R6 — EHM-2009 Lemma 2.5 (converse): the uniform semi-attractor from relative asymptotic stability
Seal
Rung R6 · Status sealed — all three theorems axiom-clean (
#print axiomsverbatim in 6. The machine seal), nosorryAx, and no interface hypothesis anywhere in the module. This module dischargeshUSA— the single external core the whole R5 arc rested on. After the R6-c rewire, the reduction theoremreduction_asymptotic_stability_of_asymStableRelativeTostands on EHM standing conditions alone: the interface ledger’s EHM chain (hStable→hLandsInΓ₁→hUSA) is closed end-to-end.
Links: module index · interface ledger · consumes ReductionStabilityFinish (L-C) and ReductionAttraction (T8-D) · recon (~/Code/notes/ctrllib_r6_lemma25_recon.md) · source elhawwary2009reduction
What this seals, in one paragraph
EHM-2009 Lemma 2.5 (p. 5, §2.3) is the bridge the EHM-2013 Theorem-6 finish invokes to convert relative asymptotic stability into the uniform semi-attractor property — the formula labelled (A.1) in 2013 and eq. (18) in the 2009 twin (Appendix D, p. 21). The R5 seals took that bridge as the named hypothesis hUSA; the R6 recon verified the Lean predicate UniformSemiAttractorRelativeTo is a quantifier-for-quantifier transcription of eq. (18), so no adapter is needed. This module proves the bridge — the converse (“furthermore”) direction, the only direction the finish consumes — and rewires it into T8-D. The module is (~/Code/vault/lean/ReductionUniformization.lean), build copy ~/lean/ctrllib/Ctrllib/ReductionUniformization.lean.
No SymPy pin: pure metric topology, no numeric content (sympy_pin: ""), same deliberate omission as reduction_stability.
⚠ Route deviation — read this first
The proof formalized here is NOT the paper’s Appendix-A proof. Decided by the user 2026-07-10 (recon §5 put the call); recorded loudly per the house provenance rule.
- The paper’s route (Route A, declined): Appendix A ¶2 proves the converse direction through prolongational limit sets (Ura), with Proposition 2.6 cited to Bhatia–Szegö 1970 (Thm II.4.3, Lemma V.1.10) without proof in the paper. Mathlib has none of that machinery (the sole “prolongation” hit in the tree is homological algebra), and the Bhatia–Szegö book is out of corpus. Formalizing this route is ≥4 rung-sized theorems.
- The route sealed here (Route B): the classical compactness-and-finite-subcover argument, valid in our setting — a proper space (from
[FiniteDimensional ℝ E]) with the relative-stability predicates in their tube forms. It proves the identical conclusionUniformSemiAttractorRelativeTo. - The bridge licensing the deviation is the paper’s own: the p. 4 Remark states that for compact sets, uniform semi-attractivity coincides with the uniform attractivity used in Lin–Sontag–Wang 1996 (the paper’s [33]), for which the compactness argument is the standard proof. Our sole consumer (T8-D, hence L-C) instantiates at compact , exactly the regime where the two notions coincide.
- Tube-form note (recon §2 footnote):
AttractiveRelativeTotranscribes EHM Def 2.1(ii) with the basin specialized to a uniform -tube. For noncompact that is strictly stronger than the paper’s generic neighbourhood (whose width may pinch to zero at infinity — the same p. 4 Remark); for the compact application they coincide. Route B actively exploits the tube form: the uniform radius is what feeds below. This is why the module consumes neitherLUBNearnor compactness of nor — hypotheses the paper’s statement carries.
1. The statement and its objects
Conventions as in reduction_stability_finish: real normed space , Metric.infDist z Γ the point-to-set distance, = the predicate (strict, per the paper’s p. 3 notation), flow application = ϕ t y. The hypothesis-side predicates (all Reduction.lean, EHM Def 4):
and the conclusion (ReductionStabilityFinish.lean, EHM-2009 Def 2.1(iv) relativized per Def 2.2 — literally eq. (18)):
The load-bearing quantifier is the placement of : one time per tube level , independent of the initial point in . Pointwise attraction gives each initial point its own capture time; uniformization over the ball is precisely what compactness buys.
2. Theorem 1 — R6-a, the capture brick (exists_captureTime_ball, sealed)
One orbit drawn to yields a strictly positive capture time and a capture ball of initial points all landing strictly inside the -tube at that shared time.
Proof. Write . Since and , the set of times with is eventual in the atTop filter; so is the set of times ; a filter point satisfying both is a time with (Tendsto.eventually_lt_const, eventually_gt_atTop). Now freeze and consider the time- tube function . It is continuous: the fixed-time flow map is continuous (Flow.continuous_toFun) and the distance-to-set function is continuous (Metric.continuous_infDist_pt, indeed 1-Lipschitz). Its strict -sublevel set is therefore open (isOpen_lt) and contains ; an open set in a metric space contains a ball around each of its points (Metric.isOpen_iff), giving with inside the sublevel set.
Why is strict. Eq. (18) demands strict, and R6-c’s forward-invariance application consumes ; taking the tail intersection with costs nothing and avoids an adapter.
3. Theorem 2 — R6-b, the uniformization (uniformSemiAttractor_of_asymStableRelativeTo, sealed)
Proof. Fix . Let be the tube radius of relative attractivity and set
This depends only on (indeed not even on ) — it is chosen before , as the quantifier order demands. Now fix and let be the relative-stability radius at level .
The compact slab. Let . The closed ball is compact because a finite-dimensional normed space is proper (isCompact_closedBall), and is closed, so is compact (IsCompact.inter_right). Note : and the ball is centred at — so always; no empty-case split is needed.
Every slab point is in the basin. For : since witnesses the point-to-set distance, , and ; relative attractivity applies, so .
Finite subcover of capture balls. R6-a at level gives every a capture time and capture ball . These balls are neighbourhoods of their centres covering ; compactness extracts a finite with (IsCompact.elim_nhds_subcover). is nonempty because . Set
which is strictly positive (Finset sup' over the nonempty ; each ).
The tail. Take any with and , and any . Then , so for some , and the capture brick gives
The capture point stays admissible: by forward invariance of (here is the one place hpi₂ is consumed; ). The flow semigroup law rewrites with (Flow.map_add; the in makes the tail arithmetic a one-line linarith). Relative stability at level , applied to the capture point (in , strictly inside the -tube), bounds the entire remaining tail:
which is the claim.
Hypothesis accounting. hΓ₂closed → slab compactness only. hsub → only. hpi₂ → the capture point’s -membership only. Stability and attractivity are consumed exactly once each, in their tube forms. Nothing else enters — no LUBNear, no compactness of , no (the basin bound uses itself as witness, never a nonemptiness axiom).
4. Theorem 3 — R6-c, the rewire (reduction_asymptotic_stability_of_asymStableRelativeTo, sealed)
T8-D (reduction_attraction) already carried hStabRel and hAttrRel in its signature — L-C’s row deliberately never consumed the stability half, and the recon (§2) located the gap as hypothesis-side and benign. The rewire therefore only threads one new primitive: hpi₂ : IsForwardInvariant ϕ.toFun Γ₂, which is paper-faithful — EHM Theorem 6’s standing setup is two closed positively invariant sets — and was simply unthreaded until now. The proof term is one application: T8-D with its hUSA slot filled by R6-b.
Neither L-C nor T8-D is edited — they are consumed. The composed reduction theorem’s signature now reads: compact nonempty closed, both forward invariant, LUBNear, the Def-3 locality conditions (hLSN, hLAN), and relative asymptotic stability (both halves) — every hypothesis a standing condition of EHM Theorems 6/8/10; no interface hypothesis remains.
5. What the defense should know
- The direction proved is the converse (“furthermore”) direction only — semi-asymptotic stability relative to ⟹ uniform semi-attractor — because that is the only direction the Theorem-6 finish consumes (2009 Appendix D, p. 21: the derivation of eq. (18)). The forward direction (uniform semi-attractor ⟹ stability) is the content of the already-sealed L-C core and was never an R6 obligation (recon §3 ¶1: the paper’s own forward proof is structurally our sealed L-A + L-B).
- Where the paper’s extra hypotheses went. Lemma 2.5 as stated carries local uniform boundedness; that rider powers the -machinery route for possibly-noncompact . In the tube-form/proper-space setting the finite-subcover argument replaces it outright, so the Lean statement is cleaner than the paper’s — fewer hypotheses, identical conclusion formula — at the price of the route deviation documented above, licensed for compact applications by the paper’s own p. 4 Remark.
- Trust boundary after R6: the EHM reduction chain is interface-free. What remains open across the library is unrelated to this chain:
IsSolutionTo(flow existence),hreal/hfield(moving-metric calculus),hsvd, and the cascade modelling inputshsand/hdi— see interfaces.
6. The machine seal
Full lake build green (2661 jobs) with the module imported at the root; axiom prints verbatim:
'Ctrllib.exists_captureTime_ball' depends on axioms: [propext, Classical.choice, Quot.sound]
'Ctrllib.uniformSemiAttractor_of_asymStableRelativeTo' depends on axioms: [propext, Classical.choice, Quot.sound]
'Ctrllib.reduction_asymptotic_stability_of_asymStableRelativeTo' depends on axioms: [propext, Classical.choice, Quot.sound]
No sorryAx, no interface hypotheses; interfaces_assumed: [] and the interfaces hUSA row flips to discharged with this seal.