1 Introduction

Coalgebraic logic has been very successful at unifying the multitude of modal logics used to describe and specify state-based systems, both semantically and syntactically (see e.g. [CKP+09, KP11]). One of the great insights of coalgebraic logics is that there exists a close correspondence between the coalgebraic semantics and rank 1 axiomatizations, i.e. axioms with nesting depth of modal operators uniformly equal to 1. For a \(\mathbf {Set}\)-endofunctor T the class of all T-coalgebras can be characterised logically in rank 1 (see [Sch06]). Conversely, given a modal logic axiomatized in rank 1, there exist a \(\mathbf {Set}\)-endofunctor T such that the logic is strongly complete with respect to the class of all T-coalgebras (see [SP10]).

However, one is often interested in providing a sound and complete semantics to modal logics which are known to include axioms of rank greater than one. Most temporal logics for example (see [Gol92]) contain such axioms. Alternatively, one may have a rank 1 axiomatization of the class of T-coalgebras for a functor T of particular interest, and be interested in logically carving out important proper sub-classes of T-coalgebras, which may very well require axioms with nested modalities, for example the axiomatization of transitive Kripke frames by the axiom \(\lozenge \lozenge p\rightarrow \lozenge p\).

Very little is known about the question of completeness for coalgebraic logics with axioms of arbitrary rank. To our knowledge, the only results in this direction are the work of Pattinson and Schröder in [PS08] as well as our previous work in [DP13] which dealt with the \(\nabla \) formalism of coalgebraic logic and [DP15a] which focused on a coalgebraic account of distributive substructural logics. In what follows we will present the general principles of coalgebraic completeness-via-canonicity, a method for proving strong completeness of coalgebraic logics with axioms of arbitrary rank, in as much abstraction and generality as possible. To this end we will use the abstract presentation of coalgebraic logic (see e.g. [KKP04, KKP05, KP11, JS10]) which can be summarized by the following fundamental diagram:

figure a

where \(\mathscr {C}\) is the category in which ‘modal formulas’ are built from the functor L and interpreted in T-coalgebras over ‘carriers’ in \(\mathscr {D}\). We must however be careful: in this abstract formulation coalgebraic logic is extremely general indeed, and the notion of canonical extension (and thus of canonicity) does not in general make sense in the base category \(\mathscr {C}\) on which the logic is defined. We therefore need to restrict our attention to base categories whose objects have a notion of canonical extension. This presents us with a conceptual restriction which in practice is harmless since all examples of coalgebraic logics are based on a category with a good notion of canonical extension, viz. the categories \(\mathbf {BA}\) of boolean algebras, \(\mathbf {DL}\) or distributive lattice, or \(\mathbf {MSL}\) of meet semilattices (see [JS10] for an example of meet semilattice-based coalgebraic logic, and see [GP14] for a discussion of canonical extensions in \(\mathbf {MSL}\)). A second restriction comes from the fact that canonicity must spontaneously appear from the diagram above, in the sense that for any \(\mathscr {C}\)-object A, the canonical extension of A must be representable as GFA. This condition is more restrictive. In the case of boolean logics, this poses no problem: if we take \(\mathscr {D}=\mathbf {Set}\) and the usual adjunction \(F=\mathsf {Uf}\dashv \mathcal {P}=G\) between the ultrafilter and powerset functors then \(\mathcal {P}\mathsf {Uf}A\) is indeed the canonical extension of A. However, in the case of positive coalgebraic logics this requirement precludes the use of \(\mathbf {Set}\)-based models for positive coalgebraic logics, and we have to take \(F=\mathsf {Pf}: \mathbf {DL}\rightarrow \mathbf {Pos}^{\mathrm {op}}\) the prime filter functor and \(G=\mathcal {U}: \mathbf {Pos}^{\mathrm {op}}\rightarrow \mathbf {DL}\) the upsets functor to represent the canonical extension of a distributive lattice A as \(\mathcal {U}\mathsf {Pf}A\). The situation for \(\mathbf {MSL}\)-based logics is much more involved. The canonical extension of general semilattices is described in [GP14], however no adjunction \(F\dashv G\) between \(\mathbf {MSL}\) and a category \(\mathscr {D}^{\mathrm {op}}\) emerges as a ‘natural’ way of building it. A duality theory for distributive meet-semilattices is given in [BJ11]. It consists in building a distributive lattice D(A) from a distributive semilattice A and then applying the usual functor \(\mathsf {Pf}\). It follows from the construction of [BJ11] that \(F=\mathsf {Pf}\circ D\dashv U\circ \mathcal {U}=G\) (where U is the obvious forgetful functor), but we have not investigated if GFA is then the canonical extension of A as described in [GP14]. We will therefore restrict our attention to logics based on the category \(\mathbf {DL}\) of which boolean logics (based on \(\mathbf {BA}\)) are a special case.

Having established the scope of logics which coalgebraic completeness-via-cano-nicity can hope to tackle a priori, we must make the following remark about what can be achieved in practice. Questions of canonicity are very hard; in general it is undecidable whether a given formula is canonical, and establishing that a particular class of formulas is canonical is almost always highly non-trivial. What we will present in this paper is a general coalgebraic template which avoids these hard questions altogether, a conceptual roadmap of how the technique of completeness-via-canonicity works in coalgebraic logic. To actually prove completeness of a particular coalgebraic logic with a particular coalgebraic semantic means implementing the technique, at which point the hard work begins.

So why choose the technique of completeness-via-canonicity to prove completeness if implementing it is so difficult? First of all, much of the implementation has been done for many well-known logics and as we will show, we now have a complete theory for all positive or boolean logics with a relational semantics. Secondly, because of all the methods for proving completeness in modal logic, it is probably the best suited to being generalized to coalgebraic logic since it has a very clean and abstract algebraic formulation which connects in a very generic fashion to the coalgebraic semantics via the well-established coalgebraic Jónsson-Tarski theorem (see [KKP05, KR12, SP09]). Moreover, we believe that generalising completeness-via-canonicity to coalgebraic logics also greatly clarifies the technique itself. The connection between the syntactic/algebraic part of the method on one side, viz. canonical extensions and canonical equations, and the semantics/coalgebraic part of the method on the other side, viz. the construction of ‘canonical models’, is greatly clarified by the abstracting power of coalgebraic logics and its semantics. Another advantage of coalgebraic completeness-via-canonicity is that it applies equally well to positive coalgebraic logics (see [KKV12]). In fact, since the traditional boolean setting is a special case of the more general setting of positive coalgebraic logics, we will formulate most results in terms positive coalgebraic logics. A final advantage of the technique its modularity: we can combine strongly complete logics to create new strongly complete logics in a completely mechanical way (in the spirit of [CP07, DP11]). This work is in many ways a continuation and generalisation of the author’s previous work with his PhD supervisor Dirk Pattinson [DP13]. The paper will be structured as follows. We start by presenting coalgebraic logics in its ‘abstract’ flavour. In Sect. 3 we describe the semantics/coalgebraic side of completeness-via-canonicity, whilst Sect. 4 will deal with the syntactic/algebraic side of the technique. Section 5 will show how and when the algebraic and coalgebraic halves of the method can be combined, and strong completeness proved. We will use the example of (positive) modal logic to illustrate every important concept, and conclude with an application to ‘positive separation logics’.

2 Preliminaries

Coalgebraic logics require seven mathematical entities, six of which we introduced in the fundamental diagram (1). These six entities are:

  1. (1)

    a ‘minimal reasoning structure’ in the form of a category \(\mathscr {C}\) whose objects are endowed with the fundamental logical operations we wish to take for granted. Due to the algebraic nature of \(\mathscr {C}\)-objects, we will assume throughout that there exist a free-forgetful adjunction \(\mathsf {F}\dashv \mathsf {U}\) between \(\mathbf {Set}\) and \(\mathscr {C}\) (note the sans-serif font for the free functor). We will take \(\mathscr {C}\) to be \(\mathbf {DL},\mathbf {BDL}\) or \(\mathbf {BA}\), the categories of distributive lattices, bounded distributive lattices or boolean algebras with the obvious morphisms.

  2. (2)

    a ‘minimal modelling structure’ in the form of a category \(\mathscr {D}\) whose objects have the structure we wish the carriers of models to have. In our examples we will take \(\mathscr {D}\) to be either \(\mathbf {Pos}\) or \(\mathbf {Set}\), the category of posets and monotone functions or sets and functions.

  3. (3)-(4)

    two functors \(F: \mathscr {C}\rightarrow \mathscr {D}^{\mathrm {op}}\) and \(G:\mathscr {D}^{\mathrm {op}}\rightarrow \mathscr {C}\) forming a dual adjunction \(F\dashv G\) relating the world of syntax to the world of semantics. In the examples we will take \(F=\mathsf {Pf}: \mathbf {DL}\rightarrow \mathbf {Pos}^{\mathrm {op}}\) the functor sending a distributive lattice to the poset of its prime filters and \(\mathbf {DL}\)-morphisms to their inverse images, and \(G=\mathcal {U}: \mathbf {Pos}^{\mathrm {op}}\rightarrow \mathbf {DL}\) the functor sending a poset to the distributive lattice of its upsets and monotone maps to their inverse images. An important special case of the adjunction \(\mathsf {Pf}\dashv \mathcal {U}\) is its restriction \(\mathsf {Uf}\dashv \mathcal {P}\) to boolean algebras and sets: since prime filters are maximal in boolean algebras – i.e. ultrafilters (hence the ultrafilter functor \(\mathsf {Uf}\)), their posets are trivial and thus simply form sets; upsets of trivial posets are simply subsets (hence the powerset functor \(\mathcal {P}\)).

  4. (5)

    a syntax building functor \(L: \mathscr {C}\rightarrow \mathscr {C}\) which specifies how to build ‘modal algebras’, and in particular how to build modal formulas.

  5. (6)

    a model building functor \(T: \mathscr {D}\rightarrow \mathscr {D}\) which specifies the kind of transition structure we want our models to have.

Languages, Logics and Free Algebras. As will be illustrated in the examples, L can specify much more than a grammar, it can also enforce axioms. What is included in L is a matter of convenience, but as we shall see, including some axioms – specifically distribution laws – is a good idea. The distinction between language and logic therefore becomes blurred, and indeed may not be terribly useful in this presentation of coalgebraic logics. The relevant notion is that of a free L-algebra. For our purpose it will be enough to say that the free L-algebra over a \(\mathscr {C}\)-object A, written as \(\mathsf {F}_L A\), is the initial \(L(-)+ A\) algebra. We will assume throughout that these algebras exist, i.e. that L is a varietor, and focus on a particular choice of objects in \(\mathscr {C}\), namely those which are themselves free objects (recall that we assume a free-forgetful adjunction between \(\mathbf {Set}\) and \(\mathscr {C}\)). For example, if \(\mathscr {C}=\mathbf {DL}\) and V is a set of propositional variables, we will consider the free L-algebra over the free distributive lattice over V, i.e. we will consider L-algebras of the type \(\mathsf {F}_L \mathsf {F}V\). These are the entities which play the role of language since their carriers contain terms freely built from propositional variables, modulo the axioms of \(\mathscr {C}\) and those encoded in L. In particular, it is the elements of these algebras which we will want to interpret.

Coalgebraic Semantics. Terms in a free L-algebra are interpreted as ‘predicates’ on the carriers of T-coalgebras. The exact meaning of the word ‘predicate’ is specified by the functor G which maps the carrier of a T-coalgebra to a \(\mathscr {C}\)-structure whose elements are by definition the predicates. An interpretation is thus a map from terms over V, viz. elements \(\mathsf {F}_L\mathsf {F}V\), to predicates on X, viz. elements of GX. We produce such an map by equipping GX with an \(L(-)+ \mathsf {F}V\)-algebra structure and using the initiality of \(\mathsf {F}_L\mathsf {F}V\) amongst \(L(-)+\mathsf {F}V\)-algebras. By definition of the coproduct, to define a morphism \(LGX+\mathsf {F}V\rightarrow GX\) we need:

  1. 1.

    a morphism of the type \(\mathsf {F}V\rightarrow GX\), and

  2. 2.

    a morphism of the type \(LGX\rightarrow GX\)

By adjunction any morphism of the type \(\mathsf {F}V\rightarrow GX\) is equivalent to a map \(V\rightarrow \mathsf {U}GX\) interpreting each propositional variable as a predicate, i.e. a valuation \(v: V\rightarrow \mathsf {U}GX\). The second morphism deals with modal terms whose interpretation should depend on the transition structure \(\gamma : X\rightarrow TX\). To encode this dependency we make the second morphism factor through \(G\gamma : GTX\rightarrow GX\). What we therefore need is a morphism \(\delta _X: LGX\rightarrow GTX\) for any \(\mathscr {D}\)-object X. Moreover, if \(\beta : Y\rightarrow TY\) is another T-coalgebra and \(f: Y\rightarrow X\) is a T-coalgebra morphism, it is not hard to check that the unicity of catamorphisms enforces \(G\beta \circ GTf\circ \delta _X=G\beta \circ \delta _Y\circ LGf\). In fact we assume the somewhat stronger condition that the maps \(\delta _X\) in fact define a natural transformation \(\delta : LG\rightarrow GT\). This natural transformation will be called the semantic transformation and is the final necessary ingredient of coalgebraic logics. Given a semantics transformation and a valuation we define the interpretation of ‘formulas’ of \(\mathsf {F}_L\mathsf {F}V\) in \(\gamma : X\rightarrow TX\) as the catamorphism \(\llbracket -\rrbracket _{(\gamma , v)}\) given by:

figure b

Modularity. Coalgebraic logics defined on a common minimal reasoning structure can be freely combined to form new logics combining the modalities of their constituents in a process called the fusion of modal logics (see [CP07, DP11]). Formally, if \(L_1, L_2: \mathscr {C}\rightarrow \mathscr {C}\) are two syntax constructors, then the fusion of \(\mathsf {F}_{L_1}\mathsf {F}V\) and \(\mathsf {F}_{L_2}\mathsf {F}V\) is the language defined by the (point-wise) coproduct of these functors, i.e. \(\mathsf {F}_{L_1+L_2}\mathsf {F}V\). Assuming that free \(L_i\)-algebras are interpreted in \(T_i\)-coalgebras via a semantics transformation \(\delta _i\) for \(i=1,2\), we can combine the semantics in a dual way to the syntax by interpreting free \(L_1+L_2\)-algebras in \(T_1\times T_2\)-coalgebras via the semantics transformation \(G\pi _1\circ \delta _1+G\pi _2\circ \delta _2\) where \(\pi _1,\pi _2\) are the usual projections from a product.

Example 1

((Positive) Modal Logic). Standard Modal Logic, henceforth ML, is boolean and we therefore choose \(\mathbf {BA}\) as our minimal reasoning structure. The syntax building functor is \(L^{\mathrm {ML}}: \mathbf {BA}\rightarrow \mathbf {BA}\) defined by:

$$ L^{\mathrm {ML}}A=\mathsf {F}\{\lozenge a \mid a\in \mathsf {U}A\}/\{\lozenge (a\vee b)=\lozenge a\vee \lozenge b, \lozenge \bot =\bot \} $$

i.e. \(L^{\mathrm {ML}}\) builds the free boolean algebra over the formal expressions \(\lozenge a\) with \(a\in A\), and then quotients this object by the fully invariant equivalence relation (in \(\mathbf {BA}\)!) generated by the distribution laws above. We will show how \(L^{\mathrm {ML}}A\) can be defined categorically in Sect. 4. An \(L^{\mathrm {ML}}\)-algebra is a boolean algebra with operator, i.e. a boolean algebra together with a unary operation which distributes over joins. Given a set V of propositional variables, the object representing the language of ML will be \(\mathsf {F}_{L^{\mathrm {ML}}}\mathsf {F}V\), the colimit of the diagram

figure c

where \(\mathbbm {2}=\{\bot ,\top \}\) is the initial object in \(\mathbf {BA}\). The \(L^{\mathrm {ML}}\)-algebra \(\mathsf {F}_{L^{\mathrm {ML}}}\mathsf {F}V\) thus contains all terms which can be built from elements of \(V, \top ,\bot , \lnot \), \(\vee ,\wedge \) and \(\lozenge \) modulo the axioms of \(\mathbf {BA}\) and the distribution laws encoded in \(L^{\mathrm {ML}}\). For the semantics we take \(T=\mathsf {P}\), the covariant powerset functor on \(\mathbf {Set}\), and the transformation \(\delta : L\mathcal {P}\rightarrow \mathcal {P}\mathsf {P}\) given at any set X and generator \(\lozenge U\in L^{\mathrm {ML}}\mathcal {P}X\) by:

$$ \delta _X^{\mathrm {ML}}(\lozenge U)=\{V\subseteq X\mid U\cap V\ne \emptyset \} $$

It is clear that \(\delta _X(\lozenge (U_1\cup U_2))=\delta _X(\lozenge U_1\cup \lozenge U_2)\) and \(\delta _X(\lozenge \emptyset )=\delta _X(\emptyset )\), and \(\delta _X\) is thus well-defined. \(\mathsf {P}\) and \(\delta \) give the standard Kripke semantics of ML, the only difference being that here we interpret equivalence classes of formulas.

Mutantis mutandis we can perform the exact same construction for positive ML. The minimal reasoning structure becomes either \(\mathbf {DL}\) or \(\mathbf {BDL}\) depending on whether we want \(\top \) and \(\bot \) or not, and due to the lack of negation one needs to introduce the dual operator \(\square \) explicitly. The functor becomes \(L^{\mathrm {ML}}:\mathbf {DL}\rightarrow \mathbf {DL}\)

$$ L^{\mathrm {ML}}A=\mathsf {F}\{\lozenge a, \square a \mid a\in \mathsf {U}A\}/\{\lozenge (a\vee b)=\lozenge a\vee \lozenge b, \square (a\wedge b)=\square a\wedge \square b\} $$

In the case of \(\mathbf {BDL}\) one also adds \(\lozenge \bot =\bot \) and \(\square \top =\top \) to the equations defining the quotient. The construction of the language \(\mathsf {F}_{L^{\mathrm {ML}}}\mathsf {F}V\) is exactly the same as in the boolean case, with the caveat that the initial object in \(\mathbf {DL}\) is the empty distributive lattice \(\emptyset \). On the semantics side we need to find an equivalent of the covariant powerset for \(\mathbf {Pos}\). This is not entirely straightforward, but as was persuasively argued in Example 5.3 of [VK11] and in [BKV13], the \(\mathbf {Pos}\) equivalent of \(\mathsf {P}\) is the convex powerset functor \(\mathsf {P}_c:\mathbf {Pos}\rightarrow \mathbf {Pos}\) sending a poset to the set of its convex subsets ordered by the Egli-Milner order. Since we are not yet enforcing any relation between \(\lozenge \) and \(\square \), we interpret positive ML in \(T^{\mathrm {ML}}\)-coalgebras for the functor \(T^{\mathrm {ML}}=\mathsf {P}_c\times \mathsf {P}_c\) (one copy of \(\mathsf {P}_c\) per modality). The semantics transformation \(\delta ^{\mathrm {ML}}: L^{\mathrm {ML}}\mathcal {U}\rightarrow \mathcal {U}(\mathsf {P}_c\times \mathsf {P}_c)\) is then defined as:

figure d

and it is not hard to check that \(\delta _X\) is well-defined, although interestingly this relies heavily on the definition of the Egli-Milner order, confirming the choice of \(\mathsf {P}_c\) as the ‘correct’ generalization of \(\mathsf {P}\).

3 Strong Completeness and Jónsson-Tarski Extensions

We have seen how important the ‘predicate’ functor \(G: \mathscr {D}^{\mathrm {op}}\rightarrow \mathscr {C}\) is to define the coalgebraic semantics but have so far ignored its left-adjoint \(F:\mathscr {C}\rightarrow \mathscr {D}^{\mathrm {op}}\). The intuition behind F is that it sends a reasoning structure to ‘states’ on this structure, where a ‘state’ is a collection of elements structured in such a way that it may be understood as a consistent set of logical terms which can simultaneously hold at some point in a model. A coarse description of the semantic half of completeness-via-canonicity, which we present in this section, is that it consists in equipping a (po)set of such states with the target coalgebraic structure, i.e. in building models on collections of algebraic terms. Formally, starting from a \(\mathscr {C}\)-object A with an L-algebra structure, we want to place a T-coalgebra structure on its set of ‘states’ FA. When A is of the shape \(\mathsf {F}_L\mathsf {F}V\), such a T-coalgebra is often referred to as a ‘canonical’ model, although it is usually far from canonical. In fact such a model almost always requires a non-constructive principle such as the axiom of choice or the Prime Ideal Theorem (henceforth PIT). In this sense ‘canonical’ models are deeply non-canonical, which is why we will settle for an alternative terminology.

The Coalgebraic Jónsson-Tarski Theorem. To formulate this important result we need the following natural transformation: by using the adjunction \(F\dashv G\), we can associate with each semantics transformation \(\delta : LG\rightarrow GT\) its adjoint semantic transformation \(\hat{\delta }: TF\rightarrow FL\) given by \(\hat{\delta }=FL\eta \circ F\delta _F\circ \epsilon _{TF}\) where \(\eta ,\epsilon \) are the unit and counit of \(F\dashv G\).

Theorem 1

(Coalgebraic Jónsson-Tarski Theorem). Consider the fundamental situation of diagram (1) and let \(\delta : LG\rightarrow GT\) be a semantic transformation. For any \(\mathbf {Alg}_{\mathscr {C}}(L)\)-object \((A,\alpha )\), if \(\hat{\delta }_A\) has a right-inverse \(\zeta _A\) then the morphism \(\eta _A: A\rightarrow GFA\) lifts to an L-algebra morphism.

Proof

[KKP05]. We show that the following diagram commutes

figure e

The right-hand-side trapezium commutes by naturality of \(\eta \), so we need only show that the left-hand-side triangle commute.

$$\begin{aligned} \eta _{LA}&=G\zeta _A\circ G\hat{\delta }_A\circ \eta _{LA}&\zeta _A\text { right-inverse}\\&=G\zeta _A\circ G\epsilon _{TFA}\circ GF(\delta _{FA}\circ L\eta _A)\circ \eta _{LA}&\text {Definition of }\hat{\delta }\\&=G\zeta _A\circ G\epsilon _{TFA}\circ \eta _{GTFA}\circ \delta _{FA}\circ L\eta _A&\text {Naturality of }\eta \\&=G\zeta _A\circ \delta _{FA}\circ L\eta _A&F\dashv G \end{aligned}$$

Jónsson-Tarski Extensions. For \(\mathscr {C}=\mathbf {DL}\), \(F=\mathsf {Pf}\) and \(G=\mathcal {U}\) if we assume the PIT or the axiom of choice (the latter being strictly stronger than the former), then the unit of \(\mathsf {Pf}\dashv \mathcal {U}\) is a monomorphism, i.e. \(\eta _A\) is injective at every stage A. This means that in the conditions of Theorem 1, GFA is an extension of A as an L-algebra. We call such an extension a Jónsson-Tarski extension of \((A,\alpha )\) and denote it by \(\alpha ^\zeta : LGFA\rightarrow GFA\). As this notation implies, we use the terminology an extension, rather than the extension because in general, different right-inverses \(\zeta _A\) will lead to different extensions, although we will encounter nice situations in the last section when there exists a unique Jónsson-Tarski extension. We will however refer to the Jónsson-Tarski extension when a particular choice of right-inverse \(\zeta _A\) has been made and no ambiguity is possible. Note that \(\zeta _A\circ \mathsf {Pf}\alpha : \mathsf {Pf}A\rightarrow T\mathsf {Pf}A\) is a T-coalgebra – i.e. a model – on ‘states’. When A is of the shape \(\mathsf {F}_L\mathsf {F}V\) this coalgebra is commonly known as a ‘canonical model’, although in practice the construction of right inverses to the adjoint semantic transformation also requires the PIT or the AC, which makes these models deeply non-canonical. It follows from the unicity of catamorphisms that if \(\hat{\delta }_{\mathsf {F}_L\mathsf {F}V}\) has a right-inverse \(\zeta _{\mathsf {F}_L\mathsf {F}V}\) then the interpretation map in

$$ \mathsf {Pf}\mathsf {F}_L\mathsf {F}V\rightarrow \mathsf {Pf}L\mathsf {F}_L\mathsf {F}V\xrightarrow {\zeta _{\mathsf {F}_L\mathsf {F}V}} T\mathsf {Pf}\mathsf {F}_L\mathsf {F}V $$

is given by Diagram (2), in other words \(\llbracket -\rrbracket _{\mathsf {Pf}\mathsf {F}_L\mathsf {F}V}=\eta _{\mathsf {F}_L\mathsf {F}V}\). Modal logicians refer to this as the truth lemma: a formula a holds at a prime filter w in a ‘canonical model’ iff \(a\in w\), by definition of \(\eta \).

The Case of Boolean Coalgebraic Logics. In practice, when \(\mathscr {C}=\mathbf {DL}\), right-inverses to adjoint semantic transformations must be built explicitly, and in fact this is also done in the construction of the standard ‘canonical’ model of ML. However, when the minimal reasoning structure is \(\mathbf {BA}\) the criterion for the existence of Jónsson-Tarski extensions can be simplified somewhat, at the cost of being even less constructive. Assuming the axiom of choice all epimorphisms in \(\mathbf {Set}\) are split, i.e. all surjections have a right inverse. For boolean coalgebraic logics, it is therefore sufficient to require that \(\hat{\delta }\) be a pointwise epimorphism, and useful criteria for this to happen have been developed in [Dah15, KR12, SP09].

Strong Completeness. The main application of Jónsson-Tarski extensions is to prove strong completeness. Let us first define precisely what we mean by strong completeness. Let \(\mathscr {C}\) be \(\mathbf {DL},\mathbf {BDL}\) or \(\mathbf {BA}\), let V be a set of propositional variables, let \(q:\mathsf {F}_{L}\mathsf {F}V\twoheadrightarrow \mathcal {L}\) be a regular epi, and let \(\varPhi ,\varPsi \subseteq \mathcal {L}\) be two families of ‘formulas’ such that \(\varPhi \not \vdash \varPsi \), i.e. such that no finite set \(\varPhi _0\) of elements of \(\varPhi \) and no finite set \(\varPsi _0\) of elements of \(\varPsi \) can be found such that \(\bigwedge \varPhi _0\le \bigvee \varPsi _0\). The statement that \(\mathcal {L}\) is strongly complete w.r.t. to a class \(\mathfrak {T}\) of T-coalgebras means that for any such choice of \(\varPhi ,\varPsi \) there exists a T-coalgebra \(\gamma : X\rightarrow TX\) in \(\mathfrak {T}\), a valuation \(v:\mathsf {F}V\rightarrow GX\), and a point \(x\in X\) such that \(x\in \llbracket a\rrbracket _{(\gamma ,v)}\) for all \(a\in \varPhi \) and \(x\notin \llbracket b\rrbracket _{(\gamma ,v)}\) for all \(b\in \varPsi \).

Theorem 2

(Strong Completeness). If the adjoint semantic transformation \(\hat{\delta }\) has a right-inverse \(\zeta _{\mathsf {F}_L\mathsf {F}V}\) at \(\mathsf {F}_L\mathsf {F}V\), then \(\mathsf {F}_L\mathsf {F}V\) is strongly complete w.r.t. to the class \(\mathbf {Coalg}_{\mathscr {D}}(T)\) of T-coalgebras.

Proof

Let \(\varPhi ,\varPsi \subseteq \mathsf {F}_L\mathsf {F}V\) and \(\varPhi \not \vdash \varPsi \). Then the filter \(\langle \varPhi \rangle ^{\uparrow }\) generated by \(\varPhi \) and the ideal \(\langle \varPsi \rangle ^{\downarrow }\) generated by \(\varPsi \) obey \(\langle \varPhi \rangle ^{\uparrow }\cap \langle \varPsi \rangle ^{\downarrow }=\emptyset \). By the PIT there exists a prime filter \(w_{\varPhi }\) extending \(\langle \varPhi \rangle ^{\uparrow }\) such that \(w_\varPhi \cap \langle \varPsi \rangle ^{\downarrow }=\emptyset \). By Theorem 1, the L-algebra \(\mathsf {F}_L\mathsf {F}V\) has a Jónsson-Tarski extension which provides an interpretation of \(\mathsf {F}_L\mathsf {F}V\) in the T-coalgebra \(\mathsf {Pf}\mathsf {F}_L\mathsf {F}V\rightarrow \mathsf {Pf}L\mathsf {F}_L\mathsf {F}V\xrightarrow {\zeta _{\mathsf {F}_L\mathsf {F}V}} T\mathsf {Pf}\mathsf {F}_L\mathsf {F}V\), which coincides with \(\eta _{\mathsf {F}_L\mathsf {F}V}\). In this interpretation \(w_\varPhi \in \llbracket a\rrbracket \) for all \(a\in \varPhi \) and \(w_\varPhi \notin \llbracket b\rrbracket \) for all \(b\in \varPsi \).

Jónsson-Tarski extensions, and thus strong completeness, are modular:

Theorem 3

[DP15b]. Let \(L_i:\mathscr {C}\rightarrow \mathscr {C}, T_i:\mathscr {D}\rightarrow \mathscr {D}\), \(\delta ^i: L_iG\rightarrow GT_i\), \(i=1,2\). For any \(\mathbf {Alg}_{\mathscr {C}}(L_1+L_2)\)-object \((A,\alpha )\), if \(\hat{\delta }_A^i\) has a right-inverse \(\zeta _A^i, i=1,2\), then \(\eta _A: A\rightarrow GFA\) lifts to an \(L_1+L_2\)-algebra morphism.

In a nutshell, the purpose of coalgebraic completeness-via-canonicity is to determine how and when Theorem 2 resists to quotienting \(\mathsf {F}_L\mathsf {F}V\).

Example 2

The PIT-based technique of [DP15a] becomes particularly simple for unary operators and shows that the adjoint transformation \(\hat{\delta }^{\mathrm {ML}}: T^{\mathrm {ML}}\mathsf {Pf}\rightarrow \mathsf {Pf}L^{\mathrm {ML}}\) of the semantic transformation defined in Example 1 has right-inverses \(\zeta ^{\mathrm {ML}}_A: \mathsf {Pf}L^{\mathrm {ML}} A\rightarrow T^{\mathrm {ML}}\mathsf {Pf}A\) at every A in \(\mathbf {DL}\) given by:

$$ \zeta ^{\mathrm {ML}}_A(F)=\left( \{F_1\mid a\in F_1\Rightarrow \lozenge a\in F\},\{F_2\mid \square a\in F\Rightarrow a\in F_2\}\right) $$

The (positive) language for ML defined by the functor \(L^{\mathrm {ML}}\) is thus strongly complete w.r.t. \(\mathsf {P}_c\times \mathsf {P}_c\)-coalgebras. We will show later that quotienting this language by the axioms relating \(\lozenge \) and \(\square \) defines a variety closed under Jónsson-Tarski extension. Strong completeness with respect to \(\mathsf {P}_c\)-coalgebras interpreting both modalities by the same relation will then follow (modulo two lemmas).

4 Canonical Equations and Canonical Extensions of L-algebras

In the previous section we have shown how to construct coalgebraic models whose carriers are the ‘states’ FA of an L-algebra A in a way that provides an L-algebra embedding of A into GFA. When \(\mathscr {C}=\mathbf {DL}\) (or \(\mathbf {BDL}\) or \(\mathbf {BA}\)) and \(F\dashv G\) is the adjunction \(\mathsf {Pf}\dashv \mathcal {U}\), objects of the form GFA are very well-known to algebraists studying boolean algebras and distributive lattices, and are known as canonical extensions and denoted \(A^\sigma \). Motivated by the algebraic semantics of modal logic, this notion was extended to boolean algebra with operators (BAOs) [JT51] and distributive lattice expansions (DLEs) [GJ94, GJ04]. One of the key areas of research in this domain is to find conditions under which the validity of an equation in an BAO or a DLE can be transferred to its canonical extension, i.e. conditions under which \(A\models s=t\) implies \(A^\sigma \models s=t\). Such equations are called canonical. In this section we will review the basic facts about canonical equations and about a topological technique for establishing the canonicity of equations. As a by-product of this theory we will give a theoretically partial but practically complete answer to the following question:

figure f

Canonical Extensions of DLs. For any A in \(\mathbf {DL}\), \(\mathcal {U}\mathsf {Pf}A\) is known as the canonical extension of A and denoted \(A^\sigma \). It can be characterised uniquely up to isomorphism through purely algebraic properties, namely that A is dense and compact in \(A^\sigma \). In this sense the adjective ‘canonical’ is fully justified, in contrast with its usage in the expression ‘canonical model’. For our purpose however, defining the canonical extension of A as \(\mathcal {U}\mathsf {Pf}A\) will be sufficient. The canonical extension \(A^\sigma \) of a distributive lattice A is always completely distributive (see [GJ04]). The following terminology will be important: \(A^\sigma \) is a completion of A and all joins of elements of A therefore exist in \(A^\sigma \), such elements are called open and their set is denoted by O(A). Dually, meets in \(A^\sigma \) of elements of A will be called closed and their set denoted K(A). Elements of \(A=K(A)\cap O(A)\) are therefore called clopens.

Canonical Extension of DLEs. It was shown in [JT51] that if A is a BA with a map \(f:\mathsf {U}A\rightarrow \mathsf {U}A\) preserving joins then \(A^\sigma =\mathcal {P}\mathsf {Uf}A\) can be equipped with a map \(f^\sigma :\mathsf {U}A^\sigma \rightarrow \mathsf {U}A^\sigma \) which extends f and preserves all non-empty joins. This construction was later extended to DLs with n-ary maps and no particular preservation properties in [GJ94, GJ04]. Formally, given a signature \(\varSigma \) with arity map \(\mathrm {ar}:\varSigma \rightarrow \mathbb {N}\), define the syntax building functor \(L_\varSigma :\mathbf {DL}\rightarrow \mathbf {DL}\) by:

$$\begin{aligned} L_\varSigma A=\mathsf {F}\left( \coprod _{s\in \varSigma } \mathsf {U}A^{\mathrm {ar}(s)}\right) \end{aligned}$$
(3)

An \(L_\varSigma \)-algebra is a distributive lattice with n-ary maps defined by the signature, i.e. a Distributive Lattice Expansion, or DLE for short. We now sketch the theory of their canonical extensions. Each map \(f: \mathsf {U}A^n\rightarrow \mathsf {U}A\) can be extended to a map \((\mathsf {U}A^\sigma )^n\rightarrow \mathsf {U}A^\sigma \) in two canonical ways:

$$\begin{aligned} f^\sigma (x)=\bigvee \{\bigwedge f[d,u]\mid K(A)^n\ni d\le x\le u\in O(A)^n\}\\ f^\pi (x)=\bigwedge \{\bigvee f[d,u]\mid K(A)^n\ni d\le x\le u\in O(A)^n\} \end{aligned}$$

where \(f[d,u]=\{f(a)\mid a\in A^n, d\le a\le u\}\). In many important cases, the two extensions (viz. \(f^\sigma \) and \(f^\pi \)) agree, in which case f is said to be smooth. We define the canonical extension of an \(L_\varSigma \)-algebra A as the \(L_\varSigma \)-algebra \(A^\sigma \) defined by \((A^\sigma , (f_s^\sigma : (\mathsf {U}A^\sigma )^{\mathrm {ar}(s)}\rightarrow \mathsf {U}A^\sigma )_{s\in \varSigma })\). This gives us a first class of functors L which answers the question above: for any finitary signature \(\varSigma \), the \(\mathbf {DL}\)-endofunctor \(L_\varSigma \) defined by Eq. (3) lifts canonical extensions from \(\mathbf {DL}\) to \(\mathbf {Alg}_{\mathbf {DL}}(L_\varSigma )\).

Topological Methods where introduced in [GJ04, Ven06] to study the canonical extension of maps. These methods are useful because they (a) uniquely characterize canonical extensions, (b) reflect interesting algebraic properties of maps (e.g. the preservation of meets) and, crucially (c) provide a very effective way of studying the composition of canonical extensions which is essential to establishing canonicity. We need six topologies on \(A^\sigma \). First, we define \(\sigma ^{\uparrow },\sigma ^{\downarrow }\) and \(\sigma \) as the topologies defined by the bases \(\{\uparrow p\mid p\in K\}\),\(\{\downarrow u\mid u\in O\}\) and \(\{\uparrow p\cap \downarrow u, K\ni p,u\in O\}\). The next set of topologies is well-known to domain theorists: a Scott open in \(A^\sigma \) is a subset \(U\subseteq A^\sigma \) such that (1) U is an upset and (2) for any up-directed set D such that \(\bigvee D\in U\), \(D\cap U\ne \emptyset \). The collection of Scott opens forms a topology called the Scott topology, which we denote \(\gamma ^{\uparrow }\). The dual topology will be denoted by \(\gamma ^{\downarrow }\), and their join by \(\gamma \). Since for every \(x\in A^\sigma \), \(x=\bigvee \downarrow x\cap K=\bigwedge \uparrow x\cap O\), it is easy to see that \(\gamma ^{\uparrow }\subseteq \sigma ^{\uparrow }\), \(\gamma ^{\downarrow }\subseteq \sigma ^{\downarrow }\), and \(\gamma \subseteq \sigma \). We denote the product of topologies by \(\times \), and the n-fold product by \((-)^n\).

Proposition 1

[GJ04]. For any DL A and map \(f: \mathsf {U}A^n\rightarrow \mathsf {U}A\),

  1. 1.

    \(f^\sigma \) is the largest \((\sigma ^n,\gamma ^{\uparrow })\)-continuous extension of f,

  2. 2.

    \(f^\pi \) is the smallest \((\sigma ^n,\gamma ^{\downarrow })\)-continuous extension of f

  3. 3.

    f is smooth iff it has a unique \((\sigma ^n,\gamma )\)-continuous extension.

The following result which relates algebraic and topological properties, is a straightforward generalization of results from [GH01, GJ94, GJ04, Ven06].

Proposition 2

Let A be a distributive lattice, and let \(f: \mathsf {U}A^n\rightarrow \mathsf {U}A\) be a map. For any (\(n-1)\)-tuple \(a=(a_i)_{1\le i\le n-1}\), we denote by \(f_a^k: \mathsf {U}A\rightarrow \mathsf {U}A\) the map defined by \(x\mapsto f(a_1,\ldots ,a_{k-1},x,a_{k},\ldots ,a_{n-1})\).

  1. 1.

    If \(f_a^k\) preserves binary joins, \((f^\sigma )_a^k\) preserves all non-empty joins.

  2. 2.

    If \(f_a^k\) preserves binary meets, \((f^\sigma )_a^k\) preserves all non-empty meets.

  3. 3.

    If \(f_a^k\) anti-preserves binary joins, \((f^\sigma )_a^k\) anti-preserves all non-empty joins.

  4. 4.

    If \(f_a^k\) anti-preserves binary meets, \((f^\sigma )_a^k\) anti-preserves all non-empty meets.

  5. 5.

    If \((f^\sigma )_a^k\) preserves all non-empty joins, it is \((\sigma ^{\downarrow },\sigma ^{\downarrow })\)-continuous.

  6. 6.

    If \((f^\sigma )_a^k\) preserves all non-empty meets, it is \((\sigma ^{\uparrow },\sigma ^{\uparrow })\)-continuous.

  7. 7.

    If \((f^\sigma )_a^k\) anti-preserves all non-empty joins, it is \((\sigma ^{\downarrow },\sigma ^{\uparrow })\)-continuous.

  8. 8.

    If \((f^\sigma )_a^k\) anti-preserves all non-empty meets, it is \((\sigma ^{\uparrow },\sigma ^{\downarrow })\)-continuous.

  9. 9.

    In each case \(f_a^k\) is is smooth.

Function composition and canonical extension interact in a non-trivial way, but the following consequence of Proposition 1 greatly clarifies their interaction. This result is our main tool for proving canonicity.

Theorem 4

(Principle of Matching Topologies, [GH01, Ven06]). Let A be a DL, and \(f: \mathsf {U}A^n\rightarrow \mathsf {U}A\) and \(g_i:\mathsf {U}A^{m_i}\rightarrow \mathsf {U}A, 1\le i\le n\) be arbitrary maps. Assume that there exist topologies \(\tau _i\) on A, \(1\le i\le n\) such that each \(g_i^\sigma \) is \((\sigma ^{m_i},\tau _i)\)-continuous. If \(f^\sigma \) is

  1. 1.

    \((\tau _1\times \ldots \times \tau _n,\gamma ^{\uparrow })\)-continuous, then \( f^\sigma (g_1^\sigma ,\ldots ,g_n^\sigma )\le (f(g_1,\ldots ,g_n))^\sigma \),

  2. 2.

    \((\tau _1\times \ldots \times \tau _n,\gamma ^{\downarrow })\)-continuous, then \( f^\sigma (g_1^\sigma ,\ldots ,g_n^\sigma )\ge (f(g_1,\ldots ,g_n))^\sigma \),

  3. 3.

    \((\tau _1\times \ldots \times \tau _n,\gamma )\)-continuous, then \(f^\sigma (g_1^\sigma ,\ldots ,g_n^\sigma )=(f(g_1,\ldots ,g_n))^\sigma \).

Monotone (i.e. isotone or antitone) maps have a nice property which complements the Principle of Matching Topologies very effectively. The proof of this property can already be found for isotone maps in [Rib52], and generalizes tediously but straightforwardly to monotone maps (i.e. either isotone or antitone).

Proposition 3

Let \(g_i: (\mathsf {U}A)^{n_i}\rightarrow \mathsf {U}A\), \(1\le i\le m\) and \(f: (\mathsf {U}A)^m\rightarrow \mathsf {U}A\) be monotone maps, then \((f(g_1,\ldots ,g_m))^\sigma \le f^\sigma (g_1^\sigma ,\ldots ,g_m^\sigma )\).

Canonicity. Before we consider the canonical extension of more general L-algebras, we need to talk about canonicity. Let us fix a signature \(\varSigma \). Recall that an equation \(s=t\) in the language of \(L_\varSigma \)-algebras (i.e. DLEs with signature \(\varSigma \)) is canonical if it has the property that \(A^\sigma \models s=t\) whenever \(A\models s=t\). To say anything about the canonicity of equations, we therefore need to compare interpretations in A with those in \(A^\sigma \). It is natural to try to use the extension \((\cdot )^\sigma \) to mediate between these interpretations, but \((\cdot )^\sigma \) is defined on maps, not on terms. Moreover, not every valuation on \(A^\sigma \) originates from valuation on A. We therefore want to recast the problem in such a way that (1) terms are viewed as maps, and (2) we do not need to worry about valuations. The solution is to adopt the language of term functions (as first suggested in [Jón94]). Let \(\varSigma \) be a signature and t be a term in the language \(\mathsf {F}_{L_\varSigma }\mathsf {F}V\), there exist a finite set \(V_0=\{p_1,\ldots ,p_n\}\subseteq V\) containing the propositional variables of t. For any \(L_\varSigma \)-algebra A, we can put an \(L_\varSigma (-)+\mathsf {F}V_0\)-algebra structure on the distributive lattice \(\mathcal {A}_n\) of n-ary maps on A (with pointwise meets and joins) as follows:

  • Define \(v: V_0\rightarrow \mathsf {U}\mathcal {A}_n, p_i\mapsto \pi _i\), the ith projection \((\mathsf {U}A)^n\rightarrow \mathsf {U}A\).

  • For each \(f\in \varSigma \), we overload and define \(f:(\mathsf {U}\mathcal {A}_n)^{\mathrm {ar}(f)}\rightarrow \mathsf {U}\mathcal {A}_n\) by \((g_1,\ldots ,g_{\mathrm {ar}(f)})\mapsto f\circ \langle g_1,\ldots , g_{\mathrm {ar}(f)}\rangle \), where \(\langle \rangle \) denotes the product.

By taking the adjoint transpose of these maps (i.e. freely extending) we equip \(\mathcal {A}_n\) with the desired algebraic structure. We can now interpret a term t as the term function \(t^A:\mathsf {U}A^n\rightarrow \mathsf {U}A\) given by the catamorphism \((\cdot )^A\):

figure g

For any two terms \(s,t\in \mathsf {F}_{L_\varSigma }\mathsf {F}V\) we can take \(V_0\) to be the set of propositional variables required to build both s and t and thus get a common catamorphism \((\cdot )^A\) interpreting both terms as maps \((\mathsf {U}A)^n\rightarrow \mathsf {U}A\). It is then well-known and easy to check that \(A\models s=t \text { iff } s^A=t^A\). Following [Jón94], we say that \(t\in \mathsf {F}_{L_\varSigma }\mathsf {F}V\) is stable if \((t^A)^\sigma =t^{A^\sigma }\), that t is expanding if \((t^A)^\sigma \le t^{A^\sigma }\), and that t is contracting if \((t^A)^\sigma \ge t^{A^\sigma }\), for any A. The inequality between maps is taken pointwise. The following proposition illustrates the usefulness of these notions:

Proposition 4

[Jón94]. If \(s,t\in \mathsf {F}_{L_\varSigma }\mathsf {F}V\) are stable then \(s=t\) is canonical. If s is contracting and t is expanding, then \(s\le t\) is canonical.

In practice, we use the Principle of Matching Topologies (Theorem 4) to determine when a term is stable, expanding or contracting, and thus when equations or inequations are canonical.

Canonical Extension of L -Algebras. We now show that \(L^{\mathrm {ML}}\) defined in Example 1 belongs to a general class of functors of the form \(L_\varSigma /\{E\}\) for which the canonical extension construction always lifts to \(\mathbf {Alg}_{\mathbf {DL}}(L)\). To categorically formalize functors of the type \(L_{\varSigma }/\{E\}\) for a set E of equations, we need to capture the notion of fully invariant equivalence relation generated by a set of equations. We will only sketch the construction which can be performed in great generality in any well-powered cocomplete regular category (see [Dah15], Chap. 1). Consider a set E of equations in \(\mathsf {F}_{L_\varSigma }\mathsf {F}V\) (e.g. \(E=\{\lozenge (a\vee b)=\lozenge a\vee \lozenge b,\lozenge \bot =\bot \}\)), it is equivalent to a pair of jointly monic functions \(e_1,e_2: E \rightrightarrows \mathsf {U}\mathcal {L}\) where \(\mathcal {L}\) is the distributive lattice underlying the \(L_\varSigma \)-algebra \(\mathsf {F}_{L_\varSigma }\mathsf {F}V\). By adjunction we can re-write this as a pair of morphisms \(\hat{e}_1,\hat{e}_2: \mathsf {F}E \rightrightarrows \mathcal {L}\) where \(\mathsf {F}E\) is the ‘free DL of equations’. Consider the coequalizer \(\mathsf {F}E \rightrightarrows \mathcal {L} \mathop {\twoheadrightarrow }\limits ^{q} Q\) of \(\hat{e}_1, \hat{e}_2\) and all the terms \(s,t\in \mathcal {L} \) such that \(q(s)=q(t)\). They form an equivalence relation in \(\mathbf {DL}\) (the kernel pair of q) containing E, but not a fully invariant one (e.g. \(\lozenge (c\vee d)=\lozenge c\vee \lozenge d\) for \(c\ne a,d\ne b\) does not in general belong to this relation). To capture substitution instances we must consider a ‘bigger’ coequalizer, namely

figure h

where \(\phi : L_\varSigma \mathcal {L}\rightarrow \mathcal {L}\) is the iso structure map of the free \(L_\varSigma \)-algebra. The pairs of terms st such that \(q(s)=q(t)\) now form a fully invariant equivalence relation in \(\mathbf {DL}\). We nearly have a rigorous definition of functors of the shape \(L_\varSigma /\{E\}\), the final step is to notice that (4) can to some extent be made parametric in the choice of the middle object. We define for any A the coequalizer \(q_A\):

figure i

It is easy to see that (5) defines a functor: for any \(f: A\rightarrow B\), amongst the morphisms \(\mathcal {L}\rightarrow L_\varSigma B\) are all the ones which factor through \(L_\varSigma A\) via \(L_\varSigma f\), and thus LB is a co-cone for the diagram defining LA and so there must exist a unique \(Lf: LA\rightarrow LB\). For the same reason \(L\mathcal {L}\) is initial amongst all objects of the form LA with A in \(\mathbf {DL}\). Any L-algebra \(\alpha : LA\rightarrow A\) defines an \(L_\varSigma \)-algebra, i.e. a \(\varSigma \)-DLE, \(\alpha \circ q_A: L_\varSigma A\rightarrow LA\rightarrow A\) which will call the associated \(\varSigma \) -DLE.

Theorem 5

(Canonical Extension Lifting). Let \(\varSigma \) be a finitary signature, let E be a set of equations between terms in \(\mathsf {F}_{L_\varSigma }\mathsf {F}V\) of modal depth at most one and let \(L:\mathbf {DL}\rightarrow \mathbf {DL}\) be defined by \(LA=L_\varSigma /\{E\} (A)\) as in (5). If for any L-algebra \(\alpha : LA\rightarrow A\), the n-ary maps of the associated \(\varSigma \)-DLE are monotone, then the canonical extension construction lifts from \(\mathbf {DL}\) to \(\mathbf {Alg}_{\mathbf {DL}}(L)\).

Proof

For any \(\alpha : LA\rightarrow A\), the map \(\phi =\alpha \circ q_A: L_\varSigma A\rightarrow LA\rightarrow A\) defines an \(L_\varSigma \)-algebra, and we know how to build the canonical extension of \(L_\varSigma \)-algebras. Let \(\phi ^\sigma :L_\varSigma A^\sigma \rightarrow A^\sigma \) be this canonical extension and let us define \(\alpha ^\sigma : LA^\sigma \rightarrow A^\sigma \) by \(\alpha ^\sigma (x)=\phi ^\sigma (y)\) for \(y\in q_{A^\sigma }^{-1}(x)\). We need to show that \(\alpha ^\sigma \) is well-defined, i.e. that if \(q_{A^\sigma }(y)=q_{A^\sigma }(y')=x\) then \(\phi ^\sigma (y)=\phi ^\sigma (y')\). Note that if it is the case, then it is immediate to check that \(\alpha ^\sigma \) is a \(\mathbf {DL}\)-morphism. If \(q_{A^\sigma }(y)=q_{A^\sigma }(y')\) then there must exist a \(z\in \mathsf {F}E\) and \(f\in \hom (\mathcal {L},L_{\varSigma }A^\sigma )\) such that \(y=f\circ \hat{e}_1(z), y'=f\circ \hat{e}_1(z)\). But we know that \(\phi (g\circ \hat{e}_1(z))=\phi (g\circ \hat{e}_2(z))\) for any \(g\in \hom (\mathcal {L},L_\varSigma A)\) by definition of \(\phi \). This means that \((A,\phi )\models \hat{e}_1(z)=\hat{e}_1(z)\), and therefore if the equation is canonical we are done, for then \((A^\sigma ,\phi ^\sigma )\models \hat{e}_1(z)=\hat{e}_2(z)\), i.e. \(\phi ^\sigma (g\circ \hat{e}_1(z))=\phi ^\sigma (g\circ \hat{e}_2(z))\) for any \(g\in \hom (\mathcal {L},L_\varSigma A^\sigma )\), and thus for \(g=f\).

The result thus amounts to showing that equations involving terms of modal depth at most one are canonical, and this will follow immediately from Proposition 4 if we can show that terms of modal depth at most one are stable. Let A be in \(\mathbf {DL}\) and \(t\in \mathsf {F}_{L_{\varSigma }}\mathsf {F}V\) be a term of modal depth 0 built from propositional variables in \(V_0=\{p_1,\ldots ,p_n\}\). By distributivity, we can assume \(t=\bigvee _{i=1}^l \bigwedge _{j=1}^{m_i}p_{k(i,j)}\) where k picks for each (ij) the index of a variable in V. By definition

$$ t^A=\vee ^A\circ \langle \wedge ^A\circ \langle \pi _{k(1,1)},\ldots ,\pi _{k(1,m_1)}\rangle ,\ldots ,\wedge ^A\circ \langle \pi _{k(l,1)},\ldots ,\pi _{k(l,m_l)}\rangle \rangle $$

where \(\vee ^A:(\mathsf {U}A)^l\rightarrow \mathsf {U}A\) is the l-ary join in A, and similarly for every \(\wedge ^A\). Each \(\pi _i^\sigma :(\mathsf {U}A^\sigma )^n\rightarrow \mathsf {U}A^\sigma \) is \((\sigma ^n,\sigma )\)-continuous by definition of \(\sigma ^n\). Moreover, \(\vee ^{A^\sigma }\) and \(\wedge ^{A^\sigma }\) preserve meets and joins in every argument by distributivity, and are thus \((\sigma ^l,\sigma )\)- and \((\sigma ^{m_i},\sigma )-\)continuous respectively by Proposition 2. It follows that \(t^{A^\sigma }=(t^A)^\sigma \) by the Principle of Matching Topologies. Assume now that t is of modal depth 1, i.e. \(t=\bigvee _{i=1}^n \bigwedge _{j=1}^{m_i}f_{ij}(a_{ij1},\ldots ,a_{ij\mathrm {ar}(f_{ij})})\), where each \(a_{ijk}\) is of modal depth 0. Since every extension \(f_{ij}\) is assumed to be monotone, Proposition 3 implies that \((t^A)^\sigma \le t^{A^\sigma }\). So we need only show the reverse inequality. We have established above that each \(a_{ijk}^{A^\sigma }\) is \((\sigma ^n,\sigma )\)-continuous, and by Proposition 1 \(f_{ij}^{A^\sigma }\) is \((\sigma ^{\mathrm {ar}(f_{ij})},\gamma ^{\uparrow })\)-continuous. Finally since \(\vee ^{A^\sigma }\) and \(\wedge ^{A^\sigma }\) preserve all joins they preserve up-directed ones and are thus \(((\gamma ^{\uparrow })^k,\gamma ^{\uparrow })\)-continuous. The result then follows from the Principle of Matching Topologies. A completely analogous proof can be shown to hold in boolean algebras by using the de Morgan laws and the antitone preservation properties of Proposition 2.

Remark. Not all sets E of equations satisfying the conditions of Theorem 5 make sense, take for example \(\varSigma =\{\lozenge \}\) and \(E=\{a=b,\lozenge (c\vee d)=\lozenge c\vee \lozenge d\}\) with \(a,b,c,d\in V\) all distinct. The equation \(a=b\) is canonical: choose \(V_0=\{a,b,c,d\}\), then \(a^A\) is simply the projection \(\pi _1^A: A^4\rightarrow A\) and \(b^A\) is simply \(\pi _2^A: A^4\rightarrow A\) for any \(L_\varSigma \)-algebra A. It is easy to check from the definition that \((\pi _1^A)^\sigma =(\pi _1)^{A^\sigma }\), and similarly for \(\pi _2^A\), so the terms are stable, and the equation canonical. But it is vacuously canonical: \(\pi _1^A\) and \(\pi _2^A\) are not equal.

Remark. As was mentioned earlier, [Sch06] shows that for a \(\mathbf {Set}\)-endofunctor T, the class of all T-coalgebras can be characterized by axioms of modal depth one. From the point of view of coalgebraic logic, the only restrictive requirement of Theorem 5 is therefore that the expansions defined by such an axiomatization should be monotone. This however covers most coalgebraic logics, for example graded modal logic, probability logic, conditional logic, etc.

Example 3

It is clear from the definition of \(L^{\mathrm {ML}}\) in Example 1 that \(L^{\mathrm {ML}}\) satisfies the conditions of Theorem 5, i.e. canonical extensions lift to \(\mathbf {Alg}_{\mathbf {DL}}(L^{\mathrm {ML}})\). In order to axiomatize the duality between \(\lozenge \) and \(\square \) in positive ML, one must enforce Dunn’s Interaction Axioms on \(L^{\mathrm {ML}}\)-algebras [Dun95]:

figure j

It follows from the proof of Theorem 5 that these inequations are also canonical.

5 Jónsson-Tarski vs Canonical Extensions.

Combining the results of Sects. 2 and 3, we know that for logics defined by an endofunctor \(L:\mathscr {C}\rightarrow \mathscr {C}\) satisfying the conditions of Theorem 5 and a semantic transformation \(\delta : LG\rightarrow GT\) satisfying the conditions of Theorem 1, any L-algebra \(\alpha : LA\rightarrow A\) has two extensions with a common carrier: the Jónsson-Tarski extension \(\alpha ^\zeta \) and the canonical extension \(\alpha ^\sigma \). There is no reason a priori for them to be isomorphic L-algebras, but it turns out that this is frequently the case in practice. It is in these instances that coalgebraic completeness-via-canonicity applies. For now though the situation is the following:

figure k

The left-hand side of Diagram (6) deals with the model-building part of coalgebraic completeness-via-canonicity, whilst the right-hand side of Diagram (6) deals with the algebraic part the method.

Theorem 6

(Coalgebraic Completeness-via-Canonicity). Let \(L: \mathbf {DL}\rightarrow \mathbf {DL}\) satisfy the conditions of Theorem 5 and \(\delta : L\mathcal {U}\rightarrow \mathcal {U}T\) the conditions of Theorem 1. If \(q:\mathsf {F}_L\mathsf {F}V\twoheadrightarrow \mathcal {L}\) is the quotient in \(\mathbf {Alg}_{\mathbf {DL}}(L)\) of a fully invariant equivalence relation defining a variety closed under canonical extensions, and if the Jónsson-Tarski and canonical extensions coincide, then \(\mathcal {L}\) is strongly complete w.r.t. the class of T-coalgebras validating all equations \(s=t\) s.th. \(q(s)=q(t)\).

Proof

For any \(\varPhi ,\varPsi \subseteq \mathcal {L}\) such that \(\varPhi \not \vdash \varPsi \) we can find a point in the coalgebra \(\gamma :\mathsf {Pf}\mathcal {L}\rightarrow T\mathsf {Pf}\mathcal {A}\) satisfying every formula in \(\varPhi \) and none of \(\varPsi \) exactly as in Theorem 2, but we must also check that this T-coalgebra validates all the equations \(s=t\) where \(s,t\in \mathsf {F}_L\mathsf {F}V\) and \(q(s)=q(t)\). If \(q(s)=q(t)\), then \((\mathcal {L},\alpha )\models s=t\) by construction of \(\mathcal {L}\). Since \(\mathcal {L}\) belongs to the variety it defines (in fact it is its initial object), and since this variety is assumed to be closed under canonical extensions, it follows that \((\mathcal {L}^\sigma ,\alpha ^\sigma )\models s=t\). Finally, since the Jónsson-Tarski and canonical extensions coincide we have \((\mathcal {U}\mathsf {Pf}\mathcal {L},\alpha ^\zeta )\models s=t\) which means that \(\llbracket s\llbracket _{(\gamma ,v)}=\llbracket t\rrbracket _{(\gamma ,v)}\) for any valuation \(v:\mathsf {F}V\rightarrow \mathcal {U}\mathsf {Pf}\mathcal {L}\).

Remark. If E is a set of equations between terms of \(\mathsf {F}_L\mathsf {F}V\), then the quotient \(q:\mathsf {F}_L\mathsf {F}V\twoheadrightarrow \mathcal {L}\) defined from E in the fashion of Diagram (4) is usually called the Lindenbaum-Tarski algebra of the logic defined by L and E.

Remark. We choose to require that a variety defined by a regular quotient of the free L-algebra should be canonical, i.e. closed under canonical extensions. This is strictly more general than requiring that a variety be defined by canonical equations (in which case it is also canonical). Indeed, as was shown in [HV05], there exist canonical varieties of BAOs with no canonical axiomatization.

Remark. In fact we could require less than a full isomorphism of L-algebras, what is really needed is the implication \((A^\sigma ,\alpha ^\sigma )\models s=t\Rightarrow (\mathcal {U}\mathsf {Pf}A,\alpha ^\zeta )\models s=t\).

We now give a useful criterion for the Jónsson-Tarski and canonical extensions to be equal. Consider for a finitary signature \(\varSigma \) a set E of equations of the shape

figure l

and let \(L:\mathbf {DL}\rightarrow \mathbf {DL}\) be defined as \(LA=L_\varSigma /\{E\}(A)\) as in Eq. (5). It is easy to see that for any \(\alpha : LA \rightarrow \ A\), the associated \(\varSigma \)-DLE has n-ary expansions which (anti)-preserve meets or joins in each argument.

Theorem 7

Let E be as in Eq. (7) and \(LA=L_\varSigma /\{E\}(A)\). Let \(E^\infty \) denote the set equations defined as (7) but with \(\mathcal {P}_f(\mathsf {F}_{L_\varSigma }\mathsf {F}V)\) replaced by \(\mathcal {P}(\mathsf {F}_{L_\varSigma }\mathsf {F}V)\). If at every A in \(\mathbf {DL}\) the adjoint transformation \(\hat{\delta }\) of \(\delta : L\mathcal {U}\rightarrow \mathcal {U}T\) has a right-inverse \(\zeta _A\) and \(\delta _{\mathsf {Pf}A}\circ q_A\) coequalizes the pair of morphisms defined by plugging \(E^\infty \) in (5), then the Jónsson-Tarski and canonical extensions coincide.

Proof

Let \((A, \alpha )\) be an L-algebra. Note first that L is of the shape required by Theorem 5: E is a set of equations of modal depth at most one, and if the n-ary expansions of the \(\varSigma \)-DLE associated with \((A, \alpha )\) (anti)-preserve meets or joins in each argument, they are in particular monotone in each argument.

The structure map of the Jónsson-Tarski extension of \((A,\alpha )\) is denoted by \(\alpha ^\zeta \) and that of the canonical extension by \(\alpha ^\sigma \). The situation can be summarised in the following diagram whose innermost and outermost triangles commute:

figure m

We need to show \(\alpha ^\zeta =\alpha ^\sigma \). It follows from the definition of E and Proposition 2 that the n-ary expansions of the \(\varSigma \)-DLE associated with \((A,\alpha )\) are smooth, and therefore have unique \((\sigma ^n,\gamma )\)-continuous extensions given by \((\alpha \circ q_A)^\sigma \), moreover \(\alpha ^\sigma \) is defined in such a way that \(\alpha ^\sigma \circ q_{A^\sigma }=(\alpha \circ q_A)^\sigma \) (see Theorem 5).

By definition \(\alpha ^\zeta =\mathcal {U}\mathsf {Pf}\alpha \circ \mathcal {U}\zeta _A\circ \delta _{\mathsf {Pf}A}\). Since \(\delta _{\mathsf {Pf}A}\circ q_{A^\sigma }\) is assumed to coequalize the maps defined by \(E^\infty \) in the way of Diagram (5), so does \(\alpha ^\zeta \circ q_{A^\sigma }\), and it follows that that the n-ary expansions of the \(\varSigma \)-DLE associated with \(\alpha ^\zeta \) satisfy one of the conditions 5,6,7,8 of Proposition 2, and are in particular \((\sigma ^n,\gamma )\)-continuous. They therefore define the same \(L_\varSigma \)-algebra structure on \(A^\sigma \) as \((\alpha \circ q_A)^\sigma \). It follows that \(\alpha ^\zeta \circ q_{A^\sigma }=\alpha ^\sigma \circ q_{A^\sigma }\), i.e. that \(\alpha ^\zeta =\alpha ^\sigma \) since \(q_{A^\sigma }\) is (regular) epi.

Example 4

As was shown in Example 2, \(L^{\mathrm {ML}}\)-algebras have Jónsson-Tarski extensions. Moreover, it is not difficult to see directly from the definition of \(\delta ^{\mathrm {ML}}\) that for any A in \(\mathbf {DL}\) its composition with the quotient \(q_A: L_{\{\lozenge ,\square \}} A\twoheadrightarrow L^{\mathrm {ML}} A\) determines two unary maps on A preserving respectively all non-empty joins and all non-empty meets, i.e. \(\delta ^{\mathrm {ML}}\) meets the criterion of Theorem 7.

Moreover as was shown in Example 3, \(L^{\mathrm {ML}}\)-algebras also have canonical extensions, and it is clear from the definition that the equations defining \(L^{\mathrm {ML}}\) are of the general shape of (7). It follows that \(L^{\mathrm {ML}}\) satisfies the conditions of Theorems 7 and coalgebraic completeness-via-canonicity, i.e. Theorem 6, can therefore be used. Consider for example Dunn’s Interaction axioms:

$$ \mathsf {I}=\{\lozenge a\wedge \square b\le \lozenge (a\wedge b),\square (a\vee b)\le \square a\vee \lozenge b\} $$

Since they are canonical (see Example 3), it follows from Theorem 6 that the quotient of \(\mathsf {F}_{L^{\mathrm {ML}}}\mathsf {F}V\) under the fully invariant equivalence relation in \(\mathbf {DL}\) defined by \(\mathsf {I}\), is strongly complete w.r.t. to \(\mathsf {P}_c\times \mathsf {P}_c\)-coalgebras validating \(\mathsf {I}\). We will denote this logic \(\mathbf {K}_+\). These axioms do not collapse the relations interpreting \(\lozenge \) and \(\square \) as might be expected and as is the case in standard Kripke frames (see [Dun95] and 6.1 of [GNV05] for a discussion on models with one or two relations). However, we can always find such a model if we accept to have a relation closed upward and downward. The following lemma is very useful in practice and greatly clarifies correspondence theory for positive ML (see [CJ97]). We denote by \(\downarrow \gamma \) (resp. \(\uparrow \gamma \)) the pointwise downward (resp. upward) closure of a map \(\gamma : W\rightarrow \mathsf {P}_c W\).

Lemma 1

Let \(\gamma _\lozenge \times \gamma _\square : W\rightarrow \mathsf {P}_c(W)\times \mathsf {P}_c(W), w\in W\) and \(a\in \mathsf {F}_{L^{\mathrm {ML}}}\mathsf {F}V\). then \((w, \gamma _\lozenge \times \gamma _\square ,v)\models a\) iff \((w, \downarrow \gamma _\lozenge \times \uparrow \gamma _\square ,v)\models a\) for any valuation v.

Proof

Immediate from the fact that denotations are upsets.

Lemma 2

Let \(\gamma _\lozenge \times \gamma _\square : W\rightarrow \mathsf {P}_c(W)\times \mathsf {P}_c(W)\) be a coalgebra validating the Interaction axioms, and let \(w\in W\) and \(a\in \mathsf {F}_{L^{\mathrm {ML}}}\mathsf {F}V\), then \((w, \gamma _\lozenge \times \gamma _\square ,v)\models a\) iff \((w, (\gamma _\lozenge \cap \gamma _\square )\times (\gamma _\lozenge \cap \gamma _\square ),v)\models a\) for any valuation v.

Proof

By induction on a, the interesting cases being \(a=\lozenge b\) and \(a=\square b\). We show the \(\lozenge b\) case, the other is dual. From Lemma 1, we can assume w.l.o.g. that \(\gamma _\square \) is upward-closed. We fix a valuation \(v: V\rightarrow \mathcal {U}(W)\) and show the non-trivial direction: assume \((w, \gamma _\lozenge \times \gamma _\square , v)\models \lozenge b\). Since \(\lozenge c\wedge \square d\le \lozenge (c\wedge d)\) is valid, it must hold at w for any valuation. Consider for instance the following valuation: let q be a free variable, i.e. not occurring in b, and let us define \(v'(p)=v(p)\) on \(V\setminus \{q\}\) and \(v'(q)=\gamma _{\square }(w)\), which is an upset. The denotations of b under v and \(v'\) are equal. By construction we have \((w, \gamma _\lozenge \times \gamma _\square , v')\models \lozenge b\wedge \square q\), and thus \((w, \gamma _\lozenge \times \gamma _\square , v')\models \lozenge (b\wedge q)\), and therefore there exist \(x\in \gamma _{\lozenge }(w)\cap \gamma _{\square }(w)\cap \llbracket b\rrbracket _{v'}\) but since \( \llbracket b\rrbracket _{v'}= \llbracket b\rrbracket _{v}\) this means that there exists \(x\in \gamma _{\lozenge }(w)\cap \gamma _{\square }(w)\cap \llbracket b\rrbracket _{v}\), i.e. \((w, (\gamma _\lozenge \cap \gamma _\square )\times (\gamma _\lozenge \cap \gamma _\square ),v)\models \lozenge b\) as desired.

The choice of which type of model to consider, viz. models with one or two relations, will in fine depend on what the models represent. In the next example we will present models where states are memory resources and accessibility relations correspond to the action of programs. A single relation then interprets each pair of existential and universal modalities, and \(\mathsf {I}\) is then trivially satisfied.

Example 5

(Modal separation logics). We conclude with a more elaborate family of examples. In [DP15a] we introduced the functor \(L^{\mathrm {SL}}:\mathbf {DL}\rightarrow \mathbf {DL}\) defined by

$$\begin{aligned} L^{\mathrm {SL}}A=&\mathsf {F}\{I, a*b, a-*b, a*-b\mid a,b\in \mathsf {U}A\} / \\&\{(a\vee b)*c=(a*c)\vee (b*c), a*(b\vee c)=(a*b)\vee (a*c)\\&a-*(b\wedge c)=(a-*b)\wedge (a-*c), (a\vee b)-*c=(a-*c)\wedge (b-*c)\\&(a\wedge b)*-c=(a*-c)\wedge (a*-c), a*-(b\vee c)=(a*-b)\wedge (a*-c)\} \end{aligned}$$

We interpret \(L^{\mathrm {SL}}\)-formulas in \(T^{\mathrm {SL}}\)-coalgebras for \(T^{\mathrm {SL}}:\mathbf {Pos}\rightarrow \mathbf {Pos}\) defined by:

$$ T^{\mathrm {SL}} W=\mathbbm {2}\times \mathsf {P}_c(W\times W)\times \mathsf {P}_c(W^{\mathrm {op}}\times W)\times \mathsf {P}_c(W\times W^{\mathrm {op}}) $$

via the semantic transformation \(\delta ^{\mathrm {SL}}: L^{\mathrm {SL}}\mathcal {U}\rightarrow \mathcal {U}T^{\mathrm {SL}}\) defined on generators at each poset W by \(\delta ^{\mathrm {SL}}_W(I)=\{t\in T^{\mathrm {SL}} W\mid \pi _1(t)=0\}\) and

$$\begin{aligned} \delta ^{\mathrm {SL}}_W(U*V)&=\{t\in T^{\mathrm {SL}} W\mid \exists (x,y)\in \pi _2(t), x\in U, y\in V\}\\ \delta ^{\mathrm {SL}}_W(U-*V)&=\{t\in T^{\mathrm {SL}} W\mid \forall (x,y)\in \pi _3(t), x\in U\Rightarrow y\in V\}\\ \delta ^{\mathrm {SL}}W(U*-V)&=\{t\in T^{\mathrm {SL}} W\mid \forall (x,y)\in \pi _4(t), y\in V\Rightarrow x\in U\} \end{aligned}$$

The intended interpretation of this language is that worlds represent resources which can be split and \(w\models p*q\) means that the resource w can be split into two resource st such that \(s\models p\) and \(t\models q\). The operations \(-*\) and \(*-\) are left and right residuals to \(*\), and I acts as a unit. This is encoded by the (in)equations:

figure n

The logic defined by \(L^{\mathrm {SL}}\) and these (in)equalities is known as separation logic or the logic of bunched implication or the distributive Lambek calculus depending on the context, and we shall denote it as \(\mathbf {SL}\). These (in)equations are canonical (residuated maps and their residuals are very well-behaved under canonical extension, even in posets see [Mor14]). As was shown in [DP15a], the adjoint transformation \(\hat{\delta }^{\mathrm {SL}}\) has right-inverses at every A in \(\mathbf {DL}\), and \(L^{\mathrm {SL}}\)-algebras therefore have Jónsson-Tarski extensions. Moreover, as can be seen from the definition of \(\delta ^{\mathrm {SL}}\) the criterion of (anti)-preservation of arbitrary joins or meets of Theorem 7 is also satisfied. Finally, the equations defining \(L^{\mathrm {SL}}\) satisfy the conditions of Theorem 5 and canonical extensions thus lift to \(\mathbf {Alg}_{\mathbf {DL}}(L^{\mathrm {SL}})\). All the conditions of Theorem 7 are thus satisfied, and we can use Theorem 6 on the regular quotient defined by FC1-FC6. The logic \(\mathbf {SL}\) is thus strongly complete w.r.t. the \(T^{\mathrm {SL}}\)-coalgebras validating these axioms, viz. \(T^{\mathrm {SL}}\)-coalgebras such that

$$\begin{aligned} (x,y)\in \gamma _{*}(w)\text { iff }(x,w)\in \gamma _{-*}(y)\text { iff }(w,y)\in \gamma _{*-}(x) \end{aligned}$$
(8)

and for every \(w\in W\) there exists \((w,x),(y,w)\in \gamma _*(w)\) with \(x,y\models I\). A typical example of such coalgebra is given by memory states represented by the set H of heaps, i.e. partial maps \(f:\mathbb {N}_+\rightharpoonup _f \mathbb {N}\) with finite domain. These are ordered by \(f\le g\) if \(g\upharpoonright \mathrm {dom}f=f\), the empty heap is the unit and \(\gamma _{*}: H\rightarrow \mathsf {P}_c(H\times H), f\mapsto \{(g,h)\mid \mathrm {dom}g\cap \mathrm {dom}h=\emptyset , g,h\le f\}\) interprets the separation conjunction \(*\) and its residuals via (8). In this context, it is reasonable to combine modal logics for program specification with separation logic to describe heaps evolving under the action of programs. Various fragments of PDL (see [Gol92]) are good candidates. For example, consider the simple program syntax \(\alpha {:}{:}=\pi \mid \alpha ;\alpha \) with \(\pi \in \varPi \) a set of atomic programs. By Theorem 3, the results for \(\mathbf {SL}\) and \(\mathbf {K}_+\), and Lemma 2, it follows that the fusion \(\bigoplus _{\varPi ^*}\mathbf {K}_+\oplus \mathbf {SL}\) is strongly complete w.r.t. to \(\prod _{\varPi ^*}\mathsf {P}_c(-)\times \mathbbm {2}\times \mathsf {P}_c((-)\times (-))\)-coalgebras. If we want to encode the sequential composition of the grammar in the interpretation we need the axioms

$$ \mathsf {Comp}=\{\langle \alpha _1;\alpha _2\rangle a=\langle \alpha _1\rangle \langle \alpha _2\rangle a, [\alpha _1;\alpha _2] a=[\alpha _1][\alpha _2] a\mid \alpha _1,\alpha _2\in \varPi ^*\} $$

It is easy to check from Theorem 4 that these axioms are canonical. They are valid in a model with a single relation \(R_{\alpha }\) interpreting each pair \(\langle \alpha \rangle , [\alpha ]\) if \(R_{\alpha _1}^{\downarrow }\circ R_{\alpha _2}^{\downarrow }=R_{\alpha _1;\alpha _2}^{\downarrow }\) and \(R_{\alpha _1}^{\uparrow }\circ R_{\alpha _2}^{\uparrow }=R_{\alpha _1;\alpha _2}^{\uparrow }\), where \(R_\alpha ^{\downarrow }\) and \(R_{\alpha }^{\uparrow }\) are the downward and upward closure of \(R_{\alpha }\) respectively. Theorem 6 gives us strong completeness of \(\bigoplus _{\varPi ^*}\mathbf {K}_+/\{\mathsf {Comp}\}\) with respect to such coalgebras, and modularity then gives us strong completeness of \(\bigoplus _{\varPi ^*}\mathbf {K}_+/\{\mathsf {Comp}\}\oplus \mathbf {SL}\). Note how the use of positive logics allows us to talk about existential access to all resources smaller than certain upper bounds, and universal access to resources larger than certain lower bounds. More interestingly perhaps, we could consider \(\alpha {:}{:}=\pi \mid \alpha ;\alpha \mid \alpha \parallel \alpha \) with a parallel composition operation and interaction axioms of the shape

$$ \langle \alpha _1\parallel \alpha _2\rangle a=\langle \alpha _1\rangle a *\langle \alpha _2\rangle a $$

This time, strong completeness will not simply transfer by modularity since we are making the languages interact, however since such equations are canonical, we can still apply completeness-via-canonicity, only this time to the entire logic.

6 Conclusion

We have described the key steps of the coalgebraic version of completeness-via-canonicity, and in particular the key role played by the Jónsson-Tarski and canonical extensions. We have sketched an implementation of the method for all positive or boolean logics with modalities satisfying a set of equations in the shape of (7) and a relational semantics. Much work remains to be done. We have a complete implementation for boolean graded logics, but not yet in the positive case, and no implementation at all for probability logic. For this we would like to explore whether the method can be applied to \(\mathbf {MSL}\)-based logics, since an expressive logics for Markov chains can be formulated over \(\mathbf {MSL}\) [JS10].