2.5  Proof by Contradiction and the Classical Rules

Every rule so far either builds a statement or takes one apart. The rules for negation are no exception: ¬I (Definition 2.2.1) builds ¬φ from a box that opens with φ and ends in ⊥, and ¬E (Definition 2.1.1) uses ¬φ against φ. Yet in three places this chapter has stopped one step short of a goal. This section adds the one rule that takes a negation away, reductio ad absurdum. It then derives from it the classical laws that mathematics uses without noticing, and shows that three of them are one principle in three forms.

2.5.1. Two boxes that look alike

Here are two arguments that a mathematician would both call “proof by contradiction”.

The first is the proof of Theorem 2.2.1. It fixes a rational number r, supposes r2=2, reaches a contradiction, and concludes that r2≠2. In the language of Definition 2.2.1, it opens a box with the assumption P (“r2=2”), reaches ⊥ inside it, and closes the box to get ¬P. That is ¬I.

The second is about a real number.

Example (A number whose square is at most itself)

Let x be a real number with x2≤x. Prove that x≤1.

Solution. Suppose, for a contradiction, that x≤1 fails, that is, x>1. Then x>0, and multiplying x>1 by x gives x2>x. This contradicts x2≤x. Hence x≤1.

Look at its shape. The box opens with the assumption ¬P, where P is “x≤1”, reaches ⊥, and closes to give P. If we tried to justify the last line by ¬I, we would get the negation of the box’s assumption, ¬¬P: “it is not the case that x≤1 fails”. That is not P. The two arguments put their negations in different places. ¬I puts a ¬ into the conclusion; the second argument takes one out.

2.5.2. Where the rules so far stop short

The second argument is not a curiosity. Three times already in this chapter a derivation has stopped short in the same way: it reached a negation where the goal was not one.

  1. Section 2.2 noted that a box opened with ¬(x>0) and closed by ¬I gives ¬¬(x>0), and no rule so far gets from there to x>0.
  2. If you did Exercise C1 of Section 2.3, you met a second: Exercise (C1: Two premises that cannot both fail, used later) led from P→Q and ¬P→R to ¬(¬Q∧¬R), and not to Q∨R.
  3. Section 2.4 noted, after Example (Negating both sides of an iff), that its converse, ¬P↔¬Q⊢P↔Q, resists the rules so far. The natural box on ¬Q, inside the box of P, closes to ¬¬Q, not Q.

Try the smallest case, P from ¬¬P. The goal P is a letter, so no introduction rule applies: the goal-directed moves have nothing to say. The premise ¬¬P is a negation, and a negation can be used only by ¬E, against the statement it negates, ¬P. So we assume ¬P in a box. The box reaches ⊥ at once, and ¬I closes it with ¬¬P: the premise again. Every attempt goes round this circle.

That no derivation of P from ¬¬P exists with the rules so far is a claim about all derivations, which no search can settle; this section’s Looking-ahead box says where it is proved. Here we name the missing step and add it as a rule.

2.5.3. Reductio ad absurdum

To prove φ, it is enough to show that “not φ” leads to a contradiction.

Definition 2.5.1 (Reductio ad Absurdum)
i¬φasm, for RAA
⋮
j⊥
kφRAA i–j

This is the rule RAA (reductio ad absurdum, “reduction to the absurd”). The line ¬φ is an assumption, which opens the box and is discharged when the box closes. The line ⊥ is a line of that box itself, not of a box inside it.

As in every schema (Definition 1.2.1), φ stands for any statement and i,j,k for line numbers. This rule has conditions that matter; read each one.

  1. The assumption is the exact negation of the goal. To prove φ, the box opens with ¬φ: the negation of the whole of φ. If φ is Q∨R, the box opens with ¬(Q∨R), not with ¬Q∨R. In a finished derivation this assumption is printed “asm, for RAA”; in prose it is the sentence “suppose, for a contradiction, that φ fails”.
  2. The box must reach ⊥, as a line of the box itself: a ⊥ inside a smaller box depends on a further assumption, as in ¬I.
  3. The result is φ itself, not ¬¬φ, which ¬I would give from the same box. This clause is the whole content of the rule.
  4. The box closes, its assumption is discharged, and the justification cites the box as a range i–j.

In words: the box is a thought experiment in which φ fails. If the experiment ends in ⊥, then φ cannot fail, and RAA lets us write φ. Set the new rule beside ¬I:

Rule The box opens with The box ends with After the box
¬I φ ⊥ ¬φ
RAA ¬φ ⊥ φ

The rows differ only in where the ¬ sits, and that makes RAA different in kind: every other primitive rule is the introduction or elimination rule of one connective (⊥E counts as the elimination rule of ⊥, and R is the repetition clause of Definition 1.4.2), while RAA applies to every statement, whatever its main connective, even a letter.

In the Givens/Goal table, RAA adds ¬φ to the Givens and makes ⊥ the goal.

With the convention of Section 2.1, the argument of Example (A number whose square is at most itself) is this derivation.

1x2≤x
2¬(x≤1)asm, for RAA
3x>1algebra 2
4¬(x2≤x)algebra 3
5⊥¬E 1, 4
6x≤1RAA 2–5

Warning. The assumption that opens an RAA box must be the exact negation of the goal. To prove x≤1 by contradiction, assume x>1, since for real numbers “not x≤1” says x>1. Assuming x≥1 instead is a common slip. It is not the negation: x=1 satisfies both x≤1 and x≥1. A box opened with x≥1 cannot honestly reach ⊥ while x=1 is possible, so a “contradiction” that seems to be reached hides an error.

Quick check. A box opens with the assumption ¬(x<0) and reaches ⊥, as a line of the box itself. Which of the following may be written after it closes, and by which rule? (i) x<0; (ii) ¬¬(x<0); (iii) x≥0.

Solution.

  • (i) By RAA: the box opened with the negation of x<0. (ii) By ¬I: ¬I writes the negation of the box’s assumption, and the assumption is ¬(x<0). (iii) By neither. For real numbers x≥0 says the same as ¬(x<0), which is exactly the statement the box has refuted.

Quick check. In the derivation of Example (A number whose square is at most itself) above, which line is the RAA step, which box does it cite, and what would ¬I have written there instead?

Solution. Line 6 is the RAA step, and it cites the box 2–5. ¬I would have written ¬¬(x≤1).

2.5.4. The move: when stuck, assume the negation of the goal

Chapter 1 and Sections 2.1–2.4 built two lists of moves. From the goal: its main connective chooses an introduction rule and so a box or two subgoals. From the premises: each available line’s main connective chooses the elimination rule that uses it, and a goal ⊥ asks for a clash. The new rule adds one move, for the moment when both lists are used up.

We are stuck at a gap when the goal-directed moves give nothing (the goal is a letter, or a disjunction with neither side in hand) and no premise-directed move brings the goal closer. Then open an RAA box on the negation of the goal. The new goal is ⊥, so we hunt for a clash, and the box has given us one more line to clash with: ¬φ itself.

When stuck, assume the negation of the goal, and hunt for a clash.

The move is a last resort, not a first one: try every other move first. Four of the derivations under the next heading reach the moment of being stuck, and their Ideas say where.

When RAA earns its place. Look ahead at where the classical step enters the derivations below: a goal that is a letter with nothing to build it (Proposition 2.5.1), and a disjunction neither of whose sides follows from what is available, each side’s step breaking on its own (Proposition 2.5.3, De Morgan’s law (d)). Premises that say little and a goal that decides something: that is where to expect RAA. Exercise B6 meets a third such disjunction.

2.5.5. Derivations with the new rule

The stall, resolved. The next result is the one on which we got stuck.

Proposition 2.5.1 (Double Negation)

For every statement P:

  • (a) P⊢¬¬P, by a derivation that does not use RAA;
  • (b) ¬¬P⊢P, by a derivation that uses RAA.

Idea. In (a) the goal ¬¬P is the negation of ¬P, so the goal-directed move of Section 2.2 opens a ¬I box with ¬P, and the premise clashes with it at once.

In (b) the goal P is a letter, so no introduction rule applies. The only premise is a negation, which can only clash; the attempt above showed that clashing it inside a ¬I box leads back to the premise. We are stuck, so we assume the negation of the goal: an RAA box on ¬P. The premise clashes with it at once.

Proof.

1¬¬P
2¬Pasm, for RAA
3⊥¬E 2, 1
4PRAA 2–3

Line 3 applies ¬E to the statement ¬P on line 2 and to its negation ¬¬P on line 1. This proves both parts.

In both derivations, lines 2 and 3 form a box that opens with ¬P and reaches ⊥ by a clash with line 1. Only the rule that closes the box differs, and with it the last line. So the two directions are not mirror images: one needs only the rules for ¬, and the derivation of the other uses the new rule.

Second readingEdge cases of reductio

The degenerate case. The smallest use of RAA proves P from P.

Idea. There is nothing to find: the premise is the goal. The derivation is here only to show the rule at its smallest. The box opens with ¬P, and the one line it needs, ⊥, comes from the clash of the assumption with the premise.

1P
2¬Pasm, for RAA
3⊥¬E 1, 2
4PRAA 2–3

It is legal and pointless, since line 1 already is the goal. It is the purest case of a pattern that turns up in real proofs: a contradiction box whose assumption does nothing except clash with a line we already had. A warning later in this section, after Example (A number below every positive number), returns to it.

Nonexample by minimal change. Change only the last line of (a), from ¬¬P to P, keeping the justification ¬I 2–3. Lines 1–3 still check. What fails is the conclusion of ¬I, which must be the negation of the box’s assumption, here ¬¬P. To write P, the justification must be RAA.

From now on both parts are derived rules in the sense of Definition 2.3.1. A line ¬¬φ may be justified by “¬¬I i”, citing a line φ, and a line φ by “¬¬E i”, citing a line ¬¬φ. The first stall of the list above is now one line: from ¬¬(x>0), ¬¬E gives x>0.

Contraposition, backwards. Proposition 2.3.2 derives ¬Q→¬P from P→Q with the rules for → and ¬ alone. In practice we use it the other way round. To prove “if n2 is even then n is even”, one may prove “if n is not even then n2 is not even”, and the step from that back to the original goes from ¬Q→¬P to P→Q.

Proposition 2.5.2 (Converse of the Contrapositive)

For all statements P and Q, ¬Q→¬P⊢P→Q.

Idea. The goal is an implication, so the goal-directed move opens a box with P, and the new goal is Q, a letter. The premise needs ¬Q before it gives anything, and ¬Q is nowhere; the box’s assumption P is a letter and cannot be taken apart. We are stuck at Q, so we assume its negation, ¬Q. That is exactly what the premise wanted: →E gives ¬P, which clashes with the P of the outer box, and RAA closes the inner box with Q.

In pictures: the stall at the letter Q; then the RAA box on ¬Q.

1¬Q→¬P
2Pasm, for →I
⋮
6Q
7P→Q→I 2–6
1¬Q→¬P
2Pasm, for →I
3¬Qasm, for RAA
⋮
5⊥
6QRAA 3–5
7P→Q→I 2–6

Proof. The derivation is:

1¬Q→¬P
2Pasm, for →I
3¬Qasm, for RAA
4¬P→E 1, 3
5⊥¬E 2, 4
6QRAA 3–5
7P→Q→I 2–6

Line 5 may cite line 2 because line 2 lies in a box that is still open. RAA enters at line 6. This proves the proposition.

So contraposition behaves like double negation: going from P→Q to ¬Q→¬P needs no RAA, and our derivation of the way back uses one RAA.

Excluded middle. Every integer is even or odd. Every real number is ≥0 or <0. The purely logical form of such facts is the law P∨¬P, which the next result derives from no premises at all.

Proposition 2.5.3 (Excluded Middle)

For every statement P, ⊢P∨¬P.

Idea. The goal is a disjunction, so Section 1.5’s move postpones it: choose a side only when that side is in hand. But there are no premises, so no premise-directed move applies, and neither side is worth aiming at: P false breaks the step to P, and P true breaks the step to ¬P. We are stuck, so we assume the negation of the whole goal, ¬(P∨¬P), which says that neither side holds, and hunt for a clash. The new line can clash only with P∨¬P, which ∨I builds from either side. So we manufacture a side, as in Example (Manufacturing the other half of a clash). If P held, then P∨¬P would hold, against the assumption; so ¬P, by ¬I. But then P∨¬P holds after all, and that is the final clash.

In pictures: the RAA box; then the final clash, written backwards.

1¬(P∨¬P)asm, for RAA
⋮
7⊥
8P∨¬PRAA 1–7
1¬(P∨¬P)asm, for RAA
⋮
5¬P
6P∨¬P∨I 5
7⊥¬E 6, 1
8P∨¬PRAA 1–7

Proof. The derivation is:

1¬(P∨¬P)asm, for RAA
2Pasm, for ¬I
3P∨¬P∨I 2
4⊥¬E 3, 1
5¬P¬I 2–4
6P∨¬P∨I 5
7⊥¬E 6, 1
8P∨¬PRAA 1–7

The derivation has no premises, so it shows ⊢P∨¬P. RAA is used once, at line 8. This proves the proposition.

The assumption of line 1 is used twice, at lines 4 and 7. The first use refutes P; the second uses that refutation. Excluded middle now becomes a derived rule with no premises: a line φ∨¬φ may be written anywhere, for any statement φ, justified by LEM with no line cited. Pasting in the eight lines above would replace it.

Its use is proof by cases on a statement. To derive χ, derive it once in a box that assumes φ and once in a box that assumes ¬φ, and combine the two boxes with the line φ∨¬φ by ∨E. The fold after De Morgan’s laws below uses it that way, and so does part (b) of the result after them.

A law with no negation. The last is a law in which ¬ does not occur at all.

Proposition 2.5.4 (Peirce’s Law)

For all statements P and Q, ⊢((P→Q)→P)→P.

In words: a law with no ¬ in it, whose derivation here still uses RAA. The derivation is in the fold below.

Second readingPeirce’s law, derived

Try it first (ten minutes): use the goal-directed and premise-directed moves of the earlier sections on this goal until they stall. At which gap do they stall, and which line, if it were available there, would let you finish?

Idea. The goal is an implication, so we open a box on (P→Q)→P with the goal P, a letter. The only line that can produce P is the assumption itself, by →E, once we have its hypothesis P→Q. So P→Q becomes a subgoal, and the goal-directed move opens a box on P with the goal Q. There the moves stall: the resources are (P→Q)→P and P, and neither says anything about Q. What the stalled gap lacks is a clash, which ⊥E would turn into Q.

We are stuck, so the new move applies, but where? Assuming ¬Q at the stalled gap gives nothing new: a clash with ¬Q needs Q, the stalled goal itself. So apply the move one level out, to the goal P, and assume ¬P. That is exactly what the stalled gap lacked: inside the box of P, the pair P, ¬P gives ⊥, and ⊥E gives Q. Then P→Q, then P by →E, which clashes with ¬P.

Proof. The derivation is:

1(P→Q)→Pasm, for →I
2¬Pasm, for RAA
3Pasm, for →I
4⊥¬E 3, 2
5Q⊥E 4
6P→Q→I 3–5
7P→E 1, 6
8⊥¬E 7, 2
9PRAA 2–8
10((P→Q)→P)→P→I 1–9

The derivation has no premises, and RAA enters at line 9. This proves the proposition.

The assumption ¬P of line 2 is used twice: at line 4 it makes the innermost box contradictory, and at line 8 it clashes with the P that line 7 obtained. Notice where the new box went: around the stalled box, not inside it. An assumption made one level out is available in every gap inside its box, and so it could give the stalled gap the line it lacked. Peirce’s law contains no ¬, yet our derivation uses RAA: the classical rule is about more than negation.

2.5.6. De Morgan’s laws

The negation of an “and” is an “or” of negations, and the negation of an “or” is an “and” of negations. For example, a real number x fails to lie in the interval [0,1], that is, ¬(0≤x∧x≤1), exactly when x<0 or x>1. Each law has two directions, so there are four derivations to give.

Proposition 2.5.5 (De Morgan’s Laws)

For all statements P and Q:

  • (a) ¬(P∨Q)⊢¬P∧¬Q;
  • (b) ¬P∧¬Q⊢¬(P∨Q);
  • (c) ¬P∨¬Q⊢¬(P∧Q);
  • (d) ¬(P∧Q)⊢¬P∨¬Q.

Try it first (ten minutes): look for a derivation of (d) with the rules of the earlier sections. Which rule would give its last line, and what would that rule need?

Idea. Parts (a)–(c) yield to their goals. In (a) the goal is a conjunction of negations: two ¬I boxes, one per conjunct. In (b) and (c) the goal is a negation: one ¬I box, with the disjunction used inside it by ∨E.

In pictures, for (a): two subgoals; then a box under each.

1¬(P∨Q)
⋮
5¬P
⋮
9¬Q
10¬P∧¬Q∧I 5, 9
1¬(P∨Q)
2Pasm, for ¬I
⋮
4⊥
5¬P¬I 2–4
6Qasm, for ¬I
⋮
8⊥
9¬Q¬I 6–8
10¬P∧¬Q∧I 5, 9

For (b): the box on P∨Q; then the two cases inside it.

1¬P∧¬Q
2¬P∧E 1
3¬Q∧E 1
4P∨Qasm, for ¬I
⋮
9⊥
10¬(P∨Q)¬I 4–9
1¬P∧¬Q
2¬P∧E 1
3¬Q∧E 1
4P∨Qasm, for ¬I
5Pasm, for ∨E
⋮
6⊥
7Qasm, for ∨E
⋮
8⊥
9⊥∨E 4, 5–6, 7–8
10¬(P∨Q)¬I 4–9

Part (d) resists. Its goal is a disjunction, so the natural last line is ∨I, from ¬P or from ¬Q. But the step from the premise to ¬P can be broken: with P true and Q false the premise is true and ¬P false; and the step to ¬Q breaks with P false and Q true. So neither side is worth aiming at. The premise itself can be used only by ¬E, against P∧Q, which we do not have. We are stuck at the whole goal, so we assume its negation, ¬(¬P∨¬Q), which says that neither ¬P nor ¬Q holds. It should give P and Q. Each is a letter, so each gets a small RAA box of its own, whose clash is manufactured by ∨I. Together P and Q clash with the premise.

For (d): the RAA box on the negated goal; then a box for each of P and Q.

1¬(P∧Q)
2¬(¬P∨¬Q)asm, for RAA
⋮
11P∧Q
12⊥¬E 11, 1
13¬P∨¬QRAA 2–12
1¬(P∧Q)
2¬(¬P∨¬Q)asm, for RAA
3¬Pasm, for RAA
⋮
5⊥
6P
7¬Qasm, for RAA
⋮
9⊥
10Q
11P∧Q∧I 6, 10
12⊥¬E 11, 1
13¬P∨¬QRAA 2–12

Proof.

  • (a) Two ¬I boxes, one for each conjunct, then ∧I:
    1¬(P∨Q)
    2Pasm, for ¬I
    3P∨Q∨I 2
    4⊥¬E 3, 1
    5¬P¬I 2–4
    6Qasm, for ¬I
    7P∨Q∨I 6
    8⊥¬E 7, 1
    9¬Q¬I 6–8
    10¬P∧¬Q∧I 5, 9
  • (b) One ¬I box that opens with P∨Q. Inside it, ∨E splits into two cases, and each case clashes with one half of the premise:
    1¬P∧¬Q
    2¬P∧E 1
    3¬Q∧E 1
    4P∨Qasm, for ¬I
    5Pasm, for ∨E
    6⊥¬E 5, 2
    7Qasm, for ∨E
    8⊥¬E 7, 3
    9⊥∨E 4, 5–6, 7–8
    10¬(P∨Q)¬I 4–9
  • (c) The same shape as (b), with the roles of ∧ and ∨ exchanged:
    1¬P∨¬Q
    2P∧Qasm, for ¬I
    3P∧E 2
    4Q∧E 2
    5¬Pasm, for ∨E
    6⊥¬E 3, 5
    7¬Qasm, for ∨E
    8⊥¬E 4, 7
    9⊥∨E 1, 5–6, 7–8
    10¬(P∧Q)¬I 2–9
  • (d) RAA on the goal, and inside it two smaller RAA boxes:
1¬(P∧Q)
2¬(¬P∨¬Q)asm, for RAA
3¬Pasm, for RAA
4¬P∨¬Q∨I 3
5⊥¬E 4, 2
6PRAA 3–5
7¬Qasm, for RAA
8¬P∨¬Q∨I 7
9⊥¬E 8, 2
10QRAA 7–9
11P∧Q∧I 6, 10
12⊥¬E 11, 1
13¬P∨¬QRAA 2–12

The derivations of (a), (b), and (c) close every box by ¬I or ∨E and use no RAA. The derivation of (d) uses RAA at lines 6, 10, and 13. This proves all four laws.

Laws (a)–(c) conclude negations or a conjunction of negations, and ¬I builds negations. Law (d) concludes a disjunction, and ∨I needs to know which side holds, while the premise says only that P and Q do not both hold. RAA gets round the missing decision without making it.

Second readingDe Morgan (d) by excluded middle

Excluded middle makes the decision instead. Split on P∨¬P. In the case ¬P, ∨I gives ¬P∨¬Q at once. In the case P, a ¬I box on Q builds P∧Q, which clashes with the premise, giving ¬Q; then ∨I gives ¬P∨¬Q. Written out, this route is 11 lines, with LEM as its one classical line. Both routes use a classical rule.

Quick check. Suppose RAA were deleted from the list of rules. Which of the four derivations in the proof of Proposition 2.5.5 would still be correct, and what is the first line of the others that would lose its justification?

Solution. The derivations of (a), (b), and (c) would still be correct: they use ¬I, ¬E, ∨I, ∨E, ∧I, and ∧E only. In the derivation of (d), line 6 is the first to lose its justification: it closes the box that opened with ¬P and writes P, which is RAA. (Lines 10 and 13 lose theirs too.)

2.5.7. Implication as a disjunction

In everyday mathematics “if P then Q” and “either P fails or Q holds” are used interchangeably. One direction of that exchange needs only the earlier rules; our derivation of the other uses a classical rule.

Proposition 2.5.6 (Implication as a Disjunction)

For all statements P and Q:

  • (a) ¬P∨Q⊢P→Q, by a derivation that does not use RAA;
  • (b) P→Q⊢¬P∨Q, by a derivation that uses LEM.

Idea.

  • (a) The premise is a disjunction, so we use it by cases, each ending in the current goal P→Q. In each case that goal is an implication, so we open a box with P. In the case ¬P, the box clashes at once and ⊥E gives Q: this is the derivation of Proposition 2.1.2. In the case Q, the box repeats Q.

    In pictures, for (a): the two cases; then a box on P in each.

    1¬P∨Q
    2¬Pasm, for ∨E
    ⋮
    6P→Q
    7Qasm, for ∨E
    ⋮
    10P→Q
    11P→Q∨E 1, 2–6, 7–10
    1¬P∨Q
    2¬Pasm, for ∨E
    3Pasm, for →I
    ⋮
    5Q
    6P→Q→I 3–5
    7Qasm, for ∨E
    8Pasm, for →I
    ⋮
    9Q
    10P→Q→I 8–9
    11P→Q∨E 1, 2–6, 7–10
  • (b) The goal is a disjunction, so we postpone it. The premise is an implication, which gives Q only once we have P, and we do not. So we are stuck, and this time excluded middle is the better tool than an RAA box: we decide P first. In the case P the premise gives Q; in the case ¬P the left side is in hand.

For (b): the split; then →E in the case P.

1P→Q
2P∨¬PLEM
3Pasm, for ∨E
⋮
5¬P∨Q
6¬Pasm, for ∨E
⋮
7¬P∨Q
8¬P∨Q∨E 2, 3–5, 6–7
1P→Q
2P∨¬PLEM
3Pasm, for ∨E
4Q→E 1, 3
⋮
5¬P∨Q
6¬Pasm, for ∨E
⋮
7¬P∨Q
8¬P∨Q∨E 2, 3–5, 6–7

Proof.

  • (a) ∨E on the premise, with an implication built in each case:
    1¬P∨Q
    2¬Pasm, for ∨E
    3Pasm, for →I
    4⊥¬E 3, 2
    5Q⊥E 4
    6P→Q→I 3–5
    7Qasm, for ∨E
    8Pasm, for →I
    9QR 7
    10P→Q→I 8–9
    11P→Q∨E 1, 2–6, 7–10

    Line 9 repeats line 7 inside the box of line 8, because →I needs Q as a line of that box itself.

  • (b) Cases on P:
1P→Q
2P∨¬PLEM
3Pasm, for ∨E
4Q→E 1, 3
5¬P∨Q∨I 4
6¬Pasm, for ∨E
7¬P∨Q∨I 6
8¬P∨Q∨E 2, 3–5, 6–7

Line 2 is Proposition 2.5.3 used as a derived rule, and the only RAA is inside it. This proves both parts.

The two routes of the section now stand side by side. RAA assumes the goal fails and hunts for a clash; LEM splits on a statement of our choosing and gives each case a resource it lacked. When a premise is waiting for a statement S (here P→Q waits for P), splitting on S is usually the shorter route.

2.5.8. One principle in three forms

RAA gave us ¬¬E and excluded middle. Had we added one of those two as the new primitive rule instead of RAA, would we have proved less?

To say this exactly, we need two rule forms and one notion. ¬¬E taken as a rule says: if ¬¬φ stands on an available line, we may write φ. LEM taken as a rule says: we may write φ∨¬φ on any line, for any statement φ, citing nothing. Given a list of rules, a rule X derives a rule Y over that list if every use of Y in a derivation can be replaced by a fragment that uses only X and the rules of the list, without changing the premises or the last line. Then every sequent derivable with Y added to the list is derivable with X added instead.

Theorem 2.5.7 (The Classical Rules Are Interderivable)

Over the primitive rules other than RAA, each of the three rules RAA, ¬¬E, and LEM derives the other two. In particular, adding any one of the three to the other primitive rules gives the same derivable sequents.

In words: RAA, ¬¬E and LEM are one principle in three forms; adding any one of them to the other rules proves exactly what adding any other does.

In the picture, an arrow from X to Y means that X derives Y over the other primitive rules; going round the solid cycle, each rule derives the other two. ① is Proposition 2.5.3 on the solid arrow and Proposition 2.5.1 (b) on the dashed one; ② closes the box by ¬I, then applies ¬¬E; ③ splits on φ∨¬φ.

Diagram. Labels: textcircled scriptsize 1, textcircled scriptsize 3, textcircled scriptsize 2, neg negE

Part ② says that a step of RAA can be replaced by ¬I followed by ¬¬E, keeping the box. On the derivation of Example (A number whose square is at most itself), line 6 becomes two lines:

1x2≤x
2¬(x≤1)asm, for ¬I
3x>1algebra 2
4¬(x2≤x)algebra 3
5⊥¬E 1, 4
6¬¬(x≤1)¬I 2–5
7x≤1¬¬E 6

Line 6 is correct by ¬I: the box opens with ¬(x≤1), and ¬¬(x≤1) is the negation of that assumption. The box itself is unchanged: both rules ask for ⊥ as a line of the box, and differ only in what they write after it. Part ③, shown on the same example in the fold below, replaces that ¬¬E line by a split written by LEM.

So the classical part of our rules is one extra principle, whichever of its three forms we write down.

Second readingPart ③ on the example, and the proof: replacing one rule by another

Part ③ on the example. Part ③ replaces the ¬¬E line of ② by a split on (x≤1)∨¬(x≤1), written by LEM:

1x2≤x
2¬(x≤1)asm, for ¬I
3x>1algebra 2
4¬(x2≤x)algebra 3
5⊥¬E 1, 4
6¬¬(x≤1)¬I 2–5
7(x≤1)∨¬(x≤1)LEM
8x≤1asm, for ∨E
9¬(x≤1)asm, for ∨E
10⊥¬E 9, 6
11x≤1⊥E 10
12x≤1∨E 7, 8–8, 9–11

The first case is the goal; the second clashes with line 6 and closes itself. Together, ② and ③ turned the one RAA line into steps of ¬I, LEM and the rules of the earlier sections: that is how LEM derives RAA.

Idea. Replacements can be chained, so it is enough to go once round a cycle. ① RAA derives the other two: that is Proposition 2.5.3 and Proposition 2.5.1 (b). ② ¬¬E derives RAA: ¬I closes an RAA box, which runs from ¬φ to ⊥, with ¬¬φ, and ¬¬E finishes. ③ LEM derives ¬¬E: split on φ∨¬φ; the case φ is the goal, and the case ¬φ clashes with ¬¬φ.

Before reading on: in the fragment for ③ below, which rule does line k+4 use, and why may line k+3 cite line m?

Proof. ① Suppose a derivation uses ¬¬E at line k, writing φ and citing a line m that holds ¬¬φ. Replace line k by the last three lines of the derivation in Proposition 2.5.1 (b), with its premise replaced by line m: a box opening with ¬φ, the line ⊥ by ¬E citing the assumption and line m, and then φ by RAA. A use of LEM, writing φ∨¬φ, is replaced by the eight lines of the derivation in Proposition 2.5.3, with φ for P; that derivation has no premises. So RAA derives ¬¬E and LEM.

② Suppose a derivation uses RAA at line k, closing a box, lines i to j, that opens with ¬φ and ends with ⊥. Keep the box and replace line k by two lines:

i¬φasm, for ¬I
⋮
j⊥
k¬¬φ¬I i–j
k+1φ¬¬E k

Line k is correct by ¬I, since the box opens with ¬φ and ¬¬φ is the negation of that assumption. Both rules ask for ⊥ as a line of the box itself, so the box needs no change. So ¬¬E derives RAA.

③ Suppose a derivation uses ¬¬E at line k, writing φ and citing a line m that holds ¬¬φ. Replace line k by six lines:

m¬¬φ
⋮
kφ∨¬φLEM
k+1φasm, for ∨E
k+2¬φasm, for ∨E
k+3⊥¬E k+2, m
k+4φ⊥E k+3
k+5φ∨E k, k+1–k+1, k+2–k+4

The first case is a one-line box: it opens with φ and so already ends with the goal. In the second case, line k+3 may cite line m, because line m was available at the old line k and every new line sits in the same boxes as the old line k, or in boxes opened after it. No rule other than LEM and the rules of the list is used. So LEM derives ¬¬E.

In each replacement the later lines are renumbered, and a later citation of the old line k now cites the fragment’s last line, which holds the same statement in the same boxes. The premises and the last line of the derivation are unchanged.

Finally, replacements can be chained. LEM derives RAA: replace each use of RAA by the fragment of ②, and then each use of ¬¬E so created by the fragment of ③. ¬¬E derives LEM: replace each use of LEM by the derivation of ①, and then each use of RAA in it by the fragment of ②. With ①, ②, and ③, this shows that each of the three rules derives the other two, as claimed.

The base list matters: part ③ uses ⊥E at line k+4, to close the impossible case as in Example (An impossible case).

Second readingOther books, and a rule we could drop

Remark. Some books call exactly our RAA “proof by contradiction” or PBC, and some take ¬¬E as their primitive rule and derive RAA from it. By Theorem 2.5.7 nothing changes: all these choices prove the same sequents.

Remark. ⊥E could have been dropped from the primitive rules, since RAA and repetition derive it (Exercise B3 below asks for the derivation). We keep it so that the primitive rules other than RAA form a system of their own.

2.5.9. How reductio looks in a mathematical proof

Here is an argument of a kind that analysis uses constantly; read it one sentence at a time, with the rule of each step in brackets.

Example (A number below every positive number)

Let x be a real number with x≥0, and suppose that x≤ε for every real number ε>0. Prove that x=0.

Solution. Suppose, for a contradiction, that x≠0. Since x≥0 and x≠0, we have x>0. Then ε:=x/2 is a real number with ε>0, so the hypothesis applies to it and gives x≤x/2. Subtracting x/2 from both sides gives x/2≤0, and multiplying by 2 gives x≤0. This contradicts x>0. Hence x=0.

  1. “Suppose, for a contradiction, that x≠0.” [An RAA box opens, with ¬(x=0), the exact negation of the goal x=0.]
  2. “Since x≥0 and x≠0, we have x>0.” Example (An impossible case)
  3. “Then ε:=x/2 is a real number with ε>0.” [School algebra.]
  4. “So the hypothesis applies to it and gives x≤x/2.” [The hypothesis is about every ε>0; applying it to one is a step about “every”, used as ordinary reasoning (the note at the start of this chapter).]
  5. “… gives x/2≤0, and … x≤0.” [School algebra.]
  6. “This contradicts x>0.” [¬E: for real numbers x>0 is ¬(x≤0), the negation of the line x≤0.]
  7. “Hence x=0.” [RAA closes the box.]

¬I or RAA? The phrase “suppose not” covers two rules. Here is one statement proved both ways, for a real number x: if x3<0, then x<0.

  • By the contrapositive (CP). We prove that if x≥0, then x3≥0. Suppose x≥0 [assumption for →I]. Then x3=x⋅x⋅x≥0 [algebra]. So if x≥0, then x3≥0 [→I], and by contraposition, if x3 is not ≥0, then x is not ≥0 [CP]: that is, if x3<0, then x<0.
  • By contradiction (RAA). Suppose x3<0 [assumption for →I]. Suppose, for a contradiction, that x<0 fails, that is, x≥0 [an RAA box on ¬(x<0)]. Then x3≥0, which contradicts x3<0 [¬E]. Hence x<0 [RAA], and so if x3<0, then x<0 [→I].

The first proof introduces negations and removes none; the second removes one, at its RAA step. Which rule a “suppose not” uses is decided by the lines as written: what the box assumes, and what is written after it. Under the convention of Section 2.1 an order statement can be written either way: with the goal x<0 written as ¬(x≥0), the box on x≥0 closes by ¬I; and Example (A number whose square is at most itself), with its goal written ¬(x>1) and its box on x>1, would close by ¬I too.

The proof of Theorem 2.2.1 assumes the positive statement r2=2 and concludes its negation, so it is ¬I.

Quick check. ¬I or RAA? (i) “Suppose 15 is prime. Then … This is a contradiction. Hence 15 is not prime.” (ii) “Suppose n is not odd. Then … This is a contradiction. Hence n is odd.”

Solution.

  • (i) ¬I: the box opens with the statement whose negation is concluded. (ii) RAA: the box opens with ¬(n is odd), and the conclusion is “n is odd”.
Second readingRAA is never needed to finish a negation

For one kind of goal the new rule is never needed at the last step. Suppose the goal is itself a negation ¬ψ. An RAA box for it opens with ¬¬ψ. Replace it by a ¬I box that opens with ψ; inside it, derive ¬¬ψ from ψ by the three lines of Example (Two negations from one premise) (a) (a box on ¬ψ that clashes with ψ); then continue as the RAA box did, citing that line wherever the RAA box cited its assumption. The box still ends in ⊥, and ¬I closes it with ¬ψ. So the last step of a derivation of a negation never needs RAA, though steps inside its box still may. RAA earns its place on the other goals.

When Q is itself a negation, the inner goal in Proposition 2.5.2 is a negation, and its RAA can be replaced by ¬I in this way.

Warning. An RAA box on ¬φ whose assumption is used only at its last step, against a φ derived without it, is legal, but it is a direct proof in disguise: the lines before the clash already derive φ, so the box can be deleted. The smallest case opens a box on ¬P only to clash with a premise P that is already the goal. It is a direct proof in costume. (A box that reaches ⊥ without using its assumption at all is a different matter: the same lines, written before the box, derive ⊥ without it, and ⊥E then gives the goal at once.)

Warning. Not every “proof by contradiction” is RAA. Calling the proof of Theorem 2.2.1 an RAA is a mislabeling: its box opens with r2=2, not with a negation, and it concludes r2≠2, which ¬I writes. The difference matters when you count classical steps: the box of that proof closes by ¬I and contributes none.

2.5.10. The rule card

Before the card, the new rule on large statements; each box runs from the assumption shown to ⊥.

Example (Instances of RAA)
φ The box opens with New line
P∨¬Q ¬(P∨¬Q) P∨¬Q
(P→Q)→R ¬((P→Q)→R) (P→Q)→R
¬Q ¬¬Q ¬Q

The third row is legal; a ¬I box opened by Q would also do (the fold “RAA is never needed to finish a negation”).

Not an instance. A box opens with ¬P∨¬Q and reaches ⊥. The line “P∧Q — RAA” is not an instance: the assumption must be ¬(P∧Q), the negation of the whole line written. ¬P∨¬Q says the same only after a derivation (De Morgan’s laws), and the rule compares symbols.

Chapter 1’s seven rules are on the card at the end of Section 1.6; here are this chapter’s so far.

Rule Shape You write Lean
¬E φ, ¬φ ⟹ ⊥ “…, which contradicts …” exact hn hp (goal False)
⊥E ⊥ ⟹ any φ “This case cannot occur.” “So there is nothing to prove.” exfalso
¬I box φ … ⊥ ⟹ ¬φ “Suppose P. … This is a contradiction. Hence not P.” intro hp (goal False)
MT (derived) φ→ψ, ¬ψ ⟹ ¬φ “Since Q fails, so does P.” mt h hnq
CP (derived) φ→ψ ⟹ ¬ψ→¬φ “We prove the contrapositive: suppose not Q; … so not P.” mt
DS (derived) φ∨ψ, ¬φ ⟹ ψ “P is impossible, so Q.” h.resolve_left hnp
↔I box φ … ψ, box ψ … φ ⟹ φ↔ψ “(⇒) Suppose P. … so Q. (⇐) Suppose Q. … so P.” constructor
↔E φ↔ψ, φ ⟹ ψ (or with ψ, φ) “Since P holds if and only if Q does, and P holds, so does Q.” h.mp hp / h.mpr hq
RAA box ¬φ … ⊥ ⟹ φ “Suppose, for a contradiction, that P fails. … This is impossible. Hence P.” by_contra h
¬¬E (derived) ¬¬φ ⟹ φ “It cannot be that P fails; so P.” not_not.mp h
LEM (derived) nothing ⟹ φ∨¬φ “Either P or not. If P, … If not, … In either case, …” by_cases h : P

The Lean column is for readers who use that proof assistant; nothing later depends on it.

Warning (Not allowed: RAA). Each step is wrong; the tag names the clause it breaks.

  • Open the box for Q∨R with ¬Q∨R: clause 1, the box opens with the negation of the whole goal.
  • Write φ after a box opened by φ: clause 1 (the pair below).
  • Close the box on a ⊥ of a box inside it: clause 2.
  • Write ¬¬φ by RAA: clause 3; ¬¬φ is the line ¬I writes.
  • To prove x≤1, assume x≥1: clause 1, the negation of x≤1 is x>1.

Clause 1 is where the rule bites. Premises (P∨R)→Q and ¬Q; wrong on the left, right on the right:

1(P∨R)→Q
2¬Q
3Pasm, for RAA
4P∨R∨I 3
5Q→E 1, 4
6⊥¬E 5, 2
7PRAA 3–6
1(P∨R)→Q
2¬Q
3Pasm, for ¬I
4P∨R∨I 3
5Q→E 1, 4
6⊥¬E 5, 2
7¬P¬I 3–6

The left box opened with P, not ¬P, so it refuted P and cannot conclude it. The claim (P∨R)→Q, ¬Q⊢P breaks: let x be a real number, with P: “x>2”, R: “x<−2”, Q: “x2>4”. The first premise holds for every x, and at x=0 the second holds and P fails.

Quick check. A box opens with ¬(x≠2), for a real number x, and reaches ⊥ as a line of the box itself. What may RAA write after it, and what may ¬I?

Solution. RAA writes x≠2; ¬I writes ¬¬(x≠2), that is ¬¬¬(x=2).

Remark (Looking ahead). Chapter 4 proves that P cannot be derived from ¬¬P, nor Peirce’s law from no premises, without RAA or one of its two equivalents, and states the same, without proof, for De Morgan’s law (d) and for (P→Q)∨(Q→P). Chapter 8 tells the story of the mathematicians who declined the classical principle, and shows how to spot a proof by contradiction that is a direct proof in costume.

2.5.11. Exercises

A. Check your understanding

Exercise (A1)
  • (a) “Suppose 7 is even. Then 7=2k for some integer k, so k=7/2, which is not an integer. This is impossible. Hence 7 is not even.” Is the last step ¬I, RAA, or neither? What did the box open with?
  • (b) “Let x be real. Suppose x2≥2x−1 fails, that is, x2<2x−1. Then (x−1)2<0, which is impossible. Hence x2≥2x−1.” Same questions.
  • (c) “Assume P. Then, as shown above, Q. Hence P→Q.” Same questions.
  • (d) State RAA and ¬I side by side, and say which of the two the derivation of Proposition 2.5.1 (a) uses.
  • (e) In the derivation of Proposition 2.5.5 (d), why is a last line ∨I, from ¬P or ¬Q derived from the premise alone, not worth aiming at?
  • (f) In the same derivation, the assumption ¬(¬P∨¬Q) on line 2 is cited twice. Name the two lines that cite it, and the rule each uses.
  • (g) In the instance of ② on the opening example (in “One principle in three forms”), which rule justifies the line ¬¬(x≤1), and why does the box of lines 2–5 need no change?

Solution.

  • (a) ¬I: the box opened with “7 is even”, and the conclusion is its negation. (7/2 is not an integer because 3<7/2<4.)

  • (b) RAA: the box opened with the negation of x2≥2x−1, and the conclusion is x2≥2x−1 itself. (The clash: x2<2x−1 rearranges to (x−1)2<0, and squares are nonnegative.)

  • (c) Neither: this is →I. The box opened with P and ended with Q; no ⊥ appears.

  • (d) ¬I: a box that opens with φ and reaches ⊥ gives ¬φ. RAA: a box that opens with ¬φ and reaches ⊥ gives φ. The derivation of Proposition 2.5.1 (a) uses ¬I, with ¬P as the assumption, so its conclusion is the negation of ¬P, namely ¬¬P.

  • (e) ∨I would need ¬P or ¬Q on a line derived from the premise alone, and each of those steps can be broken: with P true and Q false the premise is true and ¬P false, and with P false and Q true the premise is true and ¬Q false. So neither step is worth aiming at: each breaks (Section 1.1’s test).

  • (f) Line 5 cites it, by ¬E against line 4, ¬P∨¬Q; and line 9 cites it, by ¬E against line 8, the same statement. Both lines lie in boxes inside the box of line 2, which is still open, so the citations are legal.

  • (g) ¬I: the box opens with ¬(x≤1) and ends with ⊥, so ¬I gives the negation of its assumption, ¬¬(x≤1). The box needs no change because ¬I, like RAA, asks only for a box that ends with ⊥ as a line of the box itself; the two rules differ in what they write after the box, not in the box.

Exercise (A2: Drill)

The parts run from one step, through a missing line, a justification column and steps to judge, to short derivations.

  • (a) A box opens with ¬(P∧Q) and ends with ⊥, a line of the box itself. What may RAA write after it, and what may ¬I?

  • (b) Line 1 is ¬¬(P→Q). What does “¬¬E 1” write?

  • (c) To prove Q∨R by RAA, which statement opens the box?

  • (d) Let x be a real number. To prove x≥2 by contradiction, what is assumed?

  • (e) Line 9 is P→Q, justified “RAA 4–8”. What are lines 4 and 8?

  • (f) Line 6 is Q∨R, justified “¬¬E 5”. What is line 5, and by which rule is such a line usually written?

  • (g) Fill in the justifications (i)–(iv).

    1¬¬(P∧Q)
    2Q→R
    3P∧Q(i)
    4Q(ii)
    5R(iii)
    6R∨S(iv)
  • (h) “Suppose 9 is prime. … This is impossible. Hence 9 is not prime.” Is the last step ¬I or RAA?

  • (i) “Suppose n2 is not even. … This is impossible. Hence n2 is even.” Is the last step ¬I or RAA?

  • (j) Which of ¬¬I, ¬¬E, LEM, MT, DS are derived in this chapter by a derivation that uses RAA?

  • (k) Find the illegal line, and say why it is illegal.

    1¬(P∧Q)
    2¬Pasm, for RAA
    3P∧Qasm, for ¬I
    4P∧E 3
    5⊥¬E 4, 2
    6¬(P∧Q)¬I 3–5
    7PRAA 2–5
  • (l) A box opens at line 2 with ¬P; line 4, a line of that box itself, is ⊥. Is “5. ¬¬P — RAA 2–4” correct?

  • (m) Derive ¬¬P, P→Q⊢Q.

  • (n) Derive ¬P→P⊢P.

  • (o) Derive ¬P→Q, ¬Q⊢P in two lines after the premises.

Solution.

  • (a) RAA writes P∧Q; ¬I writes ¬¬(P∧Q).

  • (b) P→Q.

  • (c) ¬(Q∨R), the negation of the whole goal; not ¬Q∨R.

  • (d) x<2, that is ¬(x≥2); not x≤2, which x=2 satisfies together with the goal.

  • (e) Line 4 is the assumption ¬(P→Q), “asm, for RAA”; line 8 is ⊥, the last line of the box.

  • (f) Line 5 is ¬¬(Q∨R). Such a line is usually written by ¬I, closing a box opened by ¬(Q∨R) (or it is a premise).

  • (g)
    • (i) ¬¬E 1; (ii) ∧E 3; (iii) →E 2, 4; (iv) ∨I 5.
  • (h) ¬I: the box opens with “9 is prime”, and the conclusion is its negation.

  • (i) RAA: the box opens with the negation of “n2 is even”, and the conclusion is that statement itself.

  • (j) ¬¬E and LEM; ¬¬I, MT and DS are derived without it.

  • (k) Line 7: lines 2–5 are not a box (the box opened at line 2 ends at line 6), and RAA needs ⊥ as a line of the box itself.

  • (l) No: RAA writes P, the statement whose negation opened the box (clause 3); ¬¬P is the line ¬I writes after the same box.

  • (m) 3 P, ¬¬E 1; 4 Q, →E 2, 3.

  • (n) 2 ¬P, assumption, for RAA; 3 P, →E 1, 2; 4 ⊥, ¬E 3, 2; 5 P, RAA 2–4.

  • (o) 3 ¬¬P, MT 1, 2; 4 P, ¬¬E 3.

B. Practice

Exercise (B1: With and without the new rule, used later)
  • (a) Derive ¬¬P, ¬¬(P→Q)⊢¬¬Q without RAA. Then say in one sentence why your derivation does not give Q.
  • (b) Derive ¬P→Q, ¬P→¬Q⊢P, using RAA.

Hint: in (a) the goal is a negation; in (b) it is a letter.

Solution.

  • (a) The goal ¬¬Q is a negation, so we open a ¬I box on ¬Q, with the goal ⊥. The premises are negations, so each can only clash: ¬¬P against ¬P, and ¬¬(P→Q) against ¬(P→Q). Both of those are negations, so each is itself a subgoal for a ¬I box. Make ¬P the subgoal: a box on P. Inside it, make ¬(P→Q) the subgoal: a box on P→Q, where →E gives Q, which clashes with ¬Q. The boxes then close from the inside out.
    1¬¬P
    2¬¬(P→Q)
    3¬Qasm, for ¬I
    4Pasm, for ¬I
    5P→Qasm, for ¬I
    6Q→E 5, 4
    7⊥¬E 6, 3
    8¬(P→Q)¬I 5–7
    9⊥¬E 8, 2
    10¬P¬I 4–9
    11⊥¬E 10, 1
    12¬¬Q¬I 3–11

    All three boxes close by ¬I, so no RAA is used. The derivation does not give Q because its last box opens with ¬Q, and ¬I can only write the negation of that assumption, ¬¬Q; removing the two negations is ¬¬E, a classical step.

  • (b) The goal P is a letter, and both premises want ¬P, which is nowhere. We are stuck, so we open an RAA box with ¬P, and it feeds both premises:
1¬P→Q
2¬P→¬Q
3¬Pasm, for RAA
4Q→E 1, 3
5¬Q→E 2, 3
6⊥¬E 4, 5
7PRAA 3–6

In words: “Suppose, for a contradiction, that P fails. Then the premises give both Q and ¬Q, which is impossible. Hence P.”

Exercise (B2: Back from negated sides, used later)

Derive ¬P↔¬Q⊢P↔Q. Say where RAA enters and why.

Solution. The goal is a biconditional, so by Definition 2.4.1 we need two boxes, one from P to Q and one from Q to P. In the first, the goal Q is a letter and the premise speaks only about ¬Q, so we are stuck: we assume ¬Q and argue by RAA. The second box is symmetric.

1¬P↔¬Q
2Pasm, for ↔I
3¬Qasm, for RAA
4¬P↔E 1, 3
5⊥¬E 2, 4
6QRAA 3–5
7Qasm, for ↔I
8¬Pasm, for RAA
9¬Q↔E 1, 8
10⊥¬E 7, 9
11PRAA 8–10
12P↔Q↔I 2–6, 7–11

RAA enters at lines 6 and 11: each inner goal is a letter, and the premise produces only negations. In the converse, P↔Q⊢¬P↔¬Q (Example (Negating both sides of an iff)), the inner goals are negations, ¬I builds them, and no RAA is used.

Exercise (B3: The redundant rule)

Show that ⊥E is derivable from RAA and repetition: given a line ⊥, derive an arbitrary statement P in one box, without ⊥E.

Solution. Open an RAA box with ¬P and repeat the ⊥ inside it:

1⊥
2¬Pasm, for RAA
3⊥R 1
4PRAA 2–3

The repetition at line 3 is needed because RAA asks for ⊥ as a line of the box itself. So every use of ⊥E can be replaced by these three lines; the book keeps the rule for the reason given in the remark after Theorem 2.5.7.

Exercise (B4: Stuck at a letter)

A search for (¬P→Q)∧(¬P→R), ¬(Q∧R)⊢P has reached the stage below. Name the move, then complete it.

1(¬P→Q)∧(¬P→R)
2¬(Q∧R)
⋮
10P

Solution. The goal P is a letter, so no introduction rule applies, and both halves of the first premise wait for ¬P, which is nowhere. The move is when stuck, assume the negation of the goal: open an RAA box on ¬P, and hunt for a clash. The assumption feeds both halves, and Q∧R then clashes with the second premise.

1(¬P→Q)∧(¬P→R)
2¬(Q∧R)
3¬Pasm, for RAA
4¬P→Q∧E 1
5Q→E 4, 3
6¬P→R∧E 1
7R→E 6, 3
8Q∧R∧I 5, 7
9⊥¬E 8, 2
10PRAA 3–9

The assumption on line 3 is cited twice, at lines 5 and 7; the clash on line 9 is between a line built from it and the second premise.

Exercise (B5: Derive or break, used later)

For each claim, derive it with any of the rules of Chapters 1 and 2, or break it by statements about a real number x. In each derivation, mark the classical line (RAA, or ¬¬E or LEM used as a derived rule), if there is one. (A derivation by RAA of Γ⊢φ derives ⊥ from Γ together with ¬φ: from the counterexample set of the claim, Definition 1.1.3.)

  • (a) P∨Q, ¬P∨R⊢Q∨R.
  • (b) ¬(P∧Q)⊢¬P∧¬Q.
  • (c) P→Q⊢(P↔Q)∨Q.
  • (d) (P→Q)∨(P→R)⊢P→(Q∧R).
  • (e) ¬¬P∨Q⊢P∨Q.
  • (f) ¬(P↔Q)⊢P↔¬Q.
  • (g) ¬(P↔Q)⊢¬P∧Q.
  • (h) (P∧Q)→R⊢(P→R)∨(Q→R).

Solution.

  • (a) Derive, with no classical line. Split on the first premise; in the case P, split on the second, where the case ¬P closes itself.
    1P∨Q
    2¬P∨R
    3Pasm, for ∨E
    4¬Pasm, for ∨E
    5⊥¬E 3, 4
    6Q∨R⊥E 5
    7Rasm, for ∨E
    8Q∨R∨I 7
    9Q∨R∨E 2, 4–6, 7–8
    10Qasm, for ∨E
    11Q∨R∨I 10
    12Q∨R∨E 1, 3–9, 10–11
  • (b) Break. Take P: “x>0”, Q: “x>5”. At x=1, P∧Q is false, so ¬(P∧Q) is true, and ¬P is false, so ¬P∧¬Q is false: the counterexample set ¬(P∧Q), ¬(¬P∧¬Q) is true. This is the wrong De Morgan law.

  • (c) Derive; the classical line is line 2, LEM (Proposition 2.5.3 as a derived rule). Each side of the goal breaks on its own: with P: “x>5”, Q: “x>3”, the premise holds at every x, P↔Q fails at x=4 and Q at x=0. So decide a letter first. The letter is Q: in the case Q the right side is in hand, and in the case ¬Q the premise and the clash with ¬Q build P↔Q in two boxes.

    1P→Q
    2Q∨¬QLEM
    3Qasm, for ∨E
    4(P↔Q)∨Q∨I 3
    5¬Qasm, for ∨E
    6Pasm, for ↔I
    7Q→E 1, 6
    8Qasm, for ↔I
    9⊥¬E 8, 5
    10P⊥E 9
    11P↔Q↔I 6–7, 8–10
    12(P↔Q)∨Q∨I 11
    13(P↔Q)∨Q∨E 2, 3–4, 5–12

    Deciding P first, as the Idea of Proposition 2.5.6 (b) does, would leave the case ¬P with neither side in hand.

  • (d) Break. Take P: “x>0”, Q: “x>−1”, R: “x>5”. At x=1, P→Q is true, so the premise is, and Q∧R is false while P is true, so P→(Q∧R) is false: the counterexample set is true.

  • (e) Derive; the classical line is line 3, ¬¬E.

    1¬¬P∨Q
    2¬¬Pasm, for ∨E
    3P¬¬E 2
    4P∨Q∨I 3
    5Qasm, for ∨E
    6P∨Q∨I 5
    7P∨Q∨E 1, 2–4, 5–6
  • (f) Derive; the classical line is line 21, RAA. The goal is a biconditional, so two boxes. In the first, ¬Q is a negation and ¬I builds it; in the second, the goal P is a letter, and an RAA box on ¬P gives the clash.
    1¬(P↔Q)
    2Pasm, for ↔I
    3Qasm, for ¬I
    4Pasm, for ↔I
    5QR 3
    6Qasm, for ↔I
    7PR 2
    8P↔Q↔I 4–5, 6–7
    9⊥¬E 8, 1
    10¬Q¬I 3–9
    11¬Qasm, for ↔I
    12¬Pasm, for RAA
    13Pasm, for ↔I
    14⊥¬E 13, 12
    15Q⊥E 14
    16Qasm, for ↔I
    17⊥¬E 16, 11
    18P⊥E 17
    19P↔Q↔I 13–15, 16–18
    20⊥¬E 19, 1
    21PRAA 12–20
    22P↔¬Q↔I 2–10, 11–21
  • (g) Break. Take P: “x>0”, Q: “x>5”. At x=1, P is true and Q false, so P↔Q is false and the premise is true; ¬P is false, so ¬P∧Q is false.

  • (h) Derive; the classical line is line 14, RAA. Each side of the goal breaks on its own: with P: “x>0”, Q: “x>5”, R: “x>3”, the premise holds at every x and P→R fails at x=1; exchanging the statements for P and Q breaks the step to Q→R at the same x. So assume the negation of the whole goal. Inside, the box on P turns the clash into R, and the box on Q inside it builds P∧Q.

1(P∧Q)→R
2¬((P→R)∨(Q→R))asm, for RAA
3Pasm, for →I
4Qasm, for →I
5P∧Q∧I 3, 4
6R→E 1, 5
7Q→R→I 4–6
8(P→R)∨(Q→R)∨I 7
9⊥¬E 8, 2
10R⊥E 9
11P→R→I 3–10
12(P→R)∨(Q→R)∨I 11
13⊥¬E 12, 2
14(P→R)∨(Q→R)RAA 2–13
  • (a) needs no classical line, although its goal is a disjunction, because each case of the premise hands over one side. (c) and (h) are disjunctions whose sides break on their own, the place “When RAA earns its place” points to, and the answers use both classical tools there: (c) decides a letter first with LEM, as Proposition 2.5.6 (b) does, but the letter is Q, a side of the goal, not P; (h) assumes the negation of the goal. In (f) the classical line closes a box whose goal is a letter, P from ¬Q, as in Proposition 2.5.1, the other case that paragraph names; the box 2–10 of (f) has no classical line. (b), (d) and (g) are look-alikes. Worked examples of these types: Proposition 2.5.3, Proposition 2.5.5 (d), Proposition 2.5.6 (b), Proposition 2.5.2.

Marking scheme. (16 points) For each claim: 1 for the verdict; 1 for a derivation every line of which checks, with the classical line correctly marked, or for a choice of statements and one value of x at which every member of the counterexample set is true. Fatal errors (0 for the claim): a “break” at which a premise fails; a classical line not marked, or a non-classical line marked as classical.

Exercise (B6: A law that sounds false)
  • (a) Show that (P→Q)∨(Q→P) cannot be broken: whatever statements P and Q are, one disjunct is true.
  • (b) Let n be an integer, P: “n is even”, Q: “n>5”. Check the statement at n=2 and at n=7, saying which disjunct holds.
  • (c) The sentence “every even integer is greater than 5, or every integer greater than 5 is even” is false. Why is that no counterexample to (a)?
  • (d) Show that each disjunct, as a claim from no premises, breaks. Which move of this section does a derivation of (P→Q)∨(Q→P) then call for?

Solution.

  • (a) If P is false, P→Q is true, since its hypothesis fails. If P is true, Q→P is true, since its conclusion holds. Either way one disjunct is true.

  • (b) At n=2: P is true and Q false, so Q→P holds (and P→Q fails). At n=7: P is false and Q true, so P→Q holds (and Q→P fails).

  • (c) The false sentence puts “every” in front of each disjunct separately: (for every n, P→Q) or (for every n, Q→P). The value n=2 refutes the first and n=7 the second. What (a) gives is, for each n, the disjunction itself, as (b) checked at two values. “Every” does not pass inside an “or”. This is the point of “Two sequents that sound wrong” in Section 2.1: the mathematical “if” sits under an “every”.

  • (d) P→Q breaks with P: “x>0”, Q: “x>5”, at x=1; Q→P breaks with the same two statements exchanged, at x=1. So ∨I from either side is not worth aiming at, and the goal is a disjunction with neither side within reach: the case of “When RAA earns its place”, and the move when stuck, assume the negation of the goal. (The derivation itself is Exercise C2 of Section 3.1, where the search method finds it; Chapter 4 states, without proof, that every derivation of it uses RAA or one of its equivalents.)

Marking scheme. (10 points) 3: (a), both cases. 2: (b), the disjunct that holds at each value. 3: (c), the scope of “every” named, with a refuting value for each separated disjunct. 2: (d), the two breaks and the move named. Fatal error (0 for (c)): calling the false sentence an instance of (a).

C. Going deeper

Exercise (C1: Challenge: Excluded middle does the work of reductio directly)

Suppose that, instead of RAA, we had LEM as a rule: φ∨¬φ may be written on any line, for any statement φ.

Given a box that opens with ¬φ and reaches ⊥, derive φ using LEM, ∨E, ⊥E, and the other primitive rules, but neither RAA nor ¬¬E. Write the case ¬φ as the given box, extended.

Solution (Hint 1). Write φ∨¬φ just before the given box. What must each of the two case boxes end with?

Solution (Hint 2). The first case box is a single line.

Solution. Write excluded middle for φ just before the given box, and use the box as the second case of ∨E, extended by one line:

hφ∨¬φLEM
h+1φasm, for ∨E
i¬φasm, for ∨E
⋮
j⊥
j+1φ⊥E j
kφ∨E h, h+1–h+1, i–j+1

Here i=h+2. The first case is a one-line box that already ends with the goal. The second case is the given box with one more line, ⊥E on its ⊥; its lines are unchanged and cite what they cited before, since the box has not moved into or out of any other box. No RAA and no ¬¬E is used.

Exercise (C2: Find the error, used later)

A student derives ¬(¬P∧¬Q)⊢P∨Q as follows.

1¬(¬P∧¬Q)
2P∨¬PLEM
3Pasm, for ∨E
4P∨Q∨I 3
5¬Pasm, for ∨E
6⊥¬E 3, 5
7Q⊥E 6
8P∨Q∨I 7
9P∨Q∨E 2, 3–4, 5–8
  • (a) Is the sequent ¬(¬P∧¬Q)⊢P∨Q derivable?
  • (b) Does the student’s derivation derive it? Name the first line that fails and the rule or clause it breaks.
  • (c) Show that the illegal step, if it were allowed, would prove too much: use the same move to “derive” P∨Q⊢P, and break that sequent.
  • (d) Give a correct derivation.

Solution.

  • (a) Yes: part (d) below gives a derivation. The conclusion is true, and the argument is still wrong.

  • (b) No. Line 6 fails: it cites line 3, the assumption of the first case box, lines 3–4, which closed before line 5. By the scope rule of Definition 1.4.2, line 3 is not available at line 6. The form of ¬E is right; what is broken is availability. In words, the student used the assumption of one case inside the other case, where it has not been assumed.

  • (c) The same move derives P∨Q⊢P: split on the premise by ∨E, with a first box that opens with P and ends there, and a second box that opens with Q and “repeats” P from the first. That sequent breaks: with P false and Q true the premise is true and the conclusion false, so the move can carry a true premise to a false conclusion. So citing a line of a sibling box is illegal in general, not just unlucky here.

  • (d) Keep lines 1–5, and in the case ¬P we are stuck at the goal Q, so we argue for it by RAA, using the premise:

1¬(¬P∧¬Q)
2P∨¬PLEM
3Pasm, for ∨E
4P∨Q∨I 3
5¬Pasm, for ∨E
6¬Qasm, for RAA
7¬P∧¬Q∧I 5, 6
8⊥¬E 7, 1
9QRAA 6–8
10P∨Q∨I 9
11P∨Q∨E 2, 3–4, 5–10

Line 7 cites line 5, the assumption of the enclosing case box, which is still open: the legal version of what the student wanted.

Exercise (C3: Exit check: a classical disjunction)

Derive ⊢P∨(P→Q) using the primitive rules only (those of Chapter 1, ¬E, ⊥E, ¬I, ↔I, ↔E, and RAA), with no derived rule, so neither LEM nor ¬¬E as a single line. Name the rule on every line, and say which line is classical.

Solution. The search. The goal is a disjunction, so we postpone it; there are no premises, so no premise-directed move applies; and neither side is worth aiming at: P false breaks the step to P, and P true with Q false breaks the step to P→Q. We are stuck, so we assume the exact negation of the goal, ¬(P∨(P→Q)), and hunt for a clash. The assumption can clash only with P∨(P→Q), which ∨I builds from either side. The side P→Q is an implication, so we open a box on P with the goal Q. Inside it, ∨I gives P∨(P→Q) from P, which clashes with the assumption, and ⊥E writes Q. So P→Q holds, ∨I gives the goal, and that is the second clash.

1¬(P∨(P→Q))asm, for RAA
2Pasm, for →I
3P∨(P→Q)∨I 2
4⊥¬E 3, 1
5Q⊥E 4
6P→Q→I 2–5
7P∨(P→Q)∨I 6
8⊥¬E 7, 1
9P∨(P→Q)RAA 1–8

Lines 1 and 2 are assumptions, of the RAA box and of the →I box; every other line names its rule on the right. The classical line is line 9; every other rule used is a rule for a connective. The shape is that of Proposition 2.5.3: there the inner box closed by ¬I to give ¬P; here it ends with ⊥E and closes by →I to give P→Q.

A second correct route first derives P∨¬P by the eight lines of Proposition 2.5.3, written out, and then splits on it: in the case P, ∨I gives the goal; in the case ¬P, a box on P clashes with ¬P, ⊥E writes Q, →I gives P→Q, and ∨I the goal. Its classical line is the RAA inside the written-out excluded middle.

Marking scheme. (10 points)

  • 2: an RAA box opened with ¬(P∨(P→Q)), the exact negation of the goal.
  • 3: an inner box on P that reaches ⊥ by ∨I and ¬E against the outer assumption, and then Q by ⊥E.
  • 2: P→Q by →I, then P∨(P→Q) by ∨I, and the second clash.
  • 2: RAA closes the outer box, and it is named as the classical step.
  • 1: every citation is available.

The second route earns the same points, step for step: 2 for the written-out excluded middle opened correctly (its RAA box on ¬(P∨¬P)); 3 for the box on P in the case ¬P, ending with Q by ⊥E; 2 for →I, the two ∨I lines, and the ∨E; 2 for naming the RAA inside excluded middle as the classical step; 1 for availability. Fatal errors (0 for the step): opening the outer box with anything but ¬(P∨(P→Q)); closing the outer box by ¬I (that gives ¬¬(P∨(P→Q))); a line justified by ¬¬E or LEM taken as a rule, which the item excludes.

Exercise (C4: Challenge: Smaller rule sets)
  • (a) Show that, once RAA is a rule, ¬I could be dropped: given a box that opens with φ and reaches ⊥ as a line of its own, derive ¬φ with RAA, ¬E and the box’s lines, without ¬I. Use your method to derive Proposition 2.3.1 without ¬I.
  • (b) With neither ⊥E nor RAA (¬I allowed), derive ¬P⊢P→¬Q.
  • (c) Exercise B3 derived ⊥E from RAA and repetition. Does its derivation use ¬I, and does your fragment in (a) use ⊥E? What do (a) and B3 together say about the list of thirteen primitive rules?
  • (d) Which of the two paradoxes of Section 2.1 survives in a system with neither ⊥E nor RAA, by the derivation given there?

Solution.

  • (a) Replace the old box by this one. Line i: ¬¬φ, assumption, for RAA. Line i+1: ¬φ, assumption, for RAA. Line i+2: ⊥, ¬E i+1, i. Line i+3: φ, RAA i+1–i+2. Then the old box’s lines after its assumption, renumbered, each citation of the old assumption now citing line i+3; the last of them is ⊥, a line of the new box. Then ¬φ, by RAA on the new box: RAA writes ψ from a box opened by ¬ψ, here with ψ the statement ¬φ. Every old citation stays available: the old lines sit in the new box exactly as they sat in the old one, and line i+3 is a line of that box.

    For modus tollens:

    1P→Q
    2¬Q
    3¬¬Pasm, for RAA
    4¬Pasm, for RAA
    5⊥¬E 4, 3
    6PRAA 4–5
    7Q→E 1, 6
    8⊥¬E 7, 2
    9¬PRAA 3–8
  • (b) A box on P, and inside it a box on Q whose ⊥ comes from the clash of P with the premise:
    1¬P
    2Pasm, for →I
    3Qasm, for ¬I
    4⊥¬E 2, 1
    5¬Q¬I 3–4
    6P→¬Q→I 2–5

    The ¬I box never uses its assumption; the fold “Edge cases of not-introduction” of Section 2.2 explains why that is legal: the lines above it, P and ¬P, already clash.

  • (c) No, and no: B3 uses RAA and repetition only, and (a) uses RAA and ¬E only. So ⊥E and ¬I can be dropped together, and the remaining eleven rules derive every sequent the thirteen do (replace the lines one at a time, innermost boxes first). The book keeps both for the reason the remark after Theorem 2.5.7 gives for ⊥E: the primitive rules other than RAA are to form a system of their own.

  • (d) Q⊢P→Q: its derivation uses →I and repetition only. The derivation of ¬P⊢P→Q given in Section 2.1 uses ⊥E.

Marking scheme. (10 points) 5: (a), the general replacement (2 for the inner RAA producing φ; 1 for re-citing the old assumption; 1 for closing by RAA with ψ the statement ¬φ) and 1 for the modus tollens derivation. 2: (b). 2: (c), both answers and the conclusion about the list. 1: (d). Fatal error (0 for (a)): closing the new box by ¬I, or opening it with φ.

R. Review

Exercise (R1)

Let n be an integer. Prove that n2+3n is even, naming the rule at each logical step.

Solution. By (E1), n is even or n is odd, and we argue by cases [∨E].

Case n even. Write n=2k with k an integer. Then n2+3n=4k2+6k=2(2k2+3k), which is even.

Case n odd. Write n=2k+1 with k an integer. Then n2+3n=(4k2+4k+1)+(6k+3)=2(2k2+5k+2), which is even.

Both cases reach the goal, so n2+3n is even [∨E].

The method is Chapter 1’s case split (Definition 1.6.1), used as in Example (The absolute value of a product), here on the parity of n. No rule of this chapter is needed: neither case clashes, and each ends in the goal.

Exercise (R2)

Call an integer n balanced if n is even exactly when n is a multiple of 3. Write E: “n is even”, T: “n is a multiple of 3”.

  • (a) Write “n is balanced” in E and T, and decide it for n=4,6,7,9.
  • (b) Show that “n is balanced” says the same as “n is both even and a multiple of 3, or neither”, by deriving E↔T⊣⊢(E∧T)∨(¬E∧¬T). In which direction does your derivation use a classical line (RAA, ¬¬E or LEM)?

Solution.

  • (a) E↔T: a definition’s “if” is read as an iff (Section 2.4, as in Example (A definition used in both directions); the rules are Definition 2.4.1). At 4, E is true and T false: not balanced. At 6, both are true: balanced. At 7, both are false: balanced. At 9, E is false and T true: not balanced.

  • (b) Left to right; the classical line is line 2, LEM (Proposition 2.5.3 as a derived rule):

1E↔T
2E∨¬ELEM
3Easm, for ∨E
4T↔E 1, 3
5E∧T∧I 3, 4
6(E∧T)∨(¬E∧¬T)∨I 5
7¬Easm, for ∨E
8Tasm, for ¬I
9E↔E 1, 8
10⊥¬E 9, 7
11¬T¬I 8–10
12¬E∧¬T∧I 7, 11
13(E∧T)∨(¬E∧¬T)∨I 12
14(E∧T)∨(¬E∧¬T)∨E 2, 3–6, 7–13

Right to left, with no classical line:

1(E∧T)∨(¬E∧¬T)
2E∧Tasm, for ∨E
3Easm, for ↔I
4T∧E 2
5Tasm, for ↔I
6E∧E 2
7E↔T↔I 3–4, 5–6
8¬E∧¬Tasm, for ∨E
9Easm, for ↔I
10¬E∧E 8
11⊥¬E 9, 10
12T⊥E 11
13Tasm, for ↔I
14¬T∧E 8
15⊥¬E 13, 14
16E⊥E 15
17E↔T↔I 9–12, 13–16
18E↔T∨E 1, 2–7, 8–17

The classical line of these derivations is in the left-to-right direction, the LEM at line 2. There the goal is a disjunction neither of whose sides holds for every balanced n (at n=7 the left fails, at n=6 the right): the case “When RAA earns its place” names.

Exercise (R3)

Let n be an integer, P: “n is a multiple of 6”, Q: “n is even”, so that P→Q is true. For each statement, say whether it follows from P→Q by the rules so far, naming the result that gives it, or break the step from P→Q to it at a value of n: (i) ¬Q→¬P; (ii) Q→P; (iii) ¬P→¬Q; (iv) ¬P∨Q; (v) P→(P∧Q); (vi) P↔Q. Which of the derivations you cite uses a classical line (RAA, ¬¬E or LEM)?

Solution.

  • (i) Follows: Proposition 2.3.2 (CP).

  • (ii) Breaks at n=2: P→Q is true, Q is true and P false, so Q→P is false.

  • (iii) Breaks at n=2: ¬P is true and ¬Q false.

  • (iv) Follows: Proposition 2.5.6, the direction P→Q⊢¬P∨Q, whose derivation in this section uses LEM. It is the one cited derivation with a classical line.

  • (v) Follows, with no classical line:

    1P→Q
    2Pasm, for →I
    3Q→E 1, 2
    4P∧Q∧I 2, 3
    5P→(P∧Q)→I 2–4
  • (vi) Breaks at n=2: P is false and Q true.

The breaks are of the step with this P and Q: at n=2 the premise is true (a multiple of 6 is 6k=2(3k), so P→Q holds for every n) and the conclusion false, so the form is bad.