The Computer-Assisted Proof

Appel-Haken 1976, the proof controversy, and modern verification

The Computer-Assisted Proof

In 1976 a computer helped prove the four color theorem, and mathematicians argued over whether that counted as a proof at all.

The Proof Strategy

Click each node in the flowchart, or press Walk Through All, to follow the argument from a smallest possible counterexample to a contradiction.

Proof by Contradiction Flowchart

Click each node to expand its explanation. Nodes you have visited will be fully highlighted.

Start: Assume a minimalcounterexample G existsG must contain one configurationfrom the unavoidable setFind unavoidable set of 1,936configurations (discharging)Verify each is reducible(computer check)Every configuration is reducible→ coloring extends → contradictionNo minimal counterexample exists→ Four Color Theorem is proved

0 of 6 steps explored.

Go deeper:The Proof Strategy

In 1976 Kenneth Appel and Wolfgang Haken announced they had proved the four color theorem -- with the help of a computer. The mathematical community was stunned: it was the first major theorem whose proof relied essentially on computation. No human could check the entire argument by hand, and many mathematicians questioned whether it was truly a "proof" at all.

Half a century later, the proof has been independently verified three times with increasing rigor. The debate it sparked about the nature of proof continues to shape how mathematicians think about certainty, computation, and understanding.

The proof works by contradiction. Assume a minimal counterexample exists -- the smallest planar graph that cannot be 4-colored.

Key insight: The proof works by contradiction. Assume a minimal counterexample exists. By discharging, it must contain one of 1,936 configurations. But each one is reducible (verified by computer), so the counterexample can be made smaller -- contradicting minimality.

What the Computer Checked

Pick a configuration and press Start Verification to watch every coloring of the outer ring get tested against the inside. Change the speed to see how fast the cases pile up.

Configuration:
6
Ring Size
2
Interior Vertices
31
Valid Ring Colorings
0
Checks Completed
R1R2R3R4R5R6I1I2Ring vertices (R) = boundary | Interior vertices (I) = inside
Verification Progress0 / 31 colorings checked
Speed:

Select a configuration and run the verification. The computer checks that every valid coloring of the ring boundary can be extended to a proper 4-coloring of the entire configuration, proving it is reducible.

Go deeper:What the Computer Checked

Key insight: For each of the 1,936 configurations, the computer verified that every possible coloring of the surrounding ring extends to the interior. This is a finite but enormous case analysis -- far beyond what any human could check by hand.

Three Generations of Proof

Switch between the three proofs to compare their configurations, methods, and trust levels. Open the discussion at the bottom to weigh both sides of the debate.

Three Generations of Proof

Appel-Haken

Kenneth Appel & Wolfgang Haken

1976
1,936
Configurations
IBM 370 mainframe, custom programs in assembly and Fortran
Verification Method
Trust LevelControversial (55%)

The original proof was announced in 1976 after four years of work. Appel and Haken used a combination of hand-derived discharging rules and computer verification of 1,936 reducible configurations. The computer ran for approximately 1,200 hours on an IBM 370 mainframe. The proof was met with significant skepticism: the computer code was not publicly available, the output could not be checked by hand, and some mathematicians questioned whether it constituted a "real" proof.

•~1,200 hours of computation
•487 discharging rules (hand-verified)
•First major theorem proved with essential computer assistance

Timeline Comparison

1976Appel-Haken1936 configs1997Robertson-Sanders-Seymour-Thomas633 configs2005Gonthier (Coq Formalization)633 configs
Go deeper:Three Generations of Proof

The four color theorem has been proved three times, each with greater rigor and transparency. Compare the approaches below, from the controversial 1976 original to the formally verified 2005 formalization in the Coq proof assistant.

Key insight: The proof has been independently verified three times with increasing rigor. Gonthier's 2005 Coq formalization reduced the trust assumption to the correctness of the Coq kernel -- a much smaller and well-tested piece of software.

Key Takeaways

  • Proof by contradiction: an unavoidable set whose members are all reducible
  • A computer checked 1,936 configurations, each with thousands of ring colorings
  • It was controversial: the first major theorem to rely essentially on a computer
  • Verified three times -- 1976, 1997, and 2005

Spot a mistake or have an idea?

Search