Seven compositional Kepler milestone interfaces
DefinitionKepler_MissionContractsThe ambient space is with its Euclidean norm and distance. A set is a packing exactly when distinct members have distance at least , with no nonemptiness or saturation requirement. Write and , where this natural-number cardinality is defined as if the intersection is infinite. Put , and for finite sets . Saturation means ; it alone does not require separation. The finite-container condition on is . The constant may depend on and has no sign restriction. Let be the fixed catalogue of records , concatenating the six displayed lists of lengths . It has occurrences with repetitions and covers all numbered records: have arity , arity , two arity , one arity , and two arity . Each fixed record specifies an arity , a domain and a conclusion . In this catalogue each domain is the conjunction of its written closed-interval tests, with a bound triple meaning . The proposition means exactly , retaining the fixed formula's strict or weak comparisons, disjunctions and implications. All endpoints and singleton intervals are included; an empty domain makes its implication vacuous. No geometric realizability, triangle inequality, nondegeneracy, sign or nonzero-denominator premise is added to the written domain. Repeated entries impose the same requirement again. Scalar expressions use total real arithmetic, so , and natural powers, trigonometric functions and their total inverse functions. The custom square root is if and otherwise. The custom logarithm chooses a real satisfying when one exists and has no specified logarithm property for . The custom two-argument angle is if , otherwise if , otherwise if , and otherwise , including . Inverse sine is clamped to outside , and inverse cosine to or . The constant chooses a real with and if any exists, where , , , and for and otherwise. Existence and uniqueness of that choice are not fields of the definition. The remaining named scalar helpers are the fixed displayed arithmetic and analytic functions; their names add no geometric assumptions. A finite hypermap consists of a natural number , darts and permutations with for every dart. Let be its edge, node and face permutation-cycle orbits, including , and let be the finite sets of distinct such orbits. Let be the finite set of distinct components reachable by zero or more applications of . Incident faces at are the distinct sets . Write for those incident faces of size , size , and size at least , respectively, and . The condition called tame requires ; ; ; for every dart; ; ; and ; at least three distinct faces; and for every dart; ; and, whenever , both and . It further requires a real function on all finite subsets of the dart set with for every dart, when , when , and . The face constants are , with otherwise. In the order , the exceptional values of are ; every other pair has value . Values of away from actual faces are unrestricted. An empty hypermap is a permitted structure but cannot be tame. A face list is a finite ordered list of finite lists of natural labels. A face supplies the cyclic directed pairs ; an empty face supplies none, and a singleton supplies a loop. The dart list concatenates these lists with multiplicities. Good means no repeated directed pair, every face nonempty, and each occurring accompanied by ; it imposes no further length, label-range, connectedness or planarity condition, and the empty list is Good. The list represents if and there exists a labeling of darts by natural numbers such that , the map is injective, , every face of is a cyclic rotation of for some dart , and every dart has such a face in . Representation alone permits repeating a face. The opposite hypermap has the same darts and permutations . The fixed archive has strings; decoding splits at periods into nonempty faces and maps A through O to labels through . Empty strings, empty faces and other characters fail. Membership means equality to the decoded face list at some in-range index. Archive well-formedness requires successful decoding and Good at every index. For put , using total division, and let be the unoriented Euclidean angle between and . Define if or either projection is zero; otherwise it is when and otherwise, including zero determinant with nonzero projections. For a finite set , standard neighbors of a member are , and contact neighbors are ; a point outside has no neighbors. For either relation, the successor of around is if the neighbor set is exactly ; otherwise it is a chosen neighbor minimizing among neighbors other than . If no such neighbor exists the choice has no specified property; minimizers need not be unique. The dart angle is when has more than one neighbor and otherwise. Being surrounded means that membership in implies a nonempty neighbor set and a dart angle strictly less than at every neighbor. Outside this implication is vacuous. A contravening configuration is a finite set of pairwise separated points in the closed annulus , with score , and with score at least that of every finite packing in that annulus, without restricting competitors' cardinality. It must also have , or members; every member must be surrounded for standard neighbors; and every member must either be surrounded for contact neighbors or have norm exactly . A placement of is any map from darts into , with center set , counting distinct images once. It realizes the standard fan when , each is a standard neighbor of , every ordered standard-neighbor pair in comes from exactly one dart with , , and equals the chosen standard successor of around . A contravening realization is a standard-fan realization whose center set is a contravening configuration; it does not additionally assume tameness or an involutive edge permutation on darts. Contravention extraction means that existence of any finite packing in the annulus with score strictly greater than implies existence of a contravening configuration, including its global score-maximality, cardinality and surrounding conditions. Tame realization means that for every contravening configuration there exist a finite hypermap and placement whose image center set is exactly , which realizes the standard fan and for which satisfies all the tame requirements. The existential hypermap and placement may depend on , with no uniqueness, canonical labels or separate prescribed weight function. For , the position map is chosen as follows. If represents , choose a witnessing labeling and return for the first dart, in the order , with label , or if the label is missing. If this representation fails but represents the opposite, choose a labeling for the opposite and negate the first Cartesian coordinate of the same first-dart lookup in . If neither representation holds return for every label. The direct representation takes priority if both hold. These are fixed choices, not universal quantification over all representing labelings. For a face list and pair , take the pair-list of the first face containing , defaulting to the empty list. Let be its next and previous pairs at the first occurrence of , defaulting to if lookup fails, and let . Put , , for and otherwise, and . Node variables yn, ln, rho evaluate to . Dart variables azim, azim2, azim3 evaluate to ; rhazim, rhazim2, rhazim3 evaluate to . Dart variables ye and y6 both give ; y1,y2,y3 give ; y4 and y9 both give the length of ; y5 gives the length of ; y7 gives ; y8 gives the length of ; and y4prime gives . For a pair-list , its face sol variable is , and its tau variable is , counting list multiplicities. A node address is valid if its label occurs in . For dart kinds ye,y1,y2,y6, both endpoint labels must occur but the pair need not; all other dart kinds require the pair itself in the dart list. A face address must equal an occurring face's pair-list exactly, not just up to rotation. A finite case tree is a leaf or a branch with an indexed child family. Its branch guards use and . Rule 218 has children guarded by and ; rule 236 by and ; an edge rule by and ; a triangle rule by its perimeter being at least or at most . For a quadrilateral set ; its five guards are , , , , and . For a pentagon set ; its eleven guards are: all five at least ; ; ; ; ; ; ; ; ; ; and . For a hexagon the six lengths are ; its seven guards are all six at least , followed by each individual length at most . Rules high, mid and add_big each have one child with guard true. Reaching a leaf means a root-to-leaf path satisfying every guard; syntactic leaf membership ignores guards. Weak inequalities allow overlap at boundaries. The LP data are fixed tables of graph records, graph-indexed leaf records, selectable row names, and integer row templates at precisions through . Graph identifier strings are not consulted. Tree decoding consumes space-separated tags l, 218, 236, edge, tri, quad, pent, hex, high, mid and add_big, their exact numbers of natural labels, and their prescribed numbers of children; malformed tokens, exhausted token-count fuel and leftovers fail. A tree starts with state . Splitting a face at a pair finds the first containing face, rotates it so that the predecessor of the pair's initial label is first, then replaces a face longer than by its first three labels and by its first label followed by its labels from position onward. A shorter face is only rotated; no containing face leaves the list unchanged. Refinement marks the state false even if unchanged. Quad children refine at , children at , and child keeps the state. For pentagon and hexagon rules rotate their cyclic dart list once. Pentagon child keeps the state; children refine at entries ; children split successively at those entries and the entries two positions later cyclically. Hexagon child keeps the state and children refine at entries . Other rules leave the state unchanged. Leaves carry a natural ordinal and the accumulated state. A leaf code begins with a precision digit 3–7 and mode I or B, followed by vertical-bar-separated selections. Each selection starts with character code for an in-range name index, followed by i and indices encoded by characters # through p excluding backslash, giving , or by b and a base-64 bit mask in alphabet A–Z,a–z,0–9,-,_, with its first digit least significant. Only masks below pass; their set bits give indices. The stored graph index must equal the requested index. Template lookup selects the first matching name and precision, preferring a true standard-only flag in a true state and falling back to false; a false state only permits false. Index pools are distinct labels, all darts, all faces' dart lists, outgoing-dart lists for each distinct label, or darts of faces of a specified size. Distinct labels retain the order of last occurrences by right-to-left duplicate removal. Addresses select bound objects, all labels, next/previous/reversed darts, initial nodes, first darts or containing faces; feature constructors produce one coordinate or sum coordinates on a node/dart list. Type mismatches, empty required lookups and out-of-range pool indices fail. Each integer coefficient is copied to its instantiated terms, with no additional precision scaling. Selected row groups are concatenated. Mode I uses only them; mode B appends the false-flag main template at pool index . Columns are the distinct syntactic variable addresses; a matrix entry sums every coefficient for that column in its row, and the right-hand side is the rational row constant. Compilation itself checks neither geometric validity nor nonempty rows, guards, feasibility or certificates. The archive obligation is a conjunction of three claims. First, the graph-table size is , the leaf-table size , and the graph-table size equals the decoded-archive size; for every archive index there are a successfully decoded list and successfully decoded state-labeled tree built from graph index and , and every syntactic leaf location has a successfully compiled program with strictly positive row count and every column address valid in that location's face list. Second, for every index , every list and tree satisfying those decoding equalities, every hypermap and placement with representing or its opposite and a contravening realization, and every location and successfully compiled program there, reaching that location under the radii and distances of the chosen map implies every row inequality at the program's geometric column values, evaluated on that location's face list. Third, for every index, decoded list, decoded tree, syntactic leaf location and successfully compiled program there, a rational vector indexed by its rows exists such that , for each column, and . The third claim includes geometrically unreachable leaves. It provides existential certificates rather than a displayed list of certificate vectors. The geometric implication can be vacuous in the absence of a contravening realization or guarded path, while successful compilation and certificates remain required at every syntactic leaf. This bundle defines seven propositions, without proving any of them. Milestone 1 says every packing extends to a saturated packing and both have finite open-ball intersections at every center and every real radius, with the original count at most the extension's count. Milestone 2 is . Milestone 3 says that and the universal annulus bound for every finite packing imply the finite-container condition for every saturated packing. Milestone 4 says implies both contravention extraction and tame realization as expanded here. Milestone 5 asserts archive well-formedness and that every tame hypermap is represented by an archived list either directly or after taking its opposite. Milestone 6 says implies the conjunction of the three LP archive obligations. Milestone 7 is the same universal annulus bound. The implications do not assert their premises; the conjunction in Milestone 4 requires both conclusions, and no nonemptiness or existence of a violating configuration is silently added.
Source and scope. Primary §§3–9; composed interfaces to the exact source catalog, local annulus theorem and finite-container conclusion. The final goal is not a premise of any milestone.
import Definitions.Def_Kepler_PackingModel import Definitions.Def_Kepler_NonlinearCatalogModel import Definitions.Def_Kepler_GeometricLPModel set_option autoImplicit false namespace KeplerMission /-- M1: extend an arbitrary packing and control its finite container counts. -/ abbrev Milestone1 : Prop := PackingFoundationContract /-- M2: every actual formula in all six source-selected nonlinear families is valid. -/ abbrev Milestone2 : Prop := Nonlinear.CatalogValid /-- M3: source global geometric reduction. The nonlinear catalog and the local annulus estimate imply the finite-container bound for saturated packings. Hales et al. (2017), sections 4.2, 4.5; Blueprint OXLZLEZ/RDWKARC/DLWCHEM. -/ def Milestone3 : Prop := Nonlinear.CatalogValid → AnnulusContract → SaturatedContainerContract /-- M4: extract a maximizing local counterexample and realize it as a tame standard-fan hypermap. Blueprint FCDJDOT/YXISOKH/MQMSMAB. -/ def Milestone4 : Prop := Nonlinear.CatalogValid → ContraventionExtractionStatement ∧ TameRealizationStatement /-- M5: the fixed archive decodes correctly and covers every tame hypermap, up to node relabeling and orientation reversal. -/ abbrev Milestone5 : Prop := TameArchiveClassification /-- M6: the pinned final Flyspeck family decodes to all required case leaves; actual geometric values satisfy each reached, source-specified rational LP; every structural leaf has an exact rational infeasibility certificate. Hales et al. (2017), section 9, final formal_lp revision 1ce0353, WTEMDTA. -/ def Milestone6 : Prop := Nonlinear.CatalogValid → LPArchiveObligations /-- M7: the local annulus theorem, the precise geometric conclusion of M4–M6. Hales et al. (2017), section 4.2, equation (1). -/ abbrev Milestone7 : Prop := AnnulusContract end KeplerMission
Read-back
What the Lean code literally says, in plain math · gpt-6
The ambient space is with its Euclidean norm and distance. A set is a packing exactly when distinct members have distance at least , with no nonemptiness or saturation requirement. Write and , where this natural-number cardinality is defined as if the intersection is infinite. Put , and for finite sets . Saturation means ; it alone does not require separation. The finite-container condition on is . The constant may depend on and has no sign restriction. Let be the fixed catalogue of records , concatenating the six displayed lists of lengths . It has occurrences with repetitions and covers all numbered records: have arity , arity , two arity , one arity , and two arity . Each fixed record specifies an arity , a domain and a conclusion . In this catalogue each domain is the conjunction of its written closed-interval tests, with a bound triple meaning . The proposition means exactly , retaining the fixed formula's strict or weak comparisons, disjunctions and implications. All endpoints and singleton intervals are included; an empty domain makes its implication vacuous. No geometric realizability, triangle inequality, nondegeneracy, sign or nonzero-denominator premise is added to the written domain. Repeated entries impose the same requirement again. Scalar expressions use total real arithmetic, so , and natural powers, trigonometric functions and their total inverse functions. The custom square root is if and otherwise. The custom logarithm chooses a real satisfying when one exists and has no specified logarithm property for . The custom two-argument angle is if , otherwise if , otherwise if , and otherwise , including . Inverse sine is clamped to outside , and inverse cosine to or . The constant chooses a real with and if any exists, where , , , and for and otherwise. Existence and uniqueness of that choice are not fields of the definition. The remaining named scalar helpers are the fixed displayed arithmetic and analytic functions; their names add no geometric assumptions. A finite hypermap consists of a natural number , darts and permutations with for every dart. Let be its edge, node and face permutation-cycle orbits, including , and let be the finite sets of distinct such orbits. Let be the finite set of distinct components reachable by zero or more applications of . Incident faces at are the distinct sets . Write for those incident faces of size , size , and size at least , respectively, and . The condition called tame requires ; ; ; for every dart; ; ; and ; at least three distinct faces; and for every dart; ; and, whenever , both and . It further requires a real function on all finite subsets of the dart set with for every dart, when , when , and . The face constants are , with otherwise. In the order , the exceptional values of are ; every other pair has value . Values of away from actual faces are unrestricted. An empty hypermap is a permitted structure but cannot be tame. A face list is a finite ordered list of finite lists of natural labels. A face supplies the cyclic directed pairs ; an empty face supplies none, and a singleton supplies a loop. The dart list concatenates these lists with multiplicities. Good means no repeated directed pair, every face nonempty, and each occurring accompanied by ; it imposes no further length, label-range, connectedness or planarity condition, and the empty list is Good. The list represents if and there exists a labeling of darts by natural numbers such that , the map is injective, , every face of is a cyclic rotation of for some dart , and every dart has such a face in . Representation alone permits repeating a face. The opposite hypermap has the same darts and permutations . The fixed archive has strings; decoding splits at periods into nonempty faces and maps A through O to labels through . Empty strings, empty faces and other characters fail. Membership means equality to the decoded face list at some in-range index. Archive well-formedness requires successful decoding and Good at every index. For put , using total division, and let be the unoriented Euclidean angle between and . Define if or either projection is zero; otherwise it is when and otherwise, including zero determinant with nonzero projections. For a finite set , standard neighbors of a member are , and contact neighbors are ; a point outside has no neighbors. For either relation, the successor of around is if the neighbor set is exactly ; otherwise it is a chosen neighbor minimizing among neighbors other than . If no such neighbor exists the choice has no specified property; minimizers need not be unique. The dart angle is when has more than one neighbor and otherwise. Being surrounded means that membership in implies a nonempty neighbor set and a dart angle strictly less than at every neighbor. Outside this implication is vacuous. A contravening configuration is a finite set of pairwise separated points in the closed annulus , with score , and with score at least that of every finite packing in that annulus, without restricting competitors' cardinality. It must also have , or members; every member must be surrounded for standard neighbors; and every member must either be surrounded for contact neighbors or have norm exactly . A placement of is any map from darts into , with center set , counting distinct images once. It realizes the standard fan when , each is a standard neighbor of , every ordered standard-neighbor pair in comes from exactly one dart with , , and equals the chosen standard successor of around . A contravening realization is a standard-fan realization whose center set is a contravening configuration; it does not additionally assume tameness or an involutive edge permutation on darts. Contravention extraction means that existence of any finite packing in the annulus with score strictly greater than implies existence of a contravening configuration, including its global score-maximality, cardinality and surrounding conditions. Tame realization means that for every contravening configuration there exist a finite hypermap and placement whose image center set is exactly , which realizes the standard fan and for which satisfies all the tame requirements. The existential hypermap and placement may depend on , with no uniqueness, canonical labels or separate prescribed weight function. For , the position map is chosen as follows. If represents , choose a witnessing labeling and return for the first dart, in the order , with label , or if the label is missing. If this representation fails but represents the opposite, choose a labeling for the opposite and negate the first Cartesian coordinate of the same first-dart lookup in . If neither representation holds return for every label. The direct representation takes priority if both hold. These are fixed choices, not universal quantification over all representing labelings. For a face list and pair , take the pair-list of the first face containing , defaulting to the empty list. Let be its next and previous pairs at the first occurrence of , defaulting to if lookup fails, and let . Put , , for and otherwise, and . Node variables yn, ln, rho evaluate to . Dart variables azim, azim2, azim3 evaluate to ; rhazim, rhazim2, rhazim3 evaluate to . Dart variables ye and y6 both give ; y1,y2,y3 give ; y4 and y9 both give the length of ; y5 gives the length of ; y7 gives ; y8 gives the length of ; and y4prime gives . For a pair-list , its face sol variable is , and its tau variable is , counting list multiplicities. A node address is valid if its label occurs in . For dart kinds ye,y1,y2,y6, both endpoint labels must occur but the pair need not; all other dart kinds require the pair itself in the dart list. A face address must equal an occurring face's pair-list exactly, not just up to rotation. A finite case tree is a leaf or a branch with an indexed child family. Its branch guards use and . Rule 218 has children guarded by and ; rule 236 by and ; an edge rule by and ; a triangle rule by its perimeter being at least or at most . For a quadrilateral set ; its five guards are , , , , and . For a pentagon set ; its eleven guards are: all five at least ; ; ; ; ; ; ; ; ; ; and . For a hexagon the six lengths are ; its seven guards are all six at least , followed by each individual length at most . Rules high, mid and add_big each have one child with guard true. Reaching a leaf means a root-to-leaf path satisfying every guard; syntactic leaf membership ignores guards. Weak inequalities allow overlap at boundaries. The LP data are fixed tables of graph records, graph-indexed leaf records, selectable row names, and integer row templates at precisions through . Graph identifier strings are not consulted. Tree decoding consumes space-separated tags l, 218, 236, edge, tri, quad, pent, hex, high, mid and add_big, their exact numbers of natural labels, and their prescribed numbers of children; malformed tokens, exhausted token-count fuel and leftovers fail. A tree starts with state . Splitting a face at a pair finds the first containing face, rotates it so that the predecessor of the pair's initial label is first, then replaces a face longer than by its first three labels and by its first label followed by its labels from position onward. A shorter face is only rotated; no containing face leaves the list unchanged. Refinement marks the state false even if unchanged. Quad children refine at , children at , and child keeps the state. For pentagon and hexagon rules rotate their cyclic dart list once. Pentagon child keeps the state; children refine at entries ; children split successively at those entries and the entries two positions later cyclically. Hexagon child keeps the state and children refine at entries . Other rules leave the state unchanged. Leaves carry a natural ordinal and the accumulated state. A leaf code begins with a precision digit 3–7 and mode I or B, followed by vertical-bar-separated selections. Each selection starts with character code for an in-range name index, followed by i and indices encoded by characters # through p excluding backslash, giving , or by b and a base-64 bit mask in alphabet A–Z,a–z,0–9,-,_, with its first digit least significant. Only masks below pass; their set bits give indices. The stored graph index must equal the requested index. Template lookup selects the first matching name and precision, preferring a true standard-only flag in a true state and falling back to false; a false state only permits false. Index pools are distinct labels, all darts, all faces' dart lists, outgoing-dart lists for each distinct label, or darts of faces of a specified size. Distinct labels retain the order of last occurrences by right-to-left duplicate removal. Addresses select bound objects, all labels, next/previous/reversed darts, initial nodes, first darts or containing faces; feature constructors produce one coordinate or sum coordinates on a node/dart list. Type mismatches, empty required lookups and out-of-range pool indices fail. Each integer coefficient is copied to its instantiated terms, with no additional precision scaling. Selected row groups are concatenated. Mode I uses only them; mode B appends the false-flag main template at pool index . Columns are the distinct syntactic variable addresses; a matrix entry sums every coefficient for that column in its row, and the right-hand side is the rational row constant. Compilation itself checks neither geometric validity nor nonempty rows, guards, feasibility or certificates. The archive obligation is a conjunction of three claims. First, the graph-table size is , the leaf-table size , and the graph-table size equals the decoded-archive size; for every archive index there are a successfully decoded list and successfully decoded state-labeled tree built from graph index and , and every syntactic leaf location has a successfully compiled program with strictly positive row count and every column address valid in that location's face list. Second, for every index , every list and tree satisfying those decoding equalities, every hypermap and placement with representing or its opposite and a contravening realization, and every location and successfully compiled program there, reaching that location under the radii and distances of the chosen map implies every row inequality at the program's geometric column values, evaluated on that location's face list. Third, for every index, decoded list, decoded tree, syntactic leaf location and successfully compiled program there, a rational vector indexed by its rows exists such that , for each column, and . The third claim includes geometrically unreachable leaves. It provides existential certificates rather than a displayed list of certificate vectors. The geometric implication can be vacuous in the absence of a contravening realization or guarded path, while successful compilation and certificates remain required at every syntactic leaf. This bundle defines seven propositions, without proving any of them. Milestone 1 says every packing extends to a saturated packing and both have finite open-ball intersections at every center and every real radius, with the original count at most the extension's count. Milestone 2 is . Milestone 3 says that and the universal annulus bound for every finite packing imply the finite-container condition for every saturated packing. Milestone 4 says implies both contravention extraction and tame realization as expanded here. Milestone 5 asserts archive well-formedness and that every tame hypermap is represented by an archived list either directly or after taking its opposite. Milestone 6 says implies the conjunction of the three LP archive obligations. Milestone 7 is the same universal annulus bound. The implications do not assert their premises; the conjunction in Milestone 4 requires both conclusions, and no nonemptiness or existence of a violating configuration is silently added.
Confirmed by the mission captain (proposal self-audit).
Confirmed by the moderator at approval.