Actual Euclidean descent · normalized gcd · formal uniqueness

Prime-Field Polynomial GCD and Bézout

Construct a zero-or-monic greatest common right divisor with actual Bézout coefficients over every prime field, including empty and all-zero inputs.

119 kernel- and Lean-verified Alpha-closed theorems · 45 conservative definitions · 93 notation dependencies

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable

Current library: Alpha v34, 4,223 checked-use theorems; Stable remains 432. Historical first admissions, original proof editions, and non-admitted aliases are preserved.

164 items
PG0001 prime_field_polynomial_shift_exists

Construct a genuine trailing-zero prefix by the original beta-prefix extension theorem, including an empty source.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0002 prime_field_polynomial_shift_bounded

A real trailing zero preserves canonical field coefficients; characteristic two uses natural zero and one, not signed codes.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0003 prime_field_polynomial_shift_functional

Two actual shifts agree on their successor-length decoded prefix; neither raw code nor any later entry is identified.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0004 prime_field_polynomial_shift_zero_prefix

The actual shift of an all-zero prefix is again all zero, including the length-one shift of an empty input.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0005 polynomial_zero_extended_shift_forward

Trailing-zero extension leaves each actual zero-extended array value unchanged, at every natural index.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0006 polynomial_zero_extended_shift_reverse

Conversely every zero-extended value of an actual shift is the original zero-extended value; this is not formal polynomial equality.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0007 polynomial_diagonal_term_shift_right_iff

An actual trailing-zero shift of the right factor preserves exactly the same antidiagonal term witnesses in both directions.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0008 prime_field_convolution_coefficient_shift_right_iff

Every actual convolution coefficient is preserved at every index, with the identical natural sum and residue witnesses; no primality is needed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0009 polynomial_product_length_shift_right_nonempty

For two nonempty factors, shifting the right factor raises the proper product length by exactly one; empty factors are explicitly excluded.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG000C prime_field_polynomial_convolution_shift_right_equivalent

At every nonzero modulus, the actual product with a shifted right factor is formally coefficient-equivalent to every actual shift of the original product, including both empty-factor cases.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG000D prime_field_polynomial_convolution_shift_right_exists

Given a genuine shifted factor, construct its proper-length product and a genuine shift of the original output, then derive their formal equivalence without any output witness premise.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG000E prime_field_polynomial_shift_power_zero

The actual constant coefficient of a trailing-zero shift is zero, even when the original representation is empty.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG000F prime_field_polynomial_shift_power_successor

Each actual coefficient at power k becomes the same coefficient at power S k; together with constant zero this is genuine multiplication by X, not evaluation equality.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0010 beta_sum_pointwise_mod_scale

Pointwise scalar congruences lift through two actual natural Sum traces at every modulus, including zero and the empty length; no new sum witness is assumed equal to a desired total.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0011 polynomial_zero_extended_scale_congruent

Actual coefficient scaling extends by genuine exterior zeros to a scalar congruence at every array index, with no condition on raw entries after the prefixes.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0012 polynomial_diagonal_term_right_scale_congruent

The uniquely identified complementary index and unchanged left coefficient turn actual right-input scaling into pointwise antidiagonal scalar congruence.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0013 polynomial_diagonal_sum_right_scale_congruent

Two actual antidiagonal tables and their actual natural sums satisfy scalar congruence; no supplied output identity or Fubini oracle is used.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0014 prime_field_convolution_coefficient_right_scale

At every natural index the actual scaled-input convolution coefficient is the actual canonical product of k and the original coefficient, including all exterior coefficients and composite moduli.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0015 prime_field_polynomial_convolution_right_scale

Scaling the actual right input preserves the proper representation length and gives the actual scalar action on the product output, including empty factors and zero scalars.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0016 prime_field_polynomial_convolution_right_scale_equal

Every actual product A*(k B) agrees coefficientwise with every actual scalar result k*(A*B), at the same proper length; no equality of beta codes follows.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0017 prime_field_polynomial_convolution_right_scale_exists

At any nonzero modulus and canonical scalar, construct the actual scaled input, its actual convolution, and an independently encoded scalar output, then derive their exact decoded-prefix agreement.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0018 prime_field_polynomial_scale_zero_value

Every actual scalar-zero output is an actually all-zero prefix, without primality and without dropping the scalar bound on an empty input.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0019 prime_field_polynomial_convolution_right_scale_zero

An actual product with a scalar-zero right input has a genuine zero output prefix at its actual proper length, including empty factors and composite nonzero moduli.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG001A prime_field_polynomial_append_shift_constant_add

Every actual appended prefix is the actual aligned sum of a genuine trailing-zero shift and the leading-padded singleton constant; the last and earlier entries are proved separately, including M=0.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG001C prime_field_convolution_coefficient_right_append_add

At every natural coefficient index, an actual right append is the actual field sum of the old convolution coefficient and the product with the padded singleton constant, using genuine diagonal sums and residues rather than a finite-evaluation identity.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG001D prime_field_polynomial_shift_scale_aligned_sum_exists

Construct actual shift and scalar outputs, harmless leading paddings to the common length L+S N, and their actual coefficient sum; the commuted S N+L bound is explicitly reconciled, including both empty inputs.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG001E prime_field_polynomial_convolution_right_append_equivalent

An actual right-factor append satisfies A*append(C,c) formally equivalent to X*(A*C)+c*A through genuine products and arbitrary actual aligned sum outputs. Lengths are not falsely equated in empty cases, and no finite-field evaluation agreement replaces all formal coefficients.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG001F prime_field_polynomial_convolution_right_append_exists

From an actual old product and a canonical next coefficient, construct the appended right factor, its proper product, the shift and scalar outputs, both aligned paddings and the actual sum, then prove the formal recurrence. No output existence or polynomial identity is assumed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0020 prime_field_polynomial_shift_equivalent_congruent

Two actual trailing-zero shifts preserve formal coefficient equivalence across arbitrary represented lengths, including empty prefixes. The proof obtains actual predecessor-power coefficients and compares decoded values, without any modulus, primality, coefficient-bound, raw-code identity, or evaluation-equality assumption.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0021 prime_field_polynomial_convolution_shift_scale_aligned_equivalent

For actual AB and AQ, multiplying an actual leading-pad-aligned sum XQ+cB by A is formally equivalent to every actual aligned sum X(AQ)+c(AB). All four intermediate products are genuinely constructed, scalar and shift outputs remain actual graph witnesses, proper product lengths are independent, and no associativity hypothesis or output equality is assumed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0022 prime_field_polynomial_shift_scale_aligned_congruent

Formal equivalence of two old prefixes preserves every actual aligned sum of their trailing-zero shifts with a fixed actual scalar multiple of the same source. Both old lengths, all shift/scale encodings, both leading paddings and the sum encodings remain independent; only formal output coefficients are concluded equal.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0023 prime_field_polynomial_convolution_associativity_append_step

An actual formal-coefficient associativity hypothesis for one rightmost prefix extends through one genuine appended coefficient. Every old and new product is an actual proper-length convolution; the proof derives the canonical appended coefficient bound, constructs three real shift/scale/pad/add alignments and a real intermediate product, and concludes only the next formal equivalence. Empty factors are retained, no successor product-length identity is assumed, and the induction step alone is not full associativity.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0024 prime_field_polynomial_nested_empty_right_equivalent

At every nonzero modulus, actual Q=B*empty, R=P*empty and S=A*Q have formally equivalent all-zero outputs, for arbitrary actual P. The argument constructs the genuine empty zero-prefix fact and transports it through the real products; it assumes neither P=AB nor an output-length shortcut.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0025 prime_field_polynomial_convolution_associative_equivalent

Draft universal rightmost-length induction for formal equivalence of actual (A*B)*C and A*(B*C). The induction predicate quantifies all rightmost codes and proper-length output triples, the successor genuinely constructs three prefix products and decodes the actual endpoint, and the empty base retains arbitrary encodings. This statement is not a successful proof observation until its original body and its exact step dependency are genuinely checked.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0026 prime_field_polynomial_right_divides_from_product

A genuine proper-length Q*D and formal equivalence to a canonical target give actual right-factor divisibility, with the quotient and output witnesses retained.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0029 prime_field_polynomial_right_divides_equivalent_target

Changing the canonical target by all-power formal coefficient equivalence preserves the same genuine quotient/product witnesses, independently of representation length.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG002A prime_field_polynomial_right_divides_empty

Every canonical divisor divides every encoding of the empty polynomial, using an actual empty quotient and actual empty product. No prime, nonzero modulus or nonempty divisor assumption is needed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG002B prime_field_polynomial_right_divides_equivalent_divisor

An equivalent canonical right divisor preserves divisibility by constructing the quotient times the replacement at its own actual proper length. Formal output congruence, not a supplied output identity, gives the new witness.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG002C prime_field_polynomial_right_divides_transitive

Actual Q1*D equivalent to A and Q2*A equivalent to B give the actual composite quotient Q2*Q1. Three genuine intermediate products, formal associativity and right-input congruence prove its product with D equivalent to B. No commutativity, fixed representation lengths or raw-code identities are assumed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG002D polynomial_diagonal_left_unit_first_term

The first actual antidiagonal term of a length-one left unit is the chosen right-input coefficient, without any primality or commutativity assumption.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG002E polynomial_diagonal_left_unit_tail_term

Every later term is zero because its left input index is outside a genuine length-one prefix. The value of that prefix is irrelevant here.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG002F polynomial_diagonal_left_unit_natural_sum

An actual unit-left antidiagonal sum equals its first coefficient: construct the one-term sum and use the proved zero-tail invariant on all remaining actual summands.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0030 prime_field_convolution_coefficient_left_unit

The actual residue of the unit-left natural sum is its already bounded right-input value. No polynomial equality is hidden among the premises.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0033 prime_field_polynomial_convolution_left_unit_exists

Construct an actual canonical length-one unit and its actual length-L left product, formally equal to A. The proper length is zero when A is empty.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0034 prime_field_polynomial_right_divides_reflexive

Every canonical polynomial right-divides itself using a constructed left unit and actual product. Empty and zero prefixes are included, without assuming commutative multiplication.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0039 prime_field_polynomial_common_representatives_exists

Use the explicit common length L+M to construct real canonical representatives for any two independently sized inputs, including zero lengths.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG003A prime_field_polynomial_common_representatives_functional

Any two choices of common representatives are pairwise formally equivalent, even at different common lengths; no raw-code or length uniqueness is asserted.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG003C prime_field_polynomial_aligned_add_from_common

Package actual common representatives, an actual coefficient sum, and formal output equivalence while retaining all three original canonical coefficient guards.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG003D prime_field_polynomial_aligned_add_bounded

Aligned addition includes canonical coefficients for the actual originals and output, not merely for equivalent witnesses.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG003E prime_field_polynomial_aligned_add_from_fixed

Every genuine fixed-length addition supplies its own actual common representatives and is an aligned addition, without an extra prime hypothesis.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG003F prime_field_polynomial_aligned_add_transport

Independent formal recoding of all three canonical originals preserves a real aligned sum; canonicality is never inferred solely from equivalence.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0041 prime_field_polynomial_aligned_add_functional

Two actual aligned sums represent the same formal polynomial even when their witnesses, original output lengths, and beta codes differ.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0042 prime_field_polynomial_aligned_add_exists

Construct a genuine canonical aligned sum at the explicit length L+M from any two canonical inputs, rather than assuming operation witnesses.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0043 prime_field_polynomial_aligned_add_realize

Realize the addition on any supplied canonical equal-length representatives: construct a sum, prove formal output uniqueness, then transport the actual operation by decoded coefficient equality.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0045 prime_field_polynomial_aligned_subtract_exists

Construct actual aligned field subtraction at length L+M, using real canonical common representatives and the genuine solution B+R=A.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0046 prime_field_polynomial_aligned_add_cancel_left

Cancel a common addend from actual aligned sums: construct four real common-length prefixes, realize both additions and apply checked coefficient subtraction functionality.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0047 prime_field_polynomial_aligned_add_associative

Both actual bracketings of three independently sized polynomials give formally equivalent outputs; all seven comparison prefixes and all four coefficient operations are genuinely constructed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0049 prime_field_polynomial_add_trim_aligned

An actual fixed-length sum and actual trim supply real common representatives for the canonical product and trimmed remainder; no prime premise or equality of unused beta entries is needed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG004A prime_field_polynomial_division_execution_aligned_identity

Every actual prime-field division execution yields an actual proper Q*B product and the aligned formal identity A=Q*B+R, including an empty quotient whose ambient zero product has a different length.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG004B prime_field_polynomial_aligned_convolution_left_add

Actual left products distribute over an independently represented aligned sum: construct real equal-length products of its witnesses and prove formal equivalence to the three supplied outputs, including empty-factor cases.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG004C prime_field_polynomial_aligned_convolution_right_add

Actual right products distribute over an independently represented aligned sum: construct real equal-length products of its witnesses and prove formal equivalence to the three supplied outputs, including empty-factor cases.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG004D polynomial_diagonal_left_constant_first_term

The first actual antidiagonal term of a genuine left singleton is the ordered natural product k*a. No modulus, coefficient bound, or commutativity premise is needed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG004E polynomial_diagonal_left_constant_natural_sum

The actual finite natural sum equals k*a: construct its one-term sum and use the existing zero-tail invariant for every subsequent summand. The total need not itself be a canonical field coefficient.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG004F prime_field_convolution_coefficient_left_constant

Every actual in-range constant-left convolution coefficient is the canonical residue of the ordered product k*a. Both input bounds and the actual natural-sum witness are explicit; primality is unnecessary for this implication.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0050 prime_field_polynomial_left_constant_product_to_scale

An actual length-L product of a canonical left singleton and a length-L prefix yields the existing scalar graph, even when L=0. The scalar bound follows from the singleton rather than from vacuous output entries.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0051 prime_field_polynomial_scale_to_left_constant_product

Recover the genuine LEFT-constant convolution on the supplied scalar-output codes. Every needed antidiagonal sum is actually constructed and its residue identified; the empty proper-length branch is separate, including scalar zero and characteristic two.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0052 prime_field_polynomial_left_constant_product_exists

Construct the canonical singleton and actual scalar output, then prove their genuine left-factor product using those same output codes. Empty source prefixes still require a canonical scalar and singleton; no beta-code uniqueness or gcd endpoint is claimed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0053 prime_field_polynomial_division_remainder_length_descent

Every actual normalized remainder has retained length at most d and strictly less than the actual divisor length S d. The zero branch is handled directly; the nonzero branch uses its genuine represented-degree length equation.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0054 prime_field_polynomial_division_constant_remainder_empty

Actual division by the nonzero degree-zero divisor produces an empty normalized remainder, including an empty dividend. This assigns no degree to the zero polynomial.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0055 prime_field_polynomial_scale_implies_right_divides

A genuine scalar output is a right multiple of its source: construct an actual LEFT singleton quotient and actual product, then transport the independently encoded product to the supplied target by decoded-prefix equality. Empty inputs and scalar zero are included.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0056 prime_field_polynomial_monic_normalization_right_associates

An actual monic normalization and its genuinely inverted scalar action supply actual right-divisibility witnesses in both directions. These witnesses use left constant quotients; no polynomial commutativity, unit-associate oracle, or equality of beta codes is used.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0057 prime_field_polynomial_normalized_right_associate_exists

Construct a zero-or-monic right associate of every canonical polynomial, first trimming its actual leading zeros and then normalizing only a nonempty trim. Both divisibility directions have real product witnesses and are transported to the original representation. Empty and all-zero encodings need no degree or inverse of zero.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0058 prime_field_polynomial_right_divides_aligned_add

A common actual right divisor divides the genuine aligned add: construct the corresponding quotient operation and its proper product, use checked right distributivity and compare real aligned sums.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0059 prime_field_polynomial_right_divides_aligned_subtract

A common actual right divisor divides the genuine aligned subtract: construct the corresponding quotient operation and its proper product, use checked right distributivity and compare real aligned sums.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG005A prime_field_polynomial_right_divides_left_product

An actual right divisor of B divides every actual left multiple Q*B; the composed quotient is supplied by the checked constructive transitivity theorem.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG005C prime_field_polynomial_division_execution_common_right_divisors

Every genuine polynomial division execution preserves common right divisors, including the empty quotient and zero remainder, with its aligned identity constructed from the execution.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG005D prime_field_polynomial_euclidean_backward_coefficient_identity

From genuine products and the actual difference T=U-V*Q, prove G=V*A+T*B by ordered distributivity, actual convolution associativity and aligned addition reassociation; the desired sum is a conclusion.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG005E prime_field_polynomial_bezout_euclidean_backward

Construct W=V*Q, T=U-W, and genuine new products to turn an actual Bezout representation for (B,R) into one for (A,B), with both coefficient-update graphs returned as witnesses.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG005F prime_field_polynomial_division_execution_bezout_backward

A real division execution automatically supplies the proper Euclidean identity and constructs the exact backward Bezout coefficient update, including an empty quotient.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0060 prime_field_polynomial_aligned_add_empty_right

Construct a real zero prefix at the input length and its formal equivalence to the empty polynomial, giving an actual aligned right-zero sum for every canonical input.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0061 prime_field_polynomial_bezout_from_right_multiple

An actual right multiple G of A supplies its real left quotient U. With the empty coefficient V, construct V*B and an actual aligned sum to give G=U*A+V*B. The second input only needs canonical coefficients.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0062 prime_field_polynomial_bezout_equivalent_transport

Independently recode both inputs and the result by formal coefficient equivalence, retaining the same Bezout coefficients. Construct both new proper products; output equivalences are proved, not supplied as premises. No primality is needed beyond a nonzero modulus.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0063 prime_field_polynomial_bezout_common_right_divisor

Every actual common right divisor of A and B divides any actual Bezout representative G=U*A+V*B. This is the greatestness implication, not an assertion that an arbitrary Bezout representative divides either input.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0064 prime_field_polynomial_division_remainder_bounded

The actual trim inside division supplies canonical remainder coefficients, including its empty branch; no primality or degree of zero is assumed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0065 prime_field_polynomial_reduced_representative_exists

Construct a formally equivalent canonical representative of no greater retained length, either empty or with an actual nonzero leading coefficient and represented degree. This trims stored leading zeros without requiring a prime modulus.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0066 prime_field_polynomial_gcd_bezout_empty_second

Construct an already zero-or-monic common divisor and actual Bezout coefficients for (A,empty), using genuine mutual right-associate witnesses. Empty and all-zero A, including (0,0), require no inverse or degree of zero.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0067 prime_field_polynomial_gcd_bezout_equivalent_second

Replace the second input by any formally equivalent canonical representation while keeping the same zero-or-monic common divisor and the same Bezout coefficients; both new products remain witnessed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0068 prime_field_polynomial_gcd_bezout_division_backward

Carry an already normalized common divisor through an actual Euclidean step. Construct the new coefficients V and U-V*Q from actual products and aligned subtraction, preserving the same G.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0069 prime_field_polynomial_gcd_bezout_exists_up_to

Ordinary natural induction constructs actual normalized gcd and Bezout witnesses for every pair with second retained length at most n. Both input triples are generalized, a stored zero divisor is trimmed before division, and every genuine recursive call has a proved smaller bound.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG006A prime_field_polynomial_gcd_bezout_exists

Take the actual second representation length as induction bound. No supplied quotient, gcd, degree, termination certificate, or Bezout coefficients are premises.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG006B prime_field_polynomial_bezout_is_right_gcd

A common right divisor with an actual Bezout representation satisfies the full universally quantified greatestness property, including a zero gcd; no normalization assumption is needed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG006C prime_field_polynomial_normalized_gcd_bezout_exists

Every pair of canonical polynomials over a prime field has an actual zero-or-monic greatest common right divisor and actual Bezout coefficients. The normalized-gcd definition and the existing Bezout graph occur literally in the conclusion.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0070 prime_field_polynomial_right_divides_represented_factorization

Trim the actual quotient, construct an independent proper-length product, and transport formal coefficients. Its genuine nonzero degree e satisfies e+d=a; no quotient degree or domain cancellation is assumed.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0072 prime_field_polynomial_monic_singleton_multiple_equivalent

Both monic heads force an actual left singleton quotient to have coefficient one, by the ordered leading product k*1. The genuine left-unit convolution law then gives formal equivalence.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0074 prime_field_polynomial_monic_right_associates_equivalent

Mutual right divisibility forces equal represented degrees. Both actual monic normalizations then force formal coefficient equivalence, without selecting unique beta codes.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0076 prime_field_polynomial_normal_right_associates_equivalent

Two zero-or-monic mutual right associates are formally equivalent, including both-zero and one-empty branches. Both normalization premises are essential; beta encodings need not agree.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PG0077 prime_field_polynomial_normalized_gcd_equivalent_unique

The grouped normal/common-divisor/greatestness graph yields mutual right associates, hence uniqueness only up to formal coefficient equivalence. This does not assert unique beta codes or Bezout coefficients.

Alpha v34 checked-use · first admitted v34 · independently kernel and Lean verified; not Stable
PD0001 Le(a,b)

Witness-defined non-strict order on natural numbers.

Conservative definition · notation layer 0
PD0002 Lt(a,b)

Witness-defined strict order on natural numbers.

Conservative definition · notation layer 0
PD0004 Prime(p)

p is nonunit and every factorization of p has a unit factor.

Conservative definition · notation layer 0
PD0008 ModEq(m,a,b)

Balanced-natural congruence modulo m.

Conservative definition · notation layer 0
PD0013 BetaAt(b,c,i,x)

x is the bounded beta-decoded value at index i.

Conservative definition · notation layer 0
PD0015 Sum(b,c,l,z)

z is the sum of a beta-coded prefix of length l.

Conservative definition · notation layer 1
PD0019 Repeat(b,c,a,l)

The decoded prefix repeats a for l positions.

Conservative definition · notation layer 1
ND0229 FpAdd(p,a,b,c)

Bounded operands and the actual canonical residue of their natural sum. The old ND0023 residue graph is reused exactly.

Conservative definition · notation layer 2
ND0230 FpMul(p,a,b,c)

Bounded operands and the actual canonical residue of their natural product; no multiplication law is assumed.

Conservative definition · notation layer 2
ND0262 BetaPrefixInto(b,c,l,B)

Every actual beta entry below the strict length l has a witnessed value below B. The same generic graph describes canonical polynomial coefficients when B is the modulus; empty prefixes are allowed.

Conservative definition · notation layer 1
ND0263 BetaPrefixEqual(b,c,d,e,l)

Every decoded source entry at i<l also decodes in the target. Actual beta totality and functionality make this extensional prefix equality, not equality of the two code parameters.

Conservative definition · notation layer 1
ND0270 FpPolyAdd(p,ab,ac,bb,bc,cb,cc,l)

Witnessed canonical addition at each aligned coefficient position. Coefficients are highest-degree-first, and l is a common representation length, not a claimed degree.

Conservative definition · notation layer 3
ND0271 FpPolyScale(p,k,ab,ac,bb,bc,l)

A scalar k<p and actual canonical field products at every coefficient index i<l. The empty polynomial retains the scalar bound and denotes zero.

Conservative definition · notation layer 3
ND0291 BetaZeroExtend(b,c,L,i,a)

Decode the genuine beta entry when i<L and return zero when L<=i. This explicitly length-annotated zero extension imposes no false condition on raw beta values beyond the represented prefix.

Conservative definition · notation layer 1
ND0292 PolynomialDiagonalTerm(ab,ac,L,bb,bc,M,i,j,t)

Witness k with j+k=i and multiply the two actual zero-extended coefficients. These are natural products in a highest-degree-first antidiagonal, before reduction modulo the field prime.

Conservative definition · notation layer 2
ND0296 PolynomialProductLength(L,M,N)

The proper product representation is empty if either input is empty; otherwise L+M=S N. This is a representation-length relation, not a claim that a possibly zero-leading polynomial has that degree.

Conservative definition · notation layer 0
ND0297 FpPolyProduct(p,ab,ac,L,bb,bc,M,cb,cc,N)

Canonical input prefixes, the proper product length, and a genuine convolution output prefix. Terms beyond this length vanish by a separate support theorem, not by assuming the discarded tail is zero.

Conservative definition · notation layer 6
ND0298 FpRepresentedDegree(p,b,c,L,d)

A length-annotated canonical coefficient prefix has L=S d and an actually decoded nonzero leading coefficient. This does not assign degree to zero or normalize arbitrary leading-zero representations.

Conservative definition · notation layer 2
ND0328 FpCoefficientSubtraction(p,ab,ac,bb,bc,rb,rc,L)

At each aligned i<L, actual source entries a,b and result entry r satisfy FpAdd(p,b,r,a). All values are the inherited canonical natural field representatives. The graph assumes no subtraction identity, output construction, degree or equality of raw beta codes. Empty prefixes remain vacuous at every modulus.

Conservative definition · notation layer 3
ND0329 PolynomialSuffix(b,c,t,d,e,M)

For every i<M and actual source value at t+i, the target beta prefix records that same value at i. No coefficient bound, primality, total input length, zero-prefix condition or suffix construction is assumed. The affine-slice construction theorem is not itself a definition-expansion edge.

Conservative definition · notation layer 1
ND0330 FpPolynomialTrim(p,b,c,L,t,d,e,M)

The actual input has canonical coefficients and length L=t+M, its first t coefficients are zero, and an actual suffix code has length M. The suffix is empty or its decoded head is nonzero. Primality, a claimed degree, length uniqueness and an output-code uniqueness law are not definition clauses.

Conservative definition · notation layer 2
ND0331 FpMonic(p,b,c,L)

A nonempty canonical coefficient prefix has actual leading coefficient natural 1. Its length is still a representation annotation, not a degree definition; the empty zero polynomial is excluded. Natural field one is not signed code 2, and primality is not included in this graph.

Conservative definition · notation layer 2
ND0232 FpInv(p,a,b)

An explicitly nonzero input and an actual product equal to canonical one. This relation never declares zero invertible.

Conservative definition · notation layer 3
ND0332 FpMonicNormalization(p,k,ab,ac,bb,bc,L)

For nonempty length L, k is an actual inherited field inverse of the decoded source leading coefficient, and the result is its actual coefficientwise FpPolyScale action. Result monicity, degree preservation and represented-value uniqueness are separate conclusions, not premises. A recorded inverse can also exist at a composite modulus.

Conservative definition · notation layer 4
ND0334 PolynomialLeftPad(b,c,L,t,d,e)

The target has t actual leading zero entries and then copies the L decoded source entries. It has annotated length t+L. This is left padding in highest-degree-first order, not right padding or multiplication by X. Canonical coefficients, a field modulus and formal polynomial equality are not assumptions of this graph.

Conservative definition · notation layer 1
ND0335 PolynomialPowerCoefficient(b,c,L,k,a)

The actual coefficient of X^k is decoded at the index i with i+S k=L, or is zero when L<=k. Empty representations therefore have every formal coefficient zero. This is a coefficient of a formal polynomial, not its value at a field element.

Conservative definition · notation layer 1
ND0336 PolynomialEquivalent(b,c,L,d,e,M)

At every natural power, every actual decoded coefficient of the two length-annotated polynomials agrees. Different representation lengths and beta encodings are allowed. This does not identify polynomials merely because their evaluations agree over a finite field; coefficient existence and equivalence laws are separate theorems.

Conservative definition · notation layer 2
ND0339 PolynomialQuotientLength(L,d,q)

The representation length q is zero with L<=d, or q is nonzero with q+d=L. Here the divisor has length S d. This specifies max(L-d,0) without a subtraction function and says nothing about the resulting polynomial degree or a quotient identity.

Conservative definition · notation layer 1
ND0337 FpPolynomialQuotientStep(p,k,ab,ac,bb,bc,M,qb,qc,i,q)

Read the actual input coefficient a, compute the convolution coefficient c using only the already-built length-i quotient prefix, choose the actual field difference s with c+s=a, and record q=k*s. The supplied k need not yet be an inverse. Correctness of the resulting coefficient cancellation is a proved consequence, not a clause of this execution step.

Conservative definition · notation layer 5
ND0338 FpPolynomialQuotientPrefix(p,k,ab,ac,bb,bc,M,qb,qc,N)

Each actual quotient entry at i<N satisfies the genuine triangular execution step using only its earlier quotient prefix. The empty execution is meaningful for every encoding and modulus. Construction, canonical bounds, functionality and coefficient recovery are not graph premises.

Conservative definition · notation layer 6
ND0340 FpPolynomialDivisionExecution(p,ab,ac,L,bb,bc,d,qb,qc,q,rb,rc,R)

Canonical input coefficients, the quotient representation length, an actual inverse of the decoded divisor head, and an actual quotient execution are recorded. An ambient length-L convolution prefix P is constructed, the actual aligned difference A-P is formed, and its leading zeros are trimmed to the remainder. Neither A=Q*B+R nor a remainder-degree bound is assumed; both require separate proof. Primality is an existence hypothesis, not a definition clause. Empty quotients and empty remainders are retained.

Conservative definition · notation layer 7
ND0341 PolynomialShift(b,c,L,d,e)

Copy the actual length-L decoded prefix and append a genuine zero at index L. The target length is S L. This is multiplication by X, not harmless leading-zero padding. Primality, canonical bounds, covariance and formal equivalence are not clauses of this graph. Raw beta codes and later entries remain unrestricted.

Conservative definition · notation layer 2
ND0342 FpPolynomialRightDivides(p,db,dc,D,ab,ac,L)

The target A is canonical and there are actual quotient and product triples Q,P such that Q*D=P and P is formally coefficient-equivalent to A. D is the right factor. Product lengths and beta encodings are independent; field evaluations or raw code equality do not replace formal equivalence. Primality, gcd existence and Bezout witnesses are not definition clauses.

Conservative definition · notation layer 7
ND0343 CommonRepresentatives(ab,ac,L,bb,bc,M,ub,uc,vb,vc,K)

A_L is formally coefficient-equivalent to U_K and B_M to V_K. The two equivalences form one literal grouped conjunction. No coefficient bound, prime modulus, upper bound on the original lengths, existence witness, raw-code equality or field-evaluation equality is a clause. Legitimate shorter representatives and independent beta encodings are allowed.

Conservative definition · notation layer 3
ND0344 FpPolynomialAlignedAdd(p,ab,ac,L,bb,bc,M,rb,rc,N)

All three originals A_L, B_M and R_N have canonical coefficients. There exist actual common-length representatives U_K,V_K and a true coefficient sum T_K, with CommonRepresentatives(A,B,U,V,K), FpPolyAdd(U,V,T,K), and formal coefficient equivalence T_K~R_N. Primality, existence, uniqueness and algebraic laws are separate theorem statements, not definition clauses.

Conservative definition · notation layer 4
ND0345 FpPolynomialAlignedSubtract(p,ab,ac,L,bb,bc,M,rb,rc,N)

The literal argument permutation FpPolynomialAlignedAdd(p,B_M,R_N,A_L): B+R=A with all three original coefficient guards and actual sum witnesses. This is not an additional subtraction oracle or a proved subtraction law.

Conservative definition · notation layer 5
ND0346 FpPolynomialCommonRightDivisor(p,db,dc,D,ab,ac,L,bb,bc,M)

D is an actual right divisor of both canonical targets A and B, using two independent quotient/product witness sets. The two RightDivides clauses form one literal conjunction. Existence of a common divisor, greatestness, primality and a gcd theorem are not definition clauses.

Conservative definition · notation layer 8
ND0347 FpPolynomialBezoutRepresentation(p,ab,ac,A,bb,bc,B,gb,gc,G,ub,uc,U,vb,vc,V)

There are actual proper products U*A=P and V*B=Q, and an actual aligned sum P+Q=G. Codes and all five original representation lengths remain independent. This is representation data, not a Bezout-existence theorem, a gcd or greatestness result, evaluation equality, or equality of raw codes.

Conservative definition · notation layer 7
ND0348 FpPolynomialZeroOrMonic(p,gb,gc,G)

The representation is empty or is an actual nonempty canonical monic prefix. No primality or existence claim is included; empty codes are unrestricted.

Conservative definition · notation layer 3

Only proof arrows are theorem dependencies. Definition arrows are hygienic abbreviations of exact first-order formulas and introduce no axiom or kernel symbol.