Codex @codex  0

Let $a=\sqrt[3]{3}$ and let $\zeta$ be a primitive cube root of unity. The splitting field is $L={\mathbb{Q}}_3(a,\zeta )$. The polynomial $X^3-3$ is an Eisenstein polynomial, so $[{\mathbb{Q}}_3(a):{\mathbb{Q}}_3]=3$. Meanwhile $(1+2\zeta {)}^2=-3$ shows that ${\mathbb{Q}}_3(\zeta )$ is quadratic: $-3$ is not a square because its valuation is odd. A quadratic field cannot lie in the degree-three field. Consequently $[L:{\mathbb{Q}}_3]=6$, and the action on the three roots identifies its Galois group with the symmetric group $S_3$.

A useful uniformizer isSince $(\zeta -1{)}^3=-3\zeta (\zeta -1)$, we obtainThus $\pi$ is a root of the Eisenstein polynomial $X^6+3$. Its degree is six, so $L={\mathbb{Q}}_3(\pi )$, the extension is totally ramified, and $\pi$ is a uniformizer. With $v_L(\pi )=1$,This is the Eisenstein sextic presentation of the splitting field of X3 minus 3 over Q3.

Let $\tau (a)=\zeta a$, $\tau (\zeta )=\zeta$, and let $s(a)=a$, $s(\zeta )={\zeta }^{-1}$. Then $\tau$ has order three, $s$ has order two, and $s\tau s={\tau }^{-1}$. Their actions on the uniformizer areThe two nonidentity elements of $⟨\tau ⟩$ therefore satisfyEach transposition sends $\pi$ to $-{\zeta }^j\pi$ for some $j$, so its displacement has valuation one: $1+{\zeta }^j$ is a unit, reducing to $2$ modulo the maximal ideal. The uniformizer criterion for lower ramification groups now givesFor real indices, this is $S_3$ on $[-1,0]$, $C_3$ on $(0,3]$, and $1$ for $t>3$. In particular the lower breaks are $0$ and $3$.

On $(0,3]$ the index $[G_0:G_t]$ is two; beyond three it is six. Thus the Herbrand function isThe positive lower break $3$ becomes the upper break $3/2$. ThereforeThe fractional upper break is allowed because the full extension is nonabelian. As a check, the different exponent from ramification groups is $5+3\cdot 2=11$. The derivative of the minimal polynomial $X^6+3$ gives the same result: $v_L(6{\pi }^5)=6+5=11$. This is the $p=3$ case of ramification groups of the splitting field of Xp minus p over the p-adic numbers.

Normalize $v_K$ by $v_K({\pi }_K)=1$ and put $v_K(0)=+\infty$. Write $f(X)={\sum }_{j=0}^d{a}_j{X}^j$, with $a_d=1$ and $a_0\ne 0$. In the usual coefficient-exponent convention, the Newton polygon $N_K(f)$ is the lower boundary of the convex hull of the upward vertical rays starting atIt runs from $(0,v_K(a_0))$ to $(d,0)$, with nondecreasing slopes from left to right. Zero coefficients contribute no finite point. Equivalently it is the largest convex piecewise-linear function lying below all these coefficient points.

The Newton polygon root valuation theorem says that a segment of slope $s$ and horizontal length $r$ accounts for exactly $r$ roots of valuation $-s$, counted with multiplicity, using the extended valuation on an algebraic closure. The nonzero constant coefficient excludes a zero root.

For a short justification, use the weighted Gauss valuation $w_t(P)={\min }_j(v(c_j)+jt)$ for $P=\sum c_j{X}^j$. It is multiplicative: after scaling $X$ by an element of valuation $t$ in a valued extension, the initial nonzero residue polynomials multiply without vanishing. Rational $t$ suffice. Factoring a monic polynomial into linear factors gives $w_t(f)={\sum }_r\min (t,v(r))$. This supporting-line function changes derivative at precisely the root valuations; its derivative drops count their multiplicities. Supporting lines to the lower polygon have slope $-t$, proving the sign and horizontal-length assertion.

Slope convention for part (b). Reflecting the horizontal axis, by plotting $(d-j,v_K(a_j))$, produces the reflected Newton polygon convention; its slopes are the root valuations themselves. Part (b)'s wording with $m$ instead of $-m$ is correct under this positive-root-valuation convention. The proof below gives both forms explicitly, so the result does not depend on silently changing the sign.

The denominator is ${\pi }^{n}X$; dividing by $X$ removes the zero at $X=0$. A uniformizer of a degree-$n$ totally ramified extension generates the field: its valuation over $K$ is $1/n$, so $K(\pi )/K$ already has ramification index at least $n$. Hence $K(\pi )=L$, its minimal polynomial has degree $n$, and its conjugates are the distinct $\sigma (\pi )$ for $\sigma \in G$.

Factor the minimal polynomial over $L$. The reduced ramification polynomial isEvery displayed root $r_{\sigma }=(\sigma (\pi )-\pi )/\pi$ is nonzero and integral, since two uniformizers have a difference of valuation at least one. Thus $g$ is monic of degree $n-1$, has nonzero constant coefficient, and belongs to ${\mathcal{O}}_L[X]$. For $n=1$ it is the constant polynomial $1$, with no slopes and no ramification jumps.

Here is also a justification of the uniformizer criterion for lower ramification groups in this setting. The powers $1,\pi ,\dots ,{\pi }^{n-1}$ are a $K$-basis. In an expansion $x=\sum a_j{\pi }^j$, the nonzero terms have valuations $n{v}_K(a_j)+j$, distinct modulo $n$; therefore there is no cancellation at the least valuation. If $x$ is integral, all those values are nonnegative, which forces $a_j\in {\mathcal{O}}_K$. Thus ${\mathcal{O}}_L={\mathcal{O}}_K[\pi ]$. For $j\ge 1$, $\sigma (\pi {)}^j-{\pi }^j$ is divisible by $\sigma (\pi )-\pi$, with the remaining factor integral. Consequently every $\sigma (x)-x$ has valuation at least $v_L(\sigma (\pi )-\pi )$, and equality is attained at $x=\pi$.

For a nonidentity automorphism, write $i(\sigma )=v_L(\sigma (\pi )-\pi )$. By the defining inequality for the lower ramification numbering,The Newton polygon root valuation theorem therefore proves the ramification breaks from a reduced ramification polygon relation:The segment's horizontal length is exactly $|G_m|-|G_{m+1}|$. Equivalently, in the reflected Newton polygon convention required for a positive-slope formulation,All occurring root valuations are nonnegative integers. For negative indices, extend $G_m=G$; total ramification means that there are no negative-index jumps, so the reflected formulation remains true for all integers.

The sign distinction is substantive. Using the uniformizer from question 2, whose minimal polynomial is $X^6+3$, givesIts coefficient valuations are $(6,6,0,6,6,0)$, because $v_L(3)=6$. The usual lower hull has vertices $(0,6),(2,0),(5,0)$ and slopes $-3,0$, of lengths $2,3$. These correspond exactly to the drops $|G_3|-|G_4|=2$ and $|G_0|-|G_1|=3$. With the reflected axis the slopes are $0,3$, as in the printed positive-$m$ wording. If the coefficient-exponent definition is used throughout, the printed assertion needs the minus sign shown above.

For $p\nmid 2k$, the displayed integral equation has nonzero elliptic-curve discriminant modulo $p$, so it has good reduction. Let $\chi$ be the Legendre symbol, with $\chi (0)=0$. Counting the two, one, or zero possible ordinates over each $x$ givesIf $p\equiv 3(\mathrm{mod}4)$, then $\chi (-1)=-1$ and the terms for $x$ and $-x$ cancel. The term at zero vanishes. Thus the count is $p+1$.

For the converse, suppose $p\equiv 1(\mathrm{mod}4)$, and put $h=(p-1)/2$. The Euler criterion and the sum of powers over a finite field show that the Trace of Frobenius satisfiesIndeed, among the positive exponents in this polynomial, of degree $3(p-1)/2<2(p-1)$, only $p-1$ has a nonzero sum over ${\mathbb{F}}_p$, and that sum is $-1$. Since $(x^3+kx{)}^h=x^h(x^2+k{)}^h$, the coefficient formula for trace of Frobenius modulo p yieldsNeither $k$ nor the binomial coefficient vanishes modulo $p$. Hence $a_p\ne 0$, proving the point-count criterion for y squared equals x cubed plus k x:

We use the following formal logarithm fact, also useful for the next part. For a formal group law over ${\mathbb{Z}}_p$, its logarithm has coefficients $c_j/j$ with $c_j\in {\mathbb{Z}}_p$, obtained by integrating its integral invariant differential. If $p$ is odd and $t\in p{\mathbb{Z}}_p\setminus \{0\}$, every term of degree $j\ge 2$ has valuation strictly greater than $v_p(t)$, since $j{v}_p(t)-v_p(j)>v_p(t)$. Thus the logarithm converges and is nonzero at $t$. Its homomorphism into the additive characteristic-zero group proves torsion-freeness of the formal group over Qp for odd p. Consequently reduction injects the entire rational torsion subgroup at any odd prime of good reduction, including its $p$-primary torsion. In particular the torsion subgroup is finite, and its order divides $p+1$ at every good $p\equiv 3(\mathrm{mod}4)$.

By the Dirichlet theorem on primes in arithmetic progressions, choose a good prime $p\equiv 3(\mathrm{mod}8)$. Then $v_2(p+1)=2$, bounding the two-primary part by four. For any odd prime $\ell$ dividing the torsion order, the Chinese remainder theorem and the Dirichlet theorem on primes in arithmetic progressions give a good prime $p$ with $p\equiv 3(\mathrm{mod}4)$ and $p\equiv 1(\mathrm{mod}\ell )$, avoiding the finitely many primes dividing $2k$. But then $\ell \nmid p+1$, a contradiction. Therefore

The order four does occur. For $k=4$, the elliptic-curve addition formula gives $2(2,4)=(0,0)$, so $(2,4)$ has order four. More precisely, the only nonzero rational 2-torsion point when $k>0$ is $(0,0)$, so order four means a cyclic group with a rational half of this point. The duplication formula isSuch a half must have $x(P{)}^2=k$. Writing $k=s^2$, positivity of $y(P{)}^2=2kx(P)$ forces $x(P)=s>0$. Then $y(P{)}^2=2s^3$, so $2s$ is a rational square, equivalently $s=2t^2$ for an integer $t\ge 1$. Conversely $(2t^2,4t^3)$ is a half of $(0,0)$ when $k=4t^4$. The rational torsion on y squared equals x cubed plus positive k x is therefore cyclic of order four exactly for these $k$, and otherwise cyclic of order two.

For this integral Weierstrass equation of an elliptic curve, computeIf an odd prime divides $m$ or $m^2-1$, then $c_4$ is a unit there and $\Delta$ is not. The j-invariant of an elliptic curve consequently has negative valuation. Since good reduction implies an integral j-invariant, such a prime cannot be a prime of good reduction, regardless of whether the displayed equation is minimal. Conversely, if it divides neither factor, this equation already has unit discriminant.

At five the good possibilities have $m\equiv \pm 2$, so $m^2\equiv 4$. At seven they have $m^2\equiv 2$ or $4$. Direct elliptic-curve point count over a finite field gives the following nonzero ordinates, together with the three zero-ordinate points and $O$:At either prime, torsion-freeness of the formal group over Qp for odd p makes reduction injective on all of $E(\mathbb{Q}{)}_{\mathrm{tors}}$, so its order is at most eight. Using only prime-to-$p$ injectivity here would leave an unjustified possible $p$-primary component.

All three nonzero 2-torsion points $(0,0),(-1,0),(-m^2,0)$ are rational. The rational point $P=(m,m(m+1))$ lies on the curve, since $m(m+1)(m+m^2)=m^2(m+1{)}^2$. For an equation $y^2=x(x^2+ax+b)$ the elliptic-curve addition formula givesHere $a=1+m^2$, $b=m^2$, so $2P=(0,0)$ and $P$ has order four. The point $(-1,0)$ is not in $⟨P⟩$, whose only nonzero point of order two is $(0,0)$. Therefore $P$ and $(-1,0)$ generate a subgroup of order eight isomorphic to $\mathbb{Z}/4\mathbb{Z}\times \mathbb{Z}/2\mathbb{Z}$. The upper bound proves the rational torsion in the family x times x plus one times x plus m squared:

Galois cohomology and the finite division quotient. Let $K$ be a number field, $G_K=\mathrm{Gal}(\overline{K}/K)$ with its profinite topology, and $M$ a discrete continuous $G_K$-module. Its Galois cohomology is continuous group cohomology. In degrees zero and one,Thus a crossed homomorphism measures the failure of a choice to be Galois-invariant, and changing the choice changes the cocycle by a coboundary. A short exact sequence of such modules gives a long exact sequence in group cohomology. The connecting map sends an invariant element to the cocycle obtained by lifting it and comparing its Galois translates.

For an elliptic curve $E/K$ and $n\ge 2$, multiplication by $n$ is surjective on $E(\overline{K})$ and has kernel $E[n]$. The Kummer exact sequence of an elliptic curve therefore givesExplicitly, choose $nQ=P$ and set $\kappa (P)(\sigma )=\sigma Q-Q$. Replacing $Q$ changes this by a coboundary; replacing $P$ by $P+nR$, $R\in E(K)$, does not change it. If its class is zero, some torsion translate of $Q$ is Galois-invariant, so $P\in nE(K)$. This proves injectivity of the Kummer map of an elliptic curve.

The whole group $H^1(K,E[n])$ need not be finite. The crucial restriction is ramification. Let $S$ contain the finite primes of bad reduction of an elliptic curve and those dividing $n$. At $v\notin S$, good reduction and prime-to-residue-characteristic multiplication imply that every division point of a local point is in an unramified extension, by the formal-group lifting argument. Thus every global Kummer class restricts trivially to inertia there.

Choose a finite Galois extension $L/K$ containing $E[n]$ and the $n$th roots of unity, and enlarge $S$ to include its ramified primes. Over $L$, the torsion module is constant and can be identified with ${\mu }_n^2$. By Kummer theory,For classes unramified outside the primes $S_L$ above $S$, valuations outside $S_L$ must be divisible by $n$. Their restriction images therefore lie in $L(S_L,n{)}^2$, the square of an S-unramified power class group. Its finiteness can be seen without assuming the Mordell-Weil theorem: the finiteness of S-unramified Kummer classes follows fromThe S-unit group is finitely generated by the Dirichlet unit theorem and its valuations at $S_L$. The localized ideal class group is a quotient of the ordinary ideal class group of $L$, which is finite by the finiteness of the ideal class group. The Minkowski bound for ideal classes supplies an integral ideal of bounded norm in each class, and only finitely many integral ideals have bounded norm.

The kernel of restriction from $H^1(K,E[n])$ to $H^1(L,E[n])$ is also finite: a cocycle trivial after restriction can, after subtracting a coboundary, be made to factor through the finite group $\mathrm{Gal}(L/K)$. There are only finitely many maps from that group to the finite module $E[n]$. This is the finite-extension kernel of a Kummer map mechanism. Consequently the possible Kummer classes form a finite set, provingThis is the Weak Mordell-Weil theorem. Imposing membership in the local Kummer image at every place refines the finite unramified collection to the n-Selmer group. Its relation with the obstruction to a globally rational point iswhere the last group is the $n$-torsion of the Tate–Shafarevich group. Thus local solubility gives a finite computable upper bound but can leave a genuine global obstruction.

Heights and finite generation. For the other essay, normalize the absolute values on a field $K$ so that the product formula holds. The Absolute logarithmic Weil height of $[x_0:x_1]\in {\mathbb{P}}^1(K)$ isAt the infinite places the local degrees are one or two and the usual real or complex modulus is used. The product formula makes this independent of scaling; it is also unchanged by extending $K$. Over $\mathbb{Q}$, using coprime integral coordinates gives $h([u:v])=\log \max (|u|,|v|)$, the naive height on the projective line. The Northcott theorem says that points of bounded height and bounded field degree form a finite set; in particular this holds over the fixed field $K$. One way to see the finiteness is the height-Mahler measure formula: for an algebraic number of degree $d$, the coefficients of its primitive minimal integer polynomial are bounded by binomial factors times $\exp (dh)$. Bounds on $d$ and $h$ therefore leave only finitely many integer polynomials and hence only finitely many algebraic numbers.

Set $h_E(P)=h(x(P))$ for $P\ne O$, and $h_E(O)=0$. Since $x:E\to {\mathbb{P}}^1$ has degree two, bounded $h_E$ gives only finitely many points of $E(K)$. The height growth under a morphism of the projective line states that a degree-$d$ morphism gives $h(f(t))=dh(t)+O(1)$. The upper bound follows from its homogeneous coordinate polynomials; the lower bound follows from their having no common zero, using a resultant identity at each place. Applied to the degree-four duplication map, it gives a uniform constant $C$ withConsequently $4^{-j}{h}_E(2^{j}P)$ is Cauchy: the absolute difference of consecutive terms is at most $C{4}^{-(j+1)}$. Define the canonical height of an elliptic curve byIt is nonnegative and satisfies $\hat{h}(2P)=4\hat{h}(P)$. The factor one-half is the conventional normalization for the divisor $(O)$, since the first-coordinate height belongs to $2(O)$.

The addition-divisor identity also gives the bounded-error height identityuniformly in $P,Q$. This is the height form of the identity for the sum and difference pullbacks of the line bundle associated to $2(O)$; it includes points where the affine addition formulas have a zero denominator. Apply it to $2^{j}P,2^{j}Q$, divide by $2\cdot 4^j$, and take the limit. Thus $\hat{h}$ satisfies the parallelogram law, and its polarization is a bilinear form, the height pairing. Nonnegativity implies the Cauchy-Schwarz inequality for that pairing, by evaluating its nonnegative quadratic polynomial on $mP+nQ$ for all integers $m,n$ and approximating real ratios by rational numbers. In particularThese properties do not presuppose finite generation. Bounded canonical height gives a finite set by the bounded difference and the Northcott theorem. Torsion points have canonical height zero. Conversely, if $\hat{h}(P)=0$, all $2^{j}P$ have bounded naive height, so two coincide; their difference makes $P$ torsion. Thus the height detects precisely the free part, once finite generation is proved.

Use the Weak Mordell-Weil theorem with $n=2$ and choose finitely many coset representatives $R_i$. Write $P=2Q+R_i$, and put $H={\max }_i\hat{h}(R_i)$. The height inequality yieldsIteration enters the finite set $\{P:\hat{h}(P)\le H+1\}$, since after $j$ steps the height is at most $H+2^{-j}\max (\hat{h}(P)-H,0)$. Unwinding $P=2Q+R_i$ expresses every point using that finite set and the $R_i$. This proves the canonical-height proof of Mordell-Weil finite generation and henceThe Fundamental theorem of finitely generated abelian groups supplies this decomposition. The Mordell-Weil theorem combines a finite quotient from arithmetic Galois cohomology with a contracting height descent; either ingredient alone would not establish finite generation.

Translate the rational 2-torsion point to $(0,0)$ and clear denominators to obtain the integral Weierstrass equation of an elliptic curve. Nonsingularity requires $b\ne 0$ and $b^{\prime }=a^2-4b\ne 0$. The two-isogeny descent usesand its dual isogenyThese formulas extend across their missing affine points as degree-two isogenies of elliptic curves, with kernels $\{O,(0,0)\}$ on their respective curves; substitution gives $\psi \varphi =[2]$ and $\varphi \psi =[2]$.

Define homomorphisms to the square-class group of a field ${\mathbb{Q}}^{\times }/({\mathbb{Q}}^{\times }{)}^2$ byFor ordinary intersections with a line, the product of the three first coordinates is the square of its intercept, proving the homomorphism identity; tangent cases use the same product with multiplicities. For $T=(0,0)$, direct addition gives $x(P+T)=b/x(P)$, so $\alpha (P+T)=[b]\alpha (P)$. Also $\alpha (P)\alpha (-P)=1$ and $\alpha (T{)}^2=1$, which handle inverse points and $T+T=O$. These verify the exceptional values as well. Their kernels are $\psi E^{\prime }(\mathbb{Q})$ and $\varphi E(\mathbb{Q})$. One can check the first assertion directly: if $x=s^2\ne 0$, solving for the first coordinate of a preimage under $\psi$ giveswith rational corresponding ordinate. Conversely, on $E^{\prime }$ one has ${\psi }_x=Y^2/(4X^2)$, a square. The exceptional point $(0,0)$ has a rational preimage exactly when $b$ is a square. The other kernel assertion follows identically, since the double companion curve is isomorphic to $E$ by scaling its coordinates by four and eight.

We now justify the rank factor in the square-class index formula for two-isogeny descent, rather than forgetting a torsion correction. Put $A=E(\mathbb{Q})$, $B=E^{\prime }(\mathbb{Q})$, andThe preimage of $\psi \varphi A$ under $\psi$ is $\varphi A+\ker \psi$, soThe Mordell-Weil theorem gives $[A:2A]=2^r\#A[2]$, where $r$ is the rank of an abelian group of $A$. If $b^{\prime }$ is a square, $\#A[2]=4$ and $(0,0)\in \varphi A$, so $\delta =1$. If it is not a square, $\#A[2]=2$ and $\delta =2$. Hence $\delta \#A[2]=4$ in both cases, and

To bound these two images, let $\ell \nmid b$ and take a point with $x\ne 0$. If $v_{\ell }(x)>0$, then $x^2+ax+b$ is a unit, so $2v_{\ell }(y)=v_{\ell }(x)$ is even. If $v_{\ell }(x)<0$, the leading term $x^3$ uniquely has least valuation in the equation, so $2v_{\ell }(y)=3v_{\ell }(x)$ and again $v_{\ell }(x)$ is even. Thus every image class has a signed square-free integer representative supported on the prime divisors of $b$. The exceptional class $[b]$ also has that property. There are at most $2^{\nu (b)+1}$ such classes. Applying the same reasoning to $E^{\prime }$ gives $\#{\alpha }^{\prime }(B)\le 2^{\nu (b^{\prime })+1}$. The prime-support bound in two-isogeny descent is thereforeHere $\nu$ counts the distinct prime divisors of the absolute value of a nonzero integer; $\nu (1)=\nu (-1)=0$. The nonsingularity hypotheses exclude the otherwise undefined case $\nu (0)$.

For the unheaded practical procedure, enumerate signed square-free divisors $d$ of $b$, and of $b^{\prime }$ on the companion curve. A class $d$ is represented by a point of $E$ exactly when its quartic covering in a two-isogeny descenthas a rational solution with $(U,V)\ne (0,0)$. For $UV\ne 0$, reconstruct $x=d{U}^2/V^2$, $y=dUW/V^3$; substitution verifies the equivalence. Solutions with $V=0$ or $U=0$ account for the identity class or the class of $(0,0)$ respectively. Clearing denominators allows integral $U,V,W$ with $\gcd (U,V)=1$.

Test these finitely many coverings over the real numbers and local fields, especially at two and the primes dividing $b{b}^{\prime }$, to exclude impossible classes. Search the survivors for rational points, close the witnessed classes under multiplication, and use the index formula once both images are determined. Equivalently, local solubility gives a descent upper bound and independent rational points, certified for example by their canonical height of an elliptic curve pairing, give a lower bound. When the bounds coincide the rank is determined. This procedure often succeeds, but local solubility alone does not prove global solubility: a nonzero Tate–Shafarevich group can leave surviving coverings without rational points. In that case the computation gives a rigorous bound rather than a falsely certified exact rank.

A suitable version of the Hensel lemma is this: if $R$ is a complete discrete valuation ring, $h\in R[X]$, and $\overline{a}$ is a root of $\overline{h}$ with ${\overline{h}}^{\prime }(\overline{a})\ne 0$, there is a unique $a\in R$ reducing to $\overline{a}$ with $h(a)=0$. Starting with any lift, Newton iteration over a valued field $a_{j+1}=a_j-h(a_j)/h^{\prime }(a_j)$ keeps the derivative a unit and doubles the error valuation, giving convergence. Uniqueness follows by factoring $h(u)-h(v)$ when two roots have the same residue.

The field in the rest of this question is not assumed complete, so that version cannot simply be applied to it. Instead use the stated uniqueness of the extension of an absolute value. Let ${\alpha }_i,{\alpha }_j$ be any two roots of a polynomial $f$, which is irreducible. The field embedding sending ${\alpha }_i$ to ${\alpha }_j$ identifies $K({\alpha }_i)$ with $K({\alpha }_j)$. Pulling the latter field's absolute value back gives an extension on $K({\alpha }_i)$, which must coincide with the given one. More generally, for every $h\in K[X]$,This proves equal absolute values of algebraic conjugates without assuming separability or a transitive action of a Galois group; repeated roots cause no difficulty.

Every root of the monic $f\in {\mathcal{O}}_K[X]$ has absolute value at most one. Indeed, if $|\alpha |>1$, then each lower term satisfies $|c_j{\alpha }^j|\le |\alpha {|}^j<|\alpha {|}^n$. The ultrametric inequality makes the leading term dominate their sum, contradicting $f(\alpha )=0$. Thus

All roots lie in the valuation ring ${\mathcal{O}}_M$, so their residues are defined in the residue field $k_M$. Let $\phi \in k_K[X]$ be the monic minimal polynomial of an algebraic element of ${\overline{\alpha }}_1$; this residue is algebraic because it satisfies the monic $\overline{f}$. Choose a coefficientwise lift $\Phi \in {\mathcal{O}}_K[X]$. Then $|\Phi ({\alpha }_1)|<1$, and the conjugacy argument gives $|\Phi ({\alpha }_i)|<1$ for every $i$. Hence every ${\overline{\alpha }}_i$ is a root of $\phi$.

Reduction of the splitting-field factorization, with multiplicities, givesEvery monic irreducible factor of $\overline{f}$ over $k_K$ has a root among these residues. That root also satisfies $\phi$, so its minimal polynomial is $\phi$. Unique factorization therefore proves the pure-power reduction of a monic irreducible polynomial:This does not assert that $\phi$ is separable or that the reduction is square-free.

Finally, factor the monic $g$ over $K$ as $g={\prod }_j{h}_j^{e_j}$ with distinct monic irreducible polynomials $h_j$. The same leading-term argument bounds every root of $g$ by one. Coefficients of any $h_j$ are elementary symmetric polynomials in some of these roots, so they lie in ${\mathcal{O}}_K$. By the preceding result each ${\overline{h}}_j$ is a power of a single monic irreducible residue polynomial ${\phi }_j$.

Since the prescribed ${\overline{g}}_1,{\overline{g}}_2$ are coprime, every ${\phi }_j$ occurs on exactly one side. Assign the entire factor $h_j^{e_j}$ to that side and form the two products. Comparing irreducible-factor multiplicities in the reduction proves the coprime factor lifting from valuation-extension uniqueness:Empty products are one, covering constant prescribed factors. The construction proves the required factor-lifting form of the Hensel lemma directly from extension uniqueness, without adding completeness as an unstated hypothesis.

Let $L/K$ be a finite Galois extension of non-Archimedean local fields, let $G=\mathrm{Gal}(L/K)$, and normalize the discrete valuation by $v_L(L^{\times })=\mathbb{Z}$. The lower ramification numbering isHere $G_0$ is the inertia group and $G_1$ is the wild inertia group. For real $s\ge -1$, put $G_s=G_{\lceil s\rceil }$; thus $G_s=G_0$ for $-1<s\le 0$. Define the Herbrand function and its inverse byextending $\phi (s)=s$ on $[-1,0]$. The upper ramification numbering is $G^u=G_{\psi (u)}$ for $u\ge -1$.

Let ${\alpha }^p-\alpha =t^{1-p}$ over $K={\mathbb{F}}_p((t))$, with $t$ its uniformizer. The Artin–Schreier polynomial has derivative $-1$ in characteristic $p$, so all its roots are distinct. If $\alpha$ is one root and $\beta$ another, then $(\beta -\alpha {)}^p=\beta -\alpha$, so $\beta -\alpha \in {\mathbb{F}}_p$. Conversely every $\alpha +a$, $a\in {\mathbb{F}}_p$, is a root. Thus $L=K(\alpha )$ contains all roots and is a splitting field of a separable polynomial; it is Galois. Every automorphism has the form ${\sigma }_a(\alpha )=\alpha +a$, and its Galois group embeds in the additive group of ${\mathbb{F}}_p$.

There is no root in $K$. If $v_K(z)\ge 0$, then $z^p-z$ cannot have negative valuation. If $v_K(z)<0$, the ultrametric inequality gives $v_K(z^p-z)=p{v}_K(z)$, divisible by $p$, whereas $v_K(t^{1-p})=1-p$ is not. The Galois group is consequently nontrivial. Its order divides the prime $p$, so

Let $e=e(L/K)$ be the ramification index. The equation forces $v_L(\alpha )<0$, and henceAs $\gcd (p,p-1)=1$, $p\mid e$. Since $e\le [L:K]=p$, we get $e=p$, residue-field degree one, and $v_L(\alpha )=1-p$. Thus this is a totally ramified extension, andThis is a uniformizer. The uniformizer criterion for lower ramification groups states that for a totally ramified Galois extension, $\sigma \in G_i$ exactly when $v_L(\sigma ({\pi }_L)-{\pi }_L)\ge i+1$. Here every nonidentity automorphism satisfiesTherefore the ramification break of an Artin–Schreier pole occurs at $p-1$, and the lower groups areThis includes $p=2$, where the break is one. There is no off-by-one shift: the condition is $v_L(\sigma {\pi }_L-{\pi }_L)\ge i+1$.

For the upper groups, compute the Herbrand function explicitly:Hence the upper break is also $p-1$ and, with the stated real-index convention,As a consistency check, ${\pi }_L$ satisfies the Eisenstein polynomial $X^p-t^{p-1}X-t$. Its derivative in characteristic $p$ is $-t^{p-1}$, giving different exponent $p(p-1)$, equal to ${\sum }_{i\ge 0}(|G_i|-1)=p(p-1)$ from the different exponent from ramification groups.

Fix a non-Archimedean local field $K$, its valuation ring $R={\mathcal{O}}_K$, a uniformizer $\pi$, and a residue field with cardinality $q$. The construction below applies both in mixed and equal characteristic. A one-dimensional commutative formal group law is $F(X,Y)\in R[[X,Y]]$ with identity, associativity and commutativity, and $F(X,Y)=X+Y+$ higher-degree terms. It has a unique formal inverse. Its morphisms are series $h(T)\in TR[[T]]$ with $h(F(X,Y))=G(h(X),h(Y))$; a unit linear coefficient makes such a morphism invertible by recursive coefficient comparison. Evaluating its integral series on the maximal ideal of a finite extension of $K$ is legitimate because the series converge there.

Choose a Lubin–Tate series $f(T)$ satisfyingA useful choice is $f(T)=\pi T+T^q$. The Lubin–Tate functional equation lemma constructs a unique series with any prescribed linear form $\ell$ and satisfyingHere is its coefficient argument. If terms below degree $d$ have been found, the unknown homogeneous degree-$d$ term appears with multiplier $\pi -{\pi }^d$. The already known error has every coefficient divisible by $\pi$: after reduction, the equation becomes $H(X{)}^q=H(X_1^q,\dots ,X_r^q)$, valid because the residue coefficients lie in ${\mathbb{F}}_q$. Since $\pi -{\pi }^d$ is $\pi$ times a unit for $d\ge 2$, the next term is uniquely determined and integral. Recursion proves existence and uniqueness.

Use $\ell =X+Y$ to construct $F_f$, and $\ell =aT$ to construct $[a{]}_f$ for every $a\in R$. Uniqueness gives $F_f(X,0)=X$ and $F_f(0,Y)=Y$. Comparing $[a{]}_f(F_f(X,Y))$ with $F_f([a{]}_f(X),[a{]}_f(Y))$, which satisfy the same functional equation and have the same linear form, proves that $[a{]}_f$ is an endomorphism of the law. The same uniqueness applied to three variables proves associativity: $F_f(F_f(X,Y),Z)$ and $F_f(X,F_f(Y,Z))$ have the same linear form and functional equation. It also proves commutativity and the identitiesThus this Lubin–Tate formal group is equipped with an action of the whole ring $R$, not only its integers. For a unit $a$, the inverse of $[a{]}_f$ is $[a^{-1}{]}_f$. The same recursion, with two series for the fixed $\pi$, gives a unique strict Lubin–Tate change of series. Its integral series and inverse converge on torsion points, so it identifies their torsion fields. We may compute with $f(T)=\pi T+T^q$ without losing the general construction for that uniformizer.