Fagin and Halpern (1994): Reasoning about Knowledge and Probability #
This file formalizes the Kripke structures for knowledge and probability of
[FH94] and the probabilistic common knowledge of its Section 5. A KripkeProb
adds to the accessibility relations of multi-agent epistemic logic (Logic/Modal/Epistemic) a
probability space for each agent at each state: a sample space S_{i,s} of states and a
probability measure μ_{i,s} carried by it. The probability formula w_i(φ) ≥ b, "according
to agent i, φ holds with probability at least b", is the set of states AtLeast b i φ.
Knowledge and probability are otherwise independent, so an agent need not know their own
probability space, which is what lets the paper's coin-toss example come out right. The
conditions the paper considers on the pair are CONS (the sample space lies within the
states the agent considers possible), OBJ (all agents share one space), SDP (the space is
determined by the agent's information cell) and UNIF (the space is the same at every state
of the sample space); UNIF.of_cons_sdp is the paper's remark that the first and third imply
the fourth. The correspondence of Section 4 between these conditions and axioms is proved in
its sound direction: W7, knowledge implies probability one under CONS
(real_eq_one_of_knows); W9, a probability formula true at a state has probability one there
under UNIF (UNIF.real_atLeast_eq_one, UNIF.real_compl_atLeast_eq_one); W10, a
probability formula true at a state is known there under SDP (SDP.knows_atLeast,
SDP.knows_compl_atLeast); and Miller's principle w_i(φ) ≥ b · w_i(w_i(φ) ≥ b), which
UNIF validates (UNIF.miller).
Section 5 defines E_G^b φ (EveryoneProb: every member of G knows that their probability
of φ is at least b) and probabilistic common knowledge C_G^b φ (CommonProb) as the
intersection of the iterates (F_G^b)^k φ of X ↦ E_G^b (φ ∩ X) rather than of the iterates
of E_G^b alone. commonProb_eq_gfp is Lemma 5.1: C_G^b φ is the greatest fixed point of
X ⇔ E_G^b (φ ∧ X). The four-state structure fig1 of Figure 1 is the paper's reason for the
detour: the naive infinite conjunction E_G^b φ ∧ (E_G^b)² φ ∧ ⋯ (Naive) holds at s₁
(fig1_naive), E_G^{1/2} p fails at s₂ and s₃ (fig1_everyoneProb), and so the
conjunction is not a solution of the equation (fig1_naive_not_fixedPoint) while the
paper's C_G^{1/2} p is empty (fig1_commonProb).
Implementation notes #
- Propositions are sets of states and
w_i(φ) ≥ breadsμ_{i,s}on the set; sinceμ_{i,s}vanishes off the sample space, this is the paper'sμ_{i,s}(S_{i,s}(φ))(prob_inter_sample). The paper's inner measures for nonmeasurable sets are not modelled: mathlib evaluates every set by outer measure, and the one result that needs measurability, the fixed-point direction of Lemma 5.1 (continuity from above), assumes a discrete σ-algebra, the paper's MEAS in the finite case. Thresholds are real; the paper's rational coefficients embed. - The group operators take the paper's
K_i^b φ = K_i(w_i(φ) ≥ b)literally:E_G^b φasks each member to know their probability formula, not merely to satisfy it; the two coincide underSDP, as in Figure 1. fig1is built fromKernel.ofWeightsover natural-number weights, so that every threshold comparison reduces to a decidable inequality between weight sums (fig1_atLeast_iff) and the four-state facts are decided.- Footnote 13's alternative equation
X ⇔ E_G^b φ ∧ E_G^b X(Monderer and Samet), of which the naive conjunction is a solution, is not formalized.
References #
A Kripke structure for knowledge and probability (S, π, 𝒦₁, …, 𝒦ₙ, 𝒫): accessibility
relations and, for each agent at each state, a probability space on a sample space of states.
The valuation π is the ambient Set W.
- access : E → SetRel W W
Agent
iconsiderstpossible ats. - sample : E → W → Set W
The sample space
S_{i,s}. - prob : E → W → MeasureTheory.Measure W
The probability measure
μ_{i,s}. μ_{i,s}is carried by the sample space.
Instances For
μ_{i,s}(S_{i,s}(φ)) = μ_{i,s}(φ): cutting a proposition down to the sample space changes
nothing.
The probability formula w_i(φ) ≥ b.
Instances For
Conditions relating knowledge and probability #
CONS: the sample space lies within the states the agent considers possible.
Instances For
SDP: the probability space is determined by the agent's information cell.
Equations
Instances For
UNIF: the probability space is the same at every state of the sample space.
Equations
Instances For
CONS and SDP together imply UNIF.
A superset of the sample space has probability one.
A set missing the sample space has probability zero.
Axiom W7, K_i φ ⇒ (w_i(φ) = 1), sound under CONS.
Under UNIF an i-probability formula has one truth value across S_{i,s}.
Axiom W9 for a positive i-probability formula, sound under UNIF.
Axiom W9 for the negation of an i-probability formula, sound under UNIF.
Under SDP an i-probability formula has one truth value across 𝒦_i(s).
Axiom W10 for a positive i-probability formula, sound under SDP.
Axiom W10 for the negation of an i-probability formula, sound under SDP.
Miller's principle w_i(φ) ≥ b · w_i(w_i(φ) ≥ b), which UNIF validates.
Probabilistic common knowledge #
E_G^b φ: every member of G knows that their probability of φ is at least b.
Equations
- M.EveryoneProb G b φ = {s : W | ∀ i ∈ G, s ∈ (M.access i).core (M.AtLeast b i φ)}
Instances For
With a reflexive accessibility and a positive threshold nobody assigns ∅ probability
b.
The operator X ↦ E_G^b (φ ∩ X) whose greatest fixed point is C_G^b φ.
Equations
- M.everyoneProbHom G b φ = { toFun := fun (X : Set W) => M.EveryoneProb G b (φ ∩ X), monotone' := ⋯ }
Instances For
The iterates (F_G^b)^k φ: (F_G^b)^0 φ = true and
(F_G^b)^{k+1} φ = E_G^b(φ ∧ (F_G^b)^k φ).
Equations
- M.F G b φ 0 = Set.univ
- M.F G b φ k.succ = M.EveryoneProb G b (φ ∩ M.F G b φ k)
Instances For
C_G^b φ: (F_G^b)^k φ for all k ≥ 1.
Equations
- M.CommonProb G b φ = ⋂ (k : ℕ), M.F G b φ (k + 1)
Instances For
The naive infinite conjunction E_G^b φ ∧ (E_G^b)² φ ∧ ⋯.
Equations
- M.Naive G b φ = ⋂ (k : ℕ), (M.EveryoneProb G b)^[k + 1] φ
Instances For
Any solution of X ⊆ E_G^b(φ ∧ X) lies below C_G^b φ.
C_G^b φ solves X ⊆ E_G^b(φ ∧ X): continuity from above turns the threshold on every
φ ∧ (F_G^b)^k φ into the threshold on their intersection.
Lemma 5.1: C_G^b φ is the greatest fixed point of X ⇔ E_G^b(φ ∧ X).
Figure 1 #
Four states s₁, …, s₄ (here 0, …, 3), agent 1 unable to distinguish s₁ from s₂ and
s₃ from s₄, agent 2 unable to distinguish s₁ from s₃ and s₂ from s₄, p true at
s₂ and s₃. The structure satisfies SDP: agent 1 at s₁, s₂ puts 1/2 on each of s₁, s₂, agent 2 at s₁, s₃ puts 1/2 on each of s₁, s₃, and both put probability one on s₄
at the states of their other cell.
Agent i's information cell of state s.
Equations
- FaginHalpern1994.fig1Cell i s = match ↑i, ↑s with | 0, 0 => 0 | 0, 1 => 0 | 0, x => 1 | x, 0 => 0 | x, 2 => 0 | x, x_1 => 1
Instances For
The weights of μ_{i,s} over the states.
Equations
- One or more equations did not get rendered due to their size.
Instances For
p of Figure 1, true at s₂ and s₃.
Equations
- FaginHalpern1994.fig1P = {t : Fin 4 | t = 1 ∨ t = 2}
Instances For
The Kripke structure M of Figure 1.
Equations
- One or more equations did not get rendered due to their size.
Instances For
Every threshold comparison in fig1 is an inequality between weight sums.
E_G^{1/2} p holds at s₁ alone: (b) and (c) of the paper's check.
(a): the naive conjunction E_G^{1/2} p ∧ (E_G^{1/2})² p ∧ ⋯ holds exactly at s₁.
C_G^{1/2} p is empty: (F_G^{1/2})² p = E_G^{1/2}(p ∧ E_G^{1/2} p) = ∅.