Current library: Alpha v34, 4,223 checked-use theorems; Stable remains 432. Historical first admissions, original proof editions, and non-admitted aliases are preserved. Exact original first-admission records.
Statement with defined notation
∀ p. ∀ s. ∀ r. ∀ b. ∀ c. ∀ l. l = S s · S s → Prime(p) → FloorSqrt(p,s) → Dvd(p,r · r + 1) → (∀ x. Lt(x,l) → ∃ y. ∃ z. ∃ n. ∃ m. x = S s · y + z ∧ (Lt(z,S s) ∧ (r · y + z = p · n + m ∧ (Lt(m,p) ∧ BetaAt(b,c,x,m))))) → (∃ x. ∃ y. ∃ z. Lt(x,l) ∧ (Lt(y,l) ∧ (¬x = y ∧ (BetaAt(b,c,x,z) ∧ BetaAt(b,c,y,z))))) → ∃ x. ∃ y. p = x · x + y · yEvery purple notation token opens its conservative definition. This reading surface never changes the unchanged intuitionistic kernel or confers checked-use authority.
Definitions used by this theorem
In the theorem statement
In local proof propositions
Exact expanded first-order statement
forall p s r b c l. l = S s * S s -> ((~(p = 1) /\ forall frm_prime_left_ftpr_prime frm_prime_right_ftpr_prime. p = frm_prime_left_ftpr_prime * frm_prime_right_ftpr_prime -> frm_prime_left_ftpr_prime = 1 \/ frm_prime_right_ftpr_prime = 1)) -> (((exists bcs_sqrt_lower_gap_ftpr_floor. bcs_sqrt_lower_gap_ftpr_floor + (s) * (s) = (p)) /\ exists bcs_sqrt_upper_gap_ftpr_floor. bcs_sqrt_upper_gap_ftpr_floor + S (p) = S (s) * S (s))) -> (exists ftcn_factor_prime_root. (r * r + 1) = (p) * ftcn_factor_prime_root) -> (forall ftrg_index_ftpr_grid. (exists ftrg_gap_ftpr_grid_index. ftrg_gap_ftpr_grid_index + S (ftrg_index_ftpr_grid) = (l)) -> exists ftrg_row_ftpr_grid ftrg_column_ftpr_grid ftrg_quotient_ftpr_grid ftrg_remainder_ftpr_grid. ((ftrg_index_ftpr_grid) = (S s) * ftrg_row_ftpr_grid + ftrg_column_ftpr_grid /\ ((exists ftrg_gap_ftpr_grid_column. ftrg_gap_ftpr_grid_column + S (ftrg_column_ftpr_grid) = (S s)) /\ ((r * ftrg_row_ftpr_grid + ftrg_column_ftpr_grid = (p) * ftrg_quotient_ftpr_grid + ftrg_remainder_ftpr_grid) /\ ((exists ftrg_gap_ftpr_grid_residue. ftrg_gap_ftpr_grid_residue + S (ftrg_remainder_ftpr_grid) = (p)) /\ (((exists ff_h_ftrg_ftpr_grid_entry. ff_h_ftrg_ftpr_grid_entry + S (ftrg_remainder_ftpr_grid) = S ((S (ftrg_index_ftpr_grid)) * c)) /\ exists ff_q_ftrg_ftpr_grid_entry. b = ff_q_ftrg_ftpr_grid_entry * S ((S (ftrg_index_ftpr_grid)) * c) + (ftrg_remainder_ftpr_grid)))))))) -> (exists ftsp_first_ftpr_collision ftsp_second_ftpr_collision ftsp_value_ftpr_collision. ((exists ftsp_gap_ftpr_collision_first. ftsp_gap_ftpr_collision_first + S (ftsp_first_ftpr_collision) = l) /\ ((exists ftsp_gap_ftpr_collision_second. ftsp_gap_ftpr_collision_second + S (ftsp_second_ftpr_collision) = l) /\ (~(ftsp_first_ftpr_collision = ftsp_second_ftpr_collision) /\ ((((exists ff_h_ftsp_ftpr_collision_left. ff_h_ftsp_ftpr_collision_left + S (ftsp_value_ftpr_collision) = S ((S (ftsp_first_ftpr_collision)) * c)) /\ exists ff_q_ftsp_ftpr_collision_left. b = ff_q_ftsp_ftpr_collision_left * S ((S (ftsp_first_ftpr_collision)) * c) + (ftsp_value_ftpr_collision))) /\ (((exists ff_h_ftsp_ftpr_collision_right. ff_h_ftsp_ftpr_collision_right + S (ftsp_value_ftpr_collision) = S ((S (ftsp_second_ftpr_collision)) * c)) /\ exists ff_q_ftsp_ftpr_collision_right. b = ff_q_ftsp_ftpr_collision_right * S ((S (ftsp_second_ftpr_collision)) * c) + (ftsp_value_ftpr_collision)))))))) -> exists x y. p = x * x + y * yProof neighborhood
Direct theorem prerequisites
TS001K shared_beta_collision_remainders_equal TS001L equal_remainder_affine_values_balanced_congruent TS001M prime_floor_decoded_affine_collision_represents_primeDirect theorem dependents
Definition-aware tactic body
Only propositions whose conservative expansion has been checked for exact first-order equivalence are compacted. Every changed line retains its immutable exact replay command.
Read the argument
Proof checkpoints
This is a reading aid, not a new proof or a proof-tree certificate. Checkpoint groups are consecutive commands, not inferred branch boundaries. Every step links to the preserved script.
Named ingredients (3)
01Fix variables and assumptionsL1–10
02Fix variables and assumptionsL11–12
03Separate the logical casesL13–19
Follow the explicit conjunction, disjunction, witness, or contradiction step recorded below.
04Establish hfirstpointL20–23
Establish this local claim before using it. It is not an additional assumption. The following proof commands apply hgrid.
- L20
have hfirstpoint : ∃ i. ∃ j. ∃ q. ∃ t. x = S s · i + j ∧ (Lt(j,S s) ∧ (r · i + j = p · q + t ∧ (Lt(t,p) ∧ BetaAt(b,c,x,t))))Definitions: Lt(j,S s)Lt(t,p)BetaAt(b,c,x,t)Original native command in the exact edition - L21
specialize hgrid x - L22
apply hgrid - L23
exact hcollision_witness_witness_witness_left
05Separate the logical casesL24–31
Follow the explicit conjunction, disjunction, witness, or contradiction step recorded below.
- L24
cases hfirstpoint - L25
cases hfirstpoint_witness - L26
cases hfirstpoint_witness_witness - L27
cases hfirstpoint_witness_witness_witness - L28
cases hfirstpoint_witness_witness_witness_witness - L29
cases hfirstpoint_witness_witness_witness_witness_right - L30
cases hfirstpoint_witness_witness_witness_witness_right_right - L31
cases hfirstpoint_witness_witness_witness_witness_right_right_right
06Establish hsecondpointL32–35
Establish this local claim before using it. It is not an additional assumption. The following proof commands apply hgrid.
- L32
have hsecondpoint : ∃ i. ∃ j. ∃ q. ∃ t. x1 = S s · i + j ∧ (Lt(j,S s) ∧ (r · i + j = p · q + t ∧ (Lt(t,p) ∧ BetaAt(b,c,x1,t))))Definitions: Lt(j,S s)Lt(t,p)BetaAt(b,c,x1,t)Original native command in the exact edition - L33
specialize hgrid x1 - L34
apply hgrid - L35
exact hcollision_witness_witness_witness_right_left
07Separate the logical casesL36–43
Follow the explicit conjunction, disjunction, witness, or contradiction step recorded below.
- L36
cases hsecondpoint - L37
cases hsecondpoint_witness - L38
cases hsecondpoint_witness_witness - L39
cases hsecondpoint_witness_witness_witness - L40
cases hsecondpoint_witness_witness_witness_witness - L41
cases hsecondpoint_witness_witness_witness_witness_right - L42
cases hsecondpoint_witness_witness_witness_witness_right_right - L43
cases hsecondpoint_witness_witness_witness_witness_right_right_right
08Establish hremainderL44–53
Establish this local claim before using it. It is not an additional assumption. The following proof commands apply shared beta collision remainders equal.
- L44
have hremainder : x6 = x10 - L45
specialize shared_beta_collision_remainders_equal b - L46
specialize shared_beta_collision_remainders_equal c - L47
specialize shared_beta_collision_remainders_equal x - L48
specialize shared_beta_collision_remainders_equal x1 - L49
specialize shared_beta_collision_remainders_equal x6 - L50
specialize shared_beta_collision_remainders_equal x10 - L51
specialize shared_beta_collision_remainders_equal x2 - L52
apply shared_beta_collision_remainders_equal - L53
exact hfirstpoint_witness_witness_witness_witness_right_right_right_right
09Use earlier factsL54–56
10Calculate and transport equalitiesL57–57
Carry out the recorded arithmetic or equality steps; inspect the exact commands for their direction and premises.
- L57
rewrite hremainder at hfirstpoint_witness_witness_witness_witness_right_right_left
11Establish haffineL58–67
Establish this local claim before using it. It is not an additional assumption.
- L58
have haffine : ModEq(p,r · x3 + x4,r · x7 + x8)Definitions: ModEq(p,r · x3 + x4,r · x7 + x8)Original native command in the exact edition - L59
specialize equal_remainder_affine_values_balanced_congruent p - L60
specialize equal_remainder_affine_values_balanced_congruent r - L61
specialize equal_remainder_affine_values_balanced_congruent x3 - L62
specialize equal_remainder_affine_values_balanced_congruent x4 - L63
specialize equal_remainder_affine_values_balanced_congruent x5 - L64
specialize equal_remainder_affine_values_balanced_congruent x7 - L65
specialize equal_remainder_affine_values_balanced_congruent x8 - L66
specialize equal_remainder_affine_values_balanced_congruent x9 - L67
specialize equal_remainder_affine_values_balanced_congruent x10
12Use earlier factsL68–70
13Calculate and transport equalitiesL71–72
14Use earlier factsL73–82
Instantiate or apply named facts and discharge the corresponding proof obligations.
- L73
specialize prime_floor_decoded_affine_collision_represents_prime p - L74
specialize prime_floor_decoded_affine_collision_represents_prime s - L75
specialize prime_floor_decoded_affine_collision_represents_prime r - L76
specialize prime_floor_decoded_affine_collision_represents_prime x3 - L77
specialize prime_floor_decoded_affine_collision_represents_prime x4 - L78
specialize prime_floor_decoded_affine_collision_represents_prime x7 - L79
specialize prime_floor_decoded_affine_collision_represents_prime x8 - L80
specialize prime_floor_decoded_affine_collision_represents_prime x - L81
specialize prime_floor_decoded_affine_collision_represents_prime x1 - L82
apply prime_floor_decoded_affine_collision_represents_prime
15Use earlier factsL83–92
Instantiate or apply named facts and discharge the corresponding proof obligations.
- L83
exact hprime - L84
exact hfloor - L85
exact hroot - L86
exact hfirstpoint_witness_witness_witness_witness_left - L87
exact hsecondpoint_witness_witness_witness_witness_left - L88
exact hcollision_witness_witness_witness_left - L89
exact hcollision_witness_witness_witness_right_left - L90
exact hfirstpoint_witness_witness_witness_witness_right_left - L91
exact hsecondpoint_witness_witness_witness_witness_right_left - L92
exact hcollision_witness_witness_witness_right_right_left
16Use earlier factsL93–93
Instantiate or apply named facts and discharge the corresponding proof obligations.
- L93
exact haffine
Original defined command ledger · 93 lines
- 0001
intro p - 0002
intro s - 0003
intro r - 0004
intro b - 0005
intro c - 0006
intro l - 0007
intro hlength - 0008
intro hprime - 0009
intro hfloor - 0010
intro hroot - 0011
intro hgrid - 0012
intro hcollision - 0013
cases hcollision - 0014
cases hcollision_witness - 0015
cases hcollision_witness_witness - 0016
cases hcollision_witness_witness_witness - 0017
cases hcollision_witness_witness_witness_right - 0018
cases hcollision_witness_witness_witness_right_right - 0019
cases hcollision_witness_witness_witness_right_right_right - 0020
have hfirstpoint : ∃ i. ∃ j. ∃ q. ∃ t. x = S s · i + j ∧ (Lt(j,S s) ∧ (r · i + j = p · q + t ∧ (Lt(t,p) ∧ BetaAt(b,c,x,t))))Exact native replay line
have hfirstpoint : exists i j q t. ((x) = (S s) * i + j /\ ((exists ftcn_strict_point_first_column. ftcn_strict_point_first_column + S (j) = (S s)) /\ ((r * i + j = (p) * q + t) /\ ((exists ftcn_strict_point_first_residue. ftcn_strict_point_first_residue + S (t) = (p)) /\ (((exists ff_h_ftpr_point_first. ff_h_ftpr_point_first + S (t) = S ((S (x)) * c)) /\ exists ff_q_ftpr_point_first. b = ff_q_ftpr_point_first * S ((S (x)) * c) + (t))))))) - 0021
specialize hgrid x - 0022
apply hgrid - 0023
exact hcollision_witness_witness_witness_left - 0024
cases hfirstpoint - 0025
cases hfirstpoint_witness - 0026
cases hfirstpoint_witness_witness - 0027
cases hfirstpoint_witness_witness_witness - 0028
cases hfirstpoint_witness_witness_witness_witness - 0029
cases hfirstpoint_witness_witness_witness_witness_right - 0030
cases hfirstpoint_witness_witness_witness_witness_right_right - 0031
cases hfirstpoint_witness_witness_witness_witness_right_right_right - 0032
have hsecondpoint : ∃ i. ∃ j. ∃ q. ∃ t. x1 = S s · i + j ∧ (Lt(j,S s) ∧ (r · i + j = p · q + t ∧ (Lt(t,p) ∧ BetaAt(b,c,x1,t))))Exact native replay line
have hsecondpoint : exists i j q t. ((x1) = (S s) * i + j /\ ((exists ftcn_strict_point_second_column. ftcn_strict_point_second_column + S (j) = (S s)) /\ ((r * i + j = (p) * q + t) /\ ((exists ftcn_strict_point_second_residue. ftcn_strict_point_second_residue + S (t) = (p)) /\ (((exists ff_h_ftpr_point_second. ff_h_ftpr_point_second + S (t) = S ((S (x1)) * c)) /\ exists ff_q_ftpr_point_second. b = ff_q_ftpr_point_second * S ((S (x1)) * c) + (t))))))) - 0033
specialize hgrid x1 - 0034
apply hgrid - 0035
exact hcollision_witness_witness_witness_right_left - 0036
cases hsecondpoint - 0037
cases hsecondpoint_witness - 0038
cases hsecondpoint_witness_witness - 0039
cases hsecondpoint_witness_witness_witness - 0040
cases hsecondpoint_witness_witness_witness_witness - 0041
cases hsecondpoint_witness_witness_witness_witness_right - 0042
cases hsecondpoint_witness_witness_witness_witness_right_right - 0043
cases hsecondpoint_witness_witness_witness_witness_right_right_right - 0044
have hremainder : x6 = x10 - 0045
specialize shared_beta_collision_remainders_equal b - 0046
specialize shared_beta_collision_remainders_equal c - 0047
specialize shared_beta_collision_remainders_equal x - 0048
specialize shared_beta_collision_remainders_equal x1 - 0049
specialize shared_beta_collision_remainders_equal x6 - 0050
specialize shared_beta_collision_remainders_equal x10 - 0051
specialize shared_beta_collision_remainders_equal x2 - 0052
apply shared_beta_collision_remainders_equal - 0053
exact hfirstpoint_witness_witness_witness_witness_right_right_right_right - 0054
exact hcollision_witness_witness_witness_right_right_right_left - 0055
exact hsecondpoint_witness_witness_witness_witness_right_right_right_right - 0056
exact hcollision_witness_witness_witness_right_right_right_right - 0057
rewrite hremainder at hfirstpoint_witness_witness_witness_witness_right_right_left - 0058
have haffine : ModEq(p,r · x3 + x4,r · x7 + x8)Exact native replay line
have haffine : exists ftcn_left_grid_affine ftcn_right_grid_affine. (r * x3 + x4) + (p) * ftcn_left_grid_affine = (r * x7 + x8) + (p) * ftcn_right_grid_affine - 0059
specialize equal_remainder_affine_values_balanced_congruent p - 0060
specialize equal_remainder_affine_values_balanced_congruent r - 0061
specialize equal_remainder_affine_values_balanced_congruent x3 - 0062
specialize equal_remainder_affine_values_balanced_congruent x4 - 0063
specialize equal_remainder_affine_values_balanced_congruent x5 - 0064
specialize equal_remainder_affine_values_balanced_congruent x7 - 0065
specialize equal_remainder_affine_values_balanced_congruent x8 - 0066
specialize equal_remainder_affine_values_balanced_congruent x9 - 0067
specialize equal_remainder_affine_values_balanced_congruent x10 - 0068
apply equal_remainder_affine_values_balanced_congruent - 0069
exact hfirstpoint_witness_witness_witness_witness_right_right_left - 0070
exact hsecondpoint_witness_witness_witness_witness_right_right_left - 0071
rewrite hlength at hcollision_witness_witness_witness_left - 0072
rewrite hlength at hcollision_witness_witness_witness_right_left - 0073
specialize prime_floor_decoded_affine_collision_represents_prime p - 0074
specialize prime_floor_decoded_affine_collision_represents_prime s - 0075
specialize prime_floor_decoded_affine_collision_represents_prime r - 0076
specialize prime_floor_decoded_affine_collision_represents_prime x3 - 0077
specialize prime_floor_decoded_affine_collision_represents_prime x4 - 0078
specialize prime_floor_decoded_affine_collision_represents_prime x7 - 0079
specialize prime_floor_decoded_affine_collision_represents_prime x8 - 0080
specialize prime_floor_decoded_affine_collision_represents_prime x - 0081
specialize prime_floor_decoded_affine_collision_represents_prime x1 - 0082
apply prime_floor_decoded_affine_collision_represents_prime - 0083
exact hprime - 0084
exact hfloor - 0085
exact hroot - 0086
exact hfirstpoint_witness_witness_witness_witness_left - 0087
exact hsecondpoint_witness_witness_witness_witness_left - 0088
exact hcollision_witness_witness_witness_left - 0089
exact hcollision_witness_witness_witness_right_left - 0090
exact hfirstpoint_witness_witness_witness_witness_right_left - 0091
exact hsecondpoint_witness_witness_witness_witness_right_left - 0092
exact hcollision_witness_witness_witness_right_right_left - 0093
exact haffine