Identifier
F:ml430-nat-and-comm-7525d05a
Proof route
kernel-lean
External status
proved
Axiom footprint
Empty

Recorded description

The proposition declared as `Nat.and_comm` in the pinned Mathlib v4.30 source.

Formal statement
∀ (x y : ℕ), x &&& y = y &&& x

Dependencies

The graph shows direct ledger edges. Follow a node to open its artifact page.

Direct dependencies appear to the left. The current fact is in the center. Facts that depend directly on it appear to the right. Mathlib v4.30 source propositio Mathlib v4.30 source propositio n is <= n plus anything Current fact Mathlib v4.30 source propositio Mathlib v4.30 source propositio
3 direct dependencies 2 direct dependents

Evidence

kernel-Nat.land_comm

Kind
kernel-term
Status
checked

Supports: ∀ (x y : ℕ), x &&& y = y &&& x

Checker command
test "$(cargo run -q --release -p axeyum-lean-kernel --example nat_theorem_inventory -- land_comm 2>/dev/null | grep -Ec '^Nat\.land_comm[[:space:]]')" -ge 1
Evidence notes

`build_nat_prelude` admits `Nat.land_comm` through the trusted `Kernel::add_declaration` gate. `nat_theorem_inventory`'s rendered type matches this fact's `formal.statement` up to variable naming. Anchored with `^Nat\.land_comm[[:space:]]` so a sibling name cannot satisfy this row; `grep -Ec` consumes the pipe so the tested count decides the exit status. Run `--release` -- the debug build of this inventory example SIGABRTs on stack depth (unrelated to this proof). Mathlib's `&&&` (`HAnd`) for `Nat` is the SAME function as `Nat.land` -- `Init.Data.Nat.Bitwise.Lemmas`'s `Nat.and_*` family and Mathlib's own `Nat.land_*` family (already reconciled: F:ml430-nat-land-comm-7e6ad72e, F:ml430-nat-land-assoc-ad4775b8) state the identical proposition over that one function under two different pinned declaration names -- reconciling this `and_*` mirror to our `Nat.land_*` theorem is honest under the mirror-flip criterion in CLAUDE.md: Mathlib's `def` (`Nat.land`, reached via the `&&&` notation) is the same function ours proves the property about.

compute-Nat.land_comm

Kind
kernel-term
Status
checked

Supports: land(3, 6) = land(6, 3) = 2, a DISCRIMINATING instance (a symmetric pair like (5,5) cannot catch a transposed argument).

Checker command
cargo test -p axeyum-lean-kernel --lib nat_prelude::nat_prelude_tests::land_comm_applies_at_a_concrete_discriminating_instance

footprint-Nat.land_comm

Kind
exhaustive-enumeration
Status
checked

Supports: axiom_footprint: [] -- the Nat prelude's trusted surface is empty

Checker command
cargo run -q --release -p axeyum-lean-kernel --example nat_axiom_inventory -- --require-axiom-free nat
Evidence notes

`nat_axiom_inventory --require-axiom-free nat` enumerates the built Nat environment and exits non-zero unless it admits no Axiom, Opaque or Quotient declaration (measured: axiom=0 opaque=0 quotient=0). A theorem cannot depend on a trusted declaration the environment does not contain, so an empty trusted surface bounds `Nat.land_comm`'s footprint by [].

Provenance

{
  "date": "2026-08-30",
  "established_by": "lane draw9-first-theorems",
  "source": "statement-only extraction of `Nat.and_comm` from Mathlib v4.30.0; no proof value was exposed",
  "prior_art": [
    {
      "who": "the Mathlib contributors",
      "what": "the theorem declaration `Nat.and_comm`",
      "where": "mathlib4 commit c5ea00351c28e24afc9f0f84379aa41082b1188f (v4.30.0)",
      "year": 2026,
      "attribution": "the proposition was read from the pinned statement-only inventory; the proof term and tactic trace were not consulted"
    }
  ]
}