The book is discriminative almost throughout: it learns predictors, not distributions, following Vapnik's advice not to solve a more general problem as an intermediate step. Chapter 24 of Shalev-Shwartz and Ben-David, Understanding Machine Learning: From Theory to Algorithms (doi:10.1017/CBO9781107298019), presents the generative alternative: assume a parametric form for the data distribution and estimate its parameters. The maximum likelihood principle is introduced on Bernoulli and Gaussian samples, shown to be empirical risk minimization for the log-loss, and analyzed through the decomposition of the true log-loss risk into a relative entropy plus an entropy (24.5), which explains both its consistency under a correct model and its overfitting on small samples. Naive Bayes and linear discriminant analysis show how generative assumptions reduce the number of parameters and make the Bayes classifier linear (24.8). The chapter's main theorem concerns the Expectation-Maximization algorithm of Dempster, Laird and Rubin for latent-variable models such as Gaussian mixtures: EM never decreases the log-likelihood (Theorem 24.3), because it is an alternate maximization of a lower bound G(Q,θ) that touches the likelihood at the posterior (Lemma 24.2). The chapter ends with Bayesian reasoning and the rule of succession.
Setting
A Bernoulli sample S=(x1,…,xm) has log-likelihood L(S;θ)=log(θ)∑ixi+log(1−θ)∑i(1−xi) and estimator θ^=m1∑ixi (24.1); a Gaussian sample has L(S;(μ,σ))=−2σ21∑i(xi−μ)2−mlog(σ2π). The log-loss is ℓ(θ,x)=−logPθ[x] (24.4); on a finite domain, DRE[P∥Q]=∑xP[x]log(P[x]/Q[x]) and H(P)=∑xP[x]log(1/P[x]). A latent-variable model is a parametric joint Pθ[X=x,Y=y], y∈[k], with L(θ)=∑ilog∑yPθ[X=xi,Y=y]; F(Q,θ)=∑i∑yQi,ylogPθ[X=xi,Y=y], G(Q,θ)=F(Q,θ)−∑i∑yQi,ylogQi,y over the set Q of row-stochastic matrices, and EM alternates the E-step Qi,y(t+1)=Pθ(t)[Y=y∣X=xi] (24.10) with the M-step θ(t+1)∈argmaxθF(Q(t+1),θ) (24.11).
Formalization targets
Goal: Theorem 24.3
For a positive parametric joint Pθ[X=x,Y=y], a sample x1,…,xm, and any run θ(0),θ(1),… of EM (each M-step returning some maximizer of F(Q(t+1),⋅)), the log-likelihood never decreases:
L(θ(t+1))≥L(θ(t))for all t.
Milestones
Equation (24.2) (Hoeffding for the Bernoulli estimator); the Gaussian maximum likelihood estimates of §24.1.1; Equation (24.5) (the risk decomposition DRE[P∥Pθ]+H(P)); Equation (24.8) (the LDA log-likelihood ratio is affine); Lemma 24.2 (EM as alternate maximization of G, with G(Q,θ)≤L(θ) and equality at the posterior). Further items: Gibbs' inequality, the Bernoulli maximum likelihood estimator (24.1)/(24.3), Exercise 1 (the biased variance estimate), Equation (24.6), the overfitting example of §24.1.3, Exercise 3 / (24.14), the weighted-centroid M-step (24.13), and the rule of succession of §24.5.
Significance
Theorem 24.3 is the guarantee that makes EM a sensible algorithm: it does not find the maximum likelihood estimate, but it climbs monotonically, and Lemma 24.2 identifies why, the E-step chooses the tightest lower bound G(Q,⋅) at the current parameter and the M-step maximizes it. This variational view underlies a large part of modern latent-variable inference. Equation (24.5) is the information-theoretic content of maximum likelihood: the true risk is the entropy of the data plus the relative entropy to the model, so the best parameter is a projection of the data distribution onto the model class, and Gibbs' inequality is what makes that projection meaningful. The Bernoulli and Gaussian computations are the standard first examples, and Equation (24.8) is the reason linear classifiers appear in generative modeling. On the platform, the mission adds the relative entropy on finite domains, the EM objects, and Gaussian-integral identities that later probabilistic work can reuse.
Difficulty
The Bernoulli and Gaussian maximum likelihood facts are calculus, but as global maximization statements they need the concavity of log and an explicit completion of squares rather than the book's stationary-point argument; the Gaussian case reduces to minimizing σ↦2σ2mσ^2+mlogσ. Equation (24.5) is a finite-sum identity; Gibbs' inequality is Jensen for log with the equality case, or the elementary logt≤t−1. Lemma 24.2 is Jensen's inequality applied row by row to ∑yQi,ylog(Pθ[X=xi,Y=y]/Qi,y), with care at entries Qi,y=0, where the convention 0log0=0 is exactly Lean's junk value; Theorem 24.3 chains the lemma's three parts as the book does. The Gaussian expectation identities (Exercise 1 and (24.6)) require the moments of gaussianReal and Fubini over the product law. Hoeffding's inequality (24.2) is Mission II's Theorem for Bernoulli variables; the overfitting example is the inequality log(1−θ)≥−2θ on [0,1/2]. The rule of succession is a Beta-function identity provable by integration by parts.
Formalization scope
Parametric families are functions from a parameter type to real-valued probabilities or densities, following the book's convention (p. 344) that P[X=x] denotes either; no measure-theoretic densities are needed except in the two Gaussian-integral items, which use gaussianReal and the i.i.d. law of Mission I, and in the two Bernoulli probability items, which use the Bernoulli law of Mission XIV. Lean's log 0 = 0 is handled explicitly: the EM items assume a positive joint, since with junk logarithms Theorem 24.3 is false (the M-step could pick a parameter with a zero component and inflated F), while the entropy terms QlogQ use the convention 0log0=0 that the book intends; the Bernoulli maximum likelihood statement ranges over θ∈(0,1); the log-loss decomposition and Gibbs' inequality take the second distribution positive. The M-step is a predicate ("some maximizer"), so Assumption 24.1 is not modeled, and an EM run is any sequence of such steps. The Gaussian maximum likelihood statement requires a nonconstant sample, without which the likelihood is unbounded; the overfitting example is stated for θ⋆≤1/2, the range on which the book's inequality (1−θ)m≥e−2θm holds. Equation (24.8) is stated as a matrix identity for any symmetric M in place of Σ−1; the soft k-means M-step is stated as the weighted-centroid minimization it amounts to.
Not stated: Naive Bayes (24.7), which is a rewriting of Bayes' rule; the mixture density itself and the E-step formula (24.12); the Bayesian derivations (24.16) and maximum a posteriori estimation; Exercise 2.
Selected references
S. Shalev-Shwartz, S. Ben-David, Understanding Machine Learning: From Theory to Algorithms, Cambridge University Press, 2014, Chapter 24. doi:10.1017/CBO9781107298019
A. P. Dempster, N. M. Laird, D. B. Rubin, Maximum likelihood from incomplete data via the EM algorithm, Journal of the Royal Statistical Society B 39(1), 1977. doi:10.1111/j.2517-6161.1977.tb01600.x
C. F. J. Wu, On the convergence properties of the EM algorithm, Annals of Statistics 11(1), 1983. doi:10.1214/aos/1176346060
T. M. Cover, J. A. Thomas, Elements of Information Theory, 2nd ed., Wiley, 2006. doi:10.1002/047174882X
C. M. Bishop, Pattern Recognition and Machine Learning, Springer, 2006.
Dimensionality reduction maps data in Rd to Rn, n≪d, by a linear map x↦Wx, for computational reasons, for generalization (Chapter 19's curse of dimensionality) and for interpretability. Chapter 23 of Shalev-Shwartz and Ben-David, Understanding Machine Learning: From Theory to Algorithms (doi:10.1017/CBO9781107298019), studies three ways to choose W. Principal Component Analysis chooses the pair of compression and recovery matrices that minimizes the total squared reconstruction error, and the answer is the eigenvectors of ∑ixixi⊤ for the largest eigenvalues (Theorem 23.2). Random projections choose W with independent Gaussian entries, and the Johnson–Lindenstrauss lemma says that the norms of any finite set of vectors are then preserved up to 1±ϵ with n=O(ϵ−2log∣Q∣) (Lemma 23.4). Compressed sensing exploits sparsity: a matrix with the restricted isometry property compresses every s-sparse vector losslessly (Theorem 23.6), the reconstruction can be done by ℓ1 minimization, a linear program, with an error bound that degrades gracefully for approximately sparse inputs (Theorem 23.8, due to Candès), and Gaussian random matrices with n=O(slogd) rows are RIP with high probability (Theorem 23.9).
Setting
Vectors are functions Rd with ∥v∥22=∑ivi2, ∥v∥1=∑i∣vi∣ and ∥v∥0=∣{i:vi=0}∣. The PCA problem (23.1) is argminW∈Rn×d,U∈Rd×n∑i=1m∥xi−UWxi∥22, and A=∑ixixi⊤. A random matrix has independent N(0,v) entries, v=1 in Lemma 23.3 and v=1/n afterwards. W is (ϵ,s)-RIP if ∥Wx∥22/∥x∥22−1≤ϵ for every x=0 with ∥x∥0≤s (Definition 23.5); vI is v restricted to an index set I.
Formalization targets
Goal: Theorem 23.2
Let x1,…,xm∈Rd, A=∑ixixi⊤, and let u1,…,un be eigenvectors of A for its n largest eigenvalues, formalized as the first n columns of a spectral decomposition A=Vdiag(D)V⊤ with V⊤V=I and D nonincreasing. Then U=[u1⋯un] with W=U⊤ minimizes (23.1): for every U′,W′,
i∑∥xi−UU⊤xi∥2≤i∑∥xi−U′W′xi∥2.
Milestones
Lemma 23.1 (the reduction of (23.1) to orthonormal U and W=U⊤); Lemma 23.4 (Johnson–Lindenstrauss); Theorem 23.6 (exact ℓ0 recovery under RIP); Theorem 23.8 (Candès' ℓ1 recovery bound); Theorem 23.9 (Gaussian matrices are RIP). Further items: Equation (23.3), Exercise 2, Remark 23.1 (the optimal value ∑i>nDi,i), the eigenvector transfer of §23.1.1, Lemma 23.3, Theorem 23.7, Lemma 23.10, Lemma 23.11 and Lemma 23.12.
Significance
Theorem 23.2 is the Eckart–Young–Mirsky theorem in the form the book states it: PCA is the optimal linear compression-and-recovery scheme in the least-squares sense, and its solution is spectral. The Johnson–Lindenstrauss lemma is the basic tool of randomized dimensionality reduction, with a bound independent of d, and the book's variant with explicit constants is what later chapters and the compressed-sensing proofs use. Theorems 23.6–23.9 together are the three "surprising results" of compressed sensing: information-theoretic recoverability from RIP, efficient recovery by convex relaxation, and the existence of RIP matrices by randomness; their proofs, Candès' cone argument and Baraniuk–Davenport–DeVore–Wakin's net-plus-union-bound, are among the cleanest in applied mathematics and are natural formalization targets. On the platform, the mission introduces Gaussian random matrices as product measures and the RIP predicate, usable by later work on sparse recovery.
Difficulty
Lemma 23.1 requires building an orthonormal basis of the range of UW, padded to n vectors when the range has smaller dimension, and the identity ∥x−Vy∥2=∥x∥2+∥y∥2−2y⊤V⊤x; Equation (23.3) is a trace computation. Theorem 23.2 combines (23.3), the change of basis B=V⊤U with B⊤B=I, the bound ∑iBj,i2≤1 from extending B to an orthogonal matrix, and Exercise 2, a rearrangement inequality; Remark 23.1 adds trace(A)=∑jDj,j. Lemma 23.3 is the concentration of a χn2 variable (Lemma B.12), which must itself be established from the Gaussian moment generating function; the Johnson–Lindenstrauss lemma is then a union bound. Theorem 23.6 is a two-line contradiction with RIP applied to x−x~. Theorem 23.8 is the substantial one: the partition of [d] into blocks of s largest remaining entries, the bound ∥hTj∥2≤s−1/2∥hTj−1∥1, the ℓ1-minimality inequality (23.8), Lemma 23.10, and the two claims combined through (23.5); a formal proof must handle the last, possibly shorter block, which the book's "assume d/s is an integer" sidesteps. Lemma 23.11 is a volumetric net bound; Lemma 23.12 applies the Johnson–Lindenstrauss lemma to the image of an ϵ/4-net of the unit sphere of Rs and closes the gap by the "smallest a" argument, and Theorem 23.9 is a union bound over index sets.
Formalization scope
Vectors are plain functions Fin d → ℝ with explicit norms, and matrices are Mathlib matrices, so the objectives are finite sums with no coercions between normed spaces. Random matrices are functions Fin n → Fin d → ℝ with the product of Gaussian laws gaussianReal 0 v, applied through Matrix.of; probability statements bound the outer measure of the failure event, and the failure events of Lemmas 23.4 and 23.12 are written with ≥ϵ so that the book's strict conclusions follow. "Eigenvectors corresponding to the n largest eigenvalues" is formalized as the first n columns of a spectral decomposition with nonincreasing diagonal, which is exactly the set of such systems and avoids Mathlib's eigenvalue ordering conventions. Minimizers (x~, x⋆, xs) are arbitrary elements of the argmin.
Five statements are given as their proofs support them, and the item texts say so. Lemma 23.3 and the Johnson–Lindenstrauss lemma are stated for ϵ≤3/4: the printed range ϵ∈(0,3) (and ϵ≤3) is false, since the χn2 upper tail decays like e−n(ϵ−ln(1+ϵ))/2, slower than e−ϵ2n/6 for ϵ>0.785 (at ϵ=2.9 it fails for n=10); the audit found this. Lemma 23.1 as printed, "every solution has orthonormal columns and W=U⊤", is false, since (cU,W/c) has the same objective as (U,W); the item states what the proof shows, that every (U,W) is dominated by some (V,V⊤) with V⊤V=I, which is all that (23.2) needs. Theorem 23.9 is stated with n≥216slog(72d/(δϵ))/ϵ2: Lemma 23.12 with ϵ/3 (so that (1±ϵ/3)2 lies within 1±ϵ) and δ/ds, followed by a union bound over the at most ds index sets, gives these constants, and the printed 100 and 40 are not reached by the argument. Theorem 23.8's proof assumes d/s is an integer for simplicity; the statement is given without that assumption, since only the last block of the partition can be short and the block inequality still holds. Lemma 23.3 has x=0, and the Johnson–Lindenstrauss lemma n≥1, since for n=0 its ϵ is 0 and the conclusion fails.
Not stated: §23.1.2 (implementation), Remarks 23.2–23.3, §23.4 (the comparison of PCA and compressed sensing), Exercises 1 and 3–6.
Selected references
S. Shalev-Shwartz, S. Ben-David, Understanding Machine Learning: From Theory to Algorithms, Cambridge University Press, 2014, Chapter 23. doi:10.1017/CBO9781107298019
W. B. Johnson, J. Lindenstrauss, Extensions of Lipschitz mappings into a Hilbert space, Contemporary Mathematics 26, 1984. doi:10.1090/conm/026/737400
E. J. Candès, The restricted isometry property and its implications for compressed sensing, Comptes Rendus Mathématique 346(9–10), 2008. doi:10.1016/j.crma.2008.03.014
R. Baraniuk, M. Davenport, R. DeVore, M. Wakin, A simple proof of the restricted isometry property for random matrices, Constructive Approximation 28, 2008. doi:10.1007/s00365-007-9003-x
D. L. Donoho, Compressed sensing, IEEE Transactions on Information Theory 52(4), 2006. doi:10.1109/TIT.2006.871582
E. J. Candès, T. Tao, Decoding by linear programming, IEEE Transactions on Information Theory 51(12), 2005. doi:10.1109/TIT.2005.858979
Les Houches Lectures on Deep Learning at Large & Infinite Width III: Input–Output Jacobian of Random ReLU NetworksTextbook
Motivation
Lecture 5 of the Les Houches lectures on deep learning at large and infinite width (arXiv:2309.01592, Section 5, lectures by B. Hanin) shows that a random ReLU network evaluated at a single input can be solved exactly. The statistics of the network depend on depth L and width n through the inverse temperatureβ=5∑ℓ=1L1/nℓ≈5L/n. The input–output Jacobian is the simplest quantity where this can be seen. Its second moment does not depend on depth or width. Its fourth moment grows like eβ, which gives a quantitative sense in which the regime where both L and n are large is controlled by L/n rather than by L or n alone. The lectures derive this through a combinatorial sum-over-paths formalism developed in Hanin's earlier papers (references [20–22] of the notes).
Setting
Fix a depth L≥1 and widths n0,…,nL+1≥1. Let μ be a probability measure on R that has a density with respect to Lebesgue measure, is symmetric (μ(−A)=μ(A)), and has variance ∫t2dμ=1. The weights are
The network output is z(L+1)(x)∈RnL+1. The input–output Jacobian has entries ∂zq(L+1)/∂xp. A path is a tuple γ=(γ(0),…,γ(L+1)) with γ(ℓ)∈{1,…,nℓ}, and Γp,q is the set of paths with γ(0)=p and γ(L+1)=q. Along a path, Wγ(ℓ)=Wγ(ℓ)γ(ℓ−1)(ℓ) and ξγ(ℓ)=1{zγ(ℓ)(ℓ)(x)>0}.
Formalization targets
Goal: second moment of the Jacobian (eq. (124))
For every fixed input x=0 and all p,q,
E[(∂xp∂zq(L+1))2]=n02.
Milestones
Eq. (123): the output is a sum over paths, zq(L+1)=∑pxp∑γ∈Γp,q∏ℓ=1L+1Wγ(ℓ)∏ℓ=1Lξγ(ℓ).
Proposition 5.2: at a fixed input x=0, the output has the same law as the output W(L+1)D(L)W(L)⋯D(1)W(1)x of a deep linear network with dropout. Here the D(ℓ) are diagonal with i.i.d. Bernoulli(1/2) entries, independent of the weights.
Section 5.4, first exercise: almost surely, ∂zq(L+1)/∂xp=∑γ∈Γp,q∏ℓWγ(ℓ)∏ℓξγ(ℓ).
Section 5.4, first exercise (conclusion): the law of ∂zq(L+1)/∂xp is the same for all x=0.
Section 5.5, fourth moment: E[(∂zq(L+1)/∂xp)4]=n02cexp(5∑ℓ=1Lnℓ1+O(L/n2)). This is stated under the extra hypothesis ∫t4dμ=3 (see Formalization scope).
Significance
Identity (124) says that, with the initialization CW=2 and zero biases, the typical size of the input–output Jacobian does not depend on depth or width. This is the exact form of the "criticality" of ReLU at CW=2. The fourth-moment statement shows that the fluctuations are not controlled in this way: they grow exponentially in β≈5L/n. Together with Proposition 5.2, these results turn questions about deep random ReLU networks at one input into questions about products of random matrices with dropout. As far as the drafter knows, these statements have not been machine-checked before. The mission asks for formal proofs of the lecture's exact identities.
Difficulty
The ReLU network is not a linear function of the weights. Its activation pattern ξ(ℓ) depends on the weights of all earlier layers, so the path sum cannot be averaged term by term without first showing that the activation pattern is, in distribution, independent of the weights. That is the content of Proposition 5.2, which is argued only in sketch form in the notes. On top of that, the Jacobian must be identified with the path sum almost surely: at inputs where a preactivation vanishes the network is not differentiable. This requires the density assumption on μ and a separate treatment of layers in which every neuron is inactive.
Formalization scope
Widths form a sequence n : ℕ → ℕ; only n0,…,nL+1 are used. The normalized weights are coordinates of the product measure μ⊗ on a finite index set (weightLaw). The Bernoulli masks are coordinates of the uniform product measure on Bool (maskLaw).
The Jacobian entry is the Fréchet derivative (fderiv) of y↦zq(L+1)(y) at x applied to the p-th basis vector. Mathlib returns 0 at points of non-differentiability, which form a null event for x=0.
The notes write Wγ(ℓ)=Wγ(ℓ−1)γ(ℓ)(ℓ). The formalization uses the orientation Wγ(ℓ)γ(ℓ−1)(ℓ), which matches the row/column convention of the network recursion.
Fourth moment. For a general μ the claim in §5.5 appears to need a correction. An informal computation (not part of this draft's verified content) gives a boundary term 2(μ4−3)(1/n1+1/nL) in the exponent, which is of order 1/n rather than L/n2 unless μ4=∫t4dμ=3 (for example Gaussian μ). The milestone is therefore stated under the extra hypothesis μ4=3. The constant c>0 and the O(⋅) constant may depend on μ only.
An integral of a non-integrable function is 0 in Mathlib. The goal therefore also asserts integrability of the squared Jacobian, because 2/n0=0.
Selected references
Y. Bahri, B. Hanin, A. Brossollet, V. Erba, C. Keup, R. Pacelli, J. B. Simon, Les Houches Lectures on Deep Learning at Large & Infinite Width, 2023. arXiv:2309.01592
B. Hanin, M. Nica, Products of Many Large Random Matrices and Gradients in Deep Neural Networks, Comm. Math. Phys., 2020. arXiv:1812.05994
Les Houches Lectures on Deep Learning at Large & Infinite Width II: Finite-Width Four-Point Function RecursionTextbook
Motivation
At infinite width a randomly initialized network is a Gaussian process (Mission I of this series). Real networks have finite width n, and the leading departure from Gaussianity is measured by the connected four-point functionκ4. It captures both correlations between neurons and non-Gaussian fluctuations. Lecture 4 of the Les Houches lectures (arXiv:2309.01592, lectures by B. Hanin) states the central finite-width result, Theorem 4.2: κ4 is of order 1/n and obeys an explicit layer-to-layer recursion up to O(n−2). At criticality this gives the effective depthL/n as the parameter controlling finite-width effects. The result was first derived at a physics level of rigor by Yaida (2020) and in Roberts–Yaida–Hanin (2022), and later derived more mathematically by Hanin (reference [19] of the notes).
Setting
A network of depth L with widths n0,…,nL+1 and nonlinearity σ has preactivations z(1)=b(1)+W(1)x and z(ℓ+1)=b(ℓ+1)+W(ℓ+1)σ(z(ℓ)). The parameters are independent, with Wij(ℓ)∼N(0,CW/nℓ−1) and bi(ℓ)∼N(0,Cb), where Cb≥0 and CW>0 (eqs. (118)–(119)). At a single input x, write ⟨f⟩K for the average of f against N(0,K). The infinite-width kernel is K(1)=Cb+CW∣x∣2/n0 and K(ℓ+1)=Cb+CW⟨σ2⟩K(ℓ) (eq. (120)). The parallel susceptibility is χ∥(ℓ)=CW∂K⟨σ2⟩K∣K=K(ℓ). The normalized connected four-point function is
κ4(ℓ)=31(E[(zi(ℓ))4]−3E[(zi(ℓ))2]2).
Formalization targets
Goal: Theorem 4.2, recursion for κ4
If the hidden widths satisfy n≤nℓ≤An, then κ4(ℓ)=O(n−1) and
Theorem 4.2, expansion of observables: Ef(z1(ℓ),…,zm(ℓ))=⟨f⟩G(ℓ)+8κ4(ℓ)⟨(∑j∂j4+∑j1=j2∂j12∂j22)f⟩K(ℓ)+O(n−2).
Significance
Theorem 4.2 is the first quantitative statement that finite-width networks at initialization are not Gaussian processes. The size of the deviation is 1/n per layer, and it accumulates linearly in depth at criticality. This is the basis for the claim of Lecture 4 that L/n controls correlations between neurons, fluctuations and, in later lectures, feature learning. As far as the drafter knows these statements have not been machine-checked. Lemma 4.4 and the covariance exercise are exact finite-width identities and are natural first targets.
Difficulty
The next layer is Gaussian only conditionally, with a random variance Σ(ℓ) that is an average over nℓ dependent neurons. Establishing the recursion to order n−2 requires expanding Gaussian averages around the mean of Σ(ℓ) and controlling all higher cumulants of this collective observable uniformly in the widths. The nonlinearity is only assumed polynomially bounded, so smoothness must come from Gaussian averaging, not from σ.
Formalization scope
Mission I's definitions (LesHouchesWidth_GaussianMLP: the network mlpZ, stdGaussianParams, nngpKernel, uniformWidths) are reused. Mission I must be launched first, and its definition then added to this proposal as a reference item.
"n1,…,nL≃n" is encoded as n≤nℓ≤An for a fixed A≥1. The O(⋅) constants may depend on all fixed data (Cb,CW,σ,L,n0,nL+1,x,A, and m,f where relevant) but not on n or on the widths.
"Reasonable" σ is taken to mean measurable and polynomially bounded, and the kernel is assumed nondegenerate: K(ℓ)>0 for 1≤ℓ≤L+1, as the density-based definition of ⟨⋅⟩K in Section 4.2 requires. "Reasonable" test functions f are taken to be smooth with polynomially bounded derivatives of all orders.
The expansion of observables is stated with κ4(ℓ) in front of the correction. The printed κ4(ℓ+1) appears to be an index slip: with κ4(ℓ) the formula reproduces E[z4]=3G2+3κ4 and E[z12z22]=G2+κ4 exactly.
The criticality statement is formalized for ReLU at Cb=0, CW=2, the one critical example in the notes where K(ℓ) is constant. For σ=tanh the notes' "≃" is asymptotic in depth and is not formalized here.
Selected references
Y. Bahri, B. Hanin, A. Brossollet, V. Erba, C. Keup, R. Pacelli, J. B. Simon, Les Houches Lectures on Deep Learning at Large & Infinite Width, 2023. arXiv:2309.01592
S. Yaida, Non-Gaussian processes and neural networks at finite widths, MSML 2020. arXiv:1910.00019
D. A. Roberts, S. Yaida, B. Hanin, The Principles of Deep Learning Theory, Cambridge University Press, 2022. arXiv:2106.10165
B. Hanin, Random Fully Connected Neural Networks as Perturbatively Solvable Hierarchies, 2022. arXiv:2204.01058
Les Houches Lectures on Deep Learning at Large & Infinite Width I: Gaussian-Process Limit of Wide Networks and Wick's TheoremTextbook
Motivation
A fully connected neural network with random Gaussian weights defines a random function of its input. Lecture 1 of the Les Houches lectures on deep learning at large and infinite width (arXiv:2309.01592, lectures by Y. Bahri) explains that, when the hidden layers become infinitely wide, this random function becomes a Gaussian process (the "neural network Gaussian process", NNGP). Its covariance kernel is computed by an explicit layer-to-layer recursion. The observation goes back to Neal (1996) for one hidden layer. It was extended to deep networks by Matthews et al. and Lee et al. (2018). It underlies Bayesian inference with infinitely wide networks (Section 1.6) and the analysis of signal propagation at large depth (Section 1.7). Lecture 2 introduces Wick's theorem, the tool for computing moments of Gaussian vectors that the lectures then use for finite-width corrections.
Setting
A network of depth L with widths n0,…,nL+1 and nonlinearity φ maps an input x∈Rn0 to preactivations
with independent bi(ℓ)∼N(0,σb2) and Wij(ℓ)∼N(0,σw2/nℓ−1) (eqs. (1)–(3) and (5); layers are indexed as in Lectures 4–5, so zl of Lecture 1 is z(l+1) here). For a 2×2 covariance Σ write Fφ(Σ11,Σ12,Σ22)=E(u1,u2)∼N(0,Σ)[φ(u1)φ(u2)] (eq. (15)). The NNGP kernel is
A pairing of {1,…,2m} is a partition into m two-element blocks.
Formalization targets
Goal: Result 1 (single hidden layer)
For a network with one hidden layer of width n, fixed inputs x1,…,xm and output width n2, as n→∞ the vector (zi(2)(xa))i≤n2,a≤m converges in distribution to a centered Gaussian with covariance
E[zi(2)(xa)zj(2)(xb)]→δijK(2)(xa,xb).
Milestones
Eq. (10): E[zi(1)(x)zi(1)(x′)]=K(1)(x,x′).
Eqs. (9), (11): E[zi(2)(x)zi(2)(x′)]=K(2)(x,x′) at every finite width.
Eq. (16): closed form of FReLU (the arc-cosine kernel).
Result 2 (Wick's theorem): E[zμ1⋯zμ2m]=∑pairings∏Kμkμk′ for z∼N(0,K), and odd moments vanish.
A further item states the deep version of the limit, eqs. (13)–(14), in the simultaneous-width limit. It is included as a supporting theorem rather than a milestone.
Significance
Result 1 and its deep extension identify the prior over functions induced by random initialization. They also make the NNGP kernel the central computational object of the infinite-width theory. The finite-width covariance identities (9)–(11) are exact and explain where the recursion comes from. Formula (16) makes the recursion explicit for ReLU. Wick's theorem is the basic tool of the finite-width perturbation theory of later lectures. These are classical results. The mission asks for their formal proofs against a single shared model of random networks that the later missions of this series reuse.
Difficulty
Result 1 is a multivariate central limit theorem for sums of n i.i.d. vectors whose entries are products of a Gaussian weight and a nonlinear function of Gaussian first-layer preactivations. No assumption beyond square-integrability of φ against the relevant Gaussians is imposed, so the CLT must be applied in its L2 form. The deep limit is harder: for L≥2 the hidden preactivations are not Gaussian at finite width, and one must control a triangular array in which the widths of all layers grow together. The ReLU formula (16) is an explicit but delicate Gaussian integral over a cone.
Formalization scope
The parameters are coordinates of i.i.d. standard Gaussians (stdGaussianParams), scaled by σb and σw/nℓ−1 (mlpBias, mlpWeight). This is equality in law with the prior (5).
Bivariate Gaussian averages use Mathlib's multivariateGaussian. Convergence in distribution is stated with bounded continuous test functions: Eg(Zn)→∫gdN(0,C) for every bounded continuous g.
The one-hidden-layer goal assumes only that φ is measurable and that φ2 is integrable against N(0,K(1)(xa,xa)) for each input. The deep statement assumes φ continuous with a linear envelope ∣φ(u)∣≤c+M∣u∣, the condition used by Matthews et al. (2018). The notes defer to the references for these conditions.
Pairings are fixed-point-free involutions of {0,…,2m−1}.
Selected references
Y. Bahri, B. Hanin, A. Brossollet, V. Erba, C. Keup, R. Pacelli, J. B. Simon, Les Houches Lectures on Deep Learning at Large & Infinite Width, 2023. arXiv:2309.01592
A. G. de G. Matthews, M. Rowland, J. Hron, R. E. Turner, Z. Ghahramani, Gaussian Process Behaviour in Wide Deep Neural Networks, ICLR 2018. arXiv:1804.11271
Y. Cho, L. K. Saul, Kernel Methods for Deep Learning, NeurIPS 2009.
An Introduction to Computational Learning Theory V: Classification Noise and Statistical QueriesTextbook
Motivation
Chapter 5 of Kearns and Vazirani, An Introduction to Computational Learning Theory (MIT Press, 1994, doi:10.7551/mitpress/3897.001.0001), asks what happens to PAC learning when the labels are unreliable. In the classification noise model of Angluin and Laird, each label returned by the oracle is flipped independently with a fixed probability η<1/2. The algorithms of Chapter 1 collapse at once: the elimination algorithm deletes a correct literal on the strength of a single mislabeled example, and the tightest-fit rectangle may not exist. The chapter's remedy is to learn from statistics: an algorithm that forms its hypothesis only from estimates of probabilities of simple events is insensitive to occasional wrong labels. Kearns's statistical query model makes this precise, replacing the example oracle by an oracle that returns the probability of any predicate of a labeled example to within a tolerance, and the main theorem (5.3) shows that every class learnable from statistical queries is PAC learnable in the presence of classification noise. The proof rests on a single identity, Equation (5.2), that expresses the true value of a statistical query in terms of three quantities that can each be estimated from noisy examples, and on the observation that a hypothesis's disagreement with the noisy label is an affine function of its true error, which lets the best of several candidate hypotheses be recognized without clean data.
Setting
The framework is that of Mission I. The noisy example law is that of (x,b) with x∼D and b=c(x) flipped with probability η. A statistical query is a predicate χ of a labeled example with value Pχ=Prx∼D[χ(x,c(x))=1]. The inputs split into X1, where the label matters to χ, and X2, where it does not; p1=D(X1) and D1 is D conditioned on X1. For conjunctions over {0,1}n, p0(z) is the probability that a literal z is set to 0 and p01(z) the probability that it is 0 on a positive example; z is significant if p0(z)≥ϵ/8n and harmful if p01(z)≥ϵ/8n.
the probabilities on the right being taken under the noisy oracle.
Milestones
The §5.2 analysis behind Theorem 5.2 (the conjunction of all significant, non-harmful literals has error at most ϵ/2); the product estimate bound of p. 115 (AB−2τ′≤A^B^≤AB+3τ′); the identity of p. 117 (γh=η+(1−2η)error(h)).
Significance
Equation (5.2) is the entire mechanism of noise-tolerant learning in the statistical query model: the noisy oracle cannot be de-noised example by example, but the probability of any predicate can be recovered exactly from noisy probabilities, because on the inputs where the label matters the noise acts as a known affine contraction and on the others it acts not at all. Together with the p. 117 identity, which turns hypothesis selection into a comparison of noisy disagreement rates, and the Chernoff bounds of Mission IV, it yields Theorem 5.3 and hence noise-tolerant algorithms for every class the book has learned so far (conjunctions, decision lists, k-CNF). The §5.2 analysis is the first statistical-query algorithm and shows the pattern: a hypothesis defined by thresholds on a few probabilities, with enough slack between the thresholds that estimates suffice. None of this is machine-checked. The formalization fixes the noisy example law on the platform's sample framework and proves the exact identities on which the noise-tolerant simulation depends.
Difficulty
Equation (5.2) is a computation with the pushforward of a product measure: one must express the noisy law on X1 as a mixture of the clean law and its label-flipped image, solve the affine relation for the clean probability, and combine with the restriction to X2, where the flipped and unflipped labels give the same value of χ; the degenerate case D(X1)=0, in which the conditional measure is zero and the first term vanishes, must be handled separately. The p. 117 identity is the same computation without the split. The §5.2 analysis is two union bounds over the 2n literals after the observation that a literal of the target is never harmful and that a literal of the hypothesis is never insignificant. The product lemma is elementary arithmetic with a case split at A<τ′.
Formalization scope
The noisy oracle is a measure on labeled examples obtained by mapping the product of D and a Bernoulli(η) coin; the conditional D1 is Mathlib's conditional measure; queries are arbitrary measurable predicates of a labeled example, with no tolerance or query-count bookkeeping. Theorem 5.3 itself, the definitions of efficient learnability from statistical queries (Definition 14) and of efficient noisy PAC learnability (Definition 13), Theorem 5.1, Theorem 5.2 as a statement about an algorithm with oracle access, and Corollary 5.4 are not stated: they quantify over query algorithms and their running times, for which this series has no model; the mission carries their exact probabilistic content. The error-propagation analysis of §5.4.2–5.4.3 with tolerance τ/27 and the guessing resolution Δ is not stated beyond the product lemma, since the factor 1/(1−2η) is not in [0,1] and the book's constant does not account for it. Hypotheses: 0≤η<1/2 for the decomposition, 0≤η≤1 for the disagreement identity, ϵ>0 for the conjunction analysis, all reals in [0,1] for the product lemma.
Trivializing readings are excluded: the decomposition is an exact identity for every measurable query, and the conjunction bound is for the exact thresholds ϵ/8n with the union bound's ϵ/2. Welcome contributions: the mixture representation of the noisy law, the restriction of a pushforward to X2, and the two union bounds.
Selected references
M. J. Kearns, U. V. Vazirani, An Introduction to Computational Learning Theory, MIT Press, 1994, Chapter 5. doi:10.7551/mitpress/3897.001.0001
D. Angluin, P. Laird, Learning from noisy examples, Machine Learning 2(4), 1988. doi:10.1007/BF00116829
M. Kearns, Efficient noise-tolerant learning from statistical queries, Journal of the ACM 45(6), 1998. doi:10.1145/293347.293351
M. Kearns, M. Li, Learning in the presence of malicious errors, SIAM Journal on Computing 22(4), 1993. doi:10.1137/0222052
An Introduction to Computational Learning Theory IV: Weak and Strong Learning, Boosting and Chernoff BoundsTextbook
Motivation
Chapter 4 of Kearns and Vazirani, An Introduction to Computational Learning Theory (MIT Press, 1994, doi:10.7551/mitpress/3897.001.0001), asks whether the PAC model's demand for arbitrarily small error and confidence is essential. A weak learning algorithm need only, with some fixed positive probability, output a hypothesis that beats random guessing by a fixed margin. Schapire's theorem, the chapter's main result, says that this apparently much weaker requirement is equivalent to the original one: any weak learner can be converted, by running it on carefully filtered distributions and combining its hypotheses by majority votes, into a strong learner. The construction is boosting, which became one of the most influential ideas in machine learning. The chapter proves the equivalence in two steps. Boosting the confidence is elementary: run the learner several times and validate. Boosting the accuracy is the substance: a modest procedure that combines three hypotheses, each with error at most β on its own distribution, into a majority with error at most g(β)=3β2−2β3<β, applied recursively until the error is driven below the target. The Chernoff bounds of the Appendix, the book's workhorse for estimating probabilities from samples, are what makes the validation steps rigorous.
Setting
The framework is that of Mission I. A class C is weakly learnable using H if for some advantage γ>0, confidence δ0>0 and sample size m, an algorithm outputs hypotheses in H that, for every target in C and every distribution, have error at most 1/2−γ with probability at least δ0; the algorithm's prediction L(S)(x) is a measurable function of the sample and the instance together, as it is for every algorithm. Given a hypothesis h1, the filtered distribution D2 gives weight 1/2 to the instances on which h1 errs and 1/2 to those on which it is correct, preserving relative weights within each part, and D3 is D conditioned on h1=h2; the modest procedure outputs majority(h1,h2,h3). Ternary majority trees over H are the closure of H under the majority of three. For confidence boosting, k independent samples yield k hypotheses, and a fresh sample selects the one with the fewest mistakes. Bernoulli trials are m independent coin flips with success probability p.
Formalization targets
Goal: Theorem 4.9
If C is weakly PAC learnable using measurable hypotheses in H, then C is PAC learnable using the class of ternary majority trees with leaves from H: for all ϵ,δ∈(0,1/2) some sample size and some algorithm outputting majority trees achieve error at most ϵ with probability at least 1−δ, for every target in C and every distribution.
Milestones
Theorem 9.2 (the additive and multiplicative Chernoff bounds); the two facts of §4.2 behind confidence boosting (independent runs all fail with probability at most (1−δ0)k; the fewest-mistakes selection loses at most γ with probability at least 1−2ke−mγ2/2); Lemma 4.1 (the modest procedure: error at most g(β)).
Significance
Theorem 4.9 is one of the landmark results of learning theory: it shows that the PAC model has no intermediate strength, that Occam learning, weak learning and strong learning coincide, and that the resources of a strong learner can be bounded polylogarithmically in 1/ϵ in memory and hypothesis size. Its constructive proof is the first boosting algorithm, ancestor of AdaBoost and of gradient boosting. Lemma 4.1 is the analytic core, a clean inequality about three hypotheses and three distributions in which the filtered distribution is exactly calibrated so that h1 has no advantage on it. The Chernoff bounds are the concentration inequalities invoked throughout the book, and their formalization on the product law of Bernoulli trials makes every later "estimate to within γ with confidence 1−δ" step reusable. None of these is machine-checked in this form; the boosting theorem in the sample-complexity sense is, to our knowledge, not formalized anywhere.
Difficulty
Lemma 4.1 is a computation with conditional measures: writing errorD of the majority as the weight of the instances on which h1 and h2 both err plus β3 times the weight of their disagreement, mapping weights under D2 back to D by the factors 2(1−β1) and 2β1 (Equation (4.1)), and maximizing the resulting polynomial in β1,β2,β3,γ1,γ2; the degenerate cases where a conditioning event is null must be handled separately. The Chernoff bounds require the exponential moment method on a finite product measure. The confidence-boosting facts are the product bound for independent blocks and Hoeffding plus a union bound. The goal is a genuine construction: from a large sample of D one must simulate the recursive algorithm Strong-Learn, whose calls to the weak learner on filtered distributions are served by rejection sampling from the remaining examples, bound the depth of the recursion by the growth of g−1 iterates (Lemma 4.2), bound the number of examples consumed at each node (Lemmas 4.3–4.7) and allocate the confidence over all the places the simulation can fail; then package the result as a deterministic function of a sample of fixed size. An alternative route is available: weak learnability with a fixed sample size forces a finite VC dimension (a class shattering a large set defeats any fixed-size learner on the uniform distribution over it), after which Theorem 3.3 gives a consistent strong learner; but its hypotheses lie in C, not in the majority trees over H, so it does not prove the stated conclusion.
Formalization scope
The weak-learning hypothesis is the book's with constants γ,δ0 in place of the inverse polynomials, which is what the definition says for a fixed class; hypotheses in H are required to be measurable, and the weak learner jointly measurable in the sample and the instance, because Strong-Learn runs it on distributions filtered through its own earlier outputs and the analysis integrates over the earlier samples (for an arbitrary function the combined failure event need not be measurable, and outer-measure bounds on separate runs do not combine); the conclusion is the book's hypothesis class, the majority trees over H, built as an inductive predicate. Filtered distributions use Mathlib's conditional measure, so that a null conditioning event yields the zero measure; Lemma 4.1 is stated for 0≤β≤1/2 and holds in those degenerate cases too. The confidence-boosting milestone states the two probabilistic facts rather than the composite algorithm, whose sample indexing across runs and validation is bookkeeping; the selection rule is any rule minimizing mistakes. Chernoff's bounds are stated with non-strict inequalities in the events, for 0≤p≤1 and 0<γ≤1. Running time, the recursion-depth and sample-size lemmas with unspecified constants (4.2–4.8), and Exercises 4.1–4.3 are not stated.
Trivializing readings are excluded: the weak-learning guarantee is uniform over all targets and distributions with an advantage strictly positive, the strong conclusion is for every ϵ,δ, and Lemma 4.1 requires all three error bounds on their respective distributions. Welcome contributions: Lemma 4.1 itself, the Hoeffding bound on the product law, and the rejection-sampling lemma that turns a sample of D into a sample of a filtered distribution.
Selected references
M. J. Kearns, U. V. Vazirani, An Introduction to Computational Learning Theory, MIT Press, 1994, Chapter 4 and Chapter 9. doi:10.7551/mitpress/3897.001.0001
R. E. Schapire, The strength of weak learnability, Machine Learning 5(2), 1990. doi:10.1007/BF00116037
Y. Freund, Boosting a weak learning algorithm by majority, Information and Computation 121(2), 1995. doi:10.1006/inco.1995.1136
W. Hoeffding, Probability inequalities for sums of bounded random variables, Journal of the American Statistical Association 58(301), 1963. doi:10.1080/01621459.1963.10500830
H. Chernoff, A measure of asymptotic efficiency for tests of a hypothesis based on the sum of observations, Annals of Mathematical Statistics 23(4), 1952. doi:10.1214/aoms/1177729330
Multi-armed Bandit Allocation Indices VI: Bandit Sampling Processes, Favourable Priors and Invariance of the IndexTextbook
Motivation
The bandit processes that motivated the index theorem are sampling processes: an arm is a population from which one draws i.i.d. observations whose distribution has an unknown parameter, and each draw both earns something and teaches something. Chapter 7 of Gittins, Glazebrook and Weber, Multi-armed Bandit Allocation Indices (2nd ed., doi:10.1002/9780470980033), develops the theory of such processes in the Bayesian setting: the state of the process is the current posterior for the parameter, continuing it samples the next value from the predictive distribution and moves to the new posterior. When the observations are themselves the rewards one has a reward process, the classical Bayesian multi-armed bandit; when the aim is to find as quickly as possible an individual whose measurement reaches a target T (a compound active enough to warrant further testing, in the drug-screening problem from which the index theorem came) one has a target process, which is a job that completes when the target is reached. Two questions organize the chapter. When can the index be written down without any optimization, and when do symmetries of the model reduce the index to a function of fewer variables? The first is answered by the notion of a favourable prior (Section 7.3): if no run of observations below the target can raise the current probability of success, then the index is that probability, exactly, by Proposition 2.7. The second is answered by the invariance theorems of Section 7.4: a location parameter with a conjugate prior gives ν(xˉ,n)=xˉ+ν(0,n), a scale parameter gives ν(xˉ,n)=xˉν(1,n), and for target processes the target can be absorbed into the state, ν(xˉ,n,T)=ν(xˉ−T,n,0). These identities are what make the tables of Chapter 8 one-dimensional.
Setting
A sampling model consists of a likelihood f(⋅∣θ), a family of priors π(⋅∣p) on the parameter indexed by the parameters p of a conjugate family, and the Bayes update p↦px of those parameters after observing x; the family is conjugate if the posterior of π(⋅∣p) given X=x is π(⋅∣px). The predictive distribution is f(⋅∣p)=∫f(⋅∣θ)π(dθ∣p). The reward process moves from p to px with x∼f(⋅∣p) and earns r(p)=∫xf(x∣p)dx. The target process with target T moves to the completion state C if x≥T and to px otherwise, earning the current probability of success r(p)=f([T,∞)∣p), and 0 in C. A state p is favourable if r(px1⋯xm)≤r(p) for every finite sequence of observations xi<T. For the invariance theorems the parameters are (xˉ,n) with the update ((nxˉ+x)/(n+1),n+1); μ is a location parameter of the likelihood if f(⋅∣μ+c) is f(⋅∣μ) shifted by c, and xˉ is a location parameter of the prior family if π(⋅∣xˉ+c,n) is π(⋅∣xˉ,n) shifted by c; scale parameters are defined with x↦bx, b>0. The Gittins index is that of the Bandit Algorithms model on these chains.
Formalization targets
Goal: Theorem 7.9 (in the form of Corollary 7.10)
If μ is a location parameter of a reward process with a conjugate prior family in which xˉ is a location parameter and the parameters update as the sample mean and count, then for every n>0
r(xˉ+c,n)=r(xˉ,n)+candν(xˉ,n)=xˉ+ν(0,n),
under the standing assumptions that the observations have a mean and the discounted rewards of the chain are integrable.
Milestones
Proposition 7.4 (favourable state: ν=r); Example 7.5 (Bernoulli target process, ν(α,β)=α/(α+β)); Example 7.6 (normal target process with known variance, ν(xˉ,n)=Φ(xˉ(1+n−1)−1/2) for xˉ≥0); Theorem 7.11 (scale parameter: ν(xˉ,n)=xˉν(1,n)); Theorem 7.17 (target process with a location parameter: ν(xˉ,n,T)=ν(xˉ−T,n,0)).
Significance
Theorem 7.9 and its companions are the reason the Gittins index of the normal reward process is tabulated as a function of n alone and that of the exponential process as a function of n and one ratio; every computational method of Chapter 8 starts by reducing the state space with them. Proposition 7.4 is the source of every closed-form index in the book: it identifies the states in which sampling for information is worthless, so that the index collapses to the immediate expected reward, and Examples 7.5 and 7.6 show that for the Bernoulli target process this is every state and for the normal target process every state with a nonnegative posterior mean. The formalization gives the platform its first Bayesian sampling-process model, in which the state is a posterior and conjugacy is stated through the posterior kernel of the likelihood, and its first index identities on unbounded-reward chains, which is where the integrability assumptions of the Bandit Algorithms model do real work.
None of this is machine-checked. The invariance theorems are stated in the proper-prior form of the corollaries, with the model's symmetry as hypotheses, so that they apply to any conjugate family with the stated structure rather than to a particular density.
Difficulty
The invariance theorems require showing that the chain of parameters from the shifted (scaled) state is the image of the chain from the original state under the shift (scaling) of trajectories, which is an equivariance of the Ionescu–Tulcea construction with respect to a measurable bijection commuting with the kernel; that stopping times are carried to stopping times; that the discounted reward of a stopping time shifts by c times the discounted time; and that the supremum of a nonempty bounded set of reals shifts and scales accordingly. Boundedness of the set of ratios is where the integrability assumption enters. Proposition 7.4 is the chain-level statement that all rewards along every trajectory from a favourable state are at most r(p), which needs an induction on the trajectory law of the target chain, followed by the argument of Proposition 2.7. Example 7.6 needs the monotonicity of xˉm(1+1/(n+m))−1/2 in the observations below the target, a small inequality, plus the Gaussian probability of a half-line as the current probability of success; Example 7.5 needs only that α/(α+β+m) decreases.
Formalization scope
The sampling model is a structure with Markov likelihood and prior kernels and a jointly measurable update; the predictive distribution is the kernel composition; conjugacy is an almost-everywhere identity between Mathlib's posterior of the likelihood with respect to the prior and the prior at the updated parameters, and is carried as a hypothesis of the invariance theorems and of Proposition 7.4 so that their subject is the Bayesian process. For the parameters (xˉ,n) it is required on n>0 only (IsConjugateOn): a proper prior has n>0, and conjugacy at every (xˉ,n)∈R2 is impossible with a location parameter, since at n=−1 the update divides by zero and sends every observation to one state, which made the first draft's location theorems vacuous. The chains are built with Kernel.map of product kernels, so their measurability is structural, and the target process lives on P ⊕ Unit with the completion state absorbing. The book's improper priors are replaced by proper conjugate families with the location or scale structure of Corollaries 7.10 and 7.12, as those corollaries do; the discrete-time correction factor of Section 2.8 is not applied since it cancels in every identity stated. The two examples are built directly from a uniform or Gaussian seed with the transition probabilities the book computes (the beta and normal posterior computations of Exercise 7.1 are not formalized). Hypotheses: a∈(0,1); integrable observations and L&S Assumption 35.6 for the reward processes; n>0 for the invariance theorems and xˉ>0 for the scale theorem; α,β>0; xˉ≥0 and n>0 for the normal example.
Trivializing readings are excluded: the indices are the genuine suprema of the Bandit Algorithms definition with integrable rewards, the update rule is the book's and not a free parameter, and the favourability condition ranges over all finite observation sequences. Welcome contributions: the equivariance of the trajectory measure under a state bijection commuting with the kernel, the transport of stopping times, and the reward bound along the target chain from a favourable state.
Selected references
J. Gittins, K. Glazebrook, R. Weber, Multi-armed Bandit Allocation Indices, 2nd ed., Wiley, 2011, Chapter 7. doi:10.1002/9780470980033
J. C. Gittins, D. M. Jones, A dynamic allocation index for the sequential design of experiments, in Progress in Statistics (J. Gani, ed.), North-Holland, 1974.
D. M. Jones, Search Procedures for Industrial Chemical Research, PhD thesis, University of Wales, 1975.
H. Raiffa, R. Schlaifer, Applied Statistical Decision Theory, Harvard University Press, 1961.
T. S. Ferguson, Mathematical Statistics: A Decision Theoretic Approach, Academic Press, 1967.
T. Lattimore, C. Szepesvári, Bandit Algorithms, Cambridge University Press, 2020, Chapters 34–35. doi:10.1017/9781108571401
Multi-armed Bandit Allocation Indices V: Restless Bandits, Indexability and Whittle Indices for Monotone ModelsTextbook
Motivation
Every proof of the index theorem in Gittins, Glazebrook and Weber, Multi-armed Bandit Allocation Indices (2nd ed., doi:10.1002/9780470980033), uses the fact that a bandit not being processed is frozen. Chapter 6 drops that: Whittle's restless bandits evolve under the passive action too, by a different law, and m of n must be active at every time. The problem is PSPACE-hard in general, so Whittle proposed a heuristic built from a Lagrangian relaxation: replace the hard constraint by a subsidy W paid whenever a bandit is passive, solve the resulting single-bandit average-reward problem, and read off, for each state, the least subsidy W(x) at which the passive action becomes optimal. When the set of states where passivity is optimal grows monotonically with W, the bandit is indexable and W(x) is its Whittle index; the Whittle index policy activates the m bandits of largest index. It reduces to the Gittins index policy when the passive action freezes, it is asymptotically optimal as n grows under a fluid-stability condition (Weber and Weiss), and it has become the standard heuristic for sensor management, opportunistic channel access, maintenance and queueing control. The price is that indexability must be established model by model. Section 6.5 shows how easy this is when the single-bandit problem is solved by a monotone policy, on two bi-directional models: the spinning plates asset, which improves under investment and deteriorates when neglected, and the vigour bandit of Whittle's Ehrenfest project, which tires when worked and recovers when rested.
Setting
A restless bandit is a Markov decision process with two actions, active (u=1) and passive (u=0), each with its own transition kernel and reward. Under a deterministic stationary Markov policy g with passive subsidy W the reward in state x is r(x,g(x))+W(1−g(x)), and the average reward from x is the Cesàro limit of the expected rewards. The optimal average reward g(W) is the supremum over such policies and initial states; a policy is optimal if it attains g(W) from every initial state; E0(W) is the set of states in which some optimal policy is passive; the bandit is indexable if E0(W) is nondecreasing in W; and W(x)=inf{W:x∈E0(W)}.
The spinning plates asset lives on {1,…,k}: active moves x→x+1 at rate λ(x), passive moves x→x−1 at rate μ(x), λ(k)=μ(1)=0, and r(x) is earned under both actions, r increasing. Uniformized so that rates are at most one, it is a discrete-time bandit whose kernels move with the rate's probability and otherwise stay. The monotone policy (y) is passive exactly on {x≥y}; under it the asset alternates between y−1 and y, spending the fraction ϕ(y)=λ(y−1)/(λ(y−1)+μ(y)) of its time at y, so its average reward is Wϕ(y)+R(y) with R(y)=r(y)ϕ(y)+r(y−1)(1−ϕ(y)), and W∗(x)=(R(x+1)−R(x))/(ϕ(x)−ϕ(x+1)). The vigour bandit is the mirror image: active moves down at rate ν(x) and earns r(x), passive moves up at rate ρ(x) and earns nothing, ψ(y)=ν(y)/(ν(y)+ρ(y−1)), and W∗∗(x)=(r(x)(1−ψ(x))−r(x+1)(1−ψ(x+1)))/(ψ(x+1)−ψ(x)).
Formalization targets
Goal: Theorem 6.4
For the spinning plates asset: (i) if ϕ is strictly decreasing over the thresholds 1≤y≤k+1, the asset is indexable; (ii) if additionally W∗ is strictly decreasing over the states, the Whittle index is
W(x)=W∗(x)=ϕ(x)−ϕ(x+1)R(x+1)−R(x),1≤x≤k.
Milestones
Eqs. (6.9)–(6.10): the monotone policy (y) earns Wϕ(y)+R(y) from every initial state and g(W)=maxy[Wϕ(y)+R(y)], because a monotone policy always achieves g(W); Theorem 6.5, the same two statements for the vigour bandit with ψ increasing and W∗∗ increasing.
Significance
Theorem 6.4 is the chapter's template for proving indexability: the single-bandit value g(W) is the upper envelope of finitely many lines Wϕ(y)+R(y) whose slopes decrease in the threshold, so the optimal threshold moves monotonically with the subsidy and the hinge points of the envelope are the indices. The same argument gives Theorem 6.5, the admission-control indices of Section 6.7, and the marginal productivity indices of Niño-Mora; it is the reason Whittle indices are computable in closed form for bi-directional models. Its formalization establishes, on the platform, the first restless-bandit model with a proved index, and the general notions of passive set, indexability and Whittle index that every later restless-bandit statement will use.
None of this is machine-checked. The average-reward optimality notion is stated without the DP equation (6.6), through optimality from every initial state, which is what the equation's solution encodes on a finite state space and avoids the relative value function altogether.
Difficulty
The proof in the book is two paragraphs, but it stands on the reduction to monotone policies, which is only sketched: every deterministic stationary policy, from every initial state, drives the asset into an absorbing endpoint or a two-state cycle {z−1,z} whose average reward is that of the monotone policy (z), so no policy beats the best monotone one and the passive set under an optimal-from-everywhere policy is exactly {x≥x(W)} for the smallest maximizing threshold. Formalizing this needs the average reward of a finite Markov chain as a limit determined by the stationary distribution of the recurrent class reached, for the two-point kernels of the model, and a case analysis of policies as {0,1}-strings. The envelope argument then needs that the smallest maximizer of maxy[Wϕ(y)+R(y)] is nonincreasing in W when ϕ is strictly decreasing, and that with W∗ strictly decreasing the maximizer is ≤x exactly when W≥W∗(x). Theorem 6.5 is the same with the roles of up and down exchanged. Nothing in Mathlib computes Cesàro limits of finite Markov chains.
Formalization scope
Restless bandits are the two-action DecisionProcesses of the superprocess module; average reward is a real limsup of Cesàro means of Bochner integrals over the chain law of the Bandit Algorithms model under the stationary kernel; the optimal average reward is a supremum over the finite type of deterministic stationary Markov policies and the finite state space, bounded by the reward bound. Both models are on Fin k with the book's states shifted down by one, kernels driftKernel p f that move to f x with probability p x, and the boundary conventions of ϕ and ψ (the book's "convenient positive values") replaced by their values 1,0 and 0,1 at the two extreme thresholds; the model assumptions λ(k)=μ(1)=0, ν(1)=ρ(k)=0, rates in [0,1], and r increasing and nonnegative are hypotheses. Theorem 6.5's "increasing" is read as strictly increasing, as in Theorem 6.4, since a nonstrict ψ admits zero interior rates for which the monotone reduction fails. The milestone (6.9) requires k≥1 and positive interior rates, which Theorem 6.4's hypothesis (i) implies.
Trivializing readings are excluded: indexability is monotonicity of the passive set over all real subsidies, the passive set is defined through policies optimal from every initial state, and the index identity is for every state. Welcome contributions: the average reward of a two-state cycle, the reduction of an arbitrary {0,1}-policy to a monotone one, and the envelope lemma for lines with decreasing slopes.
Selected references
J. Gittins, K. Glazebrook, R. Weber, Multi-armed Bandit Allocation Indices, 2nd ed., Wiley, 2011, Chapter 6. doi:10.1002/9780470980033
P. Whittle, Restless bandits: activity allocation in a changing world, Journal of Applied Probability 25(A), 1988. doi:10.2307/3214163
R. R. Weber, G. Weiss, On an index policy for restless bandits, Journal of Applied Probability 27(3), 1990. doi:10.2307/3214547
K. D. Glazebrook, C. Kirkbride, D. Ruiz-Hernandez, Spinning plates and squad systems: policies for bi-directional restless bandits, Advances in Applied Probability 38(1), 2006. doi:10.1239/aap/1143936141
J. Niño-Mora, Restless bandits, partial conservation laws and indexability, Advances in Applied Probability 33(1), 2001. doi:10.1017/S0001867800010661
C. H. Papadimitriou, J. N. Tsitsiklis, The complexity of optimal queueing network control, Mathematics of Operations Research 24(2), 1999. doi:10.1287/moor.24.2.293
Multi-armed Bandit Allocation Indices IV: The Achievable Region, Generalized Conservation Laws and the Adaptive Greedy AlgorithmTextbook
Motivation
Chapter 5 of Gittins, Glazebrook and Weber, Multi-armed Bandit Allocation Indices (2nd ed., doi:10.1002/9780470980033), presents the achievable region methodology of Tsoucas, Bertsimas and Niño-Mora, Glazebrook and Garbe, and Dacre, Glazebrook and Niño-Mora: instead of arguing about policies, one argues about the set of performance vectors they can produce. For a multi-armed bandit the natural performance of a policy is the vector of discounted numbers of times each state is continued; the expected return is linear in it; and the set of achievable performances turns out to be a polytope cut out by conservation laws, one inequality per subset of states, with equality exactly for the priority policies that put that subset last. Optimizing a linear objective over a polytope is a linear program, its dual is solved by an adaptive greedy algorithm, and the primal solution is the performance of a priority policy whose priorities are the algorithm's outputs, the Gittins indices. This gives yet another proof of the index theorem (Section 5.3) and, more importantly, a definition, generalized conservation laws (Section 5.4), of the class of systems for which the same argument works: branching bandits, multi-class queues, job scheduling with discounted rewards, systems with imposed priority classes. The chapter's main result, Theorem 5.5, is the statement that every such system is solved by an index policy.
Setting
There are N job types E={1,…,N}. A policy π has a performancexπ∈R+N, a vector of expectations; a permutation σ of E defines the permutation policy giving σN highest and σ1 lowest priority, and Sk={σ1,…,σk} is the set of the k lowest-priority types. The system satisfies GCL(1) if there are a base function b:2E→R+ and a matrix A=(AiS), positive on S and zero off it, such that for every policy
i∈S∑AiSxiπ≥b(S)(S⊆E),i∈E∑AiExiπ=b(E),
with equality in the first for every permutation policy whose ∣S∣ lowest-priority types are S. GCL(2) reverses the inequality. The adaptive greedy algorithmAG(A,r) picks iN maximizing ri/AiE, sets yˉE to the maximum, removes iN, and repeats with the adjusted rewards ri−∑j≥kAiSjyˉSj divided by AiSk−1; its outputs are the order i1,…,iN, the dual variables yˉSk and the indices νik=∑j≥kyˉSj.
For the SFABP of Section 5.3, n identical bandit processes on E with kernel P and discount factor a in the model of the Bandit Algorithms series, xiπ=Eπ∑tatIi(t) is the discounted number of continuations of a bandit in state i, AiS=E[1+a+⋯+aTiS−1] is the discounted return time to S from i∈S, and b(S) is the minimal cost ∑i∈SAiSxiπ, namely (1−a)−1E[aτ] with τ the number of continuations needed to bring every bandit into S.
Formalization targets
Goal: Theorem 5.5
For a GCL(1) system whose achievable region is convex, and any reward vector r: the achievable region is the polytope
its extreme points are performances of permutation policies; AG(A,r) has an output; and for every output the permutation policy in the order it finds, the Gittins index policy, maximizes ∑irixiπ over all policies.
Milestones
Lemma 5.1 (the SFABP satisfies the conservation laws, with equality for policies giving priority to states outside S); the identification on p. 123 of the adaptive greedy indices of a SFABP with the Gittins indices, together with their monotonicity along the order found; Theorem 5.10, the GCL(2) counterpart of the goal for cost minimization.
Significance
Theorem 5.5 is the index theorem in its most general form of this kind: it says nothing about Markov chains, only that performances are expectations, objectives are linear and conservation laws hold, and it delivers both the optimal policy and the algorithm that computes its priorities in polynomial time in the number of job types. It is the theorem behind the index results for branching bandits and Klimov's multi-class queue and behind the suboptimality bounds of Sections 5.5 and 5.7, all of which are calculations on the polytope. Lemma 5.1 and the p. 123 identification are what tie the abstract theorem to the Gittins index: they show that the multi-armed bandit is a GCL(1) system and that the priorities the algorithm produces are the same indices as Chapters 2 to 4 define through stopping times.
None of these is machine-checked. Formalizing Theorem 5.5 puts an LP-duality index theorem on the platform in a form any system can instantiate by verifying its conservation laws; formalizing Lemma 5.1 relates the Bandit Algorithms run law to the single-chain return times, which is the first conservation law on that model; and the p. 123 theorem gives an algorithmic characterization of the Gittins index on finite chains, distinct from the restart and largest-remaining-index characterizations of Chapter 2.
Difficulty
The goal's optimality clause is weak LP duality once one shows that the greedy dual variables are nonpositive except yˉE and satisfy the dual constraints with equality, which is a finite induction on the stages; the extreme-point clause needs that every vertex of a polyhedron is the unique maximizer of some linear functional, and the region clause that a compact convex set is the convex hull of its extreme points (Krein–Milman in finite dimension, or the polyhedral fact directly). None of this is in Mathlib in the required form. Lemma 5.1 is probabilistic: the lower bound requires the strong Markov property of the continued bandit under an arbitrary past-measurable policy, a pathwise accounting of the discounted periods paid for by each continuation from S, and the observation that at most τ slots can be spent on bandits that have never been in S; the equality for priority policies requires that these policies use exactly those slots first and then tile the future with return excursions, and the product form of b(S) requires independence of the bandits' process-time trajectories under the run law, which is built decision time by decision time rather than as a product. The p. 123 theorem is the computation (5.13) to (5.14) combined with the optimal-stopping characterization of Chapter 2 for the stop sets {i1,…,ik−2}, which lie between {ν<ν(ik−1)} and {ν≤ν(ik−1)}; ties make the induction delicate, and the statement is claimed for every tie-breaking.
Formalization scope
GCL(1) and GCL(2) systems are structures over an arbitrary policy type: performance, base function, matrix, permutation policies and the three laws are fields, so the theorems are statements about finite-dimensional data and the platform's proof needs no probability. The adaptive greedy algorithm is specified relationally, as the set of its possible outputs with arbitrary tie-breaking, and the conclusion holds for each of them; existence of an output is asserted separately. The optimality clause is stated as a comparison with every policy rather than as a real supremum. The hypothesis that the achievable region is convex is explicit: the book's argument from extreme points to the whole polytope uses randomization of policies, and without it the region of a system with only its permutation policies is finite. The SFABP items use n identical bandits on Fin N in the Bandit Algorithms model, the coefficients AiS through Mission I's stoppedTime at the return time, and b(S) in the product form (1−a)−1∏j:kj∈/SE[aTkjS], which is the minimal cost the argument on p. 120 establishes; the book prints a sum, which is 0 when all bandits start in S where the minimal cost is 1/(1−a). Discount factors are in (0,1) throughout.
Trivializing readings are excluded: AiS>0 for i∈S is part of the structure and of Lemma 5.1's conclusion, the polytope equations are over all subsets, and the index clause quantifies over every greedy output. Welcome contributions: the nonpositivity and dual feasibility of the greedy variables, the vertex-exposure lemma for polyhedra, and the product decomposition of the run law of identical bandits.
Selected references
J. Gittins, K. Glazebrook, R. Weber, Multi-armed Bandit Allocation Indices, 2nd ed., Wiley, 2011, Chapter 5. doi:10.1002/9780470980033
D. Bertsimas, J. Niño-Mora, Conservation laws, extended polymatroids and multiarmed bandit problems; a polyhedral approach to indexable systems, Mathematics of Operations Research 21(2), 1996. doi:10.1287/moor.21.2.257
P. Tsoucas, The region of achievable performance in a model of Klimov, IBM Research Report RC16543, 1991.
E. G. Coffman, I. Mitrani, A characterization of waiting time performance realizable by single-server queues, Operations Research 28(3), 1980. doi:10.1287/opre.28.3.810
K. D. Glazebrook, R. Garbe, Almost optimal policies for stochastic systems which almost satisfy conservation laws, Annals of Operations Research 92, 1999. doi:10.1023/A:1018992306696
T. Lattimore, C. Szepesvári, Bandit Algorithms, Cambridge University Press, 2020, Chapter 35. doi:10.1017/9781108571401
Introduction to Multi-Armed Bandits XI: Bandits and Agents, Incentivized Exploration via Hidden ExplorationTextbook
Motivation
A recommendation system learns from the users it serves: the diner who tries a restaurant produces the review the next diner reads. Each user would rather exploit what is already known than explore for the benefit of those who come later, so a population of self-interested agents under-explores, and an alternative that looks bad on sparse early evidence may never be tried again even when it is the best. Chapter 11 of Slivkins, Introduction to Multi-Armed Bandits (arXiv:1904.07272), treats incentivized exploration: a principal who cannot force the agents but can recommend, and who, because it aggregates what earlier agents observed, knows more than any one of them. The question is whether recommendations alone can induce enough exploration to learn as fast as an ordinary bandit algorithm. The model is that of Kremer, Mansour and Perry (JPE 2014) and the results are those of Mansour, Slivkins and Syrgkanis (EC 2015, Operations Research 2020), specialized to two arms; the single-round problem is Bayesian persuasion in the sense of Kamenica and Gentzkow (AER 2011).
Setting
There are K arms and T rounds. A mean reward vector μ∈[0,1]K is drawn from a known priorP, and each pull of arm a yields a reward drawn from a known family Dμa with mean μa. In round t the principal recommends an arm rect; agent t, who knows the prior, the family, the algorithm and the round but not the past, sees only rect, chooses at, collects rt∼Dμat and leaves; the principal observes (at,rt). The chapter works with two arms, ordered so that the prior means satisfy μ10≥μ20, with a prior of finite support and finitely many reward values.
An algorithm is Bayesian incentive-compatible (BIC, Definition 11.4) if following its recommendation is in every agent's interest given what the agent knows: for every round t and arms a=a′ with Pr[rect=a,Et−1]>0,
E[μa−μa′∣rect=a,Et−1]≥0,(11.1)
where Et−1 is the event that all previous agents complied. A BIC algorithm is then an ordinary bandit algorithm whose recommendations are followed, and the run has the law of the Bayesian bandit of Chapter 3. Two contrasting policies frame the chapter. GREEDY reveals the history and lets agents exploit, at∈argmaxaE[μa∣Ht] (11.2); it is BIC and it fails. HiddenExploration (Algorithm 11.1) hides a little exploration in a lot of exploitation: on a signal sig, with probability ε it recommends a target arm atrg(sig), otherwise the arm maximizing E[μa∣sig], ties to arm 1. Its posterior gap is G=E[μ2−μ1∣sig]. RepeatedHE (Algorithm 11.2) runs it round after round with an arbitrary bandit algorithm ALG as the target: N0 initial rounds recommend arm 1; afterwards, with probability ε the round is an exploration round in which ALG chooses (and is fed the reward), and otherwise the exploitation branch recommends minargmaxaE[μa∣St], where St is the data of all exploration rounds so far (11.10). The quantity that governs everything is G1,n=E[μ2−μ1∣S1,n] (11.11), the posterior gap after n samples of arm 1, and Property (11.12), that Pr[G1,n>0]>0 for some n: arm 2 can appear better after enough samples of arm 1.
Formalization targets
Goal: Theorem 11.15
RepeatedHE with exploration probability ε>0 and N0 initial samples of arm 1 is BIC as long as
ε<31E[G⋅1{G>0}],G=GN0+1=E[μ2−μ1∣S1,N0],
for any bandit algorithm ALG and any horizon. The threshold depends on the prior alone.
Milestones
Theorem 11.7 (GREEDY never chooses arm 2 with probability at least μ10−μ20) and Corollary 11.8 (linear Bayesian regret of GREEDY under independent priors); Lemma 11.10 (HiddenExploration is BIC when ε≤31E[G1{G>0}]) with Claim 11.12 (the arm-2 side of the constraint suffices); Corollary 11.14 (RepeatedHE is BIC under the round-by-round condition); Theorem 11.19 (without Property (11.12) no BIC algorithm ever plays arm 2, ties to arm 1).
Significance
The results say when exploration can be incentivized at all and how. Theorem 11.7 shows that revealing everything is not a solution: the greedy dynamics gets stuck on arm 1 with a probability that does not shrink with T, and Corollary 11.8 turns that into Ω(T) Bayesian regret. Theorem 11.15 shows that a recommendation-only principal can induce any amount of exploration it wants, with ALG arbitrary, at a per-round rate ε fixed by the prior; Theorem 11.17 (stated with a proof sketch, and omitted here) then transfers ALG's regret to RepeatedHE up to the prior-dependent factors N0 and 1/ε, so O~(T) regret is attainable subject to incentives. Theorem 11.19 closes the picture: Property (11.12) is necessary as well as sufficient. Together they characterize which priors admit incentivized exploration and give an algorithm that works for all of them.
Nothing of this is machine-checked. The mission adds to the Bayesian layer of mission III (prior, posterior by Bayes' rule, Bayesian regret) the BIC constraint on a joint law, GREEDY as a policy, the single-round HiddenExploration on an abstract finite signal, and the law of RepeatedHE; all of it is reusable for the K-arm and the "explore all explorable arms" extensions of the literature review.
Difficulty
Theorem 11.7 is a martingale argument: the posterior gap along the history is a Doob martingale, the first round in which arm 2 is chosen is a bounded stopping time, and optional stopping gives E[Zτ]=μ10−μ20; all of this has to be set up on the joint law of (μ,HT) of mission III, where the posterior is defined by Bayes' rule and the identification with a conditional expectation is itself a theorem (posterior_eq_condProb). Lemma 11.10 is the heart of the chapter and is not a computation about rec: it works with F(E)=E[G1E], splits along the two branches, uses that the exploitation branch recommends arm 2 exactly when G>0, and closes with F(G>0)+F(G<0)=E[μ2−μ1]≤0; the only place where the analysis uses that both branches are functions of the signal is the step E[μ2−μ1∣rec=2]=E[G∣rec=2], and a formalization has to make that step explicit. Theorem 11.15 requires seeing each later round of RepeatedHE as a HiddenExploration with signal St, where ALG's choice is a randomized function of St, and then the monotonicity of E[Gt1{Gt>0}] in t, a two-line consequence of St+1 determining St that presupposes the posterior given St is the Bayes posterior of the exploration data alone, which is true because the exploration decisions do not depend on μ given that data. Corollary 11.8 needs the independence of the event "μ1<1−2α and arm 2 is never chosen" from μ2. Theorem 11.19 is an induction in which the inductive hypothesis is a probability-zero statement about all earlier rounds.
Formalization scope
Arms are Fin 2, the book's arm 1 being index 0; rounds are Fin T. The prior is a probability measure on mean vectors supported on a finite set F⊆[0,1]2, with μ10≥μ20 as a hypothesis; the reward family is mission III's RewardFamily (finitely many values, mean ν for ν∈[0,1]). BIC is defined on a joint law of (μ,record) of the run in which every agent complies, with the recommendation of each round read off the record; the compliance event Et−1 of (11.1) is the sure event of that law, which is the standard reading of "the agents believe all previous agents complied". For a bandit policy the law is mission III's jointMeasure. Conditional expectations are written as finite sums over F, so there are no integrals and no integrability side conditions; a posterior mean off the support is a junk 0 that never enters a theorem. GREEDY allows arbitrary tie-breaking; HiddenExploration's exploitation branch breaks ties toward arm 1 as Algorithm 11.1 does; the tie convention of Theorem 11.19 is the strict form of BIC for arm 2. The law of RepeatedHE is an explicit finitely supported measure, μ and record weighted by the prior times the product of the round probabilities (initial rounds forced to arm 1, then the ε-coin, ALG's kernel on its own history, or the exploitation arm, then Dμat); it is written this way because ALG is fed a history of variable length. Two conditions are stated exactly as printed: Lemma 11.10 with ε≤31E[G1{G>0}] (non-strict, checked at equality) and Theorem 11.15 with the strict inequality.
Trivializations are excluded: ε>0 throughout; the BIC condition is asserted only where the recommendation has positive probability, and the sums in it are over the finite support, so an unsatisfiable hypothesis cannot hide in a measure-zero set. Welcome contributions: the optional-stopping argument on jointMeasure, the identification of explPostMean with the conditional expectation given the exploration data, the Bayes-rule algebra behind Lemma 11.10, and the counting lemmas on heRecords.
Selected references
A. Slivkins, Introduction to Multi-Armed Bandits, Foundations and Trends in Machine Learning 12(1-2), 2019, Chapter 11. arXiv:1904.07272, doi:10.1561/2200000068
I. Kremer, Y. Mansour, M. Perry, Implementing the "Wisdom of the Crowd", Journal of Political Economy 122(5), 2014. doi:10.1086/676597
Y. Mansour, A. Slivkins, V. Syrgkanis, Bayesian Incentive-Compatible Bandit Exploration, Operations Research 68(4), 2020 (EC 2015). doi:10.1287/opre.2019.1919
E. Kamenica, M. Gentzkow, Bayesian Persuasion, American Economic Review 101(6), 2011. doi:10.1257/aer.101.6.2590
M. Sellke, A. Slivkins, The Price of Incentivizing Exploration: A Characterization via Thompson Sampling and Sample Complexity, Operations Research 71(5), 2023. doi:10.1287/opre.2022.2401
Inventory Control VIII: The Clark-Scarf Decomposition for a Serial SystemTextbook
Safety stock in a chain
Chapter 10 of Axsäter's Inventory Control turns to reorder points and safety stocks in
multi-echelon systems, where the installations cannot be treated separately: a large stock
downstream lets an upstream site run lean, and a long upstream lead-time argues for stock at
the top. The best-known exact technique for serial systems is the decomposition of Clark and
Scarf (1960), which the book presents in the infinite-horizon form of Federgruen and Zipkin
(1984). It is also where the echelon stock measure comes from. The section's argument is
short and self-contained, and its conclusion is a complete description of the optimal policy for
a two-level serial system: order-up-to levels at both installations, one of them a newsboy
solution, the other the minimizer of a convex function in which upstream shortages appear as an
induced cost. It is the capstone of Chapter 10.
Setting
Installation 1 faces normally distributed period demand with mean μ and standard deviation
σ, independent across periods, so the demand over n periods, D(n), is normal with
mean nμ and standard deviation nσ. Installation 1 replenishes from
installation 2 with lead-time L1 periods; installation 2 replenishes from an outside supplier
with infinite supply and lead-time L2. Demand that cannot be met is backordered. Costs per
unit and period are echelon holding costse1,e2≥0, so the installation holding
costs are h1=e1+e2 and h2=e2, and a shortage cost b1 at installation 1; there
are no ordering costs. Events in a period occur in the order: installation 2 orders, its
delivery arrives, installation 1 orders, its delivery arrives, demand, cost evaluation.
Consider an arbitrary period t. After ordering, installation 2 has an echelon inventory
position y2, and by the standard argument its echelon stock in period t+L2 is
y2−D(L2). Installation 1 then orders, realizing an echelon position y1 that cannot
exceed what is available: y1≤y2−D(L2) (Eq. 10.1). Its inventory level after the
demand in period t+L2+L1 is y1−D(L1+1). The expected period costs are
C2=h2E(y2−D(L2)−y1) at installation 2 and
C1=h1E(y1−D(L1+1))++b1E(y1−D(L1+1))− at installation 1,
and the book reallocates the term −h2y1 to obtain
with μ2′=L2μ and μ1′′=(L1+1)μ. As a function of a free y^1,
C~1 is the newsboy-type function C^1 of Eq. (10.6), minimized at the level
S1=y^1∗ given by the fractile equation (10.8). Passing everything available up to
S1 to installation 1, y1=min{S1,y2−D(L2)}, gives the total cost C^2(y2)
of Eq. (10.9), whose minimizer S2=y2∗ is the order-up-to level of installation 2.
Formalization targets
Goal — the decomposition
With S1 from (10.8) and S2 a minimizer of C^2: for every y2 and every
allocation rule a with a(u)≤y2−u and finite expected cost,
C^2(S2)≤E[C~2(y2)+C~1(a(D(L2)))],
and the order-up-to policy (S1,S2) attains C^2(S2).
Supporting targets
Eq. (10.3), the stage-1 period cost through the expected backorders; the reallocation
(10.4)-(10.5), which leaves the total unchanged; the closed form (10.6) of C^1 through
the loss function G; the convexity of C^1, its derivative (10.7), and the fractile
characterization (10.8) of its minimizers; the pointwise rule that min{S1,y2−u} is the
cheapest feasible y1; the identity (10.9); and the convexity of C^2 (Problem 10.1)
with the existence of its minimizer when e2>0.
Significance
The result itself. The decomposition reduces a two-dimensional stochastic control problem to
two one-dimensional convex problems solved in sequence, from downstream to upstream, and it
identifies the optimal policy class. The downstream level S1 is a newsboy solution with
overage cost e1, the value added, and underage cost e2+b1, and it is independent of the
upstream installation altogether; the upstream level S2 sees the downstream installation only
through the induced shortage cost, the last term of (10.9). The book notes the extensions the
argument admits, to more echelons, to batch ordering at the top, and, via Rosling's
equivalence, to assembly systems, and its Sect. 10.1.2 adapts it, now only approximately, to
distribution systems under the balance assumption. Example 10.1 shows the typical outcome: the
optimal average stock at the upstream installation is slightly negative.
Formalizing it. The section's mathematics is a chain of expectations under Gaussian laws and
two convexity arguments. Formalizing it fixes what "optimal" means, a per-period comparison
against every allocation rule, and separates the two convexity claims the book makes in one
clause each. Nothing here is open; no statement has a machine-checked proof yet.
Difficulty
The pointwise allocation rule and the newsboy fractile are the same arguments as in the newsboy
mission. The two places where work is needed are the identity (10.9), an expectation of a
piecewise function split at u=y2−S1, and the convexity of C^2, which requires
seeing that x↦C^1(min{S1,x}) is convex precisely because S1 is a
minimizer of the convex C^1 (for any other cut-off the function is not convex), and that
convexity is preserved by integrating against the law of D(L2), which needs the integrability
of the linearly growing C^1. Existence of S2 then follows from the growth of C^2
at both ends, which comes from the asymptotics of the loss function: G(z)→0 as
z→∞ and G(z)+z→0 as z→−∞.
Formalization scope
D(n) is csDemand mu sigma n, the Gaussian law newsboyDemand (n μ) (√n σ) from the newsboy
mission, so the loss function G and its closed form are reused as references. The costs are
parametrized by e1,e2,b1 with h1=e1+e2 and h2=e2 written out; C~1,
C~2, the pre-reallocation period cost and C^2 are Bochner integrals against these
laws. Every statement assumes σ>0; the goal and the convexity statements assume
e1,e2≥0 and b1>0, the book's cost signs. L2=0 is allowed and makes D(L2) a
point mass, which is the setting of the book's Problem 10.2.
S1 enters as any solution of the fractile equation (10.8) and S2 as any minimizer of
C^2; the other items show that both exist when e1,e2>0. When e1=0 the fractile is
1, no S1 exists, and the goal is vacuous, which is faithful: the book observes that then
S1→∞ and installation 2 never carries stock. Symmetrically, when e2=0 and
L2≥1, C^2 decreases towards its infimum without attaining it, so no S2 exists
and the goal is again vacuous: with free upstream holding the optimal y2 is unbounded. Allocation rules are arbitrary functions
of the realized D(L2) with an integrability hypothesis; without it Lean's integral of a
non-integrable cost would be 0 and could undercut C^2(S2), which is negative in
Example 10.1's stage-1 term.
What is not modelled is the infinite-horizon dynamic problem: the book's optimality claim is
made period by period, and the passage to the stationary policy rests on the remark that the
outside supplier has infinite supply, so the same y2 can be chosen in every period. The
definitions are reusable for the three-echelon extension and for the distribution system of
Sect. 10.1.2; contributions formalizing Problem 10.2 (L2=0) as a first step are welcome.
Selected references
Sven Axsäter, Inventory Control, 3rd edition, International Series in Operations Research & Management Science 225, Springer, 2015, Sect. 10.1.1. DOI 10.1007/978-3-319-15729-0
Andrew J. Clark and Herbert Scarf, Optimal Policies for a Multi-Echelon Inventory Problem, Management Science 6(4), 1960, pp. 475-490. DOI 10.1287/mnsc.6.4.475
Awi Federgruen and Paul Zipkin, Computational Issues in an Infinite-Horizon, Multiechelon Inventory Model, Operations Research 32(4), 1984, pp. 818-836. DOI 10.1287/opre.32.4.818
Kaj Rosling, Optimal Inventory Policies for Assembly Systems under Random Demands, Operations Research 37(4), 1989, pp. 565-579. DOI 10.1287/opre.37.4.565
Geert-Jan van Houtum, Karl Inderfurth and Willem H. M. Zijm, Materials Coordination in Stochastic Multi-Echelon Systems, European Journal of Operational Research 95(1), 1996, pp. 1-23. DOI 10.1016/0377-2217(96)00080-8
Fundamentals of Supply Chain Theory V: The Bullwhip EffectTextbook
Why orders swing more than sales
Procter & Gamble observed in the 1990s that the orders its distributors placed for diapers were
far more variable than the retail sales of diapers, and that its own orders to suppliers were more
variable still, although the end demand for diapers is about as stable as demand gets. The
phenomenon, a growing amplification of variability as one moves upstream in a supply chain, is the
bullwhip effect. Lee, Padmanabhan and Whang
(1997) argued that it is not a symptom of irrational
behaviour: four rational responses of an inventory manager to their own environment each produce
it. Chapter 13 of Snyder and Shen's Fundamentals of Supply Chain Theory
(2019) makes three of the four quantitative, following
Chen, Drezner, Ryan and Simchi-Levi (2000) for
demand signal processing, Lee et al. for the rationing game, and Cachon
(1999) for order batching. This mission formalizes those
three models and the theorems the chapter proves about them.
Setting
Demand signal processing. A retailer faces a demand process Dt, t∈Z, that
follows the stationary first-order autoregressive model
Dt=d+ρDt−1+ϵt,
with a constant d≥0, a correlation constant −1<ρ<1, and errors ϵt that
are independent N(0,σ2) variables, each independent of the demands before period t.
In steady state every Dt has the law N(d/(1−ρ),σ2/(1−ρ2)). The retailer
replenishes with a lead time of L periods under a base-stock policy but does not know the
demand parameters, so it estimates the lead-time demand from a moving average of the previous
m≥1 demands:
and sets the base-stock level St=μ^tL+zασ^etL, where zα
is a safety factor. The book writes the constant in σ^etL as CLρ and does
not give its form; here it is a free parameter C. Each period the retailer orders
Qt=St−St−1+Dt−1, which may be negative. In Lean the process is the structure
AR1Demand, whose fields are the parameters, the errors, the demands, the recursion, the
independence properties and the stationary law; muHat, err, sigmaHat, baseStock and
order are the five quantities above.
Order batching.N retailers face independent N(μ,σ2) demands in every period and
each orders once every R≥1 periods, the order being its demand over the previous R
periods. The supplier's order in a given period is the total ordered by the retailers whose
ordering day falls in that period. Three patterns are compared: random ordering, in which each
retailer's day is uniform over the R days, so the number X of retailers ordering on a given
day is binomial(N,1/R); positively correlated ordering, in which all retailers order on the
same day, so X=N with probability 1/R and 0 otherwise; and balanced ordering, in which
the retailers are spread as evenly as possible, so with N=MR+k, 0≤k<R, X is M+1
with probability k/R and M otherwise. The structure BatchOrders P N R mu sigma carries the
demands, the ordering count X independent of them, and supplierOrder, the sum of the last R
demands of retailers 1,…,X; each pattern enters a theorem as a hypothesis on the law of X.
Rationing game. Two identical retailers face single-period demand with distribution function
F, holding cost h and stockout penalty p, so the newsvendor quantity Q∗ satisfies
F(Q∗)=p/(h+p). With probability r the supplier can deliver only A1<2Q∗ units in total
and allocates them pro rata to the orders, retailer 1 receiving A1Q1/(Q1+Q2); with
probability 1−r supply is unlimited. Retailer 1's expected cost when the retailers order
Q1 and Q2 is
g1(Q1)=(1−r)nv(Q1)+rnv(Q1+Q2A1Q1),
with nv the newsvendor cost; this is rationingCost.
Formalization targets
Goal: Theorem 13.2, demand signal processing
Var[Dt]Var[Qt]≥1+(m2L+m22L2)(1−ρm),
with equality when zα=0. This is bullwhip_signal_processing. The bound exceeds 1
whenever L>0, whatever the value of ρ: a lead time and a moving-average forecast are
enough to produce the effect.
Supporting targets
The chapter's own route to the goal, each a milestone: the steady-state moments (13.2) to (13.4),
E[Dt]=d/(1−ρ), Var[Dt]=σ2/(1−ρ2) and
Cov[Dt,Dt−k]=ρkVar[Dt]; the identity
Qt=(1+L/m)Dt−1−(L/m)Dt−m−1+zα(σ^etL−σ^e,t−1L);
Lemma 13.1, Cov[Dt−i,σ^etL]=0 for 1≤i≤m; the vanishing of the
cross term (13.12); and the variance of the demand part,
(1+(2L/m+2L2/m2)(1−ρm))Var[Dt].
Order batching, Theorem 13.4: under the three patterns the supplier's order has mean Nμ and
Var[Qtc]≥Var[Qtr]≥Var[Qtb]≥Nσ2,
through the three variance formulas Nσ2+μ2N(R−1), Nσ2+μ2N2(R−1) and
Nσ2+μ2k(R−k).
The rationing game, Theorem 13.3: if Q>0 is a symmetric Nash equilibrium, that is, Q
minimizes g1 over positive order quantities when the other retailer orders Q, then
Q>Q∗.
Significance
The three theorems are the quantitative core of the chapter. Theorem 13.2 is the single-stage
building block that Theorems 13.6 and 13.7 later iterate along a serial chain, giving the
product-form and the exponential lower bounds on the amplification at stage k; its
comparative statics, the bound decreasing in m and increasing in L, are the basis of the
remedies the chapter recommends (shorter lead times, smoother forecasts, sharing point-of-sale
data). Theorem 13.4 ranks the ordering patterns and justifies the advice to balance ordering
days when batching cannot be avoided. Theorem 13.3 shows that pro-rata rationing alone inflates
orders; the book is careful to note that inflated orders are not by themselves inflated variances,
and that the variance statement for this model is due to Rong, Shen and Snyder
(2017).
None of these results has a machine-checked proof. The book's proofs of Theorems 13.2 and 13.4
are complete but informal, and the proof of Lemma 13.1 is omitted with a citation to Ryan's
1997 thesis; formalizing it requires a self-contained argument. The variance decomposition of
Qt and the conditioning argument for Theorem 13.4 are reusable for the multistage results of
Sect. 13.2.5, which are natural follow-up missions on the same definitions.
Difficulty
The obvious computation of Var[Qt] expands the order into its demand part and its
safety-stock part and hopes the cross term disappears. It does, but not for a reason visible in
the formulas: σ^etL is a square root of a sum of squares of forecast errors, a
nonlinear function of m+m demands, and its covariance with a single demand is zero only
because the errors are jointly Gaussian with mean zero and σ^ is an even function of
them, so the covariance is the expectation of an odd function of a centred Gaussian vector. That
is Lemma 13.1, and the vanishing of the cross term needs two further covariances,
Cov[Dt−1,σ^e,t−1L] and Cov[Dt−m−1,σ^etL], which the
book reduces to the lemma through the recursion (the second reduction divides by ρ) but
which hold for every ρ by the same symmetry. A solver must set up the joint Gaussian
structure of the demand vector and prove the odd-function argument; nothing in Mathlib does this
directly.
The second obstacle is that the moments (13.2) to (13.4) are not assumed but derived: the
structure carries the stationary law of each Dt and the independence of ϵt from the
past, and the autocovariance ρkVar[Dt] has to be obtained from the recursion by
induction on the lag, with integrability supplied by the Gaussian laws.
For Theorem 13.4 the work is the conditioning on X: given X=x the supplier's order is a sum
of xR independent normals, so its conditional mean is xRμ and conditional variance
xRσ2, and the total variance is E[Var[Q∣X]]+Var[E[Q∣X]].
The order is defined by a sum over retailers i<X, so the independence of X from the demands
has to be used through the indicator structure rather than through a conditional-expectation
library result.
For Theorem 13.3 the argument is a first-order condition. It requires that the newsvendor cost be
differentiable with derivative (h+p)F(y)−p, which holds when F is continuous, and that the
symmetric equilibrium be an interior minimizer, which is why Q>0 and the minimization over
Q1>0 are hypotheses.
Formalization scope
Time is indexed by Z so that Dt−m−1 exists for every t. AR1Demand asserts the
recursion for every outcome, the independence of the whole error family, the independence of
ϵt from (Ds)s<t, and the stationary law of every Dt; these are the
"steady-state" assumptions the book makes in words. The structure is satisfiable: the stationary
Gaussian AR(1) process on a full-measure set of error sequences has all these properties. The
constant CLρ is a free real parameter C; no theorem depends on its value.
The goal divides by Var[Dt], which is σ2/(1−ρ2)>0 under the structure's
hypotheses σ>0 and ∣ρ∣<1, so the ratio is a genuine quotient. Mathlib's
ProbabilityTheory.variance and covariance are used; both are the ordinary real quantities
for square-integrable variables, which every variable here is, σ^etL included.
In BatchOrders the demands are indexed by Fin N × Fin R, the count X is a natural-valued
random variable bounded by N and independent of the demand family, and supplierOrder sums the
R demands of retailers 1,…,X, the book's "without loss of generality" choice. The laws
of X are hypotheses on point probabilities P.real {ω | X ω = j}; with R≥1 each of the
three families of hypotheses is satisfiable by a structure with the corresponding law. The
subtractions R−1 and R−k are real.
In the rationing game the demand law is a probability measure on R whose distribution
function is continuous and strictly increasing on [0,∞); the newsvendor loss is assumed
integrable at every order quantity. The pro-rata allocation uses Lean's total division, which is
never at 0 in the theorem since Q1+Q2>0.
Beyond the ten milestones, the multistage Theorems 13.6 and 13.7 and the centralized-information
bound of Theorem 13.5 are welcome as extensions on the same AR1Demand.
H. L. Lee, V. Padmanabhan and S. Whang, Information distortion in a supply chain: the bullwhip effect, Management Science 43(4), 1997. https://doi.org/10.1287/mnsc.43.4.546
F. Chen, Z. Drezner, J. K. Ryan and D. Simchi-Levi, Quantifying the bullwhip effect in a simple supply chain: the impact of forecasting, lead times, and information, Management Science 46(3), 2000. https://doi.org/10.1287/mnsc.46.3.436.12069
G. P. Cachon, Managing supply chain demand variability with scheduled ordering policies, Management Science 45(6), 1999. https://doi.org/10.1287/mnsc.45.6.843
Y. Rong, Z.-J. M. Shen and L. V. Snyder, The impact of ordering behavior on order-quantity variability: a study of forward and reverse bullwhip effects, Naval Research Logistics 64(1), 2017. https://doi.org/10.1002/nav.21757
Markov Decision Processes III: The Average Reward Optimality Equation for Unichain ModelsTextbook
Motivation
When a system is controlled indefinitely and decisions are frequent — a router admitting
packets, a queue accepting jobs, a machine being maintained — discounting future rewards is
often unjustified, and what matters is the long-run average reward per period. Puterman's
Chapter 8 (doi:10.1002/9780470316887) develops the
theory of this criterion, and its central object is a single equation, the average reward
optimality equation0=maxa∈As{r(s,a)−g+∑jp(j∣s,a)h(j)−h(s)}, whose unknowns
are a scalar gain g and a bias function h. For unichain models, in which every stationary
policy generates a Markov chain with one recurrent class, this equation determines the optimal
gain and an optimal stationary policy. The results go back to Howard (Dynamic Programming and
Markov Processes, MIT Press, 1960) for the recurrent case and to Blackwell (Discrete dynamic
programming, Annals of Mathematical Statistics 33, 1962,
doi:10.1214/aoms/1177704593) and Derman for the
general finite case; Puterman's Section 8.4 proves them through the discounted theory of
mission II, by letting the discount factor tend to one.
Setting
The model is stationary (Assumption 8.0.1): a finite set S of states, for each s a finite
nonempty set As of actions, a reward r(s,a) and transition probabilities p(j∣s,a), none
depending on the decision epoch. A policyπ∈ΠHR may randomize and may depend on the
whole history; the deterministic stationary policyd∞ applies the decision rule
d:S→A at every epoch. Its transition matrix is Pd(i,j)=p(j∣i,d(i)).
For a policy π, vN+1π(s)=Esπ[∑t=1Nr(Xt,Yt)] is the expected reward
over N epochs. Since the limit of N−1vN+1π(s) need not exist (Example 8.1.1), the
chapter works with the lim sup and lim inf average rewardsg+π(s) and g−π(s),
and with g±∗(s)=supπg±π(s). A policy π∗ is average optimal when
g−π∗(s)≥g+π(s) for all s and π, the strongest of the three criteria of
Section 8.1.2.
The optimality residual is B(g,h)(s)=maxa∈As{r(s,a)−g+∑jp(j∣s,a)h(j)−h(s)},
and the optimality equation is B(g,h)=0. A decision rule is h-improving when it attains
maxa∈As{r(s,a)+∑jp(j∣s,a)h(j)} at every state. A transition matrix is
unichain when it consists of a single recurrent class plus a possibly empty set of transient
states, and the MDP is unichain when Pd is unichain for every deterministic decision rule.
Formalization targets
Goal — Theorem 8.4.5 (printed p. 361)
For a finite unichain model: (a) some deterministic stationary policy is average optimal; (b) the
optimality equation B(g∗,h∗)=0 has a solution, and (d) its scalar satisfies
g+∗(s)=g−∗(s)=g∗ for every s; (c) for every solution, every h∗-improving decision
rule gives an average optimal stationary policy.
Theorem 8.4.1 (printed p. 356)
If B(g,h)≤0 then g≥g+∗; if B(g,h)≥0 then
g≤supdg−d∞≤g−∗; if B(g,h)=0 then g+∗=g−∗=g.
Theorem 8.4.3 (printed p. 358)
In a finite unichain model B(g,h)=0 has a solution, and every solution has the same g.
Theorem 8.4.4 (printed p. 361)
If B(g∗,h∗)=0 and d∗ is h∗-improving, then (d∗)∞ is average optimal.
Significance
Theorem 8.4.1(c) is what the source calls "one of the most important results for average
reward models": a solution of the optimality equation with constant g pins down the optimal
gain under every criterion at once, so that in finite unichain models the three optimality
criteria of Section 8.1.2 coincide. Theorem 8.4.3 guarantees such a solution exists, and Theorem
8.4.4 reads an optimal policy off it. Together, Theorem 8.4.5 reduces the infinite-horizon
average reward problem over all history-dependent randomized policies to a finite system of
equations in (g,h), which is what policy iteration, value iteration and linear programming
solve in Sections 8.5 to 8.8.
The results are classical and proved. Formalizing them fixes the chain-structure hypothesis in
a checkable form and pins down which criterion "average optimal" means, two places where the
literature is loose. The platform's MarkovDecisionProcesses series has the finite-horizon
(mission I) and discounted (mission II) models; this mission adds the undiscounted stationary
model, the gains, and the unichain classification, on which Chapter 9's multichain optimality
equations and Chapter 10's sensitive discount optimality can be built.
Difficulty
The obvious argument for Theorem 8.4.3 is to take the discounted optimal value vλ∗ of
mission II and let λ↑1. It fails as stated because vλ∗ blows up like
(1−λ)−1; what converges is the Laurent expansion vλd∞=(1−λ)−1ge+h+o(1)
of the value of a fixed stationary policy, Corollary 8.2.4, and that expansion needs the
limiting matrix Pd∗ and the deviation matrix HPd of a unichain chain. So the proof must
first develop the Markov chain theory of Section 8.2 and Appendix A, choose a subsequence of
discount factors along which one policy is discount optimal (possible because DMD is finite),
and only then pass to the limit in the discounted optimality equation.
Theorem 8.4.1 looks elementary and hides the analytic step: iterating ge≥rd+(Pd−I)h
along an arbitrary history-dependent policy and dividing by N requires the telescoping term
N−1(PNπ−I)h to vanish, which uses boundedness of h, and requires the reduction from
history-dependent randomized to Markov randomized policies (Theorem 8.1.2). For Theorem 8.4.4
the step is Corollary 8.2.7, that rd−ge+(Pd−I)h=0 forces the gain of d∞ to be g,
which is the multiplication by Pd∗ that annihilates (Pd−I).
The traps are in the definitions. Recurrence and the unichain property must be stated so that
the source's Example 8.4.3 comes out as the book says — the policy using a1,1 has the
absorbing state s2 as its single recurrent class — and the optimality residual must use the
lim sup / lim inf gains, since a definition through a limit that need not exist would be a junk
value on the policies of Example 8.1.1.
Formalization scope
State and action spaces are Fintypes and admissible actions are nonempty Finsets, as in
missions I and II; the stationary model is a new structure because mission II's DiscountedMDP
bundles a discount factor, and carries the same data otherwise. Policies are history-dependent
and randomized, so "average optimal" has its full strength; a stationary policy is the
deterministic one built from a decision rule. Expected total reward is defined by the policy
evaluation recursion, as in the earlier missions, rather than through a measure on
trajectories.
Gains are Filter.limsup and Filter.liminf of N−1vN+1π(s) on R; these are
the source's because the sequence is bounded by max∣r∣, and the suprema g±∗ over the
nonempty family of policies are genuine real suprema for the same reason. The residual B(g,h)
is a Finset.sup' over the admissible actions. Recurrence is "every state reachable from i
reaches i" and unichain is "any two recurrent states communicate", the definitions of Appendix
A for finite chains, applied to Pd for every admissible deterministic decision rule.
Restrictions relative to the printed text, all noted in the items: Theorem 8.4.1 is stated for
finite S where the source says countable, since the chapter's standing assumption and the
model are finite; the gain gd∞ of a stationary policy in (8.4.5) is written as its lim
inf gain, which equals it; and the chain ge=g∗=g+∗=g−∗ of (8.4.6) is stated through
g+∗ and g−∗, since g∗ presupposes existing limits. Nothing is trivialized: the
existential in Theorem 8.4.5(a) has to produce a decision rule, and B(g,h)=0 with a junk
maximum is impossible since every As is nonempty. Welcome contributions beyond the
milestones: Theorem 8.1.2 (reduction to Markov policies), Corollary 8.2.7 (the gain of a
stationary policy from the evaluation equations), and the equivalence of the three optimality
criteria in finite models.
Selected references
Martin L. Puterman, Markov Decision Processes: Discrete Stochastic Dynamic Programming,
Wiley, 1994, Chapter 8. doi:10.1002/9780470316887
Ronald A. Howard, Dynamic Programming and Markov Processes, MIT Press, 1960.
David Blackwell, Discrete dynamic programming, Annals of Mathematical Statistics 33 (1962).
doi:10.1214/aoms/1177704593
Cyrus Derman, Finite State Markovian Decision Processes, Academic Press, 1970.
Paul J. Schweitzer and Awi Federgruen, The functional equations of undiscounted Markov renewal
programming, Mathematics of Operations Research 3 (1978).
doi:10.1287/moor.3.4.308
Markov Processes: Characterization and Convergence VII: Strong approximation of independent sumsTextbook
Comparing random sums with continuous paths
A sum of independent random increments is a basic model for accumulated noise. A continuous Gaussian process offers a different description of that noise, one that can be studied at every nonnegative time. To compare their individual trajectories, both objects must live on the same probability space. The question is whether their paths can remain close over a whole finite range of observation times, with a quantitative bound on the chance of a large discrepancy. Ethier and Kurtz state such a result for independent sums in Chapter 7, Section 5, Theorem 5.1 of Markov Processes: Characterization and Convergence, printed page 356.
Probability laws and partial sums
Let μ be a probability measure on the real line. Assume that it has finite exponential moments in a neighborhood of zero: there is a0>0 such that
∫Reaxμ(dx)<∞(∣a∣≤a0).
This hypothesis controls both tails of the distribution. In particular, its mean m and variance σ2 are finite. The distribution need not be centered, symmetric, bounded, or have positive variance. Let ξ1,ξ2,… denote independent random variables each with distribution μ, and write Sk=ξ1+⋯+ξk for their partial sums.
A Brownian motion with drift and variance ratem,σ2 can be written as W(t)=mt+σB(t), where B is standard real Brownian motion and σ is the nonnegative square root of the variance. When σ=0, this expression gives the deterministic path mt. A coupling specifies a joint probability law for the entire sequence and the Brownian path while preserving their required individual laws. The sequence coordinates are independent of one another; independence between the sequence and the Brownian path is not part of the requirement.
The strong approximation target
Theorem 5.1 asserts that a coupling and positive constants C,K,λ, depending only on μ, exist such that
P{1≤k≤nmax∣Sk−W(k)∣>Clogn+x}<Ke−λx
for every integer n≥1 and every real x>0. Both inequalities displayed here are strict. One joint construction works simultaneously for every horizon n and every positive excess x; neither the coupling nor the constants are chosen anew after those parameters are specified. At n=1, the logarithmic term is zero, so the same assertion controls the discrepancy at the first observation time.
The mission consists of this full theorem. The rescaling and Poisson consequences discussed later in the section are outside its target. There are no separate supporting theorem milestones in the accepted grouping.
What the estimate provides
The estimate controls the largest discrepancy among all partial sums up to a specified horizon. Its deterministic threshold grows logarithmically with that horizon, and its remaining tail decreases exponentially with the excess above the threshold. This makes the theorem a quantitative comparison of trajectories on a common space. The opening of Section 5 identifies strong approximation of independent sums as its subject and introduces approximation of the Poisson process as a subsequent consequence.
The mathematical result is a known theorem stated by Ethier and Kurtz. The present formal target asks for a checked proof of that statement, including the existence of its coupling. The statement is supplied with an unproved theorem body; no proof of the strong approximation estimate is asserted here.
Why the coupling is demanding
The prescribed marginal laws do not themselves determine the joint relationship that makes the paths close. The construction must preserve independence within the entire increment sequence and the Brownian finite-dimensional laws while also satisfying a maximal estimate for every finite horizon. A comparison of the distributions at one terminal time does not supply these simultaneous path requirements. The exponential tail and the uniform choice of constants are both part of the goal.
Representation and conventions
The common carrier is a pair consisting of a real sequence indexed by natural numbers and a continuous real path indexed by nonnegative real times. A probability measure on this carrier is the unknown coupling. Its first coordinate at index zero represents ξ1, so summing over the first k natural indices represents Sk exactly. Its second coordinate is standard Brownian motion; the affine expression mt+σB(t) supplies the general drift and variance.
The finite maximum event is expressed by the existence of an integer k with 1≤k≤n whose error exceeds the threshold. This avoids any convention for a maximum of an empty set. Exponential integrability supplies the finite moments needed for the mean and variance. The probability bound uses the nonnegative extended-real embedding of the positive finite quantity Ke−λx. The formal statement retains the full exponential-moment class, including point masses. Existing probability-measure, independence, law, Brownian-motion, and variance definitions supply the mathematical vocabulary.
Selected references
Stewart N. Ethier and Thomas G. Kurtz, Markov Processes: Characterization and Convergence, Wiley, 1986 (held reprint copyright 1986/2005), Chapter 7, Section 5, Theorem 5.1 and equation (5.1), printed page 356; local source PDF page 365. The book title and authors are recorded on local PDF page 2.
18 thms3 active usersReviewed
Captain: mikedeng1
Markov Processes: Characterization and Convergence 12: Strong approximation of independent sumsTextbook
Why couple sums to Brownian motion
Independent sums are a basic model for accumulated random fluctuation. A central limit theorem describes their distribution at one large time, and a functional limit theorem describes weak convergence of a rescaled path. Strong approximation asks for substantially more: construct the sums and a Brownian motion on one probability space so that their paths remain close, with an explicit error bound that holds simultaneously over all earlier integer times. Such a coupling turns Brownian path estimates into quantitative information about random walks and independent sums.
Chapter 7, Section 5 of Stewart N. Ethier and Thomas G. Kurtz, Markov Processes: Characterization and Convergence (Wiley, 1986) states this strong approximation result as Theorem 5.1. Its estimate has logarithmic deterministic error and a strictly exponential tail. The theorem is known as a Komlós–Major–Tusnády type approximation, but the mission follows the exact formulation and hypotheses printed by Ethier and Kurtz.
Probability law and common space
Let μ be a probability measure on R. The hypothesis requires an α0>0 such that
∫Reαxμ(dx)<∞whenever ∣α∣≤α0.
Thus the moment-generating integral is finite on a neighborhood of zero. No centering, symmetry, bounded-support, or positive-variance assumption is made.
The conclusion constructs one probability space carrying an iid sequence (ξi)i≥1 with common law μ and a Brownian motion W. The Brownian motion has drift and variance chosen to match one summand:
E[W(1)]=E[ξ1]=m,var(W(1))=var(ξ1)=σ2.
Writing Sk=∑i=1kξi, both Sk and W(k) are evaluated on this same space. The theorem does not require the iid sequence to be independent of the Brownian coordinate; their dependence is precisely what permits a close coupling.
Formalization target
There are positive constants C, K, and λ, depending only on μ, such that for every integer n≥1 and every real x>0,
P{1≤k≤nmax∣Sk−W(k)∣>Clogn+x}<Ke−λx.
Both inequalities are strict: the discrepancy event uses > and its probability is <Ke−λx. The constants and the entire coupling are chosen before n and x. The logarithmic term is retained at n=1, where log1=0.
The Lean statement uses sequence coordinates indexed from zero, so coordinate i represents the source variable ξi+1 and Finset.range k is exactly the sum of the first k variables. An existential index k with 1≤k≤n expresses the finite maximum event without replacing either strict inequality.
What the theorem provides
Weak convergence compares distributions after rescaling and does not place a prelimit sum and its limiting process on the same sample point. This theorem instead supplies a simultaneous pathwise comparison through a common-space construction. The exponential tail quantifies the chance that the uniform error up to time n exceeds the logarithmic scale by an additional amount x.
The formal statement records the complete coupling rather than only its consequence for normalized terminal sums. It exposes the iid coordinate laws, mutual independence of those coordinates, the Brownian law, the moment-matched affine scaling, the positivity and quantifier order of the constants, and the exact maximal-error event. This is a statement-only formalization: the theorem remains an open Lean goal, and no proof claim is made.
Where the difficulty lies
Matching a single sum to a Gaussian random variable is not enough. The construction must coordinate every partial sum with one Brownian path, uniformly over all k≤n, while keeping the error logarithmic and the excess probability exponentially small. Independent coupling at each time would destroy consistency across times, while an ordinary invariance principle gives convergence in distribution without the stated finite-n tail. The difficulty is therefore the joint construction with all of these quantitative requirements at once.
Formalization scope and conventions
The common carrier is the product of a real sequence space with the subtype of continuous functions from nonnegative real time to R. A probability measure Q on that carrier is the joint law. iIndepFun asserts mutual independence of all sequence coordinates, and HasLaw gives each coordinate the law μ. IsBrownianReal specifies the standard Brownian second coordinate.
The Brownian motion appearing in the estimate is defined from that standard coordinate by
W(t)=mt+varμ(X)B(t).
This representation covers the zero-variance case: then the scaled Brownian fluctuation vanishes and W is deterministic, while the auxiliary standard Brownian coordinate may still be present on the common carrier. The exponential-moment hypothesis supplies the intended finite first and second moments. Probabilities use extended nonnegative reals, and the finite positive real bound Ke−λx is embedded with ENNReal.ofReal.
No local auxiliary definition is expression-essential: all objects in the theorem are provided by Mathlib. The mission intentionally excludes the section's rescaling observations and Poisson corollaries, which do not form separate capstone goals in the accepted grouping. Useful future contributions include the proof of this exact common-space theorem and reusable coupling infrastructure that preserves strict tail estimates.
Selected references
Stewart N. Ethier and Thomas G. Kurtz, Markov Processes: Characterization and Convergence, Wiley, 1986, Chapter 7, Section 5, Theorem 5.1, equation (5.1), printed p. 356. Wiley DOI
Feynman Diagrams I: Wick's Theorem for Gaussian MomentsTextbook
Motivation
Perturbative quantum field theory computes correlation functions of a field by expanding
around a Gaussian (free) theory. Every term of that expansion is a Feynman diagram, and the
rule that turns a diagram into a number is Wick's theorem: the expectation of a product of
Gaussian field modes is the sum, over all ways of pairing the modes up, of the product of the
two-point functions of the pairs. The same identity is known in probability and statistics as the
Isserlis theorem (L. Isserlis, 1918) and is the standard tool for computing moments of
Gaussian vectors; in random-matrix theory the counting of pairings it produces is the origin of
the Catalan-number asymptotics of Wigner's semicircle law.
The uploaded source is the Wikipedia article Feynman diagram, which states Wick's theorem for
the free scalar field and then, in the section Higher Gaussian moments — completing Wick's
theorem, verifies the one-variable case by direct Gaussian integration. This mission formalizes
that content: the combinatorics of pairings, the one-dimensional Gaussian moment formulas, and
the multivariate identity itself.
Setting
Fix d,n∈N and work on Rd with coordinates x1,…,xd. Let μ
be a centered Gaussian measure on Rd: a Gaussian probability measure all of whose
coordinate means vanish, ∫xidμ(x)=0 for every i. Its covariance (in the
physics reading, the propagator) is
Gij=∫xixjdμ(x).
A pairing of the labels {0,1,…,2n−1} is a partition of these 2n labels into n
unordered pairs; equivalently, a permutation σ of the labels with σ∘σ=id and σ(i)=i for all i (a fixed-point-free involution). The set of
pairings is written Pn. For a weight Wab indexed by labels, the Wick sum is
Wick(W)=σ∈Pn∑i:i<σ(i)∏Wiσ(i),
the inner product ranging over the n pairs of σ, each counted once through its smaller
element.
In the article's field-theory notation the labels are momenta k1,…,k2n, the coordinates
are the field modes ϕ(kj), and the two-point function carries the momentum-conserving delta
function, ⟨ϕ(k)ϕ(k′)⟩=δ(k−k′)/k2. This mission works with the
finite-dimensional Gaussian vector rather than the field, so the delta functions are absorbed into
the covariance matrix G.
Formalization targets
Goal — Wick's theorem (Isserlis' theorem)
For a centered Gaussian measure μ on Rd and any labels k1,…,k2n∈{1,…,d},
No hypothesis is imposed on the covariance: it may be singular and the labels kj may repeat,
which is exactly the situation the article's "completing Wick's theorem" section addresses.
Supporting targets (milestones)
∫Re−ax2/2dx=2π/a for a>0.
∫Rx2ne−ax2/2dx=an(2n−1)!!2π/a for a>0.
∫x2ndN(0,v)=(2n−1)!!vn for a real Gaussian law of variance v≥0.
#Pn=(2n−1)!!.
Correlation functions of odd order vanish: ∫∏j=12n+1xkjdμ=0.
The four-point function: ⟨xk1xk2xk3xk4⟩ equals the sum of the
three products Gk1k2Gk3k4+Gk1k3Gk2k4+Gk1k4Gk2k3.
Targets 1–3 are the article's displayed Gaussian integrals, target 4 is its pairing count, targets
5–6 are the two explicit consequences it records for the field correlators.
Significance
Wick's theorem is the computational content of every Feynman-diagram expansion: once it is
available, a perturbative term is a finite sum over diagrams, and the symmetry factors of
diagrams are bookkeeping on the pairing set Pn. On the probabilistic side it gives all moments
of a Gaussian vector in closed form, which is the entry point to Gaussian chaos expansions,
Wiener–Itô integrals, and moment methods for random matrices.
Mathlib (revision 0df444a) has real Gaussian measures gaussianReal, the general class
IsGaussian of Gaussian measures on a topological vector space, the Gaussian integral
∫e−bx2=π/b, and the double factorial Nat.doubleFactorial, but no
higher-moment formula for Gaussian measures and no Isserlis/Wick statement. The mission therefore
produces new library-level content, not a re-derivation of existing formal results; the result
itself has been classical since 1918 (Isserlis) and 1950 (Wick).
Difficulty
The obvious route — expand the characteristic function exp(−21tTGt) and
differentiate 2n times at t=0 — requires differentiating under an integral sign 2n times
and identifying the resulting combinatorial sum with a sum over pairings; both steps are where
the formal work lies. Integrability is not automatic from the statement and has to be established
(Gaussian measures have moments of all orders, but the product ∏jxkj must be shown
integrable before any manipulation). The naive attempt to reduce to the independent case by
diagonalizing G meets a second difficulty: the change of variables must be tracked through the
pairing sum, and G may be singular, so no invertible whitening transform exists in general.
The one-variable case (milestone 3) is not a special case to be waved through either: it is the
statement the article singles out, because a naive "each mode pairs with a distinct partner"
argument fails when all labels coincide.
Formalization scope
The ambient space is EuclideanSpace ℝ (Fin d); measures are Mathlib Measures and Gaussianity
is the Mathlib class IsGaussian, which is defined by every continuous linear functional pushing
forward to a real Gaussian law. Centering is stated as an explicit hypothesis on the coordinate
means, so the measure is not assumed standard and the covariance is unconstrained (in particular
degenerate covariances, and repeated labels ki=kj, are included). Integrals are Bochner
integrals, which return 0 for non-integrable functions; the statements are nonetheless
non-vacuous because Gaussian measures integrate all polynomials.
Pairings are formalized as fixed-point-free involutions of Fin (2 * n) and the pair product
ranges over {i:i<σ(i)}, so each pair contributes once. The case n=0 is included:
the empty product is 1, the unique pairing of the empty label set is the identity, and both
sides of the goal equal 1. The double factorial is Mathlib's Nat.doubleFactorial, evaluated at
2 * n - 1 in truncated natural subtraction, so the n=0 value is 0!!=1.
Contributions welcome: the Gaussian moment lemmas (milestones 1–3) as standalone Mathlib-style
results, the pairing count (milestone 4) as pure combinatorics independent of the analysis, and
any reduction of the goal to the independent-coordinate case.
Selected references
L. Isserlis, On a formula for the product-moment coefficient of any order of a normal frequency distribution in any number of variables, Biometrika 12 (1918), 134–139. DOI: 10.1093/biomet/12.1-2.134
G. C. Wick, The evaluation of the collision matrix, Physical Review 80 (1950), 268–272. DOI: 10.1103/PhysRev.80.268
Wasserstein Distributionally Robust Optimization I: Kantorovich Duality and Strong Duality for the Worst-Case RiskTextbook
Motivation
Every data-driven decision problem faces the same trap. A decision-maker estimates a risk
functional R(P,ℓ)=EP[ℓ(ξ)] from a nominal distribution P^N built
from N training samples, then optimizes a loss function ℓ against P^N instead
of the unknown true distribution P. Because the optimizer adapts to the noise in P^N, the in-sample risk of the optimizer systematically understates its true, out-of-sample
risk — a phenomenon Smith and Winkler named the optimizer's curse (Smith & Winkler,
Management Science, 2006). The remedy explored here is to hedge against a whole
neighborhood of plausible distributions around P^N, rather than trusting the point
estimate. Kuhn, Mohajerin Esfahani, Nguyen and Shafieezadeh-Abadeh's INFORMS TutORials
chapter (2019) develops this neighborhood using the Wasserstein distance, and the present
mission formalizes its foundational duality theory: the machinery every later result in the
chapter (finite-sample guarantees, elliptical tractability, regularization) builds on.
Setting
Fix a norm ∥⋅∥ on a finite-dimensional real vector space E (representing
Rm). For p∈[1,∞), the type-p Wasserstein distance between two
Borel probability measures Q,Q′ on E is
where Π(Q,Q′) is the set of couplings of Q and Q′ — joint probability measures on
E×E whose marginals are Q and Q′. The optimal π can be read as a
transportation plan moving one pile of dirt (Q) into another (Q′) at minimum cost, which
is why Wp is also called the earth mover's distance; the underlying linear program was
formalized by Kantorovich (1942) after Monge's 1781 original.
Given N training samples ξ^1,…,ξ^N, the empirical distribution is
P^N=N1∑i=1Nδξ^i. Centered at P^N, the
Wasserstein ambiguity set of radius ε≥0 is
Bε,p(P^N)={Q∈P(Ξ):Wp(Q,P^N)≤ε},
where Ξ⊆E is a closed set known to contain the support of the true
distribution. The worst-case risk of a loss function ℓ is
Rε,p(P^N,ℓ)=Q∈Bε,p(P^N)supEQ[ℓ(ξ)],
and minimizing it over a class of admissible loss functions L is a
distributionally robust optimization problem. ε measures the estimation error
one insures against; a larger ambiguity set gives a more conservative (and more expensive)
guarantee.
This is the Lagrangian dual of the worst-case risk evaluation problem, with γ the
multiplier of the Wasserstein constraint Wp(Q,P^N)≤ε: it converts a
supremum over an infinite-dimensional space of measures into a one-dimensional minimization
of the Moreau-Yosida regularization ℓγ. Every tractability result later in the
chapter (finite convex reformulations, SDP relaxations) specializes this duality by choosing
a loss class for which ℓγ is computable.
Supporting dual representations of Wp — Theorems 1 and 2
These identify Wp as a linear program's strong dual (Theorem 1) and, for p=1,
specialize it to the Kantorovich-Rubinstein form (Theorem 2), which is what lets the
worst-case-risk analysis reason about Lipschitz loss functions directly.
These are the tractable, easily-computed bracket that Theorems 7 and 10 later show is tight
in important special cases.
Exact case — Theorem 10
Ξ=Rm,ℓ convex,p=1⟹Rε,1(P^N,ℓ)=R(P^N,ℓ)+εLip(ℓ)
Theorem 5's inequality becomes exact under convexity — the cleanest closing corollary of the
duality theory, obtained from Theorem 7 by evaluating the Moreau-Yosida regularization of a
convex function explicitly.
Significance
Theorem 7 is the hinge on which the entire computational program of Wasserstein
distributionally robust optimization turns: every tractable reformulation in the source
chapter (piecewise-concave losses via conic duality, quadratic losses via semidefinite
programming, the shrinkage-estimator connection) is obtained by substituting a specific loss
class into the right-hand side of Theorem 7 and showing the resulting Moreau-Yosida
regularization is computable. Kuhn et al. themselves derive it as a corollary of Blanchet
& Murthy (2019) and Gao & Kleywegt (2016) for the empirical case, generalized to Polish
spaces by Blanchet & Murthy and Gao & Kleywegt independently — the paper cites [12] and [37]
for the general statement. Formalizing it is what makes every later, more computational
result in the chapter — the ones a solver is more likely to reach for next — rest on a
mechanically verified foundation rather than a citation chain.
Status. The mathematical result is well established (multiple independent published
proofs cited above); nothing here is open research. What this mission contributes is the
first machine-checked formal statement of the duality theorem and its supporting dual
representations (Theorems 1, 2, 5, 6, 10) on the Prove2Me platform — none of Wp's dual
representation, the Wasserstein ambiguity set, or the worst-case risk functional exist there
prior to this mission (see Formalization scope).
Difficulty
The obvious proof strategy — write down the Lagrangian of the semi-infinite program (6),
swap the order of the outer supremum over Q and the inner minimization over the multiplier
γ, and invoke ordinary Lagrangian strong duality — fails because (6) is an infinite-
dimensional linear program over measures, not a finite convex program: there is no compact
feasible set or Slater point in a form that ordinary finite-dimensional duality applies to
directly. The actual proof goes through the dual representation of the Wasserstein distance
itself (Theorem 1, which is why it is a prerequisite milestone), reformulating the
constraint Wp(Q,P^N)≤ε via its own dual variables and swapping the
resulting sup-inf using minimax theorems for semi-infinite programs, not ordinary Lagrangian
duality for finite programs.
Formalization scope
E is a generic finite-dimensional real normed space (NormedAddCommGroup, NormedSpace ℝ,
Borel-measurable), representing Rm with the paper's arbitrary fixed norm as a
parameter rather than fixing the Euclidean norm. A coupling is formalized directly via
MeasureTheory.Measure.map: π.map Prod.fst = Q ∧ π.map Prod.snd = Q'. Constrained
infima/suprema (over couplings, over the ambiguity set, over Lipschitz test functions, over
perturbation matrices) use Mathlib's guarded-binder idiom ⨅ x (_ : P x), f x, which
correctly returns ⊤ (resp. ⊥) outside the feasible set rather than a finite junk
value.
Two deliberate, disclosed conventions keep the extremal-value definitions faithful without
extended-real integration machinery, both recorded in MODERATION_NOTES.md:
worstCaseRisk and the dual representations (Theorems 1, 2) are valued in EReal,
not ℝ, so an unbounded supremum is recorded as +∞ rather than collapsed to
Mathlib's real-valued junk value 0 on an unbounded family.
The goal theorem (7) and its Moreau-Yosida regularization restrict the loss function to
bounded continuous ℓ (BoundedContinuousFunction E ℝ), narrower than the paper's
general upper-semicontinuous, P^N-integrable loss class L (Assumption
1). This keeps ℓγ(ξ)=supz∈Ξℓ(z)−γ∥z−ξ∥p a finite real
number for every nonempty Ξ, so the right-hand side's Bochner integral is well-posed;
the milestones (Theorems 5, 6, 10) keep the more general real-valued (not necessarily
bounded) loss class, since their statements do not require evaluating a pointwise
supremum over Ξ.
Ξ is required closed in Theorems 5, 6 and 7, matching the paper's own standing
assumption (p. 6: "we let Ξ⊆Rm be a closed set that is known to
contain the support of P") for the whole worst-case-risk framework, which is used
silently in the paper wherever a theorem takes Ξ as an argument but was not carried
into these theorems' own hypothesis lists in an earlier draft.
The goal theorem (7) additionally requires P^N itself supported on Ξ
(P^N(Ξc)=0, the same "supported on Ξ" convention ambiguitySet uses for
Q∈P(Ξ)), which the paper's framework presupposes for the nominal
distribution throughout §2. Combined with ℓ bounded, this makes ℓγ bounded
on the full-measure set Ξ (above by supℓ unconditionally, below by ℓ(ξ)
itself via z=ξ for ξ∈Ξ), which is what makes the right-hand side's integral
genuinely well-posed rather than liable to Mathlib's non-integrable junk value 0.
There is no trivializing formalization risk from a vacuous hypothesis: Ξ.Nonempty and
0 < N are both required exactly where the paper's own indexing and support assumptions
require them, and every extremal value uses the extended-real convention above rather than a
convention that would make an inequality vacuously true.
No definition in this mission exists on the platform prior to this series (GET /theorems?q=Wasserstein, q=Kantorovich, q=optimal transport, q=coupling return only
unrelated discrete/finite-type constructions); all seven definitions and six theorems are
drafted fresh. WassersteinDRO.Duality.wassersteinDistance, .ambiguitySet and
.worstCaseRisk are the substrate every later mission in this five-part series (Gelbrich
tractability, finite-sample guarantees, regularization, shrinkage estimation) either imports
directly or redefines locally per the series' reuse rule.
Selected references
Kuhn, D., Mohajerin Esfahani, P., Nguyen, V. A., & Shafieezadeh-Abadeh, S. (2019).
Wasserstein Distributionally Robust Optimization: Theory and Applications in Machine
Learning. INFORMS TutORials in Operations Research, 130–166.
https://doi.org/10.1287/educ.2019.0198
Villani, C. (2009). Optimal Transport: Old and New. Springer. (Cited as [108] for
Theorems 1 and 2.)
Smith, J. E., & Winkler, R. L. (2006). The optimizer's curse: Skepticism and postdecision
surprise in decision analysis. Management Science, 52(3), 311–322.
https://doi.org/10.1287/mnsc.1050.0451
Gao, R., & Kleywegt, A. J. (2016). Distributionally Robust Stochastic Optimization with
Wasserstein Distance. arXiv:1604.02199.
Blanchet, J., & Murthy, K. (2019). Quantifying Distributional Model Risk via Optimal
Transport. Mathematics of Operations Research, 44(2), 565–600.
https://doi.org/10.1287/moor.2018.0936
Foundations of Machine Learning XIV: Finite Markov Decision Processes and Bellman's EquationsTextbook
Motivation
Reinforcement learning formalizes a scenario supervised learning cannot: an agent that
actively interacts with an environment, choosing actions that change both the state it
observes next and the reward it receives, rather than passively receiving an i.i.d. labeled
sample. Every practical treatment of this scenario — from classical dynamic programming to
modern deep reinforcement learning — is built on the Markov decision process (MDP), a model
in which the effect of an action depends only on the current state, not on the full history
that led to it. Two questions define the theory this mission covers: given a fixed way of
acting (a policy), what value does it obtain, and how is that value actually computed rather
than merely characterized as the solution of a fixed-point equation? Mohri, Rostamizadeh and
Talwalkar's chapter 17 answers both for the stationary, infinite-horizon discounted case, and
this mission targets its two central results: that a fixed policy's value is not just
characterized but uniquely determined by a linear system with an explicit closed-form
solution (Theorem 17.10), and that the optimal value function — obtained instead by choosing
the best action at every state — can be computed by an iterative algorithm guaranteed to
converge regardless of where it starts (Theorem 17.11).
Setting
A (finite) Markov decision process consists of a finite set of states S, a finite set of
actions A, a transition kernel P[s′∣s,a] giving the distribution over the next state
s′ after taking action a at state s, and an expected reward E[r(s,a)] for that
transition. A (stationary) policyπ:S→Δ(A) assigns each state a distribution over
actions — possibly, but not necessarily, a point mass on a single action. Fixing π turns the
MDP into an ordinary Markov chain on S: at each step the agent is at some state s, draws
a∼π(s), receives (expected) reward E[r(s,a)], and moves to a state drawn from
P[⋅∣s,a]. For a discount factor γ∈[0,1), the value of π at s is the
expected discounted sum of future rewards starting from s,
Vπ(s)=Eat∼π(st)[t=0∑+∞γtr(st,at)s0=s],
and the state-action value functionQπ(s,a) is the analogous quantity for taking a
at s and then following π. Marginalizing the raw kernel and reward over the mixed action
π(s) gives the induced transition matrix Ps,s′=P[s′∣s,π(s)]=∑aπ(s)(a)P[s′∣s,a] and induced reward vector Rs=E[r(s,π(s))]=∑aπ(s)(a)E[r(s,a)] — the objects that turn π's value into a genuinely linear-algebraic quantity. A
policy π∗ is optimal if Vπ∗(s)≥Vπ(s) for every policy π and every
state s; write V∗ for its value function.
Formalization targets
Theorem 17.10 (goal). For a finite MDP and a fixed policy π, the matrix I−γP
(with P the policy-induced transition matrix) is invertible, and π's value function is the
unique solution of the Bellman equations, given in closed form by
Vπ=(I−γP)−1R.
Proposition 17.9 (milestone). The value function itself satisfies the linear system that
Theorem 17.10 solves:
Theorem 17.7 (milestone). A policy π is optimal if and only if it places probability
only on Qπ-maximizing actions: for every (s,a) with π(s)(a)>0, a∈argmaxa′Qπ(s,a′).
Theorem 17.11 (milestone). The Bellman optimality operator Φ, [Φ(V)](s)=maxa{E[r(s,a)]+γ∑s′P[s′∣s,a]V(s′)}, is a γ-contraction for
∥⋅∥∞; consequently, for any starting vector V0, the value-iteration
sequence Vn+1=Φ(Vn) converges to a fixed point of Φ.
Significance
Theorem 17.10 is what makes policy evaluation on a finite MDP an exact, finite computation
rather than an infinite limit: instead of summing an infinite discounted series or solving an
implicit fixed-point equation numerically, a single ∣S∣×∣S∣ matrix inversion gives the
policy's value at every state simultaneously. It is also the base case every planning algorithm
in the chapter builds on: policy iteration alternates optimizing a policy with exactly this
evaluation step. Theorem 17.11 gives the complementary guarantee for the harder problem of
finding the optimal value function directly, without fixing a policy first: value iteration
converges from any starting point, with a convergence rate (O(log(1/ϵ)) iterations for
ϵ-accuracy) that follows from the same contraction argument. Together, the two results
are the mathematical content behind why dynamic-programming planning for finite MDPs is
tractable at all — the discount factor γ<1, not any structural assumption on rewards or
transitions, is what buys both the uniqueness in Theorem 17.10 and the convergence in Theorem
17.11. Formalizing them requires reproducing this linear-algebraic and metric content precisely,
not just asserting the conclusions: an invertibility claim asserted without the operator-norm
argument, or a convergence claim without the contraction property, would state something true
by fiat rather than the book's actual result. No faithful prior art exists on the platform for
this exact model (see Formalization scope).
Difficulty
The obvious shortcut for Theorem 17.10 is to assert I−γP is invertible without proof —
true, but not what the book does, and not informative about why it holds. The genuine content
is that P, being row-stochastic (every row of P sums to exactly 1, since π(s) and
P[⋅∣s,a] are both proper distributions), has operator norm ∥P∥∞=1
exactly, so ∥γP∥∞=γ<1 strictly; this rules out 1 as an eigenvalue
of γP, which is exactly what invertibility of I−γP requires. The same
γ<1 fact, applied differently, drives Theorem 17.11: showing Φ is γ-Lipschitz
requires bounding Φ(V)(s)−Φ(U)(s) by comparing the maximizing action for V against
the same action's value under U (not U's own maximizer), since the two suprema need not be
attained at the same action — a step easy to state incorrectly as a direct comparison of two
maxima. Both theorems fail if γ=1 is allowed: the discounted setting's central asset, a
strict contraction, disappears exactly at that boundary.
Formalization scope
States and actions are modeled as finite types (Fintype S, Fintype A); the raw kernel and
reward P : S → A → S → ℝ, Er : S → A → ℝ are unconstrained functions, with IsTransitionKernel
asserting the required distribution property explicitly rather than assuming it silently. A
policy is π : S → A → ℝ with IsPolicy π asserting π s is a distribution over A for every
s — deliberately not π : S → A or a PMF-valued function, since Theorem 17.7's own
quantifier ("for any pair (s,a) with π(s)(a) > 0") requires treating π(s) as a genuine
mixture. PolicyValue is defined as the actual infinite discounted expectation (via an explicit
state-occupation-distribution recursion), not as the Bellman fixed point — so that Proposition
17.9 (the value function satisfies the linear system) and Theorem 17.10 (that system has a
unique, invertible-matrix solution) are both non-vacuous claims about the same object, rather
than one being definitionally true of the other. The trivializing formalization this rules out
is asserting IsUnit (1 - γ • P) as a bare hypothesis, or defining V_πas(1-γP)⁻¹R and
calling the resulting identity a theorem; both would erase the mission's actual content.
Two platform modules model related MDPs (BertsekasSSPModel, a stochastic-shortest-path model
with a termination-probability deficit rather than exact row-stochasticity, and
FoundationsRL.RLBasics, a finite-horizon episodic model indexed by layer) — neither
specializes exactly to this chapter's stationary, always-continuing, infinite-horizon discounted
convention, so every definition here is drafted fresh rather than imported. This chunk covers
§17.2–17.4.2 (the MDP model, policy value, Bellman's equations, value and policy iteration);
§17.4.3 (the linear-programming formulation) and §17.5 (stochastic-approximation learning
algorithms — TD(0), Q-learning, SARSA) are out of scope, since they require a
stochastic-approximation convergence substrate this mission does not build.
Selected references
Mohri, M., Rostamizadeh, A., and Talwalkar, A. Foundations of Machine Learning, 2nd ed.,
chapter 17. MIT Press, 2018.
Bellman, R. Dynamic Programming. Princeton University Press, 1957.
Puterman, M. L. Markov Decision Processes: Discrete Stochastic Dynamic Programming. Wiley,
1994.
Foundations of Machine Learning XII: Algorithmic StabilityTextbook
Motivation
Every generalization bound in Chapters 2-11 depends only on the complexity of a fixed
hypothesis set H — Rademacher complexity, VC-dimension, growth function — and holds
regardless of which algorithm within H actually returns the hypothesis. This is both a
strength (broad applicability) and a limitation: it throws away everything specific to how an
algorithm searches H, and can be uninformative when H itself is large or unbounded (e.g. a
regularized objective that implicitly restricts the search without shrinking H as a set).
Chapter 14 introduces a fundamentally different route to a generalization bound — a property of
the algorithm rather than the hypothesis class — first used by Devroye, Rogers and Wagner
for k-nearest-neighbor rules and given its modern general form by Bousquet and Elisseeff
(2002), whose treatment this chapter follows and (for non-differentiable convex losses)
extends.
Setting
A labeled example is z=(x,y)∈X×Y; for a loss function L:Y′×Y→R+
(where Y′ may differ from Y, e.g. Y={−1,+1} but Y′=R for a real-valued
hypothesis), the loss of a hypothesis h at z is Lz(h)=L(h(x),y). Given a learning
algorithm A that maps a sample S of size m to a hypothesis hS∈H, the empirical
error and generalization error are R^S(h)=m1∑iLzi(h) and
R(h)=Ez∼D[Lz(h)]. Uniform β-stability (Definition 14.1) says: for
any two samples S, S′ differing by a single point, the algorithm's returned hypotheses
satisfy ∣Lz(hS)−Lz(hS′)∣≤β for every z — replacing one training point can change
the algorithm's loss on any point by at most β. For the regularized algorithms studied
in §14.3, a kernel-based regularization algorithm minimizes FS(h)=R^S(h)+λ∥h∥K2 over the RKHS H of a positive-definite kernel K, and a loss L is
σ-admissible (Definition 14.3) if ∣L(h′(x),y)−L(h(x),y)∣≤σ∣h′(x)−h(x)∣ for
all hypotheses h,h′ — a Lipschitz-like smoothness condition satisfied by the standard
regression and classification losses.
Formalization targets
Proposition 14.4 (milestone). For a PDS kernel K with K(x,x)≤r2 and a convex,
σ-admissible loss L, the kernel-based regularization algorithm is β-stable with
β≤mλσ2r2.
Corollary 14.5 (milestone). For SVR (the ϵ-insensitive loss Lϵ, bounded
by M), with probability at least 1−δ:
R(hS)≤R^S(hS)+mλr2+(λ2r2+M)2mlog(1/δ).
Theorem 14.2 — the mission's goal. For a loss bounded by M and a β-stable algorithm
A, with probability at least 1−δ over a sample S of size m:
R(hS)≤R^S(hS)+β+(2mβ+M)2mlog(1/δ).
Significance
Theorem 14.2 is the book's demonstration that algorithm-dependent analysis is not merely a
special-case curiosity: it is broad enough to cover an entire family (every kernel-based
regularization algorithm — KRR, SVR, SVMs, and beyond) uniformly, via a single stability
coefficient computation (Proposition 14.4) that is then specialized per algorithm just by
plugging in that loss's admissibility constant σ. Corollary 14.5's SVR bound is the
concrete payoff: a fully explicit, dimension-free generalization guarantee for a widely used
regression algorithm, with every constant (r, λ, m) traceable to the algorithm's own
hyperparameters, no VC-dimension or Rademacher-complexity computation required. Unlike Chapters
3-11, whose bounds are oblivious to howH is searched, algorithmic stability is the first
tool in the book that can, in principle, certify generalization for a hypothesis class too large
or poorly understood for a complexity-based bound to be informative, provided the algorithm
itself is stable. No prior art on the Prove2Me platform is faithful: GET /theorems?q=algorithmic+stability, q=uniform+stability return no hits; q=McDiarmid returns
only bounded_diff_martingale_two_sided (Boucheron-Lugosi-Massart's own two-sided
bounded-differences martingale inequality), which is McDiarmid's inequality's own proof engine
(the background result Theorem 14.2's proof applies), not any result of this chapter — a
different mathematical object entirely, not reused. All eleven items are drafted fresh.
Not formalized here: Corollary 14.6 (KRR bound), Lemma 14.7 (boundedness of kernel-regularization
hypotheses) and Corollary 14.8 (SVM bound). Corollary 14.6 is structurally identical to Corollary
14.5 (a different loss function's admissibility constant plugged into the same Proposition
14.4 + Theorem 14.2 chain) and adds no new formalization content beyond Corollary 14.5, already
drafted; Lemma 14.7 and Corollary 14.8 are omitted together, since 14.8's own statement needs
14.7's bound on ∣hS(x)∣ to compute its explicit M (unlike Corollary 14.5, which is given M
as a hypothesis) — a genuine additional formalization layer (the reproducing-kernel norm bound
∣hS(x)∣≤rB/λ) disproportionate to a single further corollary within this
mission's budget.
Difficulty
The chapter's central technical step is recognizing that β-stability plus the loss bound
M together give exactly the bounded-difference property McDiarmid's inequality needs, applied
to Φ(S)=R(hS)−R^S(hS) as a function of the sample: replacing one point of S changes
R(hS) by at most β (stability applied to the population loss, an expectation over z)
and changes R^S(hS) by at most β+M/m (stability on the m−1 shared points, plus
the full loss bound M/m on the one point that actually changed) — two different, asymmetric
arguments that must be combined correctly to get ∣Φ(S)−Φ(S′)∣≤2β+M/m, not merely
"stability implies boundedness" asserted directly. Proposition 14.4's own proof (not formalized
here beyond its statement) needs a generalized Bregman divergence to handle a possibly
non-differentiable convex loss — an extension of Bousquet-Elisseeff's original argument the book
credits to itself as novel — via the reproducing-kernel property and Cauchy-Schwarz to convert a
divergence bound into a bound on ∥h−h′∥K, then back into a pointwise loss bound.
Formalization scope
IsRKHSOf/IsMinimizer are restated locally in Stability, byte-identical to chunk
06-kernels's own copies (a draft item cannot import another chunk's draft module); H is an
abstract real inner-product space with an evaluation map ev : H → X → ℝ standing for "elements
of H are functions on X", the same device chunk 06's own RKHS formalization uses, since
Mathlib's abstract Hilbert spaces are not themselves spaces of functions. UniformlyStable fixes
the sample size m as part of the algorithm's type (A : (Fin m → X × Y) → (X → Y')), matching
the book's own standing convention of a fixed sample size m throughout the chapter.
Proposition 14.4 is stated pairwise — for any two samples differing by one point and any
minimizers of their respective regularized objectives, the pointwise loss bound holds — rather
than fixing a global choice-function algorithm A, since the book's own proof picks an arbitrary
minimizer of each objective without asserting uniqueness; Corollary 14.5 does fix a choice
function A (one minimizer per sample), since Theorem 14.2's own statement needs a single
algorithm evaluated across the whole product-measure sample space. No numerical constant in any
of the three theorems is altered from the book's own displayed form. A trivializing
formalization this mission avoids: stating Theorem 14.2 only for the strict per-hypothesis loss
bound (∀ h ∈ H, ∀ z, L_z(h) ≤ M) rather than the book's own weaker, algorithm-specific
condition (hbound, ∀ S, ∀ z, L_z(A S) ≤ M) — the weaker hypothesis is kept, exactly matching
the book's explicit statement that "a weaker condition suffices."
Selected references
M. Mohri, A. Rostamizadeh, A. Talwalkar, Foundations of Machine Learning, 2nd ed., MIT
Press, 2018, Chapter 14.
O. Bousquet, A. Elisseeff, "Stability and generalization," Journal of Machine Learning
Research 2, 2002, 499-526.
M. Kearns, D. Ron, "Algorithmic stability and sanity-check bounds for leave-one-out
cross-validation," Neural Computation 11(6), 1999, 1427-1453.
Foundations of Machine Learning XI: Maximum Entropy Models and DualityTextbook
Motivation
Maximum entropy (Maxent) models are a widely used family of density-estimation algorithms:
given a sample and a set of features, they select the distribution that matches the empirical
feature averages while being otherwise as "agnostic" (close to a prior, usually uniform) as
possible — a principle that, notably, never requires specifying a parametric family of
distributions to search over. This mission formalizes the theorem that explains why this works
in practice: Maxent's primal optimization (over distributions, subject to feature-matching
constraints) is exactly dual to an unconstrained maximum-likelihood problem over a specific,
rich parametric family — the Gibbs distributions — even though the Maxent principle never
mentions that family at all.
Setting
For a sample S=(x1,…,xm) drawn i.i.d. from D over a finite set X, and a feature map
Φ:X→RN with ∥Φ∥∞≤r, the Maxent principle seeks
p∈Δ (the simplex of distributions over X) minimizing the relative entropy D(p∥p0)
to a prior p0, subject to ∥Ex∼p[Φ(x)]−Ex∼D^[Φ(x)]∥∞≤λ
(problem 12.7). Introducing the indicator function IK (0 on K, +∞ elsewhere) turns
this into the unconstrained primal objective F(p)=D~(p∥p0)+IC(Ep[Φ]) (Eq. 12.8),
with C the feature-constraint set. A Gibbs distribution with parameter w∈RN
is pw(x)=p0(x)ew⋅Φ(x)/Z(w), Z(w) the partition function (Eq. 12.9); its
associated dual objective is G(w)=m1∑ilogp0(xi)pw(xi)−λ∥w∥1
(Eq. 12.10) — note −m1∑ilogpw(xi) is exactly the empirical log-loss LS(w), so
maximizing G is minimizing an L1-regularized log-loss over the Gibbs family.
Formalization targets
Theorem 12.2 — the mission's goal (Maxent duality).supw∈RNG(w)=minpF(p).
Furthermore, letting p∗=argminpF(p) and d∗=supwG(w): for any ϵ>0 and any w
with ∣G(w)−d∗∣<ϵ, D(p∗∥pw)≤ϵ.
Theorem 12.3 (Maxent L1-regularization generalization bound, milestone). Fix δ>0.
Let w^ solve the L1-regularized dual (12.12) with
λ=2Rm(H)+rlog(2/δ)/(2m). Then, with probability at least 1−δ,
Theorem 12.2 is one of the most striking dualities in the book: the Maxent principle, phrased
purely in terms of closeness to a prior distribution, turns out to always produce a solution in
the Gibbs family — not because that family was ever specified, but because relative entropy is
the specific measure of closeness whose Fenchel conjugate is the log-partition function. This
explains a whole zoo of models (log-linear models, exponential families, Gaussian and bimodal
Gibbs distributions from quadratic features) as instances of a single duality theorem, and gives
a computationally friendlier route to the (constrained, infinite-if-X-is-large) primal problem
via the (unconstrained, N-dimensional) dual. The theorem's proof is a genuine application of
conditional (Fenchel) strong duality, not an unconditional fact — this is, per the chapter's own
brief, the sharpest trivialization risk in the entire mission series, since "strong duality
always holds for convex problems" is false in general, and a formalization skipping the book's
own qualification condition (λ>0, placing u0 in the interior of the constraint set)
would prove a different, potentially-false statement. No prior art on the platform is faithful:
GET /theorems?q=maximum+entropy returns no hits, and Mathlib's generic Fenchel-conjugate
machinery (Analysis/Convex/Conjugate) does not package the book's own specific qualification
conditions as a single reusable theorem matching Theorem B.39 — reusing it inside a proof
(not the audited statement) remains available to whoever proves this theorem later.
Not formalized here: Theorem 12.4 (a Bregman-divergence generalization of Theorem 12.2) and
Theorem 12.5 (its L2-regularized concrete special case). BRIEF.md itself flags Theorem 12.4
as possibly too heavy and offers Theorem 12.5 as an easier alternative; this mission omits both,
since even Theorem 12.5 requires a second, structurally parallel dual-objective-and-minimizer
formalization (for L2 rather than L1 regularization) — disproportionate to this mission's budget
once Theorem 12.2's own qualification-condition bookkeeping (the heaviest single item in this
mission series) is accounted for. §12.1 (density estimation without features: ML/MAP), §12.7
(coordinate descent), and §12.8-12.9 (Bregman-divergence extensions, L2-regularization in
general) are likewise out of scope, per BRIEF.md's own page-range restriction.
Difficulty
Theorem 12.2's proof is the book's own explicit application of the Fenchel duality theorem
(Theorem B.39, Appendix B) to the specific triple f(p)=D~(p∥p0), g(u)=IC(u),
Ap=∑xp(x)Φ(x) — every qualification condition (A a bounded linear map, u_0\in A(\mathrm{dom}f)\cap\mathrm{cont}(g), needing \lambda>0 to place u_0 in int(C)) must be
checked for this triple, not assumed generically; the conjugate computations themselves
(f^*(q)=\log\sum_xp_0(x)e^{q(x)}$ via Lemma B.37, g^(w)=E_{\hat D}[w\cdot\Phi]+\lambda|w|_1 via the dual-norm identity) are specific algebraic derivations, not immediate from abstract duality alone. The second clause's proof needs a further, non-obvious algebraic identity (G(w)-D(p^|p_0)+D(p^|p_w)expanding, via Hölder's inequality applied to the primal feasibility ofp^, to something \le0) that is not a restatement of the first clause but a separate argument built on top of it. Theorem 12.3's proof structurally mirrors chunk 04's SRM bound (bounding L_D(\hat w)-L_S(\hat w)via Hölder's inequality and the Rademacher-complexity feature-concentration bound of Eq. 12.5, then using\hat w`'s optimality twice), but is applied
to the log-loss of a Gibbs distribution rather than a generic bounded loss.
Formalization scope
MaxEntPrimalObjective uses EReal (the extended reals) so that the book's own +\infty
values (from I_K, \tilde D) are represented exactly, matching the chapter's own explicit use
of an extended-real-valued indicator function rather than a soft penalty — a trivializing
formalization this mission avoids is silently replacing +\infty with a large real sentinel,
which would misstate a convex-analysis object whose entire role in the proof is its infinite
value outside the feasible/simplex set. hlam : 0 < lam is a genuine load-bearing hypothesis in
the goal theorem, matching the book's own use of \lambda>0 to invoke Theorem B.39's
qualification condition — not a free convexity assumption; this is the mission's central
faithfulness guard against the chapter's own named trivialization risk. EmpiricalRademacherComplexity/
RademacherComplexity are restated locally, byte-identical to chunks 05-svm/07-boosting's
own copies (a draft item cannot import another chunk's draft module). p^* in the goal theorem
and \hat w in Theorem 12.3 are both quantified via explicit hypotheses (IsLeast, a
minimizer inequality) rather than assumed to exist unconditionally, matching the book's own "let
p^*=..."/"let \hat w be a solution of..." phrasing without asserting existence or uniqueness
beyond what the book itself asserts. No numerical constant in either theorem is altered from
the book's own displayed form.
Selected references
M. Mohri, A. Rostamizadeh, A. Talwalkar, Foundations of Machine Learning, 2nd ed., MIT
Press, 2018, Chapter 12, §12.1-12.6.
E. T. Jaynes, "Information theory and statistical mechanics," Physical Review 106(4), 1957,
620-630.
S. Della Pietra, V. Della Pietra, J. Lafferty, "Inducing features of random fields," IEEE
Transactions on Pattern Analysis and Machine Intelligence 19(4), 1997, 380-393.
Foundations of Machine Learning X: Regression and Rademacher Complexity BoundsTextbook
Motivation
Every generalization bound presented so far in this series is for classification, where the
error of a prediction is binary (correct or not). Regression asks a different question:
predictions are real-valued, and error is measured by the magnitude of the deviation from
the true label, via a loss function L. Chapter 11 develops generalization theory for bounded
regression, showing that the same two complexity measures used for classification —
Rademacher complexity and a VC-dimension analogue — extend naturally, once the loss function
itself is folded into the machinery via a Lipschitz-contraction argument (Rademacher route) or
a reduction to classification via level-set thresholding (pseudo-dimension route).
Setting
A regression hypothesis h:X→ℝ is scored by a loss L:ℝ×ℝ→ℝ against a joint distribution D
on X×ℝ (the stochastic scenario, since regression labels are rarely exactly reproducible);
R(h) = E_{(x,y)~D}[L(h(x),y)] (Eq. 11.1) and R̂_S(h) = (1/m)∑L(h(x_i),y_i) (Eq. 11.2). For
a finite hypothesis set, Theorem 11.1 gives a Hoeffding/union-bound guarantee directly, the
regression analogue of chunk 02-pac's finite-hypothesis bound. For infinite H, §11.2.2
develops a Rademacher-complexity route: Proposition 11.2 shows that if L is µ-Lipschitz in
its first (predicted-value) argument, the Rademacher complexity of the loss-composed family
G = {(x,y)↦L(h(x),y) : h∈H} is controlled by µ times H's own Rademacher complexity, via
Talagrand's contraction lemma (chunk 05-svm's Lemma 5.7); Theorem 11.3 combines this with
chunk 03's Theorem 3.3 to give the chapter's headline bound. §11.2.3 develops an independent,
purely combinatorial route: pseudo-dimension (Definition 11.5), a real-valued analogue of
VC-dimension defined via threshold-witnessed shattering (Definition 11.4, restated via its own
Eq. 11.3 as the VC-dimension of a thresholded indicator family); Theorem 11.8 gives a
pseudo-dimension generalization bound by reducing regression to a family of classification
problems (one per threshold t), using the tail-integral identity Eq. 11.5.
Formalization targets
Theorem 11.1 (milestone). For L bounded by M and H finite: for any δ>0, with
probability at least 1-δ, for all h∈H: R(h) ≤ R̂_S(h) + M√((log|H|+log(1/δ))/(2m)).
Proposition 11.2 (milestone). For L non-negative, bounded by M, µ-Lipschitz in its
first argument: for any sample S, R̂_S(G) ≤ µR̂_S(H).
Theorem 11.3 — the mission's goal. Under Proposition 11.2's hypotheses on L: for any
δ>0, with probability at least 1-δ, for all h∈H: E[L(h(x),y)] ≤ (1/m)∑L(h(x_i),y_i) + 2µR_m(H) + M√(log(1/δ)/(2m)), and also with 2µR̂_S(H) + 3M√(log(2/δ)/(2m)).
Theorem 11.8 (milestone). For Pdim(G)=d, L non-negative bounded by M: for any
δ>0, with probability at least 1-δ over a sample of size m, for all h∈H: R(h) ≤ R̂_S(h) + M√(2d log(em/d)/m) + M√(log(1/δ)/(2m)).
Significance
Theorem 11.3 is the chapter's own choice of headline result (§11.2's stated goal is to show
"how the Rademacher complexity bounds of theorem 3.3 can be used to derive generalization
bounds for regression"), and its proof genuinely reuses two pieces of prior machinery from
this series — chunk 03's Theorem 3.3 and chunk 05's Talagrand's-lemma-style contraction —
combined via a new observation (Proposition 11.2) specific to loss-composed families, not a
restatement of either. Theorem 11.8 is the chapter's second, structurally independent
technique: its em/d bound parallels chunk 03's Corollary 3.19 (both ultimately reduce to a
VC-dimension-style growth-function argument), but the reduction itself — regression to a
continuum of threshold classification problems, via the Lebesgue-integral tail identity Eq.
(11.5) applied to |R(h)-R̂_S(h)| — is genuinely new content for this book, and pseudo-dimension
has no prior art on the platform or in Mathlib. No prior art exists for this chapter's overall
content either: GET /theorems?q=generalization%20bound%20regression and
GET /theorems?q=pseudo-dimension both return zero hits.
Difficulty
Proposition 11.2's proof needs Talagrand's contraction lemma applied with the Lipschitz
constant taken in the first argument of L only — the predicted value h(x_i), holding the
true label y_i fixed — exactly the pitfall BRIEF.md names: a loss Lipschitz in the wrong
argument, or in both arguments jointly, would not license this step. Theorem 11.8's proof is
the chapter's most involved: it defines, for every h∈H and threshold t≥0, a classifier
c(h,t):(x,y)↦1_{L(h(x),y)>t}, bounds |R(h)-R̂_S(h)| by M·sup_{t∈[0,M]}|R(c(h,t))- R̂_S(c(h,t))| via the tail-integral identity, and then applies a VC-dimension-style
classification bound (Corollary 3.19) to the family of thresholded classifiers — whose
VC-dimension is, by Eq. (11.3), exactly Pdim(G) by construction. A formalization that
conflated pseudo-dimension with ordinary VC-dimension, or reused chunk 03's HasVCDim
definition by relabeling, would misrepresent this chapter's genuinely different (real-valued,
threshold-witnessed) combinatorial notion — precisely the pitfall BRIEF.md flags.
Formalization scope
Y := ℝ throughout (the book's own "Y a measurable subset of ℝ"), a harmless
simplification consistent with every hypothesis, loss and Lipschitz condition in this chapter
being stated for real-valued scores and labels. EmpiricalRademacherComplexity/
RademacherComplexity restate chunk 03-rademacher-vc's Definitions 3.1/3.2 locally, since a
draft item cannot import another chunk's draft module. Shatters/PseudoDim are formalized
via the book's own equivalent reformulation (Eq. 11.3, the thresholded-indicator form), rather
than the sign-function form of Definition 11.4 directly, since the two coincide except at a
measure-zero boundary the book itself does not address; PseudoDim mirrors chunk 03's
HasVCDim Prop-valued pattern (does not cover Pdim(G)=+∞; every consuming theorem takes it
as an explicit hypothesis) but is a structurally distinct definition built on Shatters, never
a relabeling of HasVCDim, per BRIEF.md's pitfall note. Proposition 11.2's and Theorem
11.3's Lipschitz hypothesis (hLlip) is stated with the true label y' universally quantified
outside the two-point comparison y1, y2 (the predicted values), matching "for any fixed
y' ∈ Y, y ↦ L(y,y') is µ-Lipschitz" exactly — Lipschitzness in the first argument only,
per BRIEF.md's pitfall note. RademacherComplexity (Measure.map Prod.fst D) H m gives the
book's R_m(H) (H's Rademacher complexity under the marginal sampling distribution of the
inputs x, i.e. D's first marginal). No numerical constant is altered from the book in any
of the four theorems.
Not formalized: the L_p-loss worked example following Theorem 11.3's proof (an instantiation
of the general theorem for a specific loss family, not a separate numbered theorem); Theorem
11.6 and Theorem 11.7 (worked pseudo-dimension examples for hyperplanes and vector spaces,
background/illustration rather than the chapter's general machinery — drafting only these
examples instead of the general Theorem 11.8 would be this chapter's trivializing
formalization); the two-sided variant of Theorem 11.1 mentioned immediately after its proof
(an unnumbered remark, not a separately displayed/numbered theorem); and all of §11.3 (linear
regression, kernel ridge regression, SVR, Lasso and their online variants), which is
applications-heavy per BRIEF.md's chapter restriction to §11.1-11.2.
Selected references
M. Mohri, A. Rostamizadeh, A. Talwalkar, Foundations of Machine Learning, 2nd ed., MIT
Press, 2018, Chapter 11 (§11.1-11.2).
D. Haussler, "Decision theoretic generalizations of the PAC model for neural net and other
learning applications," Information and Computation 100(1), 1992 (pseudo-dimension's
origin).
D. Pollard, Convergence of Stochastic Processes, Springer, 1984 (the tail-integral
identity Eq. 11.5's classical antecedent).
Foundations of Machine Learning VIII: Multi-Class Classification and the Margin BoundTextbook
Motivation
Every generalization bound in chapters 2-5 is for binary classification. Most real-world
classification problems have more than two classes, and the number of classes can itself be
in the hundreds or thousands (topic classification, speech recognition). Chapter 9 extends the
margin-based generalization theory of chapter 5 (SVMs) to this multi-class, mono-label setting,
using the same Rademacher-complexity machinery as chunk 03-rademacher-vc, but with a new
combinatorial ingredient — bounding the Rademacher complexity of a family built by taking a
pointwise maximum over several hypothesis sets — needed because a multi-class prediction is
itself an argmax over per-class scores.
Setting
A multi-class hypothesis is a scoring function h:X×Y→R with Y={1,…,k}
(mono-label case); the predicted label is argmaxyh(x,y), and the margin
ρh(x,y)=h(x,y)−maxy′=yh(x,y′) (p. 215) is negative exactly when h misclassifies
(x,y). The empirical margin loss R^S,ρ(h) (Eq. 9.5) uses the same margin-loss
function Φρ (Definition 5.5) as chunk 05-svm, restated locally here. Π1(H)={x↦h(x,y):y∈Y,h∈H} (p. 217) projects a multi-class hypothesis set onto ordinary
real-valued functions on X — the object the chapter's Rademacher-complexity bound actually
controls, since H⊆RX×Y has no norm of its own without such a
projection. Lemma 9.1 is a purely combinatorial tool: the empirical Rademacher complexity of a
family built by taking the pointwise max over l hypothesis sets is bounded by the sum of
their individual empirical Rademacher complexities — used to control the argmax structure of a
multi-class prediction. Theorem 9.2 combines this with chunk 03's Rademacher-complexity
generalization machinery (Theorem 3.3) to give the chapter's margin bound. Proposition 9.3 and
Corollary 9.4 specialize this to kernel-based hypotheses, where each class has its own weight
vector in a reproducing kernel Hilbert space and the k weight vectors are jointly constrained
by an Lp-type group norm ∥W∥H,p≤Λ.
Formalization targets
Lemma 9.1 (milestone). For F1,…,Fl hypothesis sets in RX, l≥1, and
G={max{h1,…,hl}:hi∈Fi}: R^S(G)≤∑j=1lR^S(Fj).
Theorem 9.2 — the mission's goal. For H⊆RX×Y, Y={1,…,k},
fix ρ>0. For any δ>0, with probability at least 1−δ, for all h∈H:
R(h)≤R^S,ρ(h)+ρ4kRm(Π1(H))+2mlog(1/δ).
Proposition 9.3 (milestone). For a PDS kernel K with feature map Φ and
K(x,x)≤r2: Rm(Π1(HK,p))≤r2Λ2/m.
Corollary 9.4 (milestone). Under Proposition 9.3's hypotheses, fix ρ>0. For any
δ>0, with probability at least 1−δ, for all h∈HK,p: R(h)≤R^S,ρ(h)+4kr2Λ2/ρ2/m+log(1/δ)/(2m).
Significance
Theorem 9.2 is the multi-class generalization of chunk 05-svm's Theorem 5.8, and its proof is
the chapter's genuine new technique rather than a restatement: it needs a k-way application of
Lemma 9.1 (once for the argmax structure of the margin, once summing over the k possible
labels), which is exactly where the 4k factor comes from. Corollary 9.4 is the direct
theoretical basis for the multi-class SVM algorithm the chapter derives next (§9.3.1): the
displayed dual optimization problem literally minimizes the right-hand side of the corollary's
bound. No prior art exists on the platform: GET /theorems?q=multi-class%20classification
returns zero hits, and chunk 03's Rademacher-complexity machinery (needed by the proof route)
is a draft, not reusable, per the "drafts cannot import drafts" rule.
Difficulty
Lemma 9.1's proof is a genuine two-function argument (max as 21(h1+h2+∣h1−h2∣),
Talagrand's lemma applied to ∣⋅∣) generalized to l functions by induction, not a
one-line consequence of chunk 03's single-hypothesis-set bound. Theorem 9.2's own proof
(PDF pp. 234-236) is the chapter's most involved: it introduces an auxiliary margin function
ρθ,h with a free parameter θ later fixed to 2ρ, splits the resulting
Rademacher complexity into a "diagonal" term (bounded via a further one-hot decomposition
across the k classes, giving the first factor of k) and a "off-diagonal" term bounded via
Lemma 9.1 (giving the second factor, folded into the same 4k constant). A formalization that
stated Theorem 9.2 for H itself rather than Π1(H), or that treated k as an unrelated
free constant rather than the actual number of classes, would misstate the theorem — precisely
the pitfall BRIEF.md names for this chapter. Proposition 9.3's proof is a clean
Cauchy-Schwarz/Jensen argument in the RKHS but needs the Lp-group-norm hypothesis class
HK,p stated with its exact footnote definition (PDF p. 236), not a simplified p=2
special case.
Formalization scope
GeneralizationError, EmpiricalRademacherComplexity and RademacherComplexity are restated
locally in this chunk's MultiClass namespace (the last two identical in content to chunk
03-rademacher-vc's own copies); MarginLossFunction restates chunk 05-svm's Definition 5.5
(the same function, needed here for this chapter's own EmpiricalMarginLoss); IsPDS
restates chunk 06-kernels's PDS-kernel definition. All are duplicated rather than imported
since a draft item cannot import another chunk's draft module, and none of 03, 05, 06 is
listed as reusable in missions/README.md's "Published definitions" table at the time of this
session. GeneralizationError is formalized via the book's own established equivalence "h
misclassifies (x,y) iff ρh(x,y)≤0" (the form Theorem 9.2's own proof displays and
works with), rather than via an explicit argmax classifier construction — checked as
faithful, not a weakening, since it is exactly the quantity the chapter's proof bounds.
MarginFunction's ⨆_{y'≠y} is a real supremum rather than a Finset.sup', avoiding a
nonempty-finset side proof at definition time; every consuming theorem supplies 2 ≤ k
(Y = Fin k) to guard it against trap 5. MaxFamily's index type is Fintype+Nonempty
rather than a Finset-cardinality parameter l, a harmless generalization matching "l ≥ 1
hypothesis sets" via Nonempty. IsPDS's feature map Φ and its defining property
K(x,y) = ⟪Φ(x),Φ(y)⟫ are supplied as hypotheses to the two kernel theorems rather than as a
separate "feature mapping associated to a kernel" definition — the book itself treats this as
a given correspondence, not a construction. No numerical constant is altered: 4k/ρ and
log(1/δ) in Theorem 9.2, r²Λ²/m in Proposition 9.3, and 4k and r²Λ²/ρ²/m in Corollary
9.4 are exactly as displayed.
Not formalized: §9.1's discussion of the multi-label case (Eq. 9.2/9.3, the Hamming-distance
risk) and Eq. 9.4 (empirical Hamming error) — background for a case this chapter's own
generalization-bound section (§9.2) does not cover (the mono-label case only); the multi-class
SVM primal/dual optimization problems (§9.3.1, an algorithm derived from Corollary 9.4, not a
generalization-theoretic theorem); AdaBoost.MH (§9.3.2, a boosting algorithm, analyzed via a
convex-surrogate argument rather than the Rademacher-complexity route this mission formalizes);
and the uniform-over-ρ extension mentioned at the end of the Theorem 9.2 proof (an
unnumbered remark referencing Theorem 5.9's technique from a different chapter, not restated
here). Drafting only the algorithmic consequences (the multi-class SVM's optimization problem)
in place of the generalization bounds themselves would be this chapter's trivializing
formalization.
Selected references
M. Mohri, A. Rostamizadeh, A. Talwalkar, Foundations of Machine Learning, 2nd ed., MIT
Press, 2018, Chapter 9.
V. Koltchinskii, D. Panchenko, "Empirical margin distributions and bounding the generalization
error of combined classifiers," Annals of Statistics 30(1), 2002 (Lemma 9.1's technique).
K. Crammer, Y. Singer, "On the algorithmic implementation of multiclass kernel-based vector
machines," JMLR 2, 2001 (the multi-class SVM algorithm §9.3.1 derives).
Foundations of Machine Learning VII: On-Line Learning and On-Line-to-Batch ConversionTextbook
Motivation
Every guarantee in the preceding chapters assumes a fixed distribution and i.i.d. sampling.
On-line learning drops both assumptions: an algorithm processes one example at a time, in an
adversarial (worst-case) sequence, and is judged by regret against the best fixed comparator
in hindsight rather than by generalization error. This chapter develops the theory for this
setting — mistake bounds and regret bounds for prediction with expert advice, a margin-based
mistake bound for the Perceptron — and then closes a conceptual gap: since on-line algorithms
need no distributional assumption, can their guarantees be converted into ordinary
distributional (batch) generalization guarantees when the data does happen to be i.i.d.? The
on-line-to-batch conversion theorem answers yes, using nothing but an Azuma's-inequality
martingale argument on the sequence of hypotheses the algorithm actually produces.
Setting
At round t, an on-line algorithm receives x_t, predicts ŷ_t, receives the true label
y_t, and incurs loss L(ŷ_t,y_t); its regret R_T (Eq. 8.1) compares its cumulative loss to
the best fixed action's in hindsight. §8.2 develops this for prediction with expert advice: the
Halving algorithm (realizable case), Weighted Majority and its randomized version RWM
(zero-one loss, Theorem 8.4's L_T ≤ log(N)/(1-β) + (2-β)L_T^min, proved by the chapter's
recurring potential-function technique applied to W_t = ∑_i w_{t,i}), and the Exponential
Weighted Average algorithm (convex losses). §8.3.1 analyzes the Perceptron, a linear
classification algorithm whose margin-based mistake bound (Theorem 8.8, separable case; the
non-separable Theorem 8.11, restated here, in terms of an arbitrary comparator v's hinge
losses) depends only on the normalized margin, not the ambient dimension. §8.4 shows that
averaging the hypotheses h_1,…,h_T an on-line algorithm produces while processing an i.i.d.
sample S yields a hypothesis with controlled true risk: Lemma 8.14 bounds the average of
the per-round risks R(h_t) by the average on-line loss via a martingale argument on
V_t = R(h_t) - L(h_t(x_t),y_t), and Theorem 8.15 upgrades this, via the loss's convexity, to
a bound on the risk of the averaged hypothesis (1/T)∑h_t.
Formalization targets
Theorem 8.4 (milestone). Fix β∈[1/2,1). For any T≥1: L_T ≤ log(N)/(1-β) + (2-β)L_T^min; for β=max{1/2,1-√(log(N)/T)}: L_T ≤ L_T^min + 2√(T log N).
Theorem 8.11 (milestone).M ≤ inf_{ρ>0,‖v‖₂≤1}[(r/ρ+√(r²/ρ²+4‖l_ρ‖₁))/2]², where
l_ρ=(l_t)_{t∈I}, l_t=max{0,1-y_t(v·x_t)/ρ}.
Lemma 8.14 (milestone). For any δ>0, with probability at least 1-δ:
(1/T)∑_tR(h_t) ≤ (1/T)∑_tL(h_t(x_t),y_t) + M√(2log(1/δ)/T).
Theorem 8.15 — the mission's goal (first inequality). Under Lemma 8.14's hypotheses, with
L additionally convex in its first argument: for any δ>0, with probability at least
1-δ: R((1/T)∑_th_t) ≤ (1/T)∑_tL(h_t(x_t),y_t) + M√(2log(1/δ)/T).
Significance
Theorem 8.15 is the chapter's conceptual capstone: it is the only bridge in the whole book
between the adversarial on-line-learning framework and the distributional PAC/statistical
framework every other chapter develops, and its proof needs nothing beyond Lemma 8.14 plus
convexity — no new machinery, just the right observation about the loss's structure. Theorem
8.4 is the chapter's cleanest instance of its recurring potential-function proof technique
(reused, with variations, for Theorems 8.3, 8.6 and 8.7), and — checked against the platform's
existing OnlineConvexOpt.Introduction.randomized_weighted_majority_mistake_bound (Hazan
series) — a genuinely different result from what is already on the platform: that lemma
bounds a mistake count with a (1+ε) multiplier, this bounds the RWM algorithm's own
weighted-mixture loss with a 1/(1-β) term and a distinct optimal-β substitution,
confirming BRIEF.md's assessment that the two are close but not interchangeable. Theorem
8.11 is the non-realizable generalization of the separable-case Perceptron bound (Theorem 8.8)
that motivates soft-margin algorithms generally, expressed via an arbitrary comparator's hinge
loss rather than assuming perfect separability. No prior art exists for the chapter's other
content: GET /theorems?q=online%20to%20batch returns zero hits, and GET /theorems?q=perceptron returns only an unrelated neural-network topology result.
Difficulty
Theorem 8.4's proof (mirrored by Theorem 8.3's WM analogue) derives matching upper and lower
bounds on the potential W_t, combines them via a logarithm, and substitutes a specific
optimal β found by differentiating the resulting bound — a genuine two-step optimization
argument, not a direct algebraic identity. Theorem 8.11's proof solves a quadratic inequality
in √M after summing the hinge-loss-defining inequalities over the update set I and
invoking the Cauchy-Schwarz step already used in Theorem 8.8's proof; keeping the inf over
both ρ and v in the statement (not fixing them, per BRIEF.md's pitfall note) is what
makes this a genuine bound rather than a bound for one arbitrary choice. Lemma 8.14's proof is
an application of Azuma's inequality (the book's own Theorem D.7) to the martingale difference
sequence V_t = R(h_t) - L(h_t(x_t),y_t), which requires h_t to be measurable with respect
to the history strictly before round t — the on-line algorithm's hypothesis at round t
must not depend on the pair drawn at that same round, per BRIEF.md's pitfall note. Theorem
8.15's step beyond Lemma 8.14 is the passage from the average of T individual risks to the
risk of the averaged hypothesis, licensed by Jensen's inequality under the loss's convexity in
its first argument — dropping convexity breaks exactly this step, not merely weakening a
constant.
Formalization scope
GeneralizationError restates chunk 11-regression's Eq. (11.1) convention locally (Y := ℝ,
consistent with that chunk's own harmless simplification), needed here since Theorem 8.15
requires averaging hypotheses into a single real-valued function. OnlineHypothesis A S t is
formalized so that its type signature itself enforces history-adaptedness: the on-line
algorithm A : (n:ℕ) → (Fin n → X × ℝ) → (X → ℝ) is a function of the prefix of the sample
seen so far, and OnlineHypothesis A S t applies it only to S's first t pairs — this is
what licenses Azuma's inequality's martingale-difference argument (the conditional-mean-zero
property of V_t), per BRIEF.md's pitfall note. Revision (2026-09-19), correcting an
earlier claim in this section: history-adaptedness does not by itself guard against
GeneralizationError's Bochner integral silently junking to 0 for a non-measurable
hypothesis (a distinct property — whether h_t, as a function of x, is Measurable — from
whether h_t depends on round t's own draw). Moderation found this a live gap in both Lemma
8.14 and Theorem 8.15's drafted statements; both now carry an explicit hAmeas/hLmeas
hypothesis in addition to the history-adapted type signature.
RWM's w_{t,i}, W_t, p_{t,i}, L_t, L_T, L_{T,i}, L_T^min are modeled as their own
recursively-defined algorithm state (mirroring, but never substituting into, chunk
07-boosting's AdaBoost pattern), matching this chapter's own loss-based (not mistake-count)
quantities, per BRIEF.md's pitfall note distinguishing them from AdaBoost's and RWM-mistake
variants. The Perceptron's w_t, update-index set I, and M = |I| are modeled the same way,
using Eq. (8.23)'s equivalent sign-agreement update rule (the book's own reformulation of
Figure 8.6's sgn-based rule). Theorem 8.11's inf_{ρ>0,‖v‖₂≤1} is a genuine nested restricted
infimum (⨅ ρ ∈ Set.Ioi 0, ⨅ v ∈ Metric.closedBall 0 1, …), not a bound instantiated at fixed
ρ, v, per BRIEF.md's explicit pitfall note. No numerical constant is altered from the
book in any of the four theorems.
Not formalized: Theorems 8.1-8.3 (Halving and WM mistake bounds — the chapter's warm-up
results, superseded in content by the more general RWM/EWA theorems that follow), Theorem 8.5
(a matching lower bound, a distinct impossibility result rather than an algorithm's guarantee),
Theorems 8.6-8.7 (Exponential Weighted Average regret bounds — a third algorithm with its own
potential-function proof, out of scope per BRIEF.md's restriction to §8.2's Halving/WM/RWM),
Theorems 8.8-8.10 (the Perceptron's separable-case bound and its leave-one-out-based expected
generalization bounds, both superseded in generality by Theorem 8.11 for this mission's
purposes), Theorem 8.12 (Perceptron's L²-norm hinge-loss bound, the book's own note that it is
implied by, and looser than, Theorem 8.11's L¹-norm bound), the dual/kernel Perceptron (an
equivalent reformulation, not new generalization content), and Theorem 8.15's second displayed
inequality (a regret-form corollary depending on the regret decomposition of the surrounding
discussion, not drafted per BRIEF.md's own recommendation to commit to the first inequality
as the goal). §8.3.2 (Winnow) and §8.5 (the game-theoretic connection) are out of scope per
BRIEF.md's chapter restriction.
Selected references
M. Mohri, A. Rostamizadeh, A. Talwalkar, Foundations of Machine Learning, 2nd ed., MIT
Press, 2018, Chapter 8 (§8.2, §8.3.1, §8.4).
N. Littlestone, M. K. Warmuth, "The weighted majority algorithm," Information and
Computation 108(2), 1994 (WM/RWM's origin).
F. Rosenblatt, "The perceptron: a probabilistic model for information storage and
organization in the brain," Psychological Review 65(6), 1958 (the Perceptron algorithm).
Y. Freund, R. E. Schapire, "Large margin classification using the perceptron algorithm,"
Machine Learning 37(3), 1999 (Theorem 8.11's hinge-loss mistake bound).
High-Dimensional Statistics IX: Nuclear-Norm Regularization for Low-Rank Matrix RegressionTextbook
Motivation
Many estimation problems are naturally posed over matrices rather than vectors: recommender
systems (Netflix-style matrix completion), multivariate regression with correlated responses,
vector autoregressive time series, and phase retrieval all reduce to estimating an unknown
matrix Θ∗ that is low-rank, or well approximated by one. A rank constraint alone makes
the natural least-squares estimator non-convex and generally intractable; replacing it with the
nuclear norm — the sum of the matrix's singular values, the tightest convex surrogate for rank
— yields a tractable semidefinite program. Wainwright's High-Dimensional Statistics (2019),
Chapter 10, shows that this substitution costs nothing statistically: nuclear-norm-regularized
least squares achieves error rates matching what one could hope for even knowing the rank in
advance, by specializing Chapter 9's general decomposable-regularizer framework (mission
09-decomposability) directly to the nuclear norm.
Setting
For matrices A,B∈Rd1×d2, the trace inner product is
⟨⟨A,B⟩⟩:=trace(ATB)=∑j1,j2Aj1j2Bj1j2
(Eq. 10.1), inducing the Frobenius norm∥∣A∣∥F. Given design matrices
X1,…,Xn∈Rd1×d2 and responses yi=⟨⟨Xi,Θ∗⟩⟩+wi, the observation operatorXn(Θ):=(⟨⟨Xi,Θ⟩⟩)i=1n and its adjoint
Xn∗(u):=∑iuiXi (Eqs. 10.2-10.3) are the matrix analogs of a vector design
matrix and its transpose. The nuclear norm∥∣Θ∣∥nuc:=∑jσj(Θ)
(Eq. 10.5) — the sum of singular values — is a decomposable regularizer (in the sense of
Chapter 9) with respect to the subspace pair spanned by the top singular vectors of any target
matrix, and its dual norm (Table 9.1) is the ℓ2-operator (spectral) norm∥∣⋅∣∥2. The estimator under study is nuclear-norm-regularized least squares,
Suppose Xn satisfies the restricted strong convexity condition (10.17),
∥Xn(Δ)∥22/(2n)≥κ/2∥∣Δ∣∥F2−c0nd1+d2∥∣Δ∣∥nuc2 for all Δ, with κ>0,
c0≥0. Conditioned on the good event G(λn)={∥∣n1∑iwiXi∣∥2≤λn/2}, any optimal Θ^ satisfies, for any r∈{1,…,d′} with
r≤κn/(128c0(d1+d2)),
Under the alternative Φ∗-curvature condition (10.20) (a curvature bound on the gradient
map rather than the Taylor error), with rank(Θ∗)<κ/(64τn): conditioned
on G(λn)={∥∣n1Xn∗(w)∣∥2≤λn/2}, any optimal
Θ^ satisfies ∥∣Θ^−Θ∗∣∥2≤32λn/κ — an
operator-norm bound the book notes is, in conjunction with the cone-like constraint (10.15),
strictly stronger than Proposition 10.6's Frobenius-norm bound.
Significance
Proposition 10.6 is this chapter's direct payoff from Chapter 9's general machinery: it shows
that the deterministic backbone of the Lasso's guarantee (mission 07-sparse-linear) extends
essentially verbatim to the matrix setting, with the sparsity level s replaced by the target
rank r and the ambient dimension d replaced by d1+d2 — exactly the "degrees of freedom"
scaling one would predict by counting the parameters needed to specify a rank-r matrix. Every
one of the chapter's later corollaries (matrix compressed sensing, multivariate regression,
matrix completion) is obtained by verifying the restricted strong convexity condition (10.17)
holds with high probability for a specific random design, then reading the rate directly off
Proposition 10.6 — the same two-step recipe Chapter 9's own Theorem 9.19 established abstractly.
Proposition 10.7's operator-norm bound is what subsequently controls the individual singular
values of the estimation error, needed for exact-rank-recovery guarantees.
Difficulty
Both results are direct specializations of Chapter 9's general oracle inequalities (Theorem
9.19 and Theorem 9.24 respectively) to the nuclear norm as regularizer and the Frobenius/operator
norm pair, so their formalization difficulty lies almost entirely in getting the matrix-specific
objects right rather than in new proof machinery: the nuclear norm requires an actual notion of
singular values (realized via the eigenvalues of the Gram matrix ΘTΘ, using
Mathlib's Hermitian-matrix spectral theorem), the operator norm requires the correct rectangular
generalization of the symmetric-matrix Rayleigh-quotient characterization used in mission
08-pca, and the restricted-strong-convexity and curvature conditions must be instantiated
against the correctly-adjointed observation operator Xn∗. A further subtlety is
keeping Proposition 10.6's Frobenius-norm conclusion and Proposition 10.7's operator-norm
conclusion cleanly distinct — the book itself warns against conflating the norms used across
different chapters of Part II (the vector ℓ2-norm of chunks 07-sparse-linear/08-pca
versus the matrix Frobenius and operator norms here).
Formalization scope
Scope cut, disclosed here and in STATUS.md.BRIEF.md recommends Corollary 10.10 (the
sample-complexity bound for the Σ-Gaussian random matrix ensemble) as the goal theorem.
Corollary 10.10 is a genuinely probabilistic statement — it asserts a bound holding "with
probability at least 1−2e−2nδ2" over n i.i.d. draws of design matrices from a
Σ-Gaussian ensemble (Theorem 10.8's own high-probability restricted-strong-convexity
certification for that ensemble) — and formalizing it faithfully would require a genuine
multivariate-Gaussian-measure infrastructure on matrix space (a probability space, an i.i.d.
sequence of Σ-covariance-structured Gaussian matrices, and Mathlib's measure-theoretic
probability API) that is disproportionate to this mission's time budget, and orthogonal to what
Chapter 10 itself contributes (the chapter's own text stresses that Propositions 10.6 and 10.7
are the chapter's deterministic core, with probability entering only in Section 10.3's
ensemble-specific certification — precisely mirroring chunk 09-decomposability's own
"Theorem 9.19 is actually a deterministic result" framing). This mission instead takes
Proposition 10.6 as its goal — explicitly named in BRIEF.md's own candidate list as "the
nuclear-norm oracle inequality, an explicit corollary of Theorem 9.19" — the natural, tractable,
still highly citable deterministic title result of Section 10.2, together with its companion
Proposition 10.7. Theorem 10.8 (the Σ-Gaussian ensemble's RSC certification), Corollary
10.9 (noiseless exact recovery) and Corollary 10.10 itself are left for a future mission with a
dedicated probability-theory budget. The cone-like constraint (Eq. 10.15) — whose own faithful
statement requires the same explicit subspace-pair machinery
(M(Ur,Vr),Mˉ(Ur,Vr)) chunk 09-decomposability built for the
general theory — is similarly left out, since Propositions 10.6 and 10.7's own numbered
statements never expose these subspaces directly (only their proofs do, via instantiating
Theorem 9.19/9.24). singularValues and nuclearNorm are noncomputable, defined via
Mathlib's Hermitian-matrix eigenvalue spectral theorem; c0 ≥ 0 and λn > 0 are made explicit,
matching this book's running conventions for RSC tolerance constants and regularization weights
(see MODERATION_NOTES.md).
Selected references
Wainwright, M. J. High-Dimensional Statistics: A Non-Asymptotic Viewpoint. Cambridge
University Press, 2019. Chapter 10. DOI: 10.1017/9781108627771.
Negahban, S., Wainwright, M. J. "Estimation of (near) low-rank matrices with noise and
high-dimensional scaling." Annals of Statistics, 39(2), 2011, 1069–1097.
Recht, B., Fazel, M., Parrilo, P. A. "Guaranteed minimum-rank solutions of linear matrix
equations via nuclear norm minimization." SIAM Review, 52(3), 2010, 471–501.