kernel-Int.modEq_add_right
- Kind
- kernel-term
- Status
- checked
Supports: ∀ {n a b : ℤ} (c : ℤ), a ≡ b [ZMOD n] → a + c ≡ b + c [ZMOD n]
test "$(cargo run -q -p axeyum-lean-kernel --example int_theorem_inventory -- modEq_add_right 2>/dev/null | /usr/bin/grep -cE '^theorem[[:space:]]+Int\.modEq_add_right[[:space:]]')" -ge 1 Evidence notes
`build_int_prelude` admits `Int.modEq_add_right` through the trusted `Kernel::add_declaration` gate, which re-checks the proof term against the stated type, so producing this row at all is a machine-checked proof. Already proved in `int_prelude/modeq.rs`'s `declare_modeq_add_right` (field `p.mod_eq_add_right`, kernel-rendered name `Int.modEq_add_right` -- the field's own camelCase `child(kernel, "modEq_add_right")` spelling, not the Rust field's snake_case), predating this lane and already UNCONDITIONAL in the modulus (no `0 < n` hypothesis; see the declaration's own doc comment for why the earlier positivity-scoped proof was never load-bearing). Flip only: statement match confirmed against `int_theorem_inventory`'s rendered type, no new code. `int_theorem_inventory`'s rendered type matches this fact's `formal.statement` (`∀ {n a b : ℤ} (c : ℤ), a ≡ b [ZMOD n] → a + c ≡ b + c [ZMOD n]`). `int_theorem_inventory` exits non-zero for a name that does not exist, and the `grep -c` count (tested `-ge 1`, not piped into `grep -q`) requires the admitted declaration to actually be printed; the anchor requires the exact name followed by whitespace, so it cannot match a longer sibling name sharing the same prefix. Verified both ways: the real name greps to a count `-ge 1`; grepping a fabricated name (`Int.modEq_add_right_bogus_xyz`) makes `int_theorem_inventory` fail closed (exit 1, "no Int declaration matches").