Abstract 1 Introduction 2 Preliminaries 3 Basics of Bi-intuitionistic Logic 4 A Forest of Lindenbaum Lemmas 5 Completeness and Conservativity 6 Discussion References Appendix A Appendix

Completeness of First-Order Bi-Intuitionistic Logic

Dominik Kirst ORCID Université Paris Cité, IRIF, Inria, Paris, France
Ben-Gurion University, Beer-Sheva, Israel
Ian Shillito ORCID The Australian National University, Canberra, Ngunnawal & Ngambri Country, Australia
Abstract

We provide a succinct and verified completeness proof for first-order bi-intuitionistic logic, relative to constant domain Kripke semantics. By doing so, we make up for the almost-50-year-old substantial mistakes in Rauszer’s foundational work, detected but unresolved by Shillito two years ago. Moreover, an even earlier but historically neglected proof by Klemke has been found to contain at least local errors by Olkhovikov and Badia, that remained unfixed due to the technical complexity of Klemke’s argument. To resolve this unclear situation once and for all, we give a succinct completeness proof, based on and dualising a standard proof for constant domain intuitionistic logic, and verify our constructions using the Coq proof assistant to guarantee correctness.

Keywords and phrases:
bi-intuitionistic logic, first-order logic, completeness, Coq proof assistant
Funding:
Dominik Kirst: Received funding from the European Union’s Horizon research and innovation programme under the Marie Skłodowska-Curie grant agreement No. 101152583 and a Minerva Fellowship of the Minerva Stiftung Gesellschaft für die Forschung mbH.
Copyright and License:
[Uncaptioned image] © Dominik Kirst and Ian Shillito; licensed under Creative Commons License CC-BY 4.0
2012 ACM Subject Classification:
Theory of computation Proof theory
; Theory of computation Logic and verification ; Theory of computation Modal and temporal logics
Supplementary Material:
Software  (Coq Code): https://github.com/ianshil/FOBiInt
Editors:
Jörg Endrullis and Sylvain Schmitz

1 Introduction

In the 1970s, Cecylia Rauszer provided foundations for bi-intuitionistic logic (first studied by Moisil [34]), an extension of intuitionistic logic with a binary operator [Uncaptioned image] called exclusion, dual to the intuitionistic implication . Her work spanned over most approaches to non-classical logics, ranging from algebras [43, 45], Kripke semantics [44, 46, 47], sequent calculus [42], to Hilbert systems [43, 42]. The impressiveness and exhaustiveness of Rauszer’s study of bi-intuitionistic logic is not only measured by the variety of fields she introduced bi-intuitionistic in, but by the analysis in each case of both the propositional and first-order logic.

Unfortunately, through time several mistakes were detected in Rauszer’s work. First, her sequent calculus for propositional bi-intuitionistic logic was shown by Pinto and Uustalu [38] not to admit cut, contradicting her claim [42, Result 2.3]. To correct this, they provided a calculus based on sequents with richer structure, which they proved to admit cut. Secondly, a confusion around the status of the deduction theorem led Goré and Shillito [18] to notice the conflation in Rauszer’s work of two different propositional bi-intuitionistic logics. This conflation resulted in an incorrect completeness proof for the propositional case, ultimately resolved by Goré and Shillito. Finally, the errors contained in the propositional case continue being present in Rauszer’s work on the first-order case as noted by Shillito [50], who failed to fix the proof in this setting. So, to date, no completeness proof for first-order bi-intuitionistic logic (𝖥𝖮𝖡𝖨𝖫) along the lines of Rauszer’s argument is known.

To our knowledge, the only other candidate proof was given by Klemke in 1971 [30], thereby in fact predating Rauszer’s work. He attributes the semantics of the logic to Grzegorczyk [19] and uses a Henkin-style argument to construct a universal model. However, its correctness is questioned by Olkhovikov and Badia [35], who write:

“Incidentally, there is an alternative completeness argument by Klemke, where bi-intuitionistic predicate logic is studied possibly for the first time in print (and, as far as we know, independently from Rauszer’s work) and that contains other errors.”

As his proof strategy is technically involved and, being written in fairly old style (and German language), the presentation is rather inaccessible to a broader audience, it is hard to assess whether these errors are locally fixable or as substantially unfixable as Rauszer’s.

We therefore opt for an alternative route to settle the completeness of 𝖥𝖮𝖡𝖨𝖫 once and for all: we present a succinct proof based on standard techniques, coming in a modern (and English) presentation for easy assessment, and use the Coq proof assistant to verify our argument, therefore leaving no room for ambiguity and error.

In that vein, our formal investigation finally establishes solid foundations for 𝖥𝖮𝖡𝖨𝖫, and simultaneously tightly connects the provability of the constant domain axiom in this logic with constant domain models. That is, contrarily to the propositional case, first-order bi-intuitionistic logic is known not to be a conservative extension of first-order intuitionistic logic [48, p.56][32, 50]: it derives the constant domain axiom (CD), displayed below, which is not provable in the purely intuitionistic counterpart [16].

x(φ(x)ψ)(xφ(x)ψ) (CD)

Here, the variable x is required not to occur freely in ψ. As the name suggests, this axiom characterises the constant domain property on models in the Kripke semantics for the intuitionistic language [19, 16, 36]. Rauszer suggested that this connection between the axiom and the property on models should also hold in the bi-intuitionistic setting [44, 48]. The first-order Kripke semantics she developed uses frames for intuitionistic logic satisfying the constant domain property, thus capturing the semantics for 𝖥𝖮𝖢𝖣𝖨𝖫, i.e. first-order intuitionistic logic extended with the (CD) axiom. Our results provide a confirmation of Rauszer’s suggestion by showing 𝖥𝖮𝖡𝖨𝖫 complete relative to the constant domain semantics, notably settling the logic as a conservative extension of 𝖥𝖮𝖢𝖣𝖨𝖫 [48, p.57][5].

In fact, our presented completeness proof for bi-intuitionistic logic mostly follows the textbook proof of Gabbay, Shehtman, and Skvortsov [17] for 𝖥𝖮𝖢𝖣𝖨𝖫. As our only actually novel idea, we observe that their use of a custom Lindenbaum lemma exploiting the (CD) axiom to obtain successor worlds in a universal model can be dualised, namely, to obtain also predecessor worlds, exploiting a dualisation of the (CD) axiom presented below.

(xφ(x)ψ)[Uncaptioned image]x(φ(x)ψ) (DCD)

While (CD) is used as a theorem, i.e. (CD), we exploit the contradictory nature of (DCD) in our custom lemma, as it satisfies (DCD). The remaining argument is also streamlined to dispose of the usual Henkin-style syntax extensions to obtain a particularly succinct presentation that is feasible to verify in Coq with little technical overhead.

In summary, the contributions of the present paper are as follows:

  • We give a succinct completeness proof for 𝖥𝖮𝖡𝖨𝖫 based on standard techniques, closing a gap in the literature not featuring a single unquestionably correct proof.

  • We illustrate the tight connection of 𝖥𝖮𝖡𝖨𝖫 and 𝖥𝖮𝖢𝖣𝖨𝖫, in that our completeness proof of the former extends and dualises the one of the latter.

  • We provide a Coq mechanisation verifying all definitions and results in the paper for absolute clarity and correctness, hyperlinked within this paper via clickable [Uncaptioned image] icons.

  • As a by-product, we contribute, to the best of our knowledge, the first mechanisation of the completeness of 𝖥𝖮𝖢𝖣𝖨𝖫 and the conservativity of 𝖥𝖮𝖡𝖨𝖫 over 𝖥𝖮𝖢𝖣𝖨𝖫.

After some preliminary remarks on our meta-theory based on constructive type theory in Section 2, we recall the syntax, deduction system, and semantics of 𝖥𝖮𝖡𝖨𝖫 in Section 3, including a dedicated discussion of the different constant domain axioms. In Section 4, we then prove the three versions of Lindenbaum lemmas needed to establish completeness and conservativity in Section 5. We end with remarks on the Coq development as well as related and future work in Section 6.

2 Preliminaries

The forthcoming mathematical development can be performed in any standard meta-theoretical foundation. To be formally precise and close to the mechanisation, we work in the calculus of inductive constructions (CIC) [4, 37] underlying the Coq proof assistant [53] and briefly sketch the key features we need. The core of the system is a predicative hierarchy of computational types closed under the usual type formers like (dependent) function types and (dependent) pair types. CIC further comes with an impredicative universe of propositions in which the above type formers take common logical notation. Inductive types and predicates can be formed via a general scheme, for instance to accommodate the types of natural numbers, 𝔹 of boolean values, and of finite lists X over a given type X.

The logic represented in is constructive but also agnostic, so in particular the excluded middle (P:.P¬P) is not provable but it can be assumed consistently. As in this paper we are aiming at a minimalistic proof directed to an audience not necessarily interested in questions of constructivism, we in fact assume the excluded middle globally and highlight its uses in the most crucial cases. Moreover, we assume the axiom of unique choice to freely identify total functional relations XY with functions XY where convenient. That is, we effectively simulate a traditional foundation based on classical set-theory to make the text as accessible as possible to readers unfamiliar with constructive type theory.

3 Basics of Bi-intuitionistic Logic

We present the basics of first-order bi-intuitionistic logic: its syntax, axiomatic proof system, constant domain Kripke semantics, and known facts of relevance, mostly following the presentations in [50] and [51].

3.1 Syntax

As mentioned above, first-order bi-intuitionistic logic is expressed in the language of first-order intuitionistic logic extended with the exclusion operator [Uncaptioned image]˙. More formally:

Definition 1 ([Uncaptioned image]).

Fix a countable signature 𝒮 of function symbols f and predicate symbols P, denoting their arities by f and P, respectively. Let V be the countable type of variables x,y,z:V.

The term and formula language for bi-intuitionistic logic is defined as follows:

𝕋::=xf(t1,,t|f|)
𝔽::=P(t1,,t|P|)˙φ˙φφ˙φφ˙φφ[Uncaptioned image]˙φ˙xφ˙xφ

We call a formula of the shape P(t1,,t|P|) an atomic formula. Here we use dots to distinguish the object-level connectives and quantifiers of bi-intuitionistic logic from the meta-level connectives and quantifiers of the ambient meta-logic. We define ˙:=(˙˙˙), as well as the abbreviations ¬˙φ:=(φ˙˙) and ˙φ:=(˙[Uncaptioned image]˙φ), respectively called negation and weak negation.

The added binary operator φ[Uncaptioned image]˙ψ is intended to be the dual of φ˙ψ and is usually read as “φ excludes ψ”. Consequently, ˙ is also defined dually to ¬˙.

In the following, we use t,t0,t1, for terms the greek letters φ,ψ,χ,δ, for formulas and Γ,Δ,Φ,Ψ for sets or lists of formulas, depending on the context. When Γ refers to a set of formulas, we write Γ,φ or φ,Γ to mean Γ{φ}. For a set of formulas Γ, we define Γ¯ as {φ:φΓ}, where φΓ means ¬(φΓ).

For a formula φ we denote its set of free variables, i.e. under the scope of a corresponding quantifier by FV(φ), and say that it is closed if FV(φ)=. A set of formulas is closed if all formulas in Γ are closed. We denote by φ[t/x] the substitution of the free occurrences of the variable x in φ by the term t. We sometimes stress that x is free in φ by using the notation φ(x) and in such a context just writing ψ is meant to suggest that x is not free in ψ. In that regard, our convention for quantifier scopes is that ˙xφ˙ψ refers to (˙xφ)˙ψ and not to ˙x(φ˙ψ).

Finally, note that our language is built on countable sets of variables, function symbols and predicate symbols. In consequence, the set of formulas is recursively enumerable.

3.2 Axiomatic Calculus

The generalised Hilbert calculus 𝖥𝖮𝖡𝖨𝖧 [50] ([Uncaptioned image]) for 𝖥𝖮𝖡𝖨𝖫 extends the one for intuitionistic logic, containing the axioms A1 to A9 (for the propositional basis, implicit here) and A14 to A16 (for the first-order basis), with the axioms A10 to A13 and the rule (wDN), shown in Figure 1. There, 𝒜 in the rule (Ax) refers to the set of all instances of axioms. In the following we write Γφ to mean that the syntactic expression Γφ, called a consecution, is provable in 𝖥𝖮𝖡𝖨𝖧, i.e. there is a tree of consecutions built using the rules in Figure 1 with instances of (Ax) and (El) as leaves. We also abbreviate ¬(Γφ) by Γ⊬φ. We formally define the logic 𝖥𝖮𝖡𝖨𝖫 as the set {(Γ,φ):Γφ}.

Note that our calculus 𝖥𝖮𝖡𝖨𝖧 is the calculus 𝖥𝖮𝗐𝖡𝖨𝖧 of [50].111More precisely, 𝖥𝖮𝖡𝖨𝖧 is the calculus 𝖥𝖮𝗐𝖡𝖨𝖧 minus the axiom φ˙. This deletion is caused by the fact that is not a primitive connective of our language. In his work, he also considers a stronger system called 𝖥𝖮𝗌𝖡𝖨𝖧, obtained by modifying the premise of the rule (wDN) to Γφ. As the letters 𝗐 and 𝗌 are only used to distinguish the two calculi, we drop 𝗐 in this paper for simplicity.

Figure 1: Generalised Hilbert calculus 𝖥𝖮𝖡𝖨𝖧, where x is free in ψ and Γ in A14, (Gen) and (EC).

The name of the rule (Gen) stands for Generalisation, while the name of the rule (EC) stands for for Existential Conditionalisation.

3.3 Basic Proof-Theoretic Results

Next, we present basic proof-theoretic results from the mechanisation of Shillito [50]. They express properties of the proof system 𝖥𝖮𝖡𝖨𝖧, some of which we use to prove completeness.

Unsurprisingly, we can prove that 𝖥𝖮𝖡𝖨𝖫 is a finitary logic: it satisfies identity ([Uncaptioned image]), monotonicity ([Uncaptioned image]), compositionality ([Uncaptioned image]), structurality ([Uncaptioned image]), and finiteness ([Uncaptioned image]) [12, 31]. These properties are expressed below, where σ is a function substituting atomic formulas by composite formulas satisfying some properties222This function needs to commute with substitution of variables ([Uncaptioned image]), but we omit these details as they are not in the scope of this paper. and f is the finite subset relation.

To present the next results in an elegant way, we introduce helpful derived notions.

Definition 2.

Let Δ be a list of formulas. We define ˙:𝔽𝔽 recursively on the structure of Δ by ˙[]:=˙ and ˙(φ::Δ):=φ˙(˙Δ) ([Uncaptioned image]). Analogously, we define ˙:𝔽𝔽 by ˙[]:=˙ and ˙(φ::Δ):=φ˙(˙Δ) ([Uncaptioned image]).

The function ˙ essentially creates the disjunction of all members of a list of formulas, with an additional disjunct ˙, the neutral element of ˙. Using ˙, we can bring consecutions Γφ to a fully symmetric setting via pairs of the shape [ΓΔ], constituted of a left and right context.

Definition 3.

We define the following:

  1. 1.

    [ΓΔ] if Γ˙Δ for some ΔfΔ ([Uncaptioned image]);

  2. 2.

    ⊬[ΓΔ] if ¬([ΓΔ]), in which case we say that [ΓΔ] is relative consistent.

Note that the symmetry in our pairs is only simulated, as it ultimately relies on the asymmetry of consecutions Γφ which we hide via a derived notion. A similar illusion could be obtained by defining an axiomatic system on symmetric consecutions φΔ as first-class citizens, and define [ΓΔ] as the existence of ΓfΓ with ˙ΓΔ. It would be interesting to see what a truly symmetric axiomatic calculus based on pairs would look like.

While our pairs are crucially used in the completeness proof, as we shall see, they are already convenient to express interesting properties of 𝖥𝖮𝖡𝖨𝖧.

Theorem 4.

We have the following:

(1) above shows that a bi-intuitionistic version of the law of excluded-middle holds in 𝖥𝖮𝖡𝖨𝖫 ([Uncaptioned image]). (2) is a syntactic analogue of the algebraic dual residuation property below ([Uncaptioned image]).

abca[Uncaptioned image]˙bc

(3) is the deduction-detachment theorem for 𝖥𝖮𝖡𝖨𝖫 ([Uncaptioned image],[Uncaptioned image]), while (4) is its dual deduction-detachment theorem ([Uncaptioned image],[Uncaptioned image]). (5) is the Dual Modus Ponens rule ([Uncaptioned image]), which acts as (MP) but on the left-hand side of pairs and using [Uncaptioned image]˙ instead of ˙.

3.4 Constant Domain Axioms

Early on, Rauszer noticed the provability in 𝖥𝖮𝖡𝖨𝖫 of the constant domain axiom (CD), as shows the proof below on the left ([Uncaptioned image]), where we rely on the commutativity of ˙([Uncaptioned image]).

Moreoever, the bi-intuitionistic language enhances expressivity as it contains both connectives or quantifiers and their duals. This allows us to dualise formulas: recursively replace any connective or quantifier by its dual, and swap the formula on the left of an implication or exclusion by the one on the right. Therefore, we can dualise the axiom (CD) to obtain the dual constant domain dual-axiom (DCD). While the former is a theorem as it is provable from an empty left-context, equivalent to ˙, the latter is a contradiction as it proves the empty right-context, i.e. ˙, as shown above on the right ([Uncaptioned image]). We suspect that (DCD) plays a role to enforce constant domains in first-order dual intuitionistic logic, which is expressed in the language of 𝖥𝖮𝖡𝖨𝖫 without ˙.

Both (CD) and (DCD) will be of crucial use in our completeness proof.

3.5 Constant Domain Kripke Semantics

We proceed to define a Kripke semantics for 𝖥𝖮𝖡𝖨𝖫 which extends the one for 𝖥𝖮𝖢𝖣𝖨𝖫 with an interpretation of [Uncaptioned image]˙. Note that the interpretation we use here is not the traditional one [48] formalised in [50], but an alternative put forward in [51].

Both the traditional semantics and ours are defined using (Kripke) models which are identical to the ones of 𝖥𝖮𝖢𝖣𝖨𝖫, as shown below.

Definition 5 ([Uncaptioned image]).

A model is a tuple (W,,D,,𝒫), where (W,) is a peordered set, D is a non-empty set called the domain, is a function interpreting each function symbol f of arity n by a function (f):DnD, and 𝒫 is a function interpreting, in each wW, each predicate symbol P of arity n by a set 𝒫(w,P)Dn such that:

wv.P.d0,,dnD.((d0,,dn)𝒫(w,P)(d0,,dn)𝒫(v,P))

An assignment α on D is a function α:VD, and α[d/x] is the assignment α modified in x to output d. An assignment α is extended to the interpretation α¯(t) of a term ([Uncaptioned image]) recursively: α¯(t)=α(x) if t=x, and α¯(t)=(f)(α¯(t0),,α¯(tn)) if t=f(t0,,tn).

Our Kripke semantics extends the usual forcing relation of first-order intuitionistic logic to incorporate [Uncaptioned image]˙ as follows.

Definition 6 ([Uncaptioned image]).

Given a model =(W,,D,,𝒫) and an assignment α for , we define the forcing relation ,w,αφ between a world wW and a formula recursively by:

,w,αP(t0,,tn) := (α¯(t0),,α¯(tn))𝒫(w,P)
,w,α˙ :=
,w,αφ˙ψ := ,w,αφ,w,αψ
,w,αφ˙ψ := ,wαφ,w,αψ
,w,αφ˙ψ := vw.(,v,αφ,v,αψ)
,w,αφ[Uncaptioned image]˙ψ := ¬(vw.(,v,αφ,v,αψ))
,w,α˙xφ := dD.,w,α[d/x]φ
,w,α˙xφ := dD.,w,α[d/x]φ

We abbreviate ¬(,w,αφ) by ,w,α⊮φ.

Crucially, while the semantic clause for ˙ looks forward on the relation , the clause for [Uncaptioned image]˙ looks backwards. This circumstance shows that 𝖥𝖮𝖡𝖨𝖫 shares similarities with tense logic [39, 40, 41]. Additionally, observe that the use of constant domain models allows us to localise the interpretation of ˙ in a single point, in contrast with the case of first-order intuitionistic logic where it is interpreted on all successors.

Note that our semantic clause for [Uncaptioned image]˙ is intuitionistically weaker but classically equivalent to the traditional clause for instance used by Rauszer [48]:

vw.(,v,αφ,v,α⊮ψ)

Two points motivate this clause. First, to our eyes the duality between ˙ and [Uncaptioned image]˙ is more visibly expressed in our clause. Indeed, it is obtained in two steps by negating the clause for ˙, and by reversing the order between v and w, witnessing the tense logic flavour of [Uncaptioned image]˙. Secondly, our analysis led us to believe that the strength of the traditional clause more readily forces one to use non-constructive principles, notably in the proof of the Truth lemma (Lemma 17).

The main feature of the Kripke semantics for intuitionistic logic, i.e. persistence, is preserved in our semantics for 𝖥𝖮𝖡𝖨𝖫.

Lemma 7 (Persistence [Uncaptioned image]).

Let =(W,,D,,𝒫) be a model. The following holds.

α.v,wW.φ.(wv,w,αφ,v,αφ)

Finally, we define the (local) consequence relation Γφ on our semantics ([Uncaptioned image]):

Γφ if .α.w.(,w,αΓ,w,αφ)

Here ,w,αΓ means γΓ.,w,αγ. We then also abbreviate ¬(Γφ) by Γ⊭φ.

Crucially using classical reasoning, soundness of 𝖥𝖮𝖡𝖨𝖧 is straightforwardly obtained.

Lemma 8 (Soundness [Uncaptioned image]).

If Γφ then Γφ.

Proof.

We show Γφ by induction on a given derivation of Γφ. The validity of the inference rules holds constructively using routine arguments and so does the validity of all axioms but A10, A12, and A13, which rely on the excluded middle. We here only present the case of A10 for illustrative purposes.

In this case, we need to show that assuming ,w,αφ we have either ,w,αψ or ,w,αφ[Uncaptioned image]˙ψ. To proceed, we classical reasoning to distinguish whether ,w,αψ or ,w,α⊮ψ. In the former case we are done, in the latter case we show ,w,αφ[Uncaptioned image]˙ψ, so for a contradiction we assume that ,v,αφ implies ,v,αψ for all predecessors vw. For the choice v:=w we thus obtain ,w,αψ, in contradiction to the assumption ,w,α⊮ψ.

4 A Forest of Lindenbaum Lemmas

In this section we are interested in the generation of Henkin prime theories, defined below.

Definition 9.

We say that a set of formulas Γ is:

  • consistent if Γ⊬ ([Uncaptioned image]);

  • deductively closed if Γφ implies φΓ ([Uncaptioned image]);

  • a theory if it is consistent and deductively closed;

  • prime if φ˙ψΓ implies φΓψΓ ([Uncaptioned image]);

  • ˙-Henkin if ˙xφΓ then one can compute some kV such that φ[k/x]Γ ([Uncaptioned image]);

  • ˙-Henkin if ˙xφΓ then one can compute some kV such that φ[k/x]Γ ([Uncaptioned image]);

  • Henkin if it is ˙-Henkin and ˙-Henkin.

Note that we deviate from the standard presentation of the Henkin properties by observing that they actually carry computational content. Later on we use Henkin prime theories as worlds of the canonical model we define to prove completeness.

Traditionally, this proof technique via canonical model construction requires us to connect any set Γ such that Γ⊬φ to a point in the canonical model, i.e. a Henkin prime theory, extending Γ and not containing φ. We call this result the standard Lindenbaum lemma.

Additionally, on the way to completeness we are required to show that if a point in the canonical model does not contain φ˙ψ then we can find an extension of this point containing φ but not ψ. We call this result the constant domain Lindenbaum lemma.

Similarly, we also need to prove that the presence of φ[Uncaptioned image]˙ψ in such a point entails the existence of a restriction of this point containing φ but not ψ. We call this result the dual constant domain Lindenbaum lemma.

In the remainder of this section, we prove these three flavours of Lindenbaum lemma, employing classical logic to describe the underlying extension processes via case distinctions.

4.1 Standard Lindenbaum Lemma

The standard lemma acts on pairs ⊬[ΓΔ] of closed sets of formulas, which allows us to treat Γ⊬φ as special case. The sets Γ and Δ are required to be closed as we need enough “safe” variables to witness quantifiers throughout the enumeration.

Lemma 10 (Standard Lindenbaum Lemma [Uncaptioned image]).

For closed Γ and Δ such that ⊬[ΓΔ], there is a Henkin prime theory ΓΓ such that ⊬[ΓΔ].

Proof.

We construct Γ by iteratively extending the pair [ΓΔ], starting from Γ0:=Γ and Δ0:=Δ ([Uncaptioned image]) and using an enumeration φn of formulas with the additional property that the n-th variable is not free in φk for all kn.

[Γn+1Δn+1]:={[Γn˙xψ,Δn] if φn=˙xψ and [˙xψ,ΓnΔn][ψ[n/x],˙xψ,ΓnΔn] if φn=˙xψ and ⊬[˙xψ,ΓnΔn][Γnψ[n/x],˙xψ,Δn] if φn=˙xψ and [˙xψ,ΓnΔn][˙xψ,ΓnΔn] if φn=˙xψ and ⊬[˙xψ,ΓnΔn][φn,ΓnΔn] if ⊬[φn,ΓnΔn][Γnφn,Δn] if [φn,ΓnΔn]

We then set Γ:=n:Γn and name Δ:=n:Δn ([Uncaptioned image]). We observe ΓΓ and ΔΔ by construction ([Uncaptioned image]). Before turning to the remaining properties one-by-one, note that ⊬[ΓnΔn] is preserved inductively ([Uncaptioned image]), ensuring that ⊬[ΓΔ] ([Uncaptioned image]) and hence the consistency of Γ ([Uncaptioned image]).

  • For deductive closure ([Uncaptioned image]), assume that Γφ. This entails that when φ is considered at n in the enumeration of formulae, then it must be added to Γn+1: indeed, we can prove that ⊬[φ,ΓnΔn], as [φ,ΓnΔn] implies [ΓΔ], a contradiction, via compositionality as we have that Γψ for all ψΓn,φ (via the rule (El) or via assumption).

  • For primeness ([Uncaptioned image]), we assume that φ˙ψΓ. We make case distinctions on whether χΓ or χΓ for χ{φ,ψ}. Clearly, in the case where we have φΓ or ψΓ we are done. So, we are left to consider the case where φΓ and ψΓ. From these assumptions, we obtain that φΔ and ψΔ. Obviously, combined with φ˙ψΓ the two last statements entail the contradiction [ΓΔ]: We have that the list [φ;ψ] is such that all its elements are in Δ, and Γ˙([φ;ψ]) as ˙([φ;ψ])=φ˙ψ˙˙ is equivalent to φ˙ψΓ.

  • To show that Γ is ˙-Henkin ([Uncaptioned image]), we assume that ˙xφΓ. When ˙xφ is considered at n in the enumeration of formulae, then it must be added to Γn+1 as well as φ[n/x]: indeed, we can prove that ⊬[˙xφ,ΓnΔn], as [˙xφ,ΓnΔn] implies ˙xφΔn+1Δ, hence [ΓΔ], a contradiction.

  • To show that Γ is ˙-Henkin ([Uncaptioned image]), we assume that ˙xφΓ. When ˙xφ is considered at n in the enumeration of formulae, then it must be added to Δn+1 as well as φ[n/x]: indeed, we can prove that [˙xφ,ΓnΔn], as ⊬[˙xφ,ΓnΔn] implies ˙xφΓn+1Γ, hence [ΓΔ], a contradiction.

We now have sufficient machinery to generate a Henkin prime theory from a consistent closed theory. Next, we turn to the generation of prime Henkin theories from prime Henkin theories, via extension and restriction.

4.2 Constant Domain Lindenbaum Lemma

For this subsection and for the next, we generate new Henkin prime theories from previous Henkin prime theories. Here, we take a Henkin prime theory Γ and two formulas ψ1 and ψ2 and assume that Γ,ψ1⊬ψ2. We aim at generating a Henkin prime theory Γ which extends Γ{ψ1} and does not contain ψ2. We use this result in the Truth lemma, when assuming that ψ1˙ψ2Γ or equivalently Γ⊬ψ1˙ψ2 or yet Γ,ψ1⊬ψ2.

We cannot use the standard Lindenbaum lemma 10 to extend Γ{ψ1}, as it requires closed formulas. Given that Γ is Henkin, we are prima facie not ensured to have enough safe variables to extend it. However, we can extend Γ{ψ1} using a trick relying on the (CD) axiom and the very fact that Γ is Henkin. This trick can be found in the book of Gabbay, Shehtman and Skvortsov [17, Section 7.2], where they use it for superintuitionistic logics based on the constant domain axiom.

We first establish a proof-theoretic lemma which isolates the use of the (CD) axiom.

Lemma 11.

Let Γ be a ˙-Henkin set of formulas and φ(x),ψ1,ψ2 be formulas.

  1. 1.

    If Γ⊬(˙xφ(x)˙ψ1)˙ψ2, then one can compute k such that (φ[k/x]˙ψ1)˙ψ2Γ ([Uncaptioned image]).

  2. 2.

    If Γ⊬ψ1˙(˙xφ(x)˙ψ2), then one can compute k such that ψ1˙(φ[k/x]˙ψ2Γ) ([Uncaptioned image]).

Proof.

We give both proofs in detail, noting that only (2) relies on the (CD) axiom.

  1. 1.

    It is sufficient to show that ˙x((φ(x)˙ψ1)˙ψ2)Γ. Indeed, as Γ is ˙-Henkin, one can then compute k with ((φ(x)˙ψ1)˙ψ2)[k/x]Γ and therefore (φ[k/x]˙ψ1)˙ψ2Γ. So suppose ˙x((φ(x)˙ψ1)˙ψ2)Γ, so in particular Γ˙x((φ(x)˙ψ1)˙ψ2). From there we can derive Γ(˙xφ(x)˙ψ1)˙ψ2 in contradiction to the assumption using standard proof rules as follows: assuming φ(x0) for some particular x0 together with ψ1, we simply instantiate ˙x((φ(x)˙ψ1)˙ψ2) to x0 and obtain ψ2.

  2. 2.

    It is sufficient to show that ˙x(ψ1˙(φ(x)˙ψ2))Γ, which again leverages the fact that Γ is ˙-Henkin. So suppose ˙x(ψ1˙(φ(x)˙ψ2))Γ and hence Γ˙x(ψ1˙(φ(x)˙ψ2)), we this time derive Γψ1˙(˙xφ(x)˙ψ2) for a contradiction. So assuming ψ1 and then applying the (CD) axiom, it remains to show ˙x(φ(x)˙ψ2), so φ(x0)˙ψ2 for some arbitrary x0. This follows directly from instantiating ˙(ψ1˙(φ(x)˙ψ2)) to x0.

We can then show how to perform the extension of Γ as Henkin theory.

Lemma 12 (CD Lindenbaum Lemma [Uncaptioned image]).

For any Henkin theory Γ and formulas ψ1, ψ2 such that Γ,ψ1⊬ψ2, there is a Henkin prime theory ΓΓ with ψ1Γ and ψ2Γ.

Proof.

We construct Γ by iteratively constructing pairs [ΓnΔn], using any enumeration φn of formulas and letting Γ0:={ψ1} and Δ0:={ψ2} ([Uncaptioned image]):

[Γn+1Δn+1]:={[Γn˙xψ,Δn] if φn=˙xψ and [˙xψ,Γ,ΓnΔn][ψ[k/x],˙xψ,ΓnΔn] if φn=˙xψ and ⊬[˙xψ,Γ,ΓnΔn] and k as obtained from (1) of Lemma 11[˙xψ,ΓnΔn] if φn=˙xψ and [Γ,Γn˙xψ,Δn][Γnψ[k/x],˙xψ,Δn] if φn=˙xψ and ⊬[Γ,Γn˙xψ,Δn] and k as obtained from (2) of Lemma 11[φn,ΓnΔn] if ⊬[φn,Γ,ΓnΔn][Γnφn,Δn] if [φn,Γ,ΓnΔn]

We then set Γ:=n:Γn ([Uncaptioned image]) and name Δ:=n:Δn. For this choice, ΓΓ{ψ1} is by construction ([Uncaptioned image],[Uncaptioned image]) and ψ2Γ ([Uncaptioned image]), or equivalently Γ⊬ψ2, follows since ⊬[Γ,ΓnΔn] ([Uncaptioned image]) and thus ⊬[ΓΔn] is preserved inductively ([Uncaptioned image]). The remaining properties of Γ being a Henkin prime theory are established mostly as in Lemma 10.

  • For deductive closure ([Uncaptioned image]) and primeness ([Uncaptioned image]), one can follow analogous arguments as in the respective claims of Lemma 10.

  • To show that Γ is ˙-Henkin ([Uncaptioned image]), we assume that ˙xφΓ. When ˙xφ is considered at n in the enumeration of formulae, then it must be added to Γn+1 as ⊬[Γ,˙xφ,ΓnΔn] follows from ⊬[ΓΔn]. But then Γn+1 by construction also contains φ[k/x] for k obtained from (1) of Lemma 11 for the choice of ψ1:=˙Γn and ψ2:=˙Δn.

  • To show that Γ is ˙-Henkin ([Uncaptioned image]) one can use an analogous argument, this time relying on (2) of Lemma 11.

Note that we do not need primeness of the input theory Γ as it is obtained as a side-product of the iterative construction.

4.3 Dual Constant Domain Lindenbaum Lemma

Now, we aim at restricting a Henkin prime theory Γ containing ψ1[Uncaptioned image]˙ψ2 into another such theory Γ with ψ1 but not ψ2. This result is now motivated by the case of [Uncaptioned image]˙ in the Truth lemma. Note that once more we cannot use the standard Lindenbaum lemma 10.

While we easily imagine how to extend theories, as in Lemma 12, the restriction of a Henkin prime theory into a smaller one appears as a tricky and rather mysterious operation to perform. However, its familiarity is regained once seen as an extension, not of a theory but of the complement of a theory. Indeed, as ΓΓΓ¯Γ¯ we restrict Γ by extending Γ¯.

The next lemma, again isolating the use of constant domain axioms, relies on this insight, by involving the complement of a theory and exploiting the symmetry of our pairs [ΦΨ] by operating on their left.

Lemma 13.

Let Γ be a ˙-Henkin set of formulas and φ(x),ψ1,ψ2 be formulas.

  1. 1.

    If ⊬[(˙xφ(x)˙ψ1)[Uncaptioned image]˙ψ2Γ¯], then one can compute k with (φ[k/x]˙ψ1)[Uncaptioned image]˙ψ2Γ ([Uncaptioned image]).

  2. 2.

    If ⊬[(ψ1[Uncaptioned image]˙˙xφ(x))[Uncaptioned image]˙ψ2Γ¯], then one can compute k with (ψ1[Uncaptioned image]˙φ[k/x])[Uncaptioned image]˙ψ2Γ ([Uncaptioned image]).

Proof.

We give both proofs in detail, noting that (1) relies on the (DCD) dual-axiom and (2) relies on the (CD) axiom.

  1. 1.

    It is sufficient to show that ˙x((φ(x)˙ψ1)[Uncaptioned image]˙ψ2)Γ. Indeed, as Γ is ˙-Henkin, we can thus compute k such that ((φ(x)˙ψ1)[Uncaptioned image]˙ψ2)[k/x]Γ i.e. ((φ[k/x]˙ψ1)[Uncaptioned image]˙ψ2)Γ. So, we assume for reductio ad absurdum that ˙x((φ(x)˙ψ1)[Uncaptioned image]˙ψ2)Γ. We show that the latter implies [(˙xφ(x)˙ψ1)[Uncaptioned image]˙ψ2Γ¯], contradicting our initial assumption. By the dual deduction Theorem 4 it suffices to show [˙x(x)φ˙ψ1ψ2,Γ¯], proved as follows.

    [˙x(φ(x)˙ψ1)ψ2,Γ¯][(˙xφ(x)˙ψ1)[Uncaptioned image]˙x(φ(x)˙ψ1)ψ2,Γ¯](DMP)[˙xφ(x)˙ψ1ψ2,Γ¯]

    The right premise is nothing but an instance of the (DCD) dual-axiom, so we are left to prove the left premise. All we need to do is to apply the dual detachment Theorem 4 to reduce our goal to [˙x(φ(x)˙ψ1)[Uncaptioned image]˙ψ2Γ¯], which obviously holds as we have ˙x((φ(x)˙ψ1)[Uncaptioned image]˙ψ2)Γ¯ by our assumption ˙x((φ(x)˙ψ1)[Uncaptioned image]˙ψ2)Γ.

  2. 2.

    It is sufficient to show that ˙x((ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2)Γ, which again leverages the fact that Γ is ˙-Henkin, i.e. ((ψ1[Uncaptioned image]˙φ[k/x])[Uncaptioned image]˙ψ2)Γ. So, we assume for reductio that ˙x((ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2)Γ and show [(ψ1[Uncaptioned image]˙˙xφ(x))[Uncaptioned image]˙ψ2Γ¯], a contradiction. More precisely, we show (ψ1[Uncaptioned image]˙˙xφ(x))[Uncaptioned image]˙ψ2˙x((ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2), noting that ˙x((ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2)Γ¯. By the dual deduction theorem it is sufficient to show ψ1˙xφ(x)˙(ψ2˙x((ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2)).

    We use the (CD) axiom to reduce our goal to ψ1˙x(φ(x)˙(ψ2˙˙x((ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2))), as x is not free in ψ2 and ˙x((ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2). We obtain a proof of the latter applying the rule (Gen), leaving us to prove ψ1φ(x)˙(ψ2˙˙x((ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2)). This can easily be proved using the dual detachment theorem as (ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2˙x((ψ1[Uncaptioned image]˙φ(x))[Uncaptioned image]˙ψ2) holds.

Turning back to the restriction of Γ, we note that ψ1[Uncaptioned image]˙ψ2Γ is equivalent to ⊬[ψ1[Uncaptioned image]˙ψ2Γ¯] by consistency of Γ, and in turn to ⊬[ψ1ψ2,Γ¯]. So, to restrict Γ in a way that preserves ψ1 but excludes ψ2, we extend Γ¯ using ⊬[ψ1ψ2,Γ¯] as a stepping stone.

Lemma 14 (DCD Lindenbaum Lemma [Uncaptioned image]).

For any Henkin prime theory Γ and formulas ψ1, ψ2 with ⊬[ψ1ψ2,Γ¯], there is a Henkin prime theory ΓΓ with ψ1Γ and ψ2Γ.

Proof.

We construct Γ by iteratively constructing pairs [ΓnΔn], using any enumeration φn of formulas and letting Γ0:={ψ1} and Δ0:={ψ2} ([Uncaptioned image]):

[Γn+1Δn+1]:={[Γn˙xψ,Δn] if φn=˙xψ and [˙xψ,ΓnΓ¯,Δn][ψ[k/x],˙xψ,ΓnΔn] if φn=˙xψ and ⊬[˙xψ,ΓnΓ¯,Δn] and k as obtained from (1) of Lemma 13[˙xψ,ΓnΔn] if φn=˙xψ and [Γn˙xψ,Γ¯,Δn][Γnψ[k/x],˙xψ,Δn] if φn=˙xψ and ⊬[Γn˙xψ,Γ¯,Δn] and k as obtained from (2) of Lemma 13[φn,ΓnΔn] if ⊬[φn,ΓnΓ¯,Δn][Γnφn,Δn] if [φn,ΓnΓ¯,Δn]

We then set Γ:=n:Γn ([Uncaptioned image]). For this choice, ψ1Γ ([Uncaptioned image]) holds by construction and ψ2Γ ([Uncaptioned image]) follows since ⊬[ΓnΔn,Γ¯] ([Uncaptioned image]) is preserved inductively and ψ2Δn. We also have that ΓΓ ([Uncaptioned image]), as if there is a χΓ but χΓ we get that at the point n in the enumeration where χ is added to form Γn+1 we have [Γn+1Δn+1,Γ¯], a contradiction. As Γ can be shown to be a prime theory ([Uncaptioned image],[Uncaptioned image]) as in Lemma 12, we focus on its being Henkin.

  • To show that Γ is ˙-Henkin ([Uncaptioned image]), we assume that ˙xφΓ. When ˙xφ is considered at n in the enumeration of formulae, then it must be added to Γn+1 as ⊬[˙xφ,ΓnΓ¯,Δn] follows from ⊬[ΓΓ¯,Δn]. But then Γn+1 by construction also contains φ[k/x] for k obtained from (1) of Lemma 13 for the choice of ψ1:=˙Γn and ψ2:=˙Δn.

  • To show that Γ is ˙-Henkin ([Uncaptioned image]) one can use an analogous argument, this time relying on (2) of Lemma 13.

5 Completeness and Conservativity

Using the Lindenbaum lemmas of the previous section, we now first turn to the completeness of 𝖥𝖮𝖡𝖨𝖫 relative to our constant domain semantics.

Theorem 15 (Completeness [Uncaptioned image]).

If Γ{φ} is closed and Γφ then Γφ.

We rely on a canonical model construction based on Henkin prime theories, defined below.

Definition 16 ([Uncaptioned image]).

The canonical model c=(Wc,c,Dc,c,𝒫c) is defined as follows:

  1. 1.

    Wc={Γ:Γ is a Henkin prime theory};

  2. 2.

    Γ1cΓ2 if Γ1Γ2;

  3. 3.

    Dc=𝕋 ;

  4. 4.

    c(f)(t0,,tf)=f(t0,,t|f|) ;

  5. 5.

    𝒫c(w,P)(t0,,tP)={(t0,,t|P|)P(t0,,t|P|)w}.

The canonical assignment αc is defined as αc(x)=x.

Note that the interpretation of terms in c through the canonical assignment αc is the identity function: αc¯(t)=t follows from a simple induction on t ([Uncaptioned image]).

As foreshadowed, the two custom Lindenbaum lemmas come in action to show that the canonical model satisfies the crucial Truth lemma, relating elementhood and forcing.

Lemma 17 (Truth lemma [Uncaptioned image]).

For every ΓWc we have ψΓ iff c,Γ,αcψ.

Proof.

By induction on ψ. We consider the most interesting cases, and refer to the appendix for the remaining cases.

  • ψ=φ˙χ: () Assume φ˙χΓ. To show c,Γ,αcφ˙χ, let ΓWc such that ΓcΓ, and assume c,Γ,αcφ. Then, we obtain φΓ by induction hypothesis. Using ΓcΓ, we get φ˙χΓΓ. Via deductive closure of Γ we thus obtain χΓ, hence c,Γ,αcχ using the induction hypothesis. So, we are done.
    () Assume c,Γ,αcφ˙χ. Assume for reductio that φ˙χΓ. Then the constant domain Lindenbaum lemma 12 entails the existence of ΓWc such that ΓcΓ and φΓ and χΓ ([Uncaptioned image]). By induction hypothesis we get c,Γ,αcφ and c,Γ,αc⊮χ. This contradicts ΓcΓ and c,Γ,αcφ˙χ. So φ˙χΓ.

  • ψ=φ[Uncaptioned image]˙χ: () Assume φ[Uncaptioned image]˙χΓ. The dual constant domain Lindenbaum lemma 14 entails the existence of ΓWc with ΓcΓ and φΓ and χΓ ([Uncaptioned image]). By induction hypothesis we get c,Γ,αcφ and c,Γ,αc⊮χ. As ΓcΓ we get c,Γ,αcφ[Uncaptioned image]˙χ.
    () Assume c,Γ,αcφ[Uncaptioned image]˙χ. Then, there is ΓWc such that ΓcΓ and c,Γ,αcφ and c,Γ,αc⊮χ. By induction hypothesis we obtain that φΓ and χΓ. Note that Γφ˙(χ˙(φ[Uncaptioned image]˙χ)) using axiom A10. Thus by applying (MP) we obtain Γχ˙(φ[Uncaptioned image]˙χ), as we have Γφ knowing φΓ. Via deductive closure and primeness we get χΓ or φ[Uncaptioned image]χΓ. But we know χΓ, so we have φ[Uncaptioned image]˙χΓ. We finally obtain φ[Uncaptioned image]˙χΓ, as ΓΓ given ΓcΓ.

  • ψ:=˙xφ: () Assume xφΓ. To show c,Γ,αc˙xφ let dDc. We need to show c,Γ,αc[d/x]φ. Note that d𝕋=Dc. Using xφΓ and deductive closure we obtain φ[d/x]Γ. Thus, we apply the induction hypothesis to obtain c,Γ,αcφ[d/x]. We finally push the syntactic substitution to a modification of the assignment ([Uncaptioned image]) to obtain c,Γ,αc[d/x]φ.
    () Assume c,Γ,αc˙xφ. Assume for reductio that xφΓ. The theory Γ being ˙-Henkin, there is a n such that φ[n/x]Γ. By induction hypothesis we obtain c,Γ,αc⊮φ[n/x]. But this is a contradiction as it implies that c,Γ,αc[n/x]⊮φ as explained above, while we have c,Γ,αc[n/x]φ from c,Γ,αc˙xφ.

  • ψ:=˙xφ: () Assume ˙xφΓ. The theory Γ being ˙-Henkin, there is n such that φ[n/x]Γ. By induction hypothesis we get c,Γ,αcφ[n/x]. This implies c,Γ,αc[n/x]φ as argued above. Hence c,Γ,αc˙xφ.
    () Assume c,Γ,αc˙xφ. Thus there is a dDc such that c,Γ,αc[d/x]φ. Note that d𝕋=Dc. We reason as above to get that c,Γ,αcφ[d/x]. By induction hypothesis we obtain φ[d/x]Γ. We thus get ˙xφΓ by deductive closure.

Employing the Truth lemma we can now deduce completeness, also relying on the standard Lindenbaum lemma to extend the initial context into a point of the canonical model.

Proof of Theorem 15.

Assume that Γφ, and that Γ⊬φ for reductio. As Γ{φ} is closed, the standard Lindenbaum lemma 10 conjointly with our last assumption ensure us of the existence of ΓWc such that ΓΓ and φΓ ([Uncaptioned image]). By the Truth lemma 17 we obtain both c,Γ,αcΓ and c,Γ,αc⊬φ, hence Γ⊭φ, a contradiction.

We conclude with two results concerning 𝖥𝖮𝖢𝖣𝖨𝖫 that illustrate the close connection to our completeness proof for 𝖥𝖮𝖡𝖨𝖫. To this end, we write 𝔽CD for the usual syntax of first-order intuitionistic logic (i.e. 𝔽 without [Uncaptioned image]˙) ([Uncaptioned image]), CD for the deduction system of 𝖥𝖮𝖢𝖣𝖨𝖫 (i.e.  without the axioms for [Uncaptioned image]˙ but extended with the (CD) axiom) ([Uncaptioned image], and CD for the semantic consequence relation of 𝖥𝖮𝖢𝖣𝖨𝖫 (i.e.  without the clause for [Uncaptioned image]˙) ([Uncaptioned image]). To avoid redundancy, we just give proof sketches and refer to the Coq code for full detail.

First, we prove the completeness of 𝖥𝖮𝖢𝖣𝖨𝖫 simply by a fragment of the proof of 𝖥𝖮𝖡𝖨𝖫.

Theorem 18 (CD Completeness [Uncaptioned image]).

If Γ{φ} is closed and ΓCDφ then ΓCDφ, provided that Γ{φ} ranges over 𝔽CD.

Sketch.

Following exactly the same strategy as Theorem 15, now only relying on the standard Lindenbaum lemma 10 and the constant domain Lindenbaum lemma 12.

Secondly, we deduce the conservativity of 𝖥𝖮𝖡𝖨𝖫 over 𝖥𝖮𝖢𝖣𝖨𝖫.

Corollary 19 (Conservativity [Uncaptioned image]).

If Γ{φ} is closed and Γφ then ΓCDφ, provided that Γ{φ} ranges over 𝔽CD.

Sketch.

By composing soundness of 𝖥𝖮𝖡𝖨𝖫 (Lemma 8) with completeness of 𝖥𝖮𝖢𝖣𝖨𝖫 (Theorem 18), using that obviously ΓCDφ iff Γφ for Γ{φ} ranging over 𝔽CD.

6 Discussion

In this paper, we provide a succinct and verified completeness proof of 𝖥𝖮𝖡𝖨𝖫 relative to its constant domain Kripke semantics. Consequentially, we formally establish the conservativity of 𝖥𝖮𝖡𝖨𝖫 over 𝖥𝖮𝖢𝖣𝖨𝖫, notably via the analogous completeness of the latter over the same semantics restricted to the intuitionistic language. We conclude with a brief discussion.

6.1 Coq Development

Our Coq development is based on the design of and is in the process of being integrated333https://github.com/uds-psl/coq-library-fol/pull/7 into the Coq library for first-order logic [27], which has been developed to unify several projects concerned with different aspects of first-order logics [13, 14, 28, 26, 24, 23, 29]. It spans roughly 8000 lines of code, with about one half each for the separate 𝖥𝖮𝖡𝖨𝖫 and 𝖥𝖮𝖢𝖣𝖨𝖫 developments. We globally assume a strong form of the excluded middle, namely P:.P+¬P, to enable the definition of functions by logical case distinction (justified by the consistency of the usual excluded middle and unique choice [56]) and left the particular formula enumeration as a parameter that will be obtained routinely from the library framework once merged.

Most notably, in comparison to the paper presentation, where we use named variables for legibility, the mechanisation is based on a de Bruijn encoding of binding [7] following the design of the Autosubst 2 tool [52], i.e. variables are replaced by indices referring to the amount of quantifiers shadowing their relevant binder. For instance, the formula ˙x˙yP(x,y) is represented as ˙˙P(1,0), as x is bound by the ˙ shadowed by the ˙, whereas y is bound by the unshadowed ˙. To illustrate just one of the advantages of this approach, in the representation of the deduction calculus, one can use lifting of de Bruijn indices to simulate the usual freshness conditions for variables. For example, the rule (Gen) is encoded as:

Γ[]φ(Gen)Γ˙φ

By shifting from Γ in the conclusion to Γ[] in the premise, we lift any free index n in Γ to its successor n+1. As a consequence, the index 0 made free by the change from ˙φ to φ is not present in Γ[], thus creating a canonical “fresh” variable. Using this rule for instance allows a particularly easy monotonicity proof, as no on-the-fly renaming of variables is necessary.

Overall, the use of any proof assistant for our project not only provided the additional guarantee of correctness of our completeness proof but actually was worthwhile already in the mathematical development: for instance the dualised Lindenbaum lemma subject to Section 4.2 was developed incrementally starting from the non-dualised case, with the proof assistant pointing towards the remaining gaps while some proof scripts could be reused. The particular choice of Coq allowed to base our code on the design decisions of the existing library for first-order logic and, implementing a constructive foundation, in principle enables a constructive analysis extending [51], as described in the future work section.

6.2 Related Work

Bi-intuitionistic logic.

As understood in this paper, bi-intuitionistic logic received some attention in computer science, notably through a formulae-as-types interpretation involving the notion of first-class coroutines [6] and in the context of image processing via its connection to mathematical morphology [49]. We mention another line of work [3, 1, 2, 10, 11] initiated by Wansing [54, 55] on a different bi-intuitionistic logic called 𝟤𝖨𝗇𝗍, which is both proof-theoretically and philosophically motivated. The alternative interpretation of [Uncaptioned image]˙ in this logic allows for the study of the notions of falsification and verification.

Completeness proofs for 𝗙𝗢𝗕𝗜𝗟.

Rauszer’s proof of completeness for 𝖥𝖮𝖡𝖨𝖫 [46] is erroneous for three main reasons. First, as in the propositional case two logics are conflated. This is noticed by the joint use of the deduction theorem, an exclusive property of the weak logic we study here, and of double negation ¬ of formulas, an exclusive property of the strong. Secondly, her canonical model [46, p.66] is rooted, i.e. there is a point-root w for which any v is such that wv. However, as noticed by Crolard [5] and confirmed by Shillito [50, Lemma 8.11.3], bi-intuitionistic logic is not complete relative to the class of rooted models. Thirdly, in her proof Rauszer relies on a result from Gabbay [15, Lemma 8.11.1] dealing with the language 𝔽 without [Uncaptioned image]˙, ˙ and ˙. She dually proves it for 𝔽 without ˙, ˙ and ˙, and proceeds to illegitimately combine them on 𝔽, outside of their application range.

In Klemke’s proof strategy [30], the main construction is in Satz 6.1, where the extension of consistent pairs (M,N) of sets of formulas over an alphabet {x1,x2,} is described. The extension yields a family of maximal pairs (Ms,Ns) in the extended alphabet {x1,x2,}{y1,y2,} where s ranges over the partial order (U,Q) of strings over two copies of natural numbers ( and ) such that ss if s and s agree on a prefix and from there continue in the separate copies. This order is called the “universal bush” and a universal model is then defined over the structure (U,Q,{x1,x2,}{y1,y2,}), i.e. on the universal bush with the full alphabet as individuals, interprets variables with the identity and interprets atoms P(x,y,z) at s with P(x,y,z) in Ms. From Satz 6.1 the conclusion to completeness is standard. To date, we were neither able to identify an explicit use of the constant domain axioms, nor to confirm or refute the claim by Olkhovikov and Badia [35] concerning errors.

Finally, Shillito [50] tried, but failed, to correct Rauszer’s work in Coq. More precisely, he gave an incomplete proof of completeness relying on two assumptions corresponding to our custom Lindenbaum lemmas 12 and 14. We consequently closed the gap in his proof.

Mechanisation of completeness proofs.

There is a rather long list of works mechanising completeness proofs which for the most prominent case of first-order logic is summarised in [14] and [25]. The only mechanised completeness proofs for (propositional) bi-intuitionistic logic we are aware of are those by Shillito [50] as well as Shillito and Kirst [51].

Regarding other formalisms like bi-intuitionistic logic with a modal aspect, we are aware of the works in Coq of Doczkal and Smolka on CTL [9], Doczkal and Bard on converse PDL [8], and Hagemeier and Kirst on IEL [21], the work in HOL Light of Maggesi and Perini Brogi on the provability logic GL [33]. We finally mention the recent formalisation in Lean of Guo, Chen and Bentzen on propositional intuitionistic logic [20].

6.3 Future Work

While the purpose of this paper is to present the clearest and most minimalistic completeness proof for 𝖥𝖮𝖡𝖨𝖫, which for very natural reasons encompasses classical assumptions, we plan to continue in the spirit of Shillito and Kirst [51] to analyse which logical strength is exactly required. In their case of propositional bi-intuitionistic logic, they observe that the principle WLEMS, identified by Kirst [25] for the case of IEL and applied to first-order logic by Herbelin and Kirst [22], is equivalent to a weak but natural formulation of completeness. However, this observation relies on the property that theories obtained from the standard Lindenbaum lemma are negatively described (i.e. membership of formulas is characterised by non-derivability), while the custom Lindenbaum lemmas yield also positively described theories (membership of universally quantified formulas is characterised by derivability). Therefore it seems unlikely that an exactly analogous analysis is realistic and in fact it might be that the completeness of 𝖥𝖮𝖡𝖨𝖫 requires a stronger fragment of classical meta-logic.

References

  • [1] Sara Ayhan. Uniqueness of logical connectives in a bilateralist setting. In Martin Blicha and Igor Sedlár, editors, The Logica Yearbook 2020, pages 1–16. College Publications, 2021. doi:10.48550/arXiv.2210.00989.
  • [2] Sara Ayhan. Meaning and identity of proofs in a bilateralist setting: A two-sorted typed lambda-calculus for proofs and refutations. Journal of Logic and Computation, 2024. doi:10.48550/arXiv.2307.01079.
  • [3] Sara Ayhan and Heinrich Wansing. On synonymy in proof-theoretic semantics. the case of 2int. Bulletin of the Section of Logic, 52(2), 2023.
  • [4] Thierry Coquand and Gérard Huet. The calculus of constructions. PhD thesis, INRIA, 1986. doi:10.1016/0890-5401(88)90005-3.
  • [5] Tristan Crolard. Subtractive logic. TCS, 254:1-2:151–185, 2001. doi:10.1016/S0304-3975(99)00124-3.
  • [6] Tristan Crolard. A formulae-as-types interpretation of subtractive logic. Journal of Logic and Computation, 14:4:529–570, 2004. doi:10.1093/logcom/14.4.529.
  • [7] Nicolaas Govert De Bruijn. Lambda calculus notation with nameless dummies, a tool for automatic formula manipulation, with application to the church-rosser theorem. In Indagationes mathematicae (proceedings), volume 75(5), pages 381–392. Elsevier, 1972.
  • [8] Christian Doczkal and Joachim Bard. Completeness and Decidability of Converse PDL in the Constructive Type Theory of Coq. In Certified Programs and Proofs, Los Angeles, United States, January 2018. doi:10.1145/3167088.
  • [9] Christian Doczkal and Gert Smolka. Completeness and decidability results for ctl in coq. In Gerwin Klein and Ruben Gamboa, editors, Interactive Theorem Proving, pages 226–241, Cham, 2014. Springer International Publishing. doi:10.1007/978-3-319-08970-6_15.
  • [10] Sergey Drobyshevich. A bilateral hilbert-style investigation of 2-intuitionistic logic. J. Log. Comput., 29(5):665–692, 2019. doi:10.1093/logcom/exz010.
  • [11] Sergey Drobyshevich. Tarskian consequence relations bilaterally: some familiar notions. Synthese, 198(Suppl 22):5213–5240, 2021. doi:10.1007/s11229-019-02267-w.
  • [12] Josep M. Font. Abstract Algebraic Logic: An Introductory Textbook. Studies in Logic and the Foundations of Mathematics. College Publications, 2016.
  • [13] Yannick Forster, Dominik Kirst, and Gert Smolka. On synthetic undecidability in coq, with an application to the entscheidungsproblem. In Proceedings of the 8th ACM SIGPLAN International Conference on Certified Programs and Proofs, pages 38–51, 2019. doi:10.1145/3293880.3294091.
  • [14] Yannick Forster, Dominik Kirst, and Dominik Wehr. Completeness theorems for first-order logic analysed in constructive type theory: Extended version. Journal of Logic and Computation, 31(1):112–151, 2021. arXiv:2006.04399, doi:10.48550/arXiv.2006.04399.
  • [15] Dov M. Gabbay. Applications of trees to intermediate logics. Journal of Symbolic Logic, 37(1):135–138, 1972. doi:10.2307/2272556.
  • [16] Dov M. Gabbay. Semantical investigations in Heyting’s intuitionistic logic, volume 148. D. Reidel Pub. Co, Dordrecht, Holland, 1981.
  • [17] Dov M. Gabbay, Valentin B. Shehtman, and Dmitrij P. Skvortsov. Quantification in Nonclassical Logic, volume 153. Elsevier, London, Amsterdam, 1st edition, 2009.
  • [18] Rajeev Goré and Ian Shillito. Bi-Intuitionistic Logics: A New Instance of an Old Problem. In Advances in Modal Logic 13, papers from the thirteenth conference on ”Advances in Modal Logic,” held online, 24-28 August 2020, pages 269–288, 2020. URL: http://www.aiml.net/volumes/volume13/Gore-Shillito.pdf.
  • [19] Andrzej Grzegorczyk. A philosophically plausible formal interpretation of intuitionistic logic. Indagationes Mathematicae, 26:596–601, 1964.
  • [20] Huayu Guo, Dongheng Chen, and Bruno Bentzen. Verified completeness in Henkin-style for intuitionistic propositional logic. In Bruno Bentzen, Beishui Liao, Davide Liga, Reka Markovich, Bin Wei, Minghui Xiong, and Tianwen Xu, editors, Joint Proceedings of the Third International Workshop on Logics for New-Generation Artificial Intelligence and the International Workshop on Logic, AI and Law, September 8-9 and 11-12, 2023, Hangzhou, pages 36–48. College Publications, 2023.
  • [21] Christian Hagemeier and Dominik Kirst. Constructive and mechanised meta-theory of iel and similar modal logics. Journal of Logic and Computation, 32(8):1585–1610, 2022. doi:10.1093/logcom/exac068.
  • [22] Hugo Herbelin and Dominik Kirst. New observations on the constructive content of first-order completeness theorems. In 29th International Conference on Types for Proofs and Programs, 2023.
  • [23] Marc Hermes and Dominik Kirst. An analysis of Tennenbaum’s theorem in constructive type theory. In International Conference on Formal Structures for Computation and Deduction. LIPIcs, 2022. doi:10.4230/LIPIcs.FSCD.2022.9.
  • [24] Johannes Hostert, Andrej Dudenhefner, and Dominik Kirst. Undecidability of dyadic first-order logic in Coq. In International Conference on Interactive Theorem Proving. LIPIcs, 2022. doi:10.4230/LIPIcs.ITP.2022.19.
  • [25] Dominik Kirst. Mechanised Metamathematics: An Investigation of First-Order Logic and Set Theory in Constructive Type Theory. PhD thesis, Saarland University, 2022.
  • [26] Dominik Kirst and Marc Hermes. Synthetic undecidability and incompleteness of first-order axiom systems in Coq. In International Conference on Interactive Theorem Proving. LIPIcs, 2021. doi:10.4230/LIPIcs.ITP.2021.23.
  • [27] Dominik Kirst, Johannes Hostert, Andrej Dudenhefner, Yannick Forster, Marc Hermes, Mark Koch, Dominique Larchey-Wendling, Niklas Mück, Benjamin Peters, Gert Smolka, and Dominik Wehr. A Coq library for mechanised first-order logic. In Coq Workshop, 2022.
  • [28] Dominik Kirst and Dominique Larchey-Wendling. Trakhtenbrot’s theorem in Coq: Finite model theory through the constructive lens. Logical Methods in Computer Science, 18, 2022. doi:10.46298/lmcs-18(2:17)2022.
  • [29] Dominik Kirst and Benjamin Peters. Gödel’s theorem without tears: Essential incompleteness in synthetic computability. In Annual conference of the European Association for Computer Science Logic. LIPIcs, 2023. doi:10.4230/LIPIcs.CSL.2023.30.
  • [30] Dieter Klemke. Ein Henkin-Beweis für die Vollständigkeit eines Kalküls relativ zur Grzegorczyk-Semantik. Archiv für mathematische Logik und Grundlagenforschung, 14:148–161, 1971.
  • [31] Marcus Kracht. Tools and Techniques in Modal Logic. Elsevier, 1999.
  • [32] E.G.K. López-Escobar. On intuitionistic sentential connectives I. Revista Colombiana de Matemáticas, 19(1-2):117–130, January 1985.
  • [33] Marco Maggesi and Cosimo Perini Brogi. A Formal Proof of Modal Completeness for Provability Logic. In Liron Cohen and Cezary Kaliszyk, editors, 12th International Conference on Interactive Theorem Proving (ITP 2021), volume 193 of Leibniz International Proceedings in Informatics (LIPIcs), pages 26:1–26:18, Dagstuhl, Germany, 2021. Schloss Dagstuhl – Leibniz-Zentrum für Informatik. doi:10.4230/LIPIcs.ITP.2021.26.
  • [34] C. Moisil. Logique modale. Disquisitiones malhematicae et physicae, 2:3–98, 1942.
  • [35] Grigory K Olkhovikov and Guillermo Badia. Craig interpolation theorem fails in bi-intuitionistic predicate logic. The Review of Symbolic Logic, 17(2):611–633, 2024. doi:10.1017/s1755020322000296.
  • [36] Hiroakira Ono. Craig’s Interpolation Theorem for the Intuitionistic Logic and Its Extensions: A Semantical Approach. Studia Logica: An International Journal for Symbolic Logic, 45(1):19–33, 1986. doi:10.1007/BF01881546.
  • [37] Christine Paulin-Mohring. Inductive definitions in the system coq rules and properties. In International Conference on Typed Lambda Calculi and Applications, pages 328–345. Springer, 1993. doi:10.1007/BFb0037116.
  • [38] Luís Pinto and Tarmo Uustalu. Proof search and counter-model construction for bi-intuitionistic propositional logic with labelled sequents. In M. Giese and A. Waaler, editors, Proc. TABLEAUX, pages 295–309, Berlin, Heidelberg, 2009. Springer Berlin Heidelberg. doi:10.1007/978-3-642-02716-1_22.
  • [39] Arthur N. Prior. Time and Modality. Greenwood Press, Westport, Conn., 1955.
  • [40] Arthur N. Prior. Past, Present and Future. Clarendon P., Oxford,, 1967.
  • [41] Arthur N. Prior. Papers on Time and Tense. Oxford University Press UK, Oxford, England, 1968.
  • [42] Cecylia Rauszer. A Formalization of the Propositional Calculus of H-B Logic. Studia Logica: An International Journal for Symbolic Logic, 33(1):23–34, 1974.
  • [43] Cecylia Rauszer. Semi-Boolean algebras and their application to intuitionistic logic with dual operations. Fundamenta Mathematicae LXXXIII, pages 219–249, 1974.
  • [44] Cecylia Rauszer. On the Strong Semantical Completeness of Any Extension of the Intuitionistic Predicate Calculus. Bulletin de l’Académie Polonaise des Sciences, XXIV(2):81–87, 1976.
  • [45] Cecylia Rauszer. An algebraic approach to the Heyting-Brouwer predicate calculus. Fundamenta Mathematicae, 96(2):127–135, 1977.
  • [46] Cecylia Rauszer. Applications of Kripke Models to Heyting-Brouwer Logic. Studia Logica: An International Journal for Symbolic Logic, 36(1/2):61–71, 1977.
  • [47] Cecylia Rauszer. Model Theory for an Extension of Intuitionistic Logic. Studia Logica, 36(1-2):73–87, 1977.
  • [48] Cecylia Rauszer. An Algebraic and Kripke-Style Approach to a Certain Extension of Intuitionistic Logic. PhD thesis, Instytut Matematyczny Polskiej Akademi Nauk, 1980.
  • [49] Katsuhiko Sano and John G. Stell. Strong completeness and the finite model property for bi-intuitionistic stable tense logics. In Proc. Methods for Modalities 2017, volume 243 of Electronic Proceedings in Theoretical Computer Science, pages 105–121. Open Publishing Association, 2017. doi:10.4204/EPTCS.243.8.
  • [50] Ian Shillito. New Foundations for the Proof Theory of Bi-Intuitionistic and Provability Logics Mechanized in Coq. PhD thesis, Australian National University, Canberra, 2023.
  • [51] Ian Shillito and Dominik Kirst. A mechanised and constructive reverse analysis of soundness and completeness of bi-intuitionistic logic. In Amin Timany, Dmitriy Traytel, Brigitte Pientka, and Sandrine Blazy, editors, Proceedings of the 13th ACM SIGPLAN International Conference on Certified Programs and Proofs, CPP 2024, London, UK, January 15-16, 2024, pages 218–229. ACM, 2024. doi:10.1145/3636501.3636957.
  • [52] Kathrin Stark, Steven Schäfer, and Jonas Kaiser. Autosubst 2: reasoning with multi-sorted de bruijn terms and vector substitutions. In Proceedings of the 8th ACM SIGPLAN International Conference on Certified Programs and Proofs, pages 166–180, 2019. doi:10.1145/3293880.3294101.
  • [53] The Coq Development Team. The coq proof assistant, June 2023. doi:10.5281/zenodo.8161141.
  • [54] Heinrich Wansing. Falsification, natural deduction and bi-intuitionistic logic. J. Log. Comput., 26(1):425–450, 2016. doi:10.1093/logcom/ext035.
  • [55] Heinrich Wansing. Connexive Logic. In Edward N. Zalta and Uri Nodelman, editors, The Stanford Encyclopedia of Philosophy. Metaphysics Research Lab, Stanford University, Summer 2023 edition, 2023.
  • [56] Benjamin Werner. Sets in types, types in sets. In International Symposium on Theoretical Aspects of Computer Software, pages 530–546. Springer, 1997. doi:10.1007/BFb0014566.

Appendix A Appendix

Proof of Truth lemma 17.

By induction on ψ, only listing the missing cases:

  • ψ:=P(t0,,t|P|): we have P(t0,,t|P|)Γ iff (t0,,t|P|)𝒫c(Γ,P) by definition of the canonical model. The latter is equivalent to c,Γ,αcP(t0,,t|P|) by definition and the fact that terms are interpreted as themselves via αc.

  • ψ=˙: we have that ˙Γ by consistency. We also have c,Γ,αc⊮˙ by definition. So, we trivially have ˙Γ iff c,Γ,αc˙.

  • ψ=φ˙χ: we have that φ˙χΓ iff φΓ and χΓ via deductive closure. By induction hypothesis this holds if and only if c,Γ,αcφ and c,Γ,αcχ. Then φ˙χΓ iff c,Γ,αcφ˙χ.

  • ψ=φ˙χ: we have that φ˙χΓ iff [φΓ or χΓ] by primeness and deductive closure. By induction hypothesis this holds if and only if c,Γ,αcφ or c,Γ,αcχ. Then φ˙χΓ iff c,Γ,αcφ˙χ.