M384 · Logic · Week 9

The Deduction Theorem and Soundness

Day 1: the axioms (L1) to (L3) are enough. Day 2: the Deduction Theorem and how to use it. Day 3: the Soundness Theorem and how to show that a deduction does not exist.

Goals for this week

By the end of this week you will be able to:

Day 1: The small system is enough

Today we show that the axioms (L1), (L2), (L3) and modus ponens deduce everything that the nine axioms (L1) to (L9) deduce.

What we are using from before
  • The nine axiom schemes:
    ConnectiveNameAxiom scheme
    Implication(L1)\(\varphi \to (\psi \to \varphi)\)
    (L2)\((\varphi \to (\psi \to \chi)) \to ((\varphi \to \psi) \to (\varphi \to \chi))\)
    Negation(L3)\((\neg \psi \to \neg \varphi) \to (\varphi \to \psi)\)
    Conjunction(L4)\((\varphi \wedge \psi) \to \varphi\)
    (L5)\((\varphi \wedge \psi) \to \psi\)
    (L6)\(\varphi \to (\psi \to (\varphi \wedge \psi))\)
    Disjunction(L7)\(\varphi \to (\varphi \vee \psi)\)
    (L8)\(\psi \to (\varphi \vee \psi)\)
    (L9)\((\varphi \to \chi) \to ((\psi \to \chi) \to ((\varphi \vee \psi) \to \chi))\)
  • A deduction from \(\Gamma\) is a finite sequence of formulas in which every line is an axiom, a member of \(\Gamma\), or follows from two earlier lines by MP (from \(\alpha\) and \(\alpha\to\beta\), infer \(\beta\)). \(\Gamma\vdash\varphi\) means that there is a deduction from \(\Gamma\) whose last line is \(\varphi\).
  • Example 8.27: \(\vdash\varphi\to\varphi\). Proposition 8.35: (a) if \(\varphi\in\Gamma\) then \(\Gamma\vdash\varphi\); (b) if \(\Gamma\subseteq\Delta\) and \(\Gamma\vdash\varphi\) then \(\Delta\vdash\varphi\); (c) if \(\Gamma\vdash\varphi\) and \(\Gamma\vdash\varphi\to\psi\) then \(\Gamma\vdash\psi\). Proposition 8.36, the rule called hypothetical syllogism (HS), chains two implications: if \(\Gamma\vdash\varphi\to\psi\) and \(\Gamma\vdash\psi\to\chi\) then \(\Gamma\vdash\varphi\to\chi\).
  • The deductions in Example 8.27 and in the proofs of Propositions 8.35 and 8.36 use only (L1), (L2) and MP.

1. Two deduction systems

In Week 8, Day 2 we saw that \(\{\neg,\to\}\) is an adequate set of connectives: \(\varphi\wedge\psi\) and \(\varphi\vee\psi\) have equivalent formulas that use only \(\neg\) and \(\to\). We now go one step further and treat \(\wedge\) and \(\vee\) as abbreviations.

Definition 9.1: \(\wedge\) and \(\vee\) as abbreviations

From now on the only connectives of the language are \(\neg\) and \(\to\). We use \[\varphi\wedge\psi\ \text{ as an abbreviation for }\ \neg(\varphi\to\neg\psi),\qquad \varphi\vee\psi\ \text{ as an abbreviation for }\ \neg\varphi\to\psi.\] To write out a formula is to replace every abbreviation by what it stands for.

The abbreviations have the right truth values. \(\neg(\varphi\to\neg\psi)\) is true exactly when \(\varphi\to\neg\psi\) is false, that is, when \(\varphi\) is true and \(\neg\psi\) is false; this is when both \(\varphi\) and \(\psi\) are true. \(\neg\varphi\to\psi\) is false exactly when \(\neg\varphi\) is true and \(\psi\) is false; this is when both \(\varphi\) and \(\psi\) are false. So nothing changes in the meaning of formulas. What changes is the list of formulas: \(p\wedge q\) and \(\neg(p\to\neg q)\) are now the same formula, written in two ways.

Example 9.2: writing out abbreviations

We work from the inside out. A subformula that is not an abbreviation stays as it is.

(a) \(p\wedge\neg q\) is short for \(\neg(p\to\neg\neg q)\). Here \(\psi:=\neg q\), so \(\neg\psi\) is \(\neg\neg q\). We do not simplify \(\neg\neg q\) to \(q\): that would be a different formula.
(b) \((p\vee q)\to r\) is short for \((\neg p\to q)\to r\).
(c) \(\neg(p\wedge q)\vee r\) is written out in two steps. First \(p\wedge q\) becomes \(\neg(p\to\neg q)\), so the formula is \(\neg\neg(p\to\neg q)\vee r\). Then the disjunction \(\alpha\vee r\) with \(\alpha:=\neg\neg(p\to\neg q)\) becomes \(\neg\alpha\to r\): \[\neg\neg\neg(p\to\neg q)\to r.\]
(d) The axiom (L8), \(\psi\to(\varphi\vee\psi)\), is short for \(\psi\to(\neg\varphi\to\psi)\). This is an instance of (L1), with \(\varphi:=\psi\) and \(\psi:=\neg\varphi\).
Exercise 1: write out the abbreviations

Self-check only. Nothing here counts towards your grade.

Write each formula with \(\neg\) and \(\to\) only, by Definition 9.1. Do not simplify. Type \(\neg\) as ~ and \(\to\) as ->, or use the buttons. Use parentheses as in the notes.

(a) \(\neg p\to q\)
(b) \(\neg(p\to\neg\neg q)\)
(c) \(\neg(\neg p\to q)\)
(d) \(\neg(p\to\neg q)\to(\neg q\to r)\)
Definition 9.3: the small and the large system

Let \(\Gamma\) be a set of formulas and \(\varphi\) a formula.

  • \(\Gamma\vdash_3\varphi\) means: there is a deduction of \(\varphi\) from \(\Gamma\) in which every axiom is an instance of (L1), (L2) or (L3). This is the small system.
  • \(\Gamma\vdash_9\varphi\) means: there is a deduction of \(\varphi\) from \(\Gamma\) in which the axioms are instances of (L1) to (L9). This is the large system, the \(\vdash\) of Week 8.

In both systems MP is the only rule.

For example, \(\vdash_9(p\wedge q)\to p\) by one line (L4). For \(\vdash_3\), a one-line deduction does not work: \((p\wedge q)\to p\), that is \(\neg(p\to\neg q)\to p\), is not an instance of (L1), (L2) or (L3). Section 3 shows that \(\vdash_3(p\wedge q)\to p\) still holds, with a longer argument.

2. Tools for the small system

To compare the two systems, we need deductions of (L4) to (L9) in the small system. We do not write them line by line: we first prove some general facts about \(\vdash_3\) and then use them as steps. Example 8.27 and Propositions 8.35 and 8.36 hold for \(\vdash_3\), because their deductions use only (L1), (L2) and MP. In this section \(\vdash\) means \(\vdash_3\), and \(\Gamma\) is any set of formulas.

Lemma 9.4: four tools
(a) \(\vdash(\psi\to\chi)\to((\varphi\to\psi)\to(\varphi\to\chi))\).
(b) Swapping antecedents. If \(\Gamma\vdash\varphi\to(\psi\to\chi)\), then \(\Gamma\vdash\psi\to(\varphi\to\chi)\).
(c) \(\vdash(\varphi\to\psi)\to((\psi\to\chi)\to(\varphi\to\chi))\).
(d) Removing a repeated antecedent. If \(\Gamma\vdash\varphi\to(\varphi\to\psi)\), then \(\Gamma\vdash\varphi\to\psi\).

Proof. (a) \(\vdash(\psi\to\chi)\to(\varphi\to(\psi\to\chi))\) by (L1), and \(\vdash(\varphi\to(\psi\to\chi))\to((\varphi\to\psi)\to(\varphi\to\chi))\) by (L2). Chain the two with HS (Proposition 8.36).

(b) From \(\Gamma\vdash\varphi\to(\psi\to\chi)\), (L2) and MP give \(\Gamma\vdash(\varphi\to\psi)\to(\varphi\to\chi)\). By (L1), \(\vdash\psi\to(\varphi\to\psi)\), so \(\Gamma\vdash\psi\to(\varphi\to\psi)\) by Proposition 8.35(b). HS gives \(\Gamma\vdash\psi\to(\varphi\to\chi)\).

(c) Apply (b) to (a): the two antecedents \(\psi\to\chi\) and \(\varphi\to\psi\) change places.

(d) From \(\Gamma\vdash\varphi\to(\varphi\to\psi)\), (L2) and MP give \(\Gamma\vdash(\varphi\to\varphi)\to(\varphi\to\psi)\). By Example 8.27 and Proposition 8.35(b), \(\Gamma\vdash\varphi\to\varphi\). MP gives \(\Gamma\vdash\varphi\to\psi\). □

From now on we write such proofs as numbered lists of formulas \(\theta\) with \(\vdash_3\theta\). Each line gives its reason: an axiom, MP or HS with two earlier lines, a tool from Lemma 9.4 applied to an earlier line, or an earlier result. Read such a list as a proof about deductions, not as a deduction.

Lemma 9.5: facts about negation in the small system

For all formulas \(\varphi,\psi,\chi\):

(a) \(\vdash_3\neg\varphi\to(\varphi\to\psi)\)
(b) \(\vdash_3\varphi\to(\neg\varphi\to\psi)\)
(c) \(\vdash_3\neg\neg\varphi\to\varphi\)
(d) \(\vdash_3\varphi\to\neg\neg\varphi\)
(e) \(\vdash_3(\varphi\to\psi)\to(\neg\psi\to\neg\varphi)\)
(f) \(\vdash_3(\neg\varphi\to\varphi)\to\varphi\)
(g) \(\vdash_3(\varphi\to\chi)\to((\neg\varphi\to\chi)\to\chi)\)

Proof. (a) By (L1), \(\vdash\neg\varphi\to(\neg\psi\to\neg\varphi)\), and by (L3), \(\vdash(\neg\psi\to\neg\varphi)\to(\varphi\to\psi)\). HS gives (a). (b) follows from (a) by swapping the antecedents, Lemma 9.4(b).

(c) We use (a) with \(\neg\varphi\) in place of \(\varphi\) and \(\neg\neg\neg\varphi\) in place of \(\psi\). Line 2 is (L3) with \(\varphi:=\neg\neg\varphi\) and \(\psi:=\varphi\).

1\(\neg \neg \varphi \to (\neg \varphi \to \neg \neg \neg \varphi)\)(Lemma 9.5(a))
2\((\neg \varphi \to \neg \neg \neg \varphi) \to (\neg \neg \varphi \to \varphi)\)(L3)
3\(\neg \neg \varphi \to (\neg \neg \varphi \to \varphi)\)(1,2 HS)
4\(\neg \neg \varphi \to \varphi\)(3, Lemma 9.4(d))

(d) Line 1 is (L3) with \(\varphi:=\varphi\) and \(\psi:=\neg\neg\varphi\). Line 2 is (c) for the formula \(\neg\varphi\).

1\((\neg \neg \neg \varphi \to \neg \varphi) \to (\varphi \to \neg \neg \varphi)\)(L3)
2\(\neg \neg \neg \varphi \to \neg \varphi\)(Lemma 9.5(c))
3\(\varphi \to \neg \neg \varphi\)(1,2 MP)

(e) The idea: from \(\varphi\to\psi\) we go to \(\neg\neg\varphi\to\neg\neg\psi\), and then (L3) turns this around.

1\(\neg \neg \varphi \to \varphi\)(Lemma 9.5(c))
2\((\neg \neg \varphi \to \varphi) \to ((\varphi \to \psi) \to (\neg \neg \varphi \to \psi))\)(Lemma 9.4(c))
3\((\varphi \to \psi) \to (\neg \neg \varphi \to \psi)\)(1,2 MP)
4\(\psi \to \neg \neg \psi\)(Lemma 9.5(d))
5\((\psi \to \neg \neg \psi) \to ((\neg \neg \varphi \to \psi) \to (\neg \neg \varphi \to \neg \neg \psi))\)(Lemma 9.4(a))
6\((\neg \neg \varphi \to \psi) \to (\neg \neg \varphi \to \neg \neg \psi)\)(4,5 MP)
7\((\varphi \to \psi) \to (\neg \neg \varphi \to \neg \neg \psi)\)(3,6 HS)
8\((\neg \neg \varphi \to \neg \neg \psi) \to (\neg \psi \to \neg \varphi)\)(L3)
9\((\varphi \to \psi) \to (\neg \psi \to \neg \varphi)\)(7,8 HS)

Line 8 is (L3) with \(\varphi:=\neg\psi\) and \(\psi:=\neg\varphi\).

(f) Line 1 is (a) with \(\psi:=\neg(\neg\varphi\to\varphi)\); line 4 is (L3) with \(\varphi:=\neg\varphi\to\varphi\) and \(\psi:=\varphi\).

1\(\neg \varphi \to (\varphi \to \neg (\neg \varphi \to \varphi))\)(Lemma 9.5(a))
2\((\neg \varphi \to (\varphi \to \neg (\neg \varphi \to \varphi))) \to ((\neg \varphi \to \varphi) \to (\neg \varphi \to \neg (\neg \varphi \to \varphi)))\)(L2)
3\((\neg \varphi \to \varphi) \to (\neg \varphi \to \neg (\neg \varphi \to \varphi))\)(1,2 MP)
4\((\neg \varphi \to \neg (\neg \varphi \to \varphi)) \to ((\neg \varphi \to \varphi) \to \varphi)\)(L3)
5\((\neg \varphi \to \varphi) \to ((\neg \varphi \to \varphi) \to \varphi)\)(3,4 HS)
6\((\neg \varphi \to \varphi) \to \varphi\)(5, Lemma 9.4(d))

(g) From \(\varphi\to\chi\) we get \(\neg\chi\to\neg\varphi\) by (e); together with \(\neg\varphi\to\chi\) this gives \(\neg\chi\to\chi\), and (f) turns this into \(\chi\).

1\((\varphi \to \chi) \to (\neg \chi \to \neg \varphi)\)(Lemma 9.5(e))
2\((\neg \chi \to \neg \varphi) \to ((\neg \varphi \to \chi) \to (\neg \chi \to \chi))\)(Lemma 9.4(c))
3\((\varphi \to \chi) \to ((\neg \varphi \to \chi) \to (\neg \chi \to \chi))\)(1,2 HS)
4\((\neg \chi \to \chi) \to \chi\)(Lemma 9.5(f))
5\(((\neg \chi \to \chi) \to \chi) \to (((\neg \varphi \to \chi) \to (\neg \chi \to \chi)) \to ((\neg \varphi \to \chi) \to \chi))\)(Lemma 9.4(a))
6\(((\neg \varphi \to \chi) \to (\neg \chi \to \chi)) \to ((\neg \varphi \to \chi) \to \chi)\)(4,5 MP)
7\((\varphi \to \chi) \to ((\neg \varphi \to \chi) \to \chi)\)(3,6 HS)

Line 5 is Lemma 9.4(a) with \(\varphi:=\neg\varphi\to\chi\), \(\psi:=\neg\chi\to\chi\) and \(\chi:=\chi\). □

3. Deducing (L4) to (L9)

Lemma 9.6: (L4) to (L9) in the small system

For every instance \(\alpha\) of one of the schemes (L4) to (L9), \(\vdash_3\alpha\).

Proof of Lemma 9.6

Throughout, \(\vdash\) is \(\vdash_3\).

(L8) \(\psi\to(\varphi\vee\psi)\) is short for \(\psi\to(\neg\varphi\to\psi)\), an instance of (L1) (Example 9.2(d)).

(L7) \(\varphi\to(\varphi\vee\psi)\) is short for \(\varphi\to(\neg\varphi\to\psi)\), which is Lemma 9.5(b).

(L4) \((\varphi\wedge\psi)\to\varphi\) is short for \(\neg(\varphi\to\neg\psi)\to\varphi\). Line 2 is Lemma 9.5(e) with \(\varphi:=\neg\varphi\) and \(\psi:=\varphi\to\neg\psi\).

1\(\neg \varphi \to (\varphi \to \neg \psi)\)(Lemma 9.5(a))
2\((\neg \varphi \to (\varphi \to \neg \psi)) \to (\neg (\varphi \to \neg \psi) \to \neg \neg \varphi)\)(Lemma 9.5(e))
3\(\neg (\varphi \to \neg \psi) \to \neg \neg \varphi\)(1,2 MP)
4\(\neg \neg \varphi \to \varphi\)(Lemma 9.5(c))
5\(\neg (\varphi \to \neg \psi) \to \varphi\)(3,4 HS)

(L5) \((\varphi\wedge\psi)\to\psi\) is short for \(\neg(\varphi\to\neg\psi)\to\psi\). Line 1 is (L1) with \(\varphi:=\neg\psi\) and \(\psi:=\varphi\).

1\(\neg \psi \to (\varphi \to \neg \psi)\)(L1)
2\((\neg \psi \to (\varphi \to \neg \psi)) \to (\neg (\varphi \to \neg \psi) \to \neg \neg \psi)\)(Lemma 9.5(e))
3\(\neg (\varphi \to \neg \psi) \to \neg \neg \psi\)(1,2 MP)
4\(\neg \neg \psi \to \psi\)(Lemma 9.5(c))
5\(\neg (\varphi \to \neg \psi) \to \psi\)(3,4 HS)

(L6) \(\varphi\to(\psi\to(\varphi\wedge\psi))\) is short for \(\varphi\to(\psi\to\neg(\varphi\to\neg\psi))\).

1\((\varphi \to \neg \psi) \to (\varphi \to \neg \psi)\)(Example 8.27)
2\(\varphi \to ((\varphi \to \neg \psi) \to \neg \psi)\)(1, Lemma 9.4(b))
3\(((\varphi \to \neg \psi) \to \neg \psi) \to (\neg \neg \psi \to \neg (\varphi \to \neg \psi))\)(Lemma 9.5(e))
4\(\varphi \to (\neg \neg \psi \to \neg (\varphi \to \neg \psi))\)(2,3 HS)
5\(\psi \to \neg \neg \psi\)(Lemma 9.5(d))
6\((\psi \to \neg \neg \psi) \to ((\neg \neg \psi \to \neg (\varphi \to \neg \psi)) \to (\psi \to \neg (\varphi \to \neg \psi)))\)(Lemma 9.4(c))
7\((\neg \neg \psi \to \neg (\varphi \to \neg \psi)) \to (\psi \to \neg (\varphi \to \neg \psi))\)(5,6 MP)
8\(\varphi \to (\psi \to \neg (\varphi \to \neg \psi))\)(4,7 HS)

Line 2 moves the antecedent \(\varphi\to\neg\psi\) of line 1 behind \(\varphi\). Line 3 is Lemma 9.5(e) with \(\varphi:=\varphi\to\neg\psi\) and \(\psi:=\neg\psi\).

(L9) \((\varphi\to\chi)\to((\psi\to\chi)\to((\varphi\vee\psi)\to\chi))\) is short for \((\varphi\to\chi)\to((\psi\to\chi)\to((\neg\varphi\to\psi)\to\chi))\). The idea: from \(\neg\varphi\to\psi\) and \(\psi\to\chi\) we get \(\neg\varphi\to\chi\), and Lemma 9.5(g) combines it with \(\varphi\to\chi\).

1\((\neg \varphi \to \psi) \to ((\psi \to \chi) \to (\neg \varphi \to \chi))\)(Lemma 9.4(c))
2\((\psi \to \chi) \to ((\neg \varphi \to \psi) \to (\neg \varphi \to \chi))\)(1, Lemma 9.4(b))
3\(((\neg \varphi \to \psi) \to (\neg \varphi \to \chi)) \to (((\neg \varphi \to \chi) \to \chi) \to ((\neg \varphi \to \psi) \to \chi))\)(Lemma 9.4(c))
4\((\psi \to \chi) \to (((\neg \varphi \to \chi) \to \chi) \to ((\neg \varphi \to \psi) \to \chi))\)(2,3 HS)
5\(((\neg \varphi \to \chi) \to \chi) \to ((\psi \to \chi) \to ((\neg \varphi \to \psi) \to \chi))\)(4, Lemma 9.4(b))
6\((\varphi \to \chi) \to ((\neg \varphi \to \chi) \to \chi)\)(Lemma 9.5(g))
7\((\varphi \to \chi) \to ((\psi \to \chi) \to ((\neg \varphi \to \psi) \to \chi))\)(5,6 HS)

Line 3 is Lemma 9.4(c) with \(\varphi:=\neg\varphi\to\psi\), \(\psi:=\neg\varphi\to\chi\), \(\chi:=\chi\). □

4. The main theorem

Theorem 9.7: the two systems deduce the same formulas

For every set of formulas \(\Gamma\) and every formula \(\varphi\): \[\Gamma\vdash_3\varphi\quad\text{if and only if}\quad\Gamma\vdash_9\varphi.\]

Proof of Theorem 9.7

(\(\Rightarrow\)) A deduction in the small system is also a deduction in the large system, because every instance of (L1), (L2), (L3) is allowed there.

(\(\Leftarrow\)) Let \(\psi_1,\dots,\psi_n\) be a deduction from \(\Gamma\) in the large system. We show by strong induction on \(i\) that \(\Gamma\vdash_3\psi_i\) for every \(i\le n\). Let \(i\le n\), and assume \(\Gamma\vdash_3\psi_j\) for all \(j<i\). There are four cases.

  • \(\psi_i\) is an instance of (L1), (L2) or (L3). Then the one line \(\psi_i\) is a deduction in the small system, so \(\vdash_3\psi_i\), and \(\Gamma\vdash_3\psi_i\) by Proposition 8.35(b).
  • \(\psi_i\) is an instance of (L4) to (L9). Then \(\vdash_3\psi_i\) by Lemma 9.6, and \(\Gamma\vdash_3\psi_i\) by Proposition 8.35(b).
  • \(\psi_i\in\Gamma\). Then \(\Gamma\vdash_3\psi_i\) by Proposition 8.35(a).
  • \(\psi_i\) follows by MP from \(\psi_j\) and \(\psi_k=\psi_j\to\psi_i\) with \(j,k<i\). By the induction hypothesis \(\Gamma\vdash_3\psi_j\) and \(\Gamma\vdash_3\psi_j\to\psi_i\), so \(\Gamma\vdash_3\psi_i\) by Proposition 8.35(c).

For \(i=n\) we get \(\Gamma\vdash_3\psi_n\). □

Figure 1 shows the proof as a recipe.

Deduction from Γ with (L1)–(L9)Deduction from Γ with (L1)–(L3)1ψ1 (assump.)2ψ2 (L6)3ψ3 (L2)4ψ4 (2,3 MP)1ψ1 (assump.)kψ2 k+1ψ3 (L2)k+2ψ4 (k, k+1 MP)lines 2 to k: a deduction of ψ2 that uses only (L1), (L2), (L3)and MP (Lemma 9.6)⋮
Figure 1. The proof of Theorem 9.7 as a recipe. Every instance of (L4) to (L9) is replaced by its deduction in the small system from Lemma 9.6. The other lines stay; only the line numbers in MP justifications change.

When we prove a theorem about deductions, it is enough to look at the small system, with only three axioms to check.

Exercise 2: deductions in the small system

Self-check only. Nothing here counts towards your grade.

Write each deduction using only (assump.), (L1), (L2), (L3) and MP. Type one formula per line and choose its justification; for MP also enter the two line numbers. You may write \(\wedge\) and \(\vee\): the check writes them out by Definition 9.1. Every correct deduction is accepted.

(a) \(\neg q\vdash_3 q\to p\)
(b) \(\vdash_3 q\to(p\vee q)\)
(c) \(\neg p\to\neg q,\ q\vdash_3 p\)

(a) As in Example 8.32.

1\(\neg q\)(assump.)2\(\neg q \to (\neg p \to \neg q)\)(L1)3\(\neg p \to \neg q\)(1,2 MP)4\((\neg p \to \neg q) \to (q \to p)\)(L3)5\(q \to p\)(3,4 MP)

(b) One line: \(q\to(p\vee q)\) is \(q\to(\neg p\to q)\), an instance of (L1).

1\(q \to (p \vee q)\)(L1)

(c)

1\(\neg p \to \neg q\)(assump.)2\(q\)(assump.)3\((\neg p \to \neg q) \to (q \to p)\)(L3)4\(q \to p\)(1,3 MP)5\(p\)(2,4 MP)

Day 2: The Deduction Theorem

Today we prove that \(\Gamma\cup\{\varphi\}\vdash\psi\) holds exactly when \(\Gamma\vdash\varphi\to\psi\), and we use this to find deductions much faster.

What we are using from before
  • (L1) \(\varphi\to(\psi\to\varphi)\) and (L2) \((\varphi\to(\psi\to\chi))\to((\varphi\to\psi)\to(\varphi\to\chi))\), and the other axioms (L3) to (L9) as in the table of Week 8.
  • Example 8.27: \(\vdash\varphi\to\varphi\), by a five-line deduction that uses (L1), (L2) and MP.
  • Proposition 8.35: if \(\varphi\in\Gamma\) then \(\Gamma\vdash\varphi\); if \(\Gamma\subseteq\Delta\) and \(\Gamma\vdash\varphi\) then \(\Delta\vdash\varphi\); if \(\Gamma\vdash\varphi\) and \(\Gamma\vdash\varphi\to\psi\) then \(\Gamma\vdash\psi\). Proposition 8.36, the rule called hypothetical syllogism (HS), chains two implications: if \(\Gamma\vdash\varphi\to\psi\) and \(\Gamma\vdash\psi\to\chi\) then \(\Gamma\vdash\varphi\to\chi\).
  • Theorem 9.7: \(\Gamma\vdash_3\varphi\) if and only if \(\Gamma\vdash_9\varphi\), where \(\vdash_3\) allows only (L1) to (L3) as axioms and \(\vdash_9\) allows (L1) to (L9).

In Example 8.32 we showed \(\neg\varphi\vdash\varphi\to\psi\). Can we move \(\neg\varphi\) to the right and conclude \(\vdash\neg\varphi\to(\varphi\to\psi)\)? For \(\models\) this kind of move is Proposition 8.7(d): \(\Gamma\cup\{\varphi\}\models\psi\) if and only if \(\Gamma\models\varphi\to\psi\). The Deduction Theorem is the same statement for \(\vdash\).

Notation. We write \(\Gamma,\varphi\vdash\psi\) for \(\Gamma\cup\{\varphi\}\vdash\psi\), and \(\Gamma,\varphi_1,\varphi_2\vdash\psi\) for \(\Gamma\cup\{\varphi_1,\varphi_2\}\vdash\psi\).

5. The Deduction Theorem

In this section \(\vdash\) means \(\vdash_3\).

Lemma 9.8: the first lines of a deduction

If \(\psi_1,\dots,\psi_n\) is a deduction from \(\Gamma\), then for every \(m\le n\) the first \(m\) lines \(\psi_1,\dots,\psi_m\) also form a deduction from \(\Gamma\).

Proof. Each line \(\psi_i\) with \(i\le m\) is an axiom, a member of \(\Gamma\), or follows by MP from two lines before \(\psi_i\). Those lines are among \(\psi_1,\dots,\psi_m\), since MP only looks back. □

Theorem 9.9: the Deduction Theorem

For every set of formulas \(\Gamma\) and all formulas \(\varphi,\psi\): \[\Gamma,\varphi\vdash\psi\quad\text{if and only if}\quad\Gamma\vdash\varphi\to\psi.\]

Proof. (\(\Leftarrow\)) Let \(\chi_1,\dots,\chi_n\) be a deduction of \(\varphi\to\psi\) from \(\Gamma\). It is also a deduction from \(\Gamma\cup\{\varphi\}\). Add two lines: \(\chi_{n+1}=\varphi\) (assump.) and \(\chi_{n+2}=\psi\) (\(n,n+1\) MP). This is a deduction of \(\psi\) from \(\Gamma\cup\{\varphi\}\).

(\(\Rightarrow\)) We prove by strong induction on \(n\ge1\): for every formula \(\psi\), if \(\psi_1,\dots,\psi_n\) is a deduction of \(\psi\) from \(\Gamma\cup\{\varphi\}\), then \(\Gamma\vdash\varphi\to\psi\).

Base case, \(n=1\). The deduction is the single line \(\psi_1=\psi\), so \(\psi\) is an axiom or a member of \(\Gamma\cup\{\varphi\}\).

  • If \(\psi\) is an axiom or \(\psi\in\Gamma\), then this is a deduction from \(\Gamma\):
    1\(\psi\)(axiom or assump.)
    2\(\psi\to(\varphi\to\psi)\)(L1)
    3\(\varphi\to\psi\)(1,2 MP)
  • If \(\psi=\varphi\), we need \(\Gamma\vdash\varphi\to\varphi\). This holds by Example 8.27 and Proposition 8.35(b).

Induction step. Let \(n\ge1\) and assume the statement for all lengths \(k\le n\). Let \(\psi_1,\dots,\psi_{n+1}\) be a deduction of \(\psi\) from \(\Gamma\cup\{\varphi\}\). If \(\psi\) is an axiom or a member of \(\Gamma\cup\{\varphi\}\), the argument of the base case works. Otherwise \(\psi\) follows by MP: there are \(i,j\le n\) with \(\psi_j=\psi_i\to\psi\).

By Lemma 9.8, \(\psi_1,\dots,\psi_i\) is a deduction of \(\psi_i\) from \(\Gamma\cup\{\varphi\}\) of length \(i\le n\), and \(\psi_1,\dots,\psi_j\) is a deduction of \(\psi_i\to\psi\) of length \(j\le n\). By the induction hypothesis, \[\Gamma\vdash\varphi\to\psi_i\qquad\text{and}\qquad\Gamma\vdash\varphi\to(\psi_i\to\psi).\] Write a deduction of \(\varphi\to\psi_i\) from \(\Gamma\) (\(m\) lines), then a deduction of \(\varphi\to(\psi_i\to\psi)\) from \(\Gamma\) (ending at line \(m'\)), and add three lines:

\(m'+1\)\((\varphi\to(\psi_i\to\psi))\to((\varphi\to\psi_i)\to(\varphi\to\psi))\)(L2)
\(m'+2\)\((\varphi\to\psi_i)\to(\varphi\to\psi)\)(\(m',\ m'+1\) MP)
\(m'+3\)\(\varphi\to\psi\)(\(m,\ m'+2\) MP)

This is a deduction of \(\varphi\to\psi\) from \(\Gamma\). This completes the induction. □

Corollary 9.10: the Deduction Theorem for (L1) to (L9)

\(\Gamma,\varphi\vdash_9\psi\) if and only if \(\Gamma\vdash_9\varphi\to\psi\).

Proof. By Theorem 9.7, \(\Gamma,\varphi\vdash_9\psi\) iff \(\Gamma,\varphi\vdash_3\psi\). By Theorem 9.9 this holds iff \(\Gamma\vdash_3\varphi\to\psi\), and by Theorem 9.7 again iff \(\Gamma\vdash_9\varphi\to\psi\). □

From now on \(\vdash\) means \(\vdash_9\) again: we use all nine axioms and the Deduction Theorem together.

6. Using the Deduction Theorem

Method: deductions with the Deduction Theorem
  1. To show \(\Gamma\vdash\varphi\to\psi\), it is enough to show \(\Gamma,\varphi\vdash\psi\). Repeat while the goal is an implication: to show \(\vdash\varphi_1\to(\varphi_2\to\psi)\), show \(\varphi_1,\varphi_2\vdash\psi\).
  2. Write the deduction of the new goal.
  3. In such deductions we also allow two shortcuts. The first is the derived rule (\(j,k\) HS): from lines \(\alpha\to\beta\) and \(\beta\to\gamma\) gives \(\alpha\to\gamma\) (Proposition 8.36). The second is a formula \(\theta\) with \(\vdash\theta\) proved earlier, cited by its number. Each shortcut can be replaced by real lines, by Propositions 8.35 and 8.36, so the result is still a proof that a deduction exists.
Warning

The Deduction Theorem moves the antecedent of the goal. From \(\Gamma\vdash\varphi\to\psi\) it gives \(\Gamma,\varphi\vdash\psi\). It does not give \(\Gamma,\psi\vdash\varphi\), and it does not apply to a goal that is not an implication.

Example 9.11: hypothetical syllogism as a formula

Claim: \(\vdash(\varphi\to\psi)\to((\psi\to\chi)\to(\varphi\to\chi))\). With the Deduction Theorem, applied three times, it is enough to show \(\varphi\to\psi,\ \psi\to\chi,\ \varphi\vdash\chi\):

1\(\varphi \to \psi\)(assump.)2\(\psi \to \chi\)(assump.)3\(\varphi\)(assump.)4\(\psi\)(1,3 MP)5\(\chi\)(2,4 MP)

By the Deduction Theorem: \(\varphi\to\psi,\ \psi\to\chi\vdash\varphi\to\chi\), then \(\varphi\to\psi\vdash(\psi\to\chi)\to(\varphi\to\chi)\), then the claim.

Example 9.12: swapping antecedents

Claim: \(\vdash(\varphi\to(\psi\to\chi))\to(\psi\to(\varphi\to\chi))\). It is enough to show \(\varphi\to(\psi\to\chi),\ \psi,\ \varphi\vdash\chi\):

1\(\varphi \to (\psi \to \chi)\)(assump.)2\(\psi\)(assump.)3\(\varphi\)(assump.)4\(\psi \to \chi\)(1,3 MP)5\(\chi\)(2,4 MP)

The order of the assumptions does not matter, because \(\Gamma\) is a set.

Example 9.13: Week 8 results as formulas

Several deductions of Week 8 had assumptions. One application of the Deduction Theorem turns each of them into a deduction without assumptions:

(a) Example 8.32 showed \(\neg\varphi\vdash\varphi\to\psi\). So \(\vdash\neg\varphi\to(\varphi\to\psi)\).
(b) Example 8.29 showed \(\varphi\wedge\psi\vdash\psi\wedge\varphi\). So \(\vdash(\varphi\wedge\psi)\to(\psi\wedge\varphi)\).
(c) Example 8.33 showed \(\varphi\vee\psi\vdash\psi\vee\varphi\). So \(\vdash(\varphi\vee\psi)\to(\psi\vee\varphi)\).
(d) In Week 8, Exercise 6(c) needed (L2) and (L1) to show \(q\vdash p\to(p\wedge q)\). Now it is enough to show \(q,p\vdash p\wedge q\), which is Example 8.28. In general, \(\psi,\varphi\vdash\varphi\wedge\psi\):
1\(\psi\)(assump.)2\(\varphi\)(assump.)3\(\varphi \to (\psi \to (\varphi \wedge \psi))\)(L6)4\(\psi \to (\varphi \wedge \psi)\)(2,3 MP)5\(\varphi \wedge \psi\)(1,4 MP)

and so \(\psi\vdash\varphi\to(\varphi\wedge\psi)\) and \(\vdash\psi\to(\varphi\to(\varphi\wedge\psi))\).

Example 9.14: a disjunction on both sides

Claim: \(\vdash(\varphi\to\psi)\to((\varphi\vee\chi)\to(\psi\vee\chi))\). It is enough to show \(\varphi\to\psi,\ \varphi\vee\chi\vdash\psi\vee\chi\). To use the assumption \(\varphi\vee\chi\) we need (L9) with the goal \(\psi\vee\chi\) in place of \(\chi\): so we need \(\varphi\to(\psi\vee\chi)\) and \(\chi\to(\psi\vee\chi)\).

1\(\varphi \to \psi\)(assump.)2\(\varphi \vee \chi\)(assump.)3\(\psi \to (\psi \vee \chi)\)(L7)4\(\varphi \to (\psi \vee \chi)\)(1,3 HS)5\(\chi \to (\psi \vee \chi)\)(L8)6\((\varphi \to (\psi \vee \chi)) \to ((\chi \to (\psi \vee \chi)) \to ((\varphi \vee \chi) \to (\psi \vee \chi)))\)(L9)7\((\chi \to (\psi \vee \chi)) \to ((\varphi \vee \chi) \to (\psi \vee \chi))\)(4,6 MP)8\((\varphi \vee \chi) \to (\psi \vee \chi)\)(5,7 MP)9\(\psi \vee \chi\)(2,8 MP)

Line 4 uses the derived rule HS: it joins \(\varphi\to\psi\) and \(\psi\to(\psi\vee\chi)\). Line 6 is (L9) with \(\psi:=\chi\) and \(\chi:=\psi\vee\chi\).

Exercise 3: deductions with the Deduction Theorem

Self-check only. Nothing here counts towards your grade.

For each claim, first list the formulas that you move to the left with the Deduction Theorem, separated by commas (for example p & q). Then write a deduction of what remains of the goal. Its assumptions are the members of \(\Gamma\) and the formulas you moved. You may use (L1) to (L9), MP and HS. The check tests both parts, so any correct choice is accepted.

(a) \(\vdash(p\wedge q)\to(q\wedge p)\)
(b) \(\vdash(p\to(q\to r))\to(q\to(p\to r))\)
(c) \(p\to q\vdash(q\to r)\to(p\to r)\)
(d) \(\vdash(p\to q)\to((p\wedge r)\to q)\)

(a) Move \(p\wedge q\). Show \(p\wedge q\vdash q\wedge p\):

1\(p \wedge q\)(assump.)2\((p \wedge q) \to q\)(L5)3\(q\)(1,2 MP)4\((p \wedge q) \to p\)(L4)5\(p\)(1,4 MP)6\(q \to (p \to (q \wedge p))\)(L6)7\(p \to (q \wedge p)\)(3,6 MP)8\(q \wedge p\)(5,7 MP)

(b) Move \(p\to(q\to r)\), \(q\), \(p\). Show \(p\to(q\to r),\ q,\ p\vdash r\):

1\(p \to (q \to r)\)(assump.)2\(q\)(assump.)3\(p\)(assump.)4\(q \to r\)(1,3 MP)5\(r\)(2,4 MP)

(c) Move \(q\to r\), \(p\). Show \(p\to q,\ q\to r,\ p\vdash r\):

1\(p \to q\)(assump.)2\(q \to r\)(assump.)3\(p\)(assump.)4\(q\)(1,3 MP)5\(r\)(2,4 MP)

(d) Move \(p\to q\), \(p\wedge r\). Show \(p\to q,\ p\wedge r\vdash q\):

1\(p \to q\)(assump.)2\(p \wedge r\)(assump.)3\((p \wedge r) \to p\)(L4)4\(p\)(2,3 MP)5\(q\)(1,4 MP)

Day 3: The Soundness Theorem

Today we prove that everything we can deduce from \(\Gamma\) is a semantic consequence of \(\Gamma\), and we use this to show that some deductions do not exist.

What we are using from before
  • A valuation \(v\) gives each primitive proposition a value \(\mathrm T\) or \(\mathrm F\); \([\![\varphi]\!]_v\) is the value of \(\varphi\). \([\![\neg\varphi]\!]_v=\mathrm T\) iff \([\![\varphi]\!]_v=\mathrm F\), and \([\![\varphi\to\psi]\!]_v=\mathrm F\) iff \([\![\varphi]\!]_v=\mathrm T\) and \([\![\psi]\!]_v=\mathrm F\). The abbreviations \(\wedge\) and \(\vee\) get their usual truth tables.
  • \(v\) satisfies \(\Gamma\) if it makes every member of \(\Gamma\) true. \(\Gamma\models\varphi\) means: every valuation that satisfies \(\Gamma\) makes \(\varphi\) true. \(\models\varphi\) (\(\varphi\) is a tautology) means \(\varnothing\models\varphi\).
  • A deduction from \(\Gamma\): every line is an instance of (L1) to (L9), a member of \(\Gamma\), or follows from two earlier lines by MP. If \(\psi_1,\dots,\psi_n\) is a deduction, so is \(\psi_1,\dots,\psi_m\) for \(m\le n\) (Lemma 9.8).
  • In deductions we also use the derived rule hypothetical syllogism (HS): from lines \(\alpha\to\beta\) and \(\beta\to\gamma\) we get \(\alpha\to\gamma\) (Proposition 8.36).

7. Axioms are tautologies, MP preserves truth

Lemma 9.15: every axiom is a tautology

Every instance of (L1) to (L9) is a tautology.

Proof. The value of an instance depends only on the values of the formulas that replace \(\varphi,\psi,\chi\). So it is enough to show that the scheme is true for every choice of values \(\mathrm T,\mathrm F\) of \(\varphi,\psi,\chi\). For each scheme we assume it is false and reach a contradiction.

(L1) \(\varphi\to(\psi\to\varphi)\) false needs \(\varphi=\mathrm T\) and \(\psi\to\varphi=\mathrm F\), so \(\varphi=\mathrm F\). Contradiction.

(L2) False needs \(\varphi\to(\psi\to\chi)=\mathrm T\) and \((\varphi\to\psi)\to(\varphi\to\chi)=\mathrm F\). The second gives \(\varphi\to\psi=\mathrm T\) and \(\varphi\to\chi=\mathrm F\), so \(\varphi=\mathrm T\), \(\chi=\mathrm F\), and then \(\psi=\mathrm T\). But then \(\varphi\to(\psi\to\chi)=\mathrm T\to(\mathrm T\to\mathrm F)=\mathrm F\). Contradiction.

(L3) False needs \(\neg\psi\to\neg\varphi=\mathrm T\) and \(\varphi\to\psi=\mathrm F\), so \(\varphi=\mathrm T\) and \(\psi=\mathrm F\). Then \(\neg\psi=\mathrm T\) and \(\neg\varphi=\mathrm F\), so \(\neg\psi\to\neg\varphi=\mathrm F\). Contradiction.

The other six in the same way:

(L4), (L5)false needs \(\varphi\wedge\psi=\mathrm T\), so \(\varphi=\psi=\mathrm T\), and a false consequent \(\varphi\) or \(\psi\).
(L6)false needs \(\varphi=\psi=\mathrm T\) and \(\varphi\wedge\psi=\mathrm F\).
(L7), (L8)false needs \(\varphi\vee\psi=\mathrm F\), so \(\varphi=\psi=\mathrm F\), and a true antecedent \(\varphi\) or \(\psi\).
(L9)false needs \(\varphi\to\chi=\mathrm T\), \(\psi\to\chi=\mathrm T\), \(\varphi\vee\psi=\mathrm T\) and \(\chi=\mathrm F\). Then \(\varphi=\psi=\mathrm F\), so \(\varphi\vee\psi=\mathrm F\).

Each line is a contradiction. □

Lemma 9.16: MP preserves truth

If \([\![\varphi]\!]_v=\mathrm T\) and \([\![\varphi\to\psi]\!]_v=\mathrm T\), then \([\![\psi]\!]_v=\mathrm T\).

Proof. If \([\![\psi]\!]_v=\mathrm F\), then \([\![\varphi\to\psi]\!]_v=\mathrm F\), because \([\![\varphi]\!]_v=\mathrm T\). □

8. The Soundness Theorem

Theorem 9.17: Soundness

For every set of formulas \(\Gamma\) and every formula \(\varphi\): if \(\Gamma\vdash\varphi\), then \(\Gamma\models\varphi\).

Proof. Fix \(\Gamma\) and a valuation \(v\) that satisfies \(\Gamma\). We prove by strong induction on \(n\ge1\): if \(\psi_1,\dots,\psi_n\) is a deduction from \(\Gamma\), then \([\![\psi_n]\!]_v=\mathrm T\).

Base case, \(n=1\). The line \(\psi_1\) is an axiom or a member of \(\Gamma\). An axiom is a tautology by Lemma 9.15, so it is true under \(v\). A member of \(\Gamma\) is true under \(v\) because \(v\) satisfies \(\Gamma\).

Induction step. Let \(n\ge1\) and assume the statement for all deductions of length at most \(n\). Let \(\psi_1,\dots,\psi_{n+1}\) be a deduction from \(\Gamma\). If \(\psi_{n+1}\) is an axiom or a member of \(\Gamma\), it is true under \(v\), as in the base case. Otherwise there are \(i,j\le n\) with \(\psi_j=\psi_i\to\psi_{n+1}\). By Lemma 9.8, \(\psi_1,\dots,\psi_i\) and \(\psi_1,\dots,\psi_j\) are deductions from \(\Gamma\) of length at most \(n\). By the induction hypothesis \([\![\psi_i]\!]_v=\mathrm T\) and \([\![\psi_i\to\psi_{n+1}]\!]_v=\mathrm T\). By Lemma 9.16, \([\![\psi_{n+1}]\!]_v=\mathrm T\).

Now let \(\Gamma\vdash\varphi\), with a deduction \(\psi_1,\dots,\psi_n=\varphi\). We showed \([\![\varphi]\!]_v=\mathrm T\), and \(v\) was an arbitrary valuation that satisfies \(\Gamma\). So \(\Gamma\models\varphi\). □

Corollary 9.18

If \(\vdash\varphi\), then \(\varphi\) is a tautology.

Proof. Take \(\Gamma=\varnothing\) in Theorem 9.17. □

Figure 2 shows what Corollary 9.18 says about theorems and tautologies.

all formulastautologies: ⊨ φtheorems: ⊢ φp → p(p ∧ q) → pCompleteness: nothing herepp → (p → q)¬(p → p)
Figure 2. Corollary 9.18 says that the theorems lie inside the tautologies. So every formula outside the tautologies, such as \(p\to(p\to q)\), is not a theorem. The ring between the two regions is empty; this is the Completeness Theorem, which we prove later.

9. Showing that a deduction does not exist

Until now we could only show that a deduction exists, by giving one. If we cannot find a deduction of \(p\to(p\to q)\), maybe a long and clever one exists? Soundness answers such questions.

Method: proving \(\Gamma\nvdash\varphi\)

Find a valuation \(v\) that satisfies \(\Gamma\) and makes \(\varphi\) false. Then \(\Gamma\not\models\varphi\), so \(\Gamma\nvdash\varphi\) by the Soundness Theorem (in contrapositive form: if \(\Gamma\not\models\varphi\), then \(\Gamma\nvdash\varphi\)).

Example 9.19: formulas that cannot be deduced
(a) \(\nvdash p\to(p\to q)\). Take \(v(p)=\mathrm T\), \(v(q)=\mathrm F\). Then \(p\to q\) is false and \(p\to(p\to q)\) is \(\mathrm T\to\mathrm F=\mathrm F\). So \(p\to(p\to q)\) is not a tautology, and by Corollary 9.18 it is not a theorem.
(b) \(\nvdash p\) and \(\nvdash\neg p\). The valuation with \(v(p)=\mathrm F\) makes \(p\) false, and the one with \(v(p)=\mathrm T\) makes \(\neg p\) false. So the system proves neither \(p\) nor its negation, as it should: \(p\) is just a statement whose truth we do not know.
(c) \(p\vee q\nvdash p\). Take \(v(p)=\mathrm F\), \(v(q)=\mathrm T\): it satisfies \(\{p\vee q\}\) and makes \(p\) false.
(d) \(p\to q\nvdash q\to p\). Take \(v(p)=\mathrm F\), \(v(q)=\mathrm T\): \(p\to q\) is true and \(q\to p\) is false. By the Deduction Theorem this also gives \(p\to q,\ q\nvdash p\): if \(p\to q,\ q\vdash p\) held, then \(p\to q\vdash q\to p\) would hold.
Example 9.20: one direction yes, the other no

Compare \(p\to r\) and \((p\wedge q)\to r\).

(a) \(p\to r\vdash(p\wedge q)\to r\). Deduction:
1\(p \to r\)(assump.)2\((p \wedge q) \to p\)(L4)3\((p \wedge q) \to r\)(1,2 HS)
(b) \((p\wedge q)\to r\nvdash p\to r\). Take \(v(p)=\mathrm T\), \(v(q)=v(r)=\mathrm F\). Then \(p\wedge q\) is false, so \((p\wedge q)\to r\) is true, and \(p\to r\) is false. By soundness there is no deduction.

For a claim \(\Gamma\vdash\varphi\) we now have two tools: a deduction (often found with the Deduction Theorem) shows that it holds; a valuation shows that it fails.

What soundness cannot do

Soundness goes in one direction. If \(\Gamma\models\varphi\), soundness says nothing: to show \(\Gamma\vdash\varphi\) we still need a deduction. And if you try and fail to find a deduction, this proves nothing; only a valuation as in the method proves \(\Gamma\nvdash\varphi\).

Exercise 4: deducible or not?

Self-check only. Nothing here counts towards your grade.

For each claim, decide whether it is deducible. If it is not, give a valuation that shows this by the Soundness Theorem.

(a) Deducible. By the Deduction Theorem it is enough to show \(p\to(q\to r),\ q,\ p\vdash r\):

1\(p \to (q \to r)\)(assump.)2\(q\)(assump.)3\(p\)(assump.)4\(q \to r\)(1,3 MP)5\(r\)(2,4 MP)

(b) Not deducible: \(v(p)=\mathrm F\), \(v(q)=\mathrm T\) makes \(p\to q\) true and \(q\to p\) false.

(c) Not deducible: \(v(p)=\mathrm T\), \(v(q)=\mathrm F\). Then \(p\to q\) is false, \((p\to q)\to p\) is true, and the whole formula is \(\mathrm T\to\mathrm F=\mathrm F\).

(d) Deducible:

1\((p \to q) \to r\)(assump.)2\(q \to (p \to q)\)(L1)3\(q \to r\)(1,2 HS)

(e) Deducible:

1\(p \wedge q\)(assump.)2\((p \wedge q) \to p\)(L4)3\(p\)(1,2 MP)4\(p \to (p \vee r)\)(L7)5\(p \vee r\)(3,4 MP)

(f) Not deducible: \(v(p)=\mathrm T\), \(v(q)=\mathrm F\), \(v(r)=\mathrm T\) makes \(p\to(q\vee r)\) true and \(p\to q\) false.

10. Consistency

Definition 9.21: consistent sets

A set of formulas \(\Gamma\) is inconsistent if there is a formula \(\varphi\) with \(\Gamma\vdash\varphi\) and \(\Gamma\vdash\neg\varphi\). Otherwise \(\Gamma\) is consistent.

For example, \(\{p,\neg p\}\) is inconsistent, with \(\varphi=p\): each of the two one-line deductions \(p\) and \(\neg p\) uses (assump.). For \(\Gamma=\{p\to q,\ p,\ \neg q\}\), take \(\varphi=q\): we have \(\Gamma\vdash\neg q\) by (assump.), and

1\(p \to q\)(assump.)2\(p\)(assump.)3\(\neg q\)(assump.)4\(q\)(1,2 MP)
Corollary 9.22: satisfiable sets are consistent

If \(\Gamma\) is satisfiable, then \(\Gamma\) is consistent. In particular, \(\varnothing\) is consistent.

Proof. Let \(v\) satisfy \(\Gamma\), and suppose \(\Gamma\vdash\varphi\) and \(\Gamma\vdash\neg\varphi\). By the Soundness Theorem, \([\![\varphi]\!]_v=\mathrm T\) and \([\![\neg\varphi]\!]_v=\mathrm T\). But then \([\![\varphi]\!]_v=\mathrm F\). Contradiction. Every valuation satisfies \(\varnothing\). □

So \(\{p\to q,\ \neg q,\ \neg p\}\) is consistent: the valuation \(v(p)=v(q)=\mathrm F\) satisfies it.

Example 9.23: an axiom that breaks soundness

Why do we insist that every axiom is a tautology? Suppose we add the scheme \[(\mathrm L^*)\qquad(\varphi\to\psi)\to\varphi,\] which is not a tautology (take \(\varphi=\mathrm F\)). Then the new system proves every primitive proposition \(p\):

1\((p \to p) \to p\)(L*)2\(p \to p\)(Example 8.27)3\(p\)(1,2 MP)

Line 1 is (L*) with \(\varphi:=p\) and \(\psi:=p\). In the same way it proves \(\neg p\), with \(\varphi:=\neg p\). So in the new system even \(\varnothing\) is inconsistent. The proof of Theorem 9.17 breaks exactly at Lemma 9.15: the base case needs every axiom to be true under \(v\).

Exercise 5: which axioms would be safe?

Self-check only. Nothing here counts towards your grade.

We could add a new axiom scheme and keep the Soundness Theorem exactly when every instance of the scheme is a tautology. For each scheme, decide. If not every instance is a tautology, give values of \(\varphi,\psi,\chi\) that make the scheme false.

(a) Safe. False would need \(\varphi\to\psi=\mathrm T\), \(\neg\psi=\mathrm T\), \(\neg\varphi=\mathrm F\), so \(\varphi=\mathrm T\), \(\psi=\mathrm F\), and then \(\varphi\to\psi=\mathrm F\).

(b) Not safe: \(\varphi=\mathrm F\), \(\psi=\mathrm T\).

(c) Safe. False would need \(\varphi=\mathrm F\) and \((\varphi\to\psi)\to\varphi=\mathrm T\). But \(\varphi=\mathrm F\) makes \(\varphi\to\psi\) true, so \((\varphi\to\psi)\to\varphi=\mathrm F\).

(d) Not safe: \(\varphi=\mathrm F\), \(\psi=\mathrm T\).

(e) Safe. False would need \(\neg\neg\varphi=\mathrm T\) and \(\varphi=\mathrm F\).

(f) Not safe: \(\varphi=\mathrm F\) and \(\chi=\mathrm F\), with any \(\psi\). Then \(\varphi\to(\psi\to\chi)\) is true, \(\varphi\to\psi\) is true and \((\varphi\to\psi)\to\chi\) is false.

Looking ahead

Soundness says \(\Gamma\vdash\varphi\Rightarrow\Gamma\models\varphi\). The converse, \(\Gamma\models\varphi\Rightarrow\Gamma\vdash\varphi\), is the Completeness Theorem. It is harder, and we prove it later. Together they say that \(\vdash\) and \(\models\) describe the same relation.

Homework 9

Instructions

  • Write your full name in the box below before you start.
  • Show your work. For every answer give the reasons, not only the result.
  • In deductions you may use (assump.), the axioms (L1) to (L9), MP, and the two shortcuts of Section 6: (\(j,k\) HS) and theorems proved in the notes, cited by their number. Say where you use the Deduction Theorem.
  • Each question has two answer modes, Type and Write by hand. In Write by hand mode the text boxes are replaced by a drawing area where you can write with a pen, a finger or a mouse. For each question, only the answer in the selected mode goes into the PDF. Switching modes does not delete what you entered in the other mode.
  • The symbol buttons under a text box insert symbols at the cursor.
  • To submit, press Save homework as PDF, save the PDF and upload it to Canvas.
  • Your answers are saved automatically in this browser. If you open this page on a different computer or in a different browser, they will not be there.

Question 1: deductions with the Deduction Theorem30 points

Show each claim. First say which claim you reduce it to with the Deduction Theorem, then write the deduction in Fitch notation. Use "Add line" for more lines.

(a) (15 points) \(\vdash((p\wedge q)\to r)\to(p\to(q\to r))\)
(b) (15 points) \(p\vee q,\ \neg p\vdash q\). Here the goal is not an implication, but you can use the Deduction Theorem for a formula you need along the way. Explain where.

Question 2: deducible or not?30 points

For each claim, decide whether it holds. If it holds, prove it with a deduction (you may use the Deduction Theorem). If it does not hold, prove this with the Soundness Theorem, and check your valuation. Each part is worth 10 points.

(a) \((p\to q)\to r\vdash p\to(q\to r)\)
(b) \(p\to(q\to r)\vdash(p\to q)\to r\)
(c) \(p\to(q\wedge r)\vdash(p\to q)\wedge(p\to r)\)

Question 3: consistency and a bad axiom20 points

(a) (6 points) Show that \(\{p\to q,\ \neg q,\ p\vee r\}\) is consistent.
(b) (14 points) Add to (L1) to (L9) the scheme \((\mathrm L10)\ (\varphi\to\psi)\to(\psi\to\varphi)\). Write \(\vdash'\) for deductions in the new system.
  1. Show that \(\vdash' q\). Hint: first show \(\vdash q\to(p\to p)\).
  2. Conclude that \(\varnothing\) is inconsistent in the new system.
  3. Explain why this does not contradict the Soundness Theorem.

Question 4: the Deduction Theorem, many times20 points

Prove by induction on \(n\ge1\): for every set \(\Gamma\) and all formulas \(\varphi_1,\dots,\varphi_n,\psi\), \[\Gamma\vdash\varphi_1\to(\varphi_2\to(\cdots\to(\varphi_n\to\psi)\cdots))\quad\text{if and only if}\quad \Gamma\cup\{\varphi_1,\dots,\varphi_n\}\vdash\psi.\] State the base case, the induction hypothesis and the step clearly, and say where you use the Deduction Theorem.