Prove2Me
Navigate
DiscoverFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in
← Formalpedia

Final Flyspeck LP family and exact certificates

Open
KeplerMission.archive_lp_certificates

by Minghui · Sep 27, 2026 · Mathlib c5ea003 (Lean v4.30.0)

discrete-geometrykeplersphere-packing

Assume validity of the fixed nonlinear catalog. Verify the final Flyspeck LP family at revision 1ce0353008eba83d3c76ae9a25c3c242e4802d53: 19,715 graph-indexed trees and 43,078 terminal obligations. Every archive index must decode; every structural leaf must compile to its prescribed nonempty rational LP with valid addresses. Every contravening realization represented by the graph or its opposite, on each reached branch, must satisfy that exact LP at the defined geometric variable values. Every structural leaf, independently of geometric realizability, must have rational multipliers accepted by its exact infeasibility checker.

The source trees, refinements, variable meanings, rounded row templates, selected row indices and bound/infeasibility modes are fixed definition data. Solvers supply proofs and certificate multipliers. Branches are closed ordered-real comparisons with all children present; unary source consequence steps grant no new geometric fact. Structural coverage and rational checker soundness already have generic Lean proofs.

N⟹(FamilyWellFormed⁡∧RelaxationsSound⁡∧CertificatesAvailable⁡).\mathcal N\Longrightarrow (\operatorname{FamilyWellFormed}\land\operatorname{RelaxationsSound}\land\operatorname{CertificatesAvailable}).N⟹(FamilyWellFormed∧RelaxationsSound∧CertificatesAvailable).

Here the three predicates refer to the fixed source data, not freely chosen trees or programs. In bound mode the source row 12≤∑vL(∥v∥/2)12\le\sum_v L(\|v\|/2)12≤∑v​L(∥v∥/2) is included at its recorded integer scale; the 189 direct-infeasibility cases omit it. The complete family contains 32,028,980 row occurrences. This is a source-derived normalization of the completed verifier, not the historical basic LP family.

Source. Hales et al., A Formal Proof of the Kepler Conjecture (2017), §9, published pp.21–24, https://doi.org/10.1017/fmp.2017.1. Pinned formal_lp/hypermap/verify_all.hl; main/prove_flyspeck_lp.hl:43–52,263–348,483–523,856–1037; ineqs/lp_ineqs.hl:265–320; ineqs/lp_approx_ineqs.hl:190–218; all 39 final formal_lp/glpk/binary containers. Solovyev–Hales, Efficient Formal Verification of Bounds of Linear Programs, §§2–3. Blueprint Theorem8.40 and tame/linear_programming_results.hl identify the downstream exclusion theorem.

Preamble
import Definitions.Def_Kepler_MissionContracts
set_option autoImplicit false
Formal statement
namespace KeplerMission
theorem archive_lp_certificates : Nonlinear.CatalogValid → LPArchiveObligations := by sorry
end KeplerMission
Source
Hales et al. (2017), §9 pp.21–24, https://doi.org/10.1017/fmp.2017.1; Flyspeck@1ce0353008eba83d3c76ae9a25c3c242e4802d53, formal_lp/hypermap/verify_all.hl; main/prove_flyspeck_lp.hl:43–52,263–348,483–523,856–1037; ineqs/lp_ineqs.hl:265–320; all39 final formal_lp/glpk/binary containers; https://github.com/flyspeck/flyspeck/tree/1ce0353008eba83d3c76ae9a25c3c242e4802d53/formal_lp; Solovyev–Hales2011 §§2–3; Blueprint Theorem8.40.
Read-back

What the Lean code literally says, in plain math · gpt-6

Let C\mathcal CC be the fixed catalogue of records 000,…,538000,\ldots,538000,…,538, concatenating the six displayed lists of lengths 81,230,109,127,5,2881,230,109,127,5,2881,230,109,127,5,28. It has 580580580 occurrences with repetitions and covers all 539539539 numbered records: 488488488 have arity 666, 464646 arity 555, two arity 111, one arity 999, and two arity 101010. Each fixed record jjj specifies an arity njn_jnj​, a domain DjD_jDj​ and a conclusion QjQ_jQj​. In this catalogue each domain is the conjunction of its written closed-interval tests, with a bound triple (a,t,b)(a,t,b)(a,t,b) meaning a≤t≤ba\leq t\leq ba≤t≤b. The proposition CCC means exactly ∀j∈C ∀x∈Rnj, Dj(x)⇒Qj(x)\forall j\in\mathcal C\,\forall x\in\mathbb R^{n_j},\ D_j(x)\Rightarrow Q_j(x)∀j∈C∀x∈Rnj​, Dj​(x)⇒Qj​(x), retaining the fixed formula's strict or weak comparisons, disjunctions and implications. All endpoints and singleton intervals are included; an empty domain makes its implication vacuous. No geometric realizability, triangle inequality, nondegeneracy, sign or nonzero-denominator premise is added to the written domain. Repeated entries impose the same requirement again. Scalar expressions use total real arithmetic, so a/0=0a/0=0a/0=0, and natural powers, trigonometric functions and their total inverse functions. The custom square root is σ(t)=t\sigma(t)=\sqrt tσ(t)=t​ if t≥0t\geq0t≥0 and −−t-\sqrt{-t}−−t​ otherwise. The custom logarithm chooses a real zzz satisfying ez=te^z=tez=t when one exists and has no specified logarithm property for t≤0t\leq0t≤0. The custom two-argument angle is α(x,y)=arctan⁡(y/x)\alpha(x,y)=\arctan(y/x)α(x,y)=arctan(y/x) if ∣y∣<x|y|<x∣y∣<x, otherwise π/2−arctan⁡(x/y)\pi/2-\arctan(x/y)π/2−arctan(x/y) if y>0y>0y>0, otherwise −π/2−arctan⁡(x/y)-\pi/2-\arctan(x/y)−π/2−arctan(x/y) if y<0y<0y<0, and otherwise π\piπ, including α(0,0)=π\alpha(0,0)=\piα(0,0)=π. Inverse sine is clamped to ±π/2\pm\pi/2±π/2 outside [−1,1][-1,1][−1,1], and inverse cosine to 000 or π\piπ. The constant h−h_-h−​ chooses a real hhh with 6/5≤h<13/106/5\leq h<13/106/5≤h<13/10 and M(h)=L(h)M(h)=L(h)M(h)=L(h) if any exists, where h0=63/50h_0=63/50h0​=63/50, h+=6627/5000h_+=6627/5000h+​=6627/5000, M(h)=(2−h)(h−h+)(9h2−17h+3)/(5(2−1)(h+−1))M(h)=(\sqrt2-h)(h-h_+)(9h^2-17h+3)/(5(\sqrt2-1)(h_+-1))M(h)=(2​−h)(h−h+​)(9h2−17h+3)/(5(2​−1)(h+​−1)), and L(h)=(h0−h)/(h0−1)L(h)=(h_0-h)/(h_0-1)L(h)=(h0​−h)/(h0​−1) for h≤h0h\leq h_0h≤h0​ and 000 otherwise. Existence and uniqueness of that choice are not fields of the definition. The remaining named scalar helpers are the fixed displayed arithmetic and analytic functions; their names add no geometric assumptions. The ambient space is R3\mathbb R^3R3 with its Euclidean norm and distance. A set VVV is a packing exactly when distinct members have distance at least 222, with no nonemptiness or saturation requirement. Write B(a,r)={x:∥x−a∥<r}B(a,r)=\{x:\|x-a\|<r\}B(a,r)={x:∥x−a∥<r} and NV(a,r)=#(V∩B(a,r))N_V(a,r)=\#(V\cap B(a,r))NV​(a,r)=#(V∩B(a,r)), where this natural-number cardinality is defined as 000 if the intersection is infinite. Put w(t)=(63/25−t)/(63/25−2)=(63−25t)/13w(t)=(63/25-t)/(63/25-2)=(63-25t)/13w(t)=(63/25−t)/(63/25−2)=(63−25t)/13, A={x:2≤∥x∥≤63/25}A=\{x:2\leq\|x\|\leq63/25\}A={x:2≤∥x∥≤63/25} and S(s)=∑v∈sw(∥v∥)S(s)=\sum_{v\in s}w(\|v\|)S(s)=∑v∈s​w(∥v∥) for finite sets sss. Saturation means ∀x∈R3 ∃v∈V, ∥x−v∥<2\forall x\in\mathbb R^3\,\exists v\in V,\ \|x-v\|<2∀x∈R3∃v∈V, ∥x−v∥<2; it alone does not require separation. The finite-container condition on VVV is ∃c∈R ∀r≥1, NV(0,r)≤πr3/18+cr2\exists c\in\mathbb R\,\forall r\geq1,\ N_V(0,r)\leq\pi r^3/\sqrt{18}+cr^2∃c∈R∀r≥1, NV​(0,r)≤πr3/18​+cr2. The constant may depend on VVV and has no sign restriction. A finite hypermap HHH consists of a natural number ddd, darts {0,…,d−1}\{0,\ldots,d-1\}{0,…,d−1} and permutations e,n,fe,n,fe,n,f with e(n(f(a)))=ae(n(f(a)))=ae(n(f(a)))=a for every dart. Let Ea,Na,FaE_a,N_a,F_aEa​,Na​,Fa​ be its edge, node and face permutation-cycle orbits, including aaa, and let E,N,F\mathcal E,\mathcal N,\mathcal FE,N,F be the finite sets of distinct such orbits. Let K\mathcal KK be the finite set of distinct components reachable by zero or more applications of e,n,fe,n,fe,n,f. Incident faces at aaa are the distinct sets Ia={Fb:b∈Na}\mathcal I_a=\{F_b:b\in N_a\}Ia​={Fb​:b∈Na​}. Write Ta,Qa,Xa\mathcal T_a,\mathcal Q_a,\mathcal X_aTa​,Qa​,Xa​ for those incident faces of size 333, size 444, and size at least 555, respectively, and (pa,qa,xa)=(∣Ta∣,∣Qa∣,∣Xa∣)(p_a,q_a,x_a)=(|\mathcal T_a|,|\mathcal Q_a|,|\mathcal X_a|)(pa​,qa​,xa​)=(∣Ta​∣,∣Qa​∣,∣Xa​∣). A face list LLL is a finite ordered list of finite lists of natural labels. A face [v0,…,vk−1][v_0,\ldots,v_{k-1}][v0​,…,vk−1​] supplies the cyclic directed pairs (vi,vi+1 mod k)(v_i,v_{i+1\bmod k})(vi​,vi+1modk​); an empty face supplies none, and a singleton supplies a loop. The dart list concatenates these lists with multiplicities. Good means no repeated directed pair, every face nonempty, and each occurring (u,v)(u,v)(u,v) accompanied by (v,u)(v,u)(v,u); it imposes no further length, label-range, connectedness or planarity condition, and the empty list is Good. The list represents HHH if e2=ide^2=\mathrm{id}e2=id and there exists a labeling ℓ\ellℓ of darts by natural numbers such that ℓ(a)=ℓ(b)⇔b∈Na\ell(a)=\ell(b)\Leftrightarrow b\in N_aℓ(a)=ℓ(b)⇔b∈Na​, the map a↦(ℓ(a),ℓ(f(a)))a\mapsto(\ell(a),\ell(f(a)))a↦(ℓ(a),ℓ(f(a))) is injective, (ℓ(e(a)),ℓ(f(e(a))))=(ℓ(f(a)),ℓ(a))(\ell(e(a)),\ell(f(e(a))))=(\ell(f(a)),\ell(a))(ℓ(e(a)),ℓ(f(e(a))))=(ℓ(f(a)),ℓ(a)), every face of LLL is a cyclic rotation of [ℓ(a),ℓ(f(a)),…,ℓ(f∣Fa∣−1(a))][\ell(a),\ell(f(a)),\ldots,\ell(f^{|F_a|-1}(a))][ℓ(a),ℓ(f(a)),…,ℓ(f∣Fa​∣−1(a))] for some dart aaa, and every dart has such a face in LLL. Representation alone permits repeating a face. The opposite hypermap has the same darts and permutations f∘n,n−1,f−1f\circ n,n^{-1},f^{-1}f∘n,n−1,f−1. The fixed archive has 19,71519{,}71519,715 strings; decoding splits at periods into nonempty faces and maps A through O to labels 000 through 141414. Empty strings, empty faces and other characters fail. Membership means equality to the decoded face list at some in-range index. Archive well-formedness requires successful decoding and Good at every index. For a,u,v∈R3a,u,v\in\mathbb R^3a,u,v∈R3 put Pa(u)=u−⟨u,a⟩a/∥a∥2P_a(u)=u-\langle u,a\rangle a/\|a\|^2Pa​(u)=u−⟨u,a⟩a/∥a∥2, using total division, and let θ\thetaθ be the unoriented Euclidean angle between Pa(u)P_a(u)Pa​(u) and Pa(v)P_a(v)Pa​(v). Define Z(a,u,v)=0Z(a,u,v)=0Z(a,u,v)=0 if a=0a=0a=0 or either projection is zero; otherwise it is 2π−θ2\pi-\theta2π−θ when det⁡(a,u,v)<0\det(a,u,v)<0det(a,u,v)<0 and θ\thetaθ otherwise, including zero determinant with nonzero projections. For a finite set sss, standard neighbors of a member vvv are {u∈s:u≠v, ∥u−v∥≤63/25}\{u\in s:u\neq v,\ \|u-v\|\leq63/25\}{u∈s:u=v, ∥u−v∥≤63/25}, and contact neighbors are {u∈s:u≠v, ∥u−v∥=2}\{u\in s:u\neq v,\ \|u-v\|=2\}{u∈s:u=v, ∥u−v∥=2}; a point outside sss has no neighbors. For either relation, the successor of www around vvv is www if the neighbor set is exactly {w}\{w\}{w}; otherwise it is a chosen neighbor u≠wu\neq wu=w minimizing Z(v,w,u)Z(v,w,u)Z(v,w,u) among neighbors other than www. If no such neighbor exists the choice has no specified property; minimizers need not be unique. The dart angle is Z(v,w,successor⁡(v,w))Z(v,w,\operatorname{successor}(v,w))Z(v,w,successor(v,w)) when vvv has more than one neighbor and 2π2\pi2π otherwise. Being surrounded means that membership in sss implies a nonempty neighbor set and a dart angle strictly less than π\piπ at every neighbor. Outside sss this implication is vacuous. A contravening configuration is a finite set sss of pairwise separated points in the closed annulus 2≤∥v∥≤63/252\leq\|v\|\leq63/252≤∥v∥≤63/25, with score S(s)=∑v∈s(63−25∥v∥)/13>12S(s)=\sum_{v\in s}(63-25\|v\|)/13>12S(s)=∑v∈s​(63−25∥v∥)/13>12, and with score at least that of every finite packing in that annulus, without restricting competitors' cardinality. It must also have 131313, 141414 or 151515 members; every member must be surrounded for standard neighbors; and every member must either be surrounded for contact neighbors or have norm exactly 222. A placement of HHH is any map ppp from darts into R3\mathbb R^3R3, with center set sp={p(a):a a dart}s_p=\{p(a):a\text{ a dart}\}sp​={p(a):a a dart}, counting distinct images once. It realizes the standard fan when p(a)=p(b)⇔b∈Nap(a)=p(b)\Leftrightarrow b\in N_ap(a)=p(b)⇔b∈Na​, each p(e(a))p(e(a))p(e(a)) is a standard neighbor of p(a)p(a)p(a), every ordered standard-neighbor pair (v,w)(v,w)(v,w) in sps_psp​ comes from exactly one dart aaa with p(a)=v,p(e(a))=wp(a)=v,p(e(a))=wp(a)=v,p(e(a))=w, p(e(e(a)))=p(a)p(e(e(a)))=p(a)p(e(e(a)))=p(a), and p(e(n(a)))p(e(n(a)))p(e(n(a))) equals the chosen standard successor of p(e(a))p(e(a))p(e(a)) around p(a)p(a)p(a). A contravening realization is a standard-fan realization whose center set is a contravening configuration; it does not additionally assume tameness or an involutive edge permutation on darts. For L,H,pL,H,pL,H,p, the position map q:N→R3q:\mathbb N\to\mathbb R^3q:N→R3 is chosen as follows. If LLL represents HHH, choose a witnessing labeling and return p(a)p(a)p(a) for the first dart, in the order 0,…,d−10,\ldots,d-10,…,d−1, with label vvv, or 000 if the label is missing. If this representation fails but LLL represents the opposite, choose a labeling for the opposite and negate the first Cartesian coordinate of the same first-dart lookup in ppp. If neither representation holds return 000 for every label. The direct representation takes priority if both hold. These are fixed choices, not universal quantification over all representing labelings. For a face list L′L'L′ and pair a=(u,v)a=(u,v)a=(u,v), take the pair-list of the first face containing aaa, defaulting to the empty list. Let a+,a−a^+,a^-a+,a− be its next and previous pairs at the first occurrence of aaa, defaulting to aaa if lookup fails, and let a−−=(a−)−a^{--}=(a^-)^-a−−=(a−)−. Put za=Z(q(u),q(v),q((a−)1))z_a=Z(q(u),q(v),q((a^-)_1))za​=Z(q(u),q(v),q((a−)1​)), s0=3arccos⁡(1/3)−πs_0=3\arccos(1/3)-\pis0​=3arccos(1/3)−π, λ(t)=(63−25t)/13\lambda(t)=(63-25t)/13λ(t)=(63−25t)/13 for t≤63/25t\leq63/25t≤63/25 and 000 otherwise, and Rv=1+(s0/π)(1−λ(∥q(v)∥))R_v=1+(s_0/\pi)(1-\lambda(\|q(v)\|))Rv​=1+(s0​/π)(1−λ(∥q(v)∥)). Node variables yn, ln, rho evaluate to ∥q(v)∥,λ(∥q(v)∥),∣Rv∣\|q(v)\|,\lambda(\|q(v)\|),|R_v|∥q(v)∥,λ(∥q(v)∥),∣Rv​∣. Dart variables azim, azim2, azim3 evaluate to za,za+,za−z_a,z_{a^+},z_{a^-}za​,za+​,za−​; rhazim, rhazim2, rhazim3 evaluate to ∣Ra1∣za,∣R(a+)1∣za+,∣R(a−)1∣za−|R_{a_1}|z_a,|R_{(a^+)_1}|z_{a^+},|R_{(a^-)_1}|z_{a^-}∣Ra1​​∣za​,∣R(a+)1​​∣za+​,∣R(a−)1​​∣za−​. Dart variables ye and y6 both give ∥q(u)−q(v)∥\|q(u)-q(v)\|∥q(u)−q(v)∥; y1,y2,y3 give ∥q(u)∥,∥q(v)∥,∥q((a−)1)∥\|q(u)\|,\|q(v)\|,\|q((a^-)_1)\|∥q(u)∥,∥q(v)∥,∥q((a−)1​)∥; y4 and y9 both give the length of a+a^+a+; y5 gives the length of a−a^-a−; y7 gives ∥q((a−−)1)∥\|q((a^{--})_1)\|∥q((a−−)1​)∥; y8 gives the length of a−−a^{--}a−−; and y4prime gives ∥q(v)−q((a−)1)∥\|q(v)-q((a^-)_1)\|∥q(v)−q((a−)1​)∥. For a pair-list FFF, its face sol variable is ∣∑a∈F(za−π)+2π∣|\sum_{a\in F}(z_a-\pi)+2\pi|∣∑a∈F​(za​−π)+2π∣, and its tau variable is ∣∑a∈FzaRa1+(π+s0)(2−∣F∣)∣|\sum_{a\in F}z_aR_{a_1}+(\pi+s_0)(2-|F|)|∣∑a∈F​za​Ra1​​+(π+s0​)(2−∣F∣)∣, counting list multiplicities. A node address is valid if its label occurs in L′L'L′. For dart kinds ye,y1,y2,y6, both endpoint labels must occur but the pair need not; all other dart kinds require the pair itself in the dart list. A face address must equal an occurring face's pair-list exactly, not just up to rotation. A finite case tree is a leaf or a branch with an indexed child family. Its branch guards use rv=∥q(v)∥r_v=\|q(v)\|rv​=∥q(v)∥ and luv=∥q(u)−q(v)∥l_{uv}=\|q(u)-q(v)\|luv​=∥q(u)−q(v)∥. Rule 218 has children guarded by 109/50≤rv109/50\leq r_v109/50≤rv​ and rv≤109/50r_v\leq109/50rv​≤109/50; rule 236 by rv≤59/25r_v\leq59/25rv​≤59/25 and 59/25≤rv59/25\leq r_v59/25≤rv​; an edge rule by 9/4≤luv9/4\leq l_{uv}9/4≤luv​ and luv≤9/4l_{uv}\leq9/4luv​≤9/4; a triangle rule by its perimeter being at least or at most 25/425/425/4. For a quadrilateral set a=lv0v2,b=lv1v3,t=8a=l_{v_0v_2},b=l_{v_1v_3},t=\sqrt8a=lv0​v2​​,b=lv1​v3​​,t=8​; its five guards are a≤b∧a≤ta\leq b\land a\leq ta≤b∧a≤t, b≤a∧b≤tb\leq a\land b\leq tb≤a∧b≤t, a≤b∧t≤a≤3a\leq b\land t\leq a\leq3a≤b∧t≤a≤3, b≤a∧t≤b≤3b\leq a\land t\leq b\leq3b≤a∧t≤b≤3, and 3≤a∧3≤b3\leq a\land3\leq b3≤a∧3≤b. For a pentagon set (a,b,c,d,e)=(lv0v2,lv1v3,lv2v4,lv3v0,lv4v1)(a,b,c,d,e)=(l_{v_0v_2},l_{v_1v_3},l_{v_2v_4},l_{v_3v_0},l_{v_4v_1})(a,b,c,d,e)=(lv0​v2​​,lv1​v3​​,lv2​v4​​,lv3​v0​​,lv4​v1​​); its eleven guards are: all five at least ttt; a≤t≤c,da\leq t\leq c,da≤t≤c,d; b≤t≤d,eb\leq t\leq d,eb≤t≤d,e; c≤t≤e,ac\leq t\leq e,ac≤t≤e,a; d≤t≤a,bd\leq t\leq a,bd≤t≤a,b; e≤t≤b,ce\leq t\leq b,ce≤t≤b,c; a,c≤ta,c\leq ta,c≤t; b,d≤tb,d\leq tb,d≤t; c,e≤tc,e\leq tc,e≤t; d,a≤td,a\leq td,a≤t; and e,b≤te,b\leq te,b≤t. For a hexagon the six lengths are lv0v2,lv1v3,lv2v4,lv3v5,lv4v0,lv5v1l_{v_0v_2},l_{v_1v_3},l_{v_2v_4},l_{v_3v_5},l_{v_4v_0},l_{v_5v_1}lv0​v2​​,lv1​v3​​,lv2​v4​​,lv3​v5​​,lv4​v0​​,lv5​v1​​; its seven guards are all six at least ttt, followed by each individual length at most ttt. Rules high, mid and add_big each have one child with guard true. Reaching a leaf means a root-to-leaf path satisfying every guard; syntactic leaf membership ignores guards. Weak inequalities allow overlap at boundaries. The LP data are fixed tables of 19,71519{,}71519,715 graph records, 43,07843{,}07843,078 graph-indexed leaf records, 216216216 selectable row names, and 1,5251{,}5251,525 integer row templates at precisions 333 through 777. Graph identifier strings are not consulted. Tree decoding consumes space-separated tags l, 218, 236, edge, tri, quad, pent, hex, high, mid and add_big, their exact numbers of natural labels, and their prescribed numbers of children; malformed tokens, exhausted token-count fuel and leftovers fail. A tree starts with state (L,true)(L,\mathrm{true})(L,true). Splitting a face at a pair finds the first containing face, rotates it so that the predecessor of the pair's initial label is first, then replaces a face longer than 333 by its first three labels and by its first label followed by its labels from position 222 onward. A shorter face is only rotated; no containing face leaves the list unchanged. Refinement marks the state false even if unchanged. Quad children 0,20,20,2 refine at (v1,v2)(v_1,v_2)(v1​,v2​), children 1,31,31,3 at (v0,v1)(v_0,v_1)(v0​,v1​), and child 444 keeps the state. For pentagon and hexagon rules rotate their cyclic dart list once. Pentagon child 000 keeps the state; children 1,…,51,\ldots,51,…,5 refine at entries 0,…,40,\ldots,40,…,4; children 6,…,106,\ldots,106,…,10 split successively at those entries and the entries two positions later cyclically. Hexagon child 000 keeps the state and children 1,…,61,\ldots,61,…,6 refine at entries 0,…,50,\ldots,50,…,5. Other rules leave the state unchanged. Leaves carry a natural ordinal and the accumulated state. A leaf code begins with a precision digit 3–7 and mode I or B, followed by vertical-bar-separated selections. Each selection starts with character code 256+k256+k256+k for an in-range name index, followed by i and indices encoded by characters # through p excluding backslash, giving 0,…,760,\ldots,760,…,76, or by b and a base-64 bit mask in alphabet A–Z,a–z,0–9,-,_, with its first digit least significant. Only masks below 2772^{77}277 pass; their set bits give indices. The stored graph index must equal the requested index. Template lookup selects the first matching name and precision, preferring a true standard-only flag in a true state and falling back to false; a false state only permits false. Index pools are distinct labels, all darts, all faces' dart lists, outgoing-dart lists for each distinct label, or darts of faces of a specified size. Distinct labels retain the order of last occurrences by right-to-left duplicate removal. Addresses select bound objects, all labels, next/previous/reversed darts, initial nodes, first darts or containing faces; feature constructors produce one coordinate or sum coordinates on a node/dart list. Type mismatches, empty required lookups and out-of-range pool indices fail. Each integer coefficient is copied to its instantiated terms, with no additional precision scaling. Selected row groups are concatenated. Mode I uses only them; mode B appends the false-flag main template at pool index 000. Columns are the distinct syntactic variable addresses; a matrix entry sums every coefficient for that column in its row, and the right-hand side is the rational row constant. Compilation itself checks neither geometric validity nor nonempty rows, guards, feasibility or certificates. The archive obligation is a conjunction of three claims. First, the graph-table size is 19,71519{,}71519,715, the leaf-table size 43,07843{,}07843,078, and the graph-table size equals the decoded-archive size; for every archive index iii there are a successfully decoded list LLL and successfully decoded state-labeled tree built from graph index iii and LLL, and every syntactic leaf location has a successfully compiled program with strictly positive row count and every column address valid in that location's face list. Second, for every index iii, every list LLL and tree satisfying those decoding equalities, every hypermap HHH and placement ppp with LLL representing HHH or its opposite and (H,p)(H,p)(H,p) a contravening realization, and every location and successfully compiled program there, reaching that location under the radii and distances of the chosen map qqq implies every row inequality ∑jAkjxj≤bk\sum_j A_{kj}x_j\leq b_k∑j​Akj​xj​≤bk​ at the program's geometric column values, evaluated on that location's face list. Third, for every index, decoded list, decoded tree, syntactic leaf location and successfully compiled program there, a rational vector yyy indexed by its rows exists such that yk≥0y_k\geq0yk​≥0, ∑kykAkj=0\sum_k y_kA_{kj}=0∑k​yk​Akj​=0 for each column, and ∑kykbk<0\sum_k y_kb_k<0∑k​yk​bk​<0. The third claim includes geometrically unreachable leaves. It provides existential certificates rather than a displayed list of certificate vectors. The geometric implication can be vacuous in the absence of a contravening realization or guarded path, while successful compilation and certificates remain required at every syntactic leaf. The theorem asserts that CCC implies this full three-part archive obligation. It assumes neither archive classification nor tameness as a separate premise for its geometric soundness quantifiers. It does not display certificate vectors or assert that the Boolean checker has been run; rational certificate existence at every syntactic leaf is part of the mathematical conclusion.

Human review
  • Endorsed by Shuze Chen · Sep 27, 2026

    Confirmed by the moderator at approval.

  • Endorsed by Minghui · Sep 27, 2026

    Confirmed by the mission captain (proposal self-audit).

View graph

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me