Taking Bi-Intuitionistic Logic First-Order:
A Proof-Theoretic Investigation via Polytree Sequents
Abstract
It is well-known that extending the Hilbert axiomatic system for first-order intuitionistic logic with an exclusion operator, that is dual to implication, collapses the domains of models into a constant domain. This makes it an interesting problem to find a sound and complete proof system for first-order bi-intuitionistic logic with non-constant domains that is also conservative over first-order intuitionistic logic. We solve this problem by presenting the first sound and complete proof system for first-order bi-intuitionistic logic with increasing domains. We formalize our proof system as a polytree sequent calculus (a notational variant of nested sequents), and prove that it enjoys cut-elimination and is conservative over first-order intuitionistic logic. A key feature of our calculus is an explicit eigenvariable context, which allows us to control precisely the scope of free variables in a polytree structure. Semantically this context can be seen as encoding a notion of Scott’s existence predicate for intuitionistic logic. This turns out to be crucial to avoid the collapse of domains and to prove the completeness of our proof system. The explicit consideration of the variable context in a formula sheds light on a previously overlooked dependency between the residuation principle and the existence predicate in the first-order setting, which may help to explain the difficulty in designing a sound and complete proof system for first-order bi-intuitionistic logic.
Keywords and phrases:
Bi-intuitionistic, Cut-elimination, Conservativity, Domain, First-order, Polytree, Proof theory, Reachability, SequentFunding:
Tim S. Lyon: European Research Council, Consolidator Grant DeciGUT (771779)Copyright and License:
![[Uncaptioned image]](x1.png)
2012 ACM Subject Classification:
Theory of computation Proof theory ; Theory of computation Modal and temporal logics ; Theory of computation Constructive mathematics ; Theory of computation Automated reasoningEditors:
Jörg Endrullis and Sylvain SchmitzSeries and Publisher:

1 Introduction
Propositional bi-intuitionistic logic (), also referred to as Heyting-Brouwer logic [33], is a conservative extension of propositional intuitionistic logic (), obtained by adding the binary connective (referred to as exclusion)111 Also referred to as pseudo-difference [33], subtraction, and co-implication [13]. among the traditional intuitionistic connectives. This logic has proven relevant in computer science, having a formulae-as-types interpretation in terms of first-class coroutines [7] and where modal extensions have found import in image processing [38]. While in intuitionistic logic the connectives and form a residuated pair, i.e. is valid iff is valid iff is valid, in bi-intuitionistic logic the connectives and also form a residuated pair, i.e. is valid iff is valid iff is valid.222However, they are not logically equivalent, e.g., is not valid. To put it succinctly, is a bi-intuitionistic extension of that is (1) conservative and (2) has the residuation property, i.e. and form residuated pairs.
When extending first-order intuitionistic logic () to its bi-intuitionistic counterpart, a “natural” axiomatization seems to be one obtained by adding the universal axioms (Ax1) , (Ax2) (where is not free in ), and the rule (Gen) to the axioms of . This extension, which we refer to as the logic , turns out not to be conservative over first-order intuitionistic logic , as it allows one to prove the quantifier shift axiom (where is not free in ), which is not valid intuitionistically. A proof of the quantifier shift axiom is given below, where MP stands for modus ponens, Res stands for the residuation property described above, and .
It is well-known that the quantifier shift axiom characterizes the class of first-order intuitionistic Kripke models with constant domains [10, 16], thus forcing the models for to satisfy this constraint. Indeed, various works in the literature (e.g., [32, 34]) have shown that completeness for requires the domain to be constant. These works and the above example strongly suggest that it might not be possible to have a proof system for a bi-intuitionistic logic with non-constant domains, at least not as a traditional Hilbert system. As far as we know, there is no prior successful attempt at solving this problem.
In this paper, we provide the first sound and complete proof system for first-order bi-intuitionistic logic with increasing domains, which we refer to here as . With some minor modifications, the proof system for can be converted into a proof system for A key insight in avoiding the collapse of domains in is to consider the universal quantifier as implicitly carrying an assumption about the existence of the quantified variable. Proof theoretically, this could be done by introducing a notion of an existence predicate, first studied by Scott [35]. An existence predicate such as postulates that exists in the domain under consideration. By insisting that all universally quantified variables be guarded by an existence predicate, i.e. universally quantified formulae would have the form , the quantifier shift axiom can be rewritten as: . Attempting a bottom-up construction of a derivation similar to our earlier example for this rewritten axiom, we get stuck at the the top-most residuation rule, which is in fact not a valid instance of Res:
For the proof construction to proceed, we would have to somehow discharge the assumption in the premise of Gen before applying the residuation rule. In the logic of constant domains , is equivalent to (i.e. the interpretation of any term in the logic is an object that exists in all worlds in the underlying Kripke model). So the version of the quantifier shift axiom with the existence predicate is provably equivalent to the original one in This is not the case, however, in the logic of increasing domains , since the assumption cannot always be discharged. What this example highlights is that a typical proof-theoretical argument used to show the provability of the quantifier shift axiom (and hence the collapse of domains) implicitly depends on an existence assumption on objects in the domains in the underlying Kripke model. What we show here is that by making this dependency explicit and by carefully managing the use of the existence assumptions in proofs, we are able to obtain a sound and complete proof system for
One issue with the existence predicate is that it is not clear how it should interact with the exclusion operator. Semantically, a formula like asserts that, if an object exists in the current domain, then postulating that holds in a predecessor world should imply that exists as well in that predecessor world. This is valid in our semantics, but it was not at all obvious how a proof system that admits this tautology, and does not also degenerate into a logic with constant domains, should be designed. We shall come back to this example later in Section 3. Additionally, the existence predicate poses a problem when proving conservativity over first-order intuitionistic logic that does not feature this predicate. We overcome this remaining hurdle by enriching sequents with an explicit variable context, which can be seen as essentially encoding the existence predicate, while avoiding introducing it explicitly in the language of formulae.
The proof systems for and are both formalized using polytree sequents [5], which are connected binary graphs whose vertices are traditional Gentzen sequents and which are free of (un)directed cycles. Polytree sequents are a restriction of traditional labeled sequents [37, 41] and are notational variants of nested sequents [3, 18, 2]. (NB. For details on the relationship between polytree and nested sequents, see [5].) Nested sequents were introduced independently by Bull [3] and Kashima [18] and employ trees of Gentzen sequents in proofs. Both polytree sequents and nested sequents allow for simple formulations of proof systems for various non-classical logics that enjoy important proof theoretical properties such as cut-elimination and subformula properties. Such systems have also found a range of applications, being used in knowledge integration algorithms [24], serving as a basis for constructive interpolation and decidability techniques [21, 25, 40], and even being used to solve open questions about axiomatizability [17]. We make use of polytree sequents in our work as they admit a formula interpretation (at least in the intuitionistic case), which can be leveraged for direct translations of proofs into sequent calculus or Hilbert calculus proofs.
The calculi for and are based on these richly structured sequents, which internalize the existence predicate into syntactic components, called domain atoms, present in each node of the sequent. The rich structure of these sequents is exploited by special rules within our calculi called reachability rules, which traverse paths in a polytree sequent, propagating and/or consuming data. We demonstrate that our calculi enjoy the height-preserving invertibility of every rule, and show that a wide range of novel and useful structural rules are height-preserving admissible, culminating in a non-trivial proof of cut-elimination.
Outline of Paper.
In Section 2, we define a semantics for first-order bi-intuitionistic logic with increasing domains and constant domains . In Section 3, we define our polytree sequent calculi showing them sound and complete relative to the provided semantics. In Section 4, we establish admissibility and invertibility results as well as prove a non-trivial cut-elimination theorem. We conclude and discuss future work in Section 5. Due to space constraints, most proofs have been deferred to the online appended version [26].
2 Logical Preliminaries
In this section, we introduce the language, models, and semantics for first-order bi-intuitionistic logic with increasing domains, dubbed , and with constant domains, dubbed . Let be a countably infinite set of variables and be a countably infinite set of function symbols containing countably many function symbols of each arity . We let denote that the arity of the function symbol is and let denote constants, which are function symbols of arity . For a set , we define the set of -terms to be the smallest set satisfying the following two constraints: (1) , and (2) if , is of arity , and , then . The complete set of terms is defined to be . We use , , (potentially annotated) to denote (-)terms and let denote the set of variables occurring in the term . We will often write a list of terms as , and define .
We let be a countably infinite set of predicates containing countably many predicates of each arity . We denote the arity of a predicate as and refer to predicates of arity as propositional atoms. An atomic formula is a formula of the form , obtained by prefixing a predicate of arity to a tuple of terms of length . We will often write atomic formulae as .
Definition 1 (The Language ).
The language is defined to be the set of formulae generated via the following grammar in Backus-Naur form:
where ranges over , the terms range over , and ranges over the set . We use , , , to denote formulae.
The occurrence of a variable in is defined to be free given that does not occur within the scope of a quantifier binding . We let denote the set of all free variables occurring in the formula and use to denote that . We let denote the formula obtained by replacing each free occurrence of the variable in by , potentially renaming bound variables to avoid unwanted variable capture; e.g. . The complexity of a formula , written , is recursively defined as follows: (1) , (2) for , and (3) for .
Following [32], we give a Kripke-style semantics for , defining the models used first, and explaining how formulae are evaluated over them second.
Definition 2 (-Frame).
An -frame (or, frame) is a tuple such that:
-
is a non-empty set of worlds;
-
is a reflexive and transitive binary relation;
-
is a non-empty set referred to as the universe;
-
is a domain function mapping each to a non-empty set with , which satisfies the increasing domain condition: If , then .
Definition 3 (-Model).
We define an -Model (or, model) to be an ordered triple such that:
-
is a frame;
-
is a function interpreting each function symbol such that by a function , satisfying two conditions: For each and constant , , and For each , iff .
-
is a function interpreting, in each , each predicate such that by a set , satisfying the following monotonicity condition: If , then .
Definition 4 (-assignment).
Let be a model. We define an -assignment to be a function . We note is the function modified in such that and if . Given an -assignment , we define the interpretation of in given , denoted , inductively as follows: and .
Definition 5 (Semantics).
Let be a model with and an -assignment. The satisfaction relation is defined as follows:
-
iff ;
-
;
-
;
-
iff or ;
-
iff and ;
-
iff there exists a such that , , and ;
-
iff for all , if and , then ;
-
iff there exists an such that ;
-
iff for all and all , if , then .
For a set of formulae, we write iff for all models , -assignments , and worlds in , if for each , then . A formula is valid iff . Finally, we define the logic to be the set of all valid formulae.
Note that here we define logics as sets of formulae, and not consequence relations. While this is fit for our purpose, the reader should be warned that historical confusions emerged around this distinction in the case of propositional bi-intuitionistic logic [15, 36], notably pertaining to the deduction theorem.
Proposition 6.
Let be a model with an -assignment. For any , if and , then .
Remark 7.
We define a -model to be a model satisfying the constant domain condition: If , then . If we impose the condition on models, then first-order bi-intuitionistic logic with constant domains, dubbed , can be defined as the set of all valid formulae over the class of -models. In what follows, we let denote the class of -models and denote the class of -models.
Example 8.
Consider the formula , discussed in the introduction, but with the existence predicate removed. In the semantics with increasing domains, this formula is valid. To see this, suppose otherwise, i.e. that there exists a world where the formula is false. Thus, there is a successor such that and is true, for some assignment . The latter implies that for some such that , is true (i.e. ), but is false. The former implies that , so by the semantic clause for the quantifier, must be true – contradiction.
3 Polytree Sequent Systems
Let be a countably infinite set of labels. For a formula and label , we define to be a labeled formula. We use , , , to denote finite multisets of labeled formulae, and let denote a multiset of labeled formulae all labeled with . A relational atom is an expression of the form and a domain atom is an expression of the form , where and . Intuitively, the domain atom formalizes an existence predicate: can be interpreted as saying that the interpretation of exists at world . We use and (and annotated versions thereof) to denote finite multisets of, respectively, relational atoms and domain atoms. Also, we define with , define with , and let for . For multisets and of labeled formulae, relational atoms, and/or domain atoms, we let denote the multiset union of and , and denote the set of labels occurring in .
Definition 9 (Polytree Sequent).
We define a polytree sequent to be an expression of the form such that (1) if , then and if , then , and (2) forms a polytree, i.e. the graph such that and is connected and free of both directed and undirected cycles. We refer to as the antecedent and as the consequent of a polytree sequent. We will often refer to polytree sequents more simply as sequents.
We sometimes use , , , to denote sequents, and for , we define . A flat sequent is an expression of the form such that , i.e. all labeled formulae and domain atoms share the same label. Polytree sequents encode certain binary graphs whose nodes are flat sequents and such that if you ignore the orientation of the edges, the graph is a tree (cf. [5]). For example, the sequent
can be graphically depicted as the polytree , shown below:
Remark 10.
To simplify the proofs of our results in Section 4, we assume w.l.o.g. that sequents with isomorphic polytree representations are mutually derivable from one another.
3.1 Semantics and Proof Systems
The following definition specifies how to interpret sequents. In essence, we lift the semantics of to sequents by means of “-interpretations”, mapping sequents into models.
Definition 11 (Sequent Semantics).
Let be a model and an -assignment. We define an -interpretation to be a function mapping every label to a world . The satisfaction of multisets , , and are defined accordingly:
-
iff for all , ;
-
iff for all , ;
-
iff for all , .
We define a sequent to be satisfied on with and , written , iff if , and , as well as , then there exists a such that . We write when a sequent is not satisfied on with and . A sequent is defined to be valid iff for every model , every -interpretation , and every -assignment , we have ; otherwise, we say that is invalid and write .
Given a sequent , we define the term substitution to be the sequent obtained by replacing (1) every labeled formula in by and (2) by For example, if , then
where the bound variable in was renamed to to avoid capture. We now define two reachability relations and as well as the notion of availability [9, 22] – all of which are required to properly formulate certain inference rules in our calculi.
Definition 12 (, ).
Let be a finite multiset of relational atoms such that . We say that is strictly reachable from , written , iff there exist such that with . We say that is reachable from , written , iff or . We write if does not hold.
Definition 13 (Available).
Let be a sequent with . We define a term to be available for in , written , iff such that
Our polytree calculus for is shown in Figure 1. The , , and rules serve as initial rules, the domain shift rule encodes the fact that in any model. We define the principal formula in an inference rule to be the one explicitly mentioned in the conclusion, the auxiliary formulae to be the non-principal formulae explicitly mentioned in the premises, and an active formula to be either a principal or auxiliary formula. For example, is principal, is auxiliary, and both are active in . Note that all rules of our calculus preserve the property of being a polytree-structured sequent. We define a proof and its height as usual [39]. Two unique features of our calculi are the inclusion of reachability rules and the domain shift rule (), which we elaborate on next.
3.2 Reachability Rules
A unique feature of our calculi is the inclusion of reachability rules (introduced in [20]), a generalization of propagation rules (cf. [4, 8, 14]), which are not only permitted to propagate formulae throughout a polytree sequent when applied bottom-up, but may also check to see if data exists along certain paths. The rules , , , , and serve as our reachability rules. The side conditions of our reachability rules are listed at the bottom of Figure 1. Moreover, we define a label or a variable to be fresh in a rule application (as in the and rules) iff it does not occur in the conclusion of the rule.
Remark 14.
If we set := “”, := “ and ”, and remove the rule, then we obtain a polytree calculus, dubbed , for the constant domain version of the logic . We also note that in the constant domain setting, domain atoms are unnecessary and can be omitted from sequents.
To provide intuition, we give an example showing the operation of a reachability rule.
Example 15.
Let such that , , , and . A representation of as a polytree is shown below. We explain (in)valid applications of the reachability rule.
The term is available for in since , namely there is an edge from to , and since . Therefore, we may (top-down) apply the rule to delete and derive the sequent with .
By contrast, cannot be deleted via an application of because the term is not available for in (observe that is not reachable from ) meaning .
Remark 16.
We note that for any set , since all constants are contained in by definition. This means that bottom-up applications of and may instantiate existential and universal formulae with any constant.
The reachability rules , and are important to ensure completeness for both and The reachability rules for and are relevant only for to ensure that the domains in the model do not collapse into a constant domain. We illustrate the importance of these reachability rules with a couple of examples.
Example 17 (An Intuitionistic Formula Valid in Constant Domain Models).
Consider the intuitionistic formula . This formula was adapted from an example in [27], which was used to illustrate the difficulty of obtaining a sound and complete sequent system for intuitionistic logic with constant domains. A proof of this formula in is shown in Figure 2 and crucially relies on reachability rules. In the figure, the relational atoms in the instances of allow us to conclude that and , justifying the left and right instances of , respectively.
Example 18 (Non-Provability of the Quantifier Shift Axiom in the Increasing Domain Setting).
Let us consider again the quantifier shift axiom and an attempt to construct a proof (bottom-up) of one of its instances in .
It is obvious that to finish this proof, we would need to instantiate the quantifier in the labeled formula with by applying the rule. However, to do so, we would need to demonstrate that the world is reachable from where the domain atom resides. Yet, is not reachable from , so is not available at to be used by .
3.3 The Domain Shift Rule
Although the reachability rules for the quantifiers prevent the quantifier shift axiom from being proved, it turns out that they are not sufficient to ensure the completeness of with respect to the sequent semantics for the logic . Interestingly, this incompleteness only arises when the exclusion connective is involved – if one considers the intuitionistic fragment of , these reachability rules are sufficient to prove completeness (see Lemma 26 in Section 3.5). To see this incompleteness issue, consider the formula in Example 8, which is semantically valid, and the following attempt at a (bottom-up) construction of a proof:
We have so far applied only invertible rules, so the original sequent is provable iff the top sequent in the above derivation also is. To proceed with the proof construction, one needs to instantiate the existential quantifier with . However, the only domain atom containing is located at the world , which is not available to where the existential formula is located.
It is not so obvious how the reachability rules for quantifiers could be amended to allow this example to be proved. Looking at the above derivation, it might be tempting to augment the calculus with a rule that allows a backward reachability condition for domain atoms, e.g., making available to for when under certain admissibility conditions, but this could easily lead to a collapse of the domains if one is not careful. Instead, our approach here is motivated by the semantic clause for predicates: when holds in a world, its interpretation requires that is also defined in that world. Proof theoretically, we could think of this as postulating an axiom such as where is an existence predicate (which, as we recall, was behind the semantics of the domain atoms). Translated into our calculus, this gives us the rule as shown in Figure 1. Using the rule, the above derivation can now be completed to a proof:
Note that the rule can only be applied to atomic predicates, but not arbitrary formulae, which rules out unsound instances. It may be possible to relax the restriction to atomic predicates by imposing some positivity conditions on the occurrences of , but we did not find this necessary – neither for completeness, nor for cut-elimination.
Remark 19.
The rule can be removed without affecting the cut-elimination result for . This raises the possibility of defining a first-order bi-intuitionistic logic strictly weaker than . It is unclear what the semantics for such a logic would look like.
3.4 Soundness and Completeness
Theorem 20 (Soundness).
Let be a sequent. If is provable in (), then is (-)valid.
Proof.
By induction on the height of the given proof; see Appendix A for details.
The completeness of our polytree calculi (see Theorem 22 below) is shown by taking a sequent of the form as input and showing that if the sequent is not provable, then the calculus can be used to construct an infinite derivation from which a counter-model of the end sequent can be extracted. We note that completeness only holds relative to sequents of the form , which includes a domain atom for each free variable in . This restriction is needed because quantifier rules can only (bottom-up) instantiate quantified formulae with the free variables of if such free variables occur as domain atoms, and such free variables must be accessible to quantifier rules to properly extract a counter-model of the end sequent (see [23] for a relevant discussion).
Below, we outline the cut-free completeness proof for as the proof for is similar; the complete proof can be found in the online, appended version [26]. Our proof outline makes use of various new notions, which we now define. A pseudo-derivation is defined to be a (potentially infinite) tree whose nodes are sequents and where every parent node corresponds to the conclusion of a rule in with the children nodes corresponding to the premises. We remark that a proof in is a finite pseudo-derivation where all top sequents are instances of , , or . A branch is defined to be a maximal path of sequents through a pseudo-derivation, starting from the conclusion. The following lemma is useful in proving completeness.
Lemma 21.
Let . For each , let be a sequent.
-
1.
If holds for the conclusion of a rule in , then holds for the premises of ;
-
2.
If and is the conclusion of a rule in with (and ) the premise(s) of , then (and , resp.);
-
3.
If and is the conclusion of a rule in with (and ) the premise(s) of , then (and , resp.).
The lemma tells us that propagation paths, the position of atomic formulae, and the position of terms are bottom-up preserved in rule applications.
Theorem 22 (Completeness).
If is (-)valid, then is provable in ().
Proof (Outline).
We assume that is not provable in and show that a model can be defined which witnesses that is invalid. To prove this, we first define a proof-search procedure that bottom-up applies rules from to . Second, we show how a model can be extracted from failed proof-search. We now describe the proof-search procedure and let be a well-founded, strict linear order over the set of terms.
.
Let us take as input and continue to the next step. We show some key steps; the complete procedure can be found in the online appended version [26].
, , and .
Suppose are all branches occurring in the current pseudo-derivation and let be the top sequents of each respective branch. For each , we halt the computation of on each branch where is of the form , , or . If is halted on each branch , then returns because a proof of the input has been constructed. However, if did not halt on each branch with , then let be the remaining branches for which did not halt. For each such branch, copy the top sequent above itself, and continue to the next step.
.
Suppose are all branches occurring in the current pseudo-derivation and let be the top sequents of each respective branch. For each , we consider and extend the branch with bottom-up applications of rules. Let be the current branch under consideration, and assume that have already been considered. We assume that the top sequent in is of the form
where all atomic input formulae are displayed in above. We successively consider each atomic input formula and bottom-up apply , yielding a branch extending with a top sequent saturated under applications. After these operations have been performed for each branch with , we continue to the next step.
.
Suppose are all branches occurring in the current pseudo-derivation and let be the top sequents of each respective branch. For each , we consider and extend the branch with bottom-up applications of rules. Let be the current branch under consideration, and assume that have already been considered. We assume that the top sequent in is of the form
where all existential input formulae are displayed in above. We consider each formula in turn, and bottom-up apply the rule. These rule applications extend such that
is now the top sequent of the branch with fresh variables and . After these operations have been performed for each branch with , we continue to the next step.
.
Suppose are all branches occurring in the current pseudo-derivation and let be the top sequents of each respective branch. For each , we consider and extend the branch with bottom-up applications of rules. Let be the current branch under consideration, and assume that have already been considered. We assume that the top sequent in is of the form
where all existential formulae are displayed in above. We consider each labeled formula in turn, and bottom-up apply the rule. Let be the current formula under consideration, and assume that have already been considered. Recall that is a well-founded, strict linear order over the set of terms. Choose the -minimal term that has yet to be picked to instantiate and bottom-up apply the rule, thus adding . We perform these operations for each branch with .
The remaining rules of are processed in a similar fashion. The procedure will saturate open branches of the pseudo-derivation that is under construction by repeatedly (bottom-up) applying rules from in a roundabout fashion.
Next, we aim to show that if does not return , then a model , -interpretation , and -assignment can be defined such that . If halts, i.e. returns , then a proof of may be obtained by “contracting” all redundant inferences from the “, , and ” step of . Therefore, in this case, since a proof exists, we have obtained a contradiction to our assumption. As a consequence, we have that does not halt, that is, generates an infinite tree with finite branching. By König’s lemma, an infinite branch must exist in this infinite tree, which we denote by . We define a model by means of this branch as follows: Let us define the following sets, all of which are obtained by taking the union of each multiset of relational atoms, domain atoms, antecedent labeled formulae, and consequent labeled formulae (resp.) occurring within a sequent in :
We now define: (1) iff , (2) where denotes the reflexive-transitive closure, (3) iff there exists a label such that , (4) iff , and (5) iff , , and .
It can be shown that is indeed a model. Let us define to be the -assignment mapping every variable in to itself and every variable in arbitrarily. To finish the proof of completeness, we now argue the following by mutual induction on the complexity of the formula : (1) if , then , and (2) if , then . Let to be the -interpretation such that for and for . By the proof above, , showing that if a sequent of the form is not provable in , then it is invalid, that is, every valid sequent of the form is provable in .
Remark 23.
We remark that cut admissibility follows from the soundness of the rule (see Figure 3) and the completeness theorem above. However, this method of proof has two downsides: first, the restriction in the completeness theorem above implies that cut admissibility only holds for proofs with an end sequent of the form . Second, this (semantic) method of proof does not define an algorithm showing how instances of can be permuted upward and eliminated from a given proof. In Section 4, we will prove that cut admissibility holds for all proofs and will provide such an algorithm (see Theorem 30).
3.5 Intuitionistic Subsystems
We end this section by discussing two subsystems of and arising from restricting the connectives to the intuitionistic fragment. In the former case, we obtain a proof system for the usual first-order intuitionistic logic (with non-constant domains) , and in the latter, we obtain a proof system for intuitionistic logic with constant domains .
Corollary 24 (Conservativity).
Let be an intuitionistic formula (i.e. a formula with no occurrences of ). Then, is valid in () iff is provable in (respectively, ).
The proof of Corollary 24 is straightforward from Definition 11. We show here a stronger proof-theoretic conservativity result: we can in fact extract a purely intuitionistic fragment out of , where every sequent in the fragment is interpretable in the semantics without the existence predicate. We prove this via syntactic means, by showing how we can translate intuitionistic proofs in to proofs in Gentzen’s [11, 12]. A key idea is to first define a formula interpretation of a polytree sequent, and then show that every inference rule corresponds to a valid implication in . We start by defining a notion of intuitionistic (polytree) sequent.
Definition 25.
A sequent is an intuitionistic sequent iff is a tree rooted at node such that
-
every formula in is an intuitionistic formula (i.e. it contains no occurrences of ),
-
for every labeled formula in and variable , is available for , and
-
if and are in , then
By we denote the restriction to intuitionistic sequents of the proof system without the rule. The next lemma states an important property of , called the separation property, which was first discussed in the context of tense logics [14].
Lemma 26 (Separation).
An intuitionistic sequent is provable in iff it is provable in
Proof (Outline).
One direction, from to is trivial. For the other direction, suppose is a proof of in By induction on the structure of , it can be shown that there is a proof in in which every sequent in is almost intuitionistic – it satisfies all the requirements in Definition 25 except possibly the last condition (due to the possible use of the rule). Then, from we can construct another proof of that does not use , by showing that one can always permute the rule up until it disappears. Since all the rules of , other than , preserve the property of being an intuitionistic sequent, it then follows that is a proof in
To translate a proof in to , we need to interpret a polytree sequent as a formula. This turns out to be somewhat problematic, due to the difficulty in interpreting the scopes of domain atoms, when interpreting them as universally quantified variables. Fortunately, in the case of intuitionistic sequents, the scopes of such variables follow a straightforward lexical scoping (i.e. their scopes are over formulae in the subtrees). To define the translation, we first relax the requirement on the domain atoms in intuitionistic sequents: a quasi-intuitionistic sequent is defined as in Definition 25, except that in the second clause, is either available for , or it does not occur in . Obviously an intutionistic sequent is also a quasi-intuitionistic sequent. Given a quasi-intuitionistic sequent and a label , we write to denote the quasi-intuitionistic sub-sequent of that is rooted in , i.e. the sequent obtained from by removing any relational atoms, domain atoms, and labeled formulae that mention a world not reachable from Given a multiset of labeled formulae , we denote with the labeled formulae in that are labeled with .
Definition 27.
Let be a quasi-intuitionistic sequent. We define its formula interpretation recursively on the height of the sequent tree and suppose is rooted at .
-
If is a flat sequent, then where are all the variables in ;
-
otherwise, if has successors , then
The following proof-theoretic conservativity result can then be proved using a standard translation technique for relating nested sequents and traditional Gentzen sequent calculi [6].
Proposition 28.
Let be an intuitionistic sequent. is provable in iff is provable in .
Proof (Outline).
The proof is tedious, but not difficult and follows a general strategy to translate nested sequent proofs (which, recall, are notational variants of polytree sequent proofs) to traditional sequent proofs (with cuts) from the literature, see e.g., the translation from nested sequent to traditional sequent proofs for full intuitionistic linear logic [6]. For every inference rule in of the form:
we show that the formula is provable in . Then, given any proof in , we simulate every inference step with its corresponding implication, followed by a cut.
As far as we know, for intuitionistic logic with constant domains , there is no formalization in the traditional Gentzen sequent calculus that admits cut-elimination. There is, however, a formalization in prefixed tableaux by Fitting [9], which happens to be a syntactic variant of the intuitionistic fragment of (shown in [19]).
4 Cut-Elimination
In this section, we show that and satisfy a sizable number of favorable properties culminating in syntactic cut-elimination. We explain here some key steps; the full details are available in the online appended version [26].
and can be seen as first-order extensions of Postniece’s deep-nested sequent calculus for bi-intuitionistic logic [31, 13]. Cut-elimination for [13] was proven in two stages. First, cut-elimination was proven for a “shallow” version of the nested sequent calculus , which can be seen as a variant of a display calculus [1]. The cut-elimination proof for this shallow calculus follows from Belnap’s generic cut-elimination for display calculi [1]. Second, cut-free proofs in the shallow calculus are shown to be translatable to proofs in the deep-nested calculus. We do not have the corresponding shallow versions of and , so we cannot rely on Belnap’s generic cut-elimination. It may be possible to define shallow versions of our calculi, and then follow the same methodology outlined in [13] to prove cut-elimination, but we find that a direct cut-elimination proof is simpler, e.g., it avoids the need for proving the admissibility of certain structural rules called the display postulates [1], which lets one transition from shallow to deep inference systems.
Since our polytree sequents are a restriction of ordinary labeled sequents, another possible approach to cut-elimination is to apply the methodology for labeled sequent calculi [28]. A main issue in adapting this methodology is ensuring that the proof transformations needed in cut-elimination preserve the polytree structure of sequents. A key proof transformation in a typical cut-elimination proof for labeled calculi is label substitution: given a proof and labels and , one constructs another proof by replacing with everywhere in and adjusts the inference rules accordingly. This is typically needed in the reduction of a cut where the last rules in both branches of the cut apply to the cut formula, and where one of the rules introduces (reading the rule bottom up) a new label and a new relational atom (e.g., ). Such a substitution operation may not preserve polytree structures. Another notable difference between our calculi and traditional labeled calculi is the absence of structural rules manipulating relational atoms. These differences mean that cut-elimination techniques for labeled sequent calculi cannot be immediately applied in our setting.
Instead, our cut-elimination proof builds on an approach by Pinto and Uustalu [29, 30], which deals with a polytree sequent calculus for propositional bi-intuitionistic logic. We thus provide a series of proof transformations, culminating in the elimination of cuts, which shares similarities with their work in the propositional case and expands in the first-order direction. These transformations are captured in proofs of the admissibility of rules shown in Figure 3. We illustrate some key transformations and why they are needed, through an example of a cut where and are applied to the cut formula. The formal details are available in the proof of Theorem 30.
Suppose we have the instance of cut shown below left, where is shown below right and is shown below bottom with
A typical cut reduction strategy would be to cut with and (both with cut formula ), producing the proofs and of and , respectively. Next, one would cut with (with cut formula ), producing a proof , and then cut with (with cut formula ). There are a couple of issues with this strategy: (1) the cut formulae in the last two instances of cut have mismatched labels, i.e., on one side and on the other ; (2) the label and the relational atom are not present in the conclusions of and , so the contexts of the premises of the cuts do not match.
To fix these issues, we first need to transform the proof into two proofs and , shown below left and right, respectively. As shown in the cut-elimination proof, a transformation that we use in this case is one that is represented by the rule . This ensures that the contexts match the contexts of the concluding sequents in and .
We then cut and with and , respectively, which yields proofs and of and , respectively. At this stage, we want to cut with , and then cut the resulting proof with . However, this cut cannot be performed until the label and its associated relational atom are removed from the conclusion of . Simply substituting for may break the polytree shape of the sequent, e.g., if there is a such that and are in , then replacing for in would break the polytree shape of the sequent. So the relational atoms in the sequent also need to be modified. A transformation that we use in this case is represented by the rule , which shifts the relational atom “forward” from to given that . We also need another transformation to “merge” the label with the label , deleting the relational atom in the process, represented as the rule.
If we cut the above proof with , we obtain a proof of Here we gloss over the termination arguments, but the details are available in the proof of Theorem 30.
The above example illustrates one among several proof transformations needed in cut-elimination. These transformations make use of the auxiliary rules in Figure 3. The bulk of the cut-elimination proof consists of showing these rules (height-preserving/hp-) admissible and the rules of and height-preserving invertible (i.e., hp-invertible). (NB. We take the notions of (hp-)admissibility and (hp-)invertibility to be defined as usual.) All (hp-)admissible rules preserve the polytree structure of sequents, and with the exception of , , and , all rules in Figure 3 are hp-admissible in both calculi. The and rules are strictly admissible in both calculi, while is hp-admissible in only as the availability conditions are not imposed on rules, rendering domain atoms unnecessary (see Remark 14). We now discuss some of the most interesting rules of Figure 3.
Let us first explain the rules and . For some labels , , and , assume and for . Then, we know that (1) and are on two different paths passing through of the polytree generated from , and (2) there is no vertex between and since otherwise a cycle would be present in . In this scenario, the rule (for branch forward) allows one to move the polytree “rooted” at forward by connecting it to instead of as shown left in the below figure. The rule has a similar functionality; for some labels , , and , assume and for . Then, the rule (for branch backward) lets one move the polytree “rooted” at backward by connecting it to instead of as shown right in the below figure.
The rule merges a label and its direct successor and corresponds to the rules and of Pinto and Uustalu [29]. The rule reflects the redundancy of a variable labeled by two labels such that one is reachable by the other. Model-theoretically, this redundancy follows from the fact that if is interpreted at , and is reachable from (in a model), then is interpreted at as well, showing the domain atom superfluous in the premise. Note that when the labels and are identical, then the rule represents a contraction on domain atoms; as always holds, we have that identical domain atoms can always be contracted in sequents. The rules and allow us to modify the labels of formulae in a sequent by looking at its underlying polytree. More precisely, reading and bottom-up, if we can both lower the label of on the right of the sequent to , and lift the label of on the left of the sequent to .
Lemma 29.
All non-initial rules in are hp-invertible.
Finally, we can prove the admissibility of the rule. As our proof proceeds via local transformations of proofs, the proof is constructive and yields a cut-elimination algorithm.
Theorem 30 (Cut-elimination).
The rule is admissible in .
Proof.
We proceed by a primary induction (PIH) on the complexity of the cut formula, and a secondary induction (SIH) on the sum of the heights of the proofs of the premises of . Assume that we have proofs of the following form, with .
We argue that there is a proof of by a case distinction on and , the last rules applied in the above proofs. We focus on some interesting cases; the remaining cases can be found in the online appended version [26].
.
Then is of the form where . If is , then we have that is of the form where . Given that and , we can apply the hp-admissibility of on the latter to obtain a proof of . Consequently, we obtain a proof of , i.e. of , using the hp-admissibility of . If is not , then we have that is of the form where . The latter is provable by the admissibility of .
.
Then is of the form and we have a proof of . Consequently, we know that is of the form . We also have that is of the form . We can repeatedly apply the hp-admissibility of on the proof of the latter to obtain a proof of . Then, we proceed as follows:
Note that the instance of SIH is justified because the sum of the heights of the proofs of the premises has decreased.
.
Then is of the form and we a have proof of . Consequently, we know that is of the form . We also have that is of the form . We apply Lemma 29 on the proof of the latter sequent to obtain a proof of , which we call . Thus, we proceed as shown below. Note that the instance of SIH is justified as the sum of the heights of the proofs of the premises is smaller than that of the original cut.
.
Then there are two cases to consider: in the left premise of , either (1) is not the principal formula , or (2) is the principal formula. In case (1), we have a proof of , which we call , and is of the form . We proceed as follows.
In case (2), we have proof a of , and is of the form . In this case, we need to consider the shape of . If is not principal in , then we apply the hp-invertibility of (Lemma 29) to the left premise of and use SIH to cut the result with the premise of , applying afterward to reach our goal. If is principal in , then the premise of is of the shape where is fresh. Then, we proceed as follows where is the first proof given and are all the variables appearing in .
Note that the step involving is justified as is available for , meaning for each , there exists a domain atom such that , showing applicable.
5 Concluding Remarks
Our analysis indicates that there may be two interesting and possibly distinct first-order extensions of bi-intuitionistic logic that may be worth exploring. The first is to consider a logic with decreasing domains, i.e., if then in the Kripke model. Semantically, this logic is easy to define, but its proof theory is not at all obvious. We are looking into the possibility of formalizing a notion of “non-existence predicate,” which is dual to the existence predicate, suggested by Restall [34]. This non-existence predicate may play a similar (but dual) role to the existence predicate in The other extension is motivated from a proof-theoretic perspective. As mentioned in Remark 19, it seems that one can obtain a subsystem of without the domain-shift rule that satisfies cut-elimination. As discussed in Section 3, the rule is crucial to ensure the completeness of in the presence of the exclusion operator, and so, a natural question to ask is what the semantics of such a logic would look like.
References
- [1] Nuel D. Belnap. Display logic. Journal of philosophical logic, 11(4):375–417, 1982. doi:10.1007/BF00284976.
- [2] Kai Brünnler. Deep sequent systems for modal logic. Archive for Mathematical Logic, 48(6):551–577, 2009. doi:10.1007/s00153-009-0137-3.
- [3] Robert A. Bull. Cut elimination for propositional dynamic logic without *. Zeitschrift für Mathematische Logik und Grundlagen der Mathematik, 38(2):85–100, 1992. doi:10.1002/MALQ.19920380107.
- [4] Marcos A. Castilho, Luis Farinas del Cerro, Olivier Gasquet, and Andreas Herzig. Modal tableaux with propagation rules and structural rules. Fundamenta Informaticae, 32(3, 4):281–297, 1997. doi:10.3233/FI-1997-323404.
- [5] Agata Ciabattoni, Tim Lyon, Revantha Ramanayake, and Alwen Tiu. Display to labelled proofs and back again for tense logics. ACM Transactions on Computational Logic, 22(3):1–31, 2021. doi:10.1145/3460492.
- [6] Ranald Clouston, Jeremy E. Dawson, Rajeev Goré, and Alwen Tiu. Annotation-free sequent calculi for full intuitionistic linear logic - extended version. CoRR, abs/1307.0289, 2013. arXiv:1307.0289.
- [7] Tristan Crolard. A formulae-as-types interpretation of subtractive logic. Journal of Logic and Computation, 14(4):529–570, 2004. doi:10.1093/logcom/14.4.529.
- [8] Melvin Fitting. Tableau methods of proof for modal logics. Notre Dame Journal of Formal Logic, 13(2):237–247, 1972. doi:10.1305/NDJFL/1093894722.
- [9] Melvin Fitting. Nested sequents for intuitionistic logics. Notre Dame Journal of Formal Logic, 55(1):41–61, 2014. doi:10.1215/00294527-2377869.
- [10] D. Gabbay, V. Shehtman, and D. Skvortsov. Quantification in Non-classical Logics. Studies in Logic and Foundations of Mathematics. Elsevier, Amsterdam, London, 2009.
- [11] Gerhard Gentzen. Untersuchungen über das logische Schließen. I. Mathematische Zeitschrift, 39(1):176–210, 1935.
- [12] Gerhard Gentzen. Untersuchungen über das logische Schließen. II. Mathematische Zeitschrift, 39(1):405–431, 1935.
- [13] Rajeev Goré, Linda Postniece, and Alwen Tiu. Cut-elimination and proof-search for bi-intuitionistic logic using nested sequents. In Carlos Areces and Robert Goldblatt, editors, Advances in Modal Logic 7, pages 43–66, Nancy, France, 2008. College Publications. URL: http://www.aiml.net/volumes/volume7/Gore-Postniece-Tiu.pdf.
- [14] Rajeev Goré, Linda Postniece, and Alwen Tiu. On the correspondence between display postulates and deep inference in nested sequent calculi for tense logics. Logical Methods in Computer Science, 7(2):1–38, 2011. doi:10.2168/LMCS-7(2:8)2011.
- [15] Rajeev Goré and Ian Shillito. Bi-intuitionistic logics: A new instance of an old problem. In Advances in Modal Logic 13, pages 269–288, Helsinki, Finland, 2020. College Publications. URL: http://www.aiml.net/volumes/volume13/Gore-Shillito.pdf.
- [16] Andrzej Grzegorczyk. A philosophically plausible formal interpretation of intuitionistic logic. Indagationes Mathematicae, 26(5):596–601, 1964.
- [17] Ryo Ishigaki and Kentaro Kikuchi. Tree-sequent methods for subintuitionistic predicate logics. In Nicola Olivetti, editor, Automated Reasoning with Analytic Tableaux and Related Methods, volume 4548 of Lecture Notes in Computer Science, pages 149–164, Berlin, Heidelberg, 2007. Springer Berlin Heidelberg. doi:10.1007/978-3-540-73099-6_13.
- [18] Ryo Kashima. Cut-free sequent calculi for some tense logics. Studia Logica, 53(1):119–135, 1994. doi:10.1007/BF01053026.
- [19] Tim Lyon. On the correspondence between nested calculi and semantic systems for intuitionistic logics. Journal of Logic and Computation, 31(1):213–265, December 2020. doi:10.1093/logcom/exaa078.
- [20] Tim Lyon. Refining Labelled Systems for Modal and Constructive Logics with Applications. PhD thesis, Technische Universität Wien, 2021.
- [21] Tim Lyon, Alwen Tiu, Rajeev Goré, and Ranald Clouston. Syntactic interpolation for tense logics and bi-intuitionistic logic via nested sequents. In Maribel Fernández and Anca Muscholl, editors, 28th EACSL Annual Conference on Computer Science Logic, volume 152 of LIPIcs, pages 28:1–28:16. Schloss Dagstuhl – Leibniz-Zentrum für Informatik, 2020. doi:10.4230/LIPIcs.CSL.2020.28.
- [22] Tim S. Lyon. Nested sequents for intermediate logics: the case of Gödel-Dummett logics. Journal of Applied Non-Classical Logics, 33(2):121–164, 2023. doi:10.1080/11663081.2023.2233346.
- [23] Tim S. Lyon. Nested sequents for intermediate logics: The case of Gödel-Dummett logics, 2024. Updated version, on arXiv. URL: https://arxiv.org/abs/2306.07550, doi:10.48550/arXiv.2306.07550.
- [24] Tim S. Lyon and Lucía Gómez Álvarez. Automating reasoning with standpoint logic via nested sequents. In Proceedings of the 19th International Conference on Principles of Knowledge Representation and Reasoning, pages 257–266, August 2022. doi:10.24963/kr.2022/26.
- [25] Tim S. Lyon and Jonas Karge. Constructive interpolation and concept-based beth definability for description logics via sequents. In Kate Larson, editor, Proceedings of the Thirty-Third International Joint Conference on Artificial Intelligence, IJCAI-24, pages 3484–3492. International Joint Conferences on Artificial Intelligence Organization, August 2024. Main Track. URL: https://www.ijcai.org/proceedings/2024/386, doi:10.24963/ijcai.2024/386.
- [26] Tim S. Lyon, Ian Shillito, and Alwen Tiu. Taking bi-intuitionistic logic first-order: A proof-theoretic investigation via polytree sequents, 2024. Appended version on arXiv. URL: https://arxiv.org/abs/2404.15855, doi:10.48550/arXiv.2404.15855.
- [27] E. G. K. López-Escobar. On the interpolation theorem for the logic of constant domains. Journal of Symbolic Logic, 46(1):87–88, 1981. doi:10.2307/2273260.
- [28] Sara Negri. Proof analysis in modal logic. Journal of Philosophical Logic, 34(5-6):507, 2005.
- [29] Luís Pinto and Tarmo Uustalu. Relating sequent calculi for bi-intuitionistic propositional logic. In Steffen van Bakel, Stefano Berardi, and Ulrich Berger, editors, Proceedings Third International Workshop on Classical Logic and Computation, volume 47 of EPTCS, pages 57–72, 2010. doi:10.4204/EPTCS.47.7.
- [30] Luís Pinto and Tarmo Uustalu. A proof-theoretic study of bi-intuitionistic propositional sequent calculus. Journal of Logic and Computation, 28(1):165–202, 2018. doi:10.1093/LOGCOM/EXX044.
- [31] Linda Postniece. Deep inference in bi-intuitionistic logic. In Hiroakira Ono, Makoto Kanazawa, and Ruy de Queiroz, editors, Logic, Language, Information and Computation, pages 320–334, Berlin, Heidelberg, 2009. Springer Berlin Heidelberg. doi:10.1007/978-3-642-02261-6_26.
- [32] Cecylia Rauszer. Applications of Kripke models to Heyting-Brouwer logic. Studia Logica, 36(1):61–71, 1977. doi:10.1007/BF02121115.
- [33] Cecylia Rauszer. An algebraic and Kripke-style approach to a certain extension of intuitionistic logic, dissertations mathematicae, 1980.
- [34] Greg Restall. Constant domain quantified modal logics without boolean negation. Australasian Journal of Logic, 3:45–62, 2005. doi:10.26686/ajl.v3i0.1772.
- [35] Dana Scott. Identity and existence in intuitionistic logic. In Applications of Sheaves: Proceedings of the Research Symposium on Applications of Sheaf Theory to Logic, Algebra, and Analysis, Durham, July 9–21, 1977, pages 660–696. Springer, 2006.
- [36] Ian Shillito. New Foundations for the Proof Theory of Bi-Intuitionistic and Provability Logics Mechanized in Coq. PhD thesis, Australian National University, Canberra, 2023.
- [37] Alex K. Simpson. The Proof Theory and Semantics of Intuitionistic Modal Logic. PhD thesis, University of Edinburgh. College of Science and Engineering. School of Informatics, 1994.
- [38] John G. Stell, Renate A. Schmidt, and David Rydeheard. A bi-intuitionistic modal logic: Foundations and automation. Journal of Logical and Algebraic Methods in Programming, 85(4):500–519, 2016. Relational and algebraic methods in computer science. doi:10.1016/j.jlamp.2015.11.003.
- [39] Gaisi Takeuti. Proof theory, volume 81. Courier Corporation, 2013.
- [40] Alwen Tiu, Egor Ianovski, and Rajeev Goré. Grammar logics in nested sequent calculus: Proof theory and decision procedures. In Thomas Bolander, Torben Braüner, Silvio Ghilardi, and Lawrence S. Moss, editors, Advances in Modal Logic 9, pages 516–537. College Publications, 2012. URL: http://www.aiml.net/volumes/volume9/Tiu-Ianovski-Gore.pdf.
- [41] Luca Viganò. Labelled Non-Classical Logics. Springer Science & Business Media, 2000.
Appendix A Soundness
Theorem 20 (Soundness).
Let be a sequent. If is provable in (), then is (-)valid.
Proof.
We argue the claim by induction on the height of the given derivation and consider the case as the case is similar.
Base case.
It is straightforward to show that any instance of or is valid; hence, we focus on and show that any instance thereof is valid. Let us consider the following instance of , where due to the side condition imposed on , that is, there exist such that .
Let us suppose is invalid, i.e., a model , -interpretation , and -assignment exist such that the following hold: , , and . By the monotonicity condition (see Definition 3), it must be that , giving a contradiction. Thus, every instance of must be valid.
Inductive step.
We prove the inductive step by contraposition, showing that if the conclusion of the last inference in the given proof is invalid, then at least one premise of the final inference must be invalid. We make a case distinction based on the last rule applied in the given derivation.
- .
-
Suppose is invalid with . Then, there exists a model , -interpretation , and -assignment such that . Therefore, , and since , we have that for . By the and conditions, we know that . Therefore, is invalid as well.
- .
-
If we assume that is invalid, then there exists a model , -interpretation , and -assignment such that , implying that and , showing that the premise is invalid as well.
- .
-
Let us suppose that is invalid. Then, there exists an model , -interpretation , and -assignment such that . Hence, either or . In the first case, the left premise of is invalid, and in the second case, the right premise of is invalid.
- .
-
Similar to the case.
- .
-
Similar to the case.
- .
-
Assume is invalid and , i.e. a sequence of relational atoms exist in . By our assumption, there exists a model , -interpretation , and -assignment such that and . Because and is transitive, we know that either or . In the first case, the left premise of is invalid, and in the second case, the right premise of is invalid.
- .
-
Assume that is invalid. Then, there exists a model , an -interpretation , and an -assignment such that . Hence, there exists a world such that , , and . Let for all labels and otherwise. Then, , , and falsify the premise of , showing it invalid.
- .
-
Similar to the case above.
- .
-
Similar to the case above.
- .
-
Suppose that is invalid. Then, there exists a model , an -interpretation , and an -assignment such that . Therefore, there exists an such that with not occurring in . Then, as is fresh, , , and falsify the premise of , showing it invalid.
- .
-
Suppose that is invalid. Then, there exists a model , and -interpretation , and -assignment such that . By the side condition on , we know that , meaning there exist labels such that , , and . It follows that and . By the increasing domain condition , we have that . Therefore, by the and conditions, we know that , showing that , and thus, the premise is invalid.
- .
-
Suppose that is invalid. Then, there exists a model , and -interpretation , and -assignment such that . By the side condition on , we know that and . By the latter fact, there exist labels such that , , and . It follows that and . By the increasing domain condition , we have that . Therefore, by the and conditions and our assumption, we know that , showing that . By the fact that , we know and , showing that by Proposition 6. Thus, the premise is invalid.
- .
-
Let us assume that is invalid. Then, there exists a model , an -interpretation , and an -assignment such that . Thus, there exists a world such that , , and . We define if and . Then, , , and falsify the premise , showing it invalid.