1 Introduction

Among the various proof frameworks used in the investigation of nonclassical logics, systems of rules as introduced by Negri [16] remain relatively little studied. Broadly speaking, a system of rules is a sequent-type calculus with a global correctness condition on the order in which rules may be applied; they form an instance of higher-level rules [20]. In [16], for example, it is shown that extending the sequent calculus for intuitionistic logic with the system of rules

figure a

yields a calculus for Gödel Logic, i.e. the extension of intuitionistic logic by the linearity axiom \((A\rightarrow B)\vee (B\rightarrow A)\). The schematic representation of the system above is understood as follows: Both rules \((A,B)_L\) and \((A,B)_R\) can be used in branches of the proof tree as long as those branches meet below in an instance of (Lin). By using such global conditions it is possible to capture analytically various logics that do not have a cutfree sequent calculus. For example, [16] develops systems of rules based on the labelled sequent calculus for all normal modal logics axiomatised by (generalised) Sahlqvist formulas. In [9] it is shown that proofs in the hypersequent calculus can be rewritten as particular systems of sequent rules, called 2-systems (and vice versa). A different use of global conditions is shown in [1]: By replacing the (local) eigenvariable condition in first-order \(\textbf{LK}\)-proofs by a global condition, one obtains sound but potentially much shorter proofs.

The study of cut-elimination in systems of rules is in a rather unsatisfying stage. In [9] the analyticity of the systems of rules is obtained, but only indirectly via cut-elimination in the hypersequent calculus. [16] argues that a standard cut reduction argument goes through in the system of rules and illustrates one reduction step. As already remarked in [9], the argument seems to apply only to rules handling atomic formulas. This restriction is possible in the labelled sequent calculus but is too strong in an unlabelled system.

In the first part of this article we develop grounded proofs, a simple system of rules for the modal logics \(\textbf{KT}^\Box \) and \(\textbf{K5}\) of shift-reflexive and Euclidean frames respectively. These logics are of interest because their proof theory is less straightforward than that of other modal logics. In particular, neither shift-reflexivity nor Euclideanness is a simple frame property [13] which would guarantee the existence of a cutfree hypersequent calculus. The most elementary proof system for \(\textbf{KT}^\Box \) and \(\textbf{K5}\) seems to be the grafted hypersequent calculus of Lellmann and Kuznets [12]. Nested [7], prefixed tableaux [14] and labelled sequent calculi [15] are also available.

Our systems can be succinctly described as follows. For \(\textbf{KT}^\Box \), grounded proofs can make use of all rules of a sequent calculus for \(\textbf{KT}\), with the proviso that every unsound modal rule has an instance of the rule \((K)\) below it. For \(\textbf{K5}\), grounded proofs can make use of all rules of a hypersequent calculus for \(\textbf{S5}\), with the proviso that every unsound modal rule has an instance of the rule \((MM)\) below it:

figure b

It is a remarkable feature of both systems that their cutfree completeness can be proved directly, using only the deduction theorem and the cutfreeness of the (hyper)sequent calculi for \(\textbf{K}\), \(\textbf{KT}\) and \(\textbf{S5}\). With these ingredients the proof is almost trivial for \(\textbf{KT}^\Box \); for \(\textbf{K5}\) we additionally have to prove a combinatorial lemma about hypersequent derivations. In retrospect, grounded proofs can be seen as proofs in the grafted hypersequent calculus that satisfy a normal form. We make this observation precise by defining a translation from our system into the grafted hypersequent calculus, thereby obtaining a new (and arguably much simpler) proof of cut-elimination for the latter calculus.

In the second part of this article we explore the theme of strongly modular proofs of cut-elimination, i.e.: Proofs of cut-elimination that build on the cut-elimination property of adjacent logics (\(\textbf{K}\), \(\textbf{KT}\) and \(\textbf{S5}\) in our example) but do not require knowledge about how cut-elimination for these systems was obtained. In other words, a proof of cut-elimination is strongly modular if it uses other cut-elimination theorems as ‘blackboxes’. What is the scope of strongly modular proofs? We show that for many logics, strongly modular proofs of cut-elimination are possible in a simple sequent system with a global correctness condition called revivability. This condition however is defined only abstractly, and so the usefulness of said result depends on finding a simpler equivalent characterisation of revivability. We conclude by showing two examples where such a simple characterisation is possible: The modal logic \(\textbf{KD}\) of serial frames and the intermediate logic \(\textbf{LQ}\) axiomatised by the law of the weak excluded middle.

2 Preliminaries

Modal Logics. By a modal logic we mean any set of formulas in the language \(\{\bot ,\lnot ,\wedge ,\vee ,\rightarrow ,\Box \}\) that contains all propositional tautologies, the normality axiom \(\Box (p\rightarrow q)\rightarrow (\Box p\rightarrow \Box q)\), and is closed under uniform substitution, Modus Ponens (from A and \(A\rightarrow B\) infer B) and Necessitation (from A infer \(\Box A\)).

The smallest modal logic (with respect to \(\subseteq \)) is \(\textbf{K}\). For any modal logic \(\textbf{L}\) and formula C, \(\textbf{L}+C\) denotes the smallest extension of \(\textbf{L}\) to a modal logic containing all instances of C. The table below lists some modal logics relevant to this paper, together with their corresponding frame condition (for proofs, see e.g. [5]).

modal logic

 frame condition

 first-order formula

\(\textbf{KT}:=\textbf{K}+ \Box p\rightarrow p\)

 reflexive

 \(\forall x\,xRx\)

\(\textbf{KT}^\Box := \textbf{K}+ \Box (\Box p\rightarrow p)\)

 shift-reflexive

 \(\forall x\forall y.\,xRy\rightarrow yRy\)

\(\textbf{K5}:= \textbf{K}+ \lnot \Box p\rightarrow \Box \lnot \Box p\)

 Euclidean

 \(\forall x\forall y\forall z.\,x Ry\wedge xRz\rightarrow yRz\)

\(\textbf{S5}:= \textbf{K5}+ \Box p\rightarrow p\)

 totally connected

 \(\forall x\forall y.\, xRy\)

The deduction theorem has to be slightly adapted for modal logics. We define \(\Box ^k A:=\Box \ldots \Box A\) (k boxes) for \(k>0\) and \(\Box ^0 A:= A\). A modalized instance of C is any formula of the form \(\Box ^k C_0\) where \(C_0\) is an instance of C and \(k\ge 0\). Then:

Theorem 1

(essentially [10, Theorem 2]).\(A\in \textbf{K}+C\) iff \((\wedge \varOmega )\rightarrow A\in \textbf{K}\) for some finite set \(\varOmega \) of modalized instances of C.

Sequent Calculi. A sequent is a pair of finite multisets of formulas written \(\varGamma \Rightarrow \varDelta \). Its formula interpretation is \(\wedge \varGamma \rightarrow \vee \varDelta \) where \(\wedge \emptyset :=\lnot \bot \) and \(\vee \emptyset :=\bot \). We say that a sequent is valid in a logic if its formula interpretation is.

The propositional rules in Fig. 1 constitute a calculus \(\textbf{LK}\) for classical propositional logic.Footnote 1 We obtain sequent calculi

  • \(\mathcal {C}_{\textbf{K}}\) by adding the modal rule \((K)\);

  • \(\mathcal {C}_{\textbf{KT}}\) by adding both modal rules \((K)\) and \((T)\).

Derivations in sequent calculi will be denoted by letters \(\alpha ,\beta \). The formula A is said to be derivable in a sequent calculus if the sequent \(\Rightarrow A\) is. A sequent calculus is called adequate for a logic if the formulas it derives are exactly the theorems of the logic. Finally, a proof in a sequent calculus is cutfree if it does not use the rule (cut), and a sequent calculus admits cut-elimination if every sequent provable in it has a cutfree proof. The following is folklore:

Theorem 2

The calculi \(\mathcal {C}_{\textbf{K}}\) and \(\mathcal {C}_{\textbf{KT}}\) are adequate for the modal logics \(\textbf{K}\) and \(\textbf{KT}\) respectively and admit cut-elimination.

Fig. 1.
figure 1

Propositional, modal and structural hypersequent rules.

3 Two Systems of Rules

The similarity of the modal logics \(\textbf{KT}^\Box \) and \(\textbf{K5}\) lies in the fact that they are both ‘one step away’ from their companion logics \(\textbf{KT}\) and \(\textbf{S5}\) respectively. That is, in any shift-reflexive (Euclidean) frame the subframe induced by all worlds reachable from some fixed world is reflexive (totally connected), and therefore adequate for \(\textbf{KT}\) (\(\textbf{S5}\)). We formalize this observation for later reference.

Theorem 3

Let M be a Kripke model containing a world w, and let \(M_w\) be obtained from M by restricting M’s frame to worlds that are reachable from w (using one or more steps) via the accessibility relation. Then:

  1. 1.

    \(M,v\models \varphi \iff M_w,v\models \varphi \) for all worlds v in \(M_w\) and modal formulas \(\varphi \);

  2. 2.

    If M is shift-reflexive, then \(M_w\) is reflexive;

  3. 3.

    If M is Euclidean, then \(M_w\) is totally connected.

From this one can easily deduce the following known equivalences:

Theorem 4

\(\Box A\in \textbf{KT}^\Box \iff A\in \textbf{KT}\) and \(\Box A\in \textbf{K5}\iff A\in \textbf{S5}\).

Theorem 4 implies that we can use the sequent calculus \(\mathcal {C}_{\textbf{KT}}\) and the hypersequent calculus \(\textbf{HS5}\) (see Sect. 3.2) to derive formulas in the boxed fragment of \(\textbf{KT}^\Box \) and \(\textbf{K5}\). But it is not immediate what Theorem 4 tells us about the proofs of theorems in \(\textbf{KT}^\Box \) and \(\textbf{K5}\) that are not prefixed with \(\Box \), e.g. \(\lnot \Box p\rightarrow \Box \lnot \Box p\in \textbf{K5}\) or \(\Box \Box p\rightarrow \Box p\in \textbf{KT}^\Box \).

3.1 \(\textbf{KT}^\Box \)

We start by describing a simple system of rules for \(\textbf{KT}^\Box \), which is obtained by imposing a global constraint on \(\mathcal {C}_{\textbf{KT}}\)-proofs. The crucial notion is the following:

Definition 1

(grounded \(\mathcal {C}_\textbf{KT}\)-proof). A proof in \(\mathcal {C}_{\textbf{KT}}\) is grounded if any lowermost modal inference in it is \((K)\).

In other words, only those instances of (T) are admitted in a grounded \(\mathcal {C}_{\textbf{KT}}\)-proof that have an instance of \((K)\) below. No exact pairing is required, i.e. the same instance of \((K)\) can ‘ground’ multiple instances of (T) above it. Figure 2 (left and middle) shows two grounded \(\mathcal {C}_{\textbf{KT}}\)-proofs with the modal rules highlighted.

Fig. 2.
figure 2

Grounded proofs in \(\textbf{KT}\) (left and middle) and in \(\textbf{HS5}\) (right)

Theorem 5

(Soundness of grounded \(\mathcal {C}_\textbf{KT}\)-proofs). If there is a grounded \(\mathcal {C}_{\textbf{KT}}\)-proof of \(\varGamma \Rightarrow \varDelta \), then \(\varGamma \Rightarrow \varDelta \) is valid in \(\textbf{KT}^\Box \).

Proof

It suffices to show that the conclusion of an instance of \((K)\) in a \(\mathcal {C}_{\textbf{KT}}\)-proof is valid in \(\textbf{KT}^\Box \). Indeed, as the endsequent of a grounded \(\mathcal {C}_{\textbf{KT}}\)-proof is derivable from the conclusions of its lowermost instances of \((K)\) using only propositional rules, it then follows that the endsequent is valid in \(\textbf{KT}^\Box \) as well.Footnote 2 So let

figure c

be such an instance. As its premise \(\varGamma \Rightarrow A\) is valid in \(\textbf{KT}\), we can use the deduction theorem (Theorem 1) to obtain a finite set \(\varOmega \) of modalized instances of the reflexivity axiom \(\Box p\rightarrow p\) such that the sequent \(\varOmega ,\varGamma \Rightarrow A\) is valid in \(\textbf{K}\). Then, by \((K)\), also \(\Box \varOmega ,\Box \varGamma \Rightarrow \Box A\) is valid in \(\textbf{K}\). As all formulas in \(\Box \varOmega \) are modalized instances of the axiom of shift-reflexivity and therefore valid in \(\textbf{KT}^\Box \), it follows that the reduced sequent \(\Box \varGamma \Rightarrow \Box A \) is valid in \(\textbf{KT}^\Box \).   \(\square \)

Theorem 6

(Cutfree completeness of grounded \(\mathcal {C}_\textbf{KT}\)-proofs). If \(\varGamma \Rightarrow \varDelta \) is valid in \(\textbf{KT}^\Box \), then there is a grounded cutfree \(\mathcal {C}_{\textbf{KT}}\)-proof of it.

Proof

Let \(\varGamma \Rightarrow \varDelta \) be valid in \(\textbf{KT}^\Box \). By the deduction theorem there is a finite set \(\varOmega \) of modalized instances of \(\Box (\Box p\rightarrow p)\) such that \(\varOmega ,\varGamma \Rightarrow \varDelta \) is valid in \(\textbf{K}\). We may write \(\varOmega \) as \(\Box \varOmega '\), where \(\varOmega '\) is now a set of modalized instances of \(\Box p\rightarrow p\).

Consider a lowermost instance of \((K)\) in a cutfree \(\mathcal {C}_{\textbf{K}}\)-proof \(\alpha \) of \(\varOmega ,\varGamma \Rightarrow \varDelta \):

figure d

Here we assume harmlessly that \(\Box \varOmega '\) in the conclusion of \((K)\) contains exactly the antecessors of \(\varOmega =\Box \varOmega '\) in the endsequent, i.e. no contraction or weakening has been applied to a formula in \(\Box \varOmega '\) between this instance of \((K)\) and the endsequent. We now construct a cutfree grounded proof as follows. In \(\alpha \), replace the proof of the premise (for all lowermost \((K)\) simultaneously) with a cutfree \(\mathcal {C}_{\textbf{KT}}\)-proof of \(\varSigma \Rightarrow A\); this is possible as every formula in \(\varOmega '\) is valid in \(\textbf{KT}\), and moreover \(\textbf{KT}\) admits cut-elimination. Apply \((K)\) to obtain the sequent \(\Box \varSigma \Rightarrow \Box A\), and now follow the original proof downwards while removing antecessors of \(\Box \varOmega '\) to eventually obtain \(\varGamma \Rightarrow \varDelta \).    \(\square \)

3.2 \(\textbf{K5}\)

The system of rules for \(\textbf{K5}\) will involve a hypersequent calculus for \(\textbf{S5}\), so we first introduce some notation. A hypersequent is a multiset of sequents written \(\varGamma _1\Rightarrow \varDelta _1\mid \ldots \mid \varGamma _n\Rightarrow \varDelta _n\) and its (modal) formula interpretation is \(\Box (\wedge \varGamma _1\rightarrow \vee \varDelta _1)\vee \ldots \vee \Box (\wedge \varGamma _1\rightarrow \vee \varDelta _1)\). We say that a hypersequent is valid in a logic if its formula interpretation is.

There are now two ways of assigning a formula to \(\varGamma \Rightarrow \varDelta \), namely \(\Box (\wedge \varGamma \rightarrow \vee \varDelta )\) “boxed” or \(\wedge \varGamma \rightarrow \vee \varDelta \) “flat”, depending on whether we treat \(\varGamma \Rightarrow \varDelta \) as a one-component hypersequent or as a sequent. To avoid any ambiguity, we will explicitly say in this section that \(\varGamma \Rightarrow \varDelta \) is flat-valid in a logic \(\textbf{L}\) if \(\wedge \varGamma \rightarrow \vee \varDelta \in \textbf{L}\). Otherwise, by validity of a hypersequent (possibly with only one component) we always mean the boxed interpretation above. In any modal logic \(\textbf{L}\supseteq \textbf{KT}\) (so in particular, \(\textbf{S5}\)) we have the equivalence \(A\in \textbf{L}\iff \Box A\in \textbf{L}\) and so the notions of valid and flat-valid coincide on sequents. However, we will work in \(\textbf{K5}\) where such an equivalence does not apply.

Definition 2

The rules of the hypersequent calculus \(\textbf{HS5}\) are as follows:

  • Any rule of \(\textbf{LK}\), applied componentwise in a hypersequent;

  • Additionally, we have rules (ew) and (ec), the modal rules \((\Box ^5_L),(\Box ^5_R)\) (see Fig. 1) and the modal merging rule \((MM)\):

    figure e

There are a number of slightly different hypersequent calculi for \(\textbf{S5}\) (see the survey [3]) and any of these would be suitable for the system of rules we define below. We use a variant due to Restall [18] as this calculus underlies the grafted hypersequent calculus in [12] to which we later relate.

The only change from [18] is that we include the rule \((MM)\). While being redundant—\((MM)\) is derivable from \((\Box ^5_L)\) and \((\Box ^5_R)\)—it will be useful to formulate the system of rules. Note that (MM) has no hypersequent context and so its conclusion is always a sequent. For \(n=1\) the rule coincides with \((K)\).

Theorem 7

([18]). \(\textbf{HS5}\) is adequate for \(\textbf{S5}\) and admits cut-elimination.

Definition 3

A proof in \(\textbf{HS5}\) is grounded if every lowermost modal rule in it is \((MM)\).

Figure 2 (right) shows a grounded \(\textbf{HS5}\)-proof of the characteristic \(\textbf{K5}\)-axiom. While it is formally possible due to (ew) and (ec) that hypersequents with more than one component appear in the lower part of a grounded \(\textbf{HS5}\)-proof, it is easy to see that this is never necessary. We will therefore tacitly assume that Definition 3 is extended by the clause: ...and every hypersequent that is not above an instance of \((MM)\) has exactly one component. The following Lemma will give us the soundness of grounded \(\textbf{HS5}\)-proofs.

Lemma 1

If the premise of an instance of \((MM)\) is valid in \(\textbf{S5}\), then its conclusion is flat-valid in \(\textbf{K5}\).

Proof

Assume contrapositively the conclusion \(\Box \varGamma _1,\ldots ,\Box \varGamma _n\Rightarrow \Box A_1,\ldots ,\Box A_n\) is not flat-valid in \(\textbf{K5}\). Then \((\wedge _{i\le n}\Box \varGamma _i)\rightarrow (\vee _{i\le n}\Box A_i)\) fails at a world w of an Euclidean model M. In particular, there are worlds \(v_1,\ldots ,v_n\) accessible from w such that \(v_i\) satisfies every formula in \(\varGamma _i\) but falsifies \(A_i\). Now we use Theorem 3. Pick an arbitrary world v in \(M_w\) (say, \(v_1\)). As \(M_w\) is totally connected, every world \(v_1,\ldots ,v_n\) is accessible from v. Hence \(\Box (\wedge \varGamma _i\rightarrow A_i)\) fails at v for every \(i\le n\), and consequently so does \(\vee _{i\le n}\Box (\wedge \varGamma _i\rightarrow A_i)\), which is the (boxed) interpretation of the premise \(\varGamma _1\Rightarrow A_1\mid \ldots \mid \varGamma _n\Rightarrow A_n\) of \((MM)\). Since \(M_w\) is totally connected, it follows that this hypersequent is not valid in \(\textbf{S5}\).   \(\square \)

Theorem 8

(soundness of grounded \(\textbf{HS5}\)-proofs). If there is a grounded \(\textbf{HS5}\)-proof of \(\varGamma \Rightarrow \varDelta \), then \(\varGamma \Rightarrow \varDelta \) is flat-valid in \(\textbf{K5}\).

Proof

Similar to the proof of Theorem 5. The endsequent \(\varGamma \Rightarrow \varDelta \) of a grounded proof is derivable from the conclusions of instances of \((MM)\) using only propositional inferences. As these conclusions are flat-valid in \(\textbf{S5}\) by Lemma 1, the same followsFootnote 3 for \(\varGamma \Rightarrow \varDelta \).   \(\square \)

We now turn to the cutfree completeness of grounded \(\textbf{HS5}\)-proofs. This will again be derived from the deduction theorem and cut-elimination for \(\mathcal {C}_{\textbf{K}}\) and \(\textbf{HS5}\). The situation in \(\textbf{K5}\) is more complicated than in \(\textbf{KT}^\Box \) for the following reason: The outermost connective of the axiom \(\Box (\Box p\rightarrow p)\) is a \(\Box \), and thus the first (read bottom-up) rule that will be applied to it when used as an assumption in a \(\mathcal {C}_{\textbf{K}}\)-proof is \((K)\), i.e. the very rule that separates the top from the bottom part in our system of rules. In contrast, the outermost connective of \(\lnot \Box p\rightarrow \Box \lnot \Box p\) is \(\rightarrow \). So if we follow an occurrence of the axiom upwards in the proof, it will first be split into two different parts \(\Box p\) and \(\Box \lnot \Box p\) via \((\rightarrow _L)\) and \((\lnot _R)\) that only later encounter a modal rule. Thus at the part of the proof where we want to introduce the rule \((MM)\) to obtain a system of rules, the constituent formulas of the axiom instances have been scattered among the branches of the \(\mathcal {C}_{\textbf{K}}\)-proof. In a first step, we use the hypersequent structure to bring these scattered axiom parts back together.

Lemma 2

The following rule is admissible in \(\textbf{S5}\):

figure f

Proof

The rule can easily shown to be sound using the Kripke semantics of \(\textbf{S5}\). It can also be derived from the generalised rule for cuts on boxed formulas that Avron uses in his proof [2] of cut-elimination for \(\textbf{S5}\).   \(\square \)

Fig. 3.
figure 3

Constructing a grounded \(\textbf{HS5}\)-proof

At this point we can already illustrate how the grounded \(\textbf{HS5}\)-proof will be constructed in a very simple case—see Fig. 3. Here we start from a cutfree \(\mathcal {C}_{\textbf{K}}\)-proof using only a single non-modalized axiom instance \(\lnot \Box C \rightarrow \Box \lnot \Box C\). After breaking up the axiom into two parts \(\Box C\) and \(\Box \lnot \Box C\) using invertible rules, both parts are traced upwards in their respective branch \(\alpha _1\) and \(\alpha _2\) until they are principal in an inference of \((K)\). Then both premises of (K) are rejoined using Lemma 2 into a single hypersequent, thereby eliminating the axiom parts. Below this hypersequent we can simulate both proofs \(\alpha _1\), \(\alpha _2\) (this time omitting the axiom parts) to arrive at the desired \(\varGamma \Rightarrow \varDelta \).

To deal with the general case, we need to extend Lemma 2. For this we introduce some notation: Given an index set \(I=\{1,\ldots ,n\}\) we write \(\varGamma ,\{C_i\}_{i\in I}\Rightarrow \varDelta \) for the sequent \(\varGamma ,C_1,\ldots ,C_n\Rightarrow \varDelta \), and \(\mathcal {H}\mid [\varGamma _i\Rightarrow \varDelta _i]_{i\in I}\) for the hypersequent \(\mathcal {H}\mid \varGamma _1\Rightarrow \varDelta _1\mid \ldots \mid \varGamma _n\Rightarrow \varDelta _n\).

Lemma 3

Let \(\{C_i\mid i\in I\}\) be a set of formulas. If the hypersequent

$$ \mathcal {H}\mid \{C_j\}_{j\in J},\{\lnot \Box C_k\}_{k\in I\setminus J},\varGamma _J\Rightarrow \varDelta _J $$

is valid in \(\textbf{S5}\) for all \(J\subseteq I\), then so is \(\mathcal {H}\mid [\varGamma _J\Rightarrow \varDelta _J]_{J\subseteq I} \).

Proof

By induction on |I|. For \(I=\emptyset \) the statement is trivial. Thus let \(i_0\in I\). For \(J\subseteq I\) we call \(S_J\) the hypersequent

$$ \mathcal {H}\mid \{C_j\}_{j\in J},\{\lnot \Box C_k\}_{k\in I\setminus J},\varGamma _J\Rightarrow \varDelta _J. $$

For any \(J\subseteq I\) with \(i_0\in J\) and \(L\subseteq (I\setminus \{i_0\})\) we apply Lemma 2 (with \(C:=C_{i_0}\)) to \(S_J\) and \(S_L\) obtaining

$$ \mathcal {H}\mid \{C_j\}_{j\in J\setminus \{i_0\}},\{\lnot \Box C_k\}_{k\in I\setminus J},\varGamma _J\Rightarrow \varDelta _J\mid \{C_l\}_{l\in L},\{\lnot \Box C_m\}_{m\in (I\setminus \{i_0\})\setminus L},\varGamma _L\Rightarrow \varDelta _L $$

Call \(S_J^*\) the component with right hand side \(\varDelta _J\). Keeping J fixed while letting \(L\subseteq (I\setminus \{i_0\})\) vary, we can use the induction hypothesis to obtain the hypersequent

$$ \mathcal {H}\mid S_J^*\mid [\varGamma _L\Rightarrow \varDelta _L]_{L\subseteq I\setminus \{i_0\}}. $$

By another application of the induction hypothesis, now letting J vary across subsets of I containing \(i_0\) (in other words: letting \(J'\) vary across subsets of \(I\setminus \{i_0\}\) and setting \(J:=J'\cup \{i_0\}\)), we obtain

$$\begin{aligned} \mathcal {H}\mid [\varGamma _J\Rightarrow \varDelta _J]_{J\subseteq I,i_0\in J}\mid [\varGamma _L\Rightarrow \varDelta _L]_{L\subseteq I\setminus \{i_0\}} \end{aligned}$$

i.e. \(\mathcal {H}\mid [\varGamma _J\Rightarrow \varDelta _J]_{J\subseteq I}\).   \(\square \)

Note that Lemma 2 is the instance of Lemma 3 where \(|I|=1\). We can now prove the completeness theorem.

Theorem 9

(Cutfree completeness of grounded \(\textbf{HS5}\)-proofs). If \(\varGamma \Rightarrow \varDelta \) is flat-valid in \(\textbf{K5}\), then there is a cutfree grounded \(\textbf{HS5}\)-proof of it.

Proof

Let \(\varGamma \Rightarrow \varDelta \) by flat-valid in \(\textbf{K5}\). By the deduction theorem, there is a set \(\varOmega \) of modalized instances of \(\lnot \Box p\rightarrow \Box \lnot \Box p\) such that \(\varOmega ,\varGamma \Rightarrow \varDelta \) is flat-valid in \(\textbf{K}\), and therefore has a cutfree \(\mathcal {C}_{\textbf{K}}\)-proof \(\alpha \). We can write \(\varOmega \) as \(\Box \varOmega _1\cup \{\Box C_i\rightarrow \Box \lnot \Box C_i\}_{i\in I}\) where \(\Box \varOmega _1\) contains modalized instances of the axiom with at least one box. By standard invertibility results in \(\mathcal {C}_{\textbf{K}}\), we may assume that the lowermost inferences in \(\alpha \) are \((\rightarrow _L)\) and \((\lnot _R)\) applied to all axioms \(\lnot \Box C_i\rightarrow \Box \lnot \Box C_i\). In this way, we obtain \(2^{|I|}\)-many premises, which can succinctly be described as follows: For every \(J\subseteq I\), we have a premise \(T_J\) containing the (negated) antecedents of all axioms with index \(j\in J\) and the consequents of all other axioms, i.e.

$$ T_J:=\Box \varOmega _1,\{\Box C_j\}_{j\in J},\{\Box \lnot \Box C_k\}_{k\in I\setminus J},\varGamma \Rightarrow \varDelta . $$

We now fix cutfree \(\mathcal {C}_{\textbf{K}}\)-proofs \(\alpha _J\) of \(T_J\) for every \(J\subseteq I\). Letting \(P_J\) denote the number of lowermost inferences of \((K)\) in \(\alpha _J\), we enumerate them as

figure g

where \(0<p\le P_J\). Once again we assume harmlessly that the modalized axiom instances and their parts in the antecedent have not been subject to contraction or weakening. Let us assume moreover that \(P_J\ne 0\) for all \(J\subseteq I\), i.e. there is at least one instance of \((K)\) in every \(\alpha _J\), as the other case is very simple.Footnote 4

As the premise of \((K)^p_J\) is flat-valid in \(\textbf{K}\) and every formula in \(\varOmega _1\) is valid in \(\textbf{S5}\), it follows that the sequent

$$ S_J^p:=\{C_j\}_{j\in J},\{\lnot \Box C_k\}_{k\in I\setminus J},\varGamma ^p_J\Rightarrow A^p_J $$

is flat-valid, and therefore also valid, in \(\textbf{S5}\). Define \(\mathcal {F}:=\{f:\mathcal {P}(I)\rightarrow \mathbb {N}\mid 0<f(J)\le P_J\}\) and fix one \(f\in \mathcal {F}\). We think of f as choosing one specific lowermost instances \((K)_J^{f(J)}\) in every \(\alpha _J\). The family \(\{S_J^{f(J)}\}_{J\subseteq I}\) is such that Lemma 3 is applicable to it, and therefore the following hypersequent is valid in \(\textbf{S5}\):

$$ \mathcal {H}^f:=[\varGamma _J^{f(J)}\Rightarrow A^{f(J)}_J]_{J\subseteq I} $$

We now construct the grounded \(\textbf{HS5}\)-proof. Fix cutfree \(\textbf{HS5}\)-proofs \(\beta ^f\) of \(\mathcal {H}^f\) for every \(f\in \mathcal {F}\). Below each \(\beta ^f\) apply \((MM)\) to obtain the sequent

$$ \{\Box \varGamma _J^{f(J)}\}_{J\subseteq I}\Rightarrow \{\Box A_J^{f(J)}\}_{J\subseteq I}. $$

Letting \(J_1,J_2,\ldots \) be an enumeration of \(\mathcal {P}(I)\), we focus on the subfamily of sequents

$$ \{\Box \varGamma _J^{f(J)}\}_{J\subseteq I,J\ne J_1},\Box \varGamma ^p_{J_1}\Rightarrow \Box A^p_{J_1},\{\Box A_J^{f(J)}\}_{J\subseteq I,J\ne J_1} $$

for fixed \(f\in \mathcal {F}\) and varying \(0<p\le P_{J_1}\). In other words, we consider all possible values of f on \(J_1\) while keeping the other values fixed. Now observe that these \(P_{J_1}\)-many sequents look similar to the conclusions of the instances \((K)^p_{J_1}\) where \(0<p\le P_{J_1}\), only that the axiom parts have been replaced. We can therefore simulateFootnote 5 the proof \(\alpha _{J_1}\) below these sequents obtaining

$$ \{\Box \varGamma _J^{f(J)}\}_{J\subseteq I,J\ne J_1},\varGamma \Rightarrow \varDelta ,\{\Box A_J^{f(J)}\}_{J\subseteq I,J\ne J_1} $$

instead of the original endsequent \(T_J\) of \(\alpha _{J_1}\). Starting from this new family of sequents (for all \(f\in \mathcal {F}\)), we can repeat the above steps, simulating the proofs \(\alpha _{J_2}\), \(\alpha _{J_3}\), \(\alpha _{J_4} \ldots \) until we eventually arrive at the sequent \(\varGamma ,\ldots ,\varGamma \Rightarrow \varDelta ,\ldots ,\varDelta \) from which we then obtain \(\varGamma \Rightarrow \varDelta \) by contraction.   \(\square \)

3.3 Grounded Proofs and Grafted Hypersequents

In [12] calculi for the logics \(\textbf{KT}^\Box \) and \(\textbf{K5}\) are defined. These build on the notion of a grafted hypersequent \(\varGamma \Rightarrow \varDelta \mid \mid \varSigma _1\Rightarrow \varDelta _1\mid \ldots \mid \varSigma _n\Rightarrow \varDelta _n\) consisting of a sequent \(\varGamma \Rightarrow \varDelta \) called the trunk and a hypersequent \(\varSigma _1\Rightarrow \varDelta _1\mid \ldots \mid \varSigma _n\Rightarrow \varDelta _n\) called the crown. If the crown is empty, we write \(\varGamma \Rightarrow \varDelta \) instead of \(\varGamma \Rightarrow \varDelta \mid \mid \). A grafted hypersequent corresponds to the modal formula \( (\wedge \varGamma \rightarrow \vee \varDelta )\vee \vee _{i=1}^n\Box (\wedge \varSigma _i\rightarrow \vee \varDelta _i) \), i.e. one combines the flat interpretation of the trunk with the boxed interpretation of the crown. As pointed out in [12], grafted hypersequents are a restricted form of nested sequents.

We can now compare our systems of grounded proofs with the calculi in [12]. Let us first consider the grafted hypersequent calculus \(\mathcal {R}_{\textbf{K5}}\) for \(\textbf{K5}\). We refer to [12, Figs. 1 and 2] for a complete list of the rules. The following presentation should suffice for our purposes:

  • The trunk rules are the rules of \(\textbf{LK}\) applied to the trunk, the crown remaining unchanged;

  • The crown rules are the rules of \(\textbf{HS5}\setminus \{(MM)\}\) applied to the crown, where it is required that the trunk is the empty sequent \(\Rightarrow \);

  • Two transfer rules mediate between the trunk and the crown:

    figure h

A grounded \(\textbf{HS5}\)-proof can be translated into a proof in \(\mathcal {R}_{\textbf{K5}}\) as follows:

  1. 1.

    Replace every non-lowermost \((MM)\) by its derivation via \((\Box ^5_L)\) and \((\Box ^5_R)\).

  2. 2.

    Replace every hypersequent \(\mathcal {H}\) above some instance of \((MM)\) by \(\Rightarrow \mid \mid \mathcal {H}\).

  3. 3.

    Replace every lowermost \((MM)\)-inference by transfer rules as shown below:

    figure i

The grafted hypersequent calculus \(\mathcal {R}_{\textbf{KT}^\Box }\) for the logic of shift-reflexive frames is defined similarly; here it is only componentwise applications of \(\mathcal {C}_{\textbf{KT}}\)-rules that are admitted in the crown (it follows that one only needs crowns with one component). An analogous translation from grounded \(\mathcal {C}_{\textbf{KT}}\)-proofs to \(\mathcal {R}_{\textbf{KT}^\Box }\) can be defined. The translated proofs satisfy a normal form that already appears in [12, see Def. 4.3].

As the translation described above does not introduce cuts, and as there are cutfree grounded proofs for all theorems of \(\textbf{KT}^\Box \) (Theorem 6) and \(\textbf{K5}\) (Theorem 8), we immediately obtain a new proof of the following (first established in [12] via a syntactic reduction procedure):

Theorem 10

\(\mathcal {R}_{\textbf{K5}}\) and \(\mathcal {R}_{\textbf{KT}^\Box }\) admit cut elimination.

4 Strongly Modular Proofs of Cut-Elimination

The method of the previous section can be summarized as follows: Aiming to show \(\varGamma \Rightarrow \varDelta \) in an extended system (\(\textbf{KT}^\Box \) or \(\textbf{S5}\)), we start from a cutfree \(\mathcal {C}_{\textbf{K}}\)-proof \(\alpha \) of \(\varOmega ,\varGamma \Rightarrow \varDelta \) for some (modularized) axiom instances \(\varOmega \) of the extended logic. Then we inspect \(\alpha \) and replace some parts of it with cutfree proofs in \(\mathcal {C}_{\textbf{KT}}\) or \(\textbf{HS5}\), this way getting rid of the axiom instance in \(\varOmega \) and thereby obtaining a cutfree ‘grounded’ proof of \(\varGamma \Rightarrow \varDelta \).

We emphasize the following: At no point in the argument one needed to understand how cut-elimination for \(\mathcal {C}_{\textbf{K}},\mathcal {C}_{\textbf{KT}}\) and \(\textbf{HS5}\) is established. In other words, these cut-elimination results are used as ‘blackboxes’ in the proof. Let us introduce the following informal terminology: A proof of cut-elimination is

  • weakly modular if it is obtained by modifying or extending the cut-elimination proof of some other logic;

  • strongly modular if it is obtained by using the cut-elimination property of some other logic, irrespective of how this property was obtained.

Our proofs of Theorem 6 and Theorem 9 are strongly modular in this sense. We are not aware of other such proofs in the literature.Footnote 6 On the other hand, weakly modular proofs are numerous: One might for example argue for cut-elimination in \(\mathcal {C}_{\textbf{KT}}\) by describing how the reduction steps in the cut-elimination algorithm for \(\mathcal {C}_{\textbf{K}}\) have to be extended to accommodate the additional rule (T).Footnote 7 The disadvantage of this approach is of course that the reader has to know the algorithm for \(\mathcal {C}_{\textbf{K}}\). If such a proof were to be formalised, one would have to copy and extend the complete formalisation of the proof for \(\mathcal {C}_{\textbf{K}}\), instead of using \(\mathcal {C}_{\textbf{K}}\)’s already established cut-elimination as a lemma in the formalised proof for \(\mathcal {C}_{\textbf{KT}}\). The most successful attempts at modularity in cut-elimination have been proofs that are parametrized over a specific class of axioms or rules (e.g. [4, 8, 13, 17]).

We believe strongly modular proofs of cut-elimination are interesting and deserve further study. They have the potential of being both shorterFootnote 8 and more reliable through the reuse of already established theorems. Moreover, given the general significance of cut-elimination, any method for obtaining it is important.

Of course, with only twoFootnote 9 examples at hand there is the possibility that we have encountered a ‘happy coincidence’ rather than a general idea. Indeed the situation of \(\textbf{KT}^\Box \) and \(\textbf{K5}\) is quite special in that they are sandwiched between logics with cutfree calculi, i.e. \(\textbf{K}\subseteq \textbf{KT}^\Box \subseteq \textbf{KT}\) and \(\textbf{K}\subseteq \textbf{K5}\subseteq \textbf{S5}\), and the gap to the ‘upper logic’ \(\textbf{KT}\) or \(\textbf{S5}\) is very small in a precise sense (Theorem 4).

In the remainder of this article we sketch an idea that could be useful for obtaining strongly modular proofs of cut-elimination for other logics. We conduct the discussion in a semi-formal style. While there will not be enough evidence for a ‘general method’, we do present two further examples where a strongly modular proof is possible: The modal logic \(\textbf{KD}\) (using cut-elimination in \(\textbf{K}\)) and the intermediate logic \(\textbf{LQ}\) (using cut-elimination in intuitionistic logic).

4.1 Calculi with Ghost Rules

We start from the general situation that \(\textbf{L}\subseteq \textbf{M}\) where \(\textbf{L}\) is some logic with a cutfree sequent calculus \(\mathcal {C}_{\textbf{L}}\). We seek a calculus for \(\textbf{M}\) that admits a strongly modular proof of cut-elimination, relative to cut-elimination in \(\mathcal {C}_{\textbf{L}}\). We additionally assume that a deduction theorem holds between \(\textbf{L}\) and \(\textbf{M}\). That is, a sequent \(\varGamma \Rightarrow \varDelta \) is valid in \(\textbf{M}\) iff \(\varOmega ,\varGamma \Rightarrow \varDelta \) is valid (and therefore cutfree provable) in \(\textbf{L}\) for a suitable set of formulas \(\varOmega \).

Our proofs of the completeness theorems (Theorems 6 and 9) suggest that we should attempt to construct a cutfree \(\textbf{M}\)-proof of \(\varGamma \Rightarrow \varDelta \) by somehow transforming a cutfree \(\mathcal {C}_{\textbf{L}}\)-proof \(\alpha \) of \(\varOmega ,\varGamma \Rightarrow \varDelta \). Now one naive transformation might immediately spring to mind: Can we simply take \(\alpha \) and remove all occurrences of \(\varOmega \) and its ancestors in \(\alpha \) to obtain a cutfree proof \(\alpha ^\dagger \) of \(\varGamma \Rightarrow \varDelta \)?

The first question then is, in what system does \(\alpha ^\dagger \) qualify as a proof? Clearly removing formulas from inferences in \(\mathcal {C}_{\textbf{L}}\) creates unsound rules. In a first step, we therefore extend \(\mathcal {C}_{\textbf{L}}\) with ‘ghost rules’: These are rules in which the principal formula in the conclusion and its ancestors in the premises have been removed. For examples, the ghost rules corresponding to \((\wedge _R)\) and \((K)\) are

figure j

Different rules can have the same ghost rules, e.g. \((\wedge _R)^\dagger =(\vee _L)^\dagger \). Some ghost rules, e.g. \((\wedge _L)^\dagger \), are ‘dummy inferences’ \(\varGamma \Rightarrow \varDelta / \varGamma \Rightarrow \varDelta \) that we do not add to the system. If \(\mathcal {C}_{\textbf{L}}\) has initial sequents \(p\Rightarrow p\) then one or both occurrences of p can be ancestors of \(\varOmega \), and thus we need different ghost initial sequents:

figure k

Letting \(\mathcal {C}_{\textbf{L}}^\dagger \) denote the calculus extended by such ghost inferences we see that \(\alpha ^\dagger \) is (up to dummy inferences) a cutfree \(\mathcal {C}_{\textbf{L}}^\dagger \)-proof of \(\varGamma \Rightarrow \varDelta \). More generally we infer from the deduction theorem that every sequent valid in \(\textbf{M}\) has a cutfree proof in \(\mathcal {C}_{\textbf{L}}^\dagger \). But of course, \(\mathcal {C}_{\textbf{L}}^\dagger \) also has many derivations which do not correspond to proofs in \(\textbf{M}\).

Definition 4

A class \(\mathbb {P}\) of \(\mathcal {C}_{\textbf{L}}^\dagger \)-proofs is cutfree-adequate for \(\textbf{M}\) if the endsequent of every \(\mathbb {P}\)-proof is valid in \(\textbf{M}\) (‘soundness’) and there is a cutfree \(\mathbb {P}\)-proof of every \(\textbf{M}\)-valid sequent (‘completeness’).

Let us informally call \(\textbf{M}\)-revivable a \(\mathcal {C}_{\textbf{L}}^\dagger \)-proof of \(\varGamma \Rightarrow \varDelta \) if we can insert formulas and inferences into it to obtain a \(\mathcal {C}_{\textbf{L}}\)-proof of \(\varOmega ,\varGamma \Rightarrow \varDelta \), where \(\varOmega \) is a set of \(\textbf{M}\)-valid formulas. The proof \(\alpha ^\dagger \) from the above discussion is the typical example of an \(\textbf{M}\)-revivable proof.

By the deduction theorem and cut-elimination in \(\mathcal {C}_{\textbf{L}}\) it follows that the \(\textbf{M}\)-revivable proofs in \(\mathcal {C}_{\textbf{L}}^\dagger \) form a cutfree-adequate class for \(\textbf{M}\).Footnote 10 So what we have obtained is indeed a strongly modular proof of cut-elimination for the system of \(\textbf{M}\)-revivable \(\mathcal {C}_{\textbf{L}}^\dagger \)-proofs. The property of being \(\textbf{M}\)-revivable can be seen as a global correcteness condition on \(\mathcal {C}_{\textbf{L}}^\dagger \)-proofs, and therefore constitutes—in its broadest interpretation—a system of rules for \(\mathcal {C}_{\textbf{L}}^\dagger \). But of course this observation is ratherFootnote 11 useless in practice unless we can express the property of being revivable in simpler terms, say via a condition on the order of rules being applied.

To conclude this article, we now discuss two logics—\(\textbf{KD}\) and \(\textbf{LQ}\)—where this is the case. Their similarity lies in the fact that they admit a very strong version of the deduction theorem, and this will allow us to express their notions of ‘revivability’ in fairly simple terms. In doing so, we obtain both a system of rules and a strongly modular proof of cut-elimination.

4.2 \(\textbf{K}\subseteq \textbf{KD}\)

The modal logic \(\textbf{KD}\) is the extension of \(\textbf{K}\) by the seriality axiom \(\lnot \Box \bot \); in terms of the Kripke semantics, \(\lnot \Box \bot \) enforces that every world has at least one successor. It is well-known (see, e.g., [13]) that extending \(\mathcal {C}_{\textbf{K}}\) with the rule

figure l

yields a sequent calculus \(\mathcal {C}_{\textbf{KD}}\) for \(\textbf{KD}\) admitting cut-elimination. We now present a new proof of cut-elimination for \(\textbf{KD}\) that is strongly modular.

As the seriality axiom has no variables, the modalized instances of it are exactly the formulas \(\Box ^k\lnot \Box \bot \) for \(k\ge 0\). Following the methodology sketched in the previous section, we now extend \(\mathcal {C}_{\textbf{K}}\) to a calculus \(\mathcal {C}_{\textbf{K}}^\dagger \) with ghost rules. Crucially, the ghost rule \((K)^\dagger \) coincides with the rule (D) above.

Theorem 11

Those proofs in \(\mathcal {C}_{\textbf{K}}^\dagger \) whose only ghost rule is \((K)^\dagger \) form a cutfree-adequate class for \(\textbf{KD}\).

Proof

Let us first deal with completeness. If \(\varGamma \Rightarrow \varDelta \) is valid in \(\textbf{KD}\), then there is a set of modalized instances of \(\lnot \Box \bot \) such that \(\varOmega ,\varGamma \Rightarrow \varDelta \) has a \(\mathcal {C}_{\textbf{K}}\)-proof \(\alpha \). Using cut-elimination in \(\mathcal {C}_{\textbf{K}}\), we may assume that \(\alpha \) is cutfree. As there is no right rule for \(\bot \), the \(\mathcal {C}_{\textbf{K}}\)-rules that can be applied in \(\alpha \) to an ancestor of a modalized instance of \(\lnot \Box \bot \) in \(\varOmega \) are only \((\lnot _L)\) and \((K)\). Now obtain \(\alpha ^\dagger \) by removing \(\varOmega \) and all its ancestors from the proof. As \((\lnot _L)^\dagger \) is a dummy rule, the only ghost rule we need to create is \((K)^\dagger \). Thus \(\alpha ^\dagger \) is as desired.

We now turn to soundness. For this we have to ‘revive’ a \(\mathcal {C}_{\textbf{K}}^\dagger \)-proof \(\beta \) of \(\varGamma \Rightarrow \varDelta \) whose only ghost rule is \((K)^\dagger \). This is done as follows:

figure m

Now propagate the newly added \(\lnot \Box \bot \) downwards in the proof. We will have to add \(\Box \)’s in front of it whenever we encounter the rule \((K)\). Doing so for all instances of \((K)^\dagger \) we eventually obtain a \(\mathcal {C}_{\textbf{K}}\)-proof of \(\varOmega ,\varGamma \Rightarrow \varDelta \) where \(\varOmega \) contains modalized instances of \(\lnot \Box \bot \). Thus \(\varGamma \Rightarrow \varDelta \) is valid in \(\textbf{KD}\).   \(\square \)

As restricting the ghost inferences in \(\mathcal {C}_{\textbf{K}}^\dagger \) to \((K)^\dagger \) yields exactly \(\mathcal {C}_{\textbf{KD}}\), we have obtained a new (and strongly modular) proof of cut-elimination for \(\mathcal {C}_{\textbf{KD}}\).

4.3 \(\textbf{IL}\subseteq \textbf{LQ}\)

For our final example, we leave the realm of modal logics and consider an intermediate logic instead. \(\textbf{LQ}\) extends \(\textbf{IL}\) by the law of weak excluded middle \(\lnot p\vee \lnot \lnot p\); it is known [11] that the following deduction theorem holds: \( A\in \textbf{LQ}\iff (\wedge _{i\le n}\lnot p_i\vee \lnot \lnot p_i)\rightarrow A\in \textbf{IL}\) where \(p_1,\ldots ,p_n\) are the variables occurring in A. Let \(\mathcal {C}_{\textbf{IL}}\) be the single-conclusion calculus obtained from the first group of rules in Fig. 1 by stipulating that \(|\varPi |=0\) and \(|\varDelta |\le 1\). \(\mathcal {C}_{\textbf{IL}}\) is adequate for \(\textbf{IL}\) and admits cut-elimination.

Definition 5

A proof in \(\mathcal {C}_{\textbf{IL}}^\dagger \) is \(\textbf{LQ}\)-grounded if the following holds:

  1. 1.

    The only ghost rules in it are \((\vee _L)^\dagger \) and ghost initial sequents \(\Rightarrow p\), \(p\Rightarrow \), \(\Rightarrow \).

  2. 2.

    Letting \((\vee _L)^\dagger _1,\ldots ,(\vee _L)^\dagger _n\) denote all instance of \((\vee _L)^\dagger \) in the proof, there are sets \(L_1,R_1,\ldots ,L_n,R_n\) of ghost initial sequent occurrences such that

    • every ghost initial sequent \(p\Rightarrow \) (resp. \(\Rightarrow p\), resp. \(\Rightarrow \)) appears in exactly one \(L_i\) (resp. exactly one \(R_i\), resp. exactly one \(R_i\) and exactly one \(L_j\));

    • No two distinct variables appear in connected components, where being connected is the reflexive, transitive and symmetric closure of the relation \(L_i\sim R_j\iff i=j\vee L_i\cap R_j\ne \emptyset \)

    • Every branch of the proof containing a sequent in \(L_i\) (\(R_i\)) goes through the left (right) premise of \((\vee _L)^\dagger _i\). If it goes through the right premise, it contains a sequent with empty right hand side above \((\vee _L)^\dagger _i\).

Figure 4 (middle) shows a simple \(\textbf{LQ}\)-grounded proof where \(n=1\).

Theorem 12

The class of \(\textbf{LQ}\)-grounded \(\mathcal {C}_{\textbf{IL}}^\dagger \)-proofs is cutfree-adequate for \(\textbf{LQ}\).

Proof

(Sketch). Completeness is similar to Theorem 11; \(\textbf{LQ}\)’s special deduction theorem restricts the necessary ghost inferences to initial sequents and \((\vee _L)^\dagger \).

We now show soundness by ‘reviving’ an \(\textbf{LQ}\)-grounded proof of \(\varGamma \Rightarrow \varDelta \). Start by adding variables and \((\lnot _R)\)-inferences to the ghost initial sequents as follows:

figure n

The superscripts act only as markers, i.e. \(p,p^{R_i},p^{L_i}\) denote the same variable. In replacing \((\Rightarrow )\in L_i\cap R_j\) we add the variable p from a component connected to \(L_i\) or \(R_j\) (unique if it exists) and an arbitrary variable otherwise; in the other cases the choice of the added variable is forced by the preexisting p. The \(\lnot p^{L_i}\)’s are then propagated downwards until the left premise of \((\vee _L)^\dagger _i\). The \(p^{R_i}\)’s are propagated downwards until we encounter the first sequent \(\varSigma \Rightarrow \) with empty right hand side, at which point we introduce double negations:

figure o

Propagate the new formula \(\lnot p\vee \lnot \lnot p\) to the endsequent. Doing so for all \(i\le n\), we obtain a \(\mathcal {C}_{\textbf{IL}}\)-proof of \(\varOmega ,\varGamma \Rightarrow \varDelta \) where \(\varOmega \) contains instances of the weak excluded middle axiom. Thus \(\varGamma \Rightarrow \varDelta \) is valid in \(\textbf{LQ}\).   \(\square \)

Fig. 4.
figure 4

From \(\textbf{LQ}\)-grounded proofs to 2-systems (left) and hypersequents (right)

It is instructive to compare \(\textbf{LQ}\)-grounded proofs to other calculi in the literature. For example, a hypersequent calculus for \(\textbf{LQ}\) [8] is obtained by adding the rule (lq) (below left) to a hypersequent calculus for intuitionistic logic.Footnote 12 The corresponding 2-system of rules [9] is pictured on the right:

figure p

Figure 4 hints at the translation of \(\textbf{LQ}\)-grounded proofs into both calculi.

5 Conclusion and Future Work

We have defined grounded proofs, a system of rules for \(\textbf{KT}^\Box \) and \(\textbf{K5}\), and proved the cut-elimination theorem. We showed how grounded proofs relate to grafted hypersequents, thereby recovering and simplifying the cut-elimination theorem for the latter calculus. We then elaborated on strongly modular proofs of cut-elimination, providing two more examples through the logics \(\textbf{KD}\) and \(\textbf{LQ}\).

Future work. Strongly modular proofs do not directly yield an algorithm for eliminating cuts. We would like to know whether the arguments given here can be used to write an algorithm that, e.g., eliminates cuts in grounded \(\textbf{K5}\)-proofs by calling the cut-elimination algorithms for \(\textbf{K}\) and \(\textbf{S5}\) as subroutines.

The method of obtaining strongly modular proofs through calculi with ghost rules is in a very early stage and so much remains to be explored. As a first step, one could try to extend the argument for \(\textbf{LQ}\) to all intermediate logics with a similar deduction theorem, i.e. logics with the simple substitution property [19].