Logic

The middle that is not excluded

Either it is raining or it is not. Drop that as an axiom and what is left is still a logic — one with models made of open sets and of stages of knowledge, in which a set and its negation between them miss the boundary.

Worth reading first: Two worlds that both obey the rules.

Either PP or not PP is not a fact about the world. It is an axiom, it can be dropped, and what is left is a logic with models that can be drawn.

A set, its negation, and its double negationFour bars on one number line showing an open set, its negation, their union, and the double negation.U¬UU ∪ ¬U¬¬UU is an interval with 1 point taken out; ¬U is the inside of what is leftU and ¬U together miss the endpoints, and ¬¬U hands them back — so U ∨ ¬U is not everything and ¬¬U is not U
Fig. 1 An open interval with one point taken out, and its negation. Negation here is the inside of what is left over, so the punched-out point belongs to neither UU nor ¬U¬U — the third bar has a gap where the second and first fail to meet. The fourth bar is the double negation, which hands the point back.

Read the third bar. UU together with ¬U¬U does not fill the line. Read the fourth: ¬¬U¬¬U is strictly larger than UU. Those are the two classical laws failing, in a structure made of nothing but open intervals.

What is being dropped, and what is kept

Intuitionistic logic is classical logic minus one axiom. Everything else stays: modus ponens, conjunction, disjunction, the meaning of implication as a rule for transforming evidence.

What goes is the law of excluded middle, P¬PP ∨ ¬P, and with it the equivalent double-negation elimination, ¬¬PP¬¬P → P. Those two are equivalent to each other and the system is the same either way.

What does not go, and this is the part people expect to and are surprised by:

  • ¬(P¬P)¬(P ∧ ¬P) — nothing is both true and false. Contradiction is still forbidden.
  • P¬¬PP → ¬¬P — one direction of double negation still holds.
  • ¬¬¬P¬P¬¬¬P → ¬P — and back. Three negations collapse to one, even though two do not collapse to none.
  • De Morgan’s law in one direction, and the other one only for negated statements.

That last cluster is the tell that something structured is going on rather than a rule being weakened at random. If negation were simply unreliable, three negations would be no better than two. They are, and the reason is visible in the figure.

Why open sets

The model in the figure is not an analogy. The open sets of any topological space form a model of intuitionistic logic, exactly, and the correspondence is:

  • and is intersection,
  • or is union,
  • false is the empty set,
  • not UU is the interior of the complement,
  • UU implies VV is the largest open set whose intersection with UU lies inside VV.

Everything follows from one decision: the objects are open sets, so every operation must produce an open set, and the ordinary complement of an open set is not open. Taking the interior is the smallest repair, and it is where the information goes.

Take U=(0,1)(1,2)U = (0,1) ∪ (1,2), an interval with the point 1 removed. Its complement is everything at most 0, the single point 1, and everything at least 2. The interior of that throws away the isolated point, because a single point contains no interval, so ¬U=(1,0)(2,3)¬U = (-1,0) ∪ (2,3) within the ambient line.

Now U¬UU ∪ ¬U misses three points: 0, 1 and 2. And ¬¬U¬¬U is the interior of the complement of ¬U¬U, which is the open interval (0,2)(0,2) — the hole is filled, so ¬¬U¬¬U is strictly bigger than UU.

A set, its negation, and its double negationFour bars on one number line showing an open set, its negation, their union, and the double negation.U¬UU ∪ ¬U¬¬UU is an interval with 2 points taken out; ¬U is the inside of what is leftU and ¬U together miss the endpoints, and ¬¬U hands them back — so U ∨ ¬U is not everything and ¬¬U is not U
Fig. 2 The same construction with two points removed. Both come back under double negation, and the union of the set with its negation now misses four points. The figure asserts each of these: that UU sits inside ¬¬U¬¬U and strictly, that the union is not everything, and that three negations give the same set as one.

The boundary is where the information is lost. Negation cannot see a set’s boundary, because a boundary point is in neither the set nor the interior of its complement, and double negation restores exactly the boundary. That is a geometric statement and it is the whole explanation of the algebra.

Three negations, drawn

The collapse at three is worth checking against the picture, because it is the fact that separates this system from a broken one.

¬U¬U is an open set with no isolated bits — it was produced by taking an interior, so it is regular in the sense that it equals the interior of the closure of itself. Applying ¬¬¬¬ to a set of that kind changes nothing. So ¬¬(¬U)=¬U¬¬(¬U) = ¬U, which is ¬¬¬U=¬U¬¬¬U = ¬U.

In words: the first negation loses the boundary, and after that there is no more boundary to lose. Negation is not degrading the set a little more each time; it loses something once and then stabilises.

A five-element Heyting algebra, with negation computedA Hasse diagram of five open sets with each element's negation named beside it.{a}{b}{a,b}{a,b,c}¬∅ = {a,b,c}¬{a} = {b}¬{b} = {a}¬{a,b} = ∅¬{a,b,c} = ∅the open sets of {a, b, c} when only {a} and {b} are open — 5 of the 8 subsets¬{a} = {b} and ¬¬{a} = {a}, so {a} ∨ ¬{a} = {a,b} rather than everything
Fig. 3 A finite version, so every operation can be tabulated. Five open sets of a three-point space, with each element’s negation computed — and implication computed as the largest element whose meet with the antecedent lies below the consequent, checked against all five candidates rather than asserted.

The finite algebra makes the same points without any geometry. ¬{a}¬\{a\} is {b}\{b\}, and ¬{b}¬\{b\} is {a}\{a\}, so ¬¬{a}={a}¬¬\{a\} = \{a\} — that one behaves classically. But ¬{a,b}¬\{a,b\} is empty and ¬¬{a,b}¬¬\{a,b\} is everything, so {a,b}\{a,b\} is strictly below its double negation, and {a,b}¬{a,b}\{a,b\} ∨ ¬\{a,b\} is {a,b}\{a,b\} rather than the whole space.

A structure with these operations is a Heyting algebra, and the theorem is that intuitionistic logic proves exactly what holds in every Heyting algebra — just as classical logic proves exactly what holds in every Boolean algebra. A Boolean algebra is a Heyting algebra in which negation happens to be complement, which is the special case where nothing has a boundary.

The other model: stages of knowledge

There is a second semantics that says what the missing middle is missing, and it is the one that makes the system feel like a position rather than a mutilation.

Stages of knowledge, and the stage where p ∨ ¬p is not yet availableA partially ordered set of information stages with p established at some of them, and a table of what each stage forces.w0w1w2w3w4stagep¬pp ∨ ¬pw0w1w2w3yesyesw4yesyesstages of knowledge: an arrow is "later, knowing more", and p is established at w3, w4p ∨ ¬p fails at w0, w1, w2 — p is not established there and never being established is notestablished either
Fig. 4 Stages of information, with an arrow meaning later, knowing more. pp is established at the two later stages; at the earlier ones it is not established, and neither is the claim that it never will be. So p¬pp ∨ ¬p fails there — and the figure checks the persistence condition that makes this a legitimate model at all.

A world here is a state of information rather than a possible universe. An arrow means later, with more known. And the rules are:

  • pp holds at a stage when it has been established there.
  • ¬p¬p holds at a stage when pp will never be established, at that stage or any later one.
  • pqp → q holds at a stage when every later stage establishing pp also establishes qq.

Persistence is the condition that makes this coherent: once something is established it stays established, and the figure asserts it on the model it draws rather than assuming it.

Now excluded middle fails, and the reason is precise. At an early stage, pp is not established — so pp does not hold. And ¬p¬p requires that pp never gets established, which is a claim about all later stages and is false here, since pp arrives later. Neither disjunct holds, so the disjunction does not.

That is not ignorance. The model is complete; nothing about it is unknown. The claim being refuted is that one of the two disjuncts must hold at that stage, and at that stage neither is available. Excluded middle is being read as a claim about what is settled, and it is not.

Stages of knowledge, and the stage where p ∨ ¬p is not yet availableA partially ordered set of information stages with p established at some of them, and a table of what each stage forces.w0w1w2w3stagep¬pp ∨ ¬pw0w1w2w3yesyesstages of knowledge: an arrow is "later, knowing more", and p is established at w3p ∨ ¬p fails at w0, w1, w2 — p is not established there and never being established is notestablished either
Fig. 5 A chain rather than a branch: knowledge arrives at the last stage only. Excluded middle fails at all three earlier ones, and the reason is the same at each — pp is not there yet, and never is false.
The truth table of p ∨ ¬pA grid with one row per assignment of truth values, and the value of the formula beside it.pp ∨ ¬pFTTTp ∨ ¬p — 2 assignments, 2 of them satisfyingtrue in every row: the formula is a tautology
Fig. 6 The same formula in the classical setting, where it is a tautology in two rows. Nothing here is wrong; the table simply asks a different question — is there an assignment making this false? — and the answer is no. What the models above deny is not the table but the assumption that every statement has an assignment.

That comparison is the fairest way to state the disagreement. The classical picture starts from a set of assignments, each of which settles every letter, and asks which formulas survive all of them. If that is what a truth value is, then excluded middle is a triviality: a letter is one thing or the other by construction, and a formula saying so is true in every row.

The intuitionistic position is that the starting point begs the question. Assuming an assignment exists — that every statement, including ones about infinitely many objects, is definitely settled one way — is exactly the assumption in dispute, and it has been built into the machinery before any reasoning starts. The open sets and the stages are two ways of building machinery that does not assume it, and in both, excluded middle stops holding.

Which of the two settings is right is not a mathematical question and this essay does not have a view. What is mathematical, and settled, is that the second one is coherent, has models, and proves a strictly smaller set of theorems.

Stages of knowledge, and the stage where p ∨ ¬p is not yet availableA partially ordered set of information stages with p established at some of them, and a table of what each stage forces.w0w1w2w3w4stagep¬pp ∨ ¬pw0w1w2w3yesyesw4yesyesstages of knowledge: an arrow is "later, knowing more", and p is established at w3, w4p ∨ ¬p fails at w0, w1, w2 — p is not established there and never being established is notestablished either
Fig. 7 The same frame with pp established at both leaves rather than one. Excluded middle still fails at the three earlier stages, and it fails for the same reason — pp is not established there, and never established is false.

What a proof is taken to be

Behind both models is a reading of the connectives that Brouwer proposed and Heyting made precise, in which a proof is a construction rather than a certificate of truth.

  • A proof of PQP ∧ Q is a proof of PP together with a proof of QQ.
  • A proof of PQP ∨ Q is a proof of one of them, together with a note of which.
  • A proof of PQP → Q is a method turning any proof of PP into a proof of QQ.
  • A proof of ¬P¬P is a method turning any proof of PP into a contradiction.
  • A proof of there exists an xx with P(x)P(x) is an xx, together with a proof of P(x)P(x).

Under that reading, excluded middle asserts that for every PP there is either a proof of PP or a refutation of it, and a way of saying which. That is a very strong claim about a system’s reach, and it is not one anybody would adopt casually.

The disjunction clause is where the difference is felt in practice. Classically, proving PQP ∨ Q by showing that ¬(¬P¬Q)¬(¬P ∧ ¬Q) is a complete proof. Constructively it is not, because it never produces the note saying which one. The system has the disjunction property: if it proves PQP ∨ Q then it proves PP or it proves QQ. Classical logic does not, and P¬PP ∨ ¬P is the standing counterexample.

A set, its negation, and its double negationFour bars on one number line showing an open set, its negation, their union, and the double negation.U¬UU ∪ ¬U¬¬UU is an interval with 1 point taken out; ¬U is the inside of what is leftU and ¬U together miss the endpoints, and ¬¬U hands them back — so U ∨ ¬U is not everything and ¬¬U is not U
Fig. 8 A narrower interval with the same single hole. Nothing about the failure depends on the size of the set — the union with the negation misses three points here as it did before, and ¬¬U¬¬U hands back the one in the middle.

What is actually lost

Two things go, and both are worth naming honestly.

Proof by contradiction, in one of its two forms. Assuming ¬P¬P and deriving a contradiction proves ¬¬P¬¬P, which classically is PP and here is not. Assuming PP and deriving a contradiction still proves ¬P¬P; that direction is fine. So half of the technique survives and the more useful half does not.

Pure existence proofs. The classic pattern — either this object works or that one does, and which is left unsaid — is unavailable. There is a standard example: are there irrational aa and bb with aba^b rational? Take a=b=22a = b = \sqrt{2}^{\sqrt{2}} if that is rational, and otherwise a=22,b=2a = \sqrt{2}^{\sqrt{2}}, b = \sqrt{2}. One case works, the argument does not say which, and constructively it establishes nothing.

What is gained is that every proof carries a construction. A constructive proof of an existence statement contains the object; a constructive proof of a disjunction contains the choice. That is why proof assistants and dependently typed programming languages are built on this logic — a proof in them is a program, and running it produces the witness.

The quarrel, which was not academic

The dates and the temperature are worth recording, because this is one of the few places in modern mathematics where a foundational disagreement had institutional consequences.

Brouwer set out the position between 1907 and the 1920s: mathematics is a mental construction, existence means construction, and excluded middle is an illegitimate generalisation from finite cases to infinite ones. He also, and separately, proved the fixed-point theorem that carries his name — by classical means, and later disowned it as a proof he could not accept, which is as clear a demonstration of seriousness as the subject offers.

Hilbert’s response was not measured. “Taking the principle of excluded middle from the mathematician would be the same as prohibiting the astronomer his telescope or the boxer the use of his fists.” In 1928 he removed Brouwer from the editorial board of the Mathematische Annalen, which caused enough of a scandal that Einstein — who wanted no part of what he called the Frog-Mouse Battle — resigned from it too.

A set, its negation, and its double negationFour bars on one number line showing an open set, its negation, their union, and the double negation.U¬UU ∪ ¬U¬¬UU is an interval with 3 points taken out; ¬U is the inside of what is leftU and ¬U together miss the endpoints, and ¬¬U hands them back — so U ∨ ¬U is not everything and ¬¬U is not U
Fig. 9 Three punched-out points. Nothing changes structurally as the holes multiply: the union with the negation misses each of them, the double negation restores all of them, and three negations still equal one. The failure of excluded middle is not a marginal defect that could be patched — it is proportional to how much boundary there is.

What settled the mathematics rather than the argument was Heyting’s formalisation in 1930, which gave the position a precise proof system, and the models that followed — Kolmogorov and Gödel’s translations, Tarski and Stone’s topological semantics, Kripke’s in 1965. Once there were models, the question stopped being whether the position was coherent and became a technical subject with theorems in it.

That is the standard fate of a foundational quarrel in this field, and it is the same one the parallel postulate had. The dispute is about which assumptions to adopt; it is unresolvable by argument; and building a model converts it into mathematics, after which both sides have something to work on and the heat goes out of it.

Two models, one logic, and why that matters

The two pictures in this essay are unrelated as objects. One is made of intervals on a line, the other of arrows between states of information. Neither was derived from the other.

They validate exactly the same formulas, and that is a theorem rather than a coincidence. Intuitionistic logic proves a formula precisely when it holds in every Heyting algebra, and precisely when it holds in every Kripke model of this kind. Two completeness theorems, two entirely different notions of model, one set of theorems.

That is the same situation the disc put the parallel postulate in, and it is worth noticing that this field’s central technique has now been used for three different jobs. Against classical logic, a model shows that excluded middle is not derivable — the open sets are a structure where everything else holds and it fails. For the system itself, the class of models is what defines the theorems. And in the middle, comparing two model classes shows two definitions agree.

A last observation, which is the reason this belongs in a collection about pictures. There is a translation, due to Gödel, sending every intuitionistic formula to a classical one by inserting double negations; and under it intuitionistic logic sits inside classical logic rather than contradicting it. So the two are not rivals in the way Euclidean and hyperbolic are rivals. They are the same subject under different readings of what a proof has to hand over, and the open sets are what the difference looks like once it is drawn: the boundary, which classical logic assigns to one side or the other, and which constructive logic leaves out of both.

Where it is now

The position stopped being a minority philosophical stance some time ago, and the reason is practical rather than philosophical.

A constructive proof of there exists an xx with P(x)P(x) contains an xx. A constructive proof of PQP → Q is a method. Under the correspondence between proofs and programs, those are not analogies: a proof in a suitable formal system is a program, its statement is the program’s type, and running it produces the witness. Every proof assistant in serious use — and the machine-checked proofs of the four-colour theorem and the Feit–Thompson theorem were done in one — is built on a constructive core, with excluded middle available as an assumption a user may add where it is wanted.

That is the modern arrangement and it is more sensible than either side of the 1928 quarrel. Excluded middle is a hypothesis rather than a law: statements proved without it are stronger, because they carry constructions; statements proved with it are still proved, and are marked as having used it. A system that tracks which theorems needed the assumption knows more than one that cannot ask.

The open sets on this page are the reason that arrangement is coherent rather than merely convenient. Without a model, dropping an axiom is a refusal; with one, it is a move to a structure where the axiom is false, and everything that follows is ordinary mathematics about that structure.

What links here

Computed from the collection, not written here: the essays that point at this one.

Named objects

A dashed tag is an object no other essay names yet.

Constructive proofDouble negationExcluded middleHeyting algebraIntuitionistic logicKripke modelOpen setTopology of logic