Contravening geometry and fixed final LP family
DefinitionKepler_GeometricLPModelThe ambient space is with its Euclidean norm and distance. A set is a packing exactly when distinct members have distance at least , with no nonemptiness or saturation requirement. Write and , where this natural-number cardinality is defined as if the intersection is infinite. Put , and for finite sets . Saturation means ; it alone does not require separation. The finite-container condition on is . The constant may depend on and has no sign restriction. A finite hypermap consists of a natural number , darts and permutations with for every dart. Let be its edge, node and face permutation-cycle orbits, including , and let be the finite sets of distinct such orbits. Let be the finite set of distinct components reachable by zero or more applications of . Incident faces at are the distinct sets . Write for those incident faces of size , size , and size at least , respectively, and . The condition called tame requires ; ; ; for every dart; ; ; and ; at least three distinct faces; and for every dart; ; and, whenever , both and . It further requires a real function on all finite subsets of the dart set with for every dart, when , when , and . The face constants are , with otherwise. In the order , the exceptional values of are ; every other pair has value . Values of away from actual faces are unrestricted. An empty hypermap is a permitted structure but cannot be tame. A face list is a finite ordered list of finite lists of natural labels. A face supplies the cyclic directed pairs ; an empty face supplies none, and a singleton supplies a loop. The dart list concatenates these lists with multiplicities. Good means no repeated directed pair, every face nonempty, and each occurring accompanied by ; it imposes no further length, label-range, connectedness or planarity condition, and the empty list is Good. The list represents if and there exists a labeling of darts by natural numbers such that , the map is injective, , every face of is a cyclic rotation of for some dart , and every dart has such a face in . Representation alone permits repeating a face. The opposite hypermap has the same darts and permutations . The fixed archive has strings; decoding splits at periods into nonempty faces and maps A through O to labels through . Empty strings, empty faces and other characters fail. Membership means equality to the decoded face list at some in-range index. Archive well-formedness requires successful decoding and Good at every index. For put , using total division, and let be the unoriented Euclidean angle between and . Define if or either projection is zero; otherwise it is when and otherwise, including zero determinant with nonzero projections. For a finite set , standard neighbors of a member are , and contact neighbors are ; a point outside has no neighbors. For either relation, the successor of around is if the neighbor set is exactly ; otherwise it is a chosen neighbor minimizing among neighbors other than . If no such neighbor exists the choice has no specified property; minimizers need not be unique. The dart angle is when has more than one neighbor and otherwise. Being surrounded means that membership in implies a nonempty neighbor set and a dart angle strictly less than at every neighbor. Outside this implication is vacuous. A contravening configuration is a finite set of pairwise separated points in the closed annulus , with score , and with score at least that of every finite packing in that annulus, without restricting competitors' cardinality. It must also have , or members; every member must be surrounded for standard neighbors; and every member must either be surrounded for contact neighbors or have norm exactly . A placement of is any map from darts into , with center set , counting distinct images once. It realizes the standard fan when , each is a standard neighbor of , every ordered standard-neighbor pair in comes from exactly one dart with , , and equals the chosen standard successor of around . A contravening realization is a standard-fan realization whose center set is a contravening configuration; it does not additionally assume tameness or an involutive edge permutation on darts. A realization dart angle is its standard-fan dart angle. Its face weight at dart is the signed quantity , where and for and otherwise. It has no absolute value, unlike the LP face coordinate. Contravention extraction means that existence of any finite packing in the annulus with score strictly greater than implies existence of a contravening configuration, including its global score-maximality, cardinality and surrounding conditions. Tame realization means that for every contravening configuration there exist a finite hypermap and placement whose image center set is exactly , which realizes the standard fan and for which satisfies all the tame requirements. The existential hypermap and placement may depend on , with no uniqueness, canonical labels or separate prescribed weight function. For , the position map is chosen as follows. If represents , choose a witnessing labeling and return for the first dart, in the order , with label , or if the label is missing. If this representation fails but represents the opposite, choose a labeling for the opposite and negate the first Cartesian coordinate of the same first-dart lookup in . If neither representation holds return for every label. The direct representation takes priority if both hold. These are fixed choices, not universal quantification over all representing labelings. For a face list and pair , take the pair-list of the first face containing , defaulting to the empty list. Let be its next and previous pairs at the first occurrence of , defaulting to if lookup fails, and let . Put , , for and otherwise, and . Node variables yn, ln, rho evaluate to . Dart variables azim, azim2, azim3 evaluate to ; rhazim, rhazim2, rhazim3 evaluate to . Dart variables ye and y6 both give ; y1,y2,y3 give ; y4 and y9 both give the length of ; y5 gives the length of ; y7 gives ; y8 gives the length of ; and y4prime gives . For a pair-list , its face sol variable is , and its tau variable is , counting list multiplicities. A node address is valid if its label occurs in . For dart kinds ye,y1,y2,y6, both endpoint labels must occur but the pair need not; all other dart kinds require the pair itself in the dart list. A face address must equal an occurring face's pair-list exactly, not just up to rotation. A finite case tree is a leaf or a branch with an indexed child family. Its branch guards use and . Rule 218 has children guarded by and ; rule 236 by and ; an edge rule by and ; a triangle rule by its perimeter being at least or at most . For a quadrilateral set ; its five guards are , , , , and . For a pentagon set ; its eleven guards are: all five at least ; ; ; ; ; ; ; ; ; ; and . For a hexagon the six lengths are ; its seven guards are all six at least , followed by each individual length at most . Rules high, mid and add_big each have one child with guard true. Reaching a leaf means a root-to-leaf path satisfying every guard; syntactic leaf membership ignores guards. Weak inequalities allow overlap at boundaries. The LP data are fixed tables of graph records, graph-indexed leaf records, selectable row names, and integer row templates at precisions through . Graph identifier strings are not consulted. Tree decoding consumes space-separated tags l, 218, 236, edge, tri, quad, pent, hex, high, mid and add_big, their exact numbers of natural labels, and their prescribed numbers of children; malformed tokens, exhausted token-count fuel and leftovers fail. A tree starts with state . Splitting a face at a pair finds the first containing face, rotates it so that the predecessor of the pair's initial label is first, then replaces a face longer than by its first three labels and by its first label followed by its labels from position onward. A shorter face is only rotated; no containing face leaves the list unchanged. Refinement marks the state false even if unchanged. Quad children refine at , children at , and child keeps the state. For pentagon and hexagon rules rotate their cyclic dart list once. Pentagon child keeps the state; children refine at entries ; children split successively at those entries and the entries two positions later cyclically. Hexagon child keeps the state and children refine at entries . Other rules leave the state unchanged. Leaves carry a natural ordinal and the accumulated state. A leaf code begins with a precision digit 3–7 and mode I or B, followed by vertical-bar-separated selections. Each selection starts with character code for an in-range name index, followed by i and indices encoded by characters # through p excluding backslash, giving , or by b and a base-64 bit mask in alphabet A–Z,a–z,0–9,-,_, with its first digit least significant. Only masks below pass; their set bits give indices. The stored graph index must equal the requested index. Template lookup selects the first matching name and precision, preferring a true standard-only flag in a true state and falling back to false; a false state only permits false. Index pools are distinct labels, all darts, all faces' dart lists, outgoing-dart lists for each distinct label, or darts of faces of a specified size. Distinct labels retain the order of last occurrences by right-to-left duplicate removal. Addresses select bound objects, all labels, next/previous/reversed darts, initial nodes, first darts or containing faces; feature constructors produce one coordinate or sum coordinates on a node/dart list. Type mismatches, empty required lookups and out-of-range pool indices fail. Each integer coefficient is copied to its instantiated terms, with no additional precision scaling. Selected row groups are concatenated. Mode I uses only them; mode B appends the false-flag main template at pool index . Columns are the distinct syntactic variable addresses; a matrix entry sums every coefficient for that column in its row, and the right-hand side is the rational row constant. Compilation itself checks neither geometric validity nor nonempty rows, guards, feasibility or certificates. The archive obligation is a conjunction of three claims. First, the graph-table size is , the leaf-table size , and the graph-table size equals the decoded-archive size; for every archive index there are a successfully decoded list and successfully decoded state-labeled tree built from graph index and , and every syntactic leaf location has a successfully compiled program with strictly positive row count and every column address valid in that location's face list. Second, for every index , every list and tree satisfying those decoding equalities, every hypermap and placement with representing or its opposite and a contravening realization, and every location and successfully compiled program there, reaching that location under the radii and distances of the chosen map implies every row inequality at the program's geometric column values, evaluated on that location's face list. Third, for every index, decoded list, decoded tree, syntactic leaf location and successfully compiled program there, a rational vector indexed by its rows exists such that , for each column, and . The third claim includes geometrically unreachable leaves. It provides existential certificates rather than a displayed list of certificate vectors. The geometric implication can be vacuous in the absence of a contravening realization or guarded path, while successful compilation and certificates remain required at every syntactic leaf. For natural , a rational system is any rational -by- matrix and rational row vector of bounds . A real vector is feasible precisely when for every row. The Boolean infeasibility test decides , and for a rational row-indexed vector . Its soundness proposition quantifies over all and says a true result rules out every feasible real vector. At the strict negative sum cannot hold; at there is one empty candidate vector and feasibility is in every row. Archived-case exclusion says no archived list represents a hypermap or opposite having a contravening realization. The assembly proposition says this exclusion follows from universal rational-certificate soundness and the three archive obligations. These are defined propositions, not facts supplied by constructing the data.
Source and scope. Primary §4.2 and §9, pp.8–10,21–24; final formal_lp/hypermap/verify_all.hl and main/prove_flyspeck_lp.hl:43–52,263–348,483–523,856–1037. All 19,715 source graph trees and 43,078 leaves are concrete data with 1,525 rounded integer templates. Local feasibility and exact certificate availability are distinct proof obligations.
/-
Flyspeck source material is reproduced and adapted under this license:
MIT License
Copyright (c) 2014 Thomas C. Hales
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
-/
import Definitions.Def_Kepler_LPCaseModel
import Definitions.Def_Kepler_LPLeafModel
set_option autoImplicit false
open scoped BigOperators
namespace KeplerMission.SourceLP
/-- A concrete finite system. No fields contain propositions or proofs. -/
structure Program where
rows : Array AffineRow
def Program.columns (p : Program) : Array Variable :=
((p.rows.toList.flatMap (fun row => row.terms.map Prod.snd)).dedup).toArray
def Program.system (p : Program) : RationalSystem p.rows.size p.columns.size where
matrix i j := ((p.rows[i]).terms.map (fun (c, v) =>
if v = p.columns[j] then c else 0)).sum
rhs i := (p.rows[i]).rhs
noncomputable def Program.values (p : Program) (L : FaceList) (position : ℕ → Space) :
Fin p.columns.size → ℝ := fun i => (p.columns[i]).eval L position
def Program.ValidAddresses (p : Program) (L : FaceList) : Prop :=
∀ v ∈ p.columns, v.ValidAddress L
abbrev Program.Certificate (p : Program) := Fin p.rows.size → ℚ
def Program.checkCertificate (p : Program) (cert : p.Certificate) : Bool :=
p.system.checkInfeasibility cert
/-- The source objective cases append their separate score-lower-bound row.
The table stores its source scale 10^(3p). Direct infeasibility cases do not. -/
def compileProgram (state : CaseState) (spec : LeafSpecification) : Option Program := do
let groups ← spec.selections.mapM (fun selection => do
let template ← selectedTemplate state.standard spec.precision selection.nameIndex
selection.indices.mapM (template.instantiate state.faces))
let rows := groups.flatten
if spec.directInfeasible then return ⟨rows.toArray⟩
else
let objective ← lookupTemplate false spec.precision "main"
let scoreRow ← objective.instantiate state.faces 0
return ⟨(rows ++ [scoreRow]).toArray⟩
/-- Resolve a source leaf ordinal with the graph binding checked before compilation. -/
def sourceProgram (graphIndex : ℕ) (location : LeafLocation) : Option Program := do
let entry ← sourceLeafCodes[location.ordinal]?
let spec ← decodeLeafSpecification entry
if spec.graphIndex = graphIndex then compileProgram location.state spec else none
end KeplerMission.SourceLP
set_option autoImplicit false
namespace KeplerMission.SourceLP
/-- Unguarded structural leaf membership: even an unrealizable branch needs a certificate. -/
inductive SourceCaseTree.HasLeaf {α : Type} : SourceCaseTree α → α → Prop where
| leaf (a : α) : HasLeaf (.leaf a) a
| branch (rule : SplitRule) (children : Fin rule.arity → SourceCaseTree α)
(i : Fin rule.arity) (a : α) (h : HasLeaf (children i) a) :
HasLeaf (.branch rule children) a
def sourceTree (graphIndex : ℕ) (L : FaceList) : Option (SourceCaseTree LeafLocation) := do
let code ← sourceGraphCodes[graphIndex]?
let tree ← decodeCaseTree code.treeCode
return tree.withState ⟨L, true⟩
/-- Pure data completeness, with no geometric conclusion or certificate hidden inside. -/
def FamilyWellFormed : Prop :=
sourceGraphCodes.size = 19715 ∧ sourceLeafCodes.size = 43078 ∧
sourceGraphCodes.size = tameArchiveEntries.size ∧
∀ i : Fin tameArchiveEntries.size,
∃ L tree, tameArchiveEntries[i] = some L ∧ sourceTree i.val L = some tree ∧
∀ location, tree.HasLeaf location → ∃ program,
sourceProgram i.val location = some program ∧
0 < program.rows.size ∧ program.ValidAddresses location.state.faces
/-- The sole geometric relaxation conclusion is feasibility of the fixed source LP.
The assignment is the declared geometric evaluator, never a solver-chosen vector. -/
def RelaxationsSound : Prop :=
∀ (i : Fin tameArchiveEntries.size) L tree,
tameArchiveEntries[i] = some L → sourceTree i.val L = some tree →
∀ H (p : GeometricPlacement H),
(L.Represents H ∨ L.Represents H.opposite) → ContraveningRealization H p →
∀ location program, sourceProgram i.val location = some program →
tree.Reaches (fun v => ‖sourcePosition L H p v‖)
(fun v w => dist (sourcePosition L H p v) (sourcePosition L H p w)) location →
program.system.Feasible
(program.values location.state.faces (sourcePosition L H p))
/-- Certificates are required for every fixed leaf independently of realizability. -/
def CertificatesAvailable : Prop :=
∀ (i : Fin tameArchiveEntries.size) L tree,
tameArchiveEntries[i] = some L → sourceTree i.val L = some tree →
∀ location, tree.HasLeaf location → ∀ program,
sourceProgram i.val location = some program →
∃ cert : program.Certificate, program.checkCertificate cert = true
def ArchiveContract : Prop :=
FamilyWellFormed ∧ RelaxationsSound ∧ CertificatesAvailable
end KeplerMission.SourceLP
set_option autoImplicit false
namespace KeplerMission
/-- Generic arithmetic soundness, stated independently of any Kepler configuration. -/
def RationalCertificateSoundnessStatement : Prop :=
∀ (m n : ℕ) (S : RationalSystem m n) (y : Fin m → ℚ),
S.checkInfeasibility y = true → ¬ ∃ x : Fin n → ℝ, S.Feasible x
/-- The fixed final Flyspeck case family, its local geometric relaxations, and
an exact rational certificate for every structural leaf. No case tree or LP can
be supplied by a solver: both are determined by the pinned source data. -/
abbrev LPArchiveObligations : Prop := SourceLP.ArchiveContract
/-- Source `linear_programming_results`, after its nonlinear/geometric inputs have
been proved: no contravening configuration realizes an archived combinatorial case. -/
def ArchivedCaseExclusionStatement : Prop :=
∀ L : FaceList, InTameArchive L → ∀ (H : FiniteHypermap) (p : GeometricPlacement H),
(L.Represents H ∨ L.Represents H.opposite) → ¬ ContraveningRealization H p
/-- All-geometric case assembly target; its hypotheses are explicit interfaces. -/
def LPArchiveAssemblyStatement : Prop :=
RationalCertificateSoundnessStatement → LPArchiveObligations → ArchivedCaseExclusionStatement
end KeplerMission
Read-back
What the Lean code literally says, in plain math · gpt-6
The ambient space is with its Euclidean norm and distance. A set is a packing exactly when distinct members have distance at least , with no nonemptiness or saturation requirement. Write and , where this natural-number cardinality is defined as if the intersection is infinite. Put , and for finite sets . Saturation means ; it alone does not require separation. The finite-container condition on is . The constant may depend on and has no sign restriction. A finite hypermap consists of a natural number , darts and permutations with for every dart. Let be its edge, node and face permutation-cycle orbits, including , and let be the finite sets of distinct such orbits. Let be the finite set of distinct components reachable by zero or more applications of . Incident faces at are the distinct sets . Write for those incident faces of size , size , and size at least , respectively, and . The condition called tame requires ; ; ; for every dart; ; ; and ; at least three distinct faces; and for every dart; ; and, whenever , both and . It further requires a real function on all finite subsets of the dart set with for every dart, when , when , and . The face constants are , with otherwise. In the order , the exceptional values of are ; every other pair has value . Values of away from actual faces are unrestricted. An empty hypermap is a permitted structure but cannot be tame. A face list is a finite ordered list of finite lists of natural labels. A face supplies the cyclic directed pairs ; an empty face supplies none, and a singleton supplies a loop. The dart list concatenates these lists with multiplicities. Good means no repeated directed pair, every face nonempty, and each occurring accompanied by ; it imposes no further length, label-range, connectedness or planarity condition, and the empty list is Good. The list represents if and there exists a labeling of darts by natural numbers such that , the map is injective, , every face of is a cyclic rotation of for some dart , and every dart has such a face in . Representation alone permits repeating a face. The opposite hypermap has the same darts and permutations . The fixed archive has strings; decoding splits at periods into nonempty faces and maps A through O to labels through . Empty strings, empty faces and other characters fail. Membership means equality to the decoded face list at some in-range index. Archive well-formedness requires successful decoding and Good at every index. For put , using total division, and let be the unoriented Euclidean angle between and . Define if or either projection is zero; otherwise it is when and otherwise, including zero determinant with nonzero projections. For a finite set , standard neighbors of a member are , and contact neighbors are ; a point outside has no neighbors. For either relation, the successor of around is if the neighbor set is exactly ; otherwise it is a chosen neighbor minimizing among neighbors other than . If no such neighbor exists the choice has no specified property; minimizers need not be unique. The dart angle is when has more than one neighbor and otherwise. Being surrounded means that membership in implies a nonempty neighbor set and a dart angle strictly less than at every neighbor. Outside this implication is vacuous. A contravening configuration is a finite set of pairwise separated points in the closed annulus , with score , and with score at least that of every finite packing in that annulus, without restricting competitors' cardinality. It must also have , or members; every member must be surrounded for standard neighbors; and every member must either be surrounded for contact neighbors or have norm exactly . A placement of is any map from darts into , with center set , counting distinct images once. It realizes the standard fan when , each is a standard neighbor of , every ordered standard-neighbor pair in comes from exactly one dart with , , and equals the chosen standard successor of around . A contravening realization is a standard-fan realization whose center set is a contravening configuration; it does not additionally assume tameness or an involutive edge permutation on darts. A realization dart angle is its standard-fan dart angle. Its face weight at dart is the signed quantity , where and for and otherwise. It has no absolute value, unlike the LP face coordinate. Contravention extraction means that existence of any finite packing in the annulus with score strictly greater than implies existence of a contravening configuration, including its global score-maximality, cardinality and surrounding conditions. Tame realization means that for every contravening configuration there exist a finite hypermap and placement whose image center set is exactly , which realizes the standard fan and for which satisfies all the tame requirements. The existential hypermap and placement may depend on , with no uniqueness, canonical labels or separate prescribed weight function. For , the position map is chosen as follows. If represents , choose a witnessing labeling and return for the first dart, in the order , with label , or if the label is missing. If this representation fails but represents the opposite, choose a labeling for the opposite and negate the first Cartesian coordinate of the same first-dart lookup in . If neither representation holds return for every label. The direct representation takes priority if both hold. These are fixed choices, not universal quantification over all representing labelings. For a face list and pair , take the pair-list of the first face containing , defaulting to the empty list. Let be its next and previous pairs at the first occurrence of , defaulting to if lookup fails, and let . Put , , for and otherwise, and . Node variables yn, ln, rho evaluate to . Dart variables azim, azim2, azim3 evaluate to ; rhazim, rhazim2, rhazim3 evaluate to . Dart variables ye and y6 both give ; y1,y2,y3 give ; y4 and y9 both give the length of ; y5 gives the length of ; y7 gives ; y8 gives the length of ; and y4prime gives . For a pair-list , its face sol variable is , and its tau variable is , counting list multiplicities. A node address is valid if its label occurs in . For dart kinds ye,y1,y2,y6, both endpoint labels must occur but the pair need not; all other dart kinds require the pair itself in the dart list. A face address must equal an occurring face's pair-list exactly, not just up to rotation. A finite case tree is a leaf or a branch with an indexed child family. Its branch guards use and . Rule 218 has children guarded by and ; rule 236 by and ; an edge rule by and ; a triangle rule by its perimeter being at least or at most . For a quadrilateral set ; its five guards are , , , , and . For a pentagon set ; its eleven guards are: all five at least ; ; ; ; ; ; ; ; ; ; and . For a hexagon the six lengths are ; its seven guards are all six at least , followed by each individual length at most . Rules high, mid and add_big each have one child with guard true. Reaching a leaf means a root-to-leaf path satisfying every guard; syntactic leaf membership ignores guards. Weak inequalities allow overlap at boundaries. The LP data are fixed tables of graph records, graph-indexed leaf records, selectable row names, and integer row templates at precisions through . Graph identifier strings are not consulted. Tree decoding consumes space-separated tags l, 218, 236, edge, tri, quad, pent, hex, high, mid and add_big, their exact numbers of natural labels, and their prescribed numbers of children; malformed tokens, exhausted token-count fuel and leftovers fail. A tree starts with state . Splitting a face at a pair finds the first containing face, rotates it so that the predecessor of the pair's initial label is first, then replaces a face longer than by its first three labels and by its first label followed by its labels from position onward. A shorter face is only rotated; no containing face leaves the list unchanged. Refinement marks the state false even if unchanged. Quad children refine at , children at , and child keeps the state. For pentagon and hexagon rules rotate their cyclic dart list once. Pentagon child keeps the state; children refine at entries ; children split successively at those entries and the entries two positions later cyclically. Hexagon child keeps the state and children refine at entries . Other rules leave the state unchanged. Leaves carry a natural ordinal and the accumulated state. A leaf code begins with a precision digit 3–7 and mode I or B, followed by vertical-bar-separated selections. Each selection starts with character code for an in-range name index, followed by i and indices encoded by characters # through p excluding backslash, giving , or by b and a base-64 bit mask in alphabet A–Z,a–z,0–9,-,_, with its first digit least significant. Only masks below pass; their set bits give indices. The stored graph index must equal the requested index. Template lookup selects the first matching name and precision, preferring a true standard-only flag in a true state and falling back to false; a false state only permits false. Index pools are distinct labels, all darts, all faces' dart lists, outgoing-dart lists for each distinct label, or darts of faces of a specified size. Distinct labels retain the order of last occurrences by right-to-left duplicate removal. Addresses select bound objects, all labels, next/previous/reversed darts, initial nodes, first darts or containing faces; feature constructors produce one coordinate or sum coordinates on a node/dart list. Type mismatches, empty required lookups and out-of-range pool indices fail. Each integer coefficient is copied to its instantiated terms, with no additional precision scaling. Selected row groups are concatenated. Mode I uses only them; mode B appends the false-flag main template at pool index . Columns are the distinct syntactic variable addresses; a matrix entry sums every coefficient for that column in its row, and the right-hand side is the rational row constant. Compilation itself checks neither geometric validity nor nonempty rows, guards, feasibility or certificates. The archive obligation is a conjunction of three claims. First, the graph-table size is , the leaf-table size , and the graph-table size equals the decoded-archive size; for every archive index there are a successfully decoded list and successfully decoded state-labeled tree built from graph index and , and every syntactic leaf location has a successfully compiled program with strictly positive row count and every column address valid in that location's face list. Second, for every index , every list and tree satisfying those decoding equalities, every hypermap and placement with representing or its opposite and a contravening realization, and every location and successfully compiled program there, reaching that location under the radii and distances of the chosen map implies every row inequality at the program's geometric column values, evaluated on that location's face list. Third, for every index, decoded list, decoded tree, syntactic leaf location and successfully compiled program there, a rational vector indexed by its rows exists such that , for each column, and . The third claim includes geometrically unreachable leaves. It provides existential certificates rather than a displayed list of certificate vectors. The geometric implication can be vacuous in the absence of a contravening realization or guarded path, while successful compilation and certificates remain required at every syntactic leaf. For natural , a rational system is any rational -by- matrix and rational row vector of bounds . A real vector is feasible precisely when for every row. The Boolean infeasibility test decides , and for a rational row-indexed vector . Its soundness proposition quantifies over all and says a true result rules out every feasible real vector. At the strict negative sum cannot hold; at there is one empty candidate vector and feasibility is in every row. Archived-case exclusion says no archived list represents a hypermap or opposite having a contravening realization. The assembly proposition says this exclusion follows from universal rational-certificate soundness and the three archive obligations. These are defined propositions, not facts supplied by constructing the data.
Confirmed by the mission captain (proposal self-audit).
Confirmed by the moderator at approval.