For a probability distribution with sorted atoms p₁↓ ≥ p₂↓ ≥ … ≥ p_k↓, the
body B_k is defined by p_k↓ ≥ (1 − p₂↓ − (1 − p₂↓)^k)/(k − 1).
Main theorem (stability). For every k ≥ 4, additive convolution
preserves B_k on every finite abelian group of order k, and
multiplicative convolution preserves it on every finite field of that order.
The formalization proves the sharper algebraic statement suggested by the
permutation argument: convolution for any finite quasigroup operation
preserves B_k. It also covers an operation with an absorbing zero whose
nonzero part is a quasigroup, so the field multiplication theorem is a
special case. No associativity, commutativity, identity, inverse, or
compatibility between the two operations is needed.
The body is full-dimensional, contains the point masses and the uniform law, and has an explicit normalized-volume formula with a sharp exponential scale.
The paper is all_q_standalone.tex, with the
rendered artifact at
output/pdf/read_once_value_distributions.pdf.
The Rronce/ library machine-checks the stability and geometric theorems on
top of Mathlib. Its proof chain uses no sorry, no native_decide, and no
new axioms; the exported endpoints depend only on propext,
Classical.choice, and Quot.sound. (The Lean development retains the
letter q for the field order in its identifiers and statements; the paper
now writes k.)
Finished, kernel-only:
- the
B_kaddition gate for everyk ≥ 4, over any finite abelian group (Rronce.Bq.add_gate_preserves_Bq); - the
B_kmultiplication gate for every finite field of orderk ≥ 4(Rronce.Bq.mul_gate_preserves_Bq); - the quasigroup extension of both gates: every operation whose left and
right translations are permutations preserves
B_k, as does every absorbing-zero operation with that property off zero (Rronce.Bq.quasigroup_conv_preserves_Bq,zero_quasigroup_conv_preserves_Bq, and the combinedquasigroup_gates_preserve_Bq); - the read-once application: over every finite field of order
k ≥ 4, the exact rational value distribution of every read-once formula on independent uniform inputs lies inB_k(Rronce.General.main_membership_qge4); the derived inequalityp₁↓ − p_k↓ ≤ (1 − p₂↓)^kholds over every finite field of order≥ 2(Rronce.General.main_conjecture_qge2, with the historicalq ≥ 4formulation retained asmain_conjecture_qge4); - geometric nonvacuity of
B_k: the uniform vector is an ambient interior point, with an explicit sup-norm ball of radius(k-1)^(k-1) / (2*k^k)contained in the invariant (Rronce.Bq.uniformVector_mem_interior_memBq); - the quantitative normalized-volume bound
vol(B_k)/vol(Δ_(k-1)) ≥ ((k-1)^(k-1)/(2*k^k))^(k-1) > 0for closed Borel chart sets (Rronce.Bq.volume_fraction_measurable,volume_fraction_lower_bound, andvolume_fraction_positive); - the exact normalized volume and its sharp exponential scale: an
explicit one-dimensional inclusion--exclusion integral
(
Rronce.Bq.exact_volume_formula), together withlog(vol(B_k)/vol(Δ_(k-1)))/k → Λ_*and the equivalent root limit(vol(B_k)/vol(Δ_(k-1)))^(1/k) → exp(Λ_*) = 0.2183305369...(Rronce.Bq.exact_volume_exponential_asymptoticsandexact_volume_root_asymptotics), where the exact rate is selected by a proved-unique positive saddle.
Build / verify (Lean v4.32.2, Mathlib v4.32.2, both pinned in
lean-toolchain / lake-manifest.json):
lake exe cache get # fetch the Mathlib build cache
lake build # builds the whole library
lake env lean AxiomCheck.lean # restates the endpoints; prints trust baseAxiomCheck.lean restates each finished theorem against
its frozen statement file (so it only typechecks with no hidden weakening)
and #print axioms reports the exact trust base.
Bq/— the invariant body: frozen gate statements (Statement.lean,MulStatement.lean, and the proof-free quasigroup extensionQuasigroupStatement.lean), the machine-checked addition theorem (AddProof.lean/AddGate.lean), and the completed all-qmultiplication proof (Mul/, assembled byMulProof.leanand exposed byMulGate.lean). The generalized proof is assembled inQuasigroupProof.leanand exposed byQuasigroupGate.lean. The directory also contains the explicit full-dimensionality certificate for the invariant body (Nonvacuity.lean) and the normalized-volume theorem (VolumeStatement.leanis proof-free,VolumeProof.leansupplies the proof, andVolume.leanis the public header). The exact integral and asymptotic rate are frozen separately in the proof-freeExactVolumeStatement.lean; the clipped-cube, order-statistic, scaling, exponential-tilt, concentration, and Stirling proofs live underBq/ExactVolume/, are assembled byExactVolumeProof.lean, and are exported byExactVolume.lean.General/— the read-once application: frozen formula and probability statements (Statement.lean,AllOrdersStatement.lean,GateReductionStatement.lean), the recursive-law semantics with the read-once identification andB_qinduction, and the public endpoints exposed byAllOrders.lean.Q4/Statement.lean— the frozen historicalq = 4specialization, retained for audit compatibility. The original certificate-basedq = 4proof (Q4/Distribution/,RealLift/,certs/; ~15M lines of generated interval-arithmetic certificates discharged bynative_decide) has been removed from the working tree for digestibility once the analytic all-qroute made it redundant; it is preserved in git history (commit2448df8and earlier).
all_q_standalone.tex— the paper: the bodyB_k, its exact normalized volume and sharp exponential scale, the addition and multiplication gate theorems and their quasigroup strengthening, scalar endpoint appendices, and a Lean formalization appendix listing the audited endpoints, with the main Lean statements reproduced verbatim in a final appendix.output/pdf/read_once_value_distributions.pdf— the rendered and visually checked paper.- Historical development notes, exploratory searches, and the obsolete
q = 4TeX/certificate atlas have been removed; git history preserves them.
The paper source is a single self-contained file. Build with:
mkdir -p output/pdf
pdflatex -interaction=nonstopmode -halt-on-error \
-jobname=read_once_value_distributions \
-output-directory=output/pdf all_q_standalone.tex
# Run the same command once more to stabilize references.The Lean development and all repository content are released under the Apache License 2.0, matching the Lean 4 and Mathlib convention.