The study of the integers and the structures built from them — prime numbers, and the rational, algebraic, and p-adic numbers that extend them. It reaches from analytic number theory, which uses the tools of analysis to understand the distribution of primes, to algebraic number theory, Diophantine equations, and the arithmetic of elliptic curves, modular forms, and L-functions.
Proofs from THE BOOK: verified results and open formalization tasks
This Textbook project develops a reusable Lean library around Martin Aigner and Günter M. Ziegler's Proofs from THE BOOK. It combines results imported from the existing proof_in_the_book repository with precise contribution targets from the sixth edition (2018). The aim is to preserve mathematical meaning, reuse existing proofs, and make the remaining work accessible to other contributors.
What is already verified
The original import contains 156 distinct platform-accepted results. Euclid, the original main theorem, is retained as a completed milestone when the project goal moves to the sixth-edition extension. Every one of the repository's 40 chapter topics has accepted results. Each result certifies its actual Lean statement, including its hypotheses; this does not certify every argument or every theorem in a chapter. Some proofs reuse Mathlib, while others were developed in the repository. Their source and proof notes retain that distinction.
The imported source snapshot is 873d52e0c88cd351f594221e70c3c5b3559777a9. Imported results use Lean 4.30.0 and Mathlib c5ea00351c28e24afc9f0f84379aa41082b1188f. Immutable public source links are used only where the linked source matches the verified artifact. Compatibility changes, unsuccessful attempts, and verification evidence are retained in the integration project.
The live goal is the explicit conjunction of the 21 linked sixth-edition extension targets. Its reduction connects these targets to the goal, so proving the remaining children advances the project. This goal is deliberately narrower than “every theorem and every proof in the book”; the unlinked topology tasks below are additional formalization work.
Sixth-edition contribution targets
New milestones explicitly marked 6th ed. cover Chapters 7 (spectral theorem and determinants), 15 (round circles and links), 35 (finite Kakeya), 37 (permanents and entropy), and 45 (probabilistic counting). They include the precise definitions and boundary conditions needed to state the results. Compiled Open targets are requests for proofs, not proved results. The spectral theorem has a direct Mathlib proof; community results are reused under their actual statements and with attribution.
Two Chapter 15 tasks intentionally remain unlinked mathematical milestones: the full non-equivalence assertion for the depicted Borromean, Tait, and trivial links, and the Fox-coloring invariance bridge for equivalent link diagrams. These invite formalization of the diagrams and the topology bridge as well as proof. The separate modular Fox calculations do not by themselves establish ambient non-equivalence.
The crossing-lemma target is the universal good-drawing form: actual injective edge arcs and exact finite intersection records appear in its interface. It does not assume the desired crossing bound. The Ramsey target preserves the real exponent for odd k. The related public Erdős–Ramsey result with a rounded exponent is identified as a supporting result, not as proof of that full target.
Chapter numbering and statement scope
Older milestones use the repository's chapter labels. Repository Chapters 1–21 match the bundled fourth edition; Chapter 22 inserts Van der Waerden's permanent theorem, and Chapters 23–40 correspond to fourth-edition Chapters 22–39. The sixth edition has 45 chapters, so these organizational labels are not sixth-edition chapter numbers. New milestones give sixth-edition numbers and printed source pages explicitly.
Some existing formalizations preserve narrower statements or additional premises. Examples include repository Chapter 13's dihedral-angle conclusion, Chapter 28's Dilworth lower-bound result, and the geometric premises in Chapter 36. Read the actual linked theorem and its description before reusing it. A chapter title or the former Euclid main theorem is not a completion certificate for the collection.
How to contribute
Choose an Open linked theorem and inspect its definitions, exact binders, Mathlib revision, and prior attempts. Reuse a compatible existing result when it proves that statement; preserve the original contributor's attribution. Submit a matching proof for verification. For an unlinked milestone, first formalize and review the source statement and its definitions. These are known textbook results awaiting formalization or proof in this project, rather than claims of new unresolved mathematics.
Zudilin: one of ζ(5), ζ(7), ζ(9), ζ(11) is irrationalResearch Paper
Motivation
The Riemann zeta function at integers splits into two very different worlds. At even arguments Euler's formula ζ(2k)=(−1)k+1B2k(2π)2k/(2(2k)!) shows every ζ(2k) is a rational multiple of π2k, hence irrational and even transcendental. At odd arguments almost nothing is known. The single exception is ζ(3), proved irrational by R. Apéry in 1978 (Astérisque 61 (1979), 11–13). For every other odd argument ζ(5),ζ(7),ζ(9),… the arithmetic nature is open to this day: no individual value is known to be irrational.
What is known are localisation results, which assert that an irrational number occurs somewhere in a finite or infinite list of odd zeta values without saying where.
2000 — T. Rivoal proves that infinitely many of ζ(3),ζ(5),ζ(7),… are irrational; more precisely the dimension of the Q-vector space spanned by 1,ζ(3),ζ(5),…,ζ(2k+1) grows at least like 31logk (C. R. Acad. Sci. Paris 331 (2000), 267–270).
2001 — Rivoal, and independently W. Zudilin, prove that at least one of the nine numbers ζ(5),ζ(7),…,ζ(21) is irrational.
2001 — Zudilin sharpens the list to four numbers: at least one of ζ(5),ζ(7),ζ(9),ζ(11) is irrational (Uspekhi Mat. Nauk 56:4 (2001), 149–150; English translation, Russian Math. Surveys 56:4 (2001), 774–776). This is the mission's source and remains the sharpest known localisation among small odd zeta values.
Setting
All objects below are those of the source note, in its own notation.
Fix odd integers q and r with q≥r+4, and positive integers η0,η1,…,ηq subject to η1≤η2≤⋯≤ηq<η0/2 and
η1+η2+⋯+ηq≤η0⋅2q−r.(1)
For each integer n>0 put h0=η0n+2 and hj=ηjn+1 for j=1,…,q, and consider the rational function
Condition (1) gives Rn(t)=O(t−2), so the series converges.
Two arithmetic quantities control the denominators of Fn. Write DN for the least common multiple of 1,2,…,N, put mj=max{ηr,η0−2ηr+1,η0−η1−ηr+j} for j=1,…,q−r, and set
Φn:=η0n<p≤mq−rn∏pφ(n/p),
the product running over primes, where φ is the integer-valued, nonnegative, 1-periodic function
with ψ the logarithmic derivative of the gamma function.
Formalization targets
Goal
∃a∈{5,7,9,11}:ζ(a)∈/Q.
The goal fixes no witness: the statement is satisfied as soon as one of the four values is irrational, and remains the honest form of what the source proves. It is deliberately weaker than the (open) statement that each ζ(2k+1) is irrational, and weaker than any claim identifying which of the four is irrational.
Route to the goal
The milestones follow the source's own numbering: Lemma 1 (the linear form and its denominators), the prime-number-theorem asymptotics of Dmjn, Lemma 2 (the saddle-point asymptotics of Fn for r=3), the small-values criterion for display (4), Lemma 3 (the criterion C0>C1), and the numerical verification of C0>C1 at r=3, q=13, η0=91, η1=η2=η3=27, ηj=25+j for 4≤j≤13, where C0=227.58019641… and C1=226.24944266….
Significance
The result itself. Together with Apéry's theorem it gives the smallest list of small odd zeta values known to contain an irrational number, and it fixes the current record of the Ball–Rivoal hypergeometric method: the same machinery yields quantitative lower bounds for the dimension of the Q-span of odd zeta values, and any improvement of the arithmetic factor Φn or the saddle-point estimate propagates directly to those bounds.
Formalizing it. The result is proved mathematically; nothing here is open. What is missing is a machine-checked proof. Mathlib contains the Riemann zeta function, the gamma function, and the prime number theorem, but not Apéry's theorem, not the Ball–Rivoal construction, and not the Chudnovsky–Rukhadze–Hata arithmetic method. A complete development produces reusable infrastructure: integrality of very-well-poised hypergeometric sums, the φ/Φn denominator-saving mechanism, saddle-point asymptotics for a Barnes-type complex integral, and the standard linear-form irrationality criterion.
Difficulty
The obvious route — exhibit explicit rational approximations to a single ζ(2k+1) and estimate them — fails, and that failure is the content of the field: no construction is known that separates a single odd zeta value. Zudilin's construction instead produces one real sequence Fn that is simultaneously a Q-linear form in 1,ζ(5),ζ(7),ζ(9),ζ(11); irrationality of some coefficient's argument then follows from the two-sided estimate, but the argument is blind to which one.
The three hard steps are independent of one another. First, integrality: the coefficients of Fn have denominators controlled by Dm1nrDm2n⋯Dmq−rn, and the extra factor Φn — a product of prime powers extracted from the φ-function — must be divided out; this is a delicate p-adic valuation count. Second, asymptotics: the exact exponential rate of ∣Fn∣ comes from a complex integral over a vertical line, evaluated by the saddle-point method at a zero of a degree-16 polynomial with no closed form. Third, the final comparison C0>C1 is a numerical inequality between two transcendental-looking constants that must be certified rigorously, including a Stieltjes integral of a piecewise-constant function against the digamma function.
Formalization scope
Statements are formalized over the reals, with ζ(k) for an integer k≥2 represented by the convergent series ∑n≥1n−k (zetaR); a bridging statement identifies it with Mathlib's riemannZeta at natural arguments, so the goal theorem may be stated with riemannZeta as it already is in the platform library. Admissible parameter sets are a structure carrying q, r, the sequence η, and the hypotheses of the source, so no theorem quantifies over parameters the source excludes. R is a real-valued function of a real variable built from Real.Gamma, and Fn is the tsum of its (r−1)-st iteratedDeriv at natural arguments; convergence is a separate milestone rather than a silent assumption, so that the value is not asserted to exist by fiat. φ is the infimum over y∈[0,1) of the integer-valued expression above, Φn a finite product over primes p≤mq−rn with η0n<p2 (the integer form of η0n<p), and DN the Finset.lcm of 1,…,N. The Stieltjes integral ∫01φdψ is written as ∫01φ(x)ψ′(x)dx, which agrees with the Riemann–Stieltjes integral because ψ is continuously differentiable on (0,1]; f0 uses the principal branch of the complex logarithm.
The saddle point τ0 is not defined by a choice function: every statement that mentions it takes it as a parameter together with the hypotheses "root of the polynomial", "positive imaginary part", "maximal real part among such roots", and the two side conditions Reτ0<η0 and Imf0(τ0)∈/πZ of Lemma 2. No milestone is vacuous: for the concrete parameter set of the source such a τ0 exists, with τ0≈87.479005+3.328207i.
Contributions of any size are welcome, including partial infrastructure: p-adic valuation lemmas for products of factorials, asymptotics of Finset.lcm, saddle-point estimates, and interval-arithmetic machinery for the final numerical comparison.
Selected references
R. Apéry, Irrationalité de ζ(2) et ζ(3), Astérisque 61 (1979), 11–13. numdam
T. Rivoal, La fonction zêta de Riemann prend une infinité de valeurs irrationnelles aux entiers impairs, C. R. Acad. Sci. Paris Sér. I Math. 331 (2000), 267–270. doi:10.1016/S0764-4442(00)01624-4
T. Rivoal, Propriétés diophantiennes des valeurs de la fonction zêta de Riemann aux entiers impairs, Thèse de doctorat, Univ. de Caen, 2001.
W. V. Zudilin, One of the numbers ζ(5),ζ(7),ζ(9),ζ(11) is irrational, Uspekhi Mat. Nauk 56:4 (2001), 149–150. doi:10.4213/rm427
The Komlos-Sulyok-Szemeredi bound: every finite set of reals has a Sidon subset of size c sqrt nResearch Paper
Call a set of reals a Sidon set when all its pairwise sums are distinct: if a+b=c+d with all four in the set, then {a,b}={c,d}.
The goal. There is an absolute constant c>0 such that every finite set X of positive reals contains a Sidon subset S with ∣S∣≥c∣X∣.
This is the lower bound half of Erdos problem 530, which Riddell posed and which asks for the order of the largest guaranteed Sidon subset. That problem is open: it asks whether the guarantee is asymptotically N1/2, and the constant is not known. What is settled is the order, by Komlos, Sulyok, and Szemeredi, Linear problems in combinatorial number theory, Acta Math. Acad. Sci. Hungar. 26 (1975) 113-121, as a case of a general theorem about linear equations. Erdos had previously observed the cube-root lower bound and the matching (1+o(1))N1/2 upper bound from A={1,…,N}. A second and much shorter proof is in Bailleul and Riblet, arXiv:2605.03181.
The exponent is the whole problem
A one-paragraph argument gives ∣S∣≥c∣X∣1/3: take a Sidon subset S of maximum size, and note that every x outside it satisfies x=c+d−b or x=(c+d)/2 for elements of S, so ∣X∣≤3∣S∣3.
That cube root is not a weak first attempt, it is the ceiling for any argument that only counts. An arithmetic progression of length n has additive energy of order n3, so a probabilistic argument cannot see the difference between it and a generic set. Getting from 1/3 to 1/2 requires using the structure of the set, and that is what both published proofs do.
The idea both proofs share
Compress, then pigeonhole against a known Sidon set.
An arbitrary finite set of reals has no arithmetic to work with, so first move it into Z: a finite set spans a finite dimensional Q-vector space, and a generic rational functional separates its points while preserving every relation a+b=c+d. Then squeeze the resulting integers into an interval of length comparable to their number, keeping a constant fraction of them and keeping the property that a Sidon subset of the image lifts to one of the original. Finally intersect with a translate of the Erdos-Turan Sidon set, which has about N elements inside {0,…,N−1}. A set of size Θ(n) inside [1,n] meets some translate of a Sidon set of size n in order n points, and that intersection is Sidon.
The two proofs differ only in the compression step, and the mission carries both.
The two routes
The 1975 route compresses in four lemmas driven by a remainder map: choose a modulus q dividing no difference, dilate so that the remainders are small, and observe that a small remainder map preserves a+b=c+d. Finding the modulus needs a prime counting bound.
The 2026 route replaces all four with one averaging lemma over a real rotation parameter θ, keeping the elements whose fractional part of amθ is below 1/2, where no carry occurs. No prime counting appears anywhere.
Notes on the formalization
Every item is stated in Mathlib primitives alone, so the mission needs no definition items. The Sidon condition, the Erdos-Turan construction, and the reduction relation of the 1975 route are all written out at each use.
The published 2026 proof finishes with Singer's 1938 covering of Z/(q2+q+1)Z by q+1 Sidon sets. Mathlib has no perfect difference sets, so the mission uses averaging over translates instead. It does the same job at the same order and gives a worse constant, which costs nothing because the goal asserts only that some c>0 exists.
Two lemmas of the 1975 paper are deliberately absent. A local formalization of Lemma 2 and Lemma 6 turned out to be false as stated, machine-checked in both cases, so neither is offered here as a milestone. Those are errors in that rendering rather than in the paper, and the 2026 route reaches the goal without either. Lemma 1' is absent for the same practical reason: the 2026 route does not need it.
Long-Wagner Conjecture 5.1: cube-free subsets of Z/2^nZ have density at most 5/8Open Problem
Call A⊆Z/2nZcube-free if no triple x,y,z has all seven of x, y, z, x+y, y+z, z+x, x+y+z inside A. The triple is unconstrained, so a degenerate one counts. Write f(n) for the largest size of a cube-free subset.
The conjecture.f(n)≤852n for every n.
This is Conjecture 5.1 of Jason Long and Adam Zsolt Wagner, The largest projective cube-free subsets of Z2n, arXiv:1810.01225. It has been open since October 2018, and a 2026 journal paper still names it as conjectured: Yuchen Meng, On Cube-Free Problems, Electron. J. Combin. 33(1) (2026) #P1.16.
The constant is attained
The bound is sharp, and the extremal set is explicit: A={v:vmod8∈{1,3,4,5,7}}, the odd residues together with those congruent to 4 mod 8. Its size is 2n−1+2n−3=852n. In the layer language of Long and Wagner this is C3=L1∪L3.
What is known
The conjecture holds for unions of layers. That is Long-Wagner Theorem 1.10 at d=3, and it is the largest class on which the conjectured constant is proved.
For arbitrary sets the best published unconditional bound is f(n)<322n. Meng calls this bound "quite trivial" and gives it in one paragraph for every cyclic group, so it should not be read as progress toward 5/8. The residual gap is exactly 32−85=241, that is 2n/24 elements.
Small values are f(1)=1, f(2)=2, f(3)=5, f(4)=10, f(5)=20, f(6)=40, f(7)=80, matching 2n−1+2n−3 from n=3 on.
State those values honestly. They come from solver searches, Gurobi in Long and Wagner for n≤7 and an independent SAT reproduction. The SAT half that matters, the unsatisfiability of "a cube-free set of size 81 exists at n=7", is a solver claim with no proof certificate checked and no kernel check behind it. The witness half is verified: a set of exactly 80 elements was produced and re-checked cube-free. So f(7)≥80 is solid and f(7)≤80 is not certified. Nothing in this mission rests on either.
What the items are
The goal item is the conjecture itself, for n≥4, and it is open. Every other item is a milestone that is proved mathematics, and the two closed instances n=4 and n=5 are stated separately because they are the only cases of the goal that a proof assistant has actually settled here.
The chain runs: the base case mod 8 by exhaustion, monotonicity under subsets, the bridge between the membership form and the Finset form of the forbidden configuration, sharpness, the odd-residue tight case, the layer-union theorem, the two-thirds bound, and then n=4 and n=5.
Notes on the formalization
Six definitions live in one definition item, Def_Z2nCubeFreeLayers: HasCube, CubeFree, config, ConfigFree, layerIdx and IsLayerUnion. layerIdx is written through the 2-adic valuation rather than through a congruence, because the congruence form leaves 0 in no layer at all and needs the last layer special-cased.
CubeFree and ConfigFree are two encodings of the same condition and they are not definitionally equal, because config collapses duplicates on a degenerate triple. Their equivalence is a milestone rather than an assumption.
18 thms6 active usersReviewed
🏆Completed
Captain: tp
Freiman's maximal Hall rayTextbook
The Lagrange spectrum describes the asymptotic quality of rational approximation to irrational real numbers. The Markov spectrum is defined through minima of indefinite binary quadratic forms. Freiman determined the exact starting point of the maximal half-line contained in each spectrum.
This mission aims to formalize his theorem that this half-line is [cF,∞), where
The formalization must establish membership of every real number at least cF, including the endpoint, and show that no half-line starting below cF is contained in either spectrum.
The sources are Freiman's Russian monograph and an accompanying detailed reconstruction of its proof, with an English translation, exact computational certificates, and verification scripts. The project follows Freiman's continued fraction construction, incorporating the corrections and supplementary arguments established in the report.
The intended result is a complete Lean 4 proof. Its scope includes the equivalence of the classical and continued fraction definitions of the spectra, the infinite constructions that realize spectral values, and the exact finite calculations used in the argument.
Source material
Proof report (PDF) — the complete argument, exact certificate appendices and corrected English translation of Freiman's Russian text. Download PDF.
Verification package (ZIP) — the report, its LaTeX sources, the Russian source, certificate data, verification programs and reproduction instructions. Download ZIP.
Start with README.md and PROOF_GUIDE.md in the package. The files formalization/MISSION.md and formalization/MILESTONES.md describe the scope and proposed stages of the formalization. For reproducing the report, use the PDF and sources contained in the ZIP.
References to the report in the individual source fields use its printed page numbers.
114 thms6 active usersReviewed
🏆Completed
Captain: davidloeffler
Ordinary p-adic L-functions: Mazur–Tate–Teitelbaum interpolationResearch Paper
Why construct a p-adic L-function?
A modular form has a complex L-function whose critical values carry arithmetic information. To compare those values in p-adic families, their transcendental period factors must first be removed. The remaining algebraic numbers can then be embedded into a p-adic field. The result sought here is a single bounded measure encoding the critical values of all twists by characters of p-power conductor. This is the existence and interpolation theorem underlying the cyclotomic p-adic L-function (one of the most fundamental objects of Iwasawa theory).
The reference is the famous paper of Mazur, Tate and Teitelbaum, Chapter I, especially §§10–14 (MTT); but for simplicity we are treating only the ordinary case here (not the more general finite-slope case), and not attacking the results later in MTT (exceptional-zero conjectures, etc).
Modular forms, periods, and measures
Fix a prime p, a positive integer N, and a weight k≥2. Let f be a normalized cuspidal Hecke eigenform of weight k on Γ1(N) with nebentypus ϵ and Fourier coefficients an (necessarily algebraic). Fix embeddings ι∞:Q↪C and ιp:Q↪Cp. No condition p∤N is imposed. The character ϵ is extended by zero on nonunits modulo N.
The form is ordinary when ∣ιp(ap)∣p=1. The ordinary rootα is the root of
X2−ιp(ap)X+ιp(ϵ(p))pk−1
with ∣α∣p=1. This convention also covers the Up case: if p∣N, then ϵ(p)=0 and the unit root is ιp(ap) (MTT I.§12).
A measure means a continuous Cp-linear functional on the continuous functions C(Zp×,Cp). It is a bounded p-adic measure, rather than a positive real-valued measure. The Lean representation is Mathlib's AbstractMeasure on (PadicInt p)ˣ.
The two periodsΩ+ and Ω− normalize the signed modular integrals. Write
Φj(r)=2π∫0∞f(r+it)(r+it)jdt,
and use (Φj(r)+s(−1)jΦj(−r))/2 for sign s∈{+1,−1}. A period system specifies nonzero periods, algebraic normalized values for 0≤j≤k−2, and finite generation over Z of the lattice generated by these values. Period rationality and finite generation are separate mathematical obligations, combining Manin–Shimura rationality with the module-of-values construction in MTT I.§2; see also the explicit treatment of general eigenforms in Williams, §11.7.
Formalization targets
The goal is to construct an ordinary root, a period system, and a measure μ with the following interpolation property. Let χ be a primitive Dirichlet character of conductor m=pn, where n≥0, and let 0≤j≤k−2. Put s=χ(−1)(−1)j. With the positive-exponential Gauss sum τ(χ)=∑amodmχ(a)e2πia/m, define the algebraic number Aχ,j by
ι∞(Aχ,j)=(−2πi)jτ(χ−1)Ωsmj+1j!L(fχ−1,j+1).
The required identity is
∫Zp×ιp(χ(x))xjdμ(x)=ep(α,χ,j)ιp(Aχ,j),
where all algebraic character values in the following expression are transported by ιp:
This is the scalar period-normalized form of MTT I.§14. At n>0 both character values at p vanish, leaving α−n. At n=0 the primitive character is the character of modulus one, and both Euler factors remain. The latter case is included explicitly.
Seven milestones isolate period rationality and its finite lattice; existence and uniqueness of the ordinary root; the distribution relation for polynomial disk moments; uniform boundedness of constant disk masses; unique extension to a measure with every critical polynomial moment; the complex Birch–Mellin identity; and the deduction of interpolation from the two signed measures. Their source locations are recorded individually. The period milestone combines two standard inputs; the boundedness and extension milestones specialize the MTT construction to slope zero.
What the formalization supplies
The result supplies the analytic input for studying p-adic special values and their variation. It also supplies reusable infrastructure for normalized modular integrals, rational period systems, finite-order twists, and bounded measures on p-adic units. The classical existence theorem is known. The work proposed here is to prove the stated Lean theorems and connect the existing Mathlib analytic and algebraic infrastructure. Local compilation establishes that the declarations are well-typed; the mission statements remain unproved targets.
Where the difficulty lies
Listing algebraic critical values does not establish that one bounded measure interpolates them. Values on nested residue disks must satisfy compatibility, and ordinary boundedness must control the extension to continuous functions. Polynomial moments of positive degree must agree with that same extension. The unramified character requires its own Euler-factor calculation; simply applying the ramified formula at conductor one loses factors. On the complex side, rationality requires genuine periods of the modular form, not arbitrary chosen scaling constants. These are the obligations represented by the milestones.
Formalization scope and conventions
The cusp form is Mathlib's analytic CuspForm, with Fourier coefficients tied to its width-one q-expansion. The nebentypus transformation law and every prime Hecke eigenvalue equation are written explicitly. The prime Hecke operator includes both its translated sum and its second term; when the prime divides the level, the second term vanishes. The complex twist is the finite-translate expression for fχ−1, and its critical L-value is defined by the actual Mellin integral. Neither an arbitrary L-value table nor the desired measure is an input assumption.
The embeddings share the abstract algebraic closure of Q; there is no asserted continuous map from C to Cp. The algebraic bridge in each interpolation identity is existential and constrained by a complex equality. Test functions are existential continuous maps constrained pointwise to equal the specified character or disk function; this makes their continuity part of the conclusion instead of an unproved definition. All primes, including 2, are allowed. Natural-number subtractions occur only in theorem contexts with k≥2 and j≤k−2.
The signed projections use a factor of 1/2. Their normalized measures are added, and the period sign is χ(−1)(−1)j. These conventions fix the powers, sign, Gauss sum, and periods in the displayed interpolation formula. Periods are not asserted to be canonical integral periods; rescaling by algebraic constants changes the normalization. Exceptional-zero derivative formulas, positive-slope distributions, tame-conductor twists, and Iwasawa main conjectures are outside this mission.
Selected references
B. Mazur, J. Tate and J. Teitelbaum, On p-adic analogues of the conjectures of Birch and Swinnerton-Dyer, Inventiones Mathematicae 84 (1986), 1–48, Chapter I, §§1–4 and 7–14. DOI; digitized original.
G. Shimura, On the periods of modular forms, Mathematische Annalen 229 (1977), 211–221. DOI.
C. Williams, An introduction to p-adic L-functions II: Modular forms, lecture notes, §§11.6–11.8, particularly Proposition 11.21, for period normalization of general eigenforms. Author's notes.
Multiplicative Number Theory I: Siegel–Walfisz and the Three Primes TheoremTextbook
Primes in progressions, uniformly in the modulus
Applying the circle method to an additive problem about primes requires counting primes
in arithmetic progressions with an error term uniform in the modulus: the modulus is
not fixed in advance, it grows with the size of the numbers being represented. The
Siegel–Walfisz theorem is the classical statement of that uniformity, valid for every
modulus up to a fixed power of logx, and it is the one analytic ingredient the
standard proof of Vinogradov's three primes theorem cannot do without.
The history is a sequence of partial uniformities:
1837. Dirichlet proves that every progression amodq with (a,q)=1 contains
infinitely many primes, for each fixed q, with no rate
(Dirichlet's theorem).
1896–1899. De la Vallée Poussin proves the prime number theorem with the error
term O(xe−clogx), and extends the zero-free region from ζ to
L(s,χ), obtaining the prime number theorem in progressions for each fixedq
(PNT).
1918–1935. Landau and Page isolate the obstruction to uniformity: a single real
zero near s=1, attached to a quadratic character. Landau shows at most one of two
distinct real primitive characters can have such a zero; Page shows at most one
modulus below a given bound can, yielding unconditional uniformity for q up to a
bounded power of logx
(Page's theorem).
1935. Siegel proves L(1,χ)≫εq−ε for real
primitive χ, at the price of an ineffective constant
(Siegel).
1936. Walfisz combines Siegel's bound with the de la Vallée Poussin machinery and
obtains uniformity for every fixed power q≤(logx)A
(Walfisz).
1937. Vinogradov proves that every sufficiently large odd integer is a sum of
three primes (Vinogradov's theorem).
2013. Helfgott removes the "sufficiently large", settling ternary Goldbach for all
odd n>5 (arXiv:1312.7748).
Setting
The von Mangoldt functionΛ(n) equals logp if n=pm is a prime power
and 0 otherwise. The Chebyshev functionψ(x)=∑n≤xΛ(n)
counts primes with weights; the prime number theorem is the assertion ψ(x)∼x.
A Dirichlet character modulo q is a multiplicative function
χ:Z/qZ→C, supported on the units and taking root-of-unity
values there. The principal characterχ=1 is the indicator of the units; a
character is quadratic (real) if χ2=1 and χ=1, and primitive if
it is not induced by a character of a proper divisor of q. The Dirichlet
L-functionL(s,χ)=∑n≥1χ(n)n−s, defined for
Res>1, extends meromorphically to C, entire except for a
simple pole at s=1 when χ is principal.
The two counting functions of the mission are the twisted von Mangoldt sum and the
progression sum
ψ(N,χ)=n<N∑Λ(n)χ(n),ψ(N;q,a)=n<Nn≡a(q)∑Λ(n),
related by finite character orthogonality. Write δχ=1 for χ principal
and δχ=0 otherwise. A zero β∈(0,1) of L(s,χ) lying inside the
classical zero-free region is an exceptional zero (a Siegel zero); the set of such
zeros for a given χ is the exceptional setE, which the results below
constrain to have at most one element.
Formalization targets
The attack path follows Davenport, Multiplicative Number Theory, 3rd ed., §§14, 18,
20, 21, 22.
(1) zero_free_region (§14, pp. 88–96). There is an absolute c>0 such that for
every q≥1 and every χmodq,
L(s,χ)=0for s=1,Res≥1−log(q(∣Ims∣+2))c,
with at most one exception, which is real, lies in (0,1), is a simple zero, and can
occur only for quadratic non-principal χ.
(2) pnt_dlvp (§18, pp. 111–114). For some c>0 and all x≥2,
ψ(x)=x+O(xe−clogx).
(3) psi_char_of_region (§20, pp. 121–125). For a region constant c>0 there are
c1,c2>0 such that, whenever E is an exceptional set for χmodq with
respect to c and q≤exp(c2logN),
ψ(N,χ)=δχN−β∈E∑βNβ+O(Ne−c1logN).
(4) siegel (§21, pp. 126–131). For every ε>0 there is
C(ε)>0 such that for every real primitive non-principal χmodq,
L(1,χ)>C(ε)q−ε.
(5) siegel_zero (§21, second form). For every ε>0 there is
C(ε)>0 such that for every real primitive non-principal χmodq,
L(σ,χ)=0for all real σ>1−C(ε)q−ε.
(6) siegelWalfisz (§22, pp. 132–134). For every A>0 there are C,c>0 such
that for all q≥1, all χmodq, and all N≥2 with q≤(logN)A,
ψ(N,χ)−δχN≤CNe−clogN.
This is literally the platform proposition ThreePrimes.SiegelWalfisz.
A corollary, not a milestone, records the progression form siegel_walfisz_ap: for
(a,q)=1 and q≤(logN)A,
ψ(N;q,a)=φ(q)N+OA(Ne−clogN).
Goal (three_primes, §26). There is N0 such that every odd n≥N0 is a sum
of three primes. It follows from milestone (6) by the existing platform theorem
deducing ThreePrimes.ThreePrimesExistence from ThreePrimes.SiegelWalfisz. The goal
leaves N0 unspecified rather than hard-coding a numeric threshold, so it is not
invalidated by later improvements to that threshold.
What the result gives, and what remains to be formalized
Siegel–Walfisz is the standard uniform input downstream of which sit the circle method
for ternary Goldbach, the Bombieri–Vinogradov theorem, and much of sieve theory. Without
it, the three primes theorem's major-arc analysis has no main term.
Platform status is the reason this mission exists. A complete, machine-checked
formalization of the three primes theorem already exists in the namespace ThreePrimes
(by user tabbott), following Vaughan, The Hardy–Littlewood Method, Ch. 3, and
Davenport §26. It is conditional: it takes Siegel–Walfisz as an explicit hypothesis
ThreePrimes.SiegelWalfisz. Discharging that hypothesis makes the three primes theorem
unconditional, and is the whole content of this mission.
Mathlib contains the analytic continuation of L(s,χ)
(DirichletCharacter.LFunction),
its functional equation, the non-vanishing of L(s,χ) on Res≥1,
Dirichlet's theorem, and the Chebyshev function. It does not contain the zero-free
region for L(s,χ), the explicit formula for ψ(x,χ), Siegel's theorem, or
Siegel–Walfisz. The platform additionally hosts the
PNT+ project contour
machinery for ζ — Borel–Carathéodory, the 3+4cosθ+cos2θ
inequality, a zero-free rectangle, and MediumPNT,
ψ(x)=x+O(xexp(−c(logx)1/10)). That is a template for the L(s,χ)
analogues, not a proof of them, and its error term is weaker than the de la Vallée
Poussin form milestone (2) asks for.
Where the obvious argument fails
The first idea is to run the ζ argument character by character. It works for
complex χ and breaks for real ones. The positivity device that pushes zeros off
Res=1 compares χ, χ2 and the trivial character at nearby
points; when χ is quadratic, χ2 is principal and contributes the pole of
L(s,χ0) at s=1 at exactly the height where the putative zero sits, so the
inequality degrades from "no zeros" to "at most one zero" and stops there. Every later
step inherits that unexcluded zero: milestone (3) can only be stated with the
Nβ/β term present, and milestone (6) is exactly the assertion that for
q≤(logN)A this term is small — which Siegel's ineffective bound supplies and
nothing effective is known to.
A second shortcut, deducing uniformity from Mathlib's non-vanishing of L(s,χ) on
Res≥1 together with Dirichlet's theorem, also fails: those results
are qualitative, carry no rate, and are not uniform in q.
Formalization scope
Sums run over n<N with N∈N, matching Vino.vmSumChar and
ThreePrimes.SiegelWalfisz; Davenport sums over n≤x. The two differ by the single
term Λ(N)≤logN, negligible against every error term above. Milestone (2)
alone uses a real argument, via Mathlib's Chebyshev.psi. L(s,χ) is Mathlib's
DirichletCharacter.LFunction, so no continuation is reconstructed.
The zero-free region is Davenport.InRegion c q s, namely
Res≥1−c/log(q(∣Ims∣+2)); the exceptional zero
is packaged as IsExceptionalSet c χ E: E is a subsingleton, every element is a real
zero of L(⋅,χ) in (0,1) and can exist only for quadratic non-principal χ,
and L(s,χ)=0 at every s=1 of the region outside E. Milestone (1) adds
simplicity as L′(β,χ)=0 for β∈E.
Milestone (3) takes the region constant c>0 as a parameter rather than importing it
from milestone (1), so the milestones can be attempted in any order. For large c the
hypothesis IsExceptionalSet c χ E may be unsatisfiable for some χ, making the
statement vacuous there — a harmless weakening, not a falsehood, and not a trivializing
reading: milestone (1) produces a definite small c>0 with a witness E for everyχ, so instantiating milestone (3) at that c discharges the hypothesis rather than
voiding it.
Siegel's theorem is stated for χ.IsQuadratic, χ ≠ 1, χ.IsPrimitive characters, with
the conclusion a lower bound on ReL(1,χ); since L(1,χ) is real
for real χ, this is the value itself, not a weakening. The constants in milestones
(4), (5) and (6) are ineffective; the statements are plain existentials, so
ineffectivity is invisible to Lean, but no numeric constant can be extracted from
anything downstream of them.
The principal character is included in the character-form statements, with main term N
(if χ = 1 then (N : ℂ) else 0); milestones (3) and (6) therefore contain the prime
number theorem itself and cannot be proved by restricting to non-principal χ.
Milestone (6) requires c>0 strictly, which is what makes Ne−clogN a
genuine saving over the trivial ψ(N,χ)≪N; with c=0 allowed it would be
empty.
Beyond the six milestones, a complete development needs Hadamard factorization for
L(s,χ) as an entire function of order 1, the zero-counting estimate N(T,χ)
(§16, pp. 101–103), the truncated explicit formula for ψ(x,χ) (§19, pp. 115–120),
Perron-type contour truncation, and the imprimitive-to-primitive reduction
∣ψ(N,χ)−ψ(N,χ∗)∣≪(logq)(logN). All of it is reusable well
beyond this mission, being the standard prerequisite for Bombieri–Vinogradov, Linnik's
theorem, and effective Chebotarev. Contributions of these supporting results, of
alternative routes to milestone (3) following Montgomery–Vaughan Ch. 11, of the
π(x;q,a) versions, and of sharper constants are welcome.
Selected references
H. Davenport, Multiplicative Number Theory, 3rd ed., revised by H. L. Montgomery,
GTM 74, Springer, 2000. §§14, 18, 20, 21, 22, 26.
doi:10.1007/978-1-4757-5927-3
H. L. Montgomery and R. C. Vaughan, Multiplicative Number Theory I: Classical
Theory, Cambridge University Press, 2007. Ch. 11–12 (Theorems 11.3, 11.14, 11.16,
12.10; Corollaries 11.10, 11.12, 11.17, 11.19).
doi:10.1017/CBO9780511618314
R. C. Vaughan, The Hardy–Littlewood Method, 2nd ed., Cambridge University Press,
1997. Ch. 3. doi:10.1017/CBO9780511470929
C. L. Siegel, Über die Classenzahl quadratischer Zahlkörper, Acta Arithmetica 1
(1935), 83–86. eudml:205054
A. Walfisz, Zur additiven Zahlentheorie II, Mathematische Zeitschrift 40 (1936),
592–607. doi:10.1007/BF01218882
I. M. Vinogradov, Representation of an odd number as a sum of three primes, Doklady
Akad. Nauk SSSR 15 (1937), 291–294.
Vinogradov's theorem
H. A. Helfgott, The ternary Goldbach conjecture is true, 2013.
arXiv:1312.7748
Erdős Problem 390: Exact Second-Order AsymptoticResearch Paper
Determine the exact second-order term in the least possible largest factor in a factorization of n! into distinct integers exceeding n, with the proposed rational constant 4029639598/25970038185.
An Application of Simultaneous Diophantine Approximation in Combinatorial Optimization: A Small Integral Objective with the Same Optimal Solutions and Dual BasesResearch Paper
Motivation
An algorithm for linear programming is strongly polynomial if the number of arithmetic operations it performs is bounded by a polynomial in the dimension of the problem alone (the number of variables and constraints), independently of the bit lengths of the numbers in the input. Many combinatorial optimization problems are linear programs over polyhedra of the form P={x∈Rn:Ax≤b} whose constraint matrix A has entries 0,+1,−1, but whose objective vector w is an arbitrary rational weight vector. Polynomial-time algorithms for such problems (for instance the ellipsoid-based algorithms of Grötschel, Lovász and Schrijver for maximum-weight cliques in perfect graphs, submodular flows, and matroid polyhedra) have running times that depend on the length of w.
Frank and Tardos (Combinatorica 1987) remove this dependence once and for all: they replace w by an integral objective w~ whose entries have O(n3) bits and which has exactly the same optimal solutions and the same optimal dual bases as w over every such polyhedron. Any algorithm that is polynomial in n and in the length of the objective then becomes strongly polynomial. The tool is simultaneous Diophantine approximation, used through the lattice-basis-reduction algorithm of Lenstra, Lenstra and Lovász (Math. Ann. 1982). The technique extends Tardos's strongly polynomial algorithm for linear programs with small constraint matrices (Oper. Res. 1986), which applies only to explicitly given programs.
Setting
For x∈Rn write ∥x∥∞=maxj∣x(j)∣ and ∥x∥1=∑j∣x(j)∣; sign takes the values −1,0,+1.
Decomposition. Fix a positive integer N. A decomposition of w∈Rn is an expression
w=i=1∑kλivi,λi>0,vi∈Zn.
It satisfies condition (iii) if for i=2,…,k the vector vi is nonzero and λi/λi−1≤1/(N∥vi∥∞): the coefficients decrease so quickly that each term is negligible against the previous one.
Preprocessing. Given a rational w and N, the paper's preprocessing algorithm finds a decomposition with k≤n, condition (iii), and the size bound (ii)' ∥vi∥∞≤2n2+nNn, and outputs
w~=i=1∑kMk−ivi,M=2n2+nNn+1.
Linear programs. Let A be an m×n matrix with entries in {0,±1} and b∈Rm. The primal program is max{wx:Ax≤b} and the dual program is min{yb:yA=w,y≥0}. A point xˉ∈P is w-maximal if wxˉ=max(wx:x∈P). A dual basis is a maximal set of row indices of A whose rows are linearly independent; it determines at most one y with yA=w supported on it (the basic dual solution), and it is an optimal dual basis if that y exists and is optimal for the dual program.
Formalization targets
Goal — Theorem 4.2 (p. 58)
For every w∈Qn, with N=(n+1)!+1, there is w~∈Zn with
∥w~∥∞≤24n3Nn(n+2)
such that for every 0,±1 matrix A with n columns and every b: (i) x∈P is w-maximal if and only if it is w~-maximal; (ii) a set of rows of A is an optimal dual basis for w if and only if it is one for w~. The vector w~ depends on w only, not on A or b.
Milestones
Dirichlet's theorem (p. 52): for N≥1 and α∈Rn there are p∈Zn and 1≤q≤Nn with ∣qα(i)−p(i)∣<1/N for all i.
Theorem 3.1 (p. 53): every w∈Rn has a decomposition with k≤n, ∥vi∥∞≤Nn and condition (iii).
Lemma 3.2 (pp. 54–55): under condition (iii), for integral b with ∥b∥1≤N−1, sign(b⋅w)=sign(b⋅vj) for the smallest j with b⋅vj=0, and b⋅w=0 if there is no such j.
Theorem 3.3 (p. 56): the preprocessed w~ satisfies ∥w~∥∞≤24n3Nn(n+2) and sign(w⋅b)=sign(w~⋅b) for all integral b with ∥b∥1≤N−1.
The case N=n+1 (p. 55): an integral w~ with ∥w~∥∞≤24n3(n+1)n(n+2) and w~(X)≤w~(Y)⟺w(X)≤w(Y) for all subsets X,Y of coordinates.
Lemma 4.1 (i) (p. 57): if sign(w′⋅h)=sign(w′′⋅h) for all integral h with ∥h∥1≤(n+1)!, then w′ and w′′ have the same maximizers over {Ax≤b} for every 0,±1 matrix A.
Lemma 4.1 (ii) (p. 57): under the same hypothesis, a dual basis is optimal for w′ if and only if it is optimal for w′′.
Significance
The result gives a general reduction: whenever a class of polyhedra with 0,±1 constraint matrices admits an optimization algorithm that is polynomial in n and in the length of the objective, it admits a strongly polynomial one. The paper applies this to maximum-weight cliques in perfect graphs, optimization over submodular flow polyhedra, and matroid polyhedra membership, and its Section 5 applies the same rounding to the integer programming algorithms of Lenstra and Kannan. The subset-sum corollary (milestone 5) is independently useful: every rational weight function on a finite set can be replaced by an integral one with O(n3)-bit entries that orders all subset sums identically.
All statements of this mission have been proved on paper since 1987. None is formalized on Prove2Me, and Mathlib contains only the one-dimensional Dirichlet approximation theorem. The mission produces a machine-checked version of the exact statements, with the explicit constants of the paper; the complexity claims (operation counts, strong polynomiality) are not part of it.
Difficulty
The goal combines two independent parts. The number-theoretic part (milestones 1–5) needs a multidimensional Dirichlet theorem, an induction producing the decomposition, and exact inequality chains with the constants 2n2+nNn and 24n3Nn(n+2). The linear-programming part (milestones 6–7) needs bounds on the entries of inverses of nonsingular 0,±1 submatrices, the existence of optimal dual solutions supported on a dual basis, LP duality and complementary slackness. The obvious first idea, scaling w to an integer vector by a common denominator, preserves every sign but gives no bound on ∥w~∥∞ in terms of n; the bound is the content of the theorem. Likewise, rounding each coordinate of w separately to a fixed precision does not preserve the sign of w⋅b when w⋅b is tiny but nonzero.
Formalization scope
Vectors are functions on Fin n: the input w is rational (Fin n → ℚ) in the goal, in Theorem 3.3 and in the subset-sum corollary, as in the algorithm's input line; it is real in Theorem 3.1, Lemma 3.2 and Lemma 4.1, as on the page. Integral vectors are Fin n → ℤ, and A is a Matrix (Fin m) (Fin n) ℤ with every entry in {−1,0,1}, cast to R; b∈Rm is unrestricted. Decompositions are indexed by i∈{1,…,k}⊆N as in the paper. ∥b∥1 is always the explicit sum ∑j∣b(j)∣, compared with N−1 in Z; ∥v∥∞ of an integer vector is a natural number (supNorm). Sign equality uses SignType.sign and includes the zero case. Condition (iii) is stated multiplicatively together with vi=0, which the paper's quotient presupposes; without vi=0 Lemma 3.2 fails. An optimal dual basis is a maximal linearly independent set of row indices together with an optimal dual solution supported on it.
Two formalizations would make the goal trivial and are excluded: dropping the bound on ∥w~∥∞ (a multiple of w then works), and letting w~ depend on A and b (the goal states ∃w~ before ∀A,b). The 0,±1 assumption on A is part of every Section 4 statement.
A complete development needs a multidimensional pigeonhole argument, determinant and adjugate bounds for 0,±1 matrices, and basic LP duality (strong duality, complementary slackness, basic optimal dual solutions); the last two are reusable across linear-programming missions. Proofs of individual milestones, reusable lemmas on LP duality, and alternative proofs of Dirichlet's theorem are all welcome.
Selected references
A. Frank and É. Tardos, An application of simultaneous diophantine approximation in combinatorial optimization, Combinatorica 7(1) (1987) 49–65. https://doi.org/10.1007/BF02579200
A. K. Lenstra, H. W. Lenstra Jr. and L. Lovász, Factoring polynomials with rational coefficients, Math. Ann. 261 (1982) 515–534. https://doi.org/10.1007/BF01457454
É. Tardos, A strongly polynomial algorithm to solve combinatorial linear programs, Operations Research 34(2) (1986) 250–256. https://doi.org/10.1287/opre.34.2.250
M. Grötschel, L. Lovász and A. Schrijver, The ellipsoid method and its consequences in combinatorial optimization, Combinatorica 1 (1981) 169–197. https://doi.org/10.1007/BF02579273
J. W. S. Cassels, An Introduction to the Theory of Numbers (title as printed in the paper's reference [2]), Springer, Berlin, 1971; cited in the paper as [2, Sect. 1.10] for Dirichlet's theorem.
Ablowitz–Chakravarty–Halburd: the Chazy–Ramanujan correspondence and the Darboux–Halphen reduction of self-dual Yang–MillsResearch Paper
Motivation
In 1985 R. S. Ward conjectured that "many (and perhaps all?) of the ordinary and partial differential equations that are regarded as being integrable or solvable may be obtained from the self-dual gauge field equations (or its generalizations) by reduction". The self-dual Yang–Mills (SDYM) equations are therefore often called the master integrable system: choosing a gauge algebra and a symmetry group to reduce by produces, on the one hand, the classical soliton equations and the Painlevé transcendents, and on the other — once infinite-dimensional gauge algebras are allowed — a family of third-order equations whose solutions have movable natural barriers and are therefore not of Painlevé type.
This mission formalizes the endpoint of one such reduction chain, as surveyed by Ablowitz, Chakravarty and Halburd, Integrable systems and reductions of the self-dual Yang–Mills equations, J. Math. Phys. 44 (2003) 3147–3173, Section V. Reducing SDYM to functions of a single variable gives the Nahm equations; taking the gauge algebra to be the divergence-free vector fields on S3 turns them into a matrix flow which, after diagonalizing the symmetric part, becomes the generalized Darboux–Halphen system. Its trace is governed by the Chazy equation, written down by Chazy in 1909, and — this is the paper's historical observation — the Chazy equation is equivalent to the differential system Ramanujan derived in 1916 for the Eisenstein series P=E2, Q=E4, R=E6. Chazy and Ramanujan worked on the same equation at nearly the same time and apparently did not know it.
Setting
Throughout, t and q are complex variables and all functions are complex-valued; a "solution on s" means the stated derivative identities hold at every point of a set s⊆C.
The classical Chazy equation is the third-order equation
dt3d3y=2ydt2d2y−3(dtdy)2.
The classical Darboux–Halphen system is the first-order system for ω1,ω2,ω3
ω˙1=ω2ω3−ω1(ω2+ω3),
together with its two cyclic images. It arose in Darboux's study of triply orthogonal surfaces and was solved by Halphen. Its generalized form adds a term τ2=τ12+τ22+τ32 to each right-hand side, where τ˙1=−τ1(ω2+ω3) and cyclically.
Ramanujan's system is
qdqdP=12P2−Q,qdqdQ=3PQ−R,qdqdR=2PR−Q2,
satisfied by P(q)=1−24∑n≥1σ1(n)qn, Q(q)=1+240∑n≥1σ3(n)qn, R(q)=1−504∑n≥1σ5(n)qn, where σk(n)=∑d∣ndk.
Finally, the 3×3 matrix flow obtained from the Nahm equations with the diff(S3) gauge algebra is
M˙=(AdjM)T+MTM−(TrM)M,AdjM=(detM)M−1,
and the generalized Chazy equation with parameter n is
dt3d3y−2ydt2d2y+3(dtdy)2=36−n24(6dtdy−y2)2.
Formalization targets
Goal — the Chazy–Ramanujan correspondence (eqs. (78) and (71))
If P,Q,R satisfy Ramanujan's system on a region of the punctured q-plane, then
y(t):=iπP(e2πit)
satisfies the classical Chazy equation on the preimage region. In particular y(t)=iπE2(t) is a solution of the Chazy equation, and knowing the general solution of Chazy gives the general solution of Ramanujan's system.
Supporting targets
The milestone list covers the reduction chain in both directions: the matrix flow M˙=(AdjM)T+MTM−(TrM)M and its reduction to the Darboux–Halphen system (eqs. (51)–(54)), the first integrals (55), the passage y=−2(ω1+ω2+ω3) from Darboux–Halphen to Chazy and back through the roots of a cubic, the SL(2) symmetry (73) of the Chazy equation, Rankin's fourth-order equation for the discriminant cusp form, the change of variable q=e2iτ between the two forms of Ramanujan's system, and the generalized Chazy equation (81).
Significance
The Chazy equation is the bridge between integrable systems and the theory of modular forms. Its particular solution y=iπE2 makes the quasi-modularity of the second Eisenstein series an ODE statement; via y=21(logΔ)′ it turns into Rankin's homogeneous fourth-order equation for the discriminant cusp form Δ, whose Fourier coefficients are the Ramanujan τ-function. The SL(2,Z) action on solutions is exactly the weight-2 quasi-modular transformation law. In the other direction, the general solution of Chazy is a ratio of hypergeometric functions with a movable natural barrier, which is why these reductions are used as the standard counterexample to the identification of integrability with the Painlevé property.
None of this material is currently in Mathlib: there is no Chazy equation, no Darboux–Halphen system, no Ramanujan differential system, and no Eisenstein-series ODE. The mission builds that layer from scratch. Each statement is a closed-form differential identity, so the development is self-contained: it needs no analytic continuation theory, no modular-forms library, and no existence theory for ODEs. What a solver must supply is careful derivative bookkeeping and polynomial algebra.
Status honesty: every statement in this mission is a classical, published result — Darboux, Halphen, Chazy (1909–1911), Ramanujan (1916), Rankin (1956), and Ablowitz–Chakravarty–Halburd (1990s–2003). Nothing here is open mathematics. What is open is the machine-checked proof; to the captain's knowledge no formalization of these identities exists.
Difficulty
The obvious approach — "differentiate three times and call ring" — fails for two reasons. First, the statements are about functions, not about polynomials: each differentiation step requires producing the derivative of a product, a quotient, or a composition from the hypotheses, and only then is the resulting algebraic identity a ring problem. Second, two of the targets go against the flow of the hypotheses. Recovering the Darboux–Halphen system from a Chazy solution means recovering ω˙i from the derivatives of the three elementary symmetric functions of the ωi: this is a linear system whose matrix is a Vandermonde matrix in ω1,ω2,ω3, invertible precisely because the roots are assumed distinct — which is why the distinctness hypothesis is not decoration. Similarly, the matrix milestone needs the conjugation-equivariance of M↦(AdjM)T+MTM−(TrM)M, which holds for the transpose only because the conjugating matrix is complex orthogonal.
Formalization scope
Everything is over C, matching the paper. Solutions are represented pointwise on an arbitrary set s⊆C rather than on all of C, because the solutions of interest have movable singularities and natural barriers; no openness, holomorphy or connectivity is assumed unless a statement needs it.
Higher derivatives are carried as explicit extra function arguments joined by HasDerivAt hypotheses rather than through iterated deriv. This avoids junk values entirely: a statement never asserts anything about the value of a derivative that does not exist. The same convention is used for the matrix flow, where the derivative is imposed entrywise, so that no norm or normed-space structure on the space of matrices needs to be chosen.
Divisions are arranged so that no denominator can vanish under the stated hypotheses: Ramanujan's system is written in the form qdP/dq=(P2−Q)/12, with no division by q; the generalized Chazy equation carries the hypothesis n2=36; and the first-integral and discriminant statements carry explicit nonvanishing hypotheses.
There is no trivializing formalization available here. Every statement is an implication between two systems of differential equations whose hypotheses are satisfied by the classical explicit solutions (P=E2, Q=E4, R=E6 for the Ramanujan system; Halphen's solutions for Darboux–Halphen), so none of them is vacuous, and none is an identity that holds for arbitrary functions.
A complete development needs only Mathlib's derivative calculus (HasDerivAt and its product, quotient and composition rules), Complex.exp, and Matrix.adjugate with the basic adjugate identities. Contributions of reusable pieces are welcome: in particular a clean statement of the derivative of the elementary symmetric functions of a triple of functions, and the Vandermonde inversion step, would both be of use beyond this mission.
Selected references
M. J. Ablowitz, S. Chakravarty, R. G. Halburd, Integrable systems and reductions of the self-dual Yang–Mills equations, J. Math. Phys. 44 (2003) 3147–3173. doi:10.1063/1.1586967
J. Chazy, Sur les équations différentielles du troisième ordre et d'ordre supérieur dont l'intégrale générale a ses points critiques fixes, Acta Math. 34 (1911) 317–385. doi:10.1007/BF02393131
S. Ramanujan, On certain arithmetical functions, Trans. Cambridge Philos. Soc. 22 (1916) 159–184.
G. Halphen, Sur un système d'équations différentielles, C. R. Acad. Sci. Paris 92 (1881) 1101–1103.
R. A. Rankin, The construction of automorphic forms from the derivatives of a given form, J. Indian Math. Soc. 20 (1956) 103–116.
M. J. Ablowitz, S. Chakravarty, R. G. Halburd, The generalized Chazy equation and Schwarzian triangle functions, Asian J. Math. 2 (1998) 619–624. doi:10.4310/AJM.1998.v2.n4.a1
R. S. Ward, Integrable and solvable systems, and relations among them, Philos. Trans. R. Soc. London A 315 (1985) 451–457. doi:10.1098/rsta.1985.0051
Shao's three units theorem: density 5/8 forces a three-fold additive basisResearch Paper
Let m be an odd squarefree positive integer and let A be a set of units modulo m with ∣A∣>85φ(m). Then A+A+A=Z/mZ: every residue class, unit or not, is a sum of three elements of A.
This is Corollary 1.5 of Xuancheng Shao, A density version of the Vinogradov three primes theorem, Duke Math. J. 163 (2014) 489-512, arXiv:1206.6139v2. It is the local input to Shao's density version of the three primes theorem, and it is a clean finite statement in its own right.
The constant is sharp and the inequality is strict
At m=15 the set {2,8,11,13,14} has five elements, so 5φ(15)=8⋅5 exactly, and 1 is not a sum of three of its elements. The hypothesis therefore fails by nothing at all and the conclusion already fails. If < is weakened to ≤, the statement is false.
Where the proof comes from
The corollary cannot be proved by induction on sets. Passing from m to a prime factor p splits A into fibers of different densities, and a set is the wrong object to carry through that split. The induction has to run on functions f:Z/mZ→[0,1], and the corollary is the case f=1A of a weighted statement, Proposition 1.4. That is the one step from which the rest follows.
The weighted statement then splits at the primes 3 and 5. For m coprime to 30 the induction runs on the prime factors, using Cauchy-Davenport-Chowla for three sets modulo a prime, and it produces the stronger bilinear conclusion f(a)f(b)+f(b)f(c)+f(c)f(a)>85(f(a)+f(b)+f(c)). The modulus 15 is handled separately by a linear program over the eight units. Two averaging inequalities, one symmetric and one asymmetric, are what turn a density above 5/8 into a single good triple in both halves.
What the milestones are
The nine milestones follow Shao's own numbering: the two averaging inequalities of Section 2 (Lemmas 2.1 and 2.2), the finite check at m=15 (Lemma 2.3), the three-set Cauchy-Davenport-Chowla bound, the divisor reduction that lets the proof assume 15∣m, the induction away from 3 and 5 (Proposition 3.1), the modulus-15 case (Proposition 3.2), the weighted local result (Proposition 1.4), and the counting bridge that the units modulo m number φ(m).
Notes on the formalization
Every item is stated in Mathlib primitives alone, so the mission needs no definition items: IsUnit, Nat.totient, Odd, Squarefree, Finset, and Antitone. The set of units modulo m is written Finset.univ.filter (fun x => IsUnit x) at each use rather than through a defined abbreviation, so a reader auditing a statement has to trust only Mathlib. That is also why open scoped Classical appears in the preamble.
The density hypothesis is written 5 * Nat.totient m < 8 * A.card, which is ∣A∣>85φ(m) cleared of division so the whole statement stays in N with no rounding.
Ngo's Fundamental Lemma II: Isogenies of Root Data and Paired GroupsResearch Paper
Motivation
Waldspurger's non-standard fundamental lemma is an identity between stable orbital
integrals on the Lie algebras of two reductive groups that are not isomorphic, and not even
isogenous as algebraic groups, but whose root data become identified after tensoring with
Q. The basic example is the pair (Sp2n,SO2n+1), whose
root systems Cn and Bn are exchanged by Langlands duality; the identity is what allows
the twisted fundamental lemma to be deduced from the ordinary one. Waldspurger formulated
the conjecture in L'endoscopie tordue n'est pas si tordue (2008); it is Theorem 1.12.7 of
Bao Chau Ngo, Le lemme fondamental pour les algebres de Lie, Publ. Math. IHES 111 (2010),
1-169 (DOI), proved there in equal characteristic
by the same Hitchin-fibration argument that gives the ordinary fundamental lemma.
Before any of that geometry can start, the two sides have to be compared: one needs a single
Cartan subalgebra, a single Weyl group and a single space of characteristic polynomials serving
both groups at once. Producing that comparison is a self-contained piece of linear algebra over
the root data, carried out in Ngo's §1.12, and it is what this mission asks for.
Setting
Let G1 and G2 be split reductive groups over a field, pinned, with maximal tori T1 and
T2. Each is determined by its root datum(X∗(Ti),X∗(Ti),Φi,Φi∨,Δi), where Φi is the set of roots,
Φi∨ the set of coroots and Δi the set of simple roots singled out by the
pinning.
An isogeny of root data between G1 and G2 (Ngo, Definition 1.12.1) is a pair of
isomorphisms of Q-vector spaces
ψ∗:X∗(T2)⊗Q⟶X∗(T1)⊗Q,ψ∗:X∗(T1)⊗Q⟶X∗(T2)⊗Q
which are transposes of one another, such that ψ∗ carries the set of lines
Qα2 (α2∈Φ2) bijectively onto the set of lines
Qα1 (α1∈Φ1), matching lines of simple roots with lines of simple
roots, and such that ψ∗ has the same property for the lines spanned by coroots. Two
semisimple groups with the same adjoint group are isogenous in this sense; so are a group and
its Langlands dual, the interesting cases being Bn↔Cn, F4 and G2,
where a short root α is sent to αˇ and a long root to nαˇ with
n=∣αlong∣2/∣αshort∣2. Groups obtained by twisting a
pair of isogenous pinned groups by a common torsor are called paired.
A prime p is good with respect to ψ∗ when it divides neither of the indices
the two lattices being compared inside the single Q-vector space identified by
ψ∗.
Formalization targets
Goal (1.12.4 and 1.12.6): the Weyl groups are identified compatibly
ψ∗wψ∗−1∈W2for all w∈W1,and conversely,
i.e. conjugation by ψ∗ carries the Weyl group W1 acting on
X∗(T1)⊗Q onto the Weyl group W2 acting on X∗(T2)⊗Q.
Ngo's reason is that the reflection attached to a root depends only on the line through that
root, so the bijection of root lines transports reflections to reflections. This equivariance
is what makes the induced isomorphism t1→t2 descend to an
isomorphism ν:cG1→cG2 of the spaces of characteristic
polynomials, which is Lemme 1.12.6 and which is what allows two points a1 and a2 with
ν(a1)=a2 to be compared at all.
Milestones
Two steps lead there: the reflection computation that makes a matched pair of root lines give
a matched pair of reflections, and the integral statement behind Ngo's good-characteristic
hypothesis — that when the two indices above are invertible in the base ring, the two lattices
become identified after base change.
Significance
Theorem 1.12.7, the non-standard fundamental lemma, asserts that for two paired groups over
Ov=k[[ϖ]] with residue characteristic exceeding twice the Coxeter numbers, and for
points a1 and a2 corresponding under ν, the stable orbital integrals of the
characteristic functions of g1(Ov) and g2(Ov) agree. Waldspurger
showed that this identity, together with the ordinary fundamental lemma, implies the twisted
fundamental lemma. None of the objects in that statement — reductive group schemes over a
discrete valuation ring, orbital integrals, Haar measures on the centralizer tori — exists in
Mathlib today. The comparison of §1.12 does not need any of them: it is a statement about
lattices, root systems and Weyl groups, and it is a strict prerequisite, since without the
isomorphism ν the two sides of Theorem 1.12.7 cannot even be matched up.
Beyond this paper, the notion of an isogeny of root data and the good-characteristic base
change of a pair of lattices are reusable: they are the standard bookkeeping behind Langlands
duality for split groups, and neither is currently available.
Difficulty
The reflection step looks like a one-line computation and is one — but only once the two
proportionality constants are known to agree. If ψ∗(α2)=cα1 and
ψ∗(α1∨)=c′α2∨, the conjugate of sα1 is sα2
exactly when c=c′, and that is forced by transposition together with
⟨α,α∨⟩=2. The genuine difficulty in the goal is different: the
definition only says that ψ∗ and ψ∗ permute lines, so one has to show that the
bijection induced on root lines and the bijection induced on coroot lines are the same
bijection. A solver who assumes this without proof has assumed the substance of 1.12.4.
The lattice milestone has its own trap: the quotient Λ1/(Λ1∩Λ2) must
be shown to have vanishing Tor after base change, not merely to vanish, or the
inclusion becomes only surjective.
Formalization scope
Root data are modelled by Mathlib's RootPairing ι ℚ M N, with M the character space, N
the cocharacter space, and rational coefficients throughout, so that "tensoring with
Q" is built into the ambient objects rather than performed explicitly. A choice of
simple roots is recorded as a subset of the index type rather than as a RootPairing.Base;
nothing in the statements depends on that subset beyond its role in the definition of an
isogeny. The Weyl group is the subgroup of linear automorphisms of the cocharacter space
generated by the coreflections, which is the form in which it acts on the Cartan.
The goal is stated as a two-sided intertwining property rather than as an equality of
subgroups: every element of W1 is intertwined by ψ∗ with some element of W2 and
conversely. This avoids introducing a conjugation homomorphism, and it is the form in which
the statement is used. Both root pairings in the goal are required to be finite, reduced root
systems, matching Ngo's hypothesis that G1 and G2 are reductive groups.
The good-characteristic condition is formalized exactly as Ngo writes it, by the invertibility
in the base ring of the two indices, each expressed as the cardinality of an explicit quotient
group; the conclusion is the bijectivity of the map induced on the tensor product by the
inclusion of the intersection. If a quotient were infinite its cardinality is reported as 0,
and invertibility of 0 then forces the base ring to be trivial, so no false statement hides
in that corner.
No statement here is vacuous: any pair consisting of a root system and itself, with ψ∗
and ψ∗ the identity, satisfies every hypothesis, and the pair (Bn,Cn) gives the
intended non-trivial instances.
T. A. Springer, Reductive groups, in Automorphic Forms, Representations and L-functions, Proc. Sympos. Pure Math. 33 (1979), 3-27. https://doi.org/10.1090/pspum/033.1
4 thms4 active usersReviewed
🏆Completed
Captain: marwahaha
Mahler's irrationality bound for π: 42Research Paper
Motivation
The irrationality of π rules out an exact representation as a rational number. A quantitative question asks how closely rational numbers can approximate it as their denominators grow. The irrationality measure records the threshold exponent for exceptionally accurate rational approximations. This mission formalizes the historical upper-bound milestone μ(π)≤42 listed as C7a in the optimization constants project.
Mahler's 1953 paper establishes a stronger, explicit inequality in Theorem 1. The mission extracts its consequence for the irrationality measure and states that consequence through a shared Lean predicate. The number 42 is the chosen historical milestone; it is neither a claim about the exact value of the measure nor a claim to the strongest bound mentioned anywhere in Mahler's paper. Mahler, original p. 33.
Setting
Write p∈Z for a numerator and q∈N for a positive denominator. The approximation error is the real number ∣π−p/q∣. The exponent B describes an upper bound on the irrationality measure through an eventual lower bound on this error.
The shared predicate PiIrrationality.UpperBound B means that for every real ε>0, some natural-number threshold Q satisfies
qB+ε1<π−qp
for every integer p and every natural number q>0 with Q≤q. The threshold can depend on ε and on the chosen bound B; it cannot depend on the later choices of p or q. Numerators may be negative, zero, or positive. Fractions need not be in lowest terms. This is the epsilon characterization used in the definition of C7a.
Formalization targets
The goal is
μ(π)≤42,
represented by PiIrrationality.UpperBound (42 : ℝ). Expanded, the target is
∀ε>0∃Q∈N∀p∈Z∀q∈N,q>0∧Q≤q⟹q42+ε1<π−qp.
The mission contains one shared definition and one goal theorem. The definition introduces the proposition without asserting any bound. The theorem has no additional hypotheses, and its proof is intentionally left open. Future historical-bound missions can import the same definition and state a different numeric bound without changing the quantity being tracked.
Significance
A finite upper bound restricts the quality of rational approximations to π and excludes approximation at arbitrarily large exponents. The formal result would supply a reusable quantitative fact beyond the assertion that π is irrational. The published mathematical result is known; the work requested here is a machine-checked proof of the stated consequence.
The shared definition also fixes the meaning of all entries in the accompanying campaign. A smaller bound makes a stronger claim. A proof of a stronger entry may establish this historical goal as a consequence, provided it uses the same definition and no extra hypotheses. The mission remains mathematically valid after further improvements to the numerical bound.
Difficulty
A proof that π is irrational only establishes nonzero approximation errors. The target requires a uniform lower estimate over every numerator once the denominator passes a threshold. Checking finitely many rational approximations cannot establish the quantified conclusion. A formal development must control the dependence of its estimates and thresholds, and justify every passage between an analytic estimate and the final rational-approximation inequality.
The exact theorem from Mahler should be distinguished from this goal: his explicit uniform inequality is stronger than the eventual epsilon statement recorded here. A proof may pass through that uniform result, but the goal does not require a particular proof method, a particular threshold, or a separate treatment of every auxiliary theorem in the original paper.
Formalization scope
The circle constant is Mathlib's Real.pi. Absolute value, division, and exponentiation in the displayed inequality are operations on the real numbers; in particular, q42+ε is a real power. The denominator is explicitly positive, so division by zero cannot satisfy the premises. Allowing Q=0 does not remove the positivity requirement on q.
The definition is stored in Definitions.Def_PiIrrationality_UpperBound. The goal imports this definition instead of introducing another version of it. The conclusion is not placed among the theorem's assumptions. The definition contains no proof placeholder; the sole sorry is the open proof of the goal theorem. Contributions may establish supporting estimates or a complete proof while preserving these conventions.
Selected references
K. Mahler, On the approximation of π, Nederl. Akad. Wetensch. Proc. Ser. A 56 = Indag. Math. 15 (1953), 30–42, Theorem 1, p. 33. EMS reprint.
Optimization problems project, The irrationality measure of π, constant C7a: definition and historical bounds. Source page.
Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer 3: The Success Probability of Quantum Order FindingResearch Paper
Motivation
The security of the RSA cryptosystem rests on the assumed difficulty of factoring large integers, and the best known classical algorithms for factoring run in super-polynomial time. In 1994 Peter Shor showed that a quantum computer can factor an n-digit integer in time polynomial in n (Shor, SIAM J. Comput. 1997; conference version FOCS 1994). The algorithm has two parts. A classical reduction, due to Miller (1976), turns factoring into order finding: given x coprime to n, find the least r≥1 with xr≡1(modn). The quantum part solves order finding.
This mission formalizes the quantum part as Shor analyzes it in §5 of the journal paper: the construction of the quantum state, the probability of each measurement outcome, and the classical post-processing that reads r off the measured value. The paper's claim is that one run of this procedure returns r with probability at least φ(r)/3r.
Timeline:
1976: Miller reduces factoring to order finding (with randomization).
1985–1994: Deutsch, Bernstein–Vazirani and Simon give the quantum Fourier sampling ideas the algorithm builds on.
1994: Shor's FOCS paper introduces the factoring and discrete logarithm algorithms.
1997: the SIAM J. Comput. version gives the analysis formalized here, with q the power of 2 in [n2,2n2).
Setting
Fix an integer n≥2 and an integer x coprime to n. Its orderr is the least r≥1 with xr≡1(modn); since x is a unit, r≤φ(n)<n. Let q=2l be the power of 2 with n2≤q<2n2.
A quantum state on two registers, the first holding 0≤a<q and the second a residue y∈Z/n, is a complex vector ψ(a,y) indexed by the basis states ∣a,y⟩. Measuring it returns ∣a,y⟩ with probability ∣ψ(a,y)∣2.
The Fourier matrixAq is the q×q matrix with entries (Aq)a,c=q−1/2exp(2πiac/q), with rows indexing inputs and columns outputs. The algorithm
prepares q1/21∑a=0q−1∣a⟩∣xamodn⟩ (eq. (5.2)),
applies Aq to the first register, obtaining q1∑a,cexp(2πiac/q)∣c⟩∣xamodn⟩ (eq. (5.4)),
measures, obtaining some ∣c,y⟩,
rounds c/q to the nearest fraction with denominator smaller than n.
The observed cgives us r if some fraction with lowest-terms denominator below n is within 1/2q of c/q, and every such fraction has lowest-terms denominator exactly r. In the Lean development these objects are preFourierState, finalState, outcomeProb and yieldsOrder, in the namespace ShorAlgorithms.OrderFinding, and the shared definition ShorAlgorithms.Shared.fourierMatrix.
Formalization targets
Goal: success probability at least φ(r)/3r
For all sufficiently large n, with x, r and q as above,
Pr[the observed c gives us r]=cgivesr∑y∈Z/n∑∣Ψ(c,y)∣2≥3rφ(r),
where Ψ is the state (5.4). The threshold on n is uniform in x and q; it is the paper's "for sufficiently large n" from the per-state bound.
Milestones
Eqs. (5.5)–(5.6). For 0≤k<r, the probability of ∣c,xk⟩ equals q1∑b=0⌊(q−k−1)/r⌋exp(2πi(br+k)c/q)2.
Eq. (5.11). For n past a threshold, every ∣c,xk⟩ with −r/2≤rc−dq≤r/2 for some integer d has probability at least 1/3r2.
Eq. (5.13). If n2≤q, at most one fraction with denominator below n lies within 1/2q of c/q.
p. 1500. Such a fraction is a convergent of the continued fraction of c/q.
p. 1501. At least φ(r) values of c are within 1/2q of some d/r with gcd(d,r)=1; with the r distinct values of xk this gives at least rφ(r) states ∣c,xk⟩, and each such c gives us r.
Significance
The goal is the quantitative statement behind "order finding is in bounded-error quantum polynomial time": since φ(r)/r≥δ/loglogr for a constant δ (Hardy and Wright, Thm. 328), O(loglogr) repetitions find r with high probability, and Miller's reduction then factors n. Without the bound, the algorithm is a procedure with no guarantee.
The result is proved, in the paper and in textbooks (Nielsen and Chuang, 2000, §5.3), usually with a phase-estimation analysis rather than Shor's direct count. What this mission adds is a machine-checked proof of Shor's own argument, with his choice of q and his constants, starting from the state built by applying Aq to (5.2). Formal proofs of idealized versions exist elsewhere, for instance in the exact-period model where r divides q and the output is uniform on r peaks, but that model removes the approximation that the 1/3r2 bound is about. Legendre's theorem on continued fractions is already on the platform (FamousTheorems.legendre_continued_fraction_theorem) and is included as a reference item.
Difficulty
The obvious route is to compute the output distribution in closed form. That works only when r divides q; here q is a power of 2 and r is arbitrary, so the amplitudes are geometric sums of ⌊(q−k−1)/r⌋+1 terms whose phases do not cancel exactly. The per-state bound 1/3r2 requires a lower bound on such a sum that is uniform in r, c and k, with error terms of order 1/q controlled against a main term of order 1/r2. The constant 1/3 leaves only a small margin below the limiting value 4/π2≈0.405, so the errors must be bounded explicitly, not merely shown to vanish.
The second difficulty is the counting: distinct coprime numerators d must give distinct outcomes c in [0,q), and each good c must determine r uniquely, which uses r<n and n2≤q.
Formalization scope
Conventions the statements commit to:
States are functions Fin q × ZMod n → ℂ; the matrix convention is row = input, so applying Aq to the first register gives the amplitude ∑aψ(a,y)(Aq)a,c at (c,y).
The final state is built by applying Aq to the state (5.2); the closed forms (5.5) and (5.6) are theorems, not definitions. No normalization hypothesis is assumed.
Probabilities are squared moduli; the probability of the event "c gives us r" sums over all y∈Z/n, which is exact because y that are not powers of x have probability zero.
x is a natural number with gcd(x,n)=1; r is orderOf (x : ZMod n). q enters through the three hypotheses q=2l, n2≤q, q<2n2, not through a function of n.
Fractions are rationals, and "in lowest terms" is Rat.den.
Thresholds "for sufficiently large n" are ∃N,∀n≥N, with N quantified before x, q, c and k.
Condition (5.11) is stated in its equivalent form (5.12), with an integer d.
Printed slip. Eq. (5.13)'s justification says "Because q>n2", but q was chosen with n2≤q, and q=n2 when n is a power of 2. The uniqueness claim holds under n2≤q, and that is what is stated.
Typing the closed form (5.4)–(5.6) in as the definition of the final state would make milestone 1 trivial and hide whether the probability model is the paper's; the definitions exclude this by construction.
Not stated: the polynomial running time of any step, the O(loglogr) repetition count (no explicit constant), the reversible modular exponentiation of §3, and the post-processing heuristics on p. 1501. Needed infrastructure: bounds on geometric exponential sums, Euler's totient, Diophantine approximation by fractions with bounded denominator, and Mathlib's continued fractions. Lemmas on geometric sums of roots of unity and on the order of units mod n are reusable in the companion discrete logarithm mission.
Selected references
P. W. Shor, Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer, SIAM J. Comput. 26(5):1484–1509, 1997. https://doi.org/10.1137/S0097539795293172
Fast Algorithms for Finding Nearest Common Ancestors II: Nearest Common Ancestors in a Complete Binary Tree by Symmetric-Order ArithmeticResearch Paper
Motivation
The nearest common ancestor (nca) problem asks, for a fixed rooted tree and a sequence of vertex pairs (v,w), for the deepest vertex that is an ancestor of both. It is a basic step in suffix-tree string algorithms and is equivalent to range-minimum queries (Bender, Farach-Colton, 2000). Harel and Tarjan, Fast Algorithms for Finding Nearest Common Ancestors, SIAM J. Comput. 13 (1984) 338–355, gave the first algorithm answering each query on a static tree in constant time on a random-access machine after linear preprocessing.
Their construction reduces the general problem to the case of a complete binary tree, where §3 of the paper shows that nca queries can be answered "by direct calculation" on vertex numbers: multiplication, division, powers of two, the base-two logarithm and bitwise exclusive or. The later simplification of Schieber and Vishkin (1988) is built on the same in-order numbering of a complete binary tree. This mission formalizes that arithmetic core.
Timeline, as reviewed in the paper's §1 (pp. 338–340):
1976: Aho, Hopcroft and Ullman (SIAM J. Comput. 5) give an O(n+mα(m+n,n))-time off-line algorithm on a pointer machine, and for static trees a random-access algorithm with O(nloglogn) preprocessing and O(loglogn) time per query.
1976: van Leeuwen (unpublished report) gives an O(n+mloglogn)-time algorithm for linking roots and static trees that runs on a pointer machine in O(n) space.
1980: Harel (Proc. 21st FOCS) gives a preliminary version of the paper's results.
1984: Harel and Tarjan prove that pointer machines need Ω(loglogn) time per query on static trees (Theorem 1), and give the O(n)-preprocessing, O(1)-query random-access algorithm whose base case is the subject of this mission.
Setting
Fix d≥0 and let T be the complete binary tree of depth d. A vertex is identified with the path from the root to it, a word of at most d left or right turns; the root is the empty word and T has n=2d+1−1 vertices. Following the paper's Appendix (pp. 354–355):
w is an ancestor of v (v a descendant of w) if the word w is a prefix of the word v; every vertex is its own ancestor. v and w are unrelated if neither is an ancestor of the other.
The depth of v is its distance to the root; its heighth(v) is the length of the longest path from a leaf to v, which in T is d−depth(v).
nca(v,w) is the vertex of greatest depth that is an ancestor of both: the longest common prefix.
The vertices of T are numbered from 1 to n in symmetric order (in-order): at every vertex, first the left subtree, then the vertex, then the right subtree. sym(v) is the number of v and sym−1(i) the vertex numbered i. For d=4 (Fig. 1 of the paper) the root is 16, its children 8 and 24, and the leaves 1,3,5,…,31. i⊕j denotes bitwise exclusive or and lg the base-two logarithm.
Two procedures of §3 use only numbers, heights and d:
the nca depth algorithm: return d−h(v) if sym(w)∈[sym(v)−2h(v)+1,sym(v)+2h(v)−1]; else d−h(w) if the same holds with v,w exchanged; else d−⌊lg(sym(v)⊕sym(w))⌋;
the depth algorithm: given v and a depth d2≤depth(v), with h=d−d2, return sym−1(2h+1⌊sym(v)/2h+1⌋+2h).
Formalization targets
Goal: the nca algorithm is correct
The algorithm to compute nca(v,w) (p. 342) runs the nca depth algorithm to obtain d0 and then the depth algorithm on (v,d0). The goal states that it returns the nearest common ancestor: for all vertices v,w of T, with d0 the output of the nca depth algorithm and h=d−d0,
sym(nca(v,w))=2h+1⌊2h+1sym(v)⌋+2h.
Milestones
In the order the paper uses them:
Numbers at height h (p. 341): the vertices of height h are numbered 2h,3⋅2h,5⋅2h,… from left to right.
Lemma 1: h(v) is the largest h with 2h∣sym(v).
Lemma 2: the descendants of v are the vertices numbered in [sym(v)−2h(v)+1,sym(v)+2h(v)−1].
Lemma 3: for a height h≥h(v), the height-h ancestor of v has number 2h+1⌊sym(v)/2h+1⌋+2h.
Lemma 4: for unrelated v,w,
h(nca(v,w))=⌊lg(sym(v)⊕sym(w))⌋.
The nca depth algorithm returns depth(nca(v,w)).
The depth algorithm returns the number of the depth-d2 ancestor of v.
Two supporting statements pin the definitions to the paper: sym is a bijection onto {1,…,2d+1−1}, and the longest common prefix is the deepest common ancestor.
Significance
The constant-time nca computation on complete binary trees is the base case of the whole paper: §§4–5 embed an arbitrary tree into a moderately sized complete binary tree through a compressed tree and a balanced binary tree, and every query ends with the arithmetic of §3. The same idea, that in-order numbers encode ancestry in their low-order bits, underlies the Schieber–Vishkin algorithm. Lemma 1 identifies the height with the 2-adic valuation of the number, and Lemma 4 identifies the nca height with the position of the highest differing bit.
The results are proved in the paper, with the proofs left as "easy to verify". No machine-checked version of this numbering or of these four lemmas is known to exist in Mathlib or on this platform. A formal development supplies proofs of the four lemmas and the two algorithms, and a reusable library connecting in-order ranks of a complete binary tree to binary arithmetic (Nat.log, bitwise xor, 2-adic valuation).
Difficulty
The numbering is defined by a traversal order, while the lemmas speak about divisibility, floor division and exclusive or. The work lies in connecting the rank of a vertex in symmetric order to its closed form (2j+1)⋅2h(v), where j is its left-to-right position. That counting argument sums the sizes of the subtrees that precede v and is where most of the effort goes. Lemma 4 then needs the observation that two unrelated numbers agree in all bits above the height of their nca and differ in the bit at that height. This is a statement about Nat.testBit of the exclusive or, and it fails for related vertices. The algorithm statements add a case analysis whose first two cases overlap when v=w.
Formalization scope
A vertex of the tree of depth d is a List Bool of length at most d (false = left). Ancestry is the prefix relation, nca the longest common prefix, depth the length, and height d−length. None of these structural notions uses the numbering.
sym(v) is the number of vertices whose in-order sort key is lexicographically at most that of v. The key is the path with left ↦0, right ↦2, followed by 1. The numbering is not defined by the closed form or by a recursion on numbers: a definition of that kind would make the height-h numbering and Lemma 1 immediate and move the content of the mission into an uncheckable definition.
⌊lgx⌋ is Nat.log 2 x, which agrees for x≥1. ⊕ is ^^^ on N, and floor division is / on N.
Interval tests a∈[b−c+1,b+c−1] are written additively as b+1≤a+c and a+1≤b+c. The subtractions d−h(v) and d−d2 never truncate for heights and depths of vertices.
Lemma 3 states explicitly that h≤d ("h is a height") and that the ancestor exists. The depth algorithm assumes d2≤depth(v), as printed.
sym−1 is not defined as a function. The goal and the depth algorithm state that a vertex has the computed number if and only if it is the nearest common ancestor (respectively the ancestor at depth d2), which says that sym−1 of that number is that vertex.
The O(1) time bounds are not formalized, since the random-access machine model is out of scope.
Proofs of any milestone are welcome.
Selected references
D. Harel and R. E. Tarjan, Fast Algorithms for Finding Nearest Common Ancestors, SIAM J. Comput. 13(2) (1984), 338–355. https://doi.org/10.1137/0213024
A. V. Aho, J. E. Hopcroft and J. D. Ullman, On Finding Lowest Common Ancestors in Trees, SIAM J. Comput. 5(1) (1976), 115–132. https://doi.org/10.1137/0205011
B. Schieber and U. Vishkin, On Finding Lowest Common Ancestors: Simplification and Parallelization, SIAM J. Comput. 17(6) (1988), 1253–1262. https://doi.org/10.1137/0217079
The de Bruijn–Newman Constant is Non-negativeResearch Paper
Motivation
The Riemann hypothesis asserts that all nontrivial zeros of the Riemann zeta function lie on the critical line. A classical way to measure how far the hypothesis is from failing runs through a one-parameter deformation of the Riemann ξ function by the backward heat flow. De Bruijn (1950) introduced a family of entire functions Ht, t∈R, with H0 essentially the ξ function, and showed that Ht has only real zeros for t≥1/2. Newman (1976) proved that there is a finite constant Λ, now called the de Bruijn–Newman constant, such that Ht has only real zeros precisely when t≥Λ. The Riemann hypothesis is exactly the statement Λ≤0, and Newman conjectured the complementary bound Λ≥0 — in his phrase, that if the Riemann hypothesis is true, then it is only barely so.
Timeline of lower bounds on Λ, all obtained before 2018 by exhibiting Lehmer pairs, that is, pairs of adjacent zeros of ζ that are unusually close together: Λ>−∞ (Newman 1976), Λ≥−50 (Csordas–Norfolk–Varga 1988), Λ≥−5 (te Riele 1991), Λ≥−0.385 (Norfolk–Ruttan–Varga 1992), Λ≥−0.0991 (Csordas–Ruttan–Varga 1991), Λ≥−4.379×10−6 (Csordas–Smith–Varga 1994), Λ≥−5.895×10−9 (Csordas–Odlyzko–Smith–Varga 1993), Λ≥−2.63×10−9 (Odlyzko 2000), Λ≥−1.15×10−11 (Saouter–Gourdon–Demichel 2011). Rodgers and Tao closed the gap in 2020 by proving Λ≥0. In the other direction, de Bruijn's bound Λ≤1/2 was sharpened to Λ<1/2 by Ki–Kim–Lee (2009) and to Λ≤0.22 by the Polymath 15 project (2019).
Setting
For a real number u put
Φ(u):=n=1∑∞(2π2n4e9u−3πn2e5u)exp(−πn2e4u),
a function that decays super-exponentially as ∣u∣→∞ and satisfies Φ(u)=Φ(−u). For each t∈R define the entire function
Ht(z):=∫0∞etu2Φ(u)cos(zu)du.
Each Ht is even and satisfies Ht(zˉ)=Ht(z); the function H0 is 81ξ(21+2iz), so the Riemann hypothesis says exactly that every zero of H0 is real. Write
S:={t∈R:every zero of Ht is real},Λ:=infS.
By Pólya and Newman, S is the ray [Λ,∞) with −∞<Λ≤1/2.
When Λ<t≤0 the zeros of Ht are real, simple, symmetric about the origin and avoid the origin, so they can be listed as (xj(t))j∈Z∗, indexed by the nonzero integers, with 0<x1(t)<x2(t)<⋯ and x−j(t)=−xj(t). The classical locationsξj are defined for j≥1 by Ψ(ξj)=j with
Ψ(T):=4πTlog4πT−4πT,
extended by ξ−j=−ξj; they are the positions the zeros would occupy if the Riemann–von Mangoldt counting formula were exact. Throughout, log+x:=log(2+∣x∣).
Formalization targets
Goal — Newman's conjecture
Λ≥0,equivalentlyevery t with Ht having only real zeros satisfies t≥0.
The goal is stated in both forms simultaneously, so that it does not depend on any convention for the infimum of a set that might be empty or unbounded below.
Milestones
The milestone list follows the architecture of Rodgers–Tao, which is a proof by contradiction: every milestone is stated under the standing hypothesis Λ<0 of that paper, in the time ranges the paper uses (Λ<t≤0, then Λ/2≤t≤0, then Λ/4≤t≤0). In order: an upper bound for Ht near the real axis (Lemma 4); Riemann–von Mangoldt type counting formulae for the zeros of Ht (Theorem 9); the resulting macroscopic description of the zeros (Corollary 10); the equations of motion ∂txk=2∑j=k(xk−xj)−1 (Theorem 11); a quantitative lower bound on gaps between zeros (Proposition 13); a bound on the time-integrated renormalized energy (Theorem 17); and a bound on that energy at time t=0 (Proposition 26). The last of these says that at time zero the zeros are, on average, locally in the equilibrium configuration of an arithmetic progression, which contradicts known results on the local distribution of zeros of ζ.
Significance
Λ≥0 settles Newman's conjecture, and together with the Riemann hypothesis it would force Λ=0. Unconditionally, it says that the zeros of ξ are not in local equilibrium: infinitely often, gaps between consecutive zeros deviate from the mean spacing, which is what makes the pair correlation phenomenology of Montgomery and of Conrey–Ghosh–Goldston–Gonek–Heath-Brown incompatible with Λ<0. Any proof of the Riemann hypothesis must therefore be compatible with the hypothesis being tight in this sense.
The theorem has a complete published proof (Rodgers–Tao, Forum of Mathematics, Pi, 2020); it is not an open problem. What is missing is a machine-checked proof. To the extent the material has been formalized at all, the underlying objects — the ξ function, the heat flow Ht, the counting function for zeros, the zero dynamics, the renormalized energies — are not available in Mathlib, so the mission produces reusable analytic infrastructure: bounds for a Fourier–Laplace type integral by the saddle point method, a Riemann–von Mangoldt counting argument via the argument principle, and a gradient-flow monotonicity framework for an infinite particle system with logarithmic interaction.
Difficulty
The obvious route to Λ≥0 is the one used for every previous lower bound: exhibit Lehmer pairs of ever higher quality, since if Λ were very negative the zeros of H0 would repel each other and unusually close pairs of zeta zeros could not exist. Producing an infinite sequence of Lehmer pairs of arbitrarily high quality is possible under the GUE hypothesis, but the known unconditional upper bounds for small gaps between zeta zeros are too weak, even assuming the Riemann hypothesis. The proof instead upgrades repulsion to relaxation to local equilibrium: it must control the zeros of Ht uniformly for Λ<t≤0 at length scales as fine as logT, with only the weaker counting formulae available for negative t (an error term O(log+2T) rather than O(log+T)), and must make sense of a Hamiltonian and an energy that are given by divergent series, which requires truncation, renormalization, and careful control of all the resulting boundary terms.
Formalization scope
The Lean development commits to the following conventions. Φ is a tsum over the positive integers and Ht(z) is the Bochner integral over (0,∞) of etu2Φ(u)cos(zu); no convergence or entireness statement is built into the definition. Λ is sInf of the set of admissible times, and the goal theorem also states the quantifier form "every admissible t is nonnegative", so it cannot be satisfied by a junk value of the infimum. The zero families (xj(t)) and the classical locations (ξj) are not defined by choice functions: they enter the milestones as universally quantified functions Z→R subject to explicit predicates saying exactly which sequences they are, so a milestone asserts something about every valid enumeration. Asymptotic notation is unfolded: O(⋅) becomes an explicit existential constant, oT→∞(⋅) an explicit ε–T0 statement, and a principal value sum a limit of symmetric partial sums. Where a statement asserts the value of a time integral, absolute integrability is part of the conclusion, so the statement cannot be satisfied by the convention that a non-integrable function has integral zero.
One degeneracy is inherent to the source and is stated here explicitly: since the paper argues by contradiction, each milestone carries the hypothesis Λ<0 (directly, or through a time range such as Λ<t≤0). Once the goal theorem is proved, those hypotheses are unsatisfiable and the milestones become vacuously true. They are the intended attack path on the goal, not independent targets, and a solver who derives one of them from the goal theorem contributes nothing.
Contributions welcome: the analytic estimates for Ht (Lemma 4) and the counting formulae (Theorem 9) are independent of the dynamical part and are the natural entry points; Mathlib-level infrastructure on the argument principle, the saddle point method, and Stirling asymptotics for Γ in vertical strips is reusable well beyond this mission.
Selected references
B. Rodgers and T. Tao, The de Bruijn–Newman constant is non-negative, Forum of Mathematics, Pi 8 (2020), e6. https://doi.org/10.1017/fmp.2020.6
G. Csordas, W. Smith and R. S. Varga, Lehmer pairs of zeros, the de Bruijn–Newman constant Λ, and the Riemann hypothesis, Constr. Approx. 10 (1994), 107–129. https://doi.org/10.1007/BF01205170
H. L. Montgomery, The pair correlation of zeros of the zeta function, Proc. Sympos. Pure Math. XXIV (1973), 181–193. https://doi.org/10.1090/pspum/024
J. B. Conrey, A. Ghosh, D. Goldston, S. M. Gonek and D. R. Heath-Brown, On the distribution of gaps between zeros of the zeta-function, Q. J. Math. 36 (1985), 43–51. https://doi.org/10.1093/qmath/36.1.43
D. H. J. Polymath, Effective approximation of heat flow evolution of the Riemann ξ function, and a new upper bound for the de Bruijn–Newman constant, Res. Math. Sci. 6 (2019), 31. https://doi.org/10.1007/s40687-019-0193-1
25 thms3 active usersReviewed
🏆Completed
Captain: tianyipeng
FLT-5: Fermats Last Theorem for n=5Textbook
A complete formal proof of Fermats Last Theorem for exponent 5: for all positive natural numbers a,b,c, a^5 + b^5 != c^5. The proof follows the classical Legendre-Dirichlet approach (1825-1830): Case 1 (5 does not divide a,b,c) is dispatched by congruences, and Case 2 (5 divides one of them) uses infinite descent through the ring Z[zeta_5]. The open hard leaf is the Z[zeta_5] PID step (flt5_zeta5_ring_witnesses).
63 thms3 active usersReviewed
🏆Completed
Captain: xuanji
Every Odd Number Greater Than 1 is the Sum of at Most 351 PrimesResearch Paper
Motivation
Schnirelmann showed around 1930, by elementary means, that some absolute constant k makes every integer n>1 a sum of at most k primes. For odd n:
Schnirelmann (1930s): some finite k, by elementary methods.
Vinogradov (1937): every sufficiently large odd integer is a sum of three primes.
Ramaré (1995): every even integer is a sum of at most six primes, so every odd n>1 is a sum of at most seven. (Ann. Sc. Norm. Super. Pisa, 1995)
Helfgott (2013): every odd n>5 is a sum of three primes. (arXiv:1312.7748)
The campaign's first proved value, 100001, came from Schnirelmann's method with every constant written out. This entry records a sharper value, 351, from the same elementary circle of ideas.
Setting
A representation of n as a sum of at most k primes is a finite multiset of primes summing to n with at most k elements counted with multiplicity. The Schnirelmann density of A⊆Z≥0 is σ(A)=infN≥1∣A∩{1,…,N}∣/N (Mathlib: schnirelmannDensity).
Formalization target
Goal
∀n∈N,n odd,n>1⟹∃s multiset of primes,∣s∣≤351,∑s=n.
This is the campaign template with the value 351 filled in. The source proves the stronger statement that every odd n≥703 is a sum of exactly351 primes; the at-most form for all odd n>1 follows.
How the bound arises
It uses the same density estimate as the companion 485 entry, σ(A)≥1/175 for A=B+B with B={(p−3)/2:p odd prime} (explicit Selberg sieve, weighted first moment, eighth moment of the singular-series factor, Hölder). It then replaces Schnirelmann's sumset inequality by Mann's theorem, σ(D+E)≥min{1,σ(D)+σ(E)} for sets containing 0:
Mann's theorem gives 175A=Z≥0, so 350B=Z≥0.
For odd n≥3K=1053, write (n−3K)/2 as a sum of 350 elements of B and add one more 3, giving K=351 primes.
For 703≤n<1053, use n−2K threes and 3K−n twos.
Significance
The bound is far weaker than Tao's 5 or Helfgott's 3, but it rests on an elementary argument with no "sufficiently large" threshold and no prime number theorem, so it is a realistic target for a complete formalization and a large step down from 100001. Reusable components:
Explicit Chebyshev-type lower bound for π(y).
Explicit Selberg upper-bound sieve for r(s) with threshold e100.
The eighth-moment bound ∑s≤xC(s)8≤800000x.
Mann's theorem (αβ theorem) on Schnirelmann density.
Formalization scope
The Lean statement is the campaign template verbatim with 351 in place of the value. Mathlib already has schnirelmannDensity, the Λ² Selberg sieve setup (Mathlib/NumberTheory/SelbergSieve.lean) and central-binomial bounds.
Helfgott (2013): every odd n>5 is a sum of three primes. (arXiv:1312.7748)
The campaign's first proved value, 100001, came from Schnirelmann's method with every constant written out. This entry records a sharper value, 485, from the same elementary circle of ideas.
Setting
A representation of n as a sum of at most k primes is a finite multiset of primes summing to n with at most k elements counted with multiplicity. The Schnirelmann density of A⊆Z≥0 is σ(A)=infN≥1∣A∩{1,…,N}∣/N (Mathlib: schnirelmannDensity).
Formalization target
Goal
∀n∈N,n odd,n>1⟹∃s multiset of primes,∣s∣≤485,∑s=n.
This is the campaign template with the value 485 filled in. The source proves the stronger statement that every odd n≥971 is a sum of exactly485 primes; the at-most form for all odd n>1 follows.
How the bound arises
It keeps the explicit Selberg sieve and Schnirelmann's original sumset inequality from the 100001 entry, and improves only the density estimate:
Lower sieve threshold. With z=s/(logs)2 the sieve gives r(s)≤13C(s)s/(logs)2 for even s≥e100, where C(s)=∏p∣s(1+p/(p−1)2).
Weighted first moment. Counting over the whole triangle p+q≤x and weighting by (logs)2/s gives ∑e100<s≤xr(s)(logs)2/s≥10043x for x≥e200.
Eighth moment of C. An Euler-product estimate (primes 3,5,7 handled individually, the tail bounded at once) gives ∑s≤x,2∣sC(s)8≤800000x.
Hölder instead of Cauchy–Schwarz. This yields #{s≤x:r(s)>0}≥x/345 for x≥e200, and with Chebyshev's bound for smaller scales, σ(A)≥1/175 for A=B+B, B={(p−3)/2}.
Schnirelmann's inequality with m=121 (since (174/175)121<1/2) gives 242A=Z≥0, hence K=4m+1=485.
Only Chebyshev-type prime bounds, the Selberg upper-bound sieve, Hölder's inequality and Schnirelmann's inequality are used.
Significance
The bound is far weaker than Tao's 5 or Helfgott's 3, but it rests on an elementary argument with no "sufficiently large" threshold and no prime number theorem, so it is a realistic target for a complete formalization and a large step down from 100001. Reusable components:
Explicit Chebyshev-type lower bound for π(y).
Explicit Selberg upper-bound sieve for r(s) with threshold e100.
The Lean statement is the campaign template verbatim with 485 in place of the value. Mathlib already has schnirelmannDensity, the Λ² Selberg sieve setup (Mathlib/NumberTheory/SelbergSieve.lean) and central-binomial bounds.
Helfgott (2013): every odd n>5 is a sum of three primes. (arXiv:1312.7748)
The campaign's first proved value, 100001, came from Schnirelmann's method with every constant written out. This entry records a sharper value, 973, from the same elementary circle of ideas.
Setting
A representation of n as a sum of at most k primes is a finite multiset of primes summing to n with at most k elements counted with multiplicity. The Schnirelmann density of A⊆Z≥0 is σ(A)=infN≥1∣A∩{1,…,N}∣/N (Mathlib: schnirelmannDensity).
Formalization target
Goal
∀n∈N,n odd,n>1⟹∃s multiset of primes,∣s∣≤973,∑s=n.
This is the campaign template with the value 973 filled in. The source proves the stronger statement that every odd n≥1947 is a sum of exactly973 primes; the at-most form for all odd n>1 follows.
How the bound arises
It keeps the explicit Selberg sieve and Schnirelmann's original sumset inequality from the 100001 entry, and improves the density estimate:
Lower sieve threshold. With z=s/(logs)2 the sieve gives r(s)≤13C(s)s/(logs)2 for even s≥e100.
Weighted first moment of at least 10043x for x≥e200.
Fourth moment of C. An Euler-product estimate gives ∑s≤x,2∣sC(s)4≤400x.
Hölder then yields σ(A)≥1/350 for A=B+B, B={(p−3)/2}.
Schnirelmann's inequality with m=243 (the least m with (349/350)m<1/2) gives K=4m+1=973.
Significance
The bound is far weaker than Tao's 5 or Helfgott's 3, but it rests on an elementary argument with no "sufficiently large" threshold and no prime number theorem, so it is a realistic target for a complete formalization and a large step down from 100001. Reusable components:
Explicit Chebyshev-type lower bound for π(y).
Explicit Selberg upper-bound sieve for r(s).
Moment bounds for the singular-series factor C(s).
The Lean statement is the campaign template verbatim with 973 in place of the value. Mathlib already has schnirelmannDensity, the Λ² Selberg sieve setup (Mathlib/NumberTheory/SelbergSieve.lean) and central-binomial bounds.
Explicit improvement of the 100001 constant (unpublished AI-assisted calculation, October 2026). Source of the constant 973; not peer reviewed.
6 thms2 active usersReviewed
🏆Completed
Captain: xuanji
The irrationality measure of π is at most 19.8899945 (Chudnovsky 1982)Research Paper
Motivation
The irrationality measure μ(π) is the supremum of the μ for which ∣π−p/q∣<q−μ has infinitely many rational solutions p/q. Every irrational number has μ≥2 (Dirichlet), almost every real number has μ=2, and it is conjectured that μ(π)=2. Known upper bounds:
Mahler (1953):42, the first proof that π is not a Liouville number.
Mignotte (1974):20.6.
Chudnovsky (1982):19.8899944…
Rhin–Viola (1993):14.797074.
Hata (1993):8.016045…
Salikhov (2008):7.606308…
Zeilberger–Zudilin (2020):7.103205334137…, the current record.
The campaign's first proved value is Mahler's 42. This entry records Chudnovsky's bound.
Formalization target
The campaign template with the value 19.8899945 filled in: PiIrrationality.UpperBound (19.8899945 : ℝ), i.e. μ(π)≤19.8899945.
Value. The bound is quoted in the literature as 19.8899944… (e.g. Hata 1993), a truncation. This entry rounds the last digit up to 19.8899945 so that the goal follows from the published constant.
How the bound arises
Chudnovsky determined the exact asymptotic behaviour of the Hermite-type contour integrals 2πi1∮(z(z−1)⋯(z−n)n!)kewzdz behind Mahler's approximations, which sharpens the resulting exponent.
Significance
Each step down the list replaces Mahler's approximations with a sharper family. Formalizing 19.8899945 would build reusable explicit machinery: integral constructions of rational approximations to π, bounds on their common denominators via prime-number estimates, and the standard lemma turning a sequence of good approximations into an irrationality-measure bound.
Selected references
G. V. Chudnovsky, Hermite–Padé approximations to exponential functions and elementary estimates of the measure of irrationality of π, Lecture Notes in Math. 925, Springer (1982), 299–322.
K. Mahler, On the approximation of π, Indag. Math. 15 (1953), 30–42.
F. Beukers, A rational approach to π, Nieuw Arch. Wiskd. (5) 1 (2000), 372–379.
The irrationality measure of π is at most 20.6 (Mignotte 1974)Research Paper
Motivation
The irrationality measure μ(π) is the supremum of the μ for which ∣π−p/q∣<q−μ has infinitely many rational solutions p/q. Every irrational number has μ≥2 (Dirichlet), almost every real number has μ=2, and it is conjectured that μ(π)=2. Known upper bounds:
Mahler (1953):42, the first proof that π is not a Liouville number.
Mignotte (1974):20.6.
Chudnovsky (1982):19.8899944…
Rhin–Viola (1993):14.797074.
Hata (1993):8.016045…
Salikhov (2008):7.606308…
Zeilberger–Zudilin (2020):7.103205334137…, the current record.
The campaign's first proved value is Mahler's 42. This entry records Mignotte's bound.
Formalization target
The campaign template with the value 20.6 filled in: PiIrrationality.UpperBound (20.6 : ℝ), i.e. μ(π)≤20.6.
Value. The paper's abstract states ∣π−p/q∣>q−20.6 for all q≥2, which gives μ(π)≤20.6 exactly as stated. The paper also proves ∣π−p/q∣>q−20 for q≥q0 (explicit), so μ(π)≤20 follows from the same source; this entry uses the table value 20.6.
How the bound arises
Mignotte refined Mahler's method of explicit rational approximations to π (Hermite's approximation formulae for the exponential and logarithm) and sharpened the estimates that turn their size and denominators into an irrationality measure.
Significance
Each step down the list replaces Mahler's approximations with a sharper family. Formalizing 20.6 would build reusable explicit machinery: integral constructions of rational approximations to π, bounds on their common denominators via prime-number estimates, and the standard lemma turning a sequence of good approximations into an irrationality-measure bound.
Selected references
M. Mignotte, Approximations rationnelles de π et quelques autres nombres, Mém. Soc. Math. France 37 (1974), 121–132. https://doi.org/10.24033/msmf.139
K. Mahler, On the approximation of π, Indag. Math. 15 (1953), 30–42.
F. Beukers, A rational approach to π, Nieuw Arch. Wiskd. (5) 1 (2000), 372–379.
Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer 4: The Discrete Logarithm Circuit Gives a Good Output with Probability at Least 1/480Research Paper
Motivation
The discrete logarithm problem modulo a prime asks, given a prime p, a generator g of the multiplicative group modulo p, and a nonzero residue x, for the exponent r with gr≡x(modp). Its presumed classical hardness underlies Diffie–Hellman key exchange, ElGamal encryption and the Digital Signature Algorithm. The best classical algorithm known when Shor wrote, Gordon's adaptation of the number field sieve, runs in time exp(O((logp)1/3(loglogp)2/3)).
In §6 of Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer (SIAM J. Comput. 26(5), 1997; doi:10.1137/S0097539795293172, arXiv:quant-ph/9508027), Shor gave a quantum algorithm that uses two modular exponentiations and two quantum Fourier transforms and outputs, with constant probability, a pair from which r can be computed. The quantitative core of that analysis is a single number: the circuit produces a "good" output with probability at least 1/480. This mission formalizes that bound and the three estimates it is assembled from.
Setting
Let p be a prime and g a generator of (Z/pZ)×, so that 1,g,…,gp−2 are all the nonzero residues. Fix the unknown r with 0≤r<p−1 and put x=gr. Let q=2l be the power of 2 with p<q<2p.
The Fourier matrixAq is the q×q matrix with entries (Aq)a,c=q−1/2exp(2πiac/q) for 0≤a,c<q (§4, eq. (4.1)). Rows index input basis vectors and columns output basis vectors.
The algorithm uses three registers: two holding numbers 0≤a,b<q and one holding a nonzero residue modulo p. It starts from the state
p−11a=0∑p−2b=0∑p−2∣a,b,gax−b(modp)⟩(6.1)
(preFourierState), applies Aq to each of the first two registers (finalState), and measures all three registers. The probability of observing ∣c,d,y⟩ is the squared modulus of its amplitude (outcomeProb).
For integers z and q>0, the symmetric residue{z}q is the residue of z modulo q in (−q/2,q/2] (symmRes). Put
T=rc+d−p−1r{c(p−1)}q.
An observed state ∣c,d,y⟩ is good (IsGood) when
∣{T}q∣≤21(6.10)and∣{c(p−1)}q∣≤q/12(6.11).
Goodness depends only on (c,d).
Formalization targets
Goal: a good output with probability at least 1/480 (§6, p. 1504)
0≤c,d<q(c,d)good∑y∈(Z/p)×∑Pr[c,d,y]≥4801.
The constant is the one the page carries forward. The goal fixes no threshold on p: it is stated for every prime p that admits a power of two strictly between p and 2p.
Each good state is likely, eq. (6.17). If (c,d) is good, then Pr[c,d,y]≥1/(20q2) for every y.
Many good pairs (p. 1504). At least q/12 pairs (c,d) are good.
Each good c is likely (p. 1504). If (c,d) is good for some d, then ∑d′,yPr[c,d′,y]≥(p−1)/(20q2)≥1/(40q).
Significance
The result. The bound 1/480 is what turns the circuit into an algorithm. Repeating the circuit O(1) times in expectation yields a good output, and from a good pair (c,d) one reads off an equation that determines r modulo divisors of p−1 (§6, eqs. (6.18)–(6.20)). Together with the quantum Fourier transform circuit and reversible modular exponentiation, this places the discrete logarithm modulo a prime in quantum polynomial time. Every later analysis of quantum attacks on discrete-logarithm cryptography starts from this success probability or a sharpened version of it.
Formalizing it. The result has been proved since 1994–1997 and is textbook material; it is not open. As far as is known, no machine-checked proof of Shor's discrete-logarithm analysis exists. The paper's proof of eq. (6.17) replaces a sum by an integral with an error term O(W/(pq)) whose constant is not given, yet states 1/(20q2) for every prime. A formal proof must therefore either control that error explicitly or find another argument, and so settles a point the paper leaves informal. Numerically, the smallest value of q2Pr[c,d,y] over good states is about 0.49 for all primes p<90, so the unconditional claim is not in doubt for small p. The page also contains two small slips, recorded under Formalization scope; a complete development pins down exactly what is true.
Difficulty
The exponential sum (6.4) runs over pairs (a,b) satisfying a congruence modulo p−1, while the phases are taken modulo q. The two moduli are unrelated: q is a power of two and p−1 is arbitrary. Eliminating a through the congruence introduces a floor function ⌊(br+k)/(p−1)⌋, and the resulting phase is not linear in b. The obvious estimate treats the sum as a geometric series in b and bounds it by its first-order phase; this fails because the floor term perturbs every phase by an amount of size up to ∣{c(p−1)}q∣. Condition (6.11) only keeps this perturbation within π/6 of the main phase; it does not remove it. The per-state bound must survive this perturbation uniformly in p, r and k, including small primes where the paper's integral approximation gives no explicit control.
The count of good pairs needs a separate argument about how often a multiple c(p−1) lies within q/12 of a multiple of q when gcd(p−1,q) is large.
Formalization scope
States are functions Fin q × Fin q × (ZMod p)ˣ → ℂ. The first two registers range over {0,…,q−1}; the third over the units modulo p.
Matrix convention. Following §2, rows are inputs, so the amplitude of ∣c,d,y⟩ after the transforms is ∑a,bψ(a,b,y)(Aq)a,c(Aq)b,d. finalState is defined this way from (6.1) and Aq. It is not typed in as the closed form (6.3) or (6.4). A formalization that defined the final state by (6.4) directly would make milestone 1 trivial, and is ruled out.
Probability of a basis state is the squared norm of its amplitude, with no normalization hypothesis.
Parameters.p is prime (Fact p.Prime). The generator is encoded as orderOf g = p - 1. r<p−1 is a parameter, with x=gr. q is given by q = 2 ^ l together with p<q<2p. No large-p threshold is added anywhere.
Arithmetic.x−b is x⁻¹ ^ b in the unit group. p−1 is computed in Z and R inside T and the congruences, and as natural-number subtraction only where p≥2 makes it exact. T is real.
Condition (6.10) is stated as "some integer j has ∣T−jq∣≤21". Because q≥4, this is equivalent to the page's form with j the closest integer to T/q.
Not formalized. The preparation of (6.1) by testing and restarting is not formalized; the state (6.1) is taken as displayed. The printed test "whether the number is less than p" should read p−1, as the sums in (6.1) show. Also out of scope: the recovery of r (eqs. (6.18)–(6.20)), the repetition count "480t", and all running-time claims.
Printed slips.
The page asserts that for each c there is exactly oned satisfying (6.10). At a tie {T}q=±21 there can be two such d. Milestone 3 states only the count, which needs at least one.
The page's intermediate bound "at least p/(240q)" should be (p−1)/(240q). The conclusion 1/480 is unaffected, since q and 2p are both even and so q≤2(p−1). Only 1/480 is stated.
Needed infrastructure: finite exponential sums and their modulus, the symmetric residue and its basic properties, and counting multiples in residue classes of Z/q. The exponential-sum estimates of milestones 1 and 2 are reusable in the order-finding analysis of §5 of the same paper. Proofs of any milestone, of the normalization ∑Pr=1, and of auxiliary lemmas about symmRes are welcome.
Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer 2: Factoring from a Random ResidueResearch Paper
Motivation
Shor's 1997 paper (SIAM J. Comput. 26(5), arXiv:quant-ph/9508027) gives a polynomial-time quantum algorithm for factoring integers. The quantum computer does not factor directly: it finds the multiplicative order of an element modulo n. The step from order finding to factoring is classical and randomized, and goes back to Miller's 1976 work on primality testing (G. L. Miller, Riemann's hypothesis and tests for primality, J. Comput. System Sci. 13 (1976)). Every account of Shor's algorithm, and every resource estimate for breaking RSA with a quantum computer, depends on this reduction succeeding with a constant probability per trial. This mission formalizes that probability bound as Shor states it on p. 1498 of the published paper.
Setting
Let n>1 be an odd integer with prime factorization
n=i=1∏kpiαi,
so k is the number of distinct prime factors of n, all odd. The unit group(Z/nZ)× consists of the residues coprime to n; it has φ(n) elements, where φ is Euler's totient function.
For a unit x the orderr=ordn(x) is the least positive integer with xr≡1(modn). For each i the local orderri is the order of xmodpiαi, taken modulo the full prime power, not modulo pi. For a positive integer m, ν2(m) denotes the exponent of the largest power of 2 dividing m.
The reduction is: choose x uniformly at random from (Z/nZ)×, obtain its order r (from the quantum subroutine), and compute
g(x)=gcd(xr/2−1,n).
The procedure yields a nontrivial factor at x when r is even and 1<g(x)<n. In Lean this event is ShorAlgorithms.Reduction.successEvent n u for u : (ZMod n)ˣ, and ri is localOrder n u p for p ∈ n.primeFactors.
Formalization targets
Goal: the success probability
x∈(Z/n)×Pr[r even and 1<gcd(xr/2−1,n)<n]≥1−2k−11.
It is stated for every odd n>1. For a prime power (k=1) the bound is 0, so the statement says nothing there; it is informative exactly when n is not a prime power, as the paper remarks. The constant is sharp: for n=21 exactly 6 of the 12 units succeed, so 1−1/2k in place of 1−1/2k−1 would be false.
Milestones, in the order the page uses them
Success criterion. If r is even and xr/2≡−1(modn), then 1<gcd(xr/2−1,n)<n.
Order is the lcm.r=lcm(r1,…,rk).
Failure forces agreement. For odd n, if the procedure fails at x, then ν2(r1)=⋯=ν2(rk).
At most half per odd prime power. For an odd prime p and α≥1, at most φ(pα)/2 units modulo pα have order with a prescribed 2-adic valuation.
All agree rarely. The units for which ν2(r1)=⋯=ν2(rk) number at most φ(n)/2k−1.
Significance
The result. The bound turns an order-finding oracle into a factoring algorithm: when n is odd and not a prime power, each trial succeeds with probability at least 1/2, so t independent trials all fail with probability at most 2−t. Even numbers and prime powers are split classically, as the paper notes, so the bound completes the reduction from factoring to order finding. The same criterion — a square root of 1 other than ±1 splits n — underlies the Miller–Rabin test and several classical factoring methods.
Formalizing it. The mathematics is classical and proved; the paper gives a sketch of one paragraph. This mission writes out the sketch as machine-checked statements over Mathlib's ZMod, including the probabilistic step, which in the paper is an informal appeal to the Chinese remainder theorem and "50% probability of agreeing with the previous ones". Mathlib already has the needed ingredients (cyclicity of (Z/pα)× for odd p, ZMod.chineseRemainder, ZMod.card_units_eq_totient), but not the reduction or its probability bound.
Difficulty
The success criterion (milestone 1) is elementary. The substance is the counting. The obvious route — treating the ν2(ri) as independent and each "equal to the previous one with probability 1/2" — needs both a precise product decomposition of the unit group modulo n into the unit groups modulo piαi, compatible with the local orders, and the count in a cyclic group of even order of the elements whose order has a given 2-adic valuation. The informal phrase "at most a 50% probability of agreeing with the previous ones" hides a conditioning argument over k−1 coordinates that has to be done by an explicit cardinality bound. A second pitfall is milestone 3: its converse direction and its forward direction use oddness of n in different places, and modulo a power of 2 the argument breaks because −1≡1(mod2).
Formalization scope
Sample space. Uniform on (ZMod n)ˣ; probabilities are stated in cleared-denominator form, (1−2−(k−1))φ(n)≤#{successes} in R, with the count as Nat.card of a subtype. Non-units have no multiplicative order and are not sampled.
The gcd.xr/2 is represented by its least nonnegative residue .val, which is at least 1 for a unit when n>1, so the natural-number subtraction in val - 1 never truncates. r/2 is natural-number division, used only under Even r.
k.n.primeFactors.card, at least 1 for n>1, so k - 1 does not truncate. Since n is odd this equals the page's "number of distinct odd prime factors".
Local orders. The order of the image of x in ZMod (p ^ n.factorization p) under the reduction homomorphism.
Hypotheses. The goal assumes exactly n odd and n>1. It does not assume "not a prime power": that clause in the paper describes when the bound is useful. Milestones 1 and 2 do not assume n odd, because they do not need it; milestones 3 and 5 do.
No trivialization. Counting over all of ZMod n instead of the units would put non-units (with junk order 0) into the denominator; the goal counts over (ZMod n)ˣ and divides by φ(n). The goal's constant is the paper's 1−1/2k−1, which is attained, so it cannot be weakened into a triviality without changing the theorem.
Welcome contributions. A reusable counting lemma for elements of prescribed 2-adic order in a finite cyclic group; the transfer of ZMod.chineseRemainder to unit groups and to local orders; and proofs of the milestones in any order.
D. E. Knuth, The Art of Computer Programming, Vol. 2: Seminumerical Algorithms, 2nd ed., Addison-Wesley, 1981.
G. H. Hardy and E. M. Wright, An Introduction to the Theory of Numbers, 5th ed., Oxford University Press, 1979 (Theorem 121, Chinese remainder theorem).
Gelbart's Langlands Survey I: Hecke's Correspondence between Automorphic Forms and Dirichlet SeriesResearch Paper
Motivation
The Langlands program proposes that the arithmetic of number fields is encoded in the
representation theory of reductive groups over their adele rings. Its conjectures — reciprocity
and functoriality — are stated in the survey this mission formalizes,
Gelbart 1984, only after a long preparatory
part on the classical results they generalize, and it is that classical part (Part II of the
survey) that admits precise formal statements today.
The classical engine is a theorem of Hecke (1936): a holomorphic function on the upper
half-plane, given by a Fourier expansion in e2πinz/h, transforms in a prescribed way
under z↦−1/zexactly when the Dirichlet series built from its Fourier coefficients
continues analytically and satisfies a functional equation. One side of the equivalence is a
symmetry of an analytic object on the upper half-plane; the other is an analytic property of a
series assembled from arithmetic data. Gelbart presents this as the prototype of the
"reciprocity" that the Langlands conjectures extend to GLn and beyond.
Timeline of the material covered here.
1859: Riemann derives the functional equation of ζ(s) from the transformation law of the
Jacobi theta function, via the Mellin transform (Gelbart, §II.B.2, p. 187).
1920s: Hasse and Minkowski establish the local-global principle for rational quadratic forms
(Gelbart, §II.A, p. 186).
1936: Hecke proves the equivalence that is this mission's goal, and characterizes Euler
products among Dirichlet series of automorphic forms (Gelbart, §II.B.2, Theorems 1 and 2).
1967: Weil extends Hecke's theorem to congruence subgroups; Langlands formulates functoriality.
Setting
Fix a sequence of complex numbers a0,a1,a2,… subject to the growth condition
an=O(nc) for some c>0, a period h>0, a weight k>0, and a sign C=±1.
Three objects are attached to this data.
The form: f(z)=n≥0∑ane2πinz/h, holomorphic on the
upper half-plane {z:Imz>0}.
The Dirichlet series: φ(s)=n≥1∑nsan,
absolutely convergent for Res>c+1.
The completed series:
Φ(s)=(h2π)−sΓ(s)φ(s).
Two conditions on this data are compared.
(A)Φ(s)+sa0+k−sCa0extends to an entire function, bounded in every vertical strip, andΦ(k−s)=CΦ(s).(B)f(−1/z)=C(iz)kf(z)(Imz>0).
Condition (B) says that f is automorphic of weight k for the group of transformations
generated by z↦z+h and z↦−1/z; invariance under z↦z+h is built
into the Fourier expansion.
Formalization targets
Goal — Theorem 1 (Hecke), p. 188
(A)⟺(B)
for every coefficient sequence of polynomial growth and all h,k>0, C=±1. The goal
fixes no particular group, no level and no arithmetic input: it is the general equivalence, from
which the classical examples follow by specialization.
Milestones
The milestone list follows the survey: the local-global principle of §II.A, the Riemann–theta
computation that motivates Hecke's proof (§II.B.2, p. 187), the Mellin representation of Φ,
the two implications of Theorem 1 separately, and the Euler-product criterion of Theorem 2
(p. 189).
Significance
Hecke's theorem is what makes "this L-function is automorphic" a checkable assertion: it
converts a statement about analytic continuation and a functional equation — often the only
handle one has on an arithmetically defined Dirichlet series — into the existence of an
automorphic form with prescribed Fourier coefficients. Weil's converse theorem, the modularity of
elliptic curves, and the automorphy criteria used throughout the Langlands program are
descendants of this statement. Downstream of it sit the classical applications listed in the
survey: the functional equations of ζ and of Dirichlet L-functions, and the
identification of theta series of quadratic forms with modular forms.
Status. Hecke's theorem is a classical, fully proved result (Hecke 1936; a textbook treatment is
Ogg, Modular forms and Dirichlet series, Ch. 1). Hasse–Minkowski is likewise classical. Neither
has a formalization in Mathlib at the pinned revision: Mathlib supplies the completed Riemann
zeta function and its functional equation, the Jacobi theta transformation law, LSeries and its
abscissa theory, the Gamma function and the Mellin transform, and modular forms with
SlashAction, but no converse theorem and no local-global principle for quadratic forms. What
this mission produces is therefore new formal mathematics on top of an old result, not a
re-derivation of something already machine-checked.
Difficulty
The forward implication (B) ⇒ (A) is Riemann's argument: split
∫0∞(f(iy)−a0)ys−1dy at y=1, substitute y↦1/y in the lower
piece, and use (B). The obstacle is not the algebra but the analysis that licenses it: exchanging
the sum defining f with the integral, controlling f(iy)−a0 as y→0+, where the
naive termwise bound diverges, and showing the result is entire and bounded on vertical strips
rather than merely holomorphic on a half-plane.
The reverse implication (A) ⇒ (B) is harder, and it is where the first idea fails: one
cannot simply run the computation backwards, because the Mellin inversion integral
2πi1∫(σ)Φ(s)y−sds converges only once boundedness in vertical
strips is combined with Stirling decay of Γ, and the contour shift that produces the a0
terms needs both. Mathlib has the Mellin transform and an inversion theorem, under hypotheses that
are not met verbatim here; supplying that bridge is the main work.
Formalization scope
Conventions committed to in Lean, all of them invisible in the prose.
f is defined as an unconditional tsum over n≥0, so it takes the junk value 0 where
the series fails to converge; every statement about f is guarded by Imz>0,
and a separate item asserts summability there.
φ is Mathlib's LSeries, whose n=0 term is 0 by definition, so a0 never enters
the Dirichlet series — only the correction terms a0/s and Ca0/(k−s).
"Entire" is rendered as differentiability on all of C; "bounded in every vertical
strip" as: for all reals σ1,σ2 there is an M bounding the function on
σ1≤Res≤σ2.
The functional equation is imposed on the continued function F as F(k−s)=CF(s); for
C=±1 this is equivalent to Φ(k−s)=CΦ(s) on the half-plane of convergence.
Complex powers (2π/h)−s, (z/i)k and ys−1 are principal-branch cpow; on the
upper half-plane z/i has positive real part, so no branch ambiguity arises.
The growth hypothesis is ∥an∥≤Knc for n≥1 with c>0, and the
abscissa used throughout is σ=c+1.
The printed source reads Φ(s)+a0/s+C/(k−s); the term Ca0/(k−s) used here is the
standard form of the correction (see Ogg, Ch. 1), and the two agree when a0=0.
No trivializing reading is available: condition (A) requires the entire function to agree withΦ(s)+a0/s+Ca0/(k−s) on Res>c+1, where Φ is genuinely defined,
so it is not satisfied by an arbitrary entire function; and the hypotheses of the goal are
satisfiable — the Jacobi theta coefficients with h=2, k=1/2, C=1 are an instance,
recorded as its own item.
A complete development needs: summability and holomorphy of q-expansions of polynomial growth;
the Mellin transform of an exponentially decaying series; entirety and strip-boundedness of the
continued Φ; Mellin inversion with Stirling control of Γ; and, for the Euler-product
item, the passage from multiplicativity to an Euler product for LSeries. All of these are
reusable beyond this mission. Contributions to any single item are welcome; the two implications
of the goal are independently valuable and are listed as separate milestones for that reason.
E. Hecke, Über die Bestimmung Dirichletscher Reihen durch ihre Funktionalgleichung, Math. Ann.
112 (1936), 664–699. https://doi.org/10.1007/BF01565437
A. Ogg, Modular forms and Dirichlet series, W. A. Benjamin, 1969.
R. P. Langlands, Problems in the theory of automorphic forms, Lectures in Modern Analysis and
Applications III, Lecture Notes in Math. 170 (1970), 18–61.
https://doi.org/10.1007/BFb0079065
J.-P. Serre, A course in arithmetic, Springer GTM 7, 1973 (Ch. IV: Hasse–Minkowski).