The whole correspondence: the Mathlib-free predicate and Nat.Prime
agree. Everything else transports along it.
Checker soundness, in Mathlib's vocabulary.
theorem
Hex.Nat.natPrime_of_checkPrimeAt
{n : ℕ}
{c : PrimeCert}
(h : (c.subject == n && checkPrime c) = true)
:
The single-Bool-slot wrapper, in Mathlib's vocabulary; what the
Nat.Prime tactic handler emits.
The total decision is exact for Nat.Prime.
A Miller-Rabin witness refutes Nat.Prime.