Prove2Me
Navigate
DiscoverFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in
← Formalpedia

Actual polynomial-time SAT verification

Open
PvsNP.satVerifier_polytime

by alexcarter · Sep 13, 2026 · Mathlib 0df444a (Lean v4.33.1)

complexity-theoryformalizationp-vs-np

The explicit verifier is computed by a TM2 machine in time polynomial in the tagged input/certificate length.

Status: Known mathematics / implementation obligation awaiting formal proof.

Formal statement
import Definitions.Def_PvsNPFrontier

namespace PvsNP
theorem satVerifier_polytime : PolyTimeChecker satVerifier := by sorry
end PvsNP
Source
Sipser, Introduction to the Theory of Computation, second edition (2006), Theorem 7.37 and its proof pp. 276–281, Figures 7.38–7.40, Claim 7.41; https://users.math.cas.cz/~jerabek/teaching/mathlog/sipser-book.pdf; SAT-membership proof, with implementation-specific canonical parsing and sparse assignment obligations.
Read-back

What the Lean code literally says, in plain math · gpt-6-astra

The Boolean verifier described here satisfies C(R)C(R)C(R) for RRR equal to that verifier. Thus one existential machine and one natural-coefficient polynomial compute its output for every tagged pair (w,y)(w,y)(w,y) in a time bounded by that polynomial at ∣w∣+∣y∣|w|+|y|∣w∣+∣y∣, including parse failures and incorrect certificate lengths, without imposing a promise on the inputs. Here B={false,true}B=\{\mathrm{false},\mathrm{true}\}B={false,true}, B∗B^*B∗ is the set of all finite Boolean lists, including the empty list, and ∣w∣|w|∣w∣ is list length. Write C(R)C(R)C(R) for existence of such a machine and a polynomial p∈N[X]p\in\mathbb N[X]p∈N[X] that, for all w,y∈B∗w,y\in B^*w,y∈B∗, compute [R(w,y)][R(w,y)][R(w,y)] in at most p(∣w∣+∣y∣)p(|w|+|y|)p(∣w∣+∣y∣) steps from the list obtained by tagging every bit of www with the left injection into B⊔BB\sqcup BB⊔B, tagging every bit of yyy with the right injection, and concatenating those two lists. A machine in these assertions is a Mathlib TM2 stack machine with finitely many stack indices, instruction labels, and control states, a finite input-stack alphabet, designated input and output stacks, a program, and initial label and control state; its other stack alphabets need not be finite. Input and output alphabet bijections transport the specified encoded lists to the corresponding stack alphabets. Computation starts with only the input stack populated, and reaches a halted configuration with the specified output on the output stack, all other stacks empty, and the control state reset to its initial value. Time counts executions of whole TM2 statements, each of which may contain several stack operations. The parser parse⁡(w)\operatorname{parse}(w)parse(w) works as follows. Its outer recursion starts with fuel ∣w∣+1|w|+1∣w∣+1, returns the empty formula on an empty remainder even at fuel zero, and otherwise fails at fuel zero; with positive fuel it parses one clause from the current nonempty remainder using clause fuel equal to that remainder’s length plus one, then recurses on the returned suffix with outer fuel reduced by one. Clause parsing fails at fuel zero; with positive fuel it consumes [true,true][\mathrm{true},\mathrm{true}][true,true] as the end of an empty remaining clause, or parses one literal and recurses on its suffix with clause fuel reduced by one. Literal parsing requires an initial pair [false,b][\mathrm{false},b][false,b] for the sign. On the remainder rrr it starts data fuel ∣r∣+1|r|+1∣r∣+1: zero data fuel fails; with positive data fuel [true,false][\mathrm{true},\mathrm{false}][true,false] ends the digit sequence, while [false,d][\mathrm{false},d][false,d] contributes digit ddd and decreases fuel by one; all other cases fail. The collected digits are interpreted little-endian and accepted only if they equal the canonical binary digits of the resulting natural number. A parsed literal is that sign/index pair together with the suffix after its delimiter; any failed subparse makes the containing parse fail. Success of the outer parse requires consuming the complete input. The variable list V(F)V(F)V(F) is obtained by reading the indices of all literals in the flattened clause list in order and deleting duplicate occurrences while retaining the first occurrence of each index. The Boolean verifier on (w,y)(w,y)(w,y) first applies this parser to www, returning false on failure. For a parsed formula FFF, it returns false unless ∣y∣=∣V(F)∣|y|=|V(F)|∣y∣=∣V(F)∣; if the lengths agree, it evaluates FFF under the assignment that gives the jjjth variable in V(F)V(F)V(F) the jjjth bit of yyy, and gives every unlisted index false. More generally this assignment is formed by zipping V(F)V(F)V(F) with yyy, looking up an index in that truncated list of pairs, and using false when it is absent. A formula is a finite list of clauses, each clause a finite list of literals (b,j)∈B×N(b,j)\in B\times\mathbb N(b,j)∈B×N. Under an assignment τ:N→B\tau:\mathbb N\to Bτ:N→B, the literal (b,j)(b,j)(b,j) is true exactly when τ(j)=b\tau(j)=bτ(j)=b, a clause is true exactly when some literal in it is true, and a formula is true exactly when every clause is true. Thus an empty clause is false and an empty formula is true. The supplied body is admitted with sorry; no proof of this assertion is supplied there.

View graph

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me