Appendix B Notation and Some Example Arguments
In this appendix I’ll prove some lemmas using only the basic inference rules in Chapter 3.Footnote 1 Most importantly, I’ll introduce a useful and intuitive way of reasoning about conditional logical possibility: inner
arguments.
B.1 Inner Diamond
Let us start with the Inner Diamond lemma (Lemma B.1), which will help us capture natural reasoning about conditional logical possibility in a more intuitive manner. Specifically, while the Importing (Axiom 8.6) and Logical Closure (Axiom 8.7) axioms capture the intuition that we can deploy our normal tools of reasoning to infer what further facts must be true in some particular logically possible context, using them directly would force us to carry unwieldy long conjunctions of all facts we’ve derived are logically possible through our proofs. The Inner Diamond lemma justifies our use of more natural mathematical reasoning.
The intuition behind the Inner Diamond lemma is that reasoning like the following is valid:
Suppose we know the following. There are at least three cats. And it’s logically possible, given what cats there are, that every cat is sleeping on a distinct blanket. What else must be true in this logically possible scenario? We can “import” the fact that there are at least three cats (since any scenario which preserves the structural facts about how cathood applies must preserve this fact). So, by first-order logic, this possible scenario must be one in which there are at least three blankets. Thus, it is logically possible, given the facts about what cats there are, that there are at least three blankets.
Lemma B.1 (Inner Diamond). If
and
, where every element of
is a sentence content-restricted to
, then
.
Proof. Consider a scenario where the antecedent of the lemma is true. Assume that
. Then we have
by the first assumption. By successive applications Importing (Axiom 8.6) to each of the sentences
in
, we have
. Now by Logical Closure (Axiom 8.7) and the fact that
we can get
. Thus
, as desired. ■
We note that this lemma supports the following kind of reasoning (as illustrated in the above example).
We derive some sentence of the form
from the assumptions
. For instance, in the example above
would be the claim that “every cat slept on a distinct blanket” and
would just be the predicate cat. We then wish to reason about the “world” whose possibility is guaranteed by the fact that
, e.g., the possible world which holds fixed (the structure of) the application of cat and at which every cat slept on a distinct blanket. In that world
(every cat slept on a distinct blanket) is true as is, intuitively, every fact content-restricted to
true in the actual world. For instance, in the example above the fact that there are at least three cats is also true in that world (we refer to the act of taking a sentence content-restricted to
and concluding it holds at the world whose logical possibility is asserted by
as importing). We then use proof rules to derive some desired conclusion
from
and the set of “imported” sentences
. For instance, in the above example,
is the sentence asserting there are at least three blankets. Intuitively,
must also be true in the logically possible world under consideration and thus
must be actually true. In the example above,
would just contain the sentence asserting that there are at least three cats. Since
and all sentences in
are content-restricted to
this intuition is born out rigorously since the above lemma establishes that
.
B.2 Natural Deduction with Inner Diamond Arguments
Since the process of entering
contexts, i.e., using Inner Diamond (Lemma B.1) to reason about what else must be true in a particular logically possible scenario, is unfamiliar and can be a bit tricky, I will informally introduce a natural deduction system for the notion of proof defined in Chapter 8 together with some notational conventions which make it easier to keep track of arguments like the one above (especially in contexts where one must make multiple Inner Diamond arguments within one another).
This system is loosely based around that used by Reference GarsonGoldfarb (2003) and I follow his system in citing the line numbers justifying each inference rule to the left of the name of the inference rule, while indicating the assumptions a line depends on by placing those line numbers in brackets (line numbers not in brackets are the lines cited as immediate justification for the current inference). So, for example, we write down
on line
of a proof when rule
allows us to conclude
from lines
and the cumulative set of assumptions from which we’ve established
are the sentences on lines
and
. Note that this system satisfies the principle that if
appears on some line of the proof and
is the set of sentences appearing on the lines listed in brackets next to
then
.
However, my system differs from Goldfarb’s in two primary ways. First, I will allow any purely first-order deduction to be compressed into a single FOL rule. However, I will still sometimes explicitly make use of
to infer
in cases where
can only be inferred from
via modal reasoning. I will also use Ass. to indicate that a new assumption is being made.
Second, all modal axioms and axiom schema proposed in Chapter 8 are taken to be logical truths. So, any instance of these axiom schemata can be written down with no associated citations or assumptions. And, to save time, any instance of an axiom schema with the form
may instead be regarded as an inference rule allowing us to infer
from
(citing the line containing
as a justification). For example, this is an acceptable deduction of
:

This is also an acceptable deduction of the same fact:

Third, and most distinctively, I will introduce a special context called a
context (nestable to arbitrary depth) corresponding to reasoning via Inner Diamond (Proposition B.1), i.e., reasoning about what else must be true within some scenario which is known to be (conditionally) logically possible. I will graphically indicate what sentences are being asserted or assumed within this context by indentation and a sideways T labeled with a
to indicate this context.
So, for example, we can represent the following extremely short Inner Diamond argument:
Given what cats and hunters there are, it’s logically possible that something is both a cat and a hunter. Any possible situation in which something is both a cat and a hunter, must be a situation in which something is either a cat or a hunter. Therefore, given what cats and hunters there are, its logically possible that something is either a cat or a hunter.
with a proof that looks like this:

The vertical line going from 2–3 above indicates those lines occur inside a special context. I call this a
context to indicate that these lines contain reasoning about what must be true within a logically possible scenario in which
, while all the structural facts about, how cathood applies, are preserved.
What are the rules for writing things down in this context? Recall that the Inner Diamond (Proposition B.1) lemma says that if we have one conditional possibility claim
, and some facts
which are content-restricted to the relations being held fixed, then if we can show that any such possible scenario where
must also be one where
(by showing
), we can infer the corresponding conditional logical possibility clam for
.
The key idea will be to use indentation and the Fitch-style sidewise T to graphically distinguish a main line of argument which goes from
(where the sentences
are content-restricted to
) and
and then
, from a supporting subproof which shows that
and thereby justifies the latter inference.
In the latter subproof (which I indent and mark off as a separate context) we are, in essence, attempting to milk new consequences from our knowledge that
, by thinking about what else must be true in a possible (
) situation where
. Thus, I will call beginning such a subproof “entering the
context” (associated with some claim
that was established on a previous line), and thereby beginning an Inner Diamond (Lemma B.1) argument.
One will only be permitted to import those claims
from the main line of argument (thereby assuming they continue to hold in the current context) which are content-restricted to the relevant list of relation
. And we will only be allowed to close the Inner Diamond context, i.e., dropping back one level of indentation and writing down
, if we have proved that
holds inside the Inner Diamond context, by showing that it follows from the initial assumption that
and some facts
which we were allowed to import because they were content-restricted to
.
Reasoning inside a
context proceeds just as it does normally, with the exception that each line in the context must either be our initial assumption that
(where
is the sentence that opened the diamond context), an instance of “importing” (where the sentence must be imported from the parent context) or be deducible from previous lines within this exact
context.
While the operation of In
I is rather straightforward, I’ll call attention to one detail. Note that besides line
we wrote
rather than
as one might expect. We do this to maintain the property that if
is written on a line it is deducible from the lines written in brackets next to it.Footnote 2
One can leave the
context above by going from knowledge that
holds within this context to the conclusion that
holds outside it. We indicate this inference pattern via the rule In
E. This is the only way to introduce a sentence into the current context based on activity in a child context.Footnote 3
B.3 Example of Inner ◊ with Importing
We can also capture the reasoning in the slightly more complicated argument below, where we use knowledge of suitably content-restricted claims about the actual world to draw consequences from a modal claim.Footnote 4
It’s logically possible, given what cats there are, that each slept on a distinct blanket. There are at least three cats. Therefore, it’s logically possible, given what cats there are that there are at least three blankets:

B.4 Box Inference Rules
Although the
is not an official item in our symbolism, but merely an abbreviation for
, it is often helpful to reason in terms of it. Earlier we proved a couple of rules regarding
inferences and here we present several more.
First, I present an introduction rule for
.
Lemma B.2 (
I). If
and every
is a sentence content-restricted to
then
.
Proof. Suppose for contradiction that
are as above, but the lemma fails, i.e.,
. By Inner Diamond (Lemma B.1) with
and
, we can infer
as
. Hence, by
Elimination (Axiom 8.2) we can export the contradiction. Hence,
as desired. ■
Now I give the corresponding elimination rule.
Lemma B.3 (
Elimination).
.
Note that I prove a stronger version of this result in Section H of the online appendix that allows arbitrary substitution of relations when eliminating the box and, for ease of reading, I will also refer to that result as
Elimination.
Proof. Assume the claim fails. We can derive contradiction immediately by applying
Introduction (Axiom 8.1) to
to derive
, which is
. We can write this in terms of the natural deduction system presented above as follows:

■
To give a more visceral sense of how proofs using this logical system work, see Section B.6 where I prove two lemmas which mirror results in set theory (which can be found in elementary texts like Reference JechJech (1978)).
B.5 ◊ Reducing and □ Expansion
Using first-order logic and the basic principles in Chapter 8 we can prove various useful lemmas.
The Reducing lemma (Lemma B.4) (together with
E) vindicates intuitive reasoning along the following lines. Suppose it’s logically possible, given the facts about friendship and enmity in the actual world, that something has a frenemy (i.e., there are items
and
such that
is the friend of
and
is the enemy of
). Then it’s logically possible given (just) the facts about friendship in the actual world that something has a frenemy.
Lemma B.4 (Reducing). If
then
,
Proof. First note that if
then any sentence of the form
is content-restricted to
.
Assume that
. We have
, by
Introduction (Axiom 3.1). So, by Logical Closure (Axiom 3.7), we have
. Then by
Elimination (Axiom 3.2) we can conclude that
(since
is content-restricted to
). Thus, we have
. ■
We note that this immediately entails a corresponding expansion property for sentences under the
.
Lemma B.5 (Box Expanding). If
then
.
Proof. Assume that
and suppose for contradiction that
, hence
. By the Reducing lemma (Lemma B.4) we can infer
, which contradicts our assumption that
. ■
B.6 Lemmas about Well-Orderings
To give a more visceral sense of how proofs using my logical system work, I’ll now prove two lemmas which mirror results in set theory (which can be found in elementary texts like Reference JechJech (1978)). In each case, I will make an argument verbally, and then follow it up with an argument using the formal notation (making explicit when we enter and leave Inner Diamond contexts).
Elsewhere I will present proofs in a more informal style. However, I hope the completely explicit proofs in this section will help the reader understand how these informal proofs can be expanded into a formal argument.
B.6.1 Reconstructing Well-Orderings: Part I
Jech’s version of the first lemma I am going to prove says the following:
“If
is a well-ordered set and
is an increasing function, then
for each
.” (Reference JechJech 1978)
We can write a version of Jech’s Lemma follows (see Section E of the online appendix for the definition of a well-order):
Lemma B.6 If
is an embedding of the well-order
into itself then
.
We define embedding as follows:
Definition B.1 (Definition of Embedding). A two-place relation
is an embedding of
into
iff:
is a function (remember we define what it takes for a relation to qualify as a function in Section A.1)
i.e.,
maps all of
into
, i.e.,
respects
.
Remember that we’ve defined function so that the function
is a convenient way of talking about the relation
satisfying
.
As usual, I will sometimes abbreviate the claim that
as
.
Proof. To prove this, we will use essentially the same reasoning which Jech uses to prove his set theoretic version of this claim.
Assume that
is an embedding of
into itself, as per the statement of the lemma. And suppose, for contradiction, the lemma fails. As in Jech’s proof, our aim will be to use the properties of well-orderings to derive the existence of a
least counterexample, i.e., an
in
such that
and derive contradiction from this.
Applying Simple Comprehension (Axiom 8.4) to
tells us it would logical possible – while holding fixed the facts about how
apply in the situation we are currently considering – for the predicate
apply to just such counterexamples. That is:

Now we can enter this
context, i.e., begin an Inner Diamond (Lemma B.1) argument, where we reason about what else must be true in a possible scenario where (the facts about
in our original scenario are held fixed but) we also have:

Now the premises of the lemma (that
is an embedding of
into itself and
a well-order) and the assumption that the conclusion of the lemma fails are all implicitly context restricted to
(seen by appropriately restricting all the quantifiers). So, all of these statements must all remain true in this new context and can by imported into this context.
Thus, we can infer that
is non-empty, from the assumption that the lemma fails, i.e.,
, together with the fact that
.
We know that
is a well-ordering, and the least element condition from the definition of well-ordering (Definition E.2 in the online appendix) says the following:

So, by
Elimination (Lemma B.3) we can infer the existence of a least counterexample
, i.e.,

Now let
. By our assumption that
is an embedding (and thus must respect
) it follows from
that
. So, by the equation specifying the extension of G above we can infer that
. Thus,
is an satisfies
and is less than
. Contradiction
.
Exiting the above
context (i.e., completing our Inner Diamond argument), we get
. And from this
follows by
Elimination (Axiom 8.2) (remembering that
is content-restricted to the empty list). Hence, the desired conclusion follows by contradiction. ■
Intuitively speaking, the argument above shows that the if there were a counterexample to the lemma then it would be logically possible (indeed logically possible, while holding fixed the
facts!) for the canonical contradiction
to be true. But it’s not logically possible for
to be true. So, there is no counterexample to the lemma.
Representing this proof in terms of our natural deduction system:

B.6.2 Reconstructing Well-Orderings: Part 2
Reference HorstenJech (1978) writes, “No well-ordered set is isomorphic
to an initial segment
of itself.” We can state the claim to be proved using the definition of isomorphism (Definition 7.4) from Chapter 7.
Lemma B.7 If
is a well-ordering and there is some
in
such that
applies to just those
in
then
.
Proof. Let
be as in the lemma and suppose for contradiction that
. Using Inner Diamond (Lemma B.1) we can enter this
context. We can import the fact
is a well-order (because it is content-restricted to
and
). By first-order logic and unpacking definitions we can infer from the fact that
isomorphically maps
to
that
is an embedding of
into
. And, by the assumptions about
above, this implies that
is an embedding of
into
.
Now, to get contradiction, note that by Lemma B.6 (all instances of which are provable from empty premises, hence provable in any
context)
does not map any object satisfying
strictly
-below itself. However, we know there is an object
satisfying
which is
all objects satisfying
and that
. It follows by first-order logic that
maps this
to some
. Thus, we have derived contradiction/the false (
) from premises which would have to obtain in this (supposedly) logically possible scenario.
As before, we can conclude this inner
argument and returning to our original context with the conclusion that
. And from this
follows by
Elimination (Axiom 8.2).
This completes our proof by contradiction that there can be no
isomorphically mapping
to a proper initial segment of itself. ■
We can use the natural deduction system to expose the modal reasoning within this argument, as follows:

B.7 Pasting and Collapsing
Finally, I will conclude this chapter with two lemmas involving more complex modal reasoning using multiple
contests. The first lemma tells us when two logically possible facts can be inferred to be jointly possible.
One cannot generally infer from
and
to
. Consider the case where
says there are exactly eight million things and
says there are exactly nine million things. However, the Pasting lemma (Lemma B.8) says that one can make this inference in the special situation when the sentences
and
are content-restricted so that they can only make claims about the objects satisfying some disjoint lists of relations
and
(and how these relate the actual
-structure, which both
and
preserve).
Lemma B.8 (Pasting). Let
,
and
be pairwise disjoint sets of relations. If
, where
is content-restricted to
and
, where
is content-restricted to
, then
.
Intuitively speaking, the facts about content-restriction above ensure that attempting to make the sentences inside both possibility claims true at the same time cannot impose conflicting demands. For the only relations whose extensions are relevant to the truth of both sentences are the relations on the list
. And our assumptions say that it’s possible to make each interior sentence true while fixing the actual application of these relations.
Proof. Let
be content-restricted to
and
to
, as per the antecedent:

Informally, this deduction corresponds to the following reasoning. Assume that
and
We can prove our claim by making two nested Inner Diamond (Lemma B.1) arguments.
First enter the (
) context associated with
. That is, consider what else must be true in any such possible (
) situation where
. In this situation
must remain true, for it is content-restricted to
, and we are considering a scenario which preserves the
facts. By
Ignoring (Axiom 8.3) it follows that
.
Now enter this second, interior,
context. That is, consider what must be true in a further possible scenario where
is true while all facts about how relations
applied in the scenario we previously considered are preserved. Here we clearly have
. But we can import the fact that
from the previous context, because it is content-restricted to
. So we can deduce
.
Now, leaving this inner
context, we can conclude that
. And we can infer that that
by
Ignoring (Axiom 8.3) (because
is clearly a sublist of
).
So, leaving the larger
context we can conclude that
holds in the situation we were originally considering.
Finally, because
is content-restricted to
, we can use
E to draw the desired conclusion
. ■
The other lemma concerns when we can collapse multiple logical possibility operators into a single operator.
Lemma B.9 (Diamond Collapsing). If
then
.
Proof. To prove the left to right direction, suppose that
. Enter the
context. In this context we have
. Since
, by Reducing (Lemma B.4) we can infer
. Exiting the
context, we have
in our original contest. So, we can apply
Elimination (Axiom 8.2) to infer
.

To prove the other direction, suppose that
. Entering this diamond context, we have
and can infer that
by
Introduction (Axiom 8.1). So, completing our Inner Diamond argument gives us
.

We also observe that there is a corresponding
version of the above lemma.
Lemma B.10 (Box Collapsing). If
then
.
Proof. Note that this is equivalent to proving

which is just

This is true by Diamond Collapsing (Lemma B.9). ■
1 Before beginning, let me note a technical point about how I will talk about lemmas. Consider the trivial lemma whose content is
. We don’t regard the proof of this lemma as merely establishing the fact that for some particular relation, e.g., redness, if there is some red thing then there is some red thing. Rather, we regard the lemma as standing in for the fact that this result is provable for any one-place relation or, alternately, as proving that the claim in the lemma is logically necessary.
Indeed, we will see shortly if we can prove
without any premises we can infer
and then (as we will also see below) substitute the relations under the
and then eliminate it.
Thus, we allow deducing the fact that
from the trivial lemma asserting that
. This resembles the situation in first-order logic where we prove that substitution of bound variables preserves truth-value, and then don’t pay much attention to the particular bound variables used to express results.
2 To this end we treat the initial line in each
context and every line introduced via importing (see below) as if they were assumptions inside that context. However, we mark these assumptions with an asterisk since they are justified assumptions (it’s safe to assume they are true in the
context) and must be replaced with the line numbers from the parent context when we leave the
context.
In accordance with this idea, a sentence
can be written down inside the “
context” governed by the claim that
, iff:
for some
which is content-restricted to
and occurs on an earlier line in the proof which is in the same context as the
statement used to introduce this Inner Diamond context. (I will, as usual, sometimes elide the steps needed to transform implicitly content-restricted sentences into first-order logically equivalent explicitly content-restricted sentences.)
follows from previous lines within this
context by one of the axioms or inference rules for reasoning about logical possibility presented in this book.
3 Note that In
E may not be applied to any line with uncancelled (unstarred) assumptions introduced in the context being closed. Moreover, In
E must take each starred line number
on the line on which
appears (here that’s line 3 and
is
) and replace it with the assumptions of the line (in the current context) used to justify line
. For instance, in the current case the only (starred) assumption for line 3 is line 2. Looking at line 2 we see that it is justified by reference to line 1 (which is in the current context). So we copy the line numbers in brackets on line 1 into the brackets on line 4 (in this case that’s just 1).
4 Note that the sentence on line 2 “There are at least three cats” is content-restricted to
(assuming that this abbreviates an FOL statement in the usual Fregian fashion). This fact allows us to import it into our reasoning about what the possible scenario where each cat slept on a different blanket must be like on line 4.
Also note that on line 5 we have proved “there are at least three blankets” with only assumptions
(which are starred because they were introduced by Inner Diamond introduction or importing). Thus, we have shown that the conclusion that there are at least three cats follows from things we are entitled to assume about any logically possible scenario witnessing the truth of the sentence on line 1. So we can apply In
Elimination to complete our Inner Diamond argument, and conclude that
(There are at least three blankets).
Finally, note that the assumption line numbers listed for our conclusion are
. For these are the assumptions needed for the claims about the actual world (namely the sentences on lines 1 and 2), which entitle us to assume that the possible scenario considered on lines 3–5 satisfy the assumptions on lines
and
, which imply there are more than three blankets.
See Appendix G in the online appendix for an explicit formal statement of this natural deduction system, and a demonstration that proofs in it obey the notion of provability above.