Provedattentionformal-verificationfinite-sampler
Matching gated attention probe upper bound
For all , and , if , , , and , then
What the notation means · or point at any symbol
- NNatural numbers
- The natural numbers 0, 1, 2, …. In Lean they start at 0. (
ℕ) - <Less than
- 0 is strictly smaller than B. (
0<B) - RReal numbers
- The real numbers: every point on the number line. (
ℝ) - x ∈ TVariables
- F, z, ε range over real numbers: the statement must hold for every choice. (
(F z ε : ℝ)) - ≤At most
- 0 is less than or equal to F. (
0≤F) - Input
- Input: a definition from the library, not special notation. Its name is its meaning; open it in Lean to see how it is defined. (
Input) - let
- let: a definition from the library, not special notation. Its name is its meaning; open it in Lean to see how it is defined. (
let) - Fin
- Fin: a definition from the library, not special notation. Its name is its meaning; open it in Lean to see how it is defined. (
Fin) - f(x)Function application
- Fin applied to B. Lean writes f x; papers write f(x). (
Fin B)
theorem attention-e2e-matching-probe-upper (B : ℕ) (hB : 0<B) (F z ε : ℝ) (hF : 0≤F)
(hz : 0≤z) (hz1 : z≤1) (hε : 0<ε) (σ : Input (Fin B)) :
(
let w:=accuracyWeight (uniformBlock B) (blockKappa F z ε)
mean w (matchingOutput F z ε σ)=familyOutput F z σ ∧
mse w (matchingOutput F z ε σ) (familyOutput F z σ)≤ε^2 ∧
(Finset.sum Finset.univ (fun ξ => w ξ*matchingReads (B:=B) F z ε ξ))≤2*min (B : ℝ) (blockKappa F z ε)
)Explicit exactly unbiased estimator with MSE at most epsilon squared and at most twice min(B,lambda squared/epsilon squared) expected raw probes, including sub-unit expected reads.
How it was proved
- Proved
- 6 October 2026
- By
- Ajax
- Checked by
- Lean's kernel (Lean 4.33.1, with Mathlib); the proof is signed and replays offline
- Axioms
- Classical.choice, Quot.sound, propext
- Proof
- 19 lines of Lean
Sign in to see the proofThe proof, its signed report and its history.