Current library: Alpha v34, 4,223 checked-use theorems; Stable remains 432. Historical first admissions, original proof editions, and non-admitted aliases are preserved.
Exact expanded first-order arithmetic statement
forall A r s M k. (exists dst_positive_code_flat_source_table dst_positive_scale_flat_source_table dst_negative_code_flat_source_table dst_negative_scale_flat_source_table. (((A) = (((((dst_positive_code_flat_source_table) + (dst_positive_scale_flat_source_table)) * S ((dst_positive_code_flat_source_table) + (dst_positive_scale_flat_source_table)) + ((dst_positive_scale_flat_source_table) + (dst_positive_scale_flat_source_table))) + (((dst_negative_code_flat_source_table) + (dst_negative_scale_flat_source_table)) * S ((dst_negative_code_flat_source_table) + (dst_negative_scale_flat_source_table)) + ((dst_negative_scale_flat_source_table) + (dst_negative_scale_flat_source_table)))) * S ((((dst_positive_code_flat_source_table) + (dst_positive_scale_flat_source_table)) * S ((dst_positive_code_flat_source_table) + (dst_positive_scale_flat_source_table)) + ((dst_positive_scale_flat_source_table) + (dst_positive_scale_flat_source_table))) + (((dst_negative_code_flat_source_table) + (dst_negative_scale_flat_source_table)) * S ((dst_negative_code_flat_source_table) + (dst_negative_scale_flat_source_table)) + ((dst_negative_scale_flat_source_table) + (dst_negative_scale_flat_source_table)))) + ((((dst_negative_code_flat_source_table) + (dst_negative_scale_flat_source_table)) * S ((dst_negative_code_flat_source_table) + (dst_negative_scale_flat_source_table)) + ((dst_negative_scale_flat_source_table) + (dst_negative_scale_flat_source_table))) + (((dst_negative_code_flat_source_table) + (dst_negative_scale_flat_source_table)) * S ((dst_negative_code_flat_source_table) + (dst_negative_scale_flat_source_table)) + ((dst_negative_scale_flat_source_table) + (dst_negative_scale_flat_source_table)))))) /\ (forall dst_index_flat_source_table. (exists pvs_le_gap_flat_source_tabledomain. pvs_le_gap_flat_source_tabledomain + (dst_index_flat_source_table) = (0)) -> exists dst_positive_flat_source_table dst_negative_flat_source_table dst_value_flat_source_table. ((((exists ff_h_pvs_flat_source_tableentrypositive. ff_h_pvs_flat_source_tableentrypositive + S (dst_positive_flat_source_table) = S ((S (dst_index_flat_source_table)) * dst_positive_scale_flat_source_table)) /\ exists ff_q_pvs_flat_source_tableentrypositive. dst_positive_code_flat_source_table = ff_q_pvs_flat_source_tableentrypositive * S ((S (dst_index_flat_source_table)) * dst_positive_scale_flat_source_table) + (dst_positive_flat_source_table))) /\ (((((exists ff_h_pvs_flat_source_tableentrynegative. ff_h_pvs_flat_source_tableentrynegative + S (dst_negative_flat_source_table) = S ((S (dst_index_flat_source_table)) * dst_negative_scale_flat_source_table)) /\ exists ff_q_pvs_flat_source_tableentrynegative. dst_negative_code_flat_source_table = ff_q_pvs_flat_source_tableentrynegative * S ((S (dst_index_flat_source_table)) * dst_negative_scale_flat_source_table) + (dst_negative_flat_source_table))) /\ (exists ge_balance_positive_flat_source_tableentryvalue ge_balance_negative_flat_source_tableentryvalue. (((((dst_value_flat_source_table) = 2 * (ge_balance_positive_flat_source_tableentryvalue) /\ (ge_balance_negative_flat_source_tableentryvalue) = 0) \/ exists ge_signed_half_flat_source_tableentryvaluedecode. (((dst_value_flat_source_table) = 2 * ge_signed_half_flat_source_tableentryvaluedecode + 1 /\ (ge_balance_positive_flat_source_tableentryvalue) = 0) /\ (ge_balance_negative_flat_source_tableentryvalue) = S ge_signed_half_flat_source_tableentryvaluedecode))) /\ ((dst_positive_flat_source_table) + ge_balance_negative_flat_source_tableentryvalue = (dst_negative_flat_source_table) + ge_balance_positive_flat_source_tableentryvalue))))))))) -> exists z. (exists ssr_flat_row_flat_total ssr_flat_column_flat_total. (((k)=(((S (M))*(ssr_flat_row_flat_total)+(ssr_flat_column_flat_total)))) /\ (((exists pvs_gap_flat_totalremainder. pvs_gap_flat_totalremainder + S (ssr_flat_column_flat_total) = (S (M))) /\ (exists ssr_entry_value_flat_totalentry ssr_entry_image_flat_totalentry. ((exists dst_positive_code_flat_totalentrysource dst_positive_scale_flat_totalentrysource dst_negative_code_flat_totalentrysource dst_negative_scale_flat_totalentrysource dst_positive_flat_totalentrysource dst_negative_flat_totalentrysource. (((A) = (((((dst_positive_code_flat_totalentrysource) + (dst_positive_scale_flat_totalentrysource)) * S ((dst_positive_code_flat_totalentrysource) + (dst_positive_scale_flat_totalentrysource)) + ((dst_positive_scale_flat_totalentrysource) + (dst_positive_scale_flat_totalentrysource))) + (((dst_negative_code_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)) * S ((dst_negative_code_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)) + ((dst_negative_scale_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)))) * S ((((dst_positive_code_flat_totalentrysource) + (dst_positive_scale_flat_totalentrysource)) * S ((dst_positive_code_flat_totalentrysource) + (dst_positive_scale_flat_totalentrysource)) + ((dst_positive_scale_flat_totalentrysource) + (dst_positive_scale_flat_totalentrysource))) + (((dst_negative_code_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)) * S ((dst_negative_code_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)) + ((dst_negative_scale_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)))) + ((((dst_negative_code_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)) * S ((dst_negative_code_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)) + ((dst_negative_scale_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource))) + (((dst_negative_code_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)) * S ((dst_negative_code_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)) + ((dst_negative_scale_flat_totalentrysource) + (dst_negative_scale_flat_totalentrysource)))))) /\ (((((exists ff_h_pvs_flat_totalentrysourcepositive. ff_h_pvs_flat_totalentrysourcepositive + S (dst_positive_flat_totalentrysource) = S ((S (ssr_flat_row_flat_total)) * dst_positive_scale_flat_totalentrysource)) /\ exists ff_q_pvs_flat_totalentrysourcepositive. dst_positive_code_flat_totalentrysource = ff_q_pvs_flat_totalentrysourcepositive * S ((S (ssr_flat_row_flat_total)) * dst_positive_scale_flat_totalentrysource) + (dst_positive_flat_totalentrysource))) /\ (((((exists ff_h_pvs_flat_totalentrysourcenegative. ff_h_pvs_flat_totalentrysourcenegative + S (dst_negative_flat_totalentrysource) = S ((S (ssr_flat_row_flat_total)) * dst_negative_scale_flat_totalentrysource)) /\ exists ff_q_pvs_flat_totalentrysourcenegative. dst_negative_code_flat_totalentrysource = ff_q_pvs_flat_totalentrysourcenegative * S ((S (ssr_flat_row_flat_total)) * dst_negative_scale_flat_totalentrysource) + (dst_negative_flat_totalentrysource))) /\ (exists ge_balance_positive_flat_totalentrysourcevalue ge_balance_negative_flat_totalentrysourcevalue. (((((ssr_entry_value_flat_totalentry) = 2 * (ge_balance_positive_flat_totalentrysourcevalue) /\ (ge_balance_negative_flat_totalentrysourcevalue) = 0) \/ exists ge_signed_half_flat_totalentrysourcevaluedecode. (((ssr_entry_value_flat_totalentry) = 2 * ge_signed_half_flat_totalentrysourcevaluedecode + 1 /\ (ge_balance_positive_flat_totalentrysourcevalue) = 0) /\ (ge_balance_negative_flat_totalentrysourcevalue) = S ge_signed_half_flat_totalentrysourcevaluedecode))) /\ ((dst_positive_flat_totalentrysource) + ge_balance_negative_flat_totalentrysourcevalue = (dst_negative_flat_totalentrysource) + ge_balance_positive_flat_totalentrysourcevalue))))))))) /\ (((((exists ff_h_pvs_flat_totalentrymap. ff_h_pvs_flat_totalentrymap + S (ssr_entry_image_flat_totalentry) = S ((S (ssr_flat_row_flat_total)) * s)) /\ exists ff_q_pvs_flat_totalentrymap. r = ff_q_pvs_flat_totalentrymap * S ((S (ssr_flat_row_flat_total)) * s) + (ssr_entry_image_flat_totalentry))) /\ (((((ssr_flat_column_flat_total)=(ssr_entry_image_flat_totalentry)) /\ ((z)=(ssr_entry_value_flat_totalentry)))) \/ (((~((ssr_flat_column_flat_total)=(ssr_entry_image_flat_totalentry))) /\ ((z)=0))))))))))))Constructive proof overview
Generated structural guide
Division by the positive padded width S M and actual incidence lookup construct every flat value, including M=0.
The unchanged tactic script uses 3 declared prerequisites and contains 32 exact native proof lines.
Alpha v34 checked-use · first admitted v32 · independently kernel and Lean verified; not Stable
Proof neighborhood
Direct dependencies
division_remainder_exists Stable theorem; checked-use authorized succ_ne_zero Stable theorem; checked-use authorized MX003A signed_support_incidence_entry_existsDirect dependents
Formal native tactic body
Dependencies are introduced as named hypotheses before line 1. Local theorem links identify exact declared prerequisites. This exact body belongs to a complete independently kernel-checked constructive proof bundle and has Alpha checked-use authority; it does not imply Stable membership.
Read the argument
Proof checkpoints
This is a reading aid, not a new proof or a proof-tree certificate. Checkpoint groups are consecutive commands, not inferred branch boundaries. Every step links to the preserved script.
Named ingredients (1)
01Fix variables and assumptionsL1–6
02Establish hdL7–12
Establish this local claim before using it. It is not an additional assumption. The following proof commands apply division remainder exists.
03Separate the logical casesL13–15
04Establish hvL16–23
Establish this local claim before using it. It is not an additional assumption. The following proof commands apply signed support incidence entry exists.
- L16
have hv : ∃ z. SignedIncidenceEntry(A,r,s,x,x1,z)Definitions: SignedIncidenceEntry - L17
specialize signed_support_incidence_entry_exists (A) - L18
specialize signed_support_incidence_entry_exists (r) - L19
specialize signed_support_incidence_entry_exists (s) - L20
specialize signed_support_incidence_entry_exists (x) - L21
specialize signed_support_incidence_entry_exists (x1) - L22
apply signed_support_incidence_entry_exists - L23
exact hA
05Separate the logical casesL24–24
Follow the explicit conjunction, disjunction, witness, or contradiction step recorded below.
- L24
cases hv
06Construct an explicit witnessL25–27
07Separate the logical casesL28–28
Follow the explicit conjunction, disjunction, witness, or contradiction step recorded below.
- L28
split
08Use earlier factsL29–29
Instantiate or apply named facts and discharge the corresponding proof obligations.
- L29
exact hd_witness_witness_left
09Separate the logical casesL30–30
Follow the explicit conjunction, disjunction, witness, or contradiction step recorded below.
- L30
split
Original exact command ledger · 32 lines
- 0001
intro A - 0002
intro r - 0003
intro s - 0004
intro M - 0005
intro k - 0006
intro hA - 0007
have hd : exists i j. ((k=(S M)*i+j) /\ (exists pvs_gap_flat_division. pvs_gap_flat_division + S (j) = (S M))) - 0008
specialize division_remainder_exists (S M) - 0009
specialize division_remainder_exists (k) - 0010
apply division_remainder_exists - 0011
specialize succ_ne_zero (M) - 0012
apply succ_ne_zero - 0013
cases hd - 0014
cases hd_witness - 0015
cases hd_witness_witness - 0016
have hv : exists z. (exists ssr_entry_value_flat_value ssr_entry_image_flat_value. ((exists dst_positive_code_flat_valuesource dst_positive_scale_flat_valuesource dst_negative_code_flat_valuesource dst_negative_scale_flat_valuesource dst_positive_flat_valuesource dst_negative_flat_valuesource. (((A) = (((((dst_positive_code_flat_valuesource) + (dst_positive_scale_flat_valuesource)) * S ((dst_positive_code_flat_valuesource) + (dst_positive_scale_flat_valuesource)) + ((dst_positive_scale_flat_valuesource) + (dst_positive_scale_flat_valuesource))) + (((dst_negative_code_flat_valuesource) + (dst_negative_scale_flat_valuesource)) * S ((dst_negative_code_flat_valuesource) + (dst_negative_scale_flat_valuesource)) + ((dst_negative_scale_flat_valuesource) + (dst_negative_scale_flat_valuesource)))) * S ((((dst_positive_code_flat_valuesource) + (dst_positive_scale_flat_valuesource)) * S ((dst_positive_code_flat_valuesource) + (dst_positive_scale_flat_valuesource)) + ((dst_positive_scale_flat_valuesource) + (dst_positive_scale_flat_valuesource))) + (((dst_negative_code_flat_valuesource) + (dst_negative_scale_flat_valuesource)) * S ((dst_negative_code_flat_valuesource) + (dst_negative_scale_flat_valuesource)) + ((dst_negative_scale_flat_valuesource) + (dst_negative_scale_flat_valuesource)))) + ((((dst_negative_code_flat_valuesource) + (dst_negative_scale_flat_valuesource)) * S ((dst_negative_code_flat_valuesource) + (dst_negative_scale_flat_valuesource)) + ((dst_negative_scale_flat_valuesource) + (dst_negative_scale_flat_valuesource))) + (((dst_negative_code_flat_valuesource) + (dst_negative_scale_flat_valuesource)) * S ((dst_negative_code_flat_valuesource) + (dst_negative_scale_flat_valuesource)) + ((dst_negative_scale_flat_valuesource) + (dst_negative_scale_flat_valuesource)))))) /\ (((((exists ff_h_pvs_flat_valuesourcepositive. ff_h_pvs_flat_valuesourcepositive + S (dst_positive_flat_valuesource) = S ((S (x)) * dst_positive_scale_flat_valuesource)) /\ exists ff_q_pvs_flat_valuesourcepositive. dst_positive_code_flat_valuesource = ff_q_pvs_flat_valuesourcepositive * S ((S (x)) * dst_positive_scale_flat_valuesource) + (dst_positive_flat_valuesource))) /\ (((((exists ff_h_pvs_flat_valuesourcenegative. ff_h_pvs_flat_valuesourcenegative + S (dst_negative_flat_valuesource) = S ((S (x)) * dst_negative_scale_flat_valuesource)) /\ exists ff_q_pvs_flat_valuesourcenegative. dst_negative_code_flat_valuesource = ff_q_pvs_flat_valuesourcenegative * S ((S (x)) * dst_negative_scale_flat_valuesource) + (dst_negative_flat_valuesource))) /\ (exists ge_balance_positive_flat_valuesourcevalue ge_balance_negative_flat_valuesourcevalue. (((((ssr_entry_value_flat_value) = 2 * (ge_balance_positive_flat_valuesourcevalue) /\ (ge_balance_negative_flat_valuesourcevalue) = 0) \/ exists ge_signed_half_flat_valuesourcevaluedecode. (((ssr_entry_value_flat_value) = 2 * ge_signed_half_flat_valuesourcevaluedecode + 1 /\ (ge_balance_positive_flat_valuesourcevalue) = 0) /\ (ge_balance_negative_flat_valuesourcevalue) = S ge_signed_half_flat_valuesourcevaluedecode))) /\ ((dst_positive_flat_valuesource) + ge_balance_negative_flat_valuesourcevalue = (dst_negative_flat_valuesource) + ge_balance_positive_flat_valuesourcevalue))))))))) /\ (((((exists ff_h_pvs_flat_valuemap. ff_h_pvs_flat_valuemap + S (ssr_entry_image_flat_value) = S ((S (x)) * s)) /\ exists ff_q_pvs_flat_valuemap. r = ff_q_pvs_flat_valuemap * S ((S (x)) * s) + (ssr_entry_image_flat_value))) /\ (((((x1)=(ssr_entry_image_flat_value)) /\ ((z)=(ssr_entry_value_flat_value)))) \/ (((~((x1)=(ssr_entry_image_flat_value))) /\ ((z)=0)))))))) - 0017
specialize signed_support_incidence_entry_exists (A) - 0018
specialize signed_support_incidence_entry_exists (r) - 0019
specialize signed_support_incidence_entry_exists (s) - 0020
specialize signed_support_incidence_entry_exists (x) - 0021
specialize signed_support_incidence_entry_exists (x1) - 0022
apply signed_support_incidence_entry_exists - 0023
exact hA - 0024
cases hv - 0025
exists x2 - 0026
exists x - 0027
exists x1 - 0028
split - 0029
exact hd_witness_witness_left - 0030
split - 0031
exact hd_witness_witness_right - 0032
exact hv_witness