Equation (1) — Exact Newton Removal for the Retained Quadratic
ProvedFedRemoval.ExactNewtonRemovalFor every nonempty retained set , , and every starting parameter , prove
Formalization note: source-derived equation (1), expressed for an arbitrary starting point of a positive-definite quadratic. It reaches the retained optimum; it does not assert equality with an unfinished retraining run.
Source: Ruinan Jin, Minghui Chen, Qiong Zhang, Xiaoxiao Li, Forgettable Federated Linear Learning with Certified Data Unlearning, IEEE TNNLS (2026), arXiv:2306.02216v3, https://arxiv.org/pdf/2306.02216v3; Section II-B (Section 2), PDF p. 3, equation (1).
Notation and hypotheses
The full dataset has records and the server dataset has records. Record has a fixed real linear feature map , offset , and target . For a retained subset and regularization , define
Here uses all full-data indices, and use all server indices. Only the server feature maps enter its removal surrogate; server targets and offsets are unused. All norms are Euclidean vector or induced operator norms, as appropriate. The inverse is the total ring inverse; theorems must derive its validity from , not assume it. Empty empirical averages are defined by Lean's total arithmetic, but the relevant theorems require and, when server data appear, . Zero parameter or output dimension is allowed.
Set
The probability model used only by the final target is a finite joint law on : masses sum to one and . It allows arbitrary dependence between outputs. No law exists for . The other targets are deterministic and assume no probability model.
Formalization note: the fixed affine-feature model is source-derived from Jin et al., arXiv:2306.02216v3, Section III-A (Section 3), PDF p. 3, equation (3), and PDF p. 4, equations (4)--(5). Arbitrary real targets and nonempty retained subsets explicitly extend the one-hot/client-removal setting. The finite-law error targets are corrected formulations, not transcriptions or proofs of the printed Theorem 2.
import Definitions.Def_FedRemoval_Model
namespace FedRemoval
theorem ExactNewtonRemoval :
∀ (n d k : ℕ) (D : Data n d k) (s : Finset (Fin n)) (μ : ℝ),
s.Nonempty → 0 < μ →
∀ w, w - exactCorrection D s μ w = optimum D s μ := by sorry
end FedRemovalRead-back
What the Lean code literally says, in plain math · inherited model (exact model identifier unavailable)
For all natural numbers , put and with Euclidean structure, and choose arbitrary continuous real-linear maps , offsets , and targets for . For every finite subset and real satisfying and , define , , and , where stars denote Euclidean adjoints. Let be the multiplicative inverse of when invertible and the zero endomorphism otherwise, and set . Then every satisfies . The correction in this equality is precisely the defined vector , and the named optimum is precisely ; this assertion does not separately state a gradient or minimization property. There is no hypothesis that solves any optimization problem, and is any nonempty subset without a required ownership map or deleted client. Nonempty forces , but , , and zero or rank-deficient features are allowed. For the equation concerns the unique zero vector; for , and , so the conclusion sends every to .
Confirmed by the mission captain (proposal self-audit).
Confirmed by the moderator at approval.