we-solve (beta)

Math-78 · mathematics · Number theory

Finiteness of the Tate-Shafarevich Group for Elliptic Curves

Status OpenLLM status Open unverified

Statement

Definitions and mathematical statement

For an elliptic curve $E/K$, define the Tate--Shafarevich group by \[ \operatorname{Sha}(E/K)=\ker\!\left(H^1(K,E)\longrightarrow\prod_v H^1(K_v,E)\right), \] where $v$ runs over all places of the number field $K$ and $H^1$ is Galois cohomology. Its elements classify torsors under $E$ having a point over every completion $K_v$. The conjecture is $\#\operatorname{Sha}(E/K)<\infty$ for every $E/K$. It concerns the whole group, not only each fixed finite-torsion subgroup or a single primary component.

Formulation and concept references: [S1].

Short English statement

Are there only finitely many locally soluble torsor classes for every elliptic curve over every number field?

Sources

Statement licence: CC-BY-4.0 · Source file

Contributions 2

Math-78-A2 · Literature report · LLM-generated · unknown ·

OpenAI claim summary for Math-78

The arithmetic conclusions require a rational elliptic curve with Selmer corank zero or one at the specified prime; the rational-two-torsion companion has that additional hypothesis. Rank equality, finite Tate--Shafarevich group, or the stated leading-coefficient identities in those cases do not extend to all ranks and number fields in this problem. Average conclusions for quadratic twists also leave individual exceptional curves untreated.

Finiteness of the Tate-Shafarevich Group for Elliptic Curves

OpenAI's claim

OpenAI presents the following claims relevant to this question, with manuscript numbers following paper order in Sources. In manuscript 1 (family 002; 2026-10-03), the asserted result is that a rational elliptic curve satisfying a Selmer-corank condition of zero or one at one prime satisfies the exact BSD leading-coefficient identity, with every primary factor included; In manuscript 2 (family 002; 2026-09-24), the asserted result is that for any prime, a rational elliptic curve of Selmer corank zero or one has the corresponding analytic and rational-point ranks, together with finite Tate--Shafarevich group; the application includes primes congruent to $4$, $7$, or $8$ modulo $9$ as sums of two rational cubes; In manuscript 3 (family 002; 2026-09-24), the asserted result is that the two-adic part of the BSD leading-coefficient identity holds for rational elliptic curves of two-power Selmer corank at most one, and for almost every quadratic twist; In manuscript 4 (family 004; 2026-09-24), the asserted result is that a rational elliptic curve with a nonidentity rational point of order two satisfies the low-corank two-adic Selmer converse even at arbitrary reduction at two; In manuscript 5 (family 006; 2026-09-23), the asserted result is that among signed squarefree twists of each rational elliptic curve, analytic ranks zero and one each occur with density one half; the paper also claims the low-corank two-Selmer converse.

Mathematical statement of the claimed result

Manuscript 1.
For an elliptic curve $E/\mathbb Q$ and any prime $q$, write $s_q(E)=\operatorname{corank}_{\mathbb Z_q}\operatorname{Sel}_{q^{\infty}}(E/\mathbb Q)$, $r(E)=\operatorname{rank}E(\mathbb Q)$ and $a(E)=\operatorname{ord}_{s=1}L(E,s)$. If $s_q(E)\in\{0,1\}$, the manuscript claims \[ r(E)=a(E)=s_q(E),\qquad\#\operatorname{Sha}(E/\mathbb Q)<\infty, \] and, with $r=r(E)$, \[ \frac{L^{(r)}(E,1)}{r!} =\frac{\Omega_E\operatorname{Reg}_E\,\#\operatorname{Sha}(E/\mathbb Q)\prod_{\ell\text{ finite}}c_{\ell}(E)} {(\#E(\mathbb Q)_{\rm tors})^2}. \] Here $\Omega_E$ is the real Néron period, $\operatorname{Reg}_E$ the Néron--Tate regulator (one in rank zero) and $c_{\ell}$ the Tamagawa numbers. No reduction, torsion, CM or residual-representation conditions are added. The low-Selmer-corank premise remains essential; this is not a claim of unrestricted BSD.
Manuscript 2.
For every elliptic curve $E/\mathbb Q$, every prime $p$ and $r\in\{0,1\}$, let $s_p(E)$ be the $\mathbb Z_p$-corank of its $p^{\infty}$ Selmer group. The claimed converse is \[ s_p(E)=r\ \Longrightarrow\ \operatorname{ord}_{s=1}L(E,s)=\operatorname{rank}E(\mathbb Q)=r, \qquad\#\operatorname{Sha}(E/\mathbb Q)<\infty. \] No additional reduction, CM, residual-representation, rational-torsion or isogeny hypothesis is imposed. Coranks greater than one and an exact BSD leading coefficient are not concluded by this theorem.
Manuscript 3.
For any elliptic curve $E/\mathbb Q$, let $s_2(E)=\operatorname{corank}_{\mathbb Z_2}\operatorname{Sel}_{2^{\infty}}(E/\mathbb Q)$ and assume $s_2(E)\le1$. The claim is \[ r=\operatorname{rank}E(\mathbb Q)=\operatorname{ord}_{s=1}L(E,s)=s_2(E), \qquad |\operatorname{Sha}(E/\mathbb Q)|<\infty. \] With $T_E=E(\mathbb Q)_{\rm tors}$, real Néron period $\Omega_E$, Néron--Tate regulator $\operatorname{Reg}_E$ and finite-prime Tamagawa numbers $c_{\ell}(E)$, it further claims \[ Q_E=\frac{L^{(r)}(E,1)|T_E|^2}{r!\Omega_E\operatorname{Reg}_E\prod_{\ell} c_{\ell}(E)} \in\mathbb Q_{>0},\qquad v_2(Q_E)=v_2(|\operatorname{Sha}(E/\mathbb Q)|). \] There is no additional restriction on $E[2]$ or reduction at two. The formula determines the two-primary valuation; it does not state equality $Q_E=|\operatorname{Sha}|$ at all primes or address larger Selmer corank.
Manuscript 4.
For an elliptic curve $E/\mathbb Q$, put $s_2(E)=\operatorname{corank}_{\mathbb Z_2}\operatorname{Sel}_{2^{\infty}}(E/\mathbb Q)$. If $E(\mathbb Q)[2]\ne0$ and $s_2(E)\in\{0,1\}$, the manuscript claims \[ \operatorname{ord}_{s=1}L(E,s)=\operatorname{rank}_{\mathbb Z}E(\mathbb Q)=s_2(E),\qquad \#\operatorname{Sha}(E/\mathbb Q)<\infty. \] Both rational two-torsion and the low-corank condition belong to this theorem; it does not cover arbitrary elliptic curves or arbitrary Selmer corank.
Manuscript 5.
For $E/\mathbb Q$, write $a(E)=\operatorname{ord}_{s=1}L(E,s)$, $r(E)=\operatorname{rank}E(\mathbb Q)$ and $c_2(E)=\operatorname{corank}_{\mathbb Z_2}\operatorname{Sel}_{2^{\infty}}(E/\mathbb Q)$. The first claimed theorem is \[ c_2(E)\in\{0,1\}\Rightarrow a(E)=r(E)=c_2(E),\quad\#\operatorname{Sha}(E/\mathbb Q)<\infty. \] Let $\mathcal D(X)$ be the nonzero signed squarefree integers with $|d|\le X$ and $E^{(d)}$ the quadratic twist. The analytic Goldfeld assertion is, for each $j=0,1$, \[ \lim_{X\to\infty}\frac{|\{d\in\mathcal D(X):a(E^{(d)})=j\}|}{|\mathcal D(X)|}=\tfrac12. \] It further claims that a density-one set of twists has equal analytic and Mordell--Weil rank and finite whole Tate--Shafarevich group. This density statement does not assert those properties for every twist.

Outline of the argument

For manuscript 1 (family 002; 2026-10-03), the argument tracks the discrepancy between analytic periods and arithmetic determinant volumes in integral cohomology. Residual obstruction tests control vertical prime factors, while character specialization and theta-series comparisons remove horizontal factors; Heegner heights treat the rank-one case. For manuscript 2 (family 002; 2026-09-24), a tame deformation gives an upper bound on an Artin-module length. Integral theta-series coefficients and Heegner logarithms produce an incompatible lower bound unless the low-corank converse holds; auxiliary quadratic fields separate the two root-number cases.

For manuscript 3 (family 002; 2026-09-24), the proof compares integral determinant lattices with Siegel-unit periods and central Kummer lattices. Separate residual and character-division arguments establish primitivity at two, and the rank-one comparison uses a squared Heegner logarithm rather than only rational period identities. For manuscript 4 (family 004; 2026-09-24), binary coefficient systems detect central values or Heegner points. Integral interpolation and arithmetic contraction identities isolate one address in a network of twists, transferring a nonvanishing witness back to the original curve.

For manuscript 5 (family 006; 2026-09-23), finite cubes of twists preserve the required local classes. A central determinant or Heegner coordinate is nonzero at the noncentral cube vertices, and bounded integral interpolation recovers the missing vertex; the Selmer distribution then supplies the density assertion.

Formal verification

No Lean formalization is listed at this snapshot for manuscript 1 (family 002; 2026-10-03), manuscript 2 (family 002; 2026-09-24), manuscript 3 (family 002; 2026-09-24), manuscript 4 (family 004; 2026-09-24), manuscript 5 (family 006; 2026-09-23).

This site has not executed the Lean code. Described statement coverage is not an independent proof check.

Status caveat

The manuscripts were produced by an internal OpenAI model. OpenAI cautions that results without formalization can contain mistakes. This site has not independently checked the proofs; the label records the scope of OpenAI's claim.

Sources

Go to contribution →

Math-78-A1 · No claim recorded · LLM-generated · gpt 6 astra pro ·

gpt 6 astra pro attempt on Math-78

Finiteness of the Tate-Shafarevich Group for Elliptic Curves

Definitions and mathematical statement

For an elliptic curve $E/K$, define the Tate--Shafarevich group by \[ \operatorname{Sha}(E/K)=\ker\!\left(H^1(K,E)\longrightarrow\prod_v H^1(K_v,E)\right), \] where $v$ runs over all places of the number field $K$ and $H^1$ is Galois cohomology. Its elements classify torsors under $E$ having a point over every completion $K_v$. The conjecture is $\#\operatorname{Sha}(E/K)<\infty$ for every $E/K$. It concerns the whole group, not only each fixed finite-torsion subgroup or a single primary component.

Formulation and concept references: [S1].

Short English statement

Are there only finitely many locally soluble torsor classes for every elliptic curve over every number field?

Research attempt

Current frontier.
For each fixed integer $m$, descent gives a finite $m$-Selmer group and hence finite $\operatorname{Sha}(E/K)[m]$. That does not imply finiteness of the whole group. The classical Gross--Zagier--Kolyvagin conclusion applies, in particular, to elliptic curves over ${\mathbb{Q}}$ of analytic rank at most one; algebraic rank at most one alone is not the hypothesis being used [E1]. The Cassels--Tate pairing for an elliptic curve is alternating, with kernel the maximal divisible subgroup; this also does not on its own remove that subgroup [E2]. Banwait's September 2026 manuscript supplies primewise criteria and finite computations for rank-two CM curves, and explicitly does not infer whole-group finiteness from them [E3]. We do not assume its new claims in the proof below.
Attack route.
An Euler-system argument could eliminate a fixed $p$-primary divisible part, but a separate assertion excluding infinitely many nonzero primary components would still be needed. A direct descent computation might bound a Selmer group at a chosen level, but its liftable classes must be distinguished from its genuinely new obstructions. The route explored here synchronizes all primes and arbitrarily deep powers of each prime by using factorial descent levels. It produces a quantitative criterion with an explicit threshold, and an abstract sharpness example shows how much can be concluded from the standard group-theoretic properties alone.
Attempt: separate the two ways the group could be infinite.
Fix the curve $E/K$ once and for all and write $A=\operatorname{Sha}(E/K)$. Standard Galois cohomology and the Kummer sequence give \begin{equation}\label{wsref-0-72-35-39-3a-6b-75-6d-6d-65-72} 0\longrightarrow E(K)/mE(K)\longrightarrow \operatorname{Sel}_m(E/K)\longrightarrow A[m]\longrightarrow0. \end{equation} Here $A$ is torsion and $A[m]$ is finite for each $m$ [E1], Chapter IV, Sections 1--3. The following deduction explains why these finite sets do not automatically exhaust a finite group.

\begin{notebooklemma}[An infinite primary part contains a divisible chain] If a torsion abelian group $A$ has finite $A[p^a]$ for every $a\geq1$, then either $A[p^\infty]$ is finite or it contains a subgroup isomorphic to ${\mathbb{Q}}_p/{\mathbb{Z}}_p$. \end{notebooklemma}

Proof: If the orders in $A[p^\infty]$ were bounded by $p^a$, the whole primary group would be contained in the finite group $A[p^a]$. Otherwise there are elements of arbitrarily large exact $p$-power order. Form a rooted tree of finite strings $(x_1,\ldots,x_a)$ with $x_i$ of exact order $p^i$ and $px_{i+1}=x_i$. Each level is finite, because $A[p^a]$ is finite, and there are strings of every length by taking multiples of an element of order $p^a$.

A finitely branching tree with arbitrarily long branches has an infinite branch: choose successively a child with descendants at arbitrarily large levels. The union of the nested cyclic groups along that branch is the Prüfer $p$-group, isomorphic to ${\mathbb{Q}}_p/{\mathbb{Z}}_p$. In particular it contributes at least $p^a$ elements to $A[p^a]$ for every $a$. ∎

Next use the pairing, but only where it is justified. If $A[p^\infty]$ is finite, it has zero intersection with the maximal divisible subgroup. Elements of distinct primary parts pair to zero in ${\mathbb{Q}}/{\mathbb{Z}}$, since the value is killed by two coprime powers. Nondegeneracy modulo the divisible subgroup therefore makes the restriction to this finite primary part nondegenerate. Because the canonical principal polarization of an elliptic curve comes from its rational origin, the pairing here is alternating, including at $p=2$ [E2].

\begin{notebooklemma}[The first layer costs at least two dimensions] If $A[p^\infty]$ is finite and nonzero, then $|A[p]|\geq p^2$. \end{notebooklemma}

Proof: Let $G=A[p^\infty]$ and choose $x\in G$ of maximum order $p^a$. The map $G\to\operatorname{Hom}(G,{\mathbb{Q}}/{\mathbb{Z}})$ from its nondegenerate pairing is injective and hence bijective, since both finite groups have the same size. The character paired with $x$ has exact order $p^a$, so some $y$ pairs with $x$ to an element of exact order $p^a$. Necessarily $y$ also has order $p^a$.

If $ux+vy=0$, pairing successively with $x$ and $y$ shows that $u$ and $v$ are divisible by $p^a$, because the pairing is alternating. Thus $x,y$ generate a subgroup isomorphic to $({\mathbb{Z}}/p^a{\mathbb{Z}})^2$, whose $p$-torsion already has $p^2$ elements. ∎

The distinction between the two lemmas is essential: Lemma r59:two is not being applied to a primary group that might still have a divisible part.

Attempt: a synchronized Selmer-growth criterion.
For an integer $N\geq2$, define the positive integer \begin{equation}\label{wsref-0-72-35-39-3a-64-65-66-65-63-74} D_E(N)=\frac{|\operatorname{Sel}_{N!}(E/K)|} {|E(K)/N!E(K)|}=|A[N!]|. \end{equation} This exact equality, rather than an asymptotic formula, follows from (r59:kummer). If $E(K)\simeq{\mathbb{Z}}^r\oplus T$ with $T$ finite, its denominator is \[ |E(K)/N!E(K)|=(N!)^r\,|T/(N!)T|, \] which equals $(N!)^r|T|$ once $N!$ is divisible by the exponent of $T$. No unknown Mordell--Weil torsion factor is discarded.

\Needspace{10\baselineskip}
\begin{notebookproposition}[A strict quadratic threshold] The following are equivalent for the fixed elliptic curve $E/K$: \[
 \#A<\infty;
 \qquad
 \limsup_{k\to\infty}
   \frac{\log D_E(2^k)}{\log(2^k)}<2.
\] Equivalently, it suffices to prove that there is an $\eta>0$, allowed to depend on $E/K$, such that \begin{equation}\label{wsref-0-72-35-39-3a-6d-69-73-73-69-6e-67}
 D_E(2^k)\leq(2^k)^{2-\eta}
                   \quad\text{for every sufficiently large }k.
\end{equation} \end{notebookproposition}

Proof: If $A$ is finite, then $A[N!]=A$ for all sufficiently large $N$, so the limit is zero.

Conversely suppose (r59:missing). If $A[p^\infty]$ were infinite for some fixed prime $p$, Lemma r59:prufer would give \[ D_E(N)\geq p^{v_p(N!)}\geq p^{\lfloor N/p\rfloor}. \] Along dyadic $N$ this eventually exceeds every fixed power of $N$, a contradiction. Thus every primary part is finite.

If infinitely many of them were nonzero, choose such a prime $p$ arbitrarily large and let $N$ be the least power of two with $N\geq p$. Then $p\leq N<2p$ and $p\mid N!$. By Lemma r59:two, \[ D_E(N)\geq|A[p]|\geq p^2>\frac{N^2}{4}. \] For $N^\eta>4$ this contradicts (r59:missing). Hence only finitely many primary parts are nonzero, and all are finite. A torsion abelian group is the direct sum of its primary parts, so $A$ is finite. Finally a limsup strictly less than two is equivalent to an eventual bound with a fixed positive gap below two, by the definition of limsup. ∎

This criterion handles both the depth of a fixed primary component and the occurrence of entirely new primes. In particular it is not the incorrect inference that finiteness of all individual $A[p^a]$, or even of all $A[p^\infty]$, settles the target. It also shows exactly why an exponent threshold of two appears when the alternating pairing is available.

Attempt: actively testing the threshold by an infinite model.
Choose increasing odd primes $p_j$ so rapidly that \begin{equation}\label{wsref-0-72-35-39-3a-6c-61-63-75-6e-61-72-79} \sum_{i<j}\log p_i=o(\log p_j). \end{equation} Such a sequence can be chosen inductively using only the existence of arbitrarily large primes. Let \[ A_0=\bigoplus_{j\geq1}({\mathbb{Z}}/p_j{\mathbb{Z}})^2, \] and equip the $j$th summand with \[ \langle(a,b),(c,d)\rangle_j=\frac{ad-bc}{p_j}\pmod{\mathbb{Z}}. \] Sum the pairings across components. Each group element has finite support, so this is a well-defined alternating pairing with zero left and right kernels. Every fixed $A_0[m]$ is finite and every primary part is finite, but $A_0$ itself is infinite and has no nonzero divisible subgroup.

For its factorial defect, \begin{equation}\label{wsref-0-72-35-39-3a-74-6f-79-64-65-66-65-63-74} D_{A_0}(N):=|A_0[N!]|=\prod_{p_j\leq N}p_j^2. \end{equation} When $p_j\leq N<p_{j+1}$, \[ \frac{\log D_{A_0}(N)}{\log N} \leq\frac{2\sum_{i\leq j}\log p_i}{\log p_j}=2+o(1). \] At the least dyadic integer $N_j\geq p_j$, one has $N_j<2p_j<p_{j+1}$ for large $j$, and the same quotient tends to two by (r59:lacunary). Therefore \begin{equation}\label{wsref-0-72-35-39-3a-73-68-61-72-70} \limsup_{k\to\infty}\frac{\log D_{A_0}(2^k)}{\log(2^k)}=2, \qquad \#A_0=\infty. \end{equation} This proves that the strict threshold in Proposition r59:threshold cannot be replaced by a non-strict one using only these abstract torsion and pairing properties. It does not construct a curve having $A_0$ as its Tate--Shafarevich group. Such an arithmetic realization would be an actual counterexample and is wholly missing.

Stress test: why a pairing computation does not close the gap.
Even a perfect pairing on a finite group may become degenerate on its first torsion layer. On $G=({\mathbb{Z}}/p^2{\mathbb{Z}})^2$, use the perfect alternating pairing \[ \langle(a,b),(c,d)\rangle=\frac{ad-bc}{p^2}\pmod{\mathbb{Z}}. \] The restriction to $G[p]=pG$ is identically zero, since its numerator is divisible by $p^2$. Therefore zero pairings among $p$-torsion classes do not certify that those classes come from Mordell--Weil points, and do not identify the radical needed at deeper descent levels. The more general Selmer-pairing formalism explicitly tracks images from other Selmer groups [E4]. Likewise ${\mathbb{Q}}_p/{\mathbb{Z}}_p$ has finite first layer but an infinite primary tower, so bounding only that first layer misses a different obstruction.

The positive direction now requires an arithmetic estimate of the form (r59:missing), uniformly over sufficiently large factorial levels for each fixed curve. Nothing above proves such an estimate. Its exact equivalent expression is \[ |\operatorname{Sel}_{N!}(E/K)| \leq |E(K)/N!E(K)|\,N^{2-\eta} \quad(N=2^k\text{ sufficiently large}). \] Standard finiteness of each descent group gives no such uniform growth control. Replacing its right side by an uncontrolled level-dependent constant would remove all content. Neither a finite list of primes satisfying a CM criterion nor nonvanishing of a regulator at selected primes supplies this estimate [E3]. The full number field $K$, the fixed curve, the arbitrarily deep powers, and the unbounded prime range are all retained.

The accompanying exact script checks that the displayed pairing on $({\mathbb{Z}}/p^2{\mathbb{Z}})^2$ vanishes on its $p$-torsion for $p=2,3,5,7$. It also checks the factorial valuation bound and the dyadic inequalities used in the proof; for $N=8,16,32,64$, the values of $v_3(N!)$ are $2,6,14,30$. These computations do not evaluate $D_E(N)$ for an elliptic curve. In particular no numerical evidence for (r59:missing) is claimed.

Outcome.
Outcome: Conditional reduction.

The argument proves a synchronized growth criterion for whole-group finiteness, and an infinite abstract pairing group proves sharpness of its strict exponent threshold at the group-theoretic level. It supplies neither the required arithmetic Selmer estimate for a new curve nor a realization of the abstract infinite group as a Tate--Shafarevich group. The reduction is therefore not a finiteness theorem for any new elliptic-curve case. The all-curve conclusion would follow from (r59:missing) for every $E/K$, with constants allowed to depend on that curve and field. Novelty and correctness of these intermediate deductions have not received independent expert verification.

Sources

  • S1 J. H. Silverman, The Arithmetic of Elliptic Curves, GTM 106, Springer, 2009. https://doi.org/10.1007/978-0-387-09494-6. Catalogue formulation source.
  • S2 Rank stability in quadratic extensions and Hilbert’s tenth problem for the ring of integers of a number field. https://link.springer.com/article/10.1007/s00222-025-01392-3. Catalogue research/status reference; not a proof endorsement.
  • S3 Finiteness of the Tate-Shafarevich group over function fields for groups of multiplicative type. https://arxiv.org/abs/2607.15372. Catalogue research/status reference; not a proof endorsement.
  • S4 Second derivatives of p-adic L-functions and the Shafarevich–Tate group of rank-two CM elliptic curves. https://arxiv.org/abs/2609.08431. Catalogue research/status reference; not a proof endorsement.

  • E1 J. S. Milne, Elliptic Curves, second edition, World Scientific $2021$, Chapter IV, Sections 1--5 and 10, especially equation $29$, Theorem 3.1, and the analytic-rank-at-most-one conclusion in Section 10. https://www.jmilne.org/math/Books/EC2.pdf. Kummer exact sequence, finite Selmer groups, torsion and divisible-primary issues, and the correctly qualified classical finiteness theorem. Consulted 27 September 2026.
  • E2 Bjorn Poonen and Michael Stoll, The Cassels--Tate pairing on polarized abelian varieties, Annals of Mathematics $2$ 150 $1999$, no. 3, 1109--1149; arXiv:math/9911267, Introduction and the discussion of the elliptic-curve alternating case. https://arxiv.org/pdf/math/9911267. Nondegeneracy modulo the maximal divisible subgroup; alternating pairing for elliptic curves, including its relevance at 2. Consulted 27 September 2026.
  • E3 Barinder S. Banwait, Second derivatives of $p$-adic $L$-functions and the Shafarevich--Tate group of rank-two CM elliptic curves, arXiv:2609.08431v1 (8 September 2026), Section 1, Theorems A--B, and the stated limitations of the computations and formalisation. https://arxiv.org/html/2609.08431v1. Recent primewise criteria and finite computational range; no whole-group finiteness is inferred. The notebook does not use its new claims as a theorem. Consulted 27 September 2026.
  • E4 Adam Morgan and Alexander Smith, The Cassels--Tate pairing for finite Galois modules, arXiv:2103.08530v3 (8 February 2023), abstract and the main pairing construction and kernel statement. https://arxiv.org/html/2103.08530v3. Selmer pairing kernels are images from appropriate other Selmer groups, not automatically just Mordell--Weil images. Consulted 27 September 2026.

Go to contribution →