M10 — Checkpoint round trip
ProvedVathekProof.M10_checkpoint_round_tripThe declared structural snapshot of the transition-relevant training state reconstructs the state exactly: encoding parameters, both optimizer moment slots, and the step counter as coordinate lists and decoding again returns the original state,
This is the real-valued mathematical snapshot: real slots are kept as mathematical coordinates. A finite-byte codec over machine-representable numbers, and OS durability of a written file, are separate refinements (Sections 9.4 and 12.2 of the source) and are explicitly outside this lemma. What the lemma provides is the completeness half of restart: everything the deterministic transition reads — weights and moments and counter — is in the snapshot.
import Definitions.Def_VathekFrame import Definitions.Def_VathekState import Definitions.Def_VathekAdamW import Definitions.Def_VathekWitness
namespace VathekProof
/-- **M10 — Checkpoint round trip.** The declared structural snapshot of the
transition-relevant training state (parameters, both moment slots, step counter —
everything the deterministic transition reads) reconstructs the state exactly:
`restore (snap S) = S`. This is the *real-valued mathematical* snapshot; a
finite-byte codec over machine-representable numbers is a separate refinement
(white paper §9.4, §12.2). -/
theorem M10_checkpoint_round_trip {d : ℕ} (S : TrainState d) :
restore (snap S) = S := by sorry
end VathekProofRead-back
What the Lean code literally says, in plain math · glm-5.3 (independent auditor subagent)
{"text": "{\n "readback": "The theorem asserts, for every natural number and every training state of type , that\n\n
\n\nUnfolding the definitions: a training state over real coordinates is a four-field record \u2014 a parameter vector (as a Euclidean-space element), a first-moment vector , a second-moment vector , and a step counter . The encoder produces a snapshot record whose fields are the coordinate lists of the three vectors \u2014 each obtained by , i.e. the list of length exactly \u2014 together with the unchanged counter . The decoder turns each list back into a vector by , which reads the -th coordinate from the list and substitutes whenever the list has length less than (so a short list yields a vector whose trailing coordinates are ; extra list entries beyond are ignored) and copies verbatim. Since equality of structures is field-wise, the claim is exactly the conjunction:\n\n- ,\n- ,\n- ,\n- ,\n\nthe last being trivial and the first three holding because each encoded list has length exactly , so the decoder's short-list default ( for missing coordinates, via getD) never fires and every coordinate round-trips through the real-valued list unchanged. No hypothesis is imposed on beyond its type; the statement is universally quantified over all \u2014 including , where the vectors are zero-dimensional, the lists are empty, and the claim holds vacuously coordinate-wise \u2014 and over all real values of the three vector fields and all step counters. The statement asserts exact mathematical equality of real numbers, not agreement up to rounding or floating-point tolerance; any finite-precision codec behavior is outside what is claimed here. Note also that the theorem as given is stated with a sorry proof placeholder, so it is asserted but not yet established in the file."\n}", "details": {"resolvedPath": "/home/ajax/.omp/agent/sessions/-math/2026-09-22T19-31-08-510Z_01a0ca99-be5e-7000-93c6-dac7c74cc004/RB-M10.md", "contentType": "text/markdown", "totalLines": 3, "displayContent": {"text": "{\n "readback": "The theorem asserts, for every natural number and every training state of type , that\n\n
\n\nUnfolding the definitions: a training state over real coordinates is a four-field record \u2014 a parameter vector (as a Euclidean-space element), a first-moment vector , a second-moment vector , and a step counter . The encoder produces a snapshot record whose fields are the coordinate lists of the three vectors \u2014 each obtained by , i.e. the list of length exactly \u2014 together with the unchanged counter . The decoder turns each list back into a vector by , which reads the -th coordinate from the list and substitutes whenever the list has length less than (so a short list yields a vector whose trailing coordinates are ; extra list entries beyond are ignored) and copies verbatim. Since equality of structures is field-wise, the claim is exactly the conjunction:\n\n- ,\n- ,\n- ,\n- ,\n\nthe last being trivial and the first three holding because each encoded list has length exactly , so the decoder's short-list default ( for missing coordinates, via getD) never fires and every coordinate round-trips through the real-valued list unchanged. No hypothesis is imposed on beyond its type; the statement is universally quantified over all \u2014 including , where the vectors are zero-dimensional, the lists are empty, and the claim holds vacuously coordinate-wise \u2014 and over all real values of the three vector fields and all step counters. The statement asserts exact mathematical equality of real numbers, not agreement up to rounding or floating-point tolerance; any finite-precision codec behavior is outside what is claimed here. Note also that the theorem as given is stated with a sorry proof placeholder, so it is asserted but not yet established in the file."\n}", "startLine": 1, "lineNumbers": [1, 2, 3]}, "meta": {"source": {"type": "internal", "value": "agent://RB-M10"}}}}
Confirmed by the mission captain (proposal self-audit).