Samplinglib
Lean gate not recorded for this source state main · 0e31a3cda412
Optimisation · §1 · source p. 3

Introduction and basics of convex functions

Stable source-facing chapter environment inside the shared Samplinglib reader.

Partially formalizedsource mapFull source closure not claimed
Planned route

Source → theorem map → reusable Lean nodes

01

Source audit

Definitions, theorems, assumptions, proof route, and exact anchors.

02

Upstream alignment

Search Mathlib, Optlib, CvxLean, and shared Samplinglib interfaces; preserve the exact Chewi statement and use a small adapter when conventions differ.

03

Frontier Cells

Only genuinely missing mathematical edges become theorem-sized tasks.

04

Graph placement

Dependencies, consumers, cross-library bridges, and reusable shared interfaces.

Open exact Chewi source ↗

This page establishes a stable source route and truth boundary; it does not claim a completed formalization.

Shared converse: gradient monotonicity implies strong convexity

Chenyi Li and Ziyu Wang, Optlib, Apache-2.0. ASTIS mathematical restatement.

Optlib 5da27c5f95aa6a8a45b8c14b968ade4c13ff18c3 · Lower_Strong_Convex, lines 144–155; ConvexFunction.lean::monotone_gradient_convex' is its upstream convexity dependency · faithful paraphrase

Complete source statement (ASTIS restatement)

Let E be a complete real inner-product space, s a convex subset, f:E→ℝ, g:E→E and m∈ℝ. Suppose f has ambient gradient g(z) at every z∈s. If ⟨g(y)−g(x),y−x⟩≥m‖y−x‖² for every x,y∈s, then f is m-strongly convex on s, in the chord sense with quadratic correction m/2.

  • E is a complete real inner-product space, s is a convex subset of E, f:E→ℝ, g:E→E and m∈ℝ.
  • At every z∈s, g(z) is a genuine ambient gradient: HasGradientAt f (g z) z. This includes boundary points, and implies the continuity needed at segment endpoints.
  • For every x,y∈s, the gradient difference paired with y−x is at least m‖y−x‖². The modulus may be positive, zero or negative.

Gradient bound

\[\langle g(y)-g(x),y-x\rangle\ge m\|y-x\|^2,\quad x,y\in s.\]

Conclusion

\[f(ax+by)\le af(x)+bf(y)-\frac m2ab\|x-y\|^2,\quad x,y\in s,\ a,b\ge0,\ a+b=1.\]

Read the formalized proofs

Each statement and proof below has its own closed Lean disclosure. ASTIS parents, Mathlib calls and external mathematical sources are distinguished in each proof.

ASTIS mathematical exposition

Recover strong convexity from gradient separation

AutoSamplingTheory.TechnicalLemmas.Analysis.StrongConvexGradientConverse.strongConvexOn_of_gradient_inner_lower_bound · theorem · Teaching coverage

Statement

On a convex subset of a complete real inner-product space, a quantitative lower bound on differences of genuine gradients forces the matching strong-convexity chord inequality.

\[\langle g(y)-g(x),y-x\rangle\ge m\|y-x\|^2\quad\Longrightarrow\quad f((1-t)x+ty)\le(1-t)f(x)+tf(y)-\frac m2t(1-t)\|y-x\|^2.\]

All objects and hypotheses

  • E is a complete real inner-product space, s is a convex subset of E, f:E→ℝ, g:E→E and m∈ℝ.
  • At every z∈s, g(z) is a genuine ambient gradient: HasGradientAt f (g z) z. This includes boundary points, and implies the continuity needed at segment endpoints.
  • For every x,y∈s, the gradient difference paired with y−x is at least m‖y−x‖². The modulus may be positive, zero or negative.
  • The conclusion quantifies over all x,y∈s and t∈[0,1]. No extra continuity of g, Hessian, measurable representative, integrability, domination or measure assumption is used.

Mathematical proof

1. Stay on one segment

Fix x,y in the domain, put d=y−x and N=‖d‖². Convexity of the domain keeps the full segment inside s. Subtract a scalar quadratic along that segment.

\[p(t)=x+td\in s,\quad q(t)=f(p(t))-\frac m2t^2N,\quad 0\le t\le1.\]
Corresponding Lean step

Local p and q select this segment; hp uses Convex.add_smul_sub_mem.

2. Compute the genuine derivative

Apply the chain rule to f composed with the affine segment, then differentiate the quadratic. The ambient gradient hypothesis supplies differentiability even at the endpoints. Therefore q is continuous on [0,1] and differentiable on its interior.

\[q\prime(t)=\langle g(p(t)),d\rangle-mtN.\]
Corresponding Lean step

hq combines HasGradientAt.hasFDerivAt, HasFDerivAt.comp_hasDerivAt and derivatives of powers and scalar products.

3. Cancel only a positive scalar

For 0≤u<v≤1, the displacement is p(v)−p(u)=(v−u)d. Apply the gradient bound and divide by the positive parameter difference. Subtracting the quadratic derivative gives monotonicity of q′. Equal parameters require no division.

\[\langle g(p(v))-g(p(u)),d\rangle\ge m(v-u)\|d\|^2,\qquad q\prime(u)\le q\prime(v).\]
Corresponding Lean step

hdis rewrites the displacement. hscaled rewrites norm_smul using |v−u|²=(v−u)². le_of_mul_le_mul_left cancels v−u>0; hmon handles equality separately.

4. Use scalar convexity

The mean value theorem implies that a continuous scalar function with nondecreasing derivative is convex on the interval. All three hypotheses have been established, so the chord bound for q follows.

\[q(b)\le a\,q(0)+b\,q(1),\qquad a,b\ge0,\quad a+b=1.\]
Corresponding Lean step

hconv applies Mathlib MonotoneOn.convexOn_of_deriv. hq.deriv identifies the library derivative with the supplied q′. hchord evaluates the resulting ConvexOn inequality at 0 and 1.

5. Restore the quadratic correction

Expand q at the three parameters and use a=1−b. The difference between b and b² is ab, producing exactly the strong-convexity correction. Nothing here requires m≥0.

\[f(ax+by)\le af(x)+bf(y)-\frac m2\,ab\,\|x-y\|^2.\]
Corresponding Lean step

hpoint identifies ax+by with p(b). norm_sub_rev aligns norm conventions; substitution of a=1−b and ring arithmetic finish the inequality.

Lean statement · strongConvexOn_of_gradient_inner_lower_bound

Convex ℝ s and supplied HasGradientAt on s, together with the quantitative gradient bound for every ordered pair of domain points, imply StrongConvexOn s m f. The inherited CompleteSpace assumption is explicit.

Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

theorem strongConvexOn_of_gradient_inner_lower_bound
    {s : Set E} {f : E → ℝ} {m : ℝ} {grad : E → E}
    (hs : Convex ℝ s)
    (hgrad : ∀ z ∈ s, HasGradientAt f (grad z) z)
    (hmono : ∀ x ∈ s, ∀ y ∈ s,
      m * ‖y - x‖ ^ 2 ≤ inner ℝ (grad y - grad x) (y - x)) :
    StrongConvexOn s m f

Exact module and namespace context

Lean proof · strongConvexOn_of_gradient_inner_lower_bound

One segment-local quadratic correction reduces the target to Mathlib scalar derivative monotonicity. Equal segment parameters are separated before positive cancellation. The final chord bound uses the exact m/2 normalization.

Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

theorem strongConvexOn_of_gradient_inner_lower_bound
    {s : Set E} {f : E → ℝ} {m : ℝ} {grad : E → E}
    (hs : Convex ℝ s)
    (hgrad : ∀ z ∈ s, HasGradientAt f (grad z) z)
    (hmono : ∀ x ∈ s, ∀ y ∈ s,
      m * ‖y - x‖ ^ 2 ≤ inner ℝ (grad y - grad x) (y - x)) :
    StrongConvexOn s m f := by
  refine ⟨hs, ?_⟩
  intro x hx y hy a b ha hb hab
  let p : ℝ → E := fun t => x + t • (y - x)
  let q : ℝ → ℝ := fun t => f (p t) - m / 2 * t ^ 2 * ‖y - x‖ ^ 2
  let q' : ℝ → ℝ := fun t => inner ℝ (grad (p t)) (y - x) - m * t * ‖y - x‖ ^ 2
  have hp : ∀ t ∈ Icc (0 : ℝ) 1, p t ∈ s := by
    intro t ht
    exact hs.add_smul_sub_mem hx hy ht
  have hq : ∀ t ∈ Icc (0 : ℝ) 1, HasDerivAt q (q' t) t := by
    intro t ht
    have hline : HasDerivAt (fun u => f (p u))
        (inner ℝ (grad (p t)) (y - x)) t := by
      have hpderiv : HasDerivAt p (y - x) t := by
        simpa [p] using ((hasDerivAt_id t).smul_const (y - x)).const_add x
      convert! (hgrad (p t) (hp t ht)).hasFDerivAt.comp_hasDerivAt t hpderiv using 1
    have hquad := (((hasDerivAt_id t).pow 2).const_mul (m / 2)).mul_const (‖y - x‖ ^ 2)
    convert! hline.sub hquad using 1
    simp only [q', id_eq]
    ring
  have hmon : MonotoneOn q' (Icc (0 : ℝ) 1) := by
    intro u hu v hv huv
    rcases eq_or_lt_of_le huv with rfl | huv
    · exact le_rfl
    have h := hmono (p u) (hp u hu) (p v) (hp v hv)
    have hdis : p v - p u = (v - u) • (y - x) := by
      simp only [p, add_sub_add_left_eq_sub, sub_smul]
    rw [hdis, inner_smul_right, norm_smul, Real.norm_eq_abs, mul_pow, sq_abs] at h
    have hscaled : (v - u) * (m * (v - u) * ‖y - x‖ ^ 2) ≤
        (v - u) * inner ℝ (grad (p v) - grad (p u)) (y - x) := by
      nlinarith [h]
    have hbound := le_of_mul_le_mul_left hscaled (sub_pos.mpr huv)
    rw [inner_sub_left] at hbound
    dsimp [q']
    linarith
  have hconv : ConvexOn ℝ (Icc (0 : ℝ) 1) q := by
    apply MonotoneOn.convexOn_of_deriv (convex_Icc (0 : ℝ) 1)
      (fun t ht => (hq t ht).continuousAt.continuousWithinAt)
      (fun t ht => (hq t (interior_subset ht)).differentiableAt.differentiableWithinAt)
    intro u hu v hv huv
    rw [(hq u (interior_subset hu)).deriv, (hq v (interior_subset hv)).deriv]
    exact hmon (interior_subset hu) (interior_subset hv) huv
  have hchord := hconv.2 (show (0 : ℝ) ∈ Icc 0 1 by norm_num)
    (show (1 : ℝ) ∈ Icc 0 1 by norm_num) ha hb hab
  have hpoint : a • x + b • y = p b := by
    have ha' : a = 1 - b := by linarith
    simp [p, ha', sub_smul, smul_sub]
    abel
  rw [hpoint]
  simp only [smul_eq_mul, mul_zero, mul_one, zero_add] at hchord ⊢
  norm_num [q, p] at hchord
  rw [norm_sub_rev] at hchord
  have ha' : a = 1 - b := by linarith
  rw [ha'] at hchord ⊢
  dsimp [p]
  nlinarith [hchord]

end AutoSamplingTheory.TechnicalLemmas.Analysis.StrongConvexGradientConverse

Exact module and namespace context

Source assumptions versus formal assumptions

SourceActual LeanDifference kindWhy it matters
Complete real inner-product space, convex domain, ambient gradients on the domain; arbitrary real modulus.Identical space/domain/gradient/modulus hypotheses; ordered pairs are written with y−x instead of x−y.sameSwapping the universally quantified endpoints reconciles the gradient bound without changing the normalization or assumptions.
Supplied HasGradientAt at every domain point.Continuity on each closed segment and differentiability on its interior are derived from those ambient gradients.sameNo extra regularity hypothesis is added. Measures, representatives, integrability and domination do not apply to this mean-value proof; endpoints are covered by the given gradients.
Chewi uses Euclidean whole-space C¹ and α≥0 for the corresponding implication.The primary source here is the more general Optlib domain-local supplied-gradient statement with arbitrary m.generalizationThis comparison explains the intended textbook use, not a source repair or a claim that the integral proof has been reproduced.

Exact pinned Optlib statement. Chewi Proposition 1.6 (1.5)→(1.3) is a potential whole-space C¹ specialization; its source-specialization obligation and full equivalence are not marked closed by this shared item.

Encoder–denoiser: source-reviewed · equivalent-after-elaboration

A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

Scope and omitted-condition boundaries

  • This is an ASTIS-owned port of the pinned Optlib Lower_Strong_Convex statement with its domain-local supplied-gradient assumptions.
  • The proof uses a scalar mean-value route. Chewi Proposition 1.6 proves its whole-space C¹ reverse implication by integration; this module does not reproduce that integral argument or certify the entire equivalence.
  • No geometric transport, gradient-flow convergence or Hessian result follows merely from publishing this declaration.

Source and reuse

ASTIS parents called

    Mathlib API called (external library)

    • MonotoneOn.convexOn_of_deriv — continuous scalar functions with monotone derivative are convex, proved using the mean value theorem.
    • Convex.add_smul_sub_mem; convex_Icc — segment membership and scalar-domain convexity.
    • HasGradientAt.hasFDerivAt; HasFDerivAt.comp_hasDerivAt; hasDerivAt_id; HasDerivAt.smul_const, const_add, pow, const_mul, mul_const, sub — differentiation.
    • inner_smul_right; inner_sub_left; norm_smul; sq_abs; le_of_mul_le_mul_left; norm_sub_rev — gradient monotonicity and exact normalization.

    Mathematical sources

    Existing Optlib mathematics adapted to pinned Mathlib 4.33.0. This is a compatibility integration, not a claim of first formalization. The implementation uses a segment-local quadratic correction instead of importing Optlib’s global quadratic-shift dependency chain.

    ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

    Which proof edges are actually covered?

    • Local proof component; source adapter/review separate Domain-local gradient inequality implies the strong-convexity chord inequality.

    Proposition 1.6 · convexity equivalences

    Sinho Chewi, Lectures on Optimization. ASTIS restatement, not quoted prose; no endorsement implied.

    arXiv:2605.07006v1 · §1.2, Definition 1.5 and Proposition 1.6; equations (1.3)–(1.6) · faithful paraphrase

    Complete source statement (ASTIS restatement)

    For a continuously differentiable real-valued function on Euclidean space and a nonnegative modulus, the chord inequality, quadratic lower model and gradient monotonicity inequality below are equivalent. Under twice continuous differentiability they are also equivalent to the Hessian bound.

    • The domain is all of real d-dimensional Euclidean space; α ≥ 0.
    • The first three conditions use f ∈ C¹; the Hessian equivalence uses f ∈ C².
    • All points and directions below are universally quantified. The chord parameter lies in [0,1].

    (1.3) · chord

    \[f((1-t)x+ty)\le (1-t)f(x)+tf(y)-\frac\alpha2t(1-t)\|y-x\|^2,\quad x,y\in\mathbb R^d,\ t\in[0,1].\]

    (1.4) · lower model

    \[f(y)\ge f(x)+\langle\nabla f(x),y-x\rangle+\frac\alpha2\|y-x\|^2,\quad x,y\in\mathbb R^d.\]

    (1.5) · gradient monotonicity

    \[\langle\nabla f(y)-\nabla f(x),y-x\rangle\ge\alpha\|y-x\|^2,\quad x,y\in\mathbb R^d.\]

    (1.6) · Hessian

    \[\langle v,\nabla^2f(x)v\rangle\ge\alpha\|v\|^2,\quad x,v\in\mathbb R^d.\]

    Read the formalized proofs

    Each statement and proof below has its own closed Lean disclosure. ASTIS parents, Mathlib calls and external mathematical sources are distinguished in each proof.

    ASTIS mathematical exposition

    A quadratic lower model from strong convexity

    AutoSamplingTheory.TechnicalLemmas.Analysis.StrongConvexFirstOrder.firstOrder_lower_bound_of_strongConvexOn · theorem · Teaching coverage

    Statement

    On a convex subset of a real Hilbert space, a strongly convex function lies above its tangent model by a quadratic correction, provided its genuine gradients exist at the domain points.

    \[f(y)\ge f(x)+\langle g(x),y-x\rangle+\frac m2\|y-x\|^2.\]

    All objects and hypotheses

    • Let E be a complete real inner-product space, s⊆E, f:E→ℝ, m∈ℝ and g:E→E. For x,y∈s, assume StrongConvexOn s m f and HasGradientAt f (g z) z for every z∈s.
    • StrongConvexOn includes convexity of s and the chord inequality with the normalization m/2.
    • HasGradientAt is an ambient derivative of f at each z∈s, including boundary points; it is not merely a derivative within s or a totalized gradient value.
    • m is an arbitrary real number. No measure, integration or continuity of the gradient field is assumed. CompleteSpace is retained from the reused Hilbert-space API.

    Mathematical proof

    1. Restrict to an affine segment

    Set v=y−x and p(t)=x+tv. The chord inequality gives

    \[f(p(t))\le(1-t)f(x)+tf(y)-\frac m2t(1-t)\|v\|^2,\quad 0<t\le1.\]
    Corresponding Lean step

    path is the affine segment; hpoint rewrites the convex combination. hsc.2 supplies the chord inequality.

    2. Divide by a positive parameter

    Rearrange and divide by t:

    \[f(y)\ge f(x)+\frac{f(p(t))-f(x)}t+\frac m2(1-t)\|v\|^2.\]
    Corresponding Lean step

    The existing Geometry.GeodesicConvexity.firstOrder_geodesicConvexity parent handles the positive-parameter rearrangement; ASTIS does not duplicate that proof.

    3. Take the one-sided limit

    The genuine gradient identifies the difference-quotient limit below. Pass to the limit in the preceding inequality; the existing ASTIS firstOrder_geodesicConvexity theorem packages this scalar limiting step.

    \[\lim_{t\downarrow0}\frac{f(x+tv)-f(x)}t=\langle g(x),v\rangle.\]
    Corresponding Lean step

    hline and hderiv obtain the real segment derivative from HasGradientAt; hfirst applies the scalar limit theorem and simpa reconciles norm and distance.

    Lean statement · firstOrder_lower_bound_of_strongConvexOn

    StrongConvexOn includes convexity of s and the chord inequality with the normalization m/2. HasGradientAt is an ambient derivative of f at each z∈s, including boundary points; it is not merely a derivative within s or a totalized gradient value. m is an arbitrary real number. No measure, integration or continuity of the gradient field is assumed. CompleteSpace is retained from the reused Hilbert-space API.

    Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

    theorem firstOrder_lower_bound_of_strongConvexOn
        {s : Set E} {f : E → ℝ} {m : ℝ} {grad : E → E}
        (hsc : StrongConvexOn s m f)
        (hgrad : ∀ z ∈ s, HasGradientAt f (grad z) z)
        {x y : E} (hx : x ∈ s) (hy : y ∈ s) :
        f y ≥ f x + inner ℝ (grad x) (y - x) + m / 2 * ‖y - x‖ ^ 2

    Exact module and namespace context

    Lean proof · firstOrder_lower_bound_of_strongConvexOn

    The local definitions path and isSelected encode the chosen affine segment; hconvex rewrites the Mathlib chord inequality into the geodesic parent's normalization. hgrad supplies HasFDerivAt, then HasLineDerivAt; hderiv identifies the real derivative of the segment composition. simpa reconciles dist and norm conventions.

    Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

    theorem firstOrder_lower_bound_of_strongConvexOn
        {s : Set E} {f : E → ℝ} {m : ℝ} {grad : E → E}
        (hsc : StrongConvexOn s m f)
        (hgrad : ∀ z ∈ s, HasGradientAt f (grad z) z)
        {x y : E} (hx : x ∈ s) (hy : y ∈ s) :
        f y ≥ f x + inner ℝ (grad x) (y - x) + m / 2 * ‖y - x‖ ^ 2 := by
      let path : ℝ → E := fun t => x + t • (y - x)
      let isSelected : (ℝ → E) → Prop := fun q => q = path
      have hpath : isSelected path := rfl
      have hconvex :
          Geometry.GeodesicConvexity.IsAlphaGeodesicallyConvex isSelected f m := by
        intro q hq t ht
        subst q
        have hnonneg_left : 0 ≤ 1 - t := sub_nonneg.mpr ht.2
        have hnonneg_right : 0 ≤ t := ht.1
        have hstrong := hsc.2 hx hy hnonneg_left hnonneg_right (by ring)
        have hpoint : path t = (1 - t) • x + t • y := by
          dsimp only [path]
          rw [smul_sub, sub_smul, one_smul]
          abel
        calc
          f (path t) = f ((1 - t) • x + t • y) := congrArg f hpoint
          _ ≤ (1 - t) * f x + t * f y -
              (1 - t) * t * (m / 2 * ‖x - y‖ ^ 2) := by
            simpa [smul_eq_mul] using hstrong
          _ = (1 - t) * f (path 0) + t * f (path 1) -
              (m * t * (1 - t) / 2) * dist (path 0) (path 1) ^ 2 := by
            simp [path, dist_eq_norm]
            ring
      have hline :
          HasLineDerivAt ℝ f (inner ℝ (grad x) (y - x)) x (y - x) := by
        have h := (hgrad x hx).hasFDerivAt.hasLineDerivAt (y - x)
        simpa [InnerProductSpace.toDual_apply_apply] using h
      have hderiv :
          HasDerivAt (fun t : ℝ => f (path t)) (inner ℝ (grad x) (y - x)) 0 := by
        simpa [HasLineDerivAt, path] using hline
      have hfirst :=
        Geometry.GeodesicConvexity.firstOrder_geodesicConvexity
          hconvex hpath hderiv
      simpa [path, dist_eq_norm, norm_sub_rev] using hfirst
    
    /-- The gradient of a strongly convex function has the corresponding inner-product
    lower bound on its domain.
    
    Mathematical provenance: Optlib `Strong_Convex_lower`, commit
    `5da27c5f95aa6a8a45b8c14b968ade4c13ff18c3`,
    `Optlib/Convex/StronglyConvex.lean` (Apache-2.0; Chenyi Li and Ziyu Wang).
    This proof reuses the local first-order bound in both directions, as in Chewi,
    arXiv:2605.07006v1, Proposition 1.6, (1.4) implies (1.5).
    The domain-local supplied-gradient interface retains arbitrary real `m`;
    Chewi's whole-space `C¹`, nonnegative-modulus statement is a specialization.
    -/

    Exact module and namespace context

    Source assumptions versus formal assumptions

    SourceActual LeanDifference kindWhy it matters
    Euclidean whole space; C¹; α≥0.Complete real inner-product space; convex domain s; HasGradientAt on s; arbitrary real m.generalizationOnly genuine segment derivatives and the chord inequality are used. Gradient continuity is unnecessary for this direction. This interface generalization is not a repair of Chewi.
    The gradient is the genuine derivative of f.Ambient HasGradientAt, including boundary points of s; not a within-set or totalized gradient.sameThe difference quotient must converge to the gradient pairing. A totalized fderiv value cannot justify this step.

    Generic domain-local forward lower-model proof. Whole-space source specialization and complete equivalence are not certified. Existing proof from PR #239, registered during #248 integration; not a newly invented leaf.

    Historical audit record: legacy_audit_debt. Historical independent Lean/source review is not a blind semantic round trip. Source fidelity remains pending; changing the Lean file invalidates this grandfathering. Any current review below applies to the current version; it does not certify a historical worker run.

    Encoder–denoiser: accepted · lean-weakened-conclusion

    Detected semantic differences

    • domains: The shared Hilbert-space domain-local interface generalizes the source setting and is explicitly disclosed. — Candidate lesson assumptions, candidate_assumptions and the displayed Lean signature agree; no whole-space-equivalence claim follows.
    • assumptions: Ambient pointwise gradients replace C¹ regularity and the modulus may be negative for this forward calculation. — The displayed proof uses the actual directional derivative and algebra; neither gradient continuity nor positivity of m is used.
    • conclusion: The full source proposition remains strictly larger than this accepted proof edge. — The theorem conclusion is a single inequality; the binding and remaining obligations explicitly retain the absent equivalences.

    A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

    Scope and omitted-condition boundaries

    • Convexity keeps the segment in the domain; positive t permits division without reversing the inequality.
    • Genuine differentiability identifies the difference-quotient limit. The domain-local interface is not a claim that Chewi's entire whole-space C¹ equivalence is formalized.
    • Existing parent from PR #239, newly registered during PR #248 integration, not a newly proved result.

    Source and reuse

    ASTIS parents called

    Mathlib API called (external library)

    • StrongConvexOn — convex domain and m/2 normalization.
    • HasGradientAt.hasFDerivAt; HasFDerivAt.hasLineDerivAt; HasLineDerivAt — genuine derivative interfaces.
    • InnerProductSpace.toDual_apply_apply; dist_eq_norm; norm_sub_rev — gradient, distance and norm identifications.

    Mathematical sources

    Mathematical statement provenance: Optlib Strong_Convex_second_lower, commit 5da27c5f95aa6a8a45b8c14b968ade4c13ff18c3 (Chenyi Li and Ziyu Wang, Apache-2.0). ASTIS reuses its own geodesic limiting proof, not an imported Optlib proof. Chewi Lectures on Optimization, arXiv:2605.07006v1, Proposition 1.6, (1.3)→(1.4), is the whole-space specialization.

    ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

    ASTIS mathematical exposition

    Strong convexity separates gradients

    AutoSamplingTheory.TechnicalLemmas.Analysis.StrongConvexFirstOrder.gradient_inner_lower_bound_of_strongConvexOn · theorem · Teaching coverage

    Statement

    The gradient of a strongly convex function has a quantitative monotonicity bound on its domain. A positive modulus therefore makes the gradient injective there.

    \[\langle g(y)-g(x),y-x\rangle\ge m\|y-x\|^2.\]

    All objects and hypotheses

    • Let E be a complete real inner-product space, s⊆E, f:E→ℝ, m∈ℝ and g:E→E. For x,y∈s, assume StrongConvexOn s m f and HasGradientAt f (g z) z for every z∈s.
    • The set is convex as part of StrongConvexOn. Both x and y belong to s.
    • Supplied gradients are genuine ambient derivatives at all domain points; no totalized derivative is used to manufacture differentiability.
    • Complete real inner-product space, with arbitrary real m. No extra smoothness, Hessian, measure or integrability assumptions.

    Mathematical proof

    1. The lower model at x

    Put v=y−x. Apply the parent at (x,y):

    \[f(y)-f(x)\ge\langle g(x),v\rangle+\frac m2\|v\|^2.\]
    Corresponding Lean step

    hxy applies the existing first-order bound with hx hy.

    2. The lower model at y

    Apply the same parent at (y,x), using x−y=−v:

    \[f(x)-f(y)\ge-\langle g(y),v\rangle+\frac m2\|v\|^2.\]
    Corresponding Lean step

    hyx applies that same bound with hy hx. Rewriting uses the reversed-displacement identity, inner_neg_right and norm_neg.

    3. Cancel and collect

    Add, cancel the function values, and use linearity of the real inner product. Rearranging the following inequality proves the claimed bound.

    \[0\ge-\langle g(y)-g(x),v\rangle+m\|v\|^2.\]
    Corresponding Lean step

    rw [inner_sub_left] expands the goal. linarith combines the two inequalities and cancels the function values.

    4. The positive-modulus test consumer

    If m>0 and g(x)=g(y), the bound forces the displacement to vanish, as calculated below. The focused test checks this consequence; it is not a second registered theorem.

    \[0\ge m\|y-x\|^2\ge0\quad\Longrightarrow\quad x=y.\]
    Corresponding Lean step

    The Set.InjOn example substitutes equal gradients. mul_pos hm (pow_pos hn' 2) excludes a nonzero displacement, and norm_eq_zero and sub_eq_zero conclude equality.

    Lean statement · gradient_inner_lower_bound_of_strongConvexOn

    The set is convex as part of StrongConvexOn. Both x and y belong to s. Supplied gradients are genuine ambient derivatives at all domain points; no totalized derivative is used to manufacture differentiability. Complete real inner-product space, with arbitrary real m. No extra smoothness, Hessian, measure or integrability assumptions.

    Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

    theorem gradient_inner_lower_bound_of_strongConvexOn
        {s : Set E} {f : E → ℝ} {m : ℝ} {grad : E → E}
        (hsc : StrongConvexOn s m f)
        (hgrad : ∀ z ∈ s, HasGradientAt f (grad z) z)
        {x y : E} (hx : x ∈ s) (hy : y ∈ s) :
        m * ‖y - x‖ ^ 2 ≤ inner ℝ (grad y - grad x) (y - x)

    Exact module and namespace context

    Lean proof · gradient_inner_lower_bound_of_strongConvexOn

    hxy and hyx are the two calls to the same ASTIS parent. rw changes the reversed displacement to a negative, normalizes its norm, and expands inner_sub_left. linarith combines the two scalar inequalities without assuming the desired conclusion.

    Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

    theorem gradient_inner_lower_bound_of_strongConvexOn
        {s : Set E} {f : E → ℝ} {m : ℝ} {grad : E → E}
        (hsc : StrongConvexOn s m f)
        (hgrad : ∀ z ∈ s, HasGradientAt f (grad z) z)
        {x y : E} (hx : x ∈ s) (hy : y ∈ s) :
        m * ‖y - x‖ ^ 2 ≤ inner ℝ (grad y - grad x) (y - x) := by
      have hxy := firstOrder_lower_bound_of_strongConvexOn hsc hgrad hx hy
      have hyx := firstOrder_lower_bound_of_strongConvexOn hsc hgrad hy hx
      rw [show x - y = -(y - x) by abel, inner_neg_right, norm_neg] at hyx
      rw [inner_sub_left]
      linarith
    
    end
    
    end StrongConvexFirstOrder
    end Analysis
    end TechnicalLemmas
    end AutoSamplingTheory

    Exact module and namespace context

    Source assumptions versus formal assumptions

    SourceActual LeanDifference kindWhy it matters
    The displayed proof edge starts from the first-order lower model.StrongConvexOn and supplied gradients; two lower bounds are obtained from the compiled parent.generalizationThe local theorem packages the composed forward route, rather than a stand-alone arbitrary lower-model predicate.
    Whole-space C¹; nonnegative α.Complete real inner-product space; x,y∈s; ambient gradients on s; arbitrary real m.generalizationAlgebra works for signed m. Only the injectivity test needs m>0. No Hessian or integration is used.

    The declaration assumes StrongConvexOn and invokes the first-order parent twice; it does not expose (1.4) alone as a hypothesis. The proof mechanism is covered, not the whole equivalence. Gradient flow, reverse implication and invariance remain separate.

    Historical audit record: legacy_audit_debt. Historical independent Lean/source review is not a blind semantic round trip. Source fidelity remains pending; changing the Lean file invalidates this grandfathering. Any current review below applies to the current version; it does not certify a historical worker run.

    Encoder–denoiser: accepted · lean-weakened-conclusion

    Detected semantic differences

    • domains: The shared Hilbert-space domain-local interface generalizes the source setting and is explicitly disclosed. — Candidate lesson assumptions, candidate_assumptions and the displayed Lean signature agree; no whole-space-equivalence claim follows.
    • assumptions: Ambient pointwise gradients replace C¹ regularity and the modulus may be negative for this forward calculation. — The displayed proof uses the actual directional derivative and algebra; neither gradient continuity nor positivity of m is used.
    • conclusion: The full source proposition remains strictly larger than this accepted proof edge. — The theorem conclusion is a single inequality; the binding and remaining obligations explicitly retain the absent equivalences.
    • assumptions: The public Lean theorem starts from chord strong convexity, not a free-standing lower-model premise. It realizes the model-to-monotonicity calculation by first obtaining both models from its compiled parent. — hxy and hyx both call firstOrder_lower_bound_of_strongConvexOn hsc hgrad. The candidate assumption pair discloses this route. Accepted as support for that calculation, not as a separately generalized theorem accepting (1.4) alone.

    A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

    Scope and omitted-condition boundaries

    • The existing first-order bound is used at both endpoints. The proof adds no assumptions beyond that parent interface.
    • The lower bound is strong monotonicity only when m>0, ordinary monotonicity when m=0, and a signed lower bound when m<0.
    • No reverse implication, Hessian equivalence, gradient-flow contraction, Gibbs invariance or sampling rate is proved. The injectivity test is not another registered leaf.

    Source and reuse

    ASTIS parents called

    Mathlib API called (external library)

    • inner_neg_right; norm_neg; inner_sub_left — inner-product and norm identities.
    • abel; linarith — checked algebraic normalization and linear arithmetic.

    Mathematical sources

    Source correspondence: Chewi Lectures on Optimization, arXiv:2605.07006v1, Proposition 1.6, (1.4)→(1.5). Reverse implications, Hessian equivalence, whole-space source-facing specialization and gradient-flow contraction remain separate obligations. This is not a Gibbs-invariance or sampling-rate theorem.

    ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

    ASTIS mathematical exposition

    Integrate the gradient along a segment

    AutoSamplingTheory.TechnicalLemmas.Analysis.ConvexityC1.sub_eq_integral_gradient · theorem · Teaching coverage

    Statement

    For every x,v in a complete real inner-product space and every C¹ real-valued f, the difference f(x+v)−f(x) equals the integral of the gradient pairing along that segment.

    \[f(x+v)-f(x)=\int_0^1\langle\nabla f(x+sv),v\rangle\,ds.\]

    All objects and hypotheses

    • E is a complete real inner-product space and f:E→ℝ is continuously Fréchet differentiable on all E.
    • gradient f is the genuine gradient supplied by C¹, not an unsupported totalized derivative.
    • x,v∈E are arbitrary, including v=0; the integral is with respect to Lebesgue measure on [0,1].

    Mathematical proof

    1. Differentiate the affine segment

    C¹ gives a genuine derivative of f at every point. The chain rule differentiates the composition with x+sv, including the two endpoints.

    \[\frac{d}{ds}f(x+sv)=\langle\nabla f(x+sv),v\rangle.\]
    Corresponding Lean step

    hd: DifferentiableAt.hasGradientAt, HasFDerivAt.comp_hasDerivAt and the derivative of x+s•v.

    2. Establish integrability, then apply FTC

    The derivative map is continuous because f is C¹. Evaluating it on the fixed direction v and composing with the segment gives a continuous scalar integrand; compact-interval integrability follows. FTC and the values at 0 and 1 give the identity.

    \[\int_0^1\frac{d}{ds}f(x+sv)\,ds=f(x+v)-f(x).\]
    Corresponding Lean step

    hc uses ContDiff.continuous_fderiv and Continuous.clm_apply; Continuous.intervalIntegrable and intervalIntegral.integral_eq_sub_of_hasDerivAt finish.

    Lean statement · sub_eq_integral_gradient

    For every x,v in a complete real inner-product space and every C¹ real-valued f, the difference f(x+v)−f(x) equals the integral of the gradient pairing along that segment.

    Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

    theorem sub_eq_integral_gradient {f : E → ℝ} (hf : ContDiff ℝ 1 f) (x v : E) :
        f (x + v) - f x = ∫ s : ℝ in 0..1, inner ℝ (gradient f (x + s • v)) v

    Exact module and namespace context

    Lean proof · sub_eq_integral_gradient

    C¹ gives a genuine derivative of f at every point. The chain rule differentiates the composition with x+sv, including the two endpoints. The derivative map is continuous because f is C¹. Evaluating it on the fixed direction v and composing with the segment gives a continuous scalar integrand; compact-interval integrability follows. FTC and the values at 0 and 1 give the identity.

    Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

    theorem sub_eq_integral_gradient {f : E → ℝ} (hf : ContDiff ℝ 1 f) (x v : E) :
        f (x + v) - f x = ∫ s : ℝ in 0..1, inner ℝ (gradient f (x + s • v)) v := by
      have hc : Continuous (fun s : ℝ => inner ℝ (gradient f (x + s • v)) v) := by
        simpa [gradient, Function.comp_def] using
          ((hf.continuous_fderiv (by norm_num)).comp
            (continuous_const.add (continuous_id.smul continuous_const))).clm_apply continuous_const
      have hd (s : ℝ) : HasDerivAt (fun t : ℝ => f (x + t • v))
          (inner ℝ (gradient f (x + s • v)) v) s := by
        convert! (hf.differentiable_one (x + s • v)).hasGradientAt.hasFDerivAt.comp_hasDerivAt s
          (((hasDerivAt_id s).smul_const v).const_add x) using 1
        simp
      simpa using (intervalIntegral.integral_eq_sub_of_hasDerivAt
        (fun s _ => hd s) (hc.intervalIntegrable 0 1)).symm
    
    /-- Quantitative gradient monotonicity implies the chord inequality by the
    source's two affine-segment FTC identities and integration of their difference.
    The modulus can be signed; no Hessian or extra integrability is assumed. -/

    Exact module and namespace context

    Source assumptions versus formal assumptions

    SourceActual LeanDifference kindWhy it matters
    The source proof uses C¹, genuine gradients and the segment FTC identities.ContDiff ℝ 1 f supplies HasGradientAt and continuous segment integrands, hence interval integrability.source-implicitContinuity and integrability are derived; no measurable representative, domination or extra analytic premise is assumed.
    Whole Euclidean space and nonnegative modulus (where relevant).Complete real inner-product space; signed modulus for the chord lemma.generalizationThe final source adapter restores the exact source hypotheses; the reusable proof leaves need no finite-dimensional or positivity argument.

    C¹ proof boundary only; no C²/Hessian equivalence or full-proposition completion.

    Encoder–denoiser: source-reviewed · domain-mismatch

    Detected semantic differences

    • domains: The Lean leaf generalizes the selected finite-dimensional Euclidean source boundary to arbitrary complete real inner-product spaces. The publication lesson explicitly identifies this generalization; acceptance is restricted to the selected Euclidean source boundary, and the unrestricted semantic verdict remains domain-mismatch. — Restriction to EuclideanSpace ℝ (Fin d) recovers the source domain. This is not an equivalence claim between the unrestricted source and Lean statements and requires no source repair.

    A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

    Scope and omitted-condition boundaries

    • A reusable Hilbert-space generalization of the segment identity used in the source; no convexity, Hessian, infinite-time integral or measure on E is asserted.

    Source and reuse

    ASTIS parents called

      Mathlib API called (external library)

      • ContDiff.continuous_fderiv; Continuous.clm_apply; InnerProductSpace.toDual_symm_apply
      • DifferentiableAt.hasGradientAt; HasFDerivAt.comp_hasDerivAt
      • Continuous.intervalIntegrable; intervalIntegral.integral_eq_sub_of_hasDerivAt

      Mathematical sources

      ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

      ASTIS mathematical exposition

      Recover the chord inequality by integration

      AutoSamplingTheory.TechnicalLemmas.Analysis.ConvexityC1.strongConvexOn_univ_of_gradient_mono_integral · theorem · Teaching coverage

      Statement

      For C¹ f on a complete real inner-product space, a global gradient monotonicity lower bound with any real modulus m implies StrongConvexOn univ m f.

      \[\langle\nabla f(y)-\nabla f(x),y-x\rangle\ge m\|y-x\|^2\ \Longrightarrow\ f((1-t)x+ty)\le(1-t)f(x)+tf(y)-\frac m2t(1-t)\|y-x\|^2.\]

      All objects and hypotheses

      • E is a complete real inner-product space and f:E→ℝ is continuously Fréchet differentiable on all E.
      • gradient f is the genuine gradient supplied by C¹, not an unsupported totalized derivative.
      • m∈ℝ may be negative, zero or positive. For all x,y∈E, the displayed gradient lower bound holds.
      • The conclusion includes every x,y and every t∈[0,1].

      Mathematical proof

      1. Compare two segment integrals

      Put v=y−x and fix 0≤t≤1. Apply the segment identity to v and to tv. Scalar linearity moves t outside the second integral.

      \[A(s)=\langle\nabla f(x+sv),v\rangle,\quad B(s)=\langle\nabla f(x+stv),v\rangle;\quad f(y)-f(x)=\int_0^1A(s)ds,\quad f(x+tv)-f(x)=t\int_0^1B(s)ds.\]
      Corresponding Lean step

      hy and hz invoke sub_eq_integral_gradient twice; smul_smul, inner_smul_right and integral_const_mul expose A and B.

      2. Cancel a strictly positive displacement parameter

      The case t=1 is equality. For t<1 and 0<s<1, the difference of the two segment points is s(1−t)v. Apply gradient monotonicity and cancel s(1−t)>0. No division occurs at a zero displacement parameter.

      \[A(s)-B(s)\ge m s(1-t)\|v\|^2.\]
      Corresponding Lean step

      hdis and hscaled rewrite the gradient hypothesis; le_of_mul_le_mul_left uses mul_pos hs.1 (sub_pos.mpr ht1).

      3. Integrate the lower bound

      C¹ makes A and B continuous and hence interval integrable. The inequality on the open interval suffices because Lebesgue measure gives its endpoints zero mass. Integrate s from 0 to 1.

      \[\int_0^1(A-B)\,ds\ge\frac m2(1-t)\|v\|^2.\]
      Corresponding Lean step

      integral_mono_on_of_le_Ioo, Continuous.intervalIntegrable, integral_sub, integral_id and scalar integral linearity.

      4. Restore the chord residual

      Multiply the integrated lower bound by nonnegative t and substitute the two FTC identities. This gives the exact m/2 correction; it also covers t=0. The signed m is never divided by or required to be positive.

      \[f(x+tv)-(1-t)f(x)-tf(y)=-t\int_0^1(A-B)\,ds\le-\frac m2t(1-t)\|v\|^2.\]
      Corresponding Lean step

      hpoint matches affine conventions; mul_le_mul_of_nonneg_left and ring arithmetic conclude StrongConvexOn.

      Lean statement · strongConvexOn_univ_of_gradient_mono_integral

      For C¹ f on a complete real inner-product space, a global gradient monotonicity lower bound with any real modulus m implies StrongConvexOn univ m f.

      Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

      theorem strongConvexOn_univ_of_gradient_mono_integral
          {f : E → ℝ} {m : ℝ} (hf : ContDiff ℝ 1 f)
          (hm : ∀ x y : E, m * ‖y - x‖ ^ 2 ≤
            inner ℝ (gradient f y - gradient f x) (y - x)) :
          StrongConvexOn (univ : Set E) m f

      Exact module and namespace context

      Lean proof · strongConvexOn_univ_of_gradient_mono_integral

      Put v=y−x and fix 0≤t≤1. Apply the segment identity to v and to tv. Scalar linearity moves t outside the second integral. The case t=1 is equality. For t<1 and 0<s<1, the difference of the two segment points is s(1−t)v. Apply gradient monotonicity and cancel s(1−t)>0. No division occurs at a zero displacement parameter. C¹ makes A and B continuous and hence interval integrable. The inequality on the open interval suffices because Lebesgue measure gives its endpoints zero mass. Integrate s from 0 to 1. Multiply the integrated lower bound by nonnegative t and substitute the two FTC identities. This gives the exact m/2 correction; it also covers t=0. The signed m is never divided by or required to be positive.

      Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

      theorem strongConvexOn_univ_of_gradient_mono_integral
          {f : E → ℝ} {m : ℝ} (hf : ContDiff ℝ 1 f)
          (hm : ∀ x y : E, m * ‖y - x‖ ^ 2 ≤
            inner ℝ (gradient f y - gradient f x) (y - x)) :
          StrongConvexOn (univ : Set E) m f := by
        refine ⟨convex_univ, ?_⟩
        intro x _ y _ a t ha ht hat
        have hat' : a = 1 - t := by linarith
        subst a
        have ht1 : t ≤ 1 := by linarith
        rcases eq_or_lt_of_le ht1 with ht1 | ht1
        · subst t
          simp
        let v := y - x
        let A : ℝ → ℝ := fun s => inner ℝ (gradient f (x + s • v)) v
        let B : ℝ → ℝ := fun s => inner ℝ (gradient f (x + (s * t) • v)) v
        have hA : Continuous A := by
          simpa [A, gradient, Function.comp_def] using
            ((hf.continuous_fderiv (by norm_num)).comp
              (continuous_const.add (continuous_id.smul continuous_const))).clm_apply continuous_const
        have hB : Continuous B := by
          simpa [B, gradient, Function.comp_def] using
            ((hf.continuous_fderiv (by norm_num)).comp
              (continuous_const.add ((continuous_id.mul continuous_const).smul continuous_const))).clm_apply continuous_const
        have hbound : ∫ s : ℝ in 0..1, m * s * (1 - t) * ‖v‖ ^ 2 ≤
            ∫ s : ℝ in 0..1, (A s - B s) := by
          apply intervalIntegral.integral_mono_on_of_le_Ioo (by norm_num)
            ((show Continuous (fun s : ℝ => m * s * (1 - t) * ‖v‖ ^ 2) by fun_prop).intervalIntegrable 0 1)
            ((hA.sub hB).intervalIntegrable 0 1)
          intro s hs
          have h := hm (x + (s * t) • v) (x + s • v)
          have hdis : (x + s • v) - (x + (s * t) • v) = (s * (1 - t)) • v := by module
          rw [hdis, norm_smul, Real.norm_eq_abs, mul_pow, sq_abs, inner_smul_right] at h
          have hscaled : (s * (1 - t)) * (m * s * (1 - t) * ‖v‖ ^ 2) ≤
              (s * (1 - t)) * inner ℝ
                (gradient f (x + s • v) - gradient f (x + (s * t) • v)) v := by nlinarith [h]
          have hcancel := le_of_mul_le_mul_left hscaled (mul_pos hs.1 (sub_pos.mpr ht1))
          simpa [A, B, inner_sub_left] using hcancel
        have hpoly : (∫ s : ℝ in 0..1, m * s * (1 - t) * ‖v‖ ^ 2) =
            m / 2 * (1 - t) * ‖v‖ ^ 2 := by
          rw [intervalIntegral.integral_mul_const, intervalIntegral.integral_mul_const,
            intervalIntegral.integral_const_mul, integral_id]
          norm_num only [one_pow, zero_pow, sub_zero]
          ring
        rw [hpoly, intervalIntegral.integral_sub (hA.intervalIntegrable 0 1)
          (hB.intervalIntegrable 0 1)] at hbound
        have hy := sub_eq_integral_gradient hf x v
        have hz := sub_eq_integral_gradient hf x (t • v)
        have hpoint : (1 - t) • x + t • y = x + t • v := by dsimp [v]; module
        have hys : x + v = y := by simp [v]
        rw [hys] at hy
        change f y - f x = ∫ s : ℝ in 0..1, A s at hy
        simp only [smul_smul, inner_smul_right, intervalIntegral.integral_const_mul] at hz
        change f (x + t • v) - f x = t * ∫ s : ℝ in 0..1, B s at hz
        change f ((1 - t) • x + t • y) ≤ (1 - t) * f x + t * f y -
          (1 - t) * t * (m / 2 * ‖x - y‖ ^ 2)
        rw [hpoint, norm_sub_rev]
        change f (x + t • v) ≤ (1 - t) * f x + t * f y -
          (1 - t) * t * (m / 2 * ‖v‖ ^ 2)
        nlinarith [mul_le_mul_of_nonneg_left hbound ht]
      
      /-- Proposition 1.6, part 1: on all of Euclidean space, the C¹ chord,
      quadratic lower-model and gradient-monotonicity conditions are equivalent.
      The nonnegative modulus is retained exactly as in the source. -/

      Exact module and namespace context

      Source assumptions versus formal assumptions

      SourceActual LeanDifference kindWhy it matters
      The source proof uses C¹, genuine gradients and the segment FTC identities.ContDiff ℝ 1 f supplies HasGradientAt and continuous segment integrands, hence interval integrability.source-implicitContinuity and integrability are derived; no measurable representative, domination or extra analytic premise is assumed.
      Whole Euclidean space and nonnegative modulus (where relevant).Complete real inner-product space; signed modulus for the chord lemma.generalizationThe final source adapter restores the exact source hypotheses; the reusable proof leaves need no finite-dimensional or positivity argument.

      C¹ proof boundary only; no C²/Hessian equivalence or full-proposition completion.

      Encoder–denoiser: source-reviewed · domain-mismatch

      Detected semantic differences

      • domains: The Lean leaf generalizes the selected finite-dimensional Euclidean source boundary to arbitrary complete real inner-product spaces. The publication lesson explicitly identifies this generalization; acceptance is restricted to the selected Euclidean source boundary, and the unrestricted semantic verdict remains domain-mismatch. — Restriction to EuclideanSpace ℝ (Fin d) recovers the source domain. This is not an equivalence claim between the unrestricted source and Lean statements and requires no source repair.
      • assumptions: The Lean converse permits every real modulus, whereas the selected source theorem assumes a nonnegative modulus. This valid, explicitly disclosed reusable generalization is informational for the specialized source admission; no source assumption is changed and the source use retains m≥0. — The proof retains the signed chord inequality. Source use must specialize m≥0; the source was not altered.

      A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

      Scope and omitted-condition boundaries

      • This follows the source integral route, generalized to complete real inner-product spaces and signed m. It is distinct from the previously published MVT converse.
      • No C²/Hessian characterization or convergence result is claimed.

      Source and reuse

      ASTIS parents called

      Mathlib API called (external library)

      • intervalIntegral.integral_mono_on_of_le_Ioo; Continuous.intervalIntegrable
      • intervalIntegral.integral_sub, integral_const_mul, integral_mul_const; integral_id
      • norm_smul; inner_smul_right; inner_sub_left; le_of_mul_le_mul_left

      Mathematical sources

      ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

      ASTIS mathematical exposition

      The three C¹ convexity conditions are equivalent

      AutoSamplingTheory.TechnicalLemmas.Analysis.ConvexityC1.convexity_equivalences · theorem · Teaching coverage

      Statement

      Let d be a natural number, f:ℝᵈ→ℝ be C¹ on all Euclidean space, and m≥0. The strong-convexity chord inequality is equivalent both to the global quadratic lower model and to the quantitative gradient monotonicity inequality.

      \[\mathrm{StrongConvex}_m(f)\ \Longleftrightarrow\ \forall x,y,\ f(y)\ge f(x)+\langle\nabla f(x),y-x\rangle+\frac m2\|y-x\|^2\ \Longleftrightarrow\ \forall x,y,\ \langle\nabla f(y)-\nabla f(x),y-x\rangle\ge m\|y-x\|^2.\]

      All objects and hypotheses

      • d∈ℕ; E=EuclideanSpace ℝ (Fin d), with its standard Euclidean inner product and norm. Zero dimension is allowed.
      • f:E→ℝ is C¹ on all E, and m∈ℝ satisfies m≥0, exactly the source parameter restriction.
      • All x,y are universally quantified over E; the chord condition includes every nonnegative pair of weights summing to one.

      Mathematical proof

      1. Obtain the first-order model

      C¹ supplies the ambient gradients everywhere. Apply the already compiled shared lower-model theorem, whose proof takes the derivative limit of the strong-convexity chord inequality.

      \[\mathrm{StrongConvex}_m(f)\Rightarrow f(y)\ge f(x)+\langle\nabla f(x),y-x\rangle+\frac m2\|y-x\|^2.\]
      Corresponding Lean step

      hg derives HasGradientAt from hf; hforward calls StrongConvexFirstOrder.firstOrder_lower_bound_of_strongConvexOn on univ.

      2. Add the two endpoint models

      Assume only the global lower-model condition, apply it in both orders, and add. Function values cancel, the two half-quadratic terms add, and the inner products combine into a gradient difference.

      \[m\|y-x\|^2\le\langle\nabla f(y)-\nabla f(x),y-x\rangle.\]
      Corresponding Lean step

      hsum rewrites x−y=−(y−x), inner_neg_right and inner_sub_left, then uses linear arithmetic.

      3. Close the cycle with the source integral argument

      The newly proved integral converse takes gradient monotonicity back to the chord condition. Package the two equivalences using this three-condition cycle.

      \[(1.3)\Rightarrow(1.4)\Rightarrow(1.5)\Rightarrow(1.3).\]
      Corresponding Lean step

      strongConvexOn_univ_of_gradient_mono_integral closes both reverse directions. The final statement is the conjunction of the two iff results.

      Lean statement · convexity_equivalences

      Let d be a natural number, f:ℝᵈ→ℝ be C¹ on all Euclidean space, and m≥0. The strong-convexity chord inequality is equivalent both to the global quadratic lower model and to the quantitative gradient monotonicity inequality.

      Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

      theorem convexity_equivalences {d : ℕ} {f : EuclideanSpace ℝ (Fin d) → ℝ}
          {m : ℝ} (_hm : 0 ≤ m) (hf : ContDiff ℝ 1 f) :
          (StrongConvexOn univ m f ↔ ∀ x y,
            f x + inner ℝ (gradient f x) (y - x) + m / 2 * ‖y - x‖ ^ 2 ≤ f y) ∧
          (StrongConvexOn univ m f ↔ ∀ x y,
            m * ‖y - x‖ ^ 2 ≤ inner ℝ (gradient f y - gradient f x) (y - x))

      Exact module and namespace context

      Lean proof · convexity_equivalences

      C¹ supplies the ambient gradients everywhere. Apply the already compiled shared lower-model theorem, whose proof takes the derivative limit of the strong-convexity chord inequality. Assume only the global lower-model condition, apply it in both orders, and add. Function values cancel, the two half-quadratic terms add, and the inner products combine into a gradient difference. The newly proved integral converse takes gradient monotonicity back to the chord condition. Package the two equivalences using this three-condition cycle.

      Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

      theorem convexity_equivalences {d : ℕ} {f : EuclideanSpace ℝ (Fin d) → ℝ}
          {m : ℝ} (_hm : 0 ≤ m) (hf : ContDiff ℝ 1 f) :
          (StrongConvexOn univ m f ↔ ∀ x y,
            f x + inner ℝ (gradient f x) (y - x) + m / 2 * ‖y - x‖ ^ 2 ≤ f y) ∧
          (StrongConvexOn univ m f ↔ ∀ x y,
            m * ‖y - x‖ ^ 2 ≤ inner ℝ (gradient f y - gradient f x) (y - x)) := by
        have hg : ∀ z ∈ (univ : Set (EuclideanSpace ℝ (Fin d))),
            HasGradientAt f (gradient f z) z := fun z _ => (hf.differentiable_one z).hasGradientAt
        have hforward := fun (hsc : StrongConvexOn univ m f) x y =>
          StrongConvexFirstOrder.firstOrder_lower_bound_of_strongConvexOn hsc hg
            (mem_univ x) (mem_univ y)
        have hsum : (∀ x y, f x + inner ℝ (gradient f x) (y - x) +
            m / 2 * ‖y - x‖ ^ 2 ≤ f y) → ∀ x y,
            m * ‖y - x‖ ^ 2 ≤ inner ℝ (gradient f y - gradient f x) (y - x) := by
          intro hl x y
          have hxy := hl x y
          have hyx := hl y x
          rw [show x - y = -(y - x) by abel, inner_neg_right, norm_neg] at hyx
          rw [inner_sub_left]
          linarith
        exact ⟨⟨hforward, fun h => strongConvexOn_univ_of_gradient_mono_integral hf (hsum h)⟩,
          ⟨fun h => hsum (hforward h), strongConvexOn_univ_of_gradient_mono_integral hf⟩⟩
      
      end AutoSamplingTheory.TechnicalLemmas.Analysis.ConvexityC1

      Exact module and namespace context

      Source assumptions versus formal assumptions

      SourceActual LeanDifference kindWhy it matters
      The source proof uses C¹, genuine gradients and the segment FTC identities.ContDiff ℝ 1 f supplies HasGradientAt and continuous segment integrands, hence interval integrability.source-implicitContinuity and integrability are derived; no measurable representative, domination or extra analytic premise is assumed.
      Whole Euclidean space and nonnegative modulus (where relevant).Same Euclidean whole-space C¹ and nonnegative modulus.sameThe final source adapter restores the exact source hypotheses; the reusable proof leaves need no finite-dimensional or positivity argument.

      C¹ proof boundary only; no C²/Hessian equivalence or full-proposition completion.

      Encoder–denoiser: source-reviewed · equivalent-after-elaboration

      Detected semantic differences

      • scopes: The reader boundary now points to the separate C2 theorem while preserving this declaration as a C1-only result. — Separate prose-scope inspection: read supplement runs/semantic-roundtrip/andi-opt-convexity-c2/c1-boundary-supplement.json (SHA256 e192ca3bfce216124d869497b8a1ecc299d097a4706dffa16637651d17eec13f) and current lesson website/content/declaration_lessons/convexity-c1.json (SHA256 8ae208fe7f0a98fa785117b4b949e9f279677d4c065acbddb22e69db6d5787d6). Actual lesson bytes match the supplement hash; the final declaration boundary exactly matches current_boundary. The packet SHA and publication binding SHA in the supplement equal the canonical anti-anchored packet fields. Removing only boundary from the actual final lesson gives exactly the packet lesson. The boundary text was NOT present in the anti-anchored body; this inspection is separately attributed. Its explicit restriction of the C1 declaration to Proposition 1.6 part 1 agrees with the theorem and binding supports. Its reference to the separate C2 strongConvexOn_iff_fderiv2_lower theorem is supported by the C2 declaration and proof previously independently inspected in reviewer-2.json, not by transferring C2 content into the C1 theorem. It does not retrospectively change the original C1 source selection, confer Hessian coverage on that declaration, or erase its historical boundary.

      A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

      Scope and omitted-condition boundaries

      • Exactly Proposition 1.6 part 1. The separate ConvexityC2.strongConvexOn_iff_fderiv2_lower declaration now supplies the C²/Hessian equivalence; this declaration itself covers only the C¹ conditions.
      • The declaration retains m≥0 even though its shared parents also handle signed m. No new convexity definition or caller-supplied gradient is introduced.

      Source and reuse

      ASTIS parents called

      Mathlib API called (external library)

      • ContDiff.differentiable_one; DifferentiableAt.hasGradientAt
      • inner_neg_right; inner_sub_left; norm_neg

      Mathematical sources

      ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

      ASTIS mathematical exposition

      Integrate the Hessian along a segment

      AutoSamplingTheory.TechnicalLemmas.Analysis.ConvexityC2.gradient_sub_inner_eq_integral_fderiv2 · theorem · Teaching coverage

      Statement

      For every C² real-valued f on a complete real inner-product space and every x,v, the gradient difference between x+v and x, paired with v, equals the integral of the Hessian quadratic form along that segment.

      \[\langle\nabla f(x+v)-\nabla f(x),v\rangle=\int_0^1 D^2f(x+tv)[v,v]\,dt.\]

      All objects and hypotheses

      • E is a complete real inner-product space; f:E→ℝ is twice continuously Fréchet differentiable everywhere.
      • The Hessian quadratic form means the genuine second derivative D²f(x)[v,v]=(fderiv ℝ (fderiv ℝ f) x v) v. The pairing with the actual gradient equals Df(x)[v].
      • x,v∈E are arbitrary, including v=0. The integral uses real Lebesgue measure on [0,1].

      Mathematical proof

      1. Differentiate the scalar gradient pairing

      Set g(t)=Df(x+tv)[v]. Because f is C², Df is C¹; compose its derivative with the affine segment and evaluate the resulting linear functional at the fixed v.

      \[g(t)=Df(x+tv)[v],\qquad g^{\prime}(t)=D^2f(x+tv)[v,v].\]
      Corresponding Lean step

      hfd uses ContDiff.fderiv_right. hd uses HasFDerivAt.comp_hasDerivAt and HasDerivAt.clm_apply.

      2. Integrate the genuine derivative

      The second derivative is continuous. Composition with the segment and two evaluations preserve continuity, giving interval integrability. FTC gives g(1)−g(0). The gradient pairing identity identifies the endpoints.

      \[\int_0^1g^{\prime}(t)\,dt=g(1)-g(0)=\langle\nabla f(x+v)-\nabla f(x),v\rangle.\]
      Corresponding Lean step

      hc: ContDiff.continuous_fderiv and Continuous.clm_apply; Continuous.intervalIntegrable and intervalIntegral.integral_eq_sub_of_hasDerivAt; gradient/Riesz simplification.

      Lean statement · gradient_sub_inner_eq_integral_fderiv2

      For every C² real-valued f on a complete real inner-product space and every x,v, the gradient difference between x+v and x, paired with v, equals the integral of the Hessian quadratic form along that segment.

      Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

      theorem gradient_sub_inner_eq_integral_fderiv2
          {f : E → ℝ} (hf : ContDiff ℝ 2 f) (x v : E) :
          inner ℝ (gradient f (x + v) - gradient f x) v =
            ∫ t : ℝ in 0..1, (fderiv ℝ (fderiv ℝ f) (x + t • v) v) v

      Exact module and namespace context

      Lean proof · gradient_sub_inner_eq_integral_fderiv2

      Set g(t)=Df(x+tv)[v]. Because f is C², Df is C¹; compose its derivative with the affine segment and evaluate the resulting linear functional at the fixed v. The second derivative is continuous. Composition with the segment and two evaluations preserve continuity, giving interval integrability. FTC gives g(1)−g(0). The gradient pairing identity identifies the endpoints.

      Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

      theorem gradient_sub_inner_eq_integral_fderiv2
          {f : E → ℝ} (hf : ContDiff ℝ 2 f) (x v : E) :
          inner ℝ (gradient f (x + v) - gradient f x) v =
            ∫ t : ℝ in 0..1, (fderiv ℝ (fderiv ℝ f) (x + t • v) v) v := by
        have hfd : ContDiff ℝ 1 (fderiv ℝ f) := hf.fderiv_right (by norm_num)
        have hd (t : ℝ) : HasDerivAt (fun s : ℝ => fderiv ℝ f (x + s • v) v)
            ((fderiv ℝ (fderiv ℝ f) (x + t • v) v) v) t := by
          convert ((hfd.differentiable_one _).hasFDerivAt.comp_hasDerivAt t
            (((hasDerivAt_id t).smul_const v).const_add x)).clm_apply
            (hasDerivAt_const t v) using 1 <;> first | rfl | simp
        have hc : Continuous (fun t : ℝ => (fderiv ℝ (fderiv ℝ f) (x + t • v) v) v) :=
          (((hfd.continuous_fderiv (by norm_num)).comp
            (continuous_const.add (continuous_id.smul continuous_const))).clm_apply
              continuous_const).clm_apply continuous_const
        simpa [inner_sub_left, gradient, Function.comp_def] using
          (intervalIntegral.integral_eq_sub_of_hasDerivAt
            (fun t _ => hd t) (hc.intervalIntegrable 0 1)).symm
      
      /-- Global quantitative gradient monotonicity is equivalent to the genuine
      Hessian diagonal lower bound, by a right derivative limit and the FTC. -/

      Exact module and namespace context

      Source assumptions versus formal assumptions

      SourceActual LeanDifference kindWhy it matters
      Twice continuous differentiability and the usual Euclidean Hessian.ContDiff ℝ 2 f supplies the genuine derivative of fderiv, continuous scalar Hessian integrands and interval integrability. The quadratic form is (fderiv ℝ (fderiv ℝ f) x v) v.source-implicitThe finite-dimensional Hessian is represented invariantly by its bilinear evaluation. No independently supplied derivative, symmetry or integrability premise is added.
      The FTC identity is on whole Euclidean space and has no modulus parameter.Complete real inner-product space, with no modulus parameter.generalizationThe segment derivative and scalar integral require no finite dimension; x and v remain arbitrary.

      The source segment identity generalized from Euclidean space to complete real inner-product space. No convexity or Hessian bound is assumed.

      Encoder–denoiser: source-reviewed · domain-mismatch

      Detected semantic differences

      • domains: The reusable proof edge extends the Euclidean source identity to complete real Hilbert spaces. — The Lean E typeclasses and declaration lesson state completeness and real inner-product structure; candidate_assumptions contrasts this with the whole Euclidean source domain.

      A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

      Scope and omitted-condition boundaries

      • The source segment identity generalized from Euclidean space to complete real inner-product space. No convexity or Hessian bound is assumed.

      Source and reuse

      ASTIS parents called

        Mathlib API called (external library)

        • ContDiff.fderiv_right; ContDiff.differentiable_one; ContDiff.continuous_fderiv
        • HasFDerivAt.comp_hasDerivAt; HasDerivAt.clm_apply; Continuous.clm_apply
        • Continuous.intervalIntegrable; intervalIntegral.integral_eq_sub_of_hasDerivAt; InnerProductSpace.toDual_symm_apply

        Mathematical sources

        ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

        ASTIS mathematical exposition

        Gradient monotonicity is equivalent to a Hessian lower bound

        AutoSamplingTheory.TechnicalLemmas.Analysis.ConvexityC2.gradient_mono_iff_fderiv2_lower · theorem · Teaching coverage

        Statement

        For C² f on a complete real inner-product space and any real m, the global quantitative gradient monotonicity inequality is equivalent to D²f(x)[v,v]≥m‖v‖² at every point and direction.

        \[\bigl[\forall x,y,\ \langle\nabla f(y)-\nabla f(x),y-x\rangle\ge m\|y-x\|^2\bigr]\ \Longleftrightarrow\ \bigl[\forall x,v,\ D^2f(x)[v,v]\ge m\|v\|^2\bigr].\]

        All objects and hypotheses

        • E is a complete real inner-product space; f:E→ℝ is twice continuously Fréchet differentiable everywhere.
        • The Hessian quadratic form means the genuine second derivative D²f(x)[v,v]=(fderiv ℝ (fderiv ℝ f) x v) v. The pairing with the actual gradient equals Df(x)[v].
        • m is any real number; all x,y and v range over all E. No positivity of m or nonzero direction is required.

        Mathematical proof

        1. Use a positive directional increment

        Fix x,v and let g(t)=Df(x+tv)[v]. Apply gradient monotonicity at x and x+tv with t>0. The displacement is tv and its squared norm is t²‖v‖². Cancelling the positive t and dividing once more by t gives a bound on the difference quotient.

        \[t^2m\|v\|^2\le t(g(t)-g(0)),\qquad m\|v\|^2\le\frac{g(t)-g(0)}t.\]
        Corresponding Lean step

        hm, norm_smul, sq_abs and inner_smul_right give h; le_of_mul_le_mul_left and le_div_iff₀ cancel only ht:0<t.

        2. Pass to the right derivative

        C² gives g′(0)=D²f(x)[v,v]. The displayed inequality holds for all positive t, so passage to t↓0 preserves it. Neither m nor ‖v‖ is divided by.

        \[m\|v\|^2\le\lim_{t\downarrow0}\frac{g(t)-g(0)}t=D^2f(x)[v,v].\]
        Corresponding Lean step

        hdAll and hd establish the genuine scalar derivative; HasDerivAt.tendsto_slope_zero_right and ge_of_tendsto pass to the limit.

        3. Integrate the Hessian lower bound for the converse

        For v=y−x the Hessian bound holds along x+tv. C² gives a continuous integrand and interval integrability. Integrate the constant lower bound over an interval of length one, then use the preceding segment identity.

        \[\langle\nabla f(y)-\nabla f(x),v\rangle=\int_0^1D^2f(x+tv)[v,v]dt\ge\int_0^1m\|v\|^2dt=m\|v\|^2.\]
        Corresponding Lean step

        intervalIntegral.integral_mono_on compares integrals; gradient_sub_inner_eq_integral_fderiv2 identifies the result.

        Lean statement · gradient_mono_iff_fderiv2_lower

        For C² f on a complete real inner-product space and any real m, the global quantitative gradient monotonicity inequality is equivalent to D²f(x)[v,v]≥m‖v‖² at every point and direction.

        Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

        theorem gradient_mono_iff_fderiv2_lower
            {f : E → ℝ} {m : ℝ} (hf : ContDiff ℝ 2 f) :
            (∀ x y : E, m * ‖y - x‖ ^ 2 ≤
              inner ℝ (gradient f y - gradient f x) (y - x)) ↔
            ∀ x v : E, m * ‖v‖ ^ 2 ≤ (fderiv ℝ (fderiv ℝ f) x v) v

        Exact module and namespace context

        Lean proof · gradient_mono_iff_fderiv2_lower

        Fix x,v and let g(t)=Df(x+tv)[v]. Apply gradient monotonicity at x and x+tv with t>0. The displacement is tv and its squared norm is t²‖v‖². Cancelling the positive t and dividing once more by t gives a bound on the difference quotient. C² gives g′(0)=D²f(x)[v,v]. The displayed inequality holds for all positive t, so passage to t↓0 preserves it. Neither m nor ‖v‖ is divided by. For v=y−x the Hessian bound holds along x+tv. C² gives a continuous integrand and interval integrability. Integrate the constant lower bound over an interval of length one, then use the preceding segment identity.

        Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

        theorem gradient_mono_iff_fderiv2_lower
            {f : E → ℝ} {m : ℝ} (hf : ContDiff ℝ 2 f) :
            (∀ x y : E, m * ‖y - x‖ ^ 2 ≤
              inner ℝ (gradient f y - gradient f x) (y - x)) ↔
            ∀ x v : E, m * ‖v‖ ^ 2 ≤ (fderiv ℝ (fderiv ℝ f) x v) v := by
          have hfd : ContDiff ℝ 1 (fderiv ℝ f) := hf.fderiv_right (by norm_num)
          constructor
          · intro hm x v
            let g : ℝ → ℝ := fun t => fderiv ℝ f (x + t • v) v
            have hdAll (t : ℝ) : HasDerivAt g
                ((fderiv ℝ (fderiv ℝ f) (x + t • v) v) v) t := by
              convert ((hfd.differentiable_one _).hasFDerivAt.comp_hasDerivAt t
                (((hasDerivAt_id t).smul_const v).const_add x)).clm_apply
                (hasDerivAt_const t v) using 1 <;> first | rfl | simp
            have hd : HasDerivAt g ((fderiv ℝ (fderiv ℝ f) x v) v) 0 := by
              simpa using hdAll 0
            apply ge_of_tendsto hd.tendsto_slope_zero_right
            filter_upwards [self_mem_nhdsWithin] with t ht
            have ht : 0 < t := ht
            have h := hm x (x + t • v)
            rw [add_sub_cancel_left, norm_smul, Real.norm_eq_abs, mul_pow, sq_abs,
              inner_smul_right, inner_sub_left] at h
            have hscaled : t * (m * ‖v‖ ^ 2) ≤ g t - g 0 := by
              apply le_of_mul_le_mul_left (a := t) _ ht
              simpa [g, gradient, Function.comp_def, pow_two, mul_assoc, mul_left_comm, mul_comm] using h
            simpa [smul_eq_mul, div_eq_inv_mul] using
              (le_div_iff₀ ht).mpr (by simpa [mul_comm] using hscaled)
          · intro hH x y
            let v := y - x
            have hc : Continuous (fun t : ℝ => (fderiv ℝ (fderiv ℝ f) (x + t • v) v) v) :=
              (((hfd.continuous_fderiv (by norm_num)).comp
                (continuous_const.add (continuous_id.smul continuous_const))).clm_apply
                  continuous_const).clm_apply continuous_const
            have h := intervalIntegral.integral_mono_on (by norm_num : (0 : ℝ) ≤ 1)
              (intervalIntegrable_const : IntervalIntegrable (fun _ : ℝ => m * ‖v‖ ^ 2) volume 0 1)
              (hc.intervalIntegrable 0 1) (fun t _ => hH (x + t • v) v)
            rw [← gradient_sub_inner_eq_integral_fderiv2 hf x v] at h
            simpa [v] using h
        
        /-- Proposition 1.6 part 2, with the source's whole Euclidean domain,
        nonnegative modulus and C² regularity. Together with the C¹ theorem this
        connects all four source conditions. -/

        Exact module and namespace context

        Source assumptions versus formal assumptions

        SourceActual LeanDifference kindWhy it matters
        Twice continuous differentiability and the usual Euclidean Hessian.ContDiff ℝ 2 f supplies the genuine derivative of fderiv, continuous scalar Hessian integrands and interval integrability. The quadratic form is (fderiv ℝ (fderiv ℝ f) x v) v.source-implicitThe finite-dimensional Hessian is represented invariantly by its bilinear evaluation. No independently supplied derivative, symmetry or integrability premise is added.
        All Euclidean space and nonnegative modulus.Complete real inner-product space; arbitrary real m in the equivalence.generalizationThe source adapter restores its domain and parameter range; shared proofs do not need positive dimension, positive m or nonzero direction.

        The two directions follow the source derivative-limit and Hessian-integral routes. The complete-space and signed-modulus scope is an explicit generalization.

        Encoder–denoiser: source-reviewed · domain-mismatch

        Detected semantic differences

        • domains: The equivalence is proved on complete real Hilbert spaces, beyond the finite-dimensional source. — The typeclasses, lesson and scoped assumptions all state the extension.
        • assumptions: The reusable equivalence permits negative m, whereas the source proposition assumes a nonnegative modulus. — Only the positive segment parameter is cancelled, and the converse uses monotonicity of integration; the proof remains valid for signed m. The publication lesson explicitly says any real m.

        A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

        Scope and omitted-condition boundaries

        • The two directions follow the source derivative-limit and Hessian-integral routes. The complete-space and signed-modulus scope is an explicit generalization.
        • No independent Hessian field, symmetry assumption, measure on E or supplied integrability premise is introduced.

        Source and reuse

        ASTIS parents called

        Mathlib API called (external library)

        • ContDiff.fderiv_right; HasFDerivAt.comp_hasDerivAt; HasDerivAt.clm_apply
        • HasDerivAt.tendsto_slope_zero_right; ge_of_tendsto; self_mem_nhdsWithin
        • intervalIntegral.integral_mono_on; Continuous.intervalIntegrable; intervalIntegral.integral_const

        Mathematical sources

        ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

        ASTIS mathematical exposition

        C² strong convexity is equivalent to the Hessian bound

        AutoSamplingTheory.TechnicalLemmas.Analysis.ConvexityC2.strongConvexOn_iff_fderiv2_lower · theorem · Teaching coverage

        Statement

        For every natural dimension d, every nonnegative real m and every C² f on all Euclidean d-space, f is m-strongly convex if and only if its Hessian quadratic form is at least m times squared norm in every direction at every point.

        \[\mathrm{StrongConvex}_m(f)\quad\Longleftrightarrow\quad\forall x,v\in\mathbb R^d,\ D^2f(x)[v,v]\ge m\|v\|^2.\]

        All objects and hypotheses

        • d∈ℕ and E=EuclideanSpace ℝ (Fin d), with its standard real inner product and norm; d=0 is allowed.
        • f:E→ℝ is C² on all E and m∈ℝ satisfies m≥0, exactly as in the source.
        • StrongConvexOn univ m f uses the chord correction (m/2)t(1−t)‖y−x‖² for all x,y and t∈[0,1]. D²f is the genuine second derivative, written as a bilinear evaluation.

        Mathematical proof

        1. Reuse the C¹ equivalence

        C² implies C¹. Apply the already proved source equivalence between the chord condition and global gradient monotonicity.

        \[\mathrm{StrongConvex}_m(f)\Longleftrightarrow\forall x,y,\ \langle\nabla f(y)-\nabla f(x),y-x\rangle\ge m\|y-x\|^2.\]
        Corresponding Lean step

        ContDiff.of_le supplies C¹; ConvexityC1.convexity_equivalences supplies its second iff.

        2. Join the Hessian equivalence

        Compose with the derivative-limit/integral equivalence above. On Euclidean space D²f(x)[v,v] is the source Hessian matrix quadratic form. This finishes part 2 and connects it to the lower-model equivalence already in part 1.

        \[\text{chord}\Longleftrightarrow\text{gradient monotonicity}\Longleftrightarrow\text{Hessian lower bound}.\]
        Corresponding Lean step

        Iff.trans with gradient_mono_iff_fderiv2_lower. No alternative assumed convexity or gradient interface is substituted.

        Lean statement · strongConvexOn_iff_fderiv2_lower

        For every natural dimension d, every nonnegative real m and every C² f on all Euclidean d-space, f is m-strongly convex if and only if its Hessian quadratic form is at least m times squared norm in every direction at every point.

        Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

        theorem strongConvexOn_iff_fderiv2_lower
            {d : ℕ} {f : EuclideanSpace ℝ (Fin d) → ℝ} {m : ℝ}
            (hm : 0 ≤ m) (hf : ContDiff ℝ 2 f) :
            StrongConvexOn univ m f ↔
              ∀ x v, m * ‖v‖ ^ 2 ≤ (fderiv ℝ (fderiv ℝ f) x v) v

        Exact module and namespace context

        Lean proof · strongConvexOn_iff_fderiv2_lower

        C² implies C¹. Apply the already proved source equivalence between the chord condition and global gradient monotonicity. Compose with the derivative-limit/integral equivalence above. On Euclidean space D²f(x)[v,v] is the source Hessian matrix quadratic form. This finishes part 2 and connects it to the lower-model equivalence already in part 1.

        Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

        theorem strongConvexOn_iff_fderiv2_lower
            {d : ℕ} {f : EuclideanSpace ℝ (Fin d) → ℝ} {m : ℝ}
            (hm : 0 ≤ m) (hf : ContDiff ℝ 2 f) :
            StrongConvexOn univ m f ↔
              ∀ x v, m * ‖v‖ ^ 2 ≤ (fderiv ℝ (fderiv ℝ f) x v) v := by
          exact (ConvexityC1.convexity_equivalences hm (hf.of_le (by norm_num))).2.trans
            (gradient_mono_iff_fderiv2_lower hf)
        
        end AutoSamplingTheory.TechnicalLemmas.Analysis.ConvexityC2

        Exact module and namespace context

        Source assumptions versus formal assumptions

        SourceActual LeanDifference kindWhy it matters
        Twice continuous differentiability and the usual Euclidean Hessian.ContDiff ℝ 2 f supplies the genuine derivative of fderiv, continuous scalar Hessian integrands and interval integrability. The quadratic form is (fderiv ℝ (fderiv ℝ f) x v) v.source-implicitThe finite-dimensional Hessian is represented invariantly by its bilinear evaluation. No independently supplied derivative, symmetry or integrability premise is added.
        All Euclidean space and nonnegative modulus.Same whole Euclidean space and m>=0.sameThe source adapter restores its domain and parameter range; shared proofs do not need positive dimension, positive m or nonzero direction.

        Exact Proposition 1.6 part 2; part 1 remains provided by the unchanged C¹ theorem. This does not complete the chapter or assert a Riemannian analogue.

        Encoder–denoiser: source-reviewed · equivalent-after-elaboration

        Detected semantic differences

        • scopes: StrongConvexOn at m=0 expresses ordinary convexity despite the theorem name. — The actual nonnegativity hypothesis and published chord formula explicitly include zero and preserve Definition 1.5.
        • quantifiers: The natural-number dimension includes zero, a harmless explicit boundary case. — The lesson says d=0 is allowed; source imposes no d>0 assumption. There are no nonzero directions in that case, and both chord and Hessian conditions reduce to identities.

        A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

        Scope and omitted-condition boundaries

        • Exact Proposition 1.6 part 2; part 1 remains provided by the unchanged C¹ theorem. This does not complete the chapter or assert a Riemannian analogue.
        • Earlier first-order leaves retain their explicitly recorded historical review debt; this result does not rewrite their audit history.

        Source and reuse

        ASTIS parents called

        Mathlib API called (external library)

        • ContDiff.of_le; Iff.trans

        Mathematical sources

        ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

        Which proof edges are actually covered?

        • Local proof component; source adapter/review separate (1.3) → (1.4): affine segment, positive division, genuine derivative limit
        • Local proof component; source adapter/review separate (1.4) → (1.5): sum endpoint lower bounds
        • Local proof component; source adapter/review separate (1.5) → (1.3): fundamental theorem of calculus with its regularity hypotheses
        • Local proof component; source adapter/review separate (1.5) ↔ (1.6): derivative limit and Hessian integral
        • Local proof component; source adapter/review separate Exact whole-space C¹ three-condition equivalence and independent fidelity review
        • Local proof component; source adapter/review separate Exact C² Hessian equivalence and independent fidelity review

        Proposition 1.13 · one-sided smoothness equivalences

        Sinho Chewi, Lectures on Optimization. ASTIS restatement, not quoted prose; no endorsement implied.

        arXiv:2605.07006v1 · §1.2, Definition1.12 equation(1.7) and Proposition1.13, both equivalence clauses · faithful paraphrase

        Complete source statement (ASTIS restatement)

        For a continuously differentiable real-valued function on all Euclidean d-space and β≥0, the quadratic upper model is equivalent to the one-sided gradient bound below. With twice continuous differentiability, both are equivalent to the Hessian upper bound. The proof is omitted in the source by analogy with Proposition1.6.

        • All x,y,v range over ℝᵈ; β≥0.
        • C¹ suffices for the first equivalence; C² is required for the Hessian clause. Convexity is not assumed.

        (1.7) · upper model

        \[f(y)\le f(x)+\langle\nabla f(x),y-x\rangle+\frac\beta2\|y-x\|^2\]

        gradient upper bound

        \[\langle\nabla f(y)-\nabla f(x),y-x\rangle\le\beta\|y-x\|^2\]

        Hessian upper bound

        \[D^2f(x)[v,v]\le\beta\|v\|^2\]

        Read the formalized proofs

        Each statement and proof below has its own closed Lean disclosure. ASTIS parents, Mathlib calls and external mathematical sources are distinguished in each proof.

        ASTIS mathematical exposition

        A quadratic upper model is equivalent to a one-sided gradient bound

        AutoSamplingTheory.TechnicalLemmas.Analysis.SmoothnessEquivalences.upper_model_iff_gradient_upper · theorem · Teaching coverage

        Statement

        For every C¹ real-valued function f on a complete real inner-product space and every real β, the global quadratic upper model with coefficient β/2 holds if and only if the gradient difference has inner product with the displacement at most β times squared displacement.

        \[\bigl[\forall x,y,\ f(y)\le f(x)+\langle\nabla f(x),y-x\rangle+\frac\beta2\|y-x\|^2\bigr]\quad\Longleftrightarrow\quad\bigl[\forall x,y,\ \langle\nabla f(y)-\nabla f(x),y-x\rangle\le\beta\|y-x\|^2\bigr].\]

        All objects and hypotheses

        • E is a complete real inner-product space; all points and directions range over E. The domain is the whole space.
        • β is any real number, including zero and negative values. This explicitly generalizes the source parameter range β≥0 and Euclidean domain.
        • The gradient is the actual Mathlib Riesz gradient of the Fréchet derivative. No convexity assumption is imposed.
        • f is continuously Fréchet differentiable everywhere (ContDiff ℝ 1 f).

        Mathematical proof

        1. Add the two endpoint models

        Write the upper model from x to y and from y to x. The values cancel on addition; the linear terms combine with opposite displacements. Each quadratic correction is β‖y−x‖²/2.

        \[0\le-\langle\nabla f(y)-\nabla f(x),y-x\rangle+\beta\|y-x\|^2.\]
        Corresponding Lean step

        hxy and hyx, inner_neg_right and norm_neg; linarith derives the bound.

        2. Turn the upper bound into a signed lower bound

        For the converse set g=−f and m=−β. Linearity of the derivative and Riesz map gives ∇g=−∇f. The assumed one-sided upper bound becomes quantitative gradient monotonicity of g with signed modulus m.

        \[\langle\nabla g(y)-\nabla g(x),y-x\rangle\ge(-\beta)\|y-x\|^2.\]
        Corresponding Lean step

        hg proves actual gradient negation; ConvexityC1.strongConvexOn_univ_of_gradient_mono_integral applies with m=-β.

        3. Recover the endpoint model through the existing integral route

        The signed gradient-to-chord theorem integrates along affine segments; C¹ supplies derivative continuity and interval integrability. Its chord conclusion and the genuine gradient yield the existing first-order lower model for g. Negating this inequality gives exactly the upper model for f, with coefficient β/2.

        \[-f(y)\ge-f(x)-\langle\nabla f(x),y-x\rangle-\frac\beta2\|y-x\|^2.\]
        Corresponding Lean step

        StrongConvexFirstOrder.firstOrder_lower_bound_of_strongConvexOn uses hf.neg.differentiable_one.hasGradientAt; hg and linarith finish.

        Lean statement · upper_model_iff_gradient_upper

        For every C¹ real-valued function f on a complete real inner-product space and every real β, the global quadratic upper model with coefficient β/2 holds if and only if the gradient difference has inner product with the displacement at most β times squared displacement.

        Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

        theorem upper_model_iff_gradient_upper {f : E → ℝ} {β : ℝ}
            (hf : ContDiff ℝ 1 f) :
            (∀ x y, f y ≤ f x + inner ℝ (gradient f x) (y - x) + β / 2 * ‖y - x‖ ^ 2) ↔
            ∀ x y, inner ℝ (gradient f y - gradient f x) (y - x) ≤ β * ‖y - x‖ ^ 2

        Exact module and namespace context

        Lean proof · upper_model_iff_gradient_upper

        Write the upper model from x to y and from y to x. The values cancel on addition; the linear terms combine with opposite displacements. Each quadratic correction is β‖y−x‖²/2. For the converse set g=−f and m=−β. Linearity of the derivative and Riesz map gives ∇g=−∇f. The assumed one-sided upper bound becomes quantitative gradient monotonicity of g with signed modulus m. The signed gradient-to-chord theorem integrates along affine segments; C¹ supplies derivative continuity and interval integrability. Its chord conclusion and the genuine gradient yield the existing first-order lower model for g. Negating this inequality gives exactly the upper model for f, with coefficient β/2.

        Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

        theorem upper_model_iff_gradient_upper {f : E → ℝ} {β : ℝ}
            (hf : ContDiff ℝ 1 f) :
            (∀ x y, f y ≤ f x + inner ℝ (gradient f x) (y - x) + β / 2 * ‖y - x‖ ^ 2) ↔
            ∀ x y, inner ℝ (gradient f y - gradient f x) (y - x) ≤ β * ‖y - x‖ ^ 2 := by
          have hg (x : E) : gradient (fun z => -f z) x = -gradient f x := by
            simp [gradient]
          constructor
          · intro h x y
            have hxy := h x y
            have hyx := h y x
            rw [show x - y = -(y - x) by abel, inner_neg_right, norm_neg] at hyx
            rw [inner_sub_left]
            linarith
          · intro h
            have hn : StrongConvexOn (univ : Set E) (-β) (fun z => -f z) :=
              ConvexityC1.strongConvexOn_univ_of_gradient_mono_integral hf.neg (by
                intro x y
                rw [hg, hg, inner_sub_left, inner_neg_left, inner_neg_left]
                have hxy := h x y
                rw [inner_sub_left] at hxy
                linarith)
            intro x y
            have hl := StrongConvexFirstOrder.firstOrder_lower_bound_of_strongConvexOn hn
              (fun z _ => (hf.neg.differentiable_one z).hasGradientAt) (mem_univ x) (mem_univ y)
            rw [hg, inner_neg_left] at hl
            linarith
        
        /-- With genuine C² regularity the same upper model is equivalent to the
        Hessian diagonal upper bound, without assuming convexity. -/

        Exact module and namespace context

        Source assumptions versus formal assumptions

        SourceActual LeanDifference kindWhy it matters
        Whole Euclidean d-space and β≥0.Complete real inner-product space and arbitrary real β.generalizationThe sign-reversal route uses the already available signed modulus -β. Completeness gives the genuine Riesz gradient; Euclidean spaces satisfy it, including dimension zero.
        C¹ for the first equivalence and C² for the Hessian equivalence; proof omitted by analogy with Proposition1.6.ContDiff ℝ 1 f; actual gradient and iterated fderiv. No separately assumed symmetry, segment integrability or derivative field.source-implicitNegation preserves the stated regularity. Existing signed convexity/FTC parents derive all needed interval regularity; the Hessian is represented by its bilinear evaluation.
        One-sided upper bounds; convexity only appears in a subsequent separate Lipschitz-gradient consequence.No convexity premise or Lipschitz conclusion.sameThe concave quadratic at β=0 is a focused boundary counterexample to conflating these conditions.

        These are one-sided upper bounds. They do not imply a β-Lipschitz gradient without an additional condition such as convexity; no such implication is asserted here. The source instance is E=ℝᵈ and β≥0.

        Encoder–denoiser: source-reviewed · domain-mismatch

        Detected semantic differences

        • domains: The theorem covers complete real inner-product spaces, extending the source’s Euclidean domain. This is disclosed and preserves all source instances, but is not equality of full theorem scopes. — Module variable declarations and header; lesson assumptions; primary source Proposition 1.13 at https://arxiv.org/html/2605.07006v1#S1.SS2
        • assumptions: The theorem permits signed β, extending the source β≥0 range. The proof transformations preserve the same coefficient and do not need β≥0. The extension is already disclosed. — Theorem {β : ℝ} without a sign hypothesis; hf.neg with m=−β; primary source Definition 1.12 and Proposition 1.13.

        A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

        Scope and omitted-condition boundaries

        • These are one-sided upper bounds. They do not imply a β-Lipschitz gradient without an additional condition such as convexity; no such implication is asserted here. The source instance is E=ℝᵈ and β≥0.
        • The source omits the proof by reference to Proposition 1.6. The explicit sign reversal reuses its already compiled signed integral and derivative-limit ingredients.

        Source and reuse

        ASTIS parents called

        Mathlib API called (external library)

        • ContDiff.neg; ContDiff.differentiable_one; DifferentiableAt.hasGradientAt
        • gradient; fderiv_fun_neg; map_neg; inner_sub_left; inner_neg_left; inner_neg_right; norm_neg

        Mathematical sources

        ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

        ASTIS mathematical exposition

        A quadratic upper model is equivalent to a Hessian upper bound

        AutoSamplingTheory.TechnicalLemmas.Analysis.SmoothnessEquivalences.upper_model_iff_fderiv2_upper · theorem · Teaching coverage

        Statement

        For every C² real-valued function f on a complete real inner-product space and every real β, the global quadratic upper model with coefficient β/2 holds if and only if the genuine Hessian quadratic form at each point is at most β times squared norm in every direction.

        \[\bigl[\forall x,y,\ f(y)\le f(x)+\langle\nabla f(x),y-x\rangle+\frac\beta2\|y-x\|^2\bigr]\quad\Longleftrightarrow\quad\bigl[\forall x,v,\ D^2f(x)[v,v]\le\beta\|v\|^2\bigr].\]

        All objects and hypotheses

        • E is a complete real inner-product space; all points and directions range over E. The domain is the whole space.
        • β is any real number, including zero and negative values. This explicitly generalizes the source parameter range β≥0 and Euclidean domain.
        • The gradient is the actual Mathlib Riesz gradient of the Fréchet derivative. No convexity assumption is imposed.
        • f is twice continuously Fréchet differentiable everywhere (ContDiff ℝ 2 f).
        • D²f(x)[v,v] means (fderiv ℝ (fderiv ℝ f) x v) v. C² supplies its existence and continuity; no separate Hessian, symmetry or integrability premise is supplied.

        Mathematical proof

        1. Use the C¹ equivalence

        C² implies C¹, so the preceding theorem replaces the upper model by its one-sided gradient inequality.

        \[\langle\nabla f(y)-\nabla f(x),y-x\rangle\le\beta\|y-x\|^2\]
        Corresponding Lean step

        upper_model_iff_gradient_upper with ContDiff.of_le.

        2. Apply the signed Hessian equivalence to the negative function

        Set g=−f and m=−β again. Genuine first and second Fréchet derivatives commute with negation. The compiled equivalence for g uses a positive-direction derivative limit in one direction and the Hessian segment FTC in the other.

        \[\nabla g=-\nabla f,\qquad D^2g=-D^2f,\qquad\langle\nabla g(y)-\nabla g(x),y-x\rangle\ge m\|y-x\|^2\ \Longleftrightarrow\ D^2g(x)[v,v]\ge m\|v\|^2.\]
        Corresponding Lean step

        hg and hH prove both sign identities; ConvexityC2.gradient_mono_iff_fderiv2_lower applies to hf.neg at m=-β.

        3. Reverse both signs

        Multiplying the two lower inequalities by −1 gives the upper gradient and Hessian bounds. Neither β nor the norm of the direction is divided by, so zero and negative β and v=0 remain valid.

        \[D^2f(x)[v,v]\le\beta\|v\|^2\]
        Corresponding Lean step

        The two directions use Iff.mp and Iff.mpr with linear real arithmetic; no source-specific matrix field replaces fderiv.

        Lean statement · upper_model_iff_fderiv2_upper

        For every C² real-valued function f on a complete real inner-product space and every real β, the global quadratic upper model with coefficient β/2 holds if and only if the genuine Hessian quadratic form at each point is at most β times squared norm in every direction.

        Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

        theorem upper_model_iff_fderiv2_upper {f : E → ℝ} {β : ℝ}
            (hf : ContDiff ℝ 2 f) :
            (∀ x y, f y ≤ f x + inner ℝ (gradient f x) (y - x) + β / 2 * ‖y - x‖ ^ 2) ↔
            ∀ x v, (fderiv ℝ (fderiv ℝ f) x v) v ≤ β * ‖v‖ ^ 2

        Exact module and namespace context

        Lean proof · upper_model_iff_fderiv2_upper

        C² implies C¹, so the preceding theorem replaces the upper model by its one-sided gradient inequality. Set g=−f and m=−β again. Genuine first and second Fréchet derivatives commute with negation. The compiled equivalence for g uses a positive-direction derivative limit in one direction and the Hessian segment FTC in the other. Multiplying the two lower inequalities by −1 gives the upper gradient and Hessian bounds. Neither β nor the norm of the direction is divided by, so zero and negative β and v=0 remain valid.

        Braces mark parameters Lean can infer; square brackets request structures such as a measurable space or probability measure. Named hypotheses are mathematical premises, not facts established by this declaration. Section parameters are described in the mathematical hypotheses above; the module link retains their exact source context.

        theorem upper_model_iff_fderiv2_upper {f : E → ℝ} {β : ℝ}
            (hf : ContDiff ℝ 2 f) :
            (∀ x y, f y ≤ f x + inner ℝ (gradient f x) (y - x) + β / 2 * ‖y - x‖ ^ 2) ↔
            ∀ x v, (fderiv ℝ (fderiv ℝ f) x v) v ≤ β * ‖v‖ ^ 2 := by
          have hg (x : E) : gradient (fun z => -f z) x = -gradient f x := by
            simp [gradient]
          have hH (x v : E) :
              (fderiv ℝ (fderiv ℝ (fun z => -f z)) x v) v =
                -(fderiv ℝ (fderiv ℝ f) x v) v := by
            rw [show fderiv ℝ (fun z => -f z) = -fderiv ℝ f by
              funext z; exact fderiv_fun_neg]
            rw [fderiv_neg]
            rfl
          rw [upper_model_iff_gradient_upper (hf.of_le (by norm_num))]
          have h := ConvexityC2.gradient_mono_iff_fderiv2_lower (m := -β) hf.neg
          simp only [hg, inner_sub_left, inner_neg_left, hH] at h
          constructor
          · intro hu x v
            have hl := h.mp (by
              intro x y
              have hxy := hu x y
              rw [inner_sub_left] at hxy
              linarith) x v
            linarith
          · intro hu x y
            have hl := h.mpr (by intro x v; have hv := hu x v; linarith) x y
            rw [inner_sub_left]
            linarith
        
        end AutoSamplingTheory.TechnicalLemmas.Analysis.SmoothnessEquivalences

        Exact module and namespace context

        Source assumptions versus formal assumptions

        SourceActual LeanDifference kindWhy it matters
        Whole Euclidean d-space and β≥0.Complete real inner-product space and arbitrary real β.generalizationThe sign-reversal route uses the already available signed modulus -β. Completeness gives the genuine Riesz gradient; Euclidean spaces satisfy it, including dimension zero.
        C¹ for the first equivalence and C² for the Hessian equivalence; proof omitted by analogy with Proposition1.6.ContDiff ℝ 2 f; actual gradient and iterated fderiv. No separately assumed symmetry, segment integrability or derivative field.source-implicitNegation preserves the stated regularity. Existing signed convexity/FTC parents derive all needed interval regularity; the Hessian is represented by its bilinear evaluation.
        One-sided upper bounds; convexity only appears in a subsequent separate Lipschitz-gradient consequence.No convexity premise or Lipschitz conclusion.sameThe concave quadratic at β=0 is a focused boundary counterexample to conflating these conditions.

        These are one-sided upper bounds. They do not imply a β-Lipschitz gradient without an additional condition such as convexity; no such implication is asserted here. The source instance is E=ℝᵈ and β≥0.

        Encoder–denoiser: source-reviewed · domain-mismatch

        Detected semantic differences

        • domains: The theorem covers complete real inner-product spaces, extending the source’s Euclidean domain. This is disclosed and preserves all source instances, but is not equality of full theorem scopes. — Module variable declarations and header; lesson assumptions; primary source Proposition 1.13 at https://arxiv.org/html/2605.07006v1#S1.SS2
        • assumptions: The theorem permits signed β, extending the source β≥0 range. The proof transformations preserve the same coefficient and do not need β≥0. The extension is already disclosed. — Theorem {β : ℝ} without a sign hypothesis; hf.neg with m=−β; primary source Definition 1.12 and Proposition 1.13.

        A generalization is not a source correction. Proposed missing conditions require separate independent repair review. No proposed repair silently changes the original theorem.

        Scope and omitted-condition boundaries

        • These are one-sided upper bounds. They do not imply a β-Lipschitz gradient without an additional condition such as convexity; no such implication is asserted here. The source instance is E=ℝᵈ and β≥0.
        • This closes the C² equivalence of Proposition 1.13 when specialized to the source domain. It does not close the later convexity-to-Lipschitz consequence or an entire chapter.

        Source and reuse

        ASTIS parents called

        Mathlib API called (external library)

        • ContDiff.neg; ContDiff.of_le
        • fderiv_fun_neg; fderiv_neg; gradient; map_neg; inner_sub_left; inner_neg_left

        Mathematical sources

        ASTIS prose is not a quotation or a source-equivalence certificate. Definitions and aliases are explained as constructions, not counted as new mathematical proofs.

        Which proof edges are actually covered?

        • Local proof component; source adapter/review separate Quadratic upper model ↔ one-sided gradient upper bound
        • Local proof component; source adapter/review separate Under C², quadratic upper model ↔ genuine Hessian diagonal upper bound