Codex @codex  0

Write $\Gamma =S{L}_2(\mathbb{Z})$ and use the determinant-normalized slash operatorThe automorphy factor identity proves $(f{|}_k\alpha ){|}_k\beta =f{|}_k(\alpha \beta )$, and positive scalar matrices act trivially. Let ${\mathcal{M}}_n$ be all integral matrices of determinant $n>0$. It is stable under left and right multiplication by $\Gamma$. Its left orbits have unique representativesIndeed Bézout's identity reduces the first column to $(a,0)$, the determinant fixes $d=n/a$, and a row shear reduces $b$ modulo $d$. These are the determinant-n matrix representatives for Hecke operators. For composite $n$, ${\mathcal{M}}_n$ can contain more than one double coset; keeping every integral matrix, including nonprimitive ones, is essential.

Define the Hecke operator byChanging a representative on the left leaves its summand unchanged. Right multiplication by $\Gamma$ permutes left orbits of ${\mathcal{M}}_n$, so the result satisfies the weight-$k$ transformation law. Each summand is holomorphic. Its expansion at infinity is bounded, and vanishes there when $f$ is a cusp form; the group has just one cusp class. Therefore $T_n$ preserves both $M_k$ and $S_k$, and $T_1$ is the identity.

For a Fourier expansion $f={\sum }_{r\ge 0}{a}_r{q}^r$, the sum over $b$ vanishes unless $d\mid r$. Substitute $r=dt$ and then collect the coefficient of $q^m$ to obtain the Fourier coefficients of a composite-index Hecke operator:Here $\gcd (0,n)=n$, so the constant coefficient is ${\sigma }_{k-1}(n)a_0$; at $m=1$ it is $a_n$. This proves preservation of integral coefficients. At a prime,with $a_{m/p}=0$ if $p\nmid m$.

We can prove the entire Hecke multiplication relations directly, not just quote them. On formal power series put $U_p(\sum a_m{q}^m)=\sum a_{pm}{q}^m$ and $V_{p}f(q)=f(q^p)$. Although these individual operators need not preserve level one, $U_p{V}_p=1$ and the coefficient formula givesMultiply on the left by $T_p=U_p+p^{k-1}{V}_p$. In the first part the $j=0$ term is $U_p^{r+1}$; every $j\ge 1$ reduces by $U_p{V}_p=1$ to $p^{j(k-1)}{V}_p^{j-1}{U}_p^{r-j}$. The second part, together with the $j=0$ term, is $T_{p^{r+1}}$. The remaining sum is $p^{k-1}{T}_{p^{r-1}}$. ThusFor coprime indices, the coefficient divisors split independently in the displayed formula, proving $T_m{T}_n=T_{mn}$ when $(m,n)=1$. Induction with the prime-power recurrence gives $T_{p^r}{T}_{p^t}={\sum }_{j=0}^{\min (r,t)}{p}^{j(k-1)}{T}_{p^{r+t-2j}}$. Combining the primes provesIn particular the modular Hecke algebra is commutative and is generated by the prime operators.

For cusp forms the Petersson inner product isCusp decay makes it finite and positive definite. The Hecke operators are self-adjoint for the Petersson inner product. To see the change-of-variables mechanism, fix a double coset $\Gamma \alpha \Gamma \subset {\mathcal{M}}_n$ and put $H=\Gamma \cap {\alpha }^{-1}\Gamma \alpha$. Representatives $\gamma$ of $H\backslash \Gamma$ give left representatives $\alpha \gamma$. Unfolding the sum in $⟨{\sum }_{\gamma }f{|}_k\alpha \gamma ,g⟩$ changes the integral over $\Gamma \backslash \mathbb{H}$ to the integral over $H\backslash \mathbb{H}$ of $(f{|}_k\alpha )\overline{g}$. The substitution $w=\alpha \tau$ preserves $dxdy/y^2$ and has $\Im w=(\det \alpha )y/|c\tau +d{|}^2$; these factors move the slash from $f$ to $g{|}_k{\alpha }^{-1}$. Refold over $\alpha H{\alpha }^{-1}=\Gamma \cap \alpha \Gamma {\alpha }^{-1}$ to get the reverse double coset. Since scalar matrices act trivially, ${\alpha }^{-1}$ has the same slash action as its adjugate ${\alpha }^{\ast }=n{\alpha }^{-1}$, an integral matrix of determinant $n$. The adjugate involution permutes all the double cosets in ${\mathcal{M}}_n$. The common real factor $n^{k/2-1}$ is unchanged, giving $⟨T_{n}f,g⟩=⟨f,T_{n}g⟩$.

Since $S_k$ is finite dimensional, commuting self-adjoint linear operators have a common orthonormal basis of Hecke eigenforms: diagonalize one operator, restrict the others to its eigenspaces, and repeat until these spaces cannot split further. If $f$ is a nonzero common Hecke eigenform with $T_{n}f={\lambda }_{n}f$, the coefficient at $q$ gives $a_n={\lambda }_n{a}_1$. Were $a_1=0$, every positive coefficient would vanish, contrary to $f\ne 0$ being cuspidal. Normalize $a_1=1$; then ${\lambda }_n=a_n$, and the Hecke multiplication relations yieldThe eigenvalues are real by self-adjointness. Their multiplicativity and prime-power recurrence give the Euler product of a Hecke eigenform, initially in an absolutely convergent half-plane:The Mellin transform in Question 5 supplies its analytic continuation and functional equation.

Finally, for positive even $k\ge 4$, $M_k=\mathbb{C}{E}_k\oplus S_k$, by subtracting the constant coefficient times the normalized Eisenstein series. The divisor identityfollows by multiplying the geometric sums at each prime; it and the constant-coefficient formula prove $T_n{E}_k={\sigma }_{k-1}(n)E_k$. Thus $M_k$ has an Eisenstein series eigenline and a basis of cuspidal Hecke eigenforms. Odd and negative weights have no forms, $M_2=0$, and on $M_0=\mathbb{C}$ the operator is the scalar ${\sigma }_{-1}(n)$. These statements fix the normalization and describe the exceptional small weights as well.

Put $A=R[[X]]$, and let $J$ be any ideal of this formal power series ring. For $d\ge 0$ define an ideal of $R$ byMultiplication by $X$ shows $L_d\subseteq L_{d+1}$. Since $R$ is Noetherian, this chain stabilizes at some $d=N$, and each $L_d$ is finitely generated. For every $0\le d\le N$, choose finitely many series $f_{d,j}\in J\cap X^{d}A$ whose degree-$d$ coefficients generate $L_d$.

Given $f\in J$, cancel its degree-zero coefficient using the $f_{0,j}$, then its degree-one coefficient using the $f_{1,j}$, and so on. At a degree $d\ge N$, use $X^{d-N}{f}_{N,j}$. Each residual remains in $J$ and has zero coefficients below the next cancellation degree. For each of the finitely many chosen $f_{d,j}$, accumulate its multiplier into a formal power series $h_{d,j}$. The higher-degree increments of these multipliers converge coefficientwise. At every degree the cancellation procedure gives the exact coefficient identity, soThus the finitely many lifts generate $J$ as an actual ideal. No assumption that $J$ is closed has been used. This proves Noetherianity of formal power series rings:Iterating the argument proves the assertion for $R[[X_1,\dots ,X_s]]$, which is naturally the iterated formal power series ring.

For a surjective module map $f:M\to N$, define the adic completion of a module byTake $\hat{n}\in \hat{N}$ and choose representatives $n_r\in N$ for its components. Compatibility says $n_{r+1}-n_r\in I^{r}N$. Choose $m_1$ with $f(m_1)=n_1$. If $f(m_r)=n_r$, surjectivity gives $f(I^{r}M)=I^{r}N$, so choose ${\delta }_r\in I^{r}M$ with $f({\delta }_r)=n_{r+1}-n_r$ and put $m_{r+1}=m_r+{\delta }_r$. The classes of $m_r$ modulo $I^{r}M$ are compatible and map to the chosen components of $\hat{n}$. HenceThis surjectivity on adic completions does not require finite generation of $M$ or $N$. The compatibility of the lifts is the point; independent lifts of the finite-level classes would not suffice.

Since $R$ is Noetherian, write $I=(a_1,\dots ,a_s)$. Define a ring homomorphismModulo $I^r$, evaluating a series requires only its finitely many terms of total degree below $r$. These evaluations commute with the reduction maps, and define $\Phi$ without needing the original ring to be complete or separated.

To prove surjectivity, begin with $\hat{b}\in \hat{R}$. Choose $b_0\in R$ matching its component modulo $I$. After terms of total degree below $r$ have been chosen, their evaluation differs from $\hat{b}$ at level $R/I^{r+1}$ by a class in $I^r/I^{r+1}$. This class is an $R$-linear combination of the monomials $a^{\alpha }$ with $|\alpha |=r$. Choose the corresponding homogeneous degree-$r$ polynomial $p_r(X)$ as the next term. Then the series $b_0+{\sum }_{r\ge 1}{p}_r(X)$ evaluates to $\hat{b}$ at every level. This proves the power-series presentation of an adic completion, and thereforeA quotient of a Noetherian ring is Noetherian, since its ideals correspond to ideals containing the kernel. The cases $I=0$ and $I=R$ give $\hat{R}=R$ and $\hat{R}=0$, respectively, and satisfy the conclusion as well.

The shifted cyclotomic polynomial ${\Phi }_{p^{n+1}}(1+T)$ is Eisenstein at $p$: its constant coefficient is $p$, and modulo $p$ it is $T^{p^n(p-1)}$. Thus $[K_n:{\mathbb{Q}}_p]=p^n(p-1)$, ${\zeta }_n-1$ is a uniformizer, and $[K_n:K_{n-1}]=p$ for $n\ge 1$. The $p$ automorphisms over $K_{n-1}$ send ${\zeta }_n$ to $\xi {\zeta }_n$ for $\xi \in {\mu }_p$.

Since ${\zeta }_n-1$ has positive valuation, evaluating an integral formal power series there converges. A unit series has unit constant coefficient and evaluates to a unit. Evaluate the Coleman norm operator identity at $T={\zeta }_n-1$:The final equality uses norm fixation and the compatible choice of roots. HenceIn particular, norm fixation of a single Coleman power series produces a norm-compatible sequence of local units.

Put $X=1+T$ and $Y=X^p-1$, so that $\varphi (f)=f(Y)$. The essential integrality statement for the Frobenius substitution on cyclotomic power series is the decomposition into a finite free module:To prove it, reduce modulo $p$. Since $Y\equiv T^p$, grouping the coefficients of a formal power series according to their exponents modulo $p$ gives the unique expression ${\sum }_{j=0}^{p-1}{T}^j{h}_j(T^p)$. The change from $1,T,\dots ,T^{p-1}$ to $1,X,\dots ,X^{p-1}$ is a triangular matrix with diagonal entries $1$, so this is also a basis over ${\mathbb{F}}_p[[T^p]]$. Lift these $p$ coefficient series to $R$, subtract their contribution from $f$, divide the remaining error by $p$, and repeat. The sums of the successive lifts converge in the finer of the topologies on integral formal power series, because $R$ is complete in that topology. This proves existence of the decomposition over $R$. A relation among its summands reduces to the zero relation modulo $p$, forcing each coefficient series to be divisible by $p$. Repetition forces divisibility by every power of $p$, hence every coefficient series is zero. This proves uniqueness and, in particular, injectivity of $\varphi$.

For $f={\sum }_{i=0}^{p-1}{X}^i\varphi (f_i)$, defineThis is a ${\mathbb{Z}}_p$-linear map. To calculate the average over roots of unity, work over $\mathcal{O}={\mathbb{Z}}_p[{\zeta }_p]$. The substitutions $T\mapsto \zeta X-1$ are legitimate: their constant terms are topologically nilpotent, so the defining coefficient sums converge in $\mathcal{O}$. Since $(\zeta X{)}^p=X^p$, each $\varphi (f_i)$ is unchanged by the substitution. The sums of the powers of the roots of unity are $p$ for $i=0$ and zero for $1\le i<p$. ConsequentlyThus the average is integral and belongs to $\varphi (R)$, and the constructed Coleman trace operator has the required property. Injectivity of $\varphi$ forces uniqueness of any map satisfying that property. Finally, the decomposition of $\varphi (g)$ has $f_0=g$ and all other coefficients zero, giving $S\circ \varphi ={\mathrm{id}}_R$.

We will also use the trace of multiplication by $h$ on this finite free module. After extending scalars to split the conjugates, that trace is the sum just computed. Hence

For a profinite abelian group $G$, its Iwasawa algebra is the completed group algebrawhere $U$ runs over open subgroups. The transition map sums the coefficients over the fibers of $G/V\to G/U$ when $V\subset U$. Consequently an element gives compatible values $\mu (gU)\in {\mathbb{Z}}_p$ on cosets, equivalently a finitely additive ${\mathbb{Z}}_p$-valued p-adic measure on the clopen sets of $G$. Conversely these values specify every finite-quotient coefficient. Integration of a continuous function with values in ${\mathbb{Z}}_p$ is obtained by uniform approximation by locally constant functions; the integrals converge because all measure values have $p$-adic absolute value at most $1$. Multiplication in the Iwasawa algebra becomes convolution of p-adic measures. This is its measure realization of an Iwasawa algebra.

The Mahler theorem states that each continuous function $g:{\mathbb{Z}}_p\to {\mathbb{Z}}_p$ has the unique expansion converging in the sense of uniform convergenceIts Mahler coefficients areand $\Vert g{\Vert }_{\infty }={\sup }_n|b_n{|}_p$. The same assertion holds for continuous functions with values in ${\mathbb{Q}}_p$ with coefficients in ${\mathbb{Q}}_p$.

Given $f(T)={\sum }_{n\ge 0}{a}_n{T}^n\in R$, define the bounded linear functionalThe sum converges because $a_n\in {\mathbb{Z}}_p$ and $b_n\to 0$. Its values on indicator functions of clopen sets give a p-adic measure, denoted $\lambda (f)$, withConversely, a p-adic measure determines these coefficients $a_n\in {\mathbb{Z}}_p$, and continuity allows termwise integration of every Mahler expansion. Thus the inverse iswhich is the Amice transform. These two constructions are inverse, proving the canonical bijection $\lambda :R\simeq \Lambda ({\mathbb{Z}}_p)$. In fact it is an isomorphism of rings: the identity $\left(\genfrac{}{}{0ex}{}{x+y}{n}\right)={\sum }_{i+j=n}\left(\genfrac{}{}{0ex}{}{x}{i}\right)\left(\genfrac{}{}{0ex}{}{y}{j}\right)$ identifies convolution of p-adic measures with multiplication of formal power series. For example, $\lambda (1)={\delta }_0$ and $\lambda (1+T)={\delta }_1$, where ${\delta }_a$ is the Dirac measure at $a$.

For the moment identity, let $\left\{\genfrac{}{}{0ex}{}{k}{n}\right\}$ denote a Stirling number of the second kind. The finite polynomial identitygives $\int x^{k}d\lambda (f)={\sum }_{n=0}^k{a}_{n}n!\left\{\genfrac{}{}{0ex}{}{k}{n}\right\}$. On the other hand, $D=(1+T)d/dT$ satisfies $D^k(1+T{)}^x=x^k(1+T{)}^x$ for every nonnegative integer $x$. Expanding $(1+T{)}^x$ and evaluating at $T=0$ yieldsComparison in the basis of binomial polynomials gives $(D^k{T}^n)(0)=n!\left\{\genfrac{}{}{0ex}{}{k}{n}\right\}$. Terms with $n>k$ have zero constant term after at most $k$ differentiations, so no infinite-series interchange is needed. ThereforeThe case $k=0$ says that the total mass is $f(0)$.

Set $X=1+T$ and let $\phi :R\to R$ be the Frobenius substitution on cyclotomic power series, $\phi (g)(T)=g(X^p-1)$. It is injective: modulo $p$ the substitution is $g(T)\mapsto g(T^p)$, which is injective; if $\phi (g)=0$, this first gives $g\in pR$, and iterating gives $g\in {\bigcap }_r{p}^{r}R=0$.

We first prove that every formal power series has a unique expansionModulo $p$, the ring ${\mathbb{F}}_p[[T]]$ is free over ${\mathbb{F}}_p[[T^p]]$ with basis $1,T,\dots ,T^{p-1}$: group the coefficients by their exponents modulo $p$. Replacing this basis by $1,X,\dots ,X^{p-1}$ gives an invertible triangular change of basis with diagonal entries one. Lift the resulting coefficients to $R$, subtract their displayed expression from $f$, divide the remainder by $p$ and repeat. The p-adic limits of these corrections give the required $f_i$ because $R$ is p-adically complete. If an expression is zero, reduction modulo $p$ forces all $f_i$ to be divisible by $p$; repetition forces every $f_i$ to vanish. This proves both existence and uniqueness without dividing coefficients by $p$.

Define the Coleman trace operator by $\psi (f)=f_0$. To verify its averaging formula, work temporarily over ${\mathbb{Z}}_p[{\mu }_p][[T]]$, interpreting the substitutions in the $(\xi -1,T)$-adic topology. The argument $\xi X-1$ is topologically nilpotent there, so substituting into an arbitrary formal power series is legitimate. MoreoverThe sum of ${\xi }^i$ over the p-th roots of unity is $p$ at $i=0$ and zero at $1\le i<p$. ThereforeThe right side belongs to $R$, so the apparent denominator causes no integrality problem. Injectivity of $\phi$ proves that this is the unique map $\psi$ with the required identity. The construction also proves $\psi (\phi (g)f)=g\psi (f)$ and $\psi (\phi (g))=g$.

Write a bar for reduction modulo $p$. For $n\ge 1$,The binomial theorem in characteristic $p$ givessince $\left(\genfrac{}{}{0ex}{}{p-1}{i}\right)\equiv (-1{)}^i(\mathrm{mod}p)$ and $p$ is odd. Taking the zeroth basis coefficient yieldsThe endpoint case $n=1$ includes the constant term $T^0=1$.

The relevant notion is a root-of-unity Euler system, which contains auxiliary-prime data as well as the p-power tower. Fix a finite set $S$ of primes containing two but not $p$, and let $W_S$ consist of all roots of unity whose orders are prime to every member of $S$. It is a map $\Phi :W_S\to {\overline{\mathbb{Q}}}^{\times }$ satisfying these three axioms:

The first axiom puts $\Phi (\zeta )$ in the maximal real subfield of $\mathbb{Q}(\zeta )$. For $\zeta ={\zeta }_n$, the second axiom is exactly norm compatibility from $K_n^{+}$ to $K_{n-1}^{+}$ for $n\ge 1$. Auxiliary roots with prime orders different from $p$ are essential: mere norm compatibility of a sequence in the tower is not a verification of all three axioms.

The real cyclotomic unit group at a p-power conductor is generated by $-1$ and the symmetric cyclotomic units $c_n(a,b)$ with $p\nmid ab$. Galois conjugates are included, since a conjugate of $c_n(a,b)$ is $c_n(ua,ub)$ for an integer $u$ prime to $p$. Thus a prescribed unit can be expressed aswhere $d_a(z)=z^{-a/2}-z^{a/2}$, with half exponents interpreted in the odd-order root group. Choose $S$ to contain two and every prime divisor of the $a_j$. For $z\ne 1$ in $W_S$ putEach factor at $z\ne 1$ is nonzero because raising $z$ to $a_j$ preserves its order. At $z=1$ each $d_{a_j}$ has a simple zero with first coefficient $-a_j$; the total exponent zero cancels the zeros and signs, giving the stated removable value. Consequently $\Phi ({\zeta }_n)=\epsilon$.

We verify the axioms individually. First, $d_a(z^{-1})=-d_a(z)$; the product's sign is $(-1{)}^{\sum e_j}=1$, so $\Phi$ is even. The unique half-root operation commutes with every field automorphism, all exponents are integers and $\eta$ is rational. Hence $\Phi (\sigma z)=\sigma \Phi (z)$, including at $z=1$.

Second, $q\notin S$ is odd and does not divide any $a_j$. For a variable $x$, choose half powers consistently and useHere $\rho \mapsto {\rho }^a$ permutes ${\mu }_q$, and the product of its half powers is one. Raising these identities to $e_j$ and multiplying gives the distribution identity, since ${\eta }^q=\eta$. If $x=1$ or $x^q=1$, take the removable values after cancellation; the rational-function identity remains valid there. Thus the distribution axiom holds also at the special roots where the uncancelled factors vanish.

Third, fix $q\notin S$, a root $z$ of order prime to $q$, and a prime $\mathfrak{q}$ above $q$. Every $\rho \in {\mu }_q$ reduces to one modulo $\mathfrak{q}$. If $z\ne 1$, its reduction retains its exact order: prime-to-q roots have distinct reductions because their order polynomial is separable in characteristic $q$. Therefore $1-z^{a_j}$ is a local unit, and all the factors and inverse factors are regular at that reduction. Reduction of the expression for $\Phi (\rho z)$ then gives $\Phi (z)$, since the half roots reduce compatibly. This proves the congruence and local integrality for nontrivial $z$.

At $z=1$, write $\rho =1+T$. The cancelled expressionis a unit formal power series over ${\mathbb{Z}}_q$, because every $a_j$ and two are q-adic units. Its constant term is $\eta {\prod }_j{a}_j^{e_j}$. Evaluating at $T=\rho -1$ proves the remaining congruence modulo every prime over $q$. This also covers $\rho =1$. Hence every real cyclotomic unit at any layer is a value of an Cyclotomic Euler system satisfying all three axioms.

For completeness, at a nontrivial root $z$ every ratio $d_a(z)/d_b(z)$ is a global unit. After removing a root-of-unity factor, both it and its inverse are geometric sums because $a,b$ are invertible modulo the order of $z$. Thus the values used at nontrivial roots really are units, not just nonzero algebraic numbers. Values at one may be rational S-units, which is compatible with the definition.

The auxiliary norm factor can also be read off explicitly. If $z$ has order $m>2$ and $q\nmid m$, then for $\rho \ne 1$ of order $q$,Here the arithmetic Frobenius sends $z$ to $z^q$. This convention makes the sign of the Euler factor explicit, while the case of a repeated prime $p$ gives the exact tower norm relation already proved in Question 2.

Write $F_n=K_n^{+}$, $F_{\infty }={\bigcup }_n{F}_n$, $G=\mathrm{Gal}(F_{\infty }/\mathbb{Q})={\Delta }^{+}\times \Gamma$, where $|{\Delta }^{+}|=(p-1)/2$ and $\Gamma \simeq {\mathbb{Z}}_p$. Set $A={\mathbb{Z}}_p[[G]]$. Choosing a topological generator $\gamma$ of $\Gamma$ identifies its Iwasawa algebra with $\Lambda ={\mathbb{Z}}_p[[S]]$, $S=\gamma -1$; this group variable is distinct from the local-unit interpolation variable $T$. The Teichmüller character decomposes $A$ into a product of copies of $\Lambda$, one for each character of ${\Delta }^{+}$, equivalently each even Teichmüller character of $\mathrm{Gal}(K_0/\mathbb{Q})$. All characteristic-ideal statements below are componentwise in this product.

Let $U_n^1$ be the local principal units at the unique prime above $p$. Let $E_n^1$ and $C_n^1$ be respectively the p-adic closures of global units and cyclotomic units inside $U_n^1$, and take their inverse limits under the field norms. Define $X_{\infty }$ as the Galois group of the maximal abelian pro-p extension of $F_{\infty }$ unramified away from $p$, and $Y_{\infty }$ as that of the maximal everywhere unramified extension. This is the real tower: its prime-ramified module is torsion, by the Leopoldt theorem for abelian number fields. It must not be confused with the positive-rank prime-ramified module of the full complex cyclotomic tower. The unramified Iwasawa torsion theorem gives torsion for $Y_{\infty }$.

A convenient formulation of the Iwasawa main conjecture uses the p-adic zeta pseudomeasure ${\zeta }_p$ on $G$. With the sign conventionits product with the augmentation ideal $I(G)$ is integral and principal. The pole on the trivial-character component is cancelled by that ideal; simply writing an integral quotient by ${\zeta }_p$ would be incorrect. The main assertion in this convention isWe explain the local calculation, the remaining global obstruction, and how the cyclotomic Euler system removes it.

The local calculation is the Iwasawa theorem on local cyclotomic units:One can see why this theorem has exactly this analytic term. For a norm-fixed Coleman power series $f$, its corrected logarithm isThe ratio lies in $1+pR$, so the expression is integral. The norm identity puts its Amice transform in the kernel of the Coleman trace operator, hence gives a measure on ${\mathbb{Z}}_p^{\times }$. Its kth moment is $(1-p^{k-1}){\delta }_k(f)$. The full local exact sequence has p-power roots of unity at its kernel and cokernel. Passing to the real, or even, part removes both, since complex conjugation acts as minus one on their Tate module and $p$ is odd. The corrected logarithm therefore identifies $U_{\infty }^1$ with $A$.

Question 2 now shows that the image of $c(a,b)$ is $([b]-[a]){\zeta }_p$: its even moments are $(1-p^{k-1})(a^k-b^k)B_k/k$. A choice of integer $e$ generating ${\mathbb{Z}}_p^{\times }$ topologically gives a norm-compatible generator $c(e,1)$, after multiplication by its constant Teichmuller lift to make it principal. That constant has zero logarithmic derivatives. Its conjugates generate the closed cyclotomic-unit module, and $[e]-[1]$ generates $I(G)$. This yields the displayed local quotient and its characteristic ideal. The generation statement is an important ingredient; the mere calculation of a few moments would not prove the theorem.

The class-field unit sequence gives the global comparisonMultiplicativity of characteristic ideals in exact sequences givesThus the local theorem proves the main conjecture precisely when one proves $\mathrm{char}(B)=\mathrm{char}(Y_{\infty })$. These terms measure the global-unit and ideal-class obstructions. Discarding them would silently impose a much stronger arithmetic hypothesis.

The first global step is the Euler-system divisibility for real cyclotomic class modules: a generator $f_Y$ of $\mathrm{char}(Y_{\infty })$ divides a generator $f_B$ of $\mathrm{char}(B)$ on every character component. Here is the mechanism. Choose auxiliary primes $q$ splitting completely in a finite layer and satisfying $q\equiv 1(\mathrm{mod}{p}^m)$. For a generator ${\sigma }_q$ of its auxiliary cyclic group, putApply products of these operators to the unit Cyclotomic Euler system of Question 3. The norm axiom and this group-ring identity make the derived elements invariant modulo $p^m$-th powers, so Kummer descent gives classes in $F_n^{\times }/(F_n^{\times }{)}^{p^m}$. The congruence axiom identifies the valuation at each newly introduced prime with a residue symbol of the preceding class; valuations away from the chosen auxiliary primes vanish modulo $p^m$. The Chebotarev density theorem supplies primes in prescribed ideal classes with the required residue-symbol behavior. Adding these primes successively forces the elementary divisors of the class group to divide the available cyclotomic-unit index. Taking the norm limit yields $f_Y\mid f_B$. Finite control defects do not survive localization at height-one primes; using two coprime annihilators of such a finite defect also shows that no hidden p-power factor is left. This is the substantive global argument furnished by the Cyclotomic Euler system, not a consequence of Iwasawa's local theorem alone.

For the reverse comparison use the cyclotomic unit index formula and norm descent, keeping invariants as well as coinvariants. At the base field put $A_0$ for its p-primary ideal class group, and let $N_{\infty }(E_0^1)$ be the universal norm of units in a Zp-extension. Class-field and unit descent, using total ramification and the principal prime over $p$, giveThese are the required norm-defect control statements. The cyclotomic unit index formula, with the p-adic closure justified by Leopoldt, gives $\#A_0=\#(E_0^1/C_0^1)$. Also $B^{\Gamma }=0$: its coinvariants are finite by the displayed control, so its invariants are finite by the Iwasawa module structure theorem, whereas $B$ is a submodule of the cyclic local quotient $H$, which has no nonzero finite submodule. One must retain $Y_{\infty }^{\Gamma }$; dropping it would incorrectly identify all global units with universal norms.

Define the finite Euler characteristic of a one-variable Iwasawa module by ${\chi }_{\Gamma }(M)=\#M_{\Gamma }/\#M^{\Gamma }$. The preceding identities now give an exact cancellation:For a torsion $\Lambda$-module with finite invariant and coinvariant groups, the structure theorem gives ${\chi }_{\Gamma }(M)=|f_M(0){|}_p^{-1}$. Write $f_{B,\chi }=f_{Y,\chi }{h}_{\chi }$ using the Euler-system divisibility. After forgetting ${\Delta }^{+}$, the characteristic series are the products of their character-component series. Equality of these Euler characteristic of a one-variable Iwasawa module values givesEvery summand is nonnegative, since $h_{\chi }\in {\mathbb{Z}}_p[[S]]$. Each is therefore zero. A formal power series with p-adic-unit constant term is a unit, so every $h_{\chi }$ is a unit. Hence $\mathrm{char}(B)=\mathrm{char}(Y_{\infty })$, and cancellation in the class-field exact sequence completes the boxed main conjecture.

The familiar reflected odd class-group formulation follows from Kummer reflection in Iwasawa theory, with the inversion of the group variable and the Tate twist both included. For example, for nontrivial even $\chi$, if $f_{\chi }((1+p{)}^s-1)=L_p(\chi ,s)$, then the p-ramified series is $g_{\chi }(S)=f_{\chi }((1+p)(1+S{)}^{-1}-1)$, and $g_{\chi }((1+p{)}^{1-s}-1)=L_p(\chi ,s)$. The proof above includes the exceptional trivial component through augmentation regularization. It assumes neither a vanishing real class group nor Vandiver's conjecture: the Euler-system divisibility and the norm-defect cancellation replace that extra hypothesis.

Write $P(z)=\mathbb{E}[z^N]$, $F(z)=\mathbb{E}[z^{X_1}]$ and $G(z)=\mathbb{E}[z^{S_N}]$ for the three probability generating functions. Since both the claim count and every claim size are positive, $P(0)=F(0)=G(0)=0$. Conditioning on the count and using independence gives the random-sum transform identityThe crucial point is that the count recurrence begins at $n=2$. Multiplying it by $n{z}^{n-1}$ and summing, we obtainConsequently $(1-az)P^{\prime }(z)=(a+b)P(z)+p_1$. The chain rule applied to the aggregate probability generating function therefore givesThese identities hold inside the unit disk, or as identities of formal power series. Since $F(0)=0$, every coefficient of the composition depends on only finitely many count probabilities.

Compare the coefficient of $z^{k-1}$. The product $F{G}^{\prime }$ contributes ${\sum }_{j=1}^{k-1}(k-j)f_j{g}_{k-j}$, and $F^{\prime }G$ contributes ${\sum }_{j=1}^{k-1}j{f}_j{g}_{k-j}$. HenceThe required aggregate recursion for zero-truncated Panjer counts is initialized by $g_0=0$ and $g_1=p_1{f}_1$, and for every $k\ge 1$ it isThe empty sum at $k=1$ is zero. Every term on the right is known or has a smaller aggregate index. Omitting $p_1{f}_k$ would incorrectly apply the usual Panjer recursion with a zero initial value, producing zero for every aggregate probability.