A Machine-Checked It\^o Calculus for Brownian Motion
Pith reviewed 2026-06-30 11:31 UTC · model grok-4.3
The pith
The Itô integral is realized inside Lean 4 as a continuous local martingale on the half-line together with Itô's formula for C3 functions.
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
Core claim
On a bounded interval the Itô integral is realized as the continuous L2 martingale whose value at each time is the projection of its terminal value onto the filtration at that time; this identity yields the martingale property and both isometries as immediate consequences. Itô's formula for C3 functions follows from a discrete approximation argument with explicit L2 error bounds. The resulting process admits an almost-surely continuous modification that is a local martingale with respect to the null-augmented filtration, and these bounded-horizon pieces glue to give the integral on the half-line.
What carries the argument
The conditional-expectation projection identity that defines the integral process at each time t from its terminal value.
If this is right
- Adaptedness and the martingale property follow directly from the projection identity.
- The integral satisfies both the terminal and time-indexed Itô isometries.
- Itô's formula holds in both time-independent and time-dependent forms with explicit remainder terms.
- A continuous modification exists that is a local martingale on the positive reals.
Where Pith is reading between the lines
- The separation of the L2 theory from the pathwise theory may simplify formalizations of related stochastic objects.
- Similar projection identities could be used to verify other classical results in stochastic calculus inside proof assistants.
- The bounded-horizon construction suggests a modular route for extending the formalization to longer time intervals or different integrators.
Load-bearing premise
The development assumes the correctness of the supplied definitions and properties of Brownian motion and its filtration from the existing Lean packages.
What would settle it
If the Lean proof script fails to type-check or if an explicit counterexample to one of the stated theorems is found within the bounded interval and C3 class.
Figures
read the original abstract
We develop the It\^o calculus of Brownian motion, machine-checked in Lean~4 over Mathlib and the \lean{BrownianMotion} package. On a bounded interval $[0,T]$ the It\^o integral is built as a Hilbert-space isometry, from a predictable-rectangle $\pi$-system through the density of simple adapted processes. Realized as a process, it is a continuous $L^2$ martingale. One structural identity drives this: the integral at time $t$ is the conditional-expectation projection of its terminal value onto $\F_t$, and from it adaptedness, the martingale property, the contraction bound, and both the terminal and time-indexed It\^o isometries follow as corollaries. On this integral we prove It\^o's formula for $C^3$ functions with bounded derivatives, including the time-dependent form $df = f_x\,dB + (f_t + \tfrac12 f_{xx})\,dt$, by a discrete-to-continuous argument through weighted quadratic variation with explicit $L^2$ remainder bounds. We then pass from the $L^2$ theory to the pathwise. The integral process has an almost-surely continuous modification, and its everywhere-continuous representative is a local martingale for the null-augmented Brownian filtration; gluing the bounded-horizon representatives along the half-line yields the It\^o integral as a continuous local martingale on all of $\R_{\ge 0}$, the form it takes in the classical theory. To our knowledge these are the first machine-checked constructions of the It\^o integral and of It\^o's formula in any proof assistant, and the first to reach a pathwise-continuous local martingale. The boundary is explicit. The $L^2$ integral and It\^o's formula are developed on $[0,T]$ with bounded-derivative integrands; the unrestricted $C^2$ formula, integrators beyond brownian motion, and right-continuity of the filtration lie outside the development.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper develops the Itô calculus for Brownian motion, machine-checked in Lean 4 over Mathlib and the BrownianMotion package. On [0,T] the Itô integral is constructed as an L² isometry from predictable rectangles via density of simple adapted processes, realized as a continuous L² martingale whose properties (adaptedness, martingale property, isometries) follow from a single structural projection identity. Itô's formula for C³ functions with bounded derivatives (including the time-dependent form) is proved via a discrete-to-continuous argument with explicit L² remainder bounds. The development then passes to the pathwise setting: an a.s. continuous modification exists, the everywhere-continuous version is a local martingale on the null-augmented filtration, and gluing yields the continuous local-martingale form on ℝ≥0.
Significance. If the result holds, this is a significant contribution as the first machine-checked constructions of the Itô integral and Itô's formula in any proof assistant, and the first to reach a pathwise-continuous local martingale. The fully machine-checked Lean proofs, the clean structural projection identity that yields multiple properties as corollaries, the explicit L² remainder bounds, and the explicit scope boundaries (bounded interval, bounded-derivative integrands, Brownian motion only) are notable strengths. Reliance on pre-existing definitions from Mathlib and the BrownianMotion package is standard and does not introduce unverified gaps.
minor comments (2)
- The abstract and introduction both state that these are 'the first' machine-checked constructions; a brief comparison paragraph citing the closest prior formalizations (even if they stop short of pathwise continuity) would strengthen the novelty claim.
- Notation for the filtration (ℱ_t) and the null-augmented version is introduced without an explicit forward reference to the package definitions; a one-sentence pointer in §2 would aid readers unfamiliar with the BrownianMotion library.
Simulated Author's Rebuttal
We thank the referee for their careful reading and positive evaluation of the manuscript. We are pleased that the contribution is viewed as significant and that the recommendation is to accept.
Circularity Check
No significant circularity
full rationale
The paper constructs the Itô integral and Itô's formula as formal Lean 4 proofs over the pre-existing BrownianMotion package and Mathlib definitions of Brownian motion and filtration. All steps (Hilbert-space isometry via predictable rectangles and density, discrete-to-continuous argument with explicit remainder bounds, passage to pathwise continuous local martingale via modification and gluing) are derived inside the proof assistant from library primitives; no parameter fitting, self-referential equations, or load-bearing self-citations appear. Reliance on external library definitions is standard for formalizations and does not reduce the claimed results to the inputs by construction.
Axiom & Free-Parameter Ledger
axioms (1)
- standard math Standard axioms of real analysis, measure theory, and conditional expectation as formalized in Mathlib
Forward citations
Cited by 3 Pith papers
-
The Fundamental Theorem of Asset Pricing, Formalized in Lean 4
First machine-checked formalization of the FTAP in Lean 4 across three settings, with explicit EMM construction via minimization of E[log(1+e<θ,Y>)] in the d-asset case.
-
A Formally Verified Library of Mathematical Finance in Lean 4
A Lean 4 library formalizes over 200 sorry-free theorems in mathematical finance, constructs the L² Itô integral as a bounded linear isometry, derives the risk-neutral pricing measure, and enforces an axiom-usage audit.
-
A Formally Verified Library of Mathematical Finance in Lean 4
A Lean 4 library with 200+ sorry-free theorems formalizes mathematical finance including the L2 Itô integral and derived risk-neutral measure, plus a faithfulness audit.
Reference graph
Works this paper leans on
-
[1]
Avigad, J
J. Avigad, J. Hölzl, L. Serafin. A formally verified proof of the central limit theorem. Journal of Automated Reasoning, 59(4):389–423, 2017
2017
-
[2]
Degenne et al.brownian-motion: a Lean 4 development of Brownian motion
R. Degenne et al.brownian-motion: a Lean 4 development of Brownian motion. https:// github.com/RemyDegenne/brownian-motion, 2024–2026. Consumed at commit eaa4391
2024
-
[3]
R. Degenne, D. Ledvinka, E. Marion, P . Pfaffelhuber. Formalization of Brownian motion in Lean. arXiv:2511.20118, 2025
-
[4]
Echenim, H
M. Echenim, H. Guiol, N. Peltier. Formalizing the Cox–Ross–Rubinstein pricing of European derivatives in Isabelle/HOL.Journal of Automated Reasoning, 64:737–765, 2020
2020
-
[5]
R. Coelho. A formally verified library of mathematical finance in Lean 4. arXiv:2606.01356, 2026
work page internal anchor Pith review Pith/arXiv arXiv 2026
-
[6]
K. Itô. Stochastic integral.Proceedings of the Imperial Academy, T okyo, 20(8):519–524, 1944
1944
-
[7]
Karatzas, S
I. Karatzas, S. E. Shreve.Brownian Motion and Stochastic Calculus, 2nd ed. Springer, 1991
1991
- [8]
-
[9]
de Moura, S
L. de Moura, S. Ullrich. The Lean 4 theorem prover and programming language. In CADE 28, LNCS 12699, pp. 625–635, 2021. 15
2021
-
[10]
The Lean mathematical library
The mathlib Community. The Lean mathematical library. InCPP 2020, pp. 367–381, 2020. 16
2020
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.