Current library: Alpha v34, 4,223 checked-use theorems; Stable remains 432. Historical first admissions, original proof editions, and non-admitted aliases are preserved. Exact original first-admission records.
Statement with defined notation
∀ p. ∀ q. ∀ i. ∀ rb. ∀ rc. ∀ l. (∀ x. Lt(x,l) → ∃ y. BetaAt(rb,rc,x,y) ∧ (y = 0 ∧ (Lt(q · S i,p · S x) ∧ ¬Lt(p · S x,q · S i)) ∨ y = 1 ∧ (Lt(p · S x,q · S i) ∧ ¬Lt(q · S i,p · S x)))) → AllBits(rb,rc,l)Every purple notation token opens its conservative definition. This is a reading surface; the compiler expands the statement before the unchanged kernel checks it.
Definitions used by this theorem
In the theorem statement
7 occurrences
In local proof propositions
11 occurrences
Exact expanded native-PA statement
forall p q i rb rc l. (forall eri_column_row_indicator_bits_prefix. (exists eri_gap_row_indicator_bits_prefix_bound. eri_gap_row_indicator_bits_prefix_bound + S (eri_column_row_indicator_bits_prefix) = l) -> exists eri_bit_row_indicator_bits_prefix. ((((exists ff_h_eri_row_indicator_bits_prefix_decoded. ff_h_eri_row_indicator_bits_prefix_decoded + S (eri_bit_row_indicator_bits_prefix) = S ((S (eri_column_row_indicator_bits_prefix)) * rc)) /\ exists ff_q_eri_row_indicator_bits_prefix_decoded. rb = ff_q_eri_row_indicator_bits_prefix_decoded * S ((S (eri_column_row_indicator_bits_prefix)) * rc) + (eri_bit_row_indicator_bits_prefix))) /\ (((eri_bit_row_indicator_bits_prefix = 0 /\ ((exists eri_gap_row_indicator_bits_prefix_choice_left. eri_gap_row_indicator_bits_prefix_choice_left + S (q * S i) = p * S eri_column_row_indicator_bits_prefix) /\ ~(exists eri_gap_row_indicator_bits_prefix_choice_right. eri_gap_row_indicator_bits_prefix_choice_right + S (p * S eri_column_row_indicator_bits_prefix) = q * S i))) \/ (eri_bit_row_indicator_bits_prefix = 1 /\ ((exists eri_gap_row_indicator_bits_prefix_choice_right. eri_gap_row_indicator_bits_prefix_choice_right + S (p * S eri_column_row_indicator_bits_prefix) = q * S i) /\ ~(exists eri_gap_row_indicator_bits_prefix_choice_left. eri_gap_row_indicator_bits_prefix_choice_left + S (q * S i) = p * S eri_column_row_indicator_bits_prefix))))))) -> (forall ff_i_row_indicator_all_bits. (exists ff_lt_row_indicator_all_bits_bound. ff_lt_row_indicator_all_bits_bound + S ff_i_row_indicator_all_bits = l) -> exists ff_bit_row_indicator_all_bits. ((((exists ff_h_row_indicator_all_bits_decoded. ff_h_row_indicator_all_bits_decoded + S (ff_bit_row_indicator_all_bits) = S ((S (ff_i_row_indicator_all_bits)) * rc)) /\ exists ff_q_row_indicator_all_bits_decoded. rb = ff_q_row_indicator_all_bits_decoded * S ((S (ff_i_row_indicator_all_bits)) * rc) + (ff_bit_row_indicator_all_bits))) /\ (ff_bit_row_indicator_all_bits = 0 \/ ff_bit_row_indicator_all_bits = 1)))Proof neighborhood
Direct theorem prerequisites
Direct theorem dependents
Definition-aware tactic body
Only local propositions introduced by have or suffices are compacted. The untrusted compiler re-expands each one before the original tactic script is replayed; defined notation is never accepted by the kernel. Open the exact replay line beneath every changed command.
Read the argument
Proof checkpoints
This is a reading aid, not a new proof or a proof-tree certificate. Checkpoint groups are consecutive commands, not inferred branch boundaries. Every step links to the preserved script.
01Fix variables and assumptionsL1–9
02Establish hentryL10–12
Establish this local claim before using it. It is not an additional assumption.
- L10
have hentry : ∀ eri_column_row_indicator_bits_entry_source. Lt(eri_column_row_indicator_bits_entry_source,l) → ∃ x. BetaAt(rb,rc,eri_column_row_indicator_bits_entry_source,x) ∧ (x = 0 ∧ (Lt(q · S i,p · S eri_column_row_indicator_bits_entry_source) ∧ ¬Lt(p · S eri_column_row_indicator_bits_entry_source,q · S i)) ∨ x = 1 ∧ (Lt(p · S eri_column_row_indicator_bits_entry_source,q · S i) ∧ ¬Lt(q · S i,p · S eri_column_row_indicator_bits_entry_source)))Definitions: Lt(eri_column_row_indicator_bits_entry_source,l)BetaAt(rb,rc,eri_column_row_indicator_bits_entry_source,x)Lt(q · S i,p · S eri_column_row_indicator_bits_entry_source)Lt(p · S eri_column_row_indicator_bits_entry_source,q · S i)Original native command in the exact edition - L11
exact hprefix - L12
specialize hentry j
03Establish hstoredL13–15
Establish this local claim before using it. It is not an additional assumption. The following proof commands apply hentry.
- L13
have hstored : ∃ bit. BetaAt(rb,rc,j,bit) ∧ (bit = 0 ∧ (Lt(q · S i,p · S j) ∧ ¬Lt(p · S j,q · S i)) ∨ bit = 1 ∧ (Lt(p · S j,q · S i) ∧ ¬Lt(q · S i,p · S j)))Definitions: BetaAt(rb,rc,j,bit)Lt(q · S i,p · S j)Lt(p · S j,q · S i)Original native command in the exact edition - L14
apply hentry - L15
exact hj
04Separate the logical casesL16–17
05Construct an explicit witnessL18–18
Supply the displayed value, then prove that it has the required property.
- L18
exists x
06Separate the logical casesL19–19
Follow the explicit conjunction, disjunction, witness, or contradiction step recorded below.
- L19
split
07Use earlier factsL20–20
Instantiate or apply named facts and discharge the corresponding proof obligations.
- L20
exact hstored_witness_left
08Separate the logical casesL21–23
09Use earlier factsL24–24
Instantiate or apply named facts and discharge the corresponding proof obligations.
- L24
exact hstored_witness_right_left_left
10Separate the logical casesL25–26
11Use earlier factsL27–27
Instantiate or apply named facts and discharge the corresponding proof obligations.
- L27
exact hstored_witness_right_right_left
Original defined command ledger · 27 lines
- 0001
intro p - 0002
intro q - 0003
intro i - 0004
intro rb - 0005
intro rc - 0006
intro l - 0007
intro hprefix - 0008
intro j - 0009
intro hj - 0010
have hentry : ∀ eri_column_row_indicator_bits_entry_source. Lt(eri_column_row_indicator_bits_entry_source,l) → ∃ x. BetaAt(rb,rc,eri_column_row_indicator_bits_entry_source,x) ∧ (x = 0 ∧ (Lt(q · S i,p · S eri_column_row_indicator_bits_entry_source) ∧ ¬Lt(p · S eri_column_row_indicator_bits_entry_source,q · S i)) ∨ x = 1 ∧ (Lt(p · S eri_column_row_indicator_bits_entry_source,q · S i) ∧ ¬Lt(q · S i,p · S eri_column_row_indicator_bits_entry_source)))Exact native replay line
have hentry : forall eri_column_row_indicator_bits_entry_source. (exists eri_gap_row_indicator_bits_entry_source_bound. eri_gap_row_indicator_bits_entry_source_bound + S (eri_column_row_indicator_bits_entry_source) = l) -> exists eri_bit_row_indicator_bits_entry_source. ((((exists ff_h_eri_row_indicator_bits_entry_source_decoded. ff_h_eri_row_indicator_bits_entry_source_decoded + S (eri_bit_row_indicator_bits_entry_source) = S ((S (eri_column_row_indicator_bits_entry_source)) * rc)) /\ exists ff_q_eri_row_indicator_bits_entry_source_decoded. rb = ff_q_eri_row_indicator_bits_entry_source_decoded * S ((S (eri_column_row_indicator_bits_entry_source)) * rc) + (eri_bit_row_indicator_bits_entry_source))) /\ (((eri_bit_row_indicator_bits_entry_source = 0 /\ ((exists eri_gap_row_indicator_bits_entry_source_choice_left. eri_gap_row_indicator_bits_entry_source_choice_left + S (q * S i) = p * S eri_column_row_indicator_bits_entry_source) /\ ~(exists eri_gap_row_indicator_bits_entry_source_choice_right. eri_gap_row_indicator_bits_entry_source_choice_right + S (p * S eri_column_row_indicator_bits_entry_source) = q * S i))) \/ (eri_bit_row_indicator_bits_entry_source = 1 /\ ((exists eri_gap_row_indicator_bits_entry_source_choice_right. eri_gap_row_indicator_bits_entry_source_choice_right + S (p * S eri_column_row_indicator_bits_entry_source) = q * S i) /\ ~(exists eri_gap_row_indicator_bits_entry_source_choice_left. eri_gap_row_indicator_bits_entry_source_choice_left + S (q * S i) = p * S eri_column_row_indicator_bits_entry_source)))))) - 0011
exact hprefix - 0012
specialize hentry j - 0013
have hstored : ∃ bit. BetaAt(rb,rc,j,bit) ∧ (bit = 0 ∧ (Lt(q · S i,p · S j) ∧ ¬Lt(p · S j,q · S i)) ∨ bit = 1 ∧ (Lt(p · S j,q · S i) ∧ ¬Lt(q · S i,p · S j)))Exact native replay line
have hstored : exists bit. ((((exists ff_h_row_indicator_bits_stored. ff_h_row_indicator_bits_stored + S (bit) = S ((S (j)) * rc)) /\ exists ff_q_row_indicator_bits_stored. rb = ff_q_row_indicator_bits_stored * S ((S (j)) * rc) + (bit))) /\ (((bit = 0 /\ ((exists eri_gap_row_indicator_bits_choice_left. eri_gap_row_indicator_bits_choice_left + S (q * S i) = p * S j) /\ ~(exists eri_gap_row_indicator_bits_choice_right. eri_gap_row_indicator_bits_choice_right + S (p * S j) = q * S i))) \/ (bit = 1 /\ ((exists eri_gap_row_indicator_bits_choice_right. eri_gap_row_indicator_bits_choice_right + S (p * S j) = q * S i) /\ ~(exists eri_gap_row_indicator_bits_choice_left. eri_gap_row_indicator_bits_choice_left + S (q * S i) = p * S j)))))) - 0014
apply hentry - 0015
exact hj - 0016
cases hstored - 0017
cases hstored_witness - 0018
exists x - 0019
split - 0020
exact hstored_witness_left - 0021
cases hstored_witness_right - 0022
cases hstored_witness_right_left - 0023
left - 0024
exact hstored_witness_right_left_left - 0025
cases hstored_witness_right_right - 0026
right - 0027
exact hstored_witness_right_right_left