Abstract 1 Introduction 2 Preliminaries 3 Coalgebraic dynamic logic, generalised 4 Safety and logical invariance 5 Reducibility and soundness 6 Strong completeness 7 Future work References Appendix A Appendix

Safety and Strong Completeness via Reducibility for Many-Valued Coalgebraic Dynamic Logics

Helle Hvid Hansen ORCID Bernoulli Institute of Maths, CS and AI, University of Groningen, The Netherlands Wolfgang Poiger ORCID Institute of Computer Science of the Czech Academy of Sciences, Prague, Czech Republic
Abstract

We present a coalgebraic framework for studying generalisations of dynamic modal logics such as PDL and game logic in which both the propositions and the semantic structures can take values in an algebra 𝐀 of truth-degrees. More precisely, we work with coalgebraic modal logic via 𝐀-valued predicate liftings where 𝐀 is an 𝖥𝖫ew-algebra, and interpret actions (abstracting programs and games) as 𝖥-coalgebras where the functor 𝖥 represents some type of 𝐀-weighted system. We also allow combinations of crisp propositions with 𝐀-weighted systems and vice versa. We introduce coalgebra operations and tests, with a focus on operations which are reducible in the sense that modalities for composed actions can be reduced to compositions of modalities for the constituent actions. We prove that reducible operations are safe for bisimulation and behavioural equivalence, and prove a general strong completeness result, from which we obtain new strong completeness results for 𝟐-valued iteration-free PDL with 𝐀-valued accessibility relations when 𝐀 is a finite chain, and for many-valued iteration-free game logic with many-valued strategies based on finite Łukasiewicz logic.

Keywords and phrases:
dynamic logic, many-valued coalgebraic logic, safety, strong completeness
Funding:
Wolfgang Poiger: Received financial support from the European Union under the project no. CZ.02.01.01/00/23_025/0008724 via the Operational Programme Jan Amos Komenský, and from the University of Groningen.
Copyright and License:
[Uncaptioned image] © Helle Hvid Hansen and Wolfgang Poiger; licensed under Creative Commons License CC-BY 4.0
2012 ACM Subject Classification:
Theory of computation Modal and temporal logics
; Theory of computation Program reasoning
Editors:
Corina Cîrstea and Alexander Knapp

1 Introduction

Propositional dynamic logic (PDL) [10, 19] is a well-known modal logic for reasoning about non-deterministic programs. In PDL, programs are an explicit part of the syntax, and PDL thus combines modal reasoning with a programming language. Parikh’s game logic [30, 34] can be seen as a generalisation of PDL from programs to 2-player games, which allows for reasoning about program correctness in a distributed setting where the environment is viewed as an opponent. A variant of game logic has been applied to reason about hybrid systems [35] and neural networks [46]. Both PDL and game logic combine modal reasoning with an algebra of operations on their semantic structures. This view was abstracted into a coalgebraic framework, called coalgebraic dynamic logic [17, 16], which extends the approach to coalgebraic modal logic via predicate liftings. Coalgebraic modal logic [31, 22] allows for a uniform treatment of modal logics over a wide range of state-based structures including Kripke models, neighbourhood models, multigraphs, weighted automata and probabilistic transition systems by modelling these structures as 𝖥-coalgebras for some 𝖲𝖾𝗍-endofunctor 𝖥.

In this paper, we generalise the coalgebraic dynamic framework and results from [17] to the many-valued setting. Many-valued logic, where Boolean truth-values are replaced by an algebra 𝐀 of truth-degrees, is more suitable than classical logic when reasoning about uncertainty, vagueness, and fuzzy systems, where propositions cannot be determined as being either true or false. There are numerous approaches to many-valued modal logic, each with their own motivations [11, 12, 5, 18]. These approaches can generally be parametrised in the algebra 𝐀 (which determines the propositional base) and whether the semantics is given by crisp relations or 𝐀-labelled (fuzzy) relations. Our framework is also parametric in 𝐀, which we assume to be (at least) an 𝖥𝖫ew-algebra, i.e., a certain kind of residuated lattice prevalent in many-valued/fuzzy logic (Definition 1). The choice between crisp or fuzzy relations is subsumed and generalised by the choice of functor 𝖥. The dynamic coalgebraic setting further adds a choice of modalities (predicate liftings) and a choice of operations on 𝖥-coalgebras. These parameters allow us to cover a wide range of many-valued dynamic logics in a single framework, and facilitate uniform proofs which eliminates the need to reprove concrete results for each new combination of parameters. The abstract setting also helps to identify which conditions ensure that certain results hold. Our framework accommodates iteration constructs and they are included in Sections 34. However, we exclude iteration when proving (strong) completeness in Section 6. As different techniques are needed to prove (weak) completeness including iteration, this is left for future work.

As our main contributions, we (i) define a notion of reducibility for coalgebra operations and tests which entails the soundness of certain reduction axioms (Propositions 25 and 34); (ii) prove that reducible coalgebra operations and tests are safe for bisimulation and behavioural equivalence (Propositions 26 and 35); (iii) prove for finite 𝐀 that one-step completeness of the underlying coalgebraic modal logic implies strong completeness of its dynamic version under certain conditions (Theorem 42). We note that (i) generalises [17] already in the Boolean setting, e.g., we do not require 𝖥 to be a monad in order to axiomatise sequential composition, which allows us to include Instantial PDL [48] in our framework. By instantiating (iii) for concrete 𝖥, we obtain for any finite, linear 𝖥𝖫ew-algebra 𝐀, strong completeness for 2-valued iteration-free PDL with 𝐀-labelled accessibility relations (Example 45), and if furthermore negation is an involution on 𝐀 (e.g., Łukasiewicz logic), we obtain strong completeness for an 𝐀-valued version of iteration-free game logic (Example 46). To our knowledge, both of these results are new.

Related work.

Our work can be seen as a coalgebraic generalisation of the iteration-free part of the axiomatisation for many-valued PDL with many-valued relations (for any finite 𝖥𝖫ew-algebra 𝐀) in [44], and as a dynamic generalisation of the completeness theorems (via one-step completeness) for many-valued coalgebraic modal logics in [27, Theorem 23] (where 𝐀 is a finite 𝖥𝖫ew-algebra) and [24] (where 𝐀 is a semi-primal algebra). Completeness and decidability for variants of many-valued PDL with crisp relations was proved in [43, 45]. Expressivity of many-valued coalgebraic logics has been studied in [2, 3] and in connection with behavioural distances in, e.g., [1].

Omitted proofs and further details can be found in Appendix A.

2 Preliminaries

Setting the scene, we recall some basics of 𝖥𝖫ew-algebras and many-valued modal logic (Subsection 2.1) as well as coalgebraic logic via predicate liftings (Subsection 2.2).

2.1 Many-valued modal logic

The basic idea of many-valued modal logic is to replace the two-element Boolean algebra by another algebra 𝐀 of truth-values (or truth-degrees), which is (an expansion of) a 𝖥𝖫ew-algebra (synonymously a commutative integral residuated lattice, e.g. see [13, Section 2.2]. The name “𝖥𝖫ew-algebra” stems from the fact that these algebras correspond to the Full Lambek Calculus with exchange and weakening).

Definition 1 (𝖥𝖫ew-algebra).

An algebra 𝐀=A,,,,,0,1 is a (complete) 𝖥𝖫ew-algebra if A,,,0,1 is a (complete) bounded lattice, A,,1 is a commutative monoid and 𝐀 satisfies the residuation law xyzxyz, where is the lattice-order.

The choice of 𝐀 determines the underlying many-valued propositional logic. Negation is defined by ¬x:=x0. In particular, different choices of on [0,1] with its usual order (=min, =max) give rise to different fuzzy logics [14] in (3)-(5) below.

Example 2.

The following are examples of 𝖥𝖫ew-algebras.

  1. (1)

    Heyting algebras are 𝖥𝖫ew-algebras with =, including the next two examples.

  2. (2)

    The two-element Boolean algebra 𝟐 yields classical propositional logic.

  3. (3)

    The standard Gödel chain [𝟎,𝟏]𝐆 with = yields infinite Gödel logic and its finite subalgebras 𝐆n yield finite Gödel logics (see, e.g., [36]).

  4. (4)

    The standard 𝖬𝖵-chain [𝟎,𝟏]Ł with xy=max{0,(x+y)1}, xy=min{1,1x+y} and its subalgebras Łn={0,1n,,n1n,1} yield Łukasiewicz logics (see, e.g., [6]).

  5. (5)

    The standard product chain [𝟎,𝟏]𝐏, with the usual product of reals and xy=min{yx,1} (with y0:=1), yields product logic (see, e.g., [15]).

 Remark 3 (Semi-primal 𝖥𝖫ew-algebras).

The algebras Łn of Example 2(4) are examples of 𝖥𝖫ew-algebras which are semi-primal, meaning that they satisfy a term-expressivity property generalizing the well-known functional completeness (primality) of the Boolean algebra 𝟐 (i.e., every map 2n2 is term-definable). A 𝖥𝖫ew-algebra 𝐀 is semi-primal if and only if for all PA, the characteristic function χP:A{0,1} is term-definable in 𝐀, i.e., there exists a unary term-function tP(x):AA with tP(a)=1 if aP else tP(a)=0 [25, Proposition 2.8]. Any finite 𝖥𝖫ew-algebra has a semi-primal expansion by introducing a term for each subset. Semi-primality is the key property in the study of many-valued coalgebraic logics of [24, 23]. In the present paper, the algebra 𝐀 is not required to be semi-primal. However, semi-primality will sometimes be convenient to find reduction axioms (e.g., Example 36(1)) or to ensure one-step completeness of coalgebraic logics (e.g., Example 43).

Let 𝐀 be a complete 𝖥𝖫ew-algebra. Formulas of 𝐀-valued modal logic are inductively defined from a countable set 𝖯𝗋𝗈𝗉 of propositional variables, the algebraic signature of 𝐀 and modalities ,. A crisp Kripke model is a Kripke frame (X,R) together with a propositional valuation map [[]]:𝖯𝗋𝗈𝗉AX, which is inductively extended to all formulas via

[[φ]](x)=xRx[[φ]](x) and [[φ]](x)=xRx[[φ]](x). (1)

More generally, in an 𝐀-labelled Kripke model with 𝐀-labelled accessibility relation R:X2A the semantics of modalities is given by

[[φ]](x)=xXR(x,x)[[φ]](x) and [[φ]](x)=xXR(x,x)[[φ]](x). (2)

Strong completeness results for Gödel modal logic are found in [5] for crisp and [37] for labelled accessibility relations. For Łukasiewicz modal logics such results are found in [18] for crisp and [4] for labelled relations. The latter also includes strong completeness results for 𝐀-valued modal logic (crisp and labelled) for any finite 𝖥𝖫ew-algebra expanded with truth-constants (the crisp case also requires a unique coatom). Lastly, many-valued neighbourhood semantics over arbitrary 𝖥𝖫ew-algebras was studied in [7].

2.2 Coalgebraic logic via predicate liftings

We assume familiarity with basic category theory and coalgebra, and only briefly recall relevant definitions and fix notation. For more details, we refer to, e.g., [26, 38]. Unless stated otherwise, 𝐀 is an arbitrary 𝖥𝖫ew-algebra.

Definition 4 (Coalgebra).

Let 𝖥 be a 𝖲𝖾𝗍-endofunctor. An 𝖥-coalgebra is a map γ:X𝖥X. A map f:XY is a coalgebra morphism from γ:X𝖥X to γ:Y𝖥Y, denoted f:γγ, if 𝖥fγ=γf. The category of 𝖥-coalgebras thus defined is denoted 𝖢𝗈𝖺𝗅𝗀(𝖥).

Example 5.

The following are examples of (categories of) coalgebras.

  1. (1)

    It is well-known that 𝖢𝗈𝖺𝗅𝗀(𝒫) for the covariant powerset functor 𝒫 is isomorphic to the category of Kripke frames (with bounded morphisms).

  2. (2)

    More generally, if 𝐀 is a complete 𝖥𝖫ew-algebra, define the covariant 𝐀-powerset functor 𝒫𝐀 by 𝒫𝐀X=AX, and for f:XY, (𝒫𝐀f)(σ):y{σ(x)f(x)=y}. Coalgebras for 𝒫𝐀 are Kripke frames with 𝐀-labelled accessibility relations as in Subsection 2.1.

  3. (3)

    The 𝐀-neighbourhood functor 𝒩𝐀 is defined as 𝒩𝐀:=A()A(), where A() is the contravariant hom-functor 𝖲𝖾𝗍(,A). The monotone 𝐀-neighbourhood functor 𝐀 is the subfunctor of 𝒩𝐀 obtained by 𝐀X={N𝒩𝐀Xσ1,σ2AX:σ1σ2N(σ1)N(σ2)}. With 𝐀=𝟐, their coalgebras are (monotone) neighbourhood frames (see, e.g., [29]), 𝒩𝐀-coalgebras are the 𝐀-neighbourhood frames of [7].

  4. (4)

    The instantial neighbourhood functor is the double (covariant) powerset functor 𝒫𝒫 and the corresponding coalgebras are instantial neighbourhood frames considered in [49, 48].

Formal reasoning about classes of coalgebras is the subject of coalgebraic logic. We follow the predicate lifting approach (see, e.g., [31]; for an overview of all approaches [22]), that is, our modalities correspond to certain natural transformations. The following generalization of Boolean-valued predicate liftings is, for example, also used in [3, 27].

Definition 6 (Predicate lifting).

A k-ary A-predicate lifting for 𝖥 (where k1) is a natural transformation λ:(A())kA()𝖥.

From a coalgebra γ:X𝖥X and A-predicates [[φ1]],,[[φk]]AX, with λ as above one obtains semantics of modal formulas as [[λ(φ1,,φk)]]=λX([[φ1]],,[[φk]])γ.

For all X, via transposition, λX:(AX)kA𝖥X corresponds to λ^X:𝖥XA(AX)k. Hence λ corresponds to a natural transformation λ^:𝖥k𝒩𝐀, where k𝒩𝐀 is defined by XA(AX)k and similarly to 𝒩𝐀 on morphisms. We frequently employ this correspondence throughout the paper.

A key feature of coalgebraic logic is that modal truth is invariant under coalgebra morphisms, in particular under behavioural equivalence (cf. [22, Definition 4.1 & Corollary 4.4]). In order to have an expressive (see, e.g., [41]) modal language, i.e., where modal equivalence implies behavioural equivalence, the collection of predicate liftings needs to be able to distinguish elements in 𝖥X. This separation property is also required to obtain quasi-canonical models in [39] (which we will need in Section 6).

Definition 7 (Separating).

A collection Λ of predicate liftings is separating if {λ^λΛ} is jointly monic, that is, t1t2 in 𝖥X implies λ^X(t1)λ^X(t2) for some λΛ.

Example 8.

The following are predicate liftings. In (1)-(3), 𝐀 is required to be complete.

  1. (1)

    𝒫-coalgebras are crisp Kripke frames and the 𝐀-valued and modalities (Eq. (1)) correspond to unary A-predicate liftings defined for σAX, Z𝒫(X) by λX(σ):Zσ(Z) and λX(σ):Zσ(Z). It can be checked that {λ} are {λ} separating.

  2. (2)

    For 𝒫𝐀, the 𝐀-valued and modalities on 𝐀-labelled frames (Eq. (2)) correspond to the unary A-predicate liftings defined for σAX and ρ𝒫𝐀X by

    λX(σ):ρxXρ(x)σ(x)andλX(σ):ρxXρ(x)σ(x).

    Again, it can be checked that {λ} and {λ} are separating.

  3. (3)

    For 𝒫𝐀, we obtain a Boolean-valued logic over 𝐀-labelled frames by considering for any r𝐀, the unary 2-predicate lifting λXr:2X2AX defined by λXr(S)={ρAXρ(S)r}. The collection {λr}rA is separating (for 𝐀 linear it suffices to let r range over an order-dense subset DA).

  4. (4)

    For 𝒩𝐀 and 𝐀, the unary A-predicate lifting λ𝖾𝗏 taking evaluations, defined by λX𝖾𝗏(σ)=𝖾𝗏σ:NN(σ), corresponds to 𝐀-valued neighbourhood semantics [7]. One easily checks that {λ𝖾𝗏} is separating for both 𝒩𝐀 and 𝐀.

  5. (5)

    For 𝒫𝒫 and any k, we define the (k+1)-ary 2-predicate lifting λk+1 by λXk+1(S1,,Sk,S)={N𝒫XZN:ZS(i:ZSi)}. The collection {λk+1}k corresponds to the modalities of instantial neighbourhood semantics [49, 48]. It only becomes separating if we use the functor 𝒫𝒫fin instead.

3 Coalgebraic dynamic logic, generalised

Before establishing syntax and semantics of general coalgebraic dynamic logic (Subsection 3.2) we introduce coalgebra operations and tests to provide semantics for the dynamic part.

3.1 Coalgebra operations and tests

For any 𝖲𝖾𝗍-endofunctor 𝖥, we let 𝖴𝖥:𝖢𝗈𝖺𝗅𝗀(𝖥)𝖲𝖾𝗍 denote the forgetful functor sending a coalgebra to its carrier set, and we let 𝖥nX=𝖥X××𝖥X denote the n-fold product (not composition of 𝖥). We will often use γ to denote an 𝖥n-coalgebra and identify γ with the n-tuple (γ1,,γn) of 𝖥-coalgebras in the obvious way. Lastly, for a category 𝒞 we denote by 𝒞ob the discrete category (i.e., only identity morphisms) with the same objects as 𝒞 and, slightly abusing notation, we also use 𝖴𝖥 for the analogous forgetful functor 𝖢𝗈𝖺𝗅𝗀(𝖥)ob𝖲𝖾𝗍.

Definition 9 (Coalgebra operation).

An n-ary coalgebra operation for 𝖥 (where n1) is a functor O:𝖢𝗈𝖺𝗅𝗀(𝖥n)ob𝖢𝗈𝖺𝗅𝗀(𝖥)ob such that 𝖴𝖥O=𝖴𝖥n.

In other words, such an operation takes n-many coalgebras γ1,,γn:X𝖥X and returns a composed coalgebra O(γ1,,γn):X𝖥X on the same carrier. Compatibility with morphisms is not required here, but is important later on for safety (Section 4).

Example 10.

The following are examples of coalgebra operations.

  1. (1)

    A 𝖲𝖾𝗍-indexed family of maps θX:𝖥nX𝖥X (not necessarily natural) induces the operation Oθ:𝖢𝗈𝖺𝗅𝗀(𝖥n)ob𝖢𝗈𝖺𝗅𝗀(𝖥)ob pointwise via Oθ(γ)=θXγ. For example:

    1. (i)

      For 𝒫, set-theoretical operations (e.g., and ) induce coalgebra operations.

    2. (ii)

      More generally for 𝒫𝐀, algebraic operations of 𝐀 induce coalgebra operations. For example ,,:𝒫𝐀2X𝒫𝐀X (taken pointwise) induce binary operations.

    3. (iii)

      Similarly for 𝒩𝐀 (𝐀), any (monotone) 𝐀-operation induces a coalgebra operation.

    4. (iv)

      For 𝒩𝐀 and 𝐀, dual (), defined by N(σ)=¬N(¬σ), induces a unary coalgebra operation. Here, ¬σ for σAX is defined pointwise.

    5. (v)

      The neighbourhood-wise union N1N2={Z1Z2XZiNi} induces a binary coalgebra operation for 𝒫𝒫 (in [48] this is the parallel composition denoted “”).

  2. (2)

    Let (𝖥,η,μ) be a monad (see, e.g., [26, Chapter VI]). As in [17], a natural choice of sequential composition is the binary coalgebra operation given by Kleisli composition defined by γ1;γ2=μX𝖥γ2γ1. This includes the following particular examples.

    1. (i)

      For 𝒫 we get the usual composition of relations x(R1;R2)zy:xR1yR2z.

    2. (ii)

      More generally for 𝒫𝐀, we get the composition of 𝐀-labelled relations defined by (R1;R2)(x,z)={R1(x,y)R2(y,z)yX}.

    3. (iii)

      𝒩𝐀 and 𝐀 are monads with Kleisli composition (ξ1;ξ2)(x)(σ)=ξ1(x)(𝖾𝗏σξ2). For 𝟐, this yields S(N1;N2)(x){yXSN2(y)}N1(x) in particular.

  3. (3)

    For 𝒫𝒫, which is not a monad [20], the sequential composition of instantial neighbourhoods ; of [48, Section 3] (therein denoted “”) is a binary coalgebra operation.

  4. (4)

    The counter-domain (see, e.g., [47]) is the unary coalgebra operation for 𝒫 defined by γ(x)={x} iff γ(x)=, otherwise γ(x)=.

  5. (5)

    Lastly, Kleisli iteration () defined as in [16, Section 2.2] and instantial neighbourhood iteration () of [48, Section 4.1] are unary coalgebra operations.

The dynamic framework in [17] covers operations in items (1) and (2) of Example 10, but not the the ones in items (3) and (4).

Similarly to coalgebra operations, we now define tests. We use 𝖠 to denote the functor of constant value A (whose coalgebras are A-predicates).

Definition 11 (Test).

An A-test for 𝖥 is a functor 𝗍𝖾𝗌𝗍:𝖢𝗈𝖺𝗅𝗀(𝖠)ob𝖢𝗈𝖺𝗅𝗀(𝖥)ob such that 𝖴𝖥𝗍𝖾𝗌𝗍=𝖴𝖠.

An A-test turns a formula φ corresponding to a predicate [[φ]]AX into a coalgebra 𝗍𝖾𝗌𝗍([[φ]]):X𝖥X (intuitively speaking, the transition system for φ?).

Example 12.

The following are examples of tests. Our framework again generalises [17], where only tests of the form in (1) are considered.

  1. (1)

    Suppose that 𝖥 is a pointed monad in the sense of [17, Section 2.3] and let PA be any subset (defining some “property” in A). Then we may define the A-test 𝗍𝖾𝗌𝗍P via 𝗍𝖾𝗌𝗍P(σ)(x)= if σ(x)P then ηX(x) else 𝖥X. Informally, 𝗍𝖾𝗌𝗍P(σ) can be understood as ‘if σ evaluates to a value in P then continue, else abort’. With P={1}, we get the tests of [17] (𝐀=𝟐) and [45] (𝐀=Łn, 𝖥=𝒫).

  2. (2)

    For 𝒫𝐀, another A-test (see, e.g., [44]) is given by the pointwise monoid operation 𝗍𝖾𝗌𝗍(σ)(x)=expwσ, with the “unit vector” ex(x)=1, otherwise ex(x)=0 (i.e., yielding the 𝐀-labelled relation R(x,x)=σ(x), and if xx then R(x,x)=0).

  3. (3)

    For 𝐀, defining 𝗍𝖾𝗌𝗍(σ)(x)=𝖾𝗏x((-)pwσ) generalizes angelic tests of game logic. E.g., in Łukasiewicz logic, 𝗍𝖾𝗌𝗍([[ψ]])(x)([[φ]])=[[ψ]](x)[[φ]](x) reduces the value of [[φ]](x) by (1[[ψ]](x)). Demonic tests are obtained as 𝗍𝖾𝗌𝗍(¬σ), which yields 𝗍𝖾𝗌𝗍([[¬ψ]])(x)([[φ]])=[[ψ]](x)[[φ]](x), i.e., adding [[ψ]](x) to [[φ]](x).

  4. (4)

    For 𝒫𝒫, the 2-test used in [48] can be defined similarly to (1) via 𝗍𝖾𝗌𝗍(S)(x)={{x}} if xS, otherwise 𝗍𝖾𝗌𝗍(S)(x)=.

3.2 Syntax and semantics

From now on, we fix the following data and notation. Let 𝐀 be a complete 𝖥𝖫ew-algebra A,,,,,0,1, possibly extended with further operations. We write 𝗌𝗂𝗀𝗇(𝐀) for the algebraic signature of 𝐀. Let Λ be a countable collection of A-predicate liftings for the 𝖲𝖾𝗍-endofunctor 𝖥. Let 𝖮𝗉 and 𝖳𝖾 be finite collections of coalgebra operations and A-tests for 𝖥, respectively. We use the notation 𝖺𝗋(o), 𝖺𝗋(λ) and 𝖺𝗋(O) for the finite arity of any o𝗌𝗂𝗀𝗇(𝐀), λΛ or O𝖮𝗉. Lastly, let 𝖯𝗋𝗈𝗉 and 𝖠𝗍 be countably infinite sets of propositional variables and atomic actions, respectively.111We use “action” as an abstraction of “program” and “game”.

Definition 13 (Formulas & Actions).

We define the set 𝖥𝗈𝗋𝗆 of (dynamic) formulas and the set 𝖠𝖼𝗍 of actions by simultaneous induction as follows.

𝖥𝗈𝗋𝗆φ::=p𝖯𝗋𝗈𝗉 | o(φ1,,φ𝖺𝗋(o)) | aλ(φ1,,φ𝖺𝗋(λ))
𝖠𝖼𝗍a::=a0𝖠𝗍 | O(a1,,a𝖺𝗋(O)) | 𝗍𝖾𝗌𝗍(φ)

where o𝗌𝗂𝗀𝗇(𝐀), λΛ, O𝖮𝗉 and 𝗍𝖾𝗌𝗍𝖳𝖾.

Note that we always have formulas of the form φφ, φφ, φφ and φφ, as well as :=1, :=0 and ¬φ:=φ.

Definition 14 (Model).

A (dynamic) model is a map γ:𝖠𝖼𝗍(𝖥X)X together with a propositional valuation map [[]]:𝖯𝗋𝗈𝗉AX.

For a model as above we write γa:X𝖥X rather than γ(a). As usual, the propositional valuation is inductively extended to all formulas in 𝖥𝗈𝗋𝗆 via the rules

[[o(φ1,,φ𝖺𝗋(o))]] =opw([[φ1]],,[[φ𝖺𝗋(o)]]),
[[aλ(φ1,,φ𝖺𝗋(λ))]] =λX([[φ1]],,[[φ𝖺𝗋(λ)]])γa.

In order to fully determine a model γ it suffices to provide a map γ0:𝖠𝗍(𝖥X)X (i.e., defined on atomic actions) together with a propositional valuation map, since one can extend the valuation to all formulas as above and simultaneously extend γ0 to all actions via

γO(a1,,a𝖺𝗋(O))=O(γa1,,γa𝖺𝗋(O)) and γ𝗍𝖾𝗌𝗍(φ)=𝗍𝖾𝗌𝗍([[φ]]).

We are mainly interested in these models which, following [17], we call standard.

Definition 15 (Standard model).

A model is called standard if it is obtained from some γ0:𝖠𝗍(𝖥X)X together with a propositional valuation as explained above.

We say φ is true at a state x, if [[φ]](x)=1, and local semantic entailment Γφ holds iff every state x of every standard model satisfies [[φ]](x)=1 whenever [[ψ]](x)=1 for all ψΓ.

Example 16.

The following are examples of coalgebraic dynamic logics.

  1. (1)

    To obtain 𝐀-valued PDL with crisp accessibility relations, set 𝖥=𝒫 and let Λ consist of λ or λ (or both) from 8(1), set 𝖮𝗉={,;,()} and let 𝖳𝖾 consist of test(s) as in 12(1). With 𝐀=Łn and λ this logic is considered in [45] (used, e.g., to model searching games with errors).

  2. (2)

    To obtain 𝐀-valued PDL with 𝐀-labelled accessibility relations, set 𝖥=𝒫𝐀, let Λ consist of λ or λ (or both) from 8(2), set 𝖮𝗉={,;,()} and let 𝖳𝖾 consist of the test defined in 12(2). With λ this is similar to the finitely-valued PDL considered in [44] to argue, among others, about program costs. For example, the formula π1π2 could intuitively be read as ‘executing π1 is always less costly than π2’.

  3. (3)

    To obtain 𝟐-valued PDL over 𝐀-labelled frames, again use 𝖥=𝒫𝐀, 𝖮𝗉={,;,()}, but now with the 2-predicate liftings Λ={λrrA} of 8(3). For example, if 𝐀 is again thought of as describing costs of programs, the formula πrφ could intuitively be read as ‘reaching φ after executing π may cost more than r’.

  4. (4)

    If 𝐀 is linear and negation is involutive (¬¬r=r, for all rA) then we obtain (iteration-free) 𝐀-valued game logic by taking 𝖥=𝐀 with λ𝖾𝗏 of 8(4), 𝖮𝗉={,,(),;} (cf. 10) and 𝖳𝖾 consisting of the test from 12(3). Modal formulas describe A-valued strategic ability in 2-player games (say between Angel and Demon) as follows. Angel wants to maximise truth-values, Demon wants to minimise. Suppose for each game α, we have a monotonic neighbourhood function Sα:XX where USα(x) means that Angel has a strategy when playing α in state x to ensure that the outcome is in U. Let Nα(x)(σ)=USα(x)yUσ(y) for all states xX and all σAX. It is easy to verify monotonicity. We then have [[αφ]](x)=USα(x)yU[[φ]](y), i.e., [[αφ]](x)=r means that at x, Angel has a strategy in α to ensure that for any outcome y, [[φ]](y)r. In an angelic test ψ?φ, the truth value of ψ constrains the overall truth value, and hence can be seen as a challenge for Angel, cf. 12(3). The operations ; , () and are consistent with the above interpretation and the corresponding operations on S in classic game logic [34]. In particular, for all σAX, Nαd(x)(σ)=¬Nα(x)(¬σ) is the least σ-value that Demon can ensure when playing α at x. If 𝐀 is not linear or ¬ is not involutive then () can no longer be understood as introducing the other player (negation is involutive, e.g., in Łukasiewicz logic, but not in Gödel and product logic).

  5. (5)

    Setting 𝐀=𝟐, 𝖥=𝒫𝒫, 𝖮𝗉={,;,()}, 𝖳𝖾 consisting of the test of 12(4) and Λ={λk+1k} of 8(5) we obtain Instantial PDL which was introduced in [48] as a modal logic for computation in open systems.

4 Safety and logical invariance

A fundamental compositional aspect of dynamic logics such as PDL and game logic is that operations and tests are safe for bisimilarity [47, 33], meaning that it suffices to check bisimilarity for the atomic actions to conclude bisimilarity for all actions. In our coalgebraic setting (where bisimilarity and behavioral equivalence may differ), safety can be defined as requiring that the operation preserves coalgebra morphisms.

Definition 17 (Safe coalgebra operation).

A coalgebra operation is safe if it also defines a functor O:𝖢𝗈𝖺𝗅𝗀(𝖥n)𝖢𝗈𝖺𝗅𝗀(𝖥) with 𝖴𝖥O=𝖴𝖥n (i.e., analogous to Definition 9).

Note that 𝖴𝖥O=𝖴𝖥n implies O(f)=f for all coalgebra morphisms f. In other words, safety ensures for γ1,,γn:X𝖥X and γ1,,γn:Y𝖥Y that if f:XY is a joint coalgebra morphism γiγi, then f is also a coalgebra morphism O(γ)O(γ).

The coalgebra operations of Example 10(2)-(5) are safe, which can be shown directly or for (2)-(4) as consequence of Proposition 26 later on. Contrarily, not all pointwise operations of (1) are safe (e.g., for 𝒫𝐀 it holds that is safe but is not), due to the following.

Lemma 18.

Let Oθ:𝖢𝗈𝖺𝗅𝗀(𝖥n)ob𝖢𝗈𝖺𝗅𝗀(𝖥)ob be induced by a collection of maps θX:𝖥nX𝖥X. Then Oθ is safe if and only if θ is a natural transformation 𝖥n𝖥.

We now define safety of tests similarly to coalgebra operations, and show that it can also be characterized by a certain naturality condition.

Definition 19 (Safe test).

An A-test for 𝖥 is safe if it also defines a functor 𝗍𝖾𝗌𝗍:𝖢𝗈𝖺𝗅𝗀(𝖠)𝖢𝗈𝖺𝗅𝗀(𝖥) with 𝖴𝖠O=𝖴𝖥 (i.e., analogous to Definition 11).

In the following, we use 𝖥(-)A(-) to denote the 𝖲𝖾𝗍-functor defined by X(𝖥X)AX on objects and f𝖥f()Af on morphisms.

Lemma 20.

A test is safe if and only if its transpose is a natural transformation 𝖨𝖽𝖥(-)A(-), equivalently 𝖥f𝗍𝖾𝗌𝗍(σf)=𝗍𝖾𝗌𝗍(σ)f for every f:XY and σAY.

Using Lemma 20, one can show that all tests of Example 12 are safe (this is also a consequence of Proposition 35 later on).

We now state the compositionality result via safety for coalgebraic dynamic logics.

Proposition 21.

Let all members of 𝖮𝗉 and 𝖳𝖾 be safe and let γ:𝖠𝖼𝗍(𝖥X)X and γ:𝖠𝖼𝗍(𝖥Y)Y be standard models. If f:γa0γa0 and [[p]]f=[[p]] for all a0𝖠𝗍 and p𝖯𝗋𝗈𝗉, then this also holds for all actions a𝖠𝖼𝗍 and formulas φ𝖥𝗈𝗋𝗆.

Since both bisimulation and behavioural equivalence are defined via joint coalgebra morphisms (see, e.g., [32, Definitions 3.5.1 & 1.3.2]), the following is an immediate consequence.

Corollary 22.

For models as in Proposition 21, if xX and yY are bisimilar (beh.equiv.) for atomic actions, they also are for all actions and [[φ]](x)=[[φ]](y) holds for all φ𝖥𝗈𝗋𝗆.

Regarding expressivity of many-valued coalgebraic logics, in [3, Theorem 3] it is shown that modal equivalence implies bisimilarity for finitary, weak-pullback preserving 𝖥ω, given that Λ is 𝐀-separating [3, Definition 4], meaning that t1t2 in 𝖥(An) implies λAn(σ)(t1)λAn(σ)(t2) for some λΛ and a term-definable σ:AnA . Similarly, under those circumstances one may show that in a standard model γ:𝖠𝖼𝗍(𝖥X)X arising from γ0:𝖠𝗍(𝖥ωX)X, modal equivalence implies bisimilarity with respect to all atomic actions, and therefore with respect to all actions given that every operation and test is safe.

5 Reducibility and soundness

In this section, we discuss the special classes of coalgebra operations and tests that can soundly be reduced to their constituents in a uniform (term-definable) way.

5.1 Templates and reducible coalgebra operations

Intuitively speaking, we will call the n-ary coalgebra operation O reducible with respect to the predicate lifting λ if λ^O(γa1,,γan) can be directly obtained from the logical information of {λ^γajλΛ,j=1,,n}. To make this precise, we introduce the following.

Definition 23 (Template).

For n,k1, the collection of (n,k)-templates, denoted 𝖳𝖾𝗆𝗉𝗅n,k, is the set of formulas inductively defined as follows.

τ::=ω1,,ωk | o(τ1,,τ𝖺𝗋(o)) | jλ(τ1,,τ𝖺𝗋(λ)) with j{1,,n}

Here ω1,,ωk are variables (“placeholders for formulas”), o𝗌𝗂𝗀𝗇(𝐀) and λΛ.

Given some (n,k)-template τ together with n-many actions a=(a1,,an) and k-many formulas φ=(φ1,,φk), there is a corresponding formula τ[a,φ]𝖥𝗈𝗋𝗆 obtained by substituting all occurrences of ωi for φi and all occurrences of j for aj.

Similarly, from an (n,k)-template τ together with γ=(γ1,,γn):X𝖥nX and σ=(σ1,,σk)(AX)k, we inductively define τ[γ,σ]AX via the rules ωi[γ,σ]=σi and

o(τ1,,τ𝖺𝗋(o))[γ,σ] =opw(τ1[γ,σ],,τ𝖺𝗋(o)[γ,σ]),
jλ(τ1,,τ𝖺𝗋(λ))[γ,σ] =λX(τ1[γ,σ],,τ𝖺𝗋(λ)[γ,σ])γj,

where, as usual, in the second equation we use opw to denote o taken pointwise.

Definition 24 (Reducible coalgebra operation).

Let O𝖮𝗉 be n-ary and λΛ be k-ary. We call O reducible with respect to λ if there exists an (n,k)-template τ such that λX(σ)O(γ)=τ[γ,σ] for all γ:X𝖥nX and σ(AX)k. We call O reducible if it is reducible with respect to every λΛ.

By design, a template witnessing reducibility yields a sound reduction axiom as follows.

Proposition 25 (Soundness).

Let τ be a (n,k)-template witnessing that O is reducible with respect to λ. Then O(a1,,an)λ(φ1,,φk)τ[a,φ] is true at every state of any standard model.

Reducible coalgebra operations are safe (Definition 17) if Λ is separating (Definition 7).

Proposition 26.

If Λ is separating and O is reducible, then O is safe.

The converse of Proposition 26 is not necessarily true; a “typical” example of a safe but non-reducible operation being iteration (e.g., of PDL). As first examples of reducible operations we consider sequential compositions as described in Example 10. For Kleisli composition, the following is already shown in [17], the generalization from 𝟐 to 𝐀 being straightforward.

Example 27.

Let 𝖥 be a monad and λΛ be unary with λ^:𝖥𝒩𝐀 a monad morphism. As in [17, Lemma 10], one can show λX(σ)(γ1;γ2)=λX(λX(σ)γ2)γ1, in other words the operation ; is reducible with respect to λ via the template τ=1λ2λω. Thus, a1;a2λφa1λa2λφ holds in all standard models.

Example 27 applies to the logics in Example 16, items (1),(2) and (4). The next example shows that our present framework also accommodates a template for ; in item (3), where 𝖥 is a monad but the predicate liftings λr do not induce monad morphisms.

Example 28.

Consider the 𝟐-valued coalgebraic dynamic logic for 𝒫𝐀 with Λ={λr}rA. If 𝐀 is finite linear, we have λXr(S)(γ1;γ2)=r1r2rλXr1(λXr2(S)γ2)γ1, in other words the template τ=r1r2r1r12r2ω witnesses ; being reducible with respect to λr. Thus, the reduction axioms a1;a2rφr1r2ra1r1a2r2φ hold in all standard models.

As an example where 𝖥 is not a monad at all, we consider Instantial PDL of Example 16(5). The reduction axioms used here are due to [48, Section 3.3].

Example 29.

For Example 16(5), the operation ; is reducible with respect to λk+1 via the (2,k+1)-template 1k+1(22(ω1,ωk+1),,22(ωk,ωk+1),21ωk+1), which is shown similarly to the proof of [48, Proposition 3]. Thus, all standard models validate the reduction axioms a1;a2k+1(ψ1,,ψk,φ)a1k+1(a22(ψ1,φ),,a22(ψk,φ),a21φ).

5.2 Independently reducible operations

Most remaining coalgebra operations from Example 10, in particular the ones induced by natural transformations, fall under the scope of the following “well-behaved” form of reducibility.

Definition 30 (Independent reducibility).

We call O independently reducible with respect to λ if this reducibility can be witnessed by a template in which no jλ with λλ appears.

Clearly this notion only becomes relevant if |Λ|2. Note that in Examples 28 & 29 we already encountered reducible operations that are not independently reducible.

Independent reducibility allows us to shift our attention towards coalgebra operations for k𝒩𝐀 and λ𝖾𝗏 taking 𝖾𝗏(σ1,,σk):A(AX)kA similar to Example 8(4).

Proposition 31.

The n-ary O𝖮𝗉 is independently reducible with respect to the k-ary λΛ if and only if there is a n-ary coalgebra operation Ω for k𝒩𝐀 that is independently reducible with respect to λ𝖾𝗏 and satisfying λ^O=Ωλ^n. Reducibility of O and Ω is witnessed by the same templates (up to swapping jλ and jλ𝖾𝗏).

As illustrated by the following examples, one usually gets the reduction template “for free” after finding the corresponding Ω.

Example 32.

The following are examples of independent reducibility. The predicate liftings are from Example 8 and the operations from Example 10(1).

  1. (1)

    Consider 𝒫 with O induced by :𝒫2𝒫. For λ, the corresponding Ω is induced by :𝒩𝐀2𝒩𝐀, which is shown using the property iI(risi)=iIriIsi of the complete lattice 𝐀. Hence we find the familiar reduction axiom a1a2φa1φa2φ. Similarly, for λ, the corresponding Ω is induced by :𝒩𝐀2𝒩𝐀, leading to [a1a2]φ[a1]φ[a2]φ.

  2. (2)

    Consider 𝒫𝐀 with O induced by . For λ and λ we can use the same Ω as in (1). This can be shown using that the following identities hold in 𝖥𝖫ew-algebras (see, e.g., [13, Lemma 2.6]): (r1r2)s=(r1s)(r2s) and (r1r2)s=(r1s)(r2s).

  3. (3)

    Consider again 𝒫𝐀 with O induced by . If 𝐀 is linear, then O is independently reducible with respect to the (𝟐-valued) λr, with Ω again induced by , due to the equivalence iIsisir iff iIsir or iIsir.

  4. (4)

    Consider 𝐀 with O induced by dual (). With λ𝖾𝗏, clearly Ω is itself induced by dual and we get the axiom aφ¬a¬φ. A similar argument works for and .

  5. (5)

    Consider 𝒫𝒫 and O induced by . This operation is independently reducible with respect to λk+1 by taking Ω induced by θXk+1:(k+1)𝒩2X(k+1)𝒩X with θXk+1(N1,N2):(S1,,Sk,S)K{1,,k}N1(S1K,,SkK,S)N2(S1Kc,,SkKc,S), where SiK=Si if iK, otherwise SiK=X and SiKc defined similarly for Kc:={1,,k}K (shown as in [48, Proposition 3]). Letting ψiK=ψi if iK, otherwise ψiK= and similarly with ψiKc, this yields the corresponding reduction axiom a1a2(ψ1,,ψk,φ)K{1,,k}a1(ψ1K,,ψkK,φ)a2(ψ1Kc,,ψkKc,φ).

  6. (6)

    As example with O and Ω not induced operations, consider the counter-domain for 𝒫 of 10(4). For λ, this operation is independently reducible via Ω(ξ)(x)(σ)=ξ(x)(0)σ(x), yielding the axiom [a]φ([a]φ).

5.3 Reducible tests

Compared to coalgebra operations, describing the condition for being able to find sound reduction axioms for tests (recall Definition 11) is rather straightforward.

Definition 33.

Let λΛ be a k-ary predicate lifting. We call 𝗍𝖾𝗌𝗍𝖳𝖾 reducible with respect to λ if there is a (k+1)-ary 𝐀-term function t(x,x1,,xk):Ak+1A such that λ(σ1,,σk)𝗍𝖾𝗌𝗍(σ)=tpw(σ,σ1,,σk) for all σ,σiAX. We call 𝗍𝖾𝗌𝗍 reducible if it is reducible with respect to every λΛ.

The following soundness result for tests again follows directly from the definitions.

Proposition 34.

Let t::Ak+1A witness that 𝗍𝖾𝗌𝗍 is reducible with respect to λ. Then 𝗍𝖾𝗌𝗍(ψ)λ(φ1,,φk)t(ψ,φ1,,φk) is true at every state of any standard model.

We also get the following analogue of Proposition 26 for tests.

Proposition 35.

If Λ is separating and 𝗍𝖾𝗌𝗍 is reducible, then 𝗍𝖾𝗌𝗍 is safe.

Example 36.

The following are examples of reducible tests.

  1. (1)

    Let 𝖥 be a pointed monad and 𝗍𝖾𝗌𝗍P as in 12(1), checking the “property” PA. Furthermore, assume the characteristic function χP is 𝐀-term definable (e.g., this holds for Łn and any other semi-primal 𝐀 [24]), λ is unary and λ^ is a monad morphism. If λ^X(𝖥X)=1 for all X (i.e., λ is “-like”), we can take 𝗍𝖾𝗌𝗍P(ψ)φ(χP(ψ)φ) as reduction axiom. In particular, for P={1} and 𝐀=Łn we recover the axiom used in [45, Proposition 2.3]. If λ^X(𝖥X)=0 for all X (i.e., λ is “-like”), we may take 𝗍𝖾𝗌𝗍P(ψ)φ(χP(ψ)φ) as reduction axiom.

  2. (2)

    Consider 𝒫𝐀 with 𝗍𝖾𝗌𝗍 as in 12(2). For λ we have the reduction axiom 𝗍𝖾𝗌𝗍(ψ)φ(ψφ) and for λ we have the reduction axiom 𝗍𝖾𝗌𝗍(ψ)φ(ψφ).

  3. (3)

    For 𝒩𝐀 or 𝐀, λ𝖾𝗏 and 𝗍𝖾𝗌𝗍 from 12(3), we also have 𝗍𝖾𝗌𝗍(ψ)φ(ψφ).

  4. (4)

    For 𝒫𝒫, λk+1 and 𝗍𝖾𝗌𝗍 from 12(4), we get 𝗍𝖾𝗌𝗍(ψ)k+1(φ1,,φk,φ)(ψφφ1φk) analogously to [48, Proposition 3].

With soundness for reducible operations taken care of, next we deal with completeness.

6 Strong completeness

From now on, assume that every member of 𝖮𝗉 and 𝖳𝖾 is reducible and that we have an axiomatization of the underlying 𝐀-valued coalgebraic logic of 𝖥 and Λ, denoted by 𝖥.

Definition 37 (The logic 𝖥𝖣𝗒𝗇).

The dynamic coalgebraic logic 𝖥𝖣𝗒𝗇𝖥𝗈𝗋𝗆 is the smallest set of dynamic formulas satisfying the following.

  • 𝖥𝖣𝗒𝗇 contains for every action a𝖠𝖼𝗍, the axioms of 𝖥 with respect to the modalities {aλ}λΛ and is closed under the corresponding rules of 𝖥.

  • 𝖥𝖣𝗒𝗇 contains for every pair (O,λ)𝖮𝗉×Λ, all instances of the reduction axiom O(a)λ(φ)τ[a,φ], where the template τ witnesses reducibility (Subsection 5.1).

  • 𝖥𝖣𝗒𝗇 contains for every pair (𝗍𝖾𝗌𝗍,λ)𝖳𝖾×Λ, all instances of the reduction axiom 𝗍𝖾𝗌𝗍(ψ)λ(φ)t(ψ,φ), where the term-function t witnesses reducibility (Subsection 5.3).

We aim to prove strong completeness ΓφΓ𝖥𝖣𝗒𝗇φ, where the relation on the left-hand side is local semantic entailment of standard models (recall Subsection 3.2) and the relation on the right-hand side intuitively holds if φ follows from Γ and 𝖥𝖣𝗒𝗇 via 𝐀-reasoning. It is formally defined in terms of non-modal homomorphism in the next subsection.

6.1 Non-modal homomorphisms and quasi-canonical models

Generalising maximally consistent theories for many-valued logics, we use non-modal homomorphisms [4] (also used for many-valued PDL [44] and coalgebraic logic [27]).

Definition 38 (Non-modal homomorphism).

A map h:𝖥𝗈𝗋𝗆𝐀 is a non-modal homomorphism for 𝖥𝖣𝗒𝗇 if it respects the algebraic operations of 𝐀 and satisfies h(𝖥𝖣𝗒𝗇)={1}.

We use to denote the set of all such non-modal homomorphisms and define Γ𝖥𝖣𝗒𝗇φ iff for all h, h(Γ)={1}h(φ)=1. By a standard argument, for strong completeness it suffices to find some quasi-canonical model with carrier (generalising [39]).

Definition 39 (Quasi-canonical model).

A map ζ:𝖠𝖼𝗍𝖥() together with the canonical propositional valuation [[p]]c:=𝖾𝗏p (i.e., hh(p)) is a quasi-canonical model for 𝖥𝖣𝗒𝗇 if the property [[φ]]c=𝖾𝗏φ extends to all formulas φ𝖥𝗈𝗋𝗆.

The main result of this subsection shows that it suffices to establish a coherence property for atomic actions in order to obtain a standard quasi-canonical model.

Theorem 40.

Let ζ0:𝖠𝗍(𝖥) be coherent for atomic actions, meaning that

λ(𝖾𝗏φ1,,𝖾𝗏φ𝖺𝗋(λ))(ζa00(h))=h(a0λ(φ1,,φ𝖺𝗋(λ)))

holds for all a0𝖠𝗍, λΛ, φi𝖥𝗈𝗋𝗆 and h. Let ζ:𝖠𝖼𝗍(𝖥) be the standard extension of ζ0 as in Definition 15. Then ζ is a quasi-canonical model for 𝖥𝖣𝗒𝗇.

Proof.

By mutual induction we show that [[φ]]c=𝖾𝗏φ:A for all formulas φ𝖥𝗈𝗋𝗆 and coherence (as in the statement) for all actions a𝖠𝖼𝗍 hold in ζ. Only the case φ=aλ(φ1,,φk) for some non-atomic action a𝖠𝖼𝗍 and k-ary λΛ is not immediate.

Coalgebra operations.

Let a=O(a1,,an) for some n-ary O𝖮𝗉 and inductively assume that coherence holds for all ζaj. Let τ be the (n,k)-template corresponding to the reduction axiom for (O,λ) contained in 𝖥𝖣𝗒𝗇. Then for every h we have

h(O(a1,,an)λ(φ1,,φk))=h(τ[a1,,an,φ1,,φk]),

which shows 𝖾𝗏O(a1,,an)λ(φ1,,φk)=𝖾𝗏τ[a1,,an,φ1,,φk]. On the other hand, since τ witnesses reducibility, together with the inductive hypothesis on φ1,,φk we get

[[O(a1,,an)λ(φ1,,φk)]]c =λ(𝖾𝗏φ1,,𝖾𝗏φk)O(ζa1,,ζan)
=τ[ζa1,,ζan,𝖾𝗏φ1,,𝖾𝗏φk].

Thus, it suffices to show that for every τ𝖳𝖾𝗆𝗉𝗅n,k it holds that 𝖾𝗏τ[a,φ]=τ[ζa,𝖾𝗏φ], abbreviating ζa=(ζa1,,ζan) and 𝖾𝗏φ=(𝖾𝗏φ1,,𝖾𝗏φk). This we show by induction on the structure of τ. For τ=ωi, directly by definition we get 𝖾𝗏ωi[a,φ]=𝖾𝗏φi=ωi[ζa,𝖾𝗏φ]. For τ=o(τ1,,τ𝖺𝗋(o)) we use the inductive hypothesis on the τi to find

τ[ζa,𝖾𝗏φ]=opw(τ1[ζa,𝖾𝗏φ],,τ𝖺𝗋(o)[ζa,𝖾𝗏φ])=opw(𝖾𝗏τ1[a,φ],,𝖾𝗏τ𝖺𝗋(o)[a,φ]).

Using that h commutes with the 𝐀-operation o we observe that this sends every h to

opw(𝖾𝗏τ1[a,φ],,𝖾𝗏τ𝖺𝗋(o)[a,φ])(h)=h(o(τ1[a,φ],,τ𝖺𝗋(o)[a,φ]))=h(τ[a,φ])

as desired. Lastly, for the case τ=jλ(τ1,,τ𝖺𝗋(λ)), first we use the inductive hypothesis on the τi and get

τ[ζa,𝖾𝗏φ] =λ(τ1[ζa,𝖾𝗏φ],,τ𝖺𝗋(λ)[ζa,𝖾𝗏φ])ζaj
=λ(𝖾𝗏τ1[a,φ],,𝖾𝗏τ𝖺𝗋(λ)[a,φ])ζaj.

Now we make use of the inductive hypothesis on coherence with respect to the action aj, which yields that for every h we have

λ(𝖾𝗏τ1[a,φ],,𝖾𝗏τ𝖺𝗋(λ)[a,φ])(ζaj(h))=h(ajλ(τ1[a,φ],,τ𝖺𝗋(λ)[a,φ]))

as desired, finishing the case of actions composed by coalgebra operations.

Tests.

The last case we discuss is a=𝗍𝖾𝗌𝗍(ψ), inductively assuming that [[ψ]]=𝖾𝗏ψ already holds. Let t(x,x1,,xk):Ak+1A be the 𝐀-term-function corresponding to the reduction axiom for (𝗍𝖾𝗌𝗍,λ) in 𝖥𝖣𝗒𝗇. Then for any h we get

[[𝗍𝖾𝗌𝗍(ψ)λ(φ)]]c =λ(𝖾𝗏φ1,,𝖾𝗏φk)(𝗍𝖾𝗌𝗍(𝖾𝗏ψ)(h)) (Def. & Ind. Hyp.)
=t(𝖾𝗏ψ(h),𝖾𝗏φ1(h),,𝖾𝗏φk(h)) (Reducibility 𝗍𝖾𝗌𝗍)
=t(h(ψ),h(φ1),,h(φk))=h(t(ψ,φ)). (Definition 𝖾𝗏, h)

Finally, we have h(t(ψ,φ))=h(𝗍𝖾𝗌𝗍(ψ)φ) since this reduction axiom is included in 𝖥𝖣𝗒𝗇.

Note that this theorem does not require extra assumptions on 𝐀. In the next subsection we offer a way to prove existence of quasi-canonical models for finite 𝐀.

6.2 Finite one-step completeness

Our strategy to obtain quasi-canonical models, inspired by [39], relies on the assumption that the underlying coalgebraic logic 𝖥 is strongly one-step complete over finite sets. While [17] follows a similar strategy, here we adapt the proof of [39, Theorem 2.5] more directly.

First, recall that a formula is rank-1 if every propositional variable is in the scope of precisely one modality. For any set X, we define the set of formal expressions Λ(AX):={λ(σ1,,σ𝖺𝗋(λ))λΛ,σiAX}. We call H:Λ(AX)A a rank-1 non-modal homomorphism for 𝖥 if H (extended to 𝐀-term combinations of Λ(AX) in the obvious way) sends all instances of rank-1 formulas of 𝖥 to 1. We say that H is (one-step) satisfiable if there exists some α𝖥X such that λX(σ1,,σ𝖺𝗋(λ))(α)=H(λ(σ1,,σ𝖺𝗋(λ))) holds for all λΛ and σiAX. The following is a generalisation of [39, Definition 2.4].

Definition 41 (Finite one-step completeness).

𝖥 is strongly one-step complete over finite sets if every rank-1 non-modal homomorphism H:Λ(AX)A with finite X is satisfiable.

Recalling more terminology of [39], a surjective ω-cochain of finite sets is a sequence of finite sets (Xm)m together with surjective projection maps pm:Xm+1Xm. Its inverse limit limXm consists of all sequences (xm)Xm that are coherent, that is pm(xm+1)=xm. The functor 𝖥 weakly preserves inverse limits of surjective ω-cochains of finite sets if 𝖥(limXi)lim𝖥Xi is surjective. For brevity we call such 𝖥 weakly preserving.

The main theorem of this subsection is the following adaptation of [39, Theorem 2.5] to the dynamic setting. In order to use Definition 41, we need 𝐀 itself to be finite.

Theorem 42.

For 𝐀 finite, Λ separating, 𝖥 weakly preserving, and 𝖥 strongly one-step complete over finite sets, there exists a quasi-canonical model for 𝖥𝖣𝗒𝗇.

Proof.

Fix an arbitrary atomic action a𝖠𝗍 and an arbitrary non-modal homomorphism h. It suffices to show that there exists some α𝖥 such that

λ(𝖾𝗏φ1,,𝖾𝗏φ𝖺𝗋(λ))(α)=h(aλ(φ1,,φ𝖺𝗋(λ)))

for all λΛ and all φ1,,φ𝖺𝗋(λ)𝖥𝗈𝗋𝗆, since we can then define ζa0(h):=α, which ensures ζa0 is coherent as in Theorem 40. Equivalently, setting ={𝖾𝗏φφ𝖥𝗈𝗋𝗆}A and letting Ha:Λ()A be defined by λ(𝖾𝗏φ1,,𝖾𝗏φ𝖺𝗋(λ))h(a(φ1,,φ𝖺𝗋(λ))), we need to show that Ha is one-step satisfiable in 𝖥.

Enumerate the sets 𝖯𝗋𝗈𝗉, 𝖠𝖼𝗍 and Λ (recall from Subsection 3.2 that these were assumed countable). For all m, let 𝖥𝗈𝗋𝗆(m)𝖥𝗈𝗋𝗆 be the set of formulas φ such that φ only contains the first m-many propositional variables, actions and predicate liftings according to these enumerations, and φ has modal depth at most m and at most m occurrences of 𝐀-connectives. Note that 𝖥𝗈𝗋𝗆(m) is finite. Furthermore, for all m, define the collection of restrictions of non-modal homomorphisms (m)={h𝖥𝗈𝗋𝗆(m)h}. Since 𝐀 and 𝖥𝗈𝗋𝗆(m) are finite, the sets (m) are also finite. It is easily seen that lim(m) where all projection maps are given by restrictions.

Now set (m)={𝖾𝗏φφ𝖥𝗈𝗋𝗆(m)}A(m) and let Ha(m):Λ((m))A be the corresponding restriction of Ha. Since we included the axioms for 𝖥 (“instantiated” for a) in 𝖥𝖣𝗒𝗇 and since h is a non-modal homomorphism for 𝖥𝖣𝗒𝗇, it follows that Ha(m) is a rank-1 non-modal homomorphism for 𝖥. Thus, by strong one-step completeness over finite sets, we get some α(m)𝖥((m)) which one-step satisfies Ha(m).

Since Λ is separating, the sequence (α(m)) is coherent, that is, an element of lim(m). Lastly, since 𝖥 is weakly preserving, there exists some α𝖥 which induces this sequence. To check that this α one-step satisfies Ha, for λΛ and φ1,,φ𝖺𝗋(λ) choose m sufficiently large to ensure aλ(φ1,,φ𝖺𝗋(λ))𝖥𝗈𝗋𝗆(m). Then naturality of λ applied to the limit projection (m) finally yields

λ(𝖾𝗏φ1,,𝖾𝗏φ𝖺𝗋(λ))(α) =λ(m)(𝖾𝗏φ1,,𝖾𝗏φ𝖺𝗋(λ))(α(m))
=Ha(m)(λ(𝖾𝗏φ1,,𝖾𝗏φ𝖺𝗋(λ)))
=Ha(λ(𝖾𝗏φ1,,𝖾𝗏φ𝖺𝗋(λ)))=h(aλ(φ1,,φ𝖺𝗋(λ)))

as desired, due to our construction of the α(m). This finishes the proof.

Lastly, we apply this to (the iteration-free parts of) the dynamic logics of Example 16.

Example 43 (Many-valued PDL, crisp accessibility).

Consider the iteration-free part of the dynamic logic from Example 16(1), in particular, 𝖥=𝒫 and Λ={λ} (Example 8(1)). Since 𝒫 is weakly preserving [39, Example 3.1], for finite 𝐀 we can apply Theorem 42 with the reduction axioms (for the last reduction axiom, we need χP to be term-definable in 𝐀)

[a1;a2]p[a1][a2]p,[a1a2]p[a1]p[a2]p,[𝗍𝖾𝗌𝗍P(φ)]p(χP(φ)p)

of Example 27, Example 32(1), Example 36(1), respectively. For the underlying logic 𝖥, one may consider the axiomatizations of [4, Subsection 4.4] if 𝐀 is endowed with truth-constants and has a unique coatom (for 𝐀=𝐆n a finite Gödel chain without constants see [5, Section 4]) or [24, Subsection 4.1] if 𝐀 is semi-primal. In particular, the latter holds for finite Łukasiewicz-chains Łn (also see [18, 4]), hence this may be used to obtain strong completeness for the iteration-free part of Łn-valued PDL with crisp accessibility relations considered in [45].

Example 44 (Many-valued PDL, labelled accessibility).

Consider the iteration-free part of the dynamic logic from Example 16(2), in particular, 𝖥=𝒫𝐀 and Λ={λ} (Example 8(2)). If 𝐀 is linear, then 𝒫𝐀 is weakly preserving (whether linearity is necessary is left open here). Thus, Theorem 42 is applicable for finite linear 𝐀 with reduction axioms

[a1;a2]p[a1][a2]p,[a1a2]p[a1]p[a2]p,[𝗍𝖾𝗌𝗍(φ)]p(φp)

of Example 27, Example 32(2), Example 36(2), respectively. If 𝐀 is endowed with canonical truth-constants cˇ for all c𝐀, for an axiomatization of 𝖥 consider the one from [4, Subsection 4.2] (for 𝐀=Łn without constants see [4, Subsection 5.1]). In particular, this may be used to obtain strong completeness for the iteration-free part of 𝐀-valued PDL with 𝐀-labelled accessibility relations of [44] (with tests added). Using Λ={λ} instead (note that and are not necessarily inter-definable since ¬ need not be involutive), the corresponding reduction axioms are a1;a2pa1a2p, a1a2pa1pa2p and 𝗍𝖾𝗌𝗍(φ)p(φp). For 𝖥, we can use the axiomatization (pq)pq and (pcˇ)pcˇ for all c𝐀.

Example 45 (Two-valued PDL, labelled accessibility).

Consider the iteration-free part of the dynamic logic from Example 16(3), in particular, 𝖥=𝒫𝐀 and Λ={λrrA}, the 2-predicate liftings of Example 8(3). Let 𝐀 be finite linear, then Theorem 42 applies with the reduction axioms

a1;a2rpr1r2ra1r1a2r2p,a1a2rpa1rpa2rp,𝗍𝖾𝗌𝗍(φ)rp(φp)

of Example 28, Example 32(3) and Example 12(1), respectively. An axiomatization of the underlying 𝖥 is found in [28, Definition 4.5].

Example 46 (Many-valued game logic).

Consider the iteration-free part of the dynamic logic of Example 16(4), in particular, 𝖥=𝐀, Λ={λ𝖾𝗏} (Example 8(4)) and 𝐀 is finite, linear with involutive negation (e.g., 𝐀=Łn). The functor 𝐀 is weakly preserving for any 𝖥𝖫ew-algebra 𝐀. Since 𝐀 is finite, Theorem 42 applies with the reduction axioms

a1;a2pa1a2p,a1a2pa1pa2p,a1a2pa1pa2p,
ap¬a¬p,𝗍𝖾𝗌𝗍(φ)p(φp)

of Example 27, Example 32(4) and Example 36(3). For 𝖥 with 𝐀=Łn, we can add the monotonicity axiom 𝖾𝗏p𝖾𝗏(pq) to the axiomatisation of Łn in [6] to obtain strong completeness for Łn-based game logic.

Example 47 (Instantial PDL).

Consider iteration-free Instantial PDL similarly to Example 16(5) with 𝖥=𝒫𝒫fin (to ensure separation, the case 𝒫𝒫 is left open here) and Λ={λk+1k0} as in Example 8(5). This functor is weakly preserving, which is proved as for 𝒫. Thus, Theorem 42 is applicable with the reduction axioms from [48] (see also Examples 29 & 5.2(5) & 36(4)) for 𝖮𝗉={;,} and 𝖳𝖾={𝗍𝖾𝗌𝗍} as in Example 12(4). For the underlying logic 𝖥, a clear candidate is the rank-1 axiomatization of [49, Section 4].

To the best of our knowledge, Examples 45 and 46, Example 44 with λ (or tests included) and Example 43 with 𝐀Łn are novel results. Example 47 is not covered by the results in [17] and thus further demonstrates the generality of the present framework.

7 Future work

An obvious question for future consideration is how to prove completeness with non-reducible operations like iteration. Since this paper generalises [17], one would reasonably attempt to generalise its follow-up [16]. However, this could be challenging in the many-valued case, for example [44] needs to replace () by ()+ and omit tests for technical reasons. A coalgebraic analysis may shed light on the nature of these issues, helping to resolve them in the future.

Other interesting questions arise regarding safety. For PDL, [47] shows that all safe first-order definable 𝒫-operations are combinations of , ; , and propositional tests. A similar result for game logic is shown in [33]. One could try to characterise safe coalgebra operations that are first-order definable via coalgebraic correspondence theory [40]. In work on behavioural/logical distances [1], algebras of truth-values are often assumed to be commutative integral quantales. We note that complete 𝖥𝖫ew-algebras can be seen as a subclass of these. In this context, safety could perhaps be studied as non-expansion of behavioural/logical distance.

While we only consider 𝖲𝖾𝗍-functors here, it would be interesting to explore these topics over various other base categories, such as the category of measurable spaces to accommodate probabilistic dynamic logics [21, 9]. This category could also be quantale-enriched (relating this to the previous paragraph) or poset-enriched (as in positive coalgebraic logic [8]).

Lastly we mention that completeness, as in Section 6, for coalgebraic logics valued in an infinite 𝐀 currently seems out of reach. One likely reason for this is the (as of yet) lack of research in many-valued coalgebraic logic (some of the few examples are [42, 2, 3, 23, 24, 27]). Therefore, we also advocate for future research in this area.

References

  • [1] Harsh Beohar, Sebastian Gurke, Barbara König, Karla Messing, Jonas Forster, Lutz Schröder, and Paul Wild. Expressive Quantale-Valued Logics for Coalgebras: An Adjunction-Based Approach. In Olaf Beyersdorff, Mamadou M. Kanté, Orna Kupferman, and Daniel Lokshtanov, editors, 41st International Symposium on Theoretical Aspects of Computer Science (STACS’24), volume 289 of Leibniz International Proceedings in Informatics, pages 10:1–10:19. Schloss Dagstuhl – Leibniz-Zentrum für Informatik, 2024. doi:10.4230/LIPIcs.STACS.2024.10.
  • [2] Marta Bílková and Matěj Dostál. Many-valued relation lifting and Moss’ coalgebraic logic. In Reiko Heckel and Stefan Milius, editors, Algebra and Coalgebra in Computer Science (CALCO’13), pages 66–79. Springer, 2013. doi:10.1007/978-3-642-40206-7_7.
  • [3] Marta Bílková and Matěj Dostál. Expressivity of many-valued modal logics, coalgebraically. In Jouko Väänänen, Åsa Hirvonen, and Ruy de Queiroz, editors, Logic, Language, Information, and Computation (WoLLIC’16), pages 109–124. Springer, 2016. doi:10.1007/978-3-662-52921-8_8.
  • [4] Félix Bou, Francesc Esteva, Lluís Godo, and Ricardo O. Rodríguez. On the minimum many-valued modal logic over a finite residuated lattice. Journal of Logic and Computation, 21(5):739–790, 2011. doi:10.1093/logcom/exp062.
  • [5] Xavier Caicedo and Ricardo O. Rodríguez. Standard Gödel modal logics. Studia Logica, 94(2):189–214, 2010. doi:10.1007/s11225-010-9230-1.
  • [6] Roberto L. O. Cignoli, Itala M. L. D’Ottaviano, and Daniele Mundici. Algebraic Foundations of Many-Valued Reasoning, volume 7 of Trends in Logic. Springer, 2000.
  • [7] Petr Cintula and Carles Noguera. Neighborhood semantics for modal many-valued logics. Fuzzy Sets and Systems, 345:99–112, 2018. doi:10.1016/j.fss.2017.10.009.
  • [8] Fredrik Dahlqvist and Alexander Kurz. The positivication of coalgebraic logics. In Filippo Bonchi and Barbara König, editors, Algebra and Coalgebra in Computer Science (CALCO’17), volume 72 of Leibniz International Proceedings in Informatics, pages 9:1–9:15. Schloss Dagstuhl – Leibniz-Zentrum für Informatik, 2017. doi:10.4230/LIPIcs.CALCO.2017.9.
  • [9] Ernst-Erich Doberkat. Towards a probabilistic interpretation of game logic. In Wolfram Kahl, Michael Winter, and José Oliveira, editors, Relational and Algebraic Methods in Computer Science (RAMiCS’15), pages 43–47. Springer, 2015. doi:10.1007/978-3-319-24704-5_3.
  • [10] Michael J. Fischer and Richard E. Ladner. Propositional dynamic logic of regular programs. Journal of Computer and System Sciences, 18(2):194–211, 1979. doi:10.1016/0022-0000(79)90046-1.
  • [11] Melvin C. Fitting. Many-valued modal logics. Fundamenta Informaticae, 15(3-4):235–254, 1991. doi:10.3233/FI-1991-153-404.
  • [12] Melvin C. Fitting. Many-valued modal logics II. Fundamenta Informaticae, 17(1-2):55–73, 1992. doi:10.3233/FI-1992-171-205.
  • [13] Nikolaos Galatos, Peter Jipsen, Tomasz Kowalski, and Hiroakira Ono. Residuated Lattices: An algebraic glimpse at substructural logics, volume 151 of Studies in Logic and the Foundations of Mathematics. Elsevier, 2007.
  • [14] Petr Hájek. Metamathematics of Fuzzy Logic, volume 4 of Trends in Logic. Springer, 1998. doi:10.1007/978-94-011-5300-3.
  • [15] Petr Hájek, Lluís Godo, and Francesc Esteva. A complete many-valued logic with product-conjunction. Archive for Mathematical Logic, 35(3):191–208, 1996. doi:10.1007/BF01268618.
  • [16] Helle H. Hansen and Clemens Kupke. Weak Completeness of Coalgebraic Dynamic Logics. In Ralph Matthes and Matteo Mio, editors, Tenth International Workshop on Fixed Points in Computer Science (FICS’15), volume 191 of EPTCS, pages 90–104, 2015. doi:10.4204/EPTCS.191.9.
  • [17] Helle H. Hansen, Clemens Kupke, and Raul A. Leal. Strong completeness for iteration-free coalgebraic dynamic logics. In Josep Díaz, Ivan Lanese, and Davide Sangiorgi, editors, 8th International Conference on Theoretical Computer Science (TCS’14), pages 281–295. Springer, 2014. doi:10.1007/978-3-662-44602-7_22.
  • [18] Georges Hansoul and Bruno Teheux. Extending Łukasiewicz logics with a modality: Algebraic approach to relational semantics. Studia Logica, 101(3):505–545, 2013. doi:10.1007/s11225-012-9396-9.
  • [19] David Harel, Dexter Kozen, and Jerzy Tiuryn. Dynamic Logic. MIT Press, 2000.
  • [20] Bartek Klin and Julian Salamanca. Iterated covariant powerset is not a monad. Electronic Notes in Theoretical Computer Science, 341:261–276, 2018. doi:10.1016/j.entcs.2018.11.013.
  • [21] Dexter Kozen. A probabilistic PDL. Journal of Computer and System Sciences, 30(2):162–178, 1985. doi:10.1016/0022-0000(85)90012-1.
  • [22] Clemens Kupke and Dirk Pattinson. Coalgebraic semantics of modal logics: An overview. Theoretical Computer Science, 412(38):5070–5094, 2011. doi:10.1016/j.tcs.2011.04.023.
  • [23] Alexander Kurz and Wolfgang Poiger. Many-Valued Coalgebraic Logic: From Boolean Algebras to Primal Varieties. In Paolo Baldan and Valeria de Paiva, editors, 10th Conference on Algebra and Coalgebra in Computer Science (CALCO’23), volume 270 of Leibniz International Proceedings in Informatics, pages 17:1–17:17. Schloss Dagstuhl – Leibniz-Zentrum für Informatik, 2023. doi:10.4230/LIPIcs.CALCO.2023.17.
  • [24] Alexander Kurz, Wolfgang Poiger, and Bruno Teheux. Many-valued coalgebraic logic over semi-primal varieties. Logical Methods in Computer Science, 20(3), 2024. doi:10.46298/lmcs-20(3:6)2024.
  • [25] Alexander Kurz, Wolfgang Poiger, and Bruno Teheux. New perspectives on semi-primal varieties. Journal of Pure and Applied Algebra, 228(4):article no. 107525, 2024. doi:10.1016/j.jpaa.2023.107525.
  • [26] Saunders Mac Lane. Categories for the Working Mathematician, volume 5 of Graduate Texts in Mathematics. Springer, second edition, 1997. doi:10.1007/978-1-4757-4721-8.
  • [27] Chun-Yu Lin and Churn-Jung Liau. Many-valued coalgebraic modal logic: One-step completeness and finite model property. Fuzzy Sets and Systems, 467:article no. 108564, 2023. doi:10.1016/j.fss.2023.108564.
  • [28] Minghui Ma and Shanxia Wang. Finite-chain graded modal logic. In Shier Ju, Hu Liu, and Hiroakira Ono, editors, Modality, Semantics and Interpretations: The Second Asian Workshop on Philosophical Logic, pages 71–85. Springer, 2015. doi:10.1007/978-3-662-47197-5_4.
  • [29] Eric Pacuit. Neighborhood Semantics for Modal Logic. Short Textbooks in Logic. Springer, 2017. doi:10.1007/978-3-319-67149-9.
  • [30] Rohit Parikh. Propositional game logic. In 24th Annual Symposium on Foundations of Computer Science, pages 195–200. IEEE Computer Society, 1983. doi:10.1109/SFCS.1983.47.
  • [31] Dirk Pattinson. Coalgebraic modal logic: Soundness, completeness and decidability of local consequence. Theoretical Computer Science, 309(1):177–193, 2003. doi:10.1016/S0304-3975(03)00201-9.
  • [32] Dirk Pattinson. An introduction to the theory of coalgebras. Lecture notes for NASSLLI’03. Available online at https://ncatlab.org/nlab/files/Pattinson-Coalgebras.pdf (Accessed: Feb 26, 2025), 2003.
  • [33] Marc Pauly. From programs to games: Invariance and safety for bisimulation. In Peter G. Clote and Helmut Schwichtenberg, editors, Computer Science Logic, volume 1862 of Lecture Notes in Computer Science, pages 485–496. Springer, 2000. doi:10.1007/3-540-44622-2_33.
  • [34] Marc Pauly and Rohit Parikh. Game logic - An overview. Studia Logica, 75(2):165–182, 2003. doi:10.1023/A:1027354826364.
  • [35] André Platzer. Differential game logic. ACM Trans. Comput. Log., 17(1):1–51, 2015. doi:10.1145/2817824.
  • [36] Norbert Preining. Gödel logics – A survey. In Christian G. Fermüller and Andrei Voronkov, editors, Logic for Programming, Artificial Intelligence, and Reasoning (LPAR’10), pages 30–51. Springer, 2010. doi:10.1007/978-3-642-16242-8_4.
  • [37] Ricardo O. Rodríguez and Amanda Vidal. Axiomatization of crisp Gödel modal logic. Studia Logica, 109(2):367–395, 2021. doi:10.1007/s11225-020-09910-5.
  • [38] J.J.M.M. Rutten. Universal coalgebra: A theory of systems. Theoretical Computer Science, 249(1):3–80, 2000. doi:10.1016/S0304-3975(00)00056-6.
  • [39] Lutz Schröder and Dirk Pattinson. Strong completeness of coalgebraic modal logics. In Susanne Albers and Jean-Yves Marion, editors, 26th International Symposium on Theoretical Aspects of Computer Science (STACS’09), volume 3 of Leibniz International Proceedings in Informatics, pages 673–684, 2009. doi:10.4230/LIPICS.STACS.2009.1855.
  • [40] Lutz Schröder and Dirk Pattinson. Coalgebraic correspondence theory. In Luke Ong, editor, Foundations of Software Science and Computational Structures (FoSSaCS’10), pages 328–342. Springer, 2010. doi:10.1007/978-3-642-12032-9_23.
  • [41] Lutz Schröder. Expressivity of coalgebraic modal logic: The limits and beyond. Theoretical Computer Science, 390(2):230–247, 2008. doi:10.1016/j.tcs.2007.09.023.
  • [42] Lutz Schröder and Dirk Pattinson. Description logics and fuzzy probability. In Toby Walsh, editor, 22nd International Joint Conference on Artificial Intelligence. International Joint Conference on Artificial Intelligence (IJCAI’11). AAAI Press, 2011.
  • [43] Igor Sedlàr. Propositional dynamic logic with Belnapian truth values. In Stéphane Demri Lev Beklemishev and András Máté’, editors, Advances in Modal Logic (AiML’16), volume 11, pages 503–519. College Publications, 2016. URL: http://www.aiml.net/volumes/volume11/Sedlar.pdf.
  • [44] Igor Sedlàr. Finitely-valued Propositional Dynamic Logic. In Nicola Olivetti, Rineke Verbrugge, Sara Negri, and Gabriel Sandu, editors, Advances in Modal Logic (AiML’20), volume 13, pages 561–579. College Publications, 2020. URL: http://www.aiml.net/volumes/volume13/Sedlar.pdf.
  • [45] Bruno Teheux. Propositional dynamic logic for searching games with errors. Journal of Applied Logic, 12(4):377–394, 2014. doi:10.1016/j.jal.2014.04.001.
  • [46] Samuel Teuber, Stefan Mitsch, and André Platzer. Provably safe neural network controllers via differential dynamic logic. In Amir Globersons, Lester Mackey, Danielle Belgrave, Angela Fan, Ulrich Paquet, Jakub M. Tomczak, and Cheng Zhang, editors, Advances in Neural Information Processing Systems 38 (NeurIPS’24), 2024.
  • [47] Johan van Benthem. Program constructions that are safe for bisimulation. Studia Logica, 60:311–330, 1998. doi:10.1023/A:1005072201319.
  • [48] Johan van Benthem, Nick Bezhanishvili, and Sebastian Enqvist. A propositional dynamic logic for instantial neighborhood semantics. Studia Logica, 107(4):719–751, 2019. doi:10.1007/s11225-018-9825-5.
  • [49] Johan van Benthem, Nick Bezhanishvili, Sebastian Enqvist, and Junhua Yu. Instantial neighbourhood logic. The Review of Symbolic Logic, 10(1):116–144, 2017. doi:10.1017/S1755020316000447.

Appendix A Appendix

Here, we provide additional proofs and details omitted in the main body of this paper.

Ad Example 5(2) & Example 10(2).

To see that 𝒫𝐀 is a functor, given f:XY and g:YZ, on σAX and zZ note

𝒫𝐀(gf)(σ)(z)=g(f(x))=zσ(x)=g(y)=zf(x)=yσ(x)=g(y)=z𝒫𝐀f(σ)(y)=𝒫𝐀g𝒫𝐀f(σ)(z).

This functor is a monad with unit ηX(x)=ex:XA being the “unit vector” ex(x)=1, otherwise ex(x)=0 and μ defined on νAAX by μX(ν)(x)=σAXν(σ)σ(x).

Ad Example 12(3).

Note that for 𝐀=Łn, demonic tests are given by (𝗍𝖾𝗌𝗍(¬σ)(x)) taking ρAX to

(𝗍𝖾𝗌𝗍(¬σ)(x))(ρ)=¬𝗍𝖾𝗌𝗍(¬σ)(x)(¬ρ)=¬(¬σ(x)¬ρ(x))=σ(x)ρ(x)

using the operation xy=min{x+y,1}, equivalently defined by xy=¬(¬x¬y) as usual (see, e.g., [6, page 9]).

Ad Example 16(4).

With Sαd:XX defined as usual by VSαd(x)XVSα(x), we want to show that

Nαd(x)(σ)=VSαd(x)vVσ(v)=:r

and

¬Nα(x)(¬σ)=¬USα(x)uU¬σ(u)=USα(x)uUσ(u)=:s

coincide (in the last equation we used that ¬ is an involution on a lattice, hence satisfies De Morgan’s laws). To see rs, note that whenever VSαd(x) and USα(x), then there is some yUV, thus we get vVσ(v)σ(y)uUσ(U) and since U and V were arbitrary this implies rs.

Conversely, to see sr, note that it suffices to show that U:={uXσ(u)r}Sα(x), since this implies suUσ(u)r. By definition we have USα(x)XUSαd(x), and note that XU={vXσ(v)>r}Sαd(x) would lead to

r=VSαd(x)vVσ(v)vXUσ(v)>r,

a contradiction.

Proof of Lemma 18.

If θ is natural, the following commutes, given that the left square commutes.

Conversely, if θ does not define a natural transformation, there are f:XY and (t1,,tn)𝖥nX such that 𝖥f(θX(t1,,tn))θY(𝖥f(t1),,𝖥f(tn)). Define the constant coalgebras γi(x)=ti and γi(x)=𝖥f(ti), then f witnesses that Oθ is not safe.

Proof of Proposition 21.

By simultaneous induction on the structure of the action a𝖠𝖼𝗍 and the formula φ𝖥𝗈𝗋𝗆, we show that f is a coalgebra morphism γaγa and that [[φ]]f=[[φ]].

If a=O(a1,,an) is obtained using some n-ary coalgebra operation, then safety of O together with the inductive hypothesis that f is a coalgebra morphism γaiγai for all i=1,,n immediately yields that it also is a coalgebra morphism γO(a1,,an)γO(a1,,an). If a=𝗍𝖾𝗌𝗍(ψ) is obtained via some test, then the inductive hypothesis [[ψ]]f=[[ψ]] together with safety of 𝗍𝖾𝗌𝗍 (recall Lemma 20) yields the desired

𝖥fγa=𝖥f𝗍𝖾𝗌𝗍([[ψ]])=𝖥f𝗍𝖾𝗌𝗍([[ψ]]f)=𝗍𝖾𝗌𝗍([[ψ]])f=γaf.

If φ=o(φ1,,φm) is obtained using some m-ary algebraic operation o𝗌𝗂𝗀𝗇(𝐀), using the inductive hypothesis [[φj]]f=[[φj]] for all j=1,,m we simply compute

opw([[φ1]],,[[φm]])=opw([[φ1]]f,,[[φm]]f)=opw([[φ1]],,[[φm]])f

as desired. If φ=aλ(φ1,,φk) for the k-ary λΛ, we use the inductive hypothesis f:γaγa and [[φj]]f=[[φ]] together with naturality of λ to find

λX([[φ1]]f,,[[φk]]f)γa=λY([[φ1]],,[[φk]])𝖥fγa=λY([[φ1]],,[[φk]])γaf

as desired, finishing the proof.

Proof of Proposition 25.

This follows immediately from Definition 24 after showing that in every standard model γ, for all (n,k)-templates τ it holds that [[τ[a,φ]]]=τ[γa,[[φ]]], where γa=(γa1,,γan) and [[φ]]=([[φ1]],,[[φk]]). This is easily shown using induction on the structure of τ.

Proof of Proposition 26.

Say 𝖺𝗋(O)=:n and let γ:X𝖥nX and γ:Y𝖥nY be coalgebras. We show that if f:γγ then f:O(γ)O(γ). By separation, it suffices to show that for every λΛ it holds that λ^Y𝖥fO(γ)=λ^YO(γ)f.

Say 𝖺𝗋(λ)=:k and choose some τ𝖳𝖾𝗆𝗉𝗅n,k witnessing that O is reducible with respect to λ. Starting on the left-hand side, by naturality of λ^ we have λ^Y𝖥fO(γ)=k𝒩𝐀fλ^XO(γ). Now, for any xX and σ1,,σkAY, using reducibility we get

k𝒩𝐀fλ^XO(γ)(x)(σ) =λ^XO(γ)(x)(σfk)
=λX(σfk)O(γ)(x)=τ[γ,σfk](x).

On the other hand, we use reducibility as well and get

λ^YO(γ)f(x)(σ)=λY(σ)O(γ)(f(x))=τ[γ,σ](f(x)).

Thus, we are done once we show τ[γ,σfk]=τ[γ,σ]f for all τ𝖳𝖾𝗆𝗉𝗅n,k, which we do by induction on the structure of τ. The cases τ=ωi and τ=o(τ1,,τ𝖺𝗋(o)) are completely straightforward, for the case τ=jλ(τ1,,τ𝖺𝗋(λ)) compute

τ[γ,σfk] =λX(τ1[γ,σfk],,τ𝖺𝗋(λ)[γ,σfk])γj (Definition)
=λX(τ1[γ,σ]f,,τ𝖺𝗋(λ)[γ,σ]f)γj (Ind.Hyp. on τi’s)
=λY(τ1[γ,σ],,τ𝖺𝗋(λ)[γ,σ])𝖥fγj (Naturality λ)
=λY(τ1[γ,σ],,τ𝖺𝗋(λ)[γ,σ])γjf=τ[γ,σ]f (f:γjγj)

as desired, finishing the proof.

Proof of Example 28.

Since 𝐀 is assumed to be finite, the right-hand side yields a well-defined formula. Linearity yields that iIsisiI:sis always holds. Let S2X and γ1,γ2:XAX be 𝒫𝐀-coalgebras. Then we have the chain of equivalences

λXr(S)(γ1;γ2)(x)=1 zSγ1;γ2(x)(z)r
zSyXγ1(x)(y)γ2(y)(z)r
zS,yX:γ1(x)(y)γ2(y)(z)r
zS,yX,r1r2r:γ1(x)(y)r1,γ2(y)(z)r2
yX,r1r2r:γ1(x)(y)r1,zZγ2(y)(z)r2
r1r2r:λXr2(S)(γ2(y))=1γ1(x)(y)r1
r1r2r:λXr1(λXr2(Z)γ2)(γ1(x))=1
r1r2rλXr1(λXr2(S)γ2)γ1(x)=1.

This shows that the template τ=r1r2r1r12r2ω witnesses that ; is reducible with respect to λr.

Proof of Example 29.

Untangling the definitions, for S1,,Sk,S2X and γ1,γ2:X(𝒫𝒫)(X) we get

λXk+1(S1,,Sk,S)((γ1;γ2)(x))=1
Z(γ1;γ2)(x):ZSi:ZSi
Zγ1(x),FxZγ2(x):FSi:FSi

on the one hand and

λXk+1(λ2(S1,S)γ2,,λ2(Sk,S)γ2,λ1(S)γ2)(γ1(x))=1
Zγ1(x):Zλ1(S)γ2i:Zλ2(Si,S)γ2
Zγ1(x):xZ:Uγ2(x):US
i:xiZ,Uiγ2(xi):UiSi

on the other hand. Using the same Z, the former immediately implies the latter and the converse is obtained setting F={UUSyZ:Uγ2(y)} as in [48, Proposition 3].

Thus it is shown that ; is reducible with respect to λk+1 via the (2,k+1)-template 1k+1(22(ω1,ωk+1),,22(ωk,ωk+1),21ωk+1).

Proof of Proposition 31.

If τ is some (n,k)-reduction template in which jλ are the only modal connectives, let τ𝖾𝗏 denote the corresponding template replacing them by jλ𝖾𝗏. Note that τ𝖾𝗏 defines itself a n-ary coalgebra operation Ωτ:𝖢𝗈𝖺𝗅𝗀(k𝒩𝐀n)𝖢𝗈𝖺𝗅𝗀(k𝒩𝐀) via Ωτ(ξ)(x)(σ)=τ𝖾𝗏[ξ,σ](x).

With this, the statement easily follows once we show that for all γ:X𝖥nX and σ(AX)k it holds that τ[γ,σ]=τ𝖾𝗏[λ^Xnγ,σ], which we do by induction on the structure of τ. The cases τ=ωi and τ=o(τ1,,τ𝖺𝗋(o)) are straightforward by definitions, thus let τ=jλ(τ1,,τk) and suppose the statement already holds for τ1,,τk. We compute

τ[γ,σ](x) =λX(τ1[γ,σ],,τk[γ,σ])γj(x)
=λX(τ1𝖾𝗏[λ^Xnγ,σ],,τk𝖾𝗏[λ^Xnγ,σ])γj(x)
=λ^Xγj(x)(τ1𝖾𝗏[λ^Xnγ,σ],,τk𝖾𝗏[λ^Xnγ,σ])
=λX𝖾𝗏(τ1𝖾𝗏[λ^Xnγ,σ],,τk𝖾𝗏[λ^Xnγ,σ])λ^Xγj(x)=τ𝖾𝗏[λ^Xnγ,σ](x)

as desired, finishing the proof.

Proof of Proposition 35.

To use Lemma 20, let f:XY and σAY. By separation, it suffices to show that for every λΛ it holds that λ^Y𝖥f𝗍𝖾𝗌𝗍(σf)=λ^Y𝗍𝖾𝗌𝗍(σ)f.

Say 𝖺𝗋(λ)=:k and let t be the (k+1)-ary term-function witnessing reducibility with respect to λ. Starting on the left-hand side, note λ^Y𝖥f𝗍𝖾𝗌𝗍(σf)=k𝒩𝐀fλ^X𝗍𝖾𝗌𝗍(σf) by naturality. From here, for any xX and σ1,,σkAY we compute

(k𝒩𝐀fλ^X𝗍𝖾𝗌𝗍(σf))(x)(σ1,,σk) =(λX(σ1f,,σkf)𝗍𝖾𝗌𝗍(σf))(x)
=tpw(σf,σ1f,,σkf)(x).

On the other hand we use reducibility as well and get

(λ^Y𝗍𝖾𝗌𝗍(σ)f)(x)(σ1,,σk) =(λY(σ1,,σk)𝗍𝖾𝗌𝗍(σ))(f(x))
=tpw(σ,σ1,,σk)(f(x)).

Since both of these equal t(σ(f(x)),σ1(f(x)),,σk(f(x))), this finishes the proof.

Ad Examples 44 & 45.

To see that 𝒫𝐀 is weakly preserving, let (σm)lim𝒫𝐀Xm be coherent, i.e., σm(xm)={σm+1(xm+1)pm(xm+1=xm)}. This sequence is induced by σ𝒫𝐀(limXm) defined by σ((xm))=m𝐍σm(xm).

In Example 44 with λ and truth-constants in 𝐀, to see strong one-step completeness over finite sets, take a rank-1 non-modal homomorphism H:Λ(AX)A with X finite and define αAX by α(x)=H(ex). This α one-step satisfies H since

λ(σ)(α) =xXσ(x)α(x)=xXσˇxH(ex)
=xXH((σˇxex))=H(xX(σˇxex)),

where σˇx is the truth-constant of σ(x). Note that xX(σˇxex)=σ as desired.

In Example 45, for strong one-step completeness over finite sets one checks that a rank-1 non-modal homomorphism H:Λ(2X)2 is one-step satisfied by αAX defined by α(x)={rH(r{x})=1)}.

Ad Example 46.

To see that 𝐀 is weakly preserving, let (Nm)lim𝐀Xm be coherent, i.e., Nm(σm)=Nm+1(σmpm+1). Then this sequence is induced by N𝐀(limXm) defined by N(σ)=m{Nm(ρm)ρmπm=σ} where πm:limXnXm.

Strong one-step completeness over finite sets holds since every rank-1 non-modal homomorphism H is one-step satisfied by N(σ):=H(𝖾𝗏σ).