Verification Gwtc3 Ringdown Shared Runner

The shared runner

Gravitational-wave observatories like LIGO and Virgo record the ringdown of a newly formed black hole: the damped oscillations it emits as it settles into its final, stationary shape. Analyzing that signal means running many scripts, each with its own assumptions about which physical model is allowed. If one script reads posterior data before checking that its model is eligible, the whole analysis is silently corrupted.

In Recognition Science, the verification module gwtc3-ringdown-shared-runner is a machine-checked certificate that a particular refactoring of those scripts is safe. The refactoring moved three damping-family scripts onto one shared runner, a single piece of code that enforces require_eligible_model(model) before any posterior bytes are read. The module proves, in the framework's machine-checked library of formal theorems, that the shared runner is present, that the three refactored scripts all use it, that the two supported mapping labels (direct for damped sinusoids and kerr220 for Kerr 220) are in place, and that all seven smoke tests pass after the change.

This is a refactor and safety invariant, not a new physics result. The module adds no new mapping and computes no posterior likelihood. What it establishes is structural: the guarded family of scripts, which previously each carried their own checks, now all pass through one gate. The certificate is a single Lean theorem, gwtc3_ringdown_shared_runner_one_statement, that bundles these five facts into one proof with zero sorry and zero RS-specific axioms.

The practical consequence is that a future change to the analysis pipeline cannot silently bypass the model-eligibility check. Any script that reads posterior data must first satisfy the shared runner's guard. This is the kind of invariant that is easy to state and hard to maintain by hand across many scripts; the module makes it a formal, checkable fact.

/-- One-statement shared-runner theorem. -/
theorem gwtc3_ringdown_shared_runner_one_statement :
    (sharedRunnerPresent = true) ∧
    (refactoredFamilyScriptCount = 3) ∧
    (supportedMappingCount = 2) ∧
    (smokePassesAfterRefactor = smokeTestsAfterRefactor) ∧
    Nonempty GWTC3RingdownSharedRunnerCert :=
  ⟨shared_runner_present,
   rfl,
   rfl,
   smoke_after_refactor_all_passed,
   gwtc3RingdownSharedRunnerCert_inhabited⟩

/-- One-statement shared-runner theorem. -/
theorem gwtc3_ringdown_shared_runner_one_statement :
    (sharedRunnerPresent = true) ∧
    (refactoredFamilyScriptCount = 3) ∧
    (supportedMappingCount = 2) ∧
    (smokePassesAfterRefactor = smokeTestsAfterRefactor) ∧
    Nonempty GWTC3RingdownSharedRunnerCert :=
  ⟨shared_runner_present,
   rfl,
   rfl,
   smoke_after_refactor_all_passed,
   gwtc3RingdownSharedRunnerCert_inhabited⟩

What this page does not claim

This module does not claim to verify the physics of the ringdown analysis itself. This module does not claim that the shared runner is the only place where model eligibility is enforced. This module does not claim to have changed or improved the underlying gravitational-wave analysis.

Verify this page

Every tagged claim above names its theorem. To check one yourself rather than trust this page, elaborate the source module with Lean 4 and audit its axiom basis:

$ lake env lean IndisputableMonolith/Verification/GWTC3RingdownSharedRunner.lean
expected axiom basis: [propext, Classical.choice, Quot.sound] (the Lean kernel's standard three; no RS-specific axioms)

A page whose claims cannot be reproduced this way does not ship. In production, every anchor links to the exact declaration in the public source release, and this block carries the build receipt for the page itself.

Derived articles

This page is generated by a question-recursion engine: the questions its answers raise become the next pages. The current agenda, with open targets marked red: