Certified Qualitative Analysis of the SIR ODE and Reusable Scalar Lemmas in Isabelle/HOL
David B. HulakArthur F. RamosRuy J. G. B. de Queiroz
Develops a fully verified Isabelle/HOL framework connecting local Picard-Lindelöf flows to the global qualitative dynamics of the classic SIR epidemic model, supplying reusable proof infrastructure for analyzing general compartment differential equations.
Compartmental models that track populations across susceptible, infectious, and recovered stages form the baseline for modern mathematical epidemiology and public health planning. While their general mathematical properties are well known in theory, standard scientific literature frequently relies on informal assumptions regarding underlying physical constraints, such as ensuring population counts never fall below zero or that solutions exist infinitely forward in time. When translating these models into mission-critical software, automated reasoning frameworks, or verified policy simulations, unstated assumptions introduce severe reliability risks.
The article addresses this gap by mechanically checking and certifying the qualitative properties of the classical susceptible-infectious-recovered ordinary differential equation model using the Isabelle/HOL interactive theorem prover. Its main objective is to establish a verified, reusable software bridge connecting foundational differential equation existence theorems to the qualitative behavior of epidemic trajectories without circular mathematical assumptions.
To achieve this, the authors implemented a high-level formalization structured in modular layers. Rather than analyzing numerical trajectories or running empirical simulations, they constructed machine-checked logical proofs within the 2024 releases of Isabelle/HOL and its Archive of Formal Proofs. The proof framework establishes generic calculus lemmas for scalar compartment models, proves sign preservation and conservation on local time segments, and applies a compact continuation principle to safely extend the unique trajectory to all future forward times.
The formal verification produced several core findings. First, it rigorously proves global forward existence and uniqueness from nonnegative initial data, successfully resolving a subtle circularity trap by establishing conservation and nonnegativity on local prefixes before proving that the solution continues indefinitely. Second, it formally confirms the forward invariance and boundedness of the population, ensuring all compartments remain nonnegative and bounded by the initial total population. Third, it certifies the Kermack-McKendrick phase-plane conservation law, proving that epidemic trajectories strictly follow defined level curves. Finally, it proves threshold ratio conditions, certifying that infection declines monotonically over the entire interval whenever the initial effective reproduction threshold ratio is less than or equal to one.
These results demonstrate that classical epidemiological reasoning can be made fully rigorous and integrated directly into certified formal verification environments. For decision-makers and developers in critical modeling, high-assurance software, and biosecurity, this infrastructure lowers compliance and validation risks by replacing informal analytical assumptions with mathematically certified guarantees. Downstream applications can now import verified conservation, sign preservation, and threshold properties as certified theorems rather than re-proving them or treating them as unverified premises.
Moving forward, engineering and research teams building verified epidemiological tools should adopt this modular framework to certify more complex dynamics. Recommended next steps supported by the article include extending the generic calculus library to handle multi-compartment structures with additive source terms (such as exposed stages in SEIR models), indexed multi-group populations, asymptotic terminal size equations, and equilibrium stability analysis.
Confidence in these findings is exceptionally high within the stated boundary conditions, as the codebase contains zero unproven placeholders, axioms, or aborted proof commands across all 11 theory files. However, leaders should note that the model applies strictly to autonomous, closed-population dynamics without vital processes such as births, deaths, vaccination, or seasonal forcing, and the theorems verify structural qualitative dynamics rather than executing numerical simulations.
No sufficiently relevant recommendations were found.
No sufficiently relevant recommendations were found.
