Theorem: Groth16TypeIII.is_sound_quotient_version
Proof state before:
case intro
F : Type
inst✝ : Field F
n_stmt n_wit n_var : ℕ
u_stmt : Fin n_stmt → Polynomial F
u_wit : Fin n_wit → Polynomial F
v_stmt : Fin n_stmt → Polynomial F
v_wit : Fin n_wit → Polynomial F
w_stmt : Fin n_stmt → Polynomial F
w_wit : Fin n_wit → Polynomial F
t : Polynomial F
stmt : Groth16TypeIII.Stmt
prover : Prover F Groth16TypeIII
h0012 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * w_stmt x)
              (List.finRange n_stmt)).sum *
          (List.map (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
              (List.finRange n_var)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0021 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map
                (fun x =>
                  Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                    (Polynomial.X ^ ↑x * t))
                (List.finRange (n_var - 1))).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum) +
        -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * w_wit x)
                (List.finRange n_wit)).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0022 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum *
                (List.map
                    (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum) +
            (-((List.map
                      (fun x =>
                        Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                          (Polynomial.X ^ ↑x * t))
                      (List.finRange (n_var - 1))).sum *
                  Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ)) +
              -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * w_wit x)
                      (List.finRange n_wit)).sum *
                  Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ))) +
          -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * w_stmt x)
                  (List.finRange n_stmt)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ)) +
        ((List.map (fun x => Polynomial.C (stmt x) * w_stmt x) (List.finRange n_stmt)).sum +
          ((List.map
                (fun x =>
                  Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                    (Polynomial.X ^ ↑x * t))
                (List.finRange (n_var - 1))).sum +
            (List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x)) * w_wit x)
                (List.finRange n_wit)).sum))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0112 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * u_stmt x)
                (List.finRange n_stmt)).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum) +
        -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * w_stmt x)
                (List.finRange n_stmt)).sum *
            Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0121 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * u_wit x)
                (List.finRange n_wit)).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum) +
        (-((List.map
                  (fun x =>
                    Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                      (Polynomial.X ^ ↑x * t))
                  (List.finRange (n_var - 1))).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) +
          -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * w_wit x)
                  (List.finRange n_wit)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0122 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.β) *
                  (List.map
                      (fun x =>
                        Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                      (List.finRange n_var)).sum) +
              -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * u_wit x)
                      (List.finRange n_wit)).sum *
                  Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ)) +
            -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * u_stmt x)
                    (List.finRange n_stmt)).sum *
                Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ)) +
          -((List.map
                  (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                  (List.finRange n_var)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) +
        ((List.map (fun x => Polynomial.C (stmt x) * u_stmt x) (List.finRange n_stmt)).sum +
          (List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x)) * u_wit x)
              (List.finRange n_wit)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0212 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * u_stmt x)
              (List.finRange n_stmt)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0221 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * u_wit x)
              (List.finRange n_wit)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0222 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.β) *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1022 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.α) *
                (List.map
                    (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum) +
            -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * v_wit x)
                    (List.finRange n_wit)).sum *
                Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ)) +
          -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * v_stmt x)
                  (List.finRange n_stmt)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ)) +
        ((List.map (fun x => Polynomial.C (stmt x) * v_stmt x) (List.finRange n_stmt)).sum +
          (List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x)) * v_wit x)
              (List.finRange n_wit)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1112 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * v_stmt x)
              (List.finRange n_stmt)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1121 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * v_wit x)
              (List.finRange n_wit)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1122 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.α) *
            Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) +
        1) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
⊢ (Ideal.Quotient.mk (Ideal.span {t}))
      (((List.map (fun i => Polynomial.C (stmt i) * u_stmt i) (List.finRange n_stmt)).sum +
            (List.map
                (fun i =>
                  Polynomial.C ((fun prover i => prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q i)) prover i) * u_wit i)
                (List.finRange n_wit)).sum) *
          ((List.map (fun i => Polynomial.C (stmt i) * v_stmt i) (List.finRange n_stmt)).sum +
            (List.map
                (fun i =>
                  Polynomial.C ((fun prover i => prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q i)) prover i) * v_wit i)
                (List.finRange n_wit)).sum) -
        ((List.map (fun i => Polynomial.C (stmt i) * w_stmt i) (List.finRange n_stmt)).sum +
          (List.map
              (fun i =>
                Polynomial.C ((fun prover i => prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q i)) prover i) * w_wit i)
              (List.finRange n_wit)).sum)) =
    0

case intro.hq
F : Type
inst✝ : Field F
n_stmt n_wit n_var : ℕ
u_stmt : Fin n_stmt → Polynomial F
u_wit : Fin n_wit → Polynomial F
v_stmt : Fin n_stmt → Polynomial F
v_wit : Fin n_wit → Polynomial F
w_stmt : Fin n_stmt → Polynomial F
w_wit : Fin n_wit → Polynomial F
t : Polynomial F
stmt : Groth16TypeIII.Stmt
prover : Prover F Groth16TypeIII
h0012 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * w_stmt x)
              (List.finRange n_stmt)).sum *
          (List.map (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
              (List.finRange n_var)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0021 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map
                (fun x =>
                  Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                    (Polynomial.X ^ ↑x * t))
                (List.finRange (n_var - 1))).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum) +
        -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * w_wit x)
                (List.finRange n_wit)).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0022 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum *
                (List.map
                    (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum) +
            (-((List.map
                      (fun x =>
                        Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                          (Polynomial.X ^ ↑x * t))
                      (List.finRange (n_var - 1))).sum *
                  Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ)) +
              -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * w_wit x)
                      (List.finRange n_wit)).sum *
                  Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ))) +
          -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * w_stmt x)
                  (List.finRange n_stmt)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ)) +
        ((List.map (fun x => Polynomial.C (stmt x) * w_stmt x) (List.finRange n_stmt)).sum +
          ((List.map
                (fun x =>
                  Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                    (Polynomial.X ^ ↑x * t))
                (List.finRange (n_var - 1))).sum +
            (List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x)) * w_wit x)
                (List.finRange n_wit)).sum))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0112 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * u_stmt x)
                (List.finRange n_stmt)).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum) +
        -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * w_stmt x)
                (List.finRange n_stmt)).sum *
            Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0121 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * u_wit x)
                (List.finRange n_wit)).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum) +
        (-((List.map
                  (fun x =>
                    Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                      (Polynomial.X ^ ↑x * t))
                  (List.finRange (n_var - 1))).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) +
          -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * w_wit x)
                  (List.finRange n_wit)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0122 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.β) *
                  (List.map
                      (fun x =>
                        Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                      (List.finRange n_var)).sum) +
              -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * u_wit x)
                      (List.finRange n_wit)).sum *
                  Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ)) +
            -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * u_stmt x)
                    (List.finRange n_stmt)).sum *
                Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ)) +
          -((List.map
                  (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                  (List.finRange n_var)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) +
        ((List.map (fun x => Polynomial.C (stmt x) * u_stmt x) (List.finRange n_stmt)).sum +
          (List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x)) * u_wit x)
              (List.finRange n_wit)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0212 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * u_stmt x)
              (List.finRange n_stmt)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0221 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * u_wit x)
              (List.finRange n_wit)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0222 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.β) *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1022 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.α) *
                (List.map
                    (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum) +
            -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * v_wit x)
                    (List.finRange n_wit)).sum *
                Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ)) +
          -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * v_stmt x)
                  (List.finRange n_stmt)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ)) +
        ((List.map (fun x => Polynomial.C (stmt x) * v_stmt x) (List.finRange n_stmt)).sum +
          (List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x)) * v_wit x)
              (List.finRange n_wit)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1112 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * v_stmt x)
              (List.finRange n_stmt)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1121 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * v_wit x)
              (List.finRange n_wit)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1122 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.α) *
            Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) +
        1) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
⊢ t.Monic
Tactic:
simp? [map_add, map_neg, map_mul, map_zero, RingHom.list_map_sum (Ideal.Quotient.mk (Ideal.span {t}))] at h0012 h0021 h0022 h0112 h0121 h0122 h0212 h0221 h0222 h1022 h1112 h1121 h1122 ⊢
Proof state after:
case intro
F : Type
inst✝ : Field F
n_stmt n_wit n_var : ℕ
u_stmt : Fin n_stmt → Polynomial F
u_wit : Fin n_wit → Polynomial F
v_stmt : Fin n_stmt → Polynomial F
v_wit : Fin n_wit → Polynomial F
w_stmt : Fin n_stmt → Polynomial F
w_wit : Fin n_wit → Polynomial F
t : Polynomial F
stmt : Groth16TypeIII.Stmt
prover : Prover F Groth16TypeIII
h0012 :
  (List.map
          (fun x =>
            (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x))) *
              (Ideal.Quotient.mk (Ideal.span {t})) (w_stmt x))
          (List.finRange n_stmt)).sum *
      (List.map
          (fun x =>
            (Ideal.Quotient.mk (Ideal.span {t}))
                (Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x))) *
              (Ideal.Quotient.mk (Ideal.span {t})) Polynomial.X ^ ↑x)
          (List.finRange n_var)).sum =
    0
h0021 :
  (List.map
          (fun x =>
            (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x))) *
              (Ideal.Quotient.mk (Ideal.span {t})) (w_wit x))
          (List.finRange n_wit)).sum *
      (List.map
          (fun x =>
            (Ideal.Quotient.mk (Ideal.span {t}))
                (Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x))) *
              (Ideal.Quotient.mk (Ideal.span {t})) Polynomial.X ^ ↑x)
          (List.finRange n_var)).sum =
    0
h0022 :
  -((List.map
                  (fun x =>
                    (Ideal.Quotient.mk (Ideal.span {t}))
                        (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow x))) *
                      (Ideal.Quotient.mk (Ideal.span {t})) Polynomial.X ^ ↑x)
                  (List.finRange n_var)).sum *
              (List.map
                  (fun x =>
                    (Ideal.Quotient.mk (Ideal.span {t}))
                        (Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x))) *
                      (Ideal.Quotient.mk (Ideal.span {t})) Polynomial.X ^ ↑x)
                  (List.finRange n_var)).sum) +
          -((List.map
                  (fun x =>
                    (Ideal.Quotient.mk (Ideal.span {t}))
                        (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x))) *
                      (Ideal.Quotient.mk (Ideal.span {t})) (w_wit x))
                  (List.finRange n_wit)).sum *
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ))) +
        -((List.map
                (fun x =>
                  (Ideal.Quotient.mk (Ideal.span {t}))
                      (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x))) *
                    (Ideal.Quotient.mk (Ideal.span {t})) (w_stmt x))
                (List.finRange n_stmt)).sum *
            (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ))) +
      ((List.map
            (fun x =>
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (stmt x)) *
                (Ideal.Quotient.mk (Ideal.span {t})) (w_stmt x))
            (List.finRange n_stmt)).sum +
        (List.map
            (fun x =>
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x))) *
                (Ideal.Quotient.mk (Ideal.span {t})) (w_wit x))
            (List.finRange n_wit)).sum) =
    0
h0112 :
  -((List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t}))
                    (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x))) *
                  (Ideal.Quotient.mk (Ideal.span {t})) (u_stmt x))
              (List.finRange n_stmt)).sum *
          (List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t}))
                    (Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x))) *
                  (Ideal.Quotient.mk (Ideal.span {t})) Polynomial.X ^ ↑x)
              (List.finRange n_var)).sum) +
      -((List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t}))
                    (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x))) *
                  (Ideal.Quotient.mk (Ideal.span {t})) (w_stmt x))
              (List.finRange n_stmt)).sum *
          (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    0
h0121 :
  -((List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t}))
                    (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x))) *
                  (Ideal.Quotient.mk (Ideal.span {t})) (u_wit x))
              (List.finRange n_wit)).sum *
          (List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t}))
                    (Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x))) *
                  (Ideal.Quotient.mk (Ideal.span {t})) Polynomial.X ^ ↑x)
              (List.finRange n_var)).sum) +
      -((List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t}))
                    (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x))) *
                  (Ideal.Quotient.mk (Ideal.span {t})) (w_wit x))
              (List.finRange n_wit)).sum *
          (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    0
h0122 :
  -((Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.β)) *
                (List.map
                    (fun x =>
                      (Ideal.Quotient.mk (Ideal.span {t}))
                          (Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x))) *
                        (Ideal.Quotient.mk (Ideal.span {t})) Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum) +
            -((List.map
                    (fun x =>
                      (Ideal.Quotient.mk (Ideal.span {t}))
                          (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x))) *
                        (Ideal.Quotient.mk (Ideal.span {t})) (u_wit x))
                    (List.finRange n_wit)).sum *
                (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ))) +
          -((List.map
                  (fun x =>
                    (Ideal.Quotient.mk (Ideal.span {t}))
                        (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x))) *
                      (Ideal.Quotient.mk (Ideal.span {t})) (u_stmt x))
                  (List.finRange n_stmt)).sum *
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ))) +
        -((List.map
                (fun x =>
                  (Ideal.Quotient.mk (Ideal.span {t}))
                      (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow x))) *
                    (Ideal.Quotient.mk (Ideal.span {t})) Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum *
            (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) +
      ((List.map
            (fun x =>
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (stmt x)) *
                (Ideal.Quotient.mk (Ideal.span {t})) (u_stmt x))
            (List.finRange n_stmt)).sum +
        (List.map
            (fun x =>
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x))) *
                (Ideal.Quotient.mk (Ideal.span {t})) (u_wit x))
            (List.finRange n_wit)).sum) =
    0
h0212 :
  (List.map
          (fun x =>
            (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x))) *
              (Ideal.Quotient.mk (Ideal.span {t})) (u_stmt x))
          (List.finRange n_stmt)).sum *
      (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) =
    0
h0221 :
  (List.map
          (fun x =>
            (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x))) *
              (Ideal.Quotient.mk (Ideal.span {t})) (u_wit x))
          (List.finRange n_wit)).sum *
      (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) =
    0
h0222 :
  (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.β)) *
      (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) =
    0
h1022 :
  -((Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.α)) *
              (List.map
                  (fun x =>
                    (Ideal.Quotient.mk (Ideal.span {t}))
                        (Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x))) *
                      (Ideal.Quotient.mk (Ideal.span {t})) Polynomial.X ^ ↑x)
                  (List.finRange n_var)).sum) +
          -((List.map
                  (fun x =>
                    (Ideal.Quotient.mk (Ideal.span {t}))
                        (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x))) *
                      (Ideal.Quotient.mk (Ideal.span {t})) (v_wit x))
                  (List.finRange n_wit)).sum *
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ))) +
        -((List.map
                (fun x =>
                  (Ideal.Quotient.mk (Ideal.span {t}))
                      (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x))) *
                    (Ideal.Quotient.mk (Ideal.span {t})) (v_stmt x))
                (List.finRange n_stmt)).sum *
            (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ))) +
      ((List.map
            (fun x =>
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (stmt x)) *
                (Ideal.Quotient.mk (Ideal.span {t})) (v_stmt x))
            (List.finRange n_stmt)).sum +
        (List.map
            (fun x =>
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x))) *
                (Ideal.Quotient.mk (Ideal.span {t})) (v_wit x))
            (List.finRange n_wit)).sum) =
    0
h1112 :
  (List.map
          (fun x =>
            (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x))) *
              (Ideal.Quotient.mk (Ideal.span {t})) (v_stmt x))
          (List.finRange n_stmt)).sum *
      (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) =
    0
h1121 :
  (List.map
          (fun x =>
            (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x))) *
              (Ideal.Quotient.mk (Ideal.span {t})) (v_wit x))
          (List.finRange n_wit)).sum *
      (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) =
    0
h1122 :
  -((Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.α)) *
          (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) +
      1 =
    0
⊢ ((List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (stmt x)) *
                  (Ideal.Quotient.mk (Ideal.span {t})) (u_stmt x))
              (List.finRange n_stmt)).sum +
          (List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t}))
                    (Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x))) *
                  (Ideal.Quotient.mk (Ideal.span {t})) (u_wit x))
              (List.finRange n_wit)).sum) *
        ((List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (stmt x)) *
                  (Ideal.Quotient.mk (Ideal.span {t})) (v_stmt x))
              (List.finRange n_stmt)).sum +
          (List.map
              (fun x =>
                (Ideal.Quotient.mk (Ideal.span {t}))
                    (Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x))) *
                  (Ideal.Quotient.mk (Ideal.span {t})) (v_wit x))
              (List.finRange n_wit)).sum) -
      ((List.map
            (fun x =>
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (stmt x)) *
                (Ideal.Quotient.mk (Ideal.span {t})) (w_stmt x))
            (List.finRange n_stmt)).sum +
        (List.map
            (fun x =>
              (Ideal.Quotient.mk (Ideal.span {t})) (Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x))) *
                (Ideal.Quotient.mk (Ideal.span {t})) (w_wit x))
            (List.finRange n_wit)).sum) =
    0

case intro.hq
F : Type
inst✝ : Field F
n_stmt n_wit n_var : ℕ
u_stmt : Fin n_stmt → Polynomial F
u_wit : Fin n_wit → Polynomial F
v_stmt : Fin n_stmt → Polynomial F
v_wit : Fin n_wit → Polynomial F
w_stmt : Fin n_stmt → Polynomial F
w_wit : Fin n_wit → Polynomial F
t : Polynomial F
stmt : Groth16TypeIII.Stmt
prover : Prover F Groth16TypeIII
h0012 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * w_stmt x)
              (List.finRange n_stmt)).sum *
          (List.map (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
              (List.finRange n_var)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0021 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map
                (fun x =>
                  Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                    (Polynomial.X ^ ↑x * t))
                (List.finRange (n_var - 1))).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum) +
        -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * w_wit x)
                (List.finRange n_wit)).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0022 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum *
                (List.map
                    (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum) +
            (-((List.map
                      (fun x =>
                        Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                          (Polynomial.X ^ ↑x * t))
                      (List.finRange (n_var - 1))).sum *
                  Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ)) +
              -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * w_wit x)
                      (List.finRange n_wit)).sum *
                  Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ))) +
          -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * w_stmt x)
                  (List.finRange n_stmt)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ)) +
        ((List.map (fun x => Polynomial.C (stmt x) * w_stmt x) (List.finRange n_stmt)).sum +
          ((List.map
                (fun x =>
                  Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                    (Polynomial.X ^ ↑x * t))
                (List.finRange (n_var - 1))).sum +
            (List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x)) * w_wit x)
                (List.finRange n_wit)).sum))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0112 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * u_stmt x)
                (List.finRange n_stmt)).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum) +
        -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * w_stmt x)
                (List.finRange n_stmt)).sum *
            Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0121 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * u_wit x)
                (List.finRange n_wit)).sum *
            (List.map
                (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                (List.finRange n_var)).sum) +
        (-((List.map
                  (fun x =>
                    Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow_times_t x)) *
                      (Polynomial.X ^ ↑x * t))
                  (List.finRange (n_var - 1))).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) +
          -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * w_wit x)
                  (List.finRange n_wit)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0122 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.β) *
                  (List.map
                      (fun x =>
                        Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                      (List.finRange n_var)).sum) +
              -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * u_wit x)
                      (List.finRange n_wit)).sum *
                  Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ)) +
            -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * u_stmt x)
                    (List.finRange n_stmt)).sum *
                Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ)) +
          -((List.map
                  (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                  (List.finRange n_var)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) +
        ((List.map (fun x => Polynomial.C (stmt x) * u_stmt x) (List.finRange n_stmt)).sum +
          (List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x)) * u_wit x)
              (List.finRange n_wit)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0212 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * u_stmt x)
              (List.finRange n_stmt)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0221 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * u_wit x)
              (List.finRange n_wit)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h0222 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.β) *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1022 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.α) *
                (List.map
                    (fun x => Polynomial.C (prover.2 Proof_G2_Idx.B (SRS_Elements_G2_Idx.x_pow x)) * Polynomial.X ^ ↑x)
                    (List.finRange n_var)).sum) +
            -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * v_wit x)
                    (List.finRange n_wit)).sum *
                Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.δ)) +
          -((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * v_stmt x)
                  (List.finRange n_stmt)).sum *
              Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.γ)) +
        ((List.map (fun x => Polynomial.C (stmt x) * v_stmt x) (List.finRange n_stmt)).sum +
          (List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.C (SRS_Elements_G1_Idx.q x)) * v_wit x)
              (List.finRange n_wit)).sum)) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1112 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.y x)) * v_stmt x)
              (List.finRange n_stmt)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1121 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-((List.map (fun x => Polynomial.C (prover.1 Proof_G1_Idx.A (SRS_Elements_G1_Idx.q x)) * v_wit x)
              (List.finRange n_wit)).sum *
          Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β))) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
h1122 :
  (Ideal.Quotient.mk (Ideal.span {t}))
      (-(Polynomial.C (prover.1 Proof_G1_Idx.A SRS_Elements_G1_Idx.α) *
            Polynomial.C (prover.2 Proof_G2_Idx.B SRS_Elements_G2_Idx.β)) +
        1) =
    (Ideal.Quotient.mk (Ideal.span {t})) 0
⊢ t.Monic