A simpler and more realistic subjective decision theory
Abstract
In his classic book “the Foundations of Statistics” Savage develops a formal system of rational decision making. It is based on (i) a set of possible states of the world, (ii) a set of consequences, (iii) a set of acts, which are functions from states to consequences, and (iv) a preference relation over the acts, which represents the preferences of an idealized rational agent. The goal and the culmination of the enterprise is a representation theorem: any preference relation that satisfies certain arguably acceptable postulates determines a (finitely additive) probability distribution over the states and a utility assignment to the consequences, such that the preferences among acts are determined by their expected utilities. Additional problematic assumptions are however required in Savage’s proofs. First, there is a Boolean algebra of events (sets of states) which determines the richness of the set of acts. The probabilities are assigned to members of this algebra. Savage’s proof requires that this be a \(\sigma \)algebra (i.e., closed under infinite countable unions and intersections), which makes for an extremely rich preference relation. On Savage’s view we should not require subjective probabilities to be \(\sigma \)additive. He therefore finds the insistence on a \(\sigma \)algebra peculiar and is unhappy with it. But he sees no way of avoiding it. Second, the assignment of utilities requires the constant act assumption: for every consequence there is a constant act, which produces that consequence in every state. This assumption is known to be highly counterintuitive. The present work contains two mathematical results. The first, and the more difficult one, shows that the \(\sigma \)algebra assumption can be dropped. The second states that, as long as utilities are assigned to finite gambles only, the constant act assumption can be replaced by the more plausible and much weaker assumption that there are at least two nonequivalent constant acts. The second result also employs a novel way of deriving utilities in Savagestyle systems—without appealing to von Neumann–Morgenstern lotteries. The paper discusses the notion of “idealized agent” that underlies Savage’s approach, and argues that the simplified system, which is adequate for all the actual purposes for which the system is designed, involves a more realistic notion of an idealized agent.
Keywords
Subjective probability Expected utilities Savage postulates Realistic decision theory Partition tree Boolean algebra1 Introduction
Ramsey’s groundbreaking work “Truth and Probability” (1926) established the decision theoretic approach to subjective probability, or, in his terminology, to degree of belief. Ramsey’s idea was to consider a person who has to choose between different practical options, where the outcome of the decision depends on unknown facts. One’s decision will be determined by (i) one’s probabilistic assessment of the facts, i.e., one’s degrees of belief in the truth of various propositions, and (ii) one’s personal benefits that are associated with the possible outcomes of the decision. Assuming that the person is a rational agent—whose decisions are determined by some assignment of degrees of belief to propositions and utility values to the outcomes—we should, in principle, be able to derive the person’s degrees of belief and utilities from the person’s decisions. Ramsey proposed a system for modeling the agent’s point of view in which this can be done. The goal of the project is a representation theorem, which shows that the rational agent’s decisions should be determined by the expected utility criterion.
The system proposed by Savage (1954, 1972) is the first decisiontheoretic system that comes after Ramsey’s, but it is radically different from it, and it was Savage’s system that put the decisiontheoretic approach on the map.^{1} To be sure, in the intervening years a considerable body of research has been produced in subjective probability, notably by de Finetti (1937a, b), and by Koopman (1940a, b, 1941), whose works, among many others, are often mentioned by Savage. De Finetti also discusses problems related to expected utility. Yet these approaches were not of the decisiontheoretic type: they did not aim at a unified account in which the subjective probability is derivable from decision making patterns. It might be worthwhile to devote a couple of pages to Ramsey’s proposal, for its own sake and also to put Savage’s work in perspective. We summarize and discuss Ramsey’s work in Appendix A.
The theory as presented in Savage (1954, 1972) has been known for its comprehensiveness and its clear and elegant structure. Some researchers have deemed it the best theory of its kind: Fishburn (1970) has praised it as “the most brilliant axiomatic theory of utility ever developed” and Kreps (1988) describes it as “the crowning glory of choice theory.”
The system is determined by (I) The formal structure, or the basic design, and (II) The axioms that the structure should satisfy, or—in Savage’s terminology—the postulates. Savage’s crucial choice of design is to base the model on two independent coordinates: (i) a set S of states (which correspond to what in other systems is the set possible worlds) and (ii) a set of consequences, X, whose members represent the outcomes of one’s acts. The acts themselves, whose collection is denoted here as \({\mathcal A}\), constitute the third major component. They are construed as functions from S into X. The idea is simple: the consequence of one’s act depends on the state of the world. Therefore, the act itself can be represented as a function from the set of states into the set of consequences. Thus, we can use heuristic visualization of two coordinates in a twodimensional space.
Savage’s notion of consequences corresponds to the “goods” in vNM—the system presented in von Neumann and Morgenstern (1944). Now vNM uses gambles that are based on an objective \(\sigma \)additive probability distribution. Savage does not presuppose any probability but has to derive the subjective probability within his system. The most striking feature of that system is the elegant way of deriving—from his first six postulates—a (finitely additive) probability over the Boolean algebra of events. That probability is later used in defining the utility function, which assigns utilities to the consequences. The definition proceeds along the lines of vNM, but since the probability need not be \(\sigma \)additive, Savage cannot apply directly the vNM construction. He has to add a seventh postulate and the derivation is somewhat involved.
We assume some familiarity with the Savage system. For the sake of completeness we include some additional definitions and a list of the postulates (stated in forms equivalent to the originals) in Appendix B.
As far as the postulates are concerned, Savage’s system constitutes a very successful decision theory, including a decisionbased theory of subjective probability. Additional assumptions, which are not stated as axioms, are however required: (i) in Savage’s derivation of subjective probability, and (ii) in his derivation of personal utility. These assumptions are quite problematic and our goal here is to show how they can be eliminated and how the elimination yields a simpler and more realistic theory.
The first problematic assumption is the \(\sigma \) algebra assumption: In deriving the subjective probability, Savage has to assume that the Boolean algebra, \({\mathcal B}\), over which the probability is to be defined is a \(\sigma \)algebra (i.e., closed under countable infinite unions and intersections). Savage insists however that we should not require the subjective probability to be \(\sigma \)additive.
The theorems he refers to are the places where his proof relies on the \(\sigma \)algebra assumption. The \(\sigma \)algebra assumption is invoked by Savage in order to show that the satisfaction of some axioms regarding the qualitative probability implies that there is a unique finitely additive probability that agrees with the qualitative one. We eliminate it by showing that there is a way of defining the finitely additive numeric probability, which does not rely on that assumption. This is the hard technical core of the paper, which occupies almost a third of it. We develop for this purpose a new technique based on what we call tripartition trees.It may seem peculiar to insist on \(\sigma \)algebra as opposed to finitely additive algebras even in a context where finitely additive measures are the central object, but countable unions do seem to be essential to some of the theorems of §3—for example, the terminal conclusions of Theorem 3.2 and Part 5 of Theorem 3.3. (p. 43)
Now this derived finitely additive probability later serves in defining the expected utilities. Savage’s way of doing this requires that the probability should have a certain property, which we shall call “completeness” (Savage does not give it a name). He uses the \(\sigma \)algebra assumption a second time in order to show that the probability that he defined is indeed complete. This second use of the \(\sigma \)algebra assumption can be eliminated by showing that (i) without the \(\sigma \)algebra assumption, the defined probability satisfies a certain weaker property “weak completeness” and (ii) weak completeness is sufficient for defining the expected utilities.
 CAA:

For every consequence \(a\in X\) there exists a constant act \(\mathfrak {c}_a \in {\mathcal A}\).
By a simple act we mean an act with a finite range of values. The term used by Savage (1972, p. 70) is ‘gamble’; he defines it as an act, f, such that, for some finite set, A, \(f^{1}(A)\) has probability 1. It is easily seen that an act is a gamble iff it is equivalent to a simple act. ‘Gamble’ is also used in gambling situations, where one accepts or rejects bets. We shall use ‘simple act’ and ‘gamble’ interchangeably. Using the probability that has been obtained already, the following is derivable from the first six postulates and CAA.
Proposition 1.1
(Simple act utility) We can associate utilities with all consequences, so that, for all simple acts the preference is determined by the acts’ expected utilities.^{4}
 2CA:

There are two nonequivalent constant acts \(\mathfrak {c}_a\) and \(\mathfrak {c}_b\).
Proposition 1.2
(Simple act utility*) We can associate utilities with all feasible consequences, so that, for all simple acts, the preference is determined by the act’s expected utilities.
It is perhaps possible to extend this result to all acts whose consequences are feasible. This will require a modified form of P7. But our proposed modification of the system does not depend on there being such an extension. In our view the goal of a subjective decision theory is to handle all scenarios of having to choose from a finite number of options, involving altogether a finite number of consequences. Proposition 1.2 is therefore sufficient. The question of extending it to all feasible acts is intriguing because of its mathematical interest, but this is a different matter.
The rest of the paper is organized as follows. In what immediately follows we introduce some further concepts and notations that will be used throughout the paper. Section 2 is devoted to the analysis of the notions of idealized rational agents and what being “more realistic” about it entails. We argue that, when carried too far, the idealization voids the very idea underlying the concept of personal probability and utility; the framework then becomes, in the best case, a piece of abstract mathematics. Section 3 is devoted to the \(\sigma \)algebra assumption. It consists of a short overview of Savage’s original proof followed by a presentation of the tripartition trees and our proof, which is most of the section. In Sect. 3.3, we outline a construction by which, from a given finite decision model that satisfies P1–P5, we get a countably infinite decision model that satisfies P1–P6; this model is obtained as a direct limit of an ascending sequence of finite models. In Sect. 4, we take up the problem of CAA. We argue that, as far as realistic decision theory is concerned, we need to assign utilities only to simple acts. Then we indicate the proof of Proposition 1.2. To a large extent this material has been presented in Gaifman and Liu (2015), hence we contend ourselves with a short sketch.
 CutandPaste:
 If f and g are acts and E is an event then we definewhere \(\overline{E}=SE=\) the complement of E.^{8}$$\begin{aligned} (fE+g\overline{E})(s) =_\text{ Df }{\left\{ \begin{array}{ll} f(s)&{}\text { if } s\in E\\ g(s)&{}\text { if } s\in \overline{E}, \end{array}\right. } \end{aligned}$$
Recall that, for any given consequence \(a\in X\), \(\mathfrak {c}_a\) is the constant act whose consequence is a for all states. This notation is employed under the assumption that such an act exists. If \(\mathfrak {c}_a \succcurlyeq \mathfrak {c}_b\) then we put: \(a\ge b\). Similarly for strict preference. Various symbols are used with systematic ambiguity, e.g., ‘\(\equiv \)’ for acts and for consequences, ‘\(\le \)’ and ‘<’ for consequences as well as for numbers. Later, when qualitative probabilities are introduced, we shall use \(\succeq \) and \(\preceq \), for the “greaterorequal” relation (or “weakly more probable” relation) and its converse, and \(\succ \) and \(\prec \) for the strict inequalities. Note that, following Savage, we mean by a numeric probability a finitely additive probability function. If \(\sigma \)additivity is intended it will be clearly indicated.
2 The logic of the system and the role of “idealized rational agents”
The decision theoretic approach construes a person’s subjective probability in terms of its function in determining the person’s decision under uncertainty. The uncertainty should however stem from lack of empirical knowledge, not from one’s limited deductive capacities. One could be uncertain because one fails to realize that such and such facts are logically deducible from other known facts. This type of uncertainty does not concern us in the context of subjective probability. Savage (1972, p. 7) therefore posits an idealized person, with unlimited deductive capacities in logic, and he notes (in a footnote on that page) that such a person should know the answers to all decidable mathematical propositions. By the same token, we should endow our idealized person with unlimited computational powers. This is of course unrealistic; if we do take into account the rational agent’s bounded deductive, or computational resources, we get a “more realistic” system. This is what Hacking (1967) meant in his “A slightly more realistic personal probability;” a more recent work on that subject is Gaifman (2004). But this is not the sense of “realistic” of the present paper. By “realistic” we mean conceptually realistic; that is, a more realistic ability to conceive impossible fantasies and treat them as if they were real.
We indicated in the introduction that CAA may give rise to agents who have such extraordinary powers of conceiving. We shall elaborate on this sort of unrealistic abilities shortly. The \(\sigma \)algebra assumption can lead to even more extreme cases in a different area: the foundation of set theory. We will not go into this here, since this would require too long a detour.
It goes without saying that the extreme conceptual unrealism, of the kind we are considering here, has to be distinguished from the use of hypothetical mundane scenarios—the breadandbutter of every decision theory that contains more than experimental results. Most, if not all, of the scenarios treated in papers and books of decision theory are hypothetical, but sufficiently grounded in reality. The few examples Savage discusses in his book are of this kind. The trouble is that the solutions that he proposes require that the agent be able to assess the utilities of physical impossibilities and to weigh them on a par with everyday situations.
Omelet is one of the many scenarios in which CAA is highly problematic. It requires the existence of an act by which a good sixegg omelet is made out of five good eggs and a rotten one.^{9} Quite plausibly, John can imagine a miracle by which a sixegg omelet is produced from five good eggs and a rotten one; this lies within his conceptual capacity. But this would not be sufficient; he has to take the miracle seriously enough, so that he can rank it on a par with the other real possibilities, and eventually assign to it a utility value. This is what the transfer of sixegg omelet from good to rotten means. In another illustrative example (Savage 1972, p. 25), the result of such a miraculous transfer is that the person can enjoy a refreshing swim with her friends, while in fact she is “...sitting on a shadeless beach twiddling a brandnew tennis racket”—because she bought a tennis racket instead of a bathing suit—“while her friends swim.” CAA puts extremely high demands on what the agent, even an idealized one, should be able to conceive.
CAA is the price Savage has to pay for making the consequences completely independent of the states.^{10} A concrete consequence is being abstracted so that only its personal value remains. These values can be then smoothly transferred from one state to another. Our suggestion for avoiding such smooth transfers is described in the introduction. In Sect. 4 we shall argue that the price one has to pay for this is worth paying.
Returning to Omelet, let us consider how John will decide. It would be wrong to describe him as appealing to some intuitions about his preference relation, or interrogating himself about it. John determines his preferences by appealing to his intuitions about the likeliness of the states and the personal benefits he might derive from the consequences.^{11} If he thinks that good is very likely and washing the saucer, in the case of rotten, is rather bothersome, he will prefer \(f_1\) to the other acts; if washing the saucer is not much of a bother he might prefer \(f_3\); if wasting a good egg is no big deal, he might opt for \(f_2\).
If our interpretation is right, then a person derives his or her preferences by combining subjective probabilities and utilities. On the other hand, the representation theorem goes in the opposite direction: from preference to probability and utility. As a formal structure, the preference relation is, in an obvious sense, more elementary than a real valued function. If it can be justified directly on rationality grounds, this will yield a normative justification to the use probability and utility.
The Boolean algebra in Omelet is extremely simple; besides S and \(\varnothing \) it consists of two atoms. The preference relation implies certain constraints on the probabilities and the utilityvalues, but it does not determine them. This, as a rule, is the case whenever the Boolean algebra is finite.^{12} Now the idea underlying the system is that if the preference relation is defined over a sufficiently rich set of acts (and if it satisfies certain plausible postulates) then both probabilities and utilities are derivable from it. As far as the probability is concerned, the consequences play a minor role. We need only two nonequivalent constant acts, say \(\mathfrak {c}_a, \mathfrak {c}_b\), and we need only the preferences over twovalued acts, in which the values are a or b. But \({\mathcal B}\) has to satisfy P6\('\), which implies that is must be infinite; moreover, in Savage’s system, which includes the \(\sigma \)algebra assumption, the set of states, as well as Boolean algebra should have cardinalities that are \(2^{\aleph _0}\) at least. Our result makes it possible to get a countable Boolean algebra, \({\mathcal B}\), and a decision model \((S, X, {\mathcal A}, \succcurlyeq , {\mathcal B})\) which is a direct limit of an ascending sequence of substructures \((S_i, X, {{\mathcal A}}_i, {\succcurlyeq }_i, {\mathcal B}_i)\), where the \(S_i\)’s are finite, and where X is any fixed set of consequences containing two nonequivalent ones. This construction is described briefly at the end of the next section.
3 Eliminating the sigmaalgebra assumption
3.1 Savage’s derivation of numeric probabilities
3.1.1 From preferences over acts to qualitative probabilities
The qualitative probability, \(\succeq \), is defined by:
Definition 3.1
Savage’s P4 guarantees that the above concept is well defined, i.e., (3.2) does not depend on the choice of the pair of constant acts. The definition has a clear intuitive motivation and it is not difficult to show that \(\succeq \) is a qualitative probability, as defined by de Finetti (in an equivalent formulation used by Savage):
Definition 3.2
 i.
\(\succeq \) is a total preorder,
 ii.
\( A \succeq \varnothing \),
 iii.
\( S \succ \varnothing \),
 iv.if \(A\cap C=B\cap C=\varnothing \) then$$\begin{aligned} A\succeq B\iff A\cup C\succeq B\cup C. \end{aligned}$$(3.3)
 P6 \('\) :

For any events E, F, if \(E\succ F\), then there is a partition \(\{P_i\}_{i=1}^n\) of S such that \(E\succ F\cup P_i\) for all \(i=1,\ldots ,n\).
Before proceeding to the technical details that occupy most of this section it would be useful to state for comparison the two theorems, Savage’s and ours, and pause on some details regarding the use of the probability function in the derivation of utilities.
3.1.2 Overview of the main results
We state the results as theorems about qualitative probabilities. The corresponding theorems within the Savage framework are obtained by replacing the qualitative probability \(\succeq \) by the preference relation over acts \(\succcurlyeq \), and P6\('\) by P6.
Theorem 3.3
 \((\dagger )\)

For any event A and any \(\rho \in (0,1)\), there exists an event \(B\subseteq A\) such that \(\mu (B) = \rho \cdot \mu (A)\).
Theorem 3.4
 \((\ddagger )\)

For every event, A, every \(\rho \in (0,1)\), and every \(\epsilon >0\) there exists an event \(B\subseteq A\), such that \((\rho  \epsilon )\cdot \mu (A) \le \mu (B) \le \rho \cdot \mu (A)\).
Remark 3.5
 (1)
Probabilities satisfying (\(\dagger \)) were called in Sect. 1 “complete” and those satisfying (\(\ddagger \)) were called “weakly complete.”
 (2)
Given a numeric probability \(\mu \), let a \(\rho \) portion of an event A be any event \(B \subseteq A\) such that \(\mu (B) = \rho \cdot \mu (A)\) . Then (\(\dagger \)) means that, for every \(0< \rho < 1\), every event has a \(\rho \)portion. (\(\ddagger \)) is a weaker condition: for every A, and for every \(\rho \in (0,1)\), there are \(\rho '\)portions of A, where \(\rho '\) can be strictly smaller than \(\rho \) but arbitrarily close to it.
 (3)
For the case \(A=S\), (\(\dagger \)) implies that the set of values of \(\mu \) is the full interval [0, 1]. But (\(\ddagger \)) only implies that the set of values is dense in [0, 1]. Obviously, the satisfaction of P6\('\) implies that the Boolean algebra is infinite, but, as indicated in Sect. 3.3 it can be countable, in which case (\(\dagger \)) must fail.
 (4)
That the constructed probability is complete, i.e., satisfies (\(\dagger \)), is proven in Chapter 3 of Savage (1972), which is devoted to probabilities. This property is used much later in the derivation of expected utilities in Chapter 5. In Sect. 3.2.4 below we will show that the probability that is constructed without assuming the \(\sigma \)algebra assumption is weakly complete, and in Sect. 4 we will show that weak completeness is sufficient for assigning utilities to consequences. As remarked in (3), (\(\dagger \)) implies that the set of values of is the real interval [0, 1], implying that the Boolean algebra must have the power of the continuum. There are however examples of countable models that satisfy all the required postulates of Savage (Theorem 3.3.5). Therefore, one cannot prove that the probability satisfies (\(\dagger \)), without the \(\sigma \)algebra assumption.
3.1.3 Savage’s original proof
The proof is given in the more technical part of the book (Savage 1972, pp. 34–38). The presentation seems to be based on working notes, reflecting a development that led Savage to P6\('\). Many proofs consists of numbered claims and subclaims, whose proofs are left to the reader (some of these exercises are difficult). Some of the theorems are supposed to provide motivation for P6\('\), which is introduced (on p. 38) after the technical part: “In the light of Theorems 3 and 4, I tentatively propose the following postulate ....” Some of the concepts that Savage employs have only historical interest. While many of these concepts are dispensable if P6\('\) is presupposed, some remain useful for clarifying the picture and are therefore used in later textbooks (e.g., Kreps 1988, p. 123). We shall use them as well.
Definition 3.6
(Fineness) A qualitative probability is fine if for every \(E\succ \varnothing \) there is a partition \(\{P_i\}_{i=1}^n\) of S such that \(E\succ P_i\), for every \(i=1,\ldots ,n\).
Definition 3.7
(Tightness) A qualitative probability is tight, if whenever \(E\succ F\), there exists \(C\succ \varnothing \), such that \(E\succ F\cup C \succ F\).
Obviously the fineness property is a special case of P6\('\), where the smaller set is \(\varnothing \). It is easy to show that \(\text{ P6 }' \iff \text{ fineness } + \text{ tightness }\), and in this “decomposition,” tightness is “exactly” what is needed in order to pass from fineness to P6\('\).
Remark 3.8
 (1)
Savage’s definition of “tightness” (p. 34) is different from the notion of tightness given above—it is more complicated and has only historical interest, although the two are equivalent if we presuppose fineness.
 (2)Let us say that the probability function \(\mu \) almost represents \(\succeq \) (in Savage’s terminology “almost agrees with” \(\succeq \)) if, for any E, F:Since \(E\not \succeq F \Rightarrow F \succ E\) it is easily seen that if \(\mu \) almost represents \(\succeq \) then it represents \(\succeq \) iff$$\begin{aligned} E\succeq F\Longrightarrow \mu (E)\ge \mu (F). \end{aligned}$$(3.4)Savage’s proof presupposes fineness, and its upshot is the existence of a unique \(\mu \) that almost represents \(\succeq \). Now fineness implies that if \(E \succ \varnothing \), then \(\mu (E) > 0\).^{14} With tightness added, this implies (3.5). Hence, under P6\('\), \(\mu \) is the unique probability representing \(\succeq \).$$\begin{aligned} E\succ F\Longrightarrow \mu (E) > \mu (F) \end{aligned}$$(3.5)
 1.
A partition of B is a collection of disjoint subsets of B, referred to as parts, whose union is B. We presuppose that the number of parts is \( > 1\) and is finite and that B is nonnull, i.e., \(B\succ \varnothing \).
 2.
It is assumed that no part is a nullevent, unless this is explicitly allowed.
 3.
By an npartition we mean a partition into n parts (this is what Savage calls nfold partition).
 4.
We adopt selfexplanatory expressions, like “a partition \(A = A_1\cup \dots \cup A_n\)” which means that the sets on the righthand side are a partition of A.
Definition 3.9
An almost uniform partition of an event B is a partition of B into a finite number of disjoint events, such that the union of any \(r+1\) parts is weakly more probable than the union of any r parts. An almost uniform npartition of B is a npartition of B which is almost uniform.
The main result of Part I comprises what in Savage’s enumeration are Theorem 1 and its proof, and the first claim of Theorem 2 (on the bottom of p. 34), and its proof. The latter consists of steps 1–7 and ends in the middle of p. 36. All in all, the result in Part I is:
Theorem 3.10
If, for arbitrary large numbers, n, there are almost uniform npartitions of S, then there exists a unique numerical probability \(\mu \) which almost represents \(\succeq \).
The proof of this result consists mainly of direct computational/combinatorial arguments; it is given with sufficient details and does not use the \(\sigma \)algebra assumption. We shall take the theorem and its proof for granted.
Part II consists in showing that fineness and the \(\sigma \)algebra assumption imply that there exist almost uniform npartitions for arbitrary large numbers n (together with the theorems of Part I this yields a unique probability that almost represents the qualitative one). This part is done in Theorem 3. The latter consists of a sequence of claims, referred to as “parts,” in which later parts are to be derived from earlier ones. The arrangement is intended to help the reader to find the proofs. For the more difficult parts, additional details are provided. Many claims are couched in terms that have only historical interests. For our purposes, we need only to focus on a crucial construction that uses what we shall call “iterated 3partitions” (cf. Sect. 3.1.4 below). This construction is described in the proof of Part 5 (on the top of p. 35). As a last step it involves the crucial use of the \(\sigma \)algebra assumption, we shall return to this step shortly.
Part III of Savage’s proof consists in the second claim of the aforementioned Theorem 2. It asserts that the numeric probability, which is derivable from the existence of almost uniform npartitions for arbitrary large n’s, satisfies \((\dag )\). The proof consists in three claims, 8a, 8b, 8c, the last of which relies on on the \(\sigma \)algebra assumption. The parallel part of our proof is the derivation of \((\ddagger )\) without using the \(\sigma \)algebra assumption. The proof is given in Sect. 3.2.4 below.
3.1.4 Savage’s method of iterated 3partitions
In order to prove Part 5 of Theorem 3, Savage claims that the following is derivable from the laws of qualitative probabilities and fineness.
Theorem 3.11
 (1)
\(C_n \cup G_n \succeq D_n\) and \(D_n \cup G_n \succeq C_n\)
 (2)
\(C_n \subseteq C_{n+1}\) , \(D_n \subseteq D_{n+1}\), hence \(G_n \supseteq G_{n+1}\)
 (3)
\(G_nG_{n+1} \succeq G_{n+1}\)
These properties imply that \(G_n\) becomes arbitrary small as \(n\rightarrow \infty \), that is:
 (4)
For any \(F \succ \varnothing \), there exists n such that \(G_m \prec F\) for all \(m\ge n\).
Note
Condition (3) in Theorem 3.11 means that \(G_n\) is a disjoint union of two subsets, \(G_n = G_{n+1} \cup (G_n  G_{n+1})\), each of which is \(\succeq G_{n+1}\). In this sense \(G_{n+1}\) is less than or equal to “half of \(G_n\)”. Had the probability been numeric we could have omitted the scare quotes; it would have implied that the probabilities of \(G_n\) tend to 0, as \(n \rightarrow \infty \). In the case of a qualitative probability the analogous conclusion is that the sets become arbitrary small, in the nonnumerical sense.
Savage provides an argument, based on fineness, which derives (4) from the previous properties. The argument is short and is worth repeating: Given any \(F\succ \varnothing \), we have to show that, for some n, \(G_n \prec F\). Assume, for contradiction, that this is not the case. Then \(F\preceq G_n\), for all ns. Now fineness implies that there is a partition \(S = P_1\cup \cdots \cup P_m\) such that \(P_i \preceq F\), for \(i = 1,\ldots ,m\). If \(F \preceq G_n\), then \(P_1 \preceq G_{n}\), hence \(P_1 \cup P_2 \preceq G_{n1}\), hence \(P_1 \cup P_2 \cup P_3 \cup P_4 \preceq G_{n2}\), and so on. Therefore, if \(2^{k1} \ge m\), then \(S \preceq G_1\), which is a contradiction.
Definition 3.12
Call an infinite sequence of 3partitions of B, which satisfies conditions (1), (2), (3), a Savage chain for B. We say that the chain passes through a 3partition of B, if the 3partition occurs in the sequence.
We presented the theorem so as to conform with Savage’s notation and the capital letters he used. Later we shall change the notation. We shall use ordered triples for the 3partition and place in the middle the sets that play the role of the \(G_n\)’s. The definition just given can be rephrased of course in terms of our later terminology.
Remark 3.13
The rest of Savage’s proof is not relevant to our work. For the sake of completeness, here is a short account of it. \(B_1, B_2\) form a partition of B, and \(\bigcap _n G_n \equiv \varnothing \). Assuming P6\('\), one can show that \(B_1 \equiv B_2\); but Savage does not use P6\('\) (a postulate that is introduced after Theorem 3), hence he only deduces that \(B_1\) and \(B_2\) are what he calls “almost equivalent”—one of the concepts he used at the time, which we need not go into. By iterating this division he proves that, for every n, every nonnull event can be partitioned into \(2^n\) almost equivalent events. At an earlier stage (Part 4) he states that every partition of S into almost equivalent events is almost uniform. Hence, there are almost uniform npartitions of S for arbitrary large ns. This together with the first claim of his Theorem 2 (Theorem 3.10 in our numbering) proves the existence of the required numeric probability.
We eliminate the \(\sigma \)algebra assumption by avoiding the construction of (3.6). We develop, instead, a technique of using trees, which generates big partitions, and many “error parts,” which can be treated simultaneously. We use it in order to get almost uniform partitions.
3.2 Eliminating the \(\sigma \)algebra assumption by using tripartition trees
So far, trying to follow faithfully the historical development of Savage’s system, we presupposed fineness rather than P6\('\). If we continue to do so the proof will be burdened by various small details, and we prefer to avoid this.^{16} From now on we shall presuppose P6\('\).^{17}
First, we give the 3partitions that figure in Savage’s construction a more suggestive form, suitable for our purposes:
Definition 3.14
 i.
\(B=C\cup E\cup D\)
 ii.
\(C,D\succ \varnothing \),
 iii.
\( C\cup E\succeq D\) and \(E\cup D \succeq C\).
We allow E to be a nullset, i.e., \(E\equiv \varnothing \), including \(E = \varnothing \). The case \(E=\varnothing \) constitutes the extreme case of a tripartition, where the error is \(\varnothing \). In diagrams, \(\varnothing \) serves in this case as a marker that separates the two parts.^{18}
3.2.1 Tripartition trees
Recall that a binary partition tree is a rooted ordered tree whose nodes are sets, such that each node that is not a leaf has two children that form a 2partition of it. By analogy, a tripartition tree, \({\mathcal T}\), is a rooted ordered tree such that: (1) The nodes are sets, which are referred to as parts, and they are classified into regular parts, and error parts. (2) The root is a regular part. (3) Every regular part that is not a leaf has three children that constitute a tripartition of it. (4) Errorparts have no children.
Figure 2 provides an illustration of a tripartition tree, written top down, in which the root is the event A, and the errorparts are shaded.
Note
No set can occur twice in a partition tree. Hence we can simplify the structure by identifying the nodes with the sets; we do not have to construe it as a labeled tree. (In the special cases in which the error is empty, \(\varnothing \) can occur more than once, but this should not cause any confusion.)
3.2.2 Additional concepts, terminologies, and notations
 1.
The levels of a tripartition tree are defined as follows: (1) level 0 contains the root; (2) level \(n+1\) contains all the children of the regular nodes on level n; (3) level \(n+1\) contains all error nodes on level n.
 2.
Note that this means that, once an errorpart appears on a certain level it keeps reappearing on all higher levels.
 3.
A tripartition tree is uniform if all the regular nodes that are leaves are on the same level. From now on we assume that the tripartition trees are uniform, unless indicated otherwise.
 4.
The height of a finite tree \({\mathcal T}\) is n, where n is the level of the leaves that are regular nodes. If the tree is infinite its height is \(\infty \).
 5.
A subtree of a tree is a tree consisting of some regular node (the root of the subtree) and all its descendants.
 6.
The truncation of a tree \({\mathcal T}\) at level m, is the tree consisting of all the nodes of \({\mathcal T}\) whose level is \(\le m\). (Note that if \(m\ge \) height of \({\mathcal T}\), then truncation at level m is the same as \({\mathcal T}\).)
 7.
Strictly speaking, the root by itself does not constitute a tripartition tree. But there is no harm in regarding it as the truncation at the 0 level, or as a tree of height 0.
Remark 3.15
 (1)
An ordered tree is one in which the children of any node are ordered (an assignment, which assigns to every node an ordering of its children, is included in the structure). Sometimes the trees must be ordered, e.g., when they are used to model syntactic structures of sentences. But sometimes an ordering is imposed for convenience; it makes for an easy way of locating nodes and for a useful twodimensional representation. In our case, the ordering makes it possible to locate the errorparts by their middle positions in the triple.^{19}
 (2)
The main error part of a tree is the error part on level 1.
 (3)
It is easily seen that on level k there are \(2^k\) regular parts and \(2^k  1\) errorparts. We use binary strings of length k to index the regular parts, and binary strings of length \(k1\) to index the errorparts, except for the main errorpart. Figure 1 shows how this is done. The main errorpart of that tree is E. We can regard the index of E as the empty binary sequence.
 (4)
We let \({\mathcal T}\) range over tripartitions trees and \({\mathcal T}_A\) over tripartition trees of A. We put \({\mathcal T}= {\mathcal T}_A\) in order to say that \({\mathcal T}\) is a tripartition tree with root A . To indicate the regular and error parts we put: \({\mathcal T}_A=(A_\sigma ,E_\sigma )\), where \(\sigma \) ranges over the binary sequences (it is understood that the subscript of E ranges over sequences of length smaller by 1 than the subscript of A.) To indicate also the height k, we put: \({\mathcal T}_{A,k}=(A_\sigma ,E_\sigma )_k\). Various parameters will be omitted if they are understood from the context.
Definition 3.16
(Total error) The total error of a tree \({\mathcal T}\), denoted \(E({\mathcal T})\), is the union of all errorparts of \({\mathcal T}\). That is to say, if \({\mathcal T}= {\mathcal T}_A =(A_\sigma ,E_\sigma )\), then \(E({\mathcal T})=_{\text{ Df }} \bigcup _\sigma E_\sigma \).
If \({\mathcal T}\) is of height k then \(E({\mathcal T})\) is the union of all errorparts on the klevel of \({\mathcal T}\). This is obvious, given that all errorparts of level j, where \(j<k\), reappear on level \(j+1\). For the same reason, if \(j<k\), then the total error of the truncated tree at level j is the union of all errorparts on level j.
Now recall that a Savage tripartition (C, E, D) has the property that \(C\cup E\succeq D\) and \(C\preceq E\cup D\) (cf. Definition 3.14). This property generalizes to tripartition trees:
Theorem 3.17
Proof
The rest of the proof relies on the following claim.
Claim
Proof of Claim
 (1)If \(B_1\succeq A_2\), then we have$$\begin{aligned} (A_1\cup E_1)\cup E\cup E_2\succeq B_1\cup E\cup E_2\succeq A_2 \cup E\cup E_2\succeq A_2. \end{aligned}$$
 (2)Otherwise \(B_1\prec A_2\). Suppose, to the contrary, that (3.11) fails, that is, \(A_2\succ A_1\cup (E_1\cup E\cup E_2)\). Since \(A_1,E_1,E,E_2,A_2,B_2\) are mutually exclusive, we have:The first inequality follows from the properties of qualitative probability. The second inequality holds because \(E_2\cup B_2 \succeq A_2\) in (3.9) and the third holds since we assume that \(A_2\succ B_1\). But, again from (3.9), we have \(A_1\cup E_1\cup E\cup B_1\succeq A_2\cup E_2\cup B_2\succeq A_2\cup B_2\). Contradiction. This proves (3.11).$$\begin{aligned} \begin{aligned} A_2\cup B_2&\succ A_1\cup (E_1\cup E\cup E_2)\cup B_2\\&\succeq A_1\cup E_1\cup E\cup A_2\\&\succ A_1\cup E_1\cup E\cup B_1. \end{aligned} \end{aligned}$$
3.2.3 The error reduction method for trees
Note that trees that have the same height are structurally isomorphic and there is a unique onetoone correlation that correlates the parts of one with the parts of the other. We have adopted a notation that makes clear, for each part in one tree, the corresponding part in the other tree. This also holds if one tree is a truncation of the other. The indexing of the regular parts and the error parts in the truncated tree is the same as in the whole tree.
Definition 3.18
(Error reduction tree). Given a tree, \({\mathcal T}_A=(A_\sigma ,E_\sigma )_k\), an errorreduction of \({\mathcal T}\) is a tree with the same root and the same height \({\mathcal T}'_A=(A'_\sigma ,E'_\sigma )_k\), such that for every \(\sigma \), \(A_\sigma \subseteq A'_\sigma \). We shall also say in that case that \({\mathcal T}'\) is obtained from \({\mathcal T}\) by error reduction.
Remark 3.19
 (1)
A is the union of all the regular leaves and the total error, \(E({\mathcal T}_A)\). If every regular part weakly increases, it is obvious that the total error weakly decrease: \(E({\mathcal T}')\subseteq E({\mathcal T})\). Thus, the term ‘errorreduction’ is justified. The reverse implication is of course false in general. The crucial property of errorreducing is that, in the reduction of the total error, every regular part (weakly) increases as a set.
 (2)
The reduction of \(E({\mathcal T})\) is in a weak sense, that is: that is, \(E({\mathcal T}') \subseteq E({\mathcal T})\). The strong sense can be obtained by adding the condition \(E({\mathcal T}') \prec E({\mathcal T})\). But, in view of our main result, we do not need to add it explicitly as part of the definition.
 (3)
Error reductions of Savage tripartitions (i.e., triples) is the simplest case of error reduction of trees: each of the two regular parts weakly increases and the error part weakly decreases—this is the error reduction in trees of height 1.
 (4)
It is easily seen that if \({\mathcal T}'\) is an errorreduction of \({\mathcal T}\) and \({\mathcal T}''\) is an errorreduction of \({\mathcal T}'\), then \({\mathcal T}''\) is an errorreduction of \({\mathcal T}\).
The proof of our central result is that, given any tripartition tree, there is an errorreduction of it in which the total error is arbitrarily small. That is, for every nonnull set F, there is an errorreduction tree of total error \(\preceq F\). The proof uses a certain operation on tripartition trees, which is defined as follows.
Definition 3.20
The notation \({\mathcal T}_{A}\oplus {\mathcal T}'_{A'}\) is always used under the assumption that A and A \('\) are disjoint and the trees are of the same height.
Lemma 3.21
 (1)
\({\mathcal T}_{A}\oplus {\mathcal T}'_{A'}\) is a tripartition tree of \(A\cup A'\) whose total error is \( E({{\mathcal T}_A})\cup E({\mathcal T}'_{A'})\).
 (2)
If \({\mathcal T}_A^{*}\) and \({\mathcal T}_{A'}^{+}\) are, respectively, error reductions of \({\mathcal T}_{A}\) and \({\mathcal T}'_{A'}\), then \({\mathcal T}^{*}_A \oplus {\mathcal T}_{A'}^{+}\) is an error reduction of \({\mathcal T}_{A}\oplus {\mathcal T}'_{A'}\)
Proof
Theorem 3.22
(Error reduction) For any tripartition tree \({\mathcal T}_A\) and any nonnull event F, there is an errorreduction tripartition \({\mathcal T}^*_A\) such that \(E({\mathcal T}^*_A)\preceq F\).
Proof
We prove the theorem by induction on k, where \(k =\) height of \({\mathcal T}_A\). If \(k=0\), then formally \({\mathcal T}_A\) consists of A only. Hence the base case is \(k=1\), and the only error part is on level 1. Let the tripartition on level 1 be \((A_0, E, A_1)\). We now apply the following result that is implied by Fishburn’s reconstruction of the proofs that Savage did not include in his book^{20}:
Claim
Given any tripartition \((C_0, E_0, D_0)\), there is a sequence of tripartitions \((C_n, E_n , D_n),\) \(n = 1, 2, \ldots \) that constitute a Savage chain such that \((C_1, E_1, D_1)\) is an error reduction of \((C_0, E_0, D_0)\).
Applying this Claim to the case \((C_0, E_0, D_0)=(A_0, E, A_1)\) we get an infinite Savage chain that begins with \((A_0, E, A_1)\). For some n, \(E_n \preceq F\). This proves the base case.
Note
If E is a null set, then we apply the induction hypotheses to each of \({\mathcal T}_{B_l}\) and \({\mathcal T}_{B_r}\), get errorreductions in which the total errors are, respectively, lessthanorequalto \(F_1\) and \(F_5\), and we are done. Otherwise we proceed as follows.
Theorem 3.22 is our main result and we shall refer to it as the error reduction theorem, or, for short, error reduction. We shall also use error reduction for the process in which we get tripartition trees in which the error is reduced.
3.2.4 Almost uniform partitions
Recall that a partition \(\{P_i\}_{i=1}^n\) of a nonnull event A is almost uniform if the union of any r members of the partition is not more probable than the union of any \(r+1\) members. In Theorem 3.10 we rephrased a result by Savage, which claims that if, for arbitrary large values of n there are almost uniform npartitions of S, then there is a unique numeric probability that almost represents the underlying qualitative one. We noted that Savage’s proof requires no further assumptions regarding the qualitative probability, and that if we assume P6\('\) then the probability (fully) represents the qualitative one (cf. Remark 3.8 above). Using repeated error reductions, we shall now show that for arbitrary large ns there are almost uniform npartitions of S.
Definition 3.24
Given \(C\succ \varnothing \), let us say that \(B\ll \frac{1}{n}C\) if there is a sequence \(C_1, C_2, \ldots , C_n\), of n mutually disjoint subsets of C, such that \(C_1\preceq C_2\preceq \cdots \preceq C_n\) and \(B\preceq C_1\).
The following are some simple intuitive properties of \(\ll \). The first two are immediate from the definition, and in the sequel we shall need only the first.
Lemma 3.25
 (1)
If \(B\ll \frac{1}{n}C\), and if \(A\preceq B\, and\, C\subseteq D\) then \(A\ll \frac{1}{n}D\).^{22}
 (2)
If \(B\ll \frac{1}{n}C\) then \(B\ll \frac{1}{m}C\) for all \(m<n\).
 (3)For any \(C,D\succ \varnothing \), there exists n such that, for all B,$$\begin{aligned} B\ll \frac{1}{n}C \implies B\preceq D. \end{aligned}$$(3.16)
Lemma 3.26
Proof
Fix \(A_\sigma \) and let \(\{C_i\}_{i=1}^n\) be a disjoint sequence of events contained in it as subsets, such that \(C_1\preceq C_2\preceq \ldots \preceq C_n\). Using error reduction, get a tree \({\mathcal T}'\) such that \(E({\mathcal T}')\preceq C_1\). Consequently, \(E({\mathcal T}'_A) \ll \frac{1}{n}A_\sigma \). Since the parts are disjoint and under the error reduction each regular part in \({\mathcal T}\) is a subset of its corresponding part in \({\mathcal T}'\), \(A'_\sigma \) is the unique part containing \(A_\sigma \) as a subset, which implies (3.17). \(\square \)
Lemma 3.27
Given any tripartition tree \({\mathcal T}=(A_\sigma ,E_\sigma )\) of height k and given any n, there is an error reduction \({\mathcal T}'=(A'_\sigma ,E'_\sigma )\) of \({\mathcal T}\) such that, for every regular part \(A'_\sigma \) on the kth level, \(E({\mathcal T}')\ll \frac{1}{n}A'_\sigma \).
Proof
Apply Lemma 3.26 repeatedly \(2^k\) times, as \(\sigma \) ranges over all the binary sequences of length k. Since the regular parts can only expand and the total error can only contract, we get at the end an error reduction, \({\mathcal T}'\), such that \(E({\mathcal T}')\ll \frac{1}{n}A'_\sigma \), for all \(\sigma \). \(\square \)
Theorem 3.28
Proof
Remark 3.29
3.2.5 The proof of the \((\ddagger )\) condition
Next we demonstrate that the \((\ddagger )\) condition holds. As we shall show in Sect. 4, this property will play a crucial role in defining utilities for simple acts, without using the \(\sigma \)algebra assumption.
Theorem 3.30
Let \(\mu \) be the probability that represents the qualitative probability \(\succeq \). Assume that P6\('\) holds. Then, for every nonnull event, A, every \(\rho \in (0,1)\) and every \(\epsilon >0\) there exists an event \(B\subseteq A\), such that \((\rho  \epsilon )\cdot \mu (A) \le \mu (B) \le \rho \cdot \mu (A)\).
Proof
 (i)
\(A'_n \cup E_n \succeq A_n''\, \text{ and }\, A'_n \cup E_n \succeq A_n''\)
 (ii)
\(A'_{n+1}\supseteq A'_n,\; A_{n+1}''\supseteq A_n''\), hence \(E_{n+1}\ \subseteq E_n\ \)
 (iii)
\(E_n  E_{n+1} \succeq E_{n+1}\).
 (1)\(\mu (A'_n) + \mu (E_n) \ge \mu (A_n'')\) and \(\mu (A_n'') + \mu (E_n) \ge \mu (A'_n)\), which imply:
 (a)
\(\mu (A'_n)  \mu (A_n'') \le \mu (E_n)\).
 (a)
 (2)\(\mu (E_{n+1}) \le (1/2)\cdot \mu (E_n)\), which implies:
 (b)
\(\mu (E_n) \le (1/2)^{n1}\).
 (b)
Claim 1
Call such a partition an \(\epsilon \)bipartition of A. Call \(\epsilon \) the errormargin of the bipartition. We can now apply such a bipartition to each of the parts, and so on. By “applying the procedure” we mean applying it to all the nonnull minimal sets that were obtained at the previous stages (the inductive definition should be obvious).
Claim 2
 (+)For every \(\epsilon > 0\), \(k>1\), there are \(2^k\) disjoint subsets, \(A_i\), of A, such that:$$\begin{aligned}1/2^k\cdot \mu (A)  \epsilon /2^k\cdot \mu (A)\ ~~\le ~~ \mu (A_i)~~ \le ~~ 1/2^k\cdot \mu (A). \end{aligned}$$
 (\(*\))
 For every \(\epsilon > 0\), \(k>1\), there are \(2^k\) disjoint subsets, \(A_i\), of A, such that:$$\begin{aligned} \mu (A_i) \in \Big [1/2^k\cdot \big (\mu (A)  \epsilon \big ), ~~ 1/2^k\cdot \mu (A) \Big ]. \end{aligned}$$
 (\(**\))
 Fix any nonnull set A. Then for every \(\rho < 1\), and any \(\epsilon '>0\), there is a set \(B\subseteq A\), for which$$\begin{aligned} \mu (B) \in \Big [\big (1\epsilon '\big )\cdot \rho \mu (A) , ~ \rho \mu (A)\Big ]. \end{aligned}$$
 \((\circ )\)

Given any \(\epsilon > 0\) and any \(k > 1\), there are \(2^k\) disjoint subsets, \(A_i\), such that, for all i, \(\mu (A_i) \in \big [1/2^k\big (1  \epsilon \big ), ~ 1/2^k \big ]. \)
 \((\circ \circ )\)

Given any \(0<\rho <1\) and any \(\epsilon '>0\), there is a set B such that \(\mu (B) \in \big [\rho \big (1\epsilon '\big ), ~\rho \big ].\)
Now let \(\rho '=\rho \cdot (1\epsilon ')\); then \((\circ \circ )\) means that given \(0<\rho '<\rho <1\), there is B such that \(\mu (B)\in [\rho ' , ~\rho ]\). Let \(\theta <\rho \). Since \(\theta \) and \(\rho \) are infinite sums of binary fractions of the form \(1/2^k\), it is easily seen that there is a finite set of such fractions whose sum is in the interval \( [\theta ,~\rho ]\). Since, \(1/2^m =2\big (1/2^{m+1}\big )\), it follows that there are k and \(l<2^k\), such that \(l/2^k \in [\theta ,~\rho ]\). Let \(A_i\) be the disjoint sets that satisfy \((\circ )\) and let B be the union of l of them. Then \((1\epsilon )\cdot \rho \le \mu (B)\le \rho \). \(\square \)
Remark 3.31
It’s worth repeating that (\(\ddagger \)) does not rely on the \(\sigma \)algebra assumption, but (\(\dag \)) does. That (\(\dagger \)) cannot be obtained without the \(\sigma \)algebra assumption is shown by the existence of countable models, as shown in §3.3.
3.3 Countable models
The \(\sigma \)algebra assumption implies that the Boolean algebra of events has at least the cardinality of the continuum. Its elimination makes it possible to use a countable Boolean algebra. All that is needed is a qualitative probability, \(\succeq \), defined over a countable Boolean algebra, which satisfies P6\('\). There are more than one way to do this. Here is a type of what we shall call bottom up extension. In what follows, a qualitative probability space is a system of the form \((S, {\mathcal B}, \succeq )\), where \({\mathcal B}\) is a Boolean algebra of subsets of S and \(\succeq \) is qualitative probability defined over \({\mathcal B}\).
Definition 3.32
Let \((S, {\mathcal B}, \succeq )\) be a qualitative probability space. Then a normal bottom up extension of \((S, {\mathcal B}, \succeq )\) is a pair consisting of a qualitative probability \((S', {\mathcal B}', \succeq ')\) and a mapping \(h: S'\rightarrow S\), of \(S'\) onto S, such that for every \(A,B\in {\mathcal B}\), \(h^{1}(B) \in {\mathcal B}'\) and \(A \succeq B \iff h^{1}(A) \succeq ' h^{1}(B)\).
Remark 3.33
The extension is obtained by, so to speak, splitting the atoms (the states in S) of the original algebra. This underlies the technique of getting models that satisfy P6\('\). In order to satisfy P6\('\) we have, given \(A\succ B\), to partition S into sufficiently fine parts, \(P_i, i=1, 2, \ldots ,n\), such that \(A\succ B\cup P_i\) for all \(i=1,\ldots ,n\). If we start with a finite Boolean algebra, the way to do it is to divide the atoms into smaller atoms. The intuitive idea is that our states do not reflect certain features of reality, and that, if we take into account such features, some states will split into smaller ones.
This picture should not imply that P6\('\), which is a technical condition, should be adopted. The intuitive justification of P6\('\), which has been pointed out by Savage, is different.
We have shown that, starting from a finite qualitative probability space we can, by an infinite sequence of normal extensions, get a countable space (that is, both S and \({\mathcal B}\) are countable) that satisfies P6\('\). We can also get models with other desired features. The proof of the following theorem, which is not included here, uses techniques of repeated extensions that are employed in set theory and in model theory.
Theorem 3.34
 (1)
Let \((S_0, {\mathcal B}_0, \succeq _0)\) be a finite qualitative probability space and assume that the qualitative probability is representable by some numeric probability. Then there is an infinite countable model, \((S, {\mathcal B}, \succeq )\), which forms together with a mapping, \(h: S \rightarrow S_0\) , a normal extension of \((S_0, {\mathcal B}_0, \succeq _0)\), and which satisfies P6\('\).
 (2)
Let \(\Xi \) be any countable subset of (0, 1) and let \(\mu \) be the numeric probability that represents \(\succeq \) (which exists by (1) and by our main result). Then we can construct the model \((S, {\mathcal B}, \succeq )\) in such a way that \(\mu (A)\notin \Xi \) for every \(A\in {\mathcal B}\).
This theorem implies, for example, that for all n, no number of the form 1 / n, where \(n>1\), and no number of the form \((1/2)^n\), where \(n>0\), are among the values of \(\mu \). Now de Finetti and Koopman proposed axiom systems for subjective probability that included an axiom stating that there are partitions of S into n equal parts for arbitrary large ns. Our theorem shows that, without the \(\sigma \)algebra assumption, P6\('\) does not imply the existence of a probability that satisfies that axiom. Savage found P6\('\) more intuitive than their axiom (and indeed it is), but was somewhat puzzled by the fact that it implies that axiom. Our last theorem solves this puzzle. It shows that without the \(\sigma \)algebra assumption it does not imply their axiom.
Remark 3.35
So far we have been dealing with the Boolean algebra only. But in order to state the results within the full perspective of Savage’s system, we shall state them as results about decision models, that is, about systems of the form \((S, X, {\mathcal A}, \succcurlyeq , {\mathcal B})\). This is done in the following theorem.
In what follows \(f \circ g\) is the composition of the functions f and g, defined by \((f\circ g)(x) = f(g(x))\). It is used under the assumption that the domain of f includes the range of g.
Theorem 3.36
 (i)
\(S^*\) and \({\mathcal B}^*\) are countable,
 (ii)
for all \(A\in {\mathcal B}\), \(h^{1}(A)\in {\mathcal B}^*\),
 (iii)
\(X^*=X\),
 (iv)
\(f\in {\mathcal A}^*\) iff \(f\circ h\in {\mathcal A}\),
 (v)
\(f^*\succcurlyeq ^* g^*\) iff \(f\circ h\succcurlyeq g\circ h\).
As noted, the proofs of these theorems employs techniques of modeltheory and settheory. Here is a rough idea of one basic techniques from set theory. At every stage of the repeated extensions we ensure that a particular instance of P6\('\) should be satisfied. As the model grows, there are more cases to take care of, but we can arrange these tasks so that after the infinite sequence of extensions all are taken care of. We shall not go into more detail here.
4 A simpler utility function for simple acts
In the last sentence Savage claims that the argument in favor of restricting ourselves to simple acts should be rejected; otherwise this argument would also imply that in applied mathematics we need not consider infinite sets. But Savage’s system main goal is to serve as a foundation for subjective (in his terminology, personal) probability—clearly a philosophical goal, which makes it a different kind of thing than a piece of applied mathematics. In applied mathematics one uses, as a rule, \(\sigma \)additive probabilities, for reasons of convenience and efficiency; but Savage avoids, because of philosophical qualms, the adoption of \(\sigma \)additivity as an axiom of his system.The requirement that an act has only a finite number of consequences may seem, from a practical point of view, almost no requirement at all. To illustrate, the number of time intervals that might possibly be the duration of a human life can be regarded as finite, if you agree that the duration may as well be rounded to the nearest minute, or second, or microsecond, and that there is almost no possibility of its exceeding a thousand years. More generally, it is plausible that, no matter what set of consequences is envisaged, each consequence can be particularly identified with some element of a suitably chosen finite, though possibly enormous, subset. If that argument were valid, it could easily be extended to reach the conclusion that infinite sets are irrelevant to all practical affairs, and therefore to all parts of applied mathematics. (Savage 1972, p. 76–77)
In the continuation of the above quote Savage points out the very high benefits that accrue in mathematics from the use of infinite sets, which “can lead to great simplification of situations that could, in principle, but only with enormous difficulty, be treated in terms of finite sets.” Yet, his system cannot be treated merely as a piece of mathematics. As a mathematician, Savage is interested in generalizing various concepts and theorems, for the sake of the mathematical significance of the generalization. As we shall presently show, CAA can be avoided, if we limit ourselves to simple acts, and, as far as the philosophical goal of his system is concerned—this is all that matters. For, as we noted in the first two Sections, CAA implies a rather dubious notion of “rational agent.”
Recall that a feasible consequence is a consequence, a, for which there is an act \(f\in {\mathcal A}\), such that \(f^{1}(a)\) is not null. We shall now show how, using the probability \(\mu \), we can assign utility values to all to feasible consequences, so as to get an expected utility function defined over all simple acts. This is done without assuming CAA. Let u(x) the utility of consequence x. We start by putting \(u(a_0)=0\), \(u(a_1)=1\). This means that the acts \(\mathfrak {c}_0\) and \(\mathfrak {c}_1\) fix the basic utility scale. Without appealing to CAA we shall now assign utilities to all feasible consequences. To do this, we use the probability \(\mu \), which we have derived already. The definition is simpler if \(\mu \) satisfies \((\dagger )\). Therefore we shall provide this definition first, and then point out the modification that will give us the utility assignment, if the probability satisfies \((\ddagger )\). At the end we get a utility assignment for all simple acts, where neither the \(\sigma \)algebra assignment nor CAA are assumed.
4.1 Constructing utilities under the \((\dagger )\) condition
Consider now any feasible consequences \(a\in X\) and let g be an act such that \(g^{1}(a)\) is not null. Let \(A=g^{1}(a)\) and let \(\mathfrak {c}^*_A=_\text {Df}gA+\mathfrak {c}_0\overline{A}.\) By definition, \(\mathfrak {c}^*_A\) yields a if \(s\in A\), status quo, (i.e., 0)—otherwise. Let U(f) be the utility value of the act f, which we have to define.
This assignment of utilities leads to a representation of the utility of any simple acts, f, as the expected utilities of the consequences, that appear as values of the act, where, WLOG, we assume that each consequence a of f is feasible. As noted by Savage, this definition works, if we assume that \(\mu \) satisfied \((\dagger )\). The proof is straightforward.
4.2 Constructing utilities under the \((\ddagger )\) condition
Footnotes
 1.
“Before this [Savage’s 1954 book], the now widelyreferenced theory of Frank P. Ramsey (1931) was virtually unknown.” (Fishburn 1970, p. 161)
 2.
Savage’s notion of constant act can be seen as a structural equivalent of “degenerate lotteries” in the vNM model, where a degenerate lottery \(\delta _a\) assigns probability 1 to a given outcome a.
 3.
Preorders are defined at the end of this section, where terminologies and notations are discussed.
 4.
In order to extend that proposition to all acts, Savage adds his last postulate, P7. See also Fishburn (1970, Chapter 14) for a detailed presentation.
 5.
 6.
Fishburn (1970, pp. 166–167) went into the problem at some detail. He noted that, if W(x) is the set of consequences that are possible in state x, then we can have \(W(s)\ne W(s')\), and even \(W(s)\cap W(s')=\varnothing \). He noted that, so far there is no proof that avoids CAA, and suggested a line of research that would enrich the set of states by an additional structure of this paper (see also Fishburn 1981, p. 162). The decision model in Gaifman and Liu (2015) (also sketched in Sect. 4) avoids the need for an additional structure, as far as simple acts are concerned.
 7.
A null event is an event B, such that, given B, all acts are equivalent. These are the events whose probability is 0. See also Appendix B.
 8.
Some writers use ‘\(f\oplus _Eg\)’ or ‘(f, E, g)’ or ‘fEg’ or ‘[f on E, g on \(\overline{E}\)]’ for this definition.
 9.
“Omelet” obviously means a good omelet.
 10.
This price is avoided in (Ramsey 1926) because for Ramsey the values derive from the propositions and, in the final account, from the states. CAA is also avoided in Jeffrey (1965, 1983), because the JeffreyBolker system realizes, in a better and more systematic way, Ramsey’s point of view. That system however is of a different kind altogether, and has serious problems of its own, which we shall not address here.
 11.
The preference relation is not “given” in the same way that the entrenched notion of probability, with its long history, is. The preference relation is rather a tool for construing probability in a decision theoretic way. John can clarify to himself what he means by “more probable” by considering its implications for making practical decisions. In a more operational mood one might accord the preference relation a selfstanding status. Whether Savage is inclined to this is not clear. He does appeal to intuitions about the probabilities; for example in comparing P6\('\) to an axiom suggested by de Finetti and by Koopman, he argues that it is more intuitive, (and we agree with him). This is even clearer with regard to P6—the decisiontheoretic analog of P6\('\) which implies P6\('\).
 12.
This is the case even if the number of consequence is infinite. There are some exceptions: if \(\mathfrak {c}_a\) and \(\mathfrak {c}_b\) are nonequivalent and if E and \(E'\) are two events then the equivalence: \(\mathfrak {c}_aE + \mathfrak {c}_bE'\; \equiv \; \mathfrak {c}_bE' + \mathfrak {c}_aE\) implies that E and \(E'\) have equal probabilities. Using equivalences of this form makes it possible to determine certain probability distributions over a finite set of atoms.
 13.
Some such line of thought has guided de Finetti (1937a). Counterexamples were however found of qualitative probabilities that are not representable by quantitative ones. First to be found were counterexamples in which the Boolean algebra is infinite. They were followed by counterexamples for the finite case, in particular, a counterexample in which the qualitative probability is defined over the Boolean algebra of all subsets of a set consisting of 5 members, (cf. Kraft et al. 1959).
 14.
To see this, let \(P_1,\ldots , P_n\) be a partition of S such that \(P_i \preceq E\) for all \(i = 1,\ldots ,n\). Then, for some i, \(\mu (P_i) > 0\), otherwise \(\mu (S) = 0\). Hence \(\mu (E) > 0\).
 15.
The proof of the existence of such a sequence was left to the reader. Fishburn (1970, pp. 194–197) reconstructs parts of Savage’s work, filling in missing segments. Part 5 of Theorem 3 is among the material Fishburn covers. Fishburn presupposes however a qualitative probability that satisfies P6\('\) (F5—in his notation). Therefore his proof cannot be the one meant by Savage; the latter uses only fineness. We believe that it should not be too difficult to make such a proof, or to modify Fishburn’s proof of part 5, so as to get a proof from fineness only. The matter is not too important, since the problem of the \(\sigma \)algebra assumption concerns qualitative logic that satisfies P6\('\). Besides, we can trust Savage that his claims are derivable from fineness alone.
 16.
Under P6\('\), \(E \equiv \varnothing \) implies \(A \cup E \equiv A\); if only fineness is assumed this need not hold, but it is still true that \(A \cup E\) can be made arbitrary small, by making A arbitrary small.
 17.
 18.
Under P6\('\) the case \(E\equiv \varnothing \) can, for all purposes, be assimilated to the case \(E = \varnothing \), because we can add E to one of the regular parts, say C, and \(C\cup E \equiv C\). But under fineness nonempty nullsets cannot be eliminated in this way.
 19.
Yet, the left/right distinction of the regular parts is not needed. Formally, we can take any regular part, B, which is not a leaf, and switch around the two regular parts that are its children, keeping the error part fixed: from \(B_l E B_r\) to \(B_r E B_l\); at the same time we switch also the subtrees that are rooted in \(B_l\) and \(B_r\). The switch can be obtained by rotating (in a 3dimensional space) the two subtrees. Such a switch can be considered an automorphism of the structure: Our tripartition trees can be viewed as ordered trees, “divided” by the equivalence that is determined by the group of automorphisms that is generated by these rotations. All the claims that we prove in the sequel hold under this transformation group.
 20.
See the proof of C8 (and the claims that lead to it) in Fishburn (1970, pp. 195–198).
 21.
Since \(F\succ \varnothing \) there exists a nonnull subset \(F_1\subseteq F\) such that \(F\succ F_1 \succ \varnothing \). This is established by considering an npartition \(S = S_1 \cup \cdots \cup S_n\) such that \(S_i \prec F\) for all \(i=1,\ldots n\), and observing that there must be two different parts, say \(S_i, S_j\), whose intersections with F are \(\succ \varnothing \); otherwise, \(F \preceq S_k\), for some k, contradicting \(S_k\prec F\). Put \(F_1 = F\cap S_i\); then \(F_1\) and \(FF_1\) are nonnull, and we can apply the same procedure to \(FF_1\), and so on.
 22.
Note however that from \(B\ll \frac{1}{n}C\) and \(C\preceq D\) we cannot infer \(B\ll \frac{1}{n}D\). The inference is true if we assume \(C\prec D\); this can be shown by using the numeric probability that represents the qualitative one—whose existence we are about to prove. There seems to be no easier way of showing it.
 23.
This observation is also noted in (Fishburn 1981, p. 161) where the author remarked that “[as far as obtaining a unique probability measure is concerned] Savage’s \(\mathscr {C}\) [i.e., the set of consequences] can contain as few as two consequences” (see also Fishburn 1982, p. 6). Fishburn (1970, §14.1–3) contains a clean exposition of Savage’s proof of (3.1); and see especially §14.3 for an illustration of the role of P1–P6 played in deriving numerical probability.
 24.
“[W]e use Greek letters to represent the different possible totalities of events between which our subject chooses—the ultimate organic unities” (pp. 176–177).
 25.
For example, axiom 3 (p. 179) says that the equivalence relation is transitive. Additional properties are implied by the axioms on the whole.
 26.
Or rather, as the ratios of a line segments to some fixed segment chosen as unit.
 27.
If p is not ethically neutral then the gamble is supposed to be adjusted already, so that \(\beta \) contains the contribution of p and \(\gamma \)—the contribution of \(\lnot p\).
Notes
Acknowledgements
The authors want to thank an anonymous referee for pointing out an error in an early version of this paper.
References
 de Finetti, B. (1937a). Foresight: Its logical laws, its subjective sources. In H. E. Kyburg & H. E. Smokler (Eds.), Studies in subjective probability (2nd ed., pp. 53–118). Huntington, NY: Robert E. Krieger Publishing Co., Inc. 1980.Google Scholar
 de Finetti, B. (1937b). La prévision: Ses lois logiques, ses sources subjectives. Annales de l’Institut Henri Poincaré., 7, 1–68.Google Scholar
 Fishburn, P. C. (1970). Utility theory for decision making. New York: Wiley.CrossRefGoogle Scholar
 Fishburn, P. C. (1981). Subjective expected utility: A review of normative theories. Theory and Decision, 13(2), 139–199.CrossRefGoogle Scholar
 Fishburn, P. C. (1982). The foundations of expected utility. Dordrecht: Reidel.CrossRefGoogle Scholar
 Gaifman, H. (2004). Reasoning with limited resources and assigning probabilities to arithmetical statements. Synthese, 140(1–2), 97–119.CrossRefGoogle Scholar
 Gaifman, H., & Liu, Y. (2015). Contextdependent utilities: A solution to the problem of constant acts in Savage. In W. van der Hoek, W. H. Holliday, & W. F. Wang (Eds.), Logic, rationality, and interaction, volume 9394 of lecture notes in computer science (pp. 90–101). Berlin: Springer.Google Scholar
 Hacking, I. (1967). Slightly more realistic personal probability. Philosophy of Science, 34(4), 311–325.CrossRefGoogle Scholar
 Jeffrey, R. C. (1965). The logic of decision. New York: McGrawHill.Google Scholar
 Jeffrey, R. C. (1983). The logic of decision (2nd ed.). Chicago: University of Chicago Press.Google Scholar
 Joyce, J. (1999). The foundations of causal decision theory. Cambridge studies in probability, induction, and decision theory. Cambridge: Cambridge University Press.CrossRefGoogle Scholar
 Koopman, B. O. (1940a). The axioms and algebra of intuitive probability. Annals of Mathematics, 41(2), 269–292.Google Scholar
 Koopman, B. O. (1940b). The bases of probability. Bulletin of the American Mathematical Society, 46(10), 763–774.Google Scholar
 Koopman, B. O. (1941). Intuitive probabilities and sequences. Annals of Mathematics, 42(1), 169–187.Google Scholar
 Kraft, C., Pratt, J., & Seidenberg, A. (1959). Intuitive probability on finite sets. The Annals of Mathematical Statistics, 30(2), 408–419.CrossRefGoogle Scholar
 Kreps, D. M. (1988). Notes on the theory of choice, underground classics in economics. Boulder: Westview Press.Google Scholar
 Liu, Y. (2015). Probabilities: Studies in the foundations of Bayesian decision theory. PhD thesis, Columbia University.Google Scholar
 Luce, R. D., & Krantz, D. H. (1971). Conditional expected utility. Econometrica: Journal of the Econometric Society, 39(2), 253–271.CrossRefGoogle Scholar
 Pratt, J. W. (1974). Some comments on some axioms for decision making under uncertainty. In M. Balch, D. McFadden, & S. Wu (Eds.), Essays on economic behavior under uncertainty (pp. 82–92). New York: American Elsevier Publishing Company.Google Scholar
 Ramsey, F. P. (1926). Truth and probability. In R. B. Braithwaite (Ed.), The foundations of mathematics and other logical essays, chapter VII (pp. 156–198). London: Kegan, Paul, Trench, Trubner & Co.Google Scholar
 Savage, L. J. (1954). The foundations of statistics. New York: Wiley.Google Scholar
 Savage, L. J. (1972). The foundations of statistics (2nd revised ed.). New York: Dover Publications, Inc.Google Scholar
 Shafer, G. (1986). Savage revisited. Statistical Science, 1(4), 463–485.CrossRefGoogle Scholar
 von Neumann, J., & Morgenstern, O. (1944). The theory of games and economic behavior. Princeton: Princeton University Press.Google Scholar
Copyright information
Open AccessThis article is distributed under the terms of the Creative Commons Attribution 4.0 International License (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license, and indicate if changes were made.