Build the idea in three steps
- The curve addition has a clock trick of its own: take a point P and add it to itself again and again. If after ℓ steps the walk returns to zero, P is a torsion point — and the ℓ-torsion part is the collection of points passing that test.
- Submodule.torsionBy ℤ (W'.Point) ℓ is the Lean definition: the points with ℓ • P = 0. For the prime exponent of this proof, that world is E[ℓ], and it is small: the Frey curve hands exactly this finite cage over to the symmetries.
- The lemma proves nobody escapes: if P is ℓ-torsion, then so is σ • P, because σ • (m • P) = m • (σ • P) — the last line rewrites the walk through map_zsmul and lands on zero again. You can shuffle the cage, you cannot open it.
A small example
On the unit circle viewed as a group under multiplication, fixing a positive integer ℓ gives exactly ℓ roots of z^ℓ = 1. For ℓ = 4 these are 1, i, −1 and −i. The union of the roots for all positive ℓ is infinite. A fixed torsion level and all torsion points are different sets.