kernel-Int.dvd_gcd
- Kind
- kernel-term
- Status
- checked
Supports: ∀ {a b c : ℤ}, c ∣ a → c ∣ b → c ∣ ↑(a.gcd b)
test "$(cargo run -q -p axeyum-lean-kernel --example int_theorem_inventory -- dvd_gcd 2>/dev/null | /usr/bin/grep -cE '^theorem[[:space:]]+Int\.dvd_gcd[[:space:]]')" -ge 1 Evidence notes
`build_int_prelude` admits `Int.dvd_gcd` through the trusted `Kernel::add_declaration` gate, which re-checks the proof term against the stated type, so producing this row at all is a machine-checked proof. Already proved in `int_prelude/gcd.rs`'s `declare_dvd_gcd` (field `p.dvd_gcd`), predating this lane -- this is Mathlib's `Int.dvd_coe_gcd` (an Int-typed divisor `c`, cast around `a.gcd b` on the conclusion), not Mathlib's differently-typed `Int.dvd_gcd` (Nat-typed divisor; see F:ml430-int-dvd-gcd-aebc8aa1, closed separately as `Int.dvd_gcd_nat`). Flip only: statement match confirmed against `int_theorem_inventory`'s rendered type, no new code. `int_theorem_inventory`'s rendered type matches this fact's `formal.statement` (`∀ {a b c : ℤ}, c ∣ a → c ∣ b → c ∣ ↑(a.gcd b)`). `int_theorem_inventory` exits non-zero for a name that does not exist, and the `grep -c` count (tested `-ge 1`, not piped into `grep -q`) requires the admitted declaration to actually be printed; the anchor requires the exact name followed by whitespace, so it cannot match a longer sibling name sharing the same prefix. Verified both ways: the real name greps to a count `-ge 1`; grepping a fabricated name (`Int.dvd_gcd_bogus_xyz`) makes `int_theorem_inventory` fail closed (exit 1, "no Int declaration matches").