Chapter 48 Soundness

In this chapter we relate TFL’s semantics to its natural deduction proof system (as defined in part IV). We will prove that the formal proof system is safe: you can only prove sentences from premises from which they actually follow. Intuitively, a formal proof system is sound if⁠f it does not allow you to prove any invalid arguments. This is obviously a highly desirable property. It tells us that our proof system will never lead us astray. Indeed, if our proof system were not sound, then we would not be able to trust our proofs. The aim of this chapter is to prove that our proof system is sound.

Let’s make the idea more precise. We’ll abbreviate a list of sentences using the Greek letter Γ (‘gamma’). A formal proof system is sound (relative to a given semantics) if⁠f, whenever there is a formal proof of 𝒞 from assumptions among Γ, then Γ genuinely entails 𝒞 (given that semantics). Otherwise put, to prove that TFL’s proof system is sound, we need to prove the following

Soundness Theorem. For any sentences Γ and 𝒞: if Γ𝒞, then Γ𝒞

To prove this, we will check each of the rules of TFL’s proof system individually. We want to show that no application of those rules ever leads us astray. Since a proof just involves repeated application of those rules, this will show that no proof ever leads us astray. Or at least, that is the general idea.

To begin with, we must make the idea of ‘leading us astray’ more precise. Say that a line of a proof is shiny if⁠f the assumptions on which that line depends entail the sentence on that line.11 1 The word ‘shiny’ is not standard among logicians. To illustrate the idea, consider the following:

Line number
Subproof level
Formula
Justification
1
0
F(GH)
PR
2
open subproof, 1
F
AS
3
1
GH
E 1, 2
4
1
G
E 3
5
close subproof, 0
FG
I 24

Line 1 is shiny if⁠f F(GH)F(GH). You should be easily convinced that line 1 is, indeed, shiny! Similarly, line 4 is shiny if⁠f F(GH),FG. Again, it is easy to check that line 4 is shiny. As is every line in this TFL-proof. We want to show that this is no coincidence. That is, we want to prove:

Shininess Lemma. Every line of every TFL-proof is shiny.

Then we will know that we have never gone astray, on any line of a proof. Indeed, given the Shininess Lemma, it will be easy to prove the Soundness Theorem:

Proof. Suppose Γ𝒞. Then there is a TFL-proof, with 𝒞 appearing on its last line, whose only undischarged assumptions are among Γ. The Shininess Lemma tells us that every line on every TFL-proof is shiny. So this last line is shiny, i.e., Γ𝒞. QED

It remains to prove the Shininess Lemma.

To do this, we observe that every line of any TFL-proof is either a premise or an assumption, or it is obtained by applying some rule. Premises are automatically shiny: if 𝒜 is a premise, then it is among the sentences in Γ, and Γ𝒜 trivially. Assumptions are also shiny, since the any assumption 𝒜 depends on itself, and 𝒜𝒜. So what we want to show is that no application of a rule of TFL’s proof system will lead us astray. More precisely, say that a rule of inference is rule-sound if⁠f for all TFL-proofs, if we obtain a line on a TFL-proof by applying that rule, and every earlier line in the TFL-proof is shiny, then our new line is also shiny. What we need to show is that every rule in TFL’s proof system is rule-sound.

We will do this below. But having demonstrated the rule-soundness of every rule, the Shininess Lemma will follow immediately:

Proof. Start with line 1 of any TFL proof. It must be either a premise or an assumption, and those are all shiny, as we’ve seen above. Take the next line, 2. If it is a premise or assumption, it is shiny. If not, it is obtained from line 1 using an inference which is rule-sound. Since line 1 is shiny, line 2 is also shiny. Take the next line, 3. If it is a premise or assumption, it is shiny. If not, it is obtained from a previous line using an inference which is rule-sound, and we’ve established that all previous lines are shiny. Thus, line 3 is also shiny. And so on. In general, the sentence written on line n must either be a premise or assumption (which is shiny) or be obtained using a formal inference rule which is rule-sound. Since every earlier line is shiny, line n itself is shiny. We can simply go through this reasoning, for any TFL proof, starting with line 1 and continuing to the last line, and get that every line of every TFL-proof is shiny. QED

It remains to show that every rule is rule-sound. This is not difficult, but it is time-consuming, since we need to check each rule individually, and TFL’s proof system has plenty of rules! To speed up the process marginally, we will introduce a convenient abbreviation: ‘Δi’ (‘delta’) will abbreviate the assumptions (if any) on which line i depends in our TFL-proof (context will indicate which TFL-proof we have in mind). This includes all premises of our proof, and all assumptions of subproofs which are still open at line i. Let’s first record our observation about premises and assumptions from above.

Premises and assumptions in TFL proofs are shiny.

If 𝒜 is a premise on line n, then it is among Δn as that includes all premises of the proof. If it is introduced as an assumption of a subproof on line n, then everything in the subproof (including line n, i.e., 𝒜 itself) depends on 𝒜, and so 𝒜 is among Δn. In either case, Δn𝒜.

Now let’s proceed to show that all the inference rules are rule-sound.

I is rule-sound.

Proof. Consider any application of I in any TFL-proof, i.e., something like:

Line number
Subproof level
Formula
Justification
i
0
𝒜
j
0
n
0
𝒜
I i, j

To show that I is rule-sound, we assume that every line before line n is shiny; and we aim to show that line n is shiny, i.e., that Δn𝒜.

So, let v be any valuation that makes all of Δn true.

We first show that v makes 𝒜 true. To prove this, note that all of Δi are among Δn. By hypothesis, line i is shiny. So any valuation that makes all of Δi true makes 𝒜 true. Since v makes all of Δi true, it makes 𝒜 true too.

We can similarly see that v makes true.

So v makes 𝒜 true and v makes true. Consequently, v makes 𝒜 true. So any valuation that makes all sentences among Δn true also makes 𝒜 true. That is: line n is shiny. QED

All of the remaining lemmas establishing rule-soundness will have, essentially, the same structure as this one did.

E is rule-sound.

Proof. Assume that every line before line n on some TFL-proof is shiny, and that E is used on line n. So the situation is:

Line number
Subproof level
Formula
Justification
i
0
𝒜
n
0
𝒜
E i

(or perhaps with on line n instead; but similar reasoning will apply in that case). Let v be any valuation that makes all of Δn true. Note that all of Δi are among Δn. By hypothesis, line i is shiny. So any valuation that makes all of Δi true makes 𝒜 true. So v makes 𝒜 true, and hence makes 𝒜 true. So Δn𝒜. QED

I is rule-sound.

We leave this as an exercise.

E is rule-sound.

Proof. Assume that every line before line n on some TFL-proof is shiny, and that E is used on line n. So the situation is:

Line number
Subproof level
Formula
Justification
m
0
𝒜
i
open subproof, 1
𝒜
AS
j
1
𝒞
k
close subproof, open subproof, 1
AS
l
1
𝒞
n
close subproof, 0
𝒞
E m, ij, kl

Let v be any valuation that makes all of Δn true. Note that all of Δm are among Δn. By hypothesis, line m is shiny. So any valuation that makes Δn true makes 𝒜 true. So in particular, v makes 𝒜 true, and hence either v makes 𝒜 true, or v makes true. We now reason through these two cases:

  1. 1.

    v makes 𝒜 true. All of Δi are among Δn, with the possible exception of 𝒜. Since v makes all of Δn true, and also makes 𝒜 true, v makes all of Δi true. Now, by assumption, line j is shiny; so Δj𝒞. But the sentences Δi are just the sentences Δj, so Δi𝒞. So, any valuation that makes all of Δi true makes 𝒞 true. But v is just such a valuation. So v makes 𝒞 true.

  2. 2.

    v makes true. Reasoning in exactly the same way, considering lines k and l, v makes 𝒞 true.

Either way, v makes 𝒞 true. So Δn𝒞. QED

¬E is rule-sound.

Proof. Assume that every line before line n on some TFL-proof is shiny, and that ¬E is used on line n. So the situation is:

Line number
Subproof level
Formula
Justification
i
0
𝒜
j
0
¬𝒜
n
0
¬E i, j

Note that all of Δi and all of Δj are among Δn. By hypothesis, lines i and j are shiny. So any valuation which makes all of Δn true would have to make both 𝒜 and ¬𝒜 true. But no valuation can do that. So no valuation makes all of Δn true. So Δn, vacuously. QED

X is rule-sound.

We leave this as an exercise.

¬I is rule-sound.

Proof. Assume that every line before line n on some TFL-proof is shiny, and that ¬I is used on line n. So the situation is:

Line number
Subproof level
Formula
Justification
i
open subproof, 1
𝒜
AS
j
1
n
close subproof, 0
¬𝒜
¬I ij

Let v be any valuation that makes all of Δn true. Note that all of Δn are among Δi, with the possible exception of 𝒜 itself. By hypothesis, line j is shiny. But no valuation can make ‘’ true, so no valuation can make all of Δj true. Since the sentences Δi are just the sentences Δj, no valuation can make all of Δi true. Since v makes all of Δn true, it must therefore make 𝒜 false, and so make ¬𝒜 true. So Δn¬𝒜. QED

IP, I, E, I, and E are all rule-sound.

We leave these as exercises.

This establishes that all the basic rules of our proof system are rule-sound. Finally, we show:

All of the derived rules of our proof system are rule-sound.

Proof. Suppose that we used a derived rule to obtain some sentence, 𝒜, on line n of some TFL-proof, and that every earlier line is shiny. Every use of a derived rule can be replaced (at the cost of long-windedness) with multiple uses of basic rules. That is to say, we could have used basic rules to write 𝒜 on some line n+k, without introducing any further assumptions. So, applying our individual results that all basic rules are rule-sound several times (k+1 times, in fact), we can see that line n+k is shiny. Hence the derived rule is rule-sound. QED

And that’s that! We have shown that every rule—basic or otherwise—is rule-sound, which is all that we required to establish the Shininess Lemma, and hence the Soundness Theorem.

But it might help to round off this chapter if we repeat my informal explanation of what we have done. A formal proof is just a sequence—of arbitrary length—of applications of rules. We have shown that any application of any rule will not lead you astray. It follows that no formal proof will lead you astray. That is: our proof system is sound.

Practice exercises

A. Complete the Lemmas left as exercises in this chapter. That is, show that the following are rule-sound:

  1. 1.

    I. (Hint: this is similar to the case of E.)

  2. 2.

    X. (Hint: this is similar to the case of ¬E.)

  3. 3.

    I. (Hint: this is similar to E.)

  4. 4.

    E.

  5. 5.

    IP. (Hint: this is similar to the case of ¬I.)