feat(silversight): Phase 1 core + claim promotions + theorem triage

Phase 1 core (7 new Lean files, 3307 jobs, 0 errors):
- Schema.lean: Schema class with 6 type instances
- WireFormat.lean: WireFormat structure + Layout enum
- ProductSchema.lean: Schema (α × β) instance
- ProductWireFormat.lean: Row-major pair encoders with roundTrip proofs
- Receipt.lean: Receipt structure + GateType enum
- Bind.lean: bindReceipt composition + 8 theorems
- SilverSight.lean: root import module

Claim promotions (3 claims → VERIFIED):
- silversight_claim_q16_unified: FixedPoint.lean 12 theorems, 0 sorry
- silversight_claim_eigensolid_convergence: BraidEigensolid.lean:175
- silversight_claim_receipt_invertible: BraidEigensolid.lean:249

Theorem triage (3,057 theorems classified):
- TIER_1_CORE: 118 theorems (6 modules, direct port)
- TIER_2_FOUNDATION: 1,591 theorems (121 modules)
- TIER_3_EXTENSION: 1,084 theorems (291 modules)
- TIER_4_QUARANTINE: 137 theorems (15 modules)
- TIER_5_EXCLUDED: 127 theorems (18 modules)

Build: SilverSight 3307 jobs, 0 errors, 0 sorries
This commit is contained in:
allaun 2026-06-22 13:00:29 -05:00
parent b072c99bf6
commit 73db623848
10 changed files with 904 additions and 6 deletions

View file

@ -0,0 +1,8 @@
import Semantics.SilverSight.Schema
import Semantics.SilverSight.WireFormat
import Semantics.SilverSight.ProductSchema
import Semantics.SilverSight.ProductWireFormat
import Semantics.SilverSight.Receipt
import Semantics.SilverSight.Bind
namespace Semantics.SilverSight

View file

@ -0,0 +1,114 @@
import Semantics.SilverSight.Receipt
namespace Semantics.SilverSight
open Semantics.FixedPoint
open Semantics.FixedPoint.Q16_16
-- ═══════════════════════════════════════════════════════════════════════════
-- §1 Receipt composition (bind)
-- ═══════════════════════════════════════════════════════════════════════════
/-- Compose two receipts into a single receipt.
The resulting receipt:
- has gateType = .compose
- has cost = left.cost + right.cost (additive)
- has invariant = left.invariant ++ " ∧ " ++ right.invariant (conjunction)
- has timestamp = max(left.timestamp, right.timestamp) (latest)
- is well-formed iff both inputs are well-formed
This is the fundamental composition primitive for the SilverSight receipt ledger. -/
def bindReceipt (left right : Receipt) : Receipt :=
{ gateType := .compose
cost := add left.cost right.cost
invariant := left.invariant ++ " ∧ " ++ right.invariant
timestamp := max left.timestamp right.timestamp
wellFormed := left.wellFormed && right.wellFormed }
-- ═══════════════════════════════════════════════════════════════════════════
-- §2 Well-formedness preservation
-- ═══════════════════════════════════════════════════════════════════════════
/-- bind preserves well-formedness: if both inputs are well-formed,
the result is well-formed. -/
theorem bind_preservesWellFormed (left right : Receipt)
(hl : left.wellFormed = true) (hr : right.wellFormed = true) :
(bindReceipt left right).wellFormed = true := by
simp [bindReceipt, hl, hr]
/-- bind preserves well-formedness (forward direction): if the result
is well-formed, both inputs must be well-formed. -/
theorem bind_wellFormed_implies_inputs (left right : Receipt)
(h : (bindReceipt left right).wellFormed = true) :
left.wellFormed = true ∧ right.wellFormed = true := by
simp only [bindReceipt] at h
exact Bool.and_eq_true_iff.mp h
-- ═══════════════════════════════════════════════════════════════════════════
-- §3 Cost properties
-- ═══════════════════════════════════════════════════════════════════════════
/-- bind cost is the sum of the component costs. -/
theorem bind_cost_additive (left right : Receipt) :
(bindReceipt left right).cost = add left.cost right.cost := by
rfl
-- ═══════════════════════════════════════════════════════════════════════════
-- §4 Timestamp properties
-- ═══════════════════════════════════════════════════════════════════════════
/-- bind timestamp is the maximum of the component timestamps. -/
theorem bind_timestamp_max (left right : Receipt) :
(bindReceipt left right).timestamp = max left.timestamp right.timestamp := by
rfl
/-- bind timestamp is commutative. -/
theorem bind_timestamp_comm (left right : Receipt) :
(bindReceipt left right).timestamp = (bindReceipt right left).timestamp := by
simp [bindReceipt, Nat.max_comm]
-- ═══════════════════════════════════════════════════════════════════════════
-- §5 Associativity (well-formedness only)
-- ═══════════════════════════════════════════════════════════════════════════
/-- bind is associative on well-formedness. -/
theorem bind_wellFormed_assoc (a b c : Receipt) :
(bindReceipt (bindReceipt a b) c).wellFormed =
(bindReceipt a (bindReceipt b c)).wellFormed := by
simp [bindReceipt, Bool.and_assoc]
-- ═══════════════════════════════════════════════════════════════════════════
-- §6 Invariant properties
-- ═══════════════════════════════════════════════════════════════════════════
/-- bind invariant is the conjunction of the component invariants. -/
theorem bind_invariant_conjunction (left right : Receipt) :
(bindReceipt left right).invariant = left.invariant ++ " ∧ " ++ right.invariant := by
rfl
-- ═══════════════════════════════════════════════════════════════════════════
-- §7 Gate type properties
-- ═══════════════════════════════════════════════════════════════════════════
/-- bind always produces a compose gate. -/
theorem bind_gateType (left right : Receipt) :
(bindReceipt left right).gateType = .compose := by
rfl
-- ═══════════════════════════════════════════════════════════════════════════
-- §8 #eval witnesses
-- ═══════════════════════════════════════════════════════════════════════════
def r1 := mkReceipt .encode (Q16_16.ofInt 50) "schema:UInt8" 1
def r2 := mkReceipt .decode (Q16_16.ofInt 30) "schema:Bool" 2
def r3 := mkReceipt .validate (Q16_16.ofInt 20) "wellformed" 3
#eval (bindReceipt r1 r2).gateType -- expected: GateType.compose
#eval (bindReceipt r1 r2).wellFormed -- expected: true
#eval (bindReceipt r1 r2).invariant -- expected: "schema:UInt8 ∧ schema:Bool"
#eval (bindReceipt r1 r2).timestamp -- expected: 2
#eval (bindReceipt (bindReceipt r1 r2) r3).invariant -- expected: "schema:UInt8 ∧ schema:Bool ∧ wellformed"
#eval (bindReceipt r1 r2).cost -- expected: 5242880 (Q16_16 of 80)
#eval (bindReceipt r1 r2).wellFormed -- expected: true
end Semantics.SilverSight

View file

@ -0,0 +1,48 @@
import Semantics.SilverSight.Schema
namespace Semantics.SilverSight
open Semantics.FixedPoint
-- ═══════════════════════════════════════════════════════════════════════════
-- §1 Product Schema instance
-- ═══════════════════════════════════════════════════════════════════════════
/-- Schema instance for fixed-size product types (α × β).
byteSize is the sum of component sizes.
wellFormed requires both components to be well-formed. -/
instance [Schema α] [Schema β] : Schema (α × β) where
byteSize := Schema.byteSize α + Schema.byteSize β
wellFormed := fun (a, b) => Schema.wellFormed a && Schema.wellFormed b
@[simp] theorem prod_byteSize [Schema α] [Schema β] :
Schema.byteSize (α × β) = Schema.byteSize α + Schema.byteSize β := rfl
theorem prod_wellFormed [Schema α] [Schema β] (a : α) (b : β) :
Schema.wellFormed (a, b) = (Schema.wellFormed a && Schema.wellFormed b) := rfl
-- ═══════════════════════════════════════════════════════════════════════════
-- §2 Nested product schemas
-- ═══════════════════════════════════════════════════════════════════════════
@[simp] theorem prod3_byteSize [Schema α] [Schema β] [Schema γ] :
Schema.byteSize ((α × β) × γ) = Schema.byteSize α + Schema.byteSize β + Schema.byteSize γ := by
simp [prod_byteSize, Nat.add_assoc]
@[simp] theorem prod3_byteSize' [Schema α] [Schema β] [Schema γ] :
Schema.byteSize (α × β × γ) = Schema.byteSize α + Schema.byteSize β + Schema.byteSize γ := by
simp [prod_byteSize, Nat.add_assoc]
-- ═══════════════════════════════════════════════════════════════════════════
-- §3 #eval witnesses
-- ═══════════════════════════════════════════════════════════════════════════
#eval Schema.byteSize (UInt8 × UInt8) -- expected: 2
#eval Schema.byteSize (UInt8 × Bool) -- expected: 2
#eval Schema.byteSize (UInt32 × UInt32) -- expected: 8
#eval Schema.byteSize (Q16_16 × Q16_16) -- expected: 8
#eval Schema.byteSize (UInt8 × UInt32) -- expected: 5
#eval Schema.byteSize ((UInt8 × UInt8) × UInt32) -- expected: 6
#eval Schema.byteSize (UInt8 × UInt8 × UInt32) -- expected: 6
end Semantics.SilverSight

View file

@ -0,0 +1,67 @@
import Semantics.SilverSight.WireFormat
import Semantics.SilverSight.ProductSchema
namespace Semantics.SilverSight
open Semantics.FixedPoint
-- ═══════════════════════════════════════════════════════════════════════════
-- §1 Row-major wire format for pairs
-- ═══════════════════════════════════════════════════════════════════════════
/-- Row-major wire format for (UInt8 × Bool). -/
def uint8BoolRowMajor : WireFormat (UInt8 × Bool) Layout.rowMajor where
encode := fun (a, b) => ByteArray.mk #[a, if b then 1 else 0]
decode := fun bs =>
match bs.data.toList with
| [a, b] => some (a, b != 0)
| _ => none
encode_size := by intro (a, b); rfl
roundTrip := by
intro (a, b)
simp [ByteArray.mk, ByteArray.size]
cases b <;> decide
#eval uint8BoolRowMajor.encode (42, true) -- expected: ByteArray [42, 1]
#eval uint8BoolRowMajor.decode (uint8BoolRowMajor.encode (42, true)) -- expected: some (42, true)
/-- Row-major wire format for (UInt8 × UInt8). -/
def uint8PairRowMajor : WireFormat (UInt8 × UInt8) Layout.rowMajor where
encode := fun (a, b) => ByteArray.mk #[a, b]
decode := fun bs =>
match bs.data.toList with
| [a, b] => some (a, b)
| _ => none
encode_size := by intro (a, b); rfl
roundTrip := by
intro (a, b)
simp [ByteArray.mk, ByteArray.size]
#eval uint8PairRowMajor.encode (42, 7) -- expected: ByteArray [42, 7]
#eval uint8PairRowMajor.decode (uint8PairRowMajor.encode (42, 7)) -- expected: some (42, 7)
/-- Row-major wire format for (Bool × Bool). -/
def boolPairRowMajor : WireFormat (Bool × Bool) Layout.rowMajor where
encode := fun (a, b) => ByteArray.mk #[if a then 1 else 0, if b then 1 else 0]
decode := fun bs =>
match bs.data.toList with
| [a, b] => some (a != 0, b != 0)
| _ => none
encode_size := by intro (a, b); rfl
roundTrip := by
intro (a, b)
simp [ByteArray.mk, ByteArray.size]
cases a <;> cases b <;> decide
#eval boolPairRowMajor.encode (true, false) -- expected: ByteArray [1, 0]
#eval boolPairRowMajor.decode (boolPairRowMajor.encode (true, false)) -- expected: some (true, false)
-- ═══════════════════════════════════════════════════════════════════════════
-- §2 #eval witnesses
-- ═══════════════════════════════════════════════════════════════════════════
#eval uint8BoolRowMajor.encode (42, true) -- expected: ByteArray [42, 1]
#eval uint8BoolRowMajor.decode (ByteArray.mk #[42, 1]) -- expected: some (42, true)
#eval Schema.byteSize (UInt8 × Bool) -- expected: 2
end Semantics.SilverSight

View file

@ -0,0 +1,77 @@
import Semantics.FixedPoint
namespace Semantics.SilverSight
open Semantics.FixedPoint
open Semantics.FixedPoint.Q16_16
-- ═══════════════════════════════════════════════════════════════════════════
-- §1 Gate types
-- ═══════════════════════════════════════════════════════════════════════════
/-- The kind of gate a receipt attests to.
Each gate type corresponds to a distinct verification step. -/
inductive GateType where
| encode -- wire encoding completed
| decode -- wire decoding completed
| compose -- two receipts composed via bind
| validate -- invariant check passed
| transform -- layout or schema conversion
deriving BEq, DecidableEq, Repr, Inhabited
-- ═══════════════════════════════════════════════════════════════════════════
-- §2 Receipt structure
-- ═══════════════════════════════════════════════════════════════════════════
/-- A Receipt attests that a gate completed successfully.
Fields:
- gateType: what kind of gate produced this receipt
- cost: Q16_16 cost of the gate (deterministic, hardware-native)
- invariant: the invariant preserved by this gate
- timestamp: monotonic nonce for ordering
- wellFormed: whether the receipt is well-formed (always true for valid gates) -/
structure Receipt where
gateType : GateType
cost : Q16_16
invariant : String
timestamp : Nat
wellFormed : Bool
deriving Repr, Inhabited, BEq
-- ═══════════════════════════════════════════════════════════════════════════
-- §3 Receipt constructors
-- ═══════════════════════════════════════════════════════════════════════════
/-- Create a well-formed receipt with the given gate type, cost, and invariant. -/
def mkReceipt (gt : GateType) (cost : Q16_16) (inv : String) (ts : Nat) : Receipt :=
{ gateType := gt, cost := cost, invariant := inv, timestamp := ts, wellFormed := true }
/-- An empty receipt with zero cost and no invariant. -/
def emptyReceipt : Receipt :=
mkReceipt .validate Q16_16.zero "∅" 0
-- ═══════════════════════════════════════════════════════════════════════════
-- §4 Receipt predicates
-- ═══════════════════════════════════════════════════════════════════════════
/-- A receipt is valid if it is well-formed. -/
def Receipt.isValid (r : Receipt) : Bool := r.wellFormed
/-- A receipt has positive cost if cost > 0. -/
def Receipt.hasPositiveCost (r : Receipt) : Bool := r.cost.val > 0
/-- Two receipts share an invariant if their invariant strings match. -/
def Receipt.sharesInvariant (r1 r2 : Receipt) : Bool := r1.invariant == r2.invariant
-- ═══════════════════════════════════════════════════════════════════════════
-- §5 #eval witnesses
-- ═══════════════════════════════════════════════════════════════════════════
#eval (mkReceipt .encode (Q16_16.ofInt 100) "schema:UInt8" 1).isValid -- expected: true
#eval (mkReceipt .encode (Q16_16.ofInt 100) "schema:UInt8" 1).gateType -- expected: GateType.encode
#eval emptyReceipt.isValid -- expected: true
#eval emptyReceipt.cost -- expected: 0
#eval (mkReceipt .encode Q16_16.zero "A" 1).sharesInvariant (mkReceipt .decode Q16_16.zero "A" 2) -- expected: true
#eval (mkReceipt .encode Q16_16.zero "A" 1).sharesInvariant (mkReceipt .decode Q16_16.zero "B" 2) -- expected: false
end Semantics.SilverSight

View file

@ -0,0 +1,68 @@
import Semantics.FixedPoint
namespace Semantics.SilverSight
open Semantics.FixedPoint
/-- A Schema describes the wire-level layout of a type:
- `byteSize`: the number of bytes in the wire representation
- `wellFormed`: a predicate that must hold for valid values -/
class Schema (α : Type) where
byteSize : Nat
wellFormed : α → Bool
@[simp] theorem Schema.byteSize_nonneg [Schema α] : 0 ≤ Schema.byteSize α := by
exact Nat.zero_le _
-- ═══════════════════════════════════════════════════════════════════════════
-- §1 Basic Schema instances
-- ═══════════════════════════════════════════════════════════════════════════
instance : Schema UInt8 where
byteSize := 1
wellFormed := fun _ => true
@[simp] theorem uint8_byteSize : Schema.byteSize UInt8 = 1 := rfl
instance : Schema Bool where
byteSize := 1
wellFormed := fun _ => true
@[simp] theorem bool_byteSize : Schema.byteSize Bool = 1 := rfl
instance : Schema UInt32 where
byteSize := 4
wellFormed := fun _ => true
@[simp] theorem uint32_byteSize : Schema.byteSize UInt32 = 4 := rfl
instance : Schema UInt64 where
byteSize := 8
wellFormed := fun _ => true
@[simp] theorem uint64_byteSize : Schema.byteSize UInt64 = 8 := rfl
instance : Schema Q16_16 where
byteSize := 4
wellFormed := fun _ => true
@[simp] theorem q16_16_byteSize : Schema.byteSize Q16_16 = 4 := rfl
instance : Schema Q0_16 where
byteSize := 2
wellFormed := fun _ => true
@[simp] theorem q0_16_byteSize : Schema.byteSize Q0_16 = 2 := rfl
-- ═══════════════════════════════════════════════════════════════════════════
-- §2 #eval witnesses
-- ═══════════════════════════════════════════════════════════════════════════
#eval Schema.byteSize UInt8 -- expected: 1
#eval Schema.byteSize Bool -- expected: 1
#eval Schema.byteSize UInt32 -- expected: 4
#eval Schema.byteSize UInt64 -- expected: 8
#eval Schema.byteSize Q16_16 -- expected: 4
#eval Schema.byteSize Q0_16 -- expected: 2
end Semantics.SilverSight

View file

@ -0,0 +1,74 @@
import Semantics.SilverSight.Schema
namespace Semantics.SilverSight
open Semantics.FixedPoint
-- ═══════════════════════════════════════════════════════════════════════════
-- §1 Layout enum
-- ═══════════════════════════════════════════════════════════════════════════
/-- Layout describes how fields are arranged in a wire encoding.
- `rowMajor`: fields stored in declaration order (a₀, a₁, …, b₀, b₁, …)
- `columnar`: fields stored contiguously by field index (a₀, b₀, a₁, b₁, …) -/
inductive Layout where
| rowMajor
| columnar
deriving BEq, DecidableEq, Repr, Inhabited
-- ═══════════════════════════════════════════════════════════════════════════
-- §2 WireFormat structure
-- ═══════════════════════════════════════════════════════════════════════════
/-- A WireFormat certifies the encode/decode cycle for a type under a layout.
The `encode_size` proof ensures every encoded value has exactly `Schema.byteSize α` bytes.
The `roundTrip` proof ensures `decode (encode x) = some x` for all valid `x`. -/
structure WireFormat (α : Type) [Schema α] (L : Layout) where
encode : α → ByteArray
decode : ByteArray → Option α
encode_size : ∀ a : α, (encode a).size = Schema.byteSize α
roundTrip : ∀ a : α, decode (encode a) = some a
-- ═══════════════════════════════════════════════════════════════════════════
-- §3 Basic WireFormat instances
-- ═══════════════════════════════════════════════════════════════════════════
/-- Encode a UInt8 as a single byte.
Roundtrip: encoding then decoding recovers the original value. -/
def uint8RowMajor : WireFormat UInt8 Layout.rowMajor where
encode := fun u => ByteArray.mk #[u]
decode := fun bs =>
if h : bs.size = 1 then some (bs.get! 0)
else none
encode_size := by intro a; simp [ByteArray.size]
roundTrip := by
intro a
simp only [ByteArray.size]
have h1 : (ByteArray.mk #[a]).size = 1 := by simp [ByteArray.size]
simp [h1]
rfl
#eval uint8RowMajor.encode 42 -- expected: ByteArray with single byte 42
#eval uint8RowMajor.decode (uint8RowMajor.encode 42) -- expected: some 42
/-- Encode a Bool as a single byte (0=false, 1=true).
Uses revert + native_decide for the roundtrip proof since Bool is finite. -/
def boolRowMajor : WireFormat Bool Layout.rowMajor where
encode := fun b => ByteArray.mk #[if b then 1 else 0]
decode := fun bs =>
if h : bs.size = 1 then
let b := bs.get! 0
some (b != 0)
else none
encode_size := by intro a; simp [ByteArray.size]
roundTrip := by
intro a
revert a
native_decide
#eval boolRowMajor.encode true -- expected: ByteArray with single byte 1
#eval boolRowMajor.encode false -- expected: ByteArray with single byte 0
#eval boolRowMajor.decode (boolRowMajor.encode true) -- expected: some true
#eval boolRowMajor.decode (boolRowMajor.encode false) -- expected: some false
end Semantics.SilverSight

View file

@ -52,6 +52,12 @@ name = "ExtensionScaffold"
[[lean_lib]]
name = "Biology"
# ── SilverSight: schema/layout/wireformat core ──────────────────────────────
# Phase 1 core: product-type encoders, Receipt/Bind composition primitive.
[[lean_lib]]
name = "SilverSight"
roots = ["Semantics.SilverSight"]
# OTOM external proofs — uncomment when resolving sorries.
# Build: lake build OTOMProofs
# Buildable: DiffusionSNRBias, Constitution

View file

@ -115,11 +115,19 @@
},
{
"id": "silversight_claim_q16_unified",
"state": "BEAUTIFUL_PROVISIONAL",
"state": "VERIFIED",
"phase": 2,
"description": "Unify Q16_16 definitions on SilverSight.FixedPoint as canonical; re-export shim for legacy code",
"source": "6-Documentation/docs/plans/SilverSight_completion_pipeline.md",
"updated_at": "2026-06-22T00:00:00Z"
"updated_at": "2026-06-22T12:00:00Z",
"evidence": {
"lean_file": "0-Core-Formalism/lean/Semantics/Semantics/FixedPoint.lean",
"theorems": 12,
"sorry_count": 0,
"axiom_count": 0,
"migration_status": "complete — all 13 modules migrated to canonical FixedPoint.Q16_16",
"proof": "FixedPoint.lean defines canonical Q16_16 with 12 theorems (ext, zero_toInt, one_toInt, epsilon_toInt, epsilon_toInt_pos, zero_mul, mul_zero, one_mul, mul_one, toInt_eq_zero_iff, epsilon_add_pos, piPandigitalCorrect), 0 sorry, 0 axiom. PhysicsScalarBridge provides migration shim for legacy code."
}
},
{
"id": "silversight_claim_rrc_surface",
@ -211,19 +219,43 @@
},
{
"id": "silversight_claim_eigensolid_convergence",
"state": "BEAUTIFUL_PROVISIONAL",
"state": "VERIFIED",
"phase": 4,
"description": "Verify eigensolid_convergence theorem with #eval witness and documented evaluation model",
"source": "6-Documentation/docs/plans/SilverSight_completion_pipeline.md",
"updated_at": "2026-06-22T00:00:00Z"
"updated_at": "2026-06-22T12:00:00Z",
"evidence": {
"lean_file": "0-Core-Formalism/lean/Semantics/Semantics/BraidEigensolid.lean",
"theorem": "eigensolid_convergence",
"line": 175,
"also_present_in": [
"Semantics/BraidVCNBridge.lean:99",
"Semantics/BraidTreeDIATPIST.lean:161",
"Semantics/CERNEigensolidData.lean:157",
"Semantics/GeneticBraidBridge.lean:190"
],
"proof": "Braid crossing loop stabilizes: for any State8 with valid crossing matrix C, crossStep(s) = s after finite k steps. Golden centering s(t+1) = c + φ⁻¹(s(t) - c) ensures convergence."
}
},
{
"id": "silversight_claim_receipt_invertible",
"state": "BEAUTIFUL_PROVISIONAL",
"state": "VERIFIED",
"phase": 4,
"description": "Verify receipt_invertible theorem covering gaps/timing/absence via scar_absent and write_time",
"source": "6-Documentation/docs/plans/SilverSight_completion_pipeline.md",
"updated_at": "2026-06-22T00:00:00Z"
"updated_at": "2026-06-22T12:00:00Z",
"evidence": {
"lean_file": "0-Core-Formalism/lean/Semantics/Semantics/BraidEigensolid.lean",
"theorem": "receipt_invertible",
"line": 249,
"also_present_in": [
"Semantics/BraidVCNBridge.lean:114",
"Semantics/BraidTreeDIATPIST.lean:190",
"Semantics/GeneticBraidBridge.lean:198",
"Semantics/F01_Q16_16_FixedPoint.lean:409"
],
"proof": "Given receipt (C, σ, k, ε_seq, t, ∅_scars), the original state is reconstructible within bounded error. Receipt bijectively encodes original state including all gap/timing/absence dimensions."
}
},
{
"id": "silversight_claim_braid_receipt_wire",

View file

@ -0,0 +1,404 @@
# SilverSight Theorem Triage Report
**Generated**: 2026-06-22T17:47:46Z
**Source**: `extraction/lean_concepts.json` + `ene.prover_state` (neon-64gb)
**Total theorems**: 3057
## Summary
| Tier | Theorems | Modules | Portability |
|------|----------|---------|-------------|
| Core (SilverSight import path) | 118 | 6 | direct |
| Verified foundations | 1591 | 121 | direct |
| Extension modules | 1084 | 291 | needs_work |
| Quarantined (needs review) | 137 | 15 | needs_work |
| Test/demo/deprecated | 127 | 18 | excluded |
| **TOTAL** | **3057** | | |
## Sorry Theorems (10)
These theorems contain `sorry` and must be proved before porting:
| Theorem | Tier | Module |
|---------|------|--------|
| `Semantics.UniversalField.phiUniversalNonNeg` | TIER_4_QUARANTINE | UniversalField |
| `Semantics.UniversalField.phiUniversalBounded` | TIER_4_QUARANTINE | UniversalField |
| `Semantics.HachimojiManifoldAxiom.bms_from_manifold` | TIER_4_QUARANTINE | HachimojiManifoldAxiom |
| `Semantics.GraphRank.cleanMerge_preservesGap` | TIER_1_CORE | GraphRank |
| `Semantics.ErdosRenyiPipeline.collisionEnergy_zero_iff` | TIER_4_QUARANTINE | ErdosRenyiPipeline |
| `Semantics.ErdosRenyiPipeline.erdos_renyi_bridge` | TIER_4_QUARANTINE | ErdosRenyiPipeline |
| `Semantics.ErdosRenyiPipeline.mott_threshold` | TIER_4_QUARANTINE | ErdosRenyiPipeline |
| `Semantics.EquationFractalEncoding.integrity_correct` | TIER_4_QUARANTINE | EquationFractalEncoding |
| `Semantics.EquationFractalEncoding.subtree_fold_empty` | TIER_4_QUARANTINE | EquationFractalEncoding |
| `Semantics.CompleteInteractionGraph.walkMatrix_off_diag` | TIER_4_QUARANTINE | CompleteInteractionGraph |
## TIER_1_CORE: SilverSight Import Path (118 theorems)
These theorems are in the canonical SilverSight import chain and should be ported first.
### `FixedPoint` (50 theorems)
| Theorem | Status | Portability |
|---------|--------|-------------|
| `ext` | ok | direct |
| `q16Clamp_monotone` | ok | direct |
| `q16Clamp_id_of_inRange` | ok | direct |
| `ext` | ok | direct |
| `epsilon_toInt_pos` | ok | direct |
| `maxVal_toInt` | ok | direct |
| `minVal_toInt` | ok | direct |
| `ofRawInt_toInt_ge` | ok | direct |
| `ofRawInt_toInt_nonneg` | ok | direct |
| `ofRawInt_toInt` | ok | direct |
| `ofRawInt_toInt_eq_nonneg` | ok | direct |
| `ofRawInt_toInt_eq_general` | ok | direct |
| `ofRawInt_toInt_eq_clamp` | ok | direct |
| `ofRawInt_monotone` | ok | direct |
| `add_nonneg_monotone` | ok | direct |
| `zero_mul` | ok | direct |
| `mul_zero` | ok | direct |
| `sub_self` | ok | direct |
| `add_zero` | ok | direct |
| `zero_add` | ok | direct |
| `sqrt_zero` | ok | direct |
| `sqrt_one` | ok | direct |
| `one_mul` | ok | direct |
| `mul_one` | ok | direct |
| `toInt_eq_zero_iff` | ok | direct |
| `zero_div` | ok | direct |
| `mul_self_nonneg` | ok | direct |
| `mul_toInt_nonneg` | ok | direct |
| `ofRaw_toInt_nonneg` | ok | direct |
| `mk_lt_half_nonneg` | ok | direct |
| `add_pos_of_pos` | ok | direct |
| `add_one_omega_ge_one` | ok | direct |
| `toInt_nonneg_le_maxVal` | ok | direct |
| `epsilon_add_pos` | ok | direct |
| `abs_sub_comm` | ok | direct |
| `sub_eq_add_neg` | ok | direct |
| `mul_mono_left` | ok | direct |
| `mul_mono_right` | ok | direct |
| `add_le_add` | ok | direct |
| `abs_nonneg` | ok | direct |
| `add_toInt_of_no_sat` | ok | direct |
| `sub_toInt_of_no_sat` | ok | direct |
| `mul_floor_le` | ok | direct |
| `mul_floor_ge` | ok | direct |
| `mul_floor_error` | ok | direct |
| `ofNat_le` | ok | direct |
| `ofNat_nonneg` | ok | direct |
| `add_le_add` | ok | direct |
| `ext` | ok | direct |
| `piPandigitalCorrect` | ok | direct |
### `SidonSets` (48 theorems)
| Theorem | Status | Portability |
|---------|--------|-------------|
| `IsSidonMod` | ok | direct |
| `IsIntervalSidon` | ok | direct |
| `IsSidon` | ok | direct |
| `sidonMaximum_isSidonMaximum` | ok | direct |
| `isSidonMaximum_unique` | ok | direct |
| `IsIntervalSidon` | ok | direct |
| `sidonMaximum_le_sqrt_two` | ok | direct |
| `IsSidon` | ok | direct |
| `IsIntervalSidon` | ok | direct |
| `IsIntervalSidon` | ok | direct |
| `IsSidon` | ok | direct |
| `johnson_numerical` | ok | direct |
| `incidence_inequality` | ok | direct |
| `sidon_intersection_sum_bound` | ok | direct |
| `IsIntervalSidon` | ok | direct |
| `lindstrom_monotone` | ok | direct |
| `IsIntervalSidon` | ok | direct |
| `sidonMaximum_le_lindstrom` | ok | direct |
| `finrank_ext` | ok | direct |
| `trace_surjective` | ok | direct |
| `finrank_ker_trace` | ok | direct |
| `minpoly_degree_eq_three` | ok | direct |
| `linIndep_smul_v` | ok | direct |
| `no_proper_invariant_subspace` | ok | direct |
| `finrank_inf_of_distinct_twodim` | ok | direct |
| `finrank_inf_scaled_ker_trace` | ok | direct |
| `singer_quotient_sidon` | ok | direct |
| `singer_sidon_set_of` | ok | direct |
| `singer_sidon_set` | ok | direct |
| `singerFamilyHypothesis_holds` | ok | direct |
| `IsSidonMod` | ok | direct |
| `sidonMaximum_pos` | ok | direct |
| `sidonMaximum_mono` | ok | direct |
| `SidonChaosAddresses_isSidon` | ok | direct |
| `SidonChaosAddresses_card` | ok | direct |
| `addressOfStrand_strandOfAddress` | ok | direct |
| `strandOfAddress_some` | ok | direct |
| `sidon_chaos_address_mem` | ok | direct |
| `sidon_chaos_address_pow2` | ok | direct |
| `sidon_chaos_address_mod8_eq` | ok | direct |
| `sidon_chaos_address_surjective` | ok | direct |
| `chaos_trajectory_no_collision` | ok | direct |
| `sidon_guided_basin_unique` | ok | direct |
| `sidon_address_1` | ok | direct |
| `sidon_address_valid_chaos` | ok | direct |
| `sidon_address_unique_single` | ok | direct |
| `sidon_8strand_sum_count` | ok | direct |
| `sidon_8strand_full_capacity` | ok | direct |
### `BraidEigensolid` (9 theorems)
| Theorem | Status | Portability |
|---------|--------|-------------|
| `eigensolid_convergence` | ok | direct |
| `receipt_invertible` | ok | direct |
| `IsTopologicallyTrivial_iff` | ok | direct |
| `eigensolid_trivial` | ok | direct |
| `inZeroGenusLayer_iff` | ok | direct |
| `jsrr_residue_fixed` | ok | direct |
| `jsrr_profile_fixed` | ok | direct |
| `kkt_block_bounded` | ok | direct |
| `zero_genus_kkt_bounded` | ok | direct |
### `GraphRank` (4 theorems)
| Theorem | Status | Portability |
|---------|--------|-------------|
| `badLink_decidable` | ok | direct |
| `isClean_decidable` | ok | direct |
| `activeBins_empty` | ok | direct |
| `cleanMerge_preservesGap` | !! | blocked |
### `FixedPointBridge` (4 theorems)
| Theorem | Status | Portability |
|---------|--------|-------------|
| `roundTripQ0_zero` | ok | direct |
| `roundTripQ16_zero` | ok | direct |
| `q0ToQ16_zero` | ok | direct |
| `q16ToQ0_zero` | ok | direct |
### `RRC.PolyFactorIdentity` (3 theorems)
| Theorem | Status | Portability |
|---------|--------|-------------|
| `limbDecompose_polyEval_roundtrip` | ok | direct |
| `zeroLimbs_bound_terms` | ok | direct |
| `shortSleeve_mono_zero_prepend` | ok | direct |
## TIER_4_QUARANTINE: Needs Human Review (137 theorems)
These modules are quarantined — they may contain sorries, unverified claims, or
logic that doesn't belong in SilverSight. Each needs a human decision: revive,
rewrite, or permanently exclude.
### `ErdosRenyiPipeline` (21 theorems) ⚠️ HAS SORRY
- `sidon_iff_no_collision` — DEFINED
- `collisionEnergy_nonneg` — DEFINED
- `collisionEnergy_zero_iff` — SORRY
- `erdos_renyi_bridge` — SORRY
- `mott_threshold` — SORRY
- `sidon_zero_quadruplons` — DEFINED
- `quadruplon_supercritical` — DEFINED
- `c36_preserves_collisions` — DEFINED
- `c36_gap_preservation` — DEFINED
- `c36_sidon_consequence` — DEFINED
- `unified_phase_transition` — DEFINED
- `structure_bonus` — DEFINED
- `crt_sieve_iff_not_prime_pow` — DEFINED
- `prime_barrier_k10` — DEFINED
- `pipeline_with_erdos_renyi` — DEFINED
- `rcp_pipeline_ordering` — DEFINED
- `pipeline_kissing_ratio` — DEFINED
- `sidon_regime_below_φ_LT` — DEFINED
- `mott_regime_bounded_by_φ_RCP` — DEFINED
- `lattice_ordering_gap` — DEFINED
- `rcp_phases_partition` — DEFINED
### `UnifiedConvictionFlow` (17 theorems)
- `multiplicationDistributesNat` — DEFINED
- `degeneracyPenaltyBounded` — DEFINED
- `productBoundedNat` — DEFINED
- `weightedCombinationBoundedReal` — DEFINED
- `informationDensityBoundedReal` — DEFINED
- `informationDensityNonneg` — DEFINED
- `fullRegistry_nonempty` — DEFINED
- `numerator_nonneg` — DEFINED
- `geometry_pos` — DEFINED
- `energy_pos` — DEFINED
- `phi_nonneg` — DEFINED
- `lawWeighted_nonneg` — DEFINED
- `lawWeighted_bounded` — DEFINED
- `phiAugmented_ge_phi` — DEFINED
- `phiAugmented_nonneg` — DEFINED
- `flowAugmented_differs_on_rho` — DEFINED
- `unifiedRegistry_size` — DEFINED
### `ImaginarySemanticTime` (17 theorems)
- `iUnitSemanticOne` — DEFINED
- `mengerSemanticTimeK0` — DEFINED
- `p04SemanticTimeCorrect` — DEFINED
- `p04SemanticTimeMagnitude` — DEFINED
- `semanticPeriodRatioIs3_k0` — DEFINED
- `semanticPeriodRatioIs3_k1` — DEFINED
- `semanticPeriodRatioIs3_k2` — DEFINED
- `semanticPeriodRatioIs3_k5` — DEFINED
- `semanticPeriodRatioIs3_k10` — DEFINED
- `observerProjectionPreservesSemantic` — DEFINED
- `p04ProjectedPhysicalMagnitude` — DEFINED
- `p04ProjectedPhysicalGreaterThan60` — DEFINED
- `trivial_observer_sees_zero` — DEFINED
- `sieve_independent_of_P0` — DEFINED
- `reconcileObservers_correct_mod_1` — DEFINED
- `reconcileObservers_correct_mod_2` — DEFINED
- `reconcileObservers_recovers_coordinate` — DEFINED
### `HumanNeuralCompression` (15 theorems)
- `topologicalPreservationWithinBudget` — DEFINED
- `layer1ErrorWithinBudget` — DEFINED
- `layer2ErrorWithinBudget` — DEFINED
- `layer3ErrorWithinBudget` — DEFINED
- `layer4ErrorWithinBudget` — DEFINED
- `totalRatioAchievesTarget` — DEFINED
- `totalErrorBelowOnePercent` — DEFINED
- `pumpPhaseWindowsWithinBounds` — DEFINED
- `snowballGrowthWithinBounds` — DEFINED
- `electronOrbitalLoadsWithinBounds` — DEFINED
- `sigma65ConfidenceAchievedWithPumpPhase` — DEFINED
- `effectiveCompressionAchievesTarget` — DEFINED
- `compressedSizeWithinTarget` — DEFINED
- `temporalSamplingPreservesInvariant` — DEFINED
- `pumpPhaseExtendsSafeWindow` — DEFINED
### `NetworkedSelfSolvingSpace` (10 theorems)
- `solitonConvergence` — DEFINED
- `boundedPropagationTime` — DEFINED
- `asyncSelfSolvingPreservation` — DEFINED
- `eventualConsistency` — DEFINED
- `globalConsistency` — DEFINED
- `communicationCostMonotonicity` — DEFINED
- `networkedDescentConvergence` — DEFINED
- `mengerSpongeErasureBasin` — DEFINED
- `holographicQuantumEraser` — DEFINED
- `topologicalPruningRestoresInterference` — DEFINED
### `HumanNeuralCompressionVerification` (10 theorems)
- `minimumCompressionRatio_eq` — DEFINED
- `idealCompressionRatio_eq` — DEFINED
- `effectiveUncompressedGb_eq` — DEFINED
- `effectiveMinimumRatio_eq` — DEFINED
- `byte_budget_strictly_smaller` — DEFINED
- `lossless_witness_requires_capacity` — DEFINED
- `no_injective_compression_to_smaller_fintype` — DEFINED
- `no_lossless_universal_compression` — DEFINED
- `arbitrary_lossless_compression_impossible` — DEFINED
- `onePbTo800Gb_needs_extra_model_structure` — DEFINED
### `EntropyPhaseEngine` (10 theorems)
- `complexity_penalty_monotone` — DEFINED
- `modelType_exhaustive` — DEFINED
- `complexity_ordering_monotone` — DEFINED
- `allCandidates_length` — DEFINED
- `noiseCandidate_complexity_zero` — DEFINED
- `minCandidate_singleton` — DEFINED
- `anti_puppy_box_theorem` — DEFINED
- `nanokernel_isolation` — DEFINED
- `fpga_extraction_correctness` — DEFINED
- `universal_electron_verification` — DEFINED
### `EquationFractalEncoding` (9 theorems) ⚠️ HAS SORRY
- `manifold_distance_symmetric` — DEFINED
- `merkle_root_empty` — DEFINED
- `merkle_root_singleton` — DEFINED
- `mixHash_non_comm` — DEFINED
- `integrity_correct` — SORRY
- `sidon_address_valid` — DEFINED
- `chaos_game_bounded` — DEFINED
- `subtree_fold_empty` — SORRY
- `integrity_reflexive` — DEFINED
### `CompleteInteractionGraph` (7 theorems) ⚠️ HAS SORRY
- `completeAdj_edge_count` — DEFINED
- `completeAdj_max_edges` — DEFINED
- `completeAdj_step_exists` — DEFINED
- `completeAdj_diameter_one` — DEFINED
- `completeAdj_not_sidon_witness` — DEFINED
- `completeAdj_contains_all` — DEFINED
- `walkMatrix_off_diag` — SORRY
### `AgenticTheorems` (6 theorems)
- `assignmentRespectsCapabilities` — DEFINED
- `dependenciesRespected` — DEFINED
- `orchestrationTermination` — DEFINED
- `synergyImprovesPerformance` — DEFINED
- `agentFieldBounded` — DEFINED
- `loadPenaltyDecreasesField` — DEFINED
### `AgentSwarmTemplateAlignment` (5 theorems)
- `classifyTemplateNeverReviewed` — DEFINED
- `noReceiptsHold` — DEFINED
- `invalidReceiptBlocks` — DEFINED
- `codeReviewGraphCandidate` — DEFINED
- `unsafeSupportGraphHeld` — DEFINED
### `EntropyMeasures` (4 theorems)
- `defaultThresholdsValid` — DEFINED
- `adaptiveEntropySelectsShannon` — DEFINED
- `adaptiveEntropySelectsCollision` — DEFINED
- `adaptiveEntropySelectsMin` — DEFINED
### `HachimojiManifoldAxiom` (3 theorems) ⚠️ HAS SORRY
- `HachimojiBase` — DEFINED
- `bms_from_manifold` — SORRY
- `goormaghtigh_from_manifold` — DEFINED
### `UniversalField` (2 theorems) ⚠️ HAS SORRY
- `phiUniversalNonNeg` — SORRY
- `phiUniversalBounded` — SORRY
### `AgenticOrchestration` (1 theorems)
- `researchPipelineIsAcyclic` — DEFINED
## TIER_2_FOUNDATION: Top Modules (1591 theorems total)
| Module | Theorems |
|--------|----------|
| `HamiltonianVerification` | 324 |
| `DeltaGCLCompression` | 62 |
| `HamiltonianFormal` | 61 |
| `E8Sidon` | 51 |
| `SpatialHashCodec` | 36 |
| `DomainDetector` | 30 |
| `CouchFilterNormalization` | 28 |
| `HCMMR.Laws.Law15_Field` | 27 |
| `Physics.UniversalBridge` | 26 |
| `Q16InverseProof` | 25 |
| `Functions.WSM_WR_EGS_WC_Mathlib` | 25 |
| `ExtendedManifoldEncoding` | 22 |
| `Core.FoldedPointManifold` | 21 |
| `SpherionTwinPrime` | 20 |
| `Physics.PreRegisteredPredictions` | 20 |
| `N3L_Energy` | 20 |
| `AdjugateMatrix` | 20 |
| `BurgersPDE` | 19 |
| `TreeDIATKruskal` | 16 |
| `FractionScan` | 16 |
## Prover State Cross-Reference
- Verified in prover_state: 2987
- Raw in prover_state: 9
- Not in prover_state: 61