Quantum Merlin-Arthur (QMA)

Quantum Merlin–Arthur is what you get when you take NP — the class of problems whose "yes" answers admit a short, checkable proof — and let both the proof and the checker go quantum. In NP an all-powerful but untrusted prover (Merlin) writes down a polynomial-length classical string, and a deterministic polynomial-time verifier (Arthur) reads it and decides. MA relaxes Arthur to a randomized checker. QMA takes the final step: Merlin sends a quantum state ∣ψ⟩|\psi\rangle on polynomially many qubits, and Arthur runs a polynomial-size quantum circuit that measures one output qubit and accepts or rejects. The defining structure is one-sided trust with a two-sided guarantee — for a genuine "yes" instance there must exist a witness that Arthur accepts with high probability, and for a "no" instance no state, however cleverly entangled, may pass except with small probability. The class sits between BQP and PSPACE. Arthur can ignore the witness and run a plain BQP computation, so BQP⊆QMA\mathrm{BQP}\subseteq\mathrm{QMA}; he can check a classical witness with a randomized test, so MA⊆QMA\mathrm{MA}\subseteq\mathrm{QMA}. The nontrivial ceiling QMA⊆PP⊆PSPACE\mathrm{QMA}\subseteq\mathrm{PP}\subseteq\mathrm{PSPACE} (Kitaev–Watrous, sharpened by Vyalyi and Marriott–Watrous) says QMA is not absurdly strong. The crown jewel is its complete problem: Kitaev's quantum Cook–Levin theorem shows the kk-Local Hamiltonian problem — deciding whether the ground-state energy of a sum of local Hermitian terms is low or high — is QMA-complete, welding complexity to condensed-matter physics. Two quantum subtleties run underneath: acceptance probability is spectral (the top eigenvalue of a positive operator), and no-cloning forbids naive error reduction, forcing the in-place amplification of Marriott and Watrous.

Key takeaways
  • QMA (Quantum Merlin–Arthur) is the class of decision problems whose "yes" answer can be certified by a quantum proof — a witness state ∣ψ⟩|\psi\rangle — that a polynomial-time quantum verifier (Arthur) checks with bounded error.
  • A language is in QMA if yes-instances admit a witness accepted with probability ≥2/3\geq 2/3 while for no-instances every witness is accepted with probability ≤1/3\leq 1/3; these constants amplify to exponentially close to 11 and 00.
  • QMA is the natural quantum analogue of MA/NP and obeys the chain MA,BQP⊆QMA⊆PP⊆PSPACE\mathrm{MA},\mathrm{BQP}\subseteq\mathrm{QMA}\subseteq\mathrm{PP}\subseteq\mathrm{PSPACE}.
  • The kk-Local Hamiltonian problem is QMA-complete (Kitaev's quantum Cook–Levin theorem) — it plays the role SAT plays for NP, and links complexity to ground-state physics.
  • No-cloning blocks naive repetition of the check; Marriott–Watrous in-place amplification drives the error to 2−p(n)2^{-p(n)} using a single witness register of fixed size, via Jordan's lemma.
  • Key idea: a QMA verifier is a uniform family of poly-size quantum circuits VxV_x acting on a witness register and ancilla; xx is a yes-instance iff max⁡∣ψ⟩Pr⁡[Vx accepts ∣ψ⟩]\max_{|\psi\rangle}\Pr[V_x\text{ accepts }|\psi\rangle] is large, and this maximum is the top eigenvalue of a positive semidefinite operator QxQ_x built from the circuit — turning "does a proof exist?" into a spectral question.
The core insight

A QMA verifier is a uniform family of polynomial-size quantum circuits VxV_x acting on a witness register and ancilla; xx is a yes-instance iff max⁡∣ψ⟩Pr⁡[Vx accepts ∣ψ⟩]\max_{|\psi\rangle}\Pr[V_x\text{ accepts }|\psi\rangle] is large, and this maximum is the top eigenvalue of a positive semidefinite operator built from the circuit — turning proof verification into a spectral question.

Where this lives today

QMA is the backbone of the modern theory of the hardness of physics. Because kk-Local Hamiltonian is QMA-complete, estimating the ground-state energy of a generic interacting quantum system is QMA-hard — strong evidence that no efficient algorithm, classical or quantum, solves every instance, which is why variational quantum eigensolvers and tensor-network methods succeed only on structured, physically nice Hamiltonians and cannot beat the worst case. A steady stream of concrete problems is now known QMA-complete: the NN-representability problem in quantum chemistry, the consistency of local density matrices, and ground-energy questions for realistic 2-local and even geometrically-local spin lattices (Kempe–Kitaev–Regev and later work). On the verification side, QMA anchors whether a skeptical party can check a quantum computation given a quantum proof, feeding the interactive-proof hierarchy (QIP=PSPACE\mathrm{QIP}=\mathrm{PSPACE}) and the astonishing MIP\*=RE\mathrm{MIP}^{\*}=\mathrm{RE} result on entangled multi-prover systems. The variant landscape stays open: QMA1\mathrm{QMA}_1 (perfect completeness), QCMA\mathrm{QCMA} (classical witness), and QMA(2)\mathrm{QMA}(2) with two unentangled provers, where the collapse QMA(2)=QMA(k)\mathrm{QMA}(2)=\mathrm{QMA}(k) for constant k≥2k\geq 2 (Harrow–Montanaro, 2013) sits beside a still-unknown relationship to QMA itself.

The physical picture

Picture a skeptical quantum verifier, Arthur, facing an omniscient but untrusted prover, Merlin. Arthur announces a question — "convince me this Hamiltonian has a low-energy state" — and Merlin hands over a quantum register he claims is the answer. Arthur cannot trust it, so he runs a fixed poly-size circuit VxV_x on the witness together with some fresh ancilla qubits, measures a single designated output qubit, and reads accept or reject. The entire content of the class lives in a promise about that one measurement outcome: on a genuine yes-instance some honest witness makes Arthur accept with probability at least 2/32/3; on a no-instance the promise flips to a guarantee — no register Merlin could ever prepare, however entangled with hidden systems, pushes the acceptance probability above 1/31/3. The first figure draws exactly this protocol and its two thresholds.

Figure
The QMA protocol: Merlin sends a quantum witness ψ, Arthur runs a poly-size circuit V_x and measures one output qubit. Yes-instances admit a witness accepted with probability ≥ 2/3; no-instances force every witness below 1/3, and the 2/3 versus 1/3 gap is amplifiable to 1 minus 2 to the minus p
Quantum Merlin–Arthur: an existential quantum proof, checked with bounded error Merlin prover all-powerful, untrusted witness ψ poly(n) qubits Arthur: V_x poly-size quantum circuit + ancilla 0…0 measure 1 output qubit accept (1) reject (0) YES x in L there EXISTS ψ with Pr acc ψ ≥ 2/3 ≥ 2/3 NO x not in L for ALL ψ, Pr acc ψ ≤ 1/3 ≤ 1/3 promise gap 2/3 − 1/3 = 1/3, amplifiable to 1 − 2 to the minus p with a fixed-size witness

Why is the "yes" case an existential and the "no" case a universal? Because a proof system must be sound against a cheating prover: on a no-instance, Merlin will try every trick, so the guarantee has to hold against the single best possible witness. That best witness is not mysterious — Arthur's circuit followed by the output measurement collapses to a positive operator QxQ_x on the witness register, and the acceptance probability of ∣ψ⟩|\psi\rangle is the quadratic form ⟨ψ∣Qx∣ψ⟩\langle\psi|Q_x|\psi\rangle. Maximizing a quadratic form over unit vectors is an eigenvalue problem, so the best Merlin can do is send the top eigenvector of QxQ_x, and the whole question "does a good proof exist?" becomes "is λmax⁡(Qx)\lambda_{\max}(Q_x) above threshold?". The QMA-complete embodiment of this spectral picture is the Local Hamiltonian problem, whose energy spectrum the second figure lays out.

Figure
The Local Hamiltonian problem, QMA-complete: decide whether the ground energy of H equals a sum of local terms lies below a or above b with a promise gap b minus a at least 1 over poly. Energy sampling maps ⟨H⟩ to acceptance probability 1 minus ⟨H⟩ over m, here with a = 0.2, b = 0.5, m = 5 giving completeness 0.96 versus soundness 0.90
Local Hamiltonian: a spectral promise problem, and its acceptance-probability image energy ⟨ψ H ψ⟩ 0 a = 0.2 (YES: ground energy ≤ a) b = 0.5 (NO: every state ≥ b) gap b − a = 0.3 ≥ 1/poly honest ground state, energy 0.2 Pr acc = 1 − ⟨H⟩/m, m = 5 1.0 0.8 0.96 completeness 0.90 soundness YES NO verification gap 0.96 − 0.90 = 0.06 = (b − a)/m, an inverse-poly gap, then amplified to constants

No-cloning guards the door to error reduction. Classically Arthur would re-run a weak check with fresh randomness and take a majority vote — but he cannot copy an unknown quantum witness, and measuring it disturbs it, so parallel repetition would demand many independent copies a cheating Merlin could secretly entangle. The resolution, developed in Derivation 3 below, is one of the field's elegant surprises: Marriott and Watrous extract an exponentially sharp estimate of the acceptance probability from a single witness copy, by alternately projecting onto "the ancilla is fresh" and "the verifier accepts."

The core equations

The definition is a promise about one measured qubit. Merlin's witness ∣ψ⟩|\psi\rangle is fed with fresh ancilla into Arthur's circuit VxV_x, and the acceptance probability is the chance the designated output qubit reads 11. A language is in QMA when yes-instances admit a witness that clears 2/32/3 and no-instances cap every witness at 1/31/3.

L∈QMA  ⟺  {x∈L⇒∃ ∣ψ⟩: Pr⁡[Vx acc ∣ψ⟩]≥23x∉L⇒∀ ∣ψ⟩: Pr⁡[Vx acc ∣ψ⟩]≤13(1)L\in\mathrm{QMA}\iff \begin{cases}x\in L\Rightarrow \exists\,|\psi\rangle:\ \Pr[V_x\text{ acc }|\psi\rangle]\geq \tfrac{2}{3}\\[2pt] x\notin L\Rightarrow \forall\,|\psi\rangle:\ \Pr[V_x\text{ acc }|\psi\rangle]\leq \tfrac{1}{3}\end{cases} \qquad (1)

where:

symbolmeaning
VxV_xuniform poly-size quantum verification circuit for input xx
∣ψ⟩|\psi\ranglequantum witness on poly(∣x∣)\mathrm{poly}(|x|) qubits, sent by Merlin
Pr⁡[Vx acc]\Pr[V_x\text{ acc}]probability the designated output qubit is measured as 11

Reading it: the asymmetry between ∃\exists (yes) and ∀\forall (no) is the whole engine of a proof system — a real proof must exist for true statements, and no fake proof may work for false ones. The constants 2/3,1/32/3,1/3 are placeholders; the real requirement is any inverse-polynomial gap. Arthur's circuit and final measurement, viewed from the witness register alone, collapse to a single positive operator. Push the output-qubit projector Π1\Pi_1 back through VxV_x and evaluate the ancilla in its fixed initial state ∣0a⟩|0^a\rangle; what remains acting on ∣ψ⟩|\psi\rangle is QxQ_x, and the acceptance probability is a quadratic form in the witness.

pacc(ψ)=⟨ψ∣ Qx ∣ψ⟩,Qx=⟨0a∣ Vx† Π1 Vx ∣0a⟩,0⪯Qx⪯I(2)p_{\mathrm{acc}}(\psi)=\langle\psi|\,Q_x\,|\psi\rangle,\qquad Q_x=\langle 0^a|\,V_x^{\dagger}\,\Pi_1\,V_x\,|0^a\rangle,\qquad 0\preceq Q_x\preceq I \qquad (2)

where:

symbolmeaning
QxQ_xpositive semidefinite operator on the witness register
Π1\Pi_1projector onto "output qubit equals 11"
∣0a⟩|0^a\rangleinitial state of the aa ancilla qubits

Reading it: because paccp_{\mathrm{acc}} is a quadratic form with 0⪯Qx⪯I0\preceq Q_x\preceq I, maximizing over normalized witnesses returns the top eigenvalue, max⁡∣ψ⟩pacc=λmax⁡(Qx)=∥Qx∥\max_{|\psi\rangle}p_{\mathrm{acc}}=\lambda_{\max}(Q_x)=\|Q_x\|. Deciding membership is deciding whether ∥Qx∥≥2/3\|Q_x\|\geq 2/3 or ≤1/3\leq 1/3 — a spectral question. This is the single most important reformulation in the theory. The class is bracketed from below by the two ways Arthur can waste his extra power. Ignore the witness entirely and VxV_x is just a BQP computation; check a classical string with a randomized test and VxV_x subsumes MA.

BQP⊆QMA,MA⊆QMA,QMA⊆PP⊆PSPACE(3)\mathrm{BQP}\subseteq\mathrm{QMA},\qquad \mathrm{MA}\subseteq\mathrm{QMA},\qquad \mathrm{QMA}\subseteq\mathrm{PP}\subseteq\mathrm{PSPACE} \qquad (3)

where:

symbolmeaning
BQP\mathrm{BQP}bounded-error quantum polynomial time (no witness used)
MA\mathrm{MA}Merlin–Arthur: classical witness, randomized verifier
PP\mathrm{PP}probabilistic polynomial time, unbounded error

Reading it: the lower bounds are trivial by construction; the upper bound QMA⊆PP\mathrm{QMA}\subseteq\mathrm{PP} is the substantive one (derived below) and certifies that QMA, for all its quantum machinery, still lives inside classical polynomial space. The complete problem is physical. A kk-local Hamiltonian is a sum of Hermitian terms, each touching at most kk qubits and normalized to unit operator norm; the decision problem asks on which side of a promise gap its smallest eigenvalue lies.

H=∑i=1mHi,∥Hi∥≤1,Hi acts on ≤k qubits,λmin⁡(H)≤a  vs  ≥b,  b−a≥1poly(n)(4)H=\sum_{i=1}^{m} H_i,\qquad \|H_i\|\leq 1,\quad H_i\ \text{acts on}\ \leq k\ \text{qubits},\qquad \lambda_{\min}(H)\leq a\ \text{ vs }\ \geq b,\ \ b-a\geq \tfrac{1}{\mathrm{poly}(n)} \qquad (4)

where:

symbolmeaning
HiH_iHermitian kk-local term
mmnumber of terms, m=poly(n)m=\mathrm{poly}(n)
kklocality; k≥2k\geq 2 is already QMA-complete

Reading it: the promise gap b−a≥1/poly(n)b-a\geq 1/\mathrm{poly}(n) is essential — it is what makes the problem verifiable with an inverse-polynomial acceptance margin. Kitaev's theorem is that this problem is QMA-complete: membership is easy (energy sampling, Derivation 2), hardness is the quantum Cook–Levin theorem. Hardness runs through the history state, which packs an entire computation into one superposition indexed by a clock register, so that a local Hamiltonian can penalize any inconsistency in the computation's steps.

∣η⟩=1T+1∑t=0T(Ut⋯U1∣ψ,0⟩)⊗∣1t0 T−t⟩(5)|\eta\rangle=\frac{1}{\sqrt{T+1}}\sum_{t=0}^{T}\big(U_t\cdots U_1|\psi,0\rangle\big)\otimes|1^t0^{\,T-t}\rangle \qquad (5)

where:

symbolmeaning
UtU_tthe tt-th gate of the verifier's circuit
∣1t0T−t⟩|1^t0^{T-t}\rangleunary clock register encoding time step tt
TTnumber of gates, T=poly(n)T=\mathrm{poly}(n)

Reading it: the propagation Hamiltonian Hprop=∑t12(∣t⟩⟨t∣+∣t−1⟩⟨t−1∣−Ut∣t⟩⟨t−1∣−Ut†∣t−1⟩⟨t∣)H_{\mathrm{prop}}=\sum_t\tfrac12\big(|t\rangle\langle t|+|t{-}1\rangle\langle t{-}1|-U_t|t\rangle\langle t{-}1|-U_t^{\dagger}|t{-}1\rangle\langle t|\big) annihilates ∣η⟩|\eta\rangle exactly when consecutive time slices are related by the correct gate. Together with input, clock, and output penalties, HH has a low-energy state iff the computation can accept — turning acceptance into a ground-energy question. No-cloning forbids naive repetition, but the error still collapses in place. Marriott–Watrous amplification alternates two projective measurements on a single witness register and reads off the acceptance probability to exponential precision, leaving the witness size untouched.

(c~,s~) ⟶ (1−2−p(n), 2−p(n)),witness register size unchanged(6)(\tilde c,\tilde s)\ \longrightarrow\ \big(1-2^{-p(n)},\ 2^{-p(n)}\big),\qquad \text{witness register size unchanged} \qquad (6)

where:

symbolmeaning
c~,s~\tilde c,\tilde samplified completeness and soundness
p(n)p(n)any polynomial fixed in advance

Reading it: classically, amplification is a triviality (re-read the string); here it is a theorem, and its proof (Derivation 3) is a small gem of operator geometry — Jordan's lemma reduces the two projectors to a pile of 2×22\times 2 blocks.

Derivation AThe maximum acceptance probability puts QMA inside PP

The goal is to prove the substantive containment QMA⊆PP\mathrm{QMA}\subseteq\mathrm{PP}, and through it QMA⊆PSPACE\mathrm{QMA}\subseteq\mathrm{PSPACE}, by converting the existential quantum proof into a purely spectral quantity and then into a signed sum of amplitudes of exactly the shape a probabilistic machine can weigh. The route is: (i) collapse Arthur's circuit to the operator QxQ_x; (ii) recognize the best witness as its top eigenvector, so membership is a threshold test on λmax⁡(Qx)\lambda_{\max}(Q_x); (iii) express powers of QxQ_x as sums over computation paths of gate-amplitude products; and (iv) hand that unbounded-error signed sum to a PP machine.

Step 1. Reduce the whole class to one operator. By equation (2), the acceptance probability of any witness is ⟨ψ∣Qx∣ψ⟩\langle\psi|Q_x|\psi\rangle with 0⪯Qx⪯I0\preceq Q_x\preceq I, so the largest acceptance probability over all witnesses is pmax⁡=λmax⁡(Qx)p_{\max}=\lambda_{\max}(Q_x). A yes-instance has λmax⁡(Qx)≥2/3\lambda_{\max}(Q_x)\geq 2/3; a no-instance has λmax⁡(Qx)≤1/3\lambda_{\max}(Q_x)\leq 1/3. Why: this discards Merlin entirely — the prover's continuum of possible states is compressed into a single number, the top eigenvalue of a fixed positive operator, and there is a constant-size gap to detect.

Step 2. Convert the top eigenvalue into a trace. For a positive operator on the 2w2^{w}-dimensional witness space (ww witness qubits), Tr QxN=∑jλjN\mathrm{Tr}\,Q_x^{N}=\sum_j \lambda_j^{N} is dominated by the largest eigenvalue as NN grows, so Tr QxN\mathrm{Tr}\,Q_x^N compared against a suitable threshold separates the λmax⁡≥2/3\lambda_{\max}\geq 2/3 case from the λmax⁡≤1/3\lambda_{\max}\leq 1/3 case once N=poly(n)N=\mathrm{poly}(n) (the 2w2^w smaller eigenvalues cannot catch up across a constant ratio in polynomially many powers). Why: a trace is a basis-independent sum a machine can attack term by term, and raising to a power sharpens the constant gap into a decisive one.

Step 3. Expand the trace as a signed sum over paths. Each matrix entry of VxV_x (and hence of QxQ_x and its powers) is built from a poly-size product of gate amplitudes, each a rational number with polynomially many bits and a sign. Therefore Tr QxN\mathrm{Tr}\,Q_x^N is a sum of exponentially many efficiently computable terms, some positive and some negative — a signed sum with cancellation. Why: quantum interference is exactly the appearance of negative (and complex) amplitudes, and it is that cancellation that a bounded-error class like NP cannot handle but PP can.

Step 4. Decide with an unbounded-error machine. PP is precisely the class of languages decided by a probabilistic poly-time machine that accepts iff a signed sum of exponentially many poly-time-computable terms is positive. Feeding it Tr QxN\mathrm{Tr}\,Q_x^N minus the threshold gives L∈PPL\in\mathrm{PP}, and since PP⊆PSPACE\mathrm{PP}\subseteq\mathrm{PSPACE}, also L∈PSPACEL\in\mathrm{PSPACE}. Why: this is the tightest standard ceiling on QMA — it shows the quantum proof buys no more than unbounded-error counting power, and in particular nothing outside polynomial space.

Go deeper · Derivation B · 2 minLocal Hamiltonian energy estimation lands in QMA
Derivation BLocal Hamiltonian energy estimation lands in QMA

The goal is the easy half of Kitaev's completeness theorem: that the kk-Local Hamiltonian problem is in QMA, exhibited by a concrete verifier who never touches more than kk qubits at once. The construction is the archetype of a QMA protocol — Merlin sends a claimed ground state, Arthur samples one local term, estimates its energy, and accepts with a probability tuned so that a low total energy means high acceptance. We track how the inverse-polynomial promise gap b−ab-a becomes an inverse-polynomial gap in acceptance probability, which the amplification theorem then lifts to constants.

Step 1. Fix the witness and normalize the terms. Merlin sends a state ∣ψ⟩|\psi\rangle he claims is at or below the ground energy. Shift and rescale each term so 0⪯Hi⪯I0\preceq H_i\preceq I; then H=∑i=1mHiH=\sum_{i=1}^m H_i and the energy of the witness is ⟨ψ∣H∣ψ⟩=∑i⟨ψ∣Hi∣ψ⟩\langle\psi|H|\psi\rangle=\sum_i\langle\psi|H_i|\psi\rangle. Why: normalizing each local term to lie between 00 and II lets Arthur treat ⟨ψ∣Hi∣ψ⟩\langle\psi|H_i|\psi\rangle directly as a probability, which is what a measurement returns.

Step 2. Sample one local term. Arthur draws ii uniformly from {1,…,m}\{1,\dots,m\}, so the expected sampled energy is Ei⟨ψ∣Hi∣ψ⟩=1m⟨ψ∣H∣ψ⟩\mathbb{E}_i\langle\psi|H_i|\psi\rangle=\tfrac1m\langle\psi|H|\psi\rangle. Only the ≤k\leq k qubits in the support of HiH_i are involved. Why: a single local term acts on a constant number of qubits, so measuring it is efficient — this is exactly where the "local" in Local Hamiltonian earns its keep.

Step 3. Estimate the term's energy and accept accordingly. Using a Hadamard test on eiHie^{iH_i} (or a direct measurement, since HiH_i is local and can be diagonalized on its few qubits), Arthur produces an accept bit with probability Pr⁡[acc]=1−1m⟨ψ∣H∣ψ⟩\Pr[\text{acc}]=1-\tfrac1m\langle\psi|H|\psi\rangle. Why: pinning acceptance to 1−⟨H⟩/m1-\langle H\rangle/m makes low energy mean high acceptance, exactly aligning the physical ground-state question with the proof-system promise.

Step 4. Read off completeness versus soundness. If λmin⁡(H)≤a\lambda_{\min}(H)\leq a, the true ground state gives Pr⁡[acc]≥1−a/m\Pr[\text{acc}]\geq 1-a/m. If λmin⁡(H)≥b\lambda_{\min}(H)\geq b, then for every ∣ψ⟩|\psi\rangle, Pr⁡[acc]≤1−b/m\Pr[\text{acc}]\leq 1-b/m. The completeness-minus-soundness gap is (b−a)/m≥1/poly(n)(b-a)/m\geq 1/\mathrm{poly}(n). Why: soundness holds against all witnesses at once because no state can have energy below λmin⁡\lambda_{\min} — the spectrum itself enforces the guarantee, and the inverse-poly gap is amplifiable to the textbook 2/3,1/32/3,1/3.

Go deeper · Derivation C · 2 minIn-place amplification without cloning via Jordan's lemma
Derivation CIn-place amplification without cloning via Jordan's lemma

The goal is to explain how QMA error is driven to 2−p(n)2^{-p(n)} using only a single copy of the witness, sidestepping no-cloning. The idea is geometric: Arthur's protocol is governed by two projectors — one for "the ancilla is still fresh," one for "the verifier accepts" — and any two projectors carve the Hilbert space into orthogonal blocks of dimension at most two. Inside each block the pair meets at a fixed angle whose cosine-squared is a local acceptance probability, so alternating the two measurements is a random walk whose statistics reveal that probability to exponential precision, all without ever re-supplying the witness.

Step 1. Name the two projectors. Let Π=∣0a⟩⟨0a∣⊗I\Pi=|0^a\rangle\langle 0^a|\otimes I project onto states whose ancilla is the fresh ∣0a⟩|0^a\rangle (so a valid witness sits in its range), and let A=Vx† Π1 VxA=V_x^{\dagger}\,\Pi_1\,V_x project onto the "accept" subspace pulled back to the input. The witness's acceptance probability lives entirely in the relative geometry of Π\Pi and AA. Why: reducing a full circuit to two projectors is what exposes the hidden two-dimensional structure — everything about acceptance is an angle between these subspaces.

Step 2. Block-diagonalize by Jordan's lemma. Any two projectors Π,A\Pi,A simultaneously decompose the Hilbert space into invariant subspaces of dimension one or two; in each two-dimensional block they meet at an angle θj\theta_j with cos⁡2θj\cos^2\theta_j equal to a local acceptance probability, and AA's expectation in the witness state is the corresponding average. Why: a 2×22\times 2 block is a single qubit's worth of geometry, where alternating projections have a clean, analyzable transition rule instead of an intractable many-body evolution.

Step 3. Walk between the projectors. Alternately measure {Π,I−Π}\{\Pi,I-\Pi\} and {A,I−A}\{A,I-A\}, recording the outcome bits: Π→A→Π→A→⋯\Pi\to A\to\Pi\to A\to\cdots. Within a block the probability of staying is cos⁡2θj\cos^2\theta_j and of flipping is sin⁡2θj\sin^2\theta_j, so the bit sequence is a Markov chain whose transition rates encode θj\theta_j. Crucially, each measurement re-uses the same register — no fresh witness is ever needed. Why: this is the exact point where no-cloning is defeated — information about the acceptance probability is harvested by re-measuring one copy, not by consuming many.

Step 4. Estimate to exponential precision. Tallying the outcomes over r=poly(n)r=\mathrm{poly}(n) rounds estimates cos⁡2θj\cos^2\theta_j finely enough to separate completeness from soundness with error 2−p(n)2^{-p(n)} for any prescribed polynomial pp, while the witness register keeps its original size. Why: this delivers the strong-amplification claim of equation (6) — polynomially many measurement rounds, one fixed-size witness, exponentially small error — which classical intuition would have said requires many independent proofs.

Limiting cases

How does the class respond as the completeness cc and soundness ss parameters are pushed to their edges? Robustness under these limits is precisely what makes "QMA" a well-defined object rather than an artifact of chosen constants.

CaseResultMeaning
Constant gapc=23, s=13c=\tfrac23,\ s=\tfrac13the canonical textbook definition of QMA
Inverse-poly gapc−s≥1p(n)c-s\geq \dfrac{1}{p(n)}same class — any gap no smaller than inverse-polynomial amplifies to constants
Strong amplificationc≥1−2−r(n), s≤2−r(n)c\geq 1-2^{-r(n)},\ s\leq 2^{-r(n)}achievable for any polynomial rr via Marriott–Watrous, single fixed-size witness
Perfect completenessc=1c=1defines QMA1\mathrm{QMA}_1; whether QMA=QMA1\mathrm{QMA}=\mathrm{QMA}_1 is open in general
No witnesswitness emptythe class collapses to BQP\mathrm{BQP}
Classical witness∣ψ⟩|\psi\rangle a basis stringthe class becomes QCMA\mathrm{QCMA}; QCMA⊆QMA\mathrm{QCMA}\subseteq\mathrm{QMA}, separation open

Worked examples

1 · Energy sampling on a Local Hamiltonian (fully worked)

A 22-local Hamiltonian on nn qubits is a sum of m=5m=5 terms, each normalized to 0⪯Hi⪯I0\preceq H_i\preceq I. The promise is that either λmin⁡(H)≤a=0.2\lambda_{\min}(H)\leq a=0.2 (yes) or λmin⁡(H)≥b=0.5\lambda_{\min}(H)\geq b=0.5 (no). Arthur uses the energy-sampling verifier of Derivation 2. Find the completeness and soundness acceptance probabilities, the raw verification gap, and how many amplification rounds put the error below 10−310^{-3}.

Step 1. Set up the acceptance rule. Arthur draws a term ii uniformly and accepts with probability 1−1m⟨ψ∣H∣ψ⟩=1−15⟨ψ∣H∣ψ⟩1-\tfrac1m\langle\psi|H|\psi\rangle = 1-\tfrac15\langle\psi|H|\psi\rangle, because Ei⟨Hi⟩=1m⟨H⟩\mathbb{E}_i\langle H_i\rangle=\tfrac1m\langle H\rangle. Acceptance is high exactly when the witness has low energy.

Step 2. Completeness (yes-instance). Merlin sends the true ground state, with energy ⟨H⟩=λmin⁡(H)≤0.2\langle H\rangle=\lambda_{\min}(H)\leq 0.2. Then Pr⁡[acc]≥1−0.25=1−0.04=0.96\Pr[\text{acc}]\geq 1-\tfrac{0.2}{5}=1-0.04=\mathbf{0.96}.

Step 3. Soundness (no-instance). Now every state has ⟨H⟩≥λmin⁡(H)≥0.5\langle H\rangle\geq\lambda_{\min}(H)\geq 0.5, so no matter what Merlin sends, Pr⁡[acc]≤1−0.55=1−0.10=0.90\Pr[\text{acc}]\leq 1-\tfrac{0.5}{5}=1-0.10=\mathbf{0.90}. The spectrum itself caps the cheat.

Step 4. Raw gap and amplification. The verification gap is 0.96−0.90=0.06=(b−a)/m0.96-0.90=\mathbf{0.06}=(b-a)/m, an inverse-polynomial margin, not yet the textbook 2/32/3 versus 1/31/3. Marriott–Watrous amplification turns a fixed gap δ\delta into error 2−p2^{-p} using O(p/δ2)O(p/\delta^2) measurement rounds on one witness; to reach error below 10−3≈2−1010^{-3}\approx 2^{-10} we need roughly r∼10/0.062≈2.8×103r \sim 10/0.06^2 \approx \mathbf{2.8\times 10^{3}} rounds — polynomially many, and the witness register never grows. Completeness 0.96, soundness 0.90, raw gap 0.06, amplified below 10−310^{-3} in a few thousand in-place rounds.

2 · The optimal witness is a top eigenvector

For some input xx, Arthur's acceptance operator on a single-qubit witness register works out to Qx=(0.50.40.40.5)Q_x=\begin{pmatrix}0.5 & 0.4\\ 0.4 & 0.5\end{pmatrix} in the computational basis. What is the best witness Merlin can send, what acceptance probability does it achieve, and does xx look like a yes- or no-instance under the standard thresholds?

Step 1. Confirm QxQ_x is a legal acceptance operator. It is Hermitian, and its eigenvalues (next step) lie in [0,1][0,1], so 0⪯Qx⪯I0\preceq Q_x\preceq I as equation (2) requires. Acceptance probability of a witness ∣ψ⟩|\psi\rangle is the quadratic form ⟨ψ∣Qx∣ψ⟩\langle\psi|Q_x|\psi\rangle.

Step 2. Diagonalize. For (dood)\begin{pmatrix}d & o\\ o & d\end{pmatrix} the eigenvalues are d±od\pm o, here 0.5±0.40.5\pm 0.4, giving λmax⁡=0.9\lambda_{\max}=\mathbf{0.9} and λmin⁡=0.1\lambda_{\min}=0.1, with eigenvectors ∣+⟩=12(∣0⟩+∣1⟩)|+\rangle=\tfrac1{\sqrt2}(|0\rangle+|1\rangle) and ∣−⟩=12(∣0⟩−∣1⟩)|-\rangle=\tfrac1{\sqrt2}(|0\rangle-|1\rangle).

Step 3. Read off the best strategy. Maximizing the quadratic form over unit vectors is solved by the top eigenvector, so Merlin's optimal witness is ∣ψ⋆⟩=∣+⟩|\psi^\star\rangle=|+\rangle, achieving pmax⁡=λmax⁡(Qx)=0.9p_{\max}=\lambda_{\max}(Q_x)=\mathbf{0.9}. Any other witness does strictly worse; the worst, ∣−⟩|-\rangle, accepts with only 0.10.1.

Step 4. Classify the instance. Since pmax⁡=0.9≥2/3p_{\max}=0.9\geq 2/3, a witness clearing the completeness bar exists, so xx is consistent with being a yes-instance. Had λmax⁡(Qx)\lambda_{\max}(Q_x) come out at or below 1/31/3, no witness could pass and xx would be a no-instance — the entire decision is "is the top eigenvalue above threshold?". Best witness ∣+⟩|+\rangle, pmax⁡=0.9≥2/3p_{\max}=0.9\geq 2/3: a yes-instance, decided purely spectrally.

Physics of the portrait

QMA is a young idea with a clear parent. Its definition, its complete problem, and the history-state trick that welds complexity to physics all trace to one person, working at the seam between quantum computation and condensed matter.

Origins · 1 minAlexei Kitaev and how this was discovered
AK
Alexei Kitaev
born 1963 · defined QMA and proved the quantum Cook–Levin theorem

Alexei Yurievich Kitaev, trained in the Landau tradition of theoretical physics, has spent his career finding computation hidden inside physical systems and physics hidden inside computation. In the late 1990s, working at the Landau Institute and then at Microsoft and Caltech, he introduced the complexity class he called BQNP — now universally QMA — as the honest quantum analogue of NP: a quantum verifier checking a quantum proof. His masterstroke was the quantum Cook–Levin theorem, which shows the Local Hamiltonian problem is QMA-complete by encoding an entire quantum computation as the ground state of a local Hamiltonian through the "history state" and its clock construction, so that verifying a proof becomes finding a low-energy state of a spin system. The argument, written up with Alexander Shen and Mikhail Vyalyi in Classical and Quantum Computation (2002), turned an abstract complexity class into a statement about the physics of interacting matter — deciding ground-state energies is as hard as the hardest quantum proof. Kitaev is equally famous for the toric code and topological quantum computation, for the phase-estimation algorithm at the heart of Shor's algorithm's modern presentation, and for the Kitaev chain of Majorana physics. The through-line is unmistakable: he reads the theory of computation and the theory of quantum matter as one subject, and QMA is where that reading first crystallized into a class.

History
1985
— Deutsch frames quantum computation as a complexity question with the quantum Turing machine
1993
— Bernstein and Vazirani define BQP, giving a robust quantum analogue of P and BPP
1999
— Kitaev introduces QMA (as BQNP) and proves the Local Hamiltonian problem is QMA-complete
2002
— Kitaev, Shen, and Vyalyi publish the history-state construction, and Kempe–Kitaev–Regev soon push completeness to 2-local
2005
— Marriott and Watrous prove in-place strong amplification with a single fixed-size witness

Going further

Texts. Kitaev, Shen, Vyalyi — Classical and Quantum Computation (2002), Ch. 14 (the definitive source for QMA and the completeness proof) · Watrous — The Theory of Quantum Information (2018), chapter on quantum interactive proofs · Aharonov, Naveh — Quantum NP: A Survey (2002) · Marriott, Watrous — Quantum Arthur–Merlin Games (2005) · Bookatz — QMA-complete Problems (2014), a catalogue of the physical complete problems · Preskill — Lecture Notes on Quantum Computation, complexity chapter · Nielsen & Chuang — Quantum Computation and Quantum Information for the circuit and measurement background. The key checkpoints for this article are: QxQ_x is positive with 0⪯Qx⪯I0\preceq Q_x\preceq I and pmax⁡=λmax⁡(Qx)p_{\max}=\lambda_{\max}(Q_x) (equation 2); the containment chain BQP,MA⊆QMA⊆PP⊆PSPACE\mathrm{BQP},\mathrm{MA}\subseteq\mathrm{QMA}\subseteq\mathrm{PP}\subseteq\mathrm{PSPACE}; the history-state and propagation-Hamiltonian forms of the quantum Cook–Levin theorem; Marriott–Watrous in-place amplification via Jordan's lemma; and the worked numbers — completeness 0.960.96, soundness 0.900.90, gap 0.060.06 for a=0.2,b=0.5,m=5a=0.2,b=0.5,m=5, and λmax⁡=0.9\lambda_{\max}=0.9 for the (0.50.40.40.5)\begin{pmatrix}0.5&0.4\\0.4&0.5\end{pmatrix} operator.

Prerequisites. The Complexity Class BQP · BQP versus P, NP, and PSPACE · BQP is Contained in PP and PSPACE. Leads to. The Local Hamiltonian Problem · The Quantum Cook–Levin Theorem · QMA Variants and Related Classes · Quantum Interactive Proofs (QIP).

Ask the tutor: Ask me to walk through the history-state construction of the quantum Cook–Levin theorem, or to show step by step why alternating two projectors amplifies QMA error without ever cloning the witness.

Is QMA just NP with a quantum computer?

Not quite — it is the quantum analogue of MA, which is itself the randomized version of NP. Three things go quantum at once: the proof (a state ∣ψ⟩|\psi\rangle, not a string), the verifier (a quantum circuit, not a deterministic or randomized classical test), and the error model (two-sided bounded error). The cleanest slogan is "QMA is to BQP as NP is to P." The parts that have no classical shadow are that the witness ranges over a continuum of entangled states and that acceptance is a spectral quantity — the top eigenvalue of a positive operator — rather than a syntactic yes/no on a certificate.

What makes the Local Hamiltonian problem the "SAT of QMA"?

Just as SAT is NP-complete — every NP problem reduces to it — the kk-Local Hamiltonian problem is QMA-complete: it is in QMA (a candidate ground state is a checkable witness, via energy sampling) and every QMA problem reduces to it (Kitaev's quantum Cook–Levin theorem). The reduction is the history-state construction, which encodes an entire verification circuit as a local Hamiltonian whose ground energy is low iff the circuit can accept. Its punch is physical: because generic ground-state energy estimation is QMA-hard, there is complexity-theoretic evidence that no method solves all instances efficiently, which frames the limits of quantum chemistry and condensed-matter simulation.

Why is the containment QMA ⊆ PP, and not the tidier QMA ⊆ NP?

Deciding membership tests whether λmax⁡(Qx)\lambda_{\max}(Q_x) clears a threshold, and λmax⁡\lambda_{\max} is captured by traces Tr QxN\mathrm{Tr}\,Q_x^N that expand into signed sums of exponentially many gate-amplitude products. Quantum interference makes those amplitudes carry signs and phases, so the decision is an unbounded-error counting problem with cancellation. PP is exactly the class built to weigh such signed sums; NP cannot, because guess-and-check has no way to account for negative-amplitude paths cancelling positive ones. The containment is tight enough to also give QMA⊆PSPACE\mathrm{QMA}\subseteq\mathrm{PSPACE}.

How can error be reduced if the witness cannot be cloned?

Classically you would run the check many times on independent copies of the proof, but no-cloning forbids duplicating an unknown quantum witness, and measuring it disturbs it. Marriott and Watrous found an in-place route: the protocol is governed by two projectors — "ancilla is fresh" and "verifier accepts" — and Jordan's lemma splits the space into 2×22\times 2 blocks where alternately measuring the two projectors is a random walk whose statistics reveal the acceptance probability. Tallying outcomes over polynomially many rounds on a single witness register estimates that probability to exponential precision, so the error shrinks to 2−p(n)2^{-p(n)} without any extra witness qubits.

What is the difference between QMA, QCMA, and QMA(2)?

All three are quantum-verifier proof systems that differ in the proof. In QMA the witness is a general quantum state. In QCMA it is a classical string (the verifier still quantum); QCMA sits inside QMA, and whether the inclusion is strict is a well-known open problem tied to how much a quantum proof really buys you. In QMA(2) two provers send states promised to be unentangled, which counterintuitively can help because Arthur can exploit the product structure; remarkably QMA(2)=QMA(k)\mathrm{QMA}(2)=\mathrm{QMA}(k) for any constant k≥2k\geq 2, yet its relationship to plain QMA is unresolved. These variants probe how the form and entanglement of a proof affect what can be verified.

Do the constants 2/3 and 1/3 matter, or are they arbitrary?

They are conventions, not essential. Any completeness cc and soundness ss with an inverse-polynomial gap c−s≥1/poly(n)c-s\geq 1/\mathrm{poly}(n) define the same class QMA, because Marriott–Watrous amplification lifts such a gap to c′≥1−2−pc'\geq 1-2^{-p} and s′≤2−ps'\leq 2^{-p} with a fixed-size witness. What does matter is that the gap not shrink faster than any inverse polynomial (then the class may change), and that completeness of exactly 11 is a genuinely different constraint — it defines QMA1\mathrm{QMA}_1, whose equality with QMA is open. So treat 2/3,1/32/3,1/3 as a convenient normalization, and remember the real content is "some inverse-poly gap."

Before this

Where this leads