Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in
← Collections

The OR Formalization Drive

Help us formalize the operations research literature in Lean.

653 completed missions

Missions

221–240 of 653
OpenCompletedAll
🏆Completed
Convex OptimizationLinear algebraNumerical Analysis+2·Captain: mikedeng1

Robust Solutions to Least-Squares Problems with Uncertain Data II: Robust Least Squares as Tikhonov RegularizationResearch Paper

Motivation

Least squares fits a linear model Ax≃bAx \simeq bAx≃b by minimizing ∥Ax−b∥\|Ax - b\|∥Ax−b∥, and its solution can be extremely sensitive to errors in the data (A,b)(A, b)(A,b) when AAA is ill-conditioned. The standard remedy is Tikhonov regularization (ridge regression): minimize ∥Ax−b∥2+μ∥x∥2\|Ax - b\|^2 + \mu\|x\|^2∥Ax−b∥2+μ∥x∥2, whose solution x=(A⊤A+μI)−1A⊤bx = (A^\top A + \mu I)^{-1}A^\top bx=(A⊤A+μI)−1A⊤b is stable but depends on a parameter μ>0\mu > 0μ>0 that must be chosen by some external rule.

El Ghaoui and Lebret (SIAM J. Matrix Anal. Appl. 18(4), 1997) proposed instead to take the uncertainty in (A,b)(A, b)(A,b) seriously: the robust least-squares (RLS) solution minimizes the worst-case residual over all perturbations [ΔA Δb][\Delta A\ \Delta b][ΔA Δb] of Frobenius norm at most ρ\rhoρ. Their Theorem 3.1 shows that for ρ=1\rho = 1ρ=1 this worst-case residual equals ∥Ax−b∥+∥x∥2+1\|Ax - b\| + \sqrt{\|x\|^2 + 1}∥Ax−b∥+∥x∥2+1​ and that its minimization is the second-order cone program (15). Theorem 3.2, the subject of this mission, reads off the optimal solution: it is a Tikhonov-regularized solution, and the regularization parameter is not a free choice but is fixed by the data. This gives a principled answer to the question of how to choose μ\muμ, and it is the reason the paper describes RLS as "a Tikhonov regularization procedure" with "a rigorous way to compute the regularization parameter" (abstract, p. 1035).

A closely related model for least squares with bounded data uncertainty was developed at the same time by Chandrasekaran, Golub, Gu and Sayed; the paper notes that their preliminary draft (its reference [5]) gives a solution to the unstructured RLS problem similar to that of §3.2 (pp. 1036–1037).

Setting

Throughout, A∈Rn×mA \in \mathbb R^{n\times m}A∈Rn×m, b∈Rnb \in \mathbb R^nb∈Rn, x∈Rmx \in \mathbb R^mx∈Rm, and every vector norm is Euclidean, ∥v∥=∑ivi2\|v\| = \sqrt{\sum_i v_i^2}∥v∥=∑i​vi2​​. For x∈Rmx \in \mathbb R^mx∈Rm, [x;1]∈Rm+1[x; 1] \in \mathbb R^{m+1}[x;1]∈Rm+1 is xxx with a coordinate 111 appended, so ∥[x;1]∥=∥x∥2+1\|[x;1]\| = \sqrt{\|x\|^2 + 1}∥[x;1]∥=∥x∥2+1​.

The SOCP (15) is the problem, in the variables x∈Rmx \in \mathbb R^mx∈Rm and λ,τ∈R\lambda, \tau \in \mathbb Rλ,τ∈R,

minimize λsubject to∥Ax−b∥≤λ−τ,∥[x;1]∥≤τ.\text{minimize } \lambda \quad\text{subject to}\quad \|Ax - b\| \le \lambda - \tau,\qquad \|[x;1]\| \le \tau.minimize λsubject to∥Ax−b∥≤λ−τ,∥[x;1]∥≤τ.

A triple (x,λ,τ)(x, \lambda, \tau)(x,λ,τ) is optimal for (15) if it is feasible and λ≤λ′\lambda \le \lambda'λ≤λ′ for every feasible (x′,λ′,τ′)(x', \lambda', \tau')(x′,λ′,τ′). Its dual, derived in the paper from the general second-order cone duality of §2.1, is the problem in z∈Rnz \in \mathbb R^nz∈Rn, u∈Rmu \in \mathbb R^mu∈Rm, v∈Rv \in \mathbb Rv∈R

maximize b⊤z−vsubject toA⊤z+u=0,∥z∥≤1,∥[u;v]∥≤1.\text{maximize } b^\top z - v \quad\text{subject to}\quad A^\top z + u = 0,\quad \|z\| \le 1,\quad \|[u; v]\| \le 1.maximize b⊤z−vsubject toA⊤z+u=0,∥z∥≤1,∥[u;v]∥≤1.

The minimum-norm solution of Ax=bAx = bAx=b is a solution xxx with ∥x∥≤∥y∥\|x\| \le \|y\|∥x∥≤∥y∥ for every other solution yyy; when Ax=bAx = bAx=b is consistent it is A†bA^\dagger bA†b, with A†A^\daggerA† the Moore–Penrose pseudoinverse.

In the Lean development these objects are IsSOCPFeasible, IsSOCPOptimal, IsDualFeasible, dualObjective, IsDualOptimal and IsMinNormSolution, in the namespace RobustLS.Tikhonov, with the Euclidean norm eucNorm.

Formalization targets

Goal: Theorem 3.2 with the identity for μ\muμ

Let (x,λ,τ)(x, \lambda, \tau)(x,λ,τ) be optimal for (15) and set μ=(λ−τ)/τ\mu = (\lambda - \tau)/\tauμ=(λ−τ)/τ. Then

x={(μI+A⊤A)−1A⊤bif μ>0,A†belse,andμ=∥Ax−b∥∥x∥2+1.x = \begin{cases} (\mu I + A^\top A)^{-1}A^\top b & \text{if } \mu > 0,\\ A^\dagger b & \text{else,}\end{cases}\qquad\text{and}\qquad \mu = \frac{\|Ax - b\|}{\sqrt{\|x\|^2 + 1}}.x={(μI+A⊤A)−1A⊤bA†b​if μ>0,else,​andμ=∥x∥2+1​∥Ax−b∥​.

By Theorem 3.1 (the subject of the companion mission I of this series), the xxx-part of an optimal point of (15) is the RLS solution for ρ=1\rho = 1ρ=1, so this is formula (17) of the paper. The identity for μ\muμ is the final display of the paper's proof and is the claim in the mission's title.

Milestones (in the order of the paper's proof, p. 1041)

  1. Both (15) and its dual have optimal points.
  2. If λ=τ\lambda = \tauλ=τ at the optimum, then Ax=bAx = bAx=b and λ=τ=∥x∥2+1\lambda = \tau = \sqrt{\|x\|^2 + 1}λ=τ=∥x∥2+1​.
  3. In that case xxx is the minimum-norm solution of Ax=bAx = bAx=b, x=A†bx = A^\dagger bx=A†b.
  4. Eq. (18): for λ>τ\lambda > \tauλ>τ, primal and dual optimal values coincide,
∥Ax−b∥+∥[x;1]∥=λ=b⊤z−v=−(Ax−b)⊤z−[x⊤ 1][−A⊤zv].\|Ax - b\| + \|[x;1]\| = \lambda = b^\top z - v = -(Ax-b)^\top z - [x^\top\ 1]\begin{bmatrix} -A^\top z\\ v\end{bmatrix}.∥Ax−b∥+∥[x;1]∥=λ=b⊤z−v=−(Ax−b)⊤z−[x⊤ 1][−A⊤zv​].
  1. The dual optimal point is z=−(Ax−b)/∥Ax−b∥z = -(Ax - b)/\|Ax - b\|z=−(Ax−b)/∥Ax−b∥, [u;v]=−[x;1]/∥x∥2+1[u; v] = -[x; 1]/\sqrt{\|x\|^2 + 1}[u;v]=−[x;1]/∥x∥2+1​.
  2. Substituting into A⊤z+u=0A^\top z + u = 0A⊤z+u=0: x=(A⊤A+μI)−1A⊤bx = (A^\top A + \mu I)^{-1}A^\top bx=(A⊤A+μI)−1A⊤b with μ=(λ−τ)/τ=∥Ax−b∥/∥x∥2+1\mu = (\lambda - \tau)/\tau = \|Ax - b\|/\sqrt{\|x\|^2 + 1}μ=(λ−τ)/τ=∥Ax−b∥/∥x∥2+1​.

A further item states Remark 3.1: for λ>τ\lambda > \tauλ>τ, xxx is the unique minimizer of the weighted residual ∥[A;I;0]y−[b;0;1]∥Θ\big\|[A; I; 0]y - [b; 0; 1]\big\|_\Theta​[A;I;0]y−[b;0;1]​Θ​ with Θ=diag((λ−τ)I,τI,τ)\Theta = \mathbf{diag}((\lambda-\tau)I, \tau I, \tau)Θ=diag((λ−τ)I,τI,τ) and ∥r∥Θ=∥Θ−1/2r∥\|r\|_\Theta = \|\Theta^{-1/2} r\|∥r∥Θ​=∥Θ−1/2r∥.

Significance

The result. Theorem 3.2 turns a robust optimization problem into a familiar linear-algebra object. It says that the robust solution always lies on the Tikhonov path {(A⊤A+μI)−1A⊤b:μ>0}\{(A^\top A + \mu I)^{-1}A^\top b : \mu > 0\}{(A⊤A+μI)−1A⊤b:μ>0} or at its endpoint A†bA^\dagger bA†b, and it identifies the point on the path through a fixed-point equation relating μ\muμ to the residual and the size of the solution. The paper builds on this in §3.3 (a one-dimensional search for μ\muμ via the SVD) and in §6 (continuity of the RLS solution in the data), and Remark 3.1 is the template for the weighted least-squares interpretation of the structured and linear-fractional problems in §5.

Formalizing it. The theorem is proved in the paper; to our knowledge it has no machine-checked proof. The mission produces a formal account of second-order cone duality for a concrete program, the characterization of the optimal dual point by equality in the Cauchy–Schwarz inequality, and the minimum-norm characterization of A†bA^\dagger bA†b, all in terms of explicit Euclidean norms on Fin k → ℝ.

Difficulty

The paper's proof rests on strong duality for (15) ("both primal and dual problems are strictly feasible"), which it cites from the SOCP literature rather than proving; Mathlib has no second-order cone duality, so this step is the main gap. The degenerate case λ=τ\lambda = \tauλ=τ also needs care: there ∥Ax−b∥=0\|Ax - b\| = 0∥Ax−b∥=0, the residual term is not differentiable at the optimum, and the conclusion changes from a regularized inverse to a pseudoinverse. A statement that only handles the case Ax≠bAx \ne bAx=b, or that assumes the matrix A⊤A+μIA^\top A + \mu IA⊤A+μI invertible without deriving it from μ>0\mu > 0μ>0, misses part of the theorem.

Formalization scope

  • Normalization. The paper states Theorem 3.2 for ρ=1\rho = 1ρ=1 ("we take ρ=1\rho = 1ρ=1 in what follows", p. 1039) and obtains general ρ\rhoρ by the scaling φ(A,b,ρ)=ρ φ(A/ρ,b/ρ,1)\varphi(A, b, \rho) = \rho\,\varphi(A/\rho, b/\rho, 1)φ(A,b,ρ)=ρφ(A/ρ,b/ρ,1). Only the ρ=1\rho = 1ρ=1 statement is formalized.
  • The RLS solution. The perturbation model is not used here: all statements are about optimal points of (15). That the xxx-part of such a point is the RLS solution is Theorem 3.1 (mission I), and it is recalled in prose only.
  • Norms. Vectors are Fin k → ℝ; the Euclidean norm is the explicit eucNorm v = √(∑ vᵢ²) (Mathlib's ‖·‖ on Fin k → ℝ is the sup norm). Stacked vectors [x;1][x;1][x;1] and [u;v][u;v][u;v] are indexed by Fin m ⊕ Unit.
  • Optimality. "Optimal point" means feasible with objective no worse than every feasible point; the minimum and maximum are therefore attained by definition, and milestone 1 guarantees they exist.
  • Pseudoinverse. Mathlib has no matrix pseudoinverse, so A†bA^\dagger bA†b is stated as the minimum-norm solution of Ax=bAx = bAx=b, which is how the proof uses it. The branch "else" is ¬(μ>0)\neg(\mu > 0)¬(μ>0).
  • Inverse. (μI+A⊤A)−1(\mu I + A^\top A)^{-1}(μI+A⊤A)−1 is Mathlib's Matrix.inv; it is used only where μ>0\mu > 0μ>0, where the matrix is positive definite. τ≥1\tau \ge 1τ≥1 at every feasible point, so μ\muμ is well defined without an extra hypothesis.
  • No trivialization. The goal quantifies over optimal points of (15) over the whole feasible set, not over feasible points, and milestone 1 shows the hypothesis is satisfiable for every (A,b)(A, b)(A,b), including n=0n = 0n=0 or m=0m = 0m=0.
  • Weighted norm. For Remark 3.1, ∥r∥Θ\|r\|_\Theta∥r∥Θ​ for the diagonal Θ\ThetaΘ is written as ∑iri2/θi\sqrt{\sum_i r_i^2/\theta_i}∑i​ri2​/θi​​, which equals ∥Θ−1/2r∥\|\Theta^{-1/2}r\|∥Θ−1/2r∥ for positive weights.

Contributions welcome: second-order cone (or general conic) weak and strong duality for finite-dimensional programs, the equality case of Cauchy–Schwarz in the explicit-norm form used here, and a Moore–Penrose pseudoinverse for real matrices with its minimum-norm property. The platform's ConvexOptimization.conic_slater_strong_duality may help with the duality step.

Selected references

  • L. El Ghaoui and H. Lebret, Robust Solutions to Least-Squares Problems with Uncertain Data, SIAM J. Matrix Anal. Appl. 18(4):1035–1064, 1997. https://doi.org/10.1137/S0895479896298130
  • S. Chandrasekaran, G. H. Golub, M. Gu and A. H. Sayed, A new linear least-squares type model for parameter estimation in the presence of data uncertainties, cited as submitted to SIAM J. Matrix Anal. Appl. (reference [5] of the paper).
  • A. N. Tikhonov and V. Y. Arsenin, Solutions of Ill-Posed Problems, Wiley, New York, 1977 (reference [43] of the paper).
  • Y. Nesterov and A. Nemirovskii, Interior-Point Polynomial Algorithms in Convex Programming, SIAM, 1994. https://doi.org/10.1137/1.9781611970791
  • M. S. Lobo, L. Vandenberghe, S. Boyd and H. Lebret, Applications of Second-Order Cone Programming, Linear Algebra Appl. 284:193–228, 1998. https://doi.org/10.1016/S0024-3795(98)10032-0
9 thms2 active usersReviewed
🏆Completed
Algorithmic Game TheoryMachine LearningOperations Research·Captain: mikedeng1

Calibrated Learning and Correlated Equilibrium I: Calibrated Forecasts with Best Responses Converge to the Set of Correlated EquilibriaResearch Paper

Motivation

A correlated equilibrium (Aumann 1974) is a joint distribution over the players' strategy profiles such that no player gains by deviating from the strategy the distribution recommends to them. It is the equilibrium notion that learning dynamics in repeated games most naturally reach, and a basic question in learning in games is which simple rules, played repeatedly, drive the empirical distribution of play to the set of correlated equilibria.

Foster and Vohra (1997) answer this with a hypothesis on forecasts instead of a particular algorithm. Each player forecasts the other's next move and best-responds to the forecast. They only require the forecasts to be calibrated in the sense of Dawid (1982): among the rounds in which a player forecast a given probability vector, the empirical frequencies of the opponent's moves must approach that vector. Their Theorem 1 says that this already forces the empirical joint distribution of play to approach the set of correlated equilibria. The paper uses this to argue that Bayesian players under a common prior, whose forecasts are calibrated by Dawid's theorem, end up playing a correlated equilibrium. That is an alternative to Aumann's (1987) derivation of correlated equilibrium from common priors and rationality.

Timeline:

  • Aumann (1974, 1987) introduces correlated equilibrium and derives it from Bayesian rationality.
  • Dawid (1982) proposes calibration as a minimal requirement on probability forecasts.
  • Foster and Vohra (1997) prove Theorem 1 (this mission) and show that calibrated forecasts exist once the forecaster may randomize.
  • Hart and Mas-Colell (2000) give regret matching, an adaptive procedure with the same limit set.

Setting

A finite two-player game GGG has strategy sets S(1)={0,…,m−1}S(1) = \{0, \dots, m-1\}S(1)={0,…,m−1} and S(2)={0,…,n−1}S(2) = \{0, \dots, n-1\}S(2)={0,…,n−1} and payoff matrices u1,u2:S(1)×S(2)→Ru_1, u_2 : S(1) \times S(2) \to \mathbb{R}u1​,u2​:S(1)×S(2)→R, which the players maximize. A joint distribution DDD is a nonnegative m×nm \times nm×n matrix with entries summing to 111. It is a correlated equilibrium if

∑x,yD(x,y) u1(Φ(x),y)≤∑x,yD(x,y) u1(x,y)for all Φ:S(1)→S(1),\sum_{x,y} D(x,y)\, u_1(\Phi(x), y) \le \sum_{x,y} D(x,y)\, u_1(x,y) \quad \text{for all } \Phi : S(1) \to S(1),x,y∑​D(x,y)u1​(Φ(x),y)≤x,y∑​D(x,y)u1​(x,y)for all Φ:S(1)→S(1),

and symmetrically for player 2. The set of correlated equilibria is π(G)\pi(G)π(G).

The game is played in rounds s=0,1,2,…s = 0, 1, 2, \dotss=0,1,2,…. In round sss player 1 issues a forecast f1(s)f_1(s)f1​(s), a probability vector over S(2)S(2)S(2), and player 2 issues a forecast f2(s)f_2(s)f2​(s) over S(1)S(1)S(1). Each player then plays a best response to its forecast, x(s)=R1(f1(s))x(s) = R_1(f_1(s))x(s)=R1​(f1​(s)) and y(s)=R2(f2(s))y(s) = R_2(f_2(s))y(s)=R2​(f2​(s)). Here R1R_1R1​ and R2R_2R2​ are best-reply functions: R1(p)R_1(p)R1​(p) maximizes ∑ypyu1(⋅,y)\sum_y p_y u_1(\cdot, y)∑y​py​u1​(⋅,y) for every probability vector ppp, and R1R_1R1​ is a fixed function of the forecast alone. This is the paper's standing assumption of a stationary, deterministic tie-breaking rule.

For a forecast sequence fff and the opponent's plays zzz, N(p,t)N(p,t)N(p,t) counts the rounds among the first ttt in which fff forecast ppp. ρ(p,j,t)\rho(p,j,t)ρ(p,j,t) is the fraction of those rounds in which the opponent played jjj, and 000 if there are none. The forecast is calibrated with respect to zzz if for every jjj

∑p∣ρ(p,j,t)−pj∣ N(p,t)t⟶0(t→∞).\sum_p |\rho(p,j,t) - p_j|\, \frac{N(p,t)}{t} \longrightarrow 0 \qquad (t \to \infty).p∑​∣ρ(p,j,t)−pj​∣tN(p,t)​⟶0(t→∞).

The empirical joint distribution Dt(x,y)D_t(x,y)Dt​(x,y) is the fraction of the first ttt rounds in which player 1 played xxx and player 2 played yyy.

Formalization targets

Goal: Theorem 1

If f1f_1f1​ is calibrated with respect to yyy and f2f_2f2​ is calibrated with respect to xxx, then

min⁡D∈π(G) max⁡x∈S(1), y∈S(2)∣Dt(x,y)−D(x,y)∣⟶0(t→∞).\min_{D \in \pi(G)} \ \max_{x \in S(1),\, y \in S(2)} |D_t(x,y) - D(x,y)| \longrightarrow 0 \qquad (t \to \infty).D∈π(G)min​ x∈S(1),y∈S(2)max​∣Dt​(x,y)−D(x,y)∣⟶0(t→∞).

The goal fixes no rate and no particular forecasting method: it asserts only convergence of DtD_tDt​ to the set π(G)\pi(G)π(G), for every calibrated forecast.

Milestones: the steps of the proof (pp. 44–45)

  1. DtD_tDt​ lies in the simplex for t≥1t \ge 1t≥1.
  2. For each x∈S(1)x \in S(1)x∈S(1), the set Mb(x)M_b(x)Mb​(x) of mixtures to which xxx is a best response is closed and convex.
  3. The mixtures Mp(x)M_p(x)Mp​(x) at which player 1 actually plays xxx satisfy Mp(x)⊆Mb(x)M_p(x) \subseteq M_b(x)Mp​(x)⊆Mb​(x).
  4. The identity writing Dt(x,y)D_t(x,y)Dt​(x,y) as a forecast-weighted term plus a calibration error.
  5. Calibration makes the error term vanish.
  6. The weighted average of the forecasts at which player 1 plays xxx lies in Mb(x)M_b(x)Mb​(x).
  7. For a convergent subsequence Dti→DD_{t_i} \to DDti​​→D, every row of DDD with positive mass, normalized, lies in Mb(x)M_b(x)Mb​(x).
  8. Every subsequential limit of DtD_tDt​ is a correlated equilibrium.

Further result: matching pennies (p. 46)

With the constant forecast (1/2,1/2)(1/2, 1/2)(1/2,1/2) and the non-stationary tie-break "heads on even rounds, tails on odd rounds", both forecasts are calibrated and every play is a best reply, yet DtD_tDt​ does not approach π(G)\pi(G)π(G). The stationarity assumption cannot be dropped.

Significance

The result. Theorem 1 separates what learning needs from how it is achieved. Any forecasting procedure that is calibrated, combined with myopic best responses, yields correlated equilibrium behaviour in the long run. The paper's Theorem 3 constructs a randomized calibrated forecaster, so the theorem gives an uncoupled learning procedure for correlated equilibrium, one that needs no knowledge of the opponent's payoffs. The converse direction, that every correlated equilibrium arises this way for almost every game, is the paper's Theorem 2 (a separate mission of this series).

Formalizing it. The theorem is proved in the paper and has no machine-checked proof on Prove2Me or, to the knowledge of this mission, elsewhere. The platform's existing correlated-equilibrium results (the Algorithmic Game Theory swap-regret development, AGT.swap_regret_correlated_equilibrium) reach correlated equilibrium through swap regret of mixed strategies, a different hypothesis and a different object. This mission adds a formal notion of calibration and the convergence argument, both reusable for the paper's Theorems 2 and 3 and for later work on calibration and learning.

Difficulty

The obvious reading of calibration is that each player's forecast converges to the opponent's empirical distribution; if that held, best responses to it would give convergence. It does not hold. Calibration constrains the opponent's frequencies only conditionally on the forecast issued, and the forecasts need not converge at all. What must be shown is a statement about the conditional distributions of the joint play given each strategy of player 1, while the set of forecasts issued keeps growing. Rows of the limit with zero mass carry no conditional distribution. The "min → 0" form also asks for more than a property of limit points: it is a uniform statement about all large ttt.

Formalization scope

  • Strategies are Fin m and Fin n; payoffs are real matrices; forecasts are real vectors required to be probability vectors in every round.
  • A correlated equilibrium is the joint-distribution form of p. 44 (the correlated strategy on a finite probability space is represented by its law). It is the ε=0\varepsilon = 0ε=0, two-player, payoff (not cost) instance of the published AGT.IsCorrelatedEquilibrium, restated rather than imported.
  • The stationary deterministic tie-break is modelled by arbitrary best-reply functions RiR_iRi​ of the forecast. They do not depend on the round, and the statements quantify over all of them, which includes the lowest-index rule.
  • Forecasts are sequences fi:N→Rkf_i : \mathbb{N} \to \mathbb{R}^kfi​:N→Rk. The theorem uses only the realized forecasts, and every sequence is realized by a rule reading the round number from the history.
  • Rounds are indexed from 000: "the first ttt rounds" are 0,…,t−10, \dots, t-10,…,t−1. D0=0D_0 = 0D0​=0 by Lean's division convention; only t≥1t \ge 1t≥1 and limits are used.
  • The calibration sum runs over the forecasts issued in the first ttt rounds, which is the paper's sum over all ppp with its zero terms removed. ρ(p,j,t)=0\rho(p,j,t) = 0ρ(p,j,t)=0 when N(p,t)=0N(p,t) = 0N(p,t)=0, as on the page.
  • "min … → 0" is stated as: for every ε>0\varepsilon > 0ε>0, eventually some D∈π(G)D \in \pi(G)D∈π(G) is within ε\varepsilonε of DtD_tDt​ in every coordinate. The two forms are equivalent because π(G)\pi(G)π(G) is compact and nonempty. The formalization avoids an infimum over π(G)\pi(G)π(G), which Lean would evaluate to 000 on an empty set.
  • A statement that drops the best-reply property, the probability-vector condition on forecasts, or the stationarity of RiR_iRi​ is not Theorem 1: the matching pennies example shows the last one is essential. Swapping the calibration hypotheses (player 1's forecast calibrated against player 1's own plays) type-checks when m=nm = nm=n and is not the theorem.
  • Only the two-player case is claimed. The paper says the results "generalize easily to the nnn-person case" without proof.

Proofs of any milestone, and reusable lemmas about calibration scores and compactness of the simplex of joint distributions, are welcome.

Selected references

  • D. P. Foster, R. V. Vohra, Calibrated learning and correlated equilibrium, Games and Economic Behavior 21 (1997) 40–55. https://doi.org/10.1006/game.1997.0595
  • R. J. Aumann, Subjectivity and correlation in randomized strategies, Journal of Mathematical Economics 1 (1974) 67–96. https://doi.org/10.1016/0304-4068(74)90037-8
  • R. J. Aumann, Correlated equilibrium as an expression of Bayesian rationality, Econometrica 55 (1987) 1–18. https://doi.org/10.2307/1911154
  • A. P. Dawid, The well-calibrated Bayesian, Journal of the American Statistical Association 77 (1982) 605–610. https://doi.org/10.1080/01621459.1982.10477856
  • S. Hart, A. Mas-Colell, A simple adaptive procedure leading to correlated equilibrium, Econometrica 68 (2000) 1127–1150. https://doi.org/10.1111/1468-0262.00153
15 thms4 active usersReviewed
🏆Completed
Convex OptimizationLinear algebraNumerical Analysis+2·Captain: mikedeng1

Robust Solutions to Least-Squares Problems with Uncertain Data III: Structured Robust Least Squares Is Solved Exactly by a Semidefinite ProgramResearch Paper

Motivation

Least squares fits a model Ax≈bAx \approx bAx≈b as if the data (A,b)(A, b)(A,b) were exact. In practice they are measured, rounded or estimated, and the least-squares solution can be very sensitive to such errors. El Ghaoui and Lebret (SIAM J. Matrix Anal. Appl. 18(4), 1997) proposed to treat the errors as deterministic, unknown but bounded, and to choose xxx minimizing the worst-case residual over all admissible data. For unstructured perturbations of [A b][A\ b][A b] bounded in Frobenius norm this leads to a second-order cone program (missions I and II of this series).

In many applications the perturbations have a known structure: a Toeplitz matrix stays Toeplitz, a parameter enters several entries at once, or only some entries are uncertain. An unstructured bound then over-estimates the worst case. The paper's §4 treats perturbations that are affine in a parameter vector δ\deltaδ bounded in Euclidean norm, and shows that the resulting structured robust least-squares (SRLS) problem is still solved exactly, now by a semidefinite program (SDP). This model of uncertainty (an ellipsoid of affinely parametrized data) is the one later adopted as the basic uncertainty set of robust optimization; see Ben-Tal and Nemirovski, Math. Oper. Res. 23(4), 1998.

Setting

Vectors carry the Euclidean norm ∥v∥=vTv\|v\| = \sqrt{v^Tv}∥v∥=vTv​. Given matrices A0,A1,…,Ap∈Rn×mA_0, A_1, \dots, A_p \in \mathbb{R}^{n\times m}A0​,A1​,…,Ap​∈Rn×m and vectors b0,b1,…,bp∈Rnb_0, b_1, \dots, b_p \in \mathbb{R}^nb0​,b1​,…,bp​∈Rn, define for every δ∈Rp\delta \in \mathbb{R}^pδ∈Rp

A(δ)=A0+∑i=1pδiAi,b(δ)=b0+∑i=1pδibi.\mathbf A(\delta) = A_0 + \sum_{i=1}^p \delta_i A_i, \qquad \mathbf b(\delta) = b_0 + \sum_{i=1}^p \delta_i b_i .A(δ)=A0​+i=1∑p​δi​Ai​,b(δ)=b0​+i=1∑p​δi​bi​.

For ρ≥0\rho \ge 0ρ≥0 and x∈Rmx \in \mathbb{R}^mx∈Rm the structured worst-case residual is

rS(A,b,ρ,x)=max⁡∥δ∥≤ρ∥A(δ)x−b(δ)∥,r_S(\mathbf A, \mathbf b, \rho, x) = \max_{\|\delta\| \le \rho} \|\mathbf A(\delta)x - \mathbf b(\delta)\|,rS​(A,b,ρ,x)=∥δ∥≤ρmax​∥A(δ)x−b(δ)∥,

and xxx is an SRLS solution if it minimizes rS(A,b,ρ,⋅)r_S(\mathbf A, \mathbf b, \rho, \cdot)rS​(A,b,ρ,⋅) over Rm\mathbb{R}^mRm. The paper takes ρ=1\rho = 1ρ=1 throughout §4 and writes rS(A,b,x)r_S(\mathbf A, \mathbf b, x)rS​(A,b,x).

For fixed xxx let M(x)=[A1x−b1 ⋯ Apx−bp]∈Rn×pM(x) = [A_1x - b_1\ \cdots\ A_px - b_p] \in \mathbb{R}^{n\times p}M(x)=[A1​x−b1​ ⋯ Ap​x−bp​]∈Rn×p and

F=M(x)TM(x),g=M(x)T(A0x−b0),h=∥A0x−b0∥2.F = M(x)^TM(x), \qquad g = M(x)^T(A_0x - b_0), \qquad h = \|A_0x - b_0\|^2 .F=M(x)TM(x),g=M(x)T(A0​x−b0​),h=∥A0​x−b0​∥2.

Since A(δ)x−b(δ)=(A0x−b0)+M(x)δ\mathbf A(\delta)x - \mathbf b(\delta) = (A_0x - b_0) + M(x)\deltaA(δ)x−b(δ)=(A0​x−b0​)+M(x)δ, the squared residual at δ\deltaδ is the quadratic function h+2gTδ+δTFδh + 2g^T\delta + \delta^TF\deltah+2gTδ+δTFδ. Finally, for scalars λ,τ\lambda, \tauλ,τ,

F(λ,τ)=[λ−τ−h−gT−gτI−F].\mathcal F(\lambda, \tau) = \begin{bmatrix} \lambda - \tau - h & -g^T \\ -g & \tau I - F \end{bmatrix}.F(λ,τ)=[λ−τ−h−g​−gTτI−F​].

Formalization targets

Goal: Theorem 4.2

With p≥1p \ge 1p≥1 and ρ=1\rho = 1ρ=1, consider the SDP in (λ,τ,x)(\lambda, \tau, x)(λ,τ,x)

minimize λsubject to[λ−τ0(A0x−b0)T0τIM(x)TA0x−b0M(x)I]⪰0.(32)\text{minimize } \lambda \quad \text{subject to} \quad \begin{bmatrix} \lambda - \tau & 0 & (A_0x - b_0)^T \\ 0 & \tau I & M(x)^T \\ A_0x - b_0 & M(x) & I \end{bmatrix} \succeq 0. \tag{32}minimize λsubject to​λ−τ0A0​x−b0​​0τIM(x)​(A0​x−b0​)TM(x)TI​​⪰0.(32)

The goal states that (a) for all xxx and λ\lambdaλ, some τ\tauτ makes (λ,τ,x)(\lambda, \tau, x)(λ,τ,x) feasible if and only if rS(A,b,x)2≤λr_S(\mathbf A, \mathbf b, x)^2 \le \lambdarS​(A,b,x)2≤λ; and (b) (λ,τ,x)(\lambda, \tau, x)(λ,τ,x) is optimal for (32) if and only if xxx is an SRLS solution, λ=rS(A,b,x)2\lambda = r_S(\mathbf A, \mathbf b, x)^2λ=rS​(A,b,x)2, and (λ,τ,x)(\lambda, \tau, x)(λ,τ,x) is feasible. This is the precise content of the paper's "the SRLS can be solved by computing an optimal solution of (32)".

Milestones

  1. Lemma 2.1 (S-procedure), in two items: the multiplier condition is sufficient for every ppp; for p=1p = 1p=1 it is also necessary when F1(ζ0)>0F_1(\zeta_0) > 0F1​(ζ0​)>0 for some ζ0\zeta_0ζ0​.
  2. Eq. (28): rS(A,b,x)2=max⁡δTδ≤1[1;δ]T[hgTgF][1;δ]r_S(\mathbf A, \mathbf b, x)^2 = \max_{\delta^T\delta \le 1} [1;\delta]^T \begin{bmatrix} h & g^T \\ g & F\end{bmatrix} [1;\delta]rS​(A,b,x)2=maxδTδ≤1​[1;δ]T[hg​gTF​][1;δ].
  3. Eq. (29): for λ≥0\lambda \ge 0λ≥0, that quadratic form is ≤λ\le \lambda≤λ on the unit ball if and only if F(λ,τ)⪰0\mathcal F(\lambda, \tau) \succeq 0F(λ,τ)⪰0 for some τ\tauτ.
  4. Theorem 4.1, first assertion: rS(A,b,x)2=min⁡{λ:∃τ, F(λ,τ)⪰0}r_S(\mathbf A, \mathbf b, x)^2 = \min\{\lambda : \exists \tau,\ \mathcal F(\lambda, \tau) \succeq 0\}rS​(A,b,x)2=min{λ:∃τ, F(λ,τ)⪰0}, the minimum attained.
  5. §4.2, Schur-complement step: the matrix of (32) is positive semidefinite if and only if F(λ,τ)\mathcal F(\lambda, \tau)F(λ,τ) is.

Significance

The result shows that a min–max problem over a nonconvex worst case (the inner problem maximizes a convex quadratic over a ball) is equivalent to a single convex SDP whose size is linear in nnn, mmm and ppp, and hence solvable in polynomial time by interior-point methods. It covers as special cases the unstructured problem of §3, least squares with uncertainty in selected entries, and Toeplitz or otherwise patterned perturbations. The exactness contrasts with the next section of the paper, where the linear-fractional and ℓ∞\ell_\inftyℓ∞​-bounded versions are in general only bounded from above, or shown NP-hard.

The result is proved in the paper; to the best of current knowledge it has not been formalized. The platform already has the one-constraint S-procedure (ConvexOptimization.s_procedure, proved, in a different sign and block convention); this mission adds the robust least-squares objects, the reduction to the S-procedure, the Schur-complement step, and the optimal-solution correspondence of Theorem 4.2. The worst-case residual and SDP (32) definitions are reusable by later robust-regression missions.

Difficulty

The obvious approach is to compute the inner maximum directly. The function δ↦h+2gTδ+δTFδ\delta \mapsto h + 2g^T\delta + \delta^TF\deltaδ↦h+2gTδ+δTFδ is convex, so its maximum over the unit ball is attained on the boundary, but it is not given by any closed-form expression in general, and maximizing a convex function is not a convex problem. Exactness therefore rests on the lossless S-procedure for one quadratic constraint, a nonconvex duality statement that fails for two or more constraints; the sufficient direction alone only yields an upper bound.

A second point is passing from "for fixed xxx" (Theorem 4.1) to "optimal over xxx" (Theorem 4.2): F(λ,τ)\mathcal F(\lambda, \tau)F(λ,τ) is quadratic in xxx, and only the Schur-complement lift (32) is jointly affine in (λ,τ,x)(\lambda, \tau, x)(λ,τ,x). The correspondence of optimal solutions must then be checked in both directions, including that the optimal λ\lambdaλ is the squared residual and not the residual.

Formalization scope

  • Data are A0 : Matrix (Fin n) (Fin m) ℝ, A : Fin p → Matrix (Fin n) (Fin m) ℝ, b0 : Fin n → ℝ, b : Fin p → Fin n → ℝ; A i is the paper's Ai+1A_{i+1}Ai+1​ (0-based index). Vectors live in Fin k → ℝ with the Euclidean norm written out as ∑ivi2\sqrt{\sum_i v_i^2}∑i​vi2​​, never Mathlib's sup norm.
  • The maximum defining rSr_SrS​ is sSup of the set of attained residuals over the closed ball; for ρ≥0\rho \ge 0ρ≥0 this set is nonempty and bounded, so sSup is the true maximum. The theorems use ρ=1\rho = 1ρ=1, as the paper does; the paper derives general ρ\rhoρ by scaling and that is not stated here.
  • Block matrices are Matrix.fromBlocks in the printed order (scalar block first: Unit ⊕ Fin p; for (32), (Unit ⊕ Fin p) ⊕ Fin n). "⪰0\succeq 0⪰0" is Mathlib's PosSemidef, which includes symmetry; all matrices here are symmetric by construction.
  • p≥1p \ge 1p≥1 is assumed in (29), Theorem 4.1 and Theorem 4.2, although the paper does not state it: for p=0p = 0p=0 the block τI\tau IτI is empty, τ\tauτ is unconstrained, every λ\lambdaλ is feasible and both SDPs lose their meaning. Eq. (28), Lemma 2.1 and the Schur-complement step hold for every ppp and are stated without it.
  • Optimality in (32) is stated as feasibility plus λ≤λ′\lambda \le \lambda'λ≤λ′ for every feasible (λ′,τ′,x′)(\lambda', \tau', x')(λ′,τ′,x′). A formalization that only proves existence of some feasible τ\tauτ, or only an inequality between the optimal values, is weaker than Theorem 4.2 and does not close the goal.
  • Theorem 4.1's second and third assertions (the one-dimensional reformulation (30)–(31) and the worst-case perturbation) are not included: they use the notion "(F,g)(F, g)(F,g)-controllable", which the paper does not define.
  • Useful infrastructure: Mathlib's Schur-complement lemmas (Matrix.PosSemidef.fromBlocks₂₂ and relatives in LinearAlgebra.Matrix.SchurComplement); the platform's ConvexOptimization.s_procedure and ConvexOptimization.single_constraint_quadratic_strong_duality with their definitions ConvexOptimization_quadraticForms, included as reference items. A bridge lemma between the platform's block convention and this mission's is a welcome contribution, as is a general-ρ\rhoρ version.

Selected references

  • L. El Ghaoui and H. Lebret, Robust Solutions to Least-Squares Problems with Uncertain Data, SIAM J. Matrix Anal. Appl. 18(4):1035–1064, 1997. https://doi.org/10.1137/S0895479896298130
  • S. Boyd, L. El Ghaoui, E. Feron and V. Balakrishnan, Linear Matrix Inequalities in System and Control Theory, SIAM, 1994 (the S-procedure, p. 24). https://doi.org/10.1137/1.9781611970777
  • A. Ben-Tal and A. Nemirovski, Robust Convex Optimization, Math. Oper. Res. 23(4):769–805, 1998. https://doi.org/10.1287/moor.23.4.769
  • I. Pólik and T. Terlaky, A Survey of the S-Lemma, SIAM Review 49(3):371–418, 2007. https://doi.org/10.1137/S003614450444614X
11 thms3 active usersReviewed
🏆Completed
Linear OptimizationNumber TheoryOperations Research+1·Captain: mikedeng1

An Application of Simultaneous Diophantine Approximation in Combinatorial Optimization: A Small Integral Objective with the Same Optimal Solutions and Dual BasesResearch Paper

Motivation

An algorithm for linear programming is strongly polynomial if the number of arithmetic operations it performs is bounded by a polynomial in the dimension of the problem alone (the number of variables and constraints), independently of the bit lengths of the numbers in the input. Many combinatorial optimization problems are linear programs over polyhedra of the form P={x∈Rn:Ax≤b}P = \{x \in \mathbb{R}^n : Ax \le b\}P={x∈Rn:Ax≤b} whose constraint matrix AAA has entries 0,+1,−10, +1, -10,+1,−1, but whose objective vector www is an arbitrary rational weight vector. Polynomial-time algorithms for such problems (for instance the ellipsoid-based algorithms of Grötschel, Lovász and Schrijver for maximum-weight cliques in perfect graphs, submodular flows, and matroid polyhedra) have running times that depend on the length of www.

Frank and Tardos (Combinatorica 1987) remove this dependence once and for all: they replace www by an integral objective w~\tilde ww~ whose entries have O(n3)O(n^3)O(n3) bits and which has exactly the same optimal solutions and the same optimal dual bases as www over every such polyhedron. Any algorithm that is polynomial in nnn and in the length of the objective then becomes strongly polynomial. The tool is simultaneous Diophantine approximation, used through the lattice-basis-reduction algorithm of Lenstra, Lenstra and Lovász (Math. Ann. 1982). The technique extends Tardos's strongly polynomial algorithm for linear programs with small constraint matrices (Oper. Res. 1986), which applies only to explicitly given programs.

Setting

For x∈Rnx \in \mathbb{R}^nx∈Rn write ∥x∥∞=max⁡j∣x(j)∣\|x\|_\infty = \max_j |x(j)|∥x∥∞​=maxj​∣x(j)∣ and ∥x∥1=∑j∣x(j)∣\|x\|_1 = \sum_j |x(j)|∥x∥1​=∑j​∣x(j)∣; sign⁡\operatorname{sign}sign takes the values −1,0,+1-1, 0, +1−1,0,+1.

Decomposition. Fix a positive integer NNN. A decomposition of w∈Rnw \in \mathbb{R}^nw∈Rn is an expression

w=∑i=1kλivi,λi>0, vi∈Zn.w = \sum_{i=1}^k \lambda_i v_i, \qquad \lambda_i > 0,\ v_i \in \mathbb{Z}^n.w=i=1∑k​λi​vi​,λi​>0, vi​∈Zn.

It satisfies condition (iii) if for i=2,…,ki = 2, \dots, ki=2,…,k the vector viv_ivi​ is nonzero and λi/λi−1≤1/(N∥vi∥∞)\lambda_i/\lambda_{i-1} \le 1/(N\|v_i\|_\infty)λi​/λi−1​≤1/(N∥vi​∥∞​): the coefficients decrease so quickly that each term is negligible against the previous one.

Preprocessing. Given a rational www and NNN, the paper's preprocessing algorithm finds a decomposition with k≤nk \le nk≤n, condition (iii), and the size bound (ii)' ∥vi∥∞≤2n2+nNn\|v_i\|_\infty \le 2^{n^2+n}N^n∥vi​∥∞​≤2n2+nNn, and outputs

w~=∑i=1kMk−ivi,M=2n2+nNn+1.\tilde w = \sum_{i=1}^k M^{k-i} v_i, \qquad M = 2^{n^2+n} N^{n+1}.w~=i=1∑k​Mk−ivi​,M=2n2+nNn+1.

Linear programs. Let AAA be an m×nm \times nm×n matrix with entries in {0,±1}\{0, \pm 1\}{0,±1} and b∈Rmb \in \mathbb{R}^mb∈Rm. The primal program is max⁡{wx:Ax≤b}\max\{wx : Ax \le b\}max{wx:Ax≤b} and the dual program is min⁡{yb:yA=w, y≥0}\min\{yb : yA = w,\ y \ge 0\}min{yb:yA=w, y≥0}. A point xˉ∈P\bar x \in Pxˉ∈P is www-maximal if wxˉ=max⁡(wx:x∈P)w\bar x = \max(wx : x \in P)wxˉ=max(wx:x∈P). A dual basis is a maximal set of row indices of AAA whose rows are linearly independent; it determines at most one yyy with yA=wyA = wyA=w supported on it (the basic dual solution), and it is an optimal dual basis if that yyy exists and is optimal for the dual program.

Formalization targets

Goal — Theorem 4.2 (p. 58)

For every w∈Qnw \in \mathbb{Q}^nw∈Qn, with N=(n+1)!+1N = (n+1)! + 1N=(n+1)!+1, there is w~∈Zn\tilde w \in \mathbb{Z}^nw~∈Zn with

∥w~∥∞≤24n3Nn(n+2)\|\tilde w\|_\infty \le 2^{4n^3} N^{n(n+2)}∥w~∥∞​≤24n3Nn(n+2)

such that for every 0,±10, \pm10,±1 matrix AAA with nnn columns and every bbb: (i) x∈Px \in Px∈P is www-maximal if and only if it is w~\tilde ww~-maximal; (ii) a set of rows of AAA is an optimal dual basis for www if and only if it is one for w~\tilde ww~. The vector w~\tilde ww~ depends on www only, not on AAA or bbb.

Milestones

  1. Dirichlet's theorem (p. 52): for N≥1N \ge 1N≥1 and α∈Rn\alpha \in \mathbb{R}^nα∈Rn there are p∈Znp \in \mathbb{Z}^np∈Zn and 1≤q≤Nn1 \le q \le N^n1≤q≤Nn with ∣qα(i)−p(i)∣<1/N|q\alpha(i) - p(i)| < 1/N∣qα(i)−p(i)∣<1/N for all iii.
  2. Theorem 3.1 (p. 53): every w∈Rnw \in \mathbb{R}^nw∈Rn has a decomposition with k≤nk \le nk≤n, ∥vi∥∞≤Nn\|v_i\|_\infty \le N^n∥vi​∥∞​≤Nn and condition (iii).
  3. Lemma 3.2 (pp. 54–55): under condition (iii), for integral bbb with ∥b∥1≤N−1\|b\|_1 \le N - 1∥b∥1​≤N−1, sign⁡(b⋅w)=sign⁡(b⋅vj)\operatorname{sign}(b \cdot w) = \operatorname{sign}(b \cdot v_j)sign(b⋅w)=sign(b⋅vj​) for the smallest jjj with b⋅vj≠0b \cdot v_j \ne 0b⋅vj​=0, and b⋅w=0b \cdot w = 0b⋅w=0 if there is no such jjj.
  4. Theorem 3.3 (p. 56): the preprocessed w~\tilde ww~ satisfies ∥w~∥∞≤24n3Nn(n+2)\|\tilde w\|_\infty \le 2^{4n^3}N^{n(n+2)}∥w~∥∞​≤24n3Nn(n+2) and sign⁡(w⋅b)=sign⁡(w~⋅b)\operatorname{sign}(w \cdot b) = \operatorname{sign}(\tilde w \cdot b)sign(w⋅b)=sign(w~⋅b) for all integral bbb with ∥b∥1≤N−1\|b\|_1 \le N-1∥b∥1​≤N−1.
  5. The case N=n+1N = n+1N=n+1 (p. 55): an integral w~\tilde ww~ with ∥w~∥∞≤24n3(n+1)n(n+2)\|\tilde w\|_\infty \le 2^{4n^3}(n+1)^{n(n+2)}∥w~∥∞​≤24n3(n+1)n(n+2) and w~(X)≤w~(Y)  ⟺  w(X)≤w(Y)\tilde w(X) \le \tilde w(Y) \iff w(X) \le w(Y)w~(X)≤w~(Y)⟺w(X)≤w(Y) for all subsets X,YX, YX,Y of coordinates.
  6. Lemma 4.1 (i) (p. 57): if sign⁡(w′⋅h)=sign⁡(w′′⋅h)\operatorname{sign}(w' \cdot h) = \operatorname{sign}(w'' \cdot h)sign(w′⋅h)=sign(w′′⋅h) for all integral hhh with ∥h∥1≤(n+1)!\|h\|_1 \le (n+1)!∥h∥1​≤(n+1)!, then w′w'w′ and w′′w''w′′ have the same maximizers over {Ax≤b}\{Ax \le b\}{Ax≤b} for every 0,±10, \pm10,±1 matrix AAA.
  7. Lemma 4.1 (ii) (p. 57): under the same hypothesis, a dual basis is optimal for w′w'w′ if and only if it is optimal for w′′w''w′′.

Significance

The result gives a general reduction: whenever a class of polyhedra with 0,±10, \pm10,±1 constraint matrices admits an optimization algorithm that is polynomial in nnn and in the length of the objective, it admits a strongly polynomial one. The paper applies this to maximum-weight cliques in perfect graphs, optimization over submodular flow polyhedra, and matroid polyhedra membership, and its Section 5 applies the same rounding to the integer programming algorithms of Lenstra and Kannan. The subset-sum corollary (milestone 5) is independently useful: every rational weight function on a finite set can be replaced by an integral one with O(n3)O(n^3)O(n3)-bit entries that orders all subset sums identically.

All statements of this mission have been proved on paper since 1987. None is formalized on Prove2Me, and Mathlib contains only the one-dimensional Dirichlet approximation theorem. The mission produces a machine-checked version of the exact statements, with the explicit constants of the paper; the complexity claims (operation counts, strong polynomiality) are not part of it.

Difficulty

The goal combines two independent parts. The number-theoretic part (milestones 1–5) needs a multidimensional Dirichlet theorem, an induction producing the decomposition, and exact inequality chains with the constants 2n2+nNn2^{n^2+n}N^n2n2+nNn and 24n3Nn(n+2)2^{4n^3}N^{n(n+2)}24n3Nn(n+2). The linear-programming part (milestones 6–7) needs bounds on the entries of inverses of nonsingular 0,±10, \pm10,±1 submatrices, the existence of optimal dual solutions supported on a dual basis, LP duality and complementary slackness. The obvious first idea, scaling www to an integer vector by a common denominator, preserves every sign but gives no bound on ∥w~∥∞\|\tilde w\|_\infty∥w~∥∞​ in terms of nnn; the bound is the content of the theorem. Likewise, rounding each coordinate of www separately to a fixed precision does not preserve the sign of w⋅bw \cdot bw⋅b when w⋅bw \cdot bw⋅b is tiny but nonzero.

Formalization scope

Vectors are functions on Fin n: the input www is rational (Fin n → ℚ) in the goal, in Theorem 3.3 and in the subset-sum corollary, as in the algorithm's input line; it is real in Theorem 3.1, Lemma 3.2 and Lemma 4.1, as on the page. Integral vectors are Fin n → ℤ, and AAA is a Matrix (Fin m) (Fin n) ℤ with every entry in {−1,0,1}\{-1, 0, 1\}{−1,0,1}, cast to R\mathbb{R}R; b∈Rmb \in \mathbb{R}^mb∈Rm is unrestricted. Decompositions are indexed by i∈{1,…,k}⊆Ni \in \{1, \dots, k\} \subseteq \mathbb{N}i∈{1,…,k}⊆N as in the paper. ∥b∥1\|b\|_1∥b∥1​ is always the explicit sum ∑j∣b(j)∣\sum_j |b(j)|∑j​∣b(j)∣, compared with N−1N - 1N−1 in Z\mathbb{Z}Z; ∥v∥∞\|v\|_\infty∥v∥∞​ of an integer vector is a natural number (supNorm). Sign equality uses SignType.sign and includes the zero case. Condition (iii) is stated multiplicatively together with vi≠0v_i \ne 0vi​=0, which the paper's quotient presupposes; without vi≠0v_i \ne 0vi​=0 Lemma 3.2 fails. An optimal dual basis is a maximal linearly independent set of row indices together with an optimal dual solution supported on it.

Two formalizations would make the goal trivial and are excluded: dropping the bound on ∥w~∥∞\|\tilde w\|_\infty∥w~∥∞​ (a multiple of www then works), and letting w~\tilde ww~ depend on AAA and bbb (the goal states ∃w~\exists \tilde w∃w~ before ∀A,b\forall A, b∀A,b). The 0,±10, \pm10,±1 assumption on AAA is part of every Section 4 statement.

A complete development needs a multidimensional pigeonhole argument, determinant and adjugate bounds for 0,±10, \pm 10,±1 matrices, and basic LP duality (strong duality, complementary slackness, basic optimal dual solutions); the last two are reusable across linear-programming missions. Proofs of individual milestones, reusable lemmas on LP duality, and alternative proofs of Dirichlet's theorem are all welcome.

Selected references

  • A. Frank and É. Tardos, An application of simultaneous diophantine approximation in combinatorial optimization, Combinatorica 7(1) (1987) 49–65. https://doi.org/10.1007/BF02579200
  • A. K. Lenstra, H. W. Lenstra Jr. and L. Lovász, Factoring polynomials with rational coefficients, Math. Ann. 261 (1982) 515–534. https://doi.org/10.1007/BF01457454
  • É. Tardos, A strongly polynomial algorithm to solve combinatorial linear programs, Operations Research 34(2) (1986) 250–256. https://doi.org/10.1287/opre.34.2.250
  • M. Grötschel, L. Lovász and A. Schrijver, The ellipsoid method and its consequences in combinatorial optimization, Combinatorica 1 (1981) 169–197. https://doi.org/10.1007/BF02579273
  • J. W. S. Cassels, An Introduction to the Theory of Numbers (title as printed in the paper's reference [2]), Springer, Berlin, 1971; cited in the paper as [2, Sect. 1.10] for Dirichlet's theorem.
11 thms5 active usersReviewed
🏆Completed
Convex OptimizationOperations ResearchOptimization·Captain: mikedeng1

Lifts of Convex Sets and Cone Factorizations I: A Proper K-Lift of a Convex Body Yields a K-Factorization of Its Slack Operator, and a K-Factorization Yields a K-LiftResearch Paper

Motivation

Many convex sets that appear in optimization have complicated descriptions in their own space but simple descriptions as projections of higher-dimensional sets. A polytope with exponentially many facets can be the shadow of a polyhedron with polynomially many; the unit disk is the projection of a slice of the cone of 2×22\times 22×2 positive semidefinite matrices. Such a representation, a lift, turns linear optimization over the original set into a linear or semidefinite program over the lifted one, so the size of the smallest lift measures how hard the set is for conic optimization.

For polytopes and polyhedral lifts, Yannakakis (Yannakakis 1991) showed that the minimal size of a lift equals the nonnegative rank of the polytope's slack matrix. This turned questions about extended formulations into questions about matrix factorizations, and it is the basis of the lower bounds of Fiorini, Massar, Pokutta, Tiwary and de Wolf (2012) for the cut, stable set and traveling salesman polytopes. Lift-and-project hierarchies (Sherali–Adams, Lovász–Schrijver, Lasserre) all produce lifts to nonnegative orthants or positive semidefinite cones, so a criterion for the existence of a lift is also a criterion for when such a hierarchy can succeed.

Gouveia, Parrilo and Thomas (arXiv:1111.3164, Mathematics of Operations Research 38(2), 2013) extended Yannakakis' theorem from polytopes and polyhedral cones to arbitrary convex bodies and arbitrary closed convex cones. Their Theorem 2.4 is the target of this mission.

Timeline:

  • 1991, Yannakakis: polytopes, polyhedral lifts, nonnegative factorizations of the slack matrix.
  • 2012, Fiorini, Massar, Pokutta, Tiwary, de Wolf: superpolynomial lower bounds on polyhedral lifts via nonnegative rank; a positive semidefinite analogue for polytopes.
  • 2011/2013, Gouveia, Parrilo, Thomas: convex bodies and general closed convex cones (Theorem 2.4), with psd rank as the semidefinite analogue of nonnegative rank.

Setting

Throughout, Rk\mathbb R^kRk carries the Euclidean inner product ⟨⋅,⋅⟩\langle\cdot,\cdot\rangle⟨⋅,⋅⟩.

A convex body is a set C⊆RnC \subseteq \mathbb R^nC⊆Rn that is convex, compact, and contains the origin in its interior. Its polar is

C∘={ y∈Rn:⟨x,y⟩≤1 for all x∈C }.C^\circ = \{\, y \in \mathbb R^n : \langle x, y\rangle \le 1 \text{ for all } x \in C \,\}.C∘={y∈Rn:⟨x,y⟩≤1 for all x∈C}.

A point p∈Cp \in Cp∈C is an extreme point if p=(p1+p2)/2p = (p_1+p_2)/2p=(p1​+p2​)/2 with p1,p2∈Cp_1,p_2\in Cp1​,p2​∈C forces p1=p2=pp_1 = p_2 = pp1​=p2​=p; ext⁡(C)\operatorname{ext}(C)ext(C) is the set of extreme points. The slack operator of CCC is

SC:ext⁡(C)×ext⁡(C∘)→R,SC(x,y)=1−⟨x,y⟩.S_C : \operatorname{ext}(C)\times\operatorname{ext}(C^\circ) \to \mathbb R, \qquad S_C(x,y) = 1 - \langle x,y\rangle .SC​:ext(C)×ext(C∘)→R,SC​(x,y)=1−⟨x,y⟩.

It is nonnegative, and for a polytope it is the slack matrix: rows indexed by vertices, columns by facet normals.

Let K⊆RmK \subseteq \mathbb R^mK⊆Rm be a full-dimensional closed convex cone: closed, convex, closed under nonnegative scaling, with nonempty interior. Its dual is K∗={y:⟨x,y⟩≥0 ∀x∈K}K^* = \{y : \langle x,y\rangle \ge 0 \ \forall x\in K\}K∗={y:⟨x,y⟩≥0 ∀x∈K}.

  • A KKK-lift of CCC is Q=K∩LQ = K\cap LQ=K∩L, where L⊆RmL\subseteq\mathbb R^mL⊆Rm is an affine subspace and π:Rm→Rn\pi:\mathbb R^m\to\mathbb R^nπ:Rm→Rn is a linear map with C=π(K∩L)C = \pi(K\cap L)C=π(K∩L). The lift is proper if LLL meets the interior of KKK (Definition 2.1).
  • SCS_CSC​ is KKK-factorizable if there are maps, not necessarily linear, A:ext⁡(C)→KA:\operatorname{ext}(C)\to KA:ext(C)→K and B:ext⁡(C∘)→K∗B:\operatorname{ext}(C^\circ)\to K^*B:ext(C∘)→K∗ with SC(x,y)=⟨A(x),B(y)⟩S_C(x,y) = \langle A(x), B(y)\rangleSC​(x,y)=⟨A(x),B(y)⟩ for all (x,y)(x,y)(x,y) (Definition 2.2).

In Lean these are IsConvexBody, IsClosedConvexCone, HasLift, HasProperLift and SlackFactorizable in the namespace ConeLifts.Factorization, together with the series' shared ConeLifts.Shared.polar and ConeLifts.Shared.dualCone.

Formalization targets

Goal: Theorem 2.4

For n≥1n \ge 1n≥1, a convex body C⊆RnC\subseteq\mathbb R^nC⊆Rn and a full-dimensional closed convex cone K⊆RmK\subseteq\mathbb R^mK⊆Rm:

(C has a proper K-lift⇒SC is K-factorizable)  ∧  (SC is K-factorizable⇒C has a K-lift).\bigl(C \text{ has a proper } K\text{-lift} \Rightarrow S_C \text{ is } K\text{-factorizable}\bigr) \;\wedge\; \bigl(S_C \text{ is } K\text{-factorizable} \Rightarrow C \text{ has a } K\text{-lift}\bigr).(C has a proper K-lift⇒SC​ is K-factorizable)∧(SC​ is K-factorizable⇒C has a K-lift).

The two implications are not an equivalence: the forward one assumes properness, and the lift produced by the converse may be improper.

Milestones

In the order the paper's proof uses them:

  1. (§2, p. 3) C=conv⁡(ext⁡C)C = \operatorname{conv}(\operatorname{ext} C)C=conv(extC) and C∘=conv⁡(ext⁡C∘)C^\circ = \operatorname{conv}(\operatorname{ext} C^\circ)C∘=conv(extC∘).
  2. (proof, p. 4) For every c∈ext⁡(C∘)c\in\operatorname{ext}(C^\circ)c∈ext(C∘), max⁡{⟨c,x⟩:x∈C}=1\max\{\langle c,x\rangle : x\in C\} = 1max{⟨c,x⟩:x∈C}=1, attained.
  3. (proof, p. 4) If C=π(K∩L)C = \pi(K\cap L)C=π(K∩L), L=w0+L0L = w_0 + L_0L=w0​+L0​ and w0∈int⁡Kw_0\in\operatorname{int}Kw0​∈intK, then for c∈ext⁡(C∘)c \in \operatorname{ext}(C^\circ)c∈ext(C∘)
1=min⁡{⟨w0,z⟩:z−π∗(c)∈K∗, z∈L0⊥},1 = \min\{\langle w_0, z\rangle : z - \pi^*(c)\in K^*,\ z\in L_0^\perp\},1=min{⟨w0​,z⟩:z−π∗(c)∈K∗, z∈L0⊥​},

with the minimum attained. 4. (proof, p. 5) For L={(x,z):1−⟨x,y⟩=⟨z,B(y)⟩ ∀y∈ext⁡(C∘)}L = \{(x,z) : 1-\langle x,y\rangle = \langle z, B(y)\rangle\ \forall y\in\operatorname{ext}(C^\circ)\}L={(x,z):1−⟨x,y⟩=⟨z,B(y)⟩ ∀y∈ext(C∘)} and its projection LKL_KLK​ to Rm\mathbb R^mRm: 0∉LK0\notin L_K0∈/LK​. 5. (proof, p. 5) If BBB maps into K∗K^*K∗, z∈Kz\in Kz∈K and (x,z)∈L(x,z)\in L(x,z)∈L, then x∈Cx\in Cx∈C. 6. (proof, p. 5) For each z∈K∩LKz\in K\cap L_Kz∈K∩LK​ there is a unique xzx_zxz​ with (xz,z)∈L(x_z,z)\in L(xz​,z)∈L.

Significance

The result. Theorem 2.4 makes the existence of a lift of a convex body to a given cone a purely algebraic question about its slack operator. Every lower bound on lift size in the paper and its successors goes through it: the nonnegative-rank bounds for polytopes (Section 4 of the paper), the proof that the stable set polytope of an nnn-vertex graph has no lift to S+n\mathcal S^n_+S+n​ (Section 5), and the later psd-rank literature. It also puts Yannakakis' theorem and its semidefinite analogue under a single statement.

Formalizing it. The theorem is proved on paper; no machine-checked version is known to exist. Formalizing it requires conic strong duality with dual attainment under a Slater condition, which Mathlib does not have, and finite-dimensional Krein–Milman for the polar body. The companion missions of this series (nonnegative-rank lower bounds; stable set polytopes and psd lifts) use the correspondence as their entry point.

Difficulty

The converse half is elementary once the extreme points of C∘C^\circC∘ are known to generate it. The forward half is not: B(c)B(c)B(c) must be an element of K∗K^*K∗ that certifies ⟨c,x⟩≤1\langle c, x\rangle \le 1⟨c,x⟩≤1 on CCC through the lift. A separating functional gives this certificate on π(K∩L)\pi(K\cap L)π(K∩L), but writing it as z−π∗(c)z - \pi^*(c)z−π∗(c) with z⊥L0z \perp L_0z⊥L0​, z−π∗(c)∈K∗z - \pi^*(c)\in K^*z−π∗(c)∈K∗ and ⟨w0,z⟩=1\langle w_0,z\rangle = 1⟨w0​,z⟩=1 exactly is conic duality with a zero gap and an attained dual optimum. For closed convex cones the gap can be positive or the dual unattained unless a constraint qualification holds; this is why properness is assumed. Weak duality alone gives only ≥1\ge 1≥1, and a dual sequence approaching 111 does not yield a factor. The paper notes (p. 5) that, since the proof uses strong duality, it is not obvious how to remove properness for a general closed convex cone.

Formalization scope

Conventions fixed by the Lean statements:

  • Rk\mathbb R^kRk is EuclideanSpace ℝ (Fin k); every pairing, in SSS, in K∗K^*K∗ and in the factorization, is its inner product.
  • The polar is one-sided, ⟨x,y⟩≤1\langle x,y\rangle\le 1⟨x,y⟩≤1; Mathlib's absolute polar is not used.
  • A convex body is compact, convex, with 000 in its interior. The paper's "full-dimensional convex body in Rn\mathbb R^nRn" is read as including n≥1n\ge 1n≥1: for n=0n = 0n=0, C={0}C = \{0\}C={0} has the proper Rm\mathbb R^mRm-lift {0}\{0\}{0} while SC(0,0)=1S_C(0,0) = 1SC​(0,0)=1 cannot factor through K∗={0}K^* = \{0\}K∗={0}, so the forward half is false there. The goal and milestones 2–3 assume 1≤n1\le n1≤n.
  • KKK is closed, convex, contains 000 and is closed under nonnegative scaling; full-dimensionality is (interior K).Nonempty. Pointedness is not assumed.
  • LLL is a Mathlib AffineSubspace and π\piπ a linear map; the lift condition is the set equality C=π(K∩L)C = \pi(K\cap L)C=π(K∩L).
  • A,BA, BA,B are total functions Rn→Rm\mathbb R^n\to\mathbb R^mRn→Rm constrained only on ext⁡(C)\operatorname{ext}(C)ext(C), resp. ext⁡(C∘)\operatorname{ext}(C^\circ)ext(C∘), which is equivalent to maps out of the extreme points. They are not required to be linear or continuous.
  • Milestone 3 is the second, substituted form of the paper's dual (z=MTyz = M^{\mathsf T}yz=MTy), stated with L.directionᗮ and LinearMap.adjoint π; minima and maxima are stated with IsLeast/IsGreatest, so attainment is part of every claim.

Trivializing readings are excluded: π\piπ is linear, not an arbitrary function (with an arbitrary function every set is a "lift"); LLL is an affine subspace, not an arbitrary set; and BBB takes values in K∗K^*K∗, not KKK, which for a cone that is not self-dual would be a different and generally false statement.

Needed infrastructure: finite-dimensional Krein–Milman in the form C=conv⁡(ext⁡C)C = \operatorname{conv}(\operatorname{ext} C)C=conv(extC) for compact convex sets (Mathlib has the closure form); the bipolar theorem (C∘)∘=C(C^\circ)^\circ = C(C∘)∘=C for closed convex C∋0C\ni 0C∋0 with the one-sided polar; compactness of C∘C^\circC∘ when 0∈int⁡C0\in\operatorname{int} C0∈intC; and conic linear programming duality with a Slater point, including dual attainment. The last two are reusable well beyond this mission. Proofs of individual milestones, and of these general facts as separate lemmas, are welcome.

Selected references

  • J. Gouveia, P. A. Parrilo, R. R. Thomas, Lifts of Convex Sets and Cone Factorizations, Mathematics of Operations Research 38(2):248–264, 2013. arXiv:1111.3164v2, doi:10.1287/moor.1120.0575
  • M. Yannakakis, Expressing combinatorial optimization problems by linear programs, Journal of Computer and System Sciences 43(3):441–466, 1991. doi:10.1016/0022-0000(91)90024-Y
  • S. Fiorini, S. Massar, S. Pokutta, H. R. Tiwary, R. de Wolf, Linear vs. semidefinite extended formulations: exponential separation and strong lower bounds, STOC 2012. arXiv:1111.0837
14 thms3 active usersReviewed
🏆Completed
Convex OptimizationLinear OptimizationOperations Research+1·Captain: mikedeng1

Validation of Subgradient Optimization I: The Core Problem Built from the Subgradient Iterates Solves the Dual Linear ProgramResearch Paper

Motivation

Subgradient optimization maximizes a concave function that is not differentiable by stepping along an arbitrary subgradient with a prescribed sequence of step sizes. It became a standard tool of integer programming after Held and Karp used it to compute the Lagrangian 1-tree bound for the traveling-salesman problem (Held & Karp 1971). Held, Wolfe and Crowder then tested it on the assignment problem, a traveling-salesman relaxation and a multicommodity flow problem (Held, Wolfe & Crowder 1974).

The method has one practical defect that the paper names at the start of its Section 6: it contains no test of optimality. The value w(πj)w(\pi^j)w(πj) approaches the maximum, but at no finite step does the method say that the maximum has been reached, or what the maximum is. Section 6 of the paper supplies such a test for the case where www is a minimum of finitely many affine functions. The finitely many subgradients produced by the iterates define a small linear program, the core problem, and from some iteration on this linear program already solves the full dual linear program. Its optimal value is therefore the exact maximum of www, obtained from quantities the method computes anyway. This is how the authors certified the optimal values reported in their experiments.

Timeline:

  • 1967–1969: Poljak proves that the subgradient iterates satisfy w(πj)→max⁡ww(\pi^j)\to\max ww(πj)→maxw when the step sizes tend to zero and have divergent sum (Poljak 1967; Poljak 1969).
  • 1971: Held and Karp apply the method to the 1-tree bound (Held & Karp 1971).
  • 1974: Held, Wolfe and Crowder prove that the core problem P(J,J∗)P(J,J^*)P(J,J∗) solves the dual linear program (Theorem 6.3) and give a sufficient condition for bounded iterates (Theorem 6.1).
  • 1996–1999: primal recovery from subgradient iterates is developed further, by convex combinations of the subgradients with weights derived from the step sizes (Sherali & Choi 1996; Larsson, Patriksson & Strömberg 1999).

Setting

Fix n≥0n\ge0n≥0 and write En=RnE^n=\mathbb R^nEn=Rn with the Euclidean inner product π⋅v\pi\cdot vπ⋅v. The data are K≥1K\ge1K≥1 scalars ckc_kck​ and vectors vk∈Env_k\in E^nvk​∈En, and

w(π)=min⁡{ck+π⋅vk:k=1,…,K}.(2.2)w(\pi)=\min\{c_k+\pi\cdot v_k : k=1,\dots,K\}.\qquad(2.2)w(π)=min{ck​+π⋅vk​:k=1,…,K}.(2.2)

The function www is assumed bounded above, the paper's standing assumption. An index kkk attains the minimum at π\piπ if ck+π⋅vk=w(π)c_k+\pi\cdot v_k=w(\pi)ck​+π⋅vk​=w(π).

A run of the subgradient algorithm consists of a starting point π0∈En\pi^0\in E^nπ0∈En, step sizes tj>0t_j>0tj​>0 and indices k(j)k(j)k(j) such that k(j)k(j)k(j) attains the minimum at πj\pi^jπj, and

πj+1=πj+tj vk(j)(j=0,1,… ).(2.6)\pi^{j+1}=\pi^j+t_j\,v_{k(j)}\qquad(j=0,1,\dots).\qquad(2.6)πj+1=πj+tj​vk(j)​(j=0,1,…).(2.6)

No rule for choosing among several minimizing indices is imposed. Write vj=vk(j)v^j=v_{k(j)}vj=vk(j)​ and cj=ck(j)c^j=c_{k(j)}cj=ck(j)​. The step-size conditions are

tj→0,∑j=0∞tj=∞.(2.7)t_j\to0,\qquad \sum_{j=0}^\infty t_j=\infty.\qquad(2.7)tj​→0,j=0∑∞​tj​=∞.(2.7)

The dual linear program of max⁡w\max wmaxw is

min⁡{∑kckyk:yk≥0, ∑kyk=1, ∑kykvk=0}.(6.1)\min\Big\{\sum_k c_ky_k : y_k\ge0,\ \sum_ky_k=1,\ \sum_ky_kv_k=0\Big\}.\qquad(6.1)min{k∑​ck​yk​:yk​≥0, k∑​yk​=1, k∑​yk​vk​=0}.(6.1)

For integers J<J∗J<J^*J<J∗ the core problem P(J,J∗)P(J,J^*)P(J,J∗) has one variable yjy_jyj​ for each iteration j∈[J,J∗]j\in[J,J^*]j∈[J,J∗]:

min⁡{∑j=JJ∗cjyj:yj≥0, ∑j=JJ∗yj=1, ∑j=JJ∗yjvj=0}.\min\Big\{\sum_{j=J}^{J^*}c^jy_j : y_j\ge0,\ \sum_{j=J}^{J^*}y_j=1,\ \sum_{j=J}^{J^*}y_jv^j=0\Big\}.min{j=J∑J∗​cjyj​:yj​≥0, j=J∑J∗​yj​=1, j=J∑J∗​yj​vj=0}.

An index chosen at several iterations contributes several identical columns. A point yyy of P(J,J∗)P(J,J^*)P(J,J∗) is sent to the point yˉk=∑{yj:J≤j≤J∗, k(j)=k}\bar y_k=\sum\{y_j : J\le j\le J^*,\ k(j)=k\}yˉ​k​=∑{yj​:J≤j≤J∗, k(j)=k} of (6.1). This aggregation preserves feasibility and objective value.

Formalization targets

Goal: Theorem 6.3 (p. 82)

Assume www is bounded above, (tj,πj,k(j))(t_j,\pi^j,k(j))(tj​,πj,k(j)) is a run satisfying (2.7), and {πj}\{\pi^j\}{πj} is bounded. Then

∀J ∃J∗>J:P(J,J∗) has a solution, and every solution of P(J,J∗) aggregates to a solution of (6.1).\forall J\ \exists J^*>J:\quad P(J,J^*)\text{ has a solution, and every solution of }P(J,J^*)\text{ aggregates to a solution of (6.1)}.∀J ∃J∗>J:P(J,J∗) has a solution, and every solution of P(J,J∗) aggregates to a solution of (6.1).

The goal states existence of J∗J^*J∗, which is what the paper claims. The paper's argument in fact gives the conclusion for every sufficiently large J∗J^*J∗. That stronger form is not the goal. Feasibility of P(J,J∗)P(J,J^*)P(J,J∗) (Lemma 6.2) or the inequality Value[P(J,J∗)]≥Value[(6.1)]\mathrm{Value}[P(J,J^*)]\ge\mathrm{Value}[(6.1)]Value[P(J,J∗)]≥Value[(6.1)], which holds for every feasible P(J,J∗)P(J,J^*)P(J,J∗), is not a formalization of the goal. The content is optimality in (6.1).

Milestones

  1. Eq. (2.10): if π∗\pi^*π∗ maximizes www and kkk attains the minimum at π\piπ, then w∗−w(π)≤vk⋅(π∗−π)w^*-w(\pi)\le v_k\cdot(\pi^*-\pi)w∗−w(π)≤vk​⋅(π∗−π).
  2. §6, p. 80 (display): under (2.6), (2.7) and www bounded above, lim⁡jw(πj)=max⁡w=w(π∗)\lim_j w(\pi^j)=\max w=w(\pi^*)limj​w(πj)=maxw=w(π∗) for some π∗\pi^*π∗. The iterates are not assumed bounded.
  3. Theorem 6.1: if every π≠0\pi\ne0π=0 has some π⋅vk<0\pi\cdot v_k<0π⋅vk​<0, every run satisfying (2.7) is bounded.
  4. Eq. (6.1): (6.1) has a solution, and its optimal value equals max⁡w\max wmaxw.
  5. Lemma 6.2: for any JJJ there is J∗>JJ^*>JJ∗>J with P(J,J∗)P(J,J^*)P(J,J∗) feasible, for bounded runs.

Significance

Theorem 6.3 turns an asymptotic method into one that returns an exact answer. Solving P(J,J∗)P(J,J^*)P(J,J∗) for growing J∗J^*J∗ produces a linear program of bounded size whose optimum is eventually the optimum of (6.1), and hence max⁡w\max wmaxw. In the Lagrangian applications, where (6.1) is the linear relaxation of a combinatorial problem, this yields both the bound and a primal solution of the relaxation. The theorem is the ancestor of the primal-recovery results listed in the timeline.

The mission produces a machine-checked version of the paper's Section 6, together with the input the paper takes on citation: Poljak's convergence theorem for divergent-series step sizes, specialized to piecewise-linear concave functions. Neither Poljak's theorem nor Theorem 6.3 is in Mathlib. The pieces are reusable: the convergence theorem applies to every Lagrangian dual solved by subgradient steps, and the duality between max⁡w\max wmaxw and (6.1) is linear-programming duality for a minimum of affine functions.

Difficulty

The inequality Value⁡P(J,J∗)≥Value⁡(6.1)\operatorname{Value}P(J,J^*)\ge\operatorname{Value}(6.1)ValueP(J,J∗)≥Value(6.1) is immediate, since aggregation maps feasible points to feasible points with the same objective. All of the content lies in the reverse inequality. That inequality ties a finite linear program to the limit of an infinite sequence, and it must hold for an arbitrary choice among tied minimizing indices. The iterates themselves need not converge, and under (2.7) the values w(πj)w(\pi^j)w(πj) are not monotone. So an argument that inspects a single iterate, or assumes that the method settles on one face of www, fails. The convergence statement of milestone 2 is not proved in the paper and is the heaviest single step. Feasibility of P(J,J∗)P(J,J^*)P(J,J∗) also needs its own argument, and it fails without the boundedness hypothesis.

Formalization scope

EnE^nEn is EuclideanSpace ℝ (Fin n), the index set is a finite nonempty type ι, and www is the finite minimum Finset.univ.inf'. A run is the predicate IsSubgradientRun c v t π k: positive steps, a minimizing index at every step, and update (2.6). It is not a function of π0\pi^0π0, so every tie-breaking rule is covered. (2.7) is StepSizeCond t: t → 0, and the partial sums tend to +∞+\infty+∞. Iterates are indexed from j=0j=0j=0. Boundedness is Bornology.IsBounded (Set.range π). The variables of P(J,J∗)P(J,J^*)P(J,J∗) are a function on N\mathbb NN of which only the values at J≤j≤J∗J\le j\le J^*J≤j≤J∗ enter. Optimality of yyy in either linear program means feasibility plus an objective no larger than that of every feasible point. Suprema are never taken over unbounded sets: every maximum of www is stated as attained at an explicit π∗\pi^*π∗.

A statement that only asserts feasibility of P(J,J∗)P(J,J^*)P(J,J∗), or only Value⁡P≥Value⁡(6.1)\operatorname{Value}P\ge\operatorname{Value}(6.1)ValueP≥Value(6.1), is not the theorem. The goal requires that the solutions of P(J,J∗)P(J,J^*)P(J,J∗) be optimal for (6.1).

Theorem 6.1 is printed for the step rule (2.8), but its proof uses w(πj)→w∗w(\pi^j)\to w^*w(πj)→w∗, the consequence of (2.7). The mission states it for (2.7), and its milestone title says so.

A complete development needs:

  • linear-programming duality for (6.1), including attainment;
  • the convergence theorem for divergent-series step sizes;
  • existence of a maximizer of a bounded-above minimum of finitely many affine functions;
  • basic facts on convex hulls of finitely many vectors in EnE^nEn.

The first three are reusable well beyond this mission. Contributions of any of them, as standalone theorems, are welcome.

Selected references

  • M. Held, P. Wolfe, H. P. Crowder, Validation of subgradient optimization, Mathematical Programming 6 (1974) 62–88. https://doi.org/10.1007/BF01580223
  • M. Held, R. M. Karp, The traveling-salesman problem and minimum spanning trees: Part II, Mathematical Programming 1 (1971) 6–25. https://doi.org/10.1007/BF01584070
  • B. T. Poljak, A general method of solving extremum problems, Soviet Mathematics Doklady 8 (1967) 593–597.
  • B. T. Poljak, Minimization of unsmooth functionals, USSR Computational Mathematics and Mathematical Physics 9 (1969) 14–29. https://doi.org/10.1016/0041-5553(69)90061-5
  • H. D. Sherali, G. Choi, Recovery of primal solutions when using subgradient optimization methods to solve Lagrangian duals of linear programs, Operations Research Letters 19 (1996) 105–113. https://doi.org/10.1016/0167-6377(96)00019-3
  • T. Larsson, M. Patriksson, A.-B. Strömberg, Ergodic, primal convergence in dual subgradient schemes for convex programming, Mathematical Programming 86 (1999) 283–312. https://doi.org/10.1007/s101070050090
7 thms2 active usersReviewed
🏆Completed
Dynamic ProgrammingOperations ResearchOptimization·Captain: mikedeng1

Integrating Replenishment Decisions with Advance Demand Information I: The Myopic Order-Up-To Level Is Optimal When Observed Demand Beyond the Protection Period Is LargeResearch Paper

Motivation

Many firms learn part of future demand before it has to be served: customers place orders days or weeks ahead of the date they need the goods, or commit to delivery dates in contracts. Advance demand information of this kind reduces the uncertainty the inventory manager has to protect against, and the question is how replenishment decisions should use it. Gallego and Özer (Management Science 47(10), 2001) model orders placed up to NNN periods ahead and a supply lead time LLL. They show that, with a fixed ordering cost, the classical (s,S)(s,S)(s,S) structure survives with parameters that depend on the observed future demand, and they identify when that dependence disappears.

The classical theory this builds on is the finite-horizon inventory model with a set-up cost. Scarf (1960) introduced KKK-convexity to prove that (s,S)(s,S)(s,S) policies are optimal there. Veinott (1966) and Iglehart (1963) bounded the optimal policy parameters by myopic quantities. Gallego and Özer extend both results to a state that carries a vector of observed demands.

Setting

Periods are t=1,…,Tt = 1, \dots, Tt=1,…,T. In period ttt customers place orders Dt=(Dt,t,…,Dt,t+N)D_t = (D_{t,t}, \dots, D_{t,t+N})Dt​=(Dt,t​,…,Dt,t+N​) for periods t,…,t+Nt, \dots, t+Nt,…,t+N; DtD_tDt​ is a random vector with law μt\mu_tμt​ and nonnegative components. The lead time LLL and the information horizon NNN satisfy N>L+1N > L+1N>L+1; write M=N−L−1≥1M = N - L - 1 \ge 1M=N−L−1≥1. The state at the start of period ttt is a pair (xt,ot)(x_t, o_t)(xt​,ot​): the modified inventory position xt∈Rx_t \in \mathbb{R}xt​∈R, and the vector

ot=(ot,t+L+1,…,ot,t+N−1)∈RMo_t = (o_{t,t+L+1}, \dots, o_{t,t+N-1}) \in \mathbb{R}^Mot​=(ot,t+L+1​,…,ot,t+N−1​)∈RM

of demands already observed for the periods beyond the protection period t,…,t+Lt, \dots, t+Lt,…,t+L.

The manager raises xtx_txt​ to an order-up-to level y≥xty \ge x_ty≥xt​, paying a set-up cost Kt>0K_t > 0Kt​>0 if y>xty > x_ty>xt​. After DtD_tDt​ is observed, the state moves to

xt+1=y−∑s=tt+L+1Dt,s−ot,t+L+1,ot+1,s=ot,s+Dt,s  (s=t+L+2,…,t+N),x_{t+1} = y - \sum_{s=t}^{t+L+1} D_{t,s} - o_{t,t+L+1},\qquad o_{t+1,s} = o_{t,s} + D_{t,s}\ \ (s = t+L+2,\dots,t+N),xt+1​=y−s=t∑t+L+1​Dt,s​−ot,t+L+1​,ot+1,s​=ot,s​+Dt,s​  (s=t+L+2,…,t+N),

with ot,t+N=0o_{t,t+N} = 0ot,t+N​=0. With a convex single-period cost GtG_tGt​, discount factors αt>0\alpha_t > 0αt​>0 and δ(z)=1{z>0}\delta(z) = \mathbf 1\{z > 0\}δ(z)=1{z>0}, the optimal cost satisfies JT+1≡0J_{T+1} \equiv 0JT+1​≡0 and

Jt(x,o)=min⁡y≥x{Ktδ(y−x)+Vt(y,o)},Vt(y,o)=Gt(y)+αt+1 E Jt+1(xt+1,ot+1).J_t(x, o) = \min_{y \ge x}\{K_t\delta(y - x) + V_t(y, o)\},\qquad V_t(y, o) = G_t(y) + \alpha_{t+1}\,\mathbb E\,J_{t+1}(x_{t+1}, o_{t+1}).Jt​(x,o)=y≥xmin​{Kt​δ(y−x)+Vt​(y,o)},Vt​(y,o)=Gt​(y)+αt+1​EJt+1​(xt+1​,ot+1​).

Let Ht(x,o)=Kt+min⁡y≥xVt(y,o)−Vt(x,o)H_t(x, o) = K_t + \min_{y\ge x}V_t(y,o) - V_t(x,o)Ht​(x,o)=Kt​+miny≥x​Vt​(y,o)−Vt​(x,o). The order-up-to level St(o)S_t(o)St​(o) is the least minimizer of Vt(⋅,o)V_t(\cdot, o)Vt​(⋅,o), and the reorder point is st(o)=max⁡{x:Ht(x,o)≤0}s_t(o) = \max\{x : H_t(x,o) \le 0\}st​(o)=max{x:Ht​(x,o)≤0}.

A function ggg is (a,b)(a,b)(a,b)-convex, g∈C(a,b)g \in C(a,b)g∈C(a,b), if g(θx1+(1−θ)x2)≤θ(a+g(x1))+(1−θ)(b+g(x2))g(\theta x_1 + (1-\theta)x_2) \le \theta(a + g(x_1)) + (1-\theta)(b + g(x_2))g(θx1​+(1−θ)x2​)≤θ(a+g(x1​))+(1−θ)(b+g(x2​)) for all x1≤x2x_1 \le x_2x1​≤x2​ and θ∈[0,1]\theta \in [0,1]θ∈[0,1]; C(0,K)C(0,K)C(0,K) is Scarf's KKK-convexity. In the stationary problem Gt=GG_t = GGt​=G, Kt=KK_t = KKt​=K, αt=α\alpha_t = \alphaαt​=α and μt=ν\mu_t = \nuμt​=ν, and the myopic levels are

Sm=min⁡{y:G(y)≤G(x) ∀x},sm=max⁡{y≤Sm:G(y)≥K+G(Sm)},S‾=inf⁡{y>Sm:G(y)>G(Sm)+αK}.S^m = \min\{y : G(y) \le G(x)\ \forall x\},\quad s^m = \max\{y \le S^m : G(y) \ge K + G(S^m)\},\quad \overline S = \inf\{y > S^m : G(y) > G(S^m) + \alpha K\}.Sm=min{y:G(y)≤G(x) ∀x},sm=max{y≤Sm:G(y)≥K+G(Sm)},S=inf{y>Sm:G(y)>G(Sm)+αK}.

Formalization targets

Goal: Theorem 2 (p. 1350)

For the stationary problem, every 1≤t≤T1 \le t \le T1≤t≤T and every observed-demand vector ot≥0o_t \ge 0ot​≥0,

ot,t+L+1≥S‾−sm  ⟹  St(ot)=Sm.o_{t,t+L+1} \ge \overline S - s^m \implies S_t(o_t) = S^m.ot,t+L+1​≥S−sm⟹St​(ot​)=Sm.

Only the observed demand for the first period beyond the protection period is compared with the threshold; the other components of oto_tot​ are free.

Milestones

  • Lemma 1, Parts 1, 2, 4, 5 (p. 1349): inclusion, positive combinations, expectations, and g(max⁡(x,s))g(\max(x,s))g(max(x,s)) for (a,b)(a,b)(a,b)-convex functions.
  • Lemma 2 and Corollary 1 (p. 1350): for V∈C(0,K)V \in C(0,K)V∈C(0,K) with a minimizer SSS, HHH changes sign once from −-− to +++, and (for continuous VVV) J(x)=V(max⁡(s,x))J(x) = V(\max(s,x))J(x)=V(max(s,x)).
  • Theorem 1, Parts 1–3 (p. 1350): Vt(⋅,ot)∈C(0,Kt)V_t(\cdot, o_t) \in C(0, K_t)Vt​(⋅,ot​)∈C(0,Kt​) is coercive, a state-dependent (st(ot),St(ot))(s_t(o_t), S_t(o_t))(st​(ot​),St​(ot​)) policy is optimal, and Jt(⋅,ot)∈C(0,Kt)J_t(\cdot, o_t) \in C(0, K_t)Jt​(⋅,ot​)∈C(0,Kt​) with its limits at ±∞\pm\infty±∞.
  • Lemma 3 (p. 1351): Sm≤St(ot)≤S‾S^m \le S_t(o_t) \le \overline SSm≤St​(ot​)≤S and sm≤st(ot)s^m \le s_t(o_t)sm≤st​(ot​).

Significance

Theorem 1 says that advance demand information does not destroy the (s,S)(s,S)(s,S) structure: the optimal policy is still a reorder point and an order-up-to level, now functions of oto_tot​. Theorem 2 is a horizon result. Once enough demand is already booked for period t+L+1t+L+1t+L+1, the order-up-to level is the myopic one, computed from GGG alone, and the rest of the information vector can be ignored. The threshold S‾−sm\overline S - s^mS−sm grows with the set-up cost. In practice the manager then orders only to cover demand up to period t+Lt+Lt+L, knowing another order will be placed in period t+1t+1t+1, and the search for state-dependent policies is confined to states with little booked demand.

The results are proved in the paper, with some steps argued informally (the unit forward difference in Lemma 3, a minimum over an open set in the definition of S‾\overline SS). As far as the platform's catalog shows, no (s,S)(s,S)(s,S) optimality theorem of this form has a machine-checked proof: the platform has KKK-convexity lemmas for a single constant, not for (a,b)(a,b)(a,b)-convexity or a dynamic program with a vector state. A formal proof would check the infinite-state induction and the conditions under which the expectation in (9) is finite. The (a,b)(a,b)(a,b)-convexity layer and the one-period results (Lemma 2, Corollary 1) are reusable for any set-up cost model.

Difficulty

The obvious induction proves KKK-convexity of VtV_tVt​ and then applies Scarf's argument. The vector state makes each step conditional on facts the scalar case gets for free. The expectation in (9) mixes a random shift of xxx with a random update of ooo, so preserving KKK-convexity needs Lemma 1, Part 4 rather than the scalar version. Coercivity and continuity of Vt(⋅,o)V_t(\cdot, o)Vt​(⋅,o), and measurability and integrability of D↦Jt+1(xt+1,ot+1)D \mapsto J_{t+1}(x_{t+1}, o_{t+1})D↦Jt+1​(xt+1​,ot+1​), must be carried through the induction jointly in (x,o)(x, o)(x,o). They cannot be assumed.

For Theorem 2, VtV_tVt​ is not a function of GGG alone, and a comparison of St(ot)S_t(o_t)St​(ot​) with SmS^mSm has to control EJt+1\mathbb E J_{t+1}EJt+1​. That requires the lower bound sm≤st+1(ot+1)s^m \le s_{t+1}(o_{t+1})sm≤st+1​(ot+1​) at the next period, which holds only on the nonnegative state space.

Formalization scope

Everything is stated about the functional equation (8)–(9). The paper derives it in Appendix A from a control problem over history-dependent policies, citing Özer (2000); that reduction is out of scope. The demand vector is Fin (L + M + 2) → ℝ and ooo is Fin M → ℝ, with component jjj equal to ot,t+L+1+jo_{t,t+L+1+j}ot,t+L+1+j​. JJJ is defined by backward recursion, minima over y≥xy \ge xy≥x are infima over {y:x≤y}\{y : x \le y\}{y:x≤y}, and expectations are Bochner integrals. GtG_tGt​ is an abstract primitive, not built from holding and penalty costs.

The paper's hypotheses are GtG_tGt​ convex with Gt(y)→∞G_t(y) \to \inftyGt​(y)→∞ as ∣y∣→∞|y| \to \infty∣y∣→∞ (stated for G~t\widetilde G_tGt​, used for GtG_tGt​), Kt>0K_t > 0Kt​>0 (Section 4), and αt+1Kt+1≤Kt\alpha_{t+1}K_{t+1} \le K_tαt+1​Kt+1​≤Kt​. The formalization adds hypotheses the paper uses without stating:

  • positive discount factors;
  • demands nonnegative almost surely;
  • every demand component has a finite mean, and ∣Gt(y)∣≤at+bt∣y∣|G_t(y)| \le a_t + b_t|y|∣Gt​(y)∣≤at​+bt​∣y∣ (so the expectation in (9) is finite);
  • continuity of VVV in the abstract Corollary 1;
  • nonnegative observed demands oto_tot​ in Lemma 3 and Theorem 2, where the lower bound fails for negative ot,t+L+1o_{t,t+L+1}ot,t+L+1​.

All hypotheses are placed on the primitives; nothing is assumed about the derived VtV_tVt​ or JtJ_tJt​. A Solutions/verification instance (G(y)=∣y∣G(y) = |y|G(y)=∣y∣, K=1K = 1K=1, α=1/2\alpha = 1/2α=1/2, zero demand) shows these hypotheses can be met together.

The definition of S‾\overline SS is read as an infimum: the paper prints a minimum over an open set. St(ot)S_t(o_t)St​(ot​) and st(ot)s_t(o_t)st​(ot​) appear through IsLeast and IsGreatest, never as sInf/sSup values. A default value therefore cannot satisfy a conclusion, and vacuous readings (an empty minimizer set, an unbounded reorder set) are excluded. The infinite-horizon results (Lemma 4, Theorem 3, Corollary 2) and the zero set-up cost case are not part of this mission. Contributions are welcome at every level, and most of all a reusable library for (a,b)(a,b)(a,b)-convex functions.

Selected references

  • G. Gallego, Ö. Özer, Integrating Replenishment Decisions with Advance Demand Information, Management Science 47(10):1344–1360, 2001. https://doi.org/10.1287/mnsc.47.10.1344.10261
  • H. Scarf, The Optimality of (S, s) Policies in the Dynamic Inventory Problem, in Mathematical Methods in the Social Sciences, Stanford University Press, 1960.
  • A. F. Veinott, On the Optimality of (s,S) Inventory Policies: New Conditions and a New Proof, SIAM Journal on Applied Mathematics 14(5):1067–1083, 1966. https://doi.org/10.1137/0114086
  • D. L. Iglehart, Optimality of (s, S) Policies in the Infinite Horizon Dynamic Inventory Problem, Management Science 9(2):259–267, 1963. https://doi.org/10.1287/mnsc.9.2.259
15 thms4 active usersReviewed
🏆Completed
CombinatoricsLinear OptimizationOperations Research+1·Captain: mikedeng1

Validation of Subgradient Optimization II: A Unique Optimal Assignment Makes the Dual Optimal Set Full-DimensionalResearch Paper

Why the assignment dual matters

The subgradient method maximizes a concave, piecewise-linear function w(π)=min⁡k{ck+π⋅vk}w(\pi)=\min_k\{c_k+\pi\cdot v_k\}w(π)=mink​{ck​+π⋅vk​} by moving along a subgradient vkv_kvk​ of an active piece with a prescribed step. Held, Wolfe and Crowder's 1974 paper Validation of subgradient optimization tested the method on three families of Lagrangean duals from combinatorial optimization — the assignment problem, a relaxation of the travelling salesman problem in the style of Held and Karp, and multicommodity flows — and gave the first systematic account of when the method works in practice.

On randomly generated assignment problems of order n≤30n\le 30n≤30 the authors observed that the method usually did not merely converge: it stopped, after finitely many steps, at an iterate whose subgradient was exactly zero. Their explanation is a structural fact about the assignment dual, Theorem 3.1 of the paper: when the optimal assignment is unique — the typical case for random integer costs — the set of optimal dual prices has full dimension nnn, so a sequence of steps of decreasing length can land inside it. This mission formalizes that theorem and the steps of its proof.

Setting

There are nnn men and nnn jobs, and a real n×nn\times nn×n cost matrix A=(air)A=(a_{ir})A=(air​): aira_{ir}air​ is the cost for which man iii does job rrr. A one-to-one assignment is a permutation σ\sigmaσ of {1,…,n}\{1,\dots,n\}{1,…,n}, where σ(r)\sigma(r)σ(r) is the man doing job rrr; its cost is ∑raσ(r) r\sum_r a_{\sigma(r)\,r}∑r​aσ(r)r​. The assignment problem (3.1) asks for a permutation of minimal cost; the assignment is unique if exactly one permutation attains that minimum.

The linear relaxation of (3.1), over doubly stochastic matrices x=(xir)x=(x_{ir})x=(xir​), has the dual linear program (3.2), max⁡{∑iπi+∑rρr:πi+ρr≤air}\max\{\sum_i\pi_i+\sum_r\rho_r : \pi_i+\rho_r\le a_{ir}\}max{∑i​πi​+∑r​ρr​:πi​+ρr​≤air​}. For fixed prices π∈Rn\pi\in\mathbb R^nπ∈Rn on the men the best ρ\rhoρ is ρr=min⁡s[asr−πs]\rho_r=\min_s[a_{sr}-\pi_s]ρr​=mins​[asr​−πs​], which leaves the dual function (3.3)

w(π)=∑i=1nπi+∑r=1nmin⁡s [asr−πs],w(\pi)=\sum_{i=1}^n\pi_i+\sum_{r=1}^n\min_s\,[a_{sr}-\pi_s],w(π)=i=1∑n​πi​+r=1∑n​smin​[asr​−πs​],

the inner minimum being over the men sss for each job rrr. The optimal set is Ω={π:w(π′)≤w(π) for all π′}\Omega=\{\pi : w(\pi')\le w(\pi)\ \text{for all }\pi'\}Ω={π:w(π′)≤w(π) for all π′}.

To put www in the form min⁡k{ck+π⋅vk}\min_k\{c_k+\pi\cdot v_k\}mink​{ck​+π⋅vk​} the paper uses assignments in a weaker sense: arbitrary functions A:{1,…,n}→{1,…,n}A:\{1,\dots,n\}\to\{1,\dots,n\}A:{1,…,n}→{1,…,n}, nnn^nnn of them, with cost cA=∑raA(r) rc_A=\sum_r a_{A(r)\,r}cA​=∑r​aA(r)r​ and vector (vA)i=1−#{r:A(r)=i}(v_A)_i=1-\#\{r:A(r)=i\}(vA​)i​=1−#{r:A(r)=i} (3.4). The subgradient step raises the price of a man assigned no job and lowers the price of a man assigned several; vA=0v_A=0vA​=0 exactly when AAA is a permutation.

In the Lean development these are assignCost, assignVec, IsOptimalAssignment, w and optSet in the namespace HeldWolfeCrowder.Assignment.

Formalization targets

Goal: Theorem 3.1 (p. 70)

If the assignment problem has a unique optimal permutation, then

dim⁡aff⁡ Ω=n.\dim\operatorname{aff}\,\Omega=n .dimaffΩ=n.

The hypothesis is uniqueness among permutations; the conclusion is the dimension of the affine hull of the optimal set.

Milestones, in the order the proof uses them

  1. Eq. (3.4): w(π)=min⁡A{cA+∑iπi(vA)i}w(\pi)=\min_A\{c_A+\sum_i\pi_i(v_A)_i\}w(π)=minA​{cA​+∑i​πi​(vA​)i​} over all nnn^nnn assignments AAA.
  2. §3, Eqs. (3.1)–(3.3): www attains its maximum, and max⁡w\max wmaxw equals the cost of an optimal permutation.
  3. Eq. (3.5): if σ\sigmaσ is the unique optimal permutation, some maximizer πˉ\bar\piπˉ of www has, for every job rrr, the minimum min⁡s[asr−πˉs]\min_s[a_{sr}-\bar\pi_s]mins​[asr​−πˉs​] attained only at s=σ(r)s=\sigma(r)s=σ(r).
  4. Eq. (3.6): for an optimal permutation σ\sigmaσ, the set Π={π:air−πi>aσ(r) r−πσ(r) for all r, i≠σ(r)}\Pi=\{\pi : a_{ir}-\pi_i>a_{\sigma(r)\,r}-\pi_{\sigma(r)}\ \text{for all } r,\ i\ne\sigma(r)\}Π={π:air​−πi​>aσ(r)r​−πσ(r)​ for all r, i=σ(r)} is convex and open, v=0v=0v=0 on it, and Π⊆Ω\Pi\subseteq\OmegaΠ⊆Ω.

Significance

The theorem turns an empirical observation into a statement about the problem: finite termination of the subgradient method on assignment problems is a property of the dual, not luck. Since www is unchanged by adding the same constant to every price, Ω\OmegaΩ always contains a line; Theorem 3.1 says that, under uniqueness, it is as large as it can be. The paper (p. 70) cites the argument of its Section 2 that, with a full-dimensional optimal set, termination of the method is "nearly certain".

The result is proved in the paper; none of it is known to be machine-checked. What the formalization adds is a checked link between three classical ingredients: the integrality of the assignment polytope (Birkhoff–von Neumann, which Mathlib has as doublyStochastic_eq_convexHull_permMatrix), linear-programming duality, and strict complementary slackness, which neither Mathlib nor the platform has in the form needed. The piecewise-linear representation (3.4) is reusable wherever the assignment dual appears as a Lagrangean subproblem.

Difficulty

The inclusion Π⊆Ω\Pi\subseteq\OmegaΠ⊆Ω is elementary; the substance is that Π\PiΠ is nonempty. The obvious candidate — any optimal dual solution — fails: an optimal π\piπ may leave ties asr−πs=aσ(r) r−πσ(r)a_{sr}-\pi_s=a_{\sigma(r)\,r}-\pi_{\sigma(r)}asr​−πs​=aσ(r)r​−πσ(r)​ for some s≠σ(r)s\ne\sigma(r)s=σ(r), so it sits on the boundary of Ω\OmegaΩ and shows nothing about dimension. What is needed is an optimal price vector with all these inequalities strict at once, and uniqueness of the optimal permutation is a statement about the primal side only; transferring it to the dual side goes through the linear relaxation (3.1), whose uniqueness is not the hypothesis, and through a strict complementarity property that is not available in Mathlib or on the platform.

Formalization scope

Men and jobs are both Fin n; the costs are a : Matrix (Fin n) (Fin n) ℝ with a i r the cost of man i on job r; prices are π : Fin n → ℝ (no inner product or norm is needed, so no EuclideanSpace). The inner minimum of (3.3) is Finset.univ.inf' over the men, well defined for every n. One-to-one assignments are Equiv.Perm (Fin n) with σ r the man doing job r, so the orientation of the matrix matches (3.3); arbitrary assignments are functions Fin n → Fin n. "Of dimension nnn" is Module.finrank ℝ (vectorSpan ℝ (optSet a)) = n. The page prints the index condition of (3.6) as "i≠ri\ne ri=r"; the formalization uses i≠σ(r)i\ne\sigma(r)i=σ(r), which is what the argument requires. The case n=0n=0n=0 is allowed and trivial.

A statement asserting only that Ω\OmegaΩ is nonempty, or that it has dimension at least one, is not this theorem: both hold for every cost matrix, the second because Ω\OmegaΩ is invariant under adding a constant to all prices. The goal requires the full value nnn, and its hypothesis is uniqueness of the optimal permutation, not of the optimal linear-programming solution.

A complete development needs: the assignment linear program and its integrality (Mathlib's Birkhoff–von Neumann theorem), weak and strong duality between (3.1) and (3.2) or directly max⁡w=min⁡σcσ\max w=\min_\sigma c_\sigmamaxw=minσ​cσ​, and a strict complementarity statement for this primal–dual pair; the last two are reusable beyond this mission. Contributions of any of these, and of alternative arguments for (3.5) that avoid strict complementary slackness, are welcome.

Selected references

  • M. Held, P. Wolfe, H. P. Crowder, Validation of subgradient optimization, Mathematical Programming 6 (1974) 62–88. https://doi.org/10.1007/BF01580223
  • M. Held, R. M. Karp, The traveling-salesman problem and minimum spanning trees: Part II, Mathematical Programming 1 (1971) 6–25. https://doi.org/10.1007/BF01584070
  • H. W. Kuhn, The Hungarian method for the assignment problem, Naval Research Logistics Quarterly 2 (1955) 83–97. https://doi.org/10.1002/nav.3800020109
  • A. J. Goldman, A. W. Tucker, Theory of linear programming, in H. W. Kuhn, A. W. Tucker (eds.), Linear Inequalities and Related Systems, Annals of Mathematics Studies 38, Princeton University Press, 1956, 53–97.
  • Mathlib, Mathlib/Analysis/Convex/Birkhoff.lean (Birkhoff–von Neumann theorem, doublyStochastic_eq_convexHull_permMatrix). https://github.com/leanprover-community/mathlib4/blob/master/Mathlib/Analysis/Convex/Birkhoff.lean
6 thms3 active usersReviewed
🏆Completed
Dynamic ProgrammingOperations ResearchOptimization·Captain: mikedeng1

Integrating Replenishment Decisions with Advance Demand Information II: With Zero Set-up Cost the Myopic Base-Stock Policy Is Optimal When Myopic Levels Are NondecreasingResearch Paper

Motivation

Many firms learn about demand before it has to be served: customers place orders days or weeks ahead of the date they want delivery. Gallego and Özer (Management Science 47(10), 2001) model this advance demand information in a periodic-review inventory system and ask how the optimal replenishment policy should use it. Classical inventory theory (Arrow, Harris and Marschak 1951; Scarf 1959; Veinott 1965, 1966; Iglehart 1963) assumes that nothing about future demand is known when an order is placed. With advance orders the state of the system is no longer a single number, and it is not a priori clear whether the familiar policy structures survive.

This mission covers the paper's zero set-up cost case (Section 5). The companion mission Integrating Replenishment Decisions with Advance Demand Information I covers the positive set-up cost case and its (s,S)(s, S)(s,S) policies.

Setting

Time is divided into periods t=1,…,Tt = 1, \dots, Tt=1,…,T. The supply lead time is an integer L≥0L \ge 0L≥0, and the information horizon is NNN. In period ttt customers place orders Dt=(Dt,t,…,Dt,t+N)D_t = (D_{t,t}, \dots, D_{t,t+N})Dt​=(Dt,t​,…,Dt,t+N​), where Dt,s≥0D_{t,s} \ge 0Dt,s​≥0 is demand placed in period ttt for delivery in period sss. Throughout, N>L+1N > L + 1N>L+1; write M=N−L−1≥1M = N - L - 1 \ge 1M=N−L−1≥1.

At the start of period ttt the decision maker knows two things. The first is the modified inventory position xtx_txt​: on-hand stock plus outstanding orders minus backorders, net of the demand already observed for the protection period t,…,t+Lt, \dots, t+Lt,…,t+L. The second is the vector

ot=(ot,t+L+1,…,ot,t+N−1)∈RMo_t = (o_{t,t+L+1}, \dots, o_{t,t+N-1}) \in \mathbb{R}^Mot​=(ot,t+L+1​,…,ot,t+N−1​)∈RM

of demands already observed for periods beyond the protection period. The decision maker raises the position to y≥xty \ge x_ty≥xt​ at zero fixed cost, the demand vector DtD_tDt​ is realised, and the state moves to

xt+1=y−∑k=0L+1Dt,t+k−ot,t+L+1,ot+1,s=ot,s+Dt,s (s=t+L+2,…,t+N),x_{t+1} = y - \sum_{k=0}^{L+1} D_{t,t+k} - o_{t,t+L+1}, \qquad o_{t+1,s} = o_{t,s} + D_{t,s}\ (s = t+L+2, \dots, t+N),xt+1​=y−k=0∑L+1​Dt,t+k​−ot,t+L+1​,ot+1,s​=ot,s​+Dt,s​ (s=t+L+2,…,t+N),

with ot,t+N=0o_{t,t+N} = 0ot,t+N​=0.

Costs enter through a single-period cost Gt:R→RG_t : \mathbb{R} \to \mathbb{R}Gt​:R→R (holding, backorder and linear ordering cost, charged against the demand over the protection period) and one-period discount factors αt+1>0\alpha_{t+1} > 0αt+1​>0. The optimal cost-to-go JtJ_tJt​ and the cost VtV_tVt​ of ordering up to yyy satisfy

Jt(x,o)=min⁡y≥xVt(y,o),Vt(y,o)=Gt(y)+αt+1 E Jt+1(xt+1,ot+1),JT+1≡0,J_t(x, o) = \min_{y \ge x} V_t(y, o), \qquad V_t(y, o) = G_t(y) + \alpha_{t+1}\,\mathbb{E}\,J_{t+1}(x_{t+1}, o_{t+1}), \qquad J_{T+1} \equiv 0,Jt​(x,o)=y≥xmin​Vt​(y,o),Vt​(y,o)=Gt​(y)+αt+1​EJt+1​(xt+1​,ot+1​),JT+1​≡0,

where the expectation is over DtD_tDt​. The base-stock level in period ttt is the smallest minimizer

yt(o)=min⁡{y:Vt(y,o)=min⁡xVt(x,o)},y_t(o) = \min\{y : V_t(y, o) = \min_x V_t(x, o)\},yt​(o)=min{y:Vt​(y,o)=xmin​Vt​(x,o)},

and the myopic level is the smallest minimizer of the single-period cost,

ytm=min⁡{y:Gt(y)=min⁡xGt(x)}.y^m_t = \min\{y : G_t(y) = \min_x G_t(x)\}.ytm​=min{y:Gt​(y)=xmin​Gt​(x)}.

A function f(x,θ)f(x, \theta)f(x,θ) has decreasing differences if f(x1,θ)−f(x2,θ)≤f(x1,θ′)−f(x2,θ′)f(x_1, \theta) - f(x_2, \theta) \le f(x_1, \theta') - f(x_2, \theta')f(x1​,θ)−f(x2​,θ)≤f(x1​,θ′)−f(x2​,θ′) whenever x1≥x2x_1 \ge x_2x1​≥x2​ and θ≥θ′\theta \ge \theta'θ≥θ′ componentwise.

Formalization targets

Goal: Theorem 5 (p. 1352)

If t↦ytmt \mapsto y^m_tt↦ytm​ is nondecreasing on {1,…,T}\{1, \dots, T\}{1,…,T}, then for every period ttt and every observed-demand vector o≥0o \ge 0o≥0,

yt(o)=ytm.y_t(o) = y^m_t .yt​(o)=ytm​.

The optimal order-up-to level then ignores all advance information beyond the protection period. A second item states the paper's stationary special case: if Gt=GG_t = GGt​=G for all ttt, the smallest minimizer ymy^mym of GGG is the optimal base-stock level in every period.

Milestones: Theorem 4 (p. 1351)

For every period ttt and every fixed oto_tot​:

  1. Vt(⋅,ot)V_t(\cdot, o_t)Vt​(⋅,ot​) is convex and Vt(x,ot)→∞V_t(x, o_t) \to \inftyVt​(x,ot​)→∞ as ∣x∣→∞|x| \to \infty∣x∣→∞;
  2. yt(ot)y_t(o_t)yt​(ot​) exists and Jt(x,ot)=Vt(max⁡(yt(ot),x),ot)J_t(x, o_t) = V_t(\max(y_t(o_t), x), o_t)Jt​(x,ot​)=Vt​(max(yt​(ot​),x),ot​): a state-dependent base-stock policy is optimal;
  3. Jt(⋅,ot)J_t(\cdot, o_t)Jt​(⋅,ot​) is nondecreasing and convex;
  4. Vt(x,o)V_t(x, o)Vt​(x,o) has decreasing differences in (x,o)(x, o)(x,o);
  5. Jt(x,o)J_t(x, o)Jt​(x,o) has decreasing differences in (x,o)(x, o)(x,o);
  6. yt(o)y_t(o)yt​(o) is nondecreasing in ooo.

Parts 1–3 are what the goal's proof uses. Parts 4–6 are the paper's second zero set-up result, monotonicity of the base-stock level in observed demand.

Significance

The theorem identifies when advance demand information beyond the protection period can be ignored. When the myopic levels do not decrease over time, which includes stationary costs and ramping-up demand, the (1+M)(1 + M)(1+M)-dimensional dynamic program collapses to a sequence of one-dimensional newsvendor-type problems. That is both a computational simplification and a managerial statement: information about demand after the protection period does not change the order. Theorem 4, Part 5 gives the complementary monotone comparative statics. When the myopic condition fails, more observed demand never lowers the order-up-to level.

The results are proved in the paper, with the proofs in Appendix B. No machine-checked version exists. This mission produces a formal account of the finite-horizon recursion with a multi-dimensional information state, and checks the base-stock and myopic-optimality arguments against it.

Difficulty

The obvious induction carries convexity of Jt+1J_{t+1}Jt+1​ backward, but here the future cost is evaluated at a random next state (xt+1,ot+1)(x_{t+1}, o_{t+1})(xt+1​,ot+1​) whose first coordinate depends on the current observed demand ot,t+L+1o_{t,t+L+1}ot,t+L+1​. Showing that the base-stock level does not depend on oto_tot​ therefore needs more than convexity. It needs to know where Jt+1(⋅,ot+1)J_{t+1}(\cdot, o_{t+1})Jt+1​(⋅,ot+1​) is flat, uniformly in the random ot+1o_{t+1}ot+1​, and that the next position cannot exceed the current order-up-to level. The latter holds only on the reachable states, where observed demands are nonnegative. For a sufficiently negative ot,t+L+1o_{t,t+L+1}ot,t+L+1​ the next period starts above its myopic level whatever is ordered now, and the conclusion fails. On the analytic side, every infimum and expectation in the recursion must be shown to be finite and attained before the order-theoretic argument can start.

Formalization scope

The model is parametrised by LLL and M≥1M \ge 1M≥1, with N=L+M+1N = L + M + 1N=L+M+1. The demand vector is a function on {0,…,N}\{0, \dots, N\}{0,…,N} and ooo a function on {0,…,M−1}\{0, \dots, M-1\}{0,…,M−1}, ordered componentwise. JtJ_tJt​ is defined by backward recursion with Jt≡0J_t \equiv 0Jt​≡0 for t>Tt > Tt>T. The minimum over y≥xy \ge xy≥x is a real infimum and the expectation a Bochner integral against the law μt\mu_tμt​ of DtD_tDt​. Attainment and finiteness are consequences proved in the theorems, not assumptions. Base-stock and myopic levels are characterised as smallest minimizers (IsLeast), never through sInf.

The single-period cost GtG_tGt​ is a primitive rather than being assembled from ctc_tct​, gtg_tgt​ and the lead-time demand; the paper's GtG_tGt​ has the assumed properties, so the theorems cover the paper's model. Hypotheses the paper uses without stating, all placed on primitives and labelled in the statements:

  • nonnegative demands, Dt,s≥0D_{t,s} \ge 0Dt,s​≥0 almost surely;
  • coercivity of GtG_tGt​ (the paper states it for G~t\tilde G_tG~t​ only);
  • αt+1>0\alpha_{t+1} > 0αt+1​>0;
  • finiteness of the expectation in (9), guaranteed by linear growth of GtG_tGt​ and finite first moments of DtD_tDt​. This covers piecewise-linear holding and backorder costs with any finite-mean demand (including the paper's Poisson example), but excludes superlinear costs;
  • in the goal, o≥0o \ge 0o≥0, the set of reachable states.

The goal cannot be trivialised: the hypotheses are satisfied by concrete instances (for example Gt(y)=∣y∣G_t(y) = |y|Gt​(y)=∣y∣ with any finite-mean nonnegative demand), and the conclusion identifies the base-stock level exactly rather than asserting that some minimizer exists.

Out of scope: the reduction of the control problem to the functional equation (Appendix A, Özer 2000), the infinite-horizon Theorem 6, and Lemma 5, whose proof argues on the integers and whose real-valued form with a unit forward difference is unverified. Contributions of general lemmas are welcome: convexity and attainment for inf⁡y≥x\inf_{y \ge x}infy≥x​ of a convex coercive function, and preservation of convexity and decreasing differences under expectation. All of them are reusable in other inventory models.

Selected references

  • G. Gallego, Ö. Özer, Integrating Replenishment Decisions with Advance Demand Information, Management Science 47(10):1344–1360, 2001. https://doi.org/10.1287/mnsc.47.10.1344.10261
  • A. F. Veinott, Optimal Policy for a Multi-Product, Dynamic, Nonstationary Inventory Problem, Management Science 12(3):206–222, 1965. https://doi.org/10.1287/mnsc.12.3.206
  • D. L. Iglehart, Optimality of (s, S) Policies in the Infinite Horizon Dynamic Inventory Problem, Management Science 9(2):259–267, 1963. https://doi.org/10.1287/mnsc.9.2.259
  • D. M. Topkis, Supermodularity and Complementarity, Princeton University Press, 1998. https://doi.org/10.1515/9781400822539
9 thms2 active usersReviewed
🏆Completed
Control TheoryConvex OptimizationOperations Research+1·Captain: mikedeng1

Robust Solutions to Uncertain Semidefinite Programs I: Exact SDP Reformulation of the Robust LMI under Full Linear-Fractional PerturbationsResearch Paper

Motivation

A semidefinite program (SDP) minimizes a linear objective cTxc^TxcTx subject to a linear matrix inequality (LMI) F(x)=F0+∑i=1mxiFi⪰0F(x) = F_0 + \sum_{i=1}^m x_iF_i \succeq 0F(x)=F0​+∑i=1m​xi​Fi​⪰0. SDPs model problems in control, combinatorial optimization, statistics and engineering design, and they are solved efficiently by interior-point methods. In applications the data F0,…,FmF_0,\dots,F_mF0​,…,Fm​ are rarely known exactly: they come from measurements, from linearized models, or from rounding. A solution that is optimal for the nominal data may violate the constraint for data that differ only slightly.

El Ghaoui, Oustry and Lebret (SIAM J. Optim. 9(1), 1998) asked for robust solutions: points xxx that satisfy the constraint for every admissible value of an unknown but bounded perturbation, and among them one that minimizes cTxc^TxcTx. Their paper, together with the contemporaneous work of Ben-Tal and Nemirovski on robust convex optimization (Math. Oper. Res. 23(4), 1998), founded robust semidefinite programming. The perturbation model they use, the linear-fractional representation (LFR), is the standard uncertainty model of robust control, where the same exact reformulation appears as the multiplier characterization of quadratic stability under norm-bounded uncertainty.

This mission formalizes the first main result of the paper: when the perturbation is full (an arbitrary matrix of bounded spectral norm), the robust problem is exactly an SDP with one extra scalar variable.

Setting

Fix natural numbers m,n,p,qm, n, p, qm,n,p,q and a decision vector x∈Rmx \in \mathbb{R}^mx∈Rm. The data are:

  • symmetric matrices F0,…,Fm∈Rn×nF_0,\dots,F_m \in \mathbb{R}^{n\times n}F0​,…,Fm​∈Rn×n, defining the affine map F(x)=F0+∑ixiFiF(x) = F_0 + \sum_i x_iF_iF(x)=F0​+∑i​xi​Fi​;
  • matrices R0,…,Rm∈Rq×nR_0,\dots,R_m \in \mathbb{R}^{q\times n}R0​,…,Rm​∈Rq×n, defining R(x)=R0+∑ixiRiR(x) = R_0 + \sum_i x_iR_iR(x)=R0​+∑i​xi​Ri​;
  • fixed matrices L∈Rn×pL \in \mathbb{R}^{n\times p}L∈Rn×p and D∈Rq×pD \in \mathbb{R}^{q\times p}D∈Rq×p;
  • a level ρ>0\rho > 0ρ>0.

For a matrix XXX, ∥X∥\|X\|∥X∥ denotes its largest singular value (the spectral norm), and X⪰0X \succeq 0X⪰0 means that XXX is symmetric positive semidefinite. A perturbation is a matrix Δ∈Rp×q\Delta \in \mathbb{R}^{p\times q}Δ∈Rp×q. The perturbed constraint matrix is the LFR (5)

F(x,Δ)=F(x)+LΔ(I−DΔ)−1R(x)+R(x)T(I−ΔTDT)−1ΔTLT,\mathbf{F}(x,\Delta) = F(x) + L\Delta(I - D\Delta)^{-1}R(x) + R(x)^T(I - \Delta^TD^T)^{-1}\Delta^TL^T,F(x,Δ)=F(x)+LΔ(I−DΔ)−1R(x)+R(x)T(I−ΔTDT)−1ΔTLT,

which is well defined exactly when det⁡(I−DΔ)≠0\det(I - D\Delta) \neq 0det(I−DΔ)=0. For a linear subspace D\mathcal{D}D of Rp×q\mathbb{R}^{p\times q}Rp×q, the robust feasible set (2) is

Xρ={x∈Rm:for every Δ∈D with ∥Δ∥≤ρ, F(x,Δ) is well defined and F(x,Δ)⪰0},\mathcal{X}_\rho = \bigl\{x \in \mathbb{R}^m : \text{for every } \Delta \in \mathcal{D} \text{ with } \|\Delta\| \le \rho,\ \mathbf{F}(x,\Delta) \text{ is well defined and } \mathbf{F}(x,\Delta) \succeq 0\bigr\},Xρ​={x∈Rm:for every Δ∈D with ∥Δ∥≤ρ, F(x,Δ) is well defined and F(x,Δ)⪰0},

and the robust SDP (4) is: minimize cTxc^TxcTx subject to x∈Xρx \in \mathcal{X}_\rhox∈Xρ​, for a given c∈Rm∖{0}c \in \mathbb{R}^m \setminus \{0\}c∈Rm∖{0}. In this mission D=Rp×q\mathcal{D} = \mathbb{R}^{p\times q}D=Rp×q, the full perturbation case, and the paper's standing assumption of §3.1 is ∥D∥<ρ−1\|D\| < \rho^{-1}∥D∥<ρ−1.

Formalization targets

Goal: Theorem 3.1 (p. 36), as a set identity

Under ρ>0\rho > 0ρ>0, ∥D∥<ρ−1\|D\| < \rho^{-1}∥D∥<ρ−1, q≥1q \ge 1q≥1 and L≠0L \ne 0L=0, for every x∈Rmx \in \mathbb{R}^mx∈Rm,

x∈Xρ  ⟺  ∃ τ∈R: [F(x)−τLLTR(x)T−τLDTR(x)−τDLTτ(ρ−2I−DDT)]⪰0.(10)x \in \mathcal{X}_\rho \iff \exists\,\tau \in \mathbb{R}:\ \begin{bmatrix} F(x) - \tau LL^T & R(x)^T - \tau LD^T \\ R(x) - \tau DL^T & \tau(\rho^{-2}I - DD^T)\end{bmatrix} \succeq 0. \qquad (10)x∈Xρ​⟺∃τ∈R: [F(x)−τLLTR(x)−τDLT​R(x)T−τLDTτ(ρ−2I−DDT)​]⪰0.(10)

The paper states that the robust SDP and a corresponding solution can be computed by solving the SDP "minimize cTxc^TxcTx subject to (10)" in the variables (x,τ)(x, \tau)(x,τ). Both problems have the objective cTxc^TxcTx, so the identity above, between Xρ\mathcal{X}_\rhoXρ​ and the xxx-projection of the feasible set of (10), is the content of that sentence. A companion item states the solution correspondence explicitly: xxx is optimal for the robust SDP if and only if (x,τ)(x,\tau)(x,τ) is optimal for (10) for some τ\tauτ.

Milestones

  1. Well-posedness (§3.1, p. 36). For ρ>0\rho > 0ρ>0: det⁡(I−DΔ)≠0\det(I - D\Delta) \ne 0det(I−DΔ)=0 for every Δ\DeltaΔ with ∥Δ∥≤ρ\|\Delta\| \le \rho∥Δ∥≤ρ if and only if ∥D∥<ρ−1\|D\| < \rho^{-1}∥D∥<ρ−1.
  2. Lemma 3.1 (p. 36). For F=FTF = F^TF=FT, q≥1q \ge 1q≥1 and L≠0L \ne 0L=0: det⁡(I−DΔ)≠0\det(I - D\Delta) \ne 0det(I−DΔ)=0 and F+LΔ(I−DΔ)−1R+RT(I−DΔ)−TΔTLT⪰0F + L\Delta(I - D\Delta)^{-1}R + R^T(I - D\Delta)^{-T}\Delta^TL^T \succeq 0F+LΔ(I−DΔ)−1R+RT(I−DΔ)−TΔTLT⪰0 for every ∥Δ∥≤1\|\Delta\| \le 1∥Δ∥≤1 if and only if ∥D∥<1\|D\| < 1∥D∥<1 and some scalar τ\tauτ satisfies
[F−τLLTRT−τLDTR−τDLTτ(I−DDT)]⪰0.\begin{bmatrix} F - \tau LL^T & R^T - \tau LD^T \\ R - \tau DL^T & \tau(I - DD^T)\end{bmatrix} \succeq 0.[F−τLLTR−τDLT​RT−τLDTτ(I−DDT)​]⪰0.

The paper cites the S-procedure as the classical result behind Lemma 3.1; it is already proved on the platform (ConvexOptimization.s_procedure) and is included as a reference item.

Significance

The robust feasible set is defined by infinitely many matrix inequalities, one per perturbation, each rational in Δ\DeltaΔ; in general such a set is convex but has no tractable description, and the paper notes that the structured version of the problem is NP-hard. Theorem 3.1 shows that for full perturbations nothing is lost by replacing that semi-infinite constraint with a single LMI of size n+qn + qn+q in one extra variable. Consequences: the robust problem is solved by a standard SDP solver; the largest admissible perturbation level is a generalized eigenvalue problem; and the exact result is the benchmark against which the paper's sufficient conditions for structured perturbations (Theorem 3.2) and its closed-form counterparts for unstructured perturbations (Theorem 5.1) are measured.

The result is proved in the paper (from the S-procedure, with the details deferred to a cited report). To the best of available knowledge it has no machine-checked proof. The mission produces a formal statement of the LFR model and of the robust feasible set that later missions on robust SDPs can reuse, a formal proof of the well-posedness condition, and a formal proof of the exact reformulation built on the platform's S-procedure. Formalizing it also records two points the printed statement leaves implicit: the result needs L≠0L \ne 0L=0 and a nonempty perturbation output dimension q≥1q \ge 1q≥1.

Difficulty

The direction from the LMI to robust feasibility is elementary. The converse is the substance: robust feasibility is a statement about a continuum of perturbations, each entering rationally, and testing the LMI against finitely many extreme perturbations does not produce a multiplier τ\tauτ. The exactness of the reformulation rests on a lossless certificate for an implication between quadratic inequalities, which holds only under a strict feasibility condition; that condition is where L≠0L \ne 0L=0 enters, and without it the lemma is false. The well-posedness milestone requires showing that ∥D∥<ρ−1\|D\| < \rho^{-1}∥D∥<ρ−1 is also necessary, which is not a norm estimate but needs a perturbation that makes I−DΔI - D\DeltaI−DΔ singular.

Formalization scope

Matrices are Mathlib Matrix (Fin a) (Fin b) ℝ. The affine maps are given by coefficient lists indexed by Fin (m + 1), the constant term first. The norm on matrices is the ℓ2\ell^2ℓ2 operator norm, opened with open scoped Matrix.Norms.L2Operator; it is the largest singular value, and no other matrix norm is used. X⪰0X \succeq 0X⪰0 is Matrix.PosSemidef, which includes symmetry. Block matrices are Matrix.fromBlocks over the index type Fin n ⊕ Fin q, with R(x)T−τLDTR(x)^T - \tau LD^TR(x)T−τLDT top-right and R(x)−τDLTR(x) - \tau DL^TR(x)−τDLT bottom-left. Mathlib's matrix inverse returns 000 at a singular matrix, so the condition det⁡(I−DΔ)≠0\det(I - D\Delta) \ne 0det(I−DΔ)=0 appears in the robust feasible set in the same universally quantified clause as positive semidefiniteness, as the paper's "well defined" requires; dropping it, or using an entrywise matrix norm, would change the set and is excluded.

Readings and corrections of the printed statements:

  • "The RSDP (4) and a corresponding solution xxx can be computed by solving the SDP" is read as the identity of Xρ\mathcal{X}_\rhoXρ​ with the xxx-projection of the feasible set of (10), for every xxx, together with the solution correspondence item. A statement of equal optimal values alone would be weaker and is not used.
  • Correction: L≠0L \ne 0L=0 is added to Lemma 3.1 and Theorem 3.1. The printed statements fail for L=0L = 0L=0: with n=p=q=1n = p = q = 1n=p=q=1, F=0F = 0F=0, L=0L = 0L=0, D=0D = 0D=0, R=1R = 1R=1, the perturbation does not enter, so the robust condition holds, while the LMI reads [011⋅]⪰0\begin{bmatrix}0 & 1\\1 & \cdot\end{bmatrix} \succeq 0[01​1⋅​]⪰0, which is infeasible.
  • q≥1q \ge 1q≥1 makes "matrices of appropriate size" explicit; for q=0q = 0q=0 the lower-right block is empty and the equivalence fails.
  • The standing assumptions ρ>0\rho > 0ρ>0 (§3) and ∥D∥<ρ−1\|D\| < \rho^{-1}∥D∥<ρ−1 (§3.1) are hypotheses of the goal. In Lemma 3.1, ∥D∥<1\|D\| < 1∥D∥<1 is part of the conclusion, as printed, and τ\tauτ carries no sign constraint, as printed.
  • The paper's standing assumption that the nominal problem is feasible (X0≠∅\mathcal{X}_0 \ne \emptysetX0​=∅) is not needed for the identity and is not added.

Welcome contributions: proofs of the well-posedness milestone (a spectral-norm and singular-vector argument, reusable wherever I−DΔI - D\DeltaI−DΔ must be invertible); of Lemma 3.1 from the S-procedure (the reachability lemma for norm-bounded perturbations is reusable in robust control); of the goal from Lemma 3.1 by rescaling; and general lemmas on the spectral norm of rank-one matrices and on Schur complements of block matrices.

Selected references

  • L. El Ghaoui, F. Oustry and H. Lebret, Robust Solutions to Uncertain Semidefinite Programs, SIAM J. Optim. 9(1), 33–52, 1998. https://doi.org/10.1137/S1052623496305717
  • A. Ben-Tal and A. Nemirovski, Robust Convex Optimization, Math. Oper. Res. 23(4), 769–805, 1998. https://doi.org/10.1287/moor.23.4.769
  • S. Boyd, L. El Ghaoui, E. Feron and V. Balakrishnan, Linear Matrix Inequalities in System and Control Theory, SIAM, 1994. https://doi.org/10.1137/1.9781611970777
  • S. Boyd and L. Vandenberghe, Convex Optimization, Cambridge University Press, 2004, Appendix B.2 (the S-procedure). https://web.stanford.edu/~boyd/cvxbook/
5 thms3 active usersReviewed
🏆Completed
Control TheoryConvex OptimizationOperations Research+1·Captain: mikedeng1

Robust Solutions to Uncertain Semidefinite Programs II: An SDP Inner Approximation of the Robust Feasible Set under Structured PerturbationsResearch Paper

Motivation

A semidefinite program (SDP) minimizes a linear objective cTxc^TxcTx subject to a linear matrix inequality F(x)=F0+∑i=1mxiFi⪰0F(x) = F_0 + \sum_{i=1}^m x_i F_i \succeq 0F(x)=F0​+∑i=1m​xi​Fi​⪰0. In engineering applications the coefficient matrices are rarely known exactly: they come from measurements, from a model of a physical plant, or from a finite-precision implementation. El Ghaoui, Oustry and Lebret (SIAM J. Optim. 9(1), 1998) asked for solutions that remain feasible for every admissible value of the uncertain data, and showed how to compute such robust solutions by semidefinite programming. The paper appeared alongside Ben-Tal and Nemirovski's robust convex programming (Math. Oper. Res. 23(4), 1998) and is one of the two founding treatments of robust SDP.

When the uncertainty has structure (a block-diagonal perturbation, repeated scalar parameters, a symmetric matrix), the exact robust problem is NP-hard (El Ghaoui and Lebret, SIAM J. Matrix Anal. Appl. 18, 1997). This is the same obstacle that robust control meets in computing the structured singular value, and the remedy the paper uses, scaling matrices that commute with the perturbation structure, goes back to that literature (Doyle, IEE Proc. D 129, 1982; Fan, Tits and Doyle, IEEE Trans. Automat. Control 36, 1991). This mission formalizes the resulting tractable conservative approximation, Theorem 3.2 of the paper, together with the lemma it rests on and an application to integer feasibility problems.

Setting

Fix natural numbers m,n,p,qm, n, p, qm,n,p,q. The decision variable is x∈Rmx \in \mathbb{R}^mx∈Rm. The nominal data are affine maps

F(x)=F0+∑i=1mxiFi∈Rn×n,R(x)=R0+∑i=1mxiRi∈Rq×n,F(x) = F_0 + \sum_{i=1}^m x_i F_i \in \mathbb{R}^{n\times n}, \qquad R(x) = R_0 + \sum_{i=1}^m x_i R_i \in \mathbb{R}^{q\times n},F(x)=F0​+i=1∑m​xi​Fi​∈Rn×n,R(x)=R0​+i=1∑m​xi​Ri​∈Rq×n,

with every FiF_iFi​ symmetric, and fixed matrices L∈Rn×pL \in \mathbb{R}^{n\times p}L∈Rn×p, D∈Rq×pD \in \mathbb{R}^{q\times p}D∈Rq×p. A perturbation is a matrix Δ∈Rp×q\Delta \in \mathbb{R}^{p\times q}Δ∈Rp×q, and the perturbed constraint matrix is the linear-fractional representation (LFR)

F(x,Δ)=F(x)+LΔ(I−DΔ)−1R(x)+R(x)T(I−ΔTDT)−1ΔTLT,\mathbf{F}(x,\Delta) = F(x) + L\Delta(I - D\Delta)^{-1}R(x) + R(x)^T(I - \Delta^TD^T)^{-1}\Delta^TL^T,F(x,Δ)=F(x)+LΔ(I−DΔ)−1R(x)+R(x)T(I−ΔTDT)−1ΔTLT,

which is defined when det⁡(I−DΔ)≠0\det(I - D\Delta) \neq 0det(I−DΔ)=0. The perturbation ranges over a linear subspace D⊆Rp×q\mathcal{D} \subseteq \mathbb{R}^{p\times q}D⊆Rp×q, which encodes the structure, and is bounded by a level ρ>0\rho > 0ρ>0 in the spectral norm ∥Δ∥\|\Delta\|∥Δ∥ (the largest singular value). The robust feasible set is

Xρ={x:for every Δ∈D with ∥Δ∥≤ρ, det⁡(I−DΔ)≠0 and F(x,Δ)⪰0},\mathcal{X}_\rho = \{x : \text{for every } \Delta \in \mathcal{D} \text{ with } \|\Delta\| \le \rho,\ \det(I - D\Delta) \neq 0 \text{ and } \mathbf{F}(x,\Delta) \succeq 0\},Xρ​={x:for every Δ∈D with ∥Δ∥≤ρ, det(I−DΔ)=0 and F(x,Δ)⪰0},

and the robust SDP (RSDP) is to minimize cTxc^TxcTx over Xρ\mathcal{X}_\rhoXρ​.

The scaling set of D\mathcal{D}D is the linear subspace

B={(S,T,G)∈Rp×p×Rq×q×Rp×q:SΔ=ΔT, GΔT=−ΔGT for every Δ∈D}.\mathcal{B} = \{(S,T,G) \in \mathbb{R}^{p\times p}\times\mathbb{R}^{q\times q}\times\mathbb{R}^{p\times q} : S\Delta = \Delta T,\ G\Delta^T = -\Delta G^T \text{ for every } \Delta \in \mathcal{D}\}.B={(S,T,G)∈Rp×p×Rq×q×Rp×q:SΔ=ΔT, GΔT=−ΔGT for every Δ∈D}.

Formalization targets

Goal: Theorem 3.2 (p. 37), as an inclusion of feasible sets

For every xxx: if some (S,T,G)∈B(S,T,G) \in \mathcal{B}(S,T,G)∈B has S≻0S \succ 0S≻0, T≻0T \succ 0T≻0 and

[F(x)−LSLTR(x)T−LSDT+LGR(x)−DSLT+GTLTρ−2T−DSDT+DG+GTDT]≻0,\begin{bmatrix} F(x) - LSL^T & R(x)^T - LSD^T + LG \\ R(x) - DSL^T + G^TL^T & \rho^{-2}T - DSD^T + DG + G^TD^T\end{bmatrix} \succ 0,[F(x)−LSLTR(x)−DSLT+GTLT​R(x)T−LSDT+LGρ−2T−DSDT+DG+GTDT​]≻0,

then x∈Xρx \in \mathcal{X}_\rhox∈Xρ​, and in fact F(x,Δ)≻0\mathbf{F}(x,\Delta) \succ 0F(x,Δ)≻0 for every Δ∈D\Delta \in \mathcal{D}Δ∈D with ∥Δ∥≤ρ\|\Delta\| \le \rho∥Δ∥≤ρ. A companion item states the consequence for optimal values: the SDP value is an upper bound on the RSDP value, with both infima taken in the extended reals.

Milestones

  1. Lemma 3.2 (p. 37): the same implication for constant FFF, RRR and ρ=1\rho = 1ρ=1, with the matrix (13).
  2. The full-perturbation case (p. 37): for D=Rp×q\mathcal{D} = \mathbb{R}^{p\times q}D=Rp×q and p,q≥1p, q \ge 1p,q≥1, B\mathcal{B}B consists exactly of the triples (τIp,τIq,0)(\tau I_p, \tau I_q, 0)(τIp​,τIq​,0), with τ≥0\tau \ge 0τ≥0 when S⪰0S \succeq 0S⪰0.
  3. Theorem 5.6 (p. 48): if Fi=2LiRiF_i = 2L_iR_iFi​=2Li​Ri​ with ri=rank⁡Fir_i = \operatorname{rank} F_iri​=rankFi​, and xfeasx_{\mathrm{feas}}xfeas​ satisfies, for some λ≥0\lambda \ge 0λ≥0 and block-diagonal S=STS = S^TS=ST, G=−GTG = -G^TG=−GT,
[F(xfeas)−λI−LSLT12RT+LG12R−GLTS]≻0,\begin{bmatrix} F(x_{\mathrm{feas}}) - \lambda I - LSL^T & \tfrac12R^T + LG \\ \tfrac12R - GL^T & S\end{bmatrix} \succ 0,[F(xfeas​)−λI−LSLT21​R−GLT​21​RT+LGS​]≻0,

then every integer vector closest to xfeasx_{\mathrm{feas}}xfeas​ in the maximum norm satisfies F(z)⪰0F(z) \succeq 0F(z)⪰0.

Significance

The result. Theorem 3.2 replaces an NP-hard semi-infinite constraint, one matrix inequality for each admissible perturbation, by a single linear matrix inequality in the enlarged variable (x,S,T,G)(x, S, T, G)(x,S,T,G). Every point it certifies is robustly feasible, so its optimal value is a certified upper bound on the robust optimum and its optimizer is a usable robust solution. In the full case the scalings collapse to one multiplier τ\tauτ (milestone 2), which connects the bound to the exact reformulation of Section 3.1 of the paper. Theorem 5.6 shows the same machinery at work on a combinatorial problem: robustness against perturbations of size 1/21/21/2 in each coordinate of xxx turns an SDP-feasible point into an integer solution by rounding.

Formalizing it. The results are proved in the paper (Lemma 3.2 with the proof deferred to [16]); none of them has a machine-checked proof that this mission is aware of, and the platform has no linear-fractional or structured-perturbation results. The formalization also settles the exact form of the certificate: as printed, the matrix (13) and the LMI of Theorem 3.2 contain products that are dimensionally undefined, and this mission states the condition the proof actually yields (see the scope section).

Difficulty

The inequality to be proved is a statement about infinitely many perturbations, and F(x,Δ)\mathbf{F}(x,\Delta)F(x,Δ) depends on Δ\DeltaΔ through a matrix inverse. The natural first step, eliminating Δ\DeltaΔ by an exact S-procedure as in the full case, is not available: with a structured D\mathcal{D}D the set of pairs of vectors linked by some Δ∈D\Delta \in \mathcal{D}Δ∈D is not described by one quadratic inequality, and losslessness fails. The scalings in B\mathcal{B}B give several valid quadratic inequalities instead, and one must show that their combination controls every Δ\DeltaΔ in the norm ball, including the well-posedness claim det⁡(I−DΔ)≠0\det(I - D\Delta) \neq 0det(I−DΔ)=0, which is part of the conclusion rather than an assumption. The commutation condition SΔ=ΔTS\Delta = \Delta TSΔ=ΔT must be turned into an inequality for ∥Δ∥≤1\|\Delta\| \le 1∥Δ∥≤1, which requires more than the definition of the spectral norm. For Theorem 5.6 the block-diagonal perturbation family and the rescaling between ρ=1/2\rho = 1/2ρ=1/2 and the stated matrix must be matched to the general lemma.

Formalization scope

Matrices are Matrix (Fin a) (Fin b) ℝ; ≻0\succ 0≻0 and ⪰0\succeq 0⪰0 are Matrix.PosDef and Matrix.PosSemidef (both include symmetry); block matrices are Matrix.fromBlocks on Fin n ⊕ Fin q. The norm of a perturbation is the ℓ2\ell^2ℓ2 operator norm (open scoped Matrix.Norms.L2Operator), i.e. the largest singular value; the maximum norm in Theorem 5.6 is Mathlib's sup norm on Fin m → ℝ. D\mathcal{D}D is a Submodule. Affine maps are given by coefficient families indexed by Fin (m+1). Mathlib's matrix inverse is 000 at a singular matrix, so every statement pairs the LFR with det⁡(I−DΔ)≠0\det(I - D\Delta) \neq 0det(I−DΔ)=0. The standing assumption ρ>0\rho > 0ρ>0 of Section 3 is a hypothesis.

Readings and corrections of the printed statements:

  • (13) as printed is dimensionally inconsistent; we state the condition the proof yields, which coincides with the printed one when GGG is square and skew-symmetric and D\mathcal{D}D consists of symmetric matrices. Concretely, (11) prints G∈Rq×pG \in \mathbb{R}^{q\times p}G∈Rq×p with GΔ=−ΔTGTG\Delta = -\Delta^TG^TGΔ=−ΔTGT and (13) prints the blocks R−DSL−GLTR - DSL - GL^TR−DSL−GLT and T−GDT+DG−DSDTT - GD^T + DG - DSD^TT−GDT+DG−DSDT; the mission uses G∈Rp×qG \in \mathbb{R}^{p\times q}G∈Rp×q with GΔT=−ΔGTG\Delta^T = -\Delta G^TGΔT=−ΔGT and the blocks R−DSLT+GTLTR - DSL^T + G^TL^TR−DSLT+GTLT and T−DSDT+DG+GTDTT - DSD^T + DG + G^TD^TT−DSDT+DG+GTDT. The same correction applies to the LMI of Theorem 3.2 (with ρ−2T\rho^{-2}Tρ−2T). Theorem 5.6 is stated as printed.
  • "An upper bound on the RSDP (4) and a corresponding solution xxx can be computed by solving the SDP" is read as the inclusion of the SDP's feasible projection in Xρ\mathcal{X}_\rhoXρ​, for every xxx; the goal states it with the strict conclusion F(x,Δ)≻0\mathbf{F}(x,\Delta) \succ 0F(x,Δ)≻0 as well. The value form is a separate item.
  • In the full-perturbation remark, "for some τ≥0\tau \ge 0τ≥0" is stated under S⪰0S \succeq 0S⪰0, and "We then recover the exact results of section 3.1" is not formalized.
  • In Theorem 5.6, S\mathcal{S}S's index range "i=1,…,ni = 1,\dots,ni=1,…,n" is read as i=1,…,mi = 1,\dots,mi=1,…,m; the hypothesis ri=rank⁡Fir_i = \operatorname{rank}F_iri​=rankFi​ is kept.

Trivializing formalizations are ruled out: (0,0,0)∈B(0,0,0) \in \mathcal{B}(0,0,0)∈B always, so the hypotheses S≻0S \succ 0S≻0 and T≻0T \succ 0T≻0 are kept outside B\mathcal{B}B; D\mathcal{D}D is a subspace, not an arbitrary set; and the norm is the spectral norm, not Mathlib's default entrywise norm.

A complete development needs the square root of a positive definite matrix and its commutation with SSS and TTT, the spectral-norm characterization ΔΔT⪯∥Δ∥2I\Delta\Delta^T \preceq \|\Delta\|^2 IΔΔT⪯∥Δ∥2I, Schur-complement and congruence facts for block matrices, and a linear-fractional identity relating (I−DΔ)−1(I - D\Delta)^{-1}(I−DΔ)−1 to an auxiliary vector. These are reusable well beyond this mission; contributions of any of them, and of the value and rounding corollaries, are welcome.

Selected references

  • L. El Ghaoui, F. Oustry, H. Lebret, Robust Solutions to Uncertain Semidefinite Programs, SIAM J. Optim. 9(1):33–52, 1998. https://doi.org/10.1137/S1052623496305717
  • L. El Ghaoui, H. Lebret, Robust solutions to least-squares problems with uncertain data, SIAM J. Matrix Anal. Appl. 18:1035–1064, 1997. https://doi.org/10.1137/S0895479896298130
  • M. K. H. Fan, A. L. Tits, J. C. Doyle, Robustness in the presence of mixed parametric uncertainty and unmodeled dynamics, IEEE Trans. Automat. Control 36:25–38, 1991. https://doi.org/10.1109/9.62265
  • J. C. Doyle, Analysis of feedback systems with structured uncertainties, IEE Proc. D 129(6):242–250, 1982. https://doi.org/10.1049/ip-d.1982.0053
  • A. Ben-Tal, A. Nemirovski, Robust convex optimization, Math. Oper. Res. 23(4):769–805, 1998. https://doi.org/10.1287/moor.23.4.769
  • S. Boyd, L. El Ghaoui, E. Feron, V. Balakrishnan, Linear Matrix Inequalities in System and Control Theory, SIAM, 1994. https://doi.org/10.1137/1.9781611970777
5 thms2 active usersReviewed
🏆Completed
Convex OptimizationLinear algebraOperations Research+1·Captain: mikedeng1

Robust Solutions to Uncertain Semidefinite Programs III: Quadratic Growth and Uniqueness of the Robust SDP SolutionResearch Paper

Motivation

A semidefinite program (SDP) minimizes a linear objective cTxc^TxcTx subject to a linear matrix inequality F(x)=F0+∑ixiFi⪰0F(x) = F_0 + \sum_i x_i F_i \succeq 0F(x)=F0​+∑i​xi​Fi​⪰0. When the data FiF_iFi​ are uncertain, El Ghaoui, Oustry and Lebret (SIAM J. Optim. 9(1), 1998) proposed to optimize against the worst case over a norm-bounded family of perturbations: the robust SDP. Their Theorem 3.1 shows that, for unstructured ("full") perturbations, the robust SDP is itself an SDP in the enlarged variable (x,τ)(x,\tau)(x,τ). Section 4 of the paper then asks what robustification does to the solution. Nominal SDPs are often ill-posed: the optimal set can be a whole face, and optimal points can jump under small data changes. Section 4 shows that, under explicit hypotheses, the robust problem has a unique solution with quadratic growth, which is the sense in which the paper describes robustness as a regularization of SDPs. This mission formalizes that result, Theorem 4.2.

Setting

Fix natural numbers m,n,p,qm, n, p, qm,n,p,q, matrices F0,…,Fm∈Rn×nF_0, \dots, F_m \in \mathbb{R}^{n\times n}F0​,…,Fm​∈Rn×n (symmetric), R0,…,Rm∈Rq×nR_0, \dots, R_m \in \mathbb{R}^{q\times n}R0​,…,Rm​∈Rq×n, L∈Rn×pL \in \mathbb{R}^{n\times p}L∈Rn×p, and an objective vector c∈Rmc \in \mathbb{R}^mc∈Rm, c≠0c \neq 0c=0. Write F(x)=F0+∑i=1mxiFiF(x) = F_0 + \sum_{i=1}^m x_iF_iF(x)=F0​+∑i=1m​xi​Fi​ and R(x)=R0+∑i=1mxiRiR(x) = R_0 + \sum_{i=1}^m x_iR_iR(x)=R0​+∑i=1m​xi​Ri​.

With full perturbations, uncertainty level ρ=1\rho = 1ρ=1 and D=0D = 0D=0 (the standing choices of §4), the robust SDP is the SDP

minimize cTxsubject toF(x,τ)=[F(x)−τLLTR(x)TR(x)τI]⪰0(15)\text{minimize } c^Tx \quad\text{subject to}\quad \mathcal{F}(x,\tau) = \begin{bmatrix} F(x) - \tau LL^T & R(x)^T \\ R(x) & \tau I\end{bmatrix} \succeq 0 \tag{15}minimize cTxsubject toF(x,τ)=[F(x)−τLLTR(x)​R(x)TτI​]⪰0(15)

in the variables y=(x,τ)∈Rm×Ry = (x,\tau) \in \mathbb{R}^m \times \mathbb{R}y=(x,τ)∈Rm×R. A point is feasible if F(x,τ)⪰0\mathcal{F}(x,\tau) \succeq 0F(x,τ)⪰0 (symmetric positive semidefinite) and optimal if it is feasible and minimizes cTxc^TxcTx over all feasible (x′,τ′)(x',\tau')(x′,τ′). The solution is the pair (x,τ)(x,\tau)(x,τ).

The paper's hypotheses (§4.1):

  • H1 (Slater): F(x,τ)≻0\mathcal{F}(x,\tau) \succ 0F(x,τ)≻0 for some (x,τ)(x,\tau)(x,τ).
  • H2 (inf-compactness): every sublevel set {(x,τ) feasible:cTx≤M}\{(x,\tau)\ \text{feasible} : c^Tx \le M\}{(x,τ) feasible:cTx≤M} is bounded.
  • H3(a): the nullspace of the pencil λR0+∑ixiRi\lambda R_0 + \sum_i x_iR_iλR0​+∑i​xi​Ri​ is one and the same proper subspace N⊊RnN \subsetneq \mathbb{R}^nN⊊Rn for every (λ,x)≠(0,0)(\lambda,x) \neq (0,0)(λ,x)=(0,0).
  • H3(b): for every xxx the stacked matrix [LTR(x)]\begin{bmatrix} L^T \\ R(x)\end{bmatrix}[LTR(x)​] has full column rank.

For τ>0\tau > 0τ>0 put G(x,τ)=F(x)−τLLT−1τR(x)TR(x)G(x,\tau) = F(x) - \tau LL^T - \frac{1}{\tau}R(x)^TR(x)G(x,τ)=F(x)−τLLT−τ1​R(x)TR(x), the Schur complement of the block τI\tau IτI in F(x,τ)\mathcal{F}(x,\tau)F(x,τ).

The quadratic growth condition (QGC) holds at an optimal point y⋆=(x⋆,τ⋆)y^\star = (x^\star,\tau^\star)y⋆=(x⋆,τ⋆) if there are α,ε>0\alpha, \varepsilon > 0α,ε>0 with

cTx ≥ cTx⋆+α ∥y−y⋆∥2for every feasible y=(x,τ), ∥y−y⋆∥<ε.c^Tx \ \ge\ c^Tx^\star + \alpha\,\|y - y^\star\|^2 \qquad \text{for every feasible } y = (x,\tau),\ \|y - y^\star\| < \varepsilon .cTx ≥ cTx⋆+α∥y−y⋆∥2for every feasible y=(x,τ), ∥y−y⋆∥<ε.

Formalization targets

Goal: Theorem 4.2 (p. 39)

Under c≠0c \neq 0c=0, symmetry of the FiF_iFi​, H1, H2, H3(a) and H3(b):

(∀ y⋆ optimal for (15): QGC holds at y⋆)and∃! y=(x,τ) optimal for (15).\bigl(\forall\, y^\star \text{ optimal for (15)}:\ \text{QGC holds at } y^\star\bigr)\quad\text{and}\quad \exists!\, y = (x,\tau) \text{ optimal for (15)} .(∀y⋆ optimal for (15): QGC holds at y⋆)and∃!y=(x,τ) optimal for (15).

Both halves are stated; uniqueness is of the pair (x,τ)(x,\tau)(x,τ), and existence is part of the claim.

Milestones, in the order the paper's proof uses them

  1. §4.1 (p. 38): H3(a) implies R(x)≠0R(x) \neq 0R(x)=0 for every xxx.
  2. §4.2 (p. 39): under H3(a), every feasible τ\tauτ is positive; in particular τopt>0\tau_{\mathrm{opt}} > 0τopt​>0.
  3. §4.2, Eq. (16): for τ>0\tau > 0τ>0, F(x,τ)⪰0  ⟺  G(x,τ)⪰0\mathcal{F}(x,\tau) \succeq 0 \iff G(x,\tau) \succeq 0F(x,τ)⪰0⟺G(x,τ)⪰0.
  4. Appendix A (p. 49): at every optimal (x,τ)(x,\tau)(x,τ) there is a dual matrix Z⪰0Z \succeq 0Z⪰0, Z≠0Z \neq 0Z=0, with Tr⁡ZG(x,τ)=0\operatorname{Tr} ZG(x,\tau) = 0TrZG(x,τ)=0, Tr⁡Z ∂G/∂xi=ci\operatorname{Tr} Z\,\partial G/\partial x_i = c_iTrZ∂G/∂xi​=ci​ and τ2Tr⁡LLTZ=Tr⁡R(x)TR(x)Z\tau^2\operatorname{Tr}LL^TZ = \operatorname{Tr}R(x)^TR(x)Zτ2TrLLTZ=TrR(x)TR(x)Z.
  5. Appendix A (p. 49): H3(b) rules out Tr⁡LLTZ=Tr⁡R(x)TR(x)Z=0\operatorname{Tr}LL^TZ = \operatorname{Tr}R(x)^TR(x)Z = 0TrLLTZ=TrR(x)TR(x)Z=0 for Z⪰0Z \succeq 0Z⪰0, Z≠0Z \neq 0Z=0, hence Tr⁡R(x)TR(x)Z>0\operatorname{Tr}R(x)^TR(x)Z > 0TrR(x)TR(x)Z>0.
  6. Appendix A (pp. 49–50): under H3(a), with τ>0\tau > 0τ>0, Z⪰0Z \succeq 0Z⪰0 and Tr⁡R(x)TR(x)Z>0\operatorname{Tr}R(x)^TR(x)Z > 0TrR(x)TR(x)Z>0, the Hessian of the Lagrangian cTx−Tr⁡Z G(x,τ)c^Tx - \operatorname{Tr} Z\,G(x,\tau)cTx−TrZG(x,τ) is positive definite.

Significance

The result. Theorem 4.2 turns the robust SDP into a well-posed problem: a unique solution with quadratic growth. Quadratic growth is the property from which the paper's Hölder-stability results (Theorem 4.3, Corollaries 4.1–4.2) follow through the perturbation theory of Bonnans, Cominetti and Shapiro, and it is what justifies using the robust SDP as a regularization of ill-conditioned SDPs (§5.4). The remark after the theorem notes a geometric reading: the growth holds for every objective, so the boundary of the robust feasible set contains no facets.

Formalizing it. The theorem has a published proof (Appendix A), which relies on a second-order sufficient condition for nonlinear SDPs cited from Bonnans, Cominetti and Shapiro. There is no machine-checked proof of it or of any second-order optimality result for SDPs that we know of. A formalization provides a complete account of the dual attainment, complementarity and second-order steps for this concrete problem class, and it checks the paper's computations; one of them, the intermediate display for the second derivative in Appendix A, has a factor error in its cross term that does not affect the conclusion.

Difficulty

The feasible set of (15) is a spectrahedron, and linear objectives over spectrahedra do not in general have unique minimizers, since optimal faces can be flat. Uniqueness therefore cannot come from convexity alone. It has to come from curvature of the boundary at the optimum, and that curvature is carried only by the nonlinear term 1τR(x)TR(x)\frac{1}{\tau}R(x)^TR(x)τ1​R(x)TR(x) of the Schur complement, which is degenerate along some directions. Positive definiteness of the Hessian must be recovered from the structural hypotheses H3(a) and H3(b), which interact with a dual matrix ZZZ that is known only to exist. The natural first attempt is to use τ>0\tau > 0τ>0 and the positive semidefiniteness of ZZZ directly. That attempt fails: the second derivative is Tr⁡Z RTR\operatorname{Tr} Z\,\mathcal{R}^T\mathcal{R}TrZRTR for a direction-dependent matrix R\mathcal{R}R, which vanishes on the kernel of ZZZ, so it is not positive without H3(a) relating the kernels of all members of the pencil. Dual attainment and complementarity for (15) also have to be established, and the local second-order bound then has to be converted into a statement about every nearby feasible point.

Formalization scope

  • Representation. Data are bundled in RobustSDP.Uniqueness.SDPData m n p q; decision points are pairs y : (Fin m → ℝ) × ℝ; the coefficient Fs i, i : Fin m, is the paper's Fi+1F_{i+1}Fi+1​. ⪰0\succeq 0⪰0 and ≻0\succ 0≻0 are Mathlib's Matrix.PosSemidef and Matrix.PosDef, which include symmetry, as the paper's notation does.
  • Conventions fixed. §4's standing choices D=0D = 0D=0 and ρ=1\rho = 1ρ=1 are built into (15). The standing assumptions c≠0c \neq 0c=0 and symmetric FiF_iFi​ (p. 33) are explicit hypotheses. H2 is read as bounded sublevel sets of the feasible set in (x,τ)(x,\tau)(x,τ); the paper's wording ("any unbounded sequence of feasible points produces an unbounded sequence of objectives") is meant in this sense, as its claim that H1 and H2 give existence of optimal points shows. H3(b)'s full column rank is injectivity of ξ↦(LTξ,R(x)ξ)\xi \mapsto (L^T\xi, R(x)\xi)ξ↦(LTξ,R(x)ξ). The QGC uses the Euclidean norm on Rm+1\mathbb{R}^{m+1}Rm+1 in its local form, which is equivalent to the paper's o(∥y−yopt∥2)o(\|y - y_{\mathrm{opt}}\|^2)o(∥y−yopt​∥2) form. It is stated for (15) rather than for the paper's reformulation (16), with which (15) coincides near the optimum because τopt>0\tau_{\mathrm{opt}} > 0τopt​>0. The auxiliary constraint τ≥0.99 τopt\tau \ge 0.99\,\tau_{\mathrm{opt}}τ≥0.99τopt​ of (16) is not formalized. GGG uses Lean's τ⁻¹, which is 000 at τ=0\tau = 0τ=0, so every statement about GGG assumes τ>0\tau > 0τ>0 or τ≠0\tau \ne 0τ=0.
  • No trivializing reading. The goal cannot be satisfied by stating only uniqueness of xxx, by reading H2 as "the objective is bounded below", or by reading H3(a) as "R(x)≠0R(x) \neq 0R(x)=0". The statement quantifies over the pair (x,τ)(x,\tau)(x,τ), and both the quadratic growth and the existence and uniqueness halves are required. The hypotheses are jointly satisfiable: for example m=1m = 1m=1, n=p=2n = p = 2n=p=2, q=4q = 4q=4, F(x)=diag(3+x,3−x)F(x) = \mathrm{diag}(3+x, 3-x)F(x)=diag(3+x,3−x), L=I2L = I_2L=I2​, R(x)=[1;x]⊗I2R(x) = [1; x]\otimes I_2R(x)=[1;x]⊗I2​ and c=1c = 1c=1.
  • Infrastructure. A complete development needs Schur complements for positive semidefinite block matrices (available in Mathlib), strong duality with dual attainment for inequality-form SDPs under Slater's condition (ConvexOptimization.sdp_strong_duality on the platform, in another Mathlib environment), existence of minimizers on closed bounded sets, second derivatives of matrix-valued maps, and a local second-order argument for convex problems. The duality and second-order parts can be reused beyond this mission. Contributions to any milestone, or alternative proofs that avoid the general Bonnans–Cominetti–Shapiro theory, are welcome.

Selected references

  • L. El Ghaoui, F. Oustry and H. Lebret, Robust Solutions to Uncertain Semidefinite Programs, SIAM J. Optim. 9(1), 33–52, 1998. https://doi.org/10.1137/S1052623496305717
  • J. F. Bonnans, R. Cominetti and A. Shapiro, Sensitivity analysis of optimization problems under second order regular constraints, Math. Oper. Res. 23(4), 806–831, 1998 (the paper's reference [10]). https://doi.org/10.1287/moor.23.4.806
  • A. Shapiro, First and second order analysis of nonlinear semidefinite programs, Math. Programming Ser. B 77, 301–320, 1997. https://doi.org/10.1007/BF02614439
  • R. T. Rockafellar, Convex Analysis, Princeton University Press, 1970. https://doi.org/10.1515/9781400873173
10 thms4 active usersReviewed
🏆Completed
Convex OptimizationOperations ResearchOptimization·Captain: mikedeng1

Robust Solutions to Uncertain Semidefinite Programs IV: Closed-Form Robust Counterparts under Unstructured PerturbationsResearch Paper

Motivation

A semidefinite program (SDP) minimizes a linear objective cTxc^TxcTx subject to a linear matrix inequality (LMI) F(x)=F0+∑i=1mxiFi⪰0F(x) = F_0 + \sum_{i=1}^m x_i F_i \succeq 0F(x)=F0​+∑i=1m​xi​Fi​⪰0. In applications the coefficient matrices FiF_iFi​ are measured, estimated or rounded. A solution that is feasible for the nominal data can become infeasible for data that differ from it by an arbitrarily small amount.

El Ghaoui, Oustry and Lebret (SIAM J. Optim. 9(1), 1998) introduced robust semidefinite programs (RSDPs): the constraint must hold for every admissible perturbation of the data, and the robust solution is the best point that survives all of them. Their §5 works out the examples in which the robust counterpart has a closed form. The simplest and most widely quoted is the case where every coefficient matrix is perturbed independently and without structure (§5.1): the robust LMI becomes the single convex constraint F(x)⪰2ρ∥x∥2+1 IF(x) \succeq 2\rho\sqrt{\|x\|^2+1}\,IF(x)⪰2ρ∥x∥2+1​I. The same computation gives closed-form robust versions of linear programs (§5.3), of largest-eigenvalue minimization (§5.4) and of matrix-norm minimization (§5.6), each of which is the nominal problem plus a Tikhonov-type term ρ∥x∥2+1\rho\sqrt{\|x\|^2+1}ρ∥x∥2+1​. Robust linear programming under ellipsoidal uncertainty was developed at the same time by Ben-Tal and Nemirovski (Math. Oper. Res., 1998); robust least squares, the prototype of §5.6, by El Ghaoui and Lebret (SIAM J. Matrix Anal. Appl., 1997).

Setting

Fix m,n∈Nm, n \in \mathbb{N}m,n∈N, a level ρ>0\rho > 0ρ>0, and symmetric matrices F0,…,Fm∈Rn×nF_0, \dots, F_m \in \mathbb{R}^{n\times n}F0​,…,Fm​∈Rn×n. For x∈Rmx \in \mathbb{R}^mx∈Rm write F(x)=F0+∑i=1mxiFiF(x) = F_0 + \sum_{i=1}^m x_i F_iF(x)=F0​+∑i=1m​xi​Fi​ and ∥x∥2=∑i=1mxi2\|x\|^2 = \sum_{i=1}^m x_i^2∥x∥2=∑i=1m​xi2​ (the Euclidean norm). For a matrix MMM, ∥M∥\|M\|∥M∥ is its spectral norm, the largest singular value, and X⪰0X \succeq 0X⪰0 means that XXX is symmetric positive semidefinite.

An unstructured perturbation is a block row Δ=[Δ0 ⋯ Δm]\Delta = [\Delta_0 \ \cdots \ \Delta_m]Δ=[Δ0​ ⋯ Δm​] of n×nn\times nn×n blocks, viewed as one n×n(m+1)n \times n(m+1)n×n(m+1) matrix. It perturbs each coefficient independently:

F(x,Δ)=F(x)+Δ0+Δ0T+∑i=1mxi(Δi+ΔiT).\mathbf{F}(x,\Delta) = F(x) + \Delta_0 + \Delta_0^T + \sum_{i=1}^m x_i(\Delta_i + \Delta_i^T).F(x,Δ)=F(x)+Δ0​+Δ0T​+i=1∑m​xi​(Δi​+ΔiT​).

The robust feasible set is

Xρ={x∈Rm:F(x,Δ)⪰0 for every Δ with ∥Δ∥≤ρ},\mathcal{X}_\rho = \{x \in \mathbb{R}^m : \mathbf{F}(x,\Delta) \succeq 0 \text{ for every } \Delta \text{ with } \|\Delta\| \le \rho\},Xρ​={x∈Rm:F(x,Δ)⪰0 for every Δ with ∥Δ∥≤ρ},

and the RSDP is: minimize cTxc^TxcTx over Xρ\mathcal{X}_\rhoXρ​. With R(x)=[1; x]⊗IR(x) = [1;\,x]\otimes IR(x)=[1;x]⊗I, the n(m+1)×nn(m+1)\times nn(m+1)×n matrix whose iii-th block is x~iI\tilde x_i Ix~i​I for x~=(1,x1,…,xm)\tilde x = (1, x_1, \dots, x_m)x~=(1,x1​,…,xm​), the perturbation reads F(x,Δ)=F(x)+ΔR(x)+R(x)TΔT\mathbf{F}(x,\Delta) = F(x) + \Delta R(x) + R(x)^T\Delta^TF(x,Δ)=F(x)+ΔR(x)+R(x)TΔT (the paper's (19)).

Three further models use the same pattern. In a robust LP, the data [aiT bi]T[a_i^T\ b_i]^T[aiT​ bi​]T of each constraint aiTx≥bia_i^Tx \ge b_iaiT​x≥bi​ are shifted by an independent δi∈Rm+1\delta_i \in \mathbb{R}^{m+1}δi​∈Rm+1 with ∥δi∥2≤ρ\|\delta_i\|_2 \le \rho∥δi​∥2​≤ρ. In robust eigenvalue minimization one minimizes the worst case over ∥Δ∥≤ρ\|\Delta\|\le\rho∥Δ∥≤ρ of λmax⁡(F(x,Δ))\lambda_{\max}(\mathbf{F}(x,\Delta))λmax​(F(x,Δ)). In robust maximum-norm minimization, H(x)=H0+∑ixiHiH(x) = H_0 + \sum_i x_i H_iH(x)=H0​+∑i​xi​Hi​ with Hi∈Rp×qH_i \in \mathbb{R}^{p\times q}Hi​∈Rp×q, H(x,Δ)=H0+Δ0+∑ixi(Hi+Δi)\mathbf{H}(x,\Delta) = H_0 + \Delta_0 + \sum_i x_i(H_i + \Delta_i)H(x,Δ)=H0​+Δ0​+∑i​xi​(Hi​+Δi​), and one minimizes max⁡∥Δ∥≤ρ∥H(x,Δ)∥\max_{\|\Delta\|\le\rho}\|\mathbf{H}(x,\Delta)\|max∥Δ∥≤ρ​∥H(x,Δ)∥.

Formalization targets

Goal: Theorem 5.1 (first sentence)

For every x∈Rmx \in \mathbb{R}^mx∈Rm,

x∈Xρ  ⟺  F(x)⪰2ρ∥x∥2+1  I.x \in \mathcal{X}_\rho \iff F(x) \succeq 2\rho\sqrt{\|x\|^2+1}\; I .x∈Xρ​⟺F(x)⪰2ρ∥x∥2+1​I.

The RSDP and problem (21), "minimize cTxc^TxcTx subject to F(x)⪰2ρ∥x∥2+1 IF(x) \succeq 2\rho\sqrt{\|x\|^2+1}\,IF(x)⪰2ρ∥x∥2+1​I", therefore have the same feasible set, optimal value and solutions. The goal fixes no numerical data: F0,…,FmF_0, \dots, F_mF0​,…,Fm​, mmm, nnn and ρ>0\rho > 0ρ>0 are arbitrary.

Milestones on the way (§5.1)

  1. (19)–(20): x∈Xρx \in \mathcal{X}_\rhox∈Xρ​ iff there is τ∈R\tau \in \mathbb{R}τ∈R with [F(x)−τIρR(x)TρR(x)τI]⪰0\begin{bmatrix} F(x) - \tau I & \rho R(x)^T \\ \rho R(x) & \tau I\end{bmatrix} \succeq 0[F(x)−τIρR(x)​ρR(x)TτI​]⪰0.
  2. Positivity of τ\tauτ and the Schur form (for n≥1n \ge 1n≥1): that block matrix is ⪰0\succeq 0⪰0 iff τ>0\tau > 0τ>0 and F(x)⪰(τ+ρ2(1+∥x∥2)/τ)IF(x) \succeq \bigl(\tau + \rho^2(1+\|x\|^2)/\tau\bigr) IF(x)⪰(τ+ρ2(1+∥x∥2)/τ)I.
  3. (21): some τ>0\tau > 0τ>0 satisfies the Schur form iff F(x)⪰2ρ∥x∥2+1 IF(x) \succeq 2\rho\sqrt{\|x\|^2+1}\, IF(x)⪰2ρ∥x∥2+1​I.

Further milestones: the value halves of Theorems 5.2–5.4

  • Theorem 5.2: the robust LP constraints hold iff aiTx−ρ∥x∥22+1≥bia_i^Tx - \rho\sqrt{\|x\|_2^2+1} \ge b_iaiT​x−ρ∥x∥22​+1​≥bi​ for all iii (problem (23)).
  • Theorem 5.3: for every ttt, tI⪰F(x,Δ)tI \succeq \mathbf{F}(x,\Delta)tI⪰F(x,Δ) for all ∥Δ∥≤ρ\|\Delta\| \le \rho∥Δ∥≤ρ iff (t−2ρ∥x∥2+1)I⪰F(x)\bigl(t - 2\rho\sqrt{\|x\|^2+1}\bigr) I \succeq F(x)(t−2ρ∥x∥2+1​)I⪰F(x); that is, the worst-case largest eigenvalue is λmax⁡(F(x))+2ρ∥x∥2+1\lambda_{\max}(F(x)) + 2\rho\sqrt{\|x\|^2+1}λmax​(F(x))+2ρ∥x∥2+1​ (problem (25)).
  • Theorem 5.4: for p,q≥1p, q \ge 1p,q≥1, max⁡∥Δ∥≤ρ∥H(x,Δ)∥=∥H(x)∥+ρ∥x∥2+1\max_{\|\Delta\|\le\rho}\|\mathbf{H}(x,\Delta)\| = \|H(x)\| + \rho\sqrt{\|x\|^2+1}max∥Δ∥≤ρ​∥H(x,Δ)∥=∥H(x)∥+ρ∥x∥2+1​, and the maximum is attained (problem (29)).

Significance

The goal shows that robustness against unstructured perturbations costs no more than the nominal problem: the robust counterpart is an LMI of the same size n×nn\times nn×n, with a right-hand side that is a convex function of xxx and grows like 2ρ∥x∥2\rho\|x\|2ρ∥x∥. The sets Xρ\mathcal{X}_\rhoXρ​ have no flat faces, which the paper's §5.2 uses to define the robust center of an LMI and which underlies the uniqueness and continuity of the robust solution (the second sentences of Theorems 5.1–5.4, from §4 under hypotheses H1–H3). Theorems 5.3 and 5.4 exhibit robustification as a Tikhonov regularization with parameter 2ρ2\rho2ρ or ρ\rhoρ, and Theorem 5.2 turns a robust LP into a second-order cone program.

All four closed forms are proved in the paper, partly by appeal to the general SDP reformulation of its §3. No machine-checked version of any of them exists, to our knowledge. The mission produces the robust counterparts as identities of feasible sets, stated for every xxx, together with the three intermediate steps of §5.1, so that later missions on the uniqueness and stability halves can import them.

Difficulty

The goal is an exchange of a universal quantifier over an infinite family of matrices with a single matrix inequality. The inequality F(x,Δ)⪰F(x)−2ρ∥x∥2+1 I\mathbf{F}(x,\Delta) \succeq F(x) - 2\rho\sqrt{\|x\|^2+1}\,IF(x,Δ)⪰F(x)−2ρ∥x∥2+1​I bounds each perturbation, but the converse needs, for each failing direction, one admissible perturbation that attains the bound; the constant 222 comes from the two copies ΔR(x)\Delta R(x)ΔR(x) and R(x)TΔTR(x)^T\Delta^TR(x)TΔT, and the constant ∥x∥2+1\sqrt{\|x\|^2+1}∥x∥2+1​ is the spectral norm of R(x)R(x)R(x), which holds only because Δ\DeltaΔ is normed as one block row. Normed block by block, the worst case and the constant change. In the milestone route, the positivity of τ\tauτ needs a separate argument before any Schur complement can be taken, since the Schur complement with respect to τI\tau IτI is undefined at τ=0\tau = 0τ=0, and the elimination of τ\tauτ needs the attainment of min⁡τ>0τ+a/τ\min_{\tau>0} \tau + a/\tauminτ>0​τ+a/τ. For Theorem 5.4 the difficulty is the attainment: an upper bound on the maximum is immediate, while the lower bound requires exhibiting an admissible perturbation that attains it.

Formalization scope

Matrices are Matrix (Fin r) (Fin c) ℝ. Coefficients are indexed by Fin (m + 1) with index 0 the constant term. A block row Δ\DeltaΔ is one matrix with columns indexed by pairs (i, b) : Fin (m + 1) × Fin n (or Fin q), and ∥Δ∥\|\Delta\|∥Δ∥ is Mathlib's ℓ2\ell^2ℓ2 operator norm (open scoped Matrix.Norms.L2Operator), the largest singular value, never the default entrywise norm. The vector norm ∥x∥2\|x\|^2∥x∥2 is written as ∑ixi2\sum_i x_i^2∑i​xi2​, never as Mathlib's sup norm on Fin m → ℝ. A⪰BA \succeq BA⪰B is (A - B).PosSemidef. Standing assumptions made explicit: F0,…,FmF_0, \dots, F_mF0​,…,Fm​ symmetric; ρ>0\rho > 0ρ>0 (§3, p. 36); n≥1n \ge 1n≥1 in milestone 2 (at n=0n = 0n=0 every τ\tauτ is feasible); p,q≥1p, q \ge 1p,q≥1 in Theorem 5.4 (empty matrices have norm 000).

Readings and corrections of the printed text:

  1. "The optimal value of the RSDP can be computed by solving (21)" is stated as the identity of the two feasible sets for every xxx, which implies equality of values and of solutions. Theorems 5.2 and 5.4 are stated the same way (5.4 through the pointwise worst-case value, with attainment), and Theorem 5.3 in epigraph form, λmax⁡(M)≤t  ⟺  tI−M⪰0\lambda_{\max}(M) \le t \iff tI - M \succeq 0λmax​(M)≤t⟺tI−M⪰0.
  2. Only the first sentence of each theorem is in scope. Uniqueness, regularity, Lipschitz stability and the limit ρ→0\rho \to 0ρ→0 rest on Theorem 4.3 and on external results ([31], [3]) and are not stated.
  3. In (19) the paper writes D=Rn×nm\mathcal D = \mathbb R^{n\times nm}D=Rn×nm and "the representation in section 5"; Δ\DeltaΔ has m+1m+1m+1 blocks, so D=Rn×n(m+1)\mathcal D = \mathbb R^{n\times n(m+1)}D=Rn×n(m+1), and the representation is that of §2.2.
  4. The paper derives (20) from Lemma 3.2 and (29) from Theorem 3.2, which give only sufficient conditions; the exact equivalences are the full-perturbation Lemma 3.1 / Theorem 3.1.
  5. Before (21) the paper says "the scalar in the left-hand side" (it is on the right) and "the RSDP (1)" (it means the RSDP (4)). Theorem 5.3's "min-max problem (24)" is the robust version of the nominal problem (24).

A formalization in which ∥Δ∥\|\Delta\|∥Δ∥ is an entrywise or blockwise norm, ∥x∥\|x\|∥x∥ is the sup norm, or the robust set quantifies over a single block, changes the constant 2ρ∥x∥2+12\rho\sqrt{\|x\|^2+1}2ρ∥x∥2+1​ and is not this theorem; the statements here rule these out by construction.

Useful, reusable infrastructure: the spectral norm of [1; x]⊗I[1;\,x] \otimes I[1;x]⊗I, Schur complements for positive semidefinite block matrices, and spectral norms of rank-one matrices. Proofs of the three §5.1 milestones and direct proofs of the goal are both welcome.

Selected references

  • L. El Ghaoui, F. Oustry, H. Lebret, Robust Solutions to Uncertain Semidefinite Programs, SIAM J. Optim. 9(1):33–52, 1998. https://doi.org/10.1137/S1052623496305717
  • L. El Ghaoui, H. Lebret, Robust Solutions to Least-Squares Problems with Uncertain Data, SIAM J. Matrix Anal. Appl. 18(4):1035–1064, 1997. https://doi.org/10.1137/S0895479896298130
  • A. Ben-Tal, A. Nemirovski, Robust Convex Optimization, Math. Oper. Res. 23(4):769–805, 1998. https://doi.org/10.1287/moor.23.4.769
8 thms3 active usersReviewed
🏆Completed
Convex OptimizationOperations ResearchOptimization+1·Captain: mikedeng1

Worst-Case Value-At-Risk and Robust Portfolio Optimization: A Conic Programming Approach 1: Exact Worst-Case VaR under Known Mean and Covariance and Its SDP RepresentationsResearch Paper

Motivation

Value-at-Risk (VaR) is the standard regulatory measure of downside risk of a portfolio: the loss level that is exceeded only with a prescribed small probability ε\varepsilonε. Computing it requires the full distribution of asset returns, which is rarely known. In practice one estimates a mean vector and a covariance matrix and then assumes a Gaussian distribution, which understates the probability of large losses when returns are heavy-tailed or skewed.

El Ghaoui, Oks and Oustry (Oper. Res. 51(4), 2003) replace the distributional assumption by a worst case: the VaR is computed against every distribution consistent with the known moments. For known mean and covariance they obtain an exact closed form and several semidefinite (SDP) representations of this worst-case VaR. The SDP forms are what make the approach extend to moment uncertainty (moments only known to lie in a set, §2.2 of the paper) and to robust portfolio optimization. The equivalence between the probabilistic statement and the closed form is also a multivariate one-sided Chebyshev bound, related to Bertsimas and Popescu (SIAM J. Optim. 15(3), 2005; working paper 2000).

Setting

There are nnn assets. Their returns over one period form a random vector x∈Rnx \in \mathbb R^nx∈Rn, and a portfolio w∈Rnw \in \mathbb R^nw∈Rn earns r(w,x)=w⊤xr(w,x) = w^\top xr(w,x)=w⊤x. The paper restricts www to an admissible set that does not contain 000; only w≠0w \neq 0w=0 is used.

The distribution of xxx is unknown except for its mean x^∈Rn\hat x \in \mathbb R^nx^∈Rn and covariance matrix Γ\GammaΓ, with Γ≻0\Gamma \succ 0Γ≻0 (positive definite). Let P\mathcal PP be the set of all probability distributions on Rn\mathbb R^nRn with these two moments. For a loss level γ\gammaγ, the loss set is S={x∣γ≤−x⊤w}\mathcal S = \{x \mid \gamma \le -x^\top w\}S={x∣γ≤−x⊤w}. The worst-case VaR at level ε\varepsilonε is (Eq. (4))

VP(w)=min⁡{γ  :  sup⁡P∈PP(S)≤ε}.V_{\mathcal P}(w) = \min\Big\{\gamma \;:\; \sup_{P\in\mathcal P} P(\mathcal S) \le \varepsilon\Big\}.VP​(w)=min{γ:P∈Psup​P(S)≤ε}.

Further notation: κ(ε)=(1−ε)/ε\kappa(\varepsilon) = \sqrt{(1-\varepsilon)/\varepsilon}κ(ε)=(1−ε)/ε​ (Eq. (8)); for symmetric matrices, A⪰BA \succeq BA⪰B means A−BA - BA−B is positive semidefinite and ⟨A,B⟩=Tr⁡(AB)\langle A, B\rangle = \operatorname{Tr}(AB)⟨A,B⟩=Tr(AB). The second-moment matrix is (Eq. (6))

Σ=[Sx^x^⊤1],S=Γ+x^x^⊤.\Sigma = \begin{bmatrix} S & \hat x \\ \hat x^\top & 1\end{bmatrix}, \qquad S = \Gamma + \hat x\hat x^\top.Σ=[Sx^⊤​x^1​],S=Γ+x^x^⊤.

Formalization targets

Goal: Theorem 1 (pp. 545–546)

For Γ≻0\Gamma \succ 0Γ≻0, w≠0w \neq 0w=0, ε∈(0,1)\varepsilon \in (0,1)ε∈(0,1) and γ∈R\gamma \in \mathbb Rγ∈R, the following five propositions are equivalent:

  1. sup⁡P∈PP{γ≤−w⊤x}≤ε\sup_{P \in \mathcal P} P\{\gamma \le -w^\top x\} \le \varepsilonsupP∈P​P{γ≤−w⊤x}≤ε;
  2. κ(ε) ∥Γ1/2w∥2−x^⊤w≤γ\kappa(\varepsilon)\,\|\Gamma^{1/2} w\|_2 - \hat x^\top w \le \gammaκ(ε)∥Γ1/2w∥2​−x^⊤w≤γ;
  3. there are a symmetric MMM and τ∈R\tau \in \mathbb Rτ∈R with ⟨M,Σ⟩≤τε\langle M, \Sigma\rangle \le \tau\varepsilon⟨M,Σ⟩≤τε, M⪰0M \succeq 0M⪰0, τ≥0\tau \ge 0τ≥0, and M+[0ww⊤−τ+2γ]⪰0M + \begin{bmatrix} 0 & w\\ w^\top & -\tau + 2\gamma\end{bmatrix} \succeq 0M+[0w⊤​w−τ+2γ​]⪰0;
  4. every xxx with [Γx−x^(x−x^)⊤κ(ε)2]⪰0\begin{bmatrix}\Gamma & x - \hat x\\ (x-\hat x)^\top & \kappa(\varepsilon)^2\end{bmatrix} \succeq 0[Γ(x−x^)⊤​x−x^κ(ε)2​]⪰0 satisfies −x⊤w≤γ-x^\top w \le \gamma−x⊤w≤γ;
  5. there are a symmetric Λ\LambdaΛ and v∈Rv \in \mathbb Rv∈R with ⟨Λ,Γ⟩+κ(ε)2v−x^⊤w≤γ\langle \Lambda, \Gamma\rangle + \kappa(\varepsilon)^2 v - \hat x^\top w \le \gamma⟨Λ,Γ⟩+κ(ε)2v−x^⊤w≤γ and [Λw/2w⊤/2v]⪰0\begin{bmatrix}\Lambda & w/2\\ w^\top/2 & v\end{bmatrix} \succeq 0[Λw⊤/2​w/2v​]⪰0.

In particular

VP(w)=κ(ε) ∥Γ1/2w∥2−x^⊤w.V_{\mathcal P}(w) = \kappa(\varepsilon)\,\|\Gamma^{1/2}w\|_2 - \hat x^\top w.VP​(w)=κ(ε)∥Γ1/2w∥2​−x^⊤w.

Milestones (the steps of the paper's proof)

  • Condition C.1 (l(x)=[x⊤ 1]M[x⊤ 1]⊤≥0l(x) = [x^\top\,1] M [x^\top\,1]^\top \ge 0l(x)=[x⊤1]M[x⊤1]⊤≥0 for all xxx) is equivalent to M⪰0M \succeq 0M⪰0 (p. 546).
  • Conditions C.1 and C.2 are equivalent to the existence of τ≥0\tau \ge 0τ≥0 with M⪰0M \succeq 0M⪰0 and M+[0τwτw⊤−1+2τγ]⪰0M + \begin{bmatrix} 0 & \tau w\\ \tau w^\top & -1+2\tau\gamma\end{bmatrix} \succeq 0M+[0τw⊤​τw−1+2τγ​]⪰0 (p. 546).
  • The worst-case probability sup⁡P∈PP(S)\sup_{P\in\mathcal P} P(\mathcal S)supP∈P​P(S) equals the value of the SDP inf⁡⟨M,Σ⟩\inf \langle M, \Sigma\rangleinf⟨M,Σ⟩ under the constraints above (Eq. (14), pp. 546–547).
  • The Schur-complement reduction (19)–(20) of the constraints of the dual problem (18) (p. 547).
  • The closed form of ϕ(y)\phi(y)ϕ(y) and its maximum at y=εy = \varepsilony=ε (p. 547).
  • Condition (10) describes the ellipsoid {x∣(x−x^)⊤Γ−1(x−x^)≤κ(ε)2}\{x \mid (x-\hat x)^\top\Gamma^{-1}(x-\hat x) \le \kappa(\varepsilon)^2\}{x∣(x−x^)⊤Γ−1(x−x^)≤κ(ε)2}, and the maximal loss −x⊤w-x^\top w−x⊤w over it is κ(ε)w⊤Γw−x^⊤w\kappa(\varepsilon)\sqrt{w^\top\Gamma w} - \hat x^\top wκ(ε)w⊤Γw​−x^⊤w (p. 546).

Significance

The result. Proposition 2 turns the worst-case VaR into a second-order cone function of www, so minimizing it over a polytope of portfolios is a second-order cone program (Eq. (12)). The SDP forms 3 and 5 are the basis of the paper's §2.2–§3: they extend, with the moments only known to lie in a convex set, to a single SDP whose value is the worst-case VaR over that set. Proposition 4 gives a deterministic reading: the worst-case VaR is the largest loss when the return vector is only known to lie in an ellipsoid, which connects distributional robustness to robust optimization with ellipsoidal uncertainty.

Formalizing it. The result is proved in the paper, with two imported steps: strong duality for the moment problem (Smith 1995; Bonnans and Shapiro 2000) and a Slater-type strong duality for the one-constraint quadratic condition. No machine-checked version is known. A formal proof would supply these steps with explicit hypotheses and would produce a Lean statement of the multivariate one-sided Chebyshev (Cantelli) bound with tightness over the full moment class.

Difficulty

The matrix equivalences (2 ⇔ 4 ⇔ 5 and 2 ⇔ 3) are Schur complements and finite-dimensional SDP duality. The difficulty is Proposition 1. The upper bound (Cantelli's inequality for w⊤xw^\top xw⊤x) handles one direction, but the converse requires tightness: for every γ\gammaγ below the closed form, a distribution on Rn\mathbb R^nRn with exactly the prescribed mean and full covariance matrix Γ\GammaΓ that puts probability more than ε\varepsilonε on the loss set. A scalar extremal distribution for w⊤xw^\top xw⊤x does not by itself have the right covariance in the other directions, and a Gaussian does not reach the bound. The paper's route through the moment problem instead needs strong duality between a supremum over measures and an infimum over matrices, which is where the positive definiteness of Σ\SigmaΣ enters.

Formalization scope

  • Vectors live in EuclideanSpace ℝ (Fin n); x⊤wx^\top wx⊤w is the inner product, and matrices are Matrix (Fin n) (Fin n) ℝ. Matrices of size n+1n+1n+1 are indexed by Fin n ⊕ Fin 1 and built with Matrix.fromBlocks (the helper bordered A v c is [[A,v],[v⊤,c]][[A, v],[v^\top, c]][[A,v],[v⊤,c]]). A⪰0A \succeq 0A⪰0 is PosSemidef, Γ≻0\Gamma \succ 0Γ≻0 is PosDef, ⟨A,B⟩\langle A, B\rangle⟨A,B⟩ is (A * B).trace, and ∥Γ1/2w∥2\|\Gamma^{1/2}w\|_2∥Γ1/2w∥2​ is written w⊤Γw\sqrt{w^\top\Gamma w}w⊤Γw​.
  • The class P\mathcal PP (HasMeanCov) contains every Borel probability measure on Rn\mathbb R^nRn whose coordinates are square-integrable, with mean x^\hat xx^ and centred covariance Γ\GammaΓ. It is not restricted to densities or to Gaussians: the Gaussian class gives a different constant, −Φ−1(ε)-\Phi^{-1}(\varepsilon)−Φ−1(ε).
  • Sup, inf and max: "sup⁡P∈PP(S)≤ε\sup_{P\in\mathcal P}P(\mathcal S) \le \varepsilonsupP∈P​P(S)≤ε" is stated as "P(S)≤εP(\mathcal S) \le \varepsilonP(S)≤ε for every P∈PP \in \mathcal PP∈P". The worst-case probability SDP is stated as IsLUB/IsGLB of one real number (no attainment is claimed). The maxima over vvv, over y∈[ε,1]y \in [\varepsilon,1]y∈[ε,1] and over the ellipsoid are IsGreatest.
  • Corrections to the printed statement. The paper prints ε∈(0,1]\varepsilon \in (0,1]ε∈(0,1]; at ε=1\varepsilon = 1ε=1 Proposition 1 holds for every γ\gammaγ while Propositions 2–5 require γ≥−x^⊤w\gamma \ge -\hat x^\top wγ≥−x^⊤w, so the goal assumes 0<ε<10 < \varepsilon < 10<ε<1. The goal also assumes w≠0w \neq 0w=0, the paper's standing assumption; with w=0w = 0w=0, γ=0\gamma = 0γ=0 Proposition 1 fails and Proposition 2 holds. Milestones that remain true at ε=1\varepsilon = 1ε=1 keep ε≤1\varepsilon \le 1ε≤1.
  • A goal that omits Proposition 1 would only be matrix algebra and is not this theorem. The five-way equivalence must be proved with the probabilistic statement included.
  • Useful infrastructure, reusable beyond this mission: the homogenization lemma for quadratic functions, the S-lemma with one affine constraint, the Schur-complement criteria for bordered PSD matrices, and duality for the moment problem. Proofs of any milestone, and of lemmas building a distribution with prescribed mean and covariance, are welcome.

Selected references

  • L. El Ghaoui, M. Oks, F. Oustry, Worst-Case Value-at-Risk and Robust Portfolio Optimization: A Conic Programming Approach, Operations Research 51(4):543–556, 2003. https://doi.org/10.1287/opre.51.4.543.16101
  • D. Bertsimas, I. Popescu, Optimal Inequalities in Probability Theory: A Convex Optimization Approach, SIAM J. Optim. 15(3):780–804, 2005. https://doi.org/10.1137/S1052623401399903
  • J. E. Smith, Generalized Chebychev Inequalities: Theory and Applications in Decision Analysis, Operations Research 43(5):807–825, 1995. https://doi.org/10.1287/opre.43.5.807
  • J. F. Bonnans, A. Shapiro, Perturbation Analysis of Optimization Problems, Springer, 2000. https://doi.org/10.1007/978-1-4612-1394-9
  • L. Vandenberghe, S. Boyd, K. Comanor, Generalized Chebyshev Bounds via Semidefinite Programming, SIAM Review 49(1):52–64, 2007. https://doi.org/10.1137/S0036144504440543
8 thms5 active usersReviewed
🏆Completed
Dynamic ProgrammingOperations ResearchOptimization+1·Captain: mikedeng1

The Structure of Dynamic Programing Models: A Solution of the Principle of Optimality with Vanishing Tail Is the Optimal ReturnResearch Paper

Motivation

Dynamic programming, as introduced by Bellman in the early 1950s, solves sequential decision problems through a functional equation: the value of a problem started in a given state equals the best one-stage return plus the value of the problem started in the state that decision leads to. In practice the argument usually runs backwards. One writes down the functional equation, finds or characterizes a solution, and reads off the structure of optimal decisions from that solution. This is legitimate only if two things hold: an optimal policy exists at all, and the solution of the functional equation that was found is the optimal value, not some other solution of the same equation.

Samuel Karlin's 1955 paper The Structure of Dynamic Programing Models (Naval Research Logistics Quarterly 2(4):285–294) gives an abstract deterministic model in which both questions can be posed precisely. It proves existence of optimal strategies by a compactness argument (Theorem 1), derives the functional equation, which it calls the Principle of Optimality, and identifies the condition under which a solution of that equation is the optimal return: a tail term must vanish. Later treatments of dynamic programming on general state spaces, such as Blackwell's discounted and positive programming (1965–1967) and the monographs of Bertsekas and Shreve, state their verification theorems in the same form, with a solution of the optimality equation plus a condition at infinity.

Setting

The model has a state space Ω\OmegaΩ, a Hausdorff topological space, and a decision space DDD, a nonempty compact Hausdorff space. A strategy is a sequence s=(δ1,δ2,… )s = (\delta_1, \delta_2, \dots)s=(δ1​,δ2​,…) of decisions, one per stage. The strategy space S=D×D×⋯S = D \times D \times \cdotsS=D×D×⋯ carries the product topology and is compact by Tychonoff's theorem.

The data are:

  • a return function L:Ω×D→RL : \Omega \times D \to \mathbb{R}L:Ω×D→R, continuous and non-negative, where L(ω,δ)L(\omega, \delta)L(ω,δ) is the return for taking decision δ\deltaδ in state ω\omegaω;
  • a transition (δ,ω)↦Tδ ω∈Ω(\delta, \omega) \mapsto T_\delta\,\omega \in \Omega(δ,ω)↦Tδ​ω∈Ω, the state faced at the next stage after decision δ\deltaδ in state ω\omegaω;
  • a normalization factor P:D→RP : D \to \mathbb{R}P:D→R, continuous and positive.

From an initial state ω\omegaω, a strategy sss generates the trajectory ω1=ω\omega_1 = \omegaω1​=ω, ωn=Tδn−1 ωn−1\omega_n = T_{\delta_{n-1}}\,\omega_{n-1}ωn​=Tδn−1​​ωn−1​, and the weights Pn(s)=∏i=1n−1P(δi)P_n(s) = \prod_{i=1}^{n-1} P(\delta_i)Pn​(s)=∏i=1n−1​P(δi​) with P1(s)=1P_1(s) = 1P1​(s)=1. The total yield is

Φ(ω,s)=∑n=1∞L(ωn,δn) Pn(s),\Phi(\omega, s) = \sum_{n=1}^{\infty} L(\omega_n, \delta_n)\, P_n(s),Φ(ω,s)=n=1∑∞​L(ωn​,δn​)Pn​(s),

and the optimal return is K(ω)=max⁡s∈SΦ(ω,s)K(\omega) = \max_{s \in S} \Phi(\omega, s)K(ω)=maxs∈S​Φ(ω,s). The standing assumption of the paper, display (1), is that the partial sums ∑n=1kL(ωn,δn)Pn(s)\sum_{n=1}^{k} L(\omega_n, \delta_n) P_n(s)∑n=1k​L(ωn​,δn​)Pn​(s) converge uniformly in s∈Ss \in Ss∈S for each ω\omegaω.

Formalization targets

Goal: uniqueness of solutions with vanishing tail

Let M:Ω→RM : \Omega \to \mathbb{R}M:Ω→R solve the functional equation

M(ω)=max⁡δ∈D{L(ω,δ)+P(δ) M(Tδ ω)}for all ω,M(\omega) = \max_{\delta \in D} \bigl\{ L(\omega, \delta) + P(\delta)\, M(T_\delta\,\omega) \bigr\} \quad \text{for all } \omega,M(ω)=δ∈Dmax​{L(ω,δ)+P(δ)M(Tδ​ω)}for all ω,

with the maximum attained, and suppose that for every ω\omegaω

lim⁡n→∞ sup⁡δ1,…,δn∣M(ωn)∣∏i=1n−1P(δi)=0.\lim_{n \to \infty} \ \sup_{\delta_1, \dots, \delta_n} |M(\omega_n)| \prod_{i=1}^{n-1} P(\delta_i) = 0.n→∞lim​ δ1​,…,δn​sup​∣M(ωn​)∣i=1∏n−1​P(δi​)=0.

Then M(ω)=max⁡s∈SΦ(ω,s)M(\omega) = \max_{s \in S} \Phi(\omega, s)M(ω)=maxs∈S​Φ(ω,s) for every ω\omegaω, and the maximum is attained (pp. 290–291, §Uniqueness).

Milestones

  1. Theorem 1 (p. 287). If the series (1) converges uniformly in SSS, an optimal strategy s∗s^*s∗ exists: Φ(ω,s∗)=max⁡SΦ(ω,s)\Phi(\omega, s^*) = \max_S \Phi(\omega, s)Φ(ω,s∗)=maxS​Φ(ω,s).
  2. Shift identity (p. 290, first display). For a strategy sss with convergent yield series and the shift s′=(δ2,δ3,… )s' = (\delta_2, \delta_3, \dots)s′=(δ2​,δ3​,…),
Φ(ω,s)=L(ω,δ1)+P(δ1) Φ(Tδ1 ω,s′).\Phi(\omega, s) = L(\omega, \delta_1) + P(\delta_1)\, \Phi(T_{\delta_1}\,\omega, s').Φ(ω,s)=L(ω,δ1​)+P(δ1​)Φ(Tδ1​​ω,s′).
  1. Principle of Optimality, eq. (2) (p. 290). K(ω)=max⁡δ1{L(ω,δ1)+P(δ1)K(Tδ1 ω)}K(\omega) = \max_{\delta_1} \{ L(\omega, \delta_1) + P(\delta_1) K(T_{\delta_1}\,\omega) \}K(ω)=maxδ1​​{L(ω,δ1​)+P(δ1​)K(Tδ1​​ω)}.
  2. n-step expansion (p. 291, first display). A solution MMM of (2) satisfies, for every nnn,
M(ω)=max⁡δ1,…,δn{∑m=1nL(ωm,δm)Pm(s)+M(ωn+1)Pn+1(s)}.M(\omega) = \max_{\delta_1, \dots, \delta_n} \Bigl\{ \sum_{m=1}^{n} L(\omega_m, \delta_m) P_m(s) + M(\omega_{n+1}) P_{n+1}(s) \Bigr\}.M(ω)=δ1​,…,δn​max​{m=1∑n​L(ωm​,δm​)Pm​(s)+M(ωn+1​)Pn+1​(s)}.

Significance

Milestone 3 says that the optimal return solves the functional equation. The goal gives the converse on a class of candidate solutions: any solution with a vanishing tail is the optimal return. Together they justify solving a dynamic program by solving its functional equation. The paper's two examples, a two-operation allocation problem with discounting and a resource allocation model driving the state to the origin, obtain uniqueness among bounded solutions and among continuous solutions vanishing at the origin respectively, by checking the tail condition. Without the tail condition the conclusion fails; the paper notes that the limit term "need not be true in general for any solution to the functional equation".

All four milestones and the goal are classical results with published proofs. None of them has a machine-checked proof on this platform: its existing Bellman-equation theorems concern finite-state stochastic models with a constant discount factor, and this model has neither restriction. The mission produces a formal version of the general deterministic model on topological state spaces, with optimality characterized by a verification theorem, which later missions on the paper's examples can reuse.

Difficulty

Existence rests on continuity of s↦Φ(ω,s)s \mapsto \Phi(\omega, s)s↦Φ(ω,s) on the product space. Each term L(ωn,δn)Pn(s)L(\omega_n, \delta_n) P_n(s)L(ωn​,δn​)Pn​(s) depends on the first nnn decisions through the composite map ωn=Tδn−1∘⋯∘Tδ1 ω\omega_n = T_{\delta_{n-1}} \circ \cdots \circ T_{\delta_1}\,\omegaωn​=Tδn−1​​∘⋯∘Tδ1​​ω, and continuity of that composite in all decisions at once does not follow from separate continuity of Tδ ωT_\delta\,\omegaTδ​ω in δ\deltaδ and in ω\omegaω. The limit of the series is continuous only because the convergence is uniform.

For uniqueness, the paper's display "M(ω)=max⁡SΦ(ω,s)+lim⁡nmax⁡M(ωn)∏P(δi)M(\omega) = \max_S \Phi(\omega, s) + \lim_n \max M(\omega_n) \prod P(\delta_i)M(ω)=maxS​Φ(ω,s)+limn​maxM(ωn​)∏P(δi​)" is not an identity: a maximum of a sum is not the sum of the maxima. A proof has to bound MMM from above by the yield of every strategy and from below by the yield of one particular strategy, and the lower bound fails if the tail term is controlled only from above. Attainment of the maximum in the conclusion needs a strategy to be exhibited, not only a supremum computed.

Formalization scope

A strategy is a function s : ℕ → D, with the product topology. Lean's 0-based index kkk is the paper's stage k+1k+1k+1: s 0 is δ1\delta_1δ1​, trajectory T ω s 0 is ω1=ω\omega_1 = \omegaω1​=ω, and weight P s k is Pk+1(s)P_{k+1}(s)Pk+1​(s), so weight P s 0 = 1. The total yield is a tsum and the optimal return a supremum over all strategies. "Maximum" is encoded as IsGreatest of a range, so every stated maximum is attained. Uniform convergence of (1) is TendstoUniformly of the partial sums to Φ(ω,⋅)\Phi(\omega, \cdot)Φ(ω,⋅) along atTop.

The formalization commits to the following, relative to the page:

  • The model's assumptions (1)–(3) of p. 286, non-negativity of LLL, and positivity and continuity of PPP appear as hypotheses of every statement.
  • A single return function LLL is used, not stage-dependent LnL_nLn​, as in display (1) and as the functional equation (2) requires. PnP_nPn​ has the product form, which the paper adopts "unless stated to the contrary".
  • Assumption (4), separate continuity of Tδ ωT_\delta\,\omegaTδ​ω in δ\deltaδ and in ω\omegaω, is strengthened to joint continuity of (δ,ω)↦Tδ ω(\delta, \omega) \mapsto T_\delta\,\omega(δ,ω)↦Tδ​ω. This supports the paper's assertion (p. 287) that each term is a continuous function of sss, which separate continuity does not give.
  • DDD is assumed nonempty. With DDD empty there is no strategy and Theorem 1 is false.
  • The paper leaves the class of admissible solutions open ("an appropriate class of M's for which the lim = 0"). The goal fixes it as the two-sided condition: for every ω\omegaω and ε>0\varepsilon > 0ε>0 there is NNN with ∣M(ωn)∣ Pn(s)≤ε|M(\omega_n)|\,P_n(s) \le \varepsilon∣M(ωn​)∣Pn​(s)≤ε for all n≥Nn \ge Nn≥N and all sss. Both of the paper's examples verify this form.

Lean's tsum of a non-summable series is 000, and a supremum of an unbounded family is 000. Neither default can make a statement trivially true. The uniform-convergence hypothesis forces the series to converge, and under Theorem 1's hypotheses Φ(ω,⋅)\Phi(\omega, \cdot)Φ(ω,⋅) is continuous on a compact space, so the supremum is a maximum. The goal's conclusion is stated without a supremum. A sorry-free check confirms that all hypotheses of the goal hold on a concrete instance with non-zero return: two decisions, constant return 111, P≡1/2P \equiv 1/2P≡1/2, and M≡2M \equiv 2M≡2.

Needed infrastructure: Tychonoff's theorem, continuity of uniform limits, and attainment of maxima on compact spaces, all in Mathlib. The mission's own definitions are the trajectory, weights, partial and total yield, and the optimal return. Contributions of intermediate lemmas are welcome, for example continuity of s↦ωns \mapsto \omega_ns↦ωn​, summability from uniform convergence, and the upper and lower tail estimates for MMM. So are formalizations of the paper's Remarks 1 and 3 (Dini's theorem and convergence of the kkk-stage optimal returns).

Selected references

  • S. Karlin, The Structure of Dynamic Programing Models, Naval Research Logistics Quarterly 2(4):285–294, 1955. https://doi.org/10.1002/nav.3800020408
  • R. Bellman, Dynamic Programming, Princeton University Press, 1957. https://press.princeton.edu/books/paperback/9780691146683/dynamic-programming
  • D. Blackwell, Discounted Dynamic Programming, Annals of Mathematical Statistics 36(1):226–235, 1965. https://doi.org/10.1214/aoms/1177700285
  • D. P. Bertsekas and S. E. Shreve, Stochastic Optimal Control: The Discrete-Time Case, Academic Press, 1978. https://web.mit.edu/dimitrib/www/soc.html
6 thms3 active usersReviewed
🏆Completed
Information TheoryOperations ResearchOptimization+1·Captain: mikedeng1

Worst-Case Value-At-Risk and Robust Portfolio Optimization: A Conic Programming Approach 2: Closed Form of the Entropy-Constrained Worst-Case VaRResearch Paper

Motivation

Value-at-Risk (VaR) is the loss level that a portfolio exceeds with probability at most ε\varepsilonε. It is the standard risk measure of banking regulation, and its classical computation assumes Gaussian returns: for a Gaussian return vector with mean x^\hat xx^ and covariance Γ\GammaΓ it equals −Φ−1(ε)w⊤Γw−x^⊤w-\Phi^{-1}(\varepsilon)\sqrt{w^\top\Gamma w} - \hat x^\top w−Φ−1(ε)w⊤Γw​−x^⊤w, where Φ\PhiΦ is the standard normal distribution function. Real returns are not exactly Gaussian, and a VaR computed from a misspecified distribution can badly understate risk.

El Ghaoui, Oks and Oustry (Oper. Res. 51(4), 2003) replace the single distribution by a class P\mathcal PP of distributions and define the worst-case VaR as the smallest loss level whose probability is at most ε\varepsilonε under every distribution of the class. Their first class, distributions with a given mean and covariance, leads to the Chebyshev-type bound of their Theorem 1, whose worst case is attained by discrete distributions. §4.2 of the paper asks instead for distributions that stay close to a Gaussian, measured by relative entropy (Kullback–Leibler divergence). Such balls are the basic uncertainty sets of distributionally robust optimization and of robust control in economics (Hansen and Sargent's multiplier and constraint preferences), and they give a smooth worst case. Theorem 9 computes the resulting worst-case VaR in closed form.

Setting

Returns are random vectors x∈Rnx \in \mathbb R^nx∈Rn and a portfolio is a vector w∈Rnw \in \mathbb R^nw∈Rn with w≠0w \neq 0w=0; its return is r(w,x)=w⊤xr(w,x) = w^\top xr(w,x)=w⊤x. For a level γ∈R\gamma \in \mathbb Rγ∈R the loss set is Sγ={x:γ≤−x⊤w}\mathcal S_\gamma = \{x : \gamma \le -x^\top w\}Sγ​={x:γ≤−x⊤w} (Eq. 13 of the paper).

Given a class P\mathcal PP of probability distributions on Rn\mathbb R^nRn and ε∈(0,1)\varepsilon \in (0,1)ε∈(0,1), the worst-case Value-at-Risk (Eq. 4) is

VP(w)=min⁡{γ∈R:sup⁡P∈PP(Sγ)≤ε}.V_{\mathcal P}(w) = \min\Big\{\gamma \in \mathbb R : \sup_{P \in \mathcal P} P(\mathcal S_\gamma) \le \varepsilon\Big\}.VP​(w)=min{γ∈R:P∈Psup​P(Sγ​)≤ε}.

Fix a mean x^∈Rn\hat x \in \mathbb R^nx^∈Rn and a positive definite covariance Γ≻0\Gamma \succ 0Γ≻0, and let P0=N(x^,Γ)P_0 = \mathcal N(\hat x, \Gamma)P0​=N(x^,Γ) be the reference Gaussian. For d≥0d \ge 0d≥0 the relative-entropy class (Eq. 43) is

Pd={P probability on Rn:KL(P,P0)=∫log⁡dPdP0 dP≤d},\mathcal P_d = \Big\{P \text{ probability on } \mathbb R^n : \mathrm{KL}(P, P_0) = \int \log\frac{dP}{dP_0}\,dP \le d\Big\},Pd​={P probability on Rn:KL(P,P0​)=∫logdP0​dP​dP≤d},

with KL(P,P0)=+∞\mathrm{KL}(P,P_0) = +\inftyKL(P,P0​)=+∞ unless PPP is absolutely continuous with respect to P0P_0P0​.

The risk factor (Eq. 45) is

f(ε,d)=sup⁡λ>0eε/λ−d−1e1/λ−1,κ(ε,d)=−Φ−1(f(ε,d)),f(\varepsilon,d) = \sup_{\lambda>0}\frac{e^{\varepsilon/\lambda - d} - 1}{e^{1/\lambda} - 1}, \qquad \kappa(\varepsilon,d) = -\Phi^{-1}\big(f(\varepsilon,d)\big),f(ε,d)=λ>0sup​e1/λ−1eε/λ−d−1​,κ(ε,d)=−Φ−1(f(ε,d)),

and the Gaussian tail of the loss set is ϕ(γ)=P0(Sγ)=1−Φ((γ+w⊤x^)/w⊤Γw)\phi(\gamma) = P_0(\mathcal S_\gamma) = 1 - \Phi\big((\gamma + w^\top\hat x)/\sqrt{w^\top\Gamma w}\big)ϕ(γ)=P0​(Sγ​)=1−Φ((γ+w⊤x^)/w⊤Γw​).

Formalization targets

Goal: Theorem 9 (p. 553)

For Γ≻0\Gamma \succ 0Γ≻0, w≠0w \neq 0w=0, d≥0d \ge 0d≥0 and 0<ε<10 < \varepsilon < 10<ε<1, the minimum in (4) over Pd\mathcal P_dPd​ exists and

VPd(w)=κ(ε,d)w⊤Γw−x^⊤w.(44)V_{\mathcal P_d}(w) = \kappa(\varepsilon,d)\sqrt{w^\top\Gamma w} - \hat x^\top w. \tag{44}VPd​​(w)=κ(ε,d)w⊤Γw​−x^⊤w.(44)

Milestones

The milestones follow the proof of Theorem 9 on pp. 553–554, in attack order.

  1. Eq. (45). The two expressions of fff agree: sup⁡λ>0eε/λ−d−1e1/λ−1=sup⁡v>0e−d(v+1)ε−1v\sup_{\lambda>0}\frac{e^{\varepsilon/\lambda-d}-1}{e^{1/\lambda}-1} = \sup_{v>0}\frac{e^{-d}(v+1)^\varepsilon - 1}{v}supλ>0​e1/λ−1eε/λ−d−1​=supv>0​ve−d(v+1)ε−1​.
  2. Gaussian tail. P0(Sγ)=1−Φ((γ+w⊤x^)/w⊤Γw)P_0(\mathcal S_\gamma) = 1 - \Phi\big((\gamma + w^\top\hat x)/\sqrt{w^\top\Gamma w}\big)P0​(Sγ​)=1−Φ((γ+w⊤x^)/w⊤Γw​).
  3. Eq. (47). For λ>0\lambda > 0λ>0, the Lagrangian L(Q)=Q(Sγ)+λ0(1−Q(Rn))+λ(d−KL-integral)L(Q) = Q(\mathcal S_\gamma) + \lambda_0(1 - Q(\mathbb R^n)) + \lambda(d - \mathrm{KL}\text{-integral})L(Q)=Q(Sγ​)+λ0​(1−Q(Rn))+λ(d−KL-integral) is maximised over finite measures Q≪P0Q \ll P_0Q≪P0​ by the exponentially tilted density dQ⋆/dP0=exp⁡((χS−λ0)/λ−1)dQ^\star/dP_0 = \exp((\chi_{\mathcal S} - \lambda_0)/\lambda - 1)dQ⋆/dP0​=exp((χS​−λ0​)/λ−1), with value
θ(λ0,λ)=λ0+λd+λe−λ0/λ−1((e1/λ−1)ϕ(γ)+1).\theta(\lambda_0,\lambda) = \lambda_0 + \lambda d + \lambda e^{-\lambda_0/\lambda - 1}\big((e^{1/\lambda}-1)\phi(\gamma) + 1\big).θ(λ0​,λ)=λ0​+λd+λe−λ0​/λ−1((e1/λ−1)ϕ(γ)+1).
  1. Eq. (48). min⁡λ0∈Rθ(λ0,λ)=λd+λlog⁡((e1/λ−1)ϕ(γ)+1)\min_{\lambda_0\in\mathbb R}\theta(\lambda_0,\lambda) = \lambda d + \lambda\log\big((e^{1/\lambda}-1)\phi(\gamma)+1\big)minλ0​∈R​θ(λ0​,λ)=λd+λlog((e1/λ−1)ϕ(γ)+1).
  2. Duality. sup⁡P∈PdP(Sγ)=inf⁡λ>0(λd+λlog⁡((e1/λ−1)ϕ(γ)+1))\sup_{P\in\mathcal P_d} P(\mathcal S_\gamma) = \inf_{\lambda>0}\big(\lambda d + \lambda\log((e^{1/\lambda}-1)\phi(\gamma)+1)\big)supP∈Pd​​P(Sγ​)=infλ>0​(λd+λlog((e1/λ−1)ϕ(γ)+1)).
  3. Inversion. For d>0d > 0d>0: some λ>0\lambda > 0λ>0 makes the dual value at most ε\varepsilonε if and only if γ≥κ(ε,d)w⊤Γw−w⊤x^\gamma \ge \kappa(\varepsilon,d)\sqrt{w^\top\Gamma w} - w^\top\hat xγ≥κ(ε,d)w⊤Γw​−w⊤x^.
  4. Remark after Theorem 9. f(ε,0)=εf(\varepsilon, 0) = \varepsilonf(ε,0)=ε, so κ(ε,0)=−Φ−1(ε)\kappa(\varepsilon,0) = -\Phi^{-1}(\varepsilon)κ(ε,0)=−Φ−1(ε). The risk factor κ(ε,d)\kappa(\varepsilon, d)κ(ε,d) is strictly increasing in d≥0d \ge 0d≥0.

Significance

Theorem 9 says that an entropy ball around a Gaussian leaves the form of the Gaussian VaR unchanged: only the risk factor moves, from −Φ−1(ε)-\Phi^{-1}(\varepsilon)−Φ−1(ε) to κ(ε,d)\kappa(\varepsilon,d)κ(ε,d), a scalar computed by a one-dimensional maximisation. The worst-case VaR therefore stays a convex function of www whenever κ≥0\kappa \ge 0κ≥0, and minimising it over a polytope of portfolios is a second-order cone program (problem (3) of the paper). The number f(ε,d)f(\varepsilon,d)f(ε,d) is the largest ppp with KL(Bernoulli(ε) ∥ Bernoulli(p))≤d\mathrm{KL}(\mathrm{Bernoulli}(\varepsilon)\,\|\,\mathrm{Bernoulli}(p)) \le dKL(Bernoulli(ε)∥Bernoulli(p))≤d, which ties the result to the binary-divergence bounds used throughout information theory.

The theorem was proved in 2003. The worst-case-probability step (milestone 5) is an instance of the Donsker–Varadhan / Gibbs variational duality for relative-entropy balls, which the paper imports from the literature (Smith 1995). No machine-checked proof of Theorem 9 or of this duality on Rn\mathbb R^nRn is known. A formalization would give a verified closed form for a relative-entropy distributionally robust chance constraint, and the duality and tilting lemmas would serve any mission on KL-ball robust optimization.

Difficulty

The obvious argument is Lagrangian duality for the infinite-dimensional problem sup⁡{P(Sγ):KL(P,P0)≤d}\sup\{P(\mathcal S_\gamma) : \mathrm{KL}(P,P_0) \le d\}sup{P(Sγ​):KL(P,P0​)≤d}. Weak duality and the pointwise maximisation that produces the tilted density are elementary. The difficulty is the step the paper cites rather than proves: that the duality gap is zero, and that the supremum over distributions equals the infimum of the dual over λ>0\lambda > 0λ>0. The feasible set is a set of measures, the objective is an indicator, and the constraint is a divergence that is +∞+\infty+∞ off a set of absolutely continuous measures, so a finite-dimensional Slater argument does not apply as stated.

The second difficulty is at the boundary of the parameters. At d=0d = 0d=0 the supremum defining f(ε,0)f(\varepsilon,0)f(ε,0) is approached only as λ→∞\lambda \to \inftyλ→∞, so the final inversion step behaves differently from d>0d > 0d>0. At ε=1\varepsilon = 1ε=1 the theorem is false, since every level γ\gammaγ is feasible and (4) has no minimum.

Formalization scope

Returns live in EuclideanSpace ℝ (Fin n). P0P_0P0​ is Mathlib's multivariateGaussian xhat Γ with Γ.PosDef, and KL\mathrm{KL}KL is InformationTheory.klDiv, which is ∞\infty∞ unless P≪P0P \ll P_0P≪P0​ with integrable log-likelihood ratio and equals ∫log⁡dPdP0 dP\int\log\frac{dP}{dP_0}\,dP∫logdP0​dP​dP otherwise for probability measures. The class Pd\mathcal P_dPd​ requires IsProbabilityMeasure P. Φ\PhiΦ is cdf (gaussianReal 0 1), and Φ−1(p)\Phi^{-1}(p)Φ−1(p) is defined as inf⁡{t:p≤Φ(t)}\inf\{t : p \le \Phi(t)\}inf{t:p≤Φ(t)}, which inverts Φ\PhiΦ on (0,1)(0,1)(0,1). The quadratic form w⊤Γww^\top\Gamma ww⊤Γw is a double sum, and ∥Γ1/2w∥2\|\Gamma^{1/2}w\|_2∥Γ1/2w∥2​ is written w⊤Γw\sqrt{w^\top\Gamma w}w⊤Γw​.

Conventions the Lean statements commit to:

  • "min" in (4) is IsLeast of the feasible set {γ:P(Sγ)≤ε ∀P∈Pd}\{\gamma : P(\mathcal S_\gamma) \le \varepsilon \ \forall P \in \mathcal P_d\}{γ:P(Sγ​)≤ε ∀P∈Pd​}. "sup⁡PP(Sγ)≤ε\sup_{P}P(\mathcal S_\gamma) \le \varepsilonsupP​P(Sγ​)≤ε" is written "for every PPP", with probabilities compared in [0,∞][0,\infty][0,∞].
  • The paper prints ε∈(0,1]\varepsilon \in (0,1]ε∈(0,1]. The mission assumes 0<ε<10 < \varepsilon < 10<ε<1, because the goal is false at ε=1\varepsilon = 1ε=1.
  • w≠0w \neq 0w=0 is the paper's assumption that the admissible set of portfolios excludes 000.
  • f(ε,d)f(\varepsilon,d)f(ε,d) is a Lean sSup of a set that is nonempty and bounded above by 111 for ε≤1\varepsilon \le 1ε≤1, d≥0d \ge 0d≥0.
  • The duality of milestone 5 is stated as the existence of one real number that is both the least upper bound of the worst-case probabilities and the greatest lower bound of the dual values, not as an equality of Lean's sSup and sInf.
  • Eq. (48) is stated as an attained minimum (IsLeast), which the calculus gives.
  • Milestone 3 works with finite measures Q≪P0Q \ll P_0Q≪P0​ with integrable log-likelihood ratio in place of the paper's densities ppp. It uses the complement of Sγ\mathcal S_\gammaSγ​ where the paper writes {γ≥−x⊤w}\{\gamma \ge -x^\top w\}{γ≥−x⊤w}, which differs by a P0P_0P0​-null hyperplane.
  • Milestone 6 assumes d>0d > 0d>0; the goal keeps d≥0d \ge 0d≥0.

Restricting Pd\mathcal P_dPd​ to {P0}\{P_0\}{P0​}, dropping IsProbabilityMeasure, or taking an arbitrary reference measure would trivialize or change the theorem. The class is the full KL ball around the nondegenerate Gaussian.

Infrastructure a complete development needs: the pushforward of a multivariate Gaussian under a linear functional (a one-dimensional Gaussian), the Gibbs variational principle for relative entropy, the strong duality for KL balls, and properties of Φ\PhiΦ and its quantile (continuity, strict monotonicity, symmetry Φ(−t)=1−Φ(t)\Phi(-t) = 1 - \Phi(t)Φ(−t)=1−Φ(t)). The Gaussian-quantile and KL-ball duality lemmas are reusable beyond this mission. Contributions of any of these as separate lemmas are welcome.

Selected references

  • L. El Ghaoui, M. Oks, F. Oustry, Worst-Case Value-at-Risk and Robust Portfolio Optimization: A Conic Programming Approach, Operations Research 51(4):543–556, 2003. https://doi.org/10.1287/opre.51.4.543.16101
  • J. E. Smith, Generalized Chebychev Inequalities: Theory and Applications in Decision Analysis, Operations Research 43(5):807–825, 1995. https://doi.org/10.1287/opre.43.5.807
  • M. D. Donsker, S. R. S. Varadhan, Asymptotic evaluation of certain Markov process expectations for large time, I, Communications on Pure and Applied Mathematics 28(1):1–47, 1975. https://doi.org/10.1002/cpa.3160280102
  • L. P. Hansen, T. J. Sargent, Robust Control and Model Uncertainty, American Economic Review 91(2):60–66, 2001. https://doi.org/10.1257/aer.91.2.60
9 thms4 active usersReviewed
🏆Completed
Operations ResearchProbabilityStatistics·Captain: mikedeng1

Are Call Center and Hospital Arrivals Well Modeled by Nonhomogeneous Poisson Processes?: Combining k Equal Subintervals of a Linear Arrival Rate Bounds the Degree of Nonhomogeneity by C/kResearch Paper

Motivation

Arrival processes to call centers and hospital emergency departments are routinely modeled as nonhomogeneous Poisson processes (NHPPs): Poisson processes whose arrival rate varies over the day. Staffing and queueing models built on this assumption are only as good as the assumption itself, so practitioners test it on data. The standard test, going back to Brown et al. (2005, doi:10.1198/016214504000001808), divides the day into short subintervals, treats the rate as constant on each, rescales the arrival times within each subinterval to [0,1][0,1][0,1], combines all the rescaled data, and applies a Kolmogorov–Smirnov (KS) test of uniformity.

Kim and Whitt (2014, doi:10.1287/msom.2014.0490) ask when this piecewise-constant approximation is justified. If the true rate is not constant on a subinterval, the rescaled arrival times are not uniform, and with enough data the KS test rejects the Poisson hypothesis even when the process really is an NHPP. Section 3 of the paper quantifies this effect through a single number, the degree of nonhomogeneity, and shows how it behaves when the interval is cut into kkk equal pieces. This mission formalizes that section's exact computations for a linear arrival rate.

Setting

An arrival rate function λ\lambdaλ on an interval [0,T][0,T][0,T], T>0T > 0T>0, is nonnegative, integrable, and strictly positive except at finitely many points. Its cumulative arrival rate is

Λ(t)=∫0tλ(s) ds.\Lambda(t) = \int_0^t \lambda(s)\,ds .Λ(t)=∫0t​λ(s)ds.

Conditionally on nnn arrivals in [0,T][0,T][0,T], the arrival times of an NHPP with rate λ\lambdaλ, divided by TTT, are distributed as the order statistics of nnn independent random variables on [0,1][0,1][0,1] with the conditional cdf

F(t)=Λ(tT)Λ(T),0≤t≤1.F(t) = \frac{\Lambda(tT)}{\Lambda(T)}, \qquad 0 \le t \le 1 .F(t)=Λ(T)Λ(tT)​,0≤t≤1.

The degree of nonhomogeneity is the Kolmogorov distance of FFF from the uniform cdf,

D=sup⁡0≤t≤1∣F(t)−t∣.D = \sup_{0 \le t \le 1} |F(t) - t| .D=0≤t≤1sup​∣F(t)−t∣.

It is zero exactly when λ\lambdaλ is constant, and it is the limit of the KS test statistic as the amount of data grows.

For k≥1k \ge 1k≥1, divide [0,T][0,T][0,T] into kkk subintervals of length T/kT/kT/k. For 1≤j≤k1 \le j \le k1≤j≤k the jjj-th subinterval has cumulative rate Λj(t)=Λ((j−1)T/k+t)−Λ((j−1)T/k)\Lambda_j(t) = \Lambda((j-1)T/k + t) - \Lambda((j-1)T/k)Λj​(t)=Λ((j−1)T/k+t)−Λ((j−1)T/k), conditional cdf Fj(t)=Λj(tT/k)/Λj(T/k)F_j(t) = \Lambda_j(tT/k)/\Lambda_j(T/k)Fj​(t)=Λj​(tT/k)/Λj​(T/k), and share of arrivals pj=(Λ(jT/k)−Λ((j−1)T/k))/Λ(T)p_j = (\Lambda(jT/k) - \Lambda((j-1)T/k))/\Lambda(T)pj​=(Λ(jT/k)−Λ((j−1)T/k))/Λ(T). The data of all subintervals, each rescaled to [0,1][0,1][0,1] and combined, have the conditional cdf F=∑j=1kpjFjF = \sum_{j=1}^k p_j F_jF=∑j=1k​pj​Fj​ (LEMMA 1).

The linear arrival rate is λ(t)=a+bt\lambda(t) = a + btλ(t)=a+bt with b≥0b \ge 0b≥0 and a≥0a \ge 0a≥0, not identically zero. When a>0a > 0a>0 its relative slope is r=b/ar = b/ar=b/a; on the jjj-th subinterval the relative slope is rj=b/λ((j−1)T/k)r_j = b/\lambda((j-1)T/k)rj​=b/λ((j−1)T/k).

In the Lean development these are cumRate, condCdf, degree, subCum, subCdf, weight, mixCdf, linRate and subSlope, in the namespace NHPPArrivals.LinearRate.

Formalization targets

Goal: THEOREM 5, combining equally spaced subintervals

For the linear rate, there is a constant CCC such that for every k≥1k \ge 1k≥1

D=sup⁡0≤t≤1∣F(t)−t∣=∑j=1kpjDj=∑j=1kpjsup⁡0≤t≤1∣Fj(t)−t∣,(20)D = \sup_{0 \le t \le 1}|F(t) - t| = \sum_{j=1}^k p_j D_j = \sum_{j=1}^k p_j \sup_{0 \le t \le 1}|F_j(t) - t|, \tag{20}D=0≤t≤1sup​∣F(t)−t∣=j=1∑k​pj​Dj​=j=1∑k​pj​0≤t≤1sup​∣Fj​(t)−t∣,(20)

with, if a>0a > 0a>0,

D=∑j=1kpj rjT/k8+4rjT/k,(21)D = \sum_{j=1}^k \frac{p_j\, r_j T/k}{8 + 4 r_j T/k}, \tag{21}D=j=1∑k​8+4rj​T/kpj​rj​T/k​,(21)

and, if a=0a = 0a=0,

D=p14+∑j=2kpj/(j−1)8+4/(j−1),(22)D = \frac{p_1}{4} + \sum_{j=2}^k \frac{p_j/(j-1)}{8 + 4/(j-1)}, \tag{22}D=4p1​​+j=2∑k​8+4/(j−1)pj​/(j−1)​,(22)

and in both cases D≤C/kD \le C/kD≤C/k. The constant CCC may depend on aaa, bbb and TTT, but not on kkk; its value is left open, as in the paper.

Milestones

  1. LEMMA 1, (17): for a general rate, the rescaled combined data have cdf ∑jpjFj\sum_j p_j F_j∑j​pj​Fj​, and the pjp_jpj​ form a probability vector.
  2. THEOREM 4, a>0a > 0a>0, (14), (16): F(t)=(tT+r(tT)2/2)/(T+rT2/2)F(t) = (tT + r(tT)^2/2)/(T + rT^2/2)F(t)=(tT+r(tT)2/2)/(T+rT2/2) and D=∣F(1/2)−1/2∣=rT/(8+4rT)D = |F(1/2) - 1/2| = rT/(8 + 4rT)D=∣F(1/2)−1/2∣=rT/(8+4rT).
  3. THEOREM 4, a=0a = 0a=0, (15): F(t)=t2F(t) = t^2F(t)=t2 and D=1/4D = 1/4D=1/4.
  4. LEMMA 1, (18): closed forms of Λj\Lambda_jΛj​, FjF_jFj​, pjp_jpj​, rjr_jrj​ when a>0a > 0a>0.
  5. LEMMA 1, (19): closed forms of Λj\Lambda_jΛj​, FjF_jFj​, pjp_jpj​, rjr_jrj​ when a=0a = 0a=0.
  6. THEOREM 5, (20): D=∑jpjDjD = \sum_j p_j D_jD=∑j​pj​Dj​ for one fixed kkk.

Significance

The result gives a quantitative criterion for the piecewise-constant approximation: for a linear rate, cutting the interval into kkk equal pieces reduces the degree of nonhomogeneity of the combined data by a factor of order 1/k1/k1/k. Since the KS critical value at sample size nnn is of order 1/n1/\sqrt n1/n​, this tells a practitioner how fine the subintervals must be, relative to the amount of data, before a KS test of the Poisson hypothesis stops rejecting merely because the rate varies within subintervals. The paper's later THEOREM 6 and its practical guidelines (§3.4, §3.6) rest on these formulas.

The results are proved in the paper by direct calculation; none of them has a machine-checked proof. The mission produces a verified library of the conditional-cdf calculus for NHPPs on an interval (the conditional cdf, its degree of nonhomogeneity, the subinterval decomposition) and the exact linear-rate formulas that the testing literature cites.

Difficulty

The computations are elementary, but two steps are not immediate. First, the supremum of ∣F(t)−t∣|F(t) - t|∣F(t)−t∣ over [0,1][0,1][0,1] is a supremum of a nonsmooth function; showing that it is attained at t=1/2t = 1/2t=1/2 requires knowing the sign of F(t)−tF(t) - tF(t)−t on the whole interval, and for the combined cdf it requires that all the pieces FjF_jFj​ attain their maximal deviation at the same point, which is special to linear rates. For a general rate the naive identity D=∑jpjDjD = \sum_j p_j D_jD=∑j​pj​Dj​ fails: the sup of a sum is at most the sum of the sups, with equality only when the maximizers coincide. Second, LEMMA 1 is a statement about the law of a rescaled random variable (the fractional part of kX/TkX/TkX/T), which requires splitting a measure along the kkk subintervals and handling their boundary points.

Formalization scope

Rates are real functions λ:R→R\lambda : \mathbb R \to \mathbb Rλ:R→R; only their values on [0,T][0,T][0,T] enter. Λ\LambdaΛ is an interval integral, subintervals are indexed by j∈{1,…,k}j \in \{1, \dots, k\}j∈{1,…,k} with k,jk, jk,j natural numbers cast to reals, and (j−1)(j-1)(j−1) is computed in R\mathbb RR. All quotients are real divisions; the hypotheses of every statement (T>0T > 0T>0, k≥1k \ge 1k≥1, b≥0b \ge 0b≥0, and a>0a > 0a>0 or b>0b > 0b>0 for the linear rate; integrability, nonnegativity and a finite zero set for a general rate) make every denominator Λ(T)\Lambda(T)Λ(T) and Λj(T/k)\Lambda_j(T/k)Λj​(T/k) positive. b≥0b \ge 0b≥0 is the paper's standing assumption of §3.3; excluding a=b=0a = b = 0a=b=0 is §3.2's requirement that the rate be positive except at finitely many points. The degree of nonhomogeneity is sSup of the image of [0,1][0,1][0,1], and every statement that uses it also asserts that the supremum is attained, so no default value of sSup can make a statement true. The constant CCC of THEOREM 5 is quantified before kkk; choosing it after kkk would make the bound empty. The statements are about the general definitions of (17) applied to λ(t)=a+bt\lambda(t) = a + btλ(t)=a+bt, not about the closed forms (18)–(19), which are separate milestones. The formula for rjr_jrj​ in (19) is stated for 2≤j≤k2 \le j \le k2≤j≤k only: r1=b/λ(0)r_1 = b/\lambda(0)r1​=b/λ(0) is undefined when a=0a = 0a=0.

The Poisson process itself is not formalized. LEMMA 1's "i.i.d. random variables" is the paper's THEOREM 1 (the conditioning property) applied to each arrival; LEMMA 1 is stated for the law of one arrival time, the probability measure with density λ/Λ(T)\lambda/\Lambda(T)λ/Λ(T) on [0,T][0,T][0,T]. THEOREM 1, THEOREMS 2–3 and COROLLARY 1 (limits of the empirical cdf and of the KS statistic) are out of scope: they need a point-process layer, the Glivenko–Cantelli theorem and KS critical values, none of which exists in Mathlib. THEOREM 6 is out of scope because the paper gives only a sketch comparing DDD with the KS critical value.

Contributions welcome: proofs of the milestones, general lemmas on sups of ∣F(t)−t∣|F(t) - t|∣F(t)−t∣ for convex cdfs, and the measure-splitting argument of LEMMA 1, which is reusable for any subinterval-based test of the Poisson hypothesis.

Selected references

  • S.-H. Kim and W. Whitt, Are call center and hospital arrivals well modeled by nonhomogeneous Poisson processes?, Manufacturing & Service Operations Management 16(3):464–480, 2014. doi:10.1287/msom.2014.0490
  • L. Brown, N. Gans, A. Mandelbaum, A. Sakov, H. Shen, S. Zeltyn, L. Zhao, Statistical analysis of a telephone call center: a queueing-science perspective, Journal of the American Statistical Association 100(469):36–50, 2005. doi:10.1198/016214504000001808
  • F. J. Massey, The Kolmogorov–Smirnov test for goodness of fit, Journal of the American Statistical Association 46(253):68–78, 1951. doi:10.1080/01621459.1951.10500769
8 thms3 active usersReviewed
🏆Completed
Graph TheoryOperations ResearchOptimization+1·Captain: mikedeng1

A New Approach to the Maximum-Flow Problem 1: The Generic Push-Relabel Algorithm and Its Operation BoundResearch Paper

Motivation

The maximum-flow problem asks how much of a commodity can be sent from a source to a sink through a network whose edges have capacities. It is a basic model in operations research (transportation, scheduling, bipartite matching) and a standard subroutine in combinatorial optimization.

Classical algorithms, from Ford and Fulkerson (1956) through Edmonds–Karp and Dinic (1970–1972) and Karzanov (1974), increase a feasible flow along augmenting paths or blocking flows. Goldberg and Tarjan, A New Approach to the Maximum-Flow Problem (J. ACM 35(4), 1988, doi:10.1145/48014.61051), replaced this global view by a local one: the push-relabel method maintains a preflow, which may violate conservation at intermediate vertices, and moves excess along edges toward vertices with smaller distance labels. The generic method, with the basic operations applied in any order, is the starting point of the FIFO, highest-label and dynamic-tree implementations analysed later in the same paper, and push-relabel codes remain among the fastest practical maximum-flow solvers.

This mission formalizes §2–§3 of the paper: the generic algorithm is correct, and it stops after a number of basic operations bounded by an explicit polynomial in the numbers of vertices and edges, whatever order of operations is chosen.

Setting

A flow network has a finite vertex set VVV with n=∣V∣n = |V|n=∣V∣, a source sss and a sink t≠st \ne st=s, and a capacity c(v,w)≥0c(v,w) \ge 0c(v,w)≥0 for every ordered pair of vertices, positive exactly on the edges E={(v,w):c(v,w)>0}E = \{(v,w) : c(v,w) > 0\}E={(v,w):c(v,w)>0}; m=∣E∣m = |E|m=∣E∣, and there are no loops, c(v,v)=0c(v,v) = 0c(v,v)=0.

Flows are real functions on all vertex pairs. A function fff satisfies the capacity constraint if f(v,w)≤c(v,w)f(v,w) \le c(v,w)f(v,w)≤c(v,w) and antisymmetry if f(v,w)=−f(w,v)f(v,w) = -f(w,v)f(v,w)=−f(w,v) for all pairs. The excess of vvv is e(v)=∑uf(u,v)e(v) = \sum_{u} f(u,v)e(v)=∑u​f(u,v). A flow also has e(v)=0e(v) = 0e(v)=0 for v∉{s,t}v \notin \{s,t\}v∈/{s,t}; a preflow only e(v)≥0e(v) \ge 0e(v)≥0 for v≠sv \ne sv=s. The value of a flow is ∣f∣=∑vf(v,t)|f| = \sum_v f(v,t)∣f∣=∑v​f(v,t), and a maximum flow is a flow of maximum value.

The residual capacity is rf(v,w)=c(v,w)−f(v,w)r_f(v,w) = c(v,w) - f(v,w)rf​(v,w)=c(v,w)−f(v,w); pairs with rf(v,w)>0r_f(v,w) > 0rf​(v,w)>0 are the edges of the residual graph GfG_fGf​. A valid labeling is d:V→N∪{∞}d : V \to \mathbb{N} \cup \{\infty\}d:V→N∪{∞} with d(s)=nd(s) = nd(s)=n, d(t)=0d(t) = 0d(t)=0 and d(v)≤d(w)+1d(v) \le d(w) + 1d(v)≤d(w)+1 on every residual edge. A vertex vvv is active if v∉{s,t}v \notin \{s,t\}v∈/{s,t}, d(v)<∞d(v) < \inftyd(v)<∞ and e(v)>0e(v) > 0e(v)>0.

The two basic operations (Fig. 1 of the paper) are:

  • Push(v,w)(v,w)(v,w), applicable when vvv is active, rf(v,w)>0r_f(v,w) > 0rf​(v,w)>0 and d(v)=d(w)+1d(v) = d(w)+1d(v)=d(w)+1: send δ=min⁡(e(v),rf(v,w))\delta = \min(e(v), r_f(v,w))δ=min(e(v),rf​(v,w)), i.e. f(v,w)+=δf(v,w) \mathrel{+}= \deltaf(v,w)+=δ, f(w,v)−=δf(w,v) \mathrel{-}= \deltaf(w,v)−=δ. It is saturating if rf(v,w)=0r_f(v,w) = 0rf​(v,w)=0 afterwards and nonsaturating otherwise.
  • Relabel(v)(v)(v), applicable when vvv is active and d(v)≤d(w)d(v) \le d(w)d(v)≤d(w) for every residual edge (v,w)(v,w)(v,w): set d(v)←min⁡{d(w)+1:(v,w)∈Ef}d(v) \leftarrow \min\{d(w)+1 : (v,w) \in E_f\}d(v)←min{d(w)+1:(v,w)∈Ef​} (∞\infty∞ if there is none).

The generic algorithm (Fig. 2) starts from the preflow that saturates every edge leaving sss and is zero elsewhere, with the simple labeling d(s)=nd(s) = nd(s)=n, d(v)=0d(v) = 0d(v)=0 otherwise, and applies applicable basic operations in any order while one exists. An execution with KKK basic operations is a sequence of states (f0,d0),…,(fK,dK)(f_0,d_0),\dots,(f_K,d_K)(f0​,d0​),…,(fK​,dK​) from the initial state, each obtained from the previous one by one applicable operation.

Formalization targets

Goal: Theorems 3.11 and 3.4

Assume the paper's standing assumption m≥n−1m \ge n-1m≥n−1. For every execution with KKK basic operations,

K≤(2n−1)(n−2)+2nm+4n2m,K \le (2n-1)(n-2) + 2nm + 4n^2 m,K≤(2n−1)(n−2)+2nm+4n2m,

and if no basic operation applies in the final state, then fKf_KfK​ is a maximum flow. The paper states the bound as O(n2m)O(n^2m)O(n2m) and proves it as "immediate from Lemmas 3.8, 3.9, and 3.10"; the goal states the sum of those three printed bounds. Since every execution is this short, no order of operations runs forever.

Milestones

In the order the proof uses them: Lemma 2.1 (at an active vertex a push or a relabel applies); Lemma 3.1 (the labeling stays valid); Theorem 3.2 (Ford–Fulkerson: a flow is maximum iff ttt is unreachable from sss in GfG_fGf​); Lemma 3.3 (under a valid labeling ttt is unreachable from sss); Lemma 3.5 (from any vertex with positive excess, sss is reachable); Lemma 3.6 (labels never decrease; a relabeling increases the label); Lemma 3.7 (d(v)≤2n−1d(v) \le 2n-1d(v)≤2n−1 throughout); Theorem 3.4 (termination with finite labels gives a maximum flow); Lemma 3.8 (≤2n−1\le 2n-1≤2n−1 relabelings per vertex, ≤(2n−1)(n−2)<2n2\le (2n-1)(n-2) < 2n^2≤(2n−1)(n−2)<2n2 in total); Lemma 3.9 (≤2nm\le 2nm≤2nm saturating pushes); Lemma 3.10 (≤4n2m\le 4n^2m≤4n2m nonsaturating pushes, under m≥n−1m \ge n-1m≥n−1). A further, non-milestone item states the unnumbered invariant that every fkf_kfk​ is a preflow.

Significance

The generic bound shows that push-relabel terminates in a polynomial number of steps without any rule for choosing the next operation; the specific orderings of §4–§5 of the paper (first-in first-out, O(n3)O(n^3)O(n3); dynamic trees, O(nmlog⁡(n2/m))O(nm\log(n^2/m))O(nmlog(n2/m))) refine only the count of nonsaturating pushes, and reuse Lemmas 3.1–3.9 unchanged. The correctness argument, a valid labeling excludes augmenting paths, is the template for the push-relabel minimum-cost flow and assignment algorithms that followed.

These results are proved in the paper and are textbook material. Their machine-checked counterparts are, as far as is known here, not on the Prove2Me platform: the platform's network-flow statements (from Introduction to Linear Optimization, e.g. LinearOptimization.max_flow_min_cut) use a different model, with arc-indexed nonnegative flows and extended-real capacities, and contain nothing about preflows, labels or operation counts. This mission produces a formal account of the antisymmetric-flow model, of Ford–Fulkerson in that model, and of the amortized counting arguments, with the constants the paper prints.

Difficulty

The correctness half is short once the invariants are in place; the difficulty is in the counting. The label bound (Lemma 3.7) is a statement about the whole execution, and it depends on a structural fact about preflows (Lemma 3.5) whose truth rests on antisymmetry and on the nonnegativity of excesses. The obvious first idea for the push counts, bounding pushes per edge or per vertex locally, fails for nonsaturating pushes: flow pushed across a pair can be pushed back later, and nothing local limits how often this happens, so Lemma 3.10 holds only as an amortized statement over the entire execution and depends on both earlier counts. Saturating pushes on a pair can also recur, in both directions, and Lemma 3.9 has to control the interaction between the two directions.

Formally, all of this is reasoning about arbitrary interleavings of operations, with labels in N∪{∞}\mathbb{N} \cup \{\infty\}N∪{∞} and real-valued flows.

Formalization scope

  • Vertices form a finite type with decidable equality; nnn is its cardinality, s≠ts \ne ts=t, so n≥2n \ge 2n≥2 and the natural-number subtractions 2n−12n-12n−1 and n−2n-2n−2 are exact. Capacities are a real function on all pairs, nonnegative, zero on the diagonal; EEE is its support and mmm its cardinality.
  • Flows and preflows are antisymmetric real functions on all pairs (not nonnegative arc flows); the excess is computed from fff, never stored. A maximum flow is a flow whose value is at least that of every flow.
  • Labels live in ℕ∞, with ∞+1=∞\infty + 1 = \infty∞+1=∞; the relabel value is an infimum, which is ∞\infty∞ on the empty set.
  • An execution is a sequence of states σ : ℕ → State V with a length KKK, starting at the Fig. 2 state with the simple labeling (the paper's own assumption for its proofs), each step an applicable push or relabel. "Terminates" means that no basic operation applies, the loop guard of Fig. 2. The three counts are cardinalities of the sets of step indices of each kind.
  • Explicit constants: 2n−12n-12n−1 per-vertex relabelings, (2n−1)(n−2)<2n2(2n-1)(n-2) < 2n^2(2n−1)(n−2)<2n2 total relabelings, 2nm2nm2nm saturating pushes, 4n2m4n^2m4n2m nonsaturating pushes, label bound 2n−12n-12n−1, and the total (2n−1)(n−2)+2nm+4n2m(2n-1)(n-2)+2nm+4n^2m(2n−1)(n−2)+2nm+4n2m. The standing assumption m≥n−1m \ge n-1m≥n−1 appears only on Lemma 3.10 and the goal.
  • A trivializing formalization is ruled out: the step relation fixes the pushed amount δ=min⁡(e(v),rf(v,w))\delta = \min(e(v), r_f(v,w))δ=min(e(v),rf​(v,w)) and the new label exactly as in Fig. 1, termination is the loop guard rather than "the result is a flow", and a sorry-free check exhibits a concrete network s→a→ts \to a \to ts→a→t with a two-step execution (relabel aaa, then push (a,t)(a,t)(a,t)), so the run hypotheses are satisfiable.

Welcome contributions: proofs of the invariants (preflow, valid labeling, label monotonicity), of Ford–Fulkerson for antisymmetric flows (reusable beyond this mission), and of the counting lemmas. The FIFO bound of §4 is the subject of a companion mission.

Selected references

  • A. V. Goldberg, R. E. Tarjan, A New Approach to the Maximum-Flow Problem, Journal of the ACM 35(4):921–940, 1988. doi:10.1145/48014.61051
  • L. R. Ford, D. R. Fulkerson, Flows in Networks, Princeton University Press, 1962.
  • J. Edmonds, R. M. Karp, Theoretical improvements in algorithmic efficiency for network flow problems, Journal of the ACM 19(2):248–264, 1972. doi:10.1145/321694.321699
  • R. K. Ahuja, T. L. Magnanti, J. B. Orlin, Network Flows: Theory, Algorithms, and Applications, Prentice Hall, 1993.
17 thms3 active usersReviewed
🏆Completed
Graph TheoryOperations ResearchOptimization+1·Captain: mikedeng1

A New Approach to the Maximum-Flow Problem 2: The Nonsaturating-Push Bound for FIFO Push-RelabelResearch Paper

Motivation

The maximum-flow problem asks how much of a commodity can be sent from a source to a sink through a network whose edges carry capacities. It is a basic model of operations research. Transportation, scheduling, bipartite matching and image segmentation reduce to it, and it is the inner step of many combinatorial algorithms.

Goldberg and Tarjan introduced the push–relabel (preflow) method in A New Approach to the Maximum-Flow Problem (J. ACM 35(4), 1988). Ford–Fulkerson-type algorithms augment along whole source–sink paths. The push–relabel method instead moves excess flow across single edges, guided by integer distance labels on the vertices. Whatever order its local operations are applied in, it is correct and performs O(n2m)O(n^2 m)O(n2m) of them (§3 of the paper). Section 4 shows that one particular order, processing the active vertices first-in, first-out, cuts the dominant term, the number of nonsaturating pushes, to O(n3)O(n^3)O(n3). The method and its FIFO and highest-label variants are the standard practical maximum-flow codes.

Timeline:

  • 1956: Ford and Fulkerson, augmenting paths and max-flow min-cut.
  • 1970–72: Dinic, and Edmonds and Karp, give polynomial augmenting-path bounds.
  • 1974: Karzanov introduces preflows and obtains O(n3)O(n^3)O(n3).
  • 1982: Shiloach and Vishkin give a parallel O(n2log⁡n)O(n^2 \log n)O(n2logn) preflow algorithm with a first-in, first-out flavour.
  • 1988: Goldberg and Tarjan, the generic push–relabel method, the FIFO bound of this mission, and O(nmlog⁡(n2/m))O(nm \log(n^2/m))O(nmlog(n2/m)) with dynamic trees.

Setting

A flow network has a finite vertex set VVV with n=∣V∣n = |V|n=∣V∣, a capacity c(v,w)≥0c(v,w) \ge 0c(v,w)≥0 on every ordered pair, a source sss and a sink t≠st \neq st=s. The edges are the pairs with c(v,w)>0c(v,w) > 0c(v,w)>0, and there are no loops. A preflow is a function fff on vertex pairs with f(v,w)≤c(v,w)f(v,w) \le c(v,w)f(v,w)≤c(v,w) and f(v,w)=−f(w,v)f(v,w) = -f(w,v)f(v,w)=−f(w,v). Its excess e(v)=∑uf(u,v)e(v) = \sum_u f(u,v)e(v)=∑u​f(u,v) must be nonnegative at every v≠sv \neq sv=s. The residual capacity is rf(v,w)=c(v,w)−f(v,w)r_f(v,w) = c(v,w) - f(v,w)rf​(v,w)=c(v,w)−f(v,w). A labeling ddd assigns each vertex a value in N∪{∞}\mathbb{N} \cup \{\infty\}N∪{∞}. A vertex v∉{s,t}v \notin \{s,t\}v∈/{s,t} is active if d(v)<∞d(v) < \inftyd(v)<∞ and e(v)>0e(v) > 0e(v)>0.

The two basic operations (Fig. 1 of the paper) are:

  • push(v,w)(v,w)(v,w), applicable when vvv is active, rf(v,w)>0r_f(v,w) > 0rf​(v,w)>0 and d(v)=d(w)+1d(v) = d(w)+1d(v)=d(w)+1. It sends δ=min⁡(e(v),rf(v,w))\delta = \min(e(v), r_f(v,w))δ=min(e(v),rf​(v,w)) from vvv to www. The push is saturating if rf(v,w)=0r_f(v,w) = 0rf​(v,w)=0 afterwards and nonsaturating otherwise.
  • relabel(v)(v)(v), applicable when vvv is active and d(v)≤d(w)d(v) \le d(w)d(v)≤d(w) for every residual edge (v,w)(v,w)(v,w). It sets d(v)←min⁡{d(w)+1:rf(v,w)>0}d(v) \leftarrow \min\{d(w)+1 : r_f(v,w) > 0\}d(v)←min{d(w)+1:rf​(v,w)>0}.

The algorithm starts by saturating every edge leaving sss, with d(s)=nd(s) = nd(s)=n and d(v)=0d(v) = 0d(v)=0 for v≠sv \neq sv=s.

In the first-in, first-out algorithm (§4), each vertex vvv scans a fixed list L(v)L(v)L(v) of its neighbours through a current edge. The push/relabel(v)(v)(v) operation pushes through the current edge if possible. Otherwise it advances the current edge, or, at the end of the list, returns to the first edge and relabels vvv. Active vertices wait in a queue QQQ, initially {v∈V−{s,t}:c(s,v)>0}\{v \in V - \{s,t\} : c(s,v) > 0\}{v∈V−{s,t}:c(s,v)>0}. The discharge operation removes the front vertex vvv and repeats push/relabel(v)(v)(v) until e(v)=0e(v) = 0e(v)=0 or d(v)d(v)d(v) increases. Every vertex that becomes active meanwhile is appended to QQQ, and vvv is appended too if it is still active. Passes over the queue are defined inductively. Pass 1 consists of the discharges of the initially queued vertices. Pass i+1i+1i+1 consists of the discharges of vertices added during pass iii.

Formalization targets

Goal: Corollary 4.4 (p. 931)

For every network, every edge-list order, every initial queue order, and every run of the FIFO algorithm,

#{nonsaturating pushes}≤4n3.\#\{\text{nonsaturating pushes}\} \le 4n^3 .#{nonsaturating pushes}≤4n3.

The constant is the printed one.

Milestones

  • Lemma 4.1 (p. 929): the push/relabel operation relabels only when relabeling is applicable.
  • Lemma 3.5 (p. 926): from any vertex with positive excess, the source is reachable in the residual graph.
  • Lemma 3.7 (p. 927): at any time, d(v)≤2n−1d(v) \le 2n-1d(v)≤2n−1 for every vertex.
  • Lemma 3.8 (p. 927): at most 2n−12n-12n−1 relabelings per vertex and at most (2n−1)(n−2)<2n2(2n-1)(n-2) < 2n^2(2n−1)(n−2)<2n2 in total.
  • Lemma 4.3 (p. 930): at most 4n24n^24n2 passes over the queue.

Significance

Corollary 4.4 is the combinatorial core of Theorem 4.5, which states that the FIFO algorithm runs in O(n3)O(n^3)O(n3) time. Theorem 4.2 shows that the remaining work of the implementation is O(nm)O(nm)O(nm) plus constant time per nonsaturating push. The bound of Corollary 4.4 is therefore what separates the O(n3)O(n^3)O(n3) FIFO method from the O(n2m)O(n^2 m)O(n2m) bound of the generic method, which matters on dense networks. The same pass-counting argument is reused for the parallel algorithm of §6 and underlies later analyses of highest-label and wave variants.

The results are proved in the paper. Formalizing them adds an analysis of a push–relabel algorithm, which the platform does not yet have. Its existing network-flow material states max-flow min-cut and Ford–Fulkerson termination in an arc-based model with nonnegative flows (the Introduction to Linear Optimization missions). The mission builds a precise operational model of the FIFO implementation, with edge lists, current edges and a queue carrying pass numbers, and states an explicit operation count for it. A companion mission in this series treats the generic algorithm's correctness and its (2n−1)(n−2)+2nm+4n2m(2n-1)(n-2) + 2nm + 4n^2m(2n−1)(n−2)+2nm+4n2m operation bound.

Difficulty

The obvious argument is the potential-function count of §3, over the sum of the labels of active vertices. It yields only 4n2m4n^2 m4n2m and does not use the queue discipline at all. The 4n34n^34n3 bound has to charge nonsaturating pushes to passes over the queue, and then bound the number of passes by the total growth of the labels. Neither step is visible in the generic algorithm, because both depend on the order in which vertices are processed.

Making this rigorous requires invariants of the implementation that the paper uses silently:

  • a vertex is in the queue exactly when it is active, and at most once;
  • pass numbers are nondecreasing along the queue;
  • current edges only move forward between relabelings.

Lemma 4.1 in particular depends on the current-edge scan: an edge passed over earlier stays inadmissible until vvv is relabeled.

Formalization scope

The Lean development works in namespace GoldbergTarjan.FIFO. Vertices form a type V with [Fintype V] [DecidableEq V], and nnn is Fintype.card V. Capacities are c : V → V → ℝ with c ≥ 0 and c v v = 0. Flows are antisymmetric real functions on all ordered pairs, not nonnegative arc flows. Excess is computed from the flow. Labels are in ℕ∞, and the empty minimum in relabel is ⊤.

The state of the algorithm consists of the flow, the labels, the current-edge index cur v into the edge list L v, and the queue Q : List (V × ℕ), each entry tagged with its pass number. Push/relabel (Fig. 3) is a total function, and a discharge (Fig. 4) is a relation carrying the number of push/relabel operations it performs. A run consists of the states S 0, …, S K with S 0 the initial state and consecutive states related by one discharge. The printed variant of Fig. 4, which stops as soon as vvv is relabeled, is the one formalized. Counts are natural numbers over all push/relabel operations of all discharges. The number of passes is the largest pass tag of a discharged entry.

All constants are explicit, exactly as printed:

  • 2n−12n-12n−1 (Lemmas 3.7, 3.8);
  • (2n−1)(n−2)(2n-1)(n-2)(2n−1)(n−2) and 2n22n^22n2 (Lemma 3.8);
  • 4n24n^24n2 (Lemma 4.3);
  • 4n34n^34n3 (Corollary 4.4).

No asymptotic notation is used, and no m≥n−1m \ge n-1m≥n−1 assumption is made.

A model without current edges, where relabeling happens whenever no push applies, would make Lemma 4.1 vacuous and change the algorithm. Pass numbers that are not propagated by the "added during pass iii" rule would make the pass count arbitrary. Both are ruled out by the definitions. A sorry-free check, outside the proposal, exhibits a three-vertex network with two legal discharges, two passes and no nonsaturating push, so the run hypotheses are satisfiable.

Reusable beyond this mission are the network, preflow, push and relabel definitions and Lemma 3.5, which is about an arbitrary preflow. Contributions welcome: invariants of FIFO runs (preflow, valid labeling, queue = active set, cur within bounds), proofs of the milestones, and the reduction of Corollary 4.4 to Lemma 4.3.

Selected references

  • A. V. Goldberg, R. E. Tarjan, A New Approach to the Maximum-Flow Problem, Journal of the ACM 35(4):921–940, 1988. https://doi.org/10.1145/48014.61051
  • A. V. Karzanov, Determining the maximal flow in a network by the method of preflows, Soviet Math. Doklady 15:434–437, 1974.
  • Y. Shiloach, U. Vishkin, An O(n² log n) parallel max-flow algorithm, Journal of Algorithms 3(2):128–146, 1982. https://doi.org/10.1016/0196-6774(82)90013-X
  • L. R. Ford, D. R. Fulkerson, Maximal flow through a network, Canadian Journal of Mathematics 8:399–404, 1956. https://doi.org/10.4153/CJM-1956-045-5
  • J. Edmonds, R. M. Karp, Theoretical improvements in algorithmic efficiency for network flow problems, Journal of the ACM 19(2):248–264, 1972. https://doi.org/10.1145/321694.321699
10 thms3 active usersReviewed
🏆Completed
Operations ResearchOptimizationProbability·Captain: mikedeng1

Advance Demand Information, Price Discrimination, and Preorder Strategies: When Preorder Profit Increases with Demand CorrelationResearch Paper

Motivation

Firms that sell new products (consoles, books, films) often take preorders before release. A preorder serves two purposes at once. It lets the firm charge early adopters a different price from later buyers, a form of price discrimination, and the number of preorders is advance demand information: an early signal of how large regular-season demand will be. Li and Zhang (MSOM 15(1), 2013) ask whether better advance information always helps a seller who runs a preorder, when consumers are strategic and anticipate the seller's stocking decision. Their answer is no. The second-period stocking decision improves, but the preorder price can fall. Whether the net effect is positive depends on the low-type margin and the size of the early-adopter segment.

This mission formalizes that answer, §4 of the paper: the preorder profit as a function of the demand correlation ρ\rhoρ.

Setting

A seller sells a perishable product over two periods. High-type consumers, with valuation vHv_HvH​, arrive in the first period and may preorder at price p1p_1p1​. Low-type consumers, with valuation vL<vHv_L < v_HvL​<vH​, arrive in the second period, when the price is p2p_2p2​. A high type who waits values the product at δvH\delta v_HδvH​, where δ≤1\delta \le 1δ≤1 and δvH>vL\delta v_H > v_LδvH​>vL​. The unit cost is ccc, with 0<c<vL0 < c < v_L0<c<vL​. Unsold units have no salvage value and unmet demand carries no penalty. Write Δ=δvH−vL\Delta = \delta v_H - v_LΔ=δvH​−vL​.

The demands are jointly normal with correlation ρ∈[0,1)\rho \in [0,1)ρ∈[0,1). The high-type demand has mean μH\mu_HμH​, and XXX denotes its standardization, a standard normal variable. The low-type demand has mean μL\mu_LμL​, standard deviation σL\sigma_LσL​ and λL=μL/σL\lambda_L = \mu_L/\sigma_LλL​=μL​/σL​. Given X=xX = xX=x, the updated low-type demand X~L(x)\tilde X_L(x)X~L​(x) is normal with mean μ~L(x)=μL+ρσLx\tilde\mu_L(x) = \mu_L + \rho\sigma_L xμ~​L​(x)=μL​+ρσL​x and standard deviation σ~L=σL1−ρ2\tilde\sigma_L = \sigma_L\sqrt{1-\rho^2}σ~L​=σL​1−ρ2​. Φ\PhiΦ and ϕ\phiϕ are the standard normal distribution function and density, and zLz_LzL​ solves Φ(zL)=(vL−c)/vL\Phi(z_L) = (v_L - c)/v_LΦ(zL​)=(vL​−c)/vL​.

In the second period the seller charges p2=vLp_2 = v_Lp2​=vL​ and solves a newsvendor problem. It orders

Q(x)=μ~L(x)+zLσ~L(1)Q(x) = \tilde\mu_L(x) + z_L\tilde\sigma_L \qquad (1)Q(x)=μ~​L​(x)+zL​σ~L​(1)

and earns ΠL(x)=(vL−c)(μL+ρσLx)−vLϕ(zL)σL1−ρ2\Pi_L(x) = (v_L - c)(\mu_L + \rho\sigma_L x) - v_L\phi(z_L)\sigma_L\sqrt{1-\rho^2}ΠL​(x)=(vL​−c)(μL​+ρσL​x)−vL​ϕ(zL​)σL​1−ρ2​ (2). A waiting high type believes half of the remaining consumers will be served before her, so her belief of product availability is

ξ(ρ)=E[Pr⁡(X~L(X)2<Q(X))].(3)\xi(\rho) = \mathbb E\Big[\Pr\Big(\tfrac{\tilde X_L(X)}{2} < Q(X)\Big)\Big]. \qquad (3)ξ(ρ)=E[Pr(2X~L​(X)​<Q(X))].(3)

In the rational-expectations equilibrium every high type preorders at p1=vH−Δξp_1 = v_H - \Delta\xip1​=vH​−Δξ. The preorder profit is

Πp(ρ)=(vH−Δξ(ρ)−c)μH+ΠL(0).(4)\Pi^p(\rho) = (v_H - \Delta\xi(\rho) - c)\mu_H + \Pi_L(0). \qquad (4)Πp(ρ)=(vH​−Δξ(ρ)−c)μH​+ΠL​(0).(4)

The threshold is

μ~(ρ)=−vLϕ(zL)σL2ΔzL ϕ(2zL1−ρ2+λL).(6)\tilde\mu(\rho) = -\frac{v_L\phi(z_L)\sigma_L}{2\Delta z_L\,\phi\big(2z_L\sqrt{1-\rho^2} + \lambda_L\big)}. \qquad (6)μ~​(ρ)=−2ΔzL​ϕ(2zL​1−ρ2​+λL​)vL​ϕ(zL​)σL​​.(6)

Formalization targets

Goal: PROPOSITION 2

(i) c<vL<2c: Πp strictly increases on every interval where μH<μ~(ρ),and strictly decreases on every interval where μH≥μ~(ρ);(ii) vL≥2c: Πp strictly increases on [0,1).\begin{aligned} &\text{(i) } c < v_L < 2c:\ \Pi^p \text{ strictly increases on every interval where } \mu_H < \tilde\mu(\rho),\\ &\qquad\text{and strictly decreases on every interval where } \mu_H \ge \tilde\mu(\rho);\\ &\text{(ii) } v_L \ge 2c:\ \Pi^p \text{ strictly increases on } [0,1). \end{aligned}​(i) c<vL​<2c: Πp strictly increases on every interval where μH​<μ~​(ρ),and strictly decreases on every interval where μH​≥μ~​(ρ);(ii) vL​≥2c: Πp strictly increases on [0,1).​

Milestones

  1. (1)–(2): Q(x)Q(x)Q(x) is the unique maximizer of E[vLmin⁡(Q,X~L(x))−cQ]\mathbb E[v_L\min(Q,\tilde X_L(x)) - cQ]E[vL​min(Q,X~L​(x))−cQ], and its value is ΠL(x)\Pi_L(x)ΠL​(x).
  2. (3): ξ(ρ)=E[Φ((λL+ρX)/1−ρ2+2zL)]\xi(\rho) = \mathbb E\big[\Phi\big((\lambda_L + \rho X)/\sqrt{1-\rho^2} + 2z_L\big)\big]ξ(ρ)=E[Φ((λL​+ρX)/1−ρ2​+2zL​)].
  3. LEMMA 1(i): if c<vL<2cc < v_L < 2cc<vL​<2c, then zL<0z_L < 0zL​<0 and ξ\xiξ is strictly increasing in ρ\rhoρ.
  4. LEMMA 1(ii): if vL≥2cv_L \ge 2cvL​≥2c, then zL≥0z_L \ge 0zL​≥0 and ξ\xiξ is non-increasing in ρ\rhoρ, strictly so when vL>2cv_L > 2cvL​>2c.
  5. After (5): ddρΠL(0)=vLϕ(zL)σL ρ/1−ρ2>0\dfrac{d}{d\rho}\Pi_L(0) = v_L\phi(z_L)\sigma_L\,\rho/\sqrt{1-\rho^2} > 0dρd​ΠL​(0)=vL​ϕ(zL​)σL​ρ/1−ρ2​>0 for ρ∈(0,1)\rho \in (0,1)ρ∈(0,1).
  6. PROPOSITION 2(i), pointwise: for ρ∈(0,1)\rho \in (0,1)ρ∈(0,1), dΠp/dρ>0  ⟺  μH<μ~(ρ)d\Pi^p/d\rho > 0 \iff \mu_H < \tilde\mu(\rho)dΠp/dρ>0⟺μH​<μ~​(ρ) and dΠp/dρ<0  ⟺  μH>μ~(ρ)d\Pi^p/d\rho < 0 \iff \mu_H > \tilde\mu(\rho)dΠp/dρ<0⟺μH​>μ~​(ρ).
  7. LEMMA 2(i): if −λL/2<zL<0-\lambda_L/2 < z_L < 0−λL​/2<zL​<0, then μ~\tilde\muμ~​ is strictly increasing in ρ\rhoρ.
  8. LEMMA 2(ii): if zL≤−λL/2z_L \le -\lambda_L/2zL​≤−λL​/2, then μ~\tilde\muμ~​ is quasi-convex in ρ\rhoρ.

Significance

The proposition splits the value of advance demand information into two effects with opposite signs. Better information always raises the second-period profit (milestone 5). Its effect on the preorder price depends on the margin. When vL<2cv_L < 2cvL​<2c, the seller stocks below the conditional mean. A more precise forecast then raises the stock and the availability ξ\xiξ, and waiting becomes more attractive, which lowers the preorder price. The threshold μ~(ρ)\tilde\mu(\rho)μ~​(ρ) says which effect wins, and LEMMA 2 describes its shape. This is the basis for the paper's later comparisons of preorder, price-guarantee and no-preorder strategies.

The paper states these results and leaves the proofs to an online appendix. None of them has a machine-checked proof. A complete development would also give reusable facts about normal laws: the expectation E[Φ(a+bX)]\mathbb E[\Phi(a + bX)]E[Φ(a+bX)] for standard normal XXX, the normal newsvendor solution with its closed-form optimal profit, and derivatives of Gaussian integrals with respect to a correlation parameter.

Difficulty

The model is explicit, so the difficulty is not in modelling. It is in turning the two expectations into closed forms and differentiating them. The availability ξ\xiξ is an integral over XXX of a normal probability whose mean and variance both move with ρ\rhoρ. The expected newsvendor profit involves E[min⁡(Q,Y)]\mathbb E[\min(Q, Y)]E[min(Q,Y)] for a normal YYY. Neither closed form is in Mathlib, and neither is a derivative in ρ\rhoρ of a Gaussian integral. The obvious route, differentiating under the integral sign in (3), needs domination estimates that are uniform in ρ\rhoρ near each point, and these degenerate as ρ→1\rho \to 1ρ→1.

Signs are the second difficulty. zLz_LzL​ changes sign at vL=2cv_L = 2cvL​=2c, μ~\tilde\muμ~​ carries a leading minus and divides by zLz_LzL​, and the derivative of Πp\Pi^pΠp vanishes at ρ=0\rho = 0ρ=0 and wherever μ~(ρ)=μH\tilde\mu(\rho) = \mu_Hμ~​(ρ)=μH​. Strict monotonicity on an interval has to be recovered from a derivative that is positive except at finitely many points.

Formalization scope

Everything lives in the namespace PreorderADI.Correlation. A structure Params holds vH,vL,c,δ,μH,μL,σL,zLv_H, v_L, c, \delta, \mu_H, \mu_L, \sigma_L, z_LvH​,vL​,c,δ,μH​,μL​,σL​,zL​. The predicate Params.Standing records the model's assumptions: vH>vLv_H > v_LvH​>vL​, c<vLc < v_Lc<vL​, δ≤1\delta \le 1δ≤1 and δvH>vL\delta v_H > v_LδvH​>vL​, together with Φ(zL)=(vL−c)/vL\Phi(z_L) = (v_L-c)/v_LΦ(zL​)=(vL​−c)/vL​. σH\sigma_HσH​ is omitted because nothing in §4 uses it after standardization. Φ\PhiΦ is ProbabilityTheory.cdf (gaussianReal 0 1) and ϕ\phiϕ is gaussianPDFReal 0 1. The normal law with mean mmm and standard deviation sss is gaussianReal m (s^2).

The formalization commits to the following conventions and additions:

  • Added hypotheses. Four hypotheses are added to the page's assumptions:
    • c>0c > 0c>0, so that zLz_LzL​ exists;
    • σL>0\sigma_L > 0σL​>0, so that the conditional law is a genuine normal law;
    • μL>0\mu_L > 0μL​>0, so that λL>0\lambda_L > 0λL​>0, as LEMMA 2 presupposes;
    • μH>0\mu_H > 0μH​>0, which PROPOSITION 2(ii) needs.
  • zLz_LzL​. zLz_LzL​ is a parameter pinned down by Φ(zL)=(vL−c)/vL\Phi(z_L) = (v_L-c)/v_LΦ(zL​)=(vL​−c)/vL​, not an inverse function with junk values.
  • Range of ρ\rhoρ. ρ\rhoρ ranges over [0,1)[0,1)[0,1), the paper's "we will focus on ρ≥0\rho \ge 0ρ≥0" together with ρ<1\rho < 1ρ<1. Derivative statements use (0,1)(0,1)(0,1).
  • ξ\xiξ and Πp\Pi^pΠp. ξ\xiξ is defined as the first expression of (3), the expected probability, so that no closed form is assumed. Πp\Pi^pΠp is defined by (4). PROPOSITION 1, which derives (4) as the unique equilibrium profit, is not formalized: the paper defines the equilibrium only through conditions that already assume every high type preorders.
  • Monotonicity. "Increases in ρ\rhoρ when μH<μ~(ρ)\mu_H < \tilde\mu(\rho)μH​<μ~​(ρ)" is formalized as strict monotonicity on every order-connected I⊆[0,1)I \subseteq [0,1)I⊆[0,1) on which the condition holds. "Decreasing" in LEMMA 1(ii) is non-strict, since ξ\xiξ is constant when vL=2cv_L = 2cvL​=2c. Quasi-convexity is Mathlib's QuasiconvexOn.
  • The ε_v sentence is omitted. PROPOSITION 2(i) also claims that some εv>0\varepsilon_v > 0εv​>0 makes Πp\Pi^pΠp always decrease when vL<c+εvv_L < c + \varepsilon_vvL​<c+εv​. That claim is false in the paper's own model. As vL↓cv_L \downarrow cvL​↓c, μ~(ρ)→∞\tilde\mu(\rho) \to \inftyμ~​(ρ)→∞ for ρ\rhoρ below roughly 3/2\sqrt 3/23​/2, so Πp\Pi^pΠp increases there for every fixed μH\mu_HμH​. The paper's Figure 1 shows the same behaviour.
  • Out of scope. §5 rests on an approximation that treats normal demands as nonnegative, so it is excluded. §§6–7 depend on models given only in the online appendix and are excluded too.

A statement about the closed form Φ(λL+2zL1−ρ2)\Phi(\lambda_L + 2z_L\sqrt{1-\rho^2})Φ(λL​+2zL​1−ρ2​) in place of ξ\xiξ would make LEMMA 1 a one-line monotonicity fact. So would a definition of Πp\Pi^pΠp that bypasses (3). The definitions rule both out.

Welcome contributions include proofs of the milestones, general Mathlib-style lemmas on Gaussian expectations of Φ\PhiΦ and of min⁡(Q,Y)\min(Q, Y)min(Q,Y), and a formalization of PROPOSITION 1 from conditions (i)–(v).

Selected references

  • C. Li and F. Zhang, Advance Demand Information, Price Discrimination, and Preorder Strategies, Manufacturing & Service Operations Management 15(1):57–71, 2013. https://doi.org/10.1287/msom.1120.0398
  • G. P. Cachon and R. Swinney, Purchasing, Pricing, and Quick Response in the Presence of Strategic Consumers, Management Science 55(3):497–511, 2009. https://doi.org/10.1287/mnsc.1080.0948
  • X. Su and F. Zhang, On the Value of Commitment and Availability Guarantees When Selling to Strategic Consumers, Management Science 55(5):713–726, 2009. https://doi.org/10.1287/mnsc.1080.0967
10 thms4 active usersReviewed
PreviousNext

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me