)<0 and θ\thetaθ otherwise, including zero determinant with nonzero projections. For a finite set sss, standard neighbors of a member vvv are {u∈s:u≠v, ∥u−v∥≤63/25}\{u\in s:u\neq v,\ \|u-v\|\leq63/25\}{u∈s:u=v, ∥u−v∥≤63/25}, and contact neighbors are {u∈s:u≠v, ∥u−v∥=2}\{u\in s:u\neq v,\ \|u-v\|=2\}{u∈s:u=v, ∥u−v∥=2}; a point outside sss has no neighbors. For either relation, the successor of www around vvv is www if the neighbor set is exactly {w}\{w\}{w}; otherwise it is a chosen neighbor u≠wu\neq wu=w minimizing Z(v,w,u)Z(v,w,u)Z(v,w,u) among neighbors other than www. If no such neighbor exists the choice has no specified property; minimizers need not be unique. The dart angle is Z(v,w,successor⁡(v,w))Z(v,w,\operatorname{successor}(v,w))Z(v,w,successor(v,w)) when vvv has more than one neighbor and 2π2\pi2π otherwise. Being surrounded means that membership in sss implies a nonempty neighbor set and a dart angle strictly less than π\piπ at every neighbor. Outside sss this implication is vacuous. A contravening configuration is a finite set sss of pairwise separated points in the closed annulus 2≤∥v∥≤63/252\leq\|v\|\leq63/252≤∥v∥≤63/25, with score S(s)=∑v∈s(63−25∥v∥)/13>12S(s)=\sum_{v\in s}(63-25\|v\|)/13>12S(s)=∑v∈s​(63−25∥v∥)/13>12, and with score at least that of every finite packing in that annulus, without restricting competitors' cardinality. It must also have 131313, 141414 or 151515 members; every member must be surrounded for standard neighbors; and every member must either be surrounded for contact neighbors or have norm exactly 222. A placement of HHH is any map ppp from darts into R3\mathbb R^3R3, with center set sp={p(a):a a dart}s_p=\{p(a):a\text{ a dart}\}sp​={p(a):a a dart}, counting distinct images once. It realizes the standard fan when p(a)=p(b)⇔b∈Nap(a)=p(b)\Leftrightarrow b\in N_ap(a)=p(b)⇔b∈Na​, each p(e(a))p(e(a))p(e(a)) is a standard neighbor of p(a)p(a)p(a), every ordered standard-neighbor pair (v,w)(v,w)(v,w) in sps_psp​ comes from exactly one dart aaa with p(a)=v,p(e(a))=wp(a)=v,p(e(a))=wp(a)=v,p(e(a))=w, p(e(e(a)))=p(a)p(e(e(a)))=p(a)p(e(e(a)))=p(a), and p(e(n(a)))p(e(n(a)))p(e(n(a))) equals the chosen standard successor of p(e(a))p(e(a))p(e(a)) around p(a)p(a)p(a). A contravening realization is a standard-fan realization whose center set is a contravening configuration; it does not additionally assume tameness or an involutive edge permutation on darts. Contravention extraction means that existence of any finite packing in the annulus with score strictly greater than 121212 implies existence of a contravening configuration, including its global score-maximality, cardinality and surrounding conditions. Tame realization means that for every contravening configuration sss there exist a finite hypermap HHH and placement ppp whose image center set is exactly sss, which realizes the standard fan and for which HHH satisfies all the tame requirements. The existential hypermap and placement may depend on sss, with no uniqueness, canonical labels or separate prescribed weight function. For L,H,pL,H,pL,H,p, the position map q:N→R3q:\mathbb N\to\mathbb R^3q:N→R3 is chosen as follows. If LLL represents HHH, choose a witnessing labeling and return p(a)p(a)p(a) for the first dart, in the order 0,…,d−10,\ldots,d-10,…,d−1, with label vvv, or 000 if the label is missing. If this representation fails but LLL represents the opposite, choose a labeling for the opposite and negate the first Cartesian coordinate of the same first-dart lookup in ppp. If neither representation holds return 000 for every label. The direct representation takes priority if both hold. These are fixed choices, not universal quantification over all representing labelings. For a face list L′L'L′ and pair a=(u,v)a=(u,v)a=(u,v), take the pair-list of the first face containing aaa, defaulting to the empty list. Let a+,a−a^+,a^-a+,a− be its next and previous pairs at the first occurrence of aaa, defaulting to aaa if lookup fails, and let a−−=(a−)−a^{--}=(a^-)^-a−−=(a−)−. Put za=Z(q(u),q(v),q((a−)1))z_a=Z(q(u),q(v),q((a^-)_1))za​=Z(q(u),q(v),q((a−)1​)), s0=3arccos⁡(1/3)−πs_0=3\arccos(1/3)-\pis0​=3arccos(1/3)−π, λ(t)=(63−25t)/13\lambda(t)=(63-25t)/13λ(t)=(63−25t)/13 for t≤63/25t\leq63/25t≤63/25 and 000 otherwise, and Rv=1+(s0/π)(1−λ(∥q(v)∥))R_v=1+(s_0/\pi)(1-\lambda(\|q(v)\|))Rv​=1+(s0​/π)(1−λ(∥q(v)∥)). Node variables yn, ln, rho evaluate to ∥q(v)∥,λ(∥q(v)∥),∣Rv∣\|q(v)\|,\lambda(\|q(v)\|),|R_v|∥q(v)∥,λ(∥q(v)∥),∣Rv​∣. Dart variables azim, azim2, azim3 evaluate to za,za+,za−z_a,z_{a^+},z_{a^-}za​,za+​,za−​; rhazim, rhazim2, rhazim3 evaluate to ∣Ra1∣za,∣R(a+)1∣za+,∣R(a−)1∣za−|R_{a_1}|z_a,|R_{(a^+)_1}|z_{a^+},|R_{(a^-)_1}|z_{a^-}∣Ra1​​∣za​,∣R(a+)1​​∣za+​,∣R(a−)1​​∣za−​. Dart variables ye and y6 both give ∥q(u)−q(v)∥\|q(u)-q(v)\|∥q(u)−q(v)∥; y1,y2,y3 give ∥q(u)∥,∥q(v)∥,∥q((a−)1)∥\|q(u)\|,\|q(v)\|,\|q((a^-)_1)\|∥q(u)∥,∥q(v)∥,∥q((a−)1​)∥; y4 and y9 both give the length of a+a^+a+; y5 gives the length of a−a^-a−; y7 gives ∥q((a−−)1)∥\|q((a^{--})_1)\|∥q((a−−)1​)∥; y8 gives the length of a−−a^{--}a−−; and y4prime gives ∥q(v)−q((a−)1)∥\|q(v)-q((a^-)_1)\|∥q(v)−q((a−)1​)∥. For a pair-list FFF, its face sol variable is ∣∑a∈F(za−π)+2π∣|\sum_{a\in F}(z_a-\pi)+2\pi|∣∑a∈F​(za​−π)+2π∣, and its tau variable is ∣∑a∈FzaRa1+(π+s0)(2−∣F∣)∣|\sum_{a\in F}z_aR_{a_1}+(\pi+s_0)(2-|F|)|∣∑a∈F​za​Ra1​​+(π+s0​)(2−∣F∣)∣, counting list multiplicities. A node address is valid if its label occurs in L′L'L′. For dart kinds ye,y1,y2,y6, both endpoint labels must occur but the pair need not; all other dart kinds require the pair itself in the dart list. A face address must equal an occurring face's pair-list exactly, not just up to rotation. A finite case tree is a leaf or a branch with an indexed child family. Its branch guards use rv=∥q(v)∥r_v=\|q(v)\|rv​=∥q(v)∥ and luv=∥q(u)−q(v)∥l_{uv}=\|q(u)-q(v)\|luv​=∥q(u)−q(v)∥. Rule 218 has children guarded by 109/50≤rv109/50\leq r_v109/50≤rv​ and rv≤109/50r_v\leq109/50rv​≤109/50; rule 236 by rv≤59/25r_v\leq59/25rv​≤59/25 and 59/25≤rv59/25\leq r_v59/25≤rv​; an edge rule by 9/4≤luv9/4\leq l_{uv}9/4≤luv​ and luv≤9/4l_{uv}\leq9/4luv​≤9/4; a triangle rule by its perimeter being at least or at most 25/425/425/4. For a quadrilateral set a=lv0v2,b=lv1v3,t=8a=l_{v_0v_2},b=l_{v_1v_3},t=\sqrt8a=lv0​v2​​,b=lv1​v3​​,t=8​; its five guards are a≤b∧a≤ta\leq b\land a\leq ta≤b∧a≤t, b≤a∧b≤tb\leq a\land b\leq tb≤a∧b≤t, a≤b∧t≤a≤3a\leq b\land t\leq a\leq3a≤b∧t≤a≤3, b≤a∧t≤b≤3b\leq a\land t\leq b\leq3b≤a∧t≤b≤3, and 3≤a∧3≤b3\leq a\land3\leq b3≤a∧3≤b. For a pentagon set (a,b,c,d,e)=(lv0v2,lv1v3,lv2v4,lv3v0,lv4v1)(a,b,c,d,e)=(l_{v_0v_2},l_{v_1v_3},l_{v_2v_4},l_{v_3v_0},l_{v_4v_1})(a,b,c,d,e)=(lv0​v2​​,lv1​v3​​,lv2​v4​​,lv3​v0​​,lv4​v1​​); its eleven guards are: all five at least ttt; a≤t≤c,da\leq t\leq c,da≤t≤c,d; b≤t≤d,eb\leq t\leq d,eb≤t≤d,e; c≤t≤e,ac\leq t\leq e,ac≤t≤e,a; d≤t≤a,bd\leq t\leq a,bd≤t≤a,b; e≤t≤b,ce\leq t\leq b,ce≤t≤b,c; a,c≤ta,c\leq ta,c≤t; b,d≤tb,d\leq tb,d≤t; c,e≤tc,e\leq tc,e≤t; d,a≤td,a\leq td,a≤t; and e,b≤te,b\leq te,b≤t. For a hexagon the six lengths are lv0v2,lv1v3,lv2v4,lv3v5,lv4v0,lv5v1l_{v_0v_2},l_{v_1v_3},l_{v_2v_4},l_{v_3v_5},l_{v_4v_0},l_{v_5v_1}lv0​v2​​,lv1​v3​​,lv2​v4​​,lv3​v5​​,lv4​v0​​,lv5​v1​​; its seven guards are all six at least ttt, followed by each individual length at most ttt. Rules high, mid and add_big each have one child with guard true. Reaching a leaf means a root-to-leaf path satisfying every guard; syntactic leaf membership ignores guards. Weak inequalities allow overlap at boundaries. The LP data are fixed tables of 19,71519{,}71519,715 graph records, 43,07843{,}07843,078 graph-indexed leaf records, 216216216 selectable row names, and 1,5251{,}5251,525 integer row templates at precisions 333 through 777. Graph identifier strings are not consulted. Tree decoding consumes space-separated tags l, 218, 236, edge, tri, quad, pent, hex, high, mid and add_big, their exact numbers of natural labels, and their prescribed numbers of children; malformed tokens, exhausted token-count fuel and leftovers fail. A tree starts with state (L,true)(L,\mathrm{true})(L,true). Splitting a face at a pair finds the first containing face, rotates it so that the predecessor of the pair's initial label is first, then replaces a face longer than 333 by its first three labels and by its first label followed by its labels from position 222 onward. A shorter face is only rotated; no containing face leaves the list unchanged. Refinement marks the state false even if unchanged. Quad children 0,20,20,2 refine at (v1,v2)(v_1,v_2)(v1​,v2​), children 1,31,31,3 at (v0,v1)(v_0,v_1)(v0​,v1​), and child 444 keeps the state. For pentagon and hexagon rules rotate their cyclic dart list once. Pentagon child 000 keeps the state; children 1,…,51,\ldots,51,…,5 refine at entries 0,…,40,\ldots,40,…,4; children 6,…,106,\ldots,106,…,10 split successively at those entries and the entries two positions later cyclically. Hexagon child 000 keeps the state and children 1,…,61,\ldots,61,…,6 refine at entries 0,…,50,\ldots,50,…,5. Other rules leave the state unchanged. Leaves carry a natural ordinal and the accumulated state. A leaf code begins with a precision digit 3–7 and mode I or B, followed by vertical-bar-separated selections. Each selection starts with character code 256+k256+k256+k for an in-range name index, followed by i and indices encoded by characters # through p excluding backslash, giving 0,…,760,\ldots,760,…,76, or by b and a base-64 bit mask in alphabet A–Z,a–z,0–9,-,_, with its first digit least significant. Only masks below 2772^{77}277 pass; their set bits give indices. The stored graph index must equal the requested index. Template lookup selects the first matching name and precision, preferring a true standard-only flag in a true state and falling back to false; a false state only permits false. Index pools are distinct labels, all darts, all faces' dart lists, outgoing-dart lists for each distinct label, or darts of faces of a specified size. Distinct labels retain the order of last occurrences by right-to-left duplicate removal. Addresses select bound objects, all labels, next/previous/reversed darts, initial nodes, first darts or containing faces; feature constructors produce one coordinate or sum coordinates on a node/dart list. Type mismatches, empty required lookups and out-of-range pool indices fail. Each integer coefficient is copied to its instantiated terms, with no additional precision scaling. Selected row groups are concatenated. Mode I uses only them; mode B appends the false-flag main template at pool index 000. Columns are the distinct syntactic variable addresses; a matrix entry sums every coefficient for that column in its row, and the right-hand side is the rational row constant. Compilation itself checks neither geometric validity nor nonempty rows, guards, feasibility or certificates. The archive obligation is a conjunction of three claims. First, the graph-table size is 19,71519{,}71519,715, the leaf-table size 43,07843{,}07843,078, and the graph-table size equals the decoded-archive size; for every archive index iii there are a successfully decoded list LLL and successfully decoded state-labeled tree built from graph index iii and LLL, and every syntactic leaf location has a successfully compiled program with strictly positive row count and every column address valid in that location's face list. Second, for every index iii, every list LLL and tree satisfying those decoding equalities, every hypermap HHH and placement ppp with LLL representing HHH or its opposite and (H,p)(H,p)(H,p) a contravening realization, and every location and successfully compiled program there, reaching that location under the radii and distances of the chosen map qqq implies every row inequality ∑jAkjxj≤bk\sum_j A_{kj}x_j\leq b_k∑j​Akj​xj​≤bk​ at the program's geometric column values, evaluated on that location's face list. Third, for every index, decoded list, decoded tree, syntactic leaf location and successfully compiled program there, a rational vector yyy indexed by its rows exists such that yk≥0y_k\geq0yk​≥0, ∑kykAkj=0\sum_k y_kA_{kj}=0∑k​yk​Akj​=0 for each column, and ∑kykbk<0\sum_k y_kb_k<0∑k​yk​bk​<0. The third claim includes geometrically unreachable leaves. It provides existential certificates rather than a displayed list of certificate vectors. The geometric implication can be vacuous in the absence of a contravening realization or guarded path, while successful compilation and certificates remain required at every syntactic leaf. This bundle defines seven propositions, without proving any of them. Milestone 1 says every packing extends to a saturated packing and both have finite open-ball intersections at every center and every real radius, with the original count at most the extension's count. Milestone 2 is CCC. Milestone 3 says that CCC and the universal annulus bound S(s)≤12S(s)\leq12S(s)≤12 for every finite packing s⊆As\subseteq As⊆A imply the finite-container condition for every saturated packing. Milestone 4 says CCC implies both contravention extraction and tame realization as expanded here. Milestone 5 asserts archive well-formedness and that every tame hypermap is represented by an archived list either directly or after taking its opposite. Milestone 6 says CCC implies the conjunction of the three LP archive obligations. Milestone 7 is the same universal annulus bound. The implications do not assert their premises; the conjunction in Milestone 4 requires both conclusions, and no nonemptiness or existence of a violating configuration is silently added.

Human review
  • Endorsed by Shuze Chen · Sep 27, 2026

    Confirmed by the moderator at approval.

  • Endorsed by Minghui · Sep 27, 2026

    Confirmed by the mission captain (proposal self-audit).

View graph

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me