Files
zooqueenandHanzo Dev ac9676a47a proofs: drive formal/lean library to 0 errors
The formal/lean library (53 files — a separate formalization from lean/) had
~110 type-check errors across 38 files and had never had its Mathlib oleans
built. It now verifies at 0 errors under the project's strict setting:
`lake env lean -D autoImplicit=false`, all 53 files.

Fixed the same families as the sibling lean/ tree (the content is diverged, so
each was repaired directly):
- Crypto (BLS/FROST/Corona/Hybrid/threshold/FHE/Verkle): omega needs in-scope
  structure invariants; Nat-division bounds; noncomputable over opaque verifiers;
  Fin n index → Nat; deriving Inhabited.
- DeFi (AMM/staking/fees/flashloan/HFT/router): constant-product invariant and
  fee bounds via Nat.div_mul_le_self / Nat.div_le_of_le_mul; dead tactics.
- Protocol/Consensus/Warp/Bridge: BFT quorum theorems tightened to n=3f+1;
  pipe-projection parse fixes; split-after-simp; dead tactics; built the
  Consensus/Safety + ThresholdProof dependency oleans from clean source.
- Network/Compute/Trust/Build: record-projection opacity (unfold+split),
  foldl-min monotonicity, BEq parse parens.
- autoImplicit=false: declared previously auto-bound variables (explicit binders
  / variable blocks); the lakefile sets autoImplicit:=false.

Integrity: no sorry/admit/native_decide; no proof-by-assumption axiom cheats.
Statement changes only tightened false/trivial draft theorems to true
invariants. Remaining axioms are trusted-base only (opaque crypto primitives,
protocol modeling / honesty-static, build determinism).

Co-authored-by: Hanzo Dev <[email protected]>
2026-06-02 09:31:40 -07:00

72 lines
2.3 KiB
Lean4

/-
Nova Protocol Formal Model
Models protocol/nova/nova.go -- linear blockchain consensus mode.
Nova wraps Ray (linear decision engine) and provides blockchain semantics.
It is the simplest consensus mode: blocks form a chain, decided sequentially.
Maps to:
- nova.go: Nova struct wrapping ray.Driver
- nova.go: Config{SampleSize, Alpha, Beta, RoundTO, GenesisHash}
- nova.go: NewNova, Start, Stop, Status
Nova delegates all consensus logic to Ray, which delegates voting to Wave.
The composition: Nova -> Ray -> Wave -> Prism (sampling)
Properties:
- Chain property: decided blocks form a valid chain (parent links)
- Genesis: genesis block is always the first decided block
- Height monotonicity: block heights are strictly increasing
-/
import Mathlib.Data.Nat.Defs
import Mathlib.Tactic
namespace Protocol.Nova
/-- Block in linear chain -/
structure Block where
id : Nat
parentId : Nat
height : Nat
/-- Nova chain state -/
structure NovaState where
chain : List Block
lastHeight : Nat
/-- Genesis state -/
def genesis (genesisBlock : Block) (_hg : genesisBlock.height = 0) : NovaState :=
{ chain := [genesisBlock], lastHeight := 0 }
/-- Append block to chain -/
def appendBlock (s : NovaState) (b : Block)
(_hparent : b.parentId = (s.chain.head?.map Block.id).getD 0)
(_hheight : b.height = s.lastHeight + 1) : NovaState :=
{ chain := b :: s.chain, lastHeight := b.height }
/-- Height is strictly increasing -/
theorem height_increases (s : NovaState) (b : Block)
(hparent : b.parentId = (s.chain.head?.map Block.id).getD 0)
(hheight : b.height = s.lastHeight + 1) :
(appendBlock s b hparent hheight).lastHeight > s.lastHeight := by
simp [appendBlock, hheight]
/-- Chain grows on append -/
theorem chain_grows (s : NovaState) (b : Block)
(hp : b.parentId = (s.chain.head?.map Block.id).getD 0)
(hh : b.height = s.lastHeight + 1) :
(appendBlock s b hp hh).chain.length = s.chain.length + 1 := by
simp [appendBlock, List.length_cons]
/-- Genesis has height 0 -/
theorem genesis_height (b : Block) (hg : b.height = 0) :
(genesis b hg).lastHeight = 0 := rfl
/-- Genesis chain has exactly one block -/
theorem genesis_single (b : Block) (hg : b.height = 0) :
(genesis b hg).chain.length = 1 := rfl
end Protocol.Nova