SilverSight/formal
allaun 707ae76ca1 feat(lean): phiInvQ16_mul_strict_lt_pos — proven strict contraction lemma
- phiInvQ16_mul_strict_lt_pos: (phiInvQ16 * a).val < a.val for a.val > 0
  Proved via case analysis: a.val=1 (norm_num), a.val=2 (norm_num), a.val≥3 (omega + nlinarith)
  Uses Int.ediv_eq_of_eq_mul_right with ring for the k*65536/65536 = k identity
- phiInvQ16_lt_one: 40504 < 65536 (norm_num with ofRawInt saturation check)
- phiInvQ16_nonneg: phiInvQ16.toInt ≥ 0 (norm_num with saturation check)
- half_mul_add_self_non_sat fully proved (exact Q16_16 identity)
- contractedPhaseMerge_diagonal_non_sat fully proved
- h_clamp proof simplified with not_lt.mpr + simp
- Convergence theorems remain stated (2 sorries) pending well-founded induction

Build: 3309 jobs, 0 errors
2026-07-07 02:24:26 -05:00
..
BindingSite tag(axioms): justify all 18 custom axioms with HONESTY CLASS tags 2026-07-03 10:54:08 +00:00
CoreFormalism feat(lean): phiInvQ16_mul_strict_lt_pos — proven strict contraction lemma 2026-07-07 02:24:26 -05:00
RRCLib feat(rrc): bare-minimum RRC refactor into SilverSight 2026-06-21 09:08:48 -05:00
SilverSight chore: remove bak file 2026-07-05 15:05:34 -05:00