Provability logic is a modal logic that is used to investigate whatarithmetical theories can express in a restricted language about theirprovability predicates. The logic has been inspired by developments inmeta-mathematics such as Gödel’s incompleteness theorems of1931 and Löb’s theorem of 1953. As a modal logic,provability logic has been studied since the early seventies, and hashad important applications in the foundations of mathematics.
From a philosophical point of view, provability logic is interestingbecause the concept of provability in a fixed theory of arithmetic hasa unique and non-problematic meaning, other than concepts likenecessity and knowledge studied in modal and epistemic logic.Furthermore, provability logic provides tools to study the notion ofself-reference.
Two strands of research have led to the birth of provability logic.The first one stems from a paper byK. Gödel (1933), where he introduces translations from intuitionisticpropositional logic into modal logic (more precisely, into the systemnowadays called S4), and briefly mentions that provability can beviewed as a modal operator. Even earlier, C.I. Lewis started themodern study of modal logic by introducing strict implication as akind of deducibility, where he may have meant deducibility in a formalsystem likePrincipia Mathematica, but this is not clear from his writings.
The other strand starts from research in meta-mathematics: what canmathematical theories say about themselves by encoding interestingproperties? In 1952, L. Henkin posed a deceptively simple questioninspired byGödel’s incompleteness theorems. In order to formulate Henkin’s question, some more backgroundis needed. As a reminder, Gödel’s first incompletenesstheorem states that, for a sufficiently strong formal theory likePeano Arithmetic, any sentence asserting its own unprovability is infact unprovable. On the other hand, from “outside” theformal theory, one can see that such a sentence is true in thestandard model, pointing to an important distinction between truth andprovability.
More formally, let \(\ulcorner A \urcorner\) denote the Gödelnumber of arithmetical formula \(A\), which is the result of assigninga numerical code to \(A\). Let \(\Prov\) be the formalized provabilitypredicate for Peano Arithmetic, which is of the form \(\exists p \,\Proof(p,x)\). Here, \(\Proof\) is the formalized proof predicate ofPeano Arithmetic, and \(\Proof(p,x)\) stands for “Gödelnumber \(p\) codes a correct proof from the axioms of Peano Arithmeticof the formula with Gödel number \(x\)”. (For a moreprecise formulation, see Smoryński (1985), Davis (1958).) Now,suppose that Peano Arithmetic proves \(A \leftrightarrow \neg\)\(\Prov (\ulcorner A \urcorner)\), then by Gödel’s result,\(A\) is not provable in Peano Arithmetic, and thus it is true, for infact the self-referential sentence \(A\) states “I am notprovable”.
Henkin on the other hand wanted to know whether anything could be saidabout sentences asserting their own provability: supposing that PeanoArithmetic proves \(B \leftrightarrow \Prov(\ulcorner B \urcorner)\),what does this imply about \(B\)? Three years later, M. Löb tookup the challenge and answered Henkin’s question in a surprisingway. Even though all sentences provable in Peano Arithmetic are indeedtrue about the natural numbers, Löb showed that the formalizedversion of this fact, \(\Prov(\ulcorner B \urcorner) \rightarrow B\),can be proved in Peano Arithmetic only in the trivial case that PeanoArithmetic already proves \(B\) itself. This result, now calledLöb’s theorem, immediately answers Henkin’s question.(For a proof of Löb’s theorem, seeSection 4.) Löb also showed a formalized version of his theorem, namely thatPeano Arithmetic proves
\[\Prov(\ulcorner \Prov(\ulcorner B\urcorner ) \rightarrow B\urcorner ) \rightarrow \Prov(\ulcorner B \urcorner ).\]In the same paper, Löb formulated three conditions on theprovability predicate of Peano Arithmetic, that form a usefulmodification of the complicated conditions that Hilbert and Bernaysintroduced in 1939 for their proof of Gödel’s secondincompleteness theorem. In the following, derivability of \(A\) fromPeano Arithmetic is denoted by \(\PA \vdash A\):
These Löb conditions, as they are called nowadays, seem to cryout for a modal logical investigation, where the modality \(\Box\)stands for provability in PA. Ironically, the first time that theformalized version of Löb’s theorem was stated as the modalprinciple
\[\Box(\Box A \rightarrow A) \rightarrow \Box A\]was in a paper by Smiley in 1963 about the logical basis of ethics,which did not consider arithmetic at all. More relevantinvestigations, however, seriously started only almost twenty yearsafter publication of Löb’s paper. The early 1970s saw therapid development of propositional provability logic, where severalresearchers in different countries independently proved the mostimportant results, discussed in Sections2,3, and4. Propositional provability logic turned out to capture exactly whatmany formal theories of arithmetic can say by propositional meansabout their own provability predicate. More recently, researchers haveinvestigated the boundaries of this approach and have proposed severalinteresting more expressive extensions of provability logic (seeSection 5).
The logical language of propositional provability logic contains, inaddition to propositional atoms and the usual truth-functionaloperators as well as the contradiction symbol \(\bot\), a modaloperator \(\Box\) with intended meaning “is provable in\(T\),” where \(T\) is a sufficiently strong formal theory, letus say Peano Arithmetic (seeSection 4). \(\Diamond A\) is an abbreviation for \(\neg\,\Box\neg\, A\). Thus,the language is the same as that of modal systems such as K and S4presented in the entrymodal logic.
Propositional provability logic is often called GL, after Gödeland Löb. (Alternative names found in the literature forequivalent systems are L, G, KW, K4W, and PrL). The logic GL resultsfrom adding the following axiom to the basic modal logic K:
\[\tag{GL}\Box(\Box A \rightarrow A) \rightarrow \Box A.\]As a reminder, because GL extends K, it contains all formulas havingthe form of a propositional tautology. For the same reason, GLcontains the
\[\tag{Distribution Axiom}\Box(A \rightarrow B) \rightarrow (\Box A \rightarrow \Box B).\]Furthermore, it is closed under the Modus Ponens Rule, which allows toderive \(B\) from \(A \rightarrow B\) and \(A\), and theGeneralization Rule, which says that if \(A\) is a theorem of GL, thenso is \(\Box A\).
The notion \(\GL \vdash A\) denotes provability of a modal formula\(A\) in propositional provability logic. It is not difficult to seethat the modal axiom \(\Box A \rightarrow \Box\Box A\) (known as Axiom4 of modal logic) is indeed provable in GL. To prove this, one usesthe substitution \(A \wedge \Box A\) for \(A\) in the axiom (GL).Then, seeing that the antecedent of the resulting implication followsfrom \(\Box A\), one applies the Distribution Axiom and theGeneralization Rule as well as some propositional logic.
Note that GL proves many unexpected theorems that are not shared withother well-known modal logics such as K and S4. For example, oneinstantiation of the axiom GL is \(\Box(\Box\bot \rightarrow \bot)\rightarrow \Box\bot\), from which it follows by the other axioms andrules that \(\Box\Diamond A \rightarrow \Box B\) for any formulas\(A\) and \(B\).[1] Unless explicitly stated otherwise, in the sequel “provabilitylogic” stands for the system GL of propositional provabilitylogic.
As to theproof theory of provability logic, Valentini (1983)proved that a standard sequent calculus formulation of GL obeyscut elimination, which means, roughly formulated, that eachformula provable from GL in the sequent calculus also has a GL sequentproof “without detours” (see the entrythe development of proof theory for a precise explanation of cut elimination). In recent years, therehas been renewed interest in the proof theory of GL, see for exampleGoré and Ramanayake (2008, 2012) and Goré, Ramanayakeand Shillito (2021). Cut-elimination leads to the desirablesubformula property for GL, because all formulas that appearin a cut-free proof are subformulas of the endsequent formulas.
For recent proof-theoretic investigations of provability logic basedon different cut-free sequent calculi see (Negri 2005, 2014;Poggiolesi 2009). Negri presents two equivalent labelled sequentcalculi for GL and a syntactic proof of cut elimination. Even if afull subformula property does not hold for these calculi because ofthe labelling, the usual consequences of the subformula property canbe established: The labelled formalism allows a direct completenessproof, which can be used to establish decidability as well as thefinite model property, which means that any formula that is notprovable has afinite counter-model.
An intriguing new proof-theoretical development is Shamkanov’sexpansion of sequent-style proof systems by allowingcircularproofs (Shamkanov 2014). Consider a sequent system for K4, themodal system resulting from GL by replacing the axiom GL by the weakeraxiom \(\Box A \rightarrow \Box\Box A\) (axiom 4). However, supposethat open hypotheses are allowed, provided that the same sequentoccurs strictly below that hypothesis in the proof tree. Formulatedmore technically, one can find a circular derivation from an ordinaryderivation tree by linking each of its non-axiomatic leaves with anidentical interior node. Shamkanov (2014) proved that the resultingsystem is consistent and that moreover, in general, each sequent has aGL-derivation if and only if it has a circular K4-derivation. Circularproofs also provide a method to show proof-theoretically thatLyndon’s interpolation theorem holds for GL (Shamkanov 2011).Standard interpolation for GL had already been proved before bydifferent methods (Boolos 1979; Smoryński 1978; Rautenberg 1983)and so had uniform interpolation (Shavrukov 1993b,Bílková 2016, Férée et al. [Other InternetResources]). (For more information about Lyndon’s interpolationtheorem for first-order logic, see also the entryfirst-order model theory).
The main “modal” result about provability logic is thefixed point theorem, which D. de Jongh and G. Sambin independentlyproved in 1975 (Sambin 1976, Smoryński 1985, de Jonghforthcoming). Even though it is formulated and proved by strictlymodal methods, the fixed point theorem still has great arithmeticalsignificance. It says essentially that self-reference is not reallynecessary, in the following sense. Suppose that all occurrences of thepropositional variable \(p\) in a given formula \(A(p)\) are under thescope of the provability operator, for example \(A(p) = \neg\Box p\),or \(A(p) = \Box(p \rightarrow q)\). Then there is a formula \(B\) inwhich \(p\) does not appear, such that all propositional variablesthat occur in \(B\) already appear in \(A(p),\) and such that
\[ \GL \vdash B \leftrightarrow A(B).\]This formula \(B\) is called afixed point of \(A(p)\).Moreover, the fixed point is unique, or more accurately, if there isanother formula \(C\) such that \( \GL \vdash C \leftrightarrowA(C)\), then we must have \( \GL \vdash B \leftrightarrow C\). Mostproofs in the literature give an algorithm by which one can computethe fixed point (see Smoryński 1985, Boolos 1993, Sambin andValentini 1982, Lindström 2006). A particularly short and clearproof, as well as a very efficient algorithm to compute fixed points,can be found in Reidhaar-Olson (1990).
For example, suppose that \(A(p) = \neg \, \Box p\). Then the fixedpoint produced by such an algorithm is \(\neg \, \Box\bot\), andindeed one can prove that
\[\GL \vdash \neg\,\Box\bot \leftrightarrow \neg\,\Box(\neg\,\Box\bot).\]If this is read arithmetically, the direction from left to right isjust the formalized version of Gödel’s secondincompleteness theorem: if a sufficiently strong formal theory \(T\)like Peano Arithmetic does not prove a contradiction, then it is notprovable in \(T\) that \(T\) does not prove a contradiction. Thus,sufficiently strong consistent arithmetical theories cannot provetheir own consistency. We will turn to study the relation betweenprovability logic and arithmetic more precisely inSection 4, but to that end another “modal” aspect of GL needs to beprovided first: semantics.
Provability logic has suitable possible worlds semantics, just likemany other modal logics. As a reminder, a possible worlds model (orKripke model) is a triple \(M = \langle W,R,V \rangle\), where \(W\)is a non-empty set of possible worlds, \(R\) is a binary accessibilityrelation on \(W\), and \(V\) is a valuation that assigns a truth valueto each propositional variable for each world in \(W\). The pair \(F =\langle W,R \rangle\) is called the frame of this model. The notion oftruth of a formula \(A\) in a model \(M\) at a world \(W\), notation\(M,w \models A\), is defined inductively. Let us repeat only the mostinteresting clause, the one for the provability operator \(\Box\):
\[M,w \models \Box A \text{ iff for every } w', \text{ if } wRw', \text{ then } M,w' \models A.\]See the entrymodal logic for more information about possible worlds semantics in general.
The modal logic K is valid in all Kripke models. Its extension GLhowever, is not: we need to restrict the class of possible worldsmodels to a more suitable one. Let us say that a formula \(A\) isvalid in frame \(F\), notation \(F \models A\), iff \(A\) is true inall worlds in Kripke models \(M\) based on \(F\). It turns out thatthe new axiom (GL) of provability logic corresponds to a condition onframes, as follows:
For all frames \(F = \langle W,R \rangle, F \models \Box(\Box p\rightarrow p) \rightarrow \Box p\) iff \(R\) is transitive andconversely well-founded.
Here,transitivity is the well-known property that for allworlds \(w_1\), \(w_2\), \(w_3\) in \(W\), if \(w_1 Rw_2\) and \(w_2Rw_3\), then \(w_1 Rw_3\). A relation isconverselywell-founded iff there are no infinite ascending sequences, thatis sequences of the form \(w_1 Rw_2 Rw_3 R \ldots\). Note thatconversely well-founded frames are also irreflexive, for if \(wRw\),this gives rise to an infinite ascending sequence\(wRwRwR\ldots\).
The above correspondence result immediately shows that GL is modallysound with respect to the class of possible worlds models ontransitive conversely well-founded frames, because all axioms andrules of GL are valid on such models. The question is whethercompleteness also holds: for example, the formula \(\Box A \rightarrow\Box\Box A\), which is valid on all transitive frames, is indeedprovable in GL, as was mentioned inSection 1. But isevery formula that is valid on all transitiveconversely well-founded frames also provable in GL?
Unaware of the arithmetical significance of GL, K. Segerberg proved in1971 that GL is indeed complete with respect to transitive converselywell-founded frames; D. de Jongh and S. Kripke independently provedthis result as well. Segerberg showed that GL is complete even withrespect to the more restricted class of finite transitive irreflexivetrees, a fact which later turned out to be very useful forSolovay’s proof of the arithmetical completeness theorem (seeSection 4).
The modal soundness and completeness theorems immediately give rise toa decision procedure to check for any modal formula \(A\) whether\(A\) follows from GL or not, by depth-first search throughirreflexive transitive trees of bounded depth. Looking at theprocedure a bit more precisely, it can be shown that GL is decidablein the computational complexity class PSPACE, like the well-knownmodal logics K, T and S4. This means that there is a Turing machinethat, given a formula \(A\) as input, answers whether \(A\) followsfrom GL or not; the size of the memory that the Turing machine needsfor its computation is only polynomial in the length of \(A\). One canshow that the decision problem for GL (again, like the decisionproblems for K, T and S4) is PSPACE-complete, in the sensethat all other problems in PSPACE are no harder than deciding whethera given formula is a theorem of GL. (See Goré and Kelly 2007[Other Internet Resources] for the description of an automated theoremprover for GL.)
To give some more perspective on complexity, the class P of functionscomputable in an amount of time polynomial in the length of the input,is included in PSPACE, which in turn is included in the class EXPTIMEof functions computable in exponential time (see the entrycomputability and complexity). It remains a famous open problem whether these two inclusions arestrict, although many complexity theorists believe that they are. Someother well-known modal logics, like epistemic logic with commonknowledge, are decidable in EXPTIME, thus they may be more complexthan GL, depending on the open problems.
Many well-known modal logics \(S\) are not only complete with respectto an appropriate class of frames, but evenstronglycomplete. In order to explain strong completeness, we need thenotion ofderivability from a set of assumptions. A formula\(A\) is derivable from the set of assumptions \(\Gamma\) in a modallogic \(S\), written as \(\Gamma \vdash A\), if \(A\) is in \(\Gamma\)or \(A\) follows from formulas in \(\Gamma\) and axioms of \(S\) byapplications of Modus Ponens and the Generalization Rule. Here, theGeneralization Rule can only be applied to derivations withoutassumptions (see Hakli and Negri 2010).
Now a modal logic \(S\) isstrongly complete if for all(finite or infinite) sets \(\Gamma\) and all formulas \(A\):
If, on appropriate \(S\)-frames, \(A\) is true in all worlds in whichall formulas of \(\Gamma\) are true, then \(\Gamma \vdash A\) in thelogic \(S\).
This condition holds for systems like K, M, K4, S4, and S5. Ifrestricted to finite sets \(\Gamma\), the above condition correspondsto completeness.
Strong completeness does not hold for provability logic, however,becausesemantic compactness fails. Semantic compactness isthe property that for each infinite set \(\Gamma\) of formulas,
If every finite subset \(\Delta\) of \(\Gamma\) has a model on anappropriate \(S\)-frame, then \(\Gamma\) also has a model on anappropriate \(S\)-frame.
As a counterexample, take the infinite set of formulas
\[\begin{align}\Gamma &= \{\Diamond p_0, \Box(p_0 \rightarrow \Diamond p_1), \Box(p_1 \rightarrow \Diamond p_2), \Box(p_2 \rightarrow \Diamond p_3), \ldots, \\&\qquad\ \Box(p_n \rightarrow \Diamond p_{n+1}), \ldots\}\end{align}\]Then for every finite subset \(\Delta\) of \(\Gamma\), one canconstruct a model on a transitive, conversely well-founded frame and aworld in the model where all formulas of \(\Delta\) are true. So bymodal soundness, GL does not prove \(\bot\) from \(\Delta\) for anyfinite \(\Delta \subseteq \Gamma\), anda fortiori GL doesnot prove \(\bot\) from \(\Gamma\), as any GL-proof is finite. On theother hand, it is easy to see that there is no model on a transitive,conversely well-founded frame where in any world, all formulas of\(\Gamma\) hold. Thus \(\bot\) follows semantically from \(\Gamma\),but is not provable from it in GL, contradicting the condition ofstrong completeness.[2]
As an alternative to possible worlds semantics, many modal logics maybe given topological semantics. Clearly, propositions can beinterpreted as subsets of a topological space. It is also easy to seethat the propositional connective \(\wedge\) corresponds to theset-theoretic operation \(\cap\), while \(\vee\) corresponds to\(\cup\), \(\neg\) corresponds to the set-theoretic complement, and\(\rightarrow\) corresponds to \(\subseteq\). Modal logics thatcontain the reflection axiom \(\Box A \rightarrow A\) enjoy aparticularly natural interpretation of the modal operators as well.For these logics, \(\Diamond\) corresponds to the closure operator ina topological space, while \(\Box\) corresponds to the interior. Tosee why these interpretations are appropriate, notice that thereflection axiom corresponds to the fact that each set is included inits closure and each set includes its interior.
However, provability logic doesnot prove reflection, as theinstantiation \(\Box\bot \rightarrow \bot\) of reflection would leadto a contradiction with the axiom (GL).
Provability logic therefore needs a different approach. Based on asuggestion by J. McKinsey and A. Tarski (1944), L. Esakia (1981, 2003)investigated the interpretation of \(\Diamond\) as the derived setoperator \(d\), which maps a set \(B\) to the set of its limit points\(d(B)\). To explain the consequences of this interpretation of\(\Diamond\), we need two more definitions, namely of the conceptsdense-in-itself andscattered. A subset \(B\) of atopological space is calleddense-in-itself if \(B \subseteqd(B)\). A topological space is calledscattered if it has nonon-empty subset that is dense-in-itself. The ordinals in theirinterval topology form examples of scattered spaces. Esakia (1981)proved an important correspondence: he showed that a topological spacesatisfies the axiom GL if and only if the space isscattered. This correspondence soon led to the result,independently found by Abashidze (1985) and Blass (1990), thatprovability logic is complete with respect to any ordinal \(\ge\omega^\omega\).
In the previous decades, topological semantics for provability logichas seen a veritable revival, especially in the study ofJaparidze’s bimodal provability logic GLB, an extension of GL(Japaridze 1986). The logic GLB turns out to bemodallyincomplete with respect to its possible worlds semantics, in thesense that it does not correspond to any class offrames.[3] This feature places bimodal GLB in sharp contrast with unimodal GL,which corresponds to the class of finite transitive irreflexive trees,as mentioned above. Beklemishev et al. (2009) showed that GLB is,however, complete with respect to itstopological semantics(see also Beklemishev 2009, Icard 2011). Intriguing reverberations ofEsakia’s correspondence between GL and scattered topologicalspaces can even be found in topological studies of spatial andepistemic logics (see Aiello et al. 2007). (SeeSection 5.4 for further discussion about GLB).
From the time GL was formulated, researchers wondered whether it wasadequate for formal theories like Peano Arithmetic (PA): does GL proveeverything about the notion of provability that can beexpressed in a propositional modal language and can be proved in PeanoArithmetic, or should more principles be added to GL? To make thisnotion of adequacy more precise, we define arealization(sometimes called translation or interpretation) to be a functionf that assigns to each propositional atom of modal logic asentence of arithmetic, where
It was already clear in the early 1970s that GL isarithmeticallysound with respect to PA, formally:
\[\text{If } \GL \vdash A,\text{then for all realizations } f, \PA \vdash f(A).\]To give some taste of meta-mathematics, let us sketch the soundnessproof.
Proof sketch of arithmetical soundness. PA indeedproves realizations of propositional tautologies, and provability ofthe Distribution Axiom of GL translates to
\[\PA \vdash \Prov(\ulcorner A \rightarrow B\urcorner ) \rightarrow (\Prov(\ulcorner A\urcorner ) \rightarrow \Prov(\ulcorner B\urcorner ))\]for all formulasA andB, which is justLöb’s second derivability condition (seeSection 1). Moreover, PA obeys Modus Ponens, as well as the translation of theGeneralization Rule:
\[\text{If } \PA \vdash A,\text{then } \PA \vdash \Prov(\ulcorner A\urcorner ),\]which is just Löb’s first derivability condition. Finally,the translation of the main axiom (GL) is indeed provable in PA:
\[\PA \vdash \Prov(\ulcorner \Prov(\ulcorner A\urcorner ) \rightarrow A\urcorner ) \rightarrow \Prov(\ulcorner A\urcorner ).\]This is exactly the formalized version of Löb’s theoremmentioned inSection 1.
Let us give a sketch of the proof of Löb’s theorem itselffrom his derivability conditions (the proof of the formalized versionis similar). The proof is based on Gödel’s diagonalizationlemma, which says that for any arithmetical formula \(C(x)\) there isan arithmetical formula \(B\) such that
\[\PA \vdash B \leftrightarrow C(\ulcorner B\urcorner ).\]In words, the formula \(B\) says “I have property\(C\).”
Proof of Löb’s theorem:. Suppose that\(\PA \vdash \Prov(\ulcorner A\urcorner ) \rightarrow A\); we need toshow that \(\PA \vdash A\). By the diagonalization lemma, there is aformula \(B\) such that
\[\PA \vdash B \leftrightarrow (\Prov(\ulcorner B\urcorner ) \rightarrow A).\]From this it follows by Löb’s first and second derivabilityconditions plus some propositional reasoning that
\[\PA \vdash \Prov(\ulcorner B\urcorner ) \leftrightarrow \Prov(\ulcorner \Prov(\ulcorner B\urcorner ) \rightarrow A\urcorner ).\]Thus, again by Löb’s second condition,
\[\PA \vdash \Prov(\ulcorner B\urcorner ) \rightarrow (\Prov(\ulcorner \Prov(\ulcorner B\urcorner ) \urcorner ) \rightarrow \Prov(\ulcorner A\urcorner )).\]On the other hand Löb’s third condition gives
\[\PA \vdash \Prov(\ulcorner B\urcorner ) \rightarrow \Prov(\ulcorner \Prov(\ulcorner B\urcorner )\urcorner ),\]thus
\[\PA \vdash \Prov(\ulcorner B\urcorner ) \rightarrow \Prov(\ulcorner A\urcorner ).\]Together with the assumption that \(PA \vdash \Prov(\ulcornerA\urcorner ) \rightarrow A\), this gives
\[\PA \vdash \Prov(\ulcorner B\urcorner ) \rightarrow A.\]Finally, the equation produced by the diagonalization lemma impliesthat \(\PA \vdash B\), so \(\PA \vdash \Prov(\ulcorner B\urcorner )\),thus
\[\PA \vdash A,\]as desired.
Note that substituting \(\bot\) for \(A\) in Löb’s theorem,we derive that \(\PA \vdash \neg\, \Prov(\ulcorner \bot\urcorner )\)implies \(\PA \vdash \bot\), which is just the contraposition ofGödel’s second incompleteness theorem.
The landmark result in provability logic is R. Solovay’sarithmetical completeness theorem of 1976, showing that GL is indeedadequate for Peano Arithmetic:
\[\GL \vdash A\text{ if and only if for all realizations }f, \PA \vdash f(A).\]This theorem says essentially that the modal logic GL captureseverything that Peano Arithmetic can truthfully say in modal termsabout its own provability predicate. The direction from left to right,arithmetical soundness of GL, is discussed above. Solovay set out toprove the other, much more difficult, direction by contraposition. Hisproof is based on intricate self-referential techniques, and only asmall glimpse can be given here.
The modal completeness theorem by Segerberg was an important firststep in Solovay’s proof of arithmetical completeness of GL withrespect to Peano Arithmetic. Suppose that GL does not prove the modalformula \(A\). Then, by modal completeness, there is a finitetransitive irreflexive tree such that \(A\) is false at the root ofthat tree. Now Solovay devised an ingenious way to simulate such afinite tree in the language of Peano Arithmetic. Thus he found arealization \(f\) from modal formulas to sentences of arithmetic, suchthat Peano Arithmetic does not prove \(f(A)\).
Solovay’s completeness theorem provides an alternative way toconstruct many arithmetical sentences that are not provable in PeanoArithmetic. For example, it is easy to make a possible worlds model toshow that GL does not prove \(\Box p \vee \Box\neg\, p\), so bySolovay’s theorem, there is an arithmetical sentence \(f(p)\)such that Peano Arithmetic does not prove \(\Prov(\ulcornerf(p)\urcorner ) \vee \Prov(\ulcorner \neg\, f(p)\urcorner )\). Inparticular, this implies that neither \(f(p)\) nor \(\neg\, f(p)\) isprovable in Peano Arithmetic; for suppose on the contrary that \(\PA\vdash f(p)\), then by Löb’s first condition andpropositional logic, \(\PA \vdash \Prov(\ulcorner f(p)\urcorner ) \vee\Prov(\ulcorner \neg\, f(p)\urcorner )\), leading to a contradiction,and similarly if one supposes that \(\PA \vdash \neg\, f(p)\).
Solovay’s theorem is so significant because it shows that aninteresting fragment of an undecidable formal theory like PeanoArithmetic—namely that which arithmetic can express inpropositional terms about its own provability predicate—can bestudied by means of a decidable modal logic, GL, with a perspicuouspossible worlds semantics.
In this section, some trends in research on provability logic arediscussed. One important strand concerns the limits on the scope ofGL, where the main question is, for which formal theories, other thanPeano Arithmetic, is GL the appropriate propositional provabilitylogic? Next, we discuss some generalizations of propositionalprovability logic in more expressive modal languages.
Since the late 1980s, logicians have investigated many other systemsof arithmetic that are weaker than Peano Arithmetic. Often theselogicians took their inspiration from computability issues, forexample the study of functions computable in polynomial time. Theyhave given a partial answer to the question: “For which theoriesof arithmetic does Solovay’s arithmetical completeness theorem(with respect to the appropriate provability predicate) stillhold?” To discuss this question, two concepts are needed.\(\Delta_0\)-formulas are arithmetical formulas in which allquantifiers are bounded by a term, for example
\[\forall y \le \bs\bs 0 \: \forall z \le y \: \forall x \le y + z \: (x + y \le (y+(y+z))),\]where \(\bs\) is the successor operator (“\(+1\)”). Thearithmetical theory \(I \Delta_0\) (where I stands for“induction”), is similar to Peano Arithmetic, except thatit allows less induction: the induction scheme
\[A(0) \wedge \forall x\, (A(x) \rightarrow A(\bs x)) \rightarrow \forall x \, A(x)\]is restricted to \(\Delta_0\)-formulas \(A\).
As De Jongh and others (1991) pointed out, arithmetical completenesscertainly holds for theories \(T\) that satisfy the following twoconditions:
For such theories, arithmetical soundness and completeness of GL hold,provided that \(\Box\) translates to \(\Prov_T\), a naturalprovability predicate with respect to a sufficiently simpleaxiomatization of \(T\). Thus for modal sentences \(A\):
\[\GL \vdash A\text{ if and only if for all realizations } f,T \vdash f(A).\]It is not clear yet whether Condition 1 gives a lower bound on thescope of provability logic. For example, it is still an open questionwhether GL is the provability logic of \(I \Delta_0+\Omega_1\), atheory which is somewhat weaker than \(I \Delta_0\)+EXP in that\(\Omega_1\) is the axiom asserting that for all \(x\), its power\(x^{\log(x)}\) exists. Provability logic GL is arithmetically soundwith respect to \(I \Delta_0+\Omega_1\), but except for some partialresults by Berarducci and Verbrugge (1993), providing arithmeticrealizations consistent with \(I \Delta_0+\Omega_1\) for a restrictedclass of sentences consistent with GL, the question remains open. Itsanswer may hinge on open problems in computational complexitytheory.
The above result by De Jongh et al. shows a strong feature ofprovability logic: for many different arithmetical theories, GLcaptures exactly what those theories say about their own provabilitypredicates. At the same time this is a weakness. For example,propositional provability logic does not point to any differencesbetween those theories that are finitely axiomatizable and those thatare not.
In order to be able to speak in a modal language about importantdistinctions between theories, researchers have extended provabilitylogic in many different ways. Let us mention a few. One extension isto add a binary modality \(\interprets\), where for a givenarithmetical theory \(T\), the modal sentence \(A \interprets B\) ismeant to stand for “\(T+B\) is interpretable in \(T+A\)”(Švejdar, 1983). De Jongh and Veltman (1990) investigated modalsemantics for several interpretability logics, while De Jongh andVisser (1991) proved the explicit fixed-point property for the mostimportant ones. Visser characterized the interpretability logic of themost common finitely axiomatized theories, and Berarducci andShavrukov independently characterized the one for PA, which is notfinitely axiomatizable. It appears that indeed, the interpretabilitylogic of finitely axiomatizable theories is different from theinterpretability logic of Peano Arithmetic (see Montagna 1987; Visser1990, 1998; Berarducci 1990, Shavrukov 1988; Joosten and Visser2000).
Another way to extend the framework of propositional provability logicis to add propositional quantifiers, so that one can expressprinciples like Goldfarb’s:
\[\forall p \,\forall q \,\exists r \: \Box((\Box p \vee \Box q) \leftrightarrow \Box r),\]saying that for any two sentences there is a third sentence which isprovable if and only if either of the first two sentences is provable.This principle is provable in Peano Arithmetic (see e.g. Artemov andBeklemishev 1993). The set of sentences of GL with propositionalquantifiers that is arithmetically valid turns out to be undecidable(Shavrukov 1997).
Japaridze’s (1988) bimodal logic GLB has two \(\Box\)-likeprovability operators, denoted by \([0]\) and \([1]\), with their dual\(\Diamond\)-like operators \(\langle 0\rangle\) and \(\langle1\rangle\), respectively. In Japaridze’s interpretation, one canthink of \([0]\) as standing for the standard provability predicate inPeano Arithmetic. On the other hand, \([1]\) corresponds to a strongerprovability predicate, namely \(\omega\)-provabilty.
Let us define the concepts that are needed to understand this intendedinterpretation of GLB. An arithmetical theory \(T\) is defined to be\(\omega\)-consistent if and only if for all formulas A withfree variable \(x\), \(T\vdash \neg\, A(I_n)\) for all \(n\) impliesthat \(T \not\vdash \exists x \, A(x)\); here, \(I_n\) is the numeralof \(n\), i.e., the term \(\bs\bs\ldots\bs 0\) with \(n\) occurrencesof the successor operator \(\bs\). Peano Arithmetic (PA) is the mostwell-known example of an \(\omega\)-consistent theory (see alsoGödel’s incompleteness theorems). Now let PA\(^+\) be the arithmetical theory whose axioms are those ofPA together with all sentences \(\forall x \, \neg \, A(x)\) such thatfor every \(n\), PA\(\vdash \neg \, A(I_n)\). Now\(\omega\)-provability is simply provability in PA\(^+\), so it is thedual of \(\omega\)-consistency.
Japaridze’s bimodal provability logic GLB can be axiomatized bythe axioms and rules of GL (seeSection 2), formulated separately for [0] and [1]. In addition, GLB has two mixedaxioms, namely: \[\tag{Monotonicity}[0] A \rightarrow [1] A\] \[\tag{\(\Pi^0_1\)-completeness}\langle 0\rangle A \rightarrow [1]\langle 0\rangle A\] Japaridze’s logic isdecidable and has a reasonable Kripke semantics, and it isarithmetically sound and complete with respect to Peano Arithmetic(Japaridze 1988, Boolos 1993).
A polymodal analogue of Japaridze’s GLB, named GLP, has receiveda lot of attention in recent years. GLP has infinitely many\(\Box\)-like provability operators, denoted by boxes \([n]\) forevery natural number \(n\), with their dual \(\Diamond\)-likeoperators \(\langle n\rangle\). Again, one can think of \([0]\) asstanding for the standard provability predicate in Peano Arithmetic,\(\langle 1\rangle\) for \(\omega\)-provability, etcetera. GLP hasbeen axiomatized by starting from the axioms and rules of GL (seeSection 2), formulated separately for each \([n]\). In addition, GLP has threemixed axiom schemes, namely, as formulated by Beklemishev (2010):\[[m] A \rightarrow [n] A, \mbox{ for } m \leq n\] \[\langle k\rangle A \rightarrow [n]\langle k\rangle A, \mbox{ for } k \lt n\] \[[m] A \rightarrow [n][m] A, \mbox{ for } m \leq n\]
GLP has been endowed with a Kripke semantics with respect to which itis complete, and has also been shown to be arithmetically completewith respect to Peano Arithmetic (see Beklemishev 2010a, 2011a). Justlike for GL, the decision problem for GLP is PSPACE-complete(Shapirovsky 2008), while its closed fragment is polynomial timedecidable (Pakhomov 2014).
Over the last three decades, a number of results have been provedabout the polymodal logic GLP of strong provability predicates. Herefollow some particularly fruitful topics:
Finally, one can of course study predicate provability logic. Thelanguage is that of predicate logic without function symbols, togetherwith the operator \(\Box\). Here, the situation becomes much morecomplex than in the case of propositional provability logic. To beginwith, the straightforward quantified version of GL does not have thefixed-point property, is not complete with respect to any class ofKripke frames, and is not arithmetically complete with respect toPeano Arithmetic (Montagna, 1984; see Rybakov 2023 for recentgeneralizations). The question then arises: Is there any nicelyaxiomatized predicate provability logic that is adequate, provingexactly the valid principles of provability? The answer isunfortunately a resounding no: Vardanyan (1986) has proved on thebasis of ideas by Artemov (1985a) that the set of sentences ofpredicate provability logic all of whose realizations are provable inPA is not even recursively enumerable but \(\Pi^0_2\)-complete, so ithas no reasonable axiomatization. Visser and De Jonge (2006) showedthat there is no escape from Vardanyan’s theorem by proving ageneralization: For a wide range of arithmetical theories \(T\), theset of sentences of predicate provability logic all of whoserealizations are provable in \(T\) turns out to be\(\Pi^0_2\)-complete as well. Recently, however, Borges and Joosten(2020, 2022) showed that a fragment of predicate provability logicbased on a strictly positive language containing the propositionalconnective \(\wedge\), the modal operator \(\Diamond\), and thequantifier \(\forall\) is arithmetically complete and stilldecidable.
Left out in the above discussion are many other important strands ofresearch in provability logic and its extensions. The interestedreader is pointed to the following areas:
For the reader who would like to contribute to the area of provabilitylogic and its generalizations, Beklemishev and Visser (2006) haveproposed an annotated list of intriguing open problems.
Even though propositional provability logic is a modal logic with akind of “necessity” operator, it withstands Quine’s(1976) controversial critique of modal notions as unintelligible,already because of its clear and unambiguous arithmeticinterpretation. For example, unlike for many other modal logics,formulas with nested modalities like \(\Box\Diamond p \rightarrow\Box\bot\) are not problematic, nor are there any disputes about whichones should be tautologies. In fact, provability logic embodies allthe desiderata that Quine (1953) set out for syntactic treatments ofmodality.
Quine’s main arrows were pointed towards modal predicate logics,especially the construction of sentences that contain modal operatorsunder the scope of quantifiers (“quantifying in”). Inpredicate provability logic, however, where quantifiers range overnatural numbers, bothde dicto andde re modalitieshave straightforward interpretations, contrary to the case of othermodal logics (see the note on thede dicto /de re distinction). For example, formulas like
\[\forall x\, \Box\, \exists y \,(y=x)\]are not at all problematic. If the number \(n\) is assigned to \(x\),then \(\Box \,\exists y\,(y = x)\) is true with respect to thisassignment iff the sentence \(\exists y\,(y=I_n)\) is provable inPeano Arithmetic; here, \(I_n\) is the numeral of \(n\), i.e., theterm \(\bs\bs\ldots\bs 0\) with \(n\) occurrences of the successoroperator \(\bs\). This sentence is true for all \(n\) in the standardmodel of the natural numbers, and \(\forall x \,\Box\, \exists y \,(y= x)\) is even provable in Peano Arithmetic.
By the way, the Barcan Formula
\[\forall x \,\Box\, A(x) \rightarrow \Box\, \forall x\, A(x)\]is not true for the integers, let alone provable (for example, takefor \(A(x)\) the formula “\(x\) does not code a proof of\(\bot\)”). Its converse
\[\Box\, \forall x \, A(x) \rightarrow \forall x \, \Box\, A(x)\]on the other hand, is provable in Peano Arithmetic for any formula\(A\).
Provability logic has very different principles from other modallogics, even those with a seemingly similar purpose. For example,while provability logic captures provability in formal theories ofarithmetic,epistemic logic endeavors to describe knowledge, which could be viewed as a kind ofinformal provability. In many versions of epistemic logic, one of themost important principles is the truth axiom (5):
\[\mbox{S5} \vdash \Box A \rightarrow A, (\text{if one knows } A, \text{ then } A \text{ is true}).\]The analogous principle clearly does not hold for GL: after all,
\[\text{if } \GL \vdash \Box A \rightarrow A,\text{ then } \GL \vdash A.\]Thus, it seems misguided to compare the strength of both notions or tocombine them in one modal system.
Since the 1940s, there has been a lot of interest among philosophersof mathematics in the concept of informal provability orabsoluteprovability (Gödel 1946, Kreisel 1967), includingcontroversies about its proper definition (see Leach-Krouse 2013;Kennedy 2014; Crocco 2019; for good discussions of thesecontroversies). Williamson (2016) gives the following definition:“A mathematical hypothesis isabsolutely provable ifand only if it can in principle be known by a normal mathematicalprocess.”. At any rate, it is clear that the concept of absoluteprovability is very different from the concept offormalprovability in a given formal system, which is the central notionin the rest of this article on provability logic.
Related to the concept of absolutely provable statements is that ofabsolutely undecidable statements, namely, those statements\(A\) for which neither \(A\) nor \(\neg A\) is absolutely provable.An interesting question is whether Gödel’s Disjunctionholds: Is it the case that either “the mind cannot be mechanized” or “there are absolutely undecidable statements”?Fascinating takes on this question can be found in (Koellner 2016,Leach-Krouse 2016, Williamson 2016).
Discussions of the consequences of Gödel’s incompletenesstheorems sometimes involve confusion around the notion of provability,giving rise to claims that humans could beat formal systems in“knowing” theorems; see (Davis 1990, 1993; Franzén1995; Lindström 2001) for good critical discussions of suchclaims.
All in all, formal provability is a precisely defined concept, muchmore so than truth and knowledge. Thus,self-reference within the scope of provability does not lead to semantic paradoxeslike the Liar. Instead, it has led to some of the most importantresults about mathematics, such as Gödel’s incompletenesstheorems.
How to cite this entry. Preview the PDF version of this entry at theFriends of the SEP Society. Look up topics and thinkers related to this entry at the Internet Philosophy Ontology Project (InPhO). Enhanced bibliography for this entryatPhilPapers, with links to its database.
artificial intelligence: logic-based |computability and complexity |Curry’s paradox |Fitch’s paradox of knowability |Gödel, Kurt |Gödel, Kurt: incompleteness theorems |Hilbert, David: program in the foundations of mathematics |logic, history of: modal logic |logic: classical |logic: epistemic |logic: intuitionistic |logic: justification |logic: modal |logic: relevance |mathematics, philosophy of |mathematics: constructive |model theory |possible worlds |Principia Mathematica |proof theory: development of |Quine, Willard Van Orman |self-reference |set theory: independence and large cardinals |Turing, Alan
I would like to express my immense gratitude to Lev Beklemishev, whowas so kind as to write me a long letter in 2017, including manyliterature references to developments in provability logic as seenfrom his perspective. Thanks are also due to Albert Visser, SaraUckelman, Rajeev Goré, Giovanni Sambin, VítězslavŠvejdar, Sara Negri, Joost Joosten, Ian Shillito, WesleyHolliday, Revantha Ramanayake, Anupam Das, Shawn Standefer, TobyMeadows, Edson Bezerra, Nils Kürbis, and Tadeusz Litak for theirsuggestions of improvements and additions to the 2017 and/or 2024versions of this article.
This 2024 version of the article on provability logic is dedicated tothe memory of three Nestors of provability logic and themeta-mathematics of first-order arithmetic: Franco Montagna(1948–2015), Sol Feferman (1928–2016), and PetrHájek (1940–2016).
View this site from another server:
The Stanford Encyclopedia of Philosophy iscopyright © 2024 byThe Metaphysics Research Lab, Department of Philosophy, Stanford University
Library of Congress Catalog Data: ISSN 1095-5054