How statement and proof provenance work
The first chip identifies the source of the statement or construction; the second identifies the source of its local proof or verification.
- Literature-sourced: the exact statement appears in a cited source; only wording and notation differ.
- AI-adapted: a semantically identical restatement of literature-sourced material, modulo indexing, notation, and boundary cases adopted by the library.
- AI-generated: a genuinely novel statement formulated by AI, with no source for the claim itself.
These labels describe origin, not correctness: citations and verification chips remain separate evidence.
False: the verifier can trust the final field value
Statement
False assertion. The Shamir protocol remains sound if its terminal step is modified so that the verifier accepts whenever the current claim equals a field value announced by the prover, instead of evaluating the arithmetized matrix at the current point: on every false closed prenex quantified Boolean formula the modified verifier would still accept with probability at most against every prover.
Facts & Assumptions
Given: The modified protocol, in which the round checks of the Shamir protocol are kept unchanged and the terminal comparison is replaced by the comparison for a value announced by the prover.
The rounds run for , the initial claim is , a round with node checks for a universal node, for an existential node, and with for a reduction, and then sets at the fresh challenge; the unmodified terminal step accepts exactly when , and this evaluation is the only place where the matrix arithmetization is used (The Shamir interactive protocol for TQBF).
Soundness of a protocol means that for every input outside the language and every prover strategy the acceptance probability is at most , so soundness at most fails as soon as one false instance is accepted with probability exceeding (Completeness and soundness of an interactive protocol).
A closed prenex quantified Boolean formula is true exactly when holds for or for (Quantified Boolean formulas and the language TQBF).
Arithmetization sends the leaf to and forms for , and it agrees with the Boolean value of the matrix at Boolean inputs (Arithmetization of Boolean formulas).
The unmodified protocol has soundness at most on false inputs, achieved through the terminal evaluation against (Total TQBF soundness by the first repaired claim).
Refutation
Let . By [A3] the formula is false: holds neither at nor at , so the existential quantification is false. Its matrix arithmetization is .
Consider the prover strategy that sends, in every round, the constant coefficient list , and announces at the modified terminal step; this is a legal message in every round, since the constant polynomial has degree .
We verify that every round test passes and that the claim remains . The claim starts at . For a universal node the test is ; for an existential node it is ; for a reduction with current value it is . In every case the test passes, and the update leaves for every challenge .
Consequently, after all rounds the claim is ; the modified verifier then compares it with the announced value and accepts. This holds for every random tape, because the strategy and the announcement do not depend on the challenges.
The modified verifier therefore accepts the false input with probability , which is greater than ; by [A2] the quality that fails here is exactly soundness, so the false assertion is refuted. This also shows why the terminal evaluation cannot be delegated to the prover: it is what forces the final claim to agree with a value computed from the input.
Depends on
Used by
Nothing in the library uses this result yet.
Dependency tree · two levels
16 results within two dependency steps of this one, each drawn at its shortest distance from it. An arrow runs from a result to what uses it, so the chart reads left to right and ends at this result, which carries a heavier outline. Every node is a link to that result. Click elsewhere on the chart to enlarge it.
Sources
- A. Shen, IP = PSPACE: Simplified Proof, JACM 39(4) 1992, pp. 878–880 (standard reference, not scraped)
- Arora and Barak, Computational Complexity: A Modern Approach, §8.5.3, author-hosted draft (standard reference, not scraped)