Primes in short intervals on curves over finite fields

We prove an analogue of the Prime Number Theorem for short intervals on a smooth projective geometrically irreducible curve of arbitrary genus over a finite field. A short interval"of size E"in this setting is any additive translate of the space of global sections of a sufficiently positive divisor E by a suitable rational function f. Our main theorem gives an asymptotic count of irreducible elements in short intervals on a curve in the"large q"limit, uniformly in f and E. This result provides a function field analogue of an unresolved short interval conjecture over number fields, and extends a theorem of Bary-Soroker, Rosenzweig, and the first author, which can be understood as an instance of our result for the special case of a divisor E supported at a single rational point on the projective line.


INTRODUCTION
In this paper, we give an asymptotic count of irreducible elements inside short intervals on a smooth projective geometrically irreducible curve over a finite field. Our main result ( §1.3, Theorem A) provides a function field analogue of an unresolved short interval conjecture for number fields (Conjecture 1.3.1), and extends a short interval theorem of Bary-Soroker, Rosenzweig, and the first author [2,Corollary 2.4] for polynomials over finite fields.
The notion of short intervals on a curve which we use is a natural analogue of the familiar notion of short intervals over the integers. In this introduction, we review what is known about short intervals over the integers, over number fields, and over polynomials with coefficients in a finite field. The analogies that run between these different settings lead naturally to our definition of a short interval on a curve and to the statement of our main result.
1.1. The Prime Number Theorem for short intervals. The Prime Number Theorem (PNT) states that the asymptotic density of prime integers in real intervals (0, x] is 1/ log x. In other words, if we let π(x) denote the prime counting function π(x) = #{0 < p ≤ x : p is a prime integer}, We get more refined statements by considering the asymptotic density of primes in families of smaller intervals. Letting Φ(x) be a real valued function with 0 < Φ(x) < x, we can ask for the density of primes in the intervals I(x, Φ) def = x − Φ(x), x + Φ(x) as x → ∞. Define π I(x, Φ) def = # p ∈ I(x, Φ) : p is a prime integer , Then the naive conjecture on the asymptotic density of primes in the intervals I(x, Φ) is For fixed 0 < c < 1 and Φ(x) ∼ c x, it is a straightforward consequence of the PNT that (2) holds. Assuming the Riemann hypothesis, (2) holds for Φ(x) = x ε+ 1 2 for small 0 < ε < 1/2. On the other hand, Maier [22] established what is now known as the "Maier phenomenon": for Φ(x) = (log x) A , with A > 1, the asymptotic formula (2) fails. A classical conjecture predicts the following "short interval" prime number conjecture: Conjecture 1.1.1. For 0 < ε < 1 and Φ(x) = x ε , the asymptotic formula (2) holds.

The Prime Polynomial Theorem for short intervals over
For each finite field F q , the analogy between number fields and function fields provides us with the following table of corresponding sets and quantities: If we let π q (k) denote the prime polynomial counting function π q (k) = #{h ∈ M (k, q) : h is irreducible}, then, in accord with Table (3), the Prime Polynomial Theorem (PPT) asserts that If m def = ε deg f and F q [t] ≤m denotes the space of polynomials of degree at most m, then I(f, ε) = f + F q [t] ≤m . We say that I(f, ε) is a short interval if ε < 1, i.e., if m < deg f .

Remark 1.2.2.
Note that in view of Definition 1.2.1, the set M (k, q) of monic polynomials of degree k is the short interval I(t k , k − 1).
Initial results on the density of prime polynomials in short intervals can be deduced from the work of Cohen [4] when char F q > deg f , and from the work of Keating and Rudnick [18] in an almost everywhere sense. In [2], the first author together with Bary-Soroker and Rosenzweig prove the following analogue of Conjecture 1.1.1 in the large q limit: Theorem 1.2.3. [2,Corollary 2.4]. For fixed k > 0 and a monic polynomial f ∈ F q [t] satisfying deg f = k and ε > 0, define π q I(f, ε) def = # h ∈ I(f, ε) : h is a prime polynomial .
Then the asymptotic formula π q (I(f, ε)) ∼ #I(f, ε) k as q → ∞ holds uniformly for all monic f ∈ F q [t] of degree k and all The norm of an element a ∈ O K is by definition the norm of the ideal that a generates. We have both a prime ideal and a principal prime ideal counting function: Landau's Prime Ideal Theorem (PIT) [20] states that Letting h K denote the class number of K, the Principal PIT [25, §7.2, Corollary 4] states that As before, we can attempt to refine these density theorems by considering any real valued function Φ(x), with 0 < Φ(x) < x, the corresponding (real) intervals ] and the prime ideal counting function The naive guess about the asymptotic behavior of π K I(x, Φ) is that When Φ(x) ∼ cx for fixed 0 < c < 1, formula (9) follows directly from the PIT. Balog and Ono [1], using formulas for the prime ideal counting function due to Lagarias and Odlyzko [19] and zero density estimates for Dedekind zeta-functions due to Heath-Brown [14] and Mitsui [24], show that formula (9) holds for Here one may take c = 8/3 if [K : Q] = 2, and one can take c = [K : Q] if the degree of the extension is at least 3. Assuming the Riemann Hypothesis for the Dedekind zeta function ζ K (s), Grenié, Molteni, and Perelli [9] show that (9) holds for all Φ(x) = n log x + log |disc(K)| √ x. In a general number field, the norm N K (a) of an element a ∈ O K is not equal to the absolute value of a at a single infinite place of K. Likewise, given an element b ∈ O K with x def = N K (b), and given 0 < ε < 1, the set of all a ∈ O K satisfying N K (a) − x ≤ x ε (with | · | the absolute value in R) is not necessarily the same as the set of all a ∈ O K satisfying N K (a − b) ≤ x ε . This ambiguity in generalizing the basic quantities in Conjecture 1.1.1 gives us at least two distinct conjectures that can be seen as extensions Conjecture 1.1.1 to an arbitrary number field K: There exists some constant c such that for each real vector ε S = (ε p ) p∈S in (0, 1) S ⊂ R S , the count π K,prin I(b, ε S ) = # a ∈ O K : |a − b| p ≤ |b| εp p for each p ∈ S, and (a) ⊂ O K is prime satisfies the asymptotic formula There exists some constant c such that for each 0 < ε < 1, the count satisfies the asymptotic formula

Main result: short intervals on arbitrary curves over
Let C be a smooth projective geometrically irreducible curve over F q . As shown in [27,Theorem 5.12], the natural analogue of the PNT holds on C, which is to say that the counting function π C (k) def = #{P a prime divisor of C : deg(P ) = k} satisfies the asymptotic formula One can formulate analogues of each of the Conjectures 1.3.1 and 1.3.2 on C. In the present paper, we focus our attention to the analogue of Conjecture 1.3.1 in the large q limit. We intend to address analogues of Conjecture 1.3.2 in a future paper. On C, the natural analogue of the "short interval" implicit in Conjecture 1.3.1 is the following set: Definition 1.4.1. Let E = m 1 p 1 + · · · + m s p s be an effective divisor on C, and let f be a regular function on the complement of E. The interval (of size E around f ) is the set where  The value that serves as our prime count in any short interval I(f, E) is h ∈ I(f, E) such that h generates a prime ideal in the ring of regular functions on C supp(E) The central result of the present paper is the following theorem, which establishes a function field analogue of Conjecture 1.1.1 and its generalization 1.3.1. In addition, this result extends Theorem 1.2.3 to curves of arbitrary genus over F q : Theorem A. Let C be a smooth projective geometrically irreducible curve of genus g over F q . Fix a positive integer k > 0. Let E be an effective divisor on C, and let f be a regular function on C supp(E) such that the sum of the orders of all poles of f is equal to k, and such that I(f, E) is a short interval. Assume that either , such that the differential df vanishes on a nonempty finite subset of C supp(E). Then where the implied constant in the error term O(q −1/2 ) depends only on k and g.

Remark 1.4.3.
To establish Theorem A, we prove a result (Theorem 5.2.1) that is stronger than Theorem A. For any partition type of the set {1, 2, . . . , k}, we provide an asymptotic count of rational functions h ∈ I(f, E) whose associated principal divisor on C supp(E) has that partition type. 1.5. Outline of the paper. In broad outline, our strategy for proving Theorem A is similar to the strategy taken in [2]; the key insight of the present paper is that specific positivity hypotheses for divisors on C allow one to adapt the steps of the original argument in [2, §3 and §4] to a curve of arbitrary genus. In more detail, the outline of the paper is as follows.
In §2 we review the divisor theory and positivity conditions we will need. We introduce a variety parameterizing the elements of a short interval, and we use this variety to describe the generic element in a short interval. In §3 we explain how to associate a Galois group to the generic element. Most of the work in this section lies in showing that the Galois group is well defined. In §4 we calculate the Galois group. Specifically, we show that it is isomorphic to a symmetric group by verifying the conditions in a particular characterization of the symmetric group. In §5 we use our knowledge of this Galois group, along with some basic facts about etale morphisms, to show that a key counting result in [2], originally stated only for the genus zero case, can be extended to a count in any genus. Finally, we use this count to prove Theorem A and its stronger form Theorem 5.2.1. Our arguments in §5 make crucial use of the Lang-Weil estimates [21] and Bary-Soroker's Chebotarev-type result [3, Proposition 2.2].
1.6. Acknowledgments. The authors would like to thank Lior Bary-Soroker and Michael Zieve for many conversations during our work on this paper that were crucial to its success. We also extend a warm thank you to Jeff Lagarias for comments on a draft of the paper and for his assistance in formulating prime density theorems in number fields. The exposition benefited greatly from an invitation to speak at the Palmetto Number Theory Series, held at the University of South Carolina and organized by Matthew Boylan, Michael Filaseta, and Frank Thorne, and from an invitation by Jordan Ellenberg to speak in the Number Theory Seminar at the University of Wisconsin-Madison.
We are especially thankful to Brian Conrad for looking closely at an earlier version of this paper, for pointing out a gap in our uniformity argument (now filled), for pointing out that we needed to prove what is now Proposition 3.3.6, and for suggesting that we use [5, §1, Lemma 1.5] to do so.
The authors conducted the research that lead to this paper while at the University of Michigan and while the second author was a visiting researcher at L'Institut des HautesÉtudes Scientifiques, at L'Institut Henri Poincaré, and at the Max Planck Institute for Mathematics. We thank all four institutions for their hospitality. The first author was partially supported by Michael Zieve's NSF grant DMS-1162181. Support for the second author came from NSF RTG grant DMS-0943832 and from Le Laboratoire d'Excellence CARMIN.

SHORT INTERVALS ON CURVES
Fix a finite field F q , an algebraic closure F q F q , and a smooth projective geometrically irreducible curve C over F q of arithmetic genus g.

Divisors on a curve.
We make extensive use of the theory of divisors on algebraic varieties (see [13,§II.6] for instance). We briefly review the most pertinent aspects of the theory.
By a divisor on C, we mean a Weil divisor on C. We denote the support of a divisor D by supp(D), although we drop the distinction between D and its support when it will not lead to confusion. For instance, we write C D instead of C supp(D). If f is a rational function on C, we denote its associated principal divisor by div(f ). Given a divisor D = p∈C m p p on C, its divisor of zeros and divisor of poles are, respectively, the effective divisors admits a basis {f 0 , · · · , f m } such that at least one of the functions f i is non-vanishing at each p ∈ C, we say that D is basepoint free. If D is basepoint free, then our basis gives rise to a morphism into projective space of dimension The divisor D is very ample if D is basepoint free and the morphism (15) is a closed embedding. Every divisor D on C satisfying deg D ≥ 2g + 1 is very ample.
If E is an effective very ample divisor on C, then the basis In particular, if E is an effective very ample divisor, then the open subscheme C E ⊂ C is affine, and its ring of regular functions is generated by the coordinates x 1 , . . . , x m on P m V (x 0 ). We consistently use the notation R def = ring of regular functions on C E.
. Thus if D 0 is very ample and D 0 ≤ D, then D is also very ample.
Remark 2.1.2. Given a field extension K/F q , each point p in C has a unique factorization p = q e 1 1 · · · q en n locally on , thus E K is very ample whenever E is.

Generic element in a short interval.
Let E be an effective very ample divisor on C. Then following Definition 1.4.1, each regular function f on C E determines an interval The fact that f ∈ R and Then we have a corresponding interpretation of as a variety parameterizing the functions in I(f, E). Let F q (A) denote the field of rational functions F q (A 0 , . . . , A m ), and define and On the trivial family of curves A m+1 × (C E) = Spec R[A], we have a regular function See Figure 1 for a depiction of the scheme The value π C I(f, E) becomes the count of a particular set of F q -rational points in A m+1 :

GALOIS GROUP OF A GENERIC ELEMENT IN A SHORT INTERVAL
For any field K and any irreducible separable polynomial f ∈ K[t], the residue field κ(f ) def = K[t]/(f ) admits a unique splitting field split(f ) inside any separable closure K = κ(f ). When we interpret κ(f ) as the field obtained by adjoining a single root of f to K, it becomes natural to construct split(f ) as the field obtained by adjoining all roots of f to K. We can also construct split(f ) without any explicit reference to roots of f . Indeed, split(f ) is the normal closure of κ(f ) inside K [26, Theorem 2.9.5. (4)]. This latter characterization of the splitting field generalizes to the higher genus setting and, as we demonstrate in the present section, allows us to define the Galois group of the generic element in short intervals on C.
3.1. The setting of §3 and §4. The following datum is to remain fixed throughout §3 and §4: Let E be an effective very ample divisor on C, define R to be the ring of regular functions on the affine curve C E, and let f ∈ R be a regular function on C E satisfying where Note that the inequality (19) and the quantity k are unaffected by base change along any field extension K/F q . Let I(f, E) be the short interval defined by f and E. Let F A be the generic element in I(f, E) as defined in (17). Fix an algebraic closure F q (A) such that F q ⊂ F q (A).
Remark 3.1.1. In the case where g = 0 and E is an effective divisor on P 1 supported at ∞, we The choice of a regular function f amounts to the choice of a polynomial f ∈ F q [t], and k = deg div(f ) − = deg f . Thus the inequality (19) reduces to the requirement m < k that appears in the form "ε 0 < 1" in Theorem 1.2.3.

Remark 3.1.2.
In §5, where we consider the asymptotic behavior of I(f, E), we will allow E and f to vary subject to the constraint (19).
3.2. The splitting field and Galois group of a relative separable point. We can associate Galois groups to a large class of points in C E as follows: be an algebraic extension. For a prime ideal P in the ring K ⊗ Fq(A) R(A), denote by κ(P) the residue field of P. The splitting field of P (over K), denoted split(P) or split(P/K), is the normal closure of κ(P) in F q (A).
If the extension κ(P)/K is separable, then the Galois group of P is  (20) is equivalent to the statement that in the ring split(P) ⊗ Fq(A) R(A), the ideal split(P) ⊗ K P has prime factorization where deg Q i = 1 and κ(Q i ) ∼ = split(P) for each 1 ≤ i ≤ deg P. The Galois group Gal(P/K) acts faithfully and transitively on the prime factors Q i .

Primality and separability of the generic element. For any field extension
becomes a variety parameterizing elements in I(f, E K ).

Lemma 3.3.1. For any field extension
restrict to morphisms is not prime. Then either the morphism pr 1 | V (F A ) has empty generic fiber, or else the subscheme V (F A ) ⊂ A m+1 K × C K E K has more than one irreducible component.
Comparing the strict inequalities (19) with the inequality defining the inclusion we see that ν p (F A ) < −m p for all p ∈ supp E K(A) . Thus div(F A ) + = 0 and supp div( In particular, F A is not a unit in R K (A), and pr 1 | V (F A ) does not have empty generic fiber.
is either a whole fiber of the projection pr 2 in (22) over a closed point of C K E K , or else its generic point lies over the generic point of is linear in the variables A i , and is nonzero since A 0 has coefficient 1. For closed points x ∈ C K E K , this shows that closed fibers of the morphism pr 2 in (22) cannot be irreducible components of V (F A ). Over the generic point ξ of C K E K , linearity of the nonzero function is invertible on C K(A) ∩ D(x 0 y) K(A) . The entries in the last row of M all have the explicit form Hence, the term associated to M mm in the cofactor expansion of det(M ) is the only cofactor term in which A m appears. The coefficient of A m in this term is nonzero at P K , therefore det(M ) is nonzero at P K . The K(A)-scheme Spec κ(P K ) is then smooth of relative dimension Proof. Since κ(P K ) is isomorphic to the compositum K· κ(P) ⊂ F q (A), we have isomorphisms Post-composing (26) with the inclusion Gal κ(P K ) K(A) → Gal κ(P K ) F q (A) , we obtain the embedding (25).

Proposition 3.3.6. The branch locus Z ⊂ A m+1
Fq of the morphism pr 1 : Fq , and its compliment A m+1 Z is the maximal open subset of A m+1 Fq over which V (F A ) is finiteétale.

Proof. Lemma 3.3.3 implies that V (F A ) is generically unramified over A m+1
Fq , and thus that Z has codimension ≥ 1 in A m+1 Fq . Define Then the resulting morphism pr 1 | Y : Y −→X is finite, surjective, and unramified of degree k.
The variety X is a normal, and surjectivity of pr 1 | Y implies that for each y ∈ Y , the morphism of stalks O X,pr 1 (y) −→O Y,y is injective [

A characterization of the symmetric group.
Recall from §3.1 that we fix an effective very ample divisor E on C and a function f regular on C E with poles satisfying the inequalities (19), and that k def = deg(div(f ) − ). Let S k denote the symmetric group on k letters. Our goal in the present section is to prove the following: Assume that E satisfies one of the following two conditions (a) There exists a very ample effective divisor E 0 on C such that E ≥ 3E 0 ; (b) There exists a very ample effective divisor E 0 on C such that E ≥ 2E 0 , char F q = 2, and df | C E vanishes on a finite nonempty set. Then the Galois group Gal F A , F q (A) is isomorphic to S k . Beginning of the proof of Theorem 4.1.1. Observe that for any algebraic extension K/F q the condition (19) and its consequence (23), combined with the fact that the total degree of any principal divisor is 0, imply that deg P K = k. Thus by Remark 3.2.2, the Galois group Gal F A , K(A) comes with a natural faithful action on a set of k elements, namely the prime factors in (21). In this way, we obtain an embedding for each algebraic extension K/F q . For the special case K = F q , Lemma 3.3.5 tells us that the inclusion (27) factors as It therefore suffices to check that the Galois group Gal The linear equivalence E ∼ E Fq makes E very ample, thus dim . . , f m−1 }. This implies that the linear combination

.3 says that P is separable, whereas h is a codimension-1 point in A m+1
Fq , the point P corresponds to a discrete valuation on κ(P Fq ). Thus the Galois group Gal split(P Fq ) κ(P Fq ) acts transitively on the roots of any monic polynomial whose roots generate the extension split(P ) κ(P ). Because Gal split(P Fq ) κ(P Fq ) is a subgroup of Gal F A , F q (A) , this completes the proof.

Presence of a transposition.
Fix an algebraic closure L def = F q (A), and define L ⊂ L to be the algebraic closure L def = F q (A 1 , . . . , A m−1 ) inside L.
Consider the morphism C Fq(A) −→ P 1 . It restricts to the morphism of affine schemes which takes

Proof.
Let Ω 1 C L E L denote the R L -module of Kähler differentials on C L E L = Spec R L , and let dΨ ∈ Ω 1 C L E L denote the Kähler differential of Ψ. In D(x 0 ), on a sufficiently small affine open neighborhood U x ⊂ D(x 0 ) of each point x ∈ C L E L , we have a matrix M as in equation (24), where the regular functions r i cut out U x ∪ C L E L . Since dΨ = d(Ψ + A 0 ) = dF A , the ramification divisor of Ψ is the effective divisor corresponding to the subscheme V det(M ) ∩ C L E L inside U x ⊂ Spec L[x 1 , . . . , x m ]. The points of U x ∩ C L E L where Ψ has ramification order 1 are exactly the reduced points of V det(M ) ∩ C L E L . Thus is suffices to prove that the L-scheme V det(M ) ∩ C L E L is smooth.
For each 1 ≤ i ≤ m, let M mi denote the minor of M that we obtain by removing the m th -row and i th -column of M , so that where G A is a regular function with no A m dependence. Then V det(M ) is singular at precisely those points where the determinant of the m × m-matrix vanishes. The absence of A m from det(M ) means that the zeros of det(M ) are defined over the subfield L ⊂ L, whereas the zeros of (30) are defined over the subfield F q (A m ) ⊂ L.
Because zeros of (30) are not F q = L ∩ F q (A m )-rational, this completes the proof.

Proposition 4.3.2.
The morphism Ψ : C L −→ P 1 L is ramified at some point in C L E L in each of the following two cases: Proof. The rational function F A on C L determines a morphism F A : C L −→ P 1 L . By definition, Ψ and F A differ by the constant A 0 , and so it suffices to show that F A is ramified at some point of C L E L .
At each point p ∈ C L , let ram p (F A ) denote the ramification order of F A at p (the order of vanishing of the Kähler differential dF A ∈ Ω 1 C L at p). Define .
Thus it suffices to show that Fix a point p ∈ supp (E L ), and fix a uniformizing parameter z in the stalk O C L ,p . Let m p denote the order of E L at p, and recall that k p denotes the degree of the pole of f at p. Because E is effective, our assumption (19) implies that k p ≥ m p > 0. Because E is very ample, H 0 C L , O(E L ) is basepoint free, and thus there exists some nontrivial F q -linear combination A 0 of the variables A 0 , . . . , A m so that we can write the rational function m where the order of the pole of G A 1 z at p is between 1 and m p . Write where f (z) is an F q -rational function that does not vanish at z = 0, and where the order of vanishing of G A (z) at z = 0 is between k p − 1 and k p − m p . Thus the order of vanishing of d 1 F A at z = 0 is equal to the order of vanishing of the function at z = 0. This implies that: • If char F q does not divide k p , then ram p (F A ) = k p − 1; • If char F q divides k p , then ram p (F A ) ≤ 2k p − 2.
Repeating this argument at all points p in supp (E L ), we see that Thus (31) is satisfied whenever g > 0 or deg E > 1.

Proposition 4.3.3.
Assume that one of the following two conditions holds: (a) There exists a very ample effective divisor E 0 on C such that E ≥ 3E 0 ; (b) There exists a very ample effective divisor E 0 on C such that E ≥ 2E 0 , char F q = 2, and df | C E vanishes at a nonempty finite set.
Then the morphism Ψ : C L −→ P 1 L separates critical points in C L E L , i.e., there do not exist distinct points x, y ∈ C L E L satisfying the system of equations Proof. It suffices to prove that the morphism F A : C L −→ P 1 L separates critical points. Assume that E ≥ n E 0 , with E 0 a very ample effective divisor on C L , and with n = 2 or 3. Let m 0 = dim H 0 C, O(E 0 ) − 1. Interpret C as a closed subvariety of P m 0 via the closed embedding provided by E 0 . The standard proof of Bertini's Theorem [13, §II.8, proof of Theorem 8.18] implies that for any two distinct points x, y ∈ C Fq E Fq , we can choose a linear form t on P m 0 Fq whose restriction to C Fq provides local uniformizing parameters t − t(x) at x and t − t(y) at y. We can furthermore choose t so that it satisfies the generic condition t(x) = t(y).
Since t ∈ H 0 C Fq , O(E 0,Fq ) and E ≥ nE 0 , we have 1, t, t 2 , . . . , t n ∈ H 0 C Fq , O(E Fq ) . Choose a new basis {1, g 1 , g 2 , . . . , Then where Again by the dimension counts in [13, §II.8, proof of Theorem 8.18], we can fix a Zariski open neighborhood U ⊂ C Fq E Fq containing both x and y, such that the restriction of t to C Fq E Fq provides a uniformizing parameter t − t(u) at every point u ∈ U . Define At each L-valued point (u, v) in U xy , the system of equations (32) holds for the function F A if and only if (u, v) satisfies the single F q -valued matrix equation where dΦ dt denotes the regular function on U such that dΦ = dΦ dt dt as a global section of Ω 1 U . Define functions ϕ on U and c on U xy according to By (33), the 3×2-matrix at left in (35) has rank 2 everywhere in U xy . Hence (35) holds at (u, v) if and only if (u, v) satisfies the single determinant equation Interpret (36)  Let d(u, v) be the determinant that appears in (36). A straightforward calculation gives By (33), this last expression is nonzero in any characteristic. If n = 2 and char F q = 2, then If df is nonconstant in this case, then ϕ(u) + ϕ(v) = ϕ(u) − ϕ(v) is not constantly zero.
Because the Zariski open subsets U xy cover C Fq × C Fq {diagonal} as (x, y) varies inside C Fq × C Fq {diagonal}, this completes the proof. (b) There exists a very ample effective divisor E 0 on C such that E ≥ 2E 0 , char F q = 2, and df | C E vanishes on a nonempty finite set.
Then the subgroup Gal F A F q (A) ⊂ S k contains a transposition.
Proof. If g = 0, then each of the conditions (a) and (b) implies condition (ii) of Proposition 4.3.2. Thus for any g, the morphism Ψ is ramified at some closed point of C L E L . Let α be such a point, which is to say that the morphism Ψ : C L E L −→ A 1 L is ramified at α. Proposition 4.3.1 says that the order of ramification at any point in C L E L is at most 1. Thus the factorization type of the fiber of Ψ containing α is (2, 1, . . . , 1). As Proposition 4.3.3 says that the critical values of Ψ are distinct, this implies that Ψ(x) = Ψ(α) has at least k − 1 solutions. However, since α is a ramification point, the fiber over Ψ(α) has exactly one double point. Hence the inertia group over Ψ(α) permutes two factors of F A = Ψ(x) + A 0 and fixes all others. Thus Gal F A F q (A) contains a transposition.

PROOF OF THEOREM A
We now use the Galois group calculation in §4 to prove Theorem A.

Setup for the proof of Theorem A. Let F A ∈ R[A]
be the element defined in (17), and let Fq V * and Sym • Fq V denote the graded symmetric F q -algebras on V * and V , respectively. Because E is a very ample effective divisor, the inequalities (19) imply that div(f ) − is very ample and effective. Identify C with its image under the closed embedding induced by div(f ) − . Pass to the algebraic closure F q to obtain a smooth, closed, irreducible We claim that C ∨ Fq is a hypersurface in P(V * Fq ). To see this, let N denote the conormal sheaf on C Fq in P(V ), and let P(N ) denote its associated projective scheme over C Fq , which comes with a projection P(N )  (39) is not everywhere ramified. By [17,Proposition 3.3], exhibiting a point of P(N ) where (39) is unramified reduces to exhibiting a hyperplane H ⊂ P(V Fq ) and a point x 0 of the scheme-theoretic intersection C Fq ∩ H such that x 0 is a non-degenerate (or ordinary) quadratic singularity of C Fq ∩ H (see [17, §1.1] for details). When C Fq ∩ H is 0-dimensional, as it is in our case, the condition that a point x 0 in C Fq ∩ H be a non-degenerate quadratic singularity reduces to the condition that the component of C Fq ∩ H containing x 0 is isomorphic to Spec F q [t] (t 2 ). Our ability to find a hyperplane H ⊂ P(V Fq ) and point x 0 ∈ C Fq ∩ H satisfying this condition follows from the decomposition (34) of F A provided in the proof of Proposition 4.3.3. Indeed, choose values a 0 , b 1 ∈ F q , for A 0 and B 1 in (34), so that f + a 0 + b 1 t + G A vanishes to order ≥ 2 at a fixed F q -valued point x 0 in C Fq , and then choose the value b 2 = 1 for B 2 . Thus the formula (37) follows.

Remark 5.1.2.
Suppose that a is an F q -rational point in A m+1 such that R (F a ) is a separable F q -algebra. Then since R is a Dedekind domain, the ideal (F a ) can be written uniquely as where the f i are distinct prime ideals in R, with each k(f i ) = R/(f i ) a separable extension of F q . Note that in this case, we have Definition 5.1.3. If a is an F q -rational point in A m+1 , then the factorization type λ a is the partition of k given in (41). The factorization type counting function for a fixed partition λ of k is the assignment π C (−; λ) taking the short interval I(f, E) to the value π C I(f, E); λ def = # a ∈ A m+1 (F q ) : R/(F a ) is separable and λ a = λ . Definition 5.1.4. Given a permutation σ ∈ S k , its partition type, denoted λ σ , is the partition of k determined by the cycle decomposition of σ. For an arbitrary partition λ of k, we define In other words, P (λ) is the probability that a given permutation in S k has partition type λ.

Proof of the main theorem.
We begin by proving a general theorem that provides an estimate for the number of F q -rational substitutions in the variables A 0 , . . . , A 1 for which the regular function f + A 0 + A 1 f 1 + · · · A m f m on C E factors according to a given partition of k. The formulation of this theorem, as well as its proof, is very much in the spirit of [2, Proposition 3.1].
Theorem 5.2.1. Let C be a smooth projective geometrically irreducible curve over F q of arithmetic genus g. Fix a positive integer k. Then there exists a constant c(k, g) > 0, depending only on k and g, such that for any datum consisting of (i) a partition λ of k; (ii) a prime number p and a power q = p e ; (iii) an effective divisor E on C and a regular function f on C E satisfying such that p, E, and f satisfy either of the following conditions: (a) There exists a very ample effective divisor E 0 on C with deg E 0 ≥ 2g + 1 such that E ≥ 3E 0 ; (b) There exists a very ample effective divisor E 0 on C with deg E 0 ≥ 2g + 1 such that E ≥ 2E 0 , p = 2, and df | C E vanishes on a nonempty finite set, we have π C I(f, E); λ − P (λ)q m+1 ≤ c(m, k) q m+ 1 2 , where m def = deg(E) − g.
Proof of Theorem 5.2.1. By Theorem 4.1.1, we have that Gal(F A , F q (A)) = S k . Note also that by the Riemann-Roch Theorem, the requirement that deg E 0 ≥ 2g + 1 in (a) and (b) implies that dim H 0 C, O(E) = deg(E) − g + 1 = m + 1.
Let Z be the branch locus of the morphism V (F A )−→A m+1 as in Proposition 3.3.6. By Proposition 5.1.1, we have deg Z ≤ g − 2 + 2k. This provides a bound on both the number of irreducible components of Z and on the degree of each of these irreducible components. Applying Lang-Weil [21, Theorem 1], we obtain a constant c 1 (k, g), depending only on k and g, such that #Z(F q ) ≤ c 1 (k, g) q m .
Consider the F q -varieties Y def = V (F A ) A m+1 Z and X def = A m+1 Z. By Proposition 3.3.6, the morphism ρ := pr 1 | Y : Y −→X is finiteétale of degree k. By the theorem of the primitive element, we can construct the normal closure of the separable extension κ(F A ) F q (A 0 , . . . , A m ) as the splitting field of some degree-k polynomial over F q (A 0 , . . . , A m ). The Galois closure W of Y over X (see [30,Proposition 5.3.9]) is isomorphic to the integral closure of the coordinate ring of X in this splitting field, and therefore the Galois group Aut X W is degree k.
Observe that the closed embedding C 1 / / P m realizes V (F A ) as a hypersurface of degree k inside the afffine open suscheme A 2m+1 Fq ⊂ A m+1 Fq × Fq P m Fq . Because we can construct W as a connected component of the k-fold fiber product Y × X · · ·× X Y [30, Proof of Proposition 5.3.9], we can realize W as a locally closed subspace of A km+k+1 , whose closure is a hypersurface of degree ≤ k k . Thus we obtain a bound, depending only on k, on the degree of the closure of W inside an affine space.
The morphism W −→X defines a geometric embedding problem, in the sense of [3, §2.1]. In [2, Proposition 3.1], Bary-Soroker, Rosenzweig, and the first author construct a geometric embedding problem associated to a polynomial F ∈ F q [A, t], in the sense of [3, §2.1, p. 859]. However, the last two paragraphs of [2, proof of Proposition 3.1] make no special use of the fact that the geometric embedding is associated to a polynomial. The construction depends only on the following facts: • the degree of the Galois group of the geometric embedding problem is k, • W is a dense open subset of a hypersurface of degree bound by a function of k inside some affine space, • the point count in the branch locus Z ⊂ A m+1 Fq has upper bound (45).
The proof can now proceed exactly as in the last two paragraphs of [2, proof of Proposition 3.1] upon replacing V in that proof with our variety X, and noting that (ii) above lets us replace the constant c 2 (m, B) appearing in [2, proof of Proposition 3.1] with a constant depending only on k, as in [2, proof of Theorem 2.3]. Thus we obtain a constant c(k, g), depending only on k and g, such that π C I(f, E); λ − P (λ)q m+1 ≤ c(k, g) q m+ 1 2 , as desired. The statement of uniformity in Theorem A, i.e., the statement that the implied constant in the error term O(q −1/2 ) depends only on k and g, follows from the fact that the constant c(k, g) in Theorem 5.2.1 depends only on k and g.