Intrinsically halting PPT realizations #
Every strict clocked PPT certificate admits a finite machine that actually halts in polynomial time with the same output distribution. The clock compiler starts with blank tapes and charges preparation of its unary budget. Its bound and finite control are uniform over all inputs.
Main results #
Turing.MultiTapePTM.exists_halting_clock: compile a polynomial cutoff under fair-coin semantics.Cslib.Probability.IsPPTOn.exists_halting_machine: choose an intrinsically halting PPT witness.
References #
Adapts Computability/Probabilistic/Clock.lean on the cslib crypto branch at
5ff69ca93402e7c947208dc56396d6d86203ccd8, using the common machine compilers and existing
tidy functional budget generation.
A polynomial cutoff can be implemented by a finite machine that halts under fair-coin semantics, with one polynomial bound on all inputs and every supported execution.
Replace a strict clocked certificate by an intrinsically halting finite realization. The new machine and bound are fixed before choosing an input. It halts on every raw word, including words outside the declared input encoding.