Prerequisites. Direct starred prerequisites: none. No later core chapter depends on this route.
Suppose two separate groups of assumptions must establish the two parts of a resource-sensitive conjunction. Each group also contains an irrelevant assumption. A cartesian context permits discarding the irrelevant assumptions but forgets which group supplies which part. A linear context preserves the split but forbids discarding either assumption. The antecedent must therefore record both forms of grouping at once: cartesian structure within each group and a resource split between the groups.
One calculus of bunches
We use propositional intuitionistic BI without additive falsity.
Let 𝑝 range over a fixed countable set of atoms. Formulas are 𝐴,𝐵::=𝑝∣⊤∣𝖨∣𝐴∧𝐵∣𝐴∨𝐵∣𝐴→𝐵∣𝐴∗𝐵∣𝐴−∗𝐵. Here ⊤ is the additive truth constant and 𝖨 is the multiplicative unit. A bunch is a finite binary tree generated by Γ,Δ::=𝐴∣𝜖a∣𝜖m∣Γ;Δ∣Γ,Δ. The constructor Γ;Δ is additive. The constructor Γ,Δ is multiplicative. Their units are respectively 𝜖a and 𝜖m. A sequent has the form Γ⊢𝐴.
The two context constructors are not notational variants. The bunch (𝑃;𝑆),(𝑄;𝑇) has additive subtrees below a multiplicative root. The bunch 𝑃;(𝑄,𝑅) has a multiplicative subtree below an additive root. Both are legal, and neither is flattened.
A one-hole bunch context is a bunch with one distinguished hole, generated by C[−]::=[−]∣C[−];Γ∣Γ;C[−]∣C[−],Γ∣Γ,C[−]. The replacement C[Δ] fills its unique hole with Δ. A finite many-hole context M[−1,…,−𝑛] is a bunch expression in which the leaves may include the 𝑛 distinct numbered holes, each occurring exactly once. Write M[Δ𝑛] when every hole is filled by the same bunch Δ. For 𝑛=0, M[] is an ordinary bunch.
For example, let C[−]:=([−];𝑆),(𝑄;𝑇). Then C[𝑃]=(𝑃;𝑆),(𝑄;𝑇) and C[𝑃;𝑅]=((𝑃;𝑅);𝑆),(𝑄;𝑇). The hole lies inside an additive subtree, which itself lies inside a multiplicative bunch. This positional information will be the scope of weakening, contraction, and cut.
The structural congruenceΓ≡Δ is the least congruence generated by the two separate commutative-monoid theories (Γ;Δ);Θ≡Γ;(Δ;Θ),Γ;Δ≡Δ;Γ,Γ;𝜖a≡Γ,(Γ,Δ),Θ≡Γ,(Δ,Θ),Γ,Δ≡Δ,Γ,Γ,𝜖m≡Γ. Congruence means that Δ≡Δ′ implies C[Δ]≡C[Δ′]. Sequents are formed over congruence classes of antecedent bunches; hence Γ⊢𝐴 and Δ⊢𝐴 are the same sequent whenever Γ≡Δ.
No other equation is present. In particular, structural congruence does not contain distributivity, interchange, multiplicative weakening, multiplicative contraction, or 𝜖a≡𝜖m. The running bunch may be rearranged as (𝑃;𝑆),(𝑄;𝑇)≡(𝑆;𝑃),(𝑇;𝑄)≡(𝑄;𝑇),(𝑃;𝑆), but not as (𝑃,𝑄);(𝑆,𝑇).
Proof of Proposition 43.4 — Structural-congruence invariance
Proof. Antecedents are congruence classes by definition 43.3; the first statement is equality of sequents. The second is the congruence clause in the same definition. No logical or structural rule is required. ◻
★☆☆ Decide which of the following equations hold by structural congruence. For each positive case, give a chain of generating equations. For each negative case, name the forbidden principle it would require. (a)(𝐴;𝐵),(𝐶;𝐷)≡(𝐵;𝐴),(𝐷;𝐶),(b)(𝐴;𝐵),(𝐶;𝐷)≡(𝐴,𝐶);(𝐵,𝐷),(c)𝐴,(𝐵,𝜖m)≡𝐵,𝐴,(d)𝐴;𝜖m≡𝐴,(e)C[(𝐴;𝐵);𝐶]≡C[𝐴;(𝐶;𝐵)].
The rule system 𝖫𝖡𝖨0 below is the exact calculus used for the rest of the chapter. Identity is atomic; identity for compound formulas will be proved. Cut is not a primitive rule.
Every metavariable denotes a bunch or formula of definition 43.1. Every hole occurs once. No eigenvariable or freshness side condition is needed because the language is propositional. In Or-L, the same one-hole context C[−] occurs in both premises. In W and C, the structural change is exactly the semicolon at the unique hole of C[−].
The opening obstruction is now a derivation in 𝖫𝖡𝖨0. Its sequent is (𝑃;𝑆),(𝑄;𝑇)⊢𝑃∗𝑄. The assumptions 𝑆 and 𝑇 may be discarded inside their additive groups, while the multiplicative root keeps the two groups separate. The two applications of additive weakening followed by one multiplicative split give 𝑃⊢𝑃𝑃;𝑆⊢𝑃W𝑄⊢𝑄𝑄;𝑇⊢𝑄W(𝑃;𝑆),(𝑄;𝑇)⊢𝑃∗𝑄Star−R. Flattening the antecedent as a cartesian multiset would identify it with (𝑃,𝑄);(𝑆,𝑇), although that bunch separates different pairs. Flattening it as one linear sequence would leave 𝑆 and 𝑇 unusable. The two constructors retain exactly the missing distinction.
Proof of Proposition 43.6 — Scope of additive weakening and contraction
Proof. Apply W or C, respectively, at the displayed hole. Structural- congruence invariance permits reassociation and exchange inside the additive subtree before or after the application. Because the surrounding object is a one-hole bunch context, neither rule changes any multiplicative ancestor. ◻
Each new rule family can be read on a complete derivation. First, 𝑃⊢𝑃𝑄⊢𝑄𝑃;𝑄⊢𝑃∧𝑄And−R. Because 𝑃;𝑄≡𝑄;𝑃, structural-congruence invariance immediately gives the exchanged sequent 𝑄;𝑃⊢𝑃∧𝑄 with the same derivation. Additive contraction is already needed to duplicate a shared assumption: 𝑃⊢𝑃𝑃⊢𝑃𝑃;𝑃⊢𝑃∧𝑃And−R𝑃⊢𝑃∧𝑃C. The scope of additive weakening may be nested under a comma. Taking C[−]=[−],𝑄, rule W gives 𝑃,𝑄⊢𝑃∗𝑄(𝑃;𝑆),𝑄⊢𝑃∗𝑄W. The inserted 𝑆 is additive to 𝑃, but the 𝑃;𝑆 subtree remains multiplicatively separate from 𝑄.
The implication rules also differ only through their bunch constructor. Additive modus ponens is the complete derivation 𝐴⊢𝐴𝐵⊢𝐵𝐴;(𝐴→𝐵)⊢𝐵Imp−L. The semicolon permits additive weakening or contraction in any displayed subtree surrounding this application. By contrast, Wand-L combines its argument resource and function resource with a comma; no structural rule merges or discards those components.
★★☆ Give complete cut-free derivations of (𝑃;𝑆),(𝑄;𝑇)⊢𝑃∗𝑄and𝑃;(𝑄,𝑅)⊢𝑃∧(𝑄∗𝑅). In the first derivation, exhibit the two nested weakenings. In the second, identify the multiplicative split and the final additive rule. Then derive 𝑃,𝑄⊢(𝑃∧𝑃)∗𝑄 by first building the duplicated additive premise and making contraction the final load-bearing step in the left subtree.
There are no rules C[Δ]⊢𝐴C[Δ,Σ]⊢𝐴WmC[Δ,Δ]⊢𝐴C[Δ]⊢𝐴Cm. Nor can these transformations be obtained from structural congruence: the comma equations only reassociate, exchange, and remove 𝜖m.
If multiplicative weakening were admitted, then 𝑃⊢𝑃𝑃,𝑄⊢𝑃Wm𝑃∗𝑄⊢𝑃Star−L would prove 𝑃∗𝑄→𝑃. The two-element resource model in proposition 43.30 refutes this implication. If multiplicative contraction were admitted, identities followed by Star-R and Cm would derive 𝑃⊢𝑃∗𝑃, also refuted there.
Interchange is subtler. The transformation (𝐴,𝐶);(𝐵,𝐷)⟶Int(𝐴;𝐵),(𝐶;𝐷) would identify two additive proofs that may use different resource splits with one common split whose components satisfy both formulas. Its reverse is semantically valid; the displayed direction is not. Structural congruence contains neither direction.
★☆☆ For each proposed conclusion below, determine whether it follows by structural congruence, additive weakening, additive contraction, or no rule of 𝖫𝖡𝖨0. In every negative case, state the multiplicative structural principle that would be required.
𝑃;(𝑄,𝑅)⊢𝑄∗𝑅, from 𝑄,𝑅⊢𝑄∗𝑅.
𝑃,𝑄⊢𝑃, from 𝑃⊢𝑃.
𝑃⊢𝑃∗𝑃, from 𝑃,𝑃⊢𝑃∗𝑃.
(𝑃;𝑆),(𝑄;𝑇)⊢𝑃∗𝑄, from (𝑆;𝑃),(𝑇;𝑄)⊢𝑃∗𝑄.
The proposed interchange step from (𝐴;𝐵),(𝐶;𝐷)⊢(𝐴∧𝐵)∗(𝐶∧𝐷) to (𝐴,𝐶);(𝐵,𝐷)⊢(𝐴∧𝐵)∗(𝐶∧𝐷).
For (e), explain why a proof would need two potentially different multiplicative decompositions rather than one shared decomposition.
Because Id is atomic, the first admissibility argument must reconstruct identity for every connective. This prevents the cut proof from hiding compound identities as primitive axioms.
Put |𝑝|=|⊤|=|𝖨|=1,|𝐴∘𝐵|=|𝐴|+|𝐵|+1 for ∘∈{∧,∨,→,∗,−∗}. The height ℎ(D) of a derivation is one for a zero-premise rule and one plus the maximum premise height otherwise. For a displayed multicut with left derivations D𝑖:Δ𝑖⊢𝐴 for 1≤𝑖≤𝑛 and right derivation E:M[𝐴1,…,𝐴𝑛]⊢𝐵, its rank is 𝜌((D𝑖)𝑛𝑖=1,E;𝐴):=⎛⎜
⎜
⎜⎝|𝐴|,ℎ(E),𝑛∑𝑖=1ℎ(D𝑖)⎞⎟
⎟
⎟⎠, ordered lexicographically. The separate right-height component is essential: contraction in the right derivation may duplicate a numbered hole, increasing the final sum, while still strictly decreasing ℎ(E).
Proof. Induct on 𝐴. Atoms use Id. The two units use their right and left rules: 𝜖a⊢⊤⊤⊢⊤Top−L𝜖m⊢𝖨𝖨⊢𝖨I−L. For conjunction and multiplicative conjunction, use the induction hypotheses in the corresponding right rule, then expose the two assumptions with the left rule: 𝐴⊢𝐴𝐵⊢𝐵𝐴;𝐵⊢𝐴∧𝐵And−R𝐴∧𝐵⊢𝐴∧𝐵And−L,𝐴⊢𝐴𝐵⊢𝐵𝐴,𝐵⊢𝐴∗𝐵Star−R𝐴∗𝐵⊢𝐴∗𝐵Star−L. For disjunction, introduce the selected injection in each branch and eliminate the assumption: 𝐴⊢𝐴𝐴⊢𝐴∨𝐵Or−R1𝐵⊢𝐵𝐵⊢𝐴∨𝐵Or−R2𝐴∨𝐵⊢𝐴∨𝐵Or−L. For additive implication, Imp-L and the induction hypotheses give 𝐴;(𝐴→𝐵)⊢𝐵. Additive commutativity turns this into (𝐴→𝐵);𝐴⊢𝐵, and Imp-R yields 𝐴→𝐵⊢𝐴→𝐵. The wand case is the same calculation with comma: 𝐴⊢𝐴𝐵⊢𝐵𝐴,(𝐴−∗𝐵)⊢𝐵Wand−L𝐴−∗𝐵⊢𝐴−∗𝐵Wand−R, where multiplicative commutativity rewrites 𝐴,(𝐴−∗𝐵)⊢𝐵 as (𝐴−∗𝐵),𝐴⊢𝐵, the premise required by Wand-R. These cases exhaust the grammar. ◻
★★☆ Write the complete cut-free identity derivations for (𝑃∨𝑄)→𝑅,(𝑃∗𝑄)−∗(𝑅∧𝑆),⊤∗𝖨. Mark every use of structural congruence and every appeal to an induction hypothesis.
The required substitution operation replaces a displayed formula occurrence by the entire antecedent of a derivation. Contraction can duplicate that occurrence before the substitution is performed, so the induction is stated for a finite family of displayed occurrences.
For 𝑛≥0, the displayed multicut instance is D𝑖:Δ𝑖⊢𝐴(1≤𝑖≤𝑛)M[𝐴1,…,𝐴𝑛]⊢𝐵M[Δ1,…,Δ𝑛]⊢𝐵MCut. Here each 𝐴𝑖 denotes a numbered occurrence of the same cut formula 𝐴, not a distinct formula. The numbered holes of M determine exactly which occurrences are replaced, and hole 𝑖 is replaced by the antecedent of D𝑖. Other occurrences of the same formula are untouched. For 𝑛=0, the conclusion is the second premise. The ordinary one-hole cut is the case 𝑛=1; the repeated-derivation form with every D𝑖=D is an immediate specialization.
Proof of Theorem 43.10 — Displayed multicut admissibility
Proof. Induct on the rank 𝜌((D𝑖)𝑛𝑖=1,E;𝐴) from definition 43.7. The proof is organized into identity, commuting, one-sided principal, structural, and two-sided principal cases. Antecedents are congruence classes, so no congruence inference must be commuted: every rule instance may first be reassociated and exchanged until its displayed subtree is visible.
Identity cases.
If 𝑛=0, return E. If E is the atomic identity 𝑝⊢𝑝, its only displayed occurrence is the antecedent 𝑝=𝐴, and the required derivation is D1. If some D𝑖 is the atomic identity 𝑝⊢𝑝, remove hole 𝑖 from the family: replacing that occurrence by its antecedent changes no sequent. The third rank component strictly decreases unless this was the only hole, in which case return E.
Commuting through the right derivation.
Suppose no selected occurrence is principal in the last rule 𝑅 of E. Distribute the numbered holes among the premises, apply the induction hypothesis to every premise containing at least one hole, and reapply 𝑅. The cut formula is unchanged, but each recursive call uses a proper premise of E, so the second rank component decreases. The nonstructural distribution is as follows.
last rule
locations of selected occurrences in its premises
Top-L, I-L, And-L, Star-L, Imp-R, Wand-R
all holes occur in the unique premise
And-R, Star-R
the holes partition between the two antecedent premises
Or-R𝑖
all holes occur in its unique premise
Or-L
a hole in the surrounding context is copied to both branch premises
Imp-L, Wand-L
holes in the argument bunch occur in the first premise; holes in the surrounding context occur in the continuation premise
Identity was handled above, while W and C are handled separately below. Rules Top-R and I-R have antecedent units and therefore contain no selected formula occurrence unless 𝑛=0, which is the first identity case. For example, in the repeated-derivation specialization, if holes are split between the two premises of Star-R, D:Δ⊢𝐴E1:M1[𝐴𝑖]⊢𝐶E2:M2[𝐴𝑗]⊢𝐷M1[𝐴𝑖],M2[𝐴𝑗]⊢𝐶∗𝐷Star−RM1[Δ𝑖],M2[Δ𝑗]⊢𝐶∗𝐷MCut reduces to Star-R applied to the two recursively normalized premises. For Or-L, apply the induction hypothesis to both branches and reapply the same Or-L; both calls have smaller right height.
Commuting through the left derivation.
Choose one index 𝑖 such that the last rule 𝑅 of D𝑖 does not introduce the outer connective of 𝐴. Replace only member 𝑖 by each premise of 𝑅 whose succedent is 𝐴, recurse, retain any auxiliary premise with a different succedent, and reapply 𝑅 at hole 𝑖. The cut formula and right derivation are unchanged, while the sum of left heights strictly decreases. No logical right rule occurs in this case: every right rule of 𝖫𝖡𝖨0 introduces the outer connective of its succedent. The possible nonprincipal rules are therefore left rules, W, and C.
The premise distribution is exhaustive. A one-premise left or structural rule has one recursive premise. Suppose member 𝑖 ends in Or-L with premises D𝐿𝑖:K[𝐸]⊢𝐴 and D𝑅𝑖:K[𝐹]⊢𝐴, where K[−] is a one-hole bunch context and 𝐸,𝐹 are the disjuncts. Apply the induction hypothesis once to the family with member 𝑖 replaced by D𝐿𝑖, and once with it replaced by D𝑅𝑖. Rule Or-L combines the resulting derivations at occurrence 𝑖. If another member later also ends in Or-L, the outer induction repeats this construction in each existing branch. Thus two such members generate all four mixed choices, and 𝑛 such members generate the required 2𝑛 branches; the proof does not retain only the two homogeneous branches. For Imp-L and Wand-L, the argument premise proves the antecedent of the implication and is retained unchanged; only the continuation premise has succedent 𝐴 and is recursive. Thus no auxiliary premise is mistaken for a derivation of the cut formula.
As a representative one-premise commutation, suppose D ends in Star-L: D0:K[𝐶,𝐷]⊢𝐴K[𝐶∗𝐷]⊢𝐴Star−L. Replace member 𝑖 by D0 and recurse, obtaining a right derivation with K[𝐶,𝐷] at hole 𝑖 and all other replacements unchanged. Reapply Star-L at that hole to obtain K[𝐶∗𝐷]. This is exactly the required replacement for member 𝑖.
Additive weakening and contraction.
These cases are separated because contraction changes the number of displayed occurrences. Suppose E ends in W. Put every selected occurrence in the old subtree into one induction-hypothesis call on the premise. In the same rule instance, replace every selected occurrence in the newly added bunch Σ directly by its corresponding Δ𝑖, then reapply W. Thus one family may mix old and newly weakened occurrences: the old subfamily is handled recursively and the new subfamily is filled without a recursive cut because it was not used by the premise.
Suppose E ends in C[Ξ;Ξ]⊢𝐵C[Ξ]⊢𝐵C. Form one recursive family containing every selected occurrence outside Ξ once and, for every selected occurrence inside Ξ, both displayed descendants with the same corresponding derivation D𝑖. Apply the induction hypothesis once to that whole mixed family and reapply C. Hence a family may simultaneously contain outside holes and holes duplicated inside Ξ; no uniform-location assumption is being made. The right premise height has strictly decreased. Duplication may increase the third rank component, which is irrelevant after the second component has decreased.
If a selected D𝑖 ends in W or C, recurse with its premise in member 𝑖, then reapply the same structural rule at that hole. Again the sum of left heights decreases. The heterogeneous family statement keeps both copies in this single recursive call.
One-sided principal cases.
Assume occurrence 𝑖 is principal in the last left rule of E, but the last rule of D𝑖 is not the matching right rule. The last rule of D𝑖 then carries its succedent through a left or structural inference. Commute the multicut above that inference as in the left-derivation paragraph and reapply it at hole 𝑖. The third rank component decreases. Dually, if D𝑖 introduces 𝐴 but occurrence 𝑖 is not principal in the last rule of E, commute the cut above that last rule, decreasing ℎ(E). Thus the left-principal/right-nonprincipal and right-principal/left-nonprincipal cases each decrease the corresponding derivation height.
Other numbered occurrences in a principal case.
Before reducing the principal occurrence, push the cut into every proper premise of the final left rule for all other numbered holes. Those recursive calls retain the cut formula 𝐴 but use a smaller right-derivation height. In Or-L, a surrounding hole is processed in both branch premises; in Imp-L and Wand-L, holes are sent to the argument premise when the occurrence lies in its antecedent bunch, and otherwise to the continuation premise. After these calls, every nonprincipal occurrence has been replaced by its corresponding Δ𝑗, while the one principal occurrence remains exposed as the immediate subformula bunch of the left rule. Apply the one-occurrence principal reduction for that connective; its recursive cuts use proper subformulas of 𝐴. Thus a principal step with any finite number of additional holes first decreases the second rank component and then the first; no unlisted family of mixed principal/nonprincipal occurrences remains.
Two-sided principal units.
For 𝐴=⊤, the left derivation ends in Top-R and has antecedent 𝜖a; the right derivation ends in Top-L with premise C[𝜖a]⊢𝐵. Erase both rules and return that premise. The 𝐴=𝖨 case is identical with 𝜖m, I-R, and I-L.
Two-sided principal conjunctions.
For 𝐴=𝐶∧𝐷, the principal fragment is D1:Γ⊢𝐶D2:Θ⊢𝐷Γ;Θ⊢𝐶∧𝐷And−RE0:C[𝐶;𝐷]⊢𝐵C[𝐶∧𝐷]⊢𝐵And−LC[Γ;Θ]⊢𝐵MCut. The principal reduction records its rule pair on the transformation arrow: mcut𝐶∧𝐷(D,E)𝐴𝑛𝑑−𝑅/𝐴𝑛𝑑−𝐿⟼mcut𝐷(D2,mcut𝐶(D1,E0)). The first result has antecedent C[Γ;𝐷]; the second has C[Γ;Θ]. Both new cut formulas are proper subformulas of 𝐶∧𝐷. The 𝐶∗𝐷 reduction is the same tree with semicolons replaced by commas and And by Star; it yields C[Γ,Θ]⊢𝐵. Hence each recursive call has a strictly smaller first rank component.
Two-sided principal disjunction.
If D ends in Or-R1, retain the left premise of the final Or-L in E and cut D0:Γ⊢𝐶 into E1:C[𝐶]⊢𝐵. The formula 𝐶 is smaller than 𝐶∨𝐷. The Or-R2 case uses the right branch and cuts on 𝐷. The unused branch disappears because the injection has already selected a summand.
Two-sided principal additive implication.
Let the cut formula be 𝐶→𝐷. The last rules have premises D0:Γ;𝐶⊢𝐷,E1:Θ⊢𝐶,E2:C[𝐷]⊢𝐵. First cut E1 for the displayed 𝐶 in D0, obtaining Γ;Θ⊢𝐷. Then cut this result for 𝐷 in E2. The conclusion is C[Γ;Θ]⊢𝐵, which is congruent to the required replacement of 𝐶→𝐷 in C[Θ;(𝐶→𝐷)]. The two new cut formulas are 𝐶 and 𝐷, both smaller than 𝐶→𝐷. The two gains are visible in the annotated reduction: mcut𝐶→𝐷(D,E)𝐼𝑚𝑝−𝑅/𝐼𝑚𝑝−𝐿⟼mcut𝐷(mcut𝐶(E1,D0),E2).
Two-sided principal wand.
For 𝐶−∗𝐷, the premises are D0:Γ,𝐶⊢𝐷,E1:Θ⊢𝐶,E2:C[𝐷]⊢𝐵. Cut E1 into D0, obtaining Γ,Θ⊢𝐷, then cut that result into E2. The conclusion C[Γ,Θ]⊢𝐵 is congruent to the required replacement in C[Θ,(𝐶−∗𝐷)]. Again both recursive formulas are proper subformulas. Equivalently, the proof transformation is mcut𝐶−∗𝐷(D,E)𝑊𝑎𝑛𝑑−𝑅/𝑊𝑎𝑛𝑑−𝐿⟼mcut𝐷(mcut𝐶(E1,D0),E2).
Every case either decreases the right height, decreases the sum of left heights while preserving the first two components, or replaces the cut by cuts on proper subformulas. The lexicographic induction is therefore well founded. Its cases are identity; nonprincipal logical, weakening, and contraction rules; one-sided principal rules; and the two-sided principal connectives ∧,∨,→,∗,−∗,⊤,𝖨. ◻
If Δ⊢𝐴 and C[𝐴]⊢𝐵 are cut-free, then C[Δ]⊢𝐵 has a cut-free derivation. More generally, if M[𝐴𝑖]⊢𝐵 contains finitely many displayed formulas and Δ𝑖⊢𝐴𝑖 is cut free for each 𝑖, then successive displayed substitutions yield a cut-free derivation of M[Δ𝑖]⊢𝐵.
Proof of Corollary 43.11 — Displayed substitution and cut
Proof. The first statement is theorem 43.10 with one hole. For the second, induct on the finite list of formula families. The empty list leaves the given cut-free derivation unchanged. For a head family, apply the one-formula multicut theorem at its numbered holes to obtain a cut-free derivation, then apply the induction hypothesis to the remaining families. Because every replacement targets numbered holes, no unmarked occurrence changes. ◻
Proof. Induct on the derivation. The induction hypothesis gives a cut-free derivation for each premise. If the last rule belongs to 𝖫𝖡𝖨0, reapply it. If the last rule is Δ⊢𝐴C[𝐴]⊢𝐵C[Δ]⊢𝐵,corollary 43.11 gives a cut-free derivation of the conclusion. ◻
The running derivation gives a compact principal reduction. Let D𝑃𝑆:=𝑃⊢𝑃𝑆⊢𝑆𝑃;𝑆⊢𝑃∧𝑆And−R and let E contain the left additive subtree of (43.2): E:=R:(𝑃;𝑆),(𝑄;𝑇)⊢𝑃∗𝑄(𝑃∧𝑆),(𝑄;𝑇)⊢𝑃∗𝑄And−L. Cutting D𝑃𝑆 into E gives D𝑃𝑆E(𝑃;𝑆),(𝑄;𝑇)⊢𝑃∗𝑄Cut. The principal ∧ reduction replaces the cut occurrence 𝑃∧𝑆 by the antecedent bunch 𝑃;𝑆. It cuts the two identity premises of D𝑃𝑆 against the corresponding 𝑃 and 𝑆 leaves of R; both cuts erase by the identity equations, so the contractum is R:(𝑃;𝑆),(𝑄;𝑇)⊢𝑃∗𝑄.
★★★ Reconstruct the complete principal reductions for the following two cuts.
A Star-R/Star-L cut whose left premises are 𝑃⊢𝑃 and 𝑄⊢𝑄, and whose right premise is 𝑃,𝑄,𝑅⊢(𝑃∗𝑄)∗𝑅.
A Wand-R/Wand-L cut with cut formula 𝑃−∗𝑄, argument derivation 𝑆⊢𝑃, and continuation 𝑄;𝑇⊢𝑄∧𝑄.
For each recursive cut, give its formula, resulting antecedent, and strictly decreased rank component. In the second reduction, indicate the additive contraction needed to produce 𝑄∧𝑄.
The preceding proof is syntactic: its engine is displayed multicut. Frumin’s formalized proof gives an independent engine. It builds one BI algebra whose order remembers exactly cut-free derivability, proves ordinary algebraic soundness, and reflects the semantic inequality back to a cut-free proof. The algebraic route avoids a circular appeal to syntactic cut elimination: its order records cut-free derivability and its reflection map returns a cut-free proof. It does not use the resource-frame completeness theorem developed later in the chapter.
In this section Γ⊢cf𝐴 is a reminder that the derivation uses only 𝖫𝖡𝖨0; it denotes the same relation as Γ⊢𝐴, because Cut is not a rule of that calculus. The semantic replay uses the rules of definition 43.5 and the cut-free invertibility result below; it does not appeal to theorem 43.10, theorem 43.13. Let 𝖡𝗎𝗇𝖼𝗁 be bunches modulo ≡. Multiplicative composition is Γ∙Δ:=Γ,Δ,1∙:=𝜖m. It is a commutative monoid because comma is associative, commutative, and unital modulo structural congruence.
The syntax-to-syntax map 𝖿𝗈𝗋𝗆 is defined by 𝖿𝗈𝗋𝗆(𝐴)=𝐴,𝖿𝗈𝗋𝗆(𝜖a)=⊤,𝖿𝗈𝗋𝗆(𝜖m)=𝖨,𝖿𝗈𝗋𝗆(Γ;Δ)=𝖿𝗈𝗋𝗆(Γ)∧𝖿𝗈𝗋𝗆(Δ),𝖿𝗈𝗋𝗆(Γ,Δ)=𝖿𝗈𝗋𝗆(Γ)∗𝖿𝗈𝗋𝗆(Δ). This operation changes syntax into syntax; it is not semantic interpretation.
For every cut-free derivation, the implication right rules are invertible: Γ⊢cf𝐴→𝐵⟹Γ;𝐴⊢cf𝐵,Γ⊢cf𝐴−∗𝐵⟹Γ,𝐴⊢cf𝐵. The four formula left rules are also invertible, in every one-hole bunch context: C[𝐴∧𝐵]⊢cf𝐷⟹C[𝐴;𝐵]⊢cf𝐷,C[𝐴∗𝐵]⊢cf𝐷⟹C[𝐴,𝐵]⊢cf𝐷,C[⊤]⊢cf𝐷⟹C[𝜖a]⊢cf𝐷,C[𝖨]⊢cf𝐷⟹C[𝜖m]⊢cf𝐷. Consequently, C[𝖿𝗈𝗋𝗆(Γ)]⊢cf𝐷⟺C[Γ]⊢cf𝐷.
Proof of Lemma 43.15 — Cut-free invertibility, imported
Proof. The two right-rule implications are Frumin’s Lemma 3.2. The four left-rule implications are his Lemma 3.4, and the final collapse equivalence is his Corollary 3.5 [Fru22]. Each invertibility proof is an induction on derivation height. The principal case removes the displayed introduction; every other last rule is re-applied to the induction hypothesis. Atomic identity in definition 43.5 is essential: an unrestricted identity axiom would obstruct the compound left cases. From left to right, the final equivalence uses their invertibility; from right to left, it is an induction on Γ using the four left rules. Thus no cut theorem is imported through this lemma. ◻
For every formula 𝐴, put ⟨𝐴⟩:={Γ∈𝖡𝗎𝗇𝖼𝗁∣Γ⊢cf𝐴}. For 𝑋⊆𝖡𝗎𝗇𝖼𝗁, define cl(𝑋):=⋂{⟨𝐴⟩∣𝑋⊆⟨𝐴⟩}. A set 𝑋 is closed when cl(𝑋)=𝑋. Write UBI for the collection of closed sets. Thus UBI is precisely the closure of the principal theories under arbitrary intersections.
The definition gives extensivity, monotonicity, and idempotence directly. It also gives the adjunction used throughout the replay: cl(𝑋)⊆𝑌⟺𝑋⊆𝑌(𝑌∈UBI).
Proof of Lemma 43.17 — Structural closure properties
Proof. Write 𝑋=⋂𝑖∈𝐼⟨𝐴𝑖⟩. Membership of Γ means Γ⊢cf𝐴𝑖 for every 𝑖. Rule W gives Γ;Δ⊢cf𝐴𝑖, and C sends Γ;Γ⊢cf𝐴𝑖 to Γ⊢cf𝐴𝑖. The last equivalence follows pointwise from lemma 43.15, instantiated with the empty one-hole context. No cut is used. ◻
For arbitrary sets of bunches define 𝑋∙𝑌:={Γ,Δ∣Γ∈𝑋,Δ∈𝑌},𝖬𝖱𝖾𝗌(𝑋,𝑌):={Γ∣∀Δ∈𝑋.Γ,Δ∈𝑌},𝖠𝖱𝖾𝗌(𝑋,𝑌):={Γ∣∀Δ∈𝑋.Γ;Δ∈𝑌}. The two residuals differ at the displayed bunch constructor.
Proof of Lemma 43.18 — The two residuals are closed
Proof. Write 𝑌=⋂𝑗∈𝐽⟨𝐵𝑗⟩. The multiplicative residual has the principal-set presentation 𝖬𝖱𝖾𝗌(𝑋,𝑌)=⋂(Δ,𝑗)∈𝑋×𝐽⟨𝖿𝗈𝗋𝗆(Δ)−∗𝐵𝑗⟩. For left-to-right inclusion, membership gives Γ,Δ⊢cf𝐵𝑗; use lemma 43.15 to replace Δ by 𝖿𝗈𝗋𝗆(Δ), then apply Wand-R. For right-to-left inclusion, use the right invertibility and collapse clauses of that lemma in the reverse order. This proves equality and hence closedness. Replacing comma and Wand-R with semicolon and Imp-R gives 𝖠𝖱𝖾𝗌(𝑋,𝑌).
The multiplicative adjunction now unfolds: 𝑍∙𝑋⊆𝑌 iff 𝑍⊆𝖬𝖱𝖾𝗌(𝑋,𝑌). The additive adjunction needs the structural laws. Suppose 𝑍∩𝑋⊆𝑌 and Γ∈𝑍. For every Δ∈𝑋, weakening and additive commutativity give Γ;Δ∈𝑍∩𝑋, hence Γ;Δ∈𝑌; therefore Γ∈𝖠𝖱𝖾𝗌(𝑋,𝑌). Conversely, if 𝑍⊆𝖠𝖱𝖾𝗌(𝑋,𝑌) and Γ∈𝑍∩𝑋, then Γ;Γ∈𝑌, so contraction gives Γ∈𝑌. These are exactly parts 1 and 2 of lemma 43.17. Thus 𝑍∩𝑋⊆𝑌⟺𝑍⊆𝖠𝖱𝖾𝗌(𝑋,𝑌). The closure adjunction (43.4) permits closing the left-hand multiplicative product without changing its equivalence. ◻
On UBI, define ⊤UBI=𝖡𝗎𝗇𝖼𝗁,⊥UBI=cl(∅),𝑋∧UBI𝑌=𝑋∩𝑌,𝑋∨UBI𝑌=cl(𝑋∪𝑌),𝑋∗UBI𝑌=cl(𝑋∙𝑌),𝖨UBI=cl({𝜖m}),𝑋−∗UBI𝑌=𝖬𝖱𝖾𝗌(𝑋,𝑌),𝑋→UBI𝑌=𝖠𝖱𝖾𝗌(𝑋,𝑌). Atoms are interpreted by [[𝑝]]UBI=⟨𝑝⟩, and compound formulas by these operations.
Proof of Proposition 43.20 — Closed sets form a BI algebra
Proof. Arbitrary intersections make UBI a complete meet-semilattice; closing unions supplies joins and the displayed bottom. The additive implication is the right adjoint proved in lemma 43.18, so the additive structure is a bounded Heyting algebra.
Comma makes ∙ associative and commutative with unit {𝜖m}. The closure is strong: cl(𝑋)∙𝑌⊆cl(𝑋∙𝑌). To prove the inclusion, test membership against an arbitrary principal set ⟨𝐴⟩ containing 𝑋∙𝑌; the residual description of lemma 43.18 turns this premise into a closed set containing 𝑋, hence one containing cl(𝑋). The closure adjunction then lifts associativity, commutativity, and the unit to ∗UBI. The same lemma supplies its residual, proving the displayed BI adjunction. ◻
Proof. Induct on 𝐴. The atomic and unit cases are the definitions and their right rules. For 𝐵∧𝐶, the induction hypotheses put the leaf bunches 𝐵 and 𝐶 in their interpretations. Additive weakening puts 𝐵;𝐶 in both, using additive commutativity for the second one; the collapse clause of lemma 43.15 puts the leaf 𝐵∧𝐶 in their intersection. Conversely, an element of that intersection derives both 𝐵 and 𝐶, so And-R followed by contraction derives 𝐵∧𝐶.
For 𝐵∗𝐶, elements of the unclosed product have the form Γ,Δ with derivations of 𝐵 and 𝐶. Rule Star-R derives 𝐵∗𝐶, and closure extends this inclusion. The formula bunch 𝐵∗𝐶 itself belongs after putting 𝐵,𝐶 in the product and applying Star-L. The ∨ case uses the two right rules for inclusion and Or-L to place 𝐵∨𝐶 in the closed union. The implication and wand cases unfold the two residual descriptions, apply their right rules for the inclusion, and their left rules for membership of the formula bunch. These are all constructors of definition 43.1. ◻
Proof of Theorem 43.22 — Universal-algebra reflection
Proof. By lemma 43.21, the formula bunch 𝖿𝗈𝗋𝗆(Γ) belongs to its interpretation. The assumed inclusion puts it in [[𝐴]]UBI, and the other half of the Okada property gives 𝖿𝗈𝗋𝗆(Γ)⊢cf𝐴. Apply the cut-free bunch/formula equivalence of lemma 43.15. ◻
Let B be any BI algebra and interpret formulas by its bounded Heyting and residuated commutative-monoid operations. If Γ⊢cf𝐴, then [[𝖿𝗈𝗋𝗆(Γ)]]B≤B[[𝐴]]B. In the universal algebra, ≤UBI is set inclusion.
Proof of Theorem 43.23 — Algebraic soundness, imported
Proof. This is Frumin’s Theorem 4.3, seq_interp_sound[Fru22], restricted to the formula grammar of definition 43.1. Its proof is induction on the cut-free derivation. Additive weakening and contraction use monotonicity and idempotence of meet. The right implication rules use the two residual adjunctions, while their left rules use the corresponding counits and monotonicity. The unit and conjunction rules are their algebraic laws. Those cases cover every rule of definition 43.5; neither multicut nor cut elimination is an induction case. ◻
Proof of Corollary 43.24 — Semantic cut certificate
Proof.Theorem 43.23 applied to the two cut-free derivations gives [[𝖿𝗈𝗋𝗆(Δ)]]UBI⊆[[𝐴]]UBIand[[𝖿𝗈𝗋𝗆(C[𝐴])]]UBI⊆[[𝐵]]UBI. Induction on the one-hole bunch context, using monotonicity of meet and multiplicative product, replaces the occurrence of [[𝐴]]UBI by the smaller [[𝖿𝗈𝗋𝗆(Δ)]]UBI. Hence [[𝖿𝗈𝗋𝗆(C[Δ])]]UBI⊆[[𝐵]]UBI. Reflection, theorem 43.22, yields the cut-free conclusion. Thus this corollary re-derives the one-hole case of corollary 43.11 by a semantic engine. ◻
Mechanized replay.
This construction is Frumin’s Lemmas 3.2 and 3.4, Corollary 3.5, Theorem 4.3, Definitions 4.1–4.2, 5.1, 5.5, and 6.1; Theorem 5.8; Lemma 6.6; and Theorems 6.7–6.8 [Fru22]. Appendix D records the pinned revision and proof-object identifiers. Frumin’s pinned Coq artifact checks the universal algebra and semantic cut route. It does not establish the resource-monoid completeness result of section 43.11.
A proof that alternates the two context formers
The running sequent can be closed into one formula: 𝖬𝗂𝗑(𝑃,𝑆,𝑄,𝑇):=(𝑃∧𝑆)→((𝑄∧𝑇)−∗(𝑃∗𝑄)). Its proof is not obtained by placing additive and multiplicative symbols side by side. The derivation changes context discipline twice.
First derive the opening sequent R from (43.2). Then package each additive subtree with And-L: R:(𝑃;𝑆),(𝑄;𝑇)⊢𝑃∗𝑄(𝑃∧𝑆),(𝑄;𝑇)⊢𝑃∗𝑄And−L(𝑃∧𝑆),(𝑄∧𝑇)⊢𝑃∗𝑄And−L. Now the outer comma is visible to Wand-R, and the remaining formula assumption is visible to Imp-R: (𝑃∧𝑆),(𝑄∧𝑇)⊢𝑃∗𝑄𝑃∧𝑆⊢(𝑄∧𝑇)−∗(𝑃∗𝑄)Wand−R𝜖a⊢𝖬𝗂𝗑(𝑃,𝑆,𝑄,𝑇)Imp−R. The last premise of Imp-R is written 𝜖a;(𝑃∧𝑆), which is congruent to 𝑃∧𝑆.
Both constructors are load bearing. Replacing either inner semicolon in the opening derivation by a comma removes the weakening step that discards 𝑆 or 𝑇. Replacing the outer comma by a semicolon removes the context split required by Star-R and the comma required by Wand-R. Thus the formula proof alternates additive weakening, a multiplicative split, additive packaging, multiplicative abstraction, and additive abstraction.
★★☆ Derive (𝑃∧𝑆)→((𝑄∧𝑇)−∗((𝑃∧𝑃)∗(𝑄∧𝑄))). Your derivation must display the additive contractions that duplicate 𝑃 and 𝑄, the multiplicative split, both And-L steps, Wand-R, and Imp-R. Explain why changing the outer comma to a semicolon invalidates both Star-R and Wand-R, even though the intervening additive rules remain well formed.
A bunch is proof-theoretic syntax. Its comma will be interpreted by resource composition, but the bunch itself is not a resource. The distinction is fixed before any semantic calculation.
A resource frame is a tuple F=(𝑀,⪯,∘,𝑒) with the following data and laws.
(𝑀,⪯) is a preorder.
(𝑀,∘,𝑒) is a commutative monoid: (𝑚∘𝑛)∘𝑟=𝑚∘(𝑛∘𝑟),𝑚∘𝑛=𝑛∘𝑚,𝑚∘𝑒=𝑚.
Composition is monotone in both arguments: 𝑚⪯𝑚′,𝑛⪯𝑛′⟹𝑚∘𝑛⪯𝑚′∘𝑛′.
A valuation 𝑉 assigns to every atom 𝑝 an upward-closed subset of 𝑀: if 𝑚∈𝑉(𝑝) and 𝑚⪯𝑛, then 𝑛∈𝑉(𝑝). A resource model is a resource frame together with such a valuation, written (F,𝑉).
The preorder records intuitionistic accessibility. The monoid records a way to combine resources. The order need not be generated by the monoid, and 𝑚⪯𝑚∘𝑛 is not assumed. That omitted inequality is exactly why multiplicative weakening may fail.
For a resource model, the forcing relation𝑚⊩𝐴 is defined recursively by 𝑚⊩𝑝⟺𝑚∈𝑉(𝑝),𝑚⊩⊤⟺always,𝑚⊩𝖨⟺𝑒⪯𝑚,𝑚⊩𝐴∧𝐵⟺𝑚⊩𝐴and𝑚⊩𝐵,𝑚⊩𝐴∨𝐵⟺𝑚⊩𝐴or𝑚⊩𝐵,𝑚⊩𝐴→𝐵⟺∀𝑛⪰𝑚.(𝑛⊩𝐴⟹𝑛⊩𝐵),𝑚⊩𝐴∗𝐵⟺∃𝑥,𝑦.𝑥∘𝑦⪯𝑚∧𝑥⊩𝐴∧𝑦⊩𝐵,𝑚⊩𝐴−∗𝐵⟺∀𝑥.(𝑥⊩𝐴⟹𝑚∘𝑥⊩𝐵). The additive conjunction tests two formulas at the same world. The multiplicative conjunction exhibits two component worlds. Additive implication tests every accessible extension of the current world. Multiplicative implication tests every resource that can be composed with the current world. These quantifications are different even when the same atoms occur.
Proof. Induct on 𝐴. Atoms use valuation monotonicity. The clauses for ⊤,∧,∨ follow immediately from the induction hypotheses. For 𝖨, transitivity gives 𝑒⪯𝑚⪯𝑛.
Suppose 𝑚⊩𝐴→𝐵, 𝑚⪯𝑛, and 𝑟⪰𝑛. Then 𝑟⪰𝑚, so 𝑟⊩𝐴 implies 𝑟⊩𝐵.
Suppose 𝑚⊩𝐴∗𝐵 through 𝑥,𝑦 with 𝑥∘𝑦⪯𝑚. Transitivity gives 𝑥∘𝑦⪯𝑛, so the same witnesses establish 𝑛⊩𝐴∗𝐵.
Finally suppose 𝑚⊩𝐴−∗𝐵 and 𝑥⊩𝐴. Then 𝑚∘𝑥⊩𝐵. Monotonicity of composition gives 𝑚∘𝑥⪯𝑛∘𝑥, and the induction hypothesis for 𝐵 gives 𝑛∘𝑥⊩𝐵. Hence 𝑛⊩𝐴−∗𝐵. ◻
Recall the syntax-to-syntax map 𝖿𝗈𝗋𝗆 from definition 43.14. Write 𝑚⊩Γ as an abbreviation for 𝑚⊩𝖿𝗈𝗋𝗆(Γ). A sequent is valid in a model, Γ⊧F,𝑉𝐴, when ∀𝑚∈𝑀.(𝑚⊩Γ⟹𝑚⊩𝐴). It is valid, Γ⊧𝐴, when it is valid in every resource model. A formula 𝐴 is valid when the sequent 𝜖a⊧𝐴 is valid.
Double brackets are not used in definition 43.28: replacing bunch constructors by formula constructors is a syntax-to-syntax operation, not semantic interpretation. Structural congruence preserves 𝖿𝗈𝗋𝗆(Γ) up to formulas valid in every resource model, because ∧,⊤ and ∗,𝖨 separately satisfy the two commutative-monoid laws.
Proof of Lemma 43.29 — Monotonicity of bunch contexts
Proof. Induct on C[−]. The hole case is the hypothesis. For an additive parent, forcing is conjunction at the same world, so replace the hole component by the induction hypothesis and retain the other conjunct. For a multiplicative parent, write its forcing witness as 𝑥∘𝑦⪯𝑚, with the hole subtree forced at 𝑥 (or at 𝑦 for the other parent form). The induction hypothesis replaces 𝑥⊩Δ′ by 𝑥⊩Δ; the same 𝑥,𝑦 and inequality witness forcing of the rebuilt bunch. The additive and multiplicative left/right parent forms are covered by these two calculations. ◻
A finite calculation
Let 𝑀2={0,1,2},𝑚⪯𝑛⟺𝑚≤𝑛,𝑚∘𝑛=min(2,𝑚+𝑛),𝑒=0. This is a preordered commutative monoid. Put 𝑉(𝑃)=𝑉(𝑄)=𝑉(𝑆)=𝑉(𝑇)={1,2},𝑉(𝑍)={2}. All five sets are upward closed.
At world 1, additive conjunction shares the world: 1⊩𝑃∧𝑄. Multiplicative conjunction needs a split. It fails at 1, because two worlds forcing 𝑃 and 𝑄 are each at least 1, and their truncated sum is 2≰1. At world 2, the split 1∘1=2 works: 1⊮𝑃∗𝑄,2⊩𝑃∗𝑄.
The two implications also separate. For additive implication, 1⊮𝑃→𝑍because1⪰1,1⊩𝑃,1⊮𝑍, while 2⊩𝑃→𝑍. For multiplicative implication, 1⊩𝑃−∗𝑍becauseevery𝑥⊩𝑃has𝑥≥1,hence1∘𝑥=2⊩𝑍. At world 0, the witness 𝑥=1 shows 0⊮𝑃−∗𝑍. Thus additive implication asks what happens at larger versions of the same world; the wand asks what happens after composition with a separate resource.
The opening bunch is true at world 2. Choose the decomposition 1∘1=2; the left component forces 𝑃;𝑆, and the right component forces 𝑄;𝑇. Hence 2⊩(𝑃;𝑆),(𝑄;𝑇). The running formula is true at every world. To calculate its nonvacuous case, let 𝑛⪰𝑚 force 𝑃∧𝑆, and let 𝑥⊩𝑄∧𝑇. Then 𝑛⊩𝑃, 𝑥⊩𝑄, and 𝑛∘𝑥⪯𝑛∘𝑥. The same pair 𝑛,𝑥 witnesses 𝑛∘𝑥⊩𝑃∗𝑄. Therefore 𝑚⊩𝖬𝗂𝗑(𝑃,𝑆,𝑄,𝑇) for all 𝑚∈𝑀2. This calculation mirrors the additive weakening and multiplicative split in (43.2).
★★☆ In the model 𝑀2, determine the complete forcing sets of 𝑃∧𝑍,𝑃∗𝑍,𝑃→𝑍,𝑃−∗𝑍,(𝑃∗𝑄)→𝑍,𝑃−∗(𝑄−∗𝑍). For every multiplicative formula, list the decompositions or test resources that decide each world. Evaluate the opening bunch and 𝖬𝗂𝗑(𝑃,𝑆,𝑄,𝑇) independently rather than invoking soundness.
Proof of Proposition 43.30 — Weakening, contraction, and interchange fail
Proof. For weakening and contraction, take the commutative group 𝑀=ℤ2,⪯==,𝑚∘𝑛=𝑚+𝑛(mod2),𝑒=0, and put 𝑉(𝑃)=𝑉(𝑄)={1}. At world 0, the split 1∘1=0 shows 0⊩𝑃∗𝑄, while 0⊮𝑃. Thus 𝑃∗𝑄→𝑃 fails at 0. At world 1, 1⊩𝑃, but 1⊮𝑃∗𝑃: the only worlds forcing 𝑃 are 1,1, whose composition is 0, not 1. Hence 𝑃→𝑃∗𝑃 fails at 1.
For interchange, take 𝑀=ℤ3 with equality preorder and addition modulo three. Put 𝑉(𝐴)=𝑉(𝐶)={0},𝑉(𝐵)={1},𝑉(𝐷)={2}. At world 0, 𝐴∗𝐶 is forced by 0+0=0, and 𝐵∗𝐷 is forced by 1+2=0. Hence 0⊩(𝐴∗𝐶)∧(𝐵∗𝐷). But no world forces 𝐴∧𝐵, and no world forces 𝐶∧𝐷; therefore 0⊮(𝐴∧𝐵)∗(𝐶∧𝐷). This is exactly the semantic failure of (43.3). ◻
The two units are also distinct. In the ℤ2 equality model, world 1 forces ⊤ but not 𝖨, since 0≠1. Thus identifying 𝜖a with 𝜖m would be unsound.
★★☆ Construct a two- or three-world resource model refuting each proposed principle below. Give the carrier, preorder, monoid table, valuation, failing world, and complete forcing calculation. (𝑃∧𝑄)→𝑃∗𝑄,(𝑃−∗𝑄)→(𝑃→𝑄),⊤→𝖨. At least one countermodel must use a nontrivial preorder, and at least one must use an equality preorder on a finite group.
Proof. Induct on the derivation. We verify every rule family.
For Id, forcing of the atomic antecedent is forcing of the succedent. For Top-R, every world forces ⊤. For I-R, if 𝑚⊩𝜖m, then 𝑚⊩𝖨 by definition. The left unit rules are sound because 𝖿𝗈𝗋𝗆(𝜖a)=⊤ and 𝖿𝗈𝗋𝗆(𝜖m)=𝖨; use lemma 43.29.
For weakening, a world forcing Δ;Σ forces Δ. The induction hypothesis and lemma 43.29 therefore give the conclusion. For contraction, a world forces Δ;Δ exactly when it forces Δ, so the premise and conclusion antecedents have the same forcing set. These arguments apply at the unique occurrence selected by C[−], even when its semicolon lies under a comma.
For And-R, suppose 𝑚⊩Γ;Δ. Then 𝑚⊩Γ and 𝑚⊩Δ. The two induction hypotheses give 𝑚⊩𝐴 and 𝑚⊩𝐵, hence 𝑚⊩𝐴∧𝐵. For And-L, the formulas 𝐴∧𝐵 and bunch 𝐴;𝐵 have the same forcing set, so context monotonicity transports the premise. The two Or-R rules use the corresponding semantic injection. For Or-L, a world forcing the principal formula forces either 𝐴 or 𝐵; apply the matching branch induction hypothesis inside the same context.
For Imp-R, suppose 𝑚⊩Γ, let 𝑛⪰𝑚, and assume 𝑛⊩𝐴. Persistence gives 𝑛⊩Γ; therefore 𝑛⊩Γ;𝐴. The induction hypothesis for the premise yields 𝑛⊩𝐵. Hence 𝑚⊩𝐴→𝐵.
For Imp-L, suppose 𝑚⊩C[Δ;(𝐴→𝐵)]. First prove the pointwise implication ∀𝑤.𝑤⊩Δ;(𝐴→𝐵)⟹𝑤⊩𝐵. The first conjunct and the first induction hypothesis give 𝑤⊩𝐴; the implication clause at the reflexive extension of 𝑤 gives 𝑤⊩𝐵. Now lemma 43.29 gives 𝑚⊩C[𝐵], and the second induction hypothesis yields 𝑚⊩𝐷.
For Star-R, suppose 𝑚⊩Γ,Δ. There are 𝑥,𝑦 with 𝑥∘𝑦⪯𝑚, 𝑥⊩Γ, and 𝑦⊩Δ. The premise induction hypotheses give 𝑥⊩𝐴 and 𝑦⊩𝐵, so the same witnesses establish 𝑚⊩𝐴∗𝐵. For Star-L, the bunch 𝐴,𝐵 and formula 𝐴∗𝐵 have identical forcing clauses, and context monotonicity applies.
For Wand-R, suppose 𝑚⊩Γ, let 𝑥⊩𝐴, and consider 𝑚∘𝑥. The decomposition 𝑚∘𝑥⪯𝑚∘𝑥 shows 𝑚∘𝑥⊩Γ,𝐴. The premise induction hypothesis gives 𝑚∘𝑥⊩𝐵, so 𝑚⊩𝐴−∗𝐵.
For Wand-L, suppose 𝑚⊩C[Δ,(𝐴−∗𝐵)]. Establish the pointwise implication ∀𝑤.𝑤⊩Δ,(𝐴−∗𝐵)⟹𝑤⊩𝐵. Choose the displayed split 𝑥∘𝑦⪯𝑤. The first induction hypothesis gives 𝑥⊩𝐴; commutativity and the wand clause give 𝑥∘𝑦⊩𝐵, and persistence gives 𝑤⊩𝐵. Context monotonicity now yields 𝑚⊩C[𝐵], and the second induction hypothesis yields 𝑚⊩𝐷. The unit, structural, additive, multiplicative, and implication cases therefore all preserve forcing. ◻
Proof of Corollary 43.32 — Forbidden multiplicative structure is not admissible
Proof. If multiplicative weakening were admissible, the derivation displayed in section 43.3 would yield 𝑃∗𝑄⊢𝑃, and Imp-R would derive 𝑃∗𝑄→𝑃. If multiplicative contraction were admissible, Star-R followed by that rule would derive 𝑃⊢𝑃∗𝑃, hence 𝑃→𝑃∗𝑃.
If interchange were admissible in the direction (𝐴,𝐶);(𝐵,𝐷)⟶Int(𝐴;𝐵),(𝐶;𝐷), expose an assumption (𝐴∗𝐶)∧(𝐵∗𝐷) by And-L and two Star-L steps, apply interchange, derive 𝐴∧𝐵 and 𝐶∧𝐷 in the two comma components, and finish with Star-R and Imp-R. This would derive the third formula of proposition 43.30. Soundness contradicts the three finite countermodels there. ◻
The semantic calculation of 𝖬𝗂𝗑 above is now also an instance of theorem 43.31: applying soundness to the derivation (43.6) proves validity in every resource model, not only in 𝑀2.
Proof of Corollary 43.33 — Atomic non-derivability
Proof. Take the one-world monoid 𝑀={𝑒} with equality preorder and empty valuation 𝑉(𝑝)=∅. The world forces both bunch units: 𝑒⊩⊤ and 𝑒⊩𝖨. It does not force 𝑝. Thus both sequents are invalid, and soundness rules out derivations. ◻
★★★ Reprove soundness for Imp-L and Wand-L without referring to the main proof. For each rule, prove the pointwise implication from forcing its displayed hole bunch to forcing 𝐵, then name the exact invocation of lemma 43.29 that lifts it through C[−]. Record every split, commutativity, reflexivity, and persistence step. Then show directly that soundness of Wm would force validity of 𝑃∗𝑄→𝑃, contradicting proposition 43.30.
Selected completeness and the disjunctive boundary
The elementary term model is complete for the falsity-free fragment without ∨. Its disjunction case fails exactly where a world containing 𝐴∨𝐵 need not contain either disjunct; prime resources repair that step in the stronger construction.
Proof of Lemma 43.34 — A bunch and its represented formula
Proof. Induct on Γ. A formula bunch is immediate. For 𝜖a and 𝜖m, use the corresponding unit rules and identity expansion. If Γ=Δ;Θ, the induction hypotheses and And-R derive Δ;Θ⊢𝖿𝗈𝗋𝗆(Δ)∧𝖿𝗈𝗋𝗆(Θ). Rule And-L converts between the bunch and the represented conjunction in an arbitrary antecedent context. The comma case uses Star-R and Star-L in the same way. Cutting Γ⊢𝖿𝗈𝗋𝗆(Γ) into 𝖿𝗈𝗋𝗆(Γ)⊢𝐴 proves one implication; the left rules prove the other. Cut elimination removes the auxiliary cuts. ◻
Let L−∨ be the selected formula grammar with the ∨ clause removed.
For formulas 𝐴,𝐵∈L−∨, write 𝐴≃𝐵⟺𝐴⊢𝐵and𝐵⊢𝐴. Let [𝐴] be the equivalence class of 𝐴. Define [𝐴]⪯[𝐵]⟺𝐵⊢𝐴,[𝐴]∘[𝐵]:=[𝐴∗𝐵],𝑒:=[𝖨]. The canonical valuation is [𝐴]∈𝑉t(𝑝)⟺𝐴⊢𝑝.
The definitions in definition 43.35 are independent of chosen representatives. They form a preordered commutative monoid, composition is monotone, and 𝑉t is upward closed.
Proof of Lemma 43.36 — The term frame is well defined
Proof. Interderivability is an equivalence relation by identity expansion and cut. If 𝐴≃𝐴′ and 𝐵≃𝐵′, then 𝐴∗𝐵≃𝐴′∗𝐵′: derive 𝐴,𝐵⊢𝐴′∗𝐵′ by cutting the two component derivations into Star-R, then apply Star-L; the reverse direction is symmetric. Hence ∘ is well defined. The preorder is well defined because changing either representative composes derivations by cut.
Reflexivity and transitivity of ⪯ are identity and cut. The commutative-monoid equations follow from comma congruence, Star-R, Star-L, I-R, and I-L. For monotonicity, suppose [𝐴]⪯[𝐴′] and [𝐵]⪯[𝐵′], so 𝐴′⊢𝐴 and 𝐵′⊢𝐵. Rule Star-R followed by Star-L gives 𝐴′∗𝐵′⊢𝐴∗𝐵, hence [𝐴∗𝐵]⪯[𝐴′∗𝐵′].
Finally, if [𝐴]∈𝑉t(𝑝) and [𝐴]⪯[𝐵], then 𝐴⊢𝑝 and 𝐵⊢𝐴. Cut yields 𝐵⊢𝑝, so [𝐵]∈𝑉t(𝑝). ◻
Proof. Induct on 𝐵. The atomic case is the definition of 𝑉t. Every formula derives ⊤: start with 𝜖a⊢⊤ and weaken by 𝐴. Thus the ⊤ case agrees with forcing. For 𝖨, [𝐴]⊩𝖨⟺𝑒⪯[𝐴]⟺𝐴⊢𝖨.
For conjunction, the induction hypotheses give [𝐴]⊩𝐵∧𝐶⟺𝐴⊢𝐵and𝐴⊢𝐶. The right side is equivalent to 𝐴⊢𝐵∧𝐶: use And-R on two copies of 𝐴, then C; conversely, cut with the two projections obtained by And-L and additive weakening.
For additive implication, suppose 𝐴⊢𝐵→𝐶, [𝐴]⪯[𝐷], and [𝐷]⊩𝐵. Then 𝐷⊢𝐴 and 𝐷⊢𝐵. Cut the first derivation into 𝐴⊢𝐵→𝐶. Apply Imp-L using 𝐷⊢𝐵, cut the resulting formula occurrence, and contract the two additive copies of 𝐷; this gives 𝐷⊢𝐶. The induction hypothesis yields [𝐷]⊩𝐶.
Conversely, assume [𝐴]⊩𝐵→𝐶. Put 𝐷=𝐴∧𝐵. The formula 𝐷 derives both 𝐴 and 𝐵, so [𝐴]⪯[𝐷] and [𝐷]⊩𝐵. The semantic hypothesis and the induction hypothesis give 𝐴∧𝐵⊢𝐶. Cut the derivation 𝐴;𝐵⊢𝐴∧𝐵 into it and apply Imp-R; hence 𝐴⊢𝐵→𝐶.
For multiplicative conjunction, if [𝐴]⊩𝐵∗𝐶, choose [𝑋],[𝑌] with [𝑋∗𝑌]⪯[𝐴], 𝑋⊢𝐵, and 𝑌⊢𝐶. Thus 𝐴⊢𝑋∗𝑌. Cut the component derivations through Star-L and Star-R to obtain 𝐴⊢𝐵∗𝐶. Conversely, if 𝐴⊢𝐵∗𝐶, choose the worlds [𝐵] and [𝐶]. The inequality [𝐵∗𝐶]⪯[𝐴] is exactly the assumed derivation, and identities force the two components.
For the wand, first suppose 𝐴⊢𝐵−∗𝐶 and let [𝑋]⊩𝐵. By induction, 𝑋⊢𝐵. Rule Wand-L, identity on 𝐶, and a cut with 𝐴⊢𝐵−∗𝐶 give 𝐴,𝑋⊢𝐶; Star-L gives 𝐴∗𝑋⊢𝐶. Hence [𝐴∗𝑋]⊩𝐶, as required. Conversely, assume [𝐴]⊩𝐵−∗𝐶 and choose [𝑋]=[𝐵]. Identity forces 𝐵, so the hypothesis gives 𝐴∗𝐵⊢𝐶. Rule Star-L inverted through lemma 43.34 gives 𝐴,𝐵⊢𝐶, and Wand-R yields 𝐴⊢𝐵−∗𝐶. These cases exhaust L−∨. ◻
Proof of Corollary 43.38 — Elementary completeness without disjunction
Proof. Put 𝐺=𝖿𝗈𝗋𝗆(Γ) and evaluate validity in the term model at world [𝐺]. Identity and the truth lemma give [𝐺]⊩Γ, so validity gives [𝐺]⊩𝐴. The truth lemma yields 𝐺⊢𝐴, and lemma 43.34 yields Γ⊢𝐴. ◻
The naive extension to disjunction fails at one exact line. At the world [𝑃∨𝑄], identity gives 𝑃∨𝑄⊢𝑃∨𝑄. The forcing clause would require either 𝑃∨𝑄⊢𝑃 or 𝑃∨𝑄⊢𝑄, neither of which is derivable. The invariant needed for repair is a prime resource: whenever it contains a disjunction, it contains one selected disjunct. Constructing enough prime bunches while preserving the comma operation is the substantial external step.
Proof of Lemma 43.39 — Bridge to the source NBI presentation
Proof. The two presentations have the same formulas, bunches, structural congruence, and additive weakening and contraction. Translate derivations in both directions by induction on the final rule.
Every NBI introduction rule is the corresponding right rule of 𝖫𝖡𝖨0, with the same semicolon or comma in its conclusion. An NBI elimination is translated by the corresponding left rule followed by cut. For example, additive application first derives 𝐵 from Δ⊢𝐶 and the displayed assumption 𝐶→𝐵 by Imp-L; cutting this result into the elimination continuation gives the NBI conclusion. Multiplicative application uses Wand-L with a comma. Elimination of 𝐶∧𝐷, 𝐶∨𝐷, or 𝐶∗𝐷 uses, respectively, And-L, Or-L, or Star-L followed by cut; the two unit eliminations use Top-L and I-L. NBI substitution is admissible: weaken a continuation context to expose 𝜑;⊤, derive Δ⊢𝜑∧⊤ by introduction, and eliminate that conjunction into the displayed occurrence. Under the translation this is the displayed cut of definition 43.9; theorem 43.13 removes every cut introduced by the translation.
Conversely, translate a left rule into the corresponding NBI elimination and substitution into its displayed bunch context. The load-bearing implication case is explicit: from Δ⊢𝖭𝖡𝖨𝐶, the displayed assumption 𝐶→𝐷, and the continuation C[𝐷]⊢𝖭𝖡𝖨𝐵, additive application gives 𝐷 inside Δ;(𝐶→𝐷); source substitution into C[−] gives the Imp-L conclusion. Replacing the semicolon by a comma and additive application by multiplicative application gives Wand-L. The conjunction, disjunction, star, and unit left rules are their eliminations in the same way. Atomic identity translates directly, and theorem 43.8 gives 𝐴⊢𝐴 for every compound formula 𝐴. This exhausts the 𝖫𝖡𝖨0 and falsity-free NBI rule sets. ◻
Pym, O’Hearn, and Yang state equivalence of full NBI and HBI as Lemma 1 on printed p. 7 [POY04], but describe the argument only as induction on proofs. That does not establish conservativity of full HBI over its falsity-free restriction: an unspecified induction might pass through an additive-falsity rule. Accordingly, this chapter imports no falsity-free HBI–NBI equivalence.
Let (𝑀,⪯,∘,𝑒,𝑉) be a resource model in the upward-closed presentation of definition 43.25. Define 𝑥⪯op𝑦 iff 𝑦⪯𝑥. Then the same monoid and valuation form the downwards-closed presentation used by Pym, O’Hearn, and Yang, and forcing is unchanged after every order comparison is dualized.
Proof. An upward-closed subset for ⪯ is downwards closed for ⪯op. Reflexivity and transitivity are immediate. Monotonicity of ∘ is preserved because reversing both hypotheses and the conclusion reverses the same inequality. Induct on formulas. The atomic and additive clauses use closure and accessible worlds with the order reversed. In the star clause, replace 𝑥∘𝑦⪯𝑧 by 𝑧⪯op𝑥∘𝑦, the same assertion by definition. The wand clause has no order comparison of its own: it is unchanged except that its recursively forced formulas are translated by the induction hypotheses. It does not replace the star inequality a second time. The units are unchanged. ◻
The stronger source statement says that, for the falsity-free grammar of definition 43.1 including ∨, validity in every elementary resource monoid implies derivability in HBI. Together with an independently proved falsity-free HBI–NBI correspondence and lemma 43.40, lemma 43.39, lemma 43.34, that statement would imply Γ⊧𝐴⟹Γ⊢𝐴 for the full selected grammar. This chapter does not count that implication among its proved or imported theorems.
The reason for the boundary is mathematical. Pym, O’Hearn, and Yang state the prime-bunch extension but leave its construction to Pym’s monograph; their prime-evaluation sketch omits the construction required for a completeness proof. Since the chapter does not reconstruct it, the extension is not one of its theorems. The paper also uses downwards-closed valuations, not literally the upward-closed presentation above; lemma 43.40 proves that order duality sends those valuations and forcing clauses to the upward-closed presentation. The source does prove that adding additive falsity destroys completeness for elementary total monoids [POY04].
★★★ Prove the 𝐵→𝐶 and 𝐵−∗𝐶 cases of theorem 43.37 as complete derivation calculations. Then explain, using the world [𝑃∨𝑄], why the same term model cannot satisfy the semantic disjunction clause. State precisely which part of the external prime-resource construction would have to repair the failed step, and why the source statement alone does not discharge that construction here.
Additive structure admits sharing and discarding, whereas multiplicative structure preserves the resource split. Cut elimination is theorem 43.13; soundness is theorem 43.31; and corollary 43.38 gives completeness for the disjunction-free, falsity-free fragment. The universal BI algebra independently re-derives displayed cut through theorem 43.23, corollary 43.24. Full disjunctive completeness has exactly the extra prime-resource obligation in convention 43.41. The formula 𝐴∗𝐵 holds at a world that decomposes into components forcing 𝐴 and 𝐵. A heap logic additionally needs a command semantics, a locality theorem, and a frame rule; none follows from the BI formula grammar.
The calculus and its bunch discipline originate in O’Hearn and Pym’s propositional BI development [OP99]. The elementary resource semantics, its falsity boundary, and the completeness construction are from Pym, O’Hearn, and Yang [POY04]. For the sequent presentation fixed here, theorem 43.10, theorem 43.13 establish the local structural and cut results needed by the soundness and term-model arguments. Frumin’s universal-algebra construction supplies the independent semantic cut replay [Fru22].
★★★ Normalize each bunch below modulo the two ACU theories by sorting the leaves inside every maximal additive or multiplicative node, while retaining the alternation tree. Decide whether each pair is congruent and justify the answer from definition 43.3: pair1:(𝐴;(𝐵;𝜖a)),(𝐶,𝐷)(𝐵;𝐴),(𝐷,𝐶),pair2:(𝐴,𝐵);(𝐶,𝐷)(𝐴;𝐶),(𝐵;𝐷),pair3:((𝐴;𝐵),𝜖m);𝐶𝐶;(𝐵;𝐴). Then give an algorithm that decides congruence of finite bunches and prove its correctness by induction on the alternating normal form.
★★★ Take a principal cut between a derivation ending in Imp-R and one ending in Imp-L, with nonempty additive contexts on both sides. Write the entire derivation before reduction, the two smaller cuts after reduction, and the exact structural congruence needed at the conclusion. Repeat for Wand-R/Wand-L. Finally, place the cut occurrence inside a subtree contracted by C and show why one displayed multicut, rather than two uncontrolled sequential cuts, decreases the rank.
★★☆ List every upward-closed valuation on the truncated-addition frame 𝑀2. Fix two atoms 𝑃,𝑄. For each pair of valuations, determine whether 𝑃∗𝑄→𝑃∧𝑄 is valid. Identify exactly which valuations make the frame behave as though 𝑥⪯𝑥∘𝑦 held for every resource pair, and explain why that observation does not validate multiplicative weakening over the class of all resource frames.
★★★ Find the strongest direction, if any, valid in all resource models between (𝐴∧𝐵)∗(𝐶∧𝐷)and(𝐴∗𝐶)∧(𝐵∗𝐷). Prove the valid direction directly from witnesses. Refute the converse with a finite model. Translate both directions back into bunch transformations and state why only one resembles the forbidden interchange equation.
★★☆ At the world [𝑃∨𝑄] of the elementary term model, prove that the truth lemma’s disjunction step cannot choose a disjunct. State a prime-resource property sufficient to make that choice, then show why additive falsity still blocks elementary completeness. Finally formulate the resulting falsity-free completeness implication with its exact frame and valuation hypotheses.
★★★Practical project.bi-resource-semantics Implement a finite checker and evaluator for the selected BI distinctions. Represent formulas, bunches, one-hole contexts, and a finite resource model as ordinary data. Maintain these invariants:
bunch congruence normalizes the additive and multiplicative ACU nodes separately and never performs interchange;
additive weakening and contraction are accepted only at a displayed semicolon;
multiplicative right rules split the displayed comma into the two premise bunches; and
forcing of 𝐴∗𝐵 searches resource decompositions, whereas forcing of 𝐴∧𝐵 reuses one world.
The observable result is a deterministic report whose named cases cover a purely additive derivation; nested additive weakening and contraction; rejection of multiplicative weakening and contraction; a valid multiplicative split; rejection of interchange; the running mixed derivation; all four binary semantic distinctions; and a finite structural countermodel. The acceptance test compares every line exactly and exits unsuccessfully when any case differs. In addition, test three separately typechecking mutations: allow multiplicative weakening, identify the two bunch constructors, and interpret ∗ as ∧. Each mutation must make the unchanged oracle fail. Appendix E records the four acceptance commands.