Quantifiers and Dependent Types

Quantifiers and dependent types Constructive Logic (15-317) Instructor: Giselle Reis Lecture 05 We have largely ignored the quantifiers so far. It is time to give them the proper attention, and: (1) design its rules, (2) show that they are locally sound and complete and (3) give them a computational interpretation. Quantifiers are statements about some formula parametrized by a term. Since we are working with a first-order logic, this term will have a simple type τ, different from the type o of formulas. A second-order logic allows terms to be of type τ ! ι, for simple types τ and ι, and higher-order logics allow terms to have arbitrary types. In particular, one can quantify over formulas in second- and higher-order logics, but not on first-order logics. As a consequence, the principle of induction (in its general form) can be expressed on those logics as: 8P:8n:(P (z) ^ (8x:P (x) ⊃ P (s(x))) ⊃ P (n)) But this comes with a toll, so we will restrict ourselves to first-order in this course. Also, we could have multiple types for terms (many-sorted logic), but since a logic with finitely many types can be reduced to a single-sorted logic, we work with a single type for simplicity, called τ. 1 Rules in natural deduction To design the natural deduction rules for the quantifiers, we will follow the same procedure as for the other connectives and look at their meanings. Some examples will also help on the way. Since we now have a new ele- ment in our language, namely, terms, we will have a new judgment a : τ denoting that the term a has type τ. Let’s start with universal quantification. LECTURE NOTES LEC 05 2 Quantifiers and dependent types A formula 8x:A holds iff we know that for every term a chosen, the proposition A[a=x]1 holds. How can we design introduction and elimination rules for 8? Remem- ber that Gentzen’s idea was to develop a calculus that mimics mathematical reasoning, so let’s look at en example of universal statement: Every natural number n has a unique prime factorization. The introduction rule corresponds to a proof of that statement while the elimination rule corresponds to using it in a proof. A proof of this statement typically starts as: let n be a natural number... and goes on to prove the property for such n. So we take a generic variable, assume nothing about it, except its type, and prove the property. This translates to the following natural deduction rule: a : τ . A[a=x] true 8Ia 8x:A true The term a is called an eigenvariable and it should be fresh, meaning that it has not occurred anywhere else in the proof. This guarantees that we are using a completely generic term of that type, and if the property holds for it, it will hold for any instantiation by an actual term. What if we want to use a universal theorem? Suppose we are proving something and we need to use the prime factorization of a number. If this is a natural number, we can go ahead and use our theorem. All we need to do is show that the object we need the factorization of is a natural number. This translates to the following natural deduction elimination rule: 8x:A true t : τ 8E A[t=x] true In this case, the term t already exists and we need to show it satisfies the conditions, i.e., has the correct type, for applying the theorem. Now for existential quantification. A formula 9x:A holds iff for some term t, A[t=x] holds. 1Denoting A with all occurrences of x replaced by a. LECTURE NOTES LEC 05 Quantifiers and dependent types 3 Introducing the existential quantifier is straightforward. All we have to do is provide a witness, i.e., a term for which the proposition A holds. This gives us two premises: A[t=x] true t : τ 9I 9x:A true The premise on the left represents the fact that A[t=x] holds and the premise on the right shows the term has the correct type. What about the elimination rule? Suppose you have the following “theorem”: there exists an algorithm to merge two sorted lists in constant time, which can be used to show that there exists a sorting algorithm with complexity O(n). The argument goes along these lines: Let a be such (magical) constant time merging algorithm, then we can use it on mergesort and get the new recursive relation for its work: W (n) = 2W (n=2) + c. Resolving this recurrence gives us a work of O(n). Of course this theorem is not true (it would be too good!), but the idea of using an existential statement 9x:A is that we can assume the existence of a generic term a for which the theorem holds and use this fact to show anything else. In natural deduction terms, this is: u a : τ A[a=x] true . 9x:A true C true 9Ea;u C true As in the case for 8I, a is an eigenvariable. If freshness is not required in this case, we are able to prove unsound formulas, such as 9x:A ⊃ 8x:A: u v 9x:A true A[a=x] true 9Ea;v A[a=x] true 8Ia 8x:A true ⊃ Iu 9x:A ⊃ 8x:A true LECTURE NOTES LEC 05 4 Quantifiers and dependent types 2 Local soundness and completeness Now we check if these rules are in harmony by showing local soundness and completeness. A quick reminder: local soundness amounts to showing that whatever information extracted by the elimination rules is already packaged by the introduction rule. This is shown by a local reduction, i.e., the introduction of a connective followed by the elimination can be trans- formed into a more direct proof of the conclusion. The local reduction for the universal quantifier is: a : τ D A[a=x] true E 8Ia E t : τ 8x:A true t : τ D[t=a] 8E A[t=x] true )R A[t=x] true Since D is a derivation of A[a=x] for a generic a, i.e, it makes no assumptions over its structure, then it can be safely replaced by an actual term t. The local reduction for the existential quantifier is: D u E a : τ A[a=x] true D A[t=x] true t : τ E 9I F t : τ A[t=x] true 9x:A true C true F[t=a] 9Ea;u C true )R C true Notice again how we can “instantiate” a with t in F, since a is an eigenvariable. Local completeness amounts to showing that the information obtained by elimination rules is enough to reconstruct the formula. In this case, we use local expansions. The local expansion for the universal quantifier is: D 8x:A true a : τ 8E A[a=x] true D 8Ia 8x:A true )E 8x:A true LECTURE NOTES LEC 05 Quantifiers and dependent types 5 The elimination of 8 requires some term of type τ. Any term, since the statement tells us that for all terms A holds. In particular, this can be the eigenvariable provided by the 8I rule. The local expansion for the existential quantifier is: u a : τ A[a=x] true D 9I 9x:A true 9x:A true D 9Ea;u 9x:A true )R 9x:A true In this case, it is the introduction of 9 that requires a term of type τ and an evidence of A for that term. This is provided by the assumptions of 9E. 3 Proofs as programs The next thing we did for all the other connectives was to show its computational interpretation in the Curry-Howard isomorphism. Does this ex- tend to the quantifiers as well? Yes, quantifiers also have a programming language counterpart, called dependent types. Unfortunately not many programming languages implement dependent types, mostly because it adds complexity to type-checking possibly leading to undecidability. Neverthe- less, it is a very powerful feature: by using dependent types we can prove that a program meets its specification only by typechecking it! Dependent types are types parametrized by a value. Imagine that you are writing a program and you want to use an array of size 5. How do you declare this type? In most programming languages there is no way of making this restriction on the type level, but with dependent types we can have a type 8n:array(n) denoting a family of types: arrays of size n. Then you can simply declare your type as array(5). This is called a dependent function type2: it takes a value and constructs a new type. Naturally, it will be represented in the programming side as λx.M. Now suppose you want to define a type for prime numbers. This can be done via a dependent pair type3 hn : int; prime(n)i, given a proposition prime that checks for primality. This type denotes all integers n that satisfy prime(n). The inference rules for quantifiers with proof terms are: 2Denoted by Πx : τ.τ 0 in the type theory world. 3Denoted by Σx : τ.τ 0 in the type theory world. LECTURE NOTES LEC 05 6 Quantifiers and dependent types a : τ . M : A[a=x] M : 8x:A t : τ 8I 8E λa : τ:M : 8x:A Mt : A[t=x] a : τ u : A[a=x] .

Load more