SlideShare a Scribd company logo
The Relative Consistency of the
Axiom of Choice
Mechanized Using Isabelle/ZF
Lawrence C. Paulson
Computer Laboratory
Why Do Proofs By Machine?
• Too many been done already!
– Gödel’s incompleteness theorem (Shankar)
– thousands of Mizar proofs

• But many types of reasoning are hard to
formalize.
– Algebraic structures (e.g. group theory)
– Proofs involving metamathematics

• And this one concerns Hilbert’s First Problem!
2
Outline of Gödel’s Proof
•
•
•
•

Define the constructible universe, L
Show that L satisfies the ZF axioms
Show that L satisfies the axiom V=L
Show that V=L implies AC and GCH
A contradiction from ZF and V=L can be
translated into one from ZF alone.

3
The Sets That Must Exist

4
L satisfies the ZF axioms
• Union, pairing
– Unions and pairs are definable by formulae

• Powerset, replacement scheme
– Using a rank function for L

• Comprehension scheme (separation)
– By the Reflection Theorem
– Scheme can be proved only in the metatheory
5
Show that L satisfies V=L
• V=L means “all sets are constructible”
• The concept of “constructible” is absolute
• Absolute means same in all models
– Most concepts are absolute: unions, ordinals,
functions, bijections, etc.
– Not absolute: powersets, function spaces,
cardinals
6
Show that V=L implies AC
(or rather, the well-ordering theorem)
• The set of formulae is countable
• Parameter lists for formulae can be wellordered lexicographically
• So, if X is well-ordered then so is D(X)
• Inductively construct a well-ordering on L

7
Satisfaction for Class Models?
For M a set, can define satisfaction recursively:

For M a class, satisfaction cannot be defined!
The nondefinability of truth (Tarski)
8
Satisfaction Defined Syntactically

The relativization of f to M
9
A contradiction using V=L?
• Can prove that (V=L)L is a ZF theorem
• … as is f L provided f is a ZF axiom
• Thus, a contradiction from ZF + (V=L)
amounts to a contradiction in ZF alone
• Developing the argument (Gödel never did)
requires proof theory
10
Isabelle/ZF
• Same code base as Isabelle/HOL
• Higher-order metalogic, ideal for
– Theorem schemes
– Classes
– Class functions

• Develops set theory from the ZermeloFraenkel axioms to transfinite cardinals
11
Defining the Class L in Isabelle
• Datatype declaration of the set formula
• Primitive recursive functions:
– Satisfaction relation
– Arity of a formula
– De Bruijn renaming

• Definable powersets: Dpow(X)
• Constructible hierarchy: Lset(i)
• The predicate L
12
Relativization in Isabelle
• Define a separate predicate for each
concept: 0, », «, function, limit ordinal, …
• Make each predicate relative to a class M
• Absoluteness: prove that the predicate
agrees with the native concept
Outcome: a relational language of sets
13
Examples: Pairs and Domains

14
Proving that L is a Model of ZF
• Express ZF axioms using the predicates
• Mechanize proofs from Kunen (1980)
• Separation axiom (comprehension):
– By previous proof of Reflection Theorem
– Meta-$ quantifier to hide giant classes
– Automatic translation from real formulae to
elements of the set formula
– 40 separate instances proved
15
Proving that L is a Model of V=L
• Absoluteness of well-founded recursion
• Absoluteness and relativization for …
– Recursive datatypes
– About 100 primitive concepts
– The satisfaction function (detailed breakdown needed)

• The concepts Dpow(X) and Lset(i)
• Define Constructible(M,x)
• Finally prove L(x) fi Constructible(L,x)
16
Comparative Sizes of Theories
(in Tokens)
Reflection theorem

3400

Definition of L

4140

ZF holds in L (excluding separation)

5100

V=L holds in L

29700

V=L implies AC

1769
17
Doing without Metamathematics
• Can’t reason on the structure of formulae
• Can’t prove separation schematically
• Can’t formalize how a contradiction from V=L
leads to a contradiction in ZF
• But: can use native set theory
– Isabelle/ZF’s built-in set theory libraries
– benefits of a shallow embedding
18
Conclusions
•
•
•
•

A mechanized proof of consistency for AC
Big:12000 lines or 49000 tokens
Just escape having to formalize metatheory
Future challenges:
– Repeat, with a formalized metatheory
– Prove generalized continuum hypothesis
– Formalize forcing proofs: independence of AC
19

More Related Content

PPTX
First and follow set
PPT
5.2 Venn Diagrams
PDF
Regular Expressions 101
PDF
Left factor put
PPTX
07 properties of real numbers
PDF
Probability Formula sheet
PDF
The Reflection Theorem: Formalizing Meta-Theoretic Reasoning
First and follow set
5.2 Venn Diagrams
Regular Expressions 101
Left factor put
07 properties of real numbers
Probability Formula sheet
The Reflection Theorem: Formalizing Meta-Theoretic Reasoning

Similar to The Relative Consistency of the Axiom of Choice — Mechanized Using Isabelle/ZF (20)

PPT
Secure-Software-10-Formal-Methods.ppt
PDF
Truth, deduction, computation lecture i (last one)
PDF
Theorem proving and the real numbers: overview and challenges
PPTX
On the axiom of choice
PDF
Source-Level Proof Reconstruction for Interactive Proving
PPTX
nas23-vardi.pptx
PDF
Yoneda lemma and string diagrams
PDF
Cs6503 theory of computation book notes
PDF
Logic Colloquium 2004 1st Edition Alessandro Andretta
PDF
Completeness: From henkin's Proposition to Quantum Computer
PPTX
Intoduction to Homotopy Type Therory
PDF
Cálculo lambda
PDF
Logic Colloquium 2004 1st Edition Alessandro Andretta
PDF
A Procedural Interpretation Of The Church-Turing Thesis
PPTX
Type Theory and Practical Application
PDF
Effective Mathematics Of The Uncountable Greenberg N Hirschfeldt D
PDF
Logic Colloquium 2004 1st Edition Alessandro Andretta
PDF
Formal methods 4 - Z notation
PDF
[Slfm 118] theory of relations roland fraisse (nh 1986)(t)
PDF
Logics of Context and Modal Type Theories
Secure-Software-10-Formal-Methods.ppt
Truth, deduction, computation lecture i (last one)
Theorem proving and the real numbers: overview and challenges
On the axiom of choice
Source-Level Proof Reconstruction for Interactive Proving
nas23-vardi.pptx
Yoneda lemma and string diagrams
Cs6503 theory of computation book notes
Logic Colloquium 2004 1st Edition Alessandro Andretta
Completeness: From henkin's Proposition to Quantum Computer
Intoduction to Homotopy Type Therory
Cálculo lambda
Logic Colloquium 2004 1st Edition Alessandro Andretta
A Procedural Interpretation Of The Church-Turing Thesis
Type Theory and Practical Application
Effective Mathematics Of The Uncountable Greenberg N Hirschfeldt D
Logic Colloquium 2004 1st Edition Alessandro Andretta
Formal methods 4 - Z notation
[Slfm 118] theory of relations roland fraisse (nh 1986)(t)
Logics of Context and Modal Type Theories
Ad

More from Lawrence Paulson (11)

PDF
Proving Security Protocols Correct
PDF
MetiTarski's menagerie of cooperating systems
PDF
Automated theorem proving for special functions: the next phase
PDF
Defining Functions on Equivalence Classes
PDF
Organizing Numerical Theories using Axiomatic Type Classes
PDF
A Generic Tableau Prover and Its Integration with Isabelle
PDF
Mechanized Proofs for a Recursive Authentication Protocol
PDF
Mechanizing set theory: cardinal arithmetic and the axiom of choice
PDF
MetiTarski: An Automatic Prover for Real-Valued Special Functions
PDF
Proving Properties of Security Protocols by Induction
PDF
A Machine-Assisted Proof of Gödel's Incompleteness Theorems
Proving Security Protocols Correct
MetiTarski's menagerie of cooperating systems
Automated theorem proving for special functions: the next phase
Defining Functions on Equivalence Classes
Organizing Numerical Theories using Axiomatic Type Classes
A Generic Tableau Prover and Its Integration with Isabelle
Mechanized Proofs for a Recursive Authentication Protocol
Mechanizing set theory: cardinal arithmetic and the axiom of choice
MetiTarski: An Automatic Prover for Real-Valued Special Functions
Proving Properties of Security Protocols by Induction
A Machine-Assisted Proof of Gödel's Incompleteness Theorems
Ad

Recently uploaded (20)

PDF
Review of recent advances in non-invasive hemoglobin estimation
PPTX
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
PDF
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
PDF
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
PPT
Teaching material agriculture food technology
PDF
Agricultural_Statistics_at_a_Glance_2022_0.pdf
PDF
Diabetes mellitus diagnosis method based random forest with bat algorithm
PDF
cuic standard and advanced reporting.pdf
PDF
Advanced methodologies resolving dimensionality complications for autism neur...
PDF
Network Security Unit 5.pdf for BCA BBA.
PDF
Electronic commerce courselecture one. Pdf
PDF
Approach and Philosophy of On baking technology
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PDF
Encapsulation_ Review paper, used for researhc scholars
PPTX
ACSFv1EN-58255 AWS Academy Cloud Security Foundations.pptx
PPTX
sap open course for s4hana steps from ECC to s4
PPTX
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
PPTX
Digital-Transformation-Roadmap-for-Companies.pptx
PDF
Building Integrated photovoltaic BIPV_UPV.pdf
PDF
Encapsulation theory and applications.pdf
Review of recent advances in non-invasive hemoglobin estimation
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
Teaching material agriculture food technology
Agricultural_Statistics_at_a_Glance_2022_0.pdf
Diabetes mellitus diagnosis method based random forest with bat algorithm
cuic standard and advanced reporting.pdf
Advanced methodologies resolving dimensionality complications for autism neur...
Network Security Unit 5.pdf for BCA BBA.
Electronic commerce courselecture one. Pdf
Approach and Philosophy of On baking technology
Mobile App Security Testing_ A Comprehensive Guide.pdf
Encapsulation_ Review paper, used for researhc scholars
ACSFv1EN-58255 AWS Academy Cloud Security Foundations.pptx
sap open course for s4hana steps from ECC to s4
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
Digital-Transformation-Roadmap-for-Companies.pptx
Building Integrated photovoltaic BIPV_UPV.pdf
Encapsulation theory and applications.pdf

The Relative Consistency of the Axiom of Choice — Mechanized Using Isabelle/ZF

  • 1. The Relative Consistency of the Axiom of Choice Mechanized Using Isabelle/ZF Lawrence C. Paulson Computer Laboratory
  • 2. Why Do Proofs By Machine? • Too many been done already! – Gödel’s incompleteness theorem (Shankar) – thousands of Mizar proofs • But many types of reasoning are hard to formalize. – Algebraic structures (e.g. group theory) – Proofs involving metamathematics • And this one concerns Hilbert’s First Problem! 2
  • 3. Outline of Gödel’s Proof • • • • Define the constructible universe, L Show that L satisfies the ZF axioms Show that L satisfies the axiom V=L Show that V=L implies AC and GCH A contradiction from ZF and V=L can be translated into one from ZF alone. 3
  • 4. The Sets That Must Exist 4
  • 5. L satisfies the ZF axioms • Union, pairing – Unions and pairs are definable by formulae • Powerset, replacement scheme – Using a rank function for L • Comprehension scheme (separation) – By the Reflection Theorem – Scheme can be proved only in the metatheory 5
  • 6. Show that L satisfies V=L • V=L means “all sets are constructible” • The concept of “constructible” is absolute • Absolute means same in all models – Most concepts are absolute: unions, ordinals, functions, bijections, etc. – Not absolute: powersets, function spaces, cardinals 6
  • 7. Show that V=L implies AC (or rather, the well-ordering theorem) • The set of formulae is countable • Parameter lists for formulae can be wellordered lexicographically • So, if X is well-ordered then so is D(X) • Inductively construct a well-ordering on L 7
  • 8. Satisfaction for Class Models? For M a set, can define satisfaction recursively: For M a class, satisfaction cannot be defined! The nondefinability of truth (Tarski) 8
  • 9. Satisfaction Defined Syntactically The relativization of f to M 9
  • 10. A contradiction using V=L? • Can prove that (V=L)L is a ZF theorem • … as is f L provided f is a ZF axiom • Thus, a contradiction from ZF + (V=L) amounts to a contradiction in ZF alone • Developing the argument (Gödel never did) requires proof theory 10
  • 11. Isabelle/ZF • Same code base as Isabelle/HOL • Higher-order metalogic, ideal for – Theorem schemes – Classes – Class functions • Develops set theory from the ZermeloFraenkel axioms to transfinite cardinals 11
  • 12. Defining the Class L in Isabelle • Datatype declaration of the set formula • Primitive recursive functions: – Satisfaction relation – Arity of a formula – De Bruijn renaming • Definable powersets: Dpow(X) • Constructible hierarchy: Lset(i) • The predicate L 12
  • 13. Relativization in Isabelle • Define a separate predicate for each concept: 0, », «, function, limit ordinal, … • Make each predicate relative to a class M • Absoluteness: prove that the predicate agrees with the native concept Outcome: a relational language of sets 13
  • 14. Examples: Pairs and Domains 14
  • 15. Proving that L is a Model of ZF • Express ZF axioms using the predicates • Mechanize proofs from Kunen (1980) • Separation axiom (comprehension): – By previous proof of Reflection Theorem – Meta-$ quantifier to hide giant classes – Automatic translation from real formulae to elements of the set formula – 40 separate instances proved 15
  • 16. Proving that L is a Model of V=L • Absoluteness of well-founded recursion • Absoluteness and relativization for … – Recursive datatypes – About 100 primitive concepts – The satisfaction function (detailed breakdown needed) • The concepts Dpow(X) and Lset(i) • Define Constructible(M,x) • Finally prove L(x) fi Constructible(L,x) 16
  • 17. Comparative Sizes of Theories (in Tokens) Reflection theorem 3400 Definition of L 4140 ZF holds in L (excluding separation) 5100 V=L holds in L 29700 V=L implies AC 1769 17
  • 18. Doing without Metamathematics • Can’t reason on the structure of formulae • Can’t prove separation schematically • Can’t formalize how a contradiction from V=L leads to a contradiction in ZF • But: can use native set theory – Isabelle/ZF’s built-in set theory libraries – benefits of a shallow embedding 18
  • 19. Conclusions • • • • A mechanized proof of consistency for AC Big:12000 lines or 49000 tokens Just escape having to formalize metatheory Future challenges: – Repeat, with a formalized metatheory – Prove generalized continuum hypothesis – Formalize forcing proofs: independence of AC 19