Abstract 1 Introduction 2 Related Work 3 Preliminaries 4 Main Result 5 Structure of the Formal Proof of the Main Result 6 Conclusion References Appendix A Correspondence Between the Notions/Notation Used in the Paper and in the Supplementary Material Appendix B Instructions on Re-checking Formal Proofs

Completeness of the Decreasing Diagrams Method for Proving Confluence of Rewriting Systems of the Least Uncountable Cardinality

Ievgen Ivanov Taras Shevchenko National University of Kyiv, Ukraine
Abstract

We show that every confluent abstract rewriting system (ARS) of the cardinality that does not exceed the first uncountable cardinal belongs to the class DCR3, i.e. the class of confluent ARS for which confluence can be proved with the the help of the decreasing diagrams method using the set of labels {0,1,2} ordered in such a way that 0<1<2 (in the general case, the decreasing diagrams method with two labels is not sufficient for proving confluence of such ARS). Under the Continuum Hypothesis this result implies that the decreasing diagrams method is sufficient for establishing confluence of ARS on many structures of interest to applied mathematics and various interdisciplinary fields (confluence of ARS on real numbers, continuous real functions, etc.).

We provide a machine-checked formal proof of a formalized version of the main result in Isabelle proof assistant using HOL logic and the HOL-Cardinals theory. An extended version of this formalization is available in the Archive of Formal Proofs.

Keywords and phrases:
confluence, decreasing diagrams method, rewriting systems, reduction, formal methods, formal proofs, formal verification, non-discrete models, nondeterministic models, interval models
Copyright and License:
[Uncaptioned image] © Ievgen Ivanov; licensed under Creative Commons License CC-BY 4.0
2012 ACM Subject Classification:
Theory of computation Equational logic and rewriting
; Theory of computation Logic and verification
Supplementary Material:
Text: https://doi.org/10.5281/zenodo.14254256 [17]
Editors:
Maribel Fernández

1 Introduction

Van Oostrom’s decreasing diagrams method [41, 40] is one of the most versatile known approaches to proving confluence of abstract rewriting systems (ARS). An overview of the history of this method and its relation to De Bruijn’s work [6] on weak diamond properties can be found in [8, Section 1], information on modified versions of this method (e.g. conversion version) can be found in [42, 4, 45], application examples can be found in [40, 13].

To show that an ARS is confluent using the decreasing diagrams method, one has to choose a set of labels L and a well-founded partial order on L, and construct a labeled version of an ARS (that associates labels with reduction steps) that satisfies a condition reminiscent to local confluence, but with certain constraints on how labels of the reduction steps used in this condition are related by . A theorem [40, Theorem 3.7] by V. van Oostrom implies that when a labeled version of an ARS that satisfies the mentioned condition exists, the original ARS is confluent.

Semi-formally, the class of decreasing Church-Rosser (DCR) ARS is the collection of all confluent ARS for which confluence can be proved with the help of the decreasing diagrams method (note that here the words “can be proved“ mean that “there exists a labeled version of an ARS that satisfies the conditions of [40, Theorem 3.7]”). In the work [9] J. Endrullis, J.W. Klop, R. Overbeek introduced a representation of the class of DCR ARS as the union of ordinal-indexed classes DCRα, where (semi-formally) for each ordinal α, DCRα is the class of confluent ARS for which confluence can be proved with the help of the decreasing diagrams method using a fixed set of labels L={β|β<α} (ordinals less than α) and a fixed well-founded order on this set that is a restriction of the usual order on ordinals to L. For these classes the following inclusions hold:

DCR0DCR1DCR2DCR3

The statement that “all ARS in the class DCR are confluent” is usually called the statement about soundness of the decreasing diagrams method, while a statement of the form “all confluent ARS with a given property P belong to the class DCR” (or belong to DCRα for some α) is called the statement about completeness of the decreasing diagrams method for proving confluence of ARS with the property P (note that completeness does not mean that confluence can always be checked in practice for concrete rewriting systems).

In [45, 46] it was formally proved using a proof assistant that the decreasing diagrams method is sound. However, the works [45, 46] do not deal with completeness of this method (methods for proving soundness and completeness are different and, generally, one cannot use soundness proof to establish completeness).

In [9] it was shown that every ARS with the cofinality property [24, 9] belongs to DCR2. It was previously known [24, 9] that countable confluent ARS have the cofinality property, so in [9] it was established that all countable confluent ARS belong to DCR2, i.e. the decreasing diagrams method with 2 labels is complete for proving confluence of countable ARS. However, it is also known [9, p. 14, footnote 3] that uncountable confluent ARS can lack the cofinality property. This motivates study of the capabilities of the decreasing diagrams method for proving confluence of ARS that may lack the cofinality property.

In this paper we propose a machine-checked formal proof in Isabelle/HOL [34, 44] proof assistant that establishes that every confluent ARS (A,) such that the cardinality of the reduction relation does not exceed the first uncountable cardinal 1 belongs to the class DCR3, i.e. confluence of (A,) can be proved with the help of the decreasing diagrams method using a fixed set of labels L={0,1,2} ordered in such a way that 0<1<2. To the best of our knowledge, this has not been proved before informally or formally, so our formal proof is not a formalization of a previously known non-formalized proof.

This result can be transferred from Higher-Order Logic (HOL) to a more widely known Zermelo-Fraenkel set theory with the Axiom of Choice (ZFC) [11]. If one additionally accepts the Continuum Hypothesis [36] (that is known to be independent of ZFC, if ZFC is consistent), from the main result of this paper it follows that the decreasing diagrams method is complete for proving confluence of ARS of the cardinality of the continuum, and thus this method covers confluence problems on many mathematical structures used in various interdisciplinary fields that involve applied mathematics and/or computer science, e.g. cyber-physical systems [1, 28]. In this case, theoretically, the decreasing diagrams method is sufficient for establishing confluence of an ARS when its elements are:

  • real numbers

  • finite-dimensional real vectors / matrices

  • infinite graphs on a fixed countable set of vertices (because the set of all binary relations on the set of natural numbers has the same cardinality as the set of real numbers )

  • infinite sequences of natural or real numbers indexed by natural numbers
    (alternatively, functions f: or f:)

  • continuous or piecewise continuous functions f:
    (because the set of all continuous functions f: has the same cardinality as )

  • other mathematical objects that form a set of the cardinality of the continuum (or less) and model possible structures or possible behaviors of a real-world object of study.

Although the rewriting theory is often used to reason about transformations of syntactical objects like finite terms (in at most countable signature), in the above mentioned cases this does not need to be so: the decreasing diagrams method may be applied to ARS that describe transformations of semantical objects like real numbers or functions f:. Thus, we expect, the results of this paper can become a part of theoretical foundations for potential applications of concepts and methods of the rewriting theory to analysis of mathematical models at the semantical level in interdisciplinary contexts (when emphasis on syntax is minimized). The latter might be called “model rewriting”. In more detail this can be explained as follows. Mathematical models in applied fields quite often combine non-discreteness, nondeterminism, uncertainty, e.g. in the sense of interval models of uncertainty. Often, important properties of such models can be described in terms of binary relations (e.g. reachability relation on the set of states) that are typically uncountable. Such relations can be viewed as ARS and some forms of model analysis can be performed using methods of the rewriting theory. More ideas on this topic can be found in [16, 18], information on applications of the rewriting theory in different fields can be found in [2, 5].

The rest of the paper is structured as follows. In Section 2 we give an overview of the related work. In Section 3 we clarify the notation and terminology. In Section 4 we give:

  • a non-formalized (natural language) formulation of the main result based on set theory

  • a formulation of a formal, machine-checked version of the main result in Isabelle using HOL logic (theorem thm_main in the file DCRN1.thy in the supplementary material [17]).

In Section 5 we describe the structure of the formal proof from [17] in natural language using set theory. Tables of correspondence between the notation used in the paper and in [17] are given in Appendix A.

To verify correctness of the main result, a reader can use Isabelle 2024 software111Note that Isabelle 2024 is not strict requirement. It is possible that later versions of Isabelle can be used for checking the file [17] that was originally prepared for Isabelle 2024. [14]. Instructions on re-checking formal proofs using Isabelle are given in Appendix B.

Also, an extended and more structured version of the formalization [17] is available as an article [21] in the Archive of Formal Proofs.

Note that previous formalizations [37, 46] of abstract rewriting and decreasing diagrams from the Archive of Formal Proofs are not very useful for proving the main result of this paper, so [17] does not reference them. However, they complement the main result of this paper and can be used together with it. Such a combination is used in [21].

2 Related Work

The works [41, 40, 8, 9, 10], mentioned in Section 1, are directly related to the topic of this paper. In particular, they establish that every ARS with the cofinality property is decreasing Church-Rosser (DCR), or, more precisely, belongs to the class DCR2. This implies that every countable confluent or weakly normalizing confluent ARS is DCR.

Additionally, the topic of this paper is related to the study of directed sets: for a nonempty confluent ARS (A,) with connected underlying undirected graph, the Church-Rosser property implies that (A,) is a directed preordered set. Directed sets were studied in many works, a significant number of which were motivated by applications in topology or domain theory [23, 39, 12]. Various works concerning the structure or classification of (infinite) directed sets or more general pre-/partially ordered sets, e.g. [29, 43, 15, 31, 32, 38, 7], are, in a broad sense, related to the topic of the paper. However, the lack of the assumption about transitivity of a reduction relation is specific to the study of confluence.

3 Preliminaries

A reader can assume that a background theory for understanding the natural language definitions and propositions given below is Von Neumann-Bernays-Gödel (NBG) set theory [30, 11] with the axiom of global choice [11, p. 133] (it allows one to directly reason about proper classes). Formal claims and proofs from Isabelle/HOL formalization [17] referenced in the paper can be transferred to the set-theoretic setting using a process similar to the one described in [25, 27]. The statement of the main result (Theorem 18) does not essentially depend on proper classes, so it and its proof can also be transferred to ZFC set theory.

3.1 General notation and terminology

We will use the following notation:

  • ¬, , , are the logical negation, disjunction, conjunction, and implication respectively

  • (ai)i=0 is a sequence of elements indexed by non-negative integers

  • (ai)iI is an indexed family indexed by elements of a set I.

If A is a set, any subset RA×A is a (binary) relation on A. Any subset RR is a subrelation of R. If A,B are any sets, n is a positive integer, and RA×A, then:

  • Fld(R)={a|b(a,b)R}{b|a(a,b)R}, here Fld(R) is called the field of R

  • R1={(b,a)|(a,b)R}

  • IdA={(a,a)|aA}

  • Rn={(a,b)|a0,a1,,ana=a0b=ani{0,1,,n1}(ai,ai+1)R}

  • R+=n=1Rn, i.e. R+ is the transitive closure of R

  • R|B=R(B×B), i.e. R|B is the restriction of R to B.

 Remark 1.

We will usually use letters R, r, s or special symbols (e.g. ) for relations. Sometimes we will use the infix notation for membership of a pair in a relation, e.g ab.

3.2 Ordinals and cardinality

In the paper we will assume that an ordinal [30] is a set α such that well-orders α and each element of α is a subset of α.

 Remark 2.

In the supplementary material [17] we do not use the above mentioned definition of an ordinal. Instead, we use the HOL formalization [3] of ordinals (and cardinals) using typed well-orders that allows one to model reasoning that involves set-theoretic ordinals. Information on other related approaches to reasoning about ordinals can be found in [33].

If α, β are ordinals, then α<β denotes αβ and αβ denotes (α=β)(α<β), Also, α>β and αβ denote β<α and βα respectively.

 Remark 3.

For every ordinals α,β, αββα, and every nonempty set A of ordinals has a least element with respect to (i.e. an element αA such that αAαα).

An ordinal α is

  • an (ordinal) successor of an ordinal α, if α is the least ordinal greater than α

  • a successor ordinal, if α is a successor of some ordinal

  • a limit ordinal, if α is neither 0 (empty set), nor a successor ordinal.

For any ordinals α,β and a nonempty set of ordinals A:

  • α+1 is the (unique) ordinal successor of α

  • [α,β] and [α,β) denote {α|ααβ} and {α|αα<β} respectively

  • [α,β]0S is the set of all α[α,β] such that α is either 0, or is a successor ordinal

  • [α,β]L=[α,β]\[α,β]0S is the set of all limit ordinals in [α,β]

  • minA is the least element of A with respect to .

For any set A we will denote:

  • |A| (cardinality of A) is the least ordinal α (with respect to ) such that there exists a bijective function f:αA.

 Remark 4.

Since we assume the axiom of choice, |A| is defined for any set A [11, 30].

 Remark 5.

In [17] we use a formal notion of the cardinality of a set described in [3]. Comparisons of cardinalities of sets in [17] using special relations =o, <o, <=o described in [3] can be interpreted as comparisons of set-theoretic cardinalities defined above using =,<,.

We will denote:

  • ω is the least limit ordinal

  • ω1 is the least ordinal such that its cardinality is strictly greater than ω.

3.3 Decreasing Church-Rosser abstract rewriting systems

Semi-formally, a rewriting system is decreasing Church-Rosser (DCR), if it can be proven confluent using the decreasing diagrams method. Rigorous definitions are given below.

Definition 6.
  1. 1.

    An abstract rewriting system (ARS) is a pair (A,) of a set A and a relation A×A.

  2. 2.

    An ARS (A,) is confluent, if

    a,b,cA(abac(dAbdcd)),

    where =IdA()+, i.e. is the reflexive transitive closure of on A.

Definition 7.

A labelled rewriting system (LRS) is a triple (A,I,(i)iI), where A and I are sets and (i)iI is an indexed family (with the set of indices I) such that iA×A for each iI. Elements of I are called labels.

Definitions 11 and 12 given below are based on [41, Definition 2.3.7] (there is an insignificant difference between the definitions given below and in [41], because [41] uses a slightly different terminology and notation explained in Remark 8).

 Remark 8.

[41, Definition 2.3.7] refers to [41, Theorem 2.3.5] that applies the term “well-founded partial order” to a relation denoted as , and the well-foundness condition is defined in [41, Definition 1.2.3] for any transitive relation R via a variant of ascending chain condition: there is no infinite sequence a1,a2, such that (ai,ai+1)R\(RR1). In other literature relations that satisfy this kind of condition are called converse well-founded or Noetherian. We will not use the terminology concerning well-founded relations from [41] in this paper and instead use Definition 9 below that relies on the descending chain condition (and apply it to a relation denoted as that can be thought of as a strict partial order that corresponds to the inverse of from [41, Definition 2.3.7]).

Definition 9.

A transitive well-founded relation on a set I is a binary relation I×I such that a,b,cIabbcac and there is no infinite sequence (ai)i=1 such that ai+1ai for every positive integer i.

 Remark 10.

A transitive well-founded relation is irreflexive and antisymmetric.

Definition 11.

An LRS (A,I,(i)iI) is decreasing Church-Rosser (DCR), if there exists a transitive well-founded relation on I and subsets IhI and IvI such that (iIi)=(iIvi)=(iIhi) and for every iIv, jIh, and a,b,cA such that aib and ajc there exists elements b,b′′,c,c′′,dA such that

(b(i)Ihb={j}Ihb′′(ij)Ihd)(c(j)Ivc={i}Ivc′′(ij)Ivd),

where

  • for any iI, i denotes the set {kI|ki}

  • symbols of the form K and =K, where K is an expression, mean:

    K=IdA(kKk)+ and =K=IdA(kKk).

Definition 12.

An ARS (A,) is decreasing Church-Rosser (DCR), if there exists a set I and an indexed family (i)iI (with the set of indices I) such that iA×A for each iI, =(iIi), and (A,I,(i)iI) is a decreasing Church-Rosser LRS.

3.4 DCR hierarchy and the class DCR3

For any ordinal α denote α={β|β<α} (the set of all ordinals below α).

 Remark 13.

In the sense of the usual set-theoretic definition of ordinals, α is the ordinal α itself. However, the notation α will be used to highlight that α is used as a set of labels.

The following definition is based on [10, Definition 4.4] and [10, Definition 4.2].

Definition 14 ([19]).

Let γ be an ordinal. An ARS (A,) belongs to the class DCRγ, if there exists an indexed family (α)α(γ) of binary relations on A indexed by ordinals α<γ such that for every ordinals α,β(γ) and for every a,b,cA the following holds:
if aαbaβc, then there exist elements b,b′′,c,c′′,dA such that

(bαb={β}b′′αβd)(cβc={α}c′′βαd),

where symbols of the form =K and K, where K is an expression, mean:

=K={(a,a)|aA}κKκ and K={(a,a)|aA}(κKκ)+. (1)
 Remark 15.

For a finite ordinal γ (that corresponds to a natural number), semi-formally, the class DCRγ consists of ARS which can be proved confluent with help of the decreasing diagrams method using labels 0,1,,γ1 ordered in the usual way (0<1<<γ1).

Proposition 16.

If γ is an ordinal and (A,) is an ARS in the class DCRγ, then (A,) is decreasing Church-Rosser in the sense of Definition 12.

Proof.

Follows from Definitions 12, 11 by assuming that I=Ih=Iv=(γ) and that a (transitive well-founded) relation is the restriction of the usual order on ordinals to I.

The next proposition makes the definition of the class DCR3 explicit.

Proposition 17 ([19]).

An ARS (A,) belongs to the class DCR3 if and only if there exist binary relations 0,1,2A×A such that =(012) and the following conditions 1–6 hold, where

  • for i=0,1,2 the symbol i= denotes the reflexive closure of i on A

  • for i=0,1,2 the symbol i denotes the reflexive-transitive closure of i on A

  • the symbol 01 denotes the reflexive-transitive closure of 01 on A:

    1. 1.

      a,b,cA((a0ba0c)dA(b0=dc0=d))

    2. 2.

      a,b,cA((a0ba1c)b,dA(b1=bb0dc0d))

    3. 3.

      a,b,cA((a1ba1c)

      b,b′′,c,c′′,dA(b0bb1=b′′b′′0dc0cc1=c′′c′′0d))

    4. 4.

      a,b,cA((a0ba2c)b,dA(b2=bb01dc01d))

    5. 5.

      a,b,cA((a1ba2c)b,b′′,dA(b0bb2=b′′b′′01dc01d))

    6. 6.

      a,b,cA((a2ba2c)

      b,b′′,c,c′′,dA(b01bb2=b′′b′′01dc01cc2=c′′c′′01d)).

Proof.

Follows directly from Definition 14 by assuming that γ=3 and using symmetry of the cases (α,β){(0,1),(1,0)}, (α,β){(0,2),(2,0)}, (α,β){(1,2),(2,1)}.

4 Main Result

Let U be a nonempty set.

Theorem 18 (Completeness of the decreasing diagrams method with 3 labels for proving confluence of ARS of the least uncountable cardinality).

If (U,r) is a confluent ARS and |r|ω1, then (U,r) belongs to the class DCR3.

The proof of Theorem 18 will be described in Section 5 below.

The statement of a formalized version of Theorem 18 (called thm_main) in the formal language of Isabelle/HOL [34] can be found in the supplementary material [17, lines 11760-11790]. It has the following form:


Main parts of the statement of thm_main can be understood as follows:

  • fixes r::"(’U×’U) set"

    – means that r is a binary relation on elements of an arbitrary (nonempty) type U

  • assumes " a b c . (a,b)  rˆ*  (a,c)  rˆ*  ( d. (b,d)  rˆ*  (c,d)  rˆ*)"

    – means that (U,r) is assumed to be a confluent ARS (here and below rˆ* denotes the reflexive transitive closure of r on U, and rˆ= denotes the reflexive closure of r)

  • and "|r| o cardSuc |{n::nat . True}|"

    – means that the cardinality of r does not exceed the cardinal successor of the cardinality of the set of natural numbers, or, equivalently, |r|ω1. A rigorous description of the notations |.| (cardinality), cardSuc (cardinal successor), and <=o (left well-order can be embedded into the right one) defined in the theory HOL-Cardinals included in Isabelle software can be found in [3, subsections 3.2 and 4.4].

  • shows " r0 r1 r2 . ( 

               ( r = (r0  r1  r2) )

                

    – means a conclusion that r can be represented as a union of 3 relations r0, r1, r2 that satisfy the conditions 1–6 of Proposition 17, where i is replaced with ri for i=0,1,2.

    Equivalently, by Proposition 17, (U,r) is an ARS in the class DCR3.

To simplify interpretation of the assumptions of thm_main by readers not familiar with the formalization [3] of cardinality in Isabelle/HOL, in [17, lines 11746–11752] we provide a formal proof of the equivalence between the 2nd assumption of thm_main:

"|r| o cardSuc |{n::nat . True}|"

and the following formula that does not reference any notions and notations defined in [3]:

 s  r. (    (  t  s . (( t f. t  t  t  f`t ( f. s  f`t )) )

              (  g . r  g`s )  ) .

Here s,r,t,t range over binary relations, f, g range over functions, the notation f`x means the image of a set x under a function f. This formula can be interpreted as follows: every subrelation s of r is either at most countable (the left argument of the disjunction ), or is not smaller than r in cardinality (the right argument of ), where

  • s is at most countable” is expressed as follows: for every ts, if t has a proper subset t that is not smaller than t in cardinality (t is a subset of the image of t under some function), then t is not smaller than s is cardinality (s is a subset of the image of t)

  • s is not smaller than r in cardinality“ is expressed as follows: r is a subset of the image of s under some function g.

Note that in the general case, the conclusion “(U,r) belongs to the class DCR3” in the statement of Theorem 18 cannot be strengthened to “(U,r) belongs to the class DCR2”. This follows from the next theorem that extends the results of [19]:

Theorem 19 (Optimality of the index 3 of a DCR class in the conclusion of Theorem 18).

If ω1|U| (i.e. U is uncountable), then there exists rU×U such that (U,r) is a confluent ARS, |r|ω1, and (U,r) does not belong to the class DCR2.

Proof.

A machine-checked formal proof of a formalized version of this theorem can be found in [22, file DCR_Example_N1.thy, lines 1503–1529]. The idea of construction of a confluent ARS outside of DCR2 is similar to the one proposed by the author of this paper in [19].

5 Structure of the Formal Proof of the Main Result

The formal proof of Theorem 18 uses slightly more than 80 formal definitions and 260 formal lemmas located in one file in [17] (DCRN1.thy, file length is over 11000 lines). This file depends only on standard theories included in Isabelle software (Main and HOL-Cardinals).

In subsection 5.1 we describe in a semi-formal way a high-level idea of the proof. In subsequent subsections we describe the way in which the most important definitions and lemmas are formulated in [17] (correspondence between the notation used in the paper and in [17] is described in Appendix A). Auxiliary technical lemmas used in the formal proof of the main result are not described in the paper, but are given in [17].

An approximate correspondence between the content of subsection 5.1 and the rest of Section 5 is illustrated in Figure 2.

5.1 General idea of the proof of Theorem 18

Consider a confluent ARS (U,r) with |r|ω1 as a directed graph.

Consider a connected component C of (U,r).

Case A.

If C (viewed as an ARS) has the cofinality property (defined in [9, Definition 7]), then it belongs to the class DCR2 by [9, Theorem 19], so it also belongs to DCR3.

Case B.

If C does not have the cofinality property, then perform the following steps.

Step B1.

Extract a subgraph S from C such that

  • S has a shape illustrated in Figure 1

  • nodes of S form a cofinal subset in (the preordered set induced by) C.

Step B2.

Show that S (viewed as an ARS) belongs to DCR2. In Figure 1:

  • label red arcs (that start at nodes with unique successor) with 0

  • label green arcs (that start at nodes with non-unique successor) with 1.

Step B3.

Use the cofinality of S in C to conclude that C belongs to DCR3.

Then (U,r) belongs to DCR3, because all its connected components belong to DCR3.

In more detail, the main step “B1” will involve the following sub-steps.

Sub-step B1a.

Extraction of a preliminary cofinal subgraph generally analogous to the one shown in Figure 1, but where red arcs may not form trees and there may be extra green arcs. It will be described using the relation r1 in the proof of Lemma 29. This sub-step will be performed using an analog of Iwamura’s lemma for connected Church-Rosser (CCR) relations that will be described in subsection 5.4. The latter allows one to represent a CCR ARS as a union of a (well-ordered) chain of CCR ARS of smaller cardinality (so, e.g., a CCR ARS of the cardinality 1 can be represented as a union of a chain of at most countable CCR ARS that have the cofinality property).

Sub-step B1b.

Refinement of a subgraph mentioned above to a connected cofinal subgraph that belongs to DCR2. This sub-step will be described in the proof of Lemma 27.


Refer to caption
Figure 1: Structure of a connected cofinal subgraph of a connected component of a confluent ARS of the least uncountable cardinality, assuming this component lacks the cofinality property.
Refer to caption
Figure 2: An approximate correspondence between the cases/steps from subsection 5.1 and lemmas used in the proof of the main result. Arrows AB mean that A is used in the proof of B. Lemmas are denoted as follows: “Name of a lemma in the paper (name of a formal version in [17])”.

5.2 Formalization of finite levels of the DCR hierarchy

In this subsection we describe the way in which finite levels of the DCR hierarchy, i.e. classes DCRα for ordinals α<ω, are formalized in [17].

For any relation sU×U we will denote as s= and s the reflexive, and, respectively, reflexive transitive closure of s on the set U.

For any function g:[0,ω)2U×U and any ordinals α,β[0,ω) let us denote:

  • 𝔏1(g,α)=α[0,α)g(α)

  • 𝔏(g,α,β)=α[0,α)[0,β)g(α)

  • 𝔇(g,α,β) is the set of all tuples (b,b,b′′,d)U×U×U×U such that

    (b,b)(𝔏1(g,α))(b,b′′)(g(β))=(b′′,d)(𝔏(g,α,β)).
Definition 20.

A function g:[0,ω)2U×U is called DCR-generating, if
for every α,β[0,ω) and every a,b,cU the following implication holds:
if (a,b)g(α)(a,c)g(β), then there exist b,b′′,c,c′′,dU such that

(b,b,b′′,d)𝔇(g,α,β)(c,c,c′′,d)𝔇(g,β,α).

Let us denote:

  • DCRn(U), where n[0,ω), is the set of all relations rU×U such that there exists a DCR-generating function g such that r=α[0,n)g(α).

 Remark 21.

It is straightforward to check that for every n[0,ω), a relation r belongs to DCRn(U) if and only if the ARS (U,r) belongs to the class DCRn.

Definition 22.

A binary relation rU×U is called

  1. 1.

    connected Church-Rosser (CCR), if  a,bFld(r)cFld(r)(a,c)r(b,c)r

  2. 2.

    cone-like, if  r=(mFld(r)aFld(r)(a,m)r).

We will denote:

  • CCR(U) is the set of all CCR relations rU×U

  • Conelike(U) is the set of all cone-like relations rU×U.

For any rU×U let us denote:

  • 𝔘(r)={sCCR(U)|sraFld(r)bFld(s)(a,b)r}.
    We will call any element of 𝔘(r) a CCR residue of r.

Note that a CCR residue of r is a CCR subrelation sr such that the field of s is a cofinal subset in the preordered set (Fld(r),r|Fld(r)).

The next lemma will be used to implement the step “B3” from subsection 5.1 (it can be considered as a restricted version of a theorem about DCR hierarchy presented in [20]).

Lemma 23 (DCR property inference using CCR residue argument).

If n0[1,ω), rU×U, s𝔘(r), and sDCRn0(U), then rDCRn0+1(U).

Proof.

A formal proof is available in [17, lines 7275–7598]. The proof involves extraction of an auxiliary spanning subrelation of r entitled r1 [17, line 7458, 7590], labeling r1 to show that r1DCRn0(U) as described in [17, lines 7450–7453, 7588, 7591], and extension of a labeling of r1 to a labeling of r that ensures that rDCRn0+1(U) [17, line 7597].

5.3 CCR relation subfield extension lemma

For any rU×U, AU, and xU let us denote:

  • r[A]={b|aA(a,b)r}, i.e. r[A] is the image of A under r

  • r{x}={y|(x,y)r}, i.e. r{x} is the set of successors of x w.r.t. r

  • dncl(r,A)=((r)1)[A], i.e. dncl(r,A) is the downward closure of A in (U,r)

  • Inv(r)={AU|r[A]A},  elements of Inv(r) are called invariant sets of r

  • Span(r)={sr|Fld(s)=Fld(r)},
    elements of Span(r) are called spanning subrelations of r

  • SF(r)={AU|Fld(r|A)=A},  elements of SF(r) are called subfields of r
    (note that A is a subfield of r if and only if A is the field of some subrelation sr)

  • SCF(r)={BFld(r)|aFld(r)bB(a,b)r},
    i.e. SCF(r) is the set of all cofinal sets in the preordered set (Fld(r),r|Fld(r))

  • scf(r)=min{|B||BSCF(r)}, here scf(r) is called the sequential cofinality of r.

For any set X denote as 𝒫(X) the set of all subsets of X.

Let us fix a (choice) function ch:𝒫(𝒫(U))\{}𝒫(U) such that ch(A)A for every nonempty set A𝒫(U).

For any r,sU×U, A,BU, and a,bU let us denote:

  • (r,a,b) is the set of all (finite) subsets FU such that there exists a non-negative integer n and a finite sequence (ai)i=0n of elements of U such that F={a0,a1,,an}, a0=a, an=b, and (ai,ai+1)r for all i=0,1,,n1

  • wdncl(r,A)={adncl(r,A)|bUF(r,a,b)(bdncl(r,A)FA)}

  • wrank(r,A)=min{|B||Awdncl(r,B)}

  • dnEsc(r,A,a)={F𝒫(U)|bU\dncl(r,A)F(r,a,b)(FA=)}

  • dnesc(r,A,a)={ch(dnEsc(r,A,a)), if dnEsc(r,A,a){a}, if dnEsc(r,A,a)=

  • escl(r,A,B)=bBdnesc(r,A,b)

  • clterm(s,r)=(sConelike(U)rConelike(U)).

Lemma 24.

Let rCCR(U), ASF(r), B,BU, xU, and PsSCF(r).

Then there exists a set AU that satisfies of the following 9 conditions:

  1. 1.

    xFld(r)xA

  2. 2.

    AA

  3. 3.

    ASF(r)

  4. 4.

    aA((r{a}B)(r{a}(A\B)))

  5. 5.

    (yUAB{y})(Fld(r)AB)

  6. 6.

    r|ACCR(U)

  7. 7.

    (|A|<ω|A|<ω)(|A|ω|A|=|A|)

  8. 8.

    ((PPs={P})|Ps|[ω,|A|])(PPs(AP)SCF(r|A))

  9. 9.

    |A|ωescl(r,A,A)Aclterm(r|A,r).

Proof.

A formal proof is available in [17, lines 4498–4538]. It depends on several auxiliary formal lemmas that have close formulations, but provide weaker/different guarantees (lem_Ccext_finsubccr_pext5_scf3 and lem_Ccext_infsubccr_pext5_scf3 in [17] and their dependencies). The idea of the proof of the current lemma and its dependencies is related to Löwenheim-Skolem theorem.

When A is infinite, the proof aims to define a required set A as

ψ(n=0H(n)(ϕ(A))), (2)

for some suitable increasing set function H and set functions ϕ, ψ, where H(n) denotes the n-times composition of H with itself, such that H, ϕ, ψ ensure closure properties of A required by the lemma’s conditions (e.g. r|ACCR(U)), but keep the cardinalities of sets defined by subexpressions of (2) bounded, so that the condition 7, i.e. (|A|<ω|A|<ω)(|A|ω|A|=|A|), holds. An explicit expression for ϕ(A) can be obtained by unfolding the notation on the right hand side of the definition in [17, line 3972], taking into account substitutions of values in place of parameters of the auxiliary lemma lem_Ccext_infsubccr_set_ext_scf3 specified in [17, line 4280]. Similarly, H can be expressed by unfolding the notation used in [17, lines 3964–3966], and as ψ one can take the identity function.

If A is a finite set, the proof is based on induction on the size of an auxiliary finite relation associated with A. Details can be found in [17, lines 4372–4496, 3332–3414, 2485–2680].

5.4 Analog of Iwamura’s lemma on directed sets for CCR relations

In this subsection we describe a lemma that allows one to represent an infinite CCR relation r as a union of a chain of CCR relations of cardinalities smaller than the cardinality of r in a way reminiscent to Iwamura’s lemma on directed sets [29, Theorem 1]. Unlike Iwamura’s lemma, our lemma is applicable to a not-necessarily-transitive CCR relation r and guarantees that fields of elements of the resulting chain satisfy additional constraints described below using the sets 𝒩i that are used in the proof of the main result.

Let 𝒰 be the set of all ordinals of the cardinality at most |U|.

For any f:𝒰2U and ordinal α𝒰 let us denote:

  • 𝔏(f,α)=α[0,α)f(α)

  • (f,α)=f(α)\𝔏(f,α)

  • 𝒬(r,f,α)=f(α)\dncl(r,𝔏(f,α))

  • 𝒲(r,f,α)=f(α)\wdncl(r,𝔏(f,α)).

For any rU×U, Ps2U, and ordinal α0𝒰 let us denote:

  • 𝒩1(r,α0)={f:𝒰2U|α[0,α0]α[0,α]f(α)f(α)}

  • 𝒩2(r,α0)={f:𝒰2U|α[0,α0]L(f,α)=}

  • 𝒩3(r,α0)={f:𝒰2U|α[0,α0]0S|𝔏(f,α)|ω

    (escl(r,𝔏(f,α),f(α))f(α)clterm(r|f(α),r))}

  • 𝒩4(r,α0)={f:𝒰2U|α[0,α0]0S
                          a𝔏(f,α)(r{a}wdncl(r,𝔏(f,α))(r{a}𝒲(r,f,α)))}

  • 𝒩5(r,α0)={f:𝒰2U|α[0,α0]f(α)SF(r)}

  • 𝒩6(r,α0)={f:𝒰2U|α[0,α0]r|f(α)CCR(U)}

  • 𝒩7(r,α0)={f:𝒰2U|α[0,α0]
                           ((α<ω|f(α)|<ω)(αω|f(α)|α))}

  • 𝒩8(r,Ps,α0)={f:𝒰2U|α[0,α0]0S
                 ((|Ps|=1|Ps|[ω,|f(α)|])(PPs(f(α)P)SCF(r|f(α))))}

  • 𝒩9(r,α0)={f:𝒰2U|α0ωFld(r)f(α0)}

  • 𝒩10(r,α0)={f:𝒰2U|α[0,α0]
                          ((yU𝒬(r,f,α)={y})Fld(r)dncl(r,f(α)))}

  • 𝒩11(r,α0)={f:𝒰2U|α[0,α0]0S\{0}
                          (𝒬(r,f,α)=Fld(r)dncl(r,f(α)))}

  • 𝒩12(r,α0)={f:𝒰2U|α[ω,α0]|𝔏(f,α)|ω}.

For every rU×U and Ps2U let us denote:

𝒩(r,Ps)=(i=17𝒩i(r,|Fld(r)|))𝒩8(r,Ps,|Fld(r)|)(i=912𝒩i(r,|Fld(r)|)). (3)

Note that |Fld(r)|[0,|U|]𝒰, because Fld(r)U.

Lemma 25 (Analog of Iwamura’s lemma).

If rCCR(U) and PsSCF(r), then 𝒩(r,Ps).

Proof.

A formal proof is available in [17, lines 9533–9616]. The idea of the proof is to use Lemma 24 to define recursively a transfinite sequence of subsets of Fld(r) that gives values f(α), α[0,|Fld(r)|] for some f𝒩(r,Ps).

 Remark 26.

If f𝒩(r,Ps) for an infinite CCR relation r, then the relations r|f(α), α[0,|Fld(r)|) are smaller than r in cardinality and form a chain of CCR relations, the union of which is r (one can check this by unfolding the notations 𝒩i(r,|Fld(r)|) for i=1,2,5,6,7,9 and (f,α) and noting that if r is infinite, then |Fld(r)| is a limit ordinal).

5.5 Generation of a CCR residue in the class DCR2

Let us denote:

  • T(U) is the set of all nonempty relations tCCR(U) such that t is single-valued (i.e. (a,b)t(a,c)tb=c), acyclic (i.e. t+ is irreflexive), and total on its field (i.e. xFld(t)t{x}).

Lemma 27.

Let rU×U be a relation that is reflexive on Fld(r). Let S be a set of ordinals and (Wα)αS, (Rα)αS be indexed families of subsets of U such that

  1. 1.

    S[0,ω1), |[0,ω1)||S|, and αSβSα<β

  2. 2.

    Fld(r)=αSWα and α,βS(αβWαWβ=)

  3. 3.

    αSRαT(U)Rαr|Wα|ωFld(Rα)=Wα¬Conelike(r|Wα)

  4. 4.

    αSxWαaU((x,a)(r|Wα)(βSα<βr{a}Wβ)).

Then there exists r𝔘(r) such that rDCR2(U).

Proof.

A formal proof is available in [17, lines 4935–5746] (note that in the formulation of the lemma in [17] the assumptions are not numbered as above and the notation 𝔘(r) in the conclusion is unfolded).

The idea of the proof is to define a relation r𝔘(r) (a subrelation of r) such that, semi-formally, the graph (Fld(r),r) has a shape similar to the one illustrated in Figure 1, and show that rDCR2(U). The trees illustrated in Figure 1 are extracted from (at most countable) graphs (Wα,r|Wα) for ordinals αS.

In more detail this construction is described below (the relations Rα correspond to sets of arcs of the trees extracted from (Wα,r|Wα), the relation re corresponds to the set of arcs that connect trees, and r is the union of re and Rα for all αS).

For every αS let us denote:

  • EPα={aWα|βS(α<βr{α}Wβ)},
    the elements of EPα are called exit points from the ARS (Wα,r|Wα)

  • h:𝒰𝒰 is a function such that for every α,βS and aEPα, bEPβ there exists γS and a,bWγ such that α<γ, β<γ, and (a,a)r, (a,h(γ))Rγ, (b,b)r, and (b,h(γ))Rγ

  • (sα,k)k=0 is some infinite cofinal reduction sequence in the (countable, CCR) ARS (Fld(Rα),Rα)

  • Eα={(sα,k+1,sα,k)(r|Wα)}

  • Fα={sα,k|kEα}{aWα|(h(α)Wα(h(α),a)Rα)(a,h(α))Rα}

  • re0,α and re1,α is some pair of consecutive elements in the sequence (sα,k)k=0 such that re0,α is located at some index kEα in (sα,k)k=0 and re0,αFα

  • epα is some element of EPα such that (re1,α,epα)(r|Wα)

  • splα is the length of a shortest reduction sequence in the ARS (Wα,r|Wα) that starts at the element re1,α and ends at the element epα

  • spα,k for k=0,1,,(splα1) is some reduction sequence that starts at the element re1,α, ends at the element epα, and has the length splα

  • Rα={(a,b)Rα|(b,re0,α)Rα}{(re0,α,re1,α)}{(spα,k,spα,k+1)|k<splα}

  • re={(a,b)r|α,βSα<βa=epαbWβ(b,h(β))Rβ}

  • r=reαSRα

  • g:[0,ω)2U×U is a function such that for every n[0,ω):

    g(n)={{(u,v)r|r{u}={v}}, if n=0{(u,v)r|r{u}{v}}, if n=1, if n{0,1}.

Then it is shown that g is DCR-generating [17, lines 5659–5720] and r𝔘(r). Then r𝔘(r)DCR2(U), because r=n<2g(n).

5.6 Completion of the proof of the main theorem

Below we give an important lemma (Lemma 28) that can be used to describe a structure of a confluent relation r when scf(r) is a regular cardinal. We will use it together with several other lemmas to complete the proof of Theorem 18.

Lemma 28.

Let rCCR(U) be a relation such that r reflexive on Fld(r).
Assume that scf(r) is a regular cardinal [3] such that ω<scf(r)=|Fld(r)|.

Then there exists a set Ps and a function f𝒩(r,Ps) such that for every successor ordinal α[0,|Fld(r)|) such that |(f,α)|ω the following conditions 1–3 hold:

  1. 1.

    r|𝒲(r,f,α)CCR(U)

  2. 2.

    |r|𝒲(r,f,α)|<|Fld(r)|

  3. 3.

    for every a𝒲(r,f,α) there exists bU (denoted in [17] as “wesc r f α a“) such that b𝒲(r,f,α), (a,b)(r|𝒲(r,f,α)), and r{b}𝒲(r,f,β) for every successor ordinal β such that α<β<|Fld(r)|.

Proof.

A formal proof is available in [17, lines 10415–10460].

The idea of the proof is to define Ps={P}, where

P={aFld(r)|scf(r)wrank(r,r{a})},

then obtain f𝒩(r,Ps) using Lemma 25, and show that f satisfies the conditions 1–3.

Lemma 29.

Let rU×U be a relation that is reflexive on Fld(r).

Assume that rCCR(U) and scf(r)=|Fld(r)|=ω1. Then rDCR3(U).

Proof.

A formal proof is available in [17, lines 10733–11021].

The proof proceeds as follows. Let Ps and f𝒩(r,Ps) be a set and a function obtained from Lemma 28 applied to r. Let us denote:

  • S is the set of all successor ordinals in [ω,ω1)

  • (Wα)αS is an indexed family of subsets of U such that Wα=𝒲(r,f,α) for αS

  • (Rα)αS is an indexed family of relations on U such that

    RαSpan(r|𝒲(r,f,α))T(U) for αS
  • r1=r|αSWα.

Let r be a relation in DCR2(U) obtained using Lemma 27 applied to r1, S, (Wα)αS, (Rα)αS. One can show that r𝔘(r), so rDCR3(U) by Lemma 23.

Lemma 30.

If rCCR(U) and scf(r)ω, then rDCR2(U).

Proof.

A formal proof is available in [17, lines 10687–10731]. The idea of the proof is similar to the idea of [9, Theorem 19].

Lemma 31.

If rCCR(U) and |Fld(r)|ω1, then rDCR3(U).

Proof.

A formal proof is available in [17, lines 11023–11072].

The proof proceeds as follows. Consider two cases.

  1. 1.

    If scf(r)ω, then rDCR2(U) by Lemma 30, whence rDCR3(U).

  2. 2.

    Assume scf(r)=ω1. Let r1=r{(x,x)|xFld(r)}. Then either scf(r1)ω, or scf(r1)=|Fld(r1)|. If scf(r1)ω, then r1DCR2(U) by Lemma 30. If scf(r1)=|Fld(r1)|, then r1DCR3(U) by Lemma 29. Thus in any case, r1DCR3(U). This is used to conclude that rDCR3(U).

Lemma 32.

If rU×U is a confluent relation and |Fld(r)|ω1, then rDCR3(U).

Proof.

A formal proof is available in [17, lines 11634–11652].

The idea of the proof is as follows. Consider (U,r) as a directed graph. For each connected component (C,s) of (U,r), the relation s satisfies the assumptions of Lemma 31, so sDCR3(U). This is used to conclude that rDCR3(U).

Proof of Theorem 18 (i.e. if (U,r) is confluent and |r|ω1, then (U,r) is in DCR3).

A formal proof of Theorem 18 is available in [17, lines 11760–11807]. It follows from Lemma 32 by observing that |r|ω1 implies |Fld(r)|ω1.

6 Conclusion

We have shown that every confluent ARS (A,) such that the cardinality of the reduction relation does not exceed the first uncountable cardinal 1 belongs to the class DCR3, i.e. confluence of (A,) can be proved with the help of the decreasing diagrams method using labels 0, 1, 2 ordered in such a way that 0<1<2.

Under the Continuum Hypothesis this result implies that, theoretically, the decreasing diagrams method is sufficient for establishing confluence of ARS on many structures of interest to applied mathematics and various interdisciplinary fields.

Investigation of potential applications of this and other methods of the rewriting theory in interdisciplinary contexts is a subject of further research.

References

  • [1] Radhakisan Baheti and Helen Gill. Cyber-physical systems. The impact of control technology, 12(1):161–166, 2011.
  • [2] Nicolas Behr and Jean Krivine. Rewriting theory for the life sciences. In International Conference on Graph Transformation, pages 185–202, 2020.
  • [3] Jasmin Christian Blanchette, Andrei Popescu, and Dmitriy Traytel. Cardinals in Isabelle/HOL. In Lecture Notes in Computer Science, volume 8558, pages 111–127, 2014. doi:10.1007/978-3-319-08970-6_8.
  • [4] Mirna Bognar. A point version of decreasing diagrams. In Proceedings Accolade 1996. Dutch Graduate School in Logic, pages 1–14, 1997.
  • [5] F. Bonchi, F. Gadducci, A. Kissinger, P. Sobociński, and F. Zanasi. String diagram rewrite theory I: Rewriting with Frobenius structure. Journal of the ACM, 69(2):14:1–14:58, 2022. doi:10.1145/3502719.
  • [6] N.G. de Bruijn. A note on weak diamond properties. Memorandum 78–08, Eindhoven Uninversity of Technology, 1978.
  • [7] R. Diestel and O. Pikhurko. On the cofinality of infinite partially ordered sets: Factoring a poset into lean essential subsets. Order, 20:53–66, 2003. doi:10.1023/A:1024449306316.
  • [8] Jörg Endrullis and Jan Willem Klop. De Bruijn’s weak diamond property revisited. Indagationes Mathematicae, 24:1050–1072, 2013.
  • [9] Jörg Endrullis, Jan Willem Klop, and Roy Overbeek. Decreasing diagrams with two labels are complete for confluence of countable systems. In 3rd International Conference on Formal Structures for Computation and Deduction (FSCD 2018), pages 14:1–14:15. Schloss Dagstuhl – Leibniz-Zentrum für Informatik, 2018. doi:10.4230/LIPICS.FSCD.2018.14.
  • [10] Jörg Endrullis, Jan Willem Klop, and Roy Overbeek. Decreasing diagrams for confluence and commutation. Logical Methods in Computer Science, 16:23:1–23:25, 2020. doi:10.23638/LMCS-16(1:23)2020.
  • [11] A.A. Fraenkel, Y. Bar-Hillel, and A. Levy. Foundations of Set Theory. Elsevier, 1973.
  • [12] Jean Goubault-Larrecq. Non-Hausdorff topology and domain theory: Selected topics in point-set topology. Cambridge University Press, 2013.
  • [13] N. Hirokawa, A. Middeldorp, C. Sternagel, and S. Winkler. Abstract completion, formalized. Logical Methods in Computer Science, 15(3):19:1–19:42, 2019. doi:10.23638/LMCS-15(3:19)2019.
  • [14] Isabelle proof assistant. http://isabelle.in.tum.de. [Online].
  • [15] J.R. Isbell. The category of cofinal types. II. Trans. Amer. Math. Soc., 116:394–416, 1965.
  • [16] Ievgen Ivanov. Generalized Newman’s lemma for discrete and continuous systems. In Leibniz International Proceedings in Informatics, volume 260, pages 9:1–9:17, 2023. doi:10.4230/LIPICS.FSCD.2023.9.
  • [17] Ievgen Ivanov. Formal proof of completeness of the decreasing diagrams method for proving confluence of relations of the least uncountable cardinality (supplementary material for this paper). https://doi.org/10.5281/zenodo.14254256, 2024. [Online].
  • [18] Ievgen Ivanov. On Newman’s lemma and non-termination. In CEUR-WS.org, volume 3624, pages 14–24, 2024. URL: https://ceur-ws.org/Vol-3624/Paper_2.pdf.
  • [19] Ievgen Ivanov. On non-triviality of the hierarchy of decreasing Church-Rosser abstract rewriting systems. In Proceedings of the 13th International Workshop on Confluence, pages 30–35, 2024.
  • [20] Ievgen Ivanov. On the cofinality property in the context of the hierarchy of decreasing Church-Rosser abstract rewriting systems. In Information Technology and Implementation, November 20–21, 2024, Kyiv, Ukraine, 2024.
  • [21] Ievgen Ivanov. Completeness of decreasing diagrams for the least uncountable cardinality. Archive of Formal Proofs, April 2025.  
    https://isa-afp.org/entries/Completeness_Decreasing_Diagrams_for_N1.html, Formal proof development.
  • [22] Ievgen Ivanov. Formalization of a confluent abstract rewriting system of the least uncountable cardinality outside of the class DCR2. https://doi.org/10.5281/zenodo.14740062, 2025. [Online].
  • [23] John L. Kelley. General topology. Van Nostrand, 1955.
  • [24] Jan Willem Klop. Combinatory Reduction Systems. PhD thesis, Rijks-universiteit Utrecht, 1980.
  • [25] Alexander Krauss and Andreas Schropp. A mechanized translation from Higher-Order Logic to set theory. In Lecture Notes in Computer Science, volume 6172, pages 323–338. Springer, 2010. doi:10.1007/978-3-642-14052-5_23.
  • [26] Ondřej Kunčar and Andrei Popescu. Comprehending Isabelle/HOL’s consistency. In Lecture Notes in Computer Science, volume 10201, pages 724–749. Springer, 2017. doi:10.1007/978-3-662-54434-1_27.
  • [27] Ondřej Kunčar and Andrei Popescu. A consistent foundation for Isabelle/HOL. Journal of Automated Reasoning, 62:531–555, 2019. doi:10.1007/S10817-018-9454-8.
  • [28] Edward A. Lee. Fundamental limits of cyber-physical systems modeling. ACM Transactions on Cyber-Physical Systems, 1(1):1–26, 2016. doi:10.1145/2912149.
  • [29] George Markowsky. Chain-complete posets and directed sets with applications. Algebra universalis, 6(1):53–68, 1976.
  • [30] Elliott Mendelson. Introduction to Mathematical Logic. CRC Press, 2015.
  • [31] Eric C. Milner and Maurice Pouzet. On the cofinality of partially ordered sets. Ordered sets, pages 279–298, 1982.
  • [32] Eric C. Milner and Karel Prikry. The cofinality of a partially ordered set. Proc. London Math. Soc., 46:454–470, 1983.
  • [33] Chuangjie Xu Nicolai Kraus, Fredrik Nordvall Forsberg. Type-theoretic approaches to ordinals. Theoretical computer science, 957, 2023. doi:10.1016/J.TCS.2023.113843.
  • [34] Tobias Nipkow, Markus Wenzel, and Lawrence C Paulson. Isabelle/HOL: a proof assistant for higher-order logic. Springer, 2002. doi:10.1007/3-540-45949-9.
  • [35] Andrew Pitts. The HOL logic. In Introduction to HOL: A Theorem Proving Environment for Higher Order Logic, pages 191–232. Cambridge University Press, 1993.
  • [36] Raymond Smullyan. Set theory and the continuum problem. Clarendon Press, 1996.
  • [37] Christian Sternagel and Rene Thiemann. Abstract rewriting. Archive of Formal Proofs, June 2010.
  • [38] Stevo Todorcevic. Directed sets and cofinal types. Trans. Amer. Math. Soc., 290:711–723, 1985.
  • [39] John W. Tukey. Convergence and uniformity in topology. Princeton University Press, 1940.
  • [40] Vincent Van Oostrom. Confluence by decreasing diagrams. Theoretical computer science, 126(2):259–280, 1994. doi:10.1016/0304-3975(92)00023-K.
  • [41] Vincent Van Oostrom. Confluence for Abstract and Higher-Order Rewriting. PhD thesis, Vrije Universiteit Amsterdam, 1994.
  • [42] Vincent Van Oostrom. Confluence by decreasing diagrams – converted. In Lecture Notes in Computer Science, volume 5117, pages 306–320, 2008.
  • [43] Shang-Zhi Wang and Bo Yu Li. On the minimal cofinal subsets of a directed quasi-ordered set. Discrete Mathematics, 48:289–306, 1984. doi:10.1016/0012-365X(84)90189-4.
  • [44] Freek Wiedijk. The seventeen provers of the world: Foreword by Dana S. Scott, volume 3600. Springer, 2006. doi:10.1007/11542384.
  • [45] Harald Zankl. Confluence by decreasing diagrams – formalized. In 24th International Conference on Rewriting Techniques and Applications, pages 352–367. Leibniz International Proceedings in Informatics, 2013. doi:10.4230/LIPICS.RTA.2013.352.
  • [46] Harald Zankl. Decreasing diagrams. Archive of Formal Proofs, 2013.

Appendix A Correspondence Between the Notions/Notation Used in the Paper and in the Supplementary Material

Below we give tables of correspondence between the formal notions used in the supplementary material [17] (Isabelle/HOL formalization) and their intended interpretations in terms of the notions based on set theory used in natural language text in this paper.

Syntax of the formal language that is used to express Isabelle/HOL theories is described in the documentation included in Isabelle software [14]. Information on semantic aspects of Isabelle language can be found in [35, 27, 26, 25].

A.1 General notation

Notation in [17] Notation in the paper
¬, , , ¬, , ,
=, , =, ,
, , , × , , \, ×
{}
f::’AB f:AB (A,B)
f x f(x)
{x. P x} {x|P(x)}
nat {0,1,2,}
UNIV::’U U (U)
x::’U xU
A::’U set AU (U)
r::’U rel rU×U (U)
Field r Fld(r)
Restr r B r|B
r-1, r∧∧n, r∧+, r∧=, r∧∗ r1, rn, r+, r=, r
|A|=o|B| |A|=|B|
|A|<o|B| |A|<|B|
|A|<=o|B| |A||B|
ω_ord ||

A.2 Notation related to subsection 5.2

Lines in [17] Notation in [17] Notation in the paper
78–80 𝔏1 g α 𝔏1(g,α)
82–84 𝔏v g α β 𝔏(g,α,β)
86–88 𝔇 g α β 𝔇(g,α,β)
116–118 CCR r rCCR(U)
120–122 Conelike r rConelike(U)
90–93 DCR_generating g g is DCR-generating
95–97 DCR n r rDCRn(U)
177–178 𝔘 r 𝔘(r)

A.3 Notation related to subsection 5.3 (part 1)

Lines in [17] Notation in [17] Notation in the paper
N/A rA r[A]
N/A r{x} r{x}
124–126 dncl r A dncl(r,A)
128–130 Inv r Inv(r)
189–190 Span r Span(r)
132–134 SF r SF(r)
136–137 SCF r SCF(r)
195–196 scf r scf(r)

A.4 Notation related to subsection 5.3 (part 2)

Lines in [17] Notation in [17] Notation in the paper
147–149 r a b (r,a,b)
198–200 w_dncl r A wdncl(r,A)
307–308 wrank r A wrank(r,A)
155–157 dnEsc r A a dnEsc(r,A,a)
159–161 dnesc r A a dnesc(r,A,a)
163–165 escl r A B escl(r,A,B)
167 clterm s r clterm(s,r)

A.5 Notation related to subsection 5.4

Lines in [17] Notation in [17] Notation in the paper
202–204 𝔏 f α 𝔏(f,α)
206–208 f α (f,α)
210–212 𝒬 r f α 𝒬(r,f,α)
214–216 𝒲 r f α 𝒲(r,f,α)
218–267 𝒩i  r α0 𝒩i(r,α0), i is an integer
269–274 𝒩  r Ps 𝒩(r,Ps)

Appendix B Instructions on Re-checking Formal Proofs

  1. 1.

    Install Isabelle 2024 software using the instructions at:

  2. 2.

    Launch the installed Isabelle 2024 software.

  3. 3.

    Obtain the file DCRN1.thy from

  4. 4.

    Choose File Open from the main menu in Isabelle window and select DCRN1.thy.

  5. 5.

    Scroll to the end of the loaded text in Isabelle and wait until all red marks on the right scroll bar disappear (this may take several minutes).

  6. 6.

    At this point formal proofs have been checked.

  7. 7.

    The main result (called thm_main) is located at the line 11760.