bit(false, n) = 2n

Identifier: F:nat-bit-false
Proof route: kernel-lean
External status: proved
Axiom footprint: Empty

Recorded description

Appending the bit `false` to the little end of `n` equals `2 * n`.

Formal statement

theorem Nat.bit_false : ((x0 : AxNat) -> Eq.{1} AxNat (AxNat.bit Bool.false x0) (AxNat.mul (AxNat.succ (AxNat.succ AxNat.zero)) x0))

Dependencies

The graph shows direct ledger edges. Follow a node to open its artifact page.

0 direct dependencies 1 direct dependents

Evidence

kernel-Nat.bit_false

Kind: kernel-term
Status: checked

Supports: bit(false, n) = 2*n

Checker command

test "$(cargo run -q -p axeyum-lean-kernel --example nat_theorem_inventory -- bit_false 2>/dev/null | grep -Ec '^Nat\.bit_false[[:space:]]')" -ge 1

Evidence notes

`build_nat_prelude` admits this theorem through the trusted `Kernel::add_declaration` gate, which re-checks the proof term against the stated type, so producing this row at all is a machine-checked proof. `Nat.bit b n` is stated `add (mul 2 n) (cond b 1 0)`; at `b = false`, `cond false 1 0` iota-reduces to `0`, and `Nat.add`'s own zero case (`add x zero ≡ x`) then collapses the sum to `mul 2 n`. The proof is `Eq.refl`; the kernel closes it by delta+iota alone, no case-split combinator and no induction. `nat_theorem_inventory` exits non-zero for a name that does not exist, and `grep -Ec` consumes the pipe and the count is tested, so the exit status depends on what the run found. `bit_false` is a substring of `bit_false_le_bit_true` too, which is why the pattern is anchored with `^Nat\.bit_false[[:space:]]` rather than a bare substring match -- verified 2026-08-28: the unanchored grep returns 2 rows for this query, the anchored one returns exactly 1.

compute-Nat.bit_false

Kind: kernel-term
Status: checked

Supports: the equation instantiates correctly and names the false branch, not the true one

Checker command

cargo test -p axeyum-lean-kernel --lib nat_prelude::nat_prelude_tests::bit_computes_and_its_boundary_theorems_apply

Evidence notes

`Kernel::def_eq` reduces `bit false n` at n in {0, 1, 6} to {0, 2, 12} directly (definition unfolding, no boundary theorem invoked), and separately confirms `Nat.bit_false`'s ADMITTED TYPE (via `Kernel::infer`) is exactly `Eq (bit false 6) (mul 2 6)` -- with a negative control substituting `bit true 6` for `bit false 6` on the left, which must NOT def_eq the inferred type, so this cannot pass on a statement about the wrong branch.

footprint-Nat.bit_false

Kind: exhaustive-enumeration
Status: checked

Supports: axiom_footprint: [] -- the Nat prelude's trusted surface is empty

Checker command

cargo run -q -p axeyum-lean-kernel --example nat_axiom_inventory -- --require-axiom-free nat

Evidence notes

`nat_axiom_inventory --require-axiom-free nat` enumerates the built Nat environment and exits non-zero unless it admits no Axiom, Opaque or Quotient declaration. Unlike `Nat.log`/`Nat.sqrt`/`Nat.clog`, `Nat.bit` needed no fuel device at all -- it is a plain non-recursive lambda over `Nat.add`/`Nat.mul`/`Bool.rec`, so nothing here was ever at risk of needing `WellFounded`/`Quot.sound`/`propext`; this command is what makes the axiom-freedom claim falsifiable rather than asserted.

Provenance

{
  "date": "2026-08-28",
  "established_by": "axeyum-lean-kernel build_nat_prelude, lane 207-nat-bitwise",
  "source": "one of two definitional boundary equations `declare_bit_all` (`crates/axeyum-lean-kernel/src/nat_prelude/bits.rs`) admits alongside the `Nat.bit` definition"
}