Polynomial Identity Testing with Division: How OpenAI’s Proof Constructs Universal Matrix Hitting Lists

Imagine a sealed box that accepts a tuple of matrices and returns the value of a hidden formula. Some queries fail because an intermediate matrix has no inverse. Which queries can you choose in advance so that every nonzero formula of a given size gives you a decisive answer? OpenAI’s September 24, 2026 preprint gives polynomial identity testing with division a deterministic answer over the rationals. From the number of variables and a tree-size bound alone, it constructs a polynomial-size list of rational matrix tuples. Every admissible nonzero formula has a defined, invertible value on at least one tuple, even when inverses are nested. The preprint appeared in OpenAI’s October mathematics release.

1. What Is Polynomial Identity Testing for Noncommutative Rational Formulas?

A formula is a rooted tree. Leaves hold variables or rational constants, binary gates add or multiply their inputs in order, and unary gates take inverses. Size counts every vertex, including leaves and inverse gates. At a matrix substitution of dimension dd, a constant cc becomes cIdcI_d, where IdI_d is the identity matrix. Every variable receives a square rational matrix of that same dimension.

Key Facts From Theorem 1.1
ItemGuarantee
Input to the generatorNumber of variables and maximum number of formula-tree vertices
Formula classAdmissible noncommutative rational formulas over the rationals, with nested inverses allowed
What a hit certifiesEvery inverse is defined and the output matrix is invertible
OutputA fixed list of rational matrix tuples of one common dimension
GuaranteePolynomial bit time, matrix dimension, and total binary output length

A formula is admissible if it is defined at some rational matrix tuple of some positive dimension. It is nonzero if some defined rational evaluation yields a nonzero matrix. For admissible formulas, the identity question asks whether every defined evaluation is zero. In black-box polynomial identity testing, the tester queries values and can receive an undefined response. A hitting list lets it schedule all queries in advance, with the same schedule for every formula within the bound.

2. Why Ordinary Substitutions Cannot Detect Noncommutative Identities

The polynomial x1x2−x2x1x_1x_2-x_2x_1 vanishes on every scalar pair because scalar multiplication commutes. Matrix multiplication distinguishes the operations described by its two monomials. Put a single one above the diagonal in the first matrix and a single one below the diagonal in the second.

𝑿1=(0100),𝑿2=(0010)\boldsymbol{X_1=\begin{pmatrix}0&1\\0&0\end{pmatrix},\quad X_2=\begin{pmatrix}0&0\\1&0\end{pmatrix}}

Multiplying in the first order produces a one in the upper-left corner. Reversing the order moves that one to the lower-right corner. The difference is invertible, with determinant −1-1.

𝑿1𝑿2−𝑿2𝑿1=(100−1)\boldsymbol{X_1X_2-X_2X_1=\begin{pmatrix}1&0\\0&-1\end{pmatrix}}

These same inputs also show why the domain matters once inverse gates appear. Each input is singular even though their commutator is invertible. An expression that needs to invert one of the inputs would therefore fail on this pair.

3. Why Division Makes Rational Identity Testing Harder

An inverse gate requires its operand to be invertible after all gates below it have been evaluated. Take the formula x1x1−1−1x_1x_1^{-1}-1, with subtraction implemented using addition and multiplication by −1-1. It returns the zero matrix whenever X1X_1 is invertible. At X1=0X_1=0, evaluating the inverse fails. Replacing the whole formula by the constant zero would change which tuples the tree accepts.

A nested expression such as (x1−1)−1+1(x_1^{-1})^{-1}+1 has two inverse occurrences. Evaluating the outer inverse requires a value from the inner one first. At a proposed tuple, a defined zero is a valid evaluation that fails to witness nonzeroness. An undefined response supplies no value at all. A rational identity testing list must hit the domain and the nonzero condition at the same point.

4. What Earlier Deterministic Methods Achieved

For division-free formulas and noncommutative algebraic branching programs, Raz and Shpilka gave deterministic polynomial-time tests with access to the computation. Bogdanov and Wee used randomized matrix queries for bounded-degree noncommutative polynomials. Forbes and Shpilka built deterministic quasipolynomial-size matrix hitting sets for noncommutative branching programs, a class that includes division-free formulas.

For rational formulas, Derksen and Makam obtained randomized polynomial-time identity testing. Operator scaling and constructive noncommutative-rank algorithms yielded deterministic polynomial-time white-box tests, with coefficient encodings included in their bit costs. Access to the formula or its coefficients gives those algorithms information a value oracle withholds. Arvind, Chatterjee, and Mukhopadhyay obtained quasipolynomial-size rational matrix hitting sets for unrestricted inverse nesting. Their work already used invertible evaluations. The open construction problem was to generate a coefficient-independent black-box list with polynomial bounds on size, matrix dimension, and the cost of writing it down.

5. The Main Theorem Gives a Polynomial-Size Hitting List

Theorem 1.1 of the paper supplies one deterministic Turing machine GG and fixed positive integers C,kC,k. For every n,s≥1n,s\geq 1, the machine receives 1n,1s1^n,1^s, the unary encodings of the number of variables and size bound. It outputs a finite list ℋn,s\mathcal{H}_{n,s} of rational matrix nn-tuples. Both the generation time in bit operations and the entire binary output length are at most C(n+s+1)kC(n+s+1)^k. Entries are encoded with signed binary numerators and positive binary denominators. The construction uses one common positive matrix dimension for the whole list.

For every nonzero admissible formula in nn variables with at most ss vertices, some listed tuple makes the original tree evaluable and its result invertible. Different formulas can have different successful tuples. Invertibility is stronger than nonzeroness because a nonzero matrix can still have a kernel. Requiring full rank connects the hitting property to determinants, which the proof can preserve through specialization.

6. Encoding Formula Trees as Affine Matrix Pencils

	Polynomial identity testing example where the inner inverse certificate rules out the scalar input x = 0.
Polynomial identity testing example where the inner inverse certificate rules out the scalar input x = 0.

An affine pencil of order qq is a square matrix with entries affine in the variables. The coefficients AiA_i are rational matrices of order qq. At a dimension-dd tuple, tensor products replace each scalar coefficient by the corresponding block multiple of the variable’s matrix or of IdI_d.

𝑳(𝒙)=𝑨0+∑𝒊=1𝒏𝑨𝒊𝒙𝒊𝑳(𝑿)=𝑨0⊗𝑰𝒅+∑𝒊=1𝒏𝑨𝒊⊗𝑿𝒊\boldsymbol{\begin{gathered}L(x)=A_0+\sum_{i=1}^n A_i x_i\\L(X)=A_0\otimes I_d+\sum_{i=1}^n A_i\otimes X_i\end{gathered}}

For each subtree hh, the paper constructs a pencil LhL_h of order |h|+1|h|+1 and constant selectors uh,vhu_h,v_h. When the subtree is defined, its value is uhLh−1vhu_hL_h^{-1}v_h, with the selectors tensored with IdI_d at a matrix input. A leaf uses an upper-triangular pencil with unit diagonal and upper-right entry −h-h. Addition stacks the two child pencils on the diagonal and selects the sum. Ordered multiplication puts the constant block −vfug-v_fu_g above the child pencils, so the selected part of the inverse multiplies the two values in the order fgfg.

At an inverse gate h=g−1h=g^{-1}, the new pencil borders LgL_g with vgv_g and ugu_g, with zero in the lower-right block. Once the child is defined, eliminating its invertible block leaves the Schur complement −g-g. The gate pencil is invertible exactly when the required operand is invertible. Bordering the root in the same way checks invertibility of the final value. The proof checks inverse occurrences from leaves upward, using at most s+1s+1 certificates of order at most B=2s+1B=2s+1.

For the nested example, take a=x1−1a=x_1^{-1}, b=a−1b=a^{-1} and Φ=b+1\Phi=b+1. At a scalar input xx, the inverse pencil for aa adds a row and column to the two-by-two leaf pencil.

𝑳𝒂(𝒙)=(1−𝒙0011100)\boldsymbol{L_a(x)=\begin{pmatrix}1&-x&0\\0&1&1\\1&0&0\end{pmatrix}}

Its determinant is −x-x. The bottom-right entry of its inverse is −1/x-1/x for x≠0x\neq 0, so the negative row selector recovers 1/x1/x. The outer inverse pencil has determinant 11. The root augmentation has determinant −(x+1)-(x+1). At zero, the inner inverse pencil supplies the only failed certificate. This is why the proof keeps a pencil for each inverse occurrence.

7. Taylor Reversal, Wronskians, and Small-Subspace Expansion

Write w=n+1w=n+1, Δ=2w3B\Delta=2w^3B, and let MM be the smallest power of two greater than BΔB\Delta. Set N=M−ΔN=M-\Delta. The rectangular map TiT_i sends polynomials of degree less than NN to polynomials of degree less than MM. It expands the input about z=iz=i, for i=0,…,ni=0,\ldots,n. If cia(f)c_{ia}(f) is the Taylor coefficient at order aa, the map reverses the exponents and weights each term by tat^a.

𝑻𝒊𝒇=∑𝒂=0𝑵−1𝒄𝒊𝒂(𝒇)𝒕𝒂(𝒛−𝒊)𝑴−1−𝒂\boldsymbol{T_i f=\sum_{a=0}^{N-1}c_{ia}(f)t^a(z-i)^{M-1-a}}

The proof works over the field F=ℚ((t))F=\mathbb{Q}((t)) of formal Laurent series. Integral coefficients have no negative powers of tt, and a unit has a nonzero constant term. An integral input with a unit Taylor coefficient at index at most AA has an image whose first nonzero term in tt uses only indices at most AA. After reversal, that term vanishes to order at least M−1−AM-1-A at ii. The proof uses reductions of integral vectors to keep the subspace dimensions intact when passing to rational coefficients.

For an hh-dimensional rational space of polynomials of degree less than dd, let dijd_{ij} be its distinct basis vanishing orders at ii, obtained by Taylor elimination. The Wronskian, a determinant of basis polynomials and their successive derivatives, has order ∑jdij−(h2)\sum_j d_{ij}-\binom{h}{2} there. Its degree is at most h(d−1)h(d-1), which bounds the total order at the chosen points. Applying this bound to the reduced input and image spaces gives dimF⁡(∑iTiU)>nk\dim_F(\sum_iT_iU)>nk whenever UU has dimension 1≤k≤B1\leq k\leq B. The padding width Δ\Delta gives the reversed terms an extra vanishing margin. If the image span had dimension at most ndimF⁡Un\dim_F U, its largest vanishing orders at the n+1n+1 points would already exceed the bound from its Wronskian. The contradiction applies to subspaces chosen after the test maps are fixed, including those whose coefficients depend on tt.

A kernel vector for ∑iAi⊗Ti\sum_i A_i\otimes T_i would yield a common input subspace that all the AiA_i send into a strictly smaller output subspace. That shrinkage persists after tensoring with any matrix substitution and contradicts feasibility, meaning the existence of an invertible evaluation over an extension of the rationals. Padding TiT_i with zero columns gives square matrices Ri(t)R_i(t). Injectivity before padding yields the paper’s near-full rank bound.

rankℚ(𝒕)⁡(∑𝒊=0𝒏𝑨𝒊⊗𝑹𝒊(𝒕))≥𝒒𝑵>(𝒒−1)𝑴\boldsymbol{\operatorname{rank}_{\mathbb{Q}(t)}\!\left(\sum_{i=0}^n A_i\otimes R_i(t)\right)\geq qN>(q-1)M}

8. Division-Algebra Deformation Turns Almost-Full Rank Into Full Rank

A rank interval contains just one multiple of the block size, forcing full rank in polynomial identity testing.
A rank interval contains just one multiple of the block size, forcing full rank in polynomial identity testing.

The lift uses a primitive MMth root of unity ω\omega, a diagonal matrix DωD_{\omega} with entries ωj\omega^j, and the cyclic shift SS. With independent parameters p,rp,r, the matrices pDωpD_{\omega} and rSrS commute up to the factor ω\omega. Localizing at nonzero central polynomials in pM,rMp^M,r^M gives a finite-dimensional division algebra. Its nonzero elements have inverses. Fourier expansion in diagonal and shift powers lifts each RiR_i into this algebra and recovers it at p=r=1p=r=1.

A nonzero minor from the padded evaluation survives as a nonzero polynomial in the lift. Block elimination over the division algebra reduces a matrix to identity and zero blocks. Ordinary rank is therefore a multiple of MM. Since the lifted pencil’s rank lies strictly above (q−1)M(q-1)M and at most qMqM, it must be qMqM. The paper also applies the lift to an initial defined nonzero formula evaluation. The original inverse gates stay defined over the extension, and the lifted nonzero value belongs to the division algebra, so it is invertible. At the original tuple the final matrix may have been singular. The witness for the formula’s certificates lives over the extension field, where the deformation makes the final matrix invertible.

9. Constructing Rational Matrix Hitting Lists From a Fixed Integer Grid

A fixed integer grid contains a point that satisfies every determinant check in polynomial identity testing.
A fixed integer grid contains a point that satisfies every determinant check in polynomial identity testing.

To remove complex coefficients, the generator works in ℚ[ξ]/(ξℓ+1)\mathbb{Q}[\xi]/(\xi^{\ell}+1) with ℓ=M/2\ell=M/2. It represents multiplication by each coefficient as a rational matrix in the power basis. Over the complex numbers this representation splits into one block per root of ξℓ+1\xi^{\ell}+1. All these roots are primitive MMth roots of unity, and a rational block matrix is invertible exactly when every root block is invertible.

For a fixed formula, take the product of the lifted determinant polynomials for every certificate and every root, including the constant pencil 11 needed for normalization. Every factor is nonzero and has total degree at most 3BM23BM^2. The product has degree at most 32(s+2)BM3\frac{3}{2}(s+2)BM^3, strictly below H=1+3(s+2)BM3H=1+3(s+2)BM^3. It cannot vanish on the entire grid {1,…,H}3\{1,\ldots,H\}^3. Fix two coordinates and use the univariate root bound on the first. If all grid values vanish, every coefficient vanishes on the remaining grid. Repeating the argument for both remaining coordinates makes the polynomial zero.

At every grid triple the generator forms rational matrices Z0,…,ZnZ_0,\ldots,Z_n via the multiplication representation. It skips singular Z0Z_0 and emits the normalized matrices below. Left multiplication by Iq⊗Z0−1I_q\otimes Z_0^{-1} restores the affine constant term A0⊗IDA_0\otimes I_D. A grid point where the product survives makes every certificate invertible at once.

(𝒁0−1𝒁1,…,𝒁0−1𝒁𝒏),𝑫=𝑴ℓ=𝑴2/2\boldsymbol{\bigl(Z_0^{-1}Z_1,\ldots,Z_0^{-1}Z_n\bigr),\qquad D=M\ell=M^2/2}

10. Why the Construction Is Polynomial-Time Despite Arbitrary Inverse Depth

The generator enumerates a grid in three parameters, regardless of the number of formula variables or inverses. With m=n+s+1m=n+s+1, the paper obtains the following upper bounds for its explicit construction.

Upper Bounds for the Explicit Construction
QuantityUpper Bound
Padded block order MMM≤16m5M\leq 16m^5
Grid side length HHO(m17)O(m^{17})
Grid triples examinedH3=O(m51)H^3=O(m^{51})
Common output dimension DDO(m10)O(m^{10})
Bits per rational entryO(m15log⁡m)O(m^{15}\log m)
Total encoded list lengthO(m87log⁡m)O(m^{87}\log m) bits

The generator clears the common denominator MM and works with integer matrices before normalization. Exact elimination computes determinants with polynomially bounded intermediate bit lengths, and ratios of determinants give the output entries. The formula-specific certificate pencils and determinant product appear only in the proof. The generator never reads the formula, searches for its initial witness, or receives coefficient bit lengths. Large rational constants can change where a hit occurs, while the polynomial degree bound and the grid depend only on size parameters. Evaluating an unknown formula can still cost more as coefficient encodings grow. The exponents describe theoretical upper bounds and give no measured runtime.

11. What the Proof Establishes for Noncommutative Rank and Its Limits

Corollary 5.2 gives a hit for any feasible rational square affine pencil of order at most BB. Corollary 6.1 extends the method to a rectangular pencil AA with aa rows, bb columns, and kk variables. Its noncommutative rank is its rank over the free skew field. The paper pads the pencil with variable blocks so that invertibility of a square completion certifies a chosen rank threshold. At matrix dimension ee, the threshold uu requires rank at least ueue. The new blocks can fill the missing rows and columns precisely when the evaluated pencil meets that threshold. It then projects the hitting list onto the original variables. Here A(X)A(X) is the evaluated aeae-by-bebe block matrix and ℛa,b,k\mathcal{R}_{a,b,k} depends only on the three size parameters.

ncrk⁡𝑨=max(𝒆,𝑿)∈ℛ𝒂,𝒃,𝒌⁡rankℚ⁡𝑨(𝑿)𝒆\boldsymbol{\operatorname{ncrk} A=\max_{(e,X)\in\mathcal{R}_{a,b,k}}\frac{\operatorname{rank}_{\mathbb{Q}} A(X)}{e}}

Exact matrix values or ordinary ranks suffice. The maximum is exact without rounding, although individual ratios can be fractional. The formula theorem covers bounded-size trees over the rationals. Its guarantees leave general arithmetic circuits, which can share intermediate results, and finite fields outside its scope. OpenAI’s Lean documentation identifies the main rational hitting-list theorem, including the machine and encoding bounds, as the formalized result. The rectangular rank identity is a corollary in the paper.

For polynomial identity testing with division, the advance is a universal query schedule whose successful hit respects the original tree’s domain. The test points can be chosen before the coefficients are known because the proof bounds the degrees of the determinant conditions they must satisfy. Explore more proofs in theoretical computer science at Binary Verse AI.

1. What is polynomial identity testing for noncommutative rational formulas?

It asks whether a formula built from rational constants, noncommuting variables, addition, ordered multiplication, and inversion evaluates to zero at every matrix substitution where it is defined. The paper constructs a deterministic hitting list for admissible formulas over the rationals within a prescribed tree-size bound.

2. Why can’t ordinary numbers detect every noncommutative polynomial identity?

Scalar multiplication is commutative, so the difference between x₁x₂ and x₂x₁ evaluates to zero on every scalar substitution. Suitable matrices give different products in the two orders, so their difference reveals that the expression is nonzero.

3. What is a polynomial hitting list, and how does it enable deterministic identity testing?

A hitting list is a predetermined collection of evaluation points guaranteed to reveal every nonzero formula in a specified class. The paper constructs rational matrix tuples using only the number of variables and the formula-size bound. Every admissible nonzero formula has at least one listed evaluation that is defined and invertible. The construction uses no random choices.

4. How does the proof handle division by zero and nested inverse gates?

It converts the inverse requirements of the original formula tree into affine-matrix invertibility certificates. A successful matrix tuple satisfies every certificate, ensuring that all required inverses exist. This preserves the original domain restrictions even when algebraic cancellations would hide an inverse.

5. What is new compared with previous noncommutative rational identity-testing algorithms?

Earlier deterministic black-box constructions for unrestricted inverse nesting gave quasipolynomial-size hitting sets. The new proof establishes polynomial bounds on the list size, matrix dimensions, construction time, and total binary encoding length. Previous research already handled unrestricted inverse nesting and used invertible evaluations.

6. How does the proof guarantee an invertible evaluation rather than merely a nonzero one?

Taylor-reversal maps and Wronskian bounds establish a near-full rank bound for feasible affine pencils. A division-algebra deformation forces block ranks to be multiples of a fixed dimension, so a rank sufficiently close to full must be full. Rational specialization preserves the required determinant conditions and produces the matrix tests.

7. Does this proof solve polynomial identity testing for arbitrary arithmetic circuits?

The theorem covers bounded-size noncommutative rational formula trees over the rationals. Arbitrary arithmetic circuits can share subcomputations and fall outside this theorem. The polynomial-time bound covers construction of the universal list. Evaluation costs can still depend on the coefficient encoding lengths and the oracle.

Leave a Comment