Primal-dual certificates give an -approximation
ProvedPrimalDualOnline.SetCover.primalDual_certificate_boundThe certificate half of Theorem 2.6 of the source. Let be a primal-dual certificate for a set-cover instance: covers every element, is a dual packing, and every has a tight dual constraint . Then for every fractional cover ,
where is the maximum frequency of the instance, cast from to .
Because the bound is asserted against an arbitrary fractional cover, it holds in particular against an optimal one, so costs at most times the fractional optimum and hence at most times the integral optimum. The argument is a double count, isolated as its own milestone: tightness converts the cost of into a sum of element prices, each element being charged by at most chosen sets; set-cover weak duality then bounds the total price by the cost of .
The empty ground type is not excluded. When is empty, and the bound reads ; the tightness clause forces for every , so both sides are . Under these hypotheses happens exactly when is empty, since coverability gives every element frequency at least .
This is a statement about certificates, not about an algorithm. It does not assert that any particular procedure produces such a pair; the companion theorem that the primal-dual algorithm does so needs the algorithm defined and its termination and coverage proved, and is planned as a second wave. Until that wave lands, Theorem 2.6 should not be described as fully formalized.
Instance-bundled hypotheses. The problem's two standing assumptions - every set cost is nonnegative, and every element lies in at least one available set - are not loose hypotheses of this statement. They are fields of the SetCoverInstance argument, so the statement cannot be instantiated at data violating either.
import Definitions.Def_PrimalDualOnline_SetCover import Mathlib.Tactic
open PrimalDualOnline.SetCover
theorem PrimalDualOnline.SetCover.primalDual_certificate_bound
{E S : Type*} [Fintype E] [Fintype S] [DecidableEq E] [DecidableEq S]
(I : SetCoverInstance E S) (C : Finset S) (y : E → ℝ)
(hcert : IsPrimalDualCertificate I.sets I.cost C y)
(x : S → ℝ) (hx : IsFractionalCover I.sets x) :
coverCost I.cost C ≤ (maxFrequency I.sets : ℝ) * fractionalCost I.cost x := by sorryRead-back
What the Lean code literally says, in plain math · claude-opus-5
Read-backs: certificate bounds
Throughout, the shared vocabulary is expanded as follows. A set-cover instance on two types (elements) and (set indices) is a bundle of exactly four components:
- a family , i.e. a finite subset for each index ;
- a cost function ;
- a proof of nonnegative cost: ;
- a proof of coverability: .
Derived notions, all expanded inline in each section below:
where is formed by filtering the whole index type , is a cardinality in , and is a supremum in taken over all of — a supremum of an empty family, which is when is empty. Further:
sums only over the given finite index set ; sums over all of ; sums over all of .
PrimalDualOnline.SetCover.primalDual_certificate_bound
Binders and instance arguments. Universally quantified over arbitrary types and (implicit), with four typeclass arguments: finite, finite, equality on decidable, equality on decidable; either type may be empty. Decidable equality on is needed to form , the frequencies, and the covering sums; decidable equality on is required as an instance argument though no notion in the statement refers to it. Five explicit arguments, in order: a set-cover instance (carrying , , the proof , and the proof ); a finite index set ; a function ; then, after the certificate hypothesis, a function .
Hypotheses. Two, independent of each other:
- is a primal–dual certificate for , unfolding to the conjunction of
- ( covers );
- and ( is a dual packing, the inequalities holding at every index of );
- (exact tightness on ).
- is a fractional cover of , unfolding to together with . No upper bound is placed on any .
Conclusion.
with cast into . The dual vector occurs only in the hypothesis; it does not appear in the conclusion.
1. Nonnegativity of cost; every element in some set. Both are fields of the bundled argument , not loose hypotheses, so the statement cannot be instantiated at data violating either — the bundle cannot be formed without both proofs.
2. Logical redundancy.
- Nonnegativity of cost is derivable from the dual-packing part of hypothesis 1: for every , the left inequality holding because .
- Coverability is derivable twice over: from the covering conjunct of hypothesis 1 (a witness in is a witness in ), and independently from hypothesis 2 (if were empty the covering sum would be , contradicting ).
- Inside the certificate, the packing inequality at indices is implied by the tightness equality there, so those inequalities are only independent at indices outside .
- Nothing else is redundant: hypothesis 1 does not follow from hypothesis 2 or conversely, and , the covering conjunct, the tightness conjunct, and both halves of hypothesis 2 are otherwise independent.
Dropping the two bundled fields would leave the covered situations unchanged, since the remaining hypotheses force both properties.
3. Arbitrary or specific. The fractional cover is arbitrary: is universally quantified subject only to feasibility, so the inequality is asserted for every feasible separately; the least fractional cost is never mentioned, and no is claimed optimal. The cover is arbitrary subject to being part of a certificate — not claimed minimum-cost or minimal. The dual vector is arbitrary subject to being a dual packing tight on — not claimed to be of maximum value.
4. Cast from to . The cast occurs at the multiplier , computed in as a supremum of cardinalities over (empty supremum ) and cast to multiply the real . When the cast value is the claim reduces to
means all frequencies vanish or is empty; since coverability (bundled, and also implied by either hypothesis) gives for each , under these hypotheses exactly when is empty. The hypotheses then force each side: every is empty, so tightness gives for all and the left side is ; the right side is regardless of (which is then constrained only by , its covering inequalities being vacuous). The claim becomes .
5. Degenerate cases.
- empty. Covering and vacuous; ; tightness forces on ; both sides . is unconstrained beyond nonnegativity, and entirely unconstrained.
- empty. Then and for all , so hypothesis 2 is satisfiable only when is empty (and the bundled coverability field already forces this); all sums are empty and the conclusion is .
- empty. The covering conjunct is then unsatisfiable unless is empty; in that case both sides are .
- . The packing inequalities plus force for every covered , hence for all ; and , so the conclusion reads for every feasible , however large its entries.
- Individual zero-cost sets inside the certificate. For with , tightness forces and hence for all ; for with the packing inequality forces the same. Such indices contribute to the left side and to the right side whatever is.
- small or large. leaves ; larger weakens the claim. is a property of the whole family over all of ; nothing ties it to , to , or to the type cardinalities.
- Unbounded entries of the fractional cover. Entries may be arbitrarily large, making the right-hand side arbitrarily large; entries may also be , and every index of is summed over in . Since and , the right-hand side is always nonnegative.
- . Not applicable: the multiplier is the cast maximum frequency, not a free parameter.
Not asserted. No claim that is a minimum-cost cover, that is a minimum-cost fractional cover, or that is a maximum packing; the least-cover-cost and least-fractional-cost notions are not used, so nothing is said about the integral or fractional optimum as such. No claim that equals or bounds either side. No claim that a certificate or a fractional cover exists, and no claim that the hypotheses are jointly satisfiable. No tightness, attainment, reverse inequality, or strict inequality; no claim that is the smallest valid multiplier. Nothing about the indicator vector of being a fractional cover, nothing about algorithms or online arrival.
Confirmed by the mission captain (proposal self-audit).