The Markov Chain Central Limit TheoremResearch Paper
Markov chain Monte Carlo turns hard integration problems into long simulations: to estimate an expectation Eπf one runs a Markov chain with stationary distribution π and reports the sample average fˉn. The ergodic theorem guarantees fˉn→Eπf, but honest error bars require more: a central limit theorem
n(fˉn−Eπf)→dN(0,σf2).
On general state spaces this is famously delicate - a merely ergodic chain with a square-integrable functional can fail the CLT, so the classical theory trades convergence rates (drift, minorization, geometric or polynomial total-variation rates) and mixing conditions (α-, ρ-, φ-mixing) against moment conditions on f. This mission formalizes G. L. Jones's survey "On the Markov chain central limit theorem" (Probability Surveys, 2004): the drift-condition CLTs of Meyn-Tweedie and Jarner-Roberts, the classical mixing CLTs of Ibragimov-Linnik, Doukhan-Massart-Rio and Billingsley, the characterizations via uniform integrability and boundedness in probability, and their assembly into the summary theorem: six practically checkable regimes - from polynomial ergodicity with bounded functionals to uniform ergodicity with second moments - each of which guarantees the CLT for every initial distribution. The stationarity, total-variation and mixing infrastructure is general state space and reusable well beyond this mission.
Discrepancy theory asks how evenly a collection of objects can be split into two parts. Its central open question is a conjecture of Komlós, first circulated in the 1980s: any finite family of vectors of Euclidean length at most one can be signed ±1 so that the signed sum is bounded in every coordinate by a universal constant — independent of how many vectors there are and of the dimension they live in.
Timeline
1963. Steinitz-type vector balancing questions circulate; Bárány and Grinberg later (1981) show any norm admits a dimension-dependent bound 2d, setting the theme: how much of the dependence on dimension is real?
1981. Beck and Fiala (Discrete Appl. Math.) prove degree-t set systems have discrepancy at most 2t−1, by the floating-colors argument, and conjecture O(t).
1980s. Komlós poses the vector form — unit ℓ2-norm columns, constant ℓ∞ discrepancy — which implies the Beck–Fiala conjecture; it circulates through Spencer's Ten Lectures (1987) as the central open problem of the area.
1985. Spencer (Trans. AMS) proves "six standard deviations suffice": discrepancy 6n for n sets on n points, beating random signing via the partial-coloring method.
1998. Banaszczyk (Random Struct. Algorithms) proves the Komlós bound O(logn) by a recursive Gaussian-measure argument over convex bodies.
2010–2016. The constructive era: Bansal (2010) makes Spencer algorithmic by SDP random walks, Lovett and Meka (2012) simplify, and Bansal, Dadush, and Garg (STOC 2016) give a polynomial-time algorithm matching Banaszczyk's bound.
2023. Kunisky (SIAM J. Discrete Math.) constructs instances from unsatisfiable formulas with discrepancy approaching 1+2 — the strongest lower bound on the conjectured constant.
2025. Bansal and Jiang (arXiv:2508.03961) break the Banaszczyk barrier: O~((logn)1/4) for Komlós, and the Beck–Fiala conjecture resolved for t≥log2n — the first movement in nearly thirty years. The gap between 2.414… and O~((logn)1/4) is the conjecture.
Setting
Fix n vectors v1,…,vn∈Rm with Euclidean norm ∥vi∥2≤1. A sign vector is an ε∈{−1,+1}n: one sign εi∈{±1} per vector. Writing vij for the j-th coordinate of the vector vi, the discrepancy of the family under ε is the largest coordinate, in absolute value, of the signed sum ∑iεivi — that is, maxj≤m∣∑i≤nεivij∣, the ℓ∞ norm of the signed sum. The Komlós property at constant K — KomlosBound K — says that every such family, in every n and every m, admits a sign vector with every coordinate of the signed sum at most K in absolute value.
Set systems embed as the special case of 0/1-incidence matrices: if A is an m×n matrix of 0s and 1s in which every column has at most t ones (every element lies in at most t sets), the columns scaled by 1/t have norm at most one, so the Komlós property gives discrepancy Kt — the Beck–Fiala conjecture.
Formalization targets
Goal — the Komlós conjecture
∃K∈R:every v1,…,vn∈Rm with ∥vi∥2≤1 admits ε∈{±1}n with jmaxi∑εivij≤K.
The goal fixes no value of K: any finite universal constant settles it, so the statement survives every improvement in the constant.
Milestones — the known ladder
Eight results over the same definitions: Beck–Fiala's 2t−1 for degree-t set systems; Spencer's 6n for n sets on n points; Banaszczyk's O(logn) for the Komlós setting; its corollary O(tlogn) for set systems; the reduction "Komlós at K implies Beck–Fiala at Kt"; Kunisky's lower bound K≥1+2; and the two 2025 Bansal–Jiang breakthroughs — O~((logn)1/4) for the Komlós setting, and the Beck–Fiala conjecture's bound O(t) in the regime t=Ω(log2n).
Significance
The conjecture is the meeting point of the two main techniques of discrepancy theory — partial coloring and the Gaussian/convex-geometric method — and each further improvement has forced a new technique into existence. A proof would resolve the Beck–Fiala conjecture in full and sharpen the hereditary-discrepancy landscape; a disproof would break the widely-shared expectation that vector balancing is dimension-free. The problem is also a benchmark for algorithmic discrepancy: every known bound now has a polynomial-time counterpart, and the constructive tools built for it (random-walk roundings, spectral partial colorings) are used across approximation algorithms and ranging into differential privacy.
None of this literature is formalized anywhere; Mathlib has no discrepancy theory at all. The definitions here are elementary — finite sums, absolute values, one norm hypothesis — so the mission's entry cost is unusually low for an open-problem mission: the Beck–Fiala theorem and the scaling reduction are self-contained finite combinatorics, while Spencer and Banaszczyk each force a genuinely new proof technique (pigeonhole partial coloring; Gaussian measure on convex bodies) into Lean.
Difficulty
Random signs lose: they give Θ(n), not a constant, so the naive probabilistic argument is ruled out from the start. The Beck–Fiala argument caps discrepancy by degree, not by norm, and provably cannot be pushed below 2t−O(1) by its own bookkeeping. Partial coloring alone loses a logarithm through its iteration, and Banaszczyk's method is blocked at logn by the Gaussian measure of the cube. The 2025 advance decouples the two methods but still pays iterated polylogarithmic factors. Nothing currently known contracts the remaining gap to a constant, and the lower bound says the constant, if it exists, is at least 1+2 — so any proof must handle instances strictly harder than the set-system case.
Formalization scope
The Lean model commits to: vectors as EuclideanSpace ℝ (Fin m), whose norm is the ℓ2 norm (the hypothesis ∥vi∥≤1 reads ‖v i‖ ≤ 1); the ℓ∞ conclusion written coordinatewise as ∀ j, |∑ i, ε i * v i j| ≤ K, avoiding any auxiliary sup-norm structure; sign vectors as real vectors with ε i = 1 ∨ ε i = -1; and set systems as matrices A : Fin m → Fin n → ℝ with an entrywise 0/1 hypothesis and column-degree counted by Set.ncard. Quantifier order matters everywhere: in KomlosBound K the constant is fixed beforen and m — a K depending on n would make the statement the trivial n bound. In beck_fiala the hypothesis t≥1 is required (the degree-0 system has discrepancy 0>2t−1 otherwise); the Banaszczyk-form bounds use log(n+2) so that the bound is positive already at n≤1. In the Bansal–Jiang milestones the asymptotic O~ and Ω are rendered by existential constants quantified before all instances: the hidden poly(loglogn) factor becomes (loglog(n+8))γ for some fixed γ>0 (the inner shift +8 keeps the iterated logarithm positive), and the threshold t=Ω(log2n) becomes C0log2(n+2)≤t for some fixed C0>0.
Welcome contributions: any milestone in any order — beck_fiala and komlos_implies_beck_fiala are self-contained finite arguments and the natural entry points; spencer_six_deviations and banaszczyk_bound each import a major technique; komlos_lower_bound needs an explicit construction and a case analysis over all sign vectors. Reusable infrastructure — partial colorings, Gaussian measure bounds for convex bodies, hereditary discrepancy — is welcome as platform theorems. The matrix Spencer conjecture, prefix discrepancy, and the Steinitz problem are related but deliberately left to future missions.
W. Banaszczyk, Balancing vectors and Gaussian measures of n-dimensional convex bodies, Random Structures & Algorithms 12 (1998). doi link
N. Bansal, D. Dadush, S. Garg, An algorithm for Komlós conjecture matching Banaszczyk's bound, FOCS 2016 / SIAM J. Comput. arXiv:1605.02882
N. Bansal, H. Jiang, Decoupling via affine spectral-independence: Beck–Fiala and Komlós bounds beyond Banaszczyk, 2025. arXiv:2508.03961
D. Kunisky, The discrepancy of unsatisfiable matrices and a lower bound for the Komlós conjecture constant, SIAM J. Discrete Math. 37 (2023). arXiv:2111.02974
B. Chazelle, The Discrepancy Method, Cambridge University Press, 2000. author's page
Improved Algorithms for Linear Stochastic Bandits I: High-Probability Regret Bound for the OFUL AlgorithmResearch Paper
Motivation
In a linear stochastic bandit, a learner repeatedly chooses an action from a set of vectors and receives a noisy reward whose mean is linear in the action. The model underlies contextual recommendation, adaptive routing and dynamic pricing, where each option is described by features and the payoff of a feature vector must be learned while it is exploited. The quality of a strategy is measured by its regret: the reward lost, relative to always playing the best action, over the first n rounds.
The optimism-in-the-face-of-uncertainty principle (play as if the most favourable parameter consistent with the data were true) was introduced for linear bandits by Auer (2002), and developed by Dani, Hayes and Kakade (2008) (ConfidenceBall, regret O(dnlog3/2n) with confidence sets from a union bound over time) and Rusmevichientong and Tsitsiklis (2010). Abbasi-Yadkori, Pál and Szepesvári (NIPS 2011) replaced the union bound by a self-normalized martingale inequality that holds uniformly in time. It gives smaller confidence ellipsoids and, through them, a high-probability regret bound for the resulting algorithm, OFUL, that improves the earlier ones by logarithmic factors. The inequality became the standard tool for linear and kernelized bandits and for linear reinforcement learning.
Setting
Fix a dimension d≥1 and an unknown parameter θ∗∈Rd. In round t=1,2,… the learner is given a nonempty decision setDt⊆Rd, chooses Xt∈Dt, and observes the reward
Yt=⟨Xt,θ∗⟩+ηt.
There is a filtration {Ft}t≥0 such that Xt is Ft−1-measurable and ηt is Ft-measurable and conditionally R-sub-Gaussian: E[eληt∣Ft−1]≤exp(λ2R2/2) for all λ∈R, with R≥0 fixed.
For a regularization parameter λ>0 let Vt=λI+∑s=1tXsXs⊤ and let θt=Vt−1∑s=1tYsXs be the regularized least-squares estimate. With ∥v∥A=v⊤Av and a known bound ∥θ∗∥2≤S, the confidence ellipsoid is
The OFUL algorithm chooses, in round t, a pair (Xt,θt) maximizing ⟨x,θ⟩ over Dt×Ct−1. The pseudo-regret is Rn=∑t=1n⟨xt∗−Xt,θ∗⟩, where ⟨xt∗,θ∗⟩=maxx∈Dt⟨x,θ∗⟩.
Formalization targets
Goal: Theorem 3, the regret of OFUL
If ∥Xt∥2≤L, ⟨x,θ∗⟩∈[−1,1] for all x∈Dt, and λ≥max(1,L2), then for every δ>0, with probability at least 1−δ,
For any positive definite V, Vt=V+∑s≤tXsXs⊤ and St=∑s≤tηsXs: with probability at least 1−δ, for all t≥0,
∥St∥Vt−12≤2R2log(det(Vt)1/2det(V)−1/2/δ).
Milestones: Theorem 2, the confidence ellipsoids
With probability at least 1−δ, θ∗∈Ct for all t≥0 (first claim). If ∥Xt∥2≤L, then with probability at least 1−δ, for all t, ∥θt−θ∗∥Vt≤Rdlog((1+tL2/λ)/δ)+λ1/2S (second claim, stated here for d≥2).
Significance
Theorem 3 bounds the regret of OFUL by O(dnlogn) with high probability, uniformly over the horizon, so it holds for an unknown horizon without restarting. The bound applies to arbitrary, even adversarially changing, decision sets. Theorem 1 is the ingredient that makes this possible: a deviation bound for a vector-valued martingale, normalized by its own random covariance, that holds for all times simultaneously and whose logarithmic term is a determinant rather than a union-bound count. The same inequality underlies regret analyses of generalized linear bandits, kernelized bandits, linear Markov decision processes and many confidence-sequence constructions.
All three results are proved in the paper's appendices (not included in the source file used here). None of them is formalized in the stated generality. Prove2Me holds the special cases V=λI, R=1, δ<1 of Theorems 1 and 2 (from the Bandit Algorithms textbook series), a pathwise LinUCB regret lemma that assumes the confidence event, and the elliptical potential lemma. A formal proof of Theorem 3 would be the first machine-checked high-probability regret bound for OFUL with the paper's confidence sets.
Difficulty
The actions are chosen adaptively, by an argmax over a data-dependent set, so the sequence Xt has no independence structure and the least-squares estimate is not a sum of independent terms. A fixed-design concentration bound followed by a union bound over time and over a covering of the sphere loses logarithmic factors and does not produce the determinant in the radius; that is the route of the earlier work that Theorem 1 improves. Theorem 1 must hold for all times at once for a quantity normalized by the random matrix Vt, which is itself built from the adaptively chosen actions; a bound for each fixed t does not give it.
Formalization scope
Vectors are Fin d → ℝ, matrices Matrix (Fin d) (Fin d) ℝ, and ∥x∥A is Real.sqrt (x ⬝ᵥ A *ᵥ x). Rounds are indexed t+1 for t:N, so sums over s≤t are sums over Finset.range t at index s + 1, and the time-0 objects are empty sums. The probability space is standard Borel, as Mathlib's conditional sub-Gaussianity (HasCondSubgaussianMGF, variance proxy R2) requires; this is an added hypothesis. Every "with probability at least 1−δ, for all t" is stated as an outer-measure bound ≤δ on the failure event, with the time quantifier inside the event. det(⋅)1/2 is the real square root of the determinant; the matrices inverted are positive definite, so Lean's junk inverse never occurs.
OFUL is a predicate on the whole process: in every round the chosen pair maximizes ⟨x,θ⟩ over Dt×Ct−1, with any tie-breaking. Runs exist whenever the decision sets are nonempty and compact. The measurability of the actions is assumed, as in Theorem 1. The optimal reward ⟨xt∗,θ∗⟩ is the supremum over Dt, finite because of the reward bound.
Two corrections to the printed Theorem 3 are made and disclosed. The printed nL/d is replaced by nL2/d, which is what the determinant–trace bound detVn≤(λ+nL2/d)d gives; for L≤1 the corrected bound implies the printed one. The hypothesis λ≥max(1,L2) is added: for λ<1 the printed logarithm can be negative, and the printed bound would then assert Rn≤0. In the second claim of Theorem 2, d≥2 is added, because at d=1 the claim does not follow from the first claim and the paper's proof is not available.
The goal is a probability bound over the noise, not the pathwise statement "if θ∗∈Ct−1 for all t then Rn≤…". The pathwise statement assumes the confidence event instead of proving it, and is already on the platform. The confidence sets inside the OFUL predicate use the same δ as the conclusion.
Needed infrastructure: maximal inequalities for nonnegative supermartingales, Gaussian integrals of quadratic forms on Rd, log-determinant bounds for sums of rank-one updates, and the determinant–trace inequality. The platform rows BanditAlgorithm.self_normalized_martingale_bound, BanditAlgorithm.least_squares_confidence_ellipsoid and BanditAlgorithm.elliptical_potential_lemma are referenced as tools. Proofs of the milestones, generalizations of the existing special cases to general V and R, and reusable determinant lemmas are all welcome.
Selected references
Y. Abbasi-Yadkori, D. Pál, Cs. Szepesvári, Improved Algorithms for Linear Stochastic Bandits, Advances in Neural Information Processing Systems 24 (NIPS), 2011. https://proceedings.neurips.cc/paper/2011
P. Rusmevichientong, J. N. Tsitsiklis, Linearly Parameterized Bandits, Mathematics of Operations Research 35(2), 2010. https://doi.org/10.1287/moor.1100.0446
Markov Chains and Mixing Times XI: The Cutoff Phenomenon and Lamplighter WalksTextbook
Motivation
For many natural chains, convergence to stationarity is not gradual: the distance stays near its maximum for a long time and then collapses to zero in a comparatively negligible window. A deck of cards under riffle shuffles is "not at all mixed" for six shuffles and "essentially mixed" after eight. This abrupt transition is the cutoff phenomenon, discovered by Aldous and Diaconis in the 1980s, and Chapter 18 of Levin–Peres–Wilmer, Markov Chains and Mixing Times (AMS, 2009) develops its theory: precise definitions of cutoff and cutoff windows, the product criterion trel=o(tmix) necessary for cutoff, and complete proofs for two model families — the biased walk on a segment and the lazy hypercube walk, the latter with the sharp 21nlogn location and window n, in both total variation and separation. Chapter 19 complements this with lamplighter walks: chains on the wreath-product state space of lamp configurations over a moving lamplighter, whose relaxation, mixing, and separation times are governed — beautifully — by the hitting and cover times of Missions VI. Both chapters are formalized in this mission.
Setting
A family of chains is a sequence P(n) on state spaces Vn with stationary distributions πn; all single-chain quantities acquire an index n. As before, ∥μ−ν∥TV=maxA∣μ(A)−ν(A)∣, dn(t)=maxx∥P(n)t(x,⋅)−πn∥TV, tmix(n)(ε)=min{t:dn(t)≤ε}, and tmix(n)=tmix(n)(1/4). The family has a cutoff when for every 0<ε<1
tmix(n)(1−ε)tmix(n)(ε)⟶1(n→∞),
and a cutoff at tn with window wn when wn=o(tn) and the distance at time tn+αwn tends (in the appropriate limsup/liminf sense) to 1 as α→−∞ and to 0 as α→+∞. The separation distance from x is sx(t)=maxy(1−Pt(x,y)/π(y)) (Mission III), s(t)=maxxsx(t), and a separation cutoff is defined by the same window template with s in place of d. From Mission VII, trel=(1−λ⋆)−1 is the relaxation time; from Mission VI, thit=maxx,yEx(τy) and tcov are the maximal hitting and cover times, and the pairwise distance dˉ(t)=maxx,y∥Pt(x,⋅)−Pt(y,⋅)∥TV is from Mission II.
The concrete chains: the lazy biased walk on {0,…,n} holds with probability 21 and otherwise steps up with probability p>21, down with probability 1−p (reflecting at the endpoints); the lazy hypercube walk is the walk of Mission IV on {0,1}n. The lamplighter chainG∗ over a graph G has states (lamp configuration in {0,1}V, lamplighter position in V); one step randomizes the current lamp, moves the lamplighter one step of the lazy walk on G, and randomizes the new lamp. Its stationary distribution is uniform lamps times the walk's stationary distribution.
Formalization targets
Goal
Theorem 18.3: the lazy hypercube walk has a cutoff at 21nlogn with window n — the family's total variation distance undergoes its full collapse in a window of size Θ(n) around 21nlogn.
Milestones
Lemma 18.1 — cutoff is equivalent to the step-function limit: dn(⌊ctmix(n)⌋)→1 for every c<1 and →0 for every c>1.
Theorem 18.2 — the lazy biased walk on {0,…,n} with bias β=p−21>0 has a cutoff at β−1n with window n.
Proposition 18.4 (the product condition) — for a reversible family with tmix(n)→∞, if tmix(n)≤Ctrel(n) for a fixed constant C, the family has no cutoff: trel=o(tmix) is necessary.
Theorem 18.8 — the lazy hypercube walk has a separation cutoff at nlogn with window n — at twice the total-variation cutoff time.
Lemma 19.3 (Aldous–Diaconis) — the separation–total-variation relation s(2t)≤1−(1−dˉ(t))2 for reversible chains.
Theorem 19.1 — for lamplighter chains over a growing family of connected graphs, trel(Gn∗)≍thit(Gn): the relaxation time is comparable, with universal constants, to the maximal hitting time of the base walk.
Theorem 19.2 — likewise tmix(Gn∗)≍tcov(Gn): the lamplighter's mixing time is governed by the base walk's cover time.
Significance
The results. Cutoff is the deepest phenomenon in the quantitative theory of Markov chains: it says mixing is a phase transition in time. The hypercube is the fundamental example where everything can be computed — the eigenvalue structure of Mission VII delivers the upper bound and a refined distinguishing-statistic argument (Mission IV) the lower — and the 21nlogn location with window n is the sharpest statement of the coupon-collector heuristic. The product condition 18.4 is the basic sanity criterion in the ongoing research program of characterizing cutoff. The lamplighter theorems tie together the entire series: hitting times (Mission VI), cover times (Mission VI), relaxation times (Mission VII), and separation (Missions III, XI) all meet in one family of chains that furnishes counterexamples — for instance, families with total-variation cutoff but no separation cutoff.
Formalizing them. Nothing about cutoff exists in any proof assistant. The definitions themselves (families of chains, windows, limsup/liminf in a real parameter) are a formalization contribution: they force precision about quantifier order that informal texts elide. The hypercube cutoff is a landmark target — a sharp two-sided asymptotic statement, not an inequality.
Difficulty
The upper half of the hypercube cutoff needs the full eigenvalue decomposition of the walk (λj=1−j/n with multiplicity (jn), via Mission VII's spectral representation) and the ℓ2 bound summed over binomial coefficients; the lower half needs the Hamming-weight distinguishing statistic pushed to second-order precision (mean and variance at time 21nlogn+αn). Proposition 18.4 converts an eigenfunction with eigenvalue near 1 into a quantitative anti-concentration statement — the formal content of "a bounded ratio forbids abrupt collapse". Theorem 18.2 rests on a central-limit-flavoured estimate for the biased walk's position, done with fourth-moment bounds rather than the CLT. The lamplighter theorems are the heaviest: the upper bounds couple lamp refreshment with the cover-time of the base walk, the lower bounds run separation-distance and eigenfunction arguments, and all four inequalities must hold with universal constants over an arbitrary growing graph family — the statements quantify over the family, so the proofs must too. The asymptotic language throughout (liminf/limsup over n, limits in the window parameter α) exercises the filter library in earnest.
Formalization scope
Families are dependent functions ∀ n, Matrix (V n) (V n) ℝ over a sequence of finite state-space types. Cutoff and windows are rendered exactly by the book's Eq. (18.3) and §18.1: the window definition uses Filter.liminf/limsup over n composed with limits in the real parameter α (through ⌊t n + α w n⌋₊, with the natural-floor convention on negative reals). The mixing-time ratio in the cutoff definition uses real division of the natural-valued mixing times (total division: the hypotheses keep denominators eventually positive). The biased walk's stationary distribution is passed as a hypothesis rather than a closed form. In the lamplighter theorems the comparability constants c1,c2 and the threshold N are existentially quantified, with the graph family and its connectivity as hypotheses; the lamplighter matrix and its product stationary distribution are explicit definitions. Lemma 19.3 is stated for a single reversible chain at all times t.
Markov Chains and Mixing Times X: Martingales and Evolving SetsTextbook
Motivation
Every mixing bound in Missions II–IX ultimately leaned on either coupling or the spectrum, and the spectral route demanded reversibility. Chapter 17 of Levin–Peres–Wilmer, Markov Chains and Mixing Times (AMS, 2009) opens a third route: martingales — processes whose conditional expected increment vanishes — and the beautiful evolving-set process of Morris and Peres built from them. The payoff theorem of the chapter bounds the mixing time of any lazy irreducible chain by its bottleneck constant, with no reversibility hypothesis anywhere — an honest strengthening of the spectral route through the Cheeger inequality, whose proof is a martingale analysis of a random sequence of sets growing and shrinking under the chain's flow. The same chapter proves the optional stopping theorem in the exact discrete form the rest of the series consumes, and applies the machinery to sharp return-probability estimates for lazy walks.
Setting
Throughout, P is a chain on a finite state space V with stationary distribution π; ∥μ−ν∥TV=maxA∣μ(A)−ν(A)∣, d(t)=maxx∥Pt(x,⋅)−π∥TV, and tmix(ε)=min{t:d(t)≤ε} as in the earlier missions; πmin=minxπ(x). The chain is lazy when P(x,x)≥21 at every state.
A martingale adapted to the chain is a family Mt of functions of the trajectory up to time t such that the conditional expectation of Mt+1, given the trajectory so far, equals Mt — for a finite chain, a pointwise finite-sum identity. A stopping timeτ is a {0,1}-valued stopping rule in the sense of Mission III: whether to stop at time t depends only on the trajectory up to t.
From Mission IV: the edge measure is Q(x,y)=π(x)P(x,y), with Q(S,y)=∑x∈SQ(x,y), and the bottleneck constantΦ⋆ is the minimum over sets S with 0<π(S)≤21 of Φ(S)=Q(S,Sc)/π(S). The evolving-set process is the Markov chain on subsets of V in which, from the current set S, one draws u uniform on (0,1] and passes to the superlevel set
S′={y:π(y)Q(S,y)≥u}
— states currently receiving a large share of the flow out of S are likely to join, states receiving little are likely to leave.
Formalization targets
Goal
Theorem 17.10 (Morris–Peres), the capstone of Chapter 17: for any lazy irreducible chain — reversibility not assumed —
tmix(ε)≤Φ⋆22log(επmin1).
Milestones
Corollary 17.7, the Optional Stopping Theorem — if M is a martingale adapted to the chain, bounded uniformly by a constant, and τ is an almost surely finite stopping time, then Ex(Mτ)=M0(x): stopping a fair game at a fair time wins nothing.
Lemma 17.12 — the evolving-set process, started from the singleton {x}, recovers the chain: Pt(x,y)=π(x)π(y)P{x}{y∈St}.
Lemma 17.13 — for the evolving-set process, the stationary mass π(St) of the current set is a martingale.
Theorem 17.17 — return probabilities of the lazy random walk on a graph of maximum degree Δ: Pt(x,x)−π(x)≤2Δ5/2/t, an application of the evolving-set machinery.
Significance
The results. The optional stopping theorem is the workhorse identity of discrete probability — the earlier missions' gambler's-ruin and hitting-time computations are all instances, and Missions XI–XII cite it again. The Morris–Peres theorem is the strongest known elementary relation between geometry and mixing: for reversible chains it recovers the Cheeger-based bound tmix≲Φ⋆−2log(1/πmin) of Mission VII, but it needs no reversibility, and its proof technique — controlling the rootπ(St) as a supermartingale — introduced evolving sets as a tool that has since produced heat-kernel decay, isoperimetric mixing profiles, and bounds for non-reversible and time-inhomogeneous chains well beyond the book.
Formalizing them. Mathlib's martingale library lives in measure-theoretic generality; this mission's chain-adapted martingales are self-contained finite objects (families of functions on trajectory spaces), so the optional stopping theorem here is independent of, and complementary to, the measure-theoretic one. Evolving sets exist in no proof assistant; the process is a genuinely novel formalization target — a Markov chain whose states are Finsets, defined through interval lengths of a uniform variable.
Difficulty
The optional stopping theorem needs the dominated-convergence step (bounded martingale, a.s. finite time) rendered as an elementary tail estimate — the series ∑tP{τ=t}Mt must be shown summable and equal to M0 by an exchange of finite sums with a limit. The evolving-set transition probabilities are interval lengths: the probability of passing from S to T is the length of the set of u∈(0,1] whose superlevel set is exactly T, which the formalization encodes by explicit upper and lower thresholds (a min over T and a max over Tc of the clipped ratios Q(S,y)/π(y)); establishing that these lengths sum to one over T, and that the process has the two martingale properties, is delicate finite-order-statistics reasoning. The goal theorem then runs a supermartingale argument on π(St): laziness keeps the thresholds in [21,1], an expansion estimate converts the bottleneck constant into a per-step multiplicative decay of Eπ(St)(1−π(St)), and Lemma 17.12 converts that decay into a total-variation bound. Theorem 17.17 composes the same machinery with a Cauchy–Schwarz step. None of this exists in any library; the auxiliary supermartingale lemmas are welcome as separate contributions.
Formalization scope
Martingales, stopping times, and stopped expectations are the trajectory-calculus objects of Missions I and III: finite sums over paths weighted by ∏P(ωi,ωi+1), with expectations over the stopping time as tsums in t (non-summable families sum to 0; the a.s.-finiteness hypothesis is the statement that the stopping mass sums to 1). The evolving-set matrix is defined by the clipped-threshold formula described above — an explicit real matrix on Finset V — and the goal and lemmas assume π positive and P lazy exactly where the book does. Theorem 17.17 is stated for the lazy walk on a connected graph with positive degrees, with π(x)=deg(x)/2∣E∣ written out. Real-valued bounds on the natural-valued tmix are direct inequalities on the cast, with no hidden rounding.
Markov Chains and Mixing Times IX: The Ising ModelTextbook
Motivation
The Ising model is statistical mechanics' fruit fly: spins ±1 on the vertices of a graph, neighbours preferring to agree, a single parameter — the inverse temperature β — tuning the strength of that preference. Chapter 15 of Levin–Peres–Wilmer, Markov Chains and Mixing Times (AMS, 2009) studies the Glauber dynamics for this model and exhibits, on concrete graphs, the phenomenon that made mixing times a subject: a dynamical phase transition. At high temperature (small β) the dynamics mixes in O(nlogn) steps on any bounded-degree graph; on the complete graph the same dynamics passes, as β crosses an explicit threshold, from O(nlogn) mixing to exponentially slow mixing. The chapter also introduces two comparison tools of independent value — the sensitivity of the spectral gap to edge removal, and the block dynamics comparison — and the Kenyon–Mossel–Peres bound for trees, all formalized in this mission.
Setting
Spin configurations on a finite graph G with vertex set of size n and maximum degree Δ are functions σ assigning ±1 to each vertex (encoded over Booleans, true↦+1). The Ising model at inverse temperature β>0 is the Gibbs distribution
π(σ)=Z(β)eβ∑{v,w}∈Eσ(v)σ(w),
each edge counted once, Z(β) the normalizing partition function. The Glauber dynamics for π picks a uniform vertex and re-samples its spin from π conditioned on all other spins — concretely, the new spin at v is +1 with probability (1+tanh(βS))/2 where S is the sum of the neighbouring spins.
The yardsticks are as in the earlier missions: ∥μ−ν∥TV=maxA∣μ(A)−ν(A)∣ is the total variation distance, d(t)=maxσ∥Pt(σ,⋅)−π∥TV, and tmix(ε)=min{t:d(t)≤ε}. From Mission VII: an eigenvalue of a chain is a real λ with Pf=λf for some nonzero f; λ2 is the largest eigenvalue =1, the spectral gap is γ=1−λ2, λ⋆ the largest ∣λ∣ over eigenvalues =1, and the relaxation time is trel=(1−λ⋆)−1.
Formalization targets
Goal
Theorem 15.1, the high-temperature fast-mixing theorem: if Δtanhβ<1 then the Glauber dynamics on any graph satisfies
tmix(ε)≤⌈1−Δtanhβn(logn+log(1/ε))⌉,
together with its refinement for graphs with all degrees even, where the condition relaxes to (Δ/2)tanh(2β)<1.
Milestones
Lemma 15.2 (the tanh lemma) — the elementary inequalities about x↦tanh(β(x+1))−tanh(β(x−1)) (symmetry, monotonicity, the bounds by 2tanhβ and, at odd integers, by tanh2β) that drive the one-site coupling contraction.
Theorem 15.3 — the dynamical phase transition on the complete graph at β=α/n: (i) for α<1, tmix(ε)≤n(logn+log(1/ε))/(1−α); (ii) for α>1, there are r(α),C>0 with tmix≥Cern — split here into a fast half and a slow half.
Theorem 15.4 — on the n-cycle, at every β>0, mixing is nlogn up to explicit constants: (1+o(1))2cO(β)nlogn≤tmix(ε)≤(1+o(1))cO(β)nlogn with cO(β)=1−tanh(2β).
Theorem 15.6 (Kenyon–Mossel–Peres) — on the rooted b-ary tree of depth k with nk vertices, the relaxation time is polynomial at every temperature: trel≤nkcT(β,b) with cT(β,b)=2β(3b+1)/logb+1.
Proposition 15.7 — removing r edges changes the spectral gap of the Glauber dynamics by at most a factor e2β(Δ+2r).
Theorem 15.9 — the block-dynamics comparison: if blocks V1,…,Vb cover the vertex set, each of size at most M, each vertex in at most M⋆ blocks, then the spectral gap γB of the block dynamics and the gap γ of the single-site dynamics satisfy γB≤M2M⋆(4e2βΔ)M+1γ.
Significance
The results. Theorem 15.1 is the standard fast-mixing criterion for Glauber dynamics, and the model application of the path-coupling technique of Mission VIII. Theorem 15.3 exhibits, in the cleanest possible setting, the correspondence between the static phase transition of the mean-field Ising model and the dynamical transition of its Glauber dynamics — the phenomenon at the heart of Markov-chain approaches to statistical physics. The tree bound of Kenyon–Mossel–Peres and the block-dynamics comparison are the standard tools for spatially structured spin systems; block dynamics in particular is the engine of recursive gap bounds on trees and lattices.
Formalizing them. Nothing about the Ising model, Gibbs distributions, or Glauber dynamics exists in Mathlib. The Gibbs-distribution layer (weights, partition functions, conditional single-site laws with their tanh closed forms) is foundational for any future formalization of statistical mechanics; the phase-transition theorem 15.3(ii) would be, to our knowledge, the first formalized instance of exponentially slow mixing driven by an energy barrier.
Difficulty
The high-temperature theorem is path coupling (Mission VIII) plus the tanh lemma: the one-site coupling of two adjacent configurations contracts the Hamming metric at rate 1−(1−Δtanhβ)/n, and every analytic input is in Lemma 15.2 — which is why that elementary lemma is a milestone of its own. The slow-mixing half of Theorem 15.3 runs through the bottleneck bound of Mission IV: the magnetization performs a one-dimensional walk in a double-well free-energy landscape, and the bottleneck at zero magnetization has exponentially small stationary mass — a large-deviations estimate carried out with binomial coefficients. The cycle's lower bound needs Wilson's method (Mission VII) with an explicit eigenfunction. The tree and block theorems are exercises in the comparison technology of Mission VII (Dirichlet forms, canonical paths through block updates); their constants are crude but the inductive structure is delicate. Everything sits on the subtlety that the state space {±1}V has size 2n, so all "polynomial" bounds are polynomial in n, not in the size of the state space.
Formalization scope
The Gibbs distribution is defined by explicit finite sums (weight over partition function, total division); no positivity side conditions are needed since the weights are exponentials. The Glauber dynamics is the generic single-site heat bath of Mission II applied to the Ising distribution, so the tanh closed form is a provable lemma, not a definition. Asymptotic statements (o(1), "for sufficiently large n") are rendered with explicit ∃N,∀n≥N quantifiers and a free precision parameter δ; the phase-transition constants r(α),C are existentially quantified. The tree is encoded as words of length ≤k over an alphabet of size b; the block dynamics re-samples a uniformly chosen block from the conditional Gibbs distribution, with the convention that a conditioning of zero mass yields a zero row (total division), which the theorems' hypotheses exclude on the support. The even-degree refinement of the goal is stated as a second conjunct with its own hypothesis.
D. A. Levin, M. J. Luczak, Y. Peres, Glauber dynamics for the mean-field Ising model: cut-off, critical power law, and metastability, Probab. Theory Related Fields 146 (2010). https://doi.org/10.1007/s00440-008-0189-z
F. Martinelli, Lectures on Glauber dynamics for discrete spin models, Lectures on Probability Theory and Statistics (Saint-Flour XXVII), Springer, 1999. https://doi.org/10.1007/978-3-540-48115-7_2
Markov Chains and Mixing Times V: Shuffling CardsTextbook
Motivation
How many shuffles does a deck of cards need? The question created the modern theory of mixing times: Diaconis and Shahshahani's analysis of random transpositions (1981) and the Bayer–Diaconis "seven shuffles suffice" analysis of the riffle shuffle (1992) are its founding results. Chapters 8 and 16 of Levin–Peres–Wilmer, Markov Chains and Mixing Times (AMS, 2009) treat the four standard shuffles: random transpositions (pick two cards, swap them), the riffle shuffle (cut and interleave, the Gilbert–Shannon–Reeds model), random adjacent transpositions, and the L-reversal chain of segment reversals — the last motivated by genome rearrangement, where a chromosome evolves by reversing segments and the mixing time measures evolutionary distance ("from shuffling cards to shuffling genes").
Setting
All four chains are random walks on a symmetric group; decks are encoded as in Mission III, an arrangement being a permutation with position 0 on top. Random transpositions have increment distribution μ(id)=1/n, μ(transposition)=2/n2. The lazy adjacent-transposition walk puts mass 1/2 on the identity and 1/[2(n−1)] on each (ii+1). One inverse riffle shuffle assigns each card an independent uniform bit and moves the cards labeled 0 to the top, preserving relative order; the (forward) riffle shuffle is its time reversal, given by transposing the inverse-shuffle matrix (the stationary distribution being uniform). The L-reversal chain on circular arrangements indexed by Zn picks a position i and a length k<L uniformly and reverses the segment [i,i+k].
Formalization targets
Goal
tmix≤(2+o(1))nlogn
for random transpositions on n cards (Corollary 8.10), formalized as: for every δ>0 there is N with tmix≤(2+δ)nlogn for all n≥N.
Milestones
Proposition 8.11 (random transpositions lower bound tmix(ε)≥2n−1log(6(1−ε)n), via fixed points); Proposition 8.13 (riffle shuffle: tmix≤2log2(4n/3)+1); Proposition 8.14 (riffle shuffle: tmix(ε)≥(1−δ)log2n for large n, by the counting bound of Mission IV); the random adjacent transpositions upper bound tmix(ε)≤2n3log2n for large n (§16.1.2, display (16.4)) and lower bound tmix≥n2(n−1)/16 (§16.1.3, by following a single card); and Proposition 16.2 (the L-reversal chain with L<n/2 satisfies d((1−ε)2nlogn)→1, via conserved adjacencies).
Significance
The results. Random transpositions at 21nlogn (the constant 2 here is not sharp; the sharp constant is part of the celebrated Diaconis–Shahshahani cutoff) and riffle at 23log2n are the emblematic mixing results outside of spin systems; the riffle bound is the mathematical content of "seven shuffles suffice" for n=52. The adjacent-transposition walk at order n3logn is the basic example where geometry (diameter (2n)) forces polynomial mixing. The L-reversal lower bound is the quantitative starting point of the biological application.
Formalizing them. Random walks on symmetric groups and their mixing are entirely absent from Mathlib; so are the combinatorial devices these proofs run on — the Broder stopping time, rising sequences and the Eulerian-number analysis of riffle shuffles, single-card projections, conserved adjacencies. The riffle shuffle formalization via bit strings and the stable-sort permutation Tuple.sort gives a clean combinatorial model reusable for the cutoff analysis of Mission XI.
Difficulty
Corollary 8.10's route is the Broder strong stationary time: mark cards under a card-and-position scheme and prove that, conditioned on the marked set and its positions, the marked cards are uniformly ordered — an exchangeability induction on top of Mission III's stopping-rule framework; then the coupon-collector-style tail with an extra logn factor. Proposition 8.11 requires the fixed-point statistic: the expected number of untouched cards after t transpositions and a second-moment bound, fed into Proposition 7.8. The riffle upper bound runs through inverse shuffles: after t inverse shuffles the deck is a uniform stable sort of t-bit labels, and mixing reduces to the birthday problem for 2t labels; formalizing "distinct labels imply uniform order" is the crux. The L-reversal lower bound needs a second-moment argument for the number of conserved adjacencies with the exact variance bookkeeping of the book. Throughout, the walk-on-group conventions (left vs right increments, forward vs inverse shuffle) are the classic source of silent errors; the formal statements pin them.
Formalization scope
All chains are explicit matrices on Equiv.Perm (Fin n) (or Equiv.Perm (ZMod n) for the circular L-reversal chain); increments act on the left, matching Mission I's group-walk convention. The riffle shuffle is defined as the transpose-reversal of the explicit inverse-riffle matrix — the two have equal distance to uniformity by Lemma 4.13 (Mission II), which a solver may use rather than re-derive. Asymptotic statements (o(1), "for sufficiently large n") are spelled out with explicit ∀δ∃N quantifiers; upper bounds carry a +1 where integer rounding requires it. The L-reversal family takes the length function L(n) as a hypothesis-carrying parameter with 1≤L(n)<n/2, and its lower bound is a genuine limit statement (Tendsto, distance to stationarity tending to 1).
Welcome contributions: exchangeability and projection lemmas for deck chains; Eulerian/rising-sequence counting; the single-card chain projection (reused for Mission XI's cutoff examples).
P. Diaconis, M. Shahshahani, Generating a random permutation with random transpositions, Z. Wahrsch. Verw. Gebiete 57 (1981). https://doi.org/10.1007/BF00535487
Optimal Best Arm Identification with Fixed Confidence IV: Asymptotic Optimality of the Track-and-Stop StrategyResearch Paper
Motivation
In best arm identification with fixed confidence, a learner samples K unknown distributions (arms) sequentially and must, as early as possible, name the arm with the largest mean, while being wrong with probability at most a prescribed risk δ. The problem models adaptive A/B/n testing, clinical and simulation-based selection among alternatives, and the "ranking and selection" problem of operations research and simulation optimization. The quantity of interest is the sample complexityEμ[τδ], the expected number of samples a strategy takes before stopping.
Timeline of the question this mission formalizes:
Chernoff (1959) introduced sequential tests based on generalized likelihood ratios for adaptive design of experiments, with a finite set of hypotheses (doi:10.1214/aoms/1177706205).
Kaufmann, Cappé and Garivier (2016, JMLR) proved a change-of-measure lower bound on the sample complexity of every δ-PAC strategy (arXiv:1407.4443).
Garivier and Kaufmann (COLT 2016) identified the exact constant T∗(μ) in that lower bound and gave the first strategy, Track-and-Stop, whose sample complexity matches it asymptotically as δ→0 (arXiv:1602.04589). This mission covers the upper-bound half of that paper.
Setting
A canonical one-parameter exponential family is a family of laws νθ, θ∈Θ, on R with density exp(θx−b(θ)) with respect to a reference measure ξ; b is twice differentiable and strictly convex, and νθ has mean b˙(θ). Bernoulli, Poisson and Gaussian laws with known variance are examples. The divergence d(μ,μ′) is the Kullback–Leibler divergence between the members with means μ and μ′.
A bandit model μ=(μ1,…,μK) assigns a member of the family to each arm. The class S consists of models with a unique optimal arm a∗(μ). At each round t=1,2,… the learner picks an arm At as a function of past observations, observes a reward drawn from that arm's law, and at a stopping time τδ recommends an arm. Na(t) is the number of draws of arm a in the first t rounds and μ^a(t) its empirical mean.
With Alt(μ)={λ∈S:a∗(λ)=a∗(μ)} and ΣK the probability simplex, the characteristic time is
T∗(μ)−1=w∈ΣKsupλ∈Alt(μ)infa=1∑Kwad(μa,λa),
and the maximizer w∗(μ) are the optimal proportions of arm draws.
Track-and-Stop combines two ingredients:
a sampling rule that tracks the plug-in proportions w∗(μ^(t)) while forcing each arm to be drawn about t times: C-Tracking tracks the cumulated sum of projections of w∗(μ^(s)) onto ΣKϵs={w∈ΣK:wa≥ϵs}, ϵs=(K2+s)−1/2/2; D-Tracking draws an under-sampled arm when some Na(t)<t−K/2, and otherwise the arm maximizing twa∗(μ^(t))−Na(t);
Chernoff's stopping rule, which stops at the first t at which some arm a beats every other arm b in a generalized likelihood ratio test, Za,b(t)>β(t,δ), here with β(t,δ)=log(r(t)/δ).
Formalization targets
Goal: Theorem 14 (p. 13)
For α∈[1,e/2] and r(t)=O(tα), Chernoff's stopping rule with β(t,δ)=log(r(t)/δ) combined with C-Tracking or D-Tracking satisfies
Lemma 7 (p. 7): C-Tracking ensures Na(t)≥t+K2−2K and maxa∣Na(t)−∑s<twa∗(μ^(s))∣≤K(1+t).
Lemma 8 (p. 7): D-Tracking ensures Na(t)≥(t−K/2)+−1, and proportions within 3(K−1)ϵ of w∗(μ) after a time tϵ that does not depend on the trajectory, once the plug-in targets are within ϵ.
Proposition 9 (p. 8): under either rule, Na(t)/t→wa∗(μ) almost surely.
Lemma 18 (p. 27): an explicit x with c1x≥log(c2xα) for α∈[1,e/2].
Proposition 13 (p. 11): with any sampling rule whose proportions converge almost surely to w∗, τδ<∞ almost surely and limsupδ→0τδ/log(1/δ)≤αT∗(μ) almost surely.
Significance
Theorem 1 of the same paper shows Eμ[τδ]≥T∗(μ)kl(δ,1−δ) for every δ-PAC strategy, and kl(δ,1−δ)∼log(1/δ). Theorem 14 with α=1 therefore shows that the lower bound is attained: T∗(μ) is the exact asymptotic sample complexity of best arm identification in exponential family models, and Track-and-Stop is asymptotically optimal.
The result is proved in the paper. What is not available is a machine-checked proof for exponential families. The platform already holds a Lean development of the Gaussian case following Lattimore and Szepesvári, Bandit Algorithms, Ch. 33, stated for one existentially chosen policy with a different threshold. This mission asks for the universal statement: every run of either tracking rule, for every exponential family, with the paper's thresholds. The tracking lemmas (Lemmas 15, 7, 8) are deterministic combinatorics and reusable by any tracking-based algorithm.
Difficulty
The obvious argument plugs the almost-sure behaviour of Proposition 13 into an expectation. That step fails: almost-sure convergence of τδ/log(1/δ) does not control E[τδ], because on the rare events where the empirical means are far from μ the stopping time may be very large. Theorem 14 needs a quantitative concentration of μ^(t) on events whose complements have summable probability, which in turn relies on the forced exploration guaranteed by the t lower bounds on Na(t) (the concentration step of App. D, Lemmas 19–20).
A second obstacle is the regularity of w∗: the tracking lemmas only transfer convergence of μ^(t) to convergence of Na(t)/t through the continuity of μ↦w∗(μ) on S, proved from the characterization of w∗ in §2.2 (Proposition 6). The GLR statistic also needs its closed form (7) near μ, which requires the empirical means to lie in the interior of the mean space.
Formalization scope
Model. The exponential family is a structure (ξ,Θ,b) with Θ a nonempty open interval, each νθ normalized, b twice continuously differentiable and b¨>0 on Θ. Openness and b¨>0 are added to the paper's "convex, twice differentiable"; strict convexity is what makes νμ unique. Bandit models are parameter vectors θ∈ΘK with K≥2; arms are indexed 0,…,K−1. S is the set of parameter vectors with a unique arm of largest mean b˙(θa).
Protocol. Policies, the trajectory law Pμ, pull counts, empirical means and T∗(μ) are the platform's published definitions (BanditPolicy, BanditTrajectory, TrackAndStop). T∗ uses Kullback–Leibler divergences of the arm laws over the class S and takes values in [0,∞]. Trajectory coordinate t is round t+1. An arm never drawn has empirical mean 0.
Target map.w∗(μ^(t)) is undefined in the paper when μ^(t)∈/S (an unsampled arm, ties, a mean outside b˙(Θ)). Every tracking statement quantifies over every target map with values in ΣK that returns optimal proportions on S, over every choice of L∞ projections, and over every tie-breaking, including randomized ones.
Stopping rule. The two maxima in Za,b(t) are suprema over Θ in the extended reals. Za,b(t)>β is written without subtracting infinities. The stopping time is the first t≥1 at which the test succeeds, +∞ if none. "r(t)=O(tα)" is r(t)≤Dtα for t≥1; r>0 is added so that log(r(t)/δ) is defined.
Values in [0,∞]. Expectations of τδ, the ratios and T∗ live in [0,∞]. No statement converts them to reals, so an infinite expected stopping time is never read as 0.
Corrections, disclosed. Proposition 9's printed Pw is Pμ. Lemma 18 adds c2/c1α>1 and x>0, without which its expressions are undefined.
Ruled out. Specializing to Gaussian arms, or asserting that some sampling policy achieves the bound, would restate existing platform results and is not this theorem: the goal is about every C-Tracking or D-Tracking run in every exponential family.
Welcome contributions. Exponential-family facts (b˙ is the mean, the KL formula, concentration of empirical means); the continuity of w∗ (Proposition 6, App. A.3); Lemma 17 (App. B.2), from which Lemma 8 follows; the closed form (7) of the GLR statistic.
Selected references
A. Garivier, E. Kaufmann, Optimal Best Arm Identification with Fixed Confidence, COLT 2016, JMLR W&CP 49. arXiv:1602.04589v2
E. Kaufmann, O. Cappé, A. Garivier, On the Complexity of Best-Arm Identification in Multi-Armed Bandit Models, JMLR 17, 2016. arXiv:1407.4443
Optimal Best Arm Identification with Fixed Confidence I: Non-Asymptotic Lower Bound on the Sample ComplexityResearch Paper
Motivation
Best arm identification with fixed confidence is the pure-exploration counterpart of the multi-armed bandit problem. A learner faces K unknown reward distributions ("arms"), samples them sequentially, and must stop and name the arm with the largest mean, being wrong with probability at most a prescribed δ. The question is how many samples this requires. It arises in adaptive A/B testing, in the selection of the best of several simulated systems (ranking and selection in simulation optimization), and in clinical trials that must declare the best treatment with a guaranteed error rate.
Lower bounds for this problem were first stated in terms of the gaps between means (Mannor and Tsitsiklis, 2004). Kaufmann, Cappé and Garivier (2016) replaced ad hoc changes of measure by a single "transportation" lemma relating expected sample counts, Kullback–Leibler divergences and the error probability. Garivier and Kaufmann (COLT 2016, arXiv:1602.04589v2) combine this lemma over all alternative models at once, in the spirit of Graves and Lai (1997), and obtain a lower bound whose constant T∗(μ) is exactly matched, as δ→0, by their Track-and-Stop strategy. This mission formalizes that lower bound (Theorem 1 of the paper, p. 3).
Setting
A canonical one-parameter exponential family is given by a reference measure ξ on R, an open interval Θ⊂R and a function b, twice continuously differentiable on Θ with b¨>0, such that the laws νθ with density exp(θx−b(θ)) with respect to ξ are probability measures for θ∈Θ. The mean of νθ is b˙(θ). Bernoulli laws and Gaussian laws of known variance are examples.
A bandit model is a vector θ=(θ1,…,θK)∈ΘK; arm a returns i.i.d. rewards with law νθa and mean μa=b˙(θa). Arm a∗(μ) is the unique optimal arm if μa∗>μa for every a=a∗. Let S be any set of bandit models of the family each having a unique optimal arm, and put Alt(μ)={λ∈S:a∗(λ)=a∗(μ)}.
A strategy consists of a sampling ruleπ (the arm At drawn at round t depends, possibly with extra randomization, on the first t−1 observations), a stopping timeτ of the natural filtration Ft=σ(A1,X1,…,At,Xt), and an Fτ-measurable decisiona^τ. It is δ-PAC on S if for every μ∈S, Pμ(τ<∞)=1 and Pμ(a^τ=a∗(μ))≤δ. Na(t) is the number of draws of arm a among the first t rounds.
Write d(μa,λa)=KL(νθa,νλa) for the divergence between two arm laws, kl(x,y)=xlogyx+(1−x)log1−y1−x, and ΣK for the probability simplex on the K arms. The characteristic time is defined by eq. (1):
T∗(μ)−1=w∈ΣKsupλ∈Alt(μ)infa=1∑Kwad(μa,λa).
Formalization targets
Goal: Theorem 1 (p. 3)
For δ∈(0,1/2], every δ-PAC strategy on S and every μ∈S,
Eμ[τ]≥T∗(μ)kl(δ,1−δ).
The statement fixes no constant beyond those of the paper, and it holds for every δ, not only in the limit.
Milestone: eq. (2) (p. 4)
For every λ∈S with a∗(λ)=a∗(μ),
a=1∑Kd(μa,λa)Eμ[Na(τ)]≥kl(δ,1−δ).
This is Lemma 1 of Kaufmann et al. (2016), which the paper quotes without proof; Theorem 1 follows from it for every alternative simultaneously.
Significance
Theorem 1 identifies T∗(μ) as the exact problem-dependent complexity of fixed-confidence best arm identification: since kl(δ,1−δ)∼log(1/δ), it gives liminfδ→0Eμ[τδ]/log(1/δ)≥T∗(μ), and the paper's Track-and-Stop strategy attains this rate (the subject of mission IV of this series). The bound also explains which proportions of draws an optimal strategy must use: the maximizer w∗(μ) of eq. (1) (mission II).
Both results are proved in the literature. Neither is formalized in the paper's generality. The platform holds the textbook form of Lattimore and Szepesvári (Theorem 33.5), which is stated for an arbitrary class with the weaker constant log(1/(4δ)); for δ≤1/2, kl(δ,1−δ)≥log(1/(2.4δ))>log(1/(4δ)), so Theorem 1 is strictly stronger. A formal proof here yields the transportation lemma for exponential families on the platform's infinite-horizon bandit model, which later missions (II–IV, and any lower bound by change of measure) can reuse.
Difficulty
The obvious proof applies the finite-horizon divergence decomposition KL(Pμn,Pλn)=∑aEμ[Na(n)]d(μa,λa) at a deterministic horizon n. That fails here: τ is random and unbounded, the decision is Fτ-measurable, and the relevant divergence is between the laws of the stopped observations. The step from a fixed horizon to a stopping time, together with the data-processing inequality that turns the error guarantees under two models into kl(δ,1−δ), is the central difficulty. A second, smaller difficulty is to identify the paper's divergence d and its means b˙(θ) with the measure-theoretic KL divergence and mean of the arm laws of the exponential family.
Formalization scope
Lean namespace OptimalBAI.LowerBound. The bandit protocol is the platform's (BanditAlgorithm.BanditPolicy, banditTrajMeasure, IsBanditStoppingTime, IsSoundBAI, baiComplexity); kl is the platform's bernoulliRelativeEntropy and Na(t) is trajPullCount. Conventions:
arms are Fin K, 0-based (the paper's arm a is index a−1); trajectory coordinate t is round t+1;
Θ is a nonempty open interval and b¨>0 on Θ (added: the paper says b is convex and twice differentiable; strict convexity is what makes "the unique distribution with mean μ" meaningful); the paper's d is written as the KL divergence of the arm laws (its first equality on p. 3), and the unique optimal arm is defined through the parameter means b˙(θa);
S is an arbitrary set of models with a unique optimal arm, not the specific set the paper fixes from p. 4 on;
δ-PAC keeps both halves of the paper's definition (almost-sure stopping and error at most δ);
T∗(μ), divergences and expectations of τ take values in [0,∞], never truncated to reals; T∗=0 when Alt(μ)=∅ and T∗=∞ when the supremum in eq. (1) is 0;
δ≤1/2 is added. The paper states δ∈(0,1), but the theorem and eq. (2) are false for δ∈(1/2,1): with two unit-variance Gaussian arms, drawing arm 1 once and naming arm 1 exactly when the fractional part of the reward is below 1/2 is 0.9-PAC, while T∗(μ)→∞ as the two means merge. At δ=1/2 the bound is 0.
A statement with log(1/(4δ)) in place of kl(δ,1−δ), or restricted to Gaussian arms, is the platform's existing textbook theorem and does not count as this mission's goal; nor does any version that drops the almost-sure stopping clause or truncates E[τ] or T∗ to real numbers.
Needed infrastructure: the transportation lemma at a stopping time (data processing for KL through an Fτ-measurable event, Wald-type identity for the stopped log-likelihood ratio), the identities "mean of νθ=b˙(θ)" and "KL of two family members =b(θ′)−b(θ)−b˙(θ)(θ′−θ)", and E[τ]=∑aE[Na(τ)]. All are reusable beyond this mission. Contributions of any of these lemmas, of eq. (2) alone, or of the Gaussian and Bernoulli special cases as stepping stones are welcome.
Selected references
A. Garivier, E. Kaufmann, Optimal Best Arm Identification with Fixed Confidence, COLT 2016 (JMLR W&CP 49), arXiv:1602.04589v2. https://arxiv.org/abs/1602.04589
E. Kaufmann, O. Cappé, A. Garivier, On the Complexity of Best-Arm Identification in Multi-Armed Bandit Models, Journal of Machine Learning Research 17(1), 2016. https://arxiv.org/abs/1407.4443
T. L. Graves, T. L. Lai, Asymptotically Efficient Adaptive Choice of Control Laws in Controlled Markov Chains, SIAM Journal on Control and Optimization 35(3), 1997. https://doi.org/10.1137/S0363012994275440
S. Mannor, J. N. Tsitsiklis, The Sample Complexity of Exploration in the Multi-Armed Bandit Problem, Journal of Machine Learning Research 5, 2004. https://www.jmlr.org/papers/v5/mannor04b.html
Worst-Case Value-At-Risk and Robust Portfolio Optimization: A Conic Programming Approach 1: Exact Worst-Case VaR under Known Mean and Covariance and Its SDP RepresentationsResearch Paper
Motivation
Value-at-Risk (VaR) is the standard regulatory measure of downside risk of a portfolio: the loss level that is exceeded only with a prescribed small probability ε. Computing it requires the full distribution of asset returns, which is rarely known. In practice one estimates a mean vector and a covariance matrix and then assumes a Gaussian distribution, which understates the probability of large losses when returns are heavy-tailed or skewed.
El Ghaoui, Oks and Oustry (Oper. Res. 51(4), 2003) replace the distributional assumption by a worst case: the VaR is computed against every distribution consistent with the known moments. For known mean and covariance they obtain an exact closed form and several semidefinite (SDP) representations of this worst-case VaR. The SDP forms are what make the approach extend to moment uncertainty (moments only known to lie in a set, §2.2 of the paper) and to robust portfolio optimization. The equivalence between the probabilistic statement and the closed form is also a multivariate one-sided Chebyshev bound, related to Bertsimas and Popescu (SIAM J. Optim. 15(3), 2005; working paper 2000).
Setting
There are n assets. Their returns over one period form a random vector x∈Rn, and a portfolio w∈Rn earns r(w,x)=w⊤x. The paper restricts w to an admissible set that does not contain 0; only w=0 is used.
The distribution of x is unknown except for its meanx^∈Rn and covariance matrixΓ, with Γ≻0 (positive definite). Let P be the set of all probability distributions on Rn with these two moments. For a loss level γ, the loss set is S={x∣γ≤−x⊤w}. The worst-case VaR at level ε is (Eq. (4))
VP(w)=min{γ:P∈PsupP(S)≤ε}.
Further notation: κ(ε)=(1−ε)/ε (Eq. (8)); for symmetric matrices, A⪰B means A−B is positive semidefinite and ⟨A,B⟩=Tr(AB). The second-moment matrix is (Eq. (6))
Σ=[Sx^⊤x^1],S=Γ+x^x^⊤.
Formalization targets
Goal: Theorem 1 (pp. 545–546)
For Γ≻0, w=0, ε∈(0,1) and γ∈R, the following five propositions are equivalent:
supP∈PP{γ≤−w⊤x}≤ε;
κ(ε)∥Γ1/2w∥2−x^⊤w≤γ;
there are a symmetric M and τ∈R with ⟨M,Σ⟩≤τε, M⪰0, τ≥0, and M+[0w⊤w−τ+2γ]⪰0;
every x with [Γ(x−x^)⊤x−x^κ(ε)2]⪰0 satisfies −x⊤w≤γ;
there are a symmetric Λ and v∈R with ⟨Λ,Γ⟩+κ(ε)2v−x^⊤w≤γ and [Λw⊤/2w/2v]⪰0.
In particular
VP(w)=κ(ε)∥Γ1/2w∥2−x^⊤w.
Milestones (the steps of the paper's proof)
Condition C.1 (l(x)=[x⊤1]M[x⊤1]⊤≥0 for all x) is equivalent to M⪰0 (p. 546).
Conditions C.1 and C.2 are equivalent to the existence of τ≥0 with M⪰0 and M+[0τw⊤τw−1+2τγ]⪰0 (p. 546).
The worst-case probability supP∈PP(S) equals the value of the SDP inf⟨M,Σ⟩ under the constraints above (Eq. (14), pp. 546–547).
The Schur-complement reduction (19)–(20) of the constraints of the dual problem (18) (p. 547).
The closed form of ϕ(y) and its maximum at y=ε (p. 547).
Condition (10) describes the ellipsoid {x∣(x−x^)⊤Γ−1(x−x^)≤κ(ε)2}, and the maximal loss −x⊤w over it is κ(ε)w⊤Γw−x^⊤w (p. 546).
Significance
The result. Proposition 2 turns the worst-case VaR into a second-order cone function of w, so minimizing it over a polytope of portfolios is a second-order cone program (Eq. (12)). The SDP forms 3 and 5 are the basis of the paper's §2.2–§3: they extend, with the moments only known to lie in a convex set, to a single SDP whose value is the worst-case VaR over that set. Proposition 4 gives a deterministic reading: the worst-case VaR is the largest loss when the return vector is only known to lie in an ellipsoid, which connects distributional robustness to robust optimization with ellipsoidal uncertainty.
Formalizing it. The result is proved in the paper, with two imported steps: strong duality for the moment problem (Smith 1995; Bonnans and Shapiro 2000) and a Slater-type strong duality for the one-constraint quadratic condition. No machine-checked version is known. A formal proof would supply these steps with explicit hypotheses and would produce a Lean statement of the multivariate one-sided Chebyshev (Cantelli) bound with tightness over the full moment class.
Difficulty
The matrix equivalences (2 ⇔ 4 ⇔ 5 and 2 ⇔ 3) are Schur complements and finite-dimensional SDP duality. The difficulty is Proposition 1. The upper bound (Cantelli's inequality for w⊤x) handles one direction, but the converse requires tightness: for every γ below the closed form, a distribution on Rn with exactly the prescribed mean and full covariance matrix Γ that puts probability more than ε on the loss set. A scalar extremal distribution for w⊤x does not by itself have the right covariance in the other directions, and a Gaussian does not reach the bound. The paper's route through the moment problem instead needs strong duality between a supremum over measures and an infimum over matrices, which is where the positive definiteness of Σ enters.
Formalization scope
Vectors live in EuclideanSpace ℝ (Fin n); x⊤w is the inner product, and matrices are Matrix (Fin n) (Fin n) ℝ. Matrices of size n+1 are indexed by Fin n ⊕ Fin 1 and built with Matrix.fromBlocks (the helper bordered A v c is [[A,v],[v⊤,c]]). A⪰0 is PosSemidef, Γ≻0 is PosDef, ⟨A,B⟩ is (A * B).trace, and ∥Γ1/2w∥2 is written w⊤Γw.
The class P (HasMeanCov) contains every Borel probability measure on Rn whose coordinates are square-integrable, with mean x^ and centred covariance Γ. It is not restricted to densities or to Gaussians: the Gaussian class gives a different constant, −Φ−1(ε).
Sup, inf and max: "supP∈PP(S)≤ε" is stated as "P(S)≤ε for every P∈P". The worst-case probability SDP is stated as IsLUB/IsGLB of one real number (no attainment is claimed). The maxima over v, over y∈[ε,1] and over the ellipsoid are IsGreatest.
Corrections to the printed statement. The paper prints ε∈(0,1]; at ε=1 Proposition 1 holds for every γ while Propositions 2–5 require γ≥−x^⊤w, so the goal assumes 0<ε<1. The goal also assumes w=0, the paper's standing assumption; with w=0, γ=0 Proposition 1 fails and Proposition 2 holds. Milestones that remain true at ε=1 keep ε≤1.
A goal that omits Proposition 1 would only be matrix algebra and is not this theorem. The five-way equivalence must be proved with the probabilistic statement included.
Useful infrastructure, reusable beyond this mission: the homogenization lemma for quadratic functions, the S-lemma with one affine constraint, the Schur-complement criteria for bordered PSD matrices, and duality for the moment problem. Proofs of any milestone, and of lemmas building a distribution with prescribed mean and covariance, are welcome.
Selected references
L. El Ghaoui, M. Oks, F. Oustry, Worst-Case Value-at-Risk and Robust Portfolio Optimization: A Conic Programming Approach, Operations Research 51(4):543–556, 2003. https://doi.org/10.1287/opre.51.4.543.16101
D. Bertsimas, I. Popescu, Optimal Inequalities in Probability Theory: A Convex Optimization Approach, SIAM J. Optim. 15(3):780–804, 2005. https://doi.org/10.1137/S1052623401399903
J. E. Smith, Generalized Chebychev Inequalities: Theory and Applications in Decision Analysis, Operations Research 43(5):807–825, 1995. https://doi.org/10.1287/opre.43.5.807
L. Vandenberghe, S. Boyd, K. Comanor, Generalized Chebyshev Bounds via Semidefinite Programming, SIAM Review 49(1):52–64, 2007. https://doi.org/10.1137/S0036144504440543
On Properties of Stochastic Inventory Systems I: Using the EOQ Order Quantity in the Stochastic (Q, r) Model Raises Costs by at Most 1/8Research Paper
Motivation
The economic order quantity (EOQ) is the most widely used formula in inventory management. It assumes that demand is a deterministic constant stream. Real demand is random, and the model that accounts for this, the continuous-review (Q,r) policy with stochastic demand, has no closed-form optimum: for decades its optimal parameters were computed numerically, one instance at a time, which gave little insight into how the stochastic system behaves. Practitioners nevertheless kept using the EOQ quantity in stochastic systems and observed that the cost penalty was small (Wagner, O'Hagan and Lundh 1965; Naddor 1975; Archibald and Silver 1978), without an analytical explanation.
Zheng (Management Science 38(1), 1992) supplied that explanation. By minimising the average cost first over the reorder point and then over the order quantity, he obtained two simple optimality equations and compared the stochastic model with the EOQ model under the same cost structure. One of the results is the goal of this mission: for every leadtime-demand distribution, using the EOQ order quantity in the stochastic system raises the average cost by at most one eighth. The paper extends Federgruen and Zheng (1988), who treated the discrete-demand version of the cost function.
Setting
A single item faces demand at rate λ>0. Orders are delivered after a fixed leadtime L>0, and stockouts are backordered. Each order costs a fixed K>0. Inventory is held at cost rate h>0 per unit and backorders are penalised at cost rate p>0 per unit. Let D≥0 be the demand during a leadtime, with mean E(D)=λL. The newsvendor cost
G(y)=E[h(y−D)++p(D−y)+]
is the rate at which expected inventory costs accrue at time t+L when the inventory position at time t is y. It is convex, and it is assumed, as in the paper, to attain its minimum at a unique point y0.
A (Q,r) policy orders Q units whenever the inventory position falls to the reorder pointr. Its long-run average cost is
c(Q,r)=QλK+∫rr+QG(y)dy.(1)
For a fixed Q>0 let r(Q) be an optimal reorder point, and set
C(Q) is the average cost when the reorder point is chosen optimally for Q; an order quantity Q∗>0 minimising C over Q>0 is the optimal order quantity, and C∗=C(Q∗) is the optimal cost.
The EOQ model is the special case in which the leadtime demand is the constant λL. Its cost rate is Gd(y)=h(y−λL)++p(λL−y)+, and its optimal order quantity is
Qd∗=hp2λK(h+p).
The subscript d marks every object of the EOQ model (rd, Hd, Ad).
Formalization targets
Goal: Theorem 5
R=C∗C(Qd∗)−C∗≤81−21(21−Q∗Qd∗)2≤81.
C(Qd∗) is the stochastic cost at the EOQ quantity with the reorder point re-optimised for it. The bound holds for every leadtime-demand distribution and every value of the parameters.
Milestones
In the order the goal's proof uses them:
Lemma 1 (joint convexity of c), Lemma 2 (r=r(Q)⟺G(r)=G(r+Q)), Lemma 3 (properties of r(Q)), Corollary 1 (G(r(Q))≤max(G(r),G(r+Q)));
Eqs. (18), (20) (the EOQ model: Hd(Q)=hpQ/(h+p) and the formula for Qd∗), Eq. (22) (Gd≤G), Lemma 7 (H0≤Hd≤H, A≤Ad), and the first inequality of Theorem 2, Qd∗≤Q∗.
Significance
The theorem is a distribution-free worst-case guarantee for the most common heuristic in inventory practice. It says that the EOQ formula, which needs only the mean demand rate and three cost parameters, loses at most 12.5% against the true optimum, and that the loss is smaller when Qd∗/Q∗ is close to 21 or to 1. Combined with the paper's Theorem 2 (the gap Q∗−Qd∗ is bounded as K grows), it implies that the relative loss vanishes as the fixed ordering cost grows. The milestones along the way (the optimality conditions of Theorem 1, the monotonicity of the optimal reorder point, the comparison of H with its EOQ counterpart) are the standard structural facts about continuous (Q,r) systems and are reused throughout the inventory literature.
The result is proved in the paper. No machine-checked version of it, or of the (Q,r) optimality conditions for the continuous cost (1), is known to exist. The platform has related but different formalizations: the discrete cost function with integer Q (InventoryControl_rqDiscrete), the (R,Q) cost under normal demand (InventoryControl_rq), and the EOQ without backorders (InventoryControl_eoq). A complete development here provides the continuous (Q,r) machinery for an arbitrary leadtime-demand distribution.
Difficulty
The paper's proofs differentiate r(Q) and H(Q) twice (Eqs. (4), (5)), which presupposes a leadtime demand with a smooth density. The formalization does not assume one, so that discrete demand, such as the Poisson demand of the paper's own numerical study, is covered. Every step that the paper takes through derivatives, in particular the convexity of H and the slope bound H′≤hp/(h+p), has to be established by other means: through one-sided derivatives or chord arguments for the convex function G, whose kinks are where the derivative-based argument breaks. The definition of r(Q) as a minimiser also means its existence and uniqueness must be proved before any property of H, C or A can be used.
Formalization scope
The model is a probability measure μ on R (the law of D), concentrated on [0,∞), integrable, with mean λL; G is the integral of hmax(y−x,0)+pmax(x−y,0) against μ. The standing assumptions are bundled in IsQRModel: λ,L,h,p>0, the conditions on μ, and the unique minimiser of G (paper, p. 90). K>0 is a separate hypothesis. No density is assumed.
c, r(Q), y0, H, H0, C, A and optimality of an order quantity are defined for an arbitrary cost rate G and applied both to the newsvendor cost and to Gd; the EOQ objects rd, Hd, Ad are these definitions at Gd, and Eqs. (18), (20) are theorems.
r(Q) is a chosen minimiser of c(Q,⋅) (never defined by G(r)=G(r+Q), which is Lemma 2). H(0):=G(y0); right-continuity of H at 0 is part of the Lemma 4 milestone. Order quantities range over (0,∞) for c and C and over [0,∞) for H, H0, A.
Q∗ in the goal is any Q>0 with C(Q)≤C(Q′) for all Q′>0; Lemma 6 asserts that exactly one exists, so the goal is not vacuous. Qd∗ is the explicit square-root formula.
Readings of informal words: "increasing" in Lemmas 4 and 6 means strictly increasing on [0,∞); "Q∗ increasing, r∗ decreasing in K" means strictly; "asymptotic slope hp/(h+p)" means that every chord of H on [0,∞) has slope at most hp/(h+p) and H(Q)/Q→hp/(h+p); Lemma 3 part 3 is stated as strict monotonicity of r(Q) and r(Q)+Q, and its derivative clause −1<r′(Q)<0 is omitted because r need not be differentiable without a density; "the optimal order quantity" means existence and uniqueness; Lemma 7 is stated for Q≥0.
A trivializing formalization is ruled out: C(Qd∗) is the stochastic cost with the reorder point re-optimised in the stochastic model (not the EOQ reorder point rd∗), and no positivity of C∗ is assumed (it follows from the model).
Out of scope: the discrete cost (2), the §4 numerical study, and the unnumbered remarks after Theorem 5.
Needed infrastructure: interval integrals of convex functions, partial minimisation of jointly convex functions, Jensen's inequality for μ, and one-sided derivatives of convex functions. The generic (Q,r) machinery (optimality conditions for arbitrary convex G) is reusable for other continuous-review models. Proofs of any milestone, and alternative proofs that avoid the paper's differentiability assumptions, are welcome.
Awi Federgruen and Yu-Sheng Zheng, An Efficient Algorithm for Computing an Optimal (r, Q) Policy in Continuous Review Stochastic Inventory Systems, Operations Research 40(4):808–813, 1992. https://doi.org/10.1287/opre.40.4.808
Paul H. Zipkin, Inventory Service-Level Measures: Convexity and Approximation, Management Science 32(8):975–981, 1986. https://doi.org/10.1287/mnsc.32.8.975
George Hadley and Thomson M. Whitin, Analysis of Inventory Systems, Prentice-Hall, 1963.
Daniel P. Heyman and Matthew J. Sobel, Stochastic Models in Operations Research, Vol. II, McGraw-Hill, 1984.
Multi-armed Bandit Allocation Indices II: Jobs, Parallel Machines, Search and Bandit-Dependent DiscountingTextbook
Motivation
Chapter 3 of Gittins, Glazebrook and Weber, Multi-armed Bandit Allocation Indices (2nd ed., doi:10.1002/9780470980033), asks which of the assumptions behind the index theorem can be dropped and which cannot, using the simplest bandit processes there are: jobs, which pay a single reward when they complete. Along the way it settles three questions that matter on their own. When identical machines run in parallel, which schedule of deterministic jobs minimizes the total completion time (Baker's theorem), and what does the equal-ratio case look like (Theorem 3.3)? When an object is hidden in one of several boxes and each search costs money and may fail, in what order should the boxes be searched (Blackwell's search-index theorem, Theorem 3.6)? And when two bandit processes discount at different rates, is there still an index policy (Nash's Theorem 3.4)? The search theorem is the chapter's example of what the index machinery yields once undiscounted criteria are admitted through the limit γ↓0; the scheduling results are the source of the counterexamples that show a second machine breaks the index structure.
Setting
Jobs on parallel machines. There are n jobs with service times si>0 and weights ci, and m identical machines. A schedule assigns each job a machine and a position in that machine's processing order; each machine processes its jobs consecutively. The completion timeCi of a job is the total service time of the jobs on its machine up to and including it; the flow time is ∑iCi and the weighted flow time∑iciCi. The load of a machine is the total service time assigned to it, and δj is its excess over the average S/m. The SPT list schedule sorts the jobs by increasing service time and deals them out cyclically to the machines. The level of a job is its position counted from the end of its machine's schedule.
The search problem (Problem 3). A stationary object is hidden in one of n boxes, in box i with probability pi. A search of box i costs ci and finds the object with probability qi if it is there. A search policy is a sequence of boxes; after Ni unsuccessful searches of box i the posterior probability that the object is there is proportional to pi(1−qi)Ni, and the search index of the box is pi′qi/ci, the current probability of finding the object per unit cost. The expected cost of a policy is ∑kcσkPr[not found by the first k searches].
Two discount factors. Bandit process A (state space SA, kernel PA, reward rA) discounts at rate a and B at rate b; a reward obtained at time t is worth at or bt times its face value according to which process produced it. The cross indices are νAB(x)=supτ>0E∑t<τatrA(x(t))/E[1−bτ] and νBA(y) with the roles exchanged: each is computed from one process's stopping times but with the other's discount factor in the denominator. The book prints the denominator as E∫0τbtdt and compares νAB(x) with νBA(y) at every time; both are corrected here (see the Theorem 3.4 item), since the printed rule is not optimal. The family is the two-armed Markov bandit of the Bandit Algorithms model on the disjoint union SA⊕SB.
Formalization targets
Goal: Theorem 3.6
For prior probabilities pi≥0 summing to one, detection probabilities 0<qi≤1 and costs ci>0, a search policy is optimal if and only if at every step it searches a box of maximal current index pi′qi/ci:
Theorem 3.3, as the identity ∑iciCi=2κ(∑isi2+S2/m+∑jδj2) when ci=κsi; Theorem 3.4 in discrete time and corrected, that a policy selecting, at time t, A when atνAB(x)>btνBA(y) and B when atνAB(x)<btνBA(y) attains the supremum of the bandit-dependently discounted payoff; Theorem 3.7, that SPT minimizes the flow time on m machines and that the optimal schedules are exactly those placing the r-th block of m longest jobs at level r from the end, for some order of the equal jobs.
Significance
Theorem 3.6 is the classical solution of the discrete search problem (Blackwell, reported by Matula 1964; Kadane 1969): the greedy rule in probability-per-cost is optimal, and every optimal policy is of that form. The book derives it from the index theorem through an auxiliary family of bandit processes (Problem 3A) and the undiscounted limit (Corollary 3.5), which is why it sits in this chapter; as a statement it is elementary and self-contained, and it is the template for the tax problems and Klimov's model of Chapter 4. Theorem 3.7 and Theorem 3.3 are the positive results about parallel machines that survive the loss of the index structure; Theorem 3.4 shows the index theorem's shape persisting under bandit-dependent discounting, with two twists: each index depends on the other process's discount factor, which is exactly why it does not extend to three processes, and the comparison at time t weighs the indices by at and bt, so the rule is not stationary in the states. The printed statement misses the second twist and misnormalizes the first; two one-state bandits paying 0.18 (a=0.9) and 1 (b=0.5) are best played B,B,B and then A forever, which no stationary rule does.
None of these is machine-checked. Formalizing them gives the platform an optimality theorem for an infinite-horizon search process with an explicit index characterization in both directions, the standard parallel-machine flow-time results with a precise uniqueness clause, and a first statement on the Bandit Algorithms two-armed model with unequal discounting.
Difficulty
For Theorem 3.6 the obvious route, comparing two adjacent searches, gives only that interchanging a pair in the wrong index order lowers the cost; turning that into optimality over all infinite sequences needs that an optimal policy exists (costs are bounded below by zero and the index policy has finite cost), that a policy neglecting a box of positive prior has infinite cost, and that any first deviation from the index rule can be improved by moving a later search forward, which requires tracking how the not-found probability changes along the whole tail. The converse direction is the same interchange run backwards, and the tie case must be handled so that the equivalence is exact. Theorem 3.7's first part follows from writing the flow time as ∑iℓisi with ℓi the level and applying a rearrangement inequality over the multiset of levels, but the multiset of levels itself depends on how many jobs each machine gets, so balancing the machine counts is part of the argument; the uniqueness clause needs both that the multiset is forced and that the pairing of levels with service times is forced by strict monotonicity. Theorem 3.4 is the hardest: the book's proof changes the time scale of each process so that the two share a discount factor, which produces a semi-Markov family, and applies the index theorem there; in discrete time on the Markov model one needs either a discrete analogue of that argument or a direct prevailing-charge proof with two charge scales.
Formalization scope
Schedules are assignments of machines and positions with distinct positions on a machine, without idling; the flow-time quantities are finite sums over Fin n. The SPT schedule is defined by the ascending rank of a job (ties broken by index) and carries its own injectivity proof. The search cost is a series in [0,∞] of nonnegative terms, so no summability hypothesis is needed and "infinite cost" is literal; the index is stated unnormalized, pi(1−qi)Niqi/ci, which orders the boxes exactly as the posterior index does. The two-discount family uses the platform's MarkovBanditPolicy 2 (S_A ⊕ S_B) and markovBanditMeasure with the kernel that moves an A-state by PA and a B-state by PB; the payoff is the round-by-round series ∑t(atE[r1{At=A}]+btE[r1{At=B}]), absolutely summable for bounded rewards, and the policy condition is imposed at histories whose current states have the right types (all reachable histories do). Hypotheses: m≥1, service times positive; pi≥0, ∑pi=1, 0<qi≤1, ci>0; countable state spaces, bounded rewards, a,b∈(0,1).
Trivializing readings are excluded: the search "iff" is over all sequences, not a finite horizon; the uniqueness clause is stated in full, with ties resolved by any ranking of the equal jobs; the cross indices are suprema over positive stopping times (denominators at least one), and the two-discount rule weighs the indices by at, bt. Welcome contributions: the rearrangement and level-count lemmas for schedules, the interchange lemma for the search cost, and a discrete prevailing-charge argument for Theorem 3.4.
Selected references
J. Gittins, K. Glazebrook, R. Weber, Multi-armed Bandit Allocation Indices, 2nd ed., Wiley, 2011, Chapter 3. doi:10.1002/9780470980033
D. W. Matula, A periodic optimal search, American Mathematical Monthly 71(1), 1964. doi:10.2307/2311300
J. B. Kadane, Quiz show problems, Journal of Mathematical Analysis and Applications 27(3), 1969. doi:10.1016/0022-247X(69)90140-2
K. R. Baker, Introduction to Sequencing and Scheduling, Wiley, 1974.
Chapter 2's tail bounds mostly rest on moment-generating-function control, obtained either
directly (sub-Gaussianity) or through explicit combinatorial arguments (Hoeffding, bounded
differences). The entropic method offers a different, more structural route: bound a
specific information-theoretic quantity — the φ-entropy of eλX — and convert
that bound mechanically into a tail bound via a short ODE argument (the Herbst argument). This
method's real payoff appears once it is combined with the tensorization property of entropy
across independent coordinates, which is what lets it handle Lipschitz functions of many
independent variables — including cases, such as separately convex functions, that elude the
purely martingale-based techniques of Chapter 2. This mission formalizes the entropic method's
two foundational entropy-to-tail conversions and its central Lipschitz-concentration
application, following Wainwright, High-Dimensional Statistics: A Non-Asymptotic Viewpoint
(Cambridge University Press, 2019), Chapter 3.
Setting
For φ(u):=ulogu (u>0), φ(0):=0, the φ-entropy of a nonnegative
random variable Z is H(Z):=E[ZlogZ]−E[Z]logE[Z] (Eqs. (3.1)-(3.2)).
Writing φX(λ):=E[eλX] for the moment generating function of X,
the entropy of eλX has the explicit form H(eλX)=λφX′(λ)−φX(λ)logφX(λ) (Eq. (3.3)).
A function f:Rn→R is separately convex if, for each coordinate k, the
univariate function obtained by fixing every coordinate but the k-th is convex — strictly
weaker than joint convexity of f itself. f is L-Lipschitz with respect to the Euclidean
norm if ∣f(x)−f(x′)∣≤L∥x−x′∥2 for all x,x′.
Let {Xi}i=1n be independent, each supported on [a,b], and f separately convex and
L-Lipschitz. Then for all δ>0,
P[f(X)≥E[f(X)]+δ]≤exp(−4L2(b−a)2δ2).
Milestone — Proposition 3.2 (the Herbst argument)
If H(eλX)≤21σ2λ2φX(λ) for all λ∈I
(I=[0,∞) or R), then logE[eλ(X−E[X])]≤21λ2σ2 for all λ∈I — the basic entropy-to-sub-Gaussian-tail
conversion.
Milestone — Proposition 3.3 (the Bernstein entropy bound)
The sub-exponential analogue: if H(eλX)≤λ2{bφX′(λ)+φX(λ)(σ2−bE[X])} for λ∈[0,1/b), then logE[eλ(X−E[X])]≤σ2λ2(1−bλ)−1 on the same range.
Significance
Propositions 3.2 and 3.3 are the two basic entropy-to-tail conversions the entire chapter's
entropic method rests on — every subsequent Lipschitz-concentration result in the chapter
(including Theorem 3.4 and the more advanced Theorem 3.24) is obtained by first establishing an
entropy bound of one of these two forms and then invoking the corresponding proposition.
Theorem 3.4 is itself the direct analogue, for independent bounded variables, of Chapter 2's
Gaussian Lipschitz concentration (Theorem 2.26) — but crucially requires the extra hypothesis of
separate convexity, which the Gaussian case does not need and which cannot be dropped in
general.
Formalizing it. No faithful prior art exists on the platform. The one candidate flagged in
BRIEF.md, Talagrand.lipschitz_concentration, was read in full: it is a weighted-Hamming-
distance concentration bound for functions on a finite-alphabet product spaceFin n → α,
proved via Talagrand's convex-distance method — a different underlying space (finite alphabet
vs. real-valued bounded coordinates) and a different Lipschitz norm (weighted Hamming vs.
Euclidean) from Theorem 3.4, and not reused here. A search for "log-Sobolev" and "Herbst" turned
up bousquet_herbst_cgf_le_phi_via_herbst/bousquet_herbst_cgf_le_phi_double_integration: these
are abstract calculus lemmas about a generic function G satisfying an ODE-type growth
condition (G′′≤vex), concluding G(L)≤v(eL−1−L) — a genuinely different statement
shape from Proposition 3.2/3.3's entropy-to-CGF conversions (which conclude a quadratic, not
exponential, bound on logE[eλ(X−EX)]), and not a faithful match. All
three theorems here are drafted as open goals (:= by sorry).
Difficulty
The naive approach to Theorem 3.4 — try to adapt the bounded-differences (martingale) method of
Chapter 2 directly — fails, because the bounded-differences method needs f to have small
coordinatewise oscillation in an absolute sense, while separate convexity alone gives no such
uniform bound (a separately convex function can vary arbitrarily fast within the interior of its
domain, only its slope is controlled by the Lipschitz condition). The entropic method
sidesteps this by working with the φ-entropy of eλf(X) directly: entropy has
a tensorization property across independent coordinates (not itself part of this mission, but
what the entropic method's proof of Theorem 3.4 uses) that reduces a multivariate entropy bound
to a sum of "one coordinate at a time" contributions, each of which convexity and the Lipschitz
condition jointly control — a route with no analogue in the bounded-differences approach.
Formalization scope
Separate convexity and Euclidean-Lipschitzness are both restated locally in this chapter's own
sub-namespace (HighDimStat.Concentration), per this book series' rule against importing
another chapter's draft definitions, even though Chapter 2 already defines an
IsLLipschitz for the same Euclidean condition. φ_X'(\lambda)$ (Proposition 3.3) is realized via Mathlib's deriv, a legitimate way to state a hypothesis on a derivative without separately proving differentiability, appropriate at the draft-statement stage. Explicit Integrable`
hypotheses guard the Bochner integral's junk value on non-integrable functions throughout (trap
2), not literal in the book's own propositions but implied by what "the entropy H(eλX) exists" (an explicit qualifier the book itself makes when introducing Eq. (3.2)) means.
Goal substitution, disclosed.BRIEF.md recommends Theorem 3.24 (the two-sided, jointly
convex analogue) as the primary goal, but explicitly names Theorem 3.4 as a fallback "if 3.24's
dependence on the unnumbered transportation-cost inequality (Eq. 3.73, attributed to Samson)
proves too heavy to state faithfully in the time available." Theorem 3.24's proof route depends
on Theorem 3.19 (a general "transportation cost implies concentration" result for an abstract
metric measure space, itself needing a from-scratch formalization of the transportation-cost
inequality (3.58) and the concentration function αP,(X,ρ)) plus the
unproven-in-chapter Eq. (3.73). Building this full stack faithfully was judged to exceed this
chunk's time budget; Theorem 3.4 is drafted instead, using this mission's own budget on
Propositions 3.2 and 3.3 (the two most load-bearing entropy-to-tail conversions of the chapter)
rather than the heavier transportation-cost machinery. Theorem 3.19, Theorem 3.24, and Eq.
(3.73) are all out of scope for this mission and named here as natural follow-on work.
Selected references
M. J. Wainwright, High-Dimensional Statistics: A Non-Asymptotic Viewpoint, Cambridge
University Press, 2019. DOI: 10.1017/9781108627771.
Chapter 3.
M. Ledoux, The Concentration of Measure Phenomenon, American Mathematical Society, 2001.
I. Herbst, unpublished (the argument bearing his name is attributed in Ledoux (2001) and
standard references on log-Sobolev inequalities).
Markov Chains and Mixing Times XII: Continuous Time and Countable State SpacesTextbook
Motivation
The whole series so far lived in discrete time on finite state spaces. Chapters 20–21 of Levin–Peres–Wilmer, Markov Chains and Mixing Times (AMS, 2009) lift both restrictions. Running the jumps of a chain at the arrivals of a rate-one Poisson clock produces the continuous-time chain, whose transition semigroup — the heat kernel — converges to stationarity for every irreducible chain, with no aperiodicity hypothesis: continuous time washes out periodicity. On countable state spaces, existence of a stationary distribution is no longer automatic, and the trichotomy of transience, null recurrence, and positive recurrence replaces it; the convergence theorem survives exactly on the positive-recurrent class. The chapter's crown jewel — and this mission's goal — is Pólya's theorem: simple random walk on the lattice Zd is recurrent in dimensions one and two and transient in dimension three and higher. "A drunk man will find his way home, but a drunk bird may get lost forever."
Setting
Continuous time (Ch. 20). For a finite chain P, the heat kernel at time t≥0 is defined by Poissonization,
Ht(x,y)=k=0∑∞e−tk!tkPk(x,y),
the law at time t of a walk taking P-steps at Poisson arrival times (=et(P−I) as a matrix exponential). With ∥μ−ν∥TV=maxA∣μ(A)−ν(A)∣, the continuous distance and mixing time are dcont(t)=maxx∥Ht(x,⋅)−π∥TV and tmixcont(ε)=inf{t≥0:dcont(t)≤ε}. The lazy version of a discrete chain is 21(I+P); from Mission VII, the spectral gapγ is 1−λ2 with λ2 the largest eigenvalue =1. The product chain on a product of n coordinate spaces picks a uniform coordinate and updates it by that coordinate's chain.
Countable state spaces (Ch. 21). A chain on a countable state space V is a function P with nonnegative entries and rows summing to one (as convergent series); t-step probabilities Pt(x,y) are defined recursively, and trajectory probabilities are countable sums of path weights. The first return time to x is τx+=min{t≥1:Xt=x}; a state is recurrent when Px{τx+<∞}=1 (tails tend to zero), positive recurrent when moreover Ex(τx+)<∞ (tails summable), and null recurrent when recurrent but not positive recurrent. A stationary distribution is a nonnegative π summing to one with πP=π (as convergent series). Simple random walk on Zd steps from x to one of its 2d nearest neighbours uniformly at random.
Formalization targets
Goal
Pólya's theorem (§21.2, Examples 21.8–21.9), the capstone of Chapters 20–21:
for d≤2, simple random walk on Zd is recurrent — it returns to its starting point with probability one;
for d≥3, it is transient — with positive probability it never returns.
Milestones
Theorem 20.1 — for any irreducible finite chain, aperiodic or not, the heat kernel converges: dcont(t)→0 as t→∞.
Theorem 20.3 — the two-way comparison between lazy discrete and continuous mixing: eventual ε-mixing of the lazy chain at time k gives 2ε-mixing of the heat kernel at time k, and ε-mixing of the heat kernel at time m gives 2ε-mixing of the lazy chain at time 4m.
Theorem 20.6 — the spectral bound for reversible chains: Ht(x,y)−π(y)≤π(y)/π(x)e−γt.
Theorem 20.7 — mixing of continuous-time product chains: with all coordinate gaps ≥γ and coordinate stationary masses bounded below, tmixcont(ε)≤(2γ)−1nlogn+γ−1nlog(1/(c0ε)), with a matching 2γnlogn lower bound when the gaps are equal — the nlogn product-chain phenomenon.
Proposition 21.3 — the recurrence dichotomy on countable spaces: a state is recurrent exactly when its Green's function ∑tPt(x,x) diverges, and for an irreducible chain one recurrent state makes all states recurrent.
Theorem 21.12 — an irreducible countable chain is positive recurrent if and only if it has a stationary distribution.
Lemma 21.13 (Kac) — for an irreducible chain with stationary distribution π and any nonempty set S: ∑x∈Sπ(x)Ex(τS+)=1; in particular Ex(τx+)=1/π(x).
Theorem 21.14 — the convergence theorem on countable spaces: an irreducible, aperiodic, positive recurrent chain has a unique stationary distribution π, and ∥Pt(x,⋅)−π∥TV→0 from every start.
Theorem 21.17 — in the null recurrent case, Pt(x,y)→0 for all pairs of states: no stationary profile is approached.
Significance
The results. Theorem 20.1 explains why laziness and aperiodicity pervade the discrete theory — periodicity is an artifact of the discrete clock. The product-chain theorem 20.7 is the cleanest instance of the nlogn paradigm (independent coordinates mix in relaxation time ×log(number of coordinates)) and the template for the hypercube cutoff of Mission XI. Chapter 21's trichotomy is the backbone of applied Markov chain theory — queueing, branching, renewal — and Kac's lemma with the convergence theorem 21.14 is the standard equipment of any probability course. Pólya's theorem is one of the most celebrated results of twentieth-century probability, the birth of the random-walk-in-dimension-d paradigm.
Formalizing them. Mathlib has no continuous-time Markov chains, no Poissonization, and no recurrence/transience theory (its PMF random walks stop far short). The countable-state layer built here — summable stationary equations, tail-sum return times, the recurrence dichotomy — is the missing infrastructure for formalized applied probability; Pólya's theorem is a famous target in its own right, and the d≥3 half has never been formalized in any assistant to our knowledge.
Difficulty
The heat kernel is an infinite series of matrices: convergence (dominated by the Poisson weights), the semigroup property, and the interchange of the series with matrix products and limits must all be established by hand over tsum. Theorem 20.1 avoids aperiodicity by the number-theoretic fact that the Poisson distribution smears over residue classes — formally, the continuous chain is automatically aperiodic because Ht(x,x)>0 for t>0. The product-chain bounds need the ℓ2 machinery of Mission VII applied coordinatewise and a careful union bound; the lower bound is a Gaussian-free second-moment argument. On the countable side, everything is series bookkeeping in the absence of Fintype: the recurrence dichotomy is a generating-function (renewal) identity G(x,x)=1/Px{τx+=∞} handled through partial sums; Kac's lemma is a mass-transport double-count over trajectories; and Theorem 21.14 needs an aperiodicity-based coupling on a countable product space, the technical summit of the mission. Pólya's theorem itself combines a local central-limit-type estimate for the return probabilities (P2t(0,0)≍t−d/2, obtained by Stirling in d=1,2 and by a comparison argument in higher dimension) with the dichotomy of Proposition 21.3.
Formalization scope
Chapter 20 lives on finite state spaces: the heat kernel is a tsum over k of Poisson weights times matrix powers (summability is provable, not assumed), continuous distance is a supremum over states, and the continuous mixing time is an sInf over nonnegative reals (junk 0 if the set were empty — excluded under the theorems' hypotheses). Discrete-vs-continuous comparison (Theorem 20.3) is stated with eventual thresholds (∃K,∀k≥K), matching the book's asymptotic phrasing. Chapter 21 lives on a Countable type: stochasticity and stationarity are HasSum statements, t-step powers are defined recursively with tsum convolutions, return-time tails are countable sums of path weights over finite horizons, and recurrence/positive recurrence are the tail-limit and tail-summability conditions above — measure theory never enters. Pólya's theorem is stated for the origin of Zd with the walk defined by nearest-neighbour steps; the d≤2 and d≥3 halves are separate conjuncts of one statement.
G. Pólya, Über eine Aufgabe der Wahrscheinlichkeitsrechnung betreffend die Irrfahrt im Straßennetz, Math. Ann. 84 (1921). https://doi.org/10.1007/BF01458701
W. Feller, An Introduction to Probability Theory and Its Applications, Vol. I, 3rd ed., Wiley, 1968.
Markov Chains and Mixing Times VII: Eigenvalues and the Cheeger InequalityTextbook
Motivation
How fast does a Markov chain forget its starting point? For a reversible chain the complete answer is coded in the eigenvalues of its transition matrix: the largest eigenvalue is always 1, and the size of the gap between 1 and the rest of the spectrum is the chain's fundamental time constant — a large gap means fast mixing, a small gap means slow mixing. Chapters 12–13 of Levin–Peres–Wilmer, Markov Chains and Mixing Times (AMS, 2009) develop this spectral theory and culminate in the discrete Cheeger inequality of Jerrum–Sinclair and Lawler–Sokal, which says that the spectral gap γ (an analytic quantity, defined below) and the bottleneck constant Φ⋆ (a geometric quantity from Mission IV, also recalled below) control each other:
2Φ⋆2≤γ≤2Φ⋆.
A chain mixes rapidly exactly when its state space has no bottleneck. This inequality is the backbone of the Markov-chain approach to approximate counting and of spectral graph theory at large; alongside it the chapters provide Wilson's method — the sharpest general technique for mixing-time lower bounds — and the comparison machinery that transfers spectral estimates between chains.
Setting
All chains live on a finite state space V. A chain with transition matrix P and stationary distribution π is reversible when the detailed balance equations π(x)P(x,y)=π(y)P(y,x) hold; reversibility is the standing assumption of both chapters. The yardsticks of the series are the total variation distance∥μ−ν∥TV=maxA⊆V∣μ(A)−ν(A)∣, the worst-case distance to stationarity d(t)=maxx∥Pt(x,⋅)−π∥TV, and the mixing timetmix(ε)=min{t:d(t)≤ε}, with tmix=tmix(1/4); we write πmin=minxπ(x).
The spectral vocabulary: an eigenfunction of P is a nonzero f:V→R with Pf=λf, where (Pf)(x)=∑yP(x,y)f(y); the number λ is then an eigenvalue. Out of the spectrum one forms
λ2, the largest eigenvalue different from 1, and the spectral gapγ=1−λ2;
λ⋆, the largest absolute value of an eigenvalue different from 1, the absolute gapγ⋆=1−λ⋆, and the relaxation timetrel=1/γ⋆.
Functions on V carry the weighted inner product ⟨f,g⟩π=∑xf(x)g(x)π(x) — the geometry, denoted ℓ2(π), in which a reversible P is self-adjoint — and the Dirichlet form
E(f)=21x,y∑[f(x)−f(y)]2π(x)P(x,y),
the average squared variation of f along the chain's transitions. Finally, from Mission IV: the bottleneck ratio of a set S of states is Φ(S)=∑x∈S,y∈/Sπ(x)P(x,y)/π(S), the conditional probability at stationarity of escaping S in one step, and the bottleneck constant is Φ⋆=min{Φ(S):∅=S,π(S)≤21}.
Formalization targets
Goal
Theorem 13.14, the discrete Cheeger inequality: for a reversible irreducible chain,
2Φ⋆2≤γ≤2Φ⋆.
Milestones
Lemma 12.1 — every eigenvalue satisfies ∣λ∣≤1; for an irreducible chain the eigenfunctions of the eigenvalue 1 are the constant functions; an irreducible aperiodic chain does not have −1 as an eigenvalue.
Lemma 12.2 — the spectral representation: a reversible chain admits eigenfunctions f1,…,f∣V∣, orthonormal with respect to ⟨⋅,⋅⟩π, with eigenvalues λj, such that Pt(x,y)/π(y)=∑jfj(x)fj(y)λjt for all t,x,y.
Theorem 12.3 — mixing is at most relaxation times a log factor: tmix(ε)≤log(1/(επmin))trel+1.
Theorem 12.4 — mixing is at least the relaxation time: tmix(ε)≥(trel−1)log(1/(2ε)).
§12.3.1 — the model computation: simple random walk on the n-cycle has the numbers cos(2πj/n), j=0,…,n−1, among its eigenvalues.
Theorem 13.1 — if every pair of states admits a coupling of the two one-step distributions that contracts some metric ρ on V by a factor θ in expectation, then λ⋆≤θ.
Theorem 13.5, Wilson's method — an eigenfunction Φ with eigenvalue λ∈(21,1) whose one-step increments have second moment at most R yields the explicit lower bound tmix(ε)≥[2log(1/λ)]−1[log((1−λ)Φ(x)2/(2R))+log((1−ε)/ε)].
Lemmas 13.11–13.12 — the variational characterization: γ is the minimum of E(f) over functions with mean zero (∑xf(x)π(x)=0) and unit norm (⟨f,f⟩π=1), and the minimum is attained.
Lemma 13.22 — the comparison method: if a second reversible chain P~ on the same space, with stationary distribution π~, Dirichlet form E~, and gap γ~, satisfies E~(f)≤BE(f) for every f, then γ~≤[maxxπ(x)/π~(x)]Bγ.
Significance
The results. Theorems 12.3–12.4 sandwich the mixing time between trel and trellog(1/πmin) — the fundamental equivalence of spectral and mixing estimates for reversible chains, prerequisite for the cutoff criterion of Mission XI. The Cheeger inequality converts isoperimetry into spectral bounds; it is the mathematical core of the Jerrum–Sinclair program of polynomial-time approximate counting, and its graph version underlies expander theory. Wilson's method produced the sharp lower bounds for adjacent transpositions and hypercube-type chains; the comparison lemma is the engine behind the shuffle bounds cited in Mission V (§16.1).
Formalizing them. Mathlib has the spectral theorem for symmetric matrices but nothing connecting spectra to Markov chains: no spectral gap, no relaxation time, no Dirichlet forms, no Cheeger inequality in any form. A formalized discrete Cheeger inequality would be a landmark reusable well outside this series (spectral graph theory, expanders); the eigenvalue and Rayleigh-quotient layer built here is what Missions IX (tree relaxation, block dynamics) and XI (cutoff criterion) consume.
Difficulty
Everything routes through one change of basis: conjugating P by the diagonal matrix with entries π(x) produces a matrix that is symmetric precisely because the chain is reversible, so Mathlib's spectral theorem applies — but transporting the resulting eigenbasis back to ℓ2(π), keeping track of orthonormality with respect to the weighted inner product, is a genuine formal-linear-algebra project; nothing about it is deep, all of it is fussy. The definitions of λ2 and λ⋆ as suprema over the set of non-unit eigenvalues (finite, and nonempty once ∣V∣≥2) must be reconciled with the eigenbasis enumeration before any variational argument runs. The upper half of Cheeger is direct from the variational characterization — test it on the indicator function of a bottleneck set S, recentred to have mean zero; the lower half is the hard half: the standard proof takes an optimal f, decomposes it over its level sets {f>c}, and applies Cauchy–Schwarz twice, and formalizing that level-set sweep is the main effort of the mission. Wilson's method needs a supermartingale-style iteration of the eigenfunction estimate; its constants are exact, so the inequalities cannot be rounded.
Formalization scope
Eigenvalues are defined by real eigenvectors (∃f=0,Pf=λf); for reversible chains this captures the whole spectrum, and all statements assume reversibility wherever the book does. λ2 and λ⋆ are suprema of explicit sets of reals; on a one-point space these sets are empty and the supremum takes a junk value, so the affected statements carry the explicit hypothesis ∣V∣≥2, matching the book's implicit assumption of a non-degenerate chain. trel=(1−λ⋆)−1 with total inverse. Theorem 12.3 carries an explicit +1 absorbing the rounding of a real-valued bound to an integer time. The cycle eigenvalue statement exhibits eigenvalues (existence of eigenfunctions); completeness of that list is not asserted. The variational characterization asserts both the minimization identity and its attainment, so it can be used in either direction.
Welcome contributions: the symmetrization API (conjugation by diag(π)), Rayleigh-quotient lemmas, level-set (layer-cake) infrastructure — all reused by Missions IX and XI.
Markov Chains and Mixing Times IV: Lower Bounds on Mixing TimesTextbook
Motivation
Missions II–III produce upper bounds on mixing times. Whether such a bound is sharp is a different question: an O(n2) bound on a chain that actually mixes in nlogn steps hides the truth. Chapter 7 of Levin–Peres–Wilmer, Markov Chains and Mixing Times (AMS, 2009) develops the standard toolkit of lower bounds: the counting and diameter bounds (a chain cannot spread faster than its transition graph allows), the bottleneck ratio (a chain cannot mix faster than it crosses its worst cut), and distinguishing statistics (a chain is far from stationarity as long as some statistic separates Pt(x,⋅) from π by several standard deviations). The bottleneck bound — closely related to the conductance of the chain and, via Mission VII, to the Cheeger inequality — is the single most important obstruction result in the subject: it is how slow mixing (torpid mixing of Ising at low temperature, in Mission IX) is proved.
Setting
For a chain P with stationary distribution π, the edge measure is Q(x,y)=π(x)P(x,y), the bottleneck ratio of a set S of states is
Φ(S)=π(S)Q(S,Sc),Q(S,Sc)=x∈S,y∈/S∑π(x)P(x,y),
and the bottleneck ratio of the chain is Φ⋆=min{Φ(S):π(S)≤21,S=∅}. The maximal one-step out-degree is Δ=maxx∣{y:P(x,y)>0}∣; the diameter is measured in the graph joining x=y when P(x,y)+P(y,x)>0. For a statistic f:V→R and distribution μ, Eμ(f) and Varμ(f) are the finite-sum expectation and variance, and μf−1 denotes the pushforward of μ under f.
Formalization targets
Goal
tmix≥4Φ⋆1.
This is Theorem 7.3, the bottleneck-ratio lower bound, the chapter's central theorem.
Milestones
The counting bound tmix(ε)≥log(∣V∣(1−ε))/logΔ for chains with uniform stationary distribution (§7.1.1, display (7.2)); the diameter bound: any two states satisfy dist(x0,y0)≤2tmix(ε) for ε<1/2 (§7.1.2, display (7.3)); Proposition 7.8 (a statistic separating means by r standard deviations forces ∥μ−ν∥TV≥1−4/(4+r2)); Lemma 7.9 (projection under a statistic does not increase TV distance); Proposition 7.13 (the lazy hypercube walk satisfies d(21nlogn−αn)≥1−8e1−2α); and Proposition 7.14 (the top-to-random shuffle needs nlogn−O(n) shuffles, matching the upper bound of Mission III).
Significance
The results. Together with Mission III this pins the top-to-random shuffle at nlogn±O(n) — the first sharp mixing result of the series, and the prototype of the cutoff phenomenon formalized in Mission XI. Proposition 7.13 similarly matches the hypercube upper bound and feeds the cutoff analysis. The bottleneck bound is used in Mission IX to prove exponentially slow mixing of the mean-field Ising model at low temperature, and its two-sided refinement is the Cheeger inequality of Mission VII.
Formalizing them. Mathlib has no notion of conductance/bottleneck ratio of a chain, no distinguishing-statistic method, and no mixing-time lower bound of any kind. The pushforward and variance infrastructure over finitely supported distributions is elementary but new, and reusable wherever second-moment methods appear (Wilson's method in Mission VII).
Difficulty
The bottleneck theorem's proof is short but exact: it hinges on the identity π(S)∥μSP−μS∥TV=Q(S,Sc) for π conditioned on S, followed by a telescoping estimate of ∥μSPt−μS∥TV; the formal cost is manipulating conditioned measures and one-sided TV sums (Remark 4.3 from Mission II). For Proposition 7.8, the second-moment argument runs through Chebyshev on both distributions plus optimization of a threshold — the constants 4/(4+r2) are exact, not asymptotic, so the formal inequalities must be done carefully. Proposition 7.13 requires the binomial mean/variance computation for Hamming weight under both π and Pt(1,⋅), including the negative-correlation bound for unrefreshed coordinates. The naive route to a lower bound — "the chain has not left a small set, so it is far from π" — is precisely the counting bound and is too weak for the sharp results; the statistics method is what closes the gap.
Formalization scope
Φ⋆ is an infimum over the subtype of nonempty sets with π(S)≤21; on a one-point space this subtype is empty and the infimum takes a junk value, making the goal trivially true there (the bound carries content only for ∣V∣≥2, as in the book). The counting bound divides by logΔ with total division (Δ≤1 gives a trivially true statement). The diameter bound is stated for arbitrary pairs of states through SimpleGraph.dist of the transition graph, which subsumes the book's diameter formulation. Propositions 7.13 and 7.14 are stated for all integer times t≤21nlogn−αn (resp. t≤nlogn−αn), using monotonicity of d instead of evaluating at a real-valued time — this avoids floor artifacts while keeping the book's content. Proposition 7.14 quantifies "α large, then n large" exactly as the book's iterated limit.
Welcome contributions: monotonicity of d(t) in t; conditioned-measure lemmas; variance API for distExp/distVar.
Markov Chains and Mixing Times III: Coupling and Strong Stationary TimesTextbook
Motivation
The Convergence Theorem of Mission II says an irreducible aperiodic chain mixes geometrically, but with constants coming from a crude Doeblin decomposition — useless for actual chains, whose state spaces are exponentially large. Chapters 5–6 of Levin–Peres–Wilmer, Markov Chains and Mixing Times (AMS, 2009) develop the two classic probabilistic techniques that give useful upper bounds: coupling — run two copies of the chain jointly so that they meet quickly, and read a TV bound off the meeting time — and strong stationary times — random times at which the chain is exactly stationary, independent of the time. The flagship application is the top-to-random shuffle: repeatedly take the top card of a deck of n cards and reinsert it at a uniform position; the deck is well mixed after nlogn+cn shuffles, with error at most e−c.
Setting
A Markovian coupling of a chain P (with the stay-together convention (5.2)) is a chain Q on pairs whose coordinate marginals are both P and which moves diagonal states to diagonal states. The coupling timeτcouple is the hitting time of the diagonal; its tails are expressed with the trajectory calculus of Mission I.
A randomized stopping time is presented by its stopping rule: for each time t and trajectory prefix ω, a number st(ω)∈[0,1], the conditional probability of stopping at t given the trajectory so far and no earlier stop. A strong stationary time for the chain started at x is an almost surely finite such τ with
Px{τ=t,Xτ=y}=Px{τ=t}π(y),
i.e. Xτ∼π independent of τ. The separation distance is sx(t)=maxy[1−Pt(x,y)/π(y)].
The mission also fixes the concrete chains it bounds: the lazy walk on the discrete torus Znd, the Metropolis chain on proper q-colorings of a graph, the Glauber dynamics of the hardcore model with fugacity λ, and the top-to-random shuffle on decks of n cards (states are arrangements, i.e. permutations; position 0 is the top).
Formalization targets
Goal
Let d(t)=maxx∥Pt(x,⋅)−π∥TV,
d(⌈nlogn+αn⌉)≤e−α(α>0)
for the top-to-random shuffle on n≥2 cards — display (6.16) of the book, the chapter's flagship bound, proved by combining the strong stationary time τtop with the coupon collector tail of Mission I.
Milestones
Theorem 5.2 and Corollary 5.3 (the coupling bound: ∥Pt(x,⋅)−Pt(y,⋅)∥TV≤Px,y{τcouple>t}, hence d(t)≤maxx,yPx,y{τcouple>t}); Theorem 5.5 (tmix(ε)≤c(d)n2log2ε−1 for the lazy torus walk); Theorem 5.7 (Metropolis colorings, q>3Δ: mixing in O(nlogn)); Theorem 5.8 (hardcore Glauber, λ<(Δ−1)−1: mixing in O(nlogn)); Proposition 6.1 with Example 6.7 (τtop is a strong stationary time); Lemma 6.11 (sx(t)≤Px{τ>t}); Lemma 6.13 (∥Pt(x,⋅)−π∥TV≤sx(t)); Proposition 6.10 (d(t)≤maxxPx{τ>t}).
Significance
The results. The coupling bound is the single most used upper-bound technique in the subject: Missions VIII (path coupling), IX (Ising) and XI (cutoff examples) all instantiate it. Strong stationary times and separation distance return in Mission XI (separation cutoff) and underlie perfect sampling in Mission XIII. The three concrete bounds (torus, colorings, hardcore) are the standard first applications and give the first polynomial mixing results of the series; the colorings and hardcore chains are the objects of intense ongoing research on sampling thresholds.
Formalizing them. Nothing here exists in Mathlib. The novel infrastructure is the stopping-rule formalization of randomized stopping times over trajectory prefixes — measure-theory-free, but expressive enough for the strong stationarity identity — and the Markovian-coupling predicate on pair chains. Both are reused later in the series (Matthews method, cutoff, CFTP).
Difficulty
The coupling bound itself is short once Proposition 4.7 (Mission II) is available; the work is in the applications. For the torus, the coordinatewise coupling requires assembling d one-dimensional couplings and bounding the coupling time by a sum of one-dimensional meeting times — the formal bookkeeping of "couple coordinate by coordinate" is the real cost, and the constant c(d) absorbs it. For Theorem 5.7 and 5.8 the argument is a grand coupling over all colorings/configurations simultaneously; the formal statements quantify only over the resulting bound, but a solver must build the coupling. For Proposition 6.1, the crux is the induction "given k cards under the original bottom card, all k! orders are equally likely" — an exchangeability argument that must be carried through the stopping-rule encoding. Lemma 6.11 is where the definition of strong stationarity does its work; the naive attempt to prove Proposition 6.10 directly from the coupling characterization fails, which is exactly why separation distance is introduced.
Formalization scope
Couplings of chains are transition matrices on V×V with marginal conditions stated row by row; the stay-together convention is part of the predicate, matching (5.2). Stopping rules take the trajectory prefix (which includes the starting state), so times "depending on the starting position" are covered; strong stationarity packages the stopping rule bounds, almost-sure finiteness (∑tPx{τ=t}=1), and the product identity. The colorings chain lives on the subtype of proper colorings; the hardcore chain is the Glauber dynamics of Mission II restricted to the subtype of hardcore configurations (transitions never leave it). Mixing-time upper bounds carry an explicit +1 for integer rounding where the book's real-valued display would otherwise be false for the integer-valued tmix. The torus statement fixes ε≤1/2; for ε near 1 the display is false as stated in the book.
Welcome contributions: interface lemmas between setAvoidTailProb of the pair chain and the two coordinates; the taboo-matrix form of coupling-time tails; exchangeability infrastructure for the deck chains (reused in Mission V).
Variance-based Regularization with Convex Objectives III: Localized-Rademacher Risk Bounds for the Robust MinimizerResearch Paper
Why variance-regularized risk bounds
In statistical learning, one picks a function f from a class F to make the population risk E[f] small, with access only to an i.i.d. sample x1,…,xn from an unknown distribution P. Empirical risk minimization replaces E[f] by the empirical mean EPn[f], and its classical guarantees decay like 1/n regardless of how concentrated f is. Bernstein-type inequalities show that the deviation of EPn[f] from E[f] scales with the standard deviation of f, so a procedure that minimizes "empirical risk plus a standard-deviation penalty" can, in principle, achieve faster rates when the variance at the optimum is small (Maurer and Pontil, 2009). The penalized objective is non-convex even when every f is convex in its parameters, which makes it hard to optimize.
J. C. Duchi and H. Namkoong (arXiv:1610.02581v3, 2017) replace the penalty by a distributionally robust objective: the worst-case risk over all reweightings of the sample within a χ2-divergence ball. This objective is convex whenever the losses are, and (Theorem 1 of the paper) it equals the empirical mean plus a standard-deviation penalty up to an error of order 1/n. This mission formalizes the paper's guarantee for the minimizer of that robust objective in terms of localized Rademacher complexities (Section 3.2, Theorem 4), the sharpest of the paper's three generalization analyses. It is the third of four missions on the paper.
Setting
Let P be a probability measure on a measurable space X and x1,…,xn, n≥1, an i.i.d. sample from P with empirical distribution Pn. Let M≥1 and let F be a collection of measurable functions f:X→[0,M] (losses).
The χ2 ball of radius ρ≥0 is the set Pn of weight vectors p∈Rn with pi≥0, ∑ipi=1 and 21∑i(npi−1)2≤ρ; equivalently, the distributions P on the sample with Dϕ(P∥Pn)≤ρ/n for ϕ(t)=21(t−1)2.
The robust risk of f is supP:Dϕ(P∥Pn)≤ρ/nEP[f]=supp∈Pn∑ipif(xi), and a robust minimizerf minimizes it over F.
The empirical Rademacher complexity is Rn(F)=Eε[supf∈Fn1∑iεif(xi)] with i.i.d. uniform signs εi∈{−1,1}, and E[Rn(F)] averages it over the sample.
A function ψ:R+→R+ is sub-root if it is nonnegative, nondecreasing, and r↦ψ(r)/r is nonincreasing on r>0.
The localization inequality (20) asks that, for all r≥0,
ψn(r)≥E[Rn({cf:f∈F,c∈[0,1],E[c2f2]≤r})],
with ψn sub-root, and rn⋆>0 is a point with rn⋆≥ψn(rn⋆).
Formalization targets
Goal: Theorem 4, inequality (23), as its proof establishes it
Let 0<t<n and let ρ satisfy (21): nρ≥8(n45M(t+log⌈logtn⌉)+18rn⋆). With probability at least 1−4e−t, every robust minimizer f satisfies
In attack order: Bousquet's form of Talagrand's inequality (Lemma B.2); the elementary root bound (Lemma D.4); the contraction principle (Lemma D.5, a published theorem); the uniform Bernstein inequality with Rademacher complexity (Lemma D.1); its localized version in terms of rn⋆ (Lemma D.2); localized second-moment bounds (Lemma D.3); the deterministic expansion (10) of Theorem 1,
The bound (23) says that the robust minimizer competes with the best trade-off between risk and standard deviation in the class, and that the complexity of the class enters only through the fixed point rn⋆ of a localized complexity bound. For bounded VC classes rn⋆ is of order ndlog(n/d) (Bartlett, Bousquet and Mendelson, 2005, Corollary 3.7), so when the optimal function has small variance the excess risk is of order ρ/n, faster than the 1/n of uniform covering arguments; and localized complexities apply to classes, such as balls of reproducing kernel Hilbert spaces, whose covering numbers are too large for the covering-number analysis of the paper's Theorem 3 (mission II of this series).
The paper's result is proved, not open. No part of it, and none of the localized-complexity machinery of Bartlett, Bousquet and Mendelson, is formalized in Lean or Mathlib to our knowledge. The mission produces a checked version of the theorem with every constant explicit and, along the way, the localization lemmas D.1–D.3, which are reusable for any localized-complexity analysis. Reading the proof also exposed three arithmetic slips in the printed statements; the mission states what the proof establishes (see Formalization scope).
Difficulty
The obvious route applies a uniform concentration inequality to F and then a Bernstein bound to each f. Talagrand's inequality applied to the whole class gives a deviation governed by the largest variance in the class and by the global complexity E[Rn(F)], which yields only 1/n rates. Obtaining a deviation that scales with each function's own second moment requires peeling the class into shells of comparable second moment and a fixed-point argument on the sub-root bound, with a union bound whose cost appears as log⌈logtn⌉. The two directions of the localized inequalities (population to sample, and sample to population for second moments) must then be combined with the deterministic expansion (10) while keeping the constants explicit. A further subtlety is the self-normalized rescaling f↦r/(E[f2]∨r)f, which differs from the variance normalization of Bartlett et al. and is what makes the bound compatible with the robust objective.
Formalization scope
Lean conventions. The sample is the coordinate map of the product measure Pn on Fin n → X. Distributions on the sample are weight vectors in the χ2 ball; the robust risk is the real supremum over that ball (attained, since the ball is nonempty and compact for n≥1, ρ≥0). Population means and variances are ∫ x, f x ∂P and ProbabilityTheory.variance f P for measurable bounded f; empirical means and variances are normalized by 1/n. The empirical Rademacher complexity is the published UnderstandingML_Rademacher definition evaluated on {(f(x1),…,f(xn))}. Its expectation is a Bochner integral, and every hypothesis that bounds it also asserts that the integrand is integrable: otherwise the integral is 0, (20) would hold for free, and the theorem would be false. Probability bounds are stated for the failure event under Pn (an outer measure when the event is not measurable). The goal speaks about every minimizer of the robust risk, so it is not vacuous when the set of minimizers is empty. The condition rn⋆>0 is part of the page's "root" (and the proof divides by rn⋆); with rn⋆=0 allowed, ψ(r)=r would remove the complexity term from (21). The condition t<n makes log⌈logtn⌉ defined.
Corrections of printed statements, each recorded in the item's docstring and Formalization Note (the milestone texts stay verbatim):
(22) is stated with probability 1−2e−t; the paper prints 1−e−t, and its proof (p. 41) concludes 1−2e−t.
(23) is stated with probability 1−4e−t (printed 1−3e−t; the proof adds two fixed-f events to the two of (22)) and with 45n182ρ (printed 45n91ρ; the proof's step ρ+t≤91ρ/45 multiplies 2Var(f)/n).
Lemma D.3 is stated with the additive term 72M2(1+η)rn⋆+(4(1+η)+314)nM2t and, in the reversed direction, the coefficient 1+1+η1, as its proof yields (printed: nMt(4+37M) and 1+1+ηη), under Theorem 4's standing hypothesis M≥1.
Lemma D.5 is linked to the published contraction lemma UnderstandingML.contraction_lemma, which states it at a fixed sample for nonempty bounded classes and allows a different Lipschitz map per coordinate.
Contributions welcome: proofs of the milestones in any order; Lemma B.2 (Bousquet's inequality) is the deepest single ingredient and is reusable well beyond this mission, as are the peeling Lemma D.1 and the sub-root fixed-point Lemma D.2.
Selected references
J. C. Duchi and H. Namkoong, Variance-based regularization with convex objectives, arXiv:1610.02581v3, 2017. https://arxiv.org/abs/1610.02581
O. Bousquet, A Bennett concentration inequality and its application to suprema of empirical processes, Comptes Rendus Mathématique 334(6), 2002. https://doi.org/10.1016/S1631-073X(02)02292-6
A. Maurer and M. Pontil, Empirical Bernstein bounds and sample variance penalization, COLT 2009. https://arxiv.org/abs/0907.3740
Air Travel Demand and Airline Seat Inventory Management II: The EMSR Protection Level for Two Nested Fare ClassesTextbook
Why airlines protect seats
An airline sells the seats of one flight in several fare classes at different prices, all drawn from one shared cabin. Discount fares are bought early, under advance-purchase restrictions, while most high-fare requests arrive close to departure. Accepting every early low-fare request fills the aircraft with cheap passengers and turns away late high-fare passengers; refusing too many leaves seats empty. Seat inventory control decides how many seats to keep away from the low fare. Peter Belobaba's 1987 MIT thesis (Flight Transportation Laboratory Report R87-7) introduced the expected marginal seat revenue (EMSR) model for this decision, and EMSR-type rules remain the basis of the booking-limit logic in airline revenue management systems.
Timeline. Littlewood (1972, AGIFORS Symposium Proceedings; reprinted 2005) proposed accepting a low-fare request as long as its fare is at least the high fare times the probability of selling all remaining seats to high-fare passengers. Analysts at Trans World Airlines (1973) and Richter at Lufthansa (1982) gave equivalent formulations for the dynamic case. Belobaba (1987, Ch. 5) restated the two-class rule as a static protection level for nested inventories and extended it heuristically to many classes. Brumelle and McGill (Operations Research 41, 1993) and Curry (Transportation Science 24, 1990) later proved optimality of nested protection levels for any number of classes under low-to-high arrivals, and showed that Belobaba's multi-class EMSR levels are not optimal for three or more classes. This mission concerns only the two-class result, which is correct.
Setting
A single flight leg has capacityC∈N. Class 1 has fare f1, class 2 has fare f2, with 0≤f2≤f1. The numbers of requests for the two classes are random variables r1,r2 with values in N, defined on a probability space (Ω,μ) and independent. There are no cancellations, no no-shows, and a refused request is lost.
The inventory is nested: a class-1 request is accepted as long as any seat is unsold. A protection levelS∈{0,…,C} is the number of seats reserved for class 1; it sets the class-2 booking limitBL2=C−S. All class-2 requests arrive before any class-1 request. Class 2 therefore books min(r2,C−S) seats and class 1 books min(r1,C−min(r2,C−S)), and the realised revenue is
RS=f2min(r2,C−S)+f1min(r1,C−min(r2,C−S)).
The expected revenue is Rˉ(S)=E[RS].
The tail probability of class 1 is Pˉ1(S)=P[r1≥S], the probability of receiving S or more class-1 requests, and the expected marginal seat revenue of the S-th class-1 seat is
EMSR1(S)=f1⋅Pˉ1(S).
For a single class with S seats the expected revenue is f1E[min(r1,S)], and EMSR1(S) is its increment from S−1 to S seats. The EMSR protection levelS21 is the largest integer S∈{0,…,C} with
EMSR1(S)≥f2.
In Lean these objects are nestedRevenue, expectedNestedRevenue, tailProb, classRevenue, emsr and emsrProtectionLevel in SeatInventory.Nested.
Formalization targets
Goal: Eqs. (5.15)–(5.16), optimality of the EMSR protection level
Rˉ(S)≤Rˉ(S21)for all S∈{0,…,C}.
The goal fixes no distribution: it holds for every pair of independent N-valued demands, and S21 depends only on f2/f1 and the law of r1.
Milestones
Eq. (5.11).f1E[min(r1,S)]−f1E[min(r1,S−1)]=f1P[r1≥S] for S≥1.
Eqs. (6.1)–(6.2).Pˉ1 and, for f1≥0, EMSR1 are non-increasing in S.
Eq. (4.8), Littlewood's rule, already on the platform as RevenueManagement.littlewood_marginal_value (Talluri and van Ryzin's Eq. (2.1), proved).
Sect. 5.2, p. 112.Rˉ(S)≤Rˉ(S21) for S21≤S≤C: a smaller booking limit for class 2 cannot raise expected revenue.
Sect. 5.2, p. 114. With the same class-2 limit C−S, the expected nested revenue is at least the expected revenue of two distinct inventories with S and C−S seats, strictly if f1>0 and P[r2<C−S,r1>S]>0.
Significance
The two-class result says that, for a static booking limit set once before sales open and low-fare demand arriving first, the airline needs only the high-fare demand distribution and the fare ratio to set the optimal limit; the low-fare forecast is irrelevant. This is the rule that the thesis then applies class by class in multi-class nested systems, and it is the base case against which the later exact multi-class theory (Brumelle–McGill, Curry) is checked. Milestone 5 makes precise why nested inventories dominate the distinct-inventory allocation of the thesis's Sect. 5.1 with the same class-2 limit.
The result is classical and proved, in the sense that the optimality of a two-class threshold policy follows from Littlewood's argument and from the dynamic-programming treatment in Talluri and van Ryzin's The Theory and Practice of Revenue Management (2004, Ch. 2). On Prove2Me, Littlewood's marginal rule and the dynamic-programming optimality of nested protection levels (RevenueManagement.static_optimal_controls) are formalized, but in Bellman form: there the protection level is defined through the value function of a dynamic program. What is not formalized is the statement in Belobaba's form, where the protection level is the explicit threshold of f1P[r1≥S] against f2 and the objective is the explicit expected revenue of a booking limit. Connecting the two forms, and the comparison with distinct inventories, is the work of this mission.
Difficulty
The expected revenue couples the two demands through the capacity left by class 2, so Rˉ is not a sum of single-class revenues and is not separately concave in an obvious way. The step that requires care is the increment Rˉ(S)−Rˉ(S−1): it is not EMSR1(S)−f2, as the thesis's sentence after the milestone on p. 112 suggests, because the extra protected seat matters only on the event that class 2 would have reached its limit. Independence of r1 and r2 is what makes that event's probability factor out; without independence the threshold rule is not optimal. The discrete reading matters too: with P[r1>S] in place of P[r1≥S] the rule is off by one seat and the claim fails.
Formalization scope
Conventions the Lean statements commit to:
Demands are N-valued measurable random variables r₁ r₂ : Ω → ℕ on a probability space μ; the goal and milestone 4 assume IndepFun r₁ r₂ μ. The thesis writes continuous densities (Eqs. (5.1)–(5.5)) but requires integer seat counts; the discrete model is used throughout.
Pˉ1(S)=P[r1≥S], as in Eq. (6.2) and the prose of Eq. (5.11), not P[r1>S] as in Eq. (5.2).
The EMSR protection level is the largest S∈{0,…,C} with f1P[r1≥S]≥f2 (Eq. (5.15)); Eq. (5.16)'s equality is the continuous idealisation and is not stated.
Booking order: all class-2 requests precede all class-1 requests (pp. 108, 112). This order is built into the revenue formula, not assumed separately.
Fares satisfy 0≤f2≤f1; the thesis has f1>f2, and the statements also cover equality.
Expectations are Bochner integrals of bounded revenues, probabilities are μ.real; seat counts use truncated subtraction only where S≤C.
A trivializing formalization is ruled out: S21 is defined by the threshold of (5.15), never as an argmax of expected revenue, and the expected revenue is computed from the realised revenue of the booking process, not postulated as a sum of marginal terms.
The multi-class EMSR levels of Eqs. (5.19)–(5.29) and the dynamic revision of Eqs. (5.31)–(5.32) are out of scope. Proofs need the discrete expectation identity E[min(r,S)]−E[min(r,S−1)]=P[r≥S] and expectation of products of independent bounded functions, both in Mathlib's reach and reusable for other single-leg revenue models. Proofs of any milestone, and a proof of the goal from milestones 1, 2 and 4 plus the matching lower-half argument, are welcome.
Selected references
P. P. Belobaba, Air Travel Demand and Airline Seat Inventory Management, PhD thesis, MIT, Flight Transportation Laboratory Report R87-7, 1987 (no DOI).
K. Littlewood, Forecasting and control of passenger bookings, AGIFORS Symposium Proceedings 12, 1972; reprinted in Journal of Revenue and Pricing Management 4, 2005. https://doi.org/10.1057/palgrave.rpm.5170134
S. L. Brumelle and J. I. McGill, Airline seat allocation with multiple nested fare classes, Operations Research 41, 1993. https://doi.org/10.1287/opre.41.1.127
R. E. Curry, Optimal airline seat allocation with fare classes nested by origins and destinations, Transportation Science 24, 1990. https://doi.org/10.1287/trsc.24.3.193
K. T. Talluri and G. J. van Ryzin, The Theory and Practice of Revenue Management, Springer, 2004. https://doi.org/10.1007/b139000
Stochastic Dynamic Programming and the Control of Queueing Systems III: Approximating Sequences for the Discounted Cost CriterionTextbook
Motivation
Optimal control of queueing systems leads to Markov decision problems whose state space is countably infinite (buffer contents, numbers of customers) and whose costs are unbounded (holding costs grow with the queue). Such a problem cannot be solved on a computer as it stands. The standard remedy is to truncate: solve a finite problem on the states {0,1,…,N} and hope that its value and its optimal policy approximate those of the original problem as N grows. Linn Sennott's approximating sequence method (ASM) makes this hope precise. For the expected discounted cost criterion, Sections 4.6–4.7 of Sennott's book (Stochastic Dynamic Programming and the Control of Queueing Systems, Wiley, 1999) identify a single condition, Assumption DC(α), that is necessary and sufficient for convergence of the truncated values, and give checkable sufficient conditions for it.
The method matters because naive truncation can fail. The book's Example 4.6.1 has a chain whose value at state 0 is finite, yet a natural truncation produces values VαN(0)≥αN2/((1−α)[N(1−α)+α])→∞. How the probability that would leave the truncated set is redistributed decides whether the computation is meaningful.
Earlier truncation schemes (Fox 1971; White 1980, 1982; Hernández-Lerma 1986; Cavazos-Cadena 1986; Whitt 1978–79; see the bibliographic notes on p. 81 of the book and Puterman 1994) require bounded rewards or pass directly to an algorithm. The ASM instead produces a sequence of finite Markov decision chains that can be studied in their own right; the material of Sections 4.6–4.7 is presented in the book as new.
Setting
A Markov decision chain (MDC) Δ has a countable state space S; for each state i a finite nonempty action set Ai; nonnegative finite costs C(i,a); and transition probabilities Pij(a) with ∑jPij(a)=1. A policyθ chooses the action at time t at random from a distribution θ(⋅∣ht) on Ait that may depend on the entire history ht=(i0,a0,…,it−1,at−1,it). A stationary policyf always chooses f(i)∈Ai in state i. Fix a discount factor α∈(0,1). The discounted cost of θ and the discounted value function are
both in [0,∞], the infimum over all policies. A policy is discount optimal if Vθ,α=Vα.
An approximating sequence(ΔN)N≥N0 consists of finite nonempty sets SN increasing to S and, for i∈SN and a∈Ai, probability distributions Pij(a;N) on SN with Pij(a;N)→Pij(a) as N→∞. The finite MDC ΔN has state space SN and the same actions and costs; VαN is its value function and fαN a stationary policy attaining the minimum in its discount optimality equation
An augmentation type approximating sequence (ATAS) keeps the original probabilities inside SN and redistributes the excess probability Pir(a), r∈/SN, according to augmentation distributions qj(i,a,r,N) on SN: Pij(a;N)=Pij(a)+∑r∈/SNPir(a)qj(i,a,r,N).
Assumption DC(α): for every i∈S, Wα(i):=limsupNVαN(i)<∞ and Wα(i)≤Vα(i).
Under either, every limit point of (fαN)N≥N0 (a stationary f with fNr(i)=f(i) eventually along a subsequence, for each i) is discount optimal for Δ.
Milestones
Lemma 4.6.2: liminfNVαN≥Vα for every approximating sequence.
Proposition 4.7.1: bounded costs imply DC(α).
Lemma 4.7.2: taboo probabilities of avoiding S−SN converge to the t-step transition probabilities.
Lemma 4.7.3: for the first passage time Ti(N) out of SN under a stationary policy, E[αTi(N)]→0.
Proposition 4.7.4: if Vα<∞ and the ATAS sends excess probability to a finite set, DC(α) holds.
Corollary 4.7.5: the case of a single distinguished state z, with the relative form of the optimality equation for ΔN.
Proposition 4.7.6: if Vα<∞ and the augmentation distributions satisfy ∑j∈SNqj(i,a,r,N)vα,n(j)≤vα,n(r) for all n≥0, then VαN≤Vα on SN.
Significance
Theorem 4.6.3 turns the question "does truncation work?" into the verification of one inequality between a lim sup and the true value, and it delivers both the value and an optimal stationary policy from finite computations. Propositions 4.7.4–4.7.6 give conditions that hold in the queueing models of the book with unbounded holding costs, and Corollary 4.7.5 supplies the computational form used for the inventory model of Chapter 5. The discounted theory is also the stepping stone to the average cost ASM of Chapter 8, which is built on discounted approximations.
All results are proved in the book. None of them is formalized: the platform has no statement about approximating sequences or state truncation of countable-state MDPs, and Mathlib has no Markov decision processes. The mission produces machine-checked versions of the convergence theorem and its sufficient conditions, for general history-dependent randomized policies and [0,∞]-valued costs.
Difficulty
The value functions are infima over uncountably many history-dependent policies and may be infinite, so no contraction argument applies: costs are unbounded and Vα is only the minimal nonnegative solution of its optimality equation. Passing to the limit in N inside ∑j∈SNPij(a;N)VαN(j) is an interchange of limit and infinite sum under a moving probability measure, with no dominating function in general; Example 4.6.1 shows that the interchange genuinely fails. The upper bound of Proposition 4.7.4 requires comparing ΔN with Δ along a coupled first passage out of SN, which needs the taboo-probability estimates of Lemmas 4.7.2–4.7.3. The obvious idea of bounding VαN by supC/(1−α) works only for bounded costs (Proposition 4.7.1).
Formalization scope
The state type S is countable ([Countable S]); actions live in a type Act, with a finite nonempty Finset of admissible actions per state. Costs are ℝ≥0, transition probabilities and all value functions are ℝ≥0∞, so infima over policies are lattice infima and +∞ is a legitimate value. A general policy is a function of the history, encoded as the list of past state–action pairs (most recent first) and the current state; the expected cost at time t is the [0,∞]-valued sum over histories. Vα is the infimum over all such policies; a stationary policy enters as the policy putting mass one on f(i). The discount factor is α : ℝ≥0 with 0<α<1 (the chapter's standing assumption). ΔN is an MDC on the subtype SN; VαN(i) is extended by 0 when N<N0 or i∈/SN, a convention that affects finitely many N for each fixed i and hence no limit in N. Limits, lim sups and lim infs are along Filter.atTop in ℝ≥0∞. Taboo probabilities and the first passage quantity E[αT]=∑n≥1αnP(T=n) (so α∞=0) are defined combinatorially from the transition probabilities.
A trivializing formalization is ruled out: Vα is not an infimum over stationary policies only (which would make optimality of limit points close to definitional), DC(α) keeps both of its conditions, and statement (i) of the goal includes finiteness of Vα.
A complete development needs the minimality of Vα among nonnegative solutions of the discount optimality equation (Theorem 4.1.4, chunk II of this series), Fatou-type lemmas for sums against converging distributions (Appendix A, chunk XI), and compactness of stationary policies (Proposition B.5). Contributions of these as reusable lemmas about countable-state MDCs are welcome.
Selected references
L. I. Sennott, Stochastic Dynamic Programming and the Control of Queueing Systems, Wiley, 1999, Sections 4.6–4.7, pp. 73–81. https://doi.org/10.1002/9780470317037
Numerical Techniques for Stochastic Optimization II: Logarithmic Concavity of Probabilistic ConstraintsTextbook
Motivation
Many engineering and economic planning problems must meet random requirements with a prescribed reliability: a reservoir must satisfy demand with probability at least 0.95, a power system must cover load except on rare days, an inventory must avoid shortage with high probability. Probabilistic constrained programming (also called chance-constrained programming) models this by requiring that a system of random inequalities hold jointly with probability at least p.
The first obstacle to solving such problems is structural. The probability that random constraints are satisfied is, in general, neither concave nor convex in the decision, so the feasible set need not be convex and local search can stall. Prékopa's theory of logarithmically concave measures (1971–1973) removed that obstacle for a large class of distributions, and it is the basis of the numerical methods of Chapter 5 of Ermoliev and Wets, Numerical Techniques for Stochastic Optimization (Springer 1988). This mission formalizes the structural theorems of that chapter.
Timeline:
1959: Charnes and Cooper, individual chance constraints.
1971: Prékopa, logarithmic concave measures with application to stochastic programming (Acta Sci. Math. Szeged 32).
1973: Prékopa, logarithmic concave measures and functions (Acta Sci. Math. Szeged 34), containing the marginal theorem: marginals of log-concave functions are log-concave.
1970s–1980s: nonlinear programming methods for (5.1) (SUMT with logarithmic penalty, supporting hyperplanes, reduced gradients) combined with Monte Carlo evaluation of h0; the chapter surveys them.
Setting
Let ξ be a random vector in Rq on a probability space (Ω,F,P) and let g1,…,gr:Rn×Rq→R. The chapter studies problem (5.1):
The function h0 is the probability function (chanceProb in Lean). In the special case gi(x,y)=Tix−yi it equals F(Tx), where F is the joint distribution function of ξ.
A function f≥0 is logarithmically concave on a convex set S if
f(λu+(1−λ)v)≥f(u)λf(v)1−λ,u,v∈S,0<λ<1.
Where f>0 this is concavity of logf; the power form also makes sense where f=0. Nondegenerate normal densities, uniform densities on convex bodies and exponential densities are log-concave.
Section 5.7 introduces the polynomial distribution (5.19) on the cube 0<zj≤1:
If g1,…,gr are jointly concave on Rn+q and ξ has a log-concave density f on Rq, then
h0 is logarithmically concave on Rn.
Its immediate consequence is that the feasible set {x:h0(x)≥p} is convex for every p.
Milestones
Theorem 5.2.1: if h is log-concave on the convex set H={h≥p}, 0<p<1, then h−p is log-concave on H. This makes the logarithmic penalty function (5.5) of the SUMT method convex.
Theorem 5.2.2: under the standing assumptions of §5.2, every interior point z of the feasible set of (5.1) satisfies hi(z)>pi, i=0,…,m.
Theorem 5.7.1 (proved content, (5.21)): for n=2 and oppositely ordered exponents, ∂2F/∂z1∂z2≥0 on (0,1)2.
Theorem 5.7.2: the polynomial distribution function is log-concave on (0,1]n.
The platform theorem ConvexOptimization.prekopa_marginal_log_concave (Prékopa's marginal theorem, proved) is included as a reference item.
Significance
Theorem 5.1 turns a probabilistic constraint into a convex constraint after taking logarithms. This is what makes convergence proofs for nonlinear programming methods (SUMT with logarithmic penalty, supporting hyperplanes, reduced gradients) applicable to (5.1) and to the reliability maximization problem (5.4); without it, those methods have no guarantee of finding a global optimum. Theorems 5.2.1 and 5.2.2 are the two facts that make the SUMT method of §5.2 well defined and convex on the interior of the feasible set. Theorem 5.7.2 shows that probabilistic constraints under the polynomial distribution define convex sets, so they can be added to geometric programmes.
On status: Theorem 5.1 is a classical result, proved in Prékopa's papers (the chapter itself refers to Prékopa's survey for the proof). Prékopa's marginal theorem and the Prékopa–Leindler inequality are already machine-checked on this platform; Theorem 5.1 and the §5.2 and §5.7 theorems are, as far as a search of the platform shows, not formalized. The work is formalizing known proofs, in the log-concavity predicate the platform already uses.
Difficulty
The obvious argument for Theorem 5.1, "the constraint set is convex and the density is log-concave, so the probability is log-concave", hides the real content: log-concavity of a probability as a function of a parameter is a statement about integrals, and it does not follow from pointwise properties of the integrand without a Prékopa–Leindler-type inequality. Concavity of each gi separately in x and in y is not enough; joint concavity in (x,y) is used essentially. The probability function vanishes on large regions in typical examples, so any argument that takes logarithms pointwise fails at the boundary of its support.
For Theorem 5.2.2 the naive argument fails at the index i=0: nothing about h0 is assumed directly, and log-concavity of h0 is exactly Theorem 5.1. For Theorem 5.7.1 the difficulty is a sign condition on a covariance; without the ordering hypothesis the mixed derivative can be negative.
Formalization scope
Rn and Rq are EuclideanSpace ℝ (Fin n) and EuclideanSpace ℝ (Fin q); the constraint functions take pairs (x,y) in the product, and concavity is ConcaveOn ℝ Set.univ on that product (joint concavity). A "continuous probability distribution with density f" is stated as P.map ξ = volume.withDensity (ENNReal.ofReal ∘ f) with ξ and f measurable and P a probability measure. Log-concavity is the platform definition ConvexOptimization.LogConcaveOn (nonnegativity plus the power inequality), imported as a reference item; concavity of Real.log ∘ h₀ would be a different, wrong property because Lean's Real.log 0 = 0. Indices are 0-based (Fin r, Fin m, Fin N, Fin n); the probabilistic constraint i=0 of Theorem 5.2.2 is stated separately from h1,…,hm. The polynomial distribution is a formula on Fin n → ℝ with real powers, used only on the cube.
No constant of the book is replaced by an explicit value: every result of this chapter is qualitative.
Corrections of the printed text, recorded in each item's Formalization Note:
Theorem 5.1 states the density condition "for every x1,x2∈Rn"; the density lives on Rq and the condition is imposed there.
(5.19) prints the first factor as ziαi1 and the domain index as i=1,…,N; they are read as z1αi1 and j=1,…,n.
Theorem 5.7.1 prints its ordering hypothesis with transposed indices (α11≤α12≤⋯≤α1n); following the proof, it is read as: across the N terms the z1-exponents increase and the z2-exponents decrease.
Theorem 5.7.1 claims "is a probability distribution function"; the book proves only (5.21), and normalization would need ∑ici=1, which is not assumed. The formal statement is (5.21), the mixed derivative as an iterated deriv.
Theorem 5.2.2 carries all six assumptions of §5.2, including compactness of the feasible set and the Slater point; it does not assume log-concavity of h0, which must be derived from the density and concavity hypotheses. A trivializing formalization, such as one with a density hypothesis that no probability law satisfies or a log-concavity predicate that holds for every function vanishing somewhere, is ruled out: the density hypotheses are satisfiable (checked locally) and LogConcaveOn is the multiplicative inequality at every pair of points.
Needed infrastructure: Prékopa's marginal theorem (available), log-concavity of indicators of convex sets and of products, measurability of the constraint set, and Artin's theorem that a sum of log-convex functions is log-convex (for Theorem 5.7.2). Artin's theorem and closure properties of LogConcaveOn are reusable beyond this mission, and contributions of them are welcome.
Selected references
A. Prékopa, "Numerical Solution of Probabilistic Constrained Programming Problems", in Yu. Ermoliev and R. J-B Wets (eds.), Numerical Techniques for Stochastic Optimization, Springer Series in Computational Mathematics 10, Springer 1988, Ch. 5, pp. 123–139. https://doi.org/10.1007/978-3-642-61370-8
A. Prékopa, "Logarithmic concave measures with application to stochastic programming", Acta Sci. Math. (Szeged) 32 (1971), 301–316.
A. Prékopa, "On logarithmic concave measures and functions", Acta Sci. Math. (Szeged) 34 (1973), 335–343.
B. L. Miller and H. M. Wagner, "Chance constrained programming with joint constraints", Operations Research 13 (1965), 930–945. https://doi.org/10.1287/opre.13.6.930
Numerical Techniques for Stochastic Optimization I: Edmundson–Madansky Bounds for Independent Random Data and Simple RecourseTextbook
Motivation
In a two-stage stochastic linear program a decision x is taken before random data ξ are observed, and a corrective recourse decision y is taken afterwards at a cost. The objective contains the expectation of an optimal value of a linear program, ∫Q(x,ξ(ω))P(dω), and for continuous or high-dimensional ξ that integral cannot be evaluated exactly. Practical methods therefore replace ξ by a discrete random vector and control the error by computable lower and upper bounds on the expected recourse cost. Chapter 2 of Ermoliev and Wets (eds.), Numerical Techniques for Stochastic Optimization (Springer 1988), by P. Kall, A. Ruszczyński and K. Frauendorfer, surveys these bounds as they were used in the codes of the time: Jensen's inequality from below, the Edmundson–Madansky inequality from above, and the special structure of simple recourse, where the expected cost is available in closed form.
Timeline. Jensen's inequality (1906) gives the lower bound for a convex integrand. A. Madansky, "Bounds on the expectation of a convex function of a multivariate random variable", Ann. Math. Statist. 30 (1959), and H. P. Edmundson (RAND report, 1956) gave the upper bound by the two-point law on the endpoints of an interval, and its product version for independent components. Kall and Stoyan (1982), Huang, Ziemba and Ben-Tal (1977), Frauendorfer and Kall (1988) developed partition refinement of both bounds, the scheme this chapter describes; Frauendorfer (1988) extended the upper bound to dependent data on boxes.
Setting
The two-stage problem (2.11) is: minimize ψ(x)=cTx+∫ΩQ(x,ξ(ω))P(dω) subject to Ax=b, x≥0. The recourse costQ(x,ξ) is the optimal value of the second-stage problem (2.12),
Q(x,ξ)=min{qTy:Wy=h−Tx,y≥0},ξ=(q,h,T),
with a deterministic m2×n2 matrix W (fixed recourse), and Q=+∞ when (2.12) is infeasible. Throughout the chapter the book assumes complete recourse, {Wy:y≥0}=Rm2, and dual feasibility: for every realization of q some u satisfies WTu≤q. Under these assumptions Q is finite. The expected recourse function is Q(x)=∫Q(x,ξ(ω))P(dω).
The Edmundson–Madansky law of an interval [a,b], a<b, with mean ξ0 puts mass p1=(b−ξ0)/(b−a) at a and p2=(ξ0−a)/(b−a) at b (2.32). For a box Ξ=×j=1m[aj,bj] and means ξj0, the vector ξ^ with independent components of these two-point laws sits at the vertex v with probability ∏jpj(vj).
Simple recourse is the case W=[I,−I], q=[q+,q−] with qj++qj−≥0, deterministic T and random h only. With χ=Tx the recourse cost splits into one-row costs Qj(χj,hj)=qj+(hj−χj) if hj≥χj, and qj−(χj−hj) otherwise.
Formalization targets
Goal: the Edmundson–Madansky bound for independent components (p. 46)
If ξ has independent components ξj∈[aj,bj] with means ξj0, and φ is convex on Ξ=×j[aj,bj], then
Eφ(ξ)≤v∈vertΞ∑(j=1∏mpj(vj))φ(v).
The book applies it to φ=Q(x,⋅); the goal is stated for every convex φ, with the explicit weights of (2.32).
Milestones
Properties (b), (d), (e) of p. 40: Q(x,⋅) is piecewise linear and convex in (h,T); Q(⋅,ξ) is convex piecewise linear in x; the expected recourse function is finite and convex under finite second moments.
The Jensen lower bound (2.26)–(2.27) on a partition (a published, proved theorem, reused).
The dual-multiplier lower bound (2.30)–(2.31).
The one-dimensional Edmundson–Madansky inequality (2.32)–(2.34).
For simple recourse: separability (2.46)–(2.49), the closed form (2.51) of EQj, and the bounds (2.55)–(2.56) from the one-block problem.
Significance
The upper bound is the half of the bounding scheme that is not automatic. Jensen's inequality needs only a mean; an upper bound on the expectation of a convex function needs a bounded support and, in the product form, independence. Together they give a certified interval for the optimal value of a two-stage problem, and repeated partitioning of the support shrinks that interval; this is the basis of the sequential approximation methods of §2.2.4 and of later codes. The dual-multiplier bound and the simple-recourse formulas are the pieces that make those intervals cheap to compute.
The results are classical and proved in the literature cited on the page. The one-dimensional Edmundson–Madansky inequality and the general extreme-point form of the upper bound (a measure on the extreme points reproducing the barycentre) are already formalized on Prove2Me in the Introduction to Stochastic Programming series, as is the partition Jensen bound. The product form for independent components is not: deriving it from the extreme-point form requires constructing the product kernel, which is the content of this mission. The recourse properties (b), (d), (e) for a general distribution with finite second moments, the dual-multiplier bound and the simple-recourse formulas are not formalized anywhere known to this mission.
Difficulty
The obvious argument inducts on the dimension, applying the one-dimensional inequality in one coordinate while the others are held fixed. That step needs the conditional law of the remaining coordinates given the first to be their unconditional law, i.e. independence expressed as a product decomposition of the joint law, and it needs φ with one coordinate replaced by an endpoint to remain convex on the lower-dimensional box and integrable. For dependent components the inequality is false with these weights: on [0,1]2 with means (21,21) and φ(x,y)=(x−y)2, the product law gives 21 while mass 21 at (1,0) and at (0,1) gives 1. The book's remark that the product law is extremal among all laws on Ξ with the given mean fails for this reason when m≥2, and is not part of this mission.
For the recourse properties the difficulty is bookkeeping: Q is an extended-real optimal value, and finiteness, measurability in ω and integrability must be derived from complete recourse, dual feasibility and the moment hypothesis rather than assumed.
Formalization scope
Vectors are functions from finite index types to R (ι → ℝ), matrices are Mathlib Matrix, and random data live on a probability space (Ω, P). The recourse cost is an EReal infimum over the feasible set, so infeasibility gives +∞ and unboundedness −∞ exactly as on p. 39; theorems that integrate it carry complete recourse and dual feasibility, which make it finite. The expected recourse function integrates the real part of the recourse cost. Independence of the components is ProbabilityTheory.iIndepFun; the box is Set.pi univ (fun j => Icc (a j) (b j)), with aj<bj, and values in the box are required almost surely. The upper bound is the explicit sum over Boolean vertex labels of products of the weights (2.32); no abstract extremal measure is used.
Conventions fixed where the page is silent or ambiguous:
Properties (b), (d), (e) are stated on all of Rn1: under the standing complete-recourse assumption K2=Rn1. "Convex piecewise linear" is rendered as a maximum of finitely many affine functions.
The book's hypothesis of finite second moments in (e) is kept as stated, componentwise.
The book writes Q for both Q(x,ξ) and Q(x), and reuses Q~, ψ~ for different functions in (2.27) and (2.30)–(2.31); the Lean names are recourseCost, expectedRecourse and dualLowerBound.
In (2.51) a conditional mean on a null event is 0 in Lean; it always appears multiplied by that event's probability, so the formula is unchanged.
In (2.56) the minimum is a real infimum over the nonempty first-stage feasible set; attainment is not claimed.
No constant of the chapter is hidden behind O(⋅); all bounds are explicit.
A goal stated for affine φ (where it is an equality), or with ξ^ allowed to be any discrete law with the right mean, would be trivial or a different theorem; the weights are the products of (2.32), and independence of the components is a hypothesis.
A complete development needs: finite-dimensional LP duality with extended-real values (reusable across all recourse missions), measurability and integrability of optimal-value functions, the conditional-independence step for product measures, and the one-dimensional chord inequality. The partitioned upper bound (2.37) and the discrete reformulation (2.21), (2.28) are natural follow-up statements on the same definitions.
Selected references
P. Kall, A. Ruszczyński, K. Frauendorfer, "Approximation Techniques in Stochastic Programming", in Yu. Ermoliev and R. J-B Wets (eds.), Numerical Techniques for Stochastic Optimization, Springer Series in Computational Mathematics 10, Springer 1988, Ch. 2, pp. 33–64. https://doi.org/10.1007/978-3-642-61370-8
A. Madansky, "Bounds on the expectation of a convex function of a multivariate random variable", Annals of Mathematical Statistics 30 (1959), 743–746. https://doi.org/10.1214/aoms/1177706203
R. J-B Wets, "Stochastic programs with fixed recourse: the equivalent deterministic program", SIAM Review 16 (1974), 309–339. https://doi.org/10.1137/1016053
K. Frauendorfer, "Solving SLP recourse problems with arbitrary multivariate distributions — the dependent case", Mathematics of Operations Research 13 (1988), 377–394. https://doi.org/10.1287/moor.13.3.377
Introduction to the Scenario Approach I: The Violation Distribution of the Scenario SolutionTextbook
Motivation
Many design problems in control, finance and operations research are convex programs with uncertain constraints: a decision θ must satisfy θ∈Θδ for a parameter δ that is not known in advance. Enforcing the constraint for every possible δ (robust optimization) is often intractable or too conservative, and a chance-constrained formulation needs the distribution of δ, which in practice is rarely known. The scenario approach replaces the uncertain constraint by the constraints of N observed samples δ1,…,δN and solves the resulting ordinary convex program. The question it answers is how much of the unseen uncertainty the resulting decision still violates.
The answer, the generalization theorem of the scenario approach, is distribution-free: the probability that the scenario solution violates more than a fraction ε of the uncertainty is bounded by a binomial tail that depends only on N and on the number d of decision variables. This mission formalizes that theorem as it is presented in Chapters 3 and 5 of Campi and Garatti's textbook Introduction to the Scenario Approach (SIAM/MOS 2018), the first mission of a series on the book.
Timeline. Calafiore and Campi introduced scenario programs and bounded the violation of their solutions through the count of support constraints (Math. Program. 2005; IEEE TAC 2006). Campi and Garatti proved in 2008 that the binomial-tail bound of Theorem 3.7 holds for every convex scenario program under existence and uniqueness of the solution, and that it is attained with equality by fully supported problems (SIAM J. Optim. 2008), which settled the tightness question. The textbook (DOI 10.1137/1.9781611975444) presents the theorem with a complete proof for fully supported problems in the plane.
Setting
Fix a cost vectorc∈Rd, a domainΘ⊆Rd, a measurable space Δ of uncertainty instances with a probability P, and a constraint setΘδ⊆Rd for each δ∈Δ.
The violation of a decision θ (Definition 3.1) is V(θ)=P{δ∈Δ:θ∈/Θδ}, the probability that θ fails the constraint of a fresh instance.
For a sample (δ1,…,δm), the scenario program is
θ∈ΘmincTθsubject toθ∈i=1⋂mΘδi.
A solution is a feasible point of least cost. With m=N i.i.d. samples its solution is denoted θ∗; it is a random vector, a function of the sample, and V(θ∗) is a random variable in [0,1].
Assumption 3.4 (convexity):Θ and every Θδ are convex and closed. Assumption 3.6 (existence and uniqueness): for every m and every sample, the program with m constraints has exactly one solution.
A constraint is a support constraint (Definition 5.1) if its removal improves the solution. A problem is fully supported (Definition 5.4) if for every m≥d the program with m constraints has, with probability 1, exactly d support constraints.
Formalization targets
Goal: Theorem 3.7
For 1≤d≤N and every ε∈[0,1], under Assumptions 3.4 and 3.6,
PN{V(θ∗)>ε}≤i=0∑d−1(iN)εi(1−ε)N−i.
The right-hand side is the upper tail of a Beta(d,N−d+1) distribution. The statement leaves P, Θ and the constraint family completely unspecified beyond the two assumptions.
Milestones
Helly's lemma (Lemma 5.3), referenced from the platform in its d-dimensional form.
Theorem 5.2: for every m and every sample, a convex scenario program has at most d support constraints.
Eq. (5.3): for a fully supported problem with d=N=2, P2{V(θ∗)>ε}=1−ε2.
Eq. (5.2): for fully supported problems, Theorem 3.7 holds with equality.
Eqs. (3.5)–(3.6): the bound is the Beta(d,N−d+1) distribution function (a published incomplete-beta identity).
Theorem 1.3: if N≥ε2(lnβ1+d−1), then V(θ∗)≤ε with probability at least 1−β.
Significance
Theorem 3.7 is what makes the scenario approach usable as a design method: it certifies the reliability of a decision computed from data without any knowledge of the data-generating distribution, requiring only independence of the samples. Theorems 3.8 and 1.3 are its two most used consequences, an expected-violation bound and an explicit sample size, and later chapters of the book (constraint removal, the FAST algorithm, empirical-cost results) build on the same statement. Equality for fully supported problems shows that the bound cannot be improved for any d and N.
The theorem is proved in the literature; it has no machine-checked proof. A formalization produces, beyond the result itself, a reusable library of scenario programs, violation probabilities and support constraints on which the rest of the series (constraint removal, nonconvex support sets) can be stated, and it checks the measure-theoretic content that the book deliberately leaves aside ("measurability issues are glossed over throughout", p. 33).
Difficulty
The deterministic part, at most d support constraints, is a short consequence of Helly's theorem. The probabilistic part is where the obvious approach fails. A uniform-convergence argument over all θ (Vapnik–Chervonenkis theory, footnote 11 of the book) gives bounds of the wrong order and can be vacuous, because it ignores that only the solution matters. The sharp bound is an exact statement about the law of V(θ∗), not a union bound, and problems with fewer than d support constraints, or with degenerate configurations of constraints, must be shown to be no worse than fully supported ones; the book treats the general case only in the plane and refers to Campi & Garatti 2008 for general d. Handling the null sets and the exchangeability of the samples under the product measure is a substantial part of the work.
Formalization scope
Decisions live in EuclideanSpace ℝ (Fin d); the cost is inner ℝ c θ. A sample of size m is ω : Fin m → Δ with law Measure.pi (fun _ : Fin m => P), and P is a probability measure.
The violation is the real number (P {δ | θ ∉ Θδ δ}).toReal; probabilities of events over the sample are compared in [0,∞] through ENNReal.ofReal.
The solution θ∗ is a function θstar : (Fin N → Δ) → EuclideanSpace ℝ (Fin d) together with the hypothesis that θstar ω solves the program for every sample; it is never an arbitrary map.
Assumption 3.6 is stated for every m including m=0 (a unique minimizer on Θ itself) and for every sample, as on the page.
Hypotheses the page leaves implicit are explicit: the constraint relation {(θ,δ):θ∈Θδ} is jointly measurable and θstar is measurable (the book's p. 33 convention); ε∈[0,1]; d≥1.
A support constraint is one whose removal leaves a feasible point of strictly smaller cost than the solution; the count is a Finset.card over Fin m.
Theorem 3.8 asserts integrability of V(θ∗) together with the bound, so it cannot hold through the convention that a non-integrable function integrates to 0. Theorem 1.3's own sentence omits the assumptions; they are added as in §3.2.1, where it is derived from Theorem 3.7.
A statement in which θ∗ is any feasible point of the program, or merely a measurable function of the sample, is false and does not count as a formalization of Theorem 3.7; nor does one in which Assumption 3.6 is weakened to almost every sample. Contributions of general infrastructure are welcome: exchangeability arguments for product measures, the binomial–beta identity, and Helly-type counting lemmas are reusable well beyond this mission.
M. C. Campi, S. Garatti, The exact feasibility of randomized solutions of uncertain convex programs, SIAM Journal on Optimization 19(3), 2008. https://doi.org/10.1137/07069821X
G. Calafiore, M. C. Campi, Uncertain convex programs: randomized solutions and confidence levels, Mathematical Programming 102, 2005. https://doi.org/10.1007/s10107-003-0499-y
G. Calafiore, M. C. Campi, The scenario approach to robust control design, IEEE Transactions on Automatic Control 51(5), 2006. https://doi.org/10.1109/TAC.2006.875041
E. Helly, Über Mengen konvexer Körper mit gemeinschaftlichen Punkten, Jahresbericht der DMV 32, 1923.
Random Gradient-Free Minimization of Convex Functions II: Random Gradient Descent for Smooth and Strongly Convex ProblemsResearch Paper
Motivation
Many optimization problems in engineering, simulation-based design and machine learning give access to the objective only through its values: the function is computed by a black-box code, and derivatives are unavailable or too expensive to program. Zeroth-order (derivative-free) methods address this setting. Classical derivative-free methods (pattern search, Nelder–Mead, model-based trust regions) come with weak or no global complexity guarantees for convex problems.
Nesterov and Spokoiny (Found. Comput. Math. 17 (2017) 527–566) showed that replacing the gradient by a finite difference along a random Gaussian direction yields methods whose expected complexity is that of the corresponding gradient method multiplied by a factor proportional to the dimension. Their paper is a standard reference for zeroth-order convex optimization and for Gaussian smoothing, and its oracle and analysis are reused in bandit convex optimization, zeroth-order stochastic optimization (e.g. Ghadimi–Lan 2013) and derivative-free reinforcement learning.
This mission concerns Section 5 of the paper: the random gradient methodRGμ for smooth convex functions and its linear rate for strongly convex ones.
Setting
Let E be a real inner product space of finite dimension n, with norm ∥⋅∥. (The paper works with a space carrying an operator B=B∗≻0 and norm ∥x∥=⟨Bx,x⟩1/2; choosing ⟨B⋅,⋅⟩ as the inner product gives exactly this setting, and the dual norm ∥⋅∥∗ becomes the norm of the Riesz representative.)
A function f:E→R belongs to C1,1(E) with constant L1 if it is differentiable and ∥∇f(x)−∇f(y)∥≤L1∥x−y∥ for all x,y. It is strongly convex with parameter τ>0 if f(y)≥f(x)+⟨∇f(x),y−x⟩+2τ∥y−x∥2 for all x,y.
Let u be a standard Gaussian vector of E (coordinates in any orthonormal basis are independent N(0,1)). The Gaussian approximation of f with parameter μ≥0 is fμ(x)=Euf(x+μu), and the moments are Mp=Eu∥u∥p. The random gradient-free oracle returns, for a sampled direction u,
Both bounds are one theorem with one proof in the paper, so the goal states their conjunction, with every constant as printed.
Milestones
The milestones are the results the paper's proof of Theorem 8 rests on, in attack order:
Lemma 1 (p. 534): Mp≤np/2 for p∈[0,2] and np/2≤Mp≤(p+n)p/2 for p≥2.
Theorem 3.1, (32) (p. 537): Eu∥g0(x)∥∗2≤(n+4)∥∇f(x)∥∗2 at a point of differentiability.
Theorem 4.2, (35) (p. 538): Eu∥gμ(x)∥∗2≤2μ2L12(n+6)3+2(n+4)∥∇f(x)∥∗2, and the same with 8μ2 for g^μ.
Eq. (21) (pp. 534–535): for μ>0, fμ is differentiable with ∇fμ(x)=EuB−1gμ(x).
Eq. (25) (p. 535): Eu⟨∇f(x),u⟩u=∇f(x), the μ=0 counterpart.
Convexity of fμ (p. 533) and Eq. (11): f≤fμ for convex f.
Theorem 1, (19) (p. 534): ∣fμ(x)−f(x)∣≤2μ2L1n.
Significance
The result. Theorem 8 shows that a method using two function values per iteration reaches accuracy ϵ on a smooth convex problem in O(ϵnL1∥x0−x∗∥2) iterations, and in O(τnL1lnϵL1∥x0−x∗∥2) iterations under strong convexity, provided μ is small enough. This is n times the complexity of the deterministic gradient method, which is the natural price for replacing an n-dimensional gradient by one directional estimate. The strongly convex bound makes explicit the bias floor 21L1δμ caused by the finite-difference step, and shows that it vanishes for the limiting method RG0.
Formalizing it. The result is proved in the paper; nothing here is open. To our knowledge none of it has a machine-checked proof. A formalization produces a reusable Gaussian-smoothing layer on Mathlib's stdGaussian (moments of the Gaussian norm, differentiation of fμ under the integral, variance bounds of random oracles) and a complete expected-complexity proof of a randomized first-order method, in which the probabilistic structure (independent directions, iterates depending only on past directions, tower property) has to be handled explicitly.
Difficulty
The deterministic part of the argument is the textbook analysis of gradient descent. The difficulty is in the Gaussian facts it uses. The obvious bound on the oracle's second moment, E⟨∇f(x),u⟩2∥u∥2≤∥∇f(x)∥2M4≤(n+4)2∥∇f(x)∥2, loses a factor of n and would give a quadratic dependence on dimension; the (n+4) of (32) needs a sharper computation. The moment bounds of Lemma 1 for non-integer p and the differentiation under the integral in (21) are measure-theoretic steps that Mathlib does not package. Finally, the step from per-iteration inequalities to bounds on ϕk requires conditioning on the past directions, which must be set up on a probability space carrying the whole sequence u0,u1,….
Formalization scope
E is an arbitrary finite-dimensional real inner product space with MeasurableSpace and BorelSpace, n is Module.finrank ℝ E, and ∇f is Mathlib's gradient. Expectations over u are Bochner integrals against ProbabilityTheory.stdGaussian E. A run of RGμ lives on a probability space (Ω,P): measurable directions uk, jointly independent (iIndepFun) with law stdGaussian E, iterates with x0 deterministic and the update holding for every k and outcome. ϕk is ∫ ω, f (x k ω) ∂P. The oracle is defined by cases, with f′(x,u)u at μ=0 (f′(x,u) the one-sided directional derivative of Eq. (23), a Filter.limUnder, which equals fderiv ℝ f x u for differentiable f), so the goal covers every μ≥0 as the paper claims. L1 and τ are any constants satisfying the defining inequalities. The standing assumptions of Section 5 (convexity, a global minimizer x∗, n≥2) and L1>0 are explicit hypotheses; n≥2 is needed for the constant 9/25.
A trivializing formalization is ruled out: the oracle is the random finite difference along i.i.d. standard Gaussian directions, not the true gradient (which would be deterministic gradient descent), and every expectation in the statements is of a quantity that is integrable under the stated hypotheses, so no bound holds through a junk value of a non-integrable integral.
A complete development needs Gaussian moment computations in finite dimension, differentiation under the integral sign for fμ, the variance bounds of the oracles, and a conditional-expectation argument for the iteration. The smoothing layer is reusable for the companion missions on random search for nonsmooth problems and on the accelerated random method, and for other zeroth-order methods. Contributions of any of the milestones, of general Gaussian-integrability lemmas, or of alternative proofs are welcome.
Selected references
Yu. Nesterov, V. Spokoiny, Random Gradient-Free Minimization of Convex Functions, Foundations of Computational Mathematics 17(2):527–566, 2017. https://doi.org/10.1007/s10208-015-9296-2
S. Ghadimi, G. Lan, Stochastic First- and Zeroth-Order Methods for Nonconvex Stochastic Programming, SIAM Journal on Optimization 23(4):2341–2368, 2013. https://doi.org/10.1137/120880811
Random Gradient-Free Minimization of Convex Functions I: Random Search for Nonsmooth Convex ProblemsResearch Paper
Motivation
Many optimization problems in engineering, simulation-based design and machine learning give access to the values of an objective function but not to its gradient: the function is computed by a black-box program, by a simulator, or by a model whose derivatives are unavailable or too expensive. Zeroth-order (or derivative-free) methods use only function values. Classical direct-search methods of this kind usually come without complexity bounds.
Nesterov and Spokoiny (Found. Comput. Math. 17 (2017) 527–566) showed that a very simple randomized scheme has explicit, dimension-dependent worst-case complexity bounds. The idea is to replace the gradient by a finite difference of f along a random Gaussian direction. The resulting oracle is an unbiased estimate of the gradient of a smoothed version of f. Their analysis is the reference point for the later literature on zeroth-order stochastic optimization, bandit convex optimization and gradient-free training.
This mission covers the paper's result for nonsmooth convex problems over a closed convex set: the projected random search method RSμ and its convergence bound, Theorem 6.
Setting
Let E be a real inner product space of finite dimension n, with norm ∥⋅∥. (The paper works with a space carrying a positive definite operator B and the norm ⟨Bx,x⟩1/2. This is the same thing as an arbitrary finite-dimensional inner product space, with B encoding the inner product, and the development is written in that generality.)
A function f:E→R is Lipschitz continuous with constant L0≥0 if ∣f(x)−f(y)∣≤L0∥x−y∥ for all x,y. The paper calls this class C0,0(E) and writes L0(f) for the constant.
Let u be a standard Gaussian vector in E: its coordinates in any orthonormal basis are independent N(0,1) variables. For μ≥0 the Gaussian smoothing of f is
fμ(x)=Euf(x+μu),
and the Gaussian moments are Mp=Eu∥u∥p.
For μ>0 the random gradient-free oracle at x draws u and returns the vector
gμ(x)=μf(x+μu)−f(x)u.
It costs two function values.
The problem is
f∗=x∈Qminf(x),
where Q⊆E is closed and convex, f is convex and Lipschitz, and x∗∈Q is a minimizer. With πQ the Euclidean projection onto Q, positive steps h0,h1,… and a starting point x0∈Q, the random search methodRSμ iterates
xk+1=πQ(xk−hkgμ(xk)),
drawing a fresh independent Gaussian direction uk at every iteration. The iterates are random. Write ϕk=Ef(xk) and SN=∑k=0Nhk.
The step sizes, the smoothing parameter and the horizon are left free, so every step-size rule in the paper follows from this one inequality. The constants are the paper's.
Milestones
The facts about smoothing and the oracle on which the goal rests, in the paper's order:
Lemma 1: Mp≤np/2 for p∈[0,2] and np/2≤Mp≤(p+n)p/2 for p≥2.
Theorem 1 (18): ∣fμ(x)−f(x)∣≤μL0n1/2.
Convexity of fμ for convex f.
Eq. (11): fμ≥f for convex f.
Eq. (21): ∇fμ(x)=Eugμ(x) for μ>0.
Theorem 4.1 (34): Eu∥gμ(x)∥2≤L02(n+4)2.
Theorem 2 (μ≥0): f(y)≥f(x)−μL0n1/2+⟨∇fμ(x),y−x⟩ for all y, where at μ=0 the vector is the limiting ∇f0(x)=Eu[f′(x,u)u] of Eq. (24).
Significance
Theorem 6 shows that a method using only function values, with no subgradient, solves nonsmooth convex problems with the classical projected-subgradient guarantee. Two things change: L02 is multiplied by (n+4)2, and a bias μL0n1/2 appears, which can be made as small as desired. With suitable μ, hk and N an ϵ-accurate expected value is reached in O(n2L02R2/ϵ2) oracle calls. The factor n2 quantifies the cost of not having gradients. The same analysis carries over to stochastic objectives (the paper's Theorem 7).
The results are proved in the paper. As far as is known, none of them has a machine-checked proof. The mission produces a Lean development of Gaussian smoothing on an arbitrary finite-dimensional inner product space: the moment bounds, the approximation, convexity and gradient identities, and the oracle variance bound. On top of it sits the full convergence theorem for a randomized projected method, stated for the actual random process rather than for an idealized expectation recursion. The smoothing layer is reusable: the same facts underlie the smooth and accelerated random methods of the same paper and most Gaussian-smoothing analyses in zeroth-order optimization.
Difficulty
A plain subgradient analysis does not apply. The vector gμ(xk) is not a subgradient of f, nor an unbiased estimate of one. It is an unbiased estimate of the gradient of a different function, fμ, and its second moment grows with the dimension. The argument therefore has to move between f and fμ at exactly the right places, using properties of fμ that hold for every nonsmooth Lipschitz f.
Those properties are genuinely analytic. Differentiating fμ requires differentiating a Gaussian integral of a function that need not be differentiable. The moment bounds need estimates of E∥u∥p for real p. In the probabilistic part, xk depends on u0,…,uk−1, and each one-step estimate has to be integrated using the independence of uk from the past. Mathlib provides the standard Gaussian measure and independence, but no Gaussian smoothing, no projection onto convex sets and no conditional-expectation argument for this kind of recursion.
Formalization scope
The space is E with [NormedAddCommGroup E] [InnerProductSpace ℝ E] [FiniteDimensional ℝ E] [MeasurableSpace E] [BorelSpace E], and n is Module.finrank ℝ E. No lower bound on n is assumed. The Gaussian is ProbabilityTheory.stdGaussian E, and expectations are Bochner integrals against it. fμ is the definition smoothing, Mp is moment (with real exponent Real.rpow), and gμ is oracle.
The projection is the relation IsMetricProjection Q y z (z∈Q and z is a nearest point of Q to y). The run is the predicate IsRandomSearchRun: directions uk:Ω→E on a probability space (Ω,P), measurable, mutually independent (iIndepFun) and each with law stdGaussian E; a deterministic x0∈Q; and the update above for every k and every outcome.
ϕk is ∫f(xk)dP. The Lipschitz constant L0≥0 is any constant satisfying the Lipschitz inequality. It is an explicit hypothesis, because the paper's bound uses L0(f), which presupposes f∈C0,0(E). The smoothing parameter satisfies μ>0 and every step satisfies hk>0.
Two trivializing formalizations are ruled out. First, an expectation of a non-integrable function would be 0 as a Bochner integral; Lipschitz continuity of f makes every expectation in the mission integrable, and no statement relies on the junk value. Second, a run whose directions are not independent standard Gaussians, or whose update uses a subgradient instead of the finite difference, is a different theorem (the projected subgradient method). The run predicate fixes the paper's process exactly. A run exists for every closed Q containing x0 (on the countable product of Gaussians), so the goal is not vacuous.
A complete development needs:
Gaussian integration by parts, or differentiation under the integral, for Lipschitz integrands;
moment estimates for the standard Gaussian norm;
existence and nonexpansiveness of projections onto closed convex sets;
an expectation argument for the random recursion.
The smoothing lemmas, the moment bounds and the projection facts are reusable beyond this mission. Contributions are welcome at every level: proofs of the milestones, general lemmas about stdGaussian and projections, and alternative proofs of Lemma 1 (for example through the chi distribution).
Selected references
Yu. Nesterov, V. Spokoiny, Random Gradient-Free Minimization of Convex Functions, Foundations of Computational Mathematics 17(2):527–566, 2017. https://doi.org/10.1007/s10208-015-9296-2
A. D. Flaxman, A. T. Kalai, H. B. McMahan, Online convex optimization in the bandit setting: gradient descent without a gradient, SODA 2005. https://arxiv.org/abs/cs/0408007
J. C. Duchi, M. I. Jordan, M. J. Wainwright, A. Wibisono, Optimal rates for zero-order convex optimization: the power of two function evaluations, IEEE Trans. Inf. Theory 61(5):2788–2806, 2015. https://arxiv.org/abs/1312.2139