Full text not available for this paper
Summary of "Studying Proof Data with Proof Theory: The Case of AI-Generated Mathematics"
Summary (Overview)
- This paper presents a novel methodology for empirically analyzing large collections of formally verified mathematical proofs, treating proof-theoretic quantities as measurements of proofs rather than optimization targets.
- The author compiled 96 projects from OpenAI's AI-written mathematics library, three smaller AI corpora (sphere packing, Putnam 2025, IMO 2025 solutions), and two human research projects (Carleson, sphere eversion), all against the same version of mathlib (Lean's main library).
- Key findings: AI-generated proofs diverge significantly from human-written ones in structure—OpenAI's gesture mix is 5.8× farther from mathlib than random mathlib samples are from themselves, and AI proofs realize far less available logical compression (31% vs. 73% in mathlib).
- The paper introduces novel concepts: gestures (structure-preserving abstractions of proof steps), eigenproofs (directions of maximal divergence), and realized compression (the fraction of available sharing a proof actually exploits).
- Three main results survive all controls: (1) gesture-mix divergence, (2) excessive intermediate claims (40% of OpenAI proofs are larger with their cuts than without, vs. 13% in mathlib), and (3) low realized compression.
Introduction and Theoretical Foundation
Historical Motivation: Brahe, Kepler, and Newton
The author draws an extended analogy between the Scientific Revolution and the current state of AI-generated mathematics. Just as Tycho Brahe's meticulous astronomical observations provided the data that enabled Kepler's laws and Newton's synthesis, the author argues that large collections of formally verified proofs constitute "mathematical data" that can be turned into "mathematical evidence."
Key historical innovations cited:
- Kepler's five evidentiary innovations: using the true sun rather than the mean sun, bisection of eccentricity, the area rule, and the elliptical orbit model
- Newton's synthesis: showing that mathematical structures underlying celestial and terrestrial mechanics could be systematically related
"The transition to Newtonian mechanics thus depended on a methodological transformation in which observations were systematically collected, discrepancies were treated as grounds for revising existing models, and mathematical relationships were used to establish connections that the observations alone could not have revealed."
The Foundational Crisis
The paper reviews the 19th–20th century foundational crisis through the lens of two opposing attitudes:
- Kronecker's finitism: "God made the integers, all else is the work of man" — mathematics must be grounded in finite, constructive processes
- Cantor's freedom: "Mathematics is completely free in its development and is only bound to the self-evident consideration that its concepts are both free of contradictions..."
The author traces how these attitudes played out through Frege, Hilbert, Borel, Brouwer, and Heyting, culminating in Gentzen's proof theory.
Proof Theory: Natural Deduction and Cut Elimination
The paper presents Gentzen's sequent calculus (LJ) and the cut elimination theorem in detail. Key rules include:
Sequent form:
Cut rule:
Cut elimination theorem: Every derivable sequent in LJ has a cut-free derivation.
The rank of a formula is defined by:
Boolos's "Don't Eliminate Cut"
The paper invokes Boolos's (1984) argument that while cut elimination is possible in principle, the cut-free derivation can be unimaginably large. This motivates measuring whether cuts earn their place in actual proofs.
Methodology
Proofs as Programs (Curry–Howard)
Lean rests on the Curry–Howard correspondence: propositions are types, proofs are programs. The paper distinguishes between:
- Source text: what a person or machine types (tactics)
- Proof term: the kernel-checked program that the tactics elaborate
Gestures
Definition: A gesture is a proof term node with three transformations:
- All hypothesis names erased
- Every type reduced to its head connective (e.g., for equations, for implications)
- Each hypothesis labeled by usage count: 0 (never), 1 (once), or (more than once)
For example, every use of transitivity of equality becomes: Eq.trans (=, =) ⇒ =
Data Pipeline
- Text study: 5-gram interpolated Kneser–Ney language model trained on mathlib's source; measures "energy" in bits per token
- Compiled study: All corpora compiled with Lean 4.34.1 against mathlib at commit
d13f23b - Hashing pass: Eliminates cuts by substitution, uses hash-consing to compute exact sizes of cut-free forms without materializing them
Cut Measures
For each proof , three sizes are computed:
- : size as written
- : size of cut-free form
- : size with optimal layout (keeping only cuts that save space)
Key definitions (all in bits):
Cut compression:
Compressibility:
Layout redundancy:
These satisfy:
The five normal forms split into:
where is the gain from shared cuts, the cost of naming proofs used once, and the cost of never-used proofs.
Realized Compression
For cut-free proof size , define:
- : what the author's cuts achieve
- : an explicit layout naming any repeated subproof that pays for itself
- : full sharing with no naming cost
Realized share:
Control Measures
The paper implements several controls:
- Null distributions: random size-matched samples of mathlib against itself
- Automation controls: proofs with no tactic calls, certificates collapsed to single steps
- Layout controls: proofs in optimal layout (), proofs with no cuts
- Compilation controls: shared vs. module-by-module environments
Empirical Validation / Results
Text Energy
| Corpus | Bits per token | AUC vs. mathlib |
|---|---|---|
| mathlib (held-out) | 5.15 | — |
| Human research | 6.67 | — |
| OpenAI | 7.00 | 0.94 |
76% of the gap comes from identifiers (names); syntax adds only 0.28 bits.
Gesture Divergence
- OpenAI's gesture mix: 280 bits from mathlib
- Null (random mathlib samples): 49 bits (max 58 in 10 draws)
- Ratio: 5.8×
The first four eigenproofs:
| Eigenproof | Bits | mathlib >2 s.d. | OpenAI >2 s.d. | Human >2 s.d. |
|---|---|---|---|---|
| Integer arithmetic in equation chains | 23.6 | 0.7% | 6.3% | 0.5% |
| Rewriting under binders | 17.5 | 0.2% | 4.2% | 4.4% |
| Closing by evaluating numerals | 15.5 | 0.6% | 8.4% | 11.2% |
| Normalizing, then closing | 13.5 | 0.9% | 13.5% | 12.8% |
Basic Step Statistics (medians over projects)
| Measure | mathlib | OpenAI | Human | AUC vs. mathlib | AUC vs. human |
|---|---|---|---|---|---|
| Steps per theorem | 18.5 | 27.0 | 29.0 | 0.75 | 0.40 |
| Unused hypotheses | 8% | 12% | 14% | 0.64 | 0.41 |
| Intermediate claims per 100 steps | 0.36 | 1.20 | 0.64 | 0.86 | 0.79 |
| Unused claims | 0.0% | 0.9% | 1.0% | 0.74 | 0.50 |
Cut Statistics
| Measure | mathlib | Human | OpenAI | Sphere packing | Putnam | IMO |
|---|---|---|---|---|---|---|
| Proofs measured | 143,448 | 3,195 | 25,928 | 3,553 | 353 | 29 |
| Proofs with a cut | 17% | 33% | 47% | 54% | 73% | 69% |
| Cuts dead/linear/shared | 1/74/25% | 1/77/22% | 2/82/16% | 3/88/9% | 4/86/10% | 2/86/12% |
| χ (bits/proof) | 0.029 | 0.063 | 0.035 | 0.022 | 0.056 | 0.056 |
| ρ (bits/proof) | 0.015 | 0.028 | 0.071 | 0.188 | 0.174 | 0.159 |
| Proofs larger with cuts | 13% | 26% | 40% | 50% | 67% | 55% |
OpenAI's redundancy is higher than mathlib's (AUC 0.95, ) and higher than human research code's (AUC 0.85, ).
Realized Compression
| Measure | mathlib | Human | OpenAI | Sphere packing | Putnam | IMO |
|---|---|---|---|---|---|---|
| χ^author | 0.029 | 0.063 | 0.035 | 0.022 | 0.056 | 0.056 |
| χ^lb | 0.039 | 0.105 | 0.115 | 0.162 | 0.186 | 0.173 |
| χ^DAG | 0.100 | 0.223 | 0.290 | 0.424 | 0.418 | 0.437 |
| Realized share | 73% | 61% | 31% | 14% | 30% | 33% |
| Missed ≥1 bit | 0.1% | 0.3% | 1.1% | 3.2% | 3.4% | 3.4% |
Tooling Controls
With automation collapsed, OpenAI's divergence falls from 280 to 182 bits (3.7× null); with rewriting also collapsed: 191 bits (3.4×); on author's own steps only: 220 bits (3.9×).
On proofs calling no automation:
| Measure | All proofs AUC | No automation AUC |
|---|---|---|
| Steps per theorem | 0.87 | 0.73 |
| Unused hypotheses | 0.75 | 0.77 |
| Intermediate claims/100 steps | 0.94 | 0.95 |
| Redundancy ρ | 0.95 | 0.94 |
| Compressibility χ | 0.63 | 0.55 |
| κ | 0.12 | 0.07 |
| Realized share | 0.25 | 0.36 |
On no-automation proofs: mathlib realizes 86%, human research 82%, OpenAI 55%, sphere packing 33%.
Instrument Checks (Rank Ladder)
The paper verifies that created redexes can only arise from cuts of rank ≥ 1. Initial failures revealed two instrument bugs (syntactic rank reading, missed cuts behind substitutions). After fixes, the ladder holds for every proof with created redexes in every corpus (1,100 in mathlib).
Theoretical and Practical Implications
Theoretical Contributions
-
Proofs as measurable objects: The paper demonstrates that proof-theoretic quantities (cut structure, compression, redundancy) can serve as empirical measurements, not just optimization targets.
-
The gesture abstraction: Provides a way to compare proofs of entirely different theorems by stripping away content while preserving structure.
-
The tension between Cantor and Kronecker: The author frames the methodology as navigating between Cantorian freedom (abstracting away content to find common structure) and Kroneckerian constructivism (insisting on the actual construction, the kernel-checked proof term).
Practical Implications
-
For AI prover development: The low realized compression of AI proofs suggests concrete improvement targets—writing fewer dead intermediate claims and better exploiting repeated subproofs.
-
For formal verification practice: The paper highlights the importance of tracking compilation failures and provenance; 67% of IMO solutions failed to compile against the target mathlib version.
-
For the "Navier–Stokes" controversy: The author cites Bastounis et al. (2026) showing discrepancies between informal claims and formalizations, arguing that empirical proof analysis can help identify artifacts requiring closer inspection.
-
For mathematical archiving: The author envisions "a mathematical archive in which failures and corrections remain visible, so that accumulated proofs become a resource for discovering regularities."
Conclusion
The paper's central findings:
- AI-generated proofs have a measurably different structure from human proofs, even after controlling for tooling and layout
- AI proofs are redundant: 40% are larger with their intermediate claims than without them
- AI proofs realize less available compression: 31% vs. 73% in mathlib (55% vs. 86% without automation)
The author acknowledges limitations: mathlib is a polished library with a house style; the gesture study doesn't control for subject matter; the human research reference is small.
Future directions:
- Measuring abstraction (cut introduction) at scale, not just repetition
- Testing whether current categories "collapse under closer inspection"
- Building archives where failures remain visible
- Extending the methodology as corpora grow
The paper concludes with a Lakatosian perspective: "the proof is a moving object, altered by criticism, counterexample, and the introduction of distinctions that were invisible in the original formulation." The empirical study of proofs is "a rather peculiar science, whose data are themselves mathematical constructions and whose instruments must answer to mathematical theorems."
Related papers
- BenchChecker: Assessing the Credibility of Bug-Fixing Benchmarks for LLMs
BenchChecker detects benchmark contamination in bug-fixing LLMs with AUC around 0.9 using only text outputs, showing reported resolution rates are overestimated by over 20 percent on medium-difficulty tasks.
- SWE-Bench Pro V2: A Cleaner, Harder-to-Game Coding Benchmark
SWE-Bench Pro V2 repairs and hardens 642 coding tasks so frontier agents now solve 99.4%, exposing evaluation exploits while keeping a 51-task hard split that separates systems.
- HANDBOOK.md: A Benchmark for Long-Context Agentic Instruction Following (v3)
HANDBOOK.md shows frontier AI agents pass only 36.2% of long-context policy-governed tasks, failing to treat standing rules as persistent authority.