T-154: Fitzharding reports a Lean proof that s(17)=4.67553009360455…

V3 C1 Formalization reviewed

2026-10-12 published · Fitzharding after Levy, Ahmed, MacIver · n=17

Fitzharding reports a Lean 4 proof that Bidwell's 1998 packing of seventeen unit squares is optimal: s(17)=4.67553009360455095163…, T-153's value L. His proof uses a different argument from Overbeck's candidate proof (T-153).

Its theorem, Sq17.square17_optimality (L : ℝ) : Sq17.HalfPlaneAssembly.PlainPacking L ↔ Sq17.EndpointGeometry.side ≤ L, says that seventeen closed unit squares, each independently translated and rotated, with pairwise disjoint interiors, fit in the axis-aligned square [0, L]^2 exactly when L is at least EndpointGeometry.side; existence at that side is part of it, so the minimum is attained. That constant is T-153's L by identity of definition: (6+4t)/(1+2t−t2) at the unique common zero of the same two polynomials, H-255's F and G, in the same box of radius 10^-12 about exp-237's 60-place centre, which is the chart of the certified endpoint that holds the case's verified upper bound (the packet's receipts/endpoint-comparison.json).

The route: a cover of the centre box by 24 cells, each holding at most one centre; a census, checked by Lean's kernel, that reduces every occupancy of 17 cells to 35 small patterns and 2,781 full cases; half-plane propagation traces that exclude the patterns and 2,776 ordinary cases at every side up to a little above side, branch trees and a chain for four neighbouring cases, and, for the last case, the occupancy of Bidwell's packing, a capture trace into a chart near the endpoint, where 52 contact rows and a dual certificate over 93 boxes force the side to be exactly side. Every bridge from a trace to geometry is a Lean theorem.

The theorem includes the geometric justification for certificate acceptance and every case exclusion. Its trust boundary, as the source states it: the geometric soundness arguments are checked by Lean's kernel, and 13,343 finite certificate facts are decided by native_decide, so Lean's compiler, native evaluator and the C toolchain are trusted, with the standard axioms propext, Classical.choice and Quot.sound and no sorryAx.

The source reports a clean rebuild of the 4,951 modules of the theorem's import closure from its published sources with Lean 4.34.1, on two Linux machines, with the axiom set matching its own build. Nothing here has repeated that build.

Two reviews of 13 October, by separately prompted AI lanes, found no mathematical defect. The first read the statement, the endpoint, the trust boundary and the chain to the final theorem. The second read the checkers and their soundness proofs in full, recomputed the census, the interior cells' capacities and the 93-box dual certificate exactly, and re-evaluated ten of the 13,343 native_decide facts with an independent implementation, all agreeing with the source; ten facts are a sample.

Fitzharding, sq17-lean, release v1.0.0 of 12 October 2026. Its README credits Bidwell, Hämäläinen's 1980 arrangement, Friedman's survey, the Squares Project, Ahmed and collaborators' eleven-square formalization as a reference for its trust boundary, and David MacIver's earlier Lean work on a seventeen-square lower bound; issue #565 also names Ahmed's s(11) proof as a methodological reference.

The README states that Overbeck "published an independent candidate proof of seventeen-square optimality" on 12 October 2026 and that "This repository presents a separate Lean formalization". It says the project "was developed with substantial assistance from Claude and Codex"; the author's post says it was "Built with @OpenAI Astra + @AnthropicAI Opus 5.5" and thanks Ahmed and Levy for prior work.

Significance, composition and next rung
Significance
Of the reports this record holds, the first proof of s(17) = L in a proof assistant, including the geometric justification for certificate acceptance and every case exclusion, within its stated trust boundary. T-153, public earlier the same day by GitHub's times, is a candidate resting on 15 mathematical premises by its own statement. n=17 is, with n=12, one of the two open cases below n=18.

Its kind is formalization, a proof-assistant proof of a value the record already holds; what it adds is a lower-bound proof checked in one proof-assistant build. Its inspected source build supports V3; a complete confirming build here or by a third party and retained here would support C3, where T-153 needs its capture recomputation and ten trees replayed. Significance is separate from whether the proof is correct. Proposed for the owner's confirmation.
Composition
The original report (E-n017-fitzharding-lean-report) preserves the source's claim and the first review. The separately admitted source build (E-n017-fitzharding-lean-source-build) establishes V3 on the producer's execution record; neither is a confirming run, so the qualifying reads establish C1.

The upper half, a packing at side L, is proved in the Lean without native evaluation: endpoint_plainPacking, in PackingStatement, whose 241-module import closure holds no native_decide, wraps EndpointPacking's endpoint_packing, whose 18-module closure holds none either (the packet's receipts/closures.json). It is the certified endpoint T-065 holds (E-n017-certified-endpoint), V3/C3 here and independent of the source. That entry is not cited, since citing it would make this result hold the case's verified upper bound in T-065's place.

The lower half rests on the Lean build: the cover's capacities, the census, the case routing and the local endpoint argument are proved in Lean, several by decide +kernel, and the exclusion of the 35 patterns, the 2,776 ordinary cases and the four neighbouring cases, and the capture trace, rest on the 13,343 native_decide facts. The only record of that build is the source's own receipt.

The second review's own programs decided the census and the classifier, the 93-box dual certificate and the endpoint's frames in full, the eight interior cells' capacities, and ten native_decide facts, a sample. They are evidence on n-017's case record and are not cited here: none is a build of the proof, and each decides a part, so citing them would make the checker derive a rung from parts (epistemics.md, Every Run's Code Is Kept).

The source's retained clean-build receipt and bound axiom log qualify under epistemics.md's source-build admission rule, audited on 15 October. V describes source verification and does not require an independent build. The record's earlier explanation conflated that requirement with C. C3 still needs complete execution beyond the producer; the source build and partial local checks cannot supply it. The source's compiler trust and receipt limitations remain explicit.
Next rung
C3 needs a complete confirming build of the theorem's 4,951-module import closure, with its axiom receipt: the source's own command run from the retained pin and the three release archives at Lean 4.34.1, here or by a third party whose build is retained here (think-r109). That would be reproduction with the producer's code. The intake's host, with 4 cores, 15 GB of memory and 18 GB of free disk, is too small for it.

Two cheaper checks decide parts first and move no rung: building the statement and endpoint closures here and printing their axioms (think-s7s4), and scanning the two release archives not yet scanned (think-c1kz). The impossibility half is decided only by the full build. An independent implementation of the compiled checkers, begun on ten native_decide facts, would be an attribute beside the rung and not a rung.

If that build lands before T-153's complete replay, this entry would state a lower bound above n=17's verified one, and a formalization moves no bound by itself: its standing reads pending adoption until the case record adopts it, and its kind is then revisited, as the owner decides, with its result page's registered identity amended by a dated reason in packing/site-urls.yaml; until the register records that decision, the standing check refuses it (epistemics.md, Result Kinds).

V4 needs, on top of the source build's V3, the owner's oversight record naming trust-boundary, certificate-meaning and ai-findings, which would disposition the two reviews' fourteen findings, none blocking; the two accepting adversarial AI reviews by distinct reviewers it also needs are on file since 13 October. C4 additionally needs the complete confirming build and qualifying reviews on the confirming side. V5 needs a retained formalization review by a named human expert in Lean and the mathematics who is not the author, checking statement fidelity, the definitions, the axioms (the 13,343 native_decide facts among them) and the inspected source build; C5 needs the build made here, an open_review pointer and two such reviews.
Unfinished confirmations
C3 (think-r109): the source's complete build of the theorem's 4,951-module import closure, from the retained pin and the three v1.0.0 archives with Lean 4.34.1 and the Mathlib v4.34.1 cache, accepted only on REPRODUCTION_ACCEPTED Sq17Lean.Square17Optimality with the axiom set of verification/Square17Optimality.log, run here or by a third party whose build is retained here. It carries no estimated_cost: the source publishes no CPU or wall time, only that the build "requires substantial CPU time and tens of gigabytes of disk and memory" with --jobs 40 --proof-jobs 8 suggested, so the price is to be measured (the first review's section 6). Not priced.
Novelty
previously-published Present in an identified source

The case

Case record

n=17

4.664.676
456
4.1235.123
nn+1

Proven

4.66044≤s(17)≤4.675531

  • exact

Citation record n-017

lowerGuzhou0806 after Overbeck et al. 2026, GitHub (confirmed T-093)

upperBidwell 1998, Squares in Squares (confirmed T-065)

Open

  • optimality

The case record

Results on the case

19 results in the register on n=17, oldest first, each with what it established and how it stands now.

  1. 2005 published T-007

    s(n)≥min(⌈n⌉,n−2⌊n⌋+1+1) for 4≤n≤324

    V0 C1 Lower bound incomplete on this case, superseded by T-093 and T-153 (reported)

    Nagamochi · Nagamochi 2005 · source · register

  2. 2026-08-21 published T-015

    s(17)≥22529/5000=4.5058

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Massaccesi after Burns · Burns–Massaccesi n17 · packet · register

  3. 2026-08-31 established T-001

    s(17)≥4426213/1000000=4.426213, from a sixteen-point unavoidable set

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Levy after Bentz · register

  4. 2026-08-31 established T-003

    The sixteen-point set's unavoidability ceiling lies in [4426213/1000000,4427/1000)

    V3 C3 Method limit confirmed

    Levy after Bentz · register

  5. 2026-09-04 established T-019

    s(n)≥459/100=4.59 for n=17,18,19

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Levy after Burns, Massaccesi · register

  6. 2026-09-04 published T-085

    Nagamochi 2005, Lemma 1 is false for every container with a>3 and b>2

    V3 C3 Correction confirmed

    Karakuş; Vlasenko · Karakuş 2026 · chelokot Nagamochi counterexample 2026 · packet · register

  7. 2026-09-20 published T-032

    s(17)≥461300/99999=4.61304613…, and beneath it Mira's s(17)≥4613/1000

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Guzhou0806, Mira-acc after Levy, Burns, Massaccesi · n17 weighted certificates 2026-09-20 · packet · register

  8. 2026-09-21 published T-038

    s(17)>461300/99853=4.6197910929…

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Overbeck after Levy, Mira-acc, Guzhou0806 · Kleddamag n17 certified bound · packet · source · review · register

  9. 2026-09-21 published T-065

    s(17)≤4.6755300936045509…, Bidwell's packing certified exactly

    V3 C3 Upper bound confirmed

    Overbeck after Levy, Mira-acc, Guzhou0806 · Kleddamag n17 certified bound · packet · source · review · register

  10. 2026-09-25 published T-039

    s(17)>231001/50000=4.62002

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Guzhou0806 after Overbeck, Mira-acc, Levy · Guzhou0806 n17 R052 · packet · source · review · register

  11. 2026-09-26 published T-040

    s(17)>232001/50000=4.64002

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Overbeck after Levy, Mira-acc, Guzhou0806 · Kleddamag n17 4.640020 · packet · source · review · register

  12. 2026-09-27 published T-041

    s(17)>466001/100000=4.66001

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Overbeck after Levy, Mira-acc, Guzhou0806 · Kleddamag n17 4.66001 · packet · source · review · register

  13. 2026-09-28 published T-042

    s(17)>233009/50000=4.66018

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Guzhou0806 after Overbeck, Mira-acc, Levy · Guzhou0806 n17 R067 · packet · source · review · register

  14. 2026-09-28 published T-043

    s(17)>116511/25000=4.66044

    V3 C3 Lower bound confirmed superseded by T-093 and T-153 (reported)

    Guzhou0806 after Overbeck, Mira-acc, Levy · Guzhou0806 n17 R068 · packet · source · review · register

  15. 2026-09-29 published T-058

    Rectangle-certificate ceiling α·UB(n) proved for n=1..100; B·UB(n) on 64 grid rows

    V3 C3 Method limit confirmed

    Hosono after Tokoharu, Daniel · wand125 tools 2026 · packet · register

  16. 2026-09-29 published T-083

    s(n)≥1/2+n−⌊n⌋+1/4 for every nonsquare 8≤n≤324

    V3 C3 Lower bound confirmed on this case, superseded by T-093 and T-153 (reported)

    Karakuş · Karakuş 2026 · source · register

  17. 2026-09-30 published T-093

    s(17)>18641771/4000000=4.66044275

    V3 C3 Lower bound confirmed

    Guzhou0806 after Overbeck, Mira-acc, Levy · Guzhou0806 n17 R071 · packet · source · review · register

  18. 2026-10-12 published T-153

    Candidate proof that Bidwell's 1998 packing is optimal, s(17)=4.67553009360455…

    V0 C1 Optimality reviewed

    Overbeck after Levy, Ahmed, Mira-acc, Guzhou0806, Maaz · Overbeck n17 candidate 2026 · packet · register

  19. 2026-10-12 published T-154 this result

    Fitzharding reports a Lean proof that s(17)=4.67553009360455…

    V3 C1 Formalization reviewed

    Fitzharding after Levy, Ahmed, MacIver · Fitzharding n17 Lean 2026 · packet · source · source build receipt · review 1 · review 2 · register