Exact expanded first-order arithmetic statement
forall a b p n. (exists ge_balance_positive_negate_balance ge_balance_negative_negate_balance. (((((a) = 2 * (ge_balance_positive_negate_balance) /\ (ge_balance_negative_negate_balance) = 0) \/ exists ge_signed_half_negate_balancedecode. (((a) = 2 * ge_signed_half_negate_balancedecode + 1 /\ (ge_balance_positive_negate_balance) = 0) /\ (ge_balance_negative_negate_balance) = S ge_signed_half_negate_balancedecode))) /\ ((p) + ge_balance_negative_negate_balance = (n) + ge_balance_positive_negate_balance))) -> (exists mps_positive_negate_graph mps_negative_negate_graph. (((((a) = 2 * (mps_positive_negate_graph) /\ (mps_negative_negate_graph) = 0) \/ exists ge_signed_half_negate_graphsource. (((a) = 2 * ge_signed_half_negate_graphsource + 1 /\ (mps_positive_negate_graph) = 0) /\ (mps_negative_negate_graph) = S ge_signed_half_negate_graphsource))) /\ ((((b) = 2 * (mps_negative_negate_graph) /\ (mps_positive_negate_graph) = 0) \/ exists ge_signed_half_negate_graphtarget. (((b) = 2 * ge_signed_half_negate_graphtarget + 1 /\ (mps_negative_negate_graph) = 0) /\ (mps_positive_negate_graph) = S ge_signed_half_negate_graphtarget))))) -> (exists ge_balance_positive_negate_result ge_balance_negative_negate_result. (((((b) = 2 * (ge_balance_positive_negate_result) /\ (ge_balance_negative_negate_result) = 0) \/ exists ge_signed_half_negate_resultdecode. (((b) = 2 * ge_signed_half_negate_resultdecode + 1 /\ (ge_balance_positive_negate_result) = 0) /\ (ge_balance_negative_negate_result) = S ge_signed_half_negate_resultdecode))) /\ ((n) + ge_balance_negative_negate_result = (p) + ge_balance_positive_negate_result)))Constructive proof overview
Generated structural guide
Canonical signed negation swaps arbitrary natural-component balances, not merely normalized representatives.
The unchanged tactic script uses 1 declared prerequisite and contains 21 exact native proof lines.
Public research checkpoint: original HA and independently compiled Lean verified; not Alpha-enrolled, no Alpha checked-use authority; not Stable
Proof neighborhood
Direct dependencies
Direct dependents
Formal native tactic body
Dependencies are introduced as named hypotheses before line 1. Local theorem links identify exact declared prerequisites. The literal dependency-closed bundle is checked by original HA and the independently compiled Lean verifier. Public delivery grants no Alpha checked-use authority or Stable membership.
Read the argument
Proof checkpoints
This is a reading aid, not a new proof or a proof-tree certificate. Checkpoint groups are consecutive commands, not inferred branch boundaries. Every step links to the preserved script.
01Fix variables and assumptionsL1–6
02Separate the logical casesL7–9
03Construct an explicit witnessL10–11
04Separate the logical casesL12–12
Follow the explicit conjunction, disjunction, witness, or contradiction step recorded below.
- L12
split
05Use earlier factsL13–19
Instantiate or apply named facts and discharge the corresponding proof obligations.
06Calculate and transport equalitiesL20–20
Carry out the recorded arithmetic or equality steps; inspect the exact commands for their direction and premises.
- L20
symm
07Use earlier factsL21–21
Instantiate or apply named facts and discharge the corresponding proof obligations.
- L21
exact hbalance_witness_witness_right
Original exact command ledger · 21 lines
- 0001
intro a - 0002
intro b - 0003
intro p - 0004
intro n - 0005
intro hbalance - 0006
intro hneg - 0007
cases hbalance - 0008
cases hbalance_witness - 0009
cases hbalance_witness_witness - 0010
exists x1 - 0011
exists x - 0012
split - 0013
specialize signed_negate_to_swapped_decode (a) - 0014
specialize signed_negate_to_swapped_decode (b) - 0015
specialize signed_negate_to_swapped_decode (x) - 0016
specialize signed_negate_to_swapped_decode (x1) - 0017
apply signed_negate_to_swapped_decode - 0018
exact hbalance_witness_witness_left - 0019
exact hneg - 0020
symm - 0021
exact hbalance_witness_witness_right