Repository navigation
Independently check #4554's root seeds and recovery: own seed vs exact Taylor terms and algebraic values, CRT, carries (no new κ) - #4558
Merged
Conversation
… vs exact Taylor terms and algebraic values, CRT, carries (no new κ) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This adds
research/pr4554-roots-recovery-check/, an independent check ofROOTS-RECOVERY.mdin Dugongue's #4554 (head4f46c6a9): the root-seed construction and the CRT and carry recovery. #4557 assumed the seed premise (coordinate error< 2^−p), so this completes my coverage of #4554's native multiplier. All checked claims are confirmed. No new κ.The spec is vendored (blob
5791526c, SHA256-pinned). Nothing is imported from #4554'sroot_seed.pyorrecover.py.Checks
E_k ≤ (8/k)E_(k−1) + 1/S; the worst is6.9/S, against thee^8/Scap. The sum is at most4096K/S.|A/S − π| ≤ 20(P+2)/Sand the angle bound hold against a separate AGM π.< 2^−p. 112 checks against exact algebraic values (D ∈ {1, 2, 3, 4, 6, 8, 12}, decided by integer square comparisons) and 36 checks against a decimal reference, withDup to2^40+87andp ≤ 128.2P+20bits. The observed peak is about 283 bits forp = 1, inside the stated 289-bit2^(2P+17)product bound.e < 11/4with(11/4)^8 < 4096.numerator·2^(p+1) < Sfor everyp ≤ 4096.K = 256, 384 and 512.Limitations:
p ≤ 4only.Head:
870b86cbd3840dfd0fcd1c8bdab96b699be54159. Base: canonical mainf626db5c.Credit: Dugongue (#4554); the method precedents the PR cites. Prepared by Ryanson Jonathan with substantial Claude Code (Claude Opus 5.5) assistance.
🤖 Generated with Claude Code