Completeness of First-Order Bi-Intuitionistic Logic
Abstract
We provide a succinct and verified completeness proof for first-order bi-intuitionistic logic, relative to constant domain Kripke semantics. By doing so, we make up for the almost-50-year-old substantial mistakes in Rauszer’s foundational work, detected but unresolved by Shillito two years ago. Moreover, an even earlier but historically neglected proof by Klemke has been found to contain at least local errors by Olkhovikov and Badia, that remained unfixed due to the technical complexity of Klemke’s argument. To resolve this unclear situation once and for all, we give a succinct completeness proof, based on and dualising a standard proof for constant domain intuitionistic logic, and verify our constructions using the Coq proof assistant to guarantee correctness.
Keywords and phrases:
bi-intuitionistic logic, first-order logic, completeness, Coq proof assistantFunding:
Dominik Kirst: Received funding from the European Union’s Horizon research and innovation programme under the Marie Skłodowska-Curie grant agreement No. 101152583 and a Minerva Fellowship of the Minerva Stiftung Gesellschaft für die Forschung mbH.Copyright and License:
2012 ACM Subject Classification:
Theory of computation Proof theory ; Theory of computation Logic and verification ; Theory of computation Modal and temporal logicsEditors:
Jörg Endrullis and Sylvain SchmitzSeries and Publisher:
Leibniz International Proceedings in Informatics, Schloss Dagstuhl – Leibniz-Zentrum für Informatik
1 Introduction
In the 1970s, Cecylia Rauszer provided foundations for bi-intuitionistic logic (first studied by Moisil [34]), an extension of intuitionistic logic with a binary operator called exclusion, dual to the intuitionistic implication . Her work spanned over most approaches to non-classical logics, ranging from algebras [43, 45], Kripke semantics [44, 46, 47], sequent calculus [42], to Hilbert systems [43, 42]. The impressiveness and exhaustiveness of Rauszer’s study of bi-intuitionistic logic is not only measured by the variety of fields she introduced bi-intuitionistic in, but by the analysis in each case of both the propositional and first-order logic.
Unfortunately, through time several mistakes were detected in Rauszer’s work. First, her sequent calculus for propositional bi-intuitionistic logic was shown by Pinto and Uustalu [38] not to admit cut, contradicting her claim [42, Result 2.3]. To correct this, they provided a calculus based on sequents with richer structure, which they proved to admit cut. Secondly, a confusion around the status of the deduction theorem led Goré and Shillito [18] to notice the conflation in Rauszer’s work of two different propositional bi-intuitionistic logics. This conflation resulted in an incorrect completeness proof for the propositional case, ultimately resolved by Goré and Shillito. Finally, the errors contained in the propositional case continue being present in Rauszer’s work on the first-order case as noted by Shillito [50], who failed to fix the proof in this setting. So, to date, no completeness proof for first-order bi-intuitionistic logic () along the lines of Rauszer’s argument is known.
To our knowledge, the only other candidate proof was given by Klemke in 1971 [30], thereby in fact predating Rauszer’s work. He attributes the semantics of the logic to Grzegorczyk [19] and uses a Henkin-style argument to construct a universal model. However, its correctness is questioned by Olkhovikov and Badia [35], who write:
“Incidentally, there is an alternative completeness argument by Klemke, where bi-intuitionistic predicate logic is studied possibly for the first time in print (and, as far as we know, independently from Rauszer’s work) and that contains other errors.”
As his proof strategy is technically involved and, being written in fairly old style (and German language), the presentation is rather inaccessible to a broader audience, it is hard to assess whether these errors are locally fixable or as substantially unfixable as Rauszer’s.
We therefore opt for an alternative route to settle the completeness of once and for all: we present a succinct proof based on standard techniques, coming in a modern (and English) presentation for easy assessment, and use the Coq proof assistant to verify our argument, therefore leaving no room for ambiguity and error.
In that vein, our formal investigation finally establishes solid foundations for , and simultaneously tightly connects the provability of the constant domain axiom in this logic with constant domain models. That is, contrarily to the propositional case, first-order bi-intuitionistic logic is known not to be a conservative extension of first-order intuitionistic logic [48, p.56][32, 50]: it derives the constant domain axiom (CD), displayed below, which is not provable in the purely intuitionistic counterpart [16].
| (CD) |
Here, the variable is required not to occur freely in . As the name suggests, this axiom characterises the constant domain property on models in the Kripke semantics for the intuitionistic language [19, 16, 36]. Rauszer suggested that this connection between the axiom and the property on models should also hold in the bi-intuitionistic setting [44, 48]. The first-order Kripke semantics she developed uses frames for intuitionistic logic satisfying the constant domain property, thus capturing the semantics for , i.e. first-order intuitionistic logic extended with the (CD) axiom. Our results provide a confirmation of Rauszer’s suggestion by showing complete relative to the constant domain semantics, notably settling the logic as a conservative extension of [48, p.57][5].
In fact, our presented completeness proof for bi-intuitionistic logic mostly follows the textbook proof of Gabbay, Shehtman, and Skvortsov [17] for . As our only actually novel idea, we observe that their use of a custom Lindenbaum lemma exploiting the (CD) axiom to obtain successor worlds in a universal model can be dualised, namely, to obtain also predecessor worlds, exploiting a dualisation of the (CD) axiom presented below.
| (DCD) |
While (CD) is used as a theorem, i.e. , we exploit the contradictory nature of (DCD) in our custom lemma, as it satisfies . The remaining argument is also streamlined to dispose of the usual Henkin-style syntax extensions to obtain a particularly succinct presentation that is feasible to verify in Coq with little technical overhead.
In summary, the contributions of the present paper are as follows:
-
We give a succinct completeness proof for based on standard techniques, closing a gap in the literature not featuring a single unquestionably correct proof.
-
We illustrate the tight connection of and , in that our completeness proof of the former extends and dualises the one of the latter.
-
As a by-product, we contribute, to the best of our knowledge, the first mechanisation of the completeness of and the conservativity of over .
After some preliminary remarks on our meta-theory based on constructive type theory in Section 2, we recall the syntax, deduction system, and semantics of in Section 3, including a dedicated discussion of the different constant domain axioms. In Section 4, we then prove the three versions of Lindenbaum lemmas needed to establish completeness and conservativity in Section 5. We end with remarks on the Coq development as well as related and future work in Section 6.
2 Preliminaries
The forthcoming mathematical development can be performed in any standard meta-theoretical foundation. To be formally precise and close to the mechanisation, we work in the calculus of inductive constructions (CIC) [4, 37] underlying the Coq proof assistant [53] and briefly sketch the key features we need. The core of the system is a predicative hierarchy of computational types closed under the usual type formers like (dependent) function types and (dependent) pair types. CIC further comes with an impredicative universe of propositions in which the above type formers take common logical notation. Inductive types and predicates can be formed via a general scheme, for instance to accommodate the types of natural numbers, of boolean values, and of finite lists over a given type .
The logic represented in is constructive but also agnostic, so in particular the excluded middle () is not provable but it can be assumed consistently. As in this paper we are aiming at a minimalistic proof directed to an audience not necessarily interested in questions of constructivism, we in fact assume the excluded middle globally and highlight its uses in the most crucial cases. Moreover, we assume the axiom of unique choice to freely identify total functional relations with functions where convenient. That is, we effectively simulate a traditional foundation based on classical set-theory to make the text as accessible as possible to readers unfamiliar with constructive type theory.
3 Basics of Bi-intuitionistic Logic
We present the basics of first-order bi-intuitionistic logic: its syntax, axiomatic proof system, constant domain Kripke semantics, and known facts of relevance, mostly following the presentations in [50] and [51].
3.1 Syntax
As mentioned above, first-order bi-intuitionistic logic is expressed in the language of first-order intuitionistic logic extended with the exclusion operator . More formally:
Definition 1 (
).
Fix a countable signature of function symbols and predicate symbols , denoting their arities by and , respectively. Let be the countable type of variables .
The term and formula language for bi-intuitionistic logic is defined as follows:
We call a formula of the shape an atomic formula. Here we use dots to distinguish the object-level connectives and quantifiers of bi-intuitionistic logic from the meta-level connectives and quantifiers of the ambient meta-logic. We define , as well as the abbreviations and , respectively called negation and weak negation.
The added binary operator is intended to be the dual of and is usually read as “ excludes ”. Consequently, is also defined dually to .
In the following, we use for terms the greek letters for formulas and for sets or lists of formulas, depending on the context. When refers to a set of formulas, we write or to mean . For a set of formulas , we define as , where means .
For a formula we denote its set of free variables, i.e. under the scope of a corresponding quantifier by , and say that it is closed if . A set of formulas is closed if all formulas in are closed. We denote by the substitution of the free occurrences of the variable in by the term . We sometimes stress that is free in by using the notation and in such a context just writing is meant to suggest that is not free in . In that regard, our convention for quantifier scopes is that refers to and not to .
Finally, note that our language is built on countable sets of variables, function symbols and predicate symbols. In consequence, the set of formulas is recursively enumerable.
3.2 Axiomatic Calculus
The generalised Hilbert calculus [50] (
) for extends the one for intuitionistic logic, containing the axioms to (for the propositional basis, implicit here) and to (for the first-order basis),
with the axioms to and the rule (wDN), shown in Figure 1.
There, in the rule (Ax) refers to the set of all instances of axioms.
In the following we write to mean that the syntactic expression , called a consecution, is provable in , i.e. there is a tree of consecutions built using the rules in Figure 1 with instances of (Ax) and (El) as leaves. We also abbreviate by .
We formally define the logic as the set .
Note that our calculus is the calculus of [50].111More precisely, is the calculus minus the axiom . This deletion is caused by the fact that is not a primitive connective of our language. In his work, he also considers a stronger system called , obtained by modifying the premise of the rule (wDN) to . As the letters and are only used to distinguish the two calculi, we drop in this paper for simplicity.
The name of the rule (Gen) stands for Generalisation, while the name of the rule (EC) stands for for Existential Conditionalisation.
3.3 Basic Proof-Theoretic Results
Next, we present basic proof-theoretic results from the mechanisation of Shillito [50]. They express properties of the proof system , some of which we use to prove completeness.
Unsurprisingly, we can prove that is a finitary logic:
it satisfies identity (
),
monotonicity (
),
compositionality (
),
structurality (
), and finiteness (
) [12, 31].
These properties are expressed below, where is a function substituting atomic formulas
by composite formulas satisfying some properties222This function needs to commute with substitution of variables (
),
but we omit these details as they are not in the scope of this paper.
and is the finite subset relation.
To present the next results in an elegant way, we introduce helpful derived notions.
Definition 2.
Let be a list of formulas. We define recursively on the structure of by and . Analogously, we define by and .
The function essentially creates the disjunction of all members of a list of formulas, with an additional disjunct , the neutral element of . Using , we can bring consecutions to a fully symmetric setting via pairs of the shape , constituted of a left and right context.
Definition 3.
We define the following:
-
1.
if for some ;
-
2.
if , in which case we say that is relative consistent.
Note that the symmetry in our pairs is only simulated, as it ultimately relies on the asymmetry of consecutions which we hide via a derived notion. A similar illusion could be obtained by defining an axiomatic system on symmetric consecutions as first-class citizens, and define as the existence of with . It would be interesting to see what a truly symmetric axiomatic calculus based on pairs would look like.
While our pairs are crucially used in the completeness proof, as we shall see, they are already convenient to express interesting properties of .
Theorem 4.
We have the following:
(1) above shows that a bi-intuitionistic version of the law of excluded-middle holds in (
).
(2) is a syntactic analogue of the algebraic dual residuation property below (
).
(3) is the deduction-detachment theorem for (
,
), while (4) is its dual deduction-detachment theorem (
,
).
(5) is the Dual Modus Ponens rule (
), which acts as (MP) but on the left-hand side of pairs and using instead of .
3.4 Constant Domain Axioms
Early on, Rauszer noticed the provability in of the constant domain axiom (CD), as shows the proof below on the left
(
),
where we rely on the commutativity of (
).
Moreoever, the bi-intuitionistic language enhances expressivity as it contains both connectives or quantifiers and their duals.
This allows us to dualise formulas: recursively replace any connective or quantifier by its dual, and swap the formula on the left of an implication or exclusion by the one on the right.
Therefore, we can dualise the axiom (CD) to obtain the dual constant domain dual-axiom (DCD).
While the former is a theorem as it is provable from an empty left-context, equivalent to , the latter is a contradiction as it proves the empty right-context, i.e. , as shown above on the right (
).
We suspect that (DCD) plays a role to enforce constant domains in first-order dual intuitionistic logic,
which is expressed in the language of without .
3.5 Constant Domain Kripke Semantics
We proceed to define a Kripke semantics for which extends the one for with an interpretation of . Note that the interpretation we use here is not the traditional one [48] formalised in [50], but an alternative put forward in [51].
Both the traditional semantics and ours are defined using (Kripke) models which are identical to the ones of , as shown below.
Definition 5 (
).
A model is a tuple , where is a peordered set, is a non-empty set called the domain, is a function interpreting each function symbol of arity by a function , and is a function interpreting, in each , each predicate symbol of arity by a set such that:
An assignment on is a function , and is the assignment modified in to output . An assignment is extended to the interpretation of a term recursively: if , and if .
Our Kripke semantics extends the usual forcing relation of first-order intuitionistic logic to incorporate as follows.
Definition 6 (
).
Given a model and an assignment for , we define the forcing relation between a world and a formula recursively by:
|
|
We abbreviate by .
Crucially, while the semantic clause for looks forward on the relation , the clause for looks backwards. This circumstance shows that shares similarities with tense logic [39, 40, 41]. Additionally, observe that the use of constant domain models allows us to localise the interpretation of in a single point, in contrast with the case of first-order intuitionistic logic where it is interpreted on all successors.
Note that our semantic clause for is intuitionistically weaker but classically equivalent to the traditional clause for instance used by Rauszer [48]:
Two points motivate this clause. First, to our eyes the duality between and is more visibly expressed in our clause. Indeed, it is obtained in two steps by negating the clause for , and by reversing the order between and , witnessing the tense logic flavour of . Secondly, our analysis led us to believe that the strength of the traditional clause more readily forces one to use non-constructive principles, notably in the proof of the Truth lemma (Lemma 17).
The main feature of the Kripke semantics for intuitionistic logic, i.e. persistence, is preserved in our semantics for .
Finally, we define the (local) consequence relation on our semantics (
):
Here means . We then also abbreviate by .
Crucially using classical reasoning, soundness of is straightforwardly obtained.
Proof.
We show by induction on a given derivation of . The validity of the inference rules holds constructively using routine arguments and so does the validity of all axioms but , , and , which rely on the excluded middle. We here only present the case of for illustrative purposes.
In this case, we need to show that assuming we have either or . To proceed, we classical reasoning to distinguish whether or . In the former case we are done, in the latter case we show , so for a contradiction we assume that implies for all predecessors . For the choice we thus obtain , in contradiction to the assumption .
4 A Forest of Lindenbaum Lemmas
In this section we are interested in the generation of Henkin prime theories, defined below.
Definition 9.
We say that a set of formulas is:
-
consistent if ;
-
deductively closed if implies ;
-
a theory if it is consistent and deductively closed;
-
prime if implies ;
-
-Henkin if then one can compute some such that ;
-
-Henkin if then one can compute some such that ;
-
Henkin if it is -Henkin and -Henkin.
Note that we deviate from the standard presentation of the Henkin properties by observing that they actually carry computational content. Later on we use Henkin prime theories as worlds of the canonical model we define to prove completeness.
Traditionally, this proof technique via canonical model construction requires us to connect any set such that to a point in the canonical model, i.e. a Henkin prime theory, extending and not containing . We call this result the standard Lindenbaum lemma.
Additionally, on the way to completeness we are required to show that if a point in the canonical model does not contain then we can find an extension of this point containing but not . We call this result the constant domain Lindenbaum lemma.
Similarly, we also need to prove that the presence of in such a point entails the existence of a restriction of this point containing but not . We call this result the dual constant domain Lindenbaum lemma.
In the remainder of this section, we prove these three flavours of Lindenbaum lemma, employing classical logic to describe the underlying extension processes via case distinctions.
4.1 Standard Lindenbaum Lemma
The standard lemma acts on pairs of closed sets of formulas, which allows us to treat as special case. The sets and are required to be closed as we need enough “safe” variables to witness quantifiers throughout the enumeration.
Lemma 10 (Standard Lindenbaum Lemma
).
For closed and such that , there is a Henkin prime theory such that .
Proof.
We construct by iteratively extending the pair , starting from and (
) and using an enumeration of formulas with the additional property that the -th variable is not free in for all .
We then set and name (
).
We observe and by construction (
).
Before turning to the remaining properties one-by-one, note that is preserved inductively (
),
ensuring that (
)
and hence the consistency of (
).
-
For primeness (
),
we assume that .
We make case distinctions on whether or for .
Clearly, in the case where we have or we are done.
So, we are left to consider the case where and .
From these assumptions, we obtain that and .
Obviously, combined with the
two last statements entail the contradiction :
We have that the list is such that all its elements are in ,
and as
is equivalent to .
We now have sufficient machinery to generate a Henkin prime theory from a consistent closed theory. Next, we turn to the generation of prime Henkin theories from prime Henkin theories, via extension and restriction.
4.2 Constant Domain Lindenbaum Lemma
For this subsection and for the next, we generate new Henkin prime theories from previous Henkin prime theories. Here, we take a Henkin prime theory and two formulas and and assume that . We aim at generating a Henkin prime theory which extends and does not contain . We use this result in the Truth lemma, when assuming that or equivalently or yet .
We cannot use the standard Lindenbaum lemma 10 to extend , as it requires closed formulas. Given that is Henkin, we are prima facie not ensured to have enough safe variables to extend it. However, we can extend using a trick relying on the (CD) axiom and the very fact that is Henkin. This trick can be found in the book of Gabbay, Shehtman and Skvortsov [17, Section 7.2], where they use it for superintuitionistic logics based on the constant domain axiom.
We first establish a proof-theoretic lemma which isolates the use of the (CD) axiom.
Lemma 11.
Let be a -Henkin set of formulas and be formulas.
-
1.
If , then one can compute such that .
-
2.
If , then one can compute such that .
Proof.
We give both proofs in detail, noting that only (2) relies on the (CD) axiom.
-
1.
It is sufficient to show that . Indeed, as is -Henkin, one can then compute with and therefore . So suppose , so in particular . From there we can derive in contradiction to the assumption using standard proof rules as follows: assuming for some particular together with , we simply instantiate to and obtain .
-
2.
It is sufficient to show that , which again leverages the fact that is -Henkin. So suppose and hence , we this time derive for a contradiction. So assuming and then applying the (CD) axiom, it remains to show , so for some arbitrary . This follows directly from instantiating to .
We can then show how to perform the extension of as Henkin theory.
Proof.
We construct by iteratively constructing pairs , using any enumeration of formulas and letting and (
):
We then set (
)
and name .
For this choice, is by construction (
,
)
and (
), or equivalently ,
follows since (
)
and thus is preserved inductively (
).
The remaining properties of being a Henkin prime theory are established mostly as in Lemma 10.
-
For deductive closure (
) and
primeness (
),
one can follow analogous arguments as in the respective claims of Lemma 10. -
To show that is -Henkin (
),
we assume that .
When is considered at in the enumeration of formulae, then it must be added to as follows from .
But then by construction also contains for obtained from (1) of Lemma 11 for the choice of and . -
To show that is -Henkin (
)
one can use an analogous argument, this time relying on (2) of Lemma 11.
Note that we do not need primeness of the input theory as it is obtained as a side-product of the iterative construction.
4.3 Dual Constant Domain Lindenbaum Lemma
Now, we aim at restricting a Henkin prime theory containing into another such theory with but not . This result is now motivated by the case of in the Truth lemma. Note that once more we cannot use the standard Lindenbaum lemma 10.
While we easily imagine how to extend theories, as in Lemma 12, the restriction of a Henkin prime theory into a smaller one appears as a tricky and rather mysterious operation to perform. However, its familiarity is regained once seen as an extension, not of a theory but of the complement of a theory. Indeed, as we restrict by extending .
The next lemma, again isolating the use of constant domain axioms, relies on this insight, by involving the complement of a theory and exploiting the symmetry of our pairs by operating on their left.
Lemma 13.
Let be a -Henkin set of formulas and be formulas.
-
1.
If , then one can compute with .
-
2.
If , then one can compute with .
Proof.
We give both proofs in detail, noting that (1) relies on the (DCD) dual-axiom and (2) relies on the (CD) axiom.
-
1.
It is sufficient to show that . Indeed, as is -Henkin, we can thus compute such that i.e. . So, we assume for reductio ad absurdum that . We show that the latter implies , contradicting our initial assumption. By the dual deduction Theorem 4 it suffices to show , proved as follows.
The right premise is nothing but an instance of the (DCD) dual-axiom, so we are left to prove the left premise. All we need to do is to apply the dual detachment Theorem 4 to reduce our goal to , which obviously holds as we have by our assumption .
-
2.
It is sufficient to show that , which again leverages the fact that is -Henkin, i.e. . So, we assume for reductio that and show , a contradiction. More precisely, we show , noting that . By the dual deduction theorem it is sufficient to show .
We use the (CD) axiom to reduce our goal to , as is not free in and . We obtain a proof of the latter applying the rule (Gen), leaving us to prove . This can easily be proved using the dual detachment theorem as holds.
Turning back to the restriction of , we note that is equivalent to by consistency of , and in turn to . So, to restrict in a way that preserves but excludes , we extend using as a stepping stone.
Proof.
We construct by iteratively constructing pairs , using any enumeration of formulas and letting and (
):
We then set (
).
For this choice, (
)
holds by construction and (
)
follows since (
)
is preserved inductively and .
We also have that (
),
as if there is a but we get that at the point in the enumeration where
is added to form we have , a contradiction.
As can be shown to be a prime theory (
,
)
as in Lemma 12, we focus on its being Henkin.
-
To show that is -Henkin (
),
we assume that .
When is considered at in the enumeration of formulae, then it must be
added to as
follows from .
But then by construction also contains for obtained from
(1) of Lemma 13 for the choice of
and . -
To show that is -Henkin (
)
one can use an analogous argument, this time relying on (2) of Lemma 13.
5 Completeness and Conservativity
Using the Lindenbaum lemmas of the previous section, we now first turn to the completeness of relative to our constant domain semantics.
We rely on a canonical model construction based on Henkin prime theories, defined below.
Definition 16 (
).
The canonical model is defined as follows:
-
1.
;
-
2.
if ;
-
3.
;
-
4.
;
-
5.
.
The canonical assignment is defined as .
Note that the interpretation of terms in through the canonical assignment is the identity function:
follows from a simple induction on (
).
As foreshadowed, the two custom Lindenbaum lemmas come in action to show that the canonical model satisfies the crucial Truth lemma, relating elementhood and forcing.
Proof.
By induction on . We consider the most interesting cases, and refer to the appendix for the remaining cases.
-
: Assume . To show , let such that , and assume . Then, we obtain by induction hypothesis. Using , we get . Via deductive closure of we thus obtain , hence using the induction hypothesis. So, we are done.
Assume . Assume for reductio that . Then the constant domain Lindenbaum lemma 12 entails the existence of such that and and (
).
By induction hypothesis we get and .
This contradicts and .
So . -
: Assume . The dual constant domain Lindenbaum lemma 14 entails the existence of with and and (
).
By induction hypothesis we get and .
As we get .
Assume . Then, there is such that and and . By induction hypothesis we obtain that and . Note that using axiom . Thus by applying (MP) we obtain , as we have knowing . Via deductive closure and primeness we get or . But we know , so we have . We finally obtain , as given . -
: Assume . To show let . We need to show . Note that . Using and deductive closure we obtain . Thus, we apply the induction hypothesis to obtain . We finally push the syntactic substitution to a modification of the assignment (
)
to obtain .
Assume . Assume for reductio that . The theory being -Henkin, there is a such that . By induction hypothesis we obtain . But this is a contradiction as it implies that as explained above, while we have from . -
: Assume . The theory being -Henkin, there is such that . By induction hypothesis we get . This implies as argued above. Hence .
Assume . Thus there is a such that . Note that . We reason as above to get that . By induction hypothesis we obtain . We thus get by deductive closure.
Employing the Truth lemma we can now deduce completeness, also relying on the standard Lindenbaum lemma to extend the initial context into a point of the canonical model.
Proof of Theorem 15.
Assume that , and that for reductio.
As is closed, the standard Lindenbaum lemma 10 conjointly with our last assumption
ensure us of the existence of such that and (
).
By the Truth lemma 17 we obtain both and , hence , a contradiction.
We conclude with two results concerning that illustrate the close connection to our completeness proof for .
To this end, we write for the usual syntax of first-order intuitionistic logic (i.e. without ) (
),
for the deduction system of (i.e. without the axioms for but extended with the (CD) axiom) (
,
and for the semantic consequence relation of (i.e. without the clause for ) (
).
To avoid redundancy, we just give proof sketches and refer to the Coq code for full detail.
First, we prove the completeness of simply by a fragment of the proof of .
Sketch.
Following exactly the same strategy as Theorem 15, now only relying on the standard Lindenbaum lemma 10 and the constant domain Lindenbaum lemma 12.
Secondly, we deduce the conservativity of over .
Sketch.
By composing soundness of (Lemma 8) with completeness of (Theorem 18), using that obviously iff for ranging over .
6 Discussion
In this paper, we provide a succinct and verified completeness proof of relative to its constant domain Kripke semantics. Consequentially, we formally establish the conservativity of over , notably via the analogous completeness of the latter over the same semantics restricted to the intuitionistic language. We conclude with a brief discussion.
6.1 Coq Development
Our Coq development is based on the design of and is in the process of being integrated333https://github.com/uds-psl/coq-library-fol/pull/7 into the Coq library for first-order logic [27], which has been developed to unify several projects concerned with different aspects of first-order logics [13, 14, 28, 26, 24, 23, 29]. It spans roughly 8000 lines of code, with about one half each for the separate and developments. We globally assume a strong form of the excluded middle, namely , to enable the definition of functions by logical case distinction (justified by the consistency of the usual excluded middle and unique choice [56]) and left the particular formula enumeration as a parameter that will be obtained routinely from the library framework once merged.
Most notably, in comparison to the paper presentation, where we use named variables for legibility, the mechanisation is based on a de Bruijn encoding of binding [7] following the design of the Autosubst 2 tool [52], i.e. variables are replaced by indices referring to the amount of quantifiers shadowing their relevant binder. For instance, the formula is represented as , as is bound by the shadowed by the , whereas is bound by the unshadowed . To illustrate just one of the advantages of this approach, in the representation of the deduction calculus, one can use lifting of de Bruijn indices to simulate the usual freshness conditions for variables. For example, the rule (Gen) is encoded as:
By shifting from in the conclusion to in the premise, we lift any free index in to its successor . As a consequence, the index 0 made free by the change from to is not present in , thus creating a canonical “fresh” variable. Using this rule for instance allows a particularly easy monotonicity proof, as no on-the-fly renaming of variables is necessary.
Overall, the use of any proof assistant for our project not only provided the additional guarantee of correctness of our completeness proof but actually was worthwhile already in the mathematical development: for instance the dualised Lindenbaum lemma subject to Section 4.2 was developed incrementally starting from the non-dualised case, with the proof assistant pointing towards the remaining gaps while some proof scripts could be reused. The particular choice of Coq allowed to base our code on the design decisions of the existing library for first-order logic and, implementing a constructive foundation, in principle enables a constructive analysis extending [51], as described in the future work section.
6.2 Related Work
Bi-intuitionistic logic.
As understood in this paper, bi-intuitionistic logic received some attention in computer science, notably through a formulae-as-types interpretation involving the notion of first-class coroutines [6] and in the context of image processing via its connection to mathematical morphology [49]. We mention another line of work [3, 1, 2, 10, 11] initiated by Wansing [54, 55] on a different bi-intuitionistic logic called , which is both proof-theoretically and philosophically motivated. The alternative interpretation of in this logic allows for the study of the notions of falsification and verification.
Completeness proofs for .
Rauszer’s proof of completeness for [46] is erroneous for three main reasons. First, as in the propositional case two logics are conflated. This is noticed by the joint use of the deduction theorem, an exclusive property of the weak logic we study here, and of double negation of formulas, an exclusive property of the strong. Secondly, her canonical model [46, p.66] is rooted, i.e. there is a point-root for which any is such that . However, as noticed by Crolard [5] and confirmed by Shillito [50, Lemma 8.11.3], bi-intuitionistic logic is not complete relative to the class of rooted models. Thirdly, in her proof Rauszer relies on a result from Gabbay [15, Lemma 8.11.1] dealing with the language without , and . She dually proves it for without , and , and proceeds to illegitimately combine them on , outside of their application range.
In Klemke’s proof strategy [30], the main construction is in Satz 6.1, where the extension of consistent pairs of sets of formulas over an alphabet is described. The extension yields a family of maximal pairs in the extended alphabet where ranges over the partial order of strings over two copies of natural numbers ( and ) such that if and agree on a prefix and from there continue in the separate copies. This order is called the “universal bush” and a universal model is then defined over the structure , i.e. on the universal bush with the full alphabet as individuals, interprets variables with the identity and interprets atoms at with in . From Satz 6.1 the conclusion to completeness is standard. To date, we were neither able to identify an explicit use of the constant domain axioms, nor to confirm or refute the claim by Olkhovikov and Badia [35] concerning errors.
Mechanisation of completeness proofs.
There is a rather long list of works mechanising completeness proofs which for the most prominent case of first-order logic is summarised in [14] and [25]. The only mechanised completeness proofs for (propositional) bi-intuitionistic logic we are aware of are those by Shillito [50] as well as Shillito and Kirst [51].
Regarding other formalisms like bi-intuitionistic logic with a modal aspect, we are aware of the works in Coq of Doczkal and Smolka on CTL [9], Doczkal and Bard on converse PDL [8], and Hagemeier and Kirst on IEL [21], the work in HOL Light of Maggesi and Perini Brogi on the provability logic GL [33]. We finally mention the recent formalisation in Lean of Guo, Chen and Bentzen on propositional intuitionistic logic [20].
6.3 Future Work
While the purpose of this paper is to present the clearest and most minimalistic completeness proof for , which for very natural reasons encompasses classical assumptions, we plan to continue in the spirit of Shillito and Kirst [51] to analyse which logical strength is exactly required. In their case of propositional bi-intuitionistic logic, they observe that the principle WLEMS, identified by Kirst [25] for the case of IEL and applied to first-order logic by Herbelin and Kirst [22], is equivalent to a weak but natural formulation of completeness. However, this observation relies on the property that theories obtained from the standard Lindenbaum lemma are negatively described (i.e. membership of formulas is characterised by non-derivability), while the custom Lindenbaum lemmas yield also positively described theories (membership of universally quantified formulas is characterised by derivability). Therefore it seems unlikely that an exactly analogous analysis is realistic and in fact it might be that the completeness of requires a stronger fragment of classical meta-logic.
References
- [1] Sara Ayhan. Uniqueness of logical connectives in a bilateralist setting. In Martin Blicha and Igor Sedlár, editors, The Logica Yearbook 2020, pages 1–16. College Publications, 2021. doi:10.48550/arXiv.2210.00989.
- [2] Sara Ayhan. Meaning and identity of proofs in a bilateralist setting: A two-sorted typed lambda-calculus for proofs and refutations. Journal of Logic and Computation, 2024. doi:10.48550/arXiv.2307.01079.
- [3] Sara Ayhan and Heinrich Wansing. On synonymy in proof-theoretic semantics. the case of 2int. Bulletin of the Section of Logic, 52(2), 2023.
- [4] Thierry Coquand and Gérard Huet. The calculus of constructions. PhD thesis, INRIA, 1986. doi:10.1016/0890-5401(88)90005-3.
- [5] Tristan Crolard. Subtractive logic. TCS, 254:1-2:151–185, 2001. doi:10.1016/S0304-3975(99)00124-3.
- [6] Tristan Crolard. A formulae-as-types interpretation of subtractive logic. Journal of Logic and Computation, 14:4:529–570, 2004. doi:10.1093/logcom/14.4.529.
- [7] Nicolaas Govert De Bruijn. Lambda calculus notation with nameless dummies, a tool for automatic formula manipulation, with application to the church-rosser theorem. In Indagationes mathematicae (proceedings), volume 75(5), pages 381–392. Elsevier, 1972.
- [8] Christian Doczkal and Joachim Bard. Completeness and Decidability of Converse PDL in the Constructive Type Theory of Coq. In Certified Programs and Proofs, Los Angeles, United States, January 2018. doi:10.1145/3167088.
- [9] Christian Doczkal and Gert Smolka. Completeness and decidability results for ctl in coq. In Gerwin Klein and Ruben Gamboa, editors, Interactive Theorem Proving, pages 226–241, Cham, 2014. Springer International Publishing. doi:10.1007/978-3-319-08970-6_15.
- [10] Sergey Drobyshevich. A bilateral hilbert-style investigation of 2-intuitionistic logic. J. Log. Comput., 29(5):665–692, 2019. doi:10.1093/logcom/exz010.
- [11] Sergey Drobyshevich. Tarskian consequence relations bilaterally: some familiar notions. Synthese, 198(Suppl 22):5213–5240, 2021. doi:10.1007/s11229-019-02267-w.
- [12] Josep M. Font. Abstract Algebraic Logic: An Introductory Textbook. Studies in Logic and the Foundations of Mathematics. College Publications, 2016.
- [13] Yannick Forster, Dominik Kirst, and Gert Smolka. On synthetic undecidability in coq, with an application to the entscheidungsproblem. In Proceedings of the 8th ACM SIGPLAN International Conference on Certified Programs and Proofs, pages 38–51, 2019. doi:10.1145/3293880.3294091.
- [14] Yannick Forster, Dominik Kirst, and Dominik Wehr. Completeness theorems for first-order logic analysed in constructive type theory: Extended version. Journal of Logic and Computation, 31(1):112–151, 2021. arXiv:2006.04399, doi:10.48550/arXiv.2006.04399.
- [15] Dov M. Gabbay. Applications of trees to intermediate logics. Journal of Symbolic Logic, 37(1):135–138, 1972. doi:10.2307/2272556.
- [16] Dov M. Gabbay. Semantical investigations in Heyting’s intuitionistic logic, volume 148. D. Reidel Pub. Co, Dordrecht, Holland, 1981.
- [17] Dov M. Gabbay, Valentin B. Shehtman, and Dmitrij P. Skvortsov. Quantification in Nonclassical Logic, volume 153. Elsevier, London, Amsterdam, 1st edition, 2009.
- [18] Rajeev Goré and Ian Shillito. Bi-Intuitionistic Logics: A New Instance of an Old Problem. In Advances in Modal Logic 13, papers from the thirteenth conference on ”Advances in Modal Logic,” held online, 24-28 August 2020, pages 269–288, 2020. URL: http://www.aiml.net/volumes/volume13/Gore-Shillito.pdf.
- [19] Andrzej Grzegorczyk. A philosophically plausible formal interpretation of intuitionistic logic. Indagationes Mathematicae, 26:596–601, 1964.
- [20] Huayu Guo, Dongheng Chen, and Bruno Bentzen. Verified completeness in Henkin-style for intuitionistic propositional logic. In Bruno Bentzen, Beishui Liao, Davide Liga, Reka Markovich, Bin Wei, Minghui Xiong, and Tianwen Xu, editors, Joint Proceedings of the Third International Workshop on Logics for New-Generation Artificial Intelligence and the International Workshop on Logic, AI and Law, September 8-9 and 11-12, 2023, Hangzhou, pages 36–48. College Publications, 2023.
- [21] Christian Hagemeier and Dominik Kirst. Constructive and mechanised meta-theory of iel and similar modal logics. Journal of Logic and Computation, 32(8):1585–1610, 2022. doi:10.1093/logcom/exac068.
- [22] Hugo Herbelin and Dominik Kirst. New observations on the constructive content of first-order completeness theorems. In 29th International Conference on Types for Proofs and Programs, 2023.
- [23] Marc Hermes and Dominik Kirst. An analysis of Tennenbaum’s theorem in constructive type theory. In International Conference on Formal Structures for Computation and Deduction. LIPIcs, 2022. doi:10.4230/LIPIcs.FSCD.2022.9.
- [24] Johannes Hostert, Andrej Dudenhefner, and Dominik Kirst. Undecidability of dyadic first-order logic in Coq. In International Conference on Interactive Theorem Proving. LIPIcs, 2022. doi:10.4230/LIPIcs.ITP.2022.19.
- [25] Dominik Kirst. Mechanised Metamathematics: An Investigation of First-Order Logic and Set Theory in Constructive Type Theory. PhD thesis, Saarland University, 2022.
- [26] Dominik Kirst and Marc Hermes. Synthetic undecidability and incompleteness of first-order axiom systems in Coq. In International Conference on Interactive Theorem Proving. LIPIcs, 2021. doi:10.4230/LIPIcs.ITP.2021.23.
- [27] Dominik Kirst, Johannes Hostert, Andrej Dudenhefner, Yannick Forster, Marc Hermes, Mark Koch, Dominique Larchey-Wendling, Niklas Mück, Benjamin Peters, Gert Smolka, and Dominik Wehr. A Coq library for mechanised first-order logic. In Coq Workshop, 2022.
- [28] Dominik Kirst and Dominique Larchey-Wendling. Trakhtenbrot’s theorem in Coq: Finite model theory through the constructive lens. Logical Methods in Computer Science, 18, 2022. doi:10.46298/lmcs-18(2:17)2022.
- [29] Dominik Kirst and Benjamin Peters. Gödel’s theorem without tears: Essential incompleteness in synthetic computability. In Annual conference of the European Association for Computer Science Logic. LIPIcs, 2023. doi:10.4230/LIPIcs.CSL.2023.30.
- [30] Dieter Klemke. Ein Henkin-Beweis für die Vollständigkeit eines Kalküls relativ zur Grzegorczyk-Semantik. Archiv für mathematische Logik und Grundlagenforschung, 14:148–161, 1971.
- [31] Marcus Kracht. Tools and Techniques in Modal Logic. Elsevier, 1999.
- [32] E.G.K. López-Escobar. On intuitionistic sentential connectives I. Revista Colombiana de Matemáticas, 19(1-2):117–130, January 1985.
- [33] Marco Maggesi and Cosimo Perini Brogi. A Formal Proof of Modal Completeness for Provability Logic. In Liron Cohen and Cezary Kaliszyk, editors, 12th International Conference on Interactive Theorem Proving (ITP 2021), volume 193 of Leibniz International Proceedings in Informatics (LIPIcs), pages 26:1–26:18, Dagstuhl, Germany, 2021. Schloss Dagstuhl – Leibniz-Zentrum für Informatik. doi:10.4230/LIPIcs.ITP.2021.26.
- [34] C. Moisil. Logique modale. Disquisitiones malhematicae et physicae, 2:3–98, 1942.
- [35] Grigory K Olkhovikov and Guillermo Badia. Craig interpolation theorem fails in bi-intuitionistic predicate logic. The Review of Symbolic Logic, 17(2):611–633, 2024. doi:10.1017/s1755020322000296.
- [36] Hiroakira Ono. Craig’s Interpolation Theorem for the Intuitionistic Logic and Its Extensions: A Semantical Approach. Studia Logica: An International Journal for Symbolic Logic, 45(1):19–33, 1986. doi:10.1007/BF01881546.
- [37] Christine Paulin-Mohring. Inductive definitions in the system coq rules and properties. In International Conference on Typed Lambda Calculi and Applications, pages 328–345. Springer, 1993. doi:10.1007/BFb0037116.
- [38] Luís Pinto and Tarmo Uustalu. Proof search and counter-model construction for bi-intuitionistic propositional logic with labelled sequents. In M. Giese and A. Waaler, editors, Proc. TABLEAUX, pages 295–309, Berlin, Heidelberg, 2009. Springer Berlin Heidelberg. doi:10.1007/978-3-642-02716-1_22.
- [39] Arthur N. Prior. Time and Modality. Greenwood Press, Westport, Conn., 1955.
- [40] Arthur N. Prior. Past, Present and Future. Clarendon P., Oxford,, 1967.
- [41] Arthur N. Prior. Papers on Time and Tense. Oxford University Press UK, Oxford, England, 1968.
- [42] Cecylia Rauszer. A Formalization of the Propositional Calculus of H-B Logic. Studia Logica: An International Journal for Symbolic Logic, 33(1):23–34, 1974.
- [43] Cecylia Rauszer. Semi-Boolean algebras and their application to intuitionistic logic with dual operations. Fundamenta Mathematicae LXXXIII, pages 219–249, 1974.
- [44] Cecylia Rauszer. On the Strong Semantical Completeness of Any Extension of the Intuitionistic Predicate Calculus. Bulletin de l’Académie Polonaise des Sciences, XXIV(2):81–87, 1976.
- [45] Cecylia Rauszer. An algebraic approach to the Heyting-Brouwer predicate calculus. Fundamenta Mathematicae, 96(2):127–135, 1977.
- [46] Cecylia Rauszer. Applications of Kripke Models to Heyting-Brouwer Logic. Studia Logica: An International Journal for Symbolic Logic, 36(1/2):61–71, 1977.
- [47] Cecylia Rauszer. Model Theory for an Extension of Intuitionistic Logic. Studia Logica, 36(1-2):73–87, 1977.
- [48] Cecylia Rauszer. An Algebraic and Kripke-Style Approach to a Certain Extension of Intuitionistic Logic. PhD thesis, Instytut Matematyczny Polskiej Akademi Nauk, 1980.
- [49] Katsuhiko Sano and John G. Stell. Strong completeness and the finite model property for bi-intuitionistic stable tense logics. In Proc. Methods for Modalities 2017, volume 243 of Electronic Proceedings in Theoretical Computer Science, pages 105–121. Open Publishing Association, 2017. doi:10.4204/EPTCS.243.8.
- [50] Ian Shillito. New Foundations for the Proof Theory of Bi-Intuitionistic and Provability Logics Mechanized in Coq. PhD thesis, Australian National University, Canberra, 2023.
- [51] Ian Shillito and Dominik Kirst. A mechanised and constructive reverse analysis of soundness and completeness of bi-intuitionistic logic. In Amin Timany, Dmitriy Traytel, Brigitte Pientka, and Sandrine Blazy, editors, Proceedings of the 13th ACM SIGPLAN International Conference on Certified Programs and Proofs, CPP 2024, London, UK, January 15-16, 2024, pages 218–229. ACM, 2024. doi:10.1145/3636501.3636957.
- [52] Kathrin Stark, Steven Schäfer, and Jonas Kaiser. Autosubst 2: reasoning with multi-sorted de bruijn terms and vector substitutions. In Proceedings of the 8th ACM SIGPLAN International Conference on Certified Programs and Proofs, pages 166–180, 2019. doi:10.1145/3293880.3294101.
- [53] The Coq Development Team. The coq proof assistant, June 2023. doi:10.5281/zenodo.8161141.
- [54] Heinrich Wansing. Falsification, natural deduction and bi-intuitionistic logic. J. Log. Comput., 26(1):425–450, 2016. doi:10.1093/logcom/ext035.
- [55] Heinrich Wansing. Connexive Logic. In Edward N. Zalta and Uri Nodelman, editors, The Stanford Encyclopedia of Philosophy. Metaphysics Research Lab, Stanford University, Summer 2023 edition, 2023.
- [56] Benjamin Werner. Sets in types, types in sets. In International Symposium on Theoretical Aspects of Computer Software, pages 530–546. Springer, 1997. doi:10.1007/BFb0014566.
Appendix A Appendix
Proof of Truth lemma 17.
By induction on , only listing the missing cases:
-
: we have iff by definition of the canonical model. The latter is equivalent to by definition and the fact that terms are interpreted as themselves via .
-
: we have that by consistency. We also have by definition. So, we trivially have iff .
-
: we have that iff and via deductive closure. By induction hypothesis this holds if and only if and . Then iff .
-
: we have that iff [ or ] by primeness and deductive closure. By induction hypothesis this holds if and only if or . Then iff .
