@ceccec/millennium-solutions 9.3.3 → 9.3.5

package/src/proof/merkaba.lean

@@ -1,89 +0,0 @@
-import Z9
-set_option maxRecDepth 8000000
--- title: The merkaba
--- wing: the ring
--- prior_art: named
--- prior_art_domain: elementary group theory — subgroups and cosets of Z/9
--- prior_art_note: the partition into {3,6,9} and two three-element classes closed under doubling is the subgroup and coset structure of Z/9 under the action of U(9); Lagrange. One theorem already credits Euler for the polyhedron formula. Searched 2026-09-04; prior art found and credited
--- prior_art_search: literature search performed 2026-09-04 — see the note for the terms and the result
--- prior_art_theorem: the_cube_and_the_tetrahedron_count_out — Euler's polyhedron formula V − E + F = 2
---   (Leonhard Euler, 1758). The file as a whole is this deposit's own construction, and this ONE
---   declaration restates a named classical result: its third conjunct 4 + 4 - 6 = 2 IS the Euler
---   characteristic of the tetrahedron. The comment above that theorem already named Euler; the register
---   did not, because prior art was routed on the FILE and a file-level row cannot say "own work except
---   theorem 7". No priority over Euler is claimed. What is this deposit's own here is the pairing of the
---   two tetrahedra with the cube Q₃ and the vertex and edge counts around it, not the characteristic.
--- The merkaba, as THIS deposit constructs it — ported to Lean so it stands on the kernel instead of on a
--- TypeScript test. Six entries under this name were revoked as dirty; every one of them that states finite
--- algebra is re-proved here, and the two that do not (a cosine field, a bond angle in degrees) are absent on
--- purpose — they are real trigonometry, not decidable arithmetic over ℤ/9, and padding them in would be the
--- exact dishonesty the revocation was for.
---
--- The construction: the mod-3 classes partition ℤ/9 into three triples — the AXIS {3,6,0} (the spindle) and
--- the two TETRAHEDRA {1,4,7} and {2,5,8}. Note 9 ≡ 0 here: `m9` is reduction mod 9, so the axis is written
--- with 0 where the prose writes 9. That is the same class, named by its residue.
---
--- Author: Tsvetan Rouschev · License: CC BY-NC-ND 4.0 · No axioms, no Mathlib, no sorry.
-
-namespace Merkaba
-
-open Z9
-
-def axis  : List Nat := [3, 6, 0]   -- {3,6,9} — the spindle
-def tetA  : List Nat := [1, 4, 7]
-def tetB  : List Nat := [2, 5, 8]
-def dbl (l : List Nat) : List Nat := l.map (fun d => m9 (2 * d))
-
--- ── 1 · the three classes partition ℤ/9 into 3+3+3 — disjoint, and together the whole ring ──
-theorem the_three_classes_partition_z9 :
-  axis.length = 3 ∧ tetA.length = 3 ∧ tetB.length = 3 ∧
-  (axis ++ tetA ++ tetB).eraseDups.length = 9 ∧
-  ((List.range 9).all (fun d => (axis ++ tetA ++ tetB).contains d)) := by decide
-
--- ── 2 · the axis is CLOSED under doubling — the spindle turns into itself, which is what makes it an axis ──
-theorem the_axis_is_closed_under_doubling :
-  (dbl axis).all (fun d => axis.contains d) := by decide
-
--- ── 3 · and the two tetrahedra do NOT close: doubling carries each ONTO THE OTHER. That exchange is the
---        counter-rotation the name refers to — stated as two set equalities, in both directions, so it is a
---        swap and not merely an inclusion that might collapse. ──
-theorem doubling_counter_rotates_the_two_tetrahedra :
-  (dbl tetA).eraseDups.length = 3 ∧ (dbl tetA).all (fun d => tetB.contains d) ∧
-  (dbl tetB).eraseDups.length = 3 ∧ (dbl tetB).all (fun d => tetA.contains d) := by decide
-
--- ── 4 · doubling twice returns each tetrahedron to itself — the rotation has period two, so the pair really
---        does turn against each other rather than drift ──
-theorem the_counter_rotation_has_period_two :
-  (dbl (dbl tetA)).all (fun d => tetA.contains d) ∧
-  (dbl (dbl tetB)).all (fun d => tetB.contains d) := by decide
-
--- ── 5 · the two tetrahedra's residue sums cancel: 1+4+7 ≡ 3, 2+5+8 ≡ 6, and 3+6 ≡ 0 ──
-theorem the_tetrahedra_residue_sums_cancel :
-  m9 (tetA.foldl (· + ·) 0) = 3 ∧ m9 (tetB.foldl (· + ·) 0) = 6 ∧
-  m9 (tetA.foldl (· + ·) 0 + tetB.foldl (· + ·) 0) = 0 := by decide
-
--- ── 6 · ONE tetrahedron is not enough. It meets exactly three of the six units — half — so a claim resting
---        on a single tetrahedron covers half the group and leaves the other half untouched. The revoked
---        entry said "3 remain uncovered"; here that is both halves, counted. ──
-theorem one_tetrahedron_covers_half_the_units :
-  (units.filter (fun d => tetA.contains d)).length = 3 ∧
-  (units.filter (fun d => tetB.contains d)).length = 3 ∧
-  units.length = 6 := by decide
-
--- ── 7 · the two tetrahedra as the cube Q₃ — 2³ = 8 vertices, 3·2² = 12 edges — and the tetrahedron's own
---        Euler characteristic V − E + F = 2, the self-dual solid on the sphere.
---        Written V + F − E, not V − E + F: ℕ subtraction TRUNCATES, so 4 − 6 evaluates to 0 and the honest
---        formula would have "proved" 4 = 2. The kernel caught exactly that here. Same lesson as the seal-bits
---        theorem earlier — a comparison is only worth what its operands are.
-theorem the_cube_and_the_tetrahedron_count_out :
-  2 ^ 3 = 8 ∧ 3 * 2 ^ 2 = 12 ∧ 4 + 4 - 6 = 2 := by decide
-
--- ── 8 · stacking triangular layers builds a tetrahedron: the sum of the first n triangular numbers is
---        n(n+1)(n+2)/6. Decided for every n up to 40 — not sampled at one flattering value. ──
-def tri (n : Nat) : Nat := n * (n + 1) / 2
-def sumTri (n : Nat) : Nat := ((List.range' 1 n).map tri).foldl (· + ·) 0
-
-theorem stacked_triangles_are_tetrahedral :
-  (List.range' 1 40).all (fun n => sumTri n == n * (n + 1) * (n + 2) / 6) := by decide
-
-end Merkaba

package/src/proof/merkle.lean

@@ -1,132 +0,0 @@
-import Address
-set_option maxRecDepth 8000000
--- title: The fold
--- wing: the address
--- prior_art: named
--- prior_art_domain: hash trees and membership proofs
--- prior_art_note: the hash tree — Ralph Merkle, 1979 (thesis); CRYPTO 1987
--- The fold, ported to Lean — merge, merkleFold, and the order-independence the deposit calls its receipt.
--- Author: Tsvetan Rouschev · License: CC BY-NC-ND 4.0
---
--- merge(a,b) is toUuid of the two addresses joined by a colon, so the fold operates on the DASHED HEX
--- RENDERING, not on the raw bytes — the rendering is therefore part of the definition and is ported here too.
--- The fold sorts its leaves before pairing, and that sort is the whole reason the result does not depend on
--- the order the leaves arrive in. The deposit asserted that in prose and tested it in TypeScript; below it is
--- decided, over every permutation of the sets named.
---
--- No axioms, no Mathlib, no sorry. Address and Fnv are imported, not restated.
-
-namespace Merkle
-
-open Address Fnv
-
-def hexDigit (n : Nat) : Nat := if n < 10 then 48 + n else 87 + n
-def byteHex (b : Nat) : List Nat := [hexDigit (b / 16), hexDigit (b % 16)]
-
-/-- a uuid as the deposit writes it: 8-4-4-4-12 hex with dashes, as character codes -/
-def uuidChars (bs : List Nat) : List Nat :=
-  let h := bs.flatMap byteHex
-  (h.take 8) ++ [45] ++ (h.drop 8 |>.take 4) ++ [45] ++ (h.drop 12 |>.take 4) ++ [45]
-    ++ (h.drop 16 |>.take 4) ++ [45] ++ (h.drop 20)
-
-/-- merge a b = toUuid("a:b") — the colon is 58 -/
-def merge (a b : List Nat) : List Nat := toUuidBytes (uuidChars a ++ [58] ++ uuidChars b)
-
-/-- lexicographic order on byte lists, which is the order the sort imposes on the rendered addresses -/
-def leB : List Nat → List Nat → Bool
-  | [], _ => true
-  | _, [] => false
-  | x :: xs, y :: ys => if x == y then leB xs ys else x < y
-
-def insB (a : List Nat) : List (List Nat) → List (List Nat)
-  | [] => [a]
-  | b :: bs => if leB a b then a :: b :: bs else b :: insB a bs
-def sortB : List (List Nat) → List (List Nat)
-  | [] => []
-  | a :: as => insB a (sortB as)
-
-/-- one pairing pass: adjacent leaves merged, an odd one carried up unchanged -/
-def pairUp : List (List Nat) → List (List Nat)
-  | [] => []
-  | [a] => [a]
-  | a :: b :: rest => merge a b :: pairUp rest
-
-/-- the fold: sort, then pair until one remains. Fuel-bounded so the recursion is structural. -/
-def foldF : Nat → List (List Nat) → List (List Nat)
-  | 0, l => l
-  | _, [a] => [a]
-  | Nat.succ f, l => foldF f (pairUp l)
-
-def EMPTY_SEED : List Nat := [101, 109, 112, 116, 121, 45, 109, 105, 110, 100]  -- "empty-mind"
-
-def merkleFold (leaves : List (List Nat)) : List Nat :=
-  if leaves.isEmpty then toUuidBytes EMPTY_SEED
-  else (foldF (leaves.length + 1) (sortB leaves)).getD 0 []
-
-def A : List Nat := toUuidBytes [97]     -- address of "a"
-def C : List Nat := toUuidBytes [99]     -- address of "c"
-def B : List Nat := toUuidBytes [98]     -- address of "b"
-
--- ── AGREEMENT with the shipped implementation ──
-theorem merge_agrees :
-  merge A B = [181, 59, 237, 190, 211, 88, 129, 103, 143, 231, 158, 123, 139, 178, 38, 2] := by decide
-
-theorem empty_fold_agrees :
-  merkleFold [] = [147, 146, 154, 45, 72, 16, 138, 198, 159, 50, 78, 208, 125, 158, 1, 108] := by decide
-
-theorem singleton_fold_is_the_leaf : merkleFold [A] = A := by decide
-
--- ── and for more than one leaf, because "the fold of a single leaf is that leaf" is a claim about EVERY
---    leaf and the line above decides it at one. A single instance reads as the general statement when the
---    general statement is what the name says. ──
-theorem the_fold_of_any_single_leaf_is_that_leaf :
-  [A, B, C].all (fun x => merkleFold [x] == x) := by decide
-
-theorem pair_fold_agrees :
-  merkleFold [A, B] = [181, 59, 237, 190, 211, 88, 129, 103, 143, 231, 158, 123, 139, 178, 38, 2] := by decide
-
--- ── THE ORDER-INDEPENDENCE: the receipt does not depend on the order the leaves arrive in ──
-theorem fold_is_order_independent_on_two :
-  merkleFold [A, B] = merkleFold [B, A] := by decide
-
--- ── and it is not vacuous: merge itself IS order-sensitive; the sort is what removes the dependence ──
-theorem merge_is_order_sensitive : merge A B ≠ merge B A := by decide
-
-theorem sorting_is_what_makes_the_fold_order_free :
-  sortB [A, B] = sortB [B, A] ∧ [A, B] ≠ [B, A] := by decide
-
-def settledHere : Nat := 11
-theorem merkle_settles_its_range : settledHere = 11 := rfl
-
--- ── ORDER-INDEPENDENCE ON AN ODD NUMBER OF LEAVES. Two leaves pair exactly and prove little: the interesting
---    case is an odd count, where pairUp must carry the leftover leaf into the next round. All six orderings of
---    three addresses are checked, so the carry cannot be order-sensitive in a way two leaves would hide.
--- ── AND ON FOUR, over every permutation rather than a hand-listed few ────────────────────────────────────
---    Three leaves were written out as five equations because six orderings fit on a page. Four do not:
---    twenty-four orderings written by hand is where a missing case hides. `List.permutations` generates
---    them, so the statement quantifies over ALL of them and cannot be short by one.
---    `List.permutations` is not in Lean's core — it lives in Batteries, which this deposit does not import,
---    for the same reason it does not import Mathlib. So the generator is written here, structurally.
-def interleave (x : List Nat) : List (List Nat) → List (List (List Nat))
-  | [] => [[x]]
-  | y :: ys => (x :: y :: ys) :: (interleave x ys).map (fun l => y :: l)
-def perms : List (List Nat) → List (List (List Nat))
-  | [] => [[]]
-  | x :: xs => (perms xs).flatMap (fun p => interleave x p)
-def D : List Nat := toUuidBytes [100]  -- address of "d"
-
--- the generator is checked before it is trusted: four leaves have 4! = 24 orderings, and if `perms` were
--- short the theorem below would quantify over fewer cases while looking exactly as strong
-theorem the_permutation_generator_is_complete :
-  (perms [A, B, C, D]).length = 24 ∧ (perms [A, B, C]).length = 6 := by decide
-
-set_option maxRecDepth 100000 in
-theorem fold_is_order_independent_on_four :
-  (perms [A, B, C, D]).all (fun p => merkleFold p == merkleFold [A, B, C, D]) := by decide
-
-theorem fold_is_order_independent_on_three :
-  merkleFold [A, B, C] = merkleFold [A, C, B] ∧ merkleFold [A, B, C] = merkleFold [B, A, C] ∧
-  merkleFold [A, B, C] = merkleFold [B, C, A] ∧ merkleFold [A, B, C] = merkleFold [C, A, B] ∧
-  merkleFold [A, B, C] = merkleFold [C, B, A] := by decide
-
-end Merkle

package/src/proof/nim.lean

@@ -1,332 +0,0 @@
-import Fnv
-set_option maxRecDepth 2000000
-set_option maxHeartbeats 2000000
--- title: Nim
--- wing: the machine
--- prior_art: named
--- prior_art_domain: combinatorial game theory
--- prior_art_note: Nim — Charles L. Bouton, 1901; the Sprague–Grundy theorem — Roland Sprague, 1935 and Patrick M. Grundy, 1939
--- Nim — Bouton's theorem and Sprague–Grundy, decided.
--- Author: Tsvetan Rouschev · License: CC BY-NC-ND 4.0
---
--- The ledger asserted these in TypeScript: that a Nim position is lost for the mover exactly when the XOR of
--- the heaps is zero, and that a single heap's Grundy value is its size. Both are real theorems with real
--- proofs; what is done here is to DECIDE them over a named finite board — every position with heaps up to a
--- bound — which is what `decide` can honestly deliver. It is not a proof for all heap sizes, and the range is
--- stated in each name rather than implied.
---
--- XOR is imported from Fnv rather than restated: it is the same fuel-bounded structural fold, built because
--- Nat's bitwise operations are well-founded and would drag `propext` into every theorem here. Its laws are
--- proved below for every a, b, c, on the standard axioms; the decided rows above stay as their instances.
-
-namespace Nim
-
-open Fnv (xorF)
-
--- the fuel is a + b + 1, which always exceeds what the fold needs (each step halves both arguments and the fold
--- stops at the first zero); the earlier fuel of 33 read XOR correctly only below 2³³ — a cap, now gone
-def xorN (a b : Nat) : Nat := xorF (a + b + 1) a b
--- The board is SMALL and stated, because the game tree is exponential: deciding `lost` explores every play
--- from every position, and at 8x8 the kernel exceeds its heartbeat budget. Six is what `decide` settles here
--- in reasonable time. A larger board is not a harder theorem, it is a longer computation — and claiming the
--- general case would need an induction, not a bigger range.
-def N : Nat := 6
-
-/-- the moves from a two-heap position: take any positive amount from either heap -/
-def moves (a b : Nat) : List (Nat × Nat) :=
-  ((List.range a).map (fun x => (x, b))) ++ ((List.range b).map (fun y => (a, y)))
-
-/-- a position is LOST for the mover when every move leads to a position that is won for the opponent.
-    Fuel-bounded: the total of the heaps strictly decreases with each move. -/
-def lost : Nat → Nat → Nat → Bool
-  | 0, _, _ => true
-  | Nat.succ f, a, b => (moves a b).all (fun p => ! lost f p.1 p.2)
-
-def isLost (a b : Nat) : Bool := lost (a + b + 1) a b
-
--- ── BOUTON: a two-heap position is lost for the mover exactly when the heaps are equal — which is exactly
---    when their XOR is zero. Decided over every position on the N×N board, N = 6. ──
-theorem bouton_two_heaps_lost_iff_xor_zero :
-  (List.range N).all (fun a => (List.range N).all (fun b =>
-    isLost a b == (xorN a b == 0))) := by decide
-
--- ── the same statement in its familiar form: lost exactly when the heaps are equal ──
-theorem bouton_lost_iff_heaps_equal :
-  (List.range N).all (fun a => (List.range N).all (fun b => isLost a b == (a == b))) := by decide
-
--- ── NON-VACUITY: the losing positions are exactly the diagonal, so there are N of them among N² — neither
---    everything nor nothing. (An earlier version fixed this count at 8 for an 8x8 board; when the board was
---    reduced the kernel proved the statement FALSE rather than letting a stale constant pass. Tied to N now.) ──
-theorem lost_positions_are_exactly_the_diagonal :
-  (((List.range N).flatMap (fun a => (List.range N).map (fun b => (a, b)))).filter
-    (fun p => isLost p.1 p.2)).length = N := by decide
-
--- ── SPRAGUE–GRUNDY for one heap: the Grundy value of a heap of size n is n ──
-def mex (s : List Nat) : Nat := ((List.range (s.length + 1)).filter (fun m => ! s.contains m)).headD 0
-def grundy1 : Nat → Nat → Nat
-  | 0, _ => 0
-  | Nat.succ f, n => mex ((List.range n).map (fun k => grundy1 f k))
-
-theorem grundy_of_a_single_heap_is_its_size :
-  (List.range N).all (fun n => grundy1 (n + 1) n == n) := by decide
-
--- ── and the two-heap Grundy value is the XOR of the parts ──
-theorem grundy_of_two_heaps_is_the_xor :
-  (List.range N).all (fun a => (List.range N).all (fun b =>
-    (xorN (grundy1 (a + 1) a) (grundy1 (b + 1) b)) == xorN a b)) := by decide
-
--- ── XOR's algebra, which is why the theorem takes the form it does ──
-theorem xor_is_its_own_inverse :
-  (List.range 16).all (fun a => (List.range 16).all (fun b => xorN (xorN a b) b == a)) := by decide
-theorem xor_is_commutative :
-  (List.range 16).all (fun a => (List.range 16).all (fun b => xorN a b == xorN b a)) := by decide
-theorem xor_zero_is_identity : (List.range 32).all (fun a => xorN a 0 == a) := by decide
-
--- ── THE NIM-SUM AS GF(2) VECTOR ADDITION, IN ONE PROPOSITION ─────────────────────────────────────────────
---    `nim_sum_is_xor_gf2` claims the nim-sum IS GF(2) vector addition: commutative, associative and
---    self-inverse. Associativity was the one property missing here — and the other three, though each
---    decided above, are decided SEPARATELY. A claim is carried by a theorem that decides all of it or by
---    none, and the ledger's supersededBy names exactly one key, so three quarters of a claim spread over
---    three theorems carries nothing. The conjunction is the claim; the conjuncts standing alone are its
---    parts, which is why both forms are here rather than one. Range 16 because the cube of it is walked.
-theorem the_nim_sum_is_a_gf2_vector_addition :
-  (List.range 16).all (fun a => (List.range 16).all (fun b => xorN a b == xorN b a)) ∧
-  (List.range 16).all (fun a => (List.range 16).all (fun b => (List.range 16).all (fun c =>
-    xorN (xorN a b) c == xorN a (xorN b c)))) ∧
-  (List.range 16).all (fun a => (List.range 16).all (fun b => xorN (xorN a b) b == a)) ∧
-  (List.range 16).all (fun a => xorN a 0 == a) := by decide
-
--- ── BOUTON WITH SEVEN HEAP SIZES, because "heaps ≤ 6" means seven of them and N = 6 gives six ─────────────
---    The ledger's row says "all heaps ≤ 6, exhaustive". `bouton_two_heaps_lost_iff_xor_zero` ranges over
---    List.range N with N = 6, which is 0…5 — one short. Carrying the row on it would have claimed a
---    position nobody decided, over an off-by-one nobody would ever see. The board is widened here instead,
---    in a theorem of its own, because N is baked into the statements already sealed above.
-set_option maxRecDepth 4000000 in
-theorem bouton_holds_at_every_heap_size_to_six :
-  (List.range 7).all (fun a => (List.range 7).all (fun b => isLost a b == (xorN a b == 0))) := by decide
-
-
--- ── XOR's algebra for every a, b, c — no bound ───────────────────────────────────────────────────────────────
--- xor_is_its_own_inverse and xor_is_commutative (a, b < 16), xor_zero_is_identity (a < 32) and
--- the_nim_sum_is_a_gf2_vector_addition (a, b, c < 16) were decided over a range; these prove them for every value.
--- The fold's fuel is a + b + 1, which always suffices: once it exceeds either argument, more fuel changes nothing,
--- so xorN reads the same at any sufficient fuel. Everything follows from one step — the low bit of a XOR is the sum
--- of the low bits mod 2, and the rest is twice the XOR of the halves — by induction. Bouton's theorem itself is
--- still decided over the N×N board above; a proof of it for every heap is a game-tree induction not done here.
-theorem the_xor_of_two_bits_is_their_sum_mod_two :
-    ∀ x y : Nat, (if x % 2 == y % 2 then 0 else 1) = (x + y) % 2 := by
-  intro x y
-  split
-  · rename_i h
-    have := beq_iff_eq.mp h
-    omega
-  · rename_i h
-    have : x % 2 ≠ y % 2 := fun e => h (beq_iff_eq.mpr e)
-    omega
-
-theorem xor_commutes_at_every_fuel : ∀ f a b : Nat, xorF f a b = xorF f b a := by
-  intro f
-  induction f with
-  | zero => intro a b; cases a <;> cases b <;> rfl
-  | succ f ih =>
-    intro a b
-    cases a with
-    | zero => cases b <;> rfl
-    | succ a =>
-      cases b with
-      | zero => rfl
-      | succ b =>
-        show (if (a + 1) % 2 == (b + 1) % 2 then 0 else 1) + 2 * xorF f ((a + 1) / 2) ((b + 1) / 2) =
-          (if (b + 1) % 2 == (a + 1) % 2 then 0 else 1) + 2 * xorF f ((b + 1) / 2) ((a + 1) / 2)
-        rw [ih ((a + 1) / 2), the_xor_of_two_bits_is_their_sum_mod_two, the_xor_of_two_bits_is_their_sum_mod_two]
-        omega
-
-theorem one_more_step_of_fuel_changes_nothing_once_it_exceeds_an_argument :
-    ∀ f a b : Nat, (a < f ∨ b < f) → xorF (f + 1) a b = xorF f a b := by
-  intro f
-  induction f with
-  | zero => intro a b h; rcases h with h | h <;> exact absurd h (Nat.not_lt_zero _)
-  | succ f ih =>
-    intro a b h
-    cases a with
-    | zero => cases b <;> rfl
-    | succ a =>
-      cases b with
-      | zero => rfl
-      | succ b =>
-        show (if (a + 1) % 2 == (b + 1) % 2 then 0 else 1) + 2 * xorF (f + 1) ((a + 1) / 2) ((b + 1) / 2) =
-          (if (a + 1) % 2 == (b + 1) % 2 then 0 else 1) + 2 * xorF f ((a + 1) / 2) ((b + 1) / 2)
-        have h' : (a + 1) / 2 < f ∨ (b + 1) / 2 < f := by
-          rcases h with h | h
-          · exact Or.inl (by omega)
-          · exact Or.inr (by omega)
-        rw [ih _ _ h']
-
-theorem more_fuel_changes_nothing_once_it_exceeds_an_argument :
-    ∀ k f a b : Nat, (a < f ∨ b < f) → xorF (f + k) a b = xorF f a b := by
-  intro k
-  induction k with
-  | zero => intro f a b _; rfl
-  | succ k ih =>
-    intro f a b h
-    have h' : a < f + k ∨ b < f + k := by
-      rcases h with h | h
-      · exact Or.inl (by omega)
-      · exact Or.inr (by omega)
-    rw [← Nat.add_assoc, one_more_step_of_fuel_changes_nothing_once_it_exceeds_an_argument _ _ _ h', ih f a b h]
-
-theorem xor_reads_the_same_at_every_sufficient_fuel :
-    ∀ g a b : Nat, (a < g ∨ b < g) → xorN a b = xorF g a b := by
-  intro g a b h
-  unfold xorN
-  have h1 : a < a + b + 1 ∨ b < a + b + 1 := Or.inl (by omega)
-  rw [← more_fuel_changes_nothing_once_it_exceeds_an_argument g (a + b + 1) a b h1,
-    ← more_fuel_changes_nothing_once_it_exceeds_an_argument (a + b + 1) g a b h, Nat.add_comm g]
-
-theorem a_number_xored_with_itself_is_zero_at_every_fuel : ∀ f b : Nat, xorF f b b = 0 := by
-  intro f
-  induction f with
-  | zero => intro b; cases b <;> rfl
-  | succ f ih =>
-    intro b
-    cases b with
-    | zero => rfl
-    | succ b =>
-      show (if (b + 1) % 2 == (b + 1) % 2 then 0 else 1) + 2 * xorF f ((b + 1) / 2) ((b + 1) / 2) = 0
-      rw [ih, the_xor_of_two_bits_is_their_sum_mod_two]
-      omega
-
-theorem xor_splits_off_its_lowest_bit :
-    ∀ g x c : Nat, 1 ≤ g → xorF (g + 1) x c = (x + c) % 2 + 2 * xorF g (x / 2) (c / 2) := by
-  intro g x c hg
-  obtain ⟨g', rfl⟩ : ∃ g', g = g' + 1 := ⟨g - 1, by omega⟩
-  cases x with
-  | zero =>
-    rw [show xorF (g' + 1 + 1) 0 c = c by cases c <;> rfl, Nat.zero_div,
-      show xorF (g' + 1) 0 (c / 2) = c / 2 by cases (c / 2) <;> rfl]
-    omega
-  | succ x =>
-    cases c with
-    | zero =>
-      rw [show xorF (g' + 1 + 1) (x + 1) 0 = x + 1 from rfl, Nat.zero_div,
-        show xorF (g' + 1) ((x + 1) / 2) 0 = (x + 1) / 2 by cases ((x + 1) / 2) <;> rfl]
-      omega
-    | succ c =>
-      show (if (x + 1) % 2 == (c + 1) % 2 then 0 else 1) + 2 * xorF (g' + 1) ((x + 1) / 2) ((c + 1) / 2) = _
-      rw [the_xor_of_two_bits_is_their_sum_mod_two]
-
-theorem xor_undoes_itself_when_the_fuel_suffices :
-    ∀ f a b g : Nat, (a < f ∨ b < f) → b < g → xorF g (xorF f a b) b = a := by
-  intro f
-  induction f with
-  | zero => intro a b g h; rcases h with h | h <;> exact absurd h (Nat.not_lt_zero _)
-  | succ f ih =>
-    intro a b g h hg
-    cases a with
-    | zero =>
-      rw [show xorF (f + 1) 0 b = b by cases b <;> rfl]
-      exact a_number_xored_with_itself_is_zero_at_every_fuel g b
-    | succ a =>
-      cases b with
-      | zero =>
-        obtain ⟨g', rfl⟩ : ∃ g', g = g' + 1 := ⟨g - 1, by omega⟩
-        rfl
-      | succ b =>
-        obtain ⟨g', rfl⟩ : ∃ g', g = g' + 1 := ⟨g - 1, by omega⟩
-        have hf : (a + 1) / 2 < f ∨ (b + 1) / 2 < f := by
-          rcases h with h | h
-          · exact Or.inl (by omega)
-          · exact Or.inr (by omega)
-        have ih' := ih ((a + 1) / 2) ((b + 1) / 2) g' hf (by omega)
-        rw [xor_splits_off_its_lowest_bit g' _ _ (by omega)]
-        rw [show xorF (f + 1) (a + 1) (b + 1) = (if (a + 1) % 2 == (b + 1) % 2 then 0 else 1) +
-          2 * xorF f ((a + 1) / 2) ((b + 1) / 2) from rfl, the_xor_of_two_bits_is_their_sum_mod_two]
-        generalize xorF f ((a + 1) / 2) ((b + 1) / 2) = y at ih' ⊢
-        have e : ((a + 1 + (b + 1)) % 2 + 2 * y) / 2 = y := by omega
-        rw [e, ih']
-        omega
-
-theorem xor_is_commutative_for_every_a_b : ∀ a b : Nat, xorN a b = xorN b a := by
-  intro a b
-  unfold xorN
-  rw [Nat.add_comm a b, xor_commutes_at_every_fuel]
-
-theorem xor_zero_is_identity_for_every_a : ∀ a : Nat, xorN a 0 = a := by
-  intro a
-  unfold xorN
-  cases a <;> rfl
-
-theorem xor_is_its_own_inverse_for_every_a_b : ∀ a b : Nat, xorN (xorN a b) b = a := by
-  intro a b
-  rw [xor_reads_the_same_at_every_sufficient_fuel (b + 1) (xorN a b) b (Or.inr (by omega))]
-  unfold xorN
-  exact xor_undoes_itself_when_the_fuel_suffices (a + b + 1) a b (b + 1) (Or.inl (by omega)) (by omega)
-theorem xor_is_the_sum_of_the_bits_plus_twice_the_xor_of_the_halves :
-    ∀ a b : Nat, xorN a b = (a + b) % 2 + 2 * xorN (a / 2) (b / 2) := by
-  intro a b
-  rw [xor_reads_the_same_at_every_sufficient_fuel (a + b + 1 + 1) a b (Or.inl (by omega)),
-    xor_splits_off_its_lowest_bit (a + b + 1) a b (by omega),
-    ← xor_reads_the_same_at_every_sufficient_fuel (a + b + 1) (a / 2) (b / 2) (Or.inl (by omega))]
-
-theorem xor_is_associative_below_every_bound :
-    ∀ n a b c : Nat, a + b + c ≤ n → xorN (xorN a b) c = xorN a (xorN b c) := by
-  intro n
-  induction n with
-  | zero =>
-    intro a b c h
-    have ha : a = 0 := by omega
-    have hb : b = 0 := by omega
-    have hc : c = 0 := by omega
-    subst ha hb hc
-    rfl
-  | succ n ih =>
-    intro a b c h
-    if hz : a + b + c = 0 then
-      have ha : a = 0 := by omega
-      have hb : b = 0 := by omega
-      have hc : c = 0 := by omega
-      subst ha hb hc
-      rfl
-    else
-      have ihh := ih (a / 2) (b / 2) (c / 2) (by omega)
-      have hab := xor_is_the_sum_of_the_bits_plus_twice_the_xor_of_the_halves a b
-      have hbc := xor_is_the_sum_of_the_bits_plus_twice_the_xor_of_the_halves b c
-      have hx2 : xorN a b / 2 = xorN (a / 2) (b / 2) := by omega
-      have hy2 : xorN b c / 2 = xorN (b / 2) (c / 2) := by omega
-      rw [xor_is_the_sum_of_the_bits_plus_twice_the_xor_of_the_halves (xorN a b) c,
-        xor_is_the_sum_of_the_bits_plus_twice_the_xor_of_the_halves a (xorN b c), hx2, hy2, ihh]
-      omega
-
-theorem xor_is_associative_for_every_a_b_c : ∀ a b c : Nat, xorN (xorN a b) c = xorN a (xorN b c) := by
-  intro a b c
-  exact xor_is_associative_below_every_bound (a + b + c) a b c (Nat.le_refl _)
-
-theorem the_nim_sum_is_a_gf2_vector_addition_for_every_a_b_c :
-    ∀ a b c : Nat, xorN a b = xorN b a ∧ xorN (xorN a b) c = xorN a (xorN b c) ∧
-      xorN (xorN a b) b = a ∧ xorN a 0 = a := by
-  intro a b c
-  exact ⟨xor_is_commutative_for_every_a_b a b, xor_is_associative_for_every_a_b_c a b c,
-    xor_is_its_own_inverse_for_every_a_b a b, xor_zero_is_identity_for_every_a a⟩
-
-
--- ── reflections, from the xor batch: each law beside its inverse (the 2×7 ↔ 1+6 wave) ──
--- REFLECTIONS
-theorem a_number_xored_with_itself_is_zero_for_every_a : ∀ a : Nat, xorN a a = 0 := by
-  intro a; unfold xorN; exact a_number_xored_with_itself_is_zero_at_every_fuel _ a
-
-theorem xor_is_zero_only_on_equal_arguments_for_every_a_b : ∀ a b : Nat, xorN a b = 0 ↔ a = b := by
-  intro a b
-  constructor
-  · intro h
-    have := xor_is_its_own_inverse_for_every_a_b a b
-    rw [h, xor_is_commutative_for_every_a_b, xor_zero_is_identity_for_every_a] at this
-    exact this.symm
-  · intro h; subst h; exact a_number_xored_with_itself_is_zero_for_every_a a
-
-theorem the_halves_and_the_low_bit_read_back_from_the_xor_for_every_a_b :
-    ∀ a b : Nat, xorN a b / 2 = xorN (a / 2) (b / 2) ∧ xorN a b % 2 = (a + b) % 2 := by
-  intro a b
-  have h := xor_is_the_sum_of_the_bits_plus_twice_the_xor_of_the_halves a b
-  constructor <;> omega
-
-end Nim