max is the least upper bound among its two arguments' common upper bounds

Identifier: F:creal-max-le
Proof route: kernel-lean
External status: proved
Axiom footprint: Empty

Recorded description

For constructed reals x0, x1, x2: if x0 <= x2 and x1 <= x2 then max(x0, x1) <= x2.

Formal statement

theorem CReal.max_le : ((x0 : CReal) -> ((x1 : CReal) -> ((x2 : CReal) -> ((x3 : CReal.le x0 x2) -> ((x4 : CReal.le x1 x2) -> CReal.le (CReal.max x0 x1) x2)))))

Dependencies

The graph shows direct ledger edges. Follow a node to open its artifact page.

1 direct dependencies 13 direct dependents Graph shows the first 8 on each side.

Evidence

kernel-CReal.max_le

Kind: kernel-term
Status: checked

Supports: CReal.max_le is admitted by the trusted kernel gate with the type recorded in formal.statement.

Checker command

cargo run -q --release -p axeyum-lean-kernel --example theorem_dependency_inventory -- CReal.max_le 2>/dev/null | grep -cE '^CReal\.max_le[[:space:]]'

Evidence notes

`build_creal_prelude` admits CReal.max_le through the trusted `Kernel::add_declaration` gate, which re-checks the proof term against the stated type, so a line in this tool's output for the exact name is a machine-checked proof having been admitted. `theorem_dependency_inventory` builds creal/complex/cpoint in one run; it exits non-zero for a named filter that matches nothing, and `grep -c` (never `-q`) independently asserts the exact tab-anchored line is present. `--release` is MANDATORY: building the constructed carriers recurses deep enough in a debug build to overflow the default thread stack (measured on this tree: release exits 0, debug SIGABRTs at 134).

footprint-CReal.max_le

Kind: exhaustive-enumeration
Status: checked

Supports: axiom_footprint: [] -- the creal prelude's trusted surface is empty, which bounds CReal.max_le

Checker command

cargo run -q --release -p axeyum-lean-kernel --example nat_axiom_inventory -- --include-constructed --require-axiom-free creal

Evidence notes

`nat_axiom_inventory --include-constructed --require-axiom-free creal` builds the creal environment as its own group and reports `creal: axiom=0 opaque=0 quotient=0 total_trusted=0` (re-measured on this tree), covering Axiom, Opaque AND Quotient, not just Declaration::Axiom -- this bounds CReal.max_le's individual footprint by []. `--include-constructed` is REQUIRED: without it the command exits 1 naming `creal` as known but not built this run rather than a silent pass. `--release` is MANDATORY for the same deep-recursion reason as `theorem_dependency_inventory` (measured on this tree: debug SIGABRTs at 134).

Provenance

{
  "date": "2026-08-25",
  "established_by": "axeyum-lean-kernel build_creal_prelude",
  "source": "theorem name and dependency edges from theorem_dependency_inventory (builds nat/int/rat/creal/complex/cpoint/string/characterization); canonical type and top-level binder count read via a standalone probe binary depending on axeyum-lean-kernel by path, calling only its public Kernel API (environment(), display_name(), render_lean()) -- no in-tree example prints Rat/CReal theorem types beyond a substring filter; crates/ source was not touched to produce this batch; the probe was built and run in the session scratchpad and deleted after use."
}