Isabelle's Logics: FOL and ZF
Total Page:16
File Type:pdf, Size:1020Kb
ZF ∀ = Isabelle α λ β → Isabelle's Logics: FOL and ZF Lawrence C. Paulson Computer Laboratory University of Cambridge [email protected] With Contributions by Tobias Nipkow and Markus Wenzel1 31 October 1999 1Markus Wenzel made numerous improvements. Philippe de Groote con- tributed to ZF. Philippe No¨eland Martin Coen made many contributions to ZF. The research has been funded by the EPSRC (grants GR/G53279, GR/H40570, GR/K57381, GR/K77051) and by ESPRIT project 6453: Types. Abstract This manual describes Isabelle's formalizations of many-sorted first-order logic (FOL) and Zermelo-Fraenkel set theory (ZF). See the Reference Manual for general Isabelle commands, and Introduction to Isabelle for an overall tutorial. Contents 1 Syntax definitions 1 2 First-Order Logic 3 2.1 Syntax and rules of inference ................... 3 2.2 Generic packages ......................... 4 2.3 Intuitionistic proof procedures .................. 4 2.4 Classical proof procedures .................... 9 2.5 An intuitionistic example ..................... 10 2.6 An example of intuitionistic negation .............. 12 2.7 A classical example ........................ 13 2.8 Derived rules and the classical tactics .............. 15 2.8.1 Deriving the introduction rule .............. 16 2.8.2 Deriving the elimination rule ............... 17 2.8.3 Using the derived rules .................. 18 2.8.4 Derived rules versus definitions ............. 20 3 Zermelo-Fraenkel Set Theory 23 3.1 Which version of axiomatic set theory? ............. 23 3.2 The syntax of set theory ..................... 24 3.3 Binding operators ......................... 26 3.4 The Zermelo-Fraenkel axioms .................. 29 3.5 From basic lemmas to function spaces .............. 32 3.5.1 Fundamental lemmas ................... 32 3.5.2 Unordered pairs and finite sets .............. 34 3.5.3 Subset and lattice properties ............... 34 3.5.4 Ordered pairs ....................... 38 3.5.5 Relations ......................... 38 3.5.6 Functions ......................... 41 3.6 Further developments ....................... 41 3.7 Automatic Tools ......................... 46 3.7.1 Simplification ....................... 49 3.7.2 Classical Reasoning .................... 49 3.7.3 Type-Checking Tactics .................. 51 3.8 Datatype definitions ....................... 52 i CONTENTS ii 3.8.1 Basics ........................... 52 3.8.2 Defining datatypes .................... 55 3.8.3 Examples ......................... 58 3.8.4 Recursive function definitions .............. 60 3.9 Inductive and coinductive definitions .............. 62 3.9.1 The syntax of a (co)inductive definition ......... 63 3.9.2 Example of an inductive definition ........... 64 3.9.3 Further examples ..................... 65 3.9.4 The result structure ................... 66 3.10 The outer reaches of set theory ................. 67 3.11 The examples directories ..................... 69 3.12 A proof about powersets ..................... 70 3.13 Monotonicity of the union operator ............... 73 3.14 Low-level reasoning about functions ............... 74 Chapter 1 Syntax definitions The syntax of each logic is presented using a context-free grammar. These grammars obey the following conventions: identifiers denote nonterminal symbols • typewriter font denotes terminal symbols • parentheses (:::) express grouping • constructs followed by a Kleene star, such as id ∗ and (:::)∗ can be • repeated 0 or more times alternatives are separated by a vertical bar, • j the symbol for alphanumeric identifiers is id • the symbol for scheme variables is var • To reduce the number of nonterminals and grammar rules required, Isabelle's syntax module employs priorities, or precedences. Each grammar rule is given by a mixfix declaration, which has a priority, and each argument place has a priority. This general approach handles infix operators that associate either to the left or to the right, as well as prefix and binding operators. In a syntactically valid expression, an operator's arguments never involve an operator of lower priority unless brackets are used. Consider first-order logic, where has lower priority than , which has lower priority than . There, P Q9 R abbreviates (P Q) _ R rather than P (Q R). Also,^ x : P Q^abbreviates_ x : (P Q)^ rather_ than ( x : P) Q^. Note_ especially that9 P_ ( x : Q) becomes9 syntactically_ invalid if9 the brackets_ are removed. _ 9 A binder is a symbol associated with a constant of type (σ τ) τ 0. For instance, we may declare as a binder for the constant All,) which) has type (α o) o. This defines8 the syntax x : t to mean All(λx : t). We ) ) 8 can also write x1 ::: xm : t to abbreviate x1 :::: xm : t; this is possible for 8 8 8 any constant provided that τ and τ 0 are the same type. HOL's description operator "x : P x has type (α bool) α and can bind only one variable, ) ) 1 CHAPTER 1. SYNTAX DEFINITIONS 2 except when α is bool. ZF's bounded quantifier x A : P(x) cannot be declared as a binder because it has type [i; i 8o] 2 o. The syntax for binders allows type constraints on bound variables,) as) in (x::α)(y::β) z::γ : Q(x; y; z) 8 To avoid excess detail, the logic descriptions adopt a semi-formal style. Infix operators and binding operators are listed in separate tables, which include their priorities. Grammar descriptions do not include numeric pri- orities; instead, the rules appear in order of decreasing priority. This should suffice for most purposes; for full details, please consult the actual syntax definitions in the .thy files. Each nonterminal symbol is associated with some Isabelle type. For ex- ample, the formulae of first-order logic have type o. Every Isabelle expression of type o is therefore a formula. These include atomic formulae such as P, where P is a variable of type o, and more generally expressions such as P(t; u), where P, t and u have suitable types. Therefore, `expression of type o' is listed as a separate possibility in the grammar for formulae. Chapter 2 First-Order Logic Isabelle implements Gentzen's natural deduction systems nj and nk. In- tuitionistic first-order logic is defined first, as theory IFOL. Classical logic, theory FOL, is obtained by adding the double negation rule. Basic proof pro- cedures are provided. The intuitionistic prover works with derived rules to simplify implications in the assumptions. Classical FOL employs Isabelle's classical reasoner, which simulates a sequent calculus. 2.1 Syntax and rules of inference The logic is many-sorted, using Isabelle's type classes. The class of first-order terms is called term and is a subclass of logic. No types of individuals are provided, but extensions can define types such as nat::term and type con- structors such as list::(term)term (see the examples directory, FOL/ex). Below, the type variable α ranges over class term; the equality symbol and quantifiers are polymorphic (many-sorted). The type of formulae is o, which belongs to class logic. Figure 2.1 gives the syntax. Note that a~=b is translated to (a = b). Figure 2.2:shows the inference rules with their ml names. Negation is defined in the usual way for intuitionistic logic; P abbreviates P . The biconditional ( ) is defined through and ;: introduction and elimination!? rules are derived$ for it. ^ ! The unique existence quantifier, !x :P(x), is defined in terms of and . An Isabelle binder, it admits nested9 quantifications. For instance,9 !x y8: P(x; y) abbreviates !x : !y : P(x; y); note that this does not mean9 that there exists a unique9 pair9 (x; y) satisfying P(x; y). Some intuitionistic derived rules are shown in Fig. 2.3, again with their ml names. These include rules for the defined symbols , and !. Natural deduction typically involves a combination of forward and: $ backward9 reason- ing, particularly with the destruction rules ( E), ( E), and ( E). Isabelle's backward style handles these rules badly, so^ sequent-style! rules8 are derived to eliminate conjunctions, implications, and universal quantifiers. Used with 3 CHAPTER 2. FIRST-ORDER LOGIC 4 elim-resolution, allE eliminates a universal quantifier while all_dupE re- inserts the quantified formula for later use. The rules conj_impE, etc., sup- port the intuitionistic proof procedure (see 2.3). See the files FOL/IFOL.thy, FOL/IFOL.MLx and FOL/intprover.ML for complete listings of the rules and derived rules. 2.2 Generic packages FOL instantiates most of Isabelle's generic packages. It instantiates the simplifier. Both equality (=) and the biconditional • ( ) may be used for rewriting. Tactics such as Asm_simp_tac and Full_simp_tac$ refer to the default simpset (simpset()), which works for most purposes. Named simplification sets include IFOL_ss, for intuitionistic first-order logic, and FOL_ss, for classical logic. See the file FOL/simpdata.ML for a complete listing of the simplification rules. It instantiates the classical reasoner. See 2.4 for details. • x FOL provides the tactic hyp_subst_tac, which substitutes for an equal- • ity throughout a subgoal and its hypotheses. This tactic uses FOL's general substitution rule. Reducing a = b P(a) to a = b P(b) is sometimes advantageous. The left ! part of a conjunction^ helps in simplifying^ the right part. This effect is not available by default: it can be slow. It can be obtained by including conj_cong in a simpset, addcongs [conj_cong]. 2.3 Intuitionistic proof procedures Implication elimination (the rules mp and impE) pose difficulties for auto- mated proof. In intuitionistic logic, the assumption P Q cannot be treated like P Q. Given P Q, we may use Q provided! we can prove P; the