How statement and proof provenance work
The first chip identifies the source of the statement or construction; the second identifies the source of its local proof or verification.
- Literature-sourced: the exact statement appears in a cited source; only wording and notation differ.
- AI-adapted: a semantically identical restatement of literature-sourced material, modulo indexing, notation, and boundary cases adopted by the library.
- AI-generated: a genuinely novel statement formulated by AI, with no source for the claim itself.
These labels describe origin, not correctness: citations and verification chips remain separate evidence.
Outward rounded interval and ball arithmetic
1 · Prerequisites
None. This page is self-contained.
2 · Summary
This page develops finite dyadic endpoint formats and directed rounding before defining real intervals, complex rectangles, and midpoint-radius balls. Real interval and complex-rectangle arithmetic applies its displayed endpoint formulas and rounds the endpoints outward. Ball operations use conservative modulus bounds and round their output radii outward. Division across zero, branch-cut ambiguity, overflow, and exhausted budgets return explicit non-finite statuses.
Elementary exponential, logarithm, arctangent, trigonometric, square-root, and complex exponential/logarithm evaluations use local range reductions and explicit series or bisection remainders. A topological induction proves sound range propagation through finite expression DAGs. The page also proves a centered Taylor-model enclosure from a derivative interval and distinguishes a certified width result from an inconclusive finite-budget output.
Natural interval evaluation preserves inclusion while it can overestimate when a shared input appears more than once. The B page gives the subtraction dependency, division-at-zero, and near-periodic sine cases.
The earlier finite-precision direct-factorization page is retained as reading context. This page's item proofs use their displayed local directed-rounding, root, interval and series suppliers; they consume no NA-02 factorization, solve bound or round-to-nearest success model. Its retained page requirement does not turn that unrelated model into a mathematical premise here.
3 · Logical flowchart
4 · Definitions, theorems and proofs
Dedekind-complete ordered real field
Definition
A Dedekind-complete ordered field is a commutative field with identity , a total order compatible with addition and multiplication, and the least-upper-bound axiom: every nonempty subset of that is bounded above has a least upper bound in . Throughout this batch, all real variables, intervals, limits, derivatives and integrals are taken in such a field. The integers and rationals are interpreted in their usual embedded copies. For , define when and when .
Continuity and derivative on a real interval
Definition
For , continuity at means that for every there is such that whenever and . Differentiability at an interior point means that the two-sided limit
exists in the real field; differentiability on means this holds at every interior point. For higher derivatives, define recursively on the points where the derivative exists. The class on an open interval means that these derivatives through order exist and are continuous there.
Dyadic floating-point format and directed rounding
Definition
An exact dyadic rational is a number with integers . Fix integers and . Put and . The finite representable set consists of zero, both signs of every normal number with integers satisfying and , and both signs of every subnormal number with integer satisfying . The smallest positive subnormal is , the smallest positive normal is , and the largest finite magnitude is . The extended endpoint set also contains and as enclosure sentinels; they are not finite machine numbers.
For a real with , define as the
greatest member of not exceeding , and as
the least member of not less than . Define
. Set .
For nonzero in the
subnormal range, define the absolute-error bound ;
for in the normal range, define
. For , set
; for
, set
.
In either overflow case set and report
overflow, even when the selected directed endpoint is finite.
The rounding procedure reports finite, subnormal, or
overflow, so no relative-error assumption is implicit.
An exact rational intermediate may be converted by comparing integer numerators and denominators after clearing powers of two. A directed interval endpoint is the resulting greatest lower or least upper member of the extended endpoint set .
Dedekind completeness implies the Archimedean property
Statement
In a Dedekind-complete ordered field, the natural numbers are unbounded above.
Facts & Assumptions
Given: A field satisfying Dedekind-complete ordered real field.
Dedekind-complete ordered real field: every nonempty subset bounded above has a least upper bound, and the field order is compatible with addition.
Proof
Suppose the natural numbers were bounded above and let be their least upper bound from [A1]. Since , the number is not an upper bound; there is a natural number .
Then the natural number exceeds , contradicting that is an upper bound. Therefore the natural numbers are unbounded above.
Closed real intervals are compact by completeness
Statement
If in a Dedekind-complete ordered field, every relative open cover of has a finite subcover. Relative openness means openness in the subspace topology inherited from the real line.
Facts & Assumptions
Given: A complete ordered field and .
Dedekind-complete ordered real field: every nonempty bounded-above subset has a least upper bound.
Proof
Fix a relative open cover of . Let be the set of for which has a finite subcover. A member containing contains a relative neighborhood for some ; choosing shows . Thus is nonempty and bounded above by . By [A1], exists.
If , a cover member containing contains for some . Let . Since is the supremum, choose with . A finite cover of together with the member covering covers . This places in , contradicting that is an upper bound. Hence .
If , the required finite subcover already exists. Otherwise a cover member containing contains for some . Because , choose with . A finite cover of and that member cover all of .
Nonnegative real square roots exist uniquely
Statement
In a Dedekind-complete ordered field, every has a unique with .
Facts & Assumptions
Given: A field satisfying Dedekind-complete ordered real field and .
Dedekind-complete ordered real field: every nonempty bounded-above subset has a least upper bound; field operations preserve order.
Proof
If , is a root. If , let . It contains . If , then , so bounds above. By [A1], exists and .
Suppose . Put . Then , so . Thus , contradicting that is an upper bound. If , put . Since , , and . Every therefore satisfies , contradicting that is the least upper bound. Hence .
If , then unless , which is excluded by . Thus two nonnegative roots of cannot differ; is unique.
Exact dyadic bisection for square-root endpoints
Definition
Input: a nonnegative exact dyadic rational and integer request . Output: an exact dyadic lower and upper bound for ; no finite storage format is needed by this procedure.
- If , return .
- Otherwise determine the unique integer with from the exact dyadic representation, put and .
- Set integer indices and . While , put . If , replace by ; otherwise replace by .
- Return the exact dyadic pair . A caller that stores
these endpoints in a selected finite format must separately round the
lower endpoint down and the upper endpoint up, propagating the resulting
subnormaloroverflowstatus.
All comparisons and multiplications in the loop are exact integer/dyadic operations.
Real intervals, complex rectangles and ball enclosures
Definition
A real interval is a closed set with finite dyadic
endpoints . Its width is , midpoint is , and its
midpoint-radius form is with and . The empty
set is the status empty; the whole real line is entire. overflow,
domain-error, split-domain, and inconclusive are computation statuses,
not finite intervals.
A complex rectangle is for real intervals . Complex addition and multiplication use and . For , its complex modulus is , and for its reciprocal is . A complex ball is with dyadic complex center and dyadic . For any two represented sets , the inclusion order is iff .
The width of a complex rectangle with coordinate widths is its Euclidean diameter ; the width of a ball is its diameter . Width comparisons against a dyadic tolerance can be decided by exact rational comparisons after squaring the nonnegative quantities.
The range of a real or complex function on a set is . A finite expression DAG is a finite directed acyclic graph with input nodes, constant nodes, and operation nodes; constants are exact dyadics or are supplied with certified enclosing intervals. Sharing a node means the exact same intermediate value is reused.
Directed dyadic rounding encloses with explicit underflow and overflow bounds
Statement
For finite with , the directed roundings defined in Dyadic floating-point format and directed rounding satisfy and each endpoint error is at most the stated (with zero error when is representable). For the pair encloses ; for the pair encloses . Overflow has error bound and cannot be reported as a finite-error result.
Facts & Assumptions
Given: The finite dyadic set , subnormal quantum , exponent limits, and endpoint roundings from Dyadic floating-point format and directed rounding.
Dyadic floating-point format and directed rounding: adjacent subnormals are spaced by ; in the normal bin the representable spacing is ; directed rounding selects the adjacent representables bracketing the exact real number.
Proof
If , then , so and each endpoint error equals . If is representable, both directed roundings equal . Otherwise there are consecutive representables with : finiteness of and the definitions of greatest lower and least upper values give these neighbors. Hence .
If , both neighboring nonnegative representables are in the subnormal lattice with step , so and . If is normal, consecutive representables within the bin are spaced by . A bracket reaching the upper bin endpoint has no larger gap; in all cases each endpoint error is at most the stated, more conservative . Symmetry of gives the same bounds for negative .
For , , and for , ; the prescribed extended endpoints therefore bracket . The status and infinite absolute-error bound explicitly record that no finite error estimate is available outside the finite range.
Outward-rounded interval, rectangle and ball operations
Definition
For real intervals and , compute the displayed exact
endpoint formulas and round the lower endpoint down and the upper endpoint up
in the format of
Dyadic floating-point format and directed rounding. If either exact
endpoint overflows, return overflow with the outward extended endpoints;
never substitute a finite endpoint for an overflow sentinel. Addition is
, subtraction is , and multiplication is
. Division is defined only when
and is , with reciprocal endpoints computed as exact
rationals before outward rounding. Squaring is
when and
otherwise. Square root is defined only for
and is enclosed by applying
Exact dyadic bisection for square-root endpoints to the exact dyadic endpoints with
request , where is the selected format precision, and rounding
outward for storage.
If for division, return split-domain with the two subdomains
and , or entire when the caller does not
request subdivision. No finite quotient interval is returned in this case.
An invalid square-root domain returns domain-error or an explicitly
restricted nonnegative subdomain.
Complex-rectangle addition, subtraction and multiplication use , applying the real interval operations to each component. For a rectangle excluding , define its reciprocal by , computing the square hulls, their sum, and the component quotient endpoint formulas as exact rationals before rounding the final reciprocal components outward. The exact denominator interval is strictly positive because at least one coordinate interval excludes zero; do not round it before division, since underflow could introduce zero. Propagate any final endpoint overflow. Division multiplies by this reciprocal.
For a ball , let and
be its coordinate projection intervals. For a real
interval , let and let if
, otherwise . Put
and . Then
for every and for every such .
Define ball addition and subtraction as
, multiplication as
, and division as
only when . These
origin-centered output balls are conservative but inclusion-isotone. If
, return split-domain, entire, or inconclusive; if a radius
overlows, return overflow.
Well-definedness
Dyadic endpoints are rational, so every real arithmetic endpoint and every complex-division component before square root is rational. Reciprocals are formed only for nonzero rational endpoints. In a complex rectangle excluding zero, at least one coordinate interval omits zero; its exact squared interval has a strictly positive lower endpoint, so the unrounded does also. The prescribed exact rational component quotients therefore have nonzero denominators even when storage rounding would underflow that lower bound. For ball division, gives for every . Every endpoint overflow is reported explicitly and cannot produce a finite-result claim.
Real and complex modulus product and triangle inequalities
Statement
For real , and . For complex , , , and if then .
Facts & Assumptions
Given: The ordered field and modulus definitions in Dedekind-complete ordered real field and Real intervals, complex rectangles and ball enclosures.
Dedekind-complete ordered real field: real absolute value is for and for .
Real intervals, complex rectangles and ball enclosures: for , ; for , .
Nonnegative real square roots exist uniquely: the square root is the unique nonnegative root of each nonnegative input.
Proof
By [L1], and . Adding gives , hence . The product identity follows by considering the four sign choices for and in the piecewise definition [L1].
For and , expansion gives Both moduli are nonnegative by [L2], so uniqueness of nonnegative square roots [L3] gives . Also, if and , , then . If , then , a contradiction. Thus the square-root map is increasing on nonnegative inputs.
The identity Thus . The increasing property proved in step 1.2 gives , hence . Thus ; applying the same increasing property gives . By the reciprocal formula in [L2], . Step 1.2 gives . Here : otherwise forces because each square is nonnegative, contrary to . Hence , and another application of step 1.2 yields .
Dyadic square-root bisection gives outward endpoints
Statement
For every nonnegative exact dyadic input and , the exact dyadic pair returned by Exact dyadic bisection for square-root endpoints contains and has width when , where is the exponent selected by that algorithm. The bisection loop terminates in at most iterations. Storing the endpoints after outward rounding preserves enclosure, although storage rounding may increase the width. For fixed , both exact endpoint functions are nondecreasing in ; directed storage rounding preserves that monotonicity.
Facts & Assumptions
Given: The exact integer comparison loop in Exact dyadic bisection for square-root endpoints and directed endpoint rounding in Directed dyadic rounding encloses with explicit underflow and overflow bounds.
Exact dyadic bisection for square-root endpoints: for , , , , and the initial index range is .
Directed dyadic rounding encloses with explicit underflow and overflow bounds: downward and upward endpoint conversions bracket each exact endpoint.
Nonnegative real square roots exist uniquely: has a unique nonnegative square root, and is strictly increasing on .
Proof
For , the initial lower candidate is and its square is at most . The initial upper candidate is ; if its square is , and if its square is . Thus initially .
At each iteration, lies strictly between the integer endpoints. The exact comparison sets only when , preserving the left inequality; otherwise it sets , preserving the strict right inequality. The square function is strictly increasing on nonnegative reals by [L3], so the invariant implies . If the current integer gap is , the next gap is at most . Starting from , after at most iterations the positive integer gap is at most one, so it equals one and the loop stops. The returned width is then .
For the returned point interval is exact. For , the algorithm returns the exact dyadic pair from step 2.1. If a caller stores these endpoints in a finite format, outward rounding preserves both inequalities by [L2], so the stored result still contains .
On a fixed exponent bin, step 2.1 gives endpoints and , both nondecreasing in . At the transition from exponent to , is unchanged. At the transition from exponent to , the square-root threshold is and the grid spacing doubles from to . Just below the threshold the lower and upper endpoints are at most ; at or above it they are at least . Thus both exact endpoint functions are nondecreasing across each transition. At both are zero. The directed rounding maps are nondecreasing by their greatest-lower/least-upper definitions, so storage preserves this order.
Centered Taylor model with derivative-interval remainder
Definition
Let be a real function that is times continuously differentiable on an open interval containing the finite real interval . Here is an integer, and continuous differentiability means that the derivatives through order exist there and are continuous. Let be a dyadic point. Put
Supply dyadic intervals containing for and a dyadic interval containing . Put and . The centered Taylor-model enclosure is where products, powers, sums, and the final sum are evaluated by outward-rounded interval operations. The first term carries input variation through the polynomial; the symmetric second interval is the explicit derivative-based remainder. If a required coefficient or derivative enclosure is unavailable, or any operation or endpoint conversion returns a non-finite status, no finite Taylor-model certificate is returned.
Cauchy products of absolutely convergent series multiply their sums
Statement
Let and be absolutely convergent real series. Define
Then converges absolutely and has sum . Thus the product of the two series can be grouped by total degree without changing its sum.
Facts & Assumptions
Given: A Dedekind-complete ordered field and two absolutely convergent series.
Dedekind-complete ordered real field: every nonempty bounded-above set has a least upper bound.
Real and complex modulus product and triangle inequalities: and the triangle inequality holds.
Proof
Put and . For every , the finite triangle inequality and [L1] give These partial sums are increasing and bounded, so [F1] gives their supremum . For any , some partial sum exceeds , since otherwise would be an upper bound; monotonicity then puts every later partial sum between and . Hence converges absolutely.
Let , , and . The difference is the sum over pairs with . For each such pair, or , so by [L1] Absolute convergence makes both tails tend to zero. The convergent sequence is bounded: beyond some index , and the finitely many earlier values have a finite maximum absolute value. Therefore Together with , this gives . Thus the sum of the Cauchy product is , proving the claim.
Sum, product, quotient, and chain rules from difference quotients
Statement
Every function differentiable at is continuous at . If are real functions differentiable at , then and are differentiable there and
If , then is differentiable at and
If is differentiable at , is differentiable at , and the composition is defined near , then is differentiable at and . For every integer , .
Facts & Assumptions
Given: Differentiability by the difference-quotient definition in Continuity and derivative on a real interval and the real modulus rules Real and complex modulus product and triangle inequalities.
Continuity and derivative on a real interval: is the finite limit of as , .
Proof
If is differentiable at , write , where . Then is bounded for sufficiently small , so . Thus is continuous at .
The sum difference quotient is the sum of the two difference quotients, so it tends to . For the product, use By step 1.1, ; taking limits gives the product rule.
By step 1.1, is continuous at . Since , for sufficiently small . Algebra gives The denominator tends to and the numerator tends to , proving the quotient rule.
Put and . Step 1.1 gives , and [F1] gives . Differentiability of at means for , where ; set . Then The first term tends to ; the second tends to zero because and is bounded. This proves the chain rule, including increments with .
The case is the derivative of the identity function, whose quotient is exactly . Suppose . Since , the product rule in step 2.1 gives . Induction proves the power rule for all .
Elementary factorial and geometric series converge uniformly
Statement
For every real , the factorial series converges. If and , its tail after index satisfies Consequently the series defining , , and each of their formal derivative series converge absolutely and uniformly on every bounded interval . For , the geometric series and the odd power series , with their formal derivative series, converge absolutely and uniformly on .
Facts & Assumptions
Given: A Dedekind-complete ordered field, a real , and the Archimedean property derived from completeness.
Dedekind-complete ordered real field: every nonempty bounded-above set has a least upper bound.
Dedekind completeness implies the Archimedean property: the natural numbers are unbounded above.
Real and complex modulus product and triangle inequalities: and the real absolute value is nonnegative.
Proof
Let . For every integer , . If , its powers after the zeroth are zero. If , then for , and induction gives . By [L1], is unbounded, so . Thus the geometric partial sums converge to , with tail .
For the factorial series is . For , choose with by [L1]. If , then for , . Every finite tail after is therefore at most by step 1.1. The positive partial sums are increasing and bounded, so [F1] gives their supremum . For every , some partial sum exceeds , since otherwise would be an upper bound; monotonicity then puts all later partial sums between and . The finite-tail geometric bound passes to this limit and proves the stated estimate.
For , [L2] gives . Thus the exponential series is uniformly Cauchy by the tail bound in step 2.1. The sine and cosine series are subseries of this same nonnegative majorant, so their absolute tails are uniform as well. For the formal derivative series, the exponential terms are bounded by ; sine derivatives are bounded by , and nonconstant cosine derivatives by . Each is a subseries of a factorial series from step 2.1. The same tail comparison proves absolute and uniform convergence of all stated series.
For , the geometric series is uniformly absolutely convergent on by step 1.1. Its formal derivative terms are bounded by for . If , only the first derivative term is nonzero. If , choose with and an integer large enough that for , using [L1]. Then , so the derivative majorant has tails bounded by a constant times geometric tails from step 1.1. This proves absolute and uniform convergence of the geometric derivative series. The absolute terms of are bounded by and the derivative terms by . Their tails converge uniformly by step 1.1 applied to ; multiplication by the fixed factor or does not affect convergence. This proves the assertions for the odd power series and its formal derivative series.
Continuous functions on a closed interval attain their extrema
Statement
If is continuous and , then is bounded and attains both a maximum and a minimum on .
Facts & Assumptions
Given: A Dedekind-complete ordered field, , and continuity as in Continuity and derivative on a real interval.
Closed real intervals are compact by completeness: every relative open cover of a nondegenerate closed interval has a finite subcover.
Dedekind completeness implies the Archimedean property: the natural numbers are unbounded above.
Continuity and derivative on a real interval: continuity is the relative epsilon-delta condition on .
Dedekind-complete ordered real field: every nonempty bounded-above subset of the field has a least upper bound.
Real and complex modulus product and triangle inequalities: real absolute value satisfies .
Proof
If , the singleton range consists only of , so the conclusion holds. Suppose . For each natural , put . These sets cover by [L2]. Each is relatively open: at any , the margin and [L3] gives a neighborhood where is smaller than that margin; [L4] then gives . By [L1] a finite subcollection covers; taking its largest index shows is bounded. Consequently exists by [A1].
If is not attained, for every define . For each , ; by [L2] choose with , so the cover. Each is relatively open by [L3] and the positive margin . A finite subcover and its largest index imply for all , making an upper bound for . This contradicts that is the least upper bound. Thus the maximum is attained.
The function is continuous because . Applying steps 1.1 and 2.1 to , its attained maximum is the attained minimum of .
Power series may be differentiated term by term inside their radius
Statement
Let and let be real coefficients such that for every both and converge. Then is differentiable for , with .
Facts & Assumptions
Given: A field satisfying Dedekind-complete ordered real field, the continuity/differentiability definition Continuity and derivative on a real interval, and the real modulus rules Real and complex modulus product and triangle inequalities.
Continuity and derivative on a real interval: derivative means the finite two-sided difference-quotient limit.
Real and complex modulus product and triangle inequalities: and for real .
Proof
Fix with and choose with . For , the identity for and [L1] yield . Thus the tail of the difference-quotient series beyond degree is at most , uniformly for these . The tail of the proposed derivative series at has the same bound.
For fixed , the difference quotient of the polynomial tends to as by the binomial identity. Given , choose so both tails bounded above are below , then choose small enough that the finite polynomial quotient differs from its derivative by less than . The full difference quotient therefore differs from by less than , proving the derivative formula.
Outward-rounded operations are inclusion-isotone and enclose DAG evaluations
Statement
For real intervals, complex rectangles or complex balls on which an operation
is defined, enlarging either input enclosure cannot shrink the computed
enclosure: for binary , if and
, then the computed set enclosure of is contained
in that of whenever both are finite results and their domain
restrictions are preserved. The square-root enclosure is inclusion-isotone on
nonnegative intervals. Each finite ball operation in
Outward-rounded interval, rectangle and ball operations contains the exact ball
image. A split-domain, entire, domain-error, overflow, or
inconclusive status makes no finite claim. For a finite expression DAG
whose operation nodes all return finite enclosures, every exact node value
from every admissible input assignment belongs to its computed node
enclosure; in particular, the root enclosure contains the exact range. If any
node returns a non-finite status, no finite DAG enclosure is asserted.
Facts & Assumptions
Given: The interval, rectangle, ball and operation definitions in Outward-rounded interval, rectangle and ball operations and the directed rounding lemma Directed dyadic rounding encloses with explicit underflow and overflow bounds.
Outward-rounded interval, rectangle and ball operations: each finite real interval or rectangle operation uses its displayed endpoint formula and each ball operation uses its displayed origin-centered radius, followed by directed rounding; invalid domains return a non-finite status.
Directed dyadic rounding encloses with explicit underflow and overflow bounds: every finite exact endpoint lies between its downward and upward dyadic roundings.
Dyadic square-root bisection gives outward endpoints: every defined nonnegative square-root endpoint is bracketed by exact dyadic bisection, and its outward lower and upper endpoint maps are nondecreasing in the radicand.
Real and complex modulus product and triangle inequalities: complex modulus is submultiplicative with equality on products and satisfies the triangle inequality; real absolute value satisfies the triangle inequality.
Real intervals, complex rectangles and ball enclosures: for , ; an expression DAG is a finite directed acyclic graph with input nodes, constant nodes, and operation nodes whose constants carry certified enclosing intervals when needed.
Nonnegative real square roots exist uniquely: each nonnegative radicand has a unique nonnegative square root.
Dedekind-complete ordered real field: for and for , hence .
Proof
For real addition and subtraction, every exact pair value lies between the endpoint formulas. For multiplication, fixing one variable makes the product affine in the other, so a minimum or maximum over a rectangle is attained at a corner. Reciprocal is monotone on either interval avoiding zero, and square root is monotone on . Thus the exact ranges lie in the displayed pre-rounding intervals. Each computed lower endpoint is no greater than the exact lower endpoint and each upper endpoint is no smaller than the exact upper endpoint by [L2]; square-root endpoint bounds follow from [L3]. For complex rectangles, component addition and multiplication preserve the exact component formulas. If a rectangle excludes zero, at least one coordinate interval omits zero, so its exact squared interval has positive lower endpoint. The reciprocal rule retains the exact rational denominator and component quotient endpoints until final outward conversion, so underflow cannot introduce a zero divisor. Those converted components and subsequent multiplication enclose the reciprocal and quotient.
For a ball , the coordinate projection intervals in [L1] contain each real and imaginary component. By [L5]–[L6], ; the complex triangle inequality [L4] therefore gives . Also by [L7]. If , nonnegativity would imply , a contradiction. Hence ; the same argument gives . Every point of and has absolute value at least its corresponding value, so . For , [L4] gives and . If , then and . Upward radius rounding in [L1] preserves these bounds, proving soundness of all finite ball results.
Inclusion of balls implies inclusion of each coordinate projection interval. Therefore cannot decrease and cannot increase as an input ball enlarges. The ball addition, subtraction and multiplication radii in [L1] are consequently nondecreasing. If both divisor results are finite, the larger divisor ball has positive and the smaller one has at least as large an ; the quotient radius therefore cannot decrease when either ball is enlarged. For intervals and rectangles, the exact endpoint hulls and their downward/upward roundings preserve inclusion, so their finite extensions are isotone as well; for square root, [L3] gives monotonicity of the computed endpoint maps. If a domain restriction is lost, the operation returns its stated non-finite status.
In any nonempty finite acyclic graph, some node has no predecessor: otherwise, repeatedly following predecessors would revisit a node by finiteness and create a directed cycle. Remove such a node and repeat to construct a finite topological order. By [L1], input nodes contain their assigned values and constants have certified enclosures. Induct along this order: if each predecessor of an operation node contains its exact value, steps 1.1, 1.2, and 2.1 show that the operation enclosure contains the node's exact value. The induction covers every node, including the root, for every admissible assignment.
Continuous functions have an oriented Riemann integral
Statement
Let be continuous, with , in a Dedekind-complete ordered field. For a partition put The supremum of the lower sums equals the infimum of the upper sums. Define to be this common value, set , and set . This oriented Riemann integral is additive over intervals. Refining a partition increases its lower sum and decreases its upper sum, and any two partitions have a common refinement. It satisfies If and constants satisfy on , then ; reversing the endpoints reverses these inequalities. The integral is monotone in its integrand: if continuous on , then . If is continuous on an open interval and , then is defined for and .
Facts & Assumptions
Given: A Dedekind-complete ordered field, , and a function continuous on using Continuity and derivative on a real interval.
Dedekind-complete ordered real field: every nonempty subset bounded above has a least upper bound.
Continuity and derivative on a real interval: continuity on a closed interval is the relative epsilon-delta condition.
Closed real intervals are compact by completeness: every relative open cover of a nondegenerate closed interval has a finite subcover.
Continuous functions on a closed interval attain their extrema: a continuous function on each closed subinterval attains its maximum and minimum.
Dedekind completeness implies the Archimedean property: natural numbers are unbounded above, so equal partitions can have arbitrarily small mesh.
Real and complex modulus product and triangle inequalities: real absolute value satisfies the triangle inequality.
Proof
For a partition , the maxima and minima in its sums exist by [L2]. If refines , each old subinterval is divided into finitely many pieces; the minimum on each piece is at least the old minimum and the maximum is at most the old maximum. Since the piece lengths sum to the old length, .
Fix . For each , continuity [F2] gives such that when and . The relative neighborhoods cover . Choose a finite subcover with centers by [L1], and put . If , , and belongs to the neighborhood centered at , then both and are within of . By [L4], . Thus is uniformly continuous.
The range of has a minimum and maximum by [L2]. Thus all lower and upper sums lie between and , and the partition set is nonempty. Define and ; both exist by [F1], applying it to negatives for the infimum. For any partitions , their union is a common refinement, so step 1.1 gives . Taking the supremum and infimum yields .
Apply step 1.2 with tolerance and choose an equal partition with mesh smaller than its uniform-continuity radius, using [L3]. On each piece the oscillation is less than that tolerance, because both extrema are attained by [L2]. Hence . Since and , we have . This holds for every , so . Their common value defines the integral in the statement.
Fix with . Refining any partition by inserting cannot increase its upper sum by step 1.1, so the infimum of upper sums over all partitions equals the infimum over partitions containing . Each such upper sum is the sum of an upper sum on and one on . Every pair of partitions of these two intervals combines to a partition containing ; therefore the infimum of the combined sums is the sum of the two separate infima (choose each sum within of its infimum for the reverse inequality). The common upper/lower values from step 2.2 give . Endpoint cases follow from . Reversal is the definition, so the integral is oriented and additive.
The constant function with value has every upper and lower sum equal to , so its integral is . More generally, if constants satisfy on , every lower sum is at least and every upper sum is at most ; hence . If and are the attained minimum and maximum of , then , since every value lies between and . Applying the comparison with gives ; reversal gives the bound with for either orientation.
If continuous on , then on each partition interval the minimum of is at most the minimum of . Thus for every partition ; taking suprema of the lower sums gives .
Let be continuous on an open interval , fix , and put . The compact-segment results above define each integral. By additivity from step 3.1 and the constant-integral calculation in step 3.2, for sufficiently small, For any , continuity at gives such that whenever . If , step 3.1 and the comparison in step 3.2 place this quotient between and . If , reverse the integral by step 3.1, apply the same comparison on , and divide by the negative ; the inequalities again place the quotient between those same constants. The extrema of on each such segment exist by [L2], and the largest deviation from is attained at one of them. Hence its limit is , so .
Rolle's theorem from attained extrema
Statement
Let , and let be continuous on and differentiable on . If , then there is with .
Facts & Assumptions
Given: Continuity and differentiability as defined in Continuity and derivative on a real interval, and the extreme-value result Continuous functions on a closed interval attain their extrema.
Continuity and derivative on a real interval: is the finite two-sided difference-quotient limit at an interior point.
Continuous functions on a closed interval attain their extrema: a continuous function on attains both extrema.
Proof
Write . If is constant, choose ; then . Otherwise some value differs from . If it is greater than , [L2] gives an attained maximum greater than the endpoint values; if it is less, [L2] gives an attained minimum less than them. In either case an extremum occurs at an interior point .
At an interior local maximum, positive difference quotients are nonpositive and negative difference quotients are nonnegative. Since the common two-sided limit exists by [L1], it must be both nonpositive and nonnegative, hence zero. The inequalities reverse at a local minimum and again force . This proves the claim.
Real elementary functions and their domains
Definition
Every integral below is the oriented Riemann integral constructed from upper and lower Darboux sums in Continuous functions have an oriented Riemann integral. It exists for each displayed continuous integrand on the finite interval between its endpoints, is additive in intervals, reverses sign when the endpoints are reversed, is monotone in the integrand, and satisfies . These properties also give constant comparison bounds and the average-value difference quotient used to differentiate the integral-defined functions.
The exponential is for . The sine and cosine are the everywhere-convergent power series and . Define and set . The natural logarithm is defined on by .
The square root is the unique nonnegative real with for ; existence and uniqueness follow from Nonnegative real square roots exist uniquely. The tangent is on the set where .
For complex , the modulus is defined in Real intervals, complex rectangles and ball enclosures. The complex exponential is . The principal complex logarithm is on . For in this domain, define The excluded negative real axis is the remaining case ; zero is also excluded.
These are point functions. An interval extension must separately enclose their exact ranges, test the stated domains, and return a non-finite status when its finite budget cannot certify a reduction or endpoint.
Mean value theorem on a closed real interval
Statement
Let be continuous on and differentiable on , with . Then there is such that
Facts & Assumptions
Given: A field satisfying Dedekind-complete ordered real field, real endpoints , and continuous on and differentiable on as defined in Continuity and derivative on a real interval.
Continuity and derivative on a real interval: continuity is the relative epsilon-delta condition; differentiability is existence of the finite two-sided difference-quotient limit.
Rolle's theorem from attained extrema: a continuous function on differentiable on with equal endpoint values has an interior point with derivative zero.
Proof
Let and define . The function is continuous on and differentiable on by [F1], and . Applying [L1] gives with .
Differentiating the displayed affine expression gives . Thus ; multiplying by proves the identity.
The oriented Riemann integral is linear in continuous integrands
Statement
Let be continuous on , , and let . Then is continuous and The same identity holds for the oriented integral when , and for the zero-length interval both sides are zero.
Facts & Assumptions
Given: Continuous real functions on finite intervals and the Darboux construction in Continuous functions have an oriented Riemann integral.
Continuous functions have an oriented Riemann integral: the integral is the common supremum of lower sums and infimum of upper sums; a common refinement increases lower sums and decreases upper sums.
Proof
On each partition interval, the maximum of is at most the sum of the separate maxima, while its minimum is at least the sum of the separate minima. Thus and . Given , choose partitions whose upper sums for are within above their infima, and refine both to a common partition . By [L1], refinement cannot increase those upper sums, so . Similarly choose lower sums within below their suprema and refine to a common partition; [L1] gives . Since this holds for every , the integral is additive in the integrand.
If , maxima and minima of on every partition piece are times those of , so both Darboux sums scale by and their infimum/supremum do as well. If , every sum is zero. If , multiplication reverses order, giving and ; taking the infimum and supremum, which reverse under multiplication by negative , again gives . Combine this homogeneity with step 1.1 to obtain the displayed formula. For reversed endpoints use ; for use the zero-length definition.
The fundamental theorem of calculus and integration by parts
Statement
Let lie in an open interval , and let be continuously differentiable on . Then
If are continuously differentiable on , then Both identities hold for oriented endpoints.
Facts & Assumptions
Given: The difference-quotient definition of derivative, the local oriented integral of continuous functions, linearity of that integral, the product rule, and the closed-interval mean value theorem.
Continuity and derivative on a real interval: continuous differentiability on an open interval includes existence and continuity of the derivative.
Continuous functions have an oriented Riemann integral: for continuous , is defined and ; the integral is additive and oriented.
The oriented Riemann integral is linear in continuous integrands: the integral of a sum is the sum of the integrals.
Sum, product, quotient, and chain rules from difference quotients: differentiability implies continuity and .
Mean value theorem on a closed real interval: a continuous function on differentiable on satisfies the mean value theorem.
Proof
Assume first and let . By [L1], on an open interval containing , and . By [L3], is continuous there. Thus is continuous on , differentiable on , and . Applying [L4] gives , so . Rearranging proves the first identity.
For the first identity is ; reversing endpoints proves it for .
Assume . By [L3], . These terms are continuous: for continuous , and continuity of bounds near . Thus is continuously differentiable. Apply step 1.1 to and then [L2]: Rearranging gives the second identity. For both sides are zero, and for reverse endpoints using [L1].
Range-reduced exponential, logarithm and arctangent series have certified tails
Statement
For and integer , set and . Then , and the lower endpoint is positive. For , put and . Then For every integer and , the natural logarithm also satisfies . For , set . Then
Facts & Assumptions
Given: The point-function definitions in Real elementary functions and their domains, the closed-interval MVT Mean value theorem on a closed real interval, the derivative rules Sum, product, quotient, and chain rules from difference quotients, and power-series differentiation Power series may be differentiated term by term inside their radius.
Real elementary functions and their domains: is its absolutely convergent power series; for ; and . Its integral-defined functions have the average-value difference quotient from the local Darboux construction.
Mean value theorem on a closed real interval: if is continuous on , differentiable on , and , some satisfies .
Sum, product, quotient, and chain rules from difference quotients: differentiability implies continuity, and the sum, product, quotient, and composition rules hold for derivatives defined by difference quotients.
Power series may be differentiated term by term inside their radius: inside the radius of convergence, a power series with an absolutely convergent derivative series has that termwise derivative.
Real and complex modulus product and triangle inequalities: real absolute value is multiplicative and satisfies the triangle inequality.
Elementary factorial and geometric series converge uniformly: factorial series and their formal derivatives converge on bounded intervals; geometric and odd power series and their derivatives converge inside radius one.
Proof
For , consecutive absolute exponential terms have ratio . Their tail is bounded by the first omitted term times , giving . The defining power series lies between its partial sum plus or minus this absolute tail. For , the partial sum is at least by alternating-series grouping when and by positivity when ; also . Thus the lower bound is positive.
For , . Set . Its derivative series is absolutely convergent for by [L6], so [L4] gives . By [L3], has derivative . The integral definition [L1] has derivative , since its difference quotient is the average of the continuous integrand near ; also . For , apply [L2] to on ; its derivative is zero, so . Equality at holds by the integral definition. Hence on .
Fix and let for . From [L1], the integral difference quotient gives . The chain rule [L3] therefore gives . Applying [L2] on the positive segment between and any shows , so . Repeated use gives the identity for positive integer powers of ; applying it to gives , hence the same identity for negative integer powers and . Thus for every integer .
For , the power series has radius by [L6], and [L4] gives by the geometric series. The integral definition [L1] has the same derivative by the average-value difference quotient and the same value at . If , [L2] applied to on gives equality; if , apply [L2] on ; at both are zero. Thus on the stated interval.
For each , the absolute logarithm-series term is at most . Summing this geometric majorant gives . Removing the first terms of leaves exactly this bounded tail.
For every omitted term index , its magnitude is at most . Summing gives the displayed geometric tail, so plus or minus that tail encloses .
Taylor's Lagrange remainder follows from repeated Rolle steps
Statement
Let , let have continuous derivatives through order on an open interval containing the closed interval between and , and define . If , there is a point strictly between and such that
For , the remainder is zero.
Facts & Assumptions
Given: , points in an open interval on which is as defined in Continuity and derivative on a real interval, the power rule in Sum, product, quotient, and chain rules from difference quotients, and the closed-interval mean value theorem Mean value theorem on a closed real interval.
Mean value theorem on a closed real interval: a continuous function on differentiable on has a point with .
Sum, product, quotient, and chain rules from difference quotients: the chain rule holds and has derivative for each integer , hence has derivative .
Proof
Fix and set and on the interval between and . Then and for each , because the Taylor polynomial matches those derivatives at by [L2] and the last term has a zero of order .
By [L1] applied to on the interval with endpoints , there is a point strictly between them with . If , also , so [L1] applied to between and gives between them with . Inductively, for each the zeros and give a point between them with . The last point is the required ; when , take .
Since and the st derivative of is , the equation gives by [L2]. Substituting the definition of proves the formula. At , directly.
Taylor's theorem with an integral remainder
Statement
Let , let have continuous derivatives through order on an open interval containing the segment between and , and put
Then
If and between and , then
The formula and bound include and oriented endpoints.
Facts & Assumptions
Given: Derivatives defined by difference quotients, the oriented Riemann integral of continuous functions, and the stated derivative bound.
Continuity and derivative on a real interval: higher derivatives are defined recursively; means they exist and are continuous.
The fundamental theorem of calculus and integration by parts: for functions, and .
The oriented Riemann integral is linear in continuous integrands: integrals are homogeneous and additive in the integrand.
Real and complex modulus product and triangle inequalities: and the triangle inequality holds for real values.
Continuous functions have an oriented Riemann integral: the integral is monotone in the integrand on a forward interval.
Proof
For fixed , define for . For , [L1] gives . For , apply integration by parts [L1] to and . Since , , and , it gives Induction from yields . The oriented integration-by-parts identity makes the same recurrence valid when ; if , both sides are zero.
Let and . This is continuous. The triangle inequality in [L3], applied in both directions, gives , so is continuous too and both functions are integrable. By [L2] and [L4], the integral is monotone in the integrand, so The first inequality follows by integrating on the forward interval and using ; orientation does not change the absolute value. The last power integral is by [L1], using its polynomial antiderivative on the segment to either side of . Thus the bound is . Combining this with step 1.1 proves the result.
Trigonometric identities, Machin's formula and reduced Taylor tails
Statement
The power-series sine and cosine satisfy the addition identities and . For from Real elementary functions and their domains,
so is the inverse tangent with values in when . It is odd; for with , ; and for , . In particular and . Also,
For every real there is an integer and with ; the sine and cosine of are obtained from those of by the quarter-period identities. For every real with and every , truncating sine through degree and cosine through degree gives absolute tail bounds
and
Facts & Assumptions
Given: The power-series definitions in Real elementary functions and their domains, the arctangent tail in Range-reduced exponential, logarithm and arctangent series have certified tails, and the mean value theorem in Mean value theorem on a closed real interval.
Real elementary functions and their domains: sine and cosine are the factorial-denominator power series; ; and . The integral has the local Darboux constant-comparison and average-value derivative properties.
Range-reduced exponential, logarithm and arctangent series have certified tails: the arctangent series on has a remainder tending to zero with its truncation order.
Mean value theorem on a closed real interval: for a continuous differentiable on has with .
Sum, product, quotient, and chain rules from difference quotients: differentiability implies continuity, and sum, product, quotient and composition derivatives follow from the difference-quotient definition.
Power series may be differentiated term by term inside their radius: inside its radius of convergence, a power series with absolutely convergent derivative series has the termwise derivative.
Dedekind completeness implies the Archimedean property: the natural numbers are unbounded above.
Real and complex modulus product and triangle inequalities: real absolute value is multiplicative, satisfies the triangle inequality, and is nonnegative.
Elementary factorial and geometric series converge uniformly: the factorial series and their derivative series converge absolutely and uniformly on bounded intervals, and geometric tails have finite bounds.
Cauchy products of absolutely convergent series multiply their sums: the product of two absolutely convergent series equals their Cauchy product, grouped by total degree.
Proof
On each bounded square, the factorial series and their tails converge uniformly by [L8]. Their Cauchy products are absolutely convergent and can be grouped by total degree by [L9]. For sine, the coefficient of in vanishes when is even and otherwise equals , by the binomial theorem; the same coefficient appears in . For cosine, the coefficient in vanishes when is odd and otherwise equals , matching . Thus both addition identities hold.
On every bounded interval, [L8] gives absolute convergence of the factorial coefficient series and their derivative series. Applying [L5] to the two power series gives and . By the product rule in [L4], the derivative of is zero; [L3] and its value at zero give .
Write , and . From [L1], the difference quotient for is the average of the continuous integrand over the interval from to , so . By the preceding sine and cosine identity and the chain and product rules [L4], satisfies and . The quotient rule [L4] gives . By [L3], this quotient is constant on every interval between and , hence zero; therefore . Now by the preceding sine and cosine identity, and . Put . Since and , it follows that : otherwise would imply . The same holds at . For near zero, rationalization gives Thus is continuous, and the rationalized difference quotient tends to ; hence . The product rule [L4] gives , so [L3] implies is constant on every segment between and . Its value at zero is , hence . For and , the integrand satisfies . Constant comparison for the integral [L1] gives . Also , so has derivative By [L3], is constant on the positive segment between and ; . Therefore for every , and the positivity just proved shows . Similarly, the derivative of is zero and its value at zero is zero, so [L3] gives for every real . Since , these bounds yield for all real and . At , and step 1.2 gives both equal ; the addition identities yield and .
For with , define . Differentiating with the inverse-tangent derivative formula and the chain rule [L4], the derivative of the last term is which is also . Thus and ; [L3] gives . Set and . This identity gives , then , and also . Hence and .
Put . By [L6], choose an integer . Among the finite ordered list , take its greatest member ; then . At least one of is within of ; call it . Since on , integral comparison [L1] and step 2.1 give , hence . Therefore the residual satisfies . Repeated application of the addition identities in step 1.1 and the values proved in step 2.1 gives the quarter-period sign and swap formulas.
Since and lie in , [L2] gives rational intervals for and with the displayed tail widths. Multiplying those intervals by and and using the exact identity in step 3.1 gives a certified rational interval for ; increasing the truncation count decreases both tail bounds.
Fix any and . The sine terms after degree have first omitted magnitude and each later ratio is at most . Summing this geometric majorant gives . The cosine terms after degree have first omitted magnitude and ratio at most , giving .
Certified range evaluation for elementary real and complex functions
Definition
Input: a finite, well-formed, typed expression DAG with one or more designated
output nodes; finite real interval or complex rectangle assignments for its
input nodes; exact dyadic constants or constants supplied with certified
enclosing intervals/rectangles; a finite dyadic format
with and ; and an integer truncation index
. Input interval endpoints and supplied constant enclosures use this
format. All constants, including every Machin enclosure of , use the
same fixed and format throughout a call. Real nodes support input and
constant nodes and the operations . Complex nodes support input and constant
nodes and . Each operation has
homogeneous real or complex inputs of its stated type; no implicit conversion
between real and complex nodes is performed. Unsupported node types, arities,
or type combinations return inconclusive with the offending node.
Output: a finite interval/rectangle enclosure for every designated output
node, or one of empty, entire, domain-error, split-domain, overflow,
or inconclusive with the node and unresolved domain piece. If any supplied
input is empty, return empty. No value from a system libm routine is
treated as a certified endpoint. Each DAG node is evaluated once; shared nodes
reuse their interval/rectangle enclosure and do not preserve correlations
between distinct paths.
-
Check that node identifiers are unique, all references resolve, every designated output is a node, and the supported node types and arities above hold. Use each supplied input enclosure as its node value. For an exact real dyadic constant , use in the selected format. For an exact complex dyadic constant, do this to each coordinate. A finite subnormal endpoint remains a valid endpoint; if a coordinate conversion overflows, return
overflowwith that constant node. Use a supplied certified constant enclosure as given. Construct a topological order by repeatedly removing a node whose predecessors have already been removed, breaking ties by lexicographically smallest node identifier. If no such node exists before all nodes are ordered, returninconclusivewith a node in the cycle. Evaluate nodes in this order and store each finite enclosure for its successors. Arithmetic nodes use Outward-rounded interval, rectangle and ball operations; if an operation returns a non-finite status, propagate it immediately with its node and unresolved piece. For require and for require ; otherwise returndomain-errorrather than silently discarding points. -
For a real exponential node, set using the format in Dyadic floating-point format and directed rounding. Since , exact comparison gives . For its input interval , form the exact dyadic interval without storage rounding. Evaluate the degree- exponential polynomial and add the symmetric tail from Range-reduced exponential, logarithm and arctangent series have certified tails, using , by exact rational interval arithmetic. Round only the resulting interval endpoints outward, then square that interval times. If its lower endpoint is not positive or an endpoint overflows, return
inconclusiveoroverflowwith the node and input interval.
For a real logarithm node, first require . List all integers for which is nonempty; exact endpoint comparisons find this finite list because has positive finite endpoints. On each piece form and by exact rational endpoint formulas without storage rounding, so . Evaluate the logarithm polynomial and its tail determined by by exact rational interval arithmetic, round the result outward, and form by outward arithmetic. Compute the fixed enclosure for once by the same series and tail at , hence , and reuse it in every bin. If any piece cannot be evaluated finitely, propagate its status and that piece. Otherwise take the interval hull of all piece enclosures as the node enclosure.
-
Partition a real arctangent input at the fixed breakpoints into nonempty closed pieces, allowing shared endpoints. On pieces in , evaluate its alternating power series. For positive pieces in , use ; in , use ; for , use . Evaluate negative pieces by odd symmetry. Form each reduced interval by exact rational endpoint formulas and evaluate its polynomial and symmetric tail by exact rational interval arithmetic before outward conversion; every reduced argument lies in . Combine the converted enclosure with the fixed enclosure by outward arithmetic. Enclose using Machin's identity and the alternating series at and , forming rational partial sums and tail endpoints exactly before final outward conversion. If every piece is finite, take the interval hull of all piece enclosures. If any branch test or piece is unresolved, return its non-finite status with that piece and do not use a partial hull.
-
For each sine or cosine node, first compute one outward Machin interval for using the same and format, combining the rational series endpoints exactly before final outward conversion. If is non-finite or its lower endpoint is not positive, return
inconclusive. For finite input , put , , and , with the ceiling computed by exact rational comparisons. If the width of is at least , outward-round the exact endpoints and ; if either conversion overflows, returnoverflowwith the node and input interval, and otherwise return the resulting interval. Otherwise examine the finite candidate list for the canonical cells . For each candidate form the exact rational interval enclosure of its canonical cell. For , the exact left endpoint of cell is at least ; for , its exact right endpoint is at most . Thus no omitted exact cell can intersect . Include each candidate whose intersects ; exclude only candidates whose intersection is empty by exact comparison. Let be the exact interval hull of , without rounding these endpoints, and form the residual enclosure . Certify , evaluate the sine polynomial through degree or the cosine polynomial through degree , and add the corresponding explicit geometric tail from Trigonometric identities, Machin's formula and reduced Taylor tails by exact rational interval arithmetic. For the quarter-period map for a sine node is respectively , and for a cosine node it is respectively , where is the least nonnegative residue of modulo . For a negative sign, negate the interval and reverse its endpoints. Intersect each mapped enclosure with . Round the final endpoints outward and take the hull over every included cell. If no candidate is included, a cell cannot be certified in the reduced interval, or any candidate endpoint overflows, returninconclusiveoroverflowwith the cell; never omit that piece from a finite hull.
For tangent, form the same finite canonical-cell list even when the input width
meets the wide-input shortcut; do not use that shortcut. For each included cell
, form its reduced input interval as above and evaluate sine and
cosine on that cell. Divide their enclosures only when the cosine enclosure
excludes zero. Otherwise, for odd , form the exact dyadic pole enclosure
. If is contained in the cell's input intersection, then
lies in that cell and is a cosine zero, so return split-domain with
the cell. If the cosine enclosure contains zero but this pole test does not
certify a zero, return inconclusive with the cell. Take the interval hull of
tangent enclosures only when every piece is finite.
- For complex exponential on , evaluate real , ,
and and combine their enclosures by rectangle operations. For
principal , first require a rectangle excluding zero and
every point of the negative real branch cut; otherwise return
domain-error. Compute an outward Machin interval for using this call's and format; if it is non-finite or its lower endpoint is not positive, returninconclusive. Split each coordinate interval into its nonempty strictly negative and strictly positive portions, plus the singleton when it contains zero. Use the closures of the strictly signed portions as interval enclosures; form their Cartesian products for the quadrant pieces, and handle products with an axis singleton separately. Omit empty pieces. These finitely many pieces cover the rectangle, with quadrant closures allowed to overlap their axis pieces. On a quadrant where the denominator interval excludes zero, use Write this call's fixed interval as and form the exact dyadic sector intervals For every ratio-based quadrant piece, obtain its finite real arctangent enclosure by the real rules above; propagate any non-finite result. Form the full argument interval in the displayed quadrant formula by exact rational endpoint arithmetic, using this same for each occurrence of . Before final outward conversion or hull formation, replace by , where is that piece's quadrant. Compute the intersection by exact endpoint maxima and minima. If it is empty, returninconclusivewith the piece and statusempty-argument-intersection; do not omit the piece. If the denominator interval has a zero endpoint, use instead of a ratio formula.
For an interval produced by either branch, apply the same final
conversion in the selected
format. Perform this conversion after intersection for a ratio branch and
after selecting for a coarse branch. Finite subnormal endpoints are
accepted; an overflow returns overflow with the piece. On the positive
imaginary axis use , on the negative imaginary axis use
, and on the positive real axis use . The initial domain
check excludes the origin and negative real axis, so these are all remaining
axis cases.
On each piece enclose using the real operations and evaluator, and combine it with the converted argument interval into a rectangle. If every piece is finite, take the coordinatewise hull of all piece rectangles. If any piece, conversion or branch is unresolved, return its status and piece without forming a partial hull.
Centered Taylor models with derivative intervals enclose the function range
Statement
Under the hypotheses in Centered Taylor model with derivative-interval remainder, every satisfies . Whenever all operations and endpoint conversions in the displayed outward-rounded Taylor-model evaluation return finite intervals, . For , the exact set sum always satisfies , and its finite outward evaluation encloses this sum. A non-finite evaluation status asserts no finite Taylor-model certificate.
Facts & Assumptions
Given: The Taylor model in Centered Taylor model with derivative-interval remainder, Taylor's integral remainder formula in Taylor's theorem with an integral remainder, and the outward interval operations in Outward-rounded operations are inclusion-isotone and enclose DAG evaluations.
Centered Taylor model with derivative-interval remainder: each contains , contains , bounds the absolute values of , and bounds for every .
Taylor's theorem with an integral remainder: each Taylor remainder is an integral and has absolute value at most when on the segment.
Outward-rounded operations are inclusion-isotone and enclose DAG evaluations: the computed polynomial range and interval sum enclose their exact counterparts provided every operation node returns a finite enclosure; a non-finite status asserts no finite DAG enclosure.
Proof
Fix . If , the polynomial already equals and the remainder is zero. Otherwise the segment from to lies in , so [L1] places there in and gives ; also . The Taylor integral remainder bound [L2] is therefore at most .
Step 1.1 proves the stated analytic bound independently of storage. Suppose now that every operation and endpoint conversion in the Taylor-model evaluation returns a finite interval. For every , [L1] puts each exact coefficient of inside the corresponding , so the polynomial interval evaluation contains by [L3]. The remainder from step 1.1 lies in the exact symmetric interval, whose outward endpoint conversion contains it. Thus lies in the exact sum, and outward evaluation preserves that inclusion by [L3]. Since was arbitrary, the whole range is enclosed. For , , so the exact set-sum inclusion follows from step 1.1 even if its machine evaluation fails. On a non-finite status [L3] supplies no finite enclosure.
Finite-budget validated range evaluation
Definition
Input: a finite, well-formed, typed expression DAG with exactly one designated output node, an interval/rectangle assignment box for its input nodes, a dyadic requested width , finite-format parameters with and , series truncation index , and integer total box-split budget . The supported node types, input assignments, exact dyadic constants and supplied certified constant enclosures satisfy the admissibility conditions of Certified range evaluation for elementary real and complex functions. In particular, every input endpoint and every endpoint of a supplied constant enclosure belongs to the selected finite representable set . Truth of a supplied constant's certified inclusion is a mathematical input promise, not something inferred from its endpoints. Exact dyadic constants need not themselves be representable; their conversion and any overflow remain the evaluator's task.
Use the following exact membership procedure for each supplied finite
endpoint and for every proposed split midpoint. Put
. Compare the value with zero, then enumerate both
signs of for , and both signs of
for and
, stopping at a match. If the finite enumeration
ends without a match, report not-in-format. Every comparison is an exact
dyadic equality test. This is the representable set of
Dyadic floating-point format and directed rounding, including zero
and subnormals. Before initializing the queue, check the integer/format
conditions and the finite input and supplied-constant endpoint memberships;
malformed data or a failed membership returns inconclusive with the
identifying input status, without an evaluator call. An empty input returns
empty as in the elementary evaluator.
Keep the DAG, designated output, constant enclosures, format and fixed.
Set a shared counter and a queue containing . Process the queue in
first-in, first-out order. For each box , evaluate the DAG by
Certified range evaluation for elementary real and complex functions with the same format and ,
requesting only the designated output node's enclosure. The hull of no
completed leaves is recorded as empty.
- If evaluation returns a non-finite status, return that status and the exact unresolved box ; it is not a tolerance certificate.
- If it returns a finite enclosure with width at most , save as a completed leaf enclosure.
- If it returns a finite enclosure wider than and , return
inconclusivewith the completed-leaf hull, , and the unmet width test. - If it returns a finite enclosure wider than and , select
a widest nondegenerate input coordinate (breaking ties by the first
coordinate in the input order). If there is no such coordinate, return
inconclusivewith the completed-leaf hull, the unresolved parent , the remaining queue, and statusno-splittable-coordinatewith the unmet width test. Otherwise compute its midpoint by exact dyadic arithmetic and apply the membership procedure above in the actual selected format. If it reportsnot-in-format, returninconclusivewith the completed-leaf hull, the unresolved parent , the remaining queue, and statusmidpoint-not-in-format, identifying the coordinate and exact midpoint. Do not enqueue either child or call the evaluator on it in this case. If , split that coordinate into the two closed halves at , decrement by one, and append both children to the queue.
When the queue is empty, take the hull of all completed leaf enclosures.
Return certified(J,X) only if ;
otherwise return inconclusive(J,X) and state that the global width test
failed.
Certified real elementary-function evaluations enclose their ranges
Statement
Every finite interval returned for a requested real output node by Certified range evaluation for elementary real and complex functions on an input interval in the domain of , , , , , , or contains the exact range of the corresponding function on that interval. For the same typed DAG and designated real output node, if all input intervals are nested coordinatewise, all constant enclosures are fixed, and both calls use the same finite dyadic format and truncation index , then, whenever both calls return finite enclosures, the canonical branch-cell and fixed-term construction makes the smaller domain's computed enclosure a subset of the larger one's. An unresolved fixed branch, pole, invalid domain or overflow returns its stated non-finite status and carries no finite success claim.
Facts & Assumptions
Given: The finite algorithm in Certified range evaluation for elementary real and complex functions, exact arithmetic enclosure in Outward-rounded operations are inclusion-isotone and enclose DAG evaluations, the series tails in Range-reduced exponential, logarithm and arctangent series have certified tails, trigonometric range reduction in Trigonometric identities, Machin's formula and reduced Taylor tails, and monotonicity deductions from Mean value theorem on a closed real interval.
Certified range evaluation for elementary real and complex functions: every finite elementary branch uses interval evaluation of exact rational series coefficients, a fixed truncation count, a certified remainder and a canonical finite partition; unresolved branches return inconclusive.
Outward-rounded operations are inclusion-isotone and enclose DAG evaluations: every finite arithmetic interval node encloses its exact node range and is inclusion-isotone.
Range-reduced exponential, logarithm and arctangent series have certified tails: the truncated exp, log and arctan series enclose the point values with the displayed tails.
Trigonometric identities, Machin's formula and reduced Taylor tails: quarter-turn reduction is exact, , and the reduced sine/cosine Taylor tails are enclosed by .
Trigonometric identities, Machin's formula and reduced Taylor tails: arctangent is odd, for , and for , .
Cauchy products of absolutely convergent series multiply their sums: finite repeated products of absolutely convergent power series may be grouped by total degree, and their coefficients are the corresponding finite convolution sums.
Proof
For an exponential input interval, the fixed scale gives the exact interval before any storage rounding. The point bound [L3] with replaced by the interval's largest absolute endpoint gives a uniform tail enclosure. Exact rational interval evaluation of the polynomial and tail encloses every point; final outward conversion preserves that enclosure by [L2]. The tail radius increases with the largest absolute input, and each repeated interval square preserves inclusion by [L2]. To justify the scaling identity, put . Repeated applications of [L6] to the absolutely convergent series for show that the coefficient of in is where the equality is the multinomial theorem. Thus ; set . Each interval squaring preserves the resulting enclosure by [L2].
The outward cell interval built from contains each exact canonical cell, since ; thus its intersection hull contains every input point assigned to that cell, and contains the exact residual . The algorithm certifies this residual inside the Taylor range. By [L4], exact sine and cosine values are the stated signed swaps of and . The polynomial interval evaluation contains each truncated value by [L2], and adding the symmetric tail interval from [L4] contains the omitted remainder. Taking the hull over all intersected cells therefore contains the full range. If the input width is at least , it is at least , so [L4] gives the safe range . The algorithm rounds the endpoints of this exact interval outward; if the result is finite, [L2] ensures that it contains . For nested inputs, each fixed canonical cell intersection enlarges and its fixed-term interval evaluation is isotone by [L2]; the hull is therefore nested on the reduced branch. Exact rational interval polynomial and tail operations are inclusion-isotone, and the final directed endpoint conversions are nondecreasing. Intersecting with preserves containment and nesting. A narrower cell result has endpoints with and ; monotonicity gives and , so the outward-rounded wide-input result contains it.
On each positive logarithm bin, every maps to . The interval series and uniform tail from [L3] contain ; [L3] also proves the exact logarithm scaling identity used by the algorithm. Each interval transform and sum preserves inclusion by [L2]. The fixed bin partition ensures that enlarging the input only enlarges the intersection with each bin, so its interval-series enclosure and the final hull also enlarge. The arctangent transformations follow from [L5]; on each fixed branch the rational interval maps and fixed series are isotone, and the tail radius is nondecreasing in the largest absolute transformed endpoint.
Tangent is defined only where cosine is nonzero. On a piece whose cosine enclosure excludes zero, division is sound by [L2] and contains every . If cosine may vanish, the algorithm returns a split or non-finite status, so no unsound finite value is reported. For a square-root node, the nonnegative-domain guard in [L1] permits the square-root enclosure in [L2], which contains every exact root and preserves inclusion of nonnegative intervals.
Evaluate the finite expression DAG in topological order. Every primitive node encloses its exact value by steps 1.1, 2.1, 1.2, and 2.2; induction over the finite node order then encloses every exact intermediate and every requested output range. Each primitive's canonical partition and fixed truncation are nested on common finite branches, so the same induction preserves inclusion for nested inputs evaluated with the same format and truncation index.
Certified complex exponential and principal logarithm enclose their ranges
Statement
For any finite complex rectangle on which the principal branch is defined, every finite output for a requested complex node of Certified range evaluation for elementary real and complex functions for or contains the exact image. For the same typed DAG and designated complex output node, nested input rectangles on the same admissible branch, fixed constant enclosures, and the same finite dyadic format and truncation index give nested finite enclosures whenever both calls return finite results. Rectangles meeting zero, the negative real branch cut, or an unresolved quadrant return the declared domain or inconclusive status.
Facts & Assumptions
Given: The complex operations in Outward-rounded interval, rectangle and ball operations, the branch domains in Real elementary functions and their domains, the real evaluator in Certified real elementary-function evaluations enclose their ranges, and arithmetic soundness in Outward-rounded operations are inclusion-isotone and enclose DAG evaluations.
Real elementary functions and their domains: for , and off the nonpositive real axis, with given by the listed quadrant and axis formulas; the defining series make sine odd and cosine even.
Certified real elementary-function evaluations enclose their ranges: finite real enclosures of are sound and nested on their canonical finite branches.
Outward-rounded operations are inclusion-isotone and enclose DAG evaluations: finite rectangle operations enclose exact complex arithmetic and preserve inclusion.
Trigonometric identities, Machin's formula and reduced Taylor tails: for , and for , , , and ; also , , , and ; moreover , , and sine is odd while cosine is even.
Proof
Let be a rectangle. By [L1], its exact exponential has real and imaginary parts and . The real enclosures in [L2] contain these three ranges, and rectangle multiplication and addition preserve their exact component images by [L3]. Therefore the resulting rectangle contains .
For a principal-log branch, subdivide into rectangles of fixed signs of the real and imaginary coordinates, with separate pieces on the coordinate axes. In a nonzero quadrant, is enclosed by [L2]–[L3], hence is enclosed by [L2]. The quotient is enclosed by [L3] and arctangent by [L2]. In quadrant I use ; in quadrant IV use ; in quadrant II use ; and in quadrant III use . From [L4] and , positivity of gives and for . Substituting in quadrant I gives . In quadrant IV, evenness/oddness from [L1] gives the same coordinate identity with . The addition identities shift the angle in quadrant II by , reversing only the cosine sign, and in quadrant III by , reversing both signs; substitution of the positive coordinate ratios again gives . The range of in [L4] places these angles in the respective subintervals of , so they are the principal arguments. On the admissible closure of quadrant I the argument lies in ; on quadrants II, III and IV it lies respectively in , and . Since and , these sets are contained respectively in the algorithm's fixed sectors . A finite raw ratio-based argument interval contains each exact argument by [L2]–[L3], so intersecting it with its sector retains every exact argument. Each nonempty quadrant piece has an actual point and hence an argument in that intersection; an empty intersection cannot be used for a success claim and is explicitly rejected. When the denominator reaches zero, the sector alone is a sound enclosure. The common final outward conversion preserves these containments; an overflow gives no finite claim. On the positive real axis the exact argument is zero, and on the positive and negative imaginary axes it is respectively and . Thus , and enclose the axis values. The initial domain test excludes the origin and negative real axis. The strict-sign pieces, their closures and these axis pieces therefore cover every admissible point. The radial enclosure established above and the converted argument enclosure jointly contain its principal logarithm; taking the coordinatewise hull over every finite piece contains the full image. Any failed piece prevents a finite hull return.
Fix the DAG, designated output, constant enclosures, format and in the Statement, so both calls use the same , sectors and conversion . Every nonempty strict-sign piece of a smaller input rectangle, after closure, is contained in the corresponding piece of the larger rectangle. Every axis piece likewise has a corresponding containing axis piece, with the same argument interval. The radial expression preserves inclusion on these nested pieces by [L2]–[L3]. For a quadrant whose denominator excludes zero in both calls, outward quotients and the fixed real arctangent evaluator give nested finite raw argument intervals by [L2]–[L3]. Exact translations by the same and sign changes in the quadrant formulas preserve this inclusion. Intersection with the same sector gives . The greatest-lower and least-upper rounding definitions make inclusion-preserving, hence the converted argument intervals are nested as well. If enlargement changes a ratio branch to a zero-denominator coarse branch, the smaller preconversion interval is , and therefore . If both branches are coarse they use the same . The reverse change under enlargement is impossible: a containing denominator interval cannot exclude zero when the smaller one contains it. These cases exhaust quadrant branch transitions. Axis pieces remain present under enlargement and use the identical converted axis intervals, so their corresponding rectangles are nested too. Taking coordinatewise hulls preserves the inclusions for all corresponding pieces, including any additional pieces in the larger call. Complex exponential preserves inclusion through its fixed real component evaluations and rectangle operations in step 1.1. Together with [L2]–[L3], these primitive results give soundness and inclusion for the same finite typed DAG by induction in its prescribed topological order; fixed input-independent constants start the induction, and every designated output inherits it. A rectangle meeting zero or the negative real branch cut at a Log node returns domain-error; a failed piece, empty argument intersection or failed conversion returns its specified non-finite status. Such a branch gives no finite enclosure or nesting claim.
Budgeted range evaluation terminates and certifies only sound enclosures
Statement
For every finite input DAG and finite total split budget , the algorithm
Finite-budget validated range evaluation terminates. If it returns
certified(I,X), then contains the exact function range on all of and
has width at most the requested . If it returns empty,
entire, inconclusive, domain error, split-domain, or overflow, it makes no
unconditional tolerance-success claim.
Facts & Assumptions
Given: The finite queue procedure in Finite-budget validated range evaluation, and real/complex elementary range-enclosure theorems Certified real elementary-function evaluations enclose their ranges and Certified complex exponential and principal logarithm enclose their ranges.
Finite-budget validated range evaluation: one shared counter is decremented once per split; each split replaces a box by two closed halves whose union equals the parent.
Certified real elementary-function evaluations enclose their ranges: finite evaluations of the supported real elementary primitives contain their exact ranges on the admitted intervals.
Certified complex exponential and principal logarithm enclose their ranges: finite complex exponential and principal-logarithm evaluations contain their exact images on admissible rectangles.
Outward-rounded operations are inclusion-isotone and enclose DAG evaluations: finite real and complex arithmetic nodes enclose their exact values; finite square-root nodes enclose nonnegative square roots.
Proof
The initial admission checks terminate: the format's subnormal index range, exponent range and significand ranges are finite, and each equality comparison of exact dyadics is decided by clearing powers of two and comparing integers. Their enumeration is exactly the selected representable set, so a passing endpoint test establishes membership, including for zero and subnormals. Invalid initial data stop before an evaluator call. For admitted data, every endpoint of the initial box belongs to that format. Inductively, a split enqueues children only after the exact midpoint passes the same membership test; all other endpoints are inherited from the parent. The DAG, output, constants, format and are unchanged. Hence every queued box satisfies the elementary evaluator's input conditions. Each such call terminates through its finite DAG, finite series, finite bisection and finite bin/cell/quadrant lists, or returns a specified failure. The membership guard also terminates and can stop immediately with inconclusive. There are at most admitted splits and therefore at most processed boxes. Thus the entire procedure terminates, including every guard-stop branch.
Before a box is processed, the completed leaf boxes together with the queued boxes cover . Removing a current box preserves this cover when that box is counted as the current unresolved parent. Completing it transfers it to the completed leaves; an admitted split replaces it by two closed children whose union is the parent by [L1]. A failed midpoint test retains the parent as unresolved and therefore discards no part of the cover. This proves the coverage invariant by induction. By step 1.1, each completed leaf was evaluated on admissible input. In its finite typed DAG, input and certified constant nodes contain their exact values. Induct in the evaluator's topological order: arithmetic nodes and square roots preserve pointwise enclosure by [L4], real elementary nodes do so by [L2], and complex exponential and principal-logarithm nodes do so by [L3]. Finiteness of the call means that all domain guards passed and all intermediate results are finite. Thus every designated output, including a purely arithmetic output, contains the exact range on that leaf. If the queue empties without an early return, all covering leaves are completed; their enclosure hull therefore contains the exact range on all of . On an early return, the completed-leaf hull is not asserted to cover the unresolved parent or remaining queue.
A certified return occurs only after the queue is empty without an admission, evaluator, split-guard or budget stop, and after the completed-leaf hull passes the final global width test. Step 2.1 then proves enclosure of the whole range, and the exact width comparison proves the requested tolerance. A failed midpoint membership instead returns inconclusive with the completed-leaf hull, unresolved parent, remaining queue and actual guard status; that partial hull is not a full-domain certificate. The other non-finite, exhausted-budget, unsplittable-coordinate and failed global-width branches likewise make no tolerance-success claim. Thus the finite guard preserves the stated certified-range, coverage and failure conclusions.
5 · Examples, counterexamples and false statements
None yet.
Sources
- Steven G. Krantz, Foundations of Analysis, §1.1, Theorems 1.7 and 1.10
- Michael C. Colding, MIT 18.100B Real Analysis, Lecture 15: Derivatives; Laws for Differentiation
- Michael C. Colding, MIT 18.100B Real Analysis, Lecture 16
- Tucker, Validated Numerics: A Short Introduction to Rigorous Computations, Ch. 1 Computer Arithmetic
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §4
- Steven G. Krantz, Foundations of Analysis, §1.1, Theorem 1.10
- Steven G. Krantz, Foundations of Analysis, §1.1
- Steven G. Krantz, Foundations of Analysis, §1.1, Theorem 1.8
- Kearfott, Interval Computations: Introduction, Uses, and Resources, §1
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §7
- Kearfott, Interval Computations: Introduction, Uses, and Resources, §§1–2
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §5.1
- Tucker, Validated Numerics: A Short Introduction to Rigorous Computations, Ch. 1 §§1.2–1.5
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §§4–5.3
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §§5.1–5.5
- Steven G. Krantz, Foundations of Analysis, §1.2
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §11.6
- Jiří Lebl, Basic Analysis: Introduction to Real Analysis, Volume I, §2.6.4, Theorem 2.6.5
- Michael C. Colding, MIT 18.100B Real Analysis, Lecture 22: Differentiating and Integrating Power Series
- Jiří Lebl, Basic Analysis: Introduction to Real Analysis, Volume I, §2.6.5, Example 2.6.7
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §5.5
- Michael C. Colding, MIT 18.100B Real Analysis, Lecture 18: Integrable Functions
- Jiří Lebl, Basic Analysis: Introduction to Real Analysis, Volume I, §5.2.3, Lemma 5.2.7
- Rump, Rigorous and Portable Standard Functions, §§5–7
- Jiří Lebl, Basic Analysis: Introduction to Real Analysis, Volume I, §5.2.4
- Jiří Lebl, Basic Analysis: Introduction to Real Analysis, Volume I, §5.3
- Tucker, Validated Numerics: A Short Introduction to Rigorous Computations, Ch. 1
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §11.4
- Siegfried M. Rump, Verification Methods: Rigorous Results Using Floating-Point Arithmetic, §11.6
- Rump, Rigorous and Portable Standard Functions, §7
- Rump, Rigorous and Portable Standard Functions, §§5–7 and 10
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §8.3
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §§5–8
- Rump, Rigorous and Portable Standard Functions, §10
- Rump, Verification methods: Rigorous results using floating-point arithmetic, §§5.1–5.5 and 7