Formalization: Exact Randomized Designs for Two-Block Interference Experiments
The complete Lean development behind this paper — every definition, lemma, and theorem of its module, including helpers the paper text never cites. Identifiers link within this page, into the Causalean library, or out to the official Mathlib docs.
Basic 45 declarations All certificates live on the reduced triangle T_m in the spectral coordinates (x,y,z) produced by lem:block-spectral-coordinates; the objective there is the linear-plus-weighted-Frobenius form phi.
Environment S2 — reduced spectral-coordinate world (real objective geometry)
All certificates live on the reduced triangle T_m in the spectral coordinates
(x,y,z) produced by lem:block-spectral-coordinates; the objective there is the
linear-plus-weighted-Frobenius form phi. These are the shared reduced primitives.
Reduced multiplicity weight q = 2(m-1) (block-contrast eigenspace multiplicity; a derived constant, NOT the core tradeoff ratio r).
Definition (Lean source)
The reduced triangle T_m = {x,y,z ≥ 0 : q x + y + z = 2m}. @realizes X(u,v)(reduced coordinates x,y,z on T_m)
Definition (Lean source)
The reduced objective φ(x,y,z) = c_x x + c_y y + c_z z + κ √(q x² + y² + z²). @realizes F_{r,kappa}(X)(reduced form c_x x + c_y y + c_z z + κ‖·‖) @realizes kappa(carrier ℝ; robustness weight on the Frobenius term κ√(q x²+y²+z²); range [0,∞) pinned by the 0 ≤ kappa premises threaded through the consuming theorems/lemmas)
Definition (Lean source)
Reduced linear coefficient on x: c_x = q((a+b) + r/(a+b)). @realizes F_{r,kappa}(X)(c_x = q((a+b)+r/(a+b))) @realizes r(carrier ℝ; tradeoff ratio entering c_x via the r/(a+b) term) @realizes a(within-block weight in a+b and r/(a+b)) @realizes b(cross-block weight in a+b and r/(a+b))
Reduced linear coefficient on y: c_y = 2b + r/(2b). @realizes F_{r,kappa}(X)(c_y = 2b + r/(2b)) @realizes r(carrier ℝ; tradeoff ratio entering c_y via the r/(2b) term) @realizes b(cross-block weight in 2b and r/(2b))
Definition (Lean source)
Reduced linear coefficient on z: c_z = 2m. @realizes F_{r,kappa}(X)(c_z = 2m)
Definition (Lean source)
Parity feasibility threshold d_m = 0 (m even), 2/m (m odd).
Definition (Lean source)
Frobenius (Schatten-2) norm ‖X‖_{S_2} = √(∑ᵢⱼ Xᵢⱼ²). @realizes F_{r,kappa}(X)(κ‖X‖_{S_2}, Frobenius norm)
Definition (Lean source)
The all-ones matrix J_n = 1_n 1_nᵀ. @realizes J_n(all-ones matrix)
Definition (Lean source)
The community sign vector s_m (+1 on block A_m = {i : i < m}, −1 on B_m). @realizes s_m(sign vector +1 on A_m, −1 on B_m)
Orthogonal projection onto span 1_n, i.e. J_n / n.
Orthogonal projection onto span s_m, i.e. s_m s_mᵀ / n.
The block-symmetric matrix X(u,v): diagonal 1, common within-block off-diagonal entry u, common across-block entry v. @realizes X(u,v)(diag 1, within-block u, across-block v)
The weighted two-block homophily adjacency W: a/m within a block, b/m across blocks, 0 on the diagonal. @realizes G_m(a,b)(within-block a/m, across-block b/m, diag 0) @realizes a(within-block edge weight a/m; range 0<b<a pinned by TwoBlockHomophily) @realizes b(cross-block edge weight b/m; range 0<b pinned by TwoBlockHomophily) @realizes A_m, B_m(two communities via block membership i.val < m, |A_m|=|B_m|=m)
The graph Laplacian L_m = D − W of the two-block graph (D the degree diagonal). @realizes L_m(graph Laplacian of G_m(a,b))
Definition (Lean source)
The Moore–Penrose pseudoinverse L_m^†, realized by its spectral action: eigenvalues 1/(a+b) on the block-contrast subspace, 1/(2b) on span s_m, 0 on span 1_n (the only way it is consumed downstream). @realizes L_m^dagger(pseudoinverse via spectral action 1/(a+b), 1/(2b), 0)
The cut covariance X_cut = s_m s_mᵀ. @realizes X_cut(s_m s_mᵀ)
The spread covariance X_spread with reduced coordinates (m/(m-1), 0, 0) (the u = -1/(m-1), v = 0 block-symmetric point).
Definition (Lean source)
The normalized design objective F_{r,κ}(X) = Tr(L_m X) + r Tr(L_m^† X) + κ ‖X‖_{S_2} + Tr(J_n X). @realizes F_{r,kappa}(X)(Tr(L_m X) + r Tr(L_m^† X) + κ‖X‖ + Tr(J_n X)) @realizes r(carrier ℝ; homophily tradeoff weight on the r * Tr(L^† X) term) @realizes kappa(carrier ℝ; robustness weight on the Schatten-2 penalty κ‖X‖_{S_2}; range [0,∞) pinned by the 0 ≤ kappa premises threaded through the consuming theorems/lemmas)
Definition (Lean source)
Two-block homophily: m ≥ 2 and a > b > 0 (within-block weight strictly dominates the positive cross-block weight).
Definition (Lean source)
Low-scale two-block normalization a + 3b < 2m (ensures D = 2m − a − 3b > 0).
Definition (Lean source)
Odd community size (parity feasibility: forces S_A, S_B odd, so y + z ≥ 2/m).
Definition (Lean source)
Membership witness for the block-symmetric elliptope slice E_m^blk, over the two-block homophily regime. Its member atom is ass:two-block-homophily; the three inequalities are exactly the PSD constraints of the spectral coordinates x = 1−u, y = 1+(m−1)u−mv, z = 1+(m−1)u+mv.
Definition (Lean source)
The block-symmetric elliptope slice E_m^blk as a set of matrices. @realizes E_m^blk(set of PSD block-symmetric correlation matrices X(u,v))
Definition (Lean source)
The ±1 sign vector of an assignment z (true ↦ +1, false ↦ −1). @realizes Z(±1 assignment sign vector)
The cut assignment s_m (treat block A_m, control block B_m).
The reversed cut assignment −s_m.
The assignment second-moment matrix X(P) = E_P[Z Zᵀ]. @realizes X(P)(second-moment matrix E_P[Z Zᵀ]) @realizes P(design-law argument D : FiniteDesign (Fin (2*m) → Bool), the law over which the second moment is taken)
Definition (Lean source)
The cut design P_cut: mass 1/2 on s_m and 1/2 on −s_m. @realizes P_cut(½ δ_{s_m} + ½ δ_{−s_m}) @realizes P(cluster member — CONCRETE CARRIER+CONSTRAINTS instance: a FiniteDesign (Fin (2*m) → Bool), i.e. a probability law on {-1,1}^n, whose p_nonneg/p_sum fields below discharge the PMF constraints that pin the symbol's space)
Definition (Lean source)
The iid Rademacher design P_iid: uniform on {-1,1}^n. @realizes P_iid(uniform Rademacher design) @realizes P(cluster member — CONCRETE CARRIER+CONSTRAINTS instance: a FiniteDesign (Fin (2*m) → Bool), i.e. a probability law on {-1,1}^n, whose p_nonneg/p_sum fields below discharge the PMF constraints that pin the symbol's space)
Definition (Lean source)
Balanced sign-symmetric design: P(Z = z) = P(Z = −z) for all z (global sign symmetry, implying zero one-point margins). @realizes P(design-law argument D : FiniteDesign (Fin (2*m) → Bool), the probability law on {-1,1}^n this predicate constrains)
Definition (Lean source)
The balanced design class P_m^bal, bundling the single sign-symmetry atom. @realizes P_m^bal(designs with global sign symmetry) @realizes P(cluster member: the bundled law D : FiniteDesign (Fin (2*m) → Bool), a probability law on {-1,1}^n via the carrier's p_nonneg/p_sum fields)
Definition (Lean source)
A permutation of the units is a two-block automorphism: it either preserves both blocks setwise or swaps them.
Definition (Lean source)
The block-exchangeable design class P_m^sym: laws in P_m^bal invariant under permutations within A_m, within B_m, and under the community swap (the full two-block automorphism group). (D0.R provisional revision carried as revised.) @realizes P_m^sym(balanced designs invariant under the two-block automorphism group) @realizes P(cluster member: this Set (FiniteDesign (Fin (2*m) → Bool)) is the class of probability laws P consumed downstream by implementableCovarianceClass/ implementabilityGap; each element is a probability law via the carrier's PMF fields)
Definition (Lean source)
The implementable covariance class C_m^pm = { X(P) : P ∈ P_m^sym }. @realizes C_m^pm(second moments of block-exchangeable designs) @realizes P(cluster member: the bound design law D ∈ blockExchangeableDesignClass m ranges over the probability laws P whose second moment X(P) defines this class)
Definition (Lean source)
Community sum S_A = ∑_{i ∈ A_m} Z_i (integer-valued). @realizes A_m, B_m(community A_m = {i : i.val < m}, cardinality m)
Community sum S_B = ∑_{i ∈ B_m} Z_i (integer-valued). @realizes A_m, B_m(community B_m = {i : ¬ i.val < m}, cardinality m)
The block-sum law handle B(P): the joint pmf of the two community sums (S_A, S_B) under P (the OEQ parity handle). @realizes B(P)(joint law of the two community sums)
Definition (Lean source)
The implementability gap Δ_m^±(r,κ) = inf_{P ∈ P_m^sym} F(X(P)) − inf_{X ∈ E_m^blk} F(X), as an sInf difference over the objective images. @realizes Delta_m^pm(r,kappa)(implementable inf − relaxed inf; CARRIER of the gap. The bare sInf − sInf real difference is a plain ℝ; its core-declared range [0,∞) is NOT carried by this def alone but by the CONJUNCTION of this carrier with the companion range lemma implementabilityGap_nonneg in Helpers/GapReduction.lean, which pins 0 ≤ Δ_m^± via the reduced constrained-minus-unconstrained identity.) @realizes P(cluster member — AUTHORITATIVE link into the sharp_rho_star target block: the implementable sInf is taken over designObjective … '' implementableCovarianceClass m, i.e. over the second moments X(P) of the probability laws P ∈ P_m^sym; this is the decl through which the P realization cluster enters thm:sharp-rho-star) @realizes kappa(carrier ℝ; robustness argument of the gap; range [0,∞) pinned by the 0 ≤ kappa premises of the consuming theorems sharp_rho_star/rounding_gap_reduction)
Definition (Lean source)
The relaxed reduced value min_{T_m} φ.
Definition (Lean source)
The implementable reduced value min_{T_m ∩ {y+z ≥ d_m}} φ.
Definition (Lean source)
The tight rounding-loss certificate ρ_⋆, realized as the reduced-coordinate implementable-minus-relaxed value (proved equal to Δ_m^± by rounding_gap_reduction). The bare implementableReducedValue − relaxedReducedValue real difference is a plain ℝ; its core-declared range [0,∞) is NOT carried by this def alone but by the CONJUNCTION of this carrier with the companion range lemma roundingLossCertificate_nonneg below, which pins 0 ≤ ρ_⋆ (the constrained reduced value dominating the unconstrained one, exactly as Δ_m^± is pinned nonnegative by implementabilityGap_nonneg). @realizes rho_star(m,a,b,r,kappa)(reduced constrained-minus-unconstrained value; CARRIER of the certificate, range [0,∞) pinned via the companion lemma below)
Definition (Lean source)
Range lemma for ρ_⋆. The rounding-loss certificate lands in its core-declared space [0,∞): 0 ≤ ρ_⋆(m,a,b,r,κ). This holds because the implementable reduced value (the constrained sInf over T_m ∩ {y+z ≥ d_m}) dominates the relaxed reduced value (the unconstrained sInf over the larger set T_m), the implementable feasible set being a subset of the relaxed one. Together with the roundingLossCertificate carrier def above, this lemma IS the realization of the symbol's standing range condition (the bare sInf − sInf real difference does not by itself guarantee nonnegativity). @realizes rho_star(m,a,b,r,kappa)(range [0,∞) pinned via {y+z ≥ d_m}-constrained inf ≥ unconstrained inf ⇒ implementable reduced value ≥ relaxed reduced value)
Formal statement
Proof (Lean source)
Sharp cut-break exactness boundary r_⋆(m,a,b,κ) — the HONEST-OPEN frontier symbol (open_phase_boundary role; it has NO statement node and NO closed form by design; its clean/set-valued shape is deliberately left open, see honest scope). This predicate is the dedicated carrier that realizes the symbol's [0,∞) SPACE together with its defining boundary role: rStar is a nonnegative ratio (its [0,∞) space) below which the rounding loss vanishes — i.e. it lower-bounds a zero-loss r-region [0, rStar), the "cut-break ratio separating zero implementability loss from positive loss". No existence, uniqueness, or exact value of such an rStar is asserted anywhere (honest open scope); only the space and the separating role are pinned here. @realizes r_star(m,a,b,kappa)(carrier/predicate for the open boundary object; its [0,∞) space is pinned by the 0 ≤ rStar conjunct, its separating role by the zero-loss clause)
Definition (Lean source)
iid-exactness frontier κ_iid(m,a,b,r) — the dedicated carrier that realizes the symbol's [0,∞) SPACE together with its defining frontier role (iid_exactness_frontier, role derived_phase_boundary). κ_iid is the smallest nonnegative robustness weight from which the iid covariance I_n = X(P_iid) remains optimal over the block-symmetric elliptope slice E_m^blk, and it dominates the cut frontier κ_cut(m,a,b) = max 0 (min (a−b) (2(m−b))) (the core relation κ_iid ≥ κ_cut). This predicate is that carrier: the 0 ≤ κ_iid conjunct pins the [0,∞) space, the κ_cut ≤ κ_iid conjunct records the core ordering, and the trailing clause pins the frontier role — above the frontier weight, I_n minimizes F_{r,κ} on E_m^blk. No existence, uniqueness, or closed form of such a κ_iid is asserted here (the iid frontier, like r_⋆, is bound only as a symbol; robust_corner_exactness supplies the finiteness criterion for its EXISTENCE — a finite frontier exists iff the affine-balanced locus holds — not its value). Mirrors the IsSharpExactnessBoundary carrier for r_⋆. @realizes kappa_iid(m,a,b,r)(carrier/predicate for the iid-exactness frontier; its [0,∞) space is pinned by the 0 ≤ κ_iid conjunct, the κ_iid ≥ κ_cut ordering by the second conjunct, and its frontier role by the optimality clause)
Definition (Lean source)
Helpers.BlockPairSums 3 declarations Finite pair-count identities over A_m and B_m, used by the spectral-coordinate trace and Frobenius calculations.
Pair counts for the balanced two-block partition
Finite pair-count identities over A_m and B_m, used by the spectral-coordinate
trace and Frobenius calculations.
Sum a two-valued function over a finite set when one distinguished point takes the diagonal value.
Formal statement
Proof (Lean source)
Pair count over the two equal blocks: diagonal pairs contribute d, same-community off-diagonal pairs contribute s, and cross-community pairs contribute c.
Formal statement
Proof (Lean source)
The same pair count with a community-sign multiplier. Same-community pairs have sign product +1, and cross-community pairs have sign product -1.
Formal statement
Proof (Lean source)
Helpers.FrobeniusCenter 3 declarations Frobenius-center certificate on the reduced triangle
Frobenius-center certificate on the reduced triangle
Along the tangent (x,y,z) = (1+t, 1-q t, 1), the Frobenius term has zero first derivative at the center, so the objective derivative is c_x - q c_y.
Formal statement
Proof (Lean source)
Along the tangent (x,y,z) = (1, 1+t, 1-t), the Frobenius term has zero first derivative at the center, so the objective derivative is c_y - c_z.
Formal statement
Proof (Lean source)
Frobenius-center certificate: (1,1,1) uniquely minimizes the weighted Frobenius term on T_m; it minimizes the full objective for finite κ only if c_x/q = c_y = c_z, and under that equality with κ > 0 it is the unique minimizer.
Formal statement
Proof (Lean source)
Helpers.GapReduction 12 declarations Assembles prop:symmetry-reduction, lem:block-spectral-coordinates, and lem:pm-reduced-slice-characterization into the reduced-coordinate identity for the implementability gap: Δ_m^± = min_{T_m ∩ {y+z ≥ d_m}} φ − min_{T_m
Rounding-gap reduction
Assembles prop:symmetry-reduction, lem:block-spectral-coordinates, and
lem:pm-reduced-slice-characterization into the reduced-coordinate identity for
the implementability gap: Δ_m^± = min_{T_m ∩ {y+z ≥ d_m}} φ − min_{T_m} φ.
The implementability gap equals the reduced-coordinate implementable-minus-relaxed value: Δ_m^±(r,κ) = implementableReducedValue − relaxedReducedValue.
Formal statement
Proof (Lean source)
Range lemma for Δ_m^±. The implementability gap lands in its core-declared space [0,∞): 0 ≤ Δ_m^±(r,κ). The reduction lemma identifies it with the reduced constrained-minus-unconstrained value, whose nonnegativity is proved by roundingLossCertificate_nonneg. @realizes Delta_m^pm(r,kappa)(range [0,∞) pinned via the reduced constrained-minus-unconstrained identity)
Formal statement
Proof (Lean source)
If the relaxed reduced objective has a unique minimizer outside the implementable parity slice, and the implementable reduced problem is attained, then the implementability gap is strictly positive.
Formal statement
Proof (Lean source)
If a reduced triangle point globally minimizes the relaxed reduced objective, then the sInf defining relaxedReducedValue is its objective value.
Formal statement
Proof (Lean source)
If a reduced triangle point globally minimizes the parity-truncated reduced objective, then the sInf defining implementableReducedValue is its objective value.
Formal statement
Proof (Lean source)
The relaxed reduced problem attains its minimum: some point of the reduced triangle minimizes the reduced objective over the whole triangle. This is the existence statement behind the relaxed value being a genuine minimum rather than only an infimum; it is proved by transporting the triangle to the weighted simplex, where the linear-plus-weighted-norm objective has an explicit minimizer (an active-set point when the robustness weight is positive, an exposed-face vertex when it is zero).
Formal statement
Proof (Lean source)
The implementable reduced problem attains its minimum: some point of the reduced triangle satisfies the parity constraint and minimizes the reduced objective over all triangle points that satisfy it. This is the parity-truncated counterpart of exists_relaxed_reduced_minimizer, and it is what makes the implementability gap a difference of two attained minima.
Formal statement
Proof (Lean source)
The implementability gap is never negative: restricting a design to be realizable by an actual ±1 assignment law can only raise the achievable objective value. Formally, both reduced problems attain their minima and the implementable problem optimizes over a subset of the relaxed feasible set, so its minimum dominates. This is the range condition for Δ_m^± promised in the definition of implementabilityGap.
Formal statement
Proof (Lean source)
Zero implementability gap is equivalent to the relaxed argmin set meeting the implementable parity slice.
Formal statement
Proof (Lean source)
In the unique-relaxed-minimizer case (in particular the κ > 0 active-set case), zero gap is equivalent to that unique minimizer lying in the parity slice.
Formal statement
Proof (Lean source)
Unique-minimizer form matching the sharp_rho_star clause: with a unique relaxed minimizer, zero gap is equivalent to every relaxed minimizer lying in the parity slice.
Formal statement
Proof (Lean source)
At κ = 0, if the exposed relaxed min-face is disjoint from the implementable slice, then the implementability gap is strictly positive.
Formal statement
Proof (Lean source)
Helpers.ParitySlice 3 declarations After full two-block symmetrization, the ±1 covariance image in spectral coordinates is T_m (m even) or T_m ∩ {y+z ≥ 2/m} (m odd), via y + z = m⁻¹ E[S_A² + S_B²] and the parity bound S_A², S_B² ≥ 1 for odd m.
±1 reduced-slice characterization (parity content)
After full two-block symmetrization, the ±1 covariance image in spectral
coordinates is T_m (m even) or T_m ∩ {y+z ≥ 2/m} (m odd), via
y + z = m⁻¹ E[S_A² + S_B²] and the parity bound S_A², S_B² ≥ 1 for odd m.
The ±1 covariance image of the block-exchangeable class in spectral coordinates is exactly the reduced triangle truncated by the parity threshold d_m (0 for even m, 2/m for odd m). In particular, for odd m the spread vertex (m/(m−1), 0, 0) is not implementable, while for even m the whole slice is.
Formal statement
Proof (Lean source)
For even m, the whole block elliptope slice is implementable.
Formal statement
Proof (Lean source)
For odd m ≥ 2, the spread covariance is not ±1 implementable.
Formal statement
Proof (Lean source)
Helpers.ParitySliceDesigns 2 declarations Every point of the parity-truncated reduced triangle is the second moment of a block-exchangeable ±1 design.
±1 reduced-slice characterization: the backward (sufficiency) direction
Every point of the parity-truncated reduced triangle is the second moment of a
block-exchangeable ±1 design. For even m the point is the barycentric mixture
(y/2m)·cut + (z/2m)·all + (x·(m−1)/m)·spread of the three triangle vertices; for
odd m the origin is unavailable and the region is a quadrilateral cut off at
y+z = 2/m, handled by pm_slice_backward_odd.
Backward direction, even m: the barycentric 3-vertex mixture.
Formal statement
Proof (Lean source)
Backward (sufficiency) direction. Any parity-truncated reduced-triangle point is realized by a block-exchangeable ±1 design.
Formal statement
Proof (Lean source)
Helpers.ParitySliceForward 16 declarations If a ±1 design D realizes the block-symmetric second moment X(u,v) (i.e.
±1 reduced-slice characterization: the forward (necessity) direction
If a ±1 design D realizes the block-symmetric second moment X(u,v) (i.e.
E_D[Z Zᵀ] = X(u,v)), then its reduced spectral coordinates
x = 1−u, y = 1+(m−1)u−mv, z = 1+(m−1)u+mv are nonnegative (PSD of a Gram
matrix) and satisfy the parity bound y + z ≥ d_m (0 for even m, 2/m for
odd m). The whole argument is elementary second-moment algebra: reading the
matrix entries 1 (diagonal), u (within-block), v (across-block), the block
sums S_A = ∑_{i∈A} Z_i, S_B = ∑_{i∈B} Z_i satisfy
E[S_A²] = E[S_B²] = m + m(m−1)u, E[S_A S_B] = m² v, whence
E[(S_A−S_B)²] = 2m·y ≥ 0, E[(S_A+S_B)²] = 2m·z ≥ 0, and for odd m the
parity S_A, S_B odd forces E[S_A²], E[S_B²] ≥ 1, so y+z = (E[S_A²]+E[S_B²])/m ≥ 2/m.
Community A_m = {i : i.val < m} as a Finset.
Community B_m = {i : ¬ i.val < m} as a Finset.
The real community sum S_A(z) = ∑_{i ∈ A_m} Z_i.
The real community sum S_B(z) = ∑_{i ∈ B_m} Z_i.
Each ±1 sign squares to 1.
Formal statement
|A_m| = m.
Formal statement
Proof (Lean source)
|B_m| = m.
Formal statement
Proof (Lean source)
The design second-moment entries read off from X(u,v): the (i,j) entry is 1 on the diagonal, u within a block, v across blocks.
Formal statement
Proof (Lean source)
E[S_A²] = m + m(m−1) u (and identically E[S_B²]).
Formal statement
Proof (Lean source)
E[S_B²] = m + m(m−1) u: whenever a design's assignment second moment is the block-symmetric matrix X(u,v), the mean square of the community-B sign sum depends only on the common within-block correlation u (not on the across-block entry v), and equals the corresponding community-A quantity. The two blocks have the same size m, so this is the mirror image of E_sumAr_sq.
Formal statement
Proof (Lean source)
E[S_A S_B] = m² v.
Formal statement
Proof (Lean source)
The within-block second moment u ≤ 1 (from E[(Z_i − Z_j)²] ≥ 0 for a within-block pair, available since m ≥ 2).
Formal statement
Proof (Lean source)
For odd m, the integer block sum S_A is odd for every assignment.
Formal statement
Proof (Lean source)
For odd m, E[S_A²] ≥ 1.
Formal statement
Proof (Lean source)
For odd m, E[S_B²] ≥ 1 under every design. Community B has an odd number m of units, so its sign sum is an odd integer for every assignment and therefore has square at least one; averaging preserves the bound. This is the parity obstruction that keeps the odd-m reduced slice away from the spread vertex.
Formal statement
Proof (Lean source)
Forward (necessity) direction. A design realizing X(u,v) has reduced spectral coordinates in the parity-truncated triangle.
Formal statement
Proof (Lean source)
Helpers.ParitySliceMixture 13 declarations Reusable primitives for the sufficiency direction: * uniformOnDesign — the uniform law on a nonempty finset of assignments, with membership in the block-exchangeable class whenever the support is invariant under global n
Mixture designs and block-symmetry of second moments (backward-direction core)
Reusable primitives for the sufficiency direction:
* uniformOnDesign — the uniform law on a nonempty finset of assignments, with
membership in the block-exchangeable class whenever the support is invariant
under global negation and the two-block automorphism group;
* mixtureDesign — a finite convex mixture of designs, its expectation
(E) linearity, its membership in the class, and the affine action on the
block-symmetric second moment X(u,v);
* secondMoment_blockSym_of_exchangeable — the second moment of any
block-exchangeable design is block-symmetric (= X(u,v) for the reference-pair
values u,v), proved by transporting pair expectations along block automorphisms.
Reindex an assignment z by a permutation σ: (R σ z) i = z (σ i).
Change of variables: for a design invariant under the block-automorphism σ (D.p (reindexBy σ z) = D.p z), expectation is invariant under precomposition by reindexBy σ.
Formal statement
Proof (Lean source)
The pointwise sign transports under reindexing: signOf (R σ z) i = signOf z (σ i).
Formal statement
Pair-expectation transport: if D is invariant under the block-automorphism σ then E[Z_{σ i} Z_{σ j}] = E[Z_i Z_j].
Formal statement
Proof (Lean source)
A within-block transposition (swap two indices of block A, fixing everything else) is a two-block automorphism.
Formal statement
Proof (Lean source)
The block-symmetry general lemma. For a block-exchangeable design D, its second moment is block-symmetric: it equals X(u,v) with u = E[Z_{i₀} Z_{j₀}] the within-block reference-pair value and v = E[Z_{i₀} Z_{k₀}] the cross-block reference-pair value.
Formal statement
Proof (Lean source)
The uniform law on a nonempty finset S of assignments.
Definition (Lean source)
If the support S is invariant under global negation and under reindexing by every two-block automorphism, the uniform design lies in the block-exchangeable class.
Formal statement
Proof (Lean source)
A finite convex mixture ∑ᵢ wᵢ Dᵢ of designs.
Definition (Lean source)
Expectation of a mixture is the convex combination of expectations.
Formal statement
Proof (Lean source)
A mixture of block-exchangeable designs is block-exchangeable.
Formal statement
Proof (Lean source)
Averaging block-symmetric matrices with weights summing to 1.
Formal statement
Proof (Lean source)
The second moment of a mixture whose components have block-symmetric second moments X(uᵢ,vᵢ) is X(∑ wᵢ uᵢ, ∑ wᵢ vᵢ).
Formal statement
Proof (Lean source)
Helpers.ParitySliceParity 17 declarations For odd m the spread origin (0,0) is not implementable (parity forces S_A, S_B odd, hence y+z ≥ 2/m).
Odd-m parity vertex designs and the quadrilateral backward direction
For odd m the spread origin (0,0) is not implementable (parity forces
S_A, S_B odd, hence y+z ≥ 2/m). The feasible region is the quadrilateral with
the two extra parity vertices
pcutVDesign—X(−1/m, −1/m²), reduced(2/m, 0)(block sums(±1, ∓1));pallVDesign—X(−1/m, 1/m²), reduced(0, 2/m)(block sums(±1, ±1)).
An arbitrary quadrilateral point is the convex combination of the four vertices
cut, all, pcut, pall with the outer/inner-edge weights `λμ, λ(1−μ), (1−λ)μ,
(1−λ)(1−μ), μ = y/(y+z), λ = ((y+z)−2/m)/(2m−2/m)`.
The (±1, ∓1) block-sum support (pcut).
The (±1, ±1) block-sum support (pall).
An assignment with S_A = 1, S_B = -1 (odd m): (m+1)/2 true on block A, (m-1)/2 true on block B.
Definition (Lean source)
An assignment with S_A = 1, S_B = 1 (odd m).
Definition (Lean source)
For odd m some assignment has community sign sums (1, −1), so the pcut parity support is nonempty and the uniform law on it is well defined. When m is odd each community sum is an odd integer, so (±1, ∓1) is the closest an oppositely-signed pair of communities can come to being balanced.
Formal statement
Proof (Lean source)
For odd m some assignment has community sign sums (1, 1), so the pall parity support is nonempty and the uniform law on it is well defined. This is the companion of pcutSupport_nonempty for the equally-signed parity vertex.
Formal statement
Proof (Lean source)
The pcut parity design.
Definition (Lean source)
The pall parity design.
Definition (Lean source)
For odd m, the pcut parity design — uniform over the assignments whose community sign sums are (1, −1) or (−1, 1) — belongs to the block-exchangeable design class. Negating an assignment swaps the two cases, and a two-block automorphism either fixes the pair of community sums or transposes it, so the support is invariant either way.
Formal statement
Proof (Lean source)
For odd m, the pall parity design — uniform over the assignments whose community sign sums are (1, 1) or (−1, −1) — belongs to the block-exchangeable design class, by the same negation and two-block-automorphism invariance of its support.
Formal statement
Proof (Lean source)
On pcutSupport, S_A² = 1, so E[S_A²] = 1.
Formal statement
Proof (Lean source)
On pcutSupport, S_A S_B = -1.
Formal statement
Proof (Lean source)
Under the pall parity design the community-A sign sum has mean square 1, because every assignment in its support has that sum equal to +1 or −1.
Formal statement
Proof (Lean source)
Under the pall parity design the two community sign sums have cross moment +1: they always carry the same sign, both +1 or both −1. This is the sign flip of the corresponding pcut value and is what separates the two parity vertices.
Formal statement
Proof (Lean source)
For odd m ≥ 2 the pcut parity design has assignment second moment X(−1/m, −1/m²): units in the same community carry correlation −1/m, units in opposite communities −1/m². Its reduced spectral coordinates are y = 2/m, z = 0, so it sits exactly on the parity threshold y + z = 2/m — one of the two extra vertices that odd community size creates.
Formal statement
Proof (Lean source)
For odd m ≥ 2 the pall parity design has assignment second moment X(−1/m, 1/m²): units in the same community carry correlation −1/m, units in opposite communities +1/m². Its reduced spectral coordinates are y = 0, z = 2/m, the second parity vertex, again sitting exactly on the threshold y + z = 2/m.
Formal statement
Proof (Lean source)
Backward direction, odd m: the 4-vertex quadrilateral mixture.
Formal statement
Proof (Lean source)
Helpers.ParitySliceVertices 19 declarations Explicit block-exchangeable designs realizing the triangle vertices: * cutVDesign — X(1,−1), reduced (0, 2m, 0) (uniform on {s_m, −s_m}); * allVDesign — X(1, 1), reduced (0, 0, 2m) (uniform on {1, −1} assignments); * spr
Vertex designs for the backward direction
Explicit block-exchangeable designs realizing the triangle vertices:
* cutVDesign — X(1,−1), reduced (0, 2m, 0) (uniform on {s_m, −s_m});
* allVDesign — X(1, 1), reduced (0, 0, 2m) (uniform on {1, −1} assignments);
* spreadVDesign (even m) — X(−1/(m−1), 0), reduced (2m/q, 0, 0) (uniform on
the balanced-in-each-block assignments, second moment via block symmetry and the
deterministic block sums S_A = S_B = 0).
The block-sum transport lemmas (blockSumA under negation and block automorphism)
supply the support-invariance the class membership needs.
Negating an assignment negates each community sum.
Formal statement
Negating an assignment negates the community-B sign sum, the mirror of blockSumA_neg. Together the two make every sign-symmetric support closed under global negation, which is what the balanced-design membership proofs need.
Formal statement
Under a block-automorphism σ, the pair of community sums of reindexBy σ z is either (S_A, S_B) (block-preserving) or (S_B, S_A) (block-swapping).
Formal statement
Proof (Lean source)
Expectation under the uniform law on a two-element support {z₁, z₂}.
Formal statement
Proof (Lean source)
The cut vertex design ½δ_{s_m} + ½δ_{−s_m}.
Definition (Lean source)
The all-ones vertex design ½δ_{1} + ½δ_{−1}.
Definition (Lean source)
The cut vertex design — a fair coin between "treat community A, control community B" and its reverse — belongs to the block-exchangeable design class: its two-point support is closed under global sign flip and under every two-block automorphism (relabelling units inside a community fixes each of the two assignments, swapping the communities exchanges them).
Formal statement
Proof (Lean source)
The all-ones vertex design — a fair coin between "treat everyone" and "control everyone" — belongs to the block-exchangeable design class: its two-point support is closed under global sign flip, and both constant assignments are fixed by every permutation of the units, hence by every two-block automorphism.
Formal statement
Proof (Lean source)
The cut vertex design has assignment second moment X(1,−1): two units in the same community always receive the same sign, and two units in opposite communities always receive opposite signs. In the reduced spectral coordinates this is the triangle vertex (0, 2m, 0).
Formal statement
Proof (Lean source)
The all-ones vertex design has assignment second moment X(1,1): every pair of units always receives the same sign, whether or not they share a community. In the reduced spectral coordinates this is the triangle vertex (0, 0, 2m).
Formal statement
Proof (Lean source)
The balanced-in-each-block support {z : S_A(z) = 0 ∧ S_B(z) = 0}.
For even m, an explicit balanced-in-each-block assignment (true on the first half of each block).
Definition (Lean source)
For even m, the explicit half-and-half assignment (treat the first half of each community, control the second half) really is balanced in each block: both community sign sums are zero.
Formal statement
Proof (Lean source)
For even m at least one assignment has both community sign sums equal to zero, so the balanced-in-each-block support is nonempty and the uniform law on it is well defined. Evenness is essential: for odd m each community sum is an odd integer and this support is empty.
Formal statement
Proof (Lean source)
The spread vertex design (even m).
Definition (Lean source)
For even m, the spread vertex design — uniform over the assignments that are exactly balanced inside each community — belongs to the block-exchangeable design class. Negating an assignment and relabelling units by a two-block automorphism both leave the pair of community sign sums at (0,0), so the support is invariant.
Formal statement
Proof (Lean source)
On the spread support the real community sums vanish, so E[S_A²]=E[S_A S_B]=0.
Formal statement
Proof (Lean source)
Under the spread vertex design the two community sign sums have zero cross moment, since every assignment in its support has both sums equal to zero pointwise. With the companion spreadVDesign_sumAr_zero this pins the design's reduced coordinates.
Formal statement
Proof (Lean source)
For even m ≥ 2 the spread vertex design has assignment second moment X(−1/(m−1), 0): units in different communities are uncorrelated, and units in the same community carry the small negative correlation −1/(m−1) forced by the community sign sum being identically zero. These are the reduced coordinates (2m/q, 0, 0) — the spread vertex of the triangle — so for even m the spread covariance is implementable.
Formal statement
Proof (Lean source)
Helpers.ReducedSimplexBridge 4 declarations Bridge between reduced triangle coordinates and weighted-simplex coordinates
Bridge between reduced triangle coordinates and weighted-simplex coordinates
The change of variables t = (q x, y, z) sends the reduced triangle to Δ_{2m}.
Formal statement
Proof (Lean source)
The inverse change of variables x = t_x/q, y = t_y, z = t_z.
Formal statement
Proof (Lean source)
Under t = (q x, y, z), the reduced objective is the weighted-simplex objective with α = (c_x/q, c_y, c_z) and β = (1/q, 1, 1).
Formal statement
Proof (Lean source)
The inverse form of reducedObjective_eq_wsObj, for a simplex point t.
Formal statement
Proof (Lean source)
Helpers.RobustConvergence 2 declarations
The reduced Frobenius square at X(u,v) is the identity square plus the two off-diagonal block contributions.
Formal statement
Proof (Lean source)
Any choice of relaxed minimizers converges entrywise to the identity as κ → ∞.
Formal statement
Proof (Lean source)
Helpers.RobustCorner 10 declarations Robust-corner helper lemmas
Robust-corner helper lemmas
Under the uniform iid sign law, the raw sum of two distinct coordinate signs is zero.
Formal statement
Proof (Lean source)
The iid Rademacher design has identity second-moment matrix.
Formal statement
Proof (Lean source)
The identity covariance is the block-symmetric center (u,v)=(0,0), hence lies in E_m^blk under two-block homophily.
Formal statement
Proof (Lean source)
The center first-order equality c_x/q = c_y forces r = 2b(a+b).
Formal statement
Proof (Lean source)
The two center coefficient equalities are equivalent to the affine-balanced locus.
Formal statement
Proof (Lean source)
On the affine-balanced locus, the reduced linear coefficients are all equal.
Formal statement
Proof (Lean source)
Inverse map from reduced coordinates to block-symmetric (u,v) coordinates.
Formal statement
Proof (Lean source)
The matrix objective at I_n is the reduced objective at (1,1,1).
Formal statement
Proof (Lean source)
If I_n minimizes the matrix objective on the block elliptope, the reduced center first-order coefficient equalities hold.
Formal statement
Proof (Lean source)
On the affine-balanced locus and for κ>0, I_n is the strict relaxed minimizer over the block elliptope.
Formal statement
Proof (Lean source)
Helpers.SharpActive 1 declarations Sharp-certificate active-set assembly helpers
Sharp-certificate active-set assembly helpers
For κ > 0, the active-set SOCP certificate gives the unique relaxed minimizer in reduced coordinates and the relaxed value formula.
Formal statement
Proof (Lean source)
Helpers.SharpTrunc 2 declarations Sharp-certificate truncation helpers
Sharp-certificate truncation helpers
If no relaxed minimizer meets the parity slice, the implementable reduced value is the weighted-simplex truncation value at the selector.
Formal statement
Proof (Lean source)
For even community size, the parity threshold is zero, so every relaxed minimizer already lies in the implementable reduced slice.
Formal statement
Proof (Lean source)
Helpers.SharpZero 3 declarations Sharp-certificate zero-loss and exposed-face helpers
Sharp-certificate zero-loss and exposed-face helpers
The rounding-loss carrier has zero value exactly when a relaxed reduced minimizer meets the parity slice.
Formal statement
Proof (Lean source)
In the unique-relaxed-minimizer case, zero rounding loss is equivalent to every relaxed minimizer lying in the parity slice.
Formal statement
Proof (Lean source)
At κ = 0, reduced minimizers are exactly the exposed face of the minimum coordinates of α = (c_x/q, c_y, c_z).
Formal statement
Proof (Lean source)
Helpers.SpectralCoordinates 3 declarations The four-way orthogonal eigendecomposition of ℝⁿ (span 1_n, span s_m, the within-A and within-B contrast subspaces) reads off the eigenvalues of X(u,v) as x = 1−u, y = 1+(m−1)u−mv, z = 1+(m−1)u+mv, converts elliptope mem
Block spectral coordinates
The four-way orthogonal eigendecomposition of ℝⁿ (span 1_n, span s_m, the
within-A and within-B contrast subspaces) reads off the eigenvalues of X(u,v)
as x = 1−u, y = 1+(m−1)u−mv, z = 1+(m−1)u+mv, converts elliptope membership
into the reduced triangle, and gives the closed-form objective φ.
The cut covariance is the block-symmetric point X(1,−1), with spectral coordinates (0, 2m, 0).
Formal statement
Proof (Lean source)
The identity I_n is the block-symmetric point X(0,0), with spectral coordinates (1, 1, 1).
Formal statement
Proof (Lean source)
X(u,v) lies in E_m^blk iff its spectral coordinates lie in the reduced triangle T_m, and the design objective equals the reduced form φ with c_x = q((a+b)+r/(a+b)), c_y = 2b + r/(2b), c_z = 2m and q = 2(m−1). The last two conjuncts record the corner coordinate readings the note states: X_cut = X(1,−1) has spectral coordinates (0, 2m, 0) and I_n = X(0,0) has spectral coordinates (1, 1, 1).
Formal statement
Proof (Lean source)
Helpers.SpectralMembership 1 declarations Membership algebra for block spectral coordinates
Membership algebra for block spectral coordinates
For m ≥ 2, membership of the concrete block-symmetric matrix X(u,v) in E_m^blk is equivalent to the three reduced-coordinate PSD inequalities plus the trace identity q x + y + z = 2m.
Formal statement
Proof (Lean source)
Helpers.SpreadGap 1 declarations Turns a reduced-coordinate spread-vertex certificate into the matrix relaxed minimizer statement and the strict implementability gap in the odd-community slice.
Spread-vertex gap assembly
Turns a reduced-coordinate spread-vertex certificate into the matrix relaxed minimizer statement and the strict implementability gap in the odd-community slice.
Suppose the community size is odd and, in reduced spectral coordinates, the spread vertex is the strict minimizer of the reduced objective over the reduced triangle. Then three things follow at the matrix level: the spread covariance lies in the relaxed block-symmetric elliptope slice and is its unique minimizer of the design objective; it is not the second moment of any block-exchangeable ±1 design; and the implementability gap is strictly positive.
Formal statement
Proof (Lean source)
Helpers.SymRedDesign 22 declarations The block-automorphism group H acts on sign assignments by pull-back (σ · z) i = z (σ i).
Design-side symmetry reduction (orbit averaging over the automorphism group)
The block-automorphism group H acts on sign assignments by pull-back
(σ · z) i = z (σ i). Averaging a balanced law D over H gives
D'.p z = |H|⁻¹ ∑_{σ∈H} D.p (z∘σ), a genuine PMF that is balanced and
H-invariant, hence block-exchangeable, with zero one-point margins. Its second
moment is the orbit average X(D')ᵢⱼ = |H|⁻¹ ∑_σ X(D)_{σi,σj}. Because each σ∈H
permutes the within/cross pair-Finsets, the block sums are preserved
(Ssame(X(D')) = Ssame(X(D)), likewise Scross), so every trace term is unchanged,
while the Frobenius norm drops by convexity — giving a no-worse block-exchangeable law.
The pull-back action of a permutation on sign assignments.
The block-automorphism group as a Finset of permutations.
Definition (Lean source)
The identity is a block automorphism.
Formal statement
Proof (Lean source)
blockAutoFinset is nonempty (so |H| > 0).
Formal statement
Proof (Lean source)
The block-automorphism set is closed under composition.
Formal statement
Proof (Lean source)
The block-automorphism set is closed under inverse.
Formal statement
Proof (Lean source)
A block automorphism maps within-community pairs to within-community pairs (and preserves distinctness); i.e. it permutes sameOffPairs.
Formal statement
Proof (Lean source)
A block automorphism permutes crossPairs.
Formal statement
Proof (Lean source)
The orbit-averaged design D'.p z = |H|⁻¹ ∑_{σ∈H} D.p (z∘σ).
Definition (Lean source)
The orbit average of a balanced design is balanced.
Formal statement
Proof (Lean source)
The orbit average is invariant under the block-automorphism group.
Formal statement
Proof (Lean source)
A balanced design has zero one-point margins.
Formal statement
Proof (Lean source)
The orbit average lands in the block-exchangeable class.
Formal statement
Proof (Lean source)
Second moments are symmetric.
Formal statement
Proof (Lean source)
Second moments have unit diagonal.
Formal statement
Proof (Lean source)
Second moments are positive semidefinite (Gram matrix E[Z Zᵀ]).
Formal statement
Proof (Lean source)
The uniform iid Rademacher design is block-exchangeable (a nonempty witness).
Formal statement
Proof (Lean source)
The second moment of the orbit average is the orbit average of the second moment: X(D')ᵢⱼ = |H|⁻¹ ∑_{σ∈H} X(D)_{σi,σj}.
Formal statement
Proof (Lean source)
Orbit averaging preserves the within-community entry sum.
Formal statement
Proof (Lean source)
Orbit averaging preserves the cross-community entry sum.
Formal statement
Proof (Lean source)
Orbit averaging weakly decreases the Frobenius norm of the second moment.
Formal statement
Proof (Lean source)
Design-side symmetry reduction (master export). For every balanced design D, its orbit average orbitAvgDesign m D over the full two-block automorphism group is the witness: it is block-exchangeable, has the same zero one-point margins, and has a weakly smaller objective.
Formal statement
Proof (Lean source)
Helpers.SymRedMatrix 28 declarations The objective matrices L_m, L_m^†, J_n are all block-constant: their entries depend only on the pair type (diagonal / within-community / cross-community).
Matrix-side symmetry reduction (block-constant averaging, no group action)
The objective matrices L_m, L_m^†, J_n are all block-constant: their
entries depend only on the pair type (diagonal / within-community / cross-community).
For a block-constant M and a symmetric X,
Tr(M X) = d·∑ᵢ Xᵢᵢ + w·Ssame(X) + c·Scross(X),
where Ssame/Scross are the within/cross off-diagonal entry sums. Setting
u = Ssame(X)/Nsame, v = Scross(X)/Ncross (the block averages) makes the block
sums of X(u,v) match those of X, so every trace term is exactly preserved,
while the Frobenius term drops by Cauchy–Schwarz ((∑x)² ≤ N·∑x²). PSD unit-diagonal
X further forces X(u,v) ∈ E_m^blk via the quadratic forms 1ᵀX1 ≥ 0, sᵀXs ≥ 0,
(eᵢ−eⱼ)ᵀX(eᵢ−eⱼ) ≥ 0. Hence orbit-averaging never worsens the objective — with no
group machinery.
Block-constant matrix G(d,w,c): entry d on the diagonal, w within a community, c across communities. blockSymMatrix m u v = blockConstMat m 1 u v.
The within-community off-diagonal ordered pairs.
The cross-community ordered pairs.
The within-community entry sum ∑_{same, i≠j} Xᵢⱼ.
Definition (Lean source)
The cross-community entry sum ∑_{cross} Xᵢⱼ.
Definition (Lean source)
Number of within-community off-diagonal ordered pairs = 2m(m−1).
Definition (Lean source)
Number of cross-community ordered pairs = 2m².
Definition (Lean source)
The block average u of X.
The block average v of X.
blockSymMatrix is the d = 1 block-constant matrix.
Formal statement
Proof (Lean source)
A block-constant matrix is symmetric.
Formal statement
Proof (Lean source)
|sameOffPairs m| = 2m(m−1).
Formal statement
Proof (Lean source)
|crossPairs m| = 2m².
Formal statement
Proof (Lean source)
Master trace decomposition. For block-constant M = G(d,w,c) and symmetric X, the trace splits into the diagonal, within, and cross sums.
Formal statement
Proof (Lean source)
Ssame of a block-symmetric matrix X(u',v') is Nsame · u'.
Formal statement
Proof (Lean source)
Scross of a block-symmetric matrix X(u',v') is Ncross · v'.
Formal statement
Proof (Lean source)
Diagonal sum of a unit-diagonal matrix is 2m.
Formal statement
Proof (Lean source)
Trace preservation. For block-constant M and symmetric unit-diagonal X, symmetrizing to the block averages preserves the trace Tr(M X).
Formal statement
Proof (Lean source)
twoBlockLaplacian is block-constant.
Formal statement
Proof (Lean source)
twoBlockLaplacianPinv is block-constant.
Formal statement
Proof (Lean source)
allOnesMatrix is block-constant G(1,1,1).
Formal statement
Proof (Lean source)
Frobenius drop. Symmetrizing weakly decreases the Frobenius norm.
Formal statement
Proof (Lean source)
Unified objective comparison. If Y matches X on the block sums and has no larger Frobenius norm, then Y has no larger objective. Both the matrix-side and the design-side symmetrizations feed through this lemma.
Formal statement
Proof (Lean source)
Off-diagonal entries of a PSD unit-diagonal matrix are bounded by 1.
Formal statement
Proof (Lean source)
Objective bounded below on the elliptope.
Formal statement
Proof (Lean source)
Generic sInf reduction. If T ⊆ S, T is nonempty, f '' S is bounded below, and every point of S is dominated by some point of T, then the two infima of f over S and T coincide.
Formal statement
Proof (Lean source)
Membership. The block averages of a PSD unit-diagonal X land in E_m^blk.
Formal statement
Proof (Lean source)
Matrix-side symmetry reduction (master export). For PSD unit-diagonal X, the block-average point X(uOf X, vOf X) is an elliptope point with weakly smaller objective.
Formal statement
Proof (Lean source)
Helpers.SymRedPSD 6 declarations The block-symmetric matrix X(u,v) has the orthogonal eigendecomposition X(u,v) = x • (1 − P₁ − P_s) + y • P_s + z • P₁, with x = 1−u, y = 1+(m−1)u−mv, z = 1+(m−1)u+mv, where P₁ = J/2m (projection onto span 1) and P_s = s
PSD of block-symmetric elliptope points
The block-symmetric matrix X(u,v) has the orthogonal eigendecomposition
X(u,v) = x • (1 − P₁ − P_s) + y • P_s + z • P₁,
with x = 1−u, y = 1+(m−1)u−mv, z = 1+(m−1)u+mv, where P₁ = J/2m (projection
onto span 1) and P_s = s sᵀ/2m (projection onto span s). Each of P₁, P_s,
1 − P₁ − P_s is PSD, so nonnegative spectral coordinates force X(u,v) PSD. This
supplies the inclusion E_m^blk ⊆ {PSD, diag 1} used by the sInf reductions.
The quadratic form of X(u,v) on a vector w: wᵀ X(u,v) w = x·(Q − P²/2m − D²/2m) + y·(D²/2m) + z·(P²/2m) with Q = ∑ wᵢ², P = ∑ wᵢ, D = ∑ sᵢ wᵢ.
Formal statement
Proof (Lean source)
signProj = s sᵀ / 2m is PSD.
Formal statement
Proof (Lean source)
The complementary projection 1 − P₁ − P_s is PSD.
Formal statement
Proof (Lean source)
Spectral decomposition of the block-symmetric matrix.
Formal statement
Proof (Lean source)
PSD from nonnegative spectral coordinates.
Formal statement
Proof (Lean source)
Block-symmetric elliptope points are PSD with unit diagonal: E_m^blk ⊆ {X : PSD ∧ diag 1}.
Formal statement
Proof (Lean source)
Helpers.SymmetryReduction 1 declarations Orbit-averaging over the finite group H generated by within-A_m, within-B_m permutations and the community swap: convexity of the PSD cone, H-invariance of L_m, L_m^†, J_n, and orthogonal-invariance/convexity of the Frob
Symmetry reduction (orbit averaging over the two-block automorphism group)
Orbit-averaging over the finite group H generated by within-A_m, within-B_m
permutations and the community swap: convexity of the PSD cone, H-invariance of
L_m, L_m^†, J_n, and orthogonal-invariance/convexity of the Frobenius norm
give a no-worse H-symmetrized point/law. Hence the relaxed and implementable
infima are attained on the block-symmetric slices.
Symmetry reduction. The orbit-average over the full two-block automorphism group (permutations within A_m, within B_m, and the community swap) is the explicit, named no-worse witness — not merely some existing block-symmetric point (the note's load-bearing clauses):
Formal statement
Proof (Lean source)
Helpers.VertexCertificates 3 declarations Three elementary linear-plus-weighted-Frobenius optimality certificates over T_m: the cut vertex (0,2m,0), the spread vertex (2m/q,0,0), and the Frobenius center (1,1,1).
Vertex certificates on the reduced triangle
Three elementary linear-plus-weighted-Frobenius optimality certificates over
T_m: the cut vertex (0,2m,0), the spread vertex (2m/q,0,0), and the
Frobenius center (1,1,1). The 0 < qParam m side-condition is the
non-degeneracy m ≥ 2 regularity premise.
Cut-vertex certificate: on T_m, if κ ≥ 0, c_x/q > c_y + κ and c_z > c_y + κ then (0, 2m, 0) is the unique minimizer of φ.
Formal statement
Proof (Lean source)
Algebraic difference identity used by the spread-vertex certificate after multiplying through by sqrt q.
Formal statement
Proof (Lean source)
Spread-vertex certificate: on T_m, if κ ≥ 0, c_y > c_x/q + κ/√q and c_z > c_x/q + κ/√q then (2m/q, 0, 0) is the unique minimizer of φ.
Formal statement
Proof (Lean source)
Tcut 5 declarations For 0 ≤ r < r_cut, X_cut = s_m s_mᵀ is the unique minimizer of F over E_m^blk, the implementability gap vanishes, and the cut design P_cut ∈ P_m^sym attains the implementable optimum.
Sharp cut-corner exactness (thm:cut-corner-exactness)
For 0 ≤ r < r_cut, X_cut = s_m s_mᵀ is the unique minimizer of F over
E_m^blk, the implementability gap vanishes, and the cut design P_cut ∈ P_m^sym
attains the implementable optimum.
The core cutDesign is the same two-point law as the vertex-design helper.
Formal statement
Proof (Lean source)
If x0 is a minimizer of f on S, then the infimum of the objective image is f x0.
Formal statement
Proof (Lean source)
The cut-exactness frontier r_cut(m,a,b,κ) = max 0 (min{2b(a+b)(1 − κ/(a−b)), 2b(2m−2b−κ)}): the largest ratio up to which X_cut stays optimal on the block-symmetric slice, taken as a nonnegative frontier (= 0 on the vacuous cells where the cut region is empty). @realizes r_cut(m,a,b,kappa)(closed form min{2b(a+b)(1−κ/(a−b)), 2b(2m−2b−κ)}; the declared [0,∞) space is PINNED BY CONSTRUCTION via the outer max 0 clamp, so r_cut ∈ [0,∞) holds unconditionally — not merely under the homophily regime. Given 0 ≤ r, the consuming cut region r < r_cut is equivalent to r < min{…}, so the clamp leaves cut_corner_exactness unchanged in strength.) @realizes kappa(carrier ℝ argument kappa; robustness weight entering both branches of the cut frontier; range [0,∞) pinned by 0 ≤ kappa on the consuming theorem cut_corner_exactness)
The low-robustness cut frontier κ_cut(m,a,b) = max 0 (min{a−b, 2(m−b)}): the largest robustness weight below which the cut-exactness region [0, r_cut(m,a,b,κ)) stays nonempty, taken as a nonnegative frontier. @realizes kappa_cut(m,a,b)(AUTHORITATIVE closed form min{a−b, 2(m−b)} clamped by an outer max 0; the derived-phase [0,∞) space is PINNED BY CONSTRUCTION via that clamp, so κ_cut ∈ [0,∞) holds unconditionally — = 0 exactly on the vacuous cells where no cut-exactness region persists (a ≤ b or b ≥ m), and = min{a−b, 2(m−b)} > 0 under the homophily regime with b < m. The range no longer depends on the regime holding.)
Cut-corner exactness. Under two-block homophily, for 0 ≤ r < r_cut(m,a,b,κ) the cut covariance X_cut is the unique minimizer of F_{r,κ} over E_m^blk; the implementability gap is zero; X_cut is the unique minimizer over C_m^pm; and the cut design P_cut ∈ P_m^sym realizes it with X(P_cut) = X_cut. (The ass:balanced-sign-design atom is realized through membership in the block-exchangeable class C_m^pm/P_m^sym, which bundles BalancedDesignClass.)
Formal statement
Proof (Lean source)
Tgap 8 declarations For 0 ≤ κ < κ_gap and r ∈ (r_gap^-, r_gap^+) the spread vertex is the unique relaxed minimizer but violates y+z ≥ 2/m, so Δ_m^± > 0.
Odd-m positive-gap window (thm:gap-window)
For 0 ≤ κ < κ_gap and r ∈ (r_gap^-, r_gap^+) the spread vertex is the unique
relaxed minimizer but violates y+z ≥ 2/m, so Δ_m^± > 0. Even m makes the whole
slice implementable, so the positive gap fails (parity necessity).
The low-robustness gap ceiling κ_gap(m,a,b) = ((2m−a−3b)(a−b)√q)/(a+b).
The cut-frontier value at the gap scale r_cut_gap(m,a,b,κ) = max 0 (2b(a+b)(1 − κ/(a−b))) (the closed form is independent of m); this is the first ((a−b)) branch of the cut-exactness frontier r_cut(m,a,b,κ), active in the low-scale gap regime, taken as a nonnegative frontier. @realizes r_cut(m,a,b,kappa)(gap-scale branch 2b(a+b)(1−κ/(a−b)); the declared [0,∞) space is PINNED BY CONSTRUCTION via the outer max 0 clamp, so r_cut_gap ∈ [0,∞) holds unconditionally, consistent with the r_cut cluster in Tcut.lean.)
Lower spread frontier R_x^-(m,a,b,κ) = 2b(a+b)(1 + κ/((a−b)√q)).
Upper spread frontier R_x^+(m,a,b,κ) = (a+b)(2m−a−b−κ/√q).
Lower gap-window frontier r_gap^-(m,a,b,κ) = (R_x^- + R_x^+)/2. @realizes r_gap^-(m,a,b,kappa), r_gap^+(m,a,b,kappa)(AUTHORITATIVE carrier of the FIRST component r_gap^- of the pair symbol whose declared space is [0,∞)^2; closed form (R_x^- + R_x^+)/2 with R_x^- = 2b(a+b)(1+κ/((a−b)√q)) and R_x^+ = (a+b)(2m−a−b−κ/√q). The bare closed form is a plain ℝ, NOT nonnegative by construction; the FIRST factor of the [0,∞)^2 range is carried by the CONJUNCTION of this carrier with the companion range lemma rGapFrontiers_nonneg below — which pins 0 ≤ r_gap^- on the consuming window 0 ≤ κ < κ_gap via r_cut_gap = max 0 (…) ≥ 0 < r_gap^- — exactly as implementabilityGap/roundingLossCertificate pair with their *_nonneg lemmas in Basic.lean.)
Upper gap-window frontier r_gap^+(m,a,b,κ) = R_x^+. @realizes r_gap^-(m,a,b,kappa), r_gap^+(m,a,b,kappa)(AUTHORITATIVE carrier of the SECOND component r_gap^+ of the pair symbol whose declared space is [0,∞)^2; closed form R_x^+ = (a+b)(2m−a−b−κ/√q). The bare closed form is a plain ℝ, NOT nonnegative by construction; the SECOND factor of the [0,∞)^2 range is carried by the CONJUNCTION of this carrier with the companion range lemma rGapFrontiers_nonneg below, which pins 0 ≤ r_gap^+ on the consuming window 0 ≤ κ < κ_gap via r_gap^- < r_gap^+ (placing the open gap interval (r_gap^-, r_gap^+) ⊂ [0,∞)).)
Range lemma for the gap-window frontier pair (r_gap^-, r_gap^+). On the consuming window 0 ≤ κ < κ_gap, under two-block homophily and the low-scale normalization, the frontier pair lands in its core-declared space [0,∞)^2: 0 ≤ r_gap^- and 0 ≤ r_gap^+. This holds because r_cut_gap = max 0 (…) ≥ 0 and the window strictly orders the frontiers r_cut_gap < r_gap^- < r_gap^+ (the ordering proved by gap_window), so both frontiers are positive. Together with the rGapMinus/rGapPlus carrier defs above, this lemma IS the realization of the pair's standing [0,∞)^2 range condition (the bare (R_x^- + R_x^+)/2 and R_x^+ closed forms are plain ℝ, not nonnegative by construction), exactly mirroring how implementabilityGap_nonneg / roundingLossCertificate_nonneg pin the Δ_m^± / ρ_⋆ ranges in Basic.lean. @realizes r_gap^-(m,a,b,kappa), r_gap^+(m,a,b,kappa)(AUTHORITATIVE range clause for the pair symbol's declared space [0,∞)^2: the conjunction 0 ≤ r_gap^- ∧ 0 ≤ r_gap^+ pins BOTH factors on the consuming window 0 ≤ κ < κ_gap, via r_cut_gap = max 0 (…) ≥ 0 < r_gap^- < r_gap^+. This lemma, together with the rGapMinus/rGapPlus carrier defs above, IS the realizing cluster of the pair's standing [0,∞)^2 range condition.)
Formal statement
Proof (Lean source)
Positive-gap window. Under two-block homophily and low-scale: if m is odd, then for every 0 ≤ κ < κ_gap the frontiers are strictly ordered r_cut_gap < r_gap^- < r_gap^+, and for r ∈ (r_gap^-, r_gap^+) the spread vertex is the unique relaxed minimizer of F over E_m^blk but is not ±1 implementable, so Δ_m^±(r,κ) > 0. The oddness is necessary as a separate even-m case (NOT nested under the odd hypothesis, so it does not fire vacuously): for even m the whole block elliptope slice is implementable, hence the claimed positive gap is false.
Formal statement
Proof (Lean source)
Trobust 1 declarations Finite-κ iid exactness holds iff on the affine-balanced locus a+3b=2m, r=2b(a+b).
Robust-corner exactness (thm:robust-corner-exactness)
Finite-κ iid exactness holds iff on the affine-balanced locus a+3b=2m,
r=2b(a+b). On the locus, for every κ > 0, I_n is the unique relaxed minimizer
attained by P_iid; off the locus, I_n is never a finite-κ minimizer but
minimizers converge to I_n as κ → ∞.
Robust-corner exactness. Under two-block homophily: I_n is a minimizer of F_{r,κ} over E_m^blk for some finite κ iff a+3b=2m and r=2b(a+b); on this locus, for every κ > 0, I_n is the unique relaxed minimizer and P_iid ∈ P_m^sym attains it with X(P_iid)=I_n; off the locus I_n is never a finite-κ minimizer, though relaxed minimizers converge (entrywise) to I_n as κ → ∞.
Formal statement
Proof (Lean source)
Tsharp 3 declarations The tight certificate ρ_⋆ = Δ_m^±, computed by the active-set SOCP over the reduced triangle, with the exact zero-loss criterion ρ_⋆ = 0 iff the relaxed argmin meets the implementable slice {y+z ≥ d_m}.
Headline rounding-loss certificate (thm:sharp-rho-star)
The tight certificate ρ_⋆ = Δ_m^±, computed by the active-set SOCP over the
reduced triangle, with the exact zero-loss criterion ρ_⋆ = 0 iff the relaxed
argmin meets the implementable slice {y+z ≥ d_m}. No exact r_star frontier is
asserted (honest open scope).
Reduced-coordinate active-set data α = (c_x/q, c_y, c_z) for the linear change of variables t = (q x, y, z) that carries the reduced triangle T_m onto the scaled simplex Δ_M (M = 2m) and φ onto wsObj α β κ. This is the α fed to lem:weighted-simplex-active-set / lem:weighted-simplex-truncation.
Reduced-coordinate weights β = (1/q, 1, 1) (so β_y = β_z = 1), the β fed to lem:weighted-simplex-active-set / lem:weighted-simplex-truncation under the change of variables t = (q x, y, z).
Sharp ρ_⋆ certificate. Under two-block homophily, the rounding-loss certificate equals the implementability gap (ρ_⋆ = Δ_m^±); the gap is nonnegative (Δ_m^± ≥ 0, its definitional domain [0,∞)); ρ_⋆ = 0 iff the relaxed argmin over T_m meets the implementable slice {y+z ≥ d_m}; for κ > 0 the relaxed minimizer over T_m is unique (active-set uniqueness), and equivalently ρ_⋆ = 0 iff that unique minimizer satisfies y+z ≥ d_m; for κ = 0 the relaxed argmin set is the exposed face on the per-unit α-minimizing coordinates (α = (c_x/q, c_y, c_z)); and for even m (d_m = 0) the certificate vanishes identically. No r_star frontier is characterized.