All manuscripts

Manuscript Oai280-C@1 · Oai280-C.tex · 7d44b8c0

Oai280-C Operational Certification of Logical-Algebra Recovery Access-restricted decoders, connected perfect-tensor benchmarks, and simultaneous reference-preserving confidence bounds

Export Oai280-C.tex

Specifies version 1 of an operational certification of logical-algebra recovery for one declared decoder on one declared accessible interface, not a gravitational dictionary and not spacetime emergence. con:main freezes the information target, the accessible channel, the complete tested channel, and the validation contract before measurements are chosen. prop:EB shows that a classical record is entanglement-breaking and cannot recover a qubit identity. prop:effect shows that an exact named effect need not certify the identity channel. thm:complement equates exact full-code recovery with a constant complete complement and is not a subsystem criterion. thm:snapshot equates informational determination with adjoint containment and does not produce a CPTP decoder. lem:privacy and thm:block re-prove two-share privacy and the ideal five-qubit access table locally. thm:patch and thm:accessmap construct the connected two-cell subsystem and hybrid-algebra decoders. thm:programme turns a declared programme into a complete channel with an explicit resource ledger. thm:stream and thm:messages bound a specified three-share streaming model. thm:simultaneous gives simultaneous reference-preserving confidence intervals for complete implemented channels. prop:forty shows that forty shots cannot accept the 0.1 threshold under this Hoeffding procedure. prop:optimal separates failure of one specified decoder from an all-decoder obstruction. En02-B, En02-C, En05-C, En06-A, Oai265-B, Oai290-A, Em05-B, VII-G, XVII-A, Oai280-A, Oai280-B, and the OpenAI catalogue are documentary source records and are not premises. Family 280 is not verified and is not this encoding. Families 283, 290, and 365 are not decoder premises. En07-B's endpoint obligations are not invoked and are not constructed. This is not a derivation of a cognitive construct. This is not holographic identification. This is not metric reconstruction, not Einstein dynamics, not a Page curve, and not spacetime emergence. A connected two-cell code is not an entanglement wedge. Changing a region label is not geometry-dependent access. The inherited full characteristic map is not constructed. It does not repair XI-G. It does not close O.1. O.1 stays NOT_CLOSED. The series Route B is not discharged. XVI-N is not discharged. XV-B is not opened. XVI-P is registered and is not a premise. H2, I3, and J2 stay unresolved. Full spacetime emergence is not constructed. No quantum coefficient is admitted. No compilation is asserted. Numerical execution is not asserted. Independent execution is not asserted. No laboratory calibration is claimed. A source record is not a premise.

Front matter

  • abstractAbstractFront matter · lines 65–87
    Open as its own page

    We give a finite-dimensional certification framework for a specified decoder acting on a declared accessible interface. The target may be a logical code, a subsystem, or a finite direct-sum algebra. Error is half-diamond distance, so the claim includes preservation of correlations with independent references. We prove the required task separations, the full-code constant-complement criterion, a programme-to-channel theorem with explicit resource ledgers, and dimension-correct Choi-to-channel bounds. A five-qubit stabilizer tensor supplies a fully specified connected two-cell encoding. Its normalization, subsystem decoders, hybrid-algebra decoder, and several optimal access errors are proved locally. For a three-share regression task we also prove decoder uniqueness, a minimal coherent environment dimension, an exact streaming peak of two qubits, and a four-message lower bound in a specified one-way model. General mixed-target tomography and a qubit Bell-correlation procedure give simultaneous finite-confidence intervals for complete implemented channels. Calibration, access assumptions, transfer allowances, and all-decoder obstructions are kept separate. Explicit noise examples and shot-count calculations identify both useful certificates and certificate-specific limitations. No gravitational dictionary, continuum geometry, or device-independent certification is asserted.

Introduction and scope

  • sectionIntroduction and scopeIntroduction and scope · lines 91–141
    Open as its own page

    An operational recovery statement has more content than an operator identity or an existence theorem. It specifies what information is to be returned, what interface is accessible, which decoder is implemented, what happens on every branch, and how the resulting error is bounded.

    Operator-algebra quantum error correction already provides the appropriate mathematical language for quantum, classical, and hybrid targets BenyKempfKribs,BenyKempfKribsPRA. Approximate recovery has corresponding worst-case entanglement-fidelity formulations and constructive recovery results BenyOreshkov. Perfect-tensor networks provide finite bulk-to-boundary code models PastawskiEtAl. The present contribution is an explicit certification interface connecting a supplied finite code to a specified apparatus. It does not replace those theories.

    The internal source notes supplied for this manuscript attribute related interfaces to N. Cheung's manuscripts En02-B/C, En05-C, Oai265-B, Oai290-A, Em05-B, XVII-A, and Oai280-A/B CheungEn02B,CheungEn02C,CheungEn05C,CheungOai265B, CheungOai290A,CheungEm05B,CheungXVIIA,CheungOai280AB. Their full texts and publication metadata were not supplied. Accordingly, these citations identify provenance and intended comparisons, not independently checked published theorems. Every mathematical result used below is proved here or attributed to an identified external article. Appendix app:provenance records this distinction.

    outcome. For finitely many predeclared tasks we construct intervals

    such that, under the printed access, preparation, measurement, and sampling hypotheses,

    Here is the channel actually claimed, is the declared target, is the validation failure budget, and covers separately justified calibration or transfer assumptions. This is a statement about complete channels, not selected successful branches.

Tasks, references, and claim contracts

  • sectionTasks, references, and claim contractsTasks, references, and claim contracts · Oai280-C@1#eq:halfd · lines 143–160
    Open as its own page

    All Hilbert spaces are finite dimensional. A channel is a completely positive trace-preserving linear map between full matrix algebras. We use Schrödinger-picture channels and Hilbert–Schmidt adjoints.

    For channels with the same input and output spaces define

    For channel differences, the diamond norm can be evaluated on states with an ancillary reference of dimension equal to the input dimension. Thus includes arbitrary input-reference correlations. Its range is . We use the normalized Choi convention throughout; see Section sec:choi. These conventions agree with the channel-distance discussion in WallmanFlammia.

  • definitionDefinition: Information targetsTasks, references, and claim contracts · Oai280-C@1#eq:algebra-target · lines 161–192
    Open as its own page

    Let be the input space.

    1. A named effect defines the binary readout channel

    2. Full-code recovery has target .

    3. If , subsystem recovery has target

    4. If

      set . The algebra-restriction target is

  • sectionTasks, references, and claim contractsTasks, references, and claim contracts · lines 192–197
    Open as its own page

    The direct-sum output in (eq:algebra-target) is embedded in . It contains the sector label and the quantum state within each sector. It does not retain cross-sector coherences.

  • propositionProposition: Algebra target and Heisenberg inclusionTasks, references, and claim contracts · proof attached · lines 198–221
    Open as its own page

    The map is CPTP. Its adjoint, restricted to block-diagonal output operators, is

    Consequently .

    Proof. Fix orthonormal bases of . Kraus operators are

    where is the output inclusion. Their adjoint products sum to . The adjoint formula follows by taking traces. Off-diagonal output blocks have zero adjoint image.

  • contractInterface contract: Operational claim specificationTasks, references, and claim contracts · Oai280-C@1#con:main · lines 223–250
    Open as its own page

    A claim consists of the following frozen data.

    1. Input space , output space , and target .

    2. An encoding and noise model, together with an accessible channel .

    3. A decoder programme on and fresh, initially uncorrelated ancillas only.

    4. A complete tested channel , including unsuccessful outcomes, abort replacements, and discarded flags.

    5. A claimed channel , and, if different, a justified allowance

    6. A register-access audit, gate/instrument library, arrival schedule, live-register budget, storage ledger, and classical communication convention.

    7. Validation preparations, measurements, shot counts, statistical allocations, calibration allowances, and the threshold .

    8. Required negative controls: effect versus coherent recovery, fixed versus arbitrary spectator, successful branch versus complete channel, and unrestricted versus resource-restricted decoding.

    The external validation reference is never a decoder input.

  • sectionTasks, references, and claim contractsTasks, references, and claim contracts · Oai280-C@1#eq:tested-channel · lines 250–263
    Open as its own page

    A useful physical form is

    All maps in this expression belong to the same declared experiment. An ideal code identity alone does not establish (eq:tested-channel) for an apparatus.

  • propositionProposition: Classical-record obstructionTasks, references, and claim contracts › Two mandatory task separations · Oai280-C@1#prop:EB · proof attached · lines 266–300
    Open as its own page

    Suppose the only input carrying information to the decoder is a finite classical record, and all other decoder inputs are fixed and independent of the logical system and its reference. Then the resulting logical channel is measure-and-prepare:

    It is entanglement-breaking. For a -dimensional identity target, ,

    Proof. The record probabilities form a POVM ; conditional decoder outputs are states . For any reference ,

    which is separable.

    Let be the maximally entangled state. A product state has overlap with . By convexity the same bound holds for separable states. Measuring therefore gives trace distance at least from . This is a permissible diamond-norm input.

  • propositionProposition: An exact effect does not certify a qubitTasks, references, and claim contracts › Two mandatory task separations · Oai280-C@1#prop:effect · proof attached · lines 302–320
    Open as its own page

    Let

    The effect is preserved exactly, while

    Proof. . The upper bound follows from and the fact that two channels have half-diamond distance at most one. On , the output is , at trace distance from .

  • sectionTwo mandatory task separationsTasks, references, and claim contracts › Two mandatory task separations · lines 320–326
    Open as its own page

    These are the locally proved hard gates corresponding to the classical-record and effect-target separations described in the supplied Cheung source notes CheungIEn06A,CheungOai290A,CheungXVIIA.

Recovery criteria and snapshot determination

  • theoremTheorem: Full-code recovery and a constant complementRecovery criteria and snapshot determination › The constant-complement criterion is a full-code statement · Oai280-C@1#thm:complement · proof attached · lines 332–385
    Open as its own page

    Let be CPTP, with Kraus operators . The following are equivalent:

    1. A CPTP map satisfies .

    2. Every product is a scalar multiple of .

    3. A complementary channel of has the form

      for a fixed state .

    Proof. The standard Kraus complementary channel has entries

    Hence (ii) and (iii) are equivalent, with the scalar matrix positive and of trace one.

    For (i)(ii), let be Kraus operators of . The Kraus operators represent the identity channel. Its Choi matrix has rank one, so every . Trace preservation of gives

    For (ii)(i), change the Kraus basis to diagonalize the positive scalar matrix. Remove zero Kraus operators and write

    The ranges of the isometries are orthogonal. With , define

    for an arbitrary fixed state on . This map is CPTP and .

  • exampleExample: Why the criterion is wrong for a subsystemRecovery criteria and snapshot determination › The constant-complement criterion is a full-code statement · lines 387–393
    Open as its own page

    Let on . The identity decoder on recovers the subsystem exactly. A complementary channel returns , which is not constant when . Thus subsystem recovery does not require a left inverse on the whole bulk.

  • sectionThe constant-complement criterion is a full-code statementRecovery criteria and snapshot determination › The constant-complement criterion is a full-code statement · lines 393–400
    Open as its own page

    This elementary example prevents an inappropriate full-code premise from entering an algebra or subsystem claim. It is consistent with the subsystem and algebra scope of BenyKempfKribs,BenyKempfKribsPRA and the full-code interface reported in CheungVIIG,CheungEm05B.

  • theoremTheorem: Snapshot determination and adjoint containmentRecovery criteria and snapshot determination › Linear determination is not a physical decoder · Oai280-C@1#thm:snapshot · proof attached · lines 403–428
    Open as its own page

    For CPTP maps and , the following are equivalent:

    1. For all states , implies .

    2. as complex linear subspaces.

    3. .

    4. There is a linear map on such that .

    No positivity or complete positivity of follows.

    Proof. Let . Trace preservation gives . For sufficiently small , both and are states. Condition (i) implies . Decomposing a general kernel element into Hermitian and anti-Hermitian parts proves (ii). The converse is immediate. Finite-dimensional orthogonal-complement duality proves (ii)(iii). For (ii)(iv), set ; the kernel inclusion makes this well defined. The remaining implication is immediate.

  • exampleExample: Informational completeness without recoveryRecovery criteria and snapshot determination › Linear determination is not a physical decoder · lines 430–440
    Open as its own page

    For , the qubit depolarizing channel

    is invertible as a linear map. It therefore determines every input snapshot. Nevertheless, no CPTP left inverse exists: the trace distance between the two computational-basis outputs is , whereas their input trace distance is one, and channels cannot increase trace distance.

  • sectionLinear determination is not a physical decoderRecovery criteria and snapshot determination › Linear determination is not a physical decoder · lines 440–445
    Open as its own page

    Theorem thm:snapshot is the local finite-dimensional comparison suggested by the En05-C source notes CheungEn05C. It is deliberately not promoted to a CPTP-decoder theorem.

A fully specified five-qubit tensor

  • sectionA fully specified five-qubit tensorA fully specified five-qubit tensor · Oai280-C@1#eq:encoder · lines 447–474
    Open as its own page

    The five-qubit code is a standard exact quantum error-correcting code LaflammeEtAl. We specify its phases and normalization rather than importing a decoder convention.

    Number physical qubits and set

    Tensor-product symbols are omitted in Pauli strings. Let and

    Define

  • lemmaLemma: Stabilizer auditA fully specified five-qubit tensor · Oai280-C@1#lem:stabilizer · proof attached · lines 475–502
    Open as its own page

    The generators commute and are independent. The projector has rank two. Up to signs, the fifteen nonidentity elements of are the cyclic rotations of

    In particular every nonidentity element has weight four. The vectors in (eq:encoder) are orthonormal.

    Proof. Two Pauli strings commute when the number of positions at which their nonidentity factors anticommute is even. This verifies pairwise commutation. Multiplication of the four generators gives the fifteen strings listed by the three cyclic orbits; they are distinct and none is the identity. Thus the group has sixteen elements and the generators are independent. Since every nonidentity Pauli is traceless, .

    None of the fifteen strings contains only and . Hence , proving the normalization of . Both and commute with , and they anticommute with each other. The vector has eigenvalue ; has eigenvalue and the same norm.

  • sectionA fully specified five-qubit tensorA fully specified five-qubit tensor · lines 502–520
    Open as its own page

    For clarity, the syndrome of a Pauli is the four-bit string recording its anticommutation with .

    Position
    1000110101011
    2100001011101
    3110000101110
    4011010011111
    5001101000111
  • lemmaLemma: Two-share privacyA fully specified five-qubit tensor · Oai280-C@1#lem:privacy, Oai280-C@1#eq:privacy · proof attached · lines 521–540
    Open as its own page

    For every set of at most two physical qubits,

    This identity holds on all operators, not only states.

    Proof. The syndrome table contains each nonzero four-bit string exactly once. A nonidentity Pauli of weight one has nonzero syndrome. A weight-two Pauli has the sum of two distinct one-site syndromes, again nonzero. Such a Pauli anticommutes with a stabilizer generator, implying . Expanding operators on in its Pauli basis proves (eq:privacy).

  • sectionExplicit triple decoders and optimal access errorsA fully specified five-qubit tensor › Explicit triple decoders and optimal access errors · Oai280-C@1#eq:UB · lines 542–554
    Open as its own page

    Let be a physical triple, , and fix computational bases and ascending register order. Define the square matrix

    Thus every entry of is fixed by (eq:encoder).

  • theoremTheorem: Ideal five-qubit access tableA fully specified five-qubit tensor › Explicit triple decoders and optimal access errors · Oai280-C@1#thm:block, Oai280-C@1#eq:block-channel · proof attached · lines 555–606
    Open as its own page

    The matrix is unitary and

    Consequently

    recovers the qubit exactly, including every external reference.

    For an arbitrary accessible set ,

    The infimum is over all CPTP decoders on the declared accessible set.

    Proof. Privacy on gives

    The eight columns in (eq:UB) are therefore orthonormal. Summing the four environment components proves (eq:block-channel), first on matrix units and hence on all operators. Tensoring this equality with a reference proves the reference statement. For larger access, discard to a triple.

    For , every decoder output is a replacement state . On a Bell input, has Bell overlap . The Bell-projector measurement gives error at least . The replacement attains this value because

    so its half-diamond distance from is at most .

  • theoremTheorem: Uniqueness and coherent environmentA fully specified five-qubit tensor › Explicit triple decoders and optimal access errors · Oai280-C@1#thm:unique · proof attached · lines 608–639
    Open as its own page

    For a triple , every CPTP map satisfying equals on the whole matrix algebra . Its Choi rank is four. Every pure-environment Stinespring implementation therefore requires environment dimension at least four, and a coherent output-plus-environment realization needs at least three qubits in total.

    Proof. Let be Kraus operators of . Kraus operators of are

    Because the identity channel has Choi rank one, each is scalar times . Thus

    for suitable vectors . Trace preservation gives , whence .

    The four Kraus operators are linearly independent, so the Choi rank is four. A Stinespring environment dimension bounds the number of linearly independent Kraus operators. The lower bound is attained by applying and retaining the two-qubit environment.

  • sectionExplicit triple decoders and optimal access errorsA fully specified five-qubit tensor › Explicit triple decoders and optimal access errors · lines 639–643
    Open as its own page

    The coherent bound is not a lower bound on all measurement-assisted live-register implementations. That distinction will matter below.

  • sectionThe six-leg perfect stateA fully specified five-qubit tensor › The six-leg perfect state · Oai280-C@1#eq:perfect · lines 644–658
    Open as its own page

    Define

  • propositionProposition: Perfect-tensor propertyA fully specified five-qubit tensor › The six-leg perfect state · Oai280-C@1#prop:perfect · proof attached · lines 659–676
    Open as its own page

    Every reduction of to at most three of its six qubits is maximally mixed. Thus every balanced three-input/three-output reshaping of is unitary.

    Proof. A triple containing contains at most two physical qubits. Equation (eq:privacy) applied to the Bell construction makes this reduction maximally mixed. A triple containing only physical qubits is a reduction of . By Lemma lem:stabilizer, no nonidentity stabilizer is supported on three qubits, so this reduction is . Smaller reductions follow by tracing. The balanced reshaping statement is precisely the matrix form of a maximally mixed three-qubit reduction.

  • sectionThe six-leg perfect stateA fully specified five-qubit tensor › The six-leg perfect state · lines 676–680
    Open as its own page

    This is the finite perfect-tensor ingredient used in PastawskiEtAl. It is not an experimental certification result.

One connected two-cell encoding

  • sectionOne connected two-cell encodingOne connected two-cell encoding · Oai280-C@1#eq:F, Oai280-C@1#eq:W, Oai280-C@1#eq:W-components · lines 682–716
    Open as its own page

    Use two copies of the same tensor. Each cell has one bulk input, four exterior physical legs, and one joining leg. Denote the left bulk by , the right bulk by , the exterior legs by

    and the joining legs by .

    Reshape the block encoder into

    Use the same convention for the right cell. Define

    In components,

  • propositionProposition: Normalization and physical implementationOne connected two-cell encoding · Oai280-C@1#prop:W · proof attached · lines 717–740
    Open as its own page

    Both and are isometries. If

    then and . Equation (eq:W) is a deterministic isometric implementation: prepare one Bell pair and apply the two isometries . It does not postselect a Bell outcome.

    Proof. Single-leg privacy gives

    so . Equation (eq:W) now immediately gives . Direct contraction with the normalized Bell bra gives , proving and the claimed success operator.

  • sectionOne connected two-cell encodingOne connected two-cell encoding · lines 740–745
    Open as its own page

    The factor in (eq:W-components) is essential: contracting normalized perfect states without auditing the scale would not produce the stated isometry.

  • sectionTriple patch decodersOne connected two-cell encoding › Triple patch decoders · Oai280-C@1#eq:UK · lines 746–758
    Open as its own page

    For a left exterior triple , let be the remaining exterior leg. Define

    The order in the coefficient is the declared exterior order, with and the joining leg last.

  • lemmaLemma: Patch channel identityOne connected two-cell encoding › Triple patch decoders · Oai280-C@1#lem:patchidentity · proof attached · lines 759–781
    Open as its own page

    The matrix is unitary and

    for every operator on . Equivalently,

    Proof. Equation (eq:UK) is the balanced reshaping from Proposition prop:perfect, hence is unitary. The second formula follows directly from . Tracing proves the channel identity.

  • theoremTheorem: Connected subsystem and full-bulk recoveryOne connected two-cell encoding › Triple patch decoders · Oai280-C@1#thm:patch, Oai280-C@1#eq:subsystemexact · proof attached · lines 783–826
    Open as its own page

    Let

    If contains a left exterior triple , then

    satisfies

    The equality holds for arbitrary inputs, including spectator correlations and arbitrary external references.

    If contains a triple on each side, applying both inverse unitaries and discarding their joining and auxiliary registers recovers the entire two-qubit bulk exactly.

    Proof. Trace the entire right exterior output in (eq:W). Because is isometric, this is equivalent to tracing . The left joining register is then , independent of the remaining state on and its reference. Applying Lemma lem:patchidentity gives

    This is an operator identity and proves (eq:subsystemexact).

    For two triples, the two inverse unitaries return

    Tracing the indicated registers returns . All steps commute with adjoining an untouched reference.

  • sectionTriple patch decodersOne connected two-cell encoding › Triple patch decoders · lines 826–837
    Open as its own page

    For all four exterior legs of a cell one may instead use the complete decoder

    The second term completes the channel outside the isometry range.

  • sectionA nontrivial hybrid algebra on the same bulkOne connected two-cell encoding › A nontrivial hybrid algebra on the same bulk · Oai280-C@1#eq:hyb · lines 838–856
    Open as its own page

    On choose sectors according to the computational basis of :

    Each sector contains one logical qubit. The restriction target is

    Identify its output with .

  • corollaryCorollary: Same-model hybrid decoderOne connected two-cell encoding › A nontrivial hybrid algebra on the same bulk · proof attached · lines 857–868
    Open as its own page

    A triple on each side supports exact recovery of : use the full-bulk decoder of Theorem thm:patch and then dephase the returned register. The target preserves sector labels and within-sector quantum information, but not coherence between and .

    Proof. The full-bulk decoder returns . Dephasing produces (eq:hyb).

  • lemmaLemma: Small-access privacy of the connected encodingOne connected two-cell encoding › Optimal errors for selected access classes · Oai280-C@1#lem:patchprivacy · proof attached · lines 872–901
    Open as its own page

    If among the eight exterior legs, then

    If only left exterior legs are accessible, their channel is

    Proof. The second identity follows from the right trace used in the proof of Theorem thm:patch and

    For two accessible legs on one side, block privacy proves the result.

    For one leg on each side, first observe that for every nonidentity one-site exterior Pauli . Indeed, the reduction of to its bulk leg, joining leg, and that exterior leg is maximally mixed; expanding its matrix elements gives this identity. Expectations of nonidentity Pauli operators supported on the selected two legs therefore vanish in (eq:W). Their Pauli expansion proves the stated replacement channel.

  • theoremTheorem: Selected operational access mapOne connected two-cell encoding › Optimal errors for selected access classes · Oai280-C@1#thm:accessmap · proof attached · lines 903–956
    Open as its own page

    For the ideal encoding , the optimal unrestricted half-diamond errors for the following declared targets and access classes are:

    No value is asserted here for an unlisted mixed access pattern.

    Proof. For , the channel is constant. The subsystem optimum is by the qubit replacement argument; the upper bound is unchanged by composing with . For full two-qubit recovery, a maximally entangled four-dimensional input has overlap with every replacement Choi state. The replacement attains error , by the sixteen-term two-qubit Pauli expansion of .

    For the hybrid target, identify the output with and write . Its normalized Choi state is supported on

    It has support probability one. A replacement Choi state has support probability , because . Thus the error is at least . For the upper bound, is the equal mixture of and , whereas is the equal mixture of all sixteen Pauli conjugations. Their difference is times a difference of two channels, so its half-diamond norm is at most .

    For left-only triple or four-leg access, is returned exactly and no information about is available. Replacing by gives full-bulk error ; a Bell input on gives the matching lower bound. For the hybrid target, returning a fair sector label gives error . The lower bound follows by using the two orthogonal sector inputs with the same logical state: they have identical accessible outputs, so a single decoder cannot be closer than to both orthogonal target outputs. The two-triple case is Theorem thm:patch.

Resource-restricted programmes

  • definitionDefinition: Legal finite programmeResource-restricted programmes › Legal programmes and accounting conventions · lines 963–977
    Open as its own page

    A programme is a finite acyclic decision tree. Each node applies a declared operation to named live registers:

    1. a unitary from a frozen finite library;

    2. preparation of a fixed fresh ancilla, initially independent of the input, source, and validation reference;

    3. a finite-outcome CP instrument whose outcome sum is TP;

    4. explicit discard, classical update, or an allowed input arrival.

    Every terminal branch returns a state on the same declared output space. An abort has an explicit replacement output. No operation acts on omitted source registers or the external validation reference. No primitive hides an undeclared quantum memory.

  • sectionLegal programmes and accounting conventionsResource-restricted programmes › Legal programmes and accounting conventions · lines 977–987
    Open as its own page

    For this manuscript a sufficient frozen library contains: the explicitly defined and matrices, unitary extensions of , single-qubit Clifford operations, Bell preparation, the two-qubit measurement used below, ordinary projective measurements, and explicit discards. A unitary extension of is fixed by completing its four columns with Gram–Schmidt in computational-basis order. Thus the finite library is determined by printed matrices, not by an unspecified synthesis oracle.

  • definitionDefinition: LedgersResource-restricted programmes › Legal programmes and accounting conventions · lines 988–1000
    Open as its own page

    The decoder live-register peak is the maximum, over branches and times, of the number of decoder-held qubits. It includes fresh ancillas and returned output registers. Unarrived source registers are listed separately in a source-storage ledger; they cannot be operated on before arrival.

    The storage ledger records every register's holding interval and location. The classical ledger records outcome alphabets and messages. A total experiment-storage claim must include both decoder storage and parked source storage. A decoder peak is not, by itself, a bound on total physical storage.

  • theoremTheorem: Programme-to-channel and ledger theoremResource-restricted programmes › Legal programmes and accounting conventions · Oai280-C@1#thm:programme · proof attached · lines 1002–1024
    Open as its own page

    Every legal finite programme induces a CPTP map on its declared accessible input. Its action on reference-entangled inputs is the same map tensored with the reference identity. Register counting along every branch bounds its declared peak and storage costs.

    Proof. Associate a CP map with each branch prefix by composing its operation maps, tensoring fresh states, and tracing explicit discards. For an instrument, summing the children yields the parent's trace-preserving continuation. Induction from the leaves to the root shows that the sum of complete branch maps is CP and TP. Replacing an abort by a fixed state is a TP continuation of that abort branch.

    Every operation has support only on declared registers. Tensoring with an untouched reference commutes with all compositions and branch sums, proving the reference statement. The live-set update at each node is specified by arrivals, preparations, operations, and discards. Its cardinality and holding intervals therefore give the stated pathwise bounds.

  • sectionLegal programmes and accounting conventionsResource-restricted programmes › Legal programmes and accounting conventions · lines 1024–1029
    Open as its own page

    This proves the programme interface described in CheungEn02B,CheungEn02C; no apparatus-level conformity is deduced from it.

  • sectionA sharp streaming and communication benchmarkResource-restricted programmes › A sharp streaming and communication benchmark · Oai280-C@1#eq:triplePaulis, Oai280-C@1#eq:R · lines 1030–1066
    Open as its own page

    We now restrict access to the regression triple of the five-qubit encoding. This is a precisely scoped resource theorem, not a claim about every access set of the connected encoding.

    Multiplying the full logical Paulis by stabilizers gives

    They satisfy and . Consequently

    Set

    These are commuting independent Pauli operators. Their common eigenprojectors are

    Each projector has rank one. Choose a one-qubit unitary by

    These two anticommuting axes specify a unitary up to global phase.

  • theoremTheorem: Exact peak two on the declared tripleResource-restricted programmes › A sharp streaming and communication benchmark · Oai280-C@1#thm:stream · proof attached · lines 1067–1112
    Open as its own page

    Consider streaming programmes with access exactly to , arbitrary arrival order, no additional source-correlated quantum resource, and no undeclared quantum memory. The following programme recovers exactly with decoder peak two:

    1. hold qubits and measure ;

    2. retain classically and discard qubits ;

    3. receive qubit and apply .

    No legal exact programme in this streaming model has peak one.

    Proof. The adjoint of the printed programme sends

    It sends to the corresponding logical representative, since . Together with the identity these operators span the output algebra. The programme therefore equals , proving exact recovery. Its live peak is two.

    For the lower bound, suppose an exact peak-one programme exists. Before another input qubit can arrive, the first input qubit must have been discarded, leaving only a finite classical record. Operations on that first qubit define a POVM .

    By Theorem thm:unique, the complete decoder is . Every Kraus operator of has the form . For a refinement according to the first record , the corresponding effect is therefore in the commutant of and . But that effect is on the three inputs. At every individual site the local factors of and anticommute. Hence commutes with two independent Pauli axes and must equal .

    After discarding the first qubit, record and the other two qubits are thus described by times the two-share reduced channel. Lemma lem:privacy makes that channel constant. No continuation can recover the logical qubit, a contradiction.

  • theoremTheorem: Four messages in a one-way modelResource-restricted programmes › A sharp streaming and communication benchmark · Oai280-C@1#thm:messages · proof attached · lines 1114–1144
    Open as its own page

    Suppose a sender holds qubits , a receiver holds qubit , and only a finite classical message is sent from sender to receiver. There is no extra shared resource. Exact recovery requires at least four possible messages, hence at least two bits in a fixed-length message model. Four messages suffice.

    Proof. The preceding programme proves sufficiency. For necessity, let the sender's POVM be and the receiver's conditional channel be . Exactness and Theorem thm:unique imply, on all three-qubit operators,

    where . Therefore

    A unitary channel has rank-one Choi matrix, so a convex decomposition of it into channels contains only that same channel with positive weight. Any message having positive probability for sector must therefore implement . The four conjugation channels are distinct by (eq:R). Their message supports are disjoint, so there must be at least four messages.

  • remarkRemark: Scope of the lower boundsResource-restricted programmes › A sharp streaming and communication benchmark · lines 1146–1153
    Open as its own page

    Theorems thm:unique–thm:messages concern different resource classes: a coherent Stinespring realization, a specified streaming triple, and a specified one-way architecture. They do not assert a universal lower bound for arbitrary larger access sets, pre-shared entanglement, hidden quantum storage, or a different source-arrival convention.

  • sectionObservable readout at peak oneResource-restricted programmes › Observable readout at peak one · lines 1155–1165
    Open as its own page

    Measuring the three single-site factors of sequentially and returning their signed parity gives exact logical readout at peak one. Similarly, gives exact logical readout.

    These are quantum-to-classical channels. They do not constitute the coherent decoder in Theorem thm:stream. Proposition prop:EB makes the distinction quantitative.

  • propositionProposition: Balanced recursive modulesResource-restricted programmes › A decomposition-specific tree comparison · Oai280-C@1#prop:tree · proof attached · lines 1168–1194
    Open as its own page

    Concatenate the five-qubit encoder to depth and retain three designated children at every node. Within the module class in which each child is fully decoded before being consumed by its parent, the depth-first measurement-assisted schedule has peak , for . This is optimal in that module class.

    The explicitly non-adaptive schedule that receives and holds all selected leaves before any decoding has peak .

    Proof. At height one, Theorem thm:stream gives peak two. At a parent, decode the first child and retain its one-qubit output. Decode the second child while holding that output, measure the two outputs using the parent two-qubit measurement, and discard them. Decode the third child and apply the parent feedforward. If the child peak is , the parent peak is . Thus .

    In the declared module class, two completed child outputs are needed for the parent measurement. One must be held while a second child is decoded. This gives the same recurrence as a lower bound. The non-adaptive peak follows from its stipulated initial holding of all selected leaves; later decoding need not exceed that count.

  • sectionA decomposition-specific tree comparisonResource-restricted programmes › A decomposition-specific tree comparison · lines 1194–1198
    Open as its own page

    This is an architectural comparison, not a global scheduling theorem over every possible instrument decomposition.

Complete branches and approximation budgets

  • propositionProposition: Successful-branch trapComplete branches and approximation budgets · Oai280-C@1#prop:branchtrap · proof attached · lines 1202–1221
    Open as its own page

    Consider the complete qubit channel

    A success flag may identify the identity branch with conditional Bell fidelity one. If the returned output discards that flag, then

    Proof. The complete channel difference is . Theorem thm:block gives the stated norm.

  • sectionComplete branches and approximation budgetsComplete branches and approximation budgets · lines 1221–1228
    Open as its own page

    If the flag is retained, the target must specify its ideal output law and the channel distance must be recomputed on that larger output space. Conditional success normalization can also be nonlinear when success depends on the input; it is not then a channel replacement for the complete instrument.

  • propositionProposition: Recovery, implementation, and model triangleComplete branches and approximation budgets · Oai280-C@1#prop:triangle · proof attached · lines 1229–1254
    Open as its own page

    Let and have the same accessible output space, and let and have the same input and output spaces. If

    then

    Proof. Insert and and use the triangle inequality. Pre- and post-composition by channels contract diamond distance.

  • sectionComplete branches and approximation budgetsComplete branches and approximation budgets · lines 1254–1261
    Open as its own page

    This is the local version of the approximation accounting described in CheungEn02B,CheungEn02C. A transfer allowance is a different statement: it compares the tested complete channel with the channel claimed elsewhere. It does not calibrate state preparation or measurement.

Dimension-correct channel conversion

  • sectionDimension-correct channel conversionDimension-correct channel conversion · lines 1263–1275
    Open as its own page

    Let , , and use

    For a linear map define

  • lemmaLemma: Normalized Choi boundsDimension-correct channel conversion · Oai280-C@1#lem:choi, Oai280-C@1#eq:choibound · proof attached · lines 1276–1302
    Open as its own page

    For channels with input dimension ,

    The output dimension need not equal the input dimension.

    Proof. The lower bound uses as a permissible input. For the upper bound, every pure state on can be written as with , and hence . For its output is

    The trace norm is at most . Convexity handles mixed inputs; Schmidt decomposition reduces a larger reference to dimension . Taking the channel-discrimination supremum gives the result.

  • sectionDimension-correct channel conversionDimension-correct channel conversion · lines 1302–1307
    Open as its own page

    These inequalities are consistent with the normalized-Choi convention in Lemma 7 of WallmanFlammia; completely bounded norm formulations are also discussed in Watrous.

  • corollaryCorollary: Identity-target overlap conversionDimension-correct channel conversion · Oai280-C@1#cor:pure, Oai280-C@1#eq:pureconversion · proof attached · lines 1308–1332
    Open as its own page

    If and , then

    Proof. The Bell-projector measurement proves the lower bound. For completeness, the pure-state trace-distance inequality

    follows by purifying with overlap with a purification of , evaluating the trace distance of the two pure states, and tracing the purifier. Apply this inequality to and use Lemma lem:choi.

  • sectionMixed subsystem and algebra Choi targetsDimension-correct channel conversion › Mixed subsystem and algebra Choi targets · Oai280-C@1#eq:subchoi, Oai280-C@1#eq:algchoi · lines 1334–1366
    Open as its own page

    For , with dimensions and ,

    The reference includes both and . Testing only with a fixed spectator prepares a different, weaker task.

    For the algebra target, with and ,

    where each block pairs its output sector with the matching input reference sector. Equations (eq:subchoi) and (eq:algchoi) follow by expanding the normalized maximally entangled input in matrix units.

    A single overlap with these mixed states does not permit the pure-target proof of Corollary cor:pure. The general trace-norm certificate below avoids that mistake.

  • propositionProposition: When subsystem certification reduces to a qubitDimension-correct channel conversion › Mixed subsystem and algebra Choi targets · Oai280-C@1#prop:spectatorblind · proof attached · lines 1367–1385
    Open as its own page

    If an independently established structural identity gives

    then

    Without that identity, tests with one fixed spectator do not establish the equality.

    Proof. Composition by gives the upper bound. For the lower bound, embed an arbitrary input with a fixed state of , retaining its reference.

Finite-confidence certification

  • sectionValidation assumptionsFinite-confidence certification › Validation assumptions · lines 1390–1394
    Open as its own page

    The following assumptions are part of the claim, not consequences of favorable frequencies.

  • contractInterface contract: Validation hypothesesFinite-confidence certification › Validation assumptions · Oai280-C@1#con:validation · lines 1395–1420
    Open as its own page

    Conditionally on frozen pilot and calibration information:

    1. The decoder and target are fixed before held-out validation.

    2. Each setting is applied to independent repetitions of one fixed complete channel .

    3. Validation inputs are independent of the apparatus' fresh ancillas and hidden systems. The reference is untouched by the decoder.

    4. Each measurement has a declared bounded outcome range and a calibrated relation between its mean and the ideal Choi expectation.

    5. Shot counts and confidence allocations are fixed; no unaccounted optional stopping or data-dependent setting removal is used.

    6. Every branch belongs to the tested channel. Abort and loss trials are not silently deleted.

    7. An access audit supports the declared interface.

    8. Calibration and transfer statements hold jointly except on an event of probability at most .

    A drifted, memory-dependent, or preparation-dependent apparatus is not covered unless a separate theorem supplies an appropriate sampling model.

  • sectionA general certificate for mixed targetsFinite-confidence certification › A general certificate for mixed targets · Oai280-C@1#eq:hoeffding-radius · lines 1422–1454
    Open as its own page

    Put , the dimension of the output-reference space. Choose an orthonormal Hermitian basis satisfying . For example, use the diagonal matrix units and, for ,

    Measure the spectral observable on fresh Choi outputs. Let be the mean of outcomes in . Allocate and set

    Suppose calibration supplies

    on the good calibration event. Define

    No positivity projection of is required.

  • theoremTheorem: General mixed-target intervalFinite-confidence certification › A general certificate for mixed targets · Oai280-C@1#thm:tomography, Oai280-C@1#eq:generalinterval · proof attached · lines 1455–1498
    Open as its own page

    If on the good calibration and transfer event, set

    Then

    The result applies to subsystem and algebra targets (eq:subchoi)–(eq:algchoi).

    Proof. For independent outcomes in , Hoeffding's inequality Hoeffding gives

    The union bound and calibration imply, simultaneously,

    Orthonormality gives the squared Hilbert–Schmidt norm as the sum of squared coefficient errors. The inequality therefore gives .

    The trace-norm triangle inequality bounds the true Choi discrepancy between and . Lemma lem:choi and the transfer triangle give (eq:generalinterval). Union with the calibration/transfer failure event proves the claim.

  • sectionA general certificate for mixed targetsFinite-confidence certification › A general certificate for mixed targets · lines 1498–1514
    Open as its own page

    For qubit systems, product Pauli observables give a local-measurement implementation. If ranges over nonidentity Paulis on the - dimensional output-reference space, measure its outcomes, set

    and replace by

    Pauli orthogonality proves this sharper normalization directly. This remains full tomography; no scalability advantage is claimed.

  • propositionProposition: One sufficient calibration calculationFinite-confidence certification › What a calibration allowance means · Oai280-C@1#prop:calibration · proof attached · lines 1517–1536
    Open as its own page

    Suppose the prepared input-reference state is at trace distance at most from , and a bounded measurement's implemented mean observable differs from in operator norm by at most . Then

    is a valid coefficient allowance.

    Proof. Channels contract trace distance, so the actual output-reference state is within trace distance of . The expectation difference for an observable of operator norm at most one is bounded by the trace norm, hence by . The measurement-observable discrepancy contributes at most .

  • sectionWhat a calibration allowance meansFinite-confidence certification › What a calibration allowance means · lines 1536–1540
    Open as its own page

    The bounds require independent support. They cannot be inferred merely by inserting a desired value of .

  • sectionThe three-correlation qubit identity certificateFinite-confidence certification › The three-correlation qubit identity certificate · lines 1541–1569
    Open as its own page

    For a complete qubit channel define

    Since

    its Bell overlap is

    With independent bounded-outcome estimates and allocations , let

    and clip the overlap endpoints to :

  • corollaryCorollary: Bell-correlation intervalFinite-confidence certification › The three-correlation qubit identity certificate · Oai280-C@1#cor:bell, Oai280-C@1#eq:bellinterval · proof attached · lines 1570–1585
    Open as its own page

    For the qubit identity target,

    has failure probability at most .

    Proof. The overlap interval follows from the coefficient intervals. Apply Corollary cor:pure with and the transfer triangle.

  • sectionThe three-correlation qubit identity certificateFinite-confidence certification › The three-correlation qubit identity certificate · lines 1585–1592
    Open as its own page

    The factor two is the input-dimension factor. It must not be carried unchanged to a four-dimensional bulk identity or a mixed subsystem target. This explicitly implements the dimension correction called for in the supplied En02-C and Oai290-A notes CheungEn02C,CheungOai290A.

  • definitionDefinition: Specified-decoder decisionFinite-confidence certification › Simultaneous decisions · lines 1595–1605
    Open as its own page

    For a threshold :

    • certified: the access and validation contracts are supported and ;

    • excluded for this decoder: the contracts are supported and ;

    • inconclusive: otherwise.

    An unsupported access contract is never certified.

  • theoremTheorem: Simultaneous coverage and acceptanceFinite-confidence certification › Simultaneous decisions · Oai280-C@1#thm:simultaneous · proof attached · lines 1607–1635
    Open as its own page

    Consider finitely many frozen tasks. For every validation setting allocate a failure probability, with total at most . Suppose all required calibration and transfer statements hold jointly except with probability . Then all intervals from Theorem thm:tomography or Corollary cor:bell cover their respective errors simultaneously except with probability at most . In particular,

    The same event controls false specified-decoder exclusions.

    Proof. Condition on the frozen information. Each setting's concentration bound remains valid by Contract con:validation. Union over every setting in every task and then over the calibration/transfer failure event. On the complementary event every true error lies in its interval. The decision implications follow immediately. No independence between different tasks is required.

  • sectionSimultaneous decisionsFinite-confidence certification › Simultaneous decisions · lines 1635–1642
    Open as its own page

    The distinction between complete validation and selected records, and between specified-decoder and optimal-decoder decisions, follows the roles reported in CheungOai265B,CheungOai290A; the coverage theorem is proved locally here.

  • propositionProposition: Uniform decoder-class obstructionFinite-confidence certification › Simultaneous decisions · Oai280-C@1#prop:optimal · proof attached · lines 1643–1666
    Open as its own page

    Let be a declared decoder class for the actual accessible channel, and define

    If a separately proved bound is uniform over the class, , then excludes every allowed decoder. A certified candidate with upper bound gives

    on the coverage event. A lower bound for one tested decoder does not provide a lower bound for .

    Proof. The first statement is the definition of a uniform lower bound. The second follows by evaluating the infimum at the candidate.

  • sectionSimultaneous decisionsFinite-confidence certification › Simultaneous decisions · lines 1666–1673
    Open as its own page

    An ideal privacy obstruction cannot silently be transferred to an arbitrary noisy accessible channel: a global boundary operation may move previously omitted information into the accessible region. Uniform bounds must concern the actual channel or a justified model relation preserving the obstruction.

Approximate-recovery examples on the declared models

  • sectionApproximate-recovery examples on the declared modelsApproximate-recovery examples on the declared models · lines 1675–1682
    Open as its own page

    The approximate-recovery literature supplies results in worst-case entanglement fidelity BenyOreshkov. We do not identify that metric with half-diamond distance or import a “twice optimal” constant into a different metric. Instead, the following examples have locally computed half-diamond errors.

  • sectionLogical Pauli and coherent errorsApproximate-recovery examples on the declared models › Logical Pauli and coherent errors · lines 1683–1687
    Open as its own page

    Insert a logical error before the ideal encoder, either or , and use its printed ideal decoder.

  • propositionProposition: Logical Pauli noiseApproximate-recovery examples on the declared models › Logical Pauli and coherent errors · Oai280-C@1#prop:pauli · proof attached · lines 1688–1707
    Open as its own page

    For

    For spectator-blind insertion before , the left subsystem decoder has the same error.

    Proof. The triangle inequality gives the upper bound . The Choi state is a Bell-diagonal mixture with Bell overlap , so the Bell-projector measurement gives the matching lower bound. The subsystem statement is Proposition prop:spectatorblind.

  • propositionProposition: A coherent logical rotationApproximate-recovery examples on the declared models › Logical Pauli and coherent errors · proof attached · lines 1709–1727
    Open as its own page

    For and ,

    This is the error of the specified uncorrected ideal decoder, not an optimal-decoder claim when is known.

    Proof. For a pure input with any reference, the overlap with its rotated version is . The numerical range of is the line segment joining its two eigenvalues, whose minimum modulus is . The pure-state trace-distance formula gives the upper bound. The input attains it. Convexity handles mixed inputs.

  • sectionLogical Pauli and coherent errorsApproximate-recovery examples on the declared models › Logical Pauli and coherent errors · lines 1727–1732
    Open as its own page

    A known inverse rotation can remove this logical error. Reporting the uncorrected decoder's error as an information-theoretic obstruction would therefore be incorrect.

  • sectionAn exactly optimal flagged-loss recoveryApproximate-recovery examples on the declared models › An exactly optimal flagged-loss recovery · Oai280-C@1#eq:erasure · lines 1733–1746
    Open as its own page

    On a recoverable triple define the accessible erasure channel

    The erasure flag is an orthogonal classical sector. Decode the non-erased sector by and return in the erasure sector.

  • theoremTheorem: Optimal flagged-loss candidateApproximate-recovery examples on the declared models › An exactly optimal flagged-loss recovery · Oai280-C@1#thm:erasure · proof attached · lines 1747–1762
    Open as its own page

    For the channel (eq:erasure), the printed complete decoder has error and is optimal among all CPTP decoders.

    Proof. Its returned channel is , with error . For any decoder, on a Bell input the non-erased contribution has Bell overlap at most one, while the erasure contribution has overlap exactly after any replacement output. The total overlap is at most . The Bell-projector measurement therefore gives error at least .

  • sectionAn exactly optimal flagged-loss recoveryApproximate-recovery examples on the declared models › An exactly optimal flagged-loss recovery · lines 1762–1767
    Open as its own page

    Thus the comparison includes an independently specified approximate candidate with a proved optimality statement, rather than an unverified numerical “near-optimal” label.

  • propositionProposition: Fixed-spectator trap in the connected modelApproximate-recovery examples on the declared models › Spectator-dependent error · Oai280-C@1#prop:spectatortrap · proof attached · lines 1770–1794
    Open as its own page

    Let

    act before . The printed left subsystem decoder then implements

    It is exact for every logical state with spectator , but

    Proof. The channel identity follows from Theorem thm:patch. The statement is immediate. For input , the actual and target outputs are and , which are orthogonal. The channel distance is therefore at least one, hence equals one.

  • sectionSpectator-dependent errorApproximate-recovery examples on the declared models › Spectator-dependent error · lines 1794–1799
    Open as its own page

    This counterexample uses the same connected encoder and decoder as the positive subsystem claim. It cannot be dismissed by fixing the spectator during validation.

  • sectionApproximation comparison ledgerApproximate-recovery examples on the declared models › Approximation comparison ledger · lines 1800–1823
    Open as its own page
    Declared channel/modelSpecified errorStatus
    Ideal five-qubit tripleUnique complete decoder; resource restrictions stated separately
    Logical Pauli insertionExact error for the printed decoder
    Logical coherent rotationSpecified decoder only; known inverse can improve it
    Flagged triple erasureOptimal over all CPTP decoders
    Controlled spectator phase before Fixed spectator would conceal the failure
    Successful branch with replacement failureComplete returned channel, with flag discarded

Feasibility and certificate-specific shot limitations

  • sectionFeasibility and certificate-specific shot limitationsFeasibility and certificate-specific shot limitations · lines 1825–1829
    Open as its own page

    The calculations in this section are prospective design calculations. They are not experimental data.

  • propositionProposition: A forty-shot limitationFeasibility and certificate-specific shot limitations › Why forty shots cannot pass this Hoeffding certificate · Oai280-C@1#prop:forty · proof attached · lines 1832–1860
    Open as its own page

    Use Corollary cor:bell with no calibration or transfer allowance. If each of the three settings has at most forty shots and each two-sided allocation satisfies , then no data set can certify a threshold . The statement also covers forty shots in total.

    Proof. Each radius satisfies

    Since the measured correlations lie in , and

    Therefore the best possible upper certificate is at least

    It cannot be at most .

  • sectionWhy forty shots cannot pass this Hoeffding certificateFeasibility and certificate-specific shot limitations › Why forty shots cannot pass this Hoeffding certificate · Oai280-C@1#eq:hoeffding-shots · lines 1860–1883
    Open as its own page

    This is a limitation of a specified sufficient procedure, not a universal lower bound on all recovery experiments or all confidence methods. It gives a local proof of the limitation reported for Oai280-A/B CheungOai280AB.

    For one task with equal shot counts and allocations , the best possible correlations give

    Thus passing even in that ideal-data case requires

  • sectionExact binomial alternativesFeasibility and certificate-specific shot limitations › Exact binomial alternatives · lines 1884–1894
    Open as its own page

    Exact binomial confidence inversion is a different valid procedure ClopperPearson. For a Bernoulli error probability , with errors in trials, define its one-sided upper endpoint by

    when , and set when .

  • lemmaLemma: Coverage of the one-sided binomial endpointFeasibility and certificate-specific shot limitations › Exact binomial alternatives · proof attached · lines 1895–1909
    Open as its own page

    The endpoint above satisfies . For zero observed errors,

    Proof. For fixed , the endpoint is monotone in . The event is a lower-tail event whose probability is at most by the defining tail equation and discreteness. At , the equation is .

  • sectionExact binomial alternativesFeasibility and certificate-specific shot limitations › Exact binomial alternatives · Oai280-C@1#eq:local-binomial, Oai280-C@1#eq:bell-binomial · lines 1909–1968
    Open as its own page

    For the local correlation measurements, orient their outcomes as , , and , and let be the respective wrong-outcome probabilities. Then

    Allocating and using the three one-sided endpoints gives

    When no wrong outcome is seen and all settings have shots, passing threshold requires

    If a joint Bell-projector measurement is independently available and calibrated, it directly measures . With no failures in shots, its one-sided lower endpoint is . The corresponding requirement is

    This uses a different measurement architecture, which must be listed in the validation contract.

    For , , and zero calibration and transfer allowance:

    These counts illustrate the procedure dependence of the forty-shot result. Nonzero preparation, measurement, transfer, or physical error changes the required counts.

  • sectionPower under a declared noise modelFeasibility and certificate-specific shot limitations › Power under a declared noise model · lines 1969–1990
    Open as its own page

    For three independent binomial settings with true error probabilities , fixed , and a predeclared acceptance rule, its acceptance probability is exactly

    This expression is a reproducible prospective power calculation. A go/no-go design may require this probability to exceed a stated value, for example , under a stated design channel. It does not prove that the apparatus has that channel.

    Under an independently supported Pauli-channel hypothesis, Proposition prop:pauli gives the stronger conversion . That may greatly improve shot requirements. The hypothesis cannot be manufactured from a favorable identity overlap alone.

  • sectionWhat randomized benchmarking does and does not supplyFeasibility and certificate-specific shot limitations › What randomized benchmarking does and does not supply · lines 1991–2007
    Open as its own page

    Randomized benchmarking estimates partial gate-noise characteristics under its printed assumptions. Wallman and Flammia analyze the variance due to sampling random sequences and explicitly separate that variance from finite repetitions of each sequence WallmanFlammia. Their asymptotic variance formulas contain remainder terms; dropping such terms does not create an exact finite-sample theorem for this manuscript.

    Our certificates sample complete decoder outputs directly. We do not import randomized-benchmarking sequence counts as decoder validation counts, do not infer the access audit from benchmarking, and do not replace mixed-target Choi testing with an average gate infidelity. Benchmarking can support a separate engineering ledger only when the assumptions and metric conversion are justified.

Operational maps and interpretation

  • sectionOperational maps and interpretationOperational maps and interpretation · lines 2009–2059
    Open as its own page

    A reported map should contain, for each tested task:

    AccessTargetIdeal benchmarkAudit/resourcesIntervalDecision
    Declared registersEffect, code, subsystem, or algebraTheorem and modelSupported contract and scoped budgetsCertified, specified-decoder excluded, or inconclusive

    An all-decoder exclusion is a separate annotation supported by Proposition prop:optimal, not by failure of a sufficient certificate. With unsupported transfer or calibration assumptions, the result is inconclusive rather than certified.

    -dependent access. The connected model in Section sec:patch is a finite two-cell perfect-tensor code. Its graph specifies contractions and accessible legs. We do not identify its regions with continuum entanglement wedges. A comparison is called geometry-dependent only when changing the graph or contraction pattern is shown to change the channel, the attainable recovery, or a resource-constrained recovery class.

    gravitational obligations. This paper does not construct a gravitational dictionary, establish a semiclassical regime, identify a continuum boundary algebra, or derive a metric from its recovery map. The source notes report additional same-model endpoint obligations in En07-B but do not supply their full statements CheungEn07B. No such obligation is treated as proved or as a premise here.

    recovery problems. The internal identifiers OpenAI 280, 283, 290, and 365 are described in the supplied notes as involving, respectively, conformal-net extensions, unitary synthesis, bicentralizer questions, and geometric inverse recovery. None is used to infer a decoder, an implementation certificate, a radiation history, or a gravitational metric. Coincidence of the word “recovery” is not an interface theorem.

Conclusion

  • sectionConclusionConclusion · lines 2060–2085
    Open as its own page

    A recovery claim is operational only after its information target, accessible interface, complete decoder, reference convention, and validation assumptions have been fixed. We supplied those interfaces and proved them locally on a connected finite encoding.

    The resulting statements are stronger than exact named-observable readout and narrower than unrestricted gravitational reconstruction. They certify a specified implemented channel, distinguish failure of a certificate from a genuine obstruction, and permit separately proved resource and all-decoder bounds. The subsystem and algebra targets remain valid on correlated inputs. The confidence bounds retain the input-dimension factor, include calibration explicitly, and never silently discard unsuccessful branches.

    The minimum outcome is therefore achieved: a finite logical subsystem and hybrid algebra, constructive access-restricted programmes, and simultaneous reference-preserving certificates for their complete channels. Larger networks, tighter mixed-target estimators, and apparatus-specific audits may be added without changing the logical separation between code theory, implementation, certification, and gravitational interpretation.

Exact specification and reproduction checklist

  • sectionExact specification and reproduction checklistExact specification and reproduction checklist · lines 2087–2122
    Open as its own page

    The following finite procedure reproduces the ideal model without external code data.

    1. Form the four Pauli matrices .

    2. Compute

    3. Set the two columns of by (eq:encoder).

    4. For each triple , assemble using (eq:UB). Check .

    5. Assemble and with their printed index orientations.

    6. Assemble using (eq:W-components). Check .

    7. For each exterior triple , assemble using (eq:UK).

    8. Verify channel identities on every input matrix unit: four units for a qubit task and sixteen for the two-qubit bulk.

    9. Build a decoder programme with all registers, arrivals, discards, instruments, and terminal replacements listed.

    10. Freeze validation settings and failure allocations before collecting held-out shots.

    11. Retain every trial record, including failures.

    12. Compute the appropriate interval and apply the three-way decision rule.

    Because has real entries fixed by a finite Pauli projector, all ideal identities above admit exact algebraic checking. Numerical checks are useful regression tests, but the proofs in the main text, not floating-point agreement, establish the identities.

Debugging summary

  • sectionDebugging summaryDebugging summary · lines 2124–2158
    Open as its own page

    The completed framework includes the following corrections to potentially stronger but unjustified claims.

    1. Reference preservation is built into the error metric, rather than inferred from unentangled test states.

    2. The constant-complement criterion is restricted to full-code recovery.

    3. Snapshot determination and adjoint containment imply linear factorization, not a CPTP inverse.

    4. The joined normalized tensors require the explicit factor in (eq:W-components).

    5. The connected encoder is implemented deterministically through (eq:W); Bell postselection is not silently normalized away.

    6. A coherent environment lower bound is not a universal live-memory lower bound.

    7. Streaming and communication lower bounds are scoped to their stated input access and resource architectures.

    8. Decoder workspace and source storage are accounted for separately.

    9. Failure branches are included in the tested channel.

    10. The identity Choi-overlap conversion has factor . Mixed algebra and subsystem targets use a separate trace-norm certificate.

    11. Calibration allowances and tested-to-claimed channel transfer allowances have different meanings.

    12. The forty-shot limitation is procedure-specific.

    13. A specified decoder's lower bound does not exclude every decoder.

    14. Ideal privacy obstructions are not automatically valid after arbitrary global boundary noise.

    15. No finite recovery map is silently identified with an entanglement wedge or a metric.

Source provenance and manuscript identifiers

  • sectionSource provenance and manuscript identifiersSource provenance and manuscript identifiers · lines 2160–2218
    Open as its own page

    The bibliography separates identified published articles from internal Cheung manuscript identifiers. For the latter, the supplied document Oai280-C ref.txt reports thematic roles and theorem labels. It does not supply the full manuscripts, exact titles, dates, venues, or persistent identifiers. The entries below therefore do not invent those details.

    Supplied identifierReported roleLocal replacement
    En02-B/CTask split, ideal access, legal programmes, resource and approximation ledgersSections sec:tasks, sec:block, sec:programmes, sec:approx
    En05-CSnapshot determination and adjoint containmentTheorem thm:snapshot
    I / En06-AClassical-record entanglement-breaking gateProposition prop:EB
    VII-G / Em05-BFull-code complement and complete instrumentsTheorem thm:complement; Theorem thm:programme
    Oai265-BComplete validation and finite-confidence accountingContracts con:main and con:validation; Theorem thm:simultaneous
    Oai290-ASpecified versus optimal decoder; three-way decisionProposition prop:effect; Section sec:statistics
    XVII-ATyped operator/channel target and no-wedge warningSections sec:tasks, sec:interpretation
    Oai280-A/BEffect, spectator, and small-shot controls; patch benchmarksSections sec:block, sec:patch, sec:noise, sec:feasibility
    En07-BAdditional same-model endpoint obligationsNot invoked or discharged

    The local results need not coincide with every stronger statement reported in the notes, because different resource conventions can change a theorem. In particular, the streaming lower bound in this paper is explicitly the three-share model of Theorem thm:stream. Verification of any different manuscript claim requires its full definitions.

  • bibliographyReferencesSource provenance and manuscript identifiers · lines 2219–2362
    Open as its own page

    BenyKempfKribs

    C. Bény, A. Kempf, and D. W. Kribs, “Generalization of quantum error correction via the Heisenberg picture,” Physical Review Letters 98, 100502 (2007). doi:10.1103/PhysRevLett.98.100502. arXiv:quant-ph/0608071.

    BenyKempfKribsPRA

    C. Bény, A. Kempf, and D. W. Kribs, “Quantum error correction of observables,” Physical Review A 76, 042303 (2007). doi:10.1103/PhysRevA.76.042303.

    BenyOreshkov

    C. Bény and O. Oreshkov, “General conditions for approximate quantum error correction and near-optimal recovery channels,” Physical Review Letters 104, 120501 (2010). doi:10.1103/PhysRevLett.104.120501. arXiv:0907.5391.

    PastawskiEtAl

    F. Pastawski, B. Yoshida, D. Harlow, and J. Preskill, “Holographic quantum error-correcting codes: Toy models for the bulk/boundary correspondence,” Journal of High Energy Physics 2015(06), 149 (2015). doi:10.1007/JHEP06(2015)149. arXiv:1503.06237.

    LaflammeEtAl

    R. Laflamme, C. Miquel, J. P. Paz, and W. H. Zurek, “Perfect quantum error correction code,” Physical Review Letters 77, 198–201 (1996). doi:10.1103/PhysRevLett.77.198. arXiv:quant-ph/9602019.

    WallmanFlammia

    J. J. Wallman and S. T. Flammia, “Randomized benchmarking with confidence,” arXiv:1404.6025v4 (2015). The supplied version is used for its normalized Choi convention, diamond-distance bounds, and finite-sampling qualifications. arXiv:1404.6025.

    Watrous

    J. Watrous, “Simpler semidefinite programs for completely bounded norms,” arXiv:1207.5726. arXiv:1207.5726.

    Hoeffding

    W. Hoeffding, “Probability inequalities for sums of bounded random variables,” Journal of the American Statistical Association 58(301), 13–30 (1963). doi:10.1080/01621459.1963.10500830.

    ClopperPearson

    C. J. Clopper and E. S. Pearson, “The use of confidence or fiducial limits illustrated in the case of the binomial,” Biometrika 26(4), 404–413 (1934). doi:10.1093/biomet/26.4.404.

    CheungEn02B

    N. Cheung, internal manuscript identifier En02-B. Attribution and theorem-role descriptions supplied in Oai280-C ref.txt; full text and publication metadata not supplied. Cited for provenance only.

    CheungEn02C

    N. Cheung, internal manuscript identifier En02-C. Attribution and theorem-role descriptions supplied in Oai280-C ref.txt; full text and publication metadata not supplied. Cited for provenance only.

    CheungEn05C

    N. Cheung, internal manuscript identifier En05-C. The supplied notes associate this identifier with snapshot determination and adjoint containment. Full text and publication metadata not supplied.

    CheungIEn06A

    N. Cheung, internal manuscript identifiers I and En06-A. The supplied notes associate them with classical-record and entanglement-breaking obstructions. Full texts and publication metadata not supplied.

    CheungVIIG

    N. Cheung, internal manuscript identifier VII-G. The supplied notes associate it with the full-code constant-complement criterion and spectator conventions. Full text and publication metadata not supplied.

    CheungOai265B

    N. Cheung, internal manuscript identifier Oai265-B. The supplied notes associate it with complete validation contracts, branch accounting, and finite-confidence certification. Full text and publication metadata not supplied.

    CheungOai290A

    N. Cheung, internal manuscript identifier Oai290-A. The supplied notes associate it with effect/channel separation, specified-decoder certification, and three-way decisions. Full text and publication metadata not supplied.

    CheungEm05B

    N. Cheung, internal manuscript identifier Em05-B. The supplied notes associate it with complete instruments, failure branches, complementary leakage, and full-code recovery. Full text and publication metadata not supplied.

    CheungXVIIA

    N. Cheung, internal manuscript identifier XVII-A. The supplied notes associate it with typed operator and channel targets and the separation from entanglement-wedge claims. Full text and publication metadata not supplied.

    CheungOai280AB

    N. Cheung, internal manuscript identifiers Oai280-A and Oai280-B. The supplied notes associate them with finite access, patch recovery, task counterexamples, and certificate-specific shot limitations. Full texts and publication metadata not supplied.

    CheungEn07B

    N. Cheung, internal manuscript identifier En07-B. The supplied notes report additional same-model endpoint obligations. Their full statements, full text, and publication metadata were not supplied; they are not premises of this paper.