proofs
Proveddrift-lawdecodeself-certifyingexactness

Snapshot reuse cost, self-certified: E_{π_s}[w²]/E_{π_s}[w]² = Z_s Z_{2t−s} / Z_t² for weights w = e^{t−s} drawn from a snapshot row π_s

For all J∈Type⁡\htmlData{mx=1}{J \in \htmlData{mx=0}{\operatorname{Type}}} and s,t:J→R\htmlData{mx=3}{s, t : \htmlData{mx=0}{J} \mathrel{\htmlData{mx=2}{\to}} \htmlData{mx=1}{\mathbb{R}}} (given Fintype⁡ J\htmlData{mx=2}{\htmlData{mx=0}{\operatorname{Fintype}}\,\htmlData{mx=1}{J}} and Nonempty⁡ J\htmlData{mx=2}{\htmlData{mx=0}{\operatorname{Nonempty}}\,\htmlData{mx=1}{J}}):

∑jes(j)∑kes(k)⋅et(j)−s(j)2(∑jes(j)∑kes(k)⋅et(j)−s(j))2=(∑kes(k))⋅(∑ke2t(k)−s(k))(∑ket(k))2\begin{aligned} & \htmlData{mx=43}{\frac{\htmlData{mx=21}{\sum_{j} \htmlData{mx=20}{\htmlData{mx=10}{\frac{\htmlData{mx=4}{e^{\htmlData{mx=3}{\htmlData{mx=1}{s}(\htmlData{mx=2}{j})}}}}{\htmlData{mx=9}{\sum_{k} \htmlData{mx=8}{e^{\htmlData{mx=7}{\htmlData{mx=5}{s}(\htmlData{mx=6}{k})}}}}}} \cdot \htmlData{mx=19}{\htmlData{mx=18}{e^{\htmlData{mx=17}{\htmlData{mx=13}{\htmlData{mx=11}{t}(\htmlData{mx=12}{j})} - \htmlData{mx=16}{\htmlData{mx=14}{s}(\htmlData{mx=15}{j})}}}}^{2}}}}}{\htmlData{mx=42}{\left(\htmlData{mx=41}{\sum_{j} \htmlData{mx=40}{\htmlData{mx=31}{\frac{\htmlData{mx=25}{e^{\htmlData{mx=24}{\htmlData{mx=22}{s}(\htmlData{mx=23}{j})}}}}{\htmlData{mx=30}{\sum_{k} \htmlData{mx=29}{e^{\htmlData{mx=28}{\htmlData{mx=26}{s}(\htmlData{mx=27}{k})}}}}}} \cdot \htmlData{mx=39}{e^{\htmlData{mx=38}{\htmlData{mx=34}{\htmlData{mx=32}{t}(\htmlData{mx=33}{j})} - \htmlData{mx=37}{\htmlData{mx=35}{s}(\htmlData{mx=36}{j})}}}}}}\right)^{2}}}} \\ & \quad \htmlData{mx=0}{=} \htmlData{mx=66}{\frac{\htmlData{mx=59}{\left(\htmlData{mx=48}{\sum_{k} \htmlData{mx=47}{e^{\htmlData{mx=46}{\htmlData{mx=44}{s}(\htmlData{mx=45}{k})}}}}\right) \cdot \left(\htmlData{mx=58}{\sum_{k} \htmlData{mx=57}{e^{\htmlData{mx=56}{\htmlData{mx=52}{2\htmlData{mx=51}{\htmlData{mx=49}{t}(\htmlData{mx=50}{k})}} - \htmlData{mx=55}{\htmlData{mx=53}{s}(\htmlData{mx=54}{k})}}}}}\right)}}{\htmlData{mx=65}{\left(\htmlData{mx=64}{\sum_{k} \htmlData{mx=63}{e^{\htmlData{mx=62}{\htmlData{mx=60}{t}(\htmlData{mx=61}{k})}}}}\right)^{2}}}} \end{aligned}
What the notation means · or point at any symbol
Type
Type: a definition from the library, not special notation. Its name is its meaning; open it in Lean to see how it is defined. (Type)
Fintype
Fintype: a definition from the library, not special notation. Its name is its meaning; open it in Lean to see how it is defined. (Fintype)
f(x)Function application
Fintype applied to J. Lean writes f x; papers write f(x). (Fintype J)
Nonempty
Nonempty: a definition from the library, not special notation. Its name is its meaning; open it in Lean to see how it is defined. (Nonempty)
⟹Implies
If J, then ℝ. (Between types, A → B is the type of functions from A to B.) (J → ℝ)
x : TVariables
s, t range over J → ℝ: the statement must hold for every choice. ((s t : J → ℝ))
=Equality
(∑ j, exp(s(j))/(∑ k, exp(s(k))) · exp(t(j) − s(j))^2)/(∑ … and (∑ k, exp(s(k))) · (∑ k, exp(2 · t(k) − s(k)))/(∑ k, exp(t… are the same. ((∑ j, (Real.exp (s j) / ∑ k, Real.exp (…)
RReal numbers
The real numbers: every point on the number line. (ℝ)
·Multiplication
exp(s(j))/(∑ k, exp(s(k))) times exp(t(j) − s(j))^2. ((Real.exp (s j) / ∑ k, Real.exp (s k)) …)
eˣExponential function
e raised to the power s(j), where e ≈ 2.718. (Real.exp (s j))
a/bDivision
exp(s(j)) divided by ∑ k, exp(s(k)). In Lean, dividing by 0 gives 0. (Real.exp (s j) / ∑ k, Real.exp (s k))
∑Summation
Add up exp(s(k)) for every k. (∑ k, Real.exp (s k))
aᵇPower
exp(t(j) − s(j)) raised to the power 2. (Real.exp (t j - s j) ^ 2)
-Subtraction
t(j) minus s(j). On ℕ, Lean's subtraction stops at 0: 2 − 5 = 0. (t j - s j)

The ratio the self-certificate measures from snapshot draws equals the exact reuse cost 1 + χ²(π_t‖π_s), the Fisher-Cover tilt cost. Snapshot SNIS made unbiased by MLMC therefore needs no worst-case tilt certificate: the draws certify the cost, and the snapshot is refreshed when it crosses a threshold. Closes the Drift Law exactness gap exposed by norm-product looseness on trained models (arXiv 2609.06327). Part of 'The Drift Law' (certificate-free exact variant: snapshot SNIS + MLMC with a self-certified cost).

How it was proved

Proved
5 October 2026
By
Ajax, with the agent “Baguette math & proofs (Claude Code, 2026-10-03)”
Checked by
Lean's kernel (Lean 4.33.1, with Mathlib); the proof is signed and replays offline
Axioms
Classical.choice, Quot.sound, propext
Proof
26 lines of Lean
Sign in to see the proofThe proof, its signed report and its history.

More proved statements