Reason: Initial published proof: chain rule along an interval neighborhood of the segment plus double Rolle arguments; interval-domain gap fixed per internal review.
Proof
If h=0 then y=x and every asserted inequality reads 0≤0, so assume h=0.
Setup. Let I={τ∈R:x+τh∈W}. Then I is an open subset of R containing [0,1]: it contains [0,1] because the segment lies in W, and for τ0∈I the point x+τ0h has an open ball of some radius r>0 contained in W, so every τ with ∣τ−τ0∣<r/∣h∣ lies in I. We next fix an open intervalJ with [0,1]⊆J⊆I. If no r>0 satisfied (−r,1+r)⊆I, then for every natural numbern there would be τn∈/I with −n1<τn<1+n1; the bounded sequence(τn) has, by the Bolzano-Weierstrass theorem, a subsequenceconverging to some τ∗, and the two-sided bounds force 0≤τ∗≤1 (if τ∗>1, taking ε=τ∗−1 in the definition of convergence produces τnk>1+ε/2≥1+nk1 for large k, a contradiction; symmetrically for τ∗<0), so τ∗∈[0,1]⊆I; since I is open, an open interval around τ∗ lies inside I, and the subsequence eventually enters it, contradicting τnk∈/I. So fix r>0 with J=(−r,1+r)⊆I, an open interval containing [0,1].
Consider the affine map a:J→Rn, a(τ)=x+τh. Each component ak(τ)=xk+τhk has partial derivative with respect to the single coordinate equal to the constant hk (the difference quotients are constant), and constants are continuous, so a is a C1 map on J; for one-variable functions the partial derivative with respect to the only coordinate coincides with the derivative, both being the same limit of difference quotients.
An elementary inequality.(∑i=1n∣hi∣)2=∑i,j∣hi∣∣hj∣≤∑i,j21(hi2+hj2)=n∣h∣2, using 2∣hi∣∣hj∣≤hi2+hj2; hence ∑i∣hi∣≤n∣h∣.
Part (i).F is defined on the interval J⊇[0,1], continuous on [0,1] and differentiable on (0,1), so by the mean value theorem there is ξ∈(0,1) with F(1)−F(0)=F′(ξ). Since a(ξ) lies on the segment, ∣F′(ξ)∣≤∑i∣∂if(a(ξ))∣∣hi∣≤M1∑i∣hi∣≤nM1∣h∣, and F(1)−F(0)=f(y)−f(x). This proves (i), which used only that f is C1.
Second-derivative setup for (ii) and (iii). Assume now that each ∂if is again a C1 map on W. By the chain rule each τ↦∂if(a(τ)) is C1 on J with derivative ∑j=1n∂j∂if(a(τ))hj, and by the one-dimensional sum and product rules on the interval J the finite sum F′ is differentiable on J with
F′′(τ)=i=1∑nj=1∑n∂j∂if(a(τ))hihj.
Part (ii). Define ψ(τ)=F(τ)−F(0)−F′(0)τ on J, set c=ψ(1), and put H(τ)=ψ(τ)−cτ2. Then H(0)=0 and H(1)=ψ(1)−c=0, and H is continuous on [0,1] and differentiable on J with H′(τ)=F′(τ)−F′(0)−2cτ, so Rolle's theorem gives ξ1∈(0,1) with H′(ξ1)=0. Also H′(0)=0, and H′ is continuous on [0,ξ1] and differentiable on (0,ξ1) with H′′(τ)=F′′(τ)−2c, so Rolle's theorem applied to H′ on [0,ξ1] gives ξ2∈(0,ξ1) with H′′(ξ2)=0, that is, 2c=F′′(ξ2). Since a(ξ2) lies on the segment,
and ψ(1)=f(y)−f(x)−∑i∂if(x)hi, which is claim (ii).
Part (iii). Define φ(τ)=F(τ)−F(0)−F′(0)τ−21F′′(0)τ2 on J, where F′′(0)=∑i,j∂j∂if(x)hihj. Then φ(0)=0, φ′(τ)=F′(τ)−F′(0)−F′′(0)τ satisfies φ′(0)=0, and φ′′(τ)=F′′(τ)−F′′(0)=∑i,j(∂j∂if(a(τ))−∂j∂if(x))hihj, so for τ∈(0,1) the point a(τ) lies on the segment and ∣φ′′(τ)∣≤εˉ(∑i∣hi∣)2≤nεˉ∣h∣2. Repeating the double application of Rolle's theorem from Part (ii) with φ in place of ψ (set c=φ(1), H(τ)=φ(τ)−cτ2; then H(0)=H(1)=0 yields ξ1, and H′(0)=H′(ξ1)=0 yields ξ2 with 2c=φ′′(ξ2)) gives
∣φ(1)∣=21∣φ′′(ξ2)∣≤21nεˉ∣h∣2.
Since φ(1)=f(y)−f(x)−∑i∂if(x)hi−21∑i,j∂j∂if(x)hihj, this is claim (iii).