arXiv is now an independent nonprofit! Learn more
License: CC BY 4.0
arXiv:2608.10283v1 [cs.LO] 10 Aug 2026

A Kruskal Decision Procedure for Intuitionistic Modal Logic 𝖨𝖪𝟦\mathsf{IK4}

Mario Piazza
Scuola Normale Superiore, Pisa
mario.piazza@sns.it
Abstract

We prove decidability of Simpson’s intuitionistic modal logic 𝖨𝖪𝟦\mathsf{IK4} by working directly with cut-free nested proofs. Once the end formula is fixed, only finitely many combinations of input and output formulae can occur at a node, although the modal tree itself remains unbounded. We order these nested sequents by rooted homeomorphic embedding: weakening may add input formulae, while transitivity allows a modal edge to be stretched into a non-empty path.

Kruskal’s theorem makes rooted homeomorphic embedding a well-quasi-order, but does not by itself make backward application of the rules effective: an inference may still occur inside an arbitrarily large context. The finite-support lemma shows that a minimal predecessor need retain only the positions used by the inference, the images of the chosen basis elements, and the branch points joining them. Together with an effective enumeration of bounded rule instances, this bound makes the minimal predecessors computable. Backward closure from the initial sequents gives an increasing sequence of finitely based upward-closed sets. The sequence eventually stabilises, and its stable value is the set of provable nested sequents. At that point, finitely many cut-free proofs suffice: every other provable nested sequent is obtained from one of them by weakening along an embedding. Their maximum height gives a uniform proof-height bound.

2020 Mathematics Subject Classification. Primary 03B45; Secondary 03B25, 03F03.

Keywords. Intuitionistic modal logic, decidability, nested sequents, well-quasi-orders, Kruskal’s theorem.

1 Introduction

Fischer Servi’s intuitionistic modal logics combine an intuitionistic preorder with an independent modal relation, coordinated by two commuting conditions [7]. Simpson later developed the proof-theoretic and birelational presentation used here [15]. For each formula AA, the transitive extension 𝖨𝖪𝟦\mathsf{IK4} adds

□​A→□​□​A,◇​◇​A→◇​A.\Box A\to\Box\Box A,\qquad\Diamond\Diamond A\to\Diamond A.

The semantic clauses are familiar; the problem addressed here is the termination of proof search.

Earlier work already separates the availability of analytic calculi from this termination problem. Amati and Pirri already included 𝖨𝖪𝟦\mathsf{IK4} in their uniform tableau and sequent treatment [2], and Simpson obtained strong normalization and cut-free sequent calculi throughout his family. Yet decidability did not follow uniformly. Simpson’s procedure covered the systems listed in his Fig. 7–5, but left 𝖨𝖪𝟦\mathsf{IK4}, 𝖨𝖪𝖣𝟦\mathsf{IKD4}, and 𝖨𝖲𝟦\mathsf{IS4} open [15, Fig. 7–5 and pp. 146–147]. Transitivity was already causing the relevant difficulty: modal requirements can be propagated arbitrarily far down a graph extension, and the extensions used to control backward search are no longer bounded. Nested and deep sequent methods for modal and tense logics already have a substantial proof-theoretic history [5, 10, 17]. In the intuitionistic setting, Kuznets and Straßburger covered the whole modal cube and isolated the non-termination peculiar to the transitive and Euclidean cases [12]. Lyon then used structural refinement to obtain the cut-free propagation calculus used below, while still describing decidability of transitive extensions of 𝖨𝖪\mathsf{IK} as a longstanding open problem [13, p. 424].

Several earlier decidability results come close enough to require a precise boundary. Alechina and Shkatov obtain decidability when the relevant frame conditions can be presented as an acyclic family of monadic-second-order definable closure conditions, subject to their condition on the number of closure conditions associated with each relation. This does not cover Simpson’s frames: in their notation they explicitly give R2∘R⊆R∘R2R_{2}\circ R\subseteq R\circ R_{2} as a non-example for their method [1, p. 229]. Identifying RR with the intuitionistic preorder and R2R_{2} with the modal accessibility relation, this is exactly the commuting condition F1 used here.

Garg, Genovese and Negri obtained a constructive decision procedure for the necessitation-only fragment of intuitionistic 𝖪𝟦\mathsf{K4}, and explicitly left possibility modalities outside the scope of their intuitionistic method [9]. Their result therefore does not decide Simpson’s full 𝖨𝖪𝟦\mathsf{IK4}, whose language contains both □\Box and ◇\Diamond, and whose transitive extension includes both □​A→□​□​A\Box A\to\Box\Box A and ◇​◇​A→◇​A\Diamond\Diamond A\to\Diamond A. Voorneveld’s recent forward procedure is likewise formulated for unary 𝖪\mathsf{K}-modalities and transformation axioms between them, including axiom 44; it does not add the intuitionistic possibility operator required for the full Simpson system [16].

Galmiche and Salhi give decision procedures for 𝖨𝖪\mathsf{IK}, 𝖨𝖳\mathsf{IT}, 𝖨𝖡𝟦\mathsf{IB4}, and 𝖨𝖳𝖡\mathsf{ITB}; 𝖨𝖪𝟦\mathsf{IK4} is not among the systems for which they establish decidability [8]. A recent contribution proves decidability of 𝐋𝐈𝐊𝟒\mathbf{LIK4} [4], but this is a different logic: 𝐋𝐈𝐊\mathbf{LIK} is incomparable with Simpson’s 𝖨𝖪\mathsf{IK}, and its box and diamond are interpreted locally on frames satisfying both forward and downward confluence [3]. Thus analytic calculi for Simpson’s basic transitive system were already available; what remained open was a terminating decision procedure for the full □\Box–◇\Diamond logic.

Filtration does not immediately settle the matter either. Quotienting a transitive birelational model by a simulation need not preserve transitivity, while taking the transitive closure of the induced modal relation may introduce modal obligations absent from the original model. Simpson’s finite-model construction stops short of the transitive case because the relevant contexts can no longer be bounded [15, pp. 169, 174–175]. The example after the semantic clauses shows where this direct construction breaks.

Here the choice of calculus matters. We use Lyon’s monomodal 𝖨𝖪𝟦\mathsf{IK4} calculus because structural refinement exposes the part of backward search that remains unbounded. Transitivity is represented by propagation along the modal tree already present in the sequent, rather than by a structural rule that changes that tree. In the set-based presentation used below, fixing the end formula leaves only the modal tree unbounded. We import the labelled completeness theorem and the structural-refinement results stated below, spell out the passage to the nested presentation used here, and prove termination there.

The calculus itself suggests the order to use on nested sequents. Weakening permits additional input formulae, while transitivity makes the subdivision of a modal edge harmless. This leads to the rooted homeomorphic order on nested sequents. Derivability is monotone for this order. Kruskal’s labelled Tree Theorem [11] then rules out infinite bad sequences; Nash–Williams’s formulation makes explicit the underlying relation of homeomorphism onto a subtree [14].

Kruskal gives finite bases for the resulting upward-closed sets. It does not, however, tell us how to compute backward rule applications inside unbounded contexts. As in backward coverability for well-structured transition systems [6], the well-quasi-order is algorithmically useful only once predecessor bases can be computed. The finite-support lemma below supplies the bound needed to compute them for these rules.

Consider a single inference. A minimal conclusion need retain only the positions used by the rule, the images of the chosen basis elements, and the branch points joining them. Side branches outside this finite part may be deleted, and unmarked vertices of degree 22 suppressed. The resulting bound reduces predecessor computation to a finite search; every candidate can be checked effectively against the displayed rules. Backward closure from the initial sequents can then be carried out on finite bases, producing an increasing chain whose eventual value is the set of provable nested sequents.

2 Semantic and proof-theoretic setting

Let pp range over propositional variables. The language is generated by

A::=p∣⊥∣A∧A∣A∨A∣A→A∣□A∣◇A.A::=p\mid\bot\mid A\wedge A\mid A\vee A\mid A\to A\mid\Box A\mid\Diamond A.

A birelational frame is (W,≤,R)(W,\leq,R), where WW is non-empty, ≤\leq is a preorder and

x​R​y&y≤z\displaystyle xRy\ \&\ y\leq z ⟹∃u​(x≤u&u​R​z),\displaystyle\Longrightarrow\exists u\,(x\leq u\ \&\ uRz), (F1)
x≤y&x​R​z\displaystyle x\leq y\ \&\ xRz ⟹∃u​(y​R​u&z≤u).\displaystyle\Longrightarrow\exists u\,(yRu\ \&\ z\leq u). (F2)

A frame for 𝖨𝖪𝟦\mathsf{IK4} additionally has transitive RR. Valuations are upward closed along ≤\leq. Write x⊩Ax\Vdash A when AA is true at xx; the modal clauses are

x⊩◇​A\displaystyle x\Vdash\Diamond A ⟺∃y​(x​R​y&y⊩A),\displaystyle\Longleftrightarrow\exists y\,(xRy\ \&\ y\Vdash A),
x⊩□​A\displaystyle x\Vdash\Box A ⟺∀y,z​(x≤y&y​R​z⇒z⊩A).\displaystyle\Longleftrightarrow\forall y,z\,(x\leq y\ \&\ yRz\Rightarrow z\Vdash A).

These are Fischer Servi’s birelational clauses in Simpson’s formulation [7, 15]. Persistence of ◇\Diamond uses F2. Persistence of □\Box is already built into its universal clause; F1 will instead be used when an assignment is lifted against the direction of a modal edge.

Example. Consider the finite frame on a,u,v,y,ta,u,v,y,t in which ≤\leq is reflexive with the single additional comparison a≤ua\leq u, and

R={(u,v),(y,t)}.R=\{(u,v),(y,t)\}.

The relation RR is transitive. Condition F1 holds because the target of either RR-edge has no proper ≤\leq-extension, so the same source witnesses the conclusion. For F2, the only non-reflexive comparison is a≤ua\leq u, and there is no RR-edge with source aa; the remaining cases are witnessed by the original target. Let pp be true at vv and yy, and nowhere else. The valuation is upward closed. By the box clause, □​p\Box p is true at aa, while pp is false at tt.

Suppose that a finite quotient identifies vv and yy because the invariant used by the quotient does not retain their different modal incidences. Before quotienting, y​R​tyRt is irrelevant to the box at aa: there is no chain a≤ya\leq y and y​R​tyRt. In the quotient, however,

[u]​R​[v],[v]=[y],[y]​R​[t].[u]R[v],\qquad[v]=[y],\qquad[y]R[t].

The induced relation is no longer transitive; its transitive closure adds [u]​R​[t][u]R[t]. Since [a]≤[u][a]\leq[u], the closure has produced [a]≤[u]​R​[t][a]\leq[u]R[t], and the box at [a][a] now demands pp at [t][t]. The quotient has forgotten which representative carried which modal incidence.

This does not rule out a more careful finite-model construction. It shows only why the procedure of first quotienting the frame and then taking the transitive closure of the induced modal relation is unsafe: identification can erase the provenance of RR-edges, while closure can turn the resulting composable edges into new box obligations.

Lemma 2.1.

If x≤yx\leq y and x⊩Ax\Vdash A, then y⊩Ay\Vdash A.

Proof.

The proof is by induction on AA. The propositional cases are standard. For implication, if x⊩B→Cx\Vdash B\to C, x≤y≤zx\leq y\leq z, and z⊩Bz\Vdash B, then z⊩Cz\Vdash C by the clause at xx.

If x⊩◇​Bx\Vdash\Diamond B, choose zz with x​R​zxRz and z⊩Bz\Vdash B. From x≤yx\leq y and x​R​zxRz, F2 gives uu with y​R​uyRu and z≤uz\leq u. The induction hypothesis yields u⊩Bu\Vdash B, hence y⊩◇​By\Vdash\Diamond B. Finally, suppose x⊩□​Bx\Vdash\Box B and x≤yx\leq y. If y≤y′y\leq y^{\prime} and y′​R​zy^{\prime}Rz, then x≤y′x\leq y^{\prime}, so the box clause at xx gives z⊩Bz\Vdash B. ∎

Lemma 2.2 (Transitivity and axiom 44).

On every Fischer–Servi frame with transitive RR, both

□​A→□​□​Aand◇​◇​A→◇​A\Box A\to\Box\Box A\qquad\text{and}\qquad\Diamond\Diamond A\to\Diamond A

are valid.

Proof.

It is enough to establish the two pointwise implications at an arbitrary world. Indeed, if x⊩Bx\Vdash B implies x⊩Cx\Vdash C for every xx, then every world forces B→CB\to C: at an arbitrary ≤\leq-extension one applies the same pointwise implication.

Fix xx and assume x⊩□​Ax\Vdash\Box A. To prove x⊩□​□​Ax\Vdash\Box\Box A, let x≤yx\leq y and y​R​zyRz; it remains to show z⊩□​Az\Vdash\Box A. Take z≤z′z\leq z^{\prime} and z′​R​uz^{\prime}Ru. By F1, applied to y​R​z≤z′yRz\leq z^{\prime}, there is y′y^{\prime} with y≤y′y\leq y^{\prime} and y′​R​z′y^{\prime}Rz^{\prime}. Transitivity of RR gives y′​R​uy^{\prime}Ru. Since x≤y≤y′x\leq y\leq y^{\prime} and x⊩□​Ax\Vdash\Box A, the box clause yields u⊩Au\Vdash A. Thus z⊩□​Az\Vdash\Box A, and hence x⊩□​□​Ax\Vdash\Box\Box A.

For the diamond principle, assume x⊩◇​◇​Ax\Vdash\Diamond\Diamond A and choose y,zy,z with x​R​yxRy, y​R​zyRz, and z⊩Az\Vdash A. Transitivity gives x​R​zxRz, so x⊩◇​Ax\Vdash\Diamond A. ∎

We write 𝖨𝖪𝟦\mathsf{IK4} for the set of formulas valid on these frames. Simpson’s completeness theorem shows that these are exactly the theorems of the Hilbert-style extension of intuitionistic modal 𝖪\mathsf{K} by the two displayed principles of axiom 44 [15].

2.1 Why the nested presentation matters

What matters here is not merely that Lyon’s calculus is cut free. After structural refinement, transitivity becomes propagation along a path already present in the nested sequent; it no longer appears as a structural rule that alters the modal tree. The unbounded part of backward search is therefore visible in the proof object itself. Once the end formula is fixed and input repetitions are erased, node labels range over a finite set, while the tree may still grow. This is the object ordered by homeomorphic embedding below.

The predecessor argument uses precisely this locality. Each inference acts at finitely many nodes, and propagation refers to the rest of the tree only through strict descendancy. We display the rules in full because the finite-support argument uses this local shape, especially what happens to the conclusion output in the first premise of →∙\to^{\bullet}.

2.2 The nested calculus NIK4

The schemes below are the monomodal 𝖨𝖪𝟦\mathsf{IK4} instance of Lyon’s refined nested system [13, pp. 421–424]. Lyon’s nested presentation reads input contexts as finite multisets. After importing completeness at the labelled level, we pass through this multiset presentation before repetitions are erased. For the decision argument we erase repeated input occurrences node by node; section˜2.4 shows that this transforms every multiset proof into a proof in the set-based calculus without increasing its height. Formula endsequents are unchanged by the erasure. Once the subformula vocabulary is fixed, set-valued inputs leave only finitely many possible node labels for the Kruskal encoding.

We use signed formulae A∙A^{\bullet} and A∘A^{\circ}, called input and output formulae. Output-free nested sequents Δ\Delta and full nested sequents Σ\Sigma are generated simultaneously by the following grammar, where n,k≥0n,k\geq 0:

Δ::=A1∙,…,An∙,[Δ1],…,[Δk],Σ::=Δ,A∘∣Δ,[Σ].\Delta::=A_{1}^{\bullet},\ldots,A_{n}^{\bullet},[\Delta_{1}],\ldots,[\Delta_{k}],\qquad\Sigma::=\Delta,A^{\circ}\mid\Delta,[\Sigma].

Thus a full nested sequent is a finite rooted modal tree with a finite set of input formulae at each node and exactly one output occurrence in the whole tree. In the second clause for Σ\Sigma, the displayed full child is the unique child containing that output; every other child belongs to Δ\Delta. The comma is associative and commutative. Input formulae at one node are treated as a set; sibling subtrees form a finite unordered family and their multiplicity is retained.

An input or output context is a nested sequent with holes of the corresponding polarity. Filling an input hole is interpreted by set union: the fixed part of the context may already contain the formula inserted at the hole. A displayed conclusion therefore does not by itself determine the inference; the fixed part of the context must also be chosen. In particular, when a principal input formula is already present at the active node, two applications with the same displayed conclusion may differ over whether that formula remains in the premise. In Lyon’s system the same context is read by multiset union. We call that the multiset presentation. When the distinction matters, we keep one multiset realization in the background; otherwise we use the displayed set notation. If 𝒞\mathcal{C} contains the unique output, 𝒞↓\mathcal{C}^{\downarrow} denotes the same context with that output deleted, and is therefore output-free.

For nodes u,vu,v of a nested sequent, write u≺vu\prec v when vv is a strict modal descendant of uu. The calculus 𝖭𝖨𝖪𝟦\mathsf{NIK4} consists of the following deep rules. Rules may be applied inside any context of the displayed polarity.

  ⁢C{p∙,p∘}  i​d   ⁢C{⊥∙}  ⊥∙   ⁢C{A∙,B∙}   ⁢C{(∧AB)∙}  ∧∙   ⁢C{A∘}  ⁢C{B∘}   ⁢C{(∧AB)∘}  ∧∘   ⁢C{A∙}  ⁢C{B∙}   ⁢C{(∨AB)∙}  ∨∙   ⁢C{Ai∘}   ⁢C{(∨A1A2)∘}  ∨i∘ i∈{1,2}  ⁢C{A∙,B∘}   ⁢C{(→AB)∘}  →∘   ⁢C↓{(→AB)∙,A∘}  ⁢C{B∙}   ⁢C{(→AB)∙}  →∙   ⁢C{[A∙]}   ⁢C{(⁢◇A)∙}  ◇∙   ⁢C{[A∘]}   ⁢C{(⁢□A)∘}  □∘\displaystyle\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{}\over\hbox{\hskip 20.46182pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{p^{\bullet},p^{\circ}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$id$}}$}}$ }\penalty 50\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{}\over\hbox{\qquad\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{\bot^{\bullet}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$\bot^{\bullet}$}}$}}$ }\penalty-10000\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\hskip 23.22398pt\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{A^{\bullet},B^{\bullet}\}$}}}\vbox{}}}\over\hbox{\hskip 28.14757pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(A\wedge B)^{\bullet}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$\wedge^{\bullet}$}}$}}$ }\penalty 50\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\hskip 39.61292pt\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{A^{\circ}\}$}\qquad\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{B^{\circ}\}$}}}}\vbox{}}}\over\hbox{\hskip 28.14757pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(A\wedge B)^{\circ}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$\wedge^{\circ}$}}$}}$ }\penalty-10000\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\hskip 39.61292pt\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{A^{\bullet}\}$}\qquad\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{B^{\bullet}\}$}}}}\vbox{}}}\over\hbox{\hskip 28.14757pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(A\vee B)^{\bullet}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$\vee^{\bullet}$}}$}}$ }\penalty 50\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\qquad\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{A_{i}^{\circ}\}$}}}\vbox{}}}\over\hbox{\hskip 31.22922pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(A_{1}\vee A_{2})^{\circ}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$\vee_{i}^{\circ}$}}$}}$ }\quad i\in\{1,2\}\penalty-10000\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\hskip 23.22398pt\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{A^{\bullet},B^{\circ}\}$}}}\vbox{}}}\over\hbox{\hskip 27.86978pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(A\to B)^{\circ}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$\to^{\circ}$}}$}}$ }\penalty 50\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\hskip 63.39238pt\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}^{\downarrow}\{(A\to B)^{\bullet},A^{\circ}\}$}\qquad\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{B^{\bullet}\}$}}}}\vbox{}}}\over\hbox{\hskip 27.86978pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(A\to B)^{\bullet}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$\to^{\bullet}$}}$}}$ }\penalty-10000\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\qquad\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{[A^{\bullet}]\}$}}}\vbox{}}}\over\hbox{\hskip 21.882pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(\Diamond A)^{\bullet}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$\Diamond^{\bullet}$}}$}}$ }\penalty 50\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\qquad\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{[A^{\circ}]\}$}}}\vbox{}}}\over\hbox{\hskip 22.43756pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(\Box A)^{\circ}\}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$\Box^{\circ}$}}$}}$ }
Figure 1: The logical rules of 𝖭𝖨𝖪𝟦\mathsf{NIK4}.

The two remaining modal rules are propagation rules. The notation 𝒞​{⋅}u​{⋅}v\mathcal{C}\{\cdot\}_{u}\{\cdot\}_{v} identifies the nodes at which the two holes occur; Δ1,Δ2\Delta_{1},\Delta_{2} are the output-free nested sequents placed at those nodes.

  ⁢C{Δ1}u{A∘,Δ2}v   ⁢C{(⁢◇A)∘,Δ1}u{Δ2}v  p◇ u≺v  ⁢C{(⁢□A)∙,Δ1}u{A∙,Δ2}v   ⁢C{(⁢□A)∙,Δ1}u{Δ2}v  p□ u≺v.\displaystyle\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\hskip 39.69109pt\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{\Delta_{1}\}_{u}\{A^{\circ},\Delta_{2}\}_{v}$}}}\vbox{}}}\over\hbox{\hskip 46.91333pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(\Diamond A)^{\circ},\Delta_{1}\}_{u}\{\Delta_{2}\}_{v}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$p_{\Diamond}$}}$}}$ }\quad u\prec v\penalty 50\qquad\raise 5.0pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\hskip 55.73972pt\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(\Box A)^{\bullet},\Delta_{1}\}_{u}\{A^{\bullet},\Delta_{2}\}_{v}$}}}\vbox{}}}\over\hbox{\hskip 47.46889pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{C}\{(\Box A)^{\bullet},\Delta_{1}\}_{u}\{\Delta_{2}\}_{v}$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$p_{\Box}$}}$}}$ }\quad u\prec v.
Figure 2: Propagation along non-empty modal paths.

The second transitivity principle gives a small illustration. Read upwards,

(◇​◇​p→◇​p)∘\displaystyle(\Diamond\Diamond p\to\Diamond p)^{\circ} ⟹→∘​(◇​◇​p)∙,(◇​p)∘\displaystyle\overset{\to^{\circ}}{\Longrightarrow}(\Diamond\Diamond p)^{\bullet},(\Diamond p)^{\circ}
⟹◇∙​(◇​p)∘,[(◇​p)∙]\displaystyle\overset{\Diamond^{\bullet}}{\Longrightarrow}(\Diamond p)^{\circ},[(\Diamond p)^{\bullet}]
⟹◇∙​(◇​p)∘,[[p∙]]\displaystyle\overset{\Diamond^{\bullet}}{\Longrightarrow}(\Diamond p)^{\circ},[[p^{\bullet}]]
⟹p◇​[[p∙,p∘]].\displaystyle\overset{p_{\Diamond}}{\Longrightarrow}[[p^{\bullet},p^{\circ}]].

The last step uses the two-edge path from the root to the innermost node, and that branch closes by i​did.

For a rule schema rr, write C⟹r(P1,…,Pk)C\Longrightarrow_{r}(P_{1},\ldots,P_{k}) for an inference obtained by applying rr, with conclusion CC and premises P1,…,PkP_{1},\ldots,P_{k}; k=0k=0 denotes a nullary inference.

The query for AA is represented by the one-node sequent A∘A^{\circ}. Read upwards, the only rules which add a node are ◇∙\Diamond^{\bullet} and □∘\Box^{\circ}; in either case the fresh child carries the displayed principal subformula. No rule creates an empty modal child.

2.3 Semantics of nested sequents

Let SS be a full nested sequent with node set VSV_{S}, root rSr_{S}, modal edge relation ESE_{S}, input set ΓS​(v)\Gamma_{S}(v) at each node v∈VSv\in V_{S}, and unique output A∘A^{\circ} at the node oSo_{S}. Its labelled-tree translation is the labelled sequent

{v​R​w:(v,w)∈ES},{v:B∣v∈VS,B∈ΓS​(v)}⊢oS:A.\{vRw:(v,w)\in E_{S}\},\{v:B\mid v\in V_{S},\ B\in\Gamma_{S}(v)\}\ \vdash\ o_{S}:A.

The sequent SS is valid when, for every birelational model and every assignment I:VS→WI:V_{S}\to W respecting all modal edges, truth of every input formula at its assigned node implies truth of the output formula at I​(oS)I(o_{S}).

Most rules are local. Implication and box are not: falsifying them may require shifting the whole modal assignment to a later intuitionistic world.

Lemma 2.3 (Tree lifting).

Let TT be a finite modal tree and let II respect its edges in a Fischer–Servi frame. If I​(v)≤xI(v)\leq x, then there is an edge-respecting assignment I′I^{\prime} such that I′​(v)=xI^{\prime}(v)=x and I​(u)≤I′​(u)I(u)\leq I^{\prime}(u) for every node uu of TT.

Proof.

Root the underlying undirected tree temporarily at vv and define I′I^{\prime} by induction on the distance from vv. Put I′​(v)=xI^{\prime}(v)=x. Suppose the value of a node has been fixed and consider an adjacent node not yet assigned.

If ss is assigned and tt is an original child of ss, then I​(s)≤I′​(s)I(s)\leq I^{\prime}(s) and I​(s)​R​I​(t)I(s)RI(t). Applying F2 to these two relations gives a world I′​(t)I^{\prime}(t) such that

I′​(s)​R​I′​(t),I​(t)≤I′​(t).I^{\prime}(s)RI^{\prime}(t),\qquad I(t)\leq I^{\prime}(t).

If instead tt is assigned and ss is its original parent, then I​(s)​R​I​(t)≤I′​(t)I(s)RI(t)\leq I^{\prime}(t). F1 gives a world I′​(s)I^{\prime}(s) with

I​(s)≤I′​(s),I′​(s)​R​I′​(t).I(s)\leq I^{\prime}(s),\qquad I^{\prime}(s)RI^{\prime}(t).

Every node has a unique predecessor in the temporary rooting at vv, so it is assigned exactly once. Since TT is finite, every node is reached after finitely many steps, and every original modal edge is respected in its original direction. ∎

Theorem 2.4 (Soundness).

Every sequent derivable in 𝖭𝖨𝖪𝟦\mathsf{NIK4} is valid on transitive Fischer–Servi frames.

Proof.

For a rule with premises P1,…,PkP_{1},\ldots,P_{k}, it suffices to prove the following contrapositive statement: every assignment which falsifies the conclusion can be turned into an assignment which falsifies at least one premise. When k=0k=0 there is no such assignment. An i​did-conclusion would require the same atom to be true as an input and false as the output at one node, while a ⊥∙\bot^{\bullet}-conclusion would require ⊥\bot to be true. For the propositional rules other than implication, the claim follows directly from the truth clauses. In the branching cases, truth of an input disjunction or falsity of an output conjunction selects the required premise.

Let II falsify a conclusion whose principal formula is (A→B)∘(A\to B)^{\circ} at a node uu, and put x=I​(u)x=I(u). There is y≥xy\geq x with y⊩Ay\Vdash A and y⊮By\nVdash B. By section˜2.3, II lifts to an edge-respecting assignment I′I^{\prime} such that I′​(u)=yI^{\prime}(u)=y and I​(v)≤I′​(v)I(v)\leq I^{\prime}(v) at every inherited node. Persistence keeps all inherited inputs true; the added input A∙A^{\bullet} is true at uu, whereas the new output B∘B^{\circ} is false there. Thus the premise is falsified.

Suppose next that (A→B)∙(A\to B)^{\bullet} is principal at uu. The conclusion assignment makes A→BA\to B true at I​(u)I(u). By reflexivity of ≤\leq, either I​(u)⊮AI(u)\nVdash A or I​(u)⊩BI(u)\Vdash B: if AA is true, the implication clause at I​(u)I(u) forces BB. In the first case delete the previous output and make A∘A^{\circ} the output at uu; all inputs, including (A→B)∙(A\to B)^{\bullet}, remain true, so the first premise is false. In the second case use the second premise: its distinguished (A→B)∙(A\to B)^{\bullet} occurrence is replaced by B∙B^{\bullet}, while any equal occurrence belonging to the side context is retained. The previous false output is unchanged, so this premise is falsified.

If (◇​A)∙(\Diamond A)^{\bullet} is principal at uu, choose yy with I​(u)​R​yI(u)Ry and y⊩Ay\Vdash A. Extending II by assigning yy to the fresh child makes every premise input true and leaves the previous output false. If (□​A)∘(\Box A)^{\circ} is principal at uu, its falsity gives worlds y,zy,z with I​(u)≤yI(u)\leq y, y​R​zyRz, and z⊮Az\nVdash A. Lift the original assignment at uu to yy, use persistence for every inherited input, and assign zz to the fresh child. The premise output A∘A^{\circ} is then false.

Propagation deserves a separate line: strict descendancy in the nested tree must be read as a genuine non-empty RR-path. If u≺vu\prec v, write the unique modal path as

u=v0→v1→⋯→vn=v(n≥1).u=v_{0}\to v_{1}\to\cdots\to v_{n}=v\qquad(n\geq 1).

An edge-respecting assignment gives I​(v0)​R​I​(v1)​R​⋯​R​I​(vn)I(v_{0})RI(v_{1})R\cdots RI(v_{n}); induction on nn, using transitivity, yields I​(u)​R​I​(v)I(u)RI(v). Hence falsity of ◇​A\Diamond A at I​(u)I(u) implies falsity of AA at I​(v)I(v), which falsifies the premise of p◇p_{\Diamond}. Likewise, if □​A\Box A is true at I​(u)I(u), reflexivity gives I​(u)≤I​(u)I(u)\leq I(u), and together with I​(u)​R​I​(v)I(u)RI(v) the box clause yields I​(v)⊩AI(v)\Vdash A. Adding A∙A^{\bullet} at vv therefore falsifies the premise of p□p_{\Box}. These cases exhaust the rules. ∎

2.4 Cut-free completeness

Lyon parameterizes structural refinement by the Horn–Scott–Lemmon schemes

φ​(n,k):=(◇n​□​A→□k​A)∧(◇k​A→□n​◇​A),n,k∈ℕ.\varphi(n,k):=(\Diamond^{n}\Box A\to\Box^{k}A)\wedge(\Diamond^{k}A\to\Box^{n}\Diamond A),\qquad n,k\in\mathbb{N}.

Here ℕ\mathbb{N} includes 0, and a zeroth modal power is read as the identity: ◇0​B=□0​B=B\Diamond^{0}B=\Box^{0}B=B. For n=0n=0 and k=2k=2 this gives

φ​(0,2)=(□​A→□​□​A)∧(◇​◇​A→◇​A),\varphi(0,2)=(\Box A\to\Box\Box A)\wedge(\Diamond\Diamond A\to\Diamond A),

exactly the two transitivity principles used here. With R2=R∘RR^{2}=R\circ R, the frame condition associated with φ​(0,2)\varphi(0,2) is R2⊆RR^{2}\subseteq R. We therefore set 𝒜4={φ​(0,2)}\mathcal{A}_{4}=\{\varphi(0,2)\}.

We take completeness from Lyon’s labelled calculus. Lyon’s Theorem 4 applies to 𝒜4\mathcal{A}_{4}-valid labelled sequents, whereas the decision argument below uses the set-based nested calculus just displayed. Theorem 4 supplies the labelled proof; we translate it into Lyon’s multiset nested presentation and erase repetitions only afterwards, without appealing directly to the later formula-level nested completeness statement.

Lyon’s definition of a labelled sequent permits both the relational multiset and the antecedent multiset to be empty. Hence Theorem 4 applies directly to the formula endsequent

∅,∅⊢w:A.\varnothing,\varnothing\vdash w:A.

The only degenerate point arises one step later. Lyon’s literal definition of a labelled tree sequent requires every formula label to occur in its relational tree, whereas the endsequent above has no relational atom. His translation nevertheless contains an explicit case for an empty relational component, and his formula-level nested completeness theorem presupposes the same convention [13, Definitions 14 and 16 and Theorem 6]. We therefore read the endsequent as the evident one-vertex rooted tree and verify the labelled-to-nested passage below with that case included.

For 𝒜4\mathcal{A}_{4}, structural refinement uses the grammar

g​(𝒜4)={◇⟶◇​◇,◇¯⟶◇¯​◇¯}.g(\mathcal{A}_{4})=\{\Diamond\longrightarrow\Diamond\Diamond,\ \overline{\Diamond}\longrightarrow\overline{\Diamond}\,\overline{\Diamond}\}.

Here ◇¯\overline{\Diamond} is the converse propagation symbol, used when a relational edge is traversed against its displayed direction. Since the propagation rules begin with ◇\Diamond, the relevant language is

Lg​(𝒜4)​(◇)={◇m:m≥1}.L_{g(\mathcal{A}_{4})}(\Diamond)=\{\Diamond^{m}:m\geq 1\}.

Their side condition is therefore a non-empty forward path. The boundary value n=0n=0 does not license the empty word.

At the relational level, Lyon reads w​R0​uwR^{0}u as w=uw=u. Thus the only structural rule associated with 𝒜4\mathcal{A}_{4} is

  R,⁢wRx,⁢xRv,⁢wRv,Γ⊢z:C   R,⁢wRx,⁢xRv,Γ⊢z:C  S0,2 .\raise 4.44444pt\hbox{${\hbox{$\displaystyle\displaystyle{\hbox{\hskip 62.02542pt\vbox{\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{R},wRx,xRv,wRv,\Gamma\vdash z:C$}}}\vbox{}}}\over\hbox{\hskip 49.651pt\vbox{\vbox{}\hbox{\thinspace\hbox{\hbox{$\displaystyle\displaystyle\mathcal{R},wRx,xRv,\Gamma\vdash z:C$}}}}}}$}}\hbox{\hbox{}\hbox{$\;\hbox{\small\small{$S_{0,2}$}}$}}$ }.

If a propagation path does not use the shortcut w​R​vwRv, this rule permutes over the propagation inference immediately. If it does, replace each occurrence of that shortcut by the two-edge path w​R​x​R​vwRxRv. On path words this replaces one occurrence of ◇\Diamond by ◇​◇\Diamond\Diamond, and the resulting word still belongs to Lg​(𝒜4)​(◇)L_{g(\mathcal{A}_{4})}(\Diamond). The same argument applies to both propagation rules. This is the n=0n=0, k=2k=2 instance of Lyon’s permutation lemmas and of the elimination procedure in Theorem 3 [13, Lemmas 1–2 and Theorem 3].

For a labelled sequent Λ=ℛ,Γ⊢u:C\Lambda=\mathcal{R},\Gamma\vdash u:C, consider the directed graph whose vertices are all labels occurring in ℛ\mathcal{R}, Γ\Gamma, or u:Cu:C, with an edge x→yx\to y whenever x​R​yxRy occurs in ℛ\mathcal{R}. We say that Λ\Lambda is tree-shaped with root rr when no relational atom is repeated and this graph is a finite tree directed away from rr. The one-vertex case ℛ=∅\mathcal{R}=\varnothing is included. For such a sequent, write Nr​(Λ)N_{r}(\Lambda) for the nested sequent obtained by placing at each vertex xx one input occurrence B∙B^{\bullet} for every occurrence of x:Bx:B in Γ\Gamma, placing the unique output C∘C^{\circ} at uu, and nesting the children according to this tree.

Lemma 2.5 (From labelled to nested proofs).

Let 𝒟\mathcal{D} be a proof in Lyon’s refined labelled calculus 𝖨𝖪​(𝒜4)​𝖫\mathsf{IK}(\mathcal{A}_{4})\mathsf{L} whose conclusion Λ\Lambda is tree-shaped with root rr. Then every sequent in 𝒟\mathcal{D} is tree-shaped with the same root, and 𝒟\mathcal{D} can be transformed effectively into a proof of Nr​(Λ)N_{r}(\Lambda) in the multiset presentation. The transformation preserves proof height.

Proof.

By Lyon’s Remark 2, replace every instance of ◇​r\Diamond r or □​l\Box l by the height-preserving propagation instance along its displayed edge [13, Remark 2]. Read the normalized proof upwards. Propositional and propagation rules leave the relational graph unchanged. The rules ◇​l\Diamond l and □​r\Box r each add an atom x​R​yxRy, where xx already labels the principal formula in the conclusion and yy is fresh. The new edge therefore attaches a single leaf and cannot duplicate an existing edge. No rule changes the root. The refined calculus for 𝒜4\mathcal{A}_{4} has no seriality rule, and S0,2S_{0,2} has been eliminated. Hence tree shape and root are preserved. This is Lyon’s Lemma 3 for non-degenerate relational trees [13, Lemma 3]; the same inspection covers the one-vertex case admitted here.

An induction on the height of 𝒟\mathcal{D} carries the translation through the proof, with each labelled sequent read by NrN_{r}. For the initial rules and the propositional rules other than →l\to l, the relational graph is unchanged and every displayed formula remains at the same label; applying NrN_{r} therefore yields the corresponding nested rule in figure˜1. For →l\to l, the first labelled premise moves the output to the node carrying the principal implication and places AA there. Its translation is 𝒞↓​{(A→B)∙,A∘}\mathcal{C}^{\downarrow}\{(A\to B)^{\bullet},A^{\circ}\}. The second premise keeps the previous output and replaces the distinguished implication occurrence by B∙B^{\bullet}. These are precisely the two premises of →∙\to^{\bullet}, including deletion of the previous output in the first.

The eigenlabel rules ◇​l\Diamond l and □​r\Box r translate to ◇∙\Diamond^{\bullet} and □∘\Box^{\circ}, with the fresh label becoming the fresh child. A propagation step from xx to yy is licensed by a word in Lg​(𝒜4)​(◇)L_{g(\mathcal{A}_{4})}(\Diamond), hence by a non-empty forward path; in the rooted tree this says that yy is a strict descendant of xx. It therefore translates to p◇p_{\Diamond} or p□p_{\Box}. Each labelled inference becomes one nested inference, with root, output node, and output formula preserved. Since the list of rule schemes is finite and each translation is syntactic, the construction is effective and height-preserving. ∎

Proposition 2.6 (Completeness of the multiset presentation).

Every formula valid on transitive Fischer–Servi frames has a cut-free proof in the multiset presentation of the rules in figures˜1 and 2.

Proof.

Let AA be valid on transitive Fischer–Servi frames. The frame condition for 𝒜4\mathcal{A}_{4} is R2⊆RR^{2}\subseteq R, so the labelled sequent

∅,∅⊢w:A\varnothing,\varnothing\vdash w:A

is 𝒜4\mathcal{A}_{4}-valid. Lyon’s Theorem 4 yields a proof in the refined labelled calculus 𝖨𝖪​(𝒜4)​𝖫\mathsf{IK}(\mathcal{A}_{4})\mathsf{L} [13, Theorem 4]. Since cut is not a rule of 𝖨𝖪​(𝒜4)​𝖫\mathsf{IK}(\mathcal{A}_{4})\mathsf{L}, the resulting labelled proof is cut free. Its conclusion is the one-vertex tree with root ww, and section˜2.4 translates the proof into a proof of Nw(∅,∅⊢w:A)=A∘N_{w}(\varnothing,\varnothing\vdash w:A)=A^{\circ} in the multiset presentation. ∎

The two presentations differ only in their treatment of repeated input formulae. For a nested sequent SS in the multiset presentation, let S♭S^{\flat} be obtained by erasing repeated input occurrences at every node; the modal tree, the output, and sibling multiplicities are unchanged.

Lemma 2.7 (Repetitions are inessential).

If SS has a derivation of height hh in the multiset presentation, then S♭S^{\flat} has a derivation of height at most hh in 𝖭𝖨𝖪𝟦\mathsf{NIK4}. Conversely, every inference of 𝖭𝖨𝖪𝟦\mathsf{NIK4} is obtained by erasing repetitions from a corresponding multiset inference.

Proof.

Both directions come from the same elementary observation. If

C⟹r(P1,…,Pk)C\Longrightarrow_{r}(P_{1},\ldots,P_{k})

is a multiset inference, then

C♭⟹r(P1♭,…,Pk♭)C^{\flat}\Longrightarrow_{r}(P_{1}^{\flat},\ldots,P_{k}^{\flat})

is an inference of the corresponding rule with set inputs. Indeed, for input multisets M,NM,N, erasing repetitions commutes with filling an input hole. Writing M⊎NM\uplus N for multiset union,

(M⊎N)♭=M♭∪N♭.(M\uplus N)^{\flat}=M^{\flat}\cup N^{\flat}.

The modal tree, the unique output, freshness, and the chosen propagation path are unchanged. Distinguished input occurrences may be followed before repetitions are erased. If a principal occurrence has an equal copy in the side context, the latter remains after the principal occurrence is removed or replaced; if no such contextual copy was chosen, it does not. These are exactly the two applications allowed by the convention preceding the rules. Coincident displayed subformulae and branching rules require no new argument: the required multiset copies are distinguished before erasure, and the same erased context occurs in every branch. The first premise of →∙\to^{\bullet} changes only the output, while the modal rules change only the fresh child or the propagation path. Thus the displayed local fact holds for every rule.

Induction on derivation height lifts this local observation to whole proofs. Apply it to the last inference and the induction hypothesis to each immediate premise; the height does not increase.

Conversely, fix an inference with set inputs, including its chosen side contexts. Give every contextual input one multiset occurrence and add the distinguished principal occurrences required by the rule. When a principal formula also belongs to the chosen side context, these are two occurrences; when two displayed subformulae coincide, use the corresponding number of distinguished copies. Keep the output, tree, fresh child, and propagation path unchanged. This is a multiset inference, and erasing its repeated inputs recovers the given inference with set inputs. ∎

This passage does not assume contraction admissibility. Repeated input occurrences are removed by the proof transformation just established; 𝖭𝖨𝖪𝟦\mathsf{NIK4} treats node inputs as sets, while retaining the multiplicities of sibling subtrees.

Theorem 2.8 (Cut-free completeness).

A formula AA is valid on transitive Fischer–Servi frames iff A∘A^{\circ} is derivable in 𝖭𝖨𝖪𝟦\mathsf{NIK4}.

Proof.

Soundness is theorem˜2.4. Conversely, validity gives a cut-free proof in the multiset presentation by section˜2.4. Since A∘A^{\circ} contains no input occurrences, (A∘)♭=A∘(A^{\circ})^{\flat}=A^{\circ}; hence section˜2.4 turns that proof into a 𝖭𝖨𝖪𝟦\mathsf{NIK4} proof of the same endsequent. ∎

2.5 Subformulas

Fix the formula A0A_{0} to be decided and let Sub⁡(A0)\operatorname{Sub}(A_{0}) denote its set of subformulae. Put

Φ=Sub⁡(A0).\Phi=\operatorname{Sub}(A_{0}).

The set Φ\Phi is finite and closed under taking subformulae.

Lemma 2.9 (Subformula property).

Every formula occurring in a cut-free 𝖭𝖨𝖪𝟦\mathsf{NIK4}-proof of A0∘A_{0}^{\circ} belongs to Φ\Phi.

Proof.

Reading a cut-free rule upwards, every formula newly displayed in a premise is a subformula of a principal formula in the conclusion; propagation merely moves such a subformula. The nullary rules add nothing to a branch: they only close a nested sequent already reached. Hence every formula in the proof belongs to Φ\Phi. In particular, ⊥\bot can occur only when it is already a subformula of A0A_{0}. ∎

The same induction gives the form used below: if a full endsequent uses only formulae from a finite set Φ\Phi closed under subformulae, then every formula in any cut-free proof of it lies in Φ\Phi. Henceforth, all nested sequents are full and use only formulae from this fixed Φ\Phi; in particular, all rule instances, predecessor operations, enumerations, and saturation stages are taken inside that universe.

Input formulae at a node form a set, while sibling subtrees remain a finite unordered family with multiplicity. Each rule mentions finitely many nodes and creates at most one fresh child. On a fixed finite tree it is decidable whether the rule applies; propagation requires only the additional test that one node is a strict descendant of another.

3 The homeomorphic order

Cut elimination bounds the formulae, not the modal depth. The trees must therefore be compared without imposing an artificial depth parameter. For a nested sequent XX, write VXV_{X} and EXE_{X} for its node and edge sets, rXr_{X} for its root, oXo_{X} for its output node, and ΓX​(v)⊆Φ\Gamma_{X}(v)\subseteq\Phi for the set of input formulae at a node vv. Since Φ\Phi is finite, only finitely many such sets and output entries are possible; a full nested sequent has exactly one node carrying an output formula.

Homeomorphic embedding is suggested by the calculus itself. Input formulae may be added, and transitivity makes it harmless to stretch a modal edge into a non-empty path. The branching pattern must nevertheless be left intact: two representing paths may meet only when the original edges share an endpoint, and no image node may lie inside the path representing another edge.

3.1 Homeomorphic embedding of nested sequents

Definition 3.1 (Homeomorphic embedding).

For nested sequents S,TS,T, write S⪯TS\preceq T if there is an injective map f:VS→VTf:V_{S}\to V_{T} satisfying the following conditions.

  1. (i)

    f​(rS)=rTf(r_{S})=r_{T};

  2. (ii)

    ΓS​(v)⊆ΓT​(f​(v))\Gamma_{S}(v)\subseteq\Gamma_{T}(f(v)) for every v∈VSv\in V_{S}, and f​(oS)=oTf(o_{S})=o_{T} with the same output formula at these two nodes;

  3. (iii)

    for every edge e=(v,w)e=(v,w) of SS, f​(w)f(w) is a proper descendant of f​(v)f(v) in TT; write πe\pi_{e} for the resulting non-empty directed path from f​(v)f(v) to f​(w)f(w);

  4. (iv)

    for distinct source edges e,e′e,e^{\prime}, let V​(π)V(\pi) denote the vertex set of a path π\pi and require

    V​(πe)∩V​(πe′)=f​(e∩e′),V(\pi_{e})\cap V(\pi_{e^{\prime}})=f(e\cap e^{\prime}),

    where an edge is identified with its two endpoints and ff is applied pointwise to endpoint sets. Writing Int\operatorname{Int} for the set of internal vertices, we also require

    Int⁡(πe)∩f​(VS)=∅.\operatorname{Int}(\pi_{e})\cap f(V_{S})=\varnothing.

The relation ⪯\preceq is a quasi-order. The identity map witnesses reflexivity. For transitivity, let f:S⪯Tf:S\preceq T and g:T⪯Ug:T\preceq U, and put h=g∘fh=g\circ f. Root preservation is immediate under composition. The input condition follows from transitivity of ⊆\subseteq, and the two output conditions give h​(oS)=oUh(o_{S})=o_{U} with the same output formula. If an edge ee of SS is represented in TT by

f​(v)=t0→t1→⋯→tm=f​(w),f(v)=t_{0}\to t_{1}\to\cdots\to t_{m}=f(w),

replace each edge (tj−1,tj)(t_{j-1},t_{j}) by its gg-path in UU and concatenate the resulting paths. Consecutive paths meet at g​(tj)g(t_{j}), non-consecutive ones are disjoint, and the concatenation is a non-empty directed path from h​(v)h(v) to h​(w)h(w). For two distinct edges of SS, their ff-paths meet only at the image of a common endpoint; clause (iv) for gg therefore gives the same intersection property after expansion. Finally, an hh-image node cannot be internal to a concatenated path: this would make an ff-image node internal to an ff-path, or a gg-image node internal to a gg-path. Thus hh satisfies clauses (i)–(iv).

The image nodes together with the representing paths form a subtree HH of TT with vertex set

f​(VS)∪⋃e∈ESV​(πe).f(V_{S})\cup\bigcup_{e\in E_{S}}V(\pi_{e}).

This also covers the one-node tree. Clause (iv) implies that every vertex of HH outside f​(VS)f(V_{S}) has degree 22 in HH. Suppressing precisely those vertices recovers a copy of the underlying unlabelled tree of SS, with f​(v)f(v) corresponding to vv. Conversely, a homeomorphism of the underlying tree of SS onto a subtree of TT determines paths satisfying clauses (iii)–(iv). Since the root is mapped to the root, orientation away from it makes these paths directed descendant paths. Thus clauses (iii)–(iv) are precisely the rooted homeomorphic-embedding conditions on the underlying trees, while clause (ii) records how the input formulae attached to a node may increase.

The relation is decidable. For finite S,TS,T, inspect the finitely many injective maps f:VS→VTf:V_{S}\to V_{T} with f​(rS)=rTf(r_{S})=r_{T} and test clauses (ii)–(iv).

3.2 Rules and proofs are monotone

The calculus is monotone for this order. Adding input formulae or subdividing modal edges does not destroy an inference, and the lift must retain enough information to be iterated through a proof.

To lift an inference along an embedding, we must identify in each premise the nodes inherited from the conclusion. For any inference II with conclusion CC and premises PiP_{i}, write Old⁡(Pi)\operatorname{Old}(P_{i}) for the nodes of PiP_{i} inherited from CC. Since no rule identifies or duplicates a conclusion node within one premise, there is a bijection

ιiI:VC⟶Old⁡(Pi),\iota_{i}^{I}:V_{C}\longrightarrow\operatorname{Old}(P_{i}),

sending each conclusion node to its inherited copy. The only possible node outside this inherited part is the fresh child created by ◇∙\Diamond^{\bullet} or □∘\Box^{\circ}.

Lemma 3.2 (Rules respect embedding).

Suppose

C⟹r(P1,…,Pk)C\Longrightarrow_{r}(P_{1},\ldots,P_{k})

is an inference II obtained by applying a rule rr, possibly with k=0k=0, and f:C⪯Df:C\preceq D. Then one can effectively construct an inference

J:D⟹r(Q1,…,Qk)J:\quad D\Longrightarrow_{r}(Q_{1},\ldots,Q_{k})

obtained by applying rr, together with, for every ii, an embedding fi:Pi⪯Qif_{i}:P_{i}\preceq Q_{i} compatible with these canonical correspondences. More explicitly, starting from a conclusion node xx, it makes no difference whether we first take its inherited copy in PiP_{i} and then apply fif_{i}, or first send xx to f​(x)f(x) and then take the inherited copy of f​(x)f(x) in QiQ_{i}:

fi​(ιiI​(x))=ιiJ​(f​(x))(x∈VC).f_{i}(\iota_{i}^{I}(x))=\iota_{i}^{J}(f(x))\qquad(x\in V_{C}).
Proof.

Fix a multiset presentation of II. At every conclusion node xx on which the rule acts, its principal input formulae occur in ΓC​(x)\Gamma_{C}(x) and hence in ΓD​(f​(x))\Gamma_{D}(f(x)). Choose a multiset presentation of DD with one contextual occurrence for each occurrence designated contextual in II. Put every input formula of DD not used by II into the side context, and add the distinguished principal occurrences required by the rule. Thus a formula which is both contextual and principal receives two occurrences. Applying rr at the image positions and then erasing repetitions gives an inference

J:D⟹r(Q1,…,Qk).J:\quad D\Longrightarrow_{r}(Q_{1},\ldots,Q_{k}).

For a modal introduction, the fresh child of QiQ_{i} is attached to the image of the principal node inherited from the conclusion.

Define fif_{i} on inherited nodes by

fi​(ιiI​(x))=ιiJ​(f​(x))(x∈VC),f_{i}(\iota_{i}^{I}(x))=\iota_{i}^{J}(f(x))\qquad(x\in V_{C}),

and, when PiP_{i} has a fresh child, send it to the fresh child of QiQ_{i}. The map is injective and sends root to root. Let AA be an input formula at an inherited node ιiI​(x)\iota_{i}^{I}(x) of PiP_{i}. Relative to the fixed multiset inference, either AA is inherited from the side context of CC or it is supplied by the rule. In the first case A∈ΓC​(x)A\in\Gamma_{C}(x), hence A∈ΓD​(f​(x))A\in\Gamma_{D}(f(x)), and the chosen side context retains it in QiQ_{i}. In the second case the lifted inference supplies AA at ιiJ​(f​(x))\iota_{i}^{J}(f(x)). The same alternative covers a fresh child, where every displayed formula is supplied by the modal rule. Therefore

ΓPi​(v)⊆ΓQi​(fi​(v))(v∈VPi).\Gamma_{P_{i}}(v)\subseteq\Gamma_{Q_{i}}(f_{i}(v))\qquad(v\in V_{P_{i}}).

For the output there are three possibilities. It is inherited unchanged by all input rules, by p□p_{\Box}, and by the second premise of →∙\to^{\bullet}; it is then preserved by ff. An output rule, the first premise of →∙\to^{\bullet}, or p◇p_{\Diamond} places the corresponding output formula at corresponding inherited nodes. Finally, □∘\Box^{\circ} places it at the two corresponding fresh children. Hence fif_{i} maps the unique output node of PiP_{i} to that of QiQ_{i} and preserves its formula.

Every edge of PiP_{i} between inherited nodes comes from an edge of CC; use for it the path by which ff represents that edge in DD. These paths retain clause (iv) of section˜3.1. If PiP_{i} has a fresh child and xx is the principal conclusion node, the edge from ιiI​(x)\iota_{i}^{I}(x) to that child is represented by the corresponding fresh edge in QiQ_{i}. Its parent is ιiJ​(f​(x))\iota_{i}^{J}(f(x)), the inherited copy of an ff-image node; clause (iv) for ff says that f​(x)f(x) is not internal to any path representing an inherited edge. The fresh edge therefore meets every path representing an inherited edge only at its parent, if at all. For a propagation rule, an active relation u≺vu\prec v in CC is sent by ff to a non-empty path from f​(u)f(u) to f​(v)f(v), so the same side condition holds in DD.

When k=0k=0, there are no premises to treat. If r=i​dr=id, clause (ii) for ff preserves the matching input atom at the output node; if r=⊥∙r=\bot^{\bullet}, it preserves ⊥\bot at the active node. Thus the same nullary rule applies to DD. For k>0k>0, the preceding paragraphs verify all clauses of section˜3.1 for each fif_{i}. Every step uses only the finite data carried by II and ff, so the inference JJ and the embeddings fif_{i} are obtained effectively. ∎

Lemma 3.3 (Weakening along embeddings).

Given an embedding f:S⪯Tf:S\preceq T and a proof of SS in 𝖭𝖨𝖪𝟦\mathsf{NIK4}, one can effectively construct a proof of TT of no greater height.

Proof.

Induct on the height of the given proof of SS. If its last inference is the nullary inference S⟹r()S\Longrightarrow_{r}(), apply section˜3.2 to that inference and to ff; the result is the corresponding nullary inference with conclusion TT.

Otherwise write the last inference as

S⟹r(P1,…,Pk).S\Longrightarrow_{r}(P_{1},\ldots,P_{k}).

By section˜3.2, the embedding ff effectively yields an inference T⟹r(Q1,…,Qk)T\Longrightarrow_{r}(Q_{1},\ldots,Q_{k}) and embeddings fi:Pi⪯Qif_{i}:P_{i}\preceq Q_{i}. Applying the induction hypothesis to each fif_{i} and the corresponding premise proof gives proofs of all QiQ_{i} of no greater height. Reapplying rr proves TT. ∎

Provability is therefore upward closed under ⪯\preceq. A labelled form of Kruskal’s theorem supplies a stronger tree embedding and hence shows that ⪯\preceq is a well-quasi-order.

3.3 Kruskal and finite bases

Lemma 3.4 (A decidable well-quasi-order).

The relation ⪯\preceq is a decidable well-quasi-order (wqo) on nested sequents.

Proof.

We mark the root in the label, rather than pass to pointed trees, so that the appeal to the labelled Tree Theorem is literal. Let

QΦ={𝗋𝗈𝗈𝗍,𝗈𝗍𝗁𝖾𝗋}×𝒫​(Φ)×(Φ∪{∅}).Q_{\Phi}=\{\mathsf{root},\mathsf{other}\}\times\mathcal{P}(\Phi)\times(\Phi\cup\{\varnothing\}).

The first coordinate is the root marker; the third is empty at every node except the unique output node. Declare a triple (ρ,Γ,o)(\rho,\Gamma,o) to be below (ρ′,Γ′,o′)(\rho^{\prime},\Gamma^{\prime},o^{\prime}) exactly when

ρ=ρ′,Γ⊆Γ′,o=o′.\rho=\rho^{\prime},\qquad\Gamma\subseteq\Gamma^{\prime},\qquad o=o^{\prime}.

This is a finite quasi-order and hence a wqo.

Kruskal states the Tree Theorem for finite rooted structured trees whose vertices are labelled in a wqo [11, §2, pp. 211–212]. His structured trees carry a linear order on the edges leaving each vertex. To apply the theorem here, choose an arbitrary such order at every node of every tree in an infinite sequence of nested sequents. Kruskal then gives a pair related by an order-preserving labelled monomorphism. For these trees, each source edge is represented by an oriented path whose interior contains no image node; paths representing distinct source edges meet only in the image of a common endpoint and are otherwise vertex-disjoint. After the auxiliary orders are forgotten, the same map is therefore an embedding in the sense of section˜3.1. Thus the order used by Kruskal is stronger than ⪯\preceq, which is all the wqo argument needs. Nash–Williams’s formulation makes explicit that the underlying unlabelled relation is homeomorphism onto a subtree [14, p. 833].

The three coordinates of QΦQ_{\Phi} impose the remaining clauses. Equality of the root marker sends the sole node carrying 𝗋𝗈𝗈𝗍\mathsf{root} in the source to the sole such node in the target. Inclusion of the second coordinate is the required inclusion of input formulae, and equality of the third preserves both the output node and its formula. Hence every infinite sequence of nested sequents has a ⪯\preceq-comparable pair. The relation is therefore a wqo, and its decidability was established above. ∎

Since ⪯\preceq is a quasi-order rather than a partial order, minimality must be understood modulo mutual embedding. Write

S≡T⟺S⪯T​ and ​T⪯S,S⊲T⟺S⪯T​ and ​T⋠S.S\equiv T\quad\Longleftrightarrow\quad S\preceq T\text{ and }T\preceq S,\qquad S\lhd T\quad\Longleftrightarrow\quad S\preceq T\text{ and }T\not\preceq S.

Minimality below is always minimality modulo ≡\equiv: an element TT of a set XX is minimal when no S∈XS\in X satisfies S⊲TS\lhd T. For a set XX of nested sequents, put

↑​X={T:∃S∈X​(S⪯T)}.\mathord{\uparrow}X=\{T:\exists S\in X\ (S\preceq T)\}.

A set BB is a basis of an upward-closed set UU when U=↑​BU=\mathord{\uparrow}B.

Proposition 3.5 (Finite bases and the ascending-chain condition).

Every upward-closed set of nested sequents has a finite basis. Moreover, every increasing sequence of upward-closed sets of nested sequents stabilises.

Proof.

The empty set has the empty basis. Suppose U≠∅U\neq\varnothing and fix T0∈UT_{0}\in U. If no ⊲\lhd-minimal member of UU lay below T0T_{0}, choose Tn+1∈UT_{n+1}\in U with Tn+1⊲TnT_{n+1}\lhd T_{n} recursively. This choice can be continued: a minimal member below some TnT_{n} would also lie below T0T_{0}. For i<ji<j, transitivity gives Tj⪯TiT_{j}\preceq T_{i}, whereas Ti⪯TjT_{i}\preceq T_{j} would imply Ti⪯Ti+1T_{i}\preceq T_{i+1}, contrary to Ti+1⊲TiT_{i+1}\lhd T_{i}. The sequence would therefore be bad. Hence every member of UU lies above a minimal one. Distinct minimal ≡\equiv-classes are incomparable, and infinitely many such classes would give an infinite bad sequence by choosing one representative from each. There are consequently only finitely many minimal classes. One representative from each forms a finite basis: its upward closure is contained in UU, while every member of UU lies above one of the representatives.

For the second assertion, suppose that an increasing chain (Un)n∈ℕ(U_{n})_{n\in\mathbb{N}} does not stabilise. Choose recursively

n0<n1<n2<⋯withUni⊊Uni+1,n_{0}<n_{1}<n_{2}<\cdots\qquad\text{with}\qquad U_{n_{i}}\subsetneq U_{n_{i+1}},

and choose Ti∈Uni+1∖UniT_{i}\in U_{n_{i+1}}\setminus U_{n_{i}}. By section˜3.3, there are i<ji<j with Ti⪯TjT_{i}\preceq T_{j}. Since ni+1≤njn_{i+1}\leq n_{j}, we have Ti∈Uni+1⊆UnjT_{i}\in U_{n_{i+1}}\subseteq U_{n_{j}}; upward closure of UnjU_{n_{j}} then gives Tj∈UnjT_{j}\in U_{n_{j}}, contrary to the choice of TjT_{j}. Thus the chain stabilises. ∎

Kruskal yields finite bases and eventual stabilisation, but no algorithm for computing predecessors or detecting the first stable stage. Those two points still have to be proved.

4 Finite support and backward closure

A backward inference may occur in an arbitrarily large context, although only a few positions are used by the rule and by the images of the chosen basis elements. The finite-support argument removes everything else and reduces the computation of predecessor bases to a finite search.

4.1 Finite support

Recall that C⟹r(P1,…,Pk)C\Longrightarrow_{r}(P_{1},\ldots,P_{k}) denotes an inference obtained by applying rr, with conclusion CC and the displayed premises. Nullary inferences are initial sequents. For an upward-closed set UU, define

Prer⁡(U)={C:∃P1,…,Pk∈UC⟹r(P1,…,Pk)},Pre⁡(U)=⋃rPrer⁡(U),\operatorname{Pre}_{r}(U)=\{C:\exists P_{1},\ldots,P_{k}\in U\quad C\Longrightarrow_{r}(P_{1},\ldots,P_{k})\},\qquad\operatorname{Pre}(U)=\bigcup_{r}\operatorname{Pre}_{r}(U),

where the union ranges over the finitely many rule schemas. For k=0k=0 the premise condition is empty. For a finite nested sequent XX, write |X|:=|VX||X|:=|V_{X}|.

By section˜3.2, Prer⁡(U)\operatorname{Pre}_{r}(U) is upward closed whenever UU is. Indeed, lift an inference with conclusion CC along C⪯DC\preceq D; each premise embeds into the corresponding lifted premise, which therefore belongs to UU. Nullary rules require no separate argument.

Most of the surrounding context is irrelevant to a fixed backward inference, but the nodes that determine it must remain. We call these positions active. For i​did, ⊥∙\bot^{\bullet}, and every propositional rule except →∙\to^{\bullet}, the sole active position is the node carrying the displayed principal formulae. For →∙\to^{\bullet} the principal node and the conclusion-output node are active, even when they coincide. A modal introduction acts at one conclusion node, its principal node; the fresh child belongs only to the premise and will be regenerated. A propagation rule acts at two conclusion nodes. Let ara_{r} be the maximum number of distinct conclusion nodes at which an rr-instance acts. Thus ar=1a_{r}=1 for the nullary rules, the local propositional rules, and the modal introductions, while ar=2a_{r}=2 for →∙\to^{\bullet} and the propagation rules.

For each inference, fix a multiset presentation whenever a displayed formula already occurs in the side context. It records which occurrence the inference uses. In a premise, formulae at nodes inherited from the conclusion are either already present there or supplied by the rule; only the inherited ones must be retained when the conclusion context is restricted.

Lemma 4.1 (Restricting an inference).

Consider an inference II of the form

C⟹r(P1,…,Pk).C\Longrightarrow_{r}(P_{1},\ldots,P_{k}).

Let M⊆VCM\subseteq V_{C} contain the root, the conclusion output node, and every conclusion node at which II acts. At nodes of MM, choose some input formulae from the conclusion context to retain, including the input formulae which make a nullary conclusion initial and all principal input formulae required in the conclusion. Form DD as follows:

  1. (i)

    take the union of the root-to-vv paths in CC for v∈Mv\in M;

  2. (ii)

    remove all branches outside this rooted hull and all unchosen input formulae, but retain the conclusion output formula;

  3. (iii)

    simultaneously suppress every maximal chain of unmarked vertices whose undirected degree in that rooted hull is 22 (equivalently, iterate the suppression until no such vertex remains).

Then D⪯CD\preceq C, and the same rule can be applied to give an inference

D⟹r(Q1,…,Qk).D\Longrightarrow_{r}(Q_{1},\ldots,Q_{k}).

Every chosen premise formula coming from the conclusion context remains at its corresponding node; the rule supplies its other displayed formulae again and regenerates any fresh modal child.

Proof.

Let KK be the rooted hull in clause (i), and identify every surviving vertex of DD with the corresponding vertex of CC. Each edge of DD is represented by the unique non-empty segment of KK between its endpoints. Distinct such segments have disjoint interiors and no surviving vertex lies in an interior. The inclusion of surviving vertices sends the marked root of DD to rCr_{C} and therefore witnesses D⪯CD\preceq C: only input formulae have been deleted, while the marked output node and its formula are unchanged.

To reconstruct the inference, restrict the fixed multiset side context of II to the retained occurrences, keep the same distinguished principal occurrences at the surviving active nodes, and erase repetitions after the rule has been applied. The verification is as follows. For i​did and ⊥∙\bot^{\bullet}, the active node and the formulae which make the conclusion initial were retained. A propositional rule other than →∙\to^{\bullet} refers only to its principal node and displayed principal formulae, all of which survive. For →∙\to^{\bullet}, both the principal node and the node carrying the conclusion output survive; the first premise removes that output and puts A∘A^{\circ} at the principal node, whereas the second retains it and puts B∙B^{\bullet} at the principal node. A modal introduction uses its surviving principal node and regenerates its fresh child.

The only rules whose side condition relates two inherited nodes are p◇p_{\Diamond} and p□p_{\Box}. Their endpoints belong to MM. If they are u≺vu\prec v in CC, the root-to-vv path in KK contains uu and the whole segment from uu to vv. Since u≠vu\neq v and both survive, suppressing unmarked degree-22 vertices leaves a non-empty path from uu to vv in DD. Thus strict descendancy is preserved. Every chosen inherited input remains at the corresponding inherited node, and every other premise formula is supplied again by the rule. This yields the required inference with conclusion DD. ∎

At most ara_{r} conclusion nodes are used by the rule. The root and output may have to be kept independently, and each node of a basis element contributes at most one origin in the conclusion. Hence the marked set will have size at most

ar+2+∑i=1k|Bi|.a_{r}+2+\sum_{i=1}^{k}|B_{i}|.

Its rooted hull may also contain unmarked branch points. The following small tree estimate accounts for them.

Lemma 4.2 (Size of the reduced hull).

Let KK be the union of the root-to-vv paths in a finite rooted tree, where vv ranges over a non-empty set MM of marked vertices containing the root. Suppress every maximal chain consisting of unmarked vertices of undirected degree 22 in KK. The resulting tree has at most 2​|M|−12|M|-1 vertices.

Proof.

Every leaf of KK is marked, since it is the endpoint of one of the paths used to form the hull. After suppression, every surviving unmarked vertex has undirected degree at least 33. Put m=|M|m=|M| and let bb be the number of surviving unmarked vertices. If m=1m=1, the hull is just its marked root and b=0b=0. If m≥2m\geq 2, every marked vertex has degree at least 11, and the degree sum gives

2​(m+b−1)≥m+3​b.2(m+b-1)\geq m+3b.

Thus b≤m−2b\leq m-2, and in either case the total number of vertices is at most 2​m−12m-1. ∎

Lemma 4.3 (Finite support).

Suppose an application of rr has conclusion CC and premises P1,…,PkP_{1},\ldots,P_{k}, and let B1,…,BkB_{1},\ldots,B_{k} be nested sequents equipped with fixed embeddings ei:Bi⪯Pie_{i}:B_{i}\preceq P_{i}. For k=0k=0 the sum below is empty. Then there is another application of rr with conclusion C′⪯CC^{\prime}\preceq C and premises Pi′P^{\prime}_{i} such that Bi⪯Pi′B_{i}\preceq P^{\prime}_{i} for every ii and

|C′|≤2​(ar+2+∑i=1k|Bi|)−1.|C^{\prime}|\leq 2\left(a_{r}+2+\sum_{i=1}^{k}|B_{i}|\right)-1.
CCrootedhullhullsuppressunary chainsC′C^{\prime}
Figure 3: Marked nodes, their rooted hull, and the tree left after unmarked unary stretches are suppressed. Filled and boxed nodes are marked; the box singles out an active position, while the filled nodes represent the remaining marked vertices.
Proof.

We begin with the marked nodes; the tree estimate will be used only after the required formulae and paths have been shown to survive. Let II be the given inference. Some nodes in the images of the BiB_{i} lie at premise nodes inherited from the conclusion. To mark their corresponding conclusion nodes, invert the canonical correspondence in each premise:

orgiI=(ιiI)−1:Old⁡(Pi)⟶VC.\operatorname{org}_{i}^{I}=(\iota_{i}^{I})^{-1}:\operatorname{Old}(P_{i})\longrightarrow V_{C}.

This is well defined because a rule neither identifies nor duplicates a conclusion node within one premise. Let M⊆VCM\subseteq V_{C} consist of the root, the output node, every active conclusion node of II, and every node orgiI⁡(ei​(v))\operatorname{org}_{i}^{I}(e_{i}(v)) with v∈VBiv\in V_{B_{i}} and ei​(v)∈Old⁡(Pi)e_{i}(v)\in\operatorname{Old}(P_{i}). Repetitions are ignored. There are at most ara_{r} active nodes, and each node of BiB_{i} contributes at most one further node of the conclusion. Hence

|M|≤ar+2+∑i|Bi|.|M|\leq a_{r}+2+\sum_{i}|B_{i}|.

The marked vertices determine the shape of the smaller conclusion, but not yet the formulae that must survive there. The formulae to retain are those needed to reconstruct the premises. Keep the conclusion output at its marked node. Among the inputs, keep every principal formula required in the conclusion of II and every formula needed to make a nullary conclusion initial. Fix ii, v∈VBiv\in V_{B_{i}}, and A∈ΓBi​(v)A\in\Gamma_{B_{i}}(v). If ei​(v)e_{i}(v) lies at an inherited node, choose an occurrence of AA at ei​(v)e_{i}(v) in the fixed multiset presentation of PiP_{i}. When that occurrence is inherited from the conclusion side context, retain it at orgiI⁡(ei​(v))\operatorname{org}_{i}^{I}(e_{i}(v)); when it is supplied by the rule, retain nothing, since the restricted inference supplies it again. If ei​(v)e_{i}(v) is fresh, then PiP_{i} is a premise of ◇∙\Diamond^{\bullet}: its fresh child has no side context, and its sole input is supplied again by the restricted inference. (The fresh child introduced by □∘\Box^{\circ} carries the output and no inputs.) No other input formulae are needed when the premises are reconstructed below.

Let KK be the union in CC of the paths from rCr_{C} to the nodes of MM. Delete every branch outside KK and every unchosen input formula. Suppress the maximal unmarked degree-22 chains exactly as in section˜4.1, and call the resulting nested sequent C′C^{\prime}. All marked vertices survive. Interpreting every new edge as the corresponding segment of KK gives a canonical embedding C′⪯CC^{\prime}\preceq C. By section˜4.1, the restricted context supports an application of rr

I′:C′⟹r(P1′,…,Pk′).I^{\prime}:\quad C^{\prime}\Longrightarrow_{r}(P^{\prime}_{1},\ldots,P^{\prime}_{k}).

The same marked data recover the chosen embeddings in the restricted premises. Define ei′:VBi→VPi′e^{\prime}_{i}:V_{B_{i}}\to V_{P^{\prime}_{i}} by

ei′​(v)={ιiI′​(orgiI⁡(ei​(v))),ei​(v)∈Old⁡(Pi),the fresh child of ​Pi′,ei​(v)​ is fresh.e^{\prime}_{i}(v)=\begin{cases}\iota_{i}^{I^{\prime}}\bigl(\operatorname{org}_{i}^{I}(e_{i}(v))\bigr),&e_{i}(v)\in\operatorname{Old}(P_{i}),\\[5.69054pt] \text{the fresh child of }P^{\prime}_{i},&e_{i}(v)\text{ is fresh}.\end{cases}

The first line is defined because the corresponding conclusion node was marked. The second line can apply only to a leaf of BiB_{i}, since a fresh child of a premise is a leaf. The map is injective: images at inherited nodes retain their distinct origins and the fresh child lies outside the inherited part. It also preserves the root. Indeed, an embedding sends the root of BiB_{i} to the root of PiP_{i}, which is inherited from the conclusion, and the first clause sends its origin to the root of Pi′P^{\prime}_{i}.

The chosen occurrences ensure that

ΓBi​(v)⊆ΓPi′​(ei′​(v))\Gamma_{B_{i}}(v)\subseteq\Gamma_{P^{\prime}_{i}}(e^{\prime}_{i}(v))

for every vv. The output condition is checked in the same three cases as in section˜3.2. An inherited output was retained with its node; an output produced at an inherited node is produced again at the corresponding marked node; and □∘\Box^{\circ} produces it at the regenerated fresh child. Thus ei′e^{\prime}_{i} preserves the unique output and its formula.

Let (v,w)(v,w) be an edge of BiB_{i}. If both ei​(v)e_{i}(v) and ei​(w)e_{i}(w) lie at inherited nodes, then ei​(v)e_{i}(v) is an ancestor of ei​(w)e_{i}(w) in the copy inherited from CC. Both corresponding conclusion nodes are marked, so the root-to-target path contained in KK contains the whole segment between them. Its endpoints are distinct marked vertices; suppression may shorten the segment but cannot make it empty. If ei​(w)e_{i}(w) is fresh, the part of the representing path inside the inherited tree ends at the modal principal node. That node is active and marked, and the fresh edge in Pi′P^{\prime}_{i} completes the path. No edge of BiB_{i} can start at a fresh image, because the fresh child is a leaf.

For clause (iv) of section˜3.1, every branch point of the union of the representing paths lies in the rooted hull KK. Such a point is either an image node, hence marked, or has degree at least 33 in KK; in either case it survives. Simultaneous suppression is performed only inside the maximal unmarked degree-22 chains between surviving vertices. It therefore preserves the incidence graph of all relevant routes: it neither identifies surviving vertices nor joins two previously distinct segments. Consequently distinct edge paths still meet only at the image of a common endpoint, and no image node becomes internal to another edge path. Hence ei′:Bi⪯Pi′e^{\prime}_{i}:B_{i}\preceq P^{\prime}_{i}.

The tree underlying C′C^{\prime} is obtained from KK by the suppression just described. By section˜4.1,

|C′|≤2​|M|−1≤2​(ar+2+∑i|Bi|)−1.|C^{\prime}|\leq 2|M|-1\leq 2\left(a_{r}+2+\sum_{i}|B_{i}|\right)-1.

∎

Corollary 4.4 (Bounded minimal predecessors).

Let U=↑​BU=\mathord{\uparrow}B with BB finite, and let rr have kk premises. If k>0k>0 and B=∅B=\varnothing, then Prer⁡(U)=∅\operatorname{Pre}_{r}(U)=\varnothing. If k=0k=0, every minimal member of Prer⁡(U)\operatorname{Pre}_{r}(U) has at most 2​(ar+2)−12(a_{r}+2)-1 nodes. If k>0k>0 and B≠∅B\neq\varnothing, the premises of a single inference need not lie above the same member of BB: for the iith premise one may have to choose a separate Bi∈BB_{i}\in B. The finite-support bound therefore depends first on a tuple (B1,…,Bk)∈Bk(B_{1},\ldots,B_{k})\in B^{k}. Taking the maximum over the finitely many such tuples gives the uniform bound

max(B1,…,Bk)∈Bk⁡2​(ar+2+∑i=1k|Bi|)−1.\max_{(B_{1},\ldots,B_{k})\in B^{k}}2\left(a_{r}+2+\sum_{i=1}^{k}|B_{i}|\right)-1.
Proof.

Let

C⟹r(P1,…,Pk)C\Longrightarrow_{r}(P_{1},\ldots,P_{k})

witness that the minimal nested sequent CC belongs to Prer⁡(U)\operatorname{Pre}_{r}(U). When k>0k>0, choose Bi∈BB_{i}\in B with Bi⪯PiB_{i}\preceq P_{i}; for k=0k=0 use the empty tuple. The finite-support lemma gives another inference

C′⟹r(P1′,…,Pk′)C^{\prime}\Longrightarrow_{r}(P^{\prime}_{1},\ldots,P^{\prime}_{k})

with C′⪯CC^{\prime}\preceq C, within the displayed bound, and Bi⪯Pi′B_{i}\preceq P^{\prime}_{i}. Since U=↑​BU=\mathord{\uparrow}B, every Pi′P^{\prime}_{i} belongs to UU; hence C′∈Prer⁡(U)C^{\prime}\in\operatorname{Pre}_{r}(U). Minimality of CC modulo ≡\equiv now gives C⪯C′C\preceq C^{\prime}, for otherwise C′⊲CC^{\prime}\lhd C. The embeddings in both directions are injections between finite node sets, so |C|=|C′||C|=|C^{\prime}|, and the same bound holds for CC. ∎

4.2 Computing predecessors

A node bound leaves only finitely many nested sequents and rule applications to inspect.

Proposition 4.5.

For fixed finite Φ\Phi and n∈ℕn\in\mathbb{N}, nested sequents with at most nn nodes are effectively enumerable. For each such nested sequent and each rule schema rr, the applications of rr having that nested sequent as conclusion are effectively enumerable. The relation ⪯\preceq is decidable on finite nested sequents, and whenever S⪯TS\preceq T, a witnessing embedding can be found effectively.

Proof.

Number the root by 0 and record the parent of every other node, requiring that repeated passage to parents reaches 0. Record also an input subset of Φ\Phi at each node and the unique output node together with its output formula. For a fixed bound there are only finitely many such descriptions. Some of them describe isomorphic unordered trees, but the repetition is harmless.

For a fixed conclusion with at most nn nodes, the part of every premise inherited from the conclusion has the same modal tree; a modal introduction may add one fresh leaf. Thus every premise of an application under consideration has at most n+1n+1 nodes. The formula variables of a rule range over the fixed set Φ\Phi; once a principal formula is chosen, its displayed immediate subformulae are fixed. An application is determined by finitely many choices: a rule schema, the conclusion nodes at which it acts, its principal formulae, and, for each displayed input formula, whether an equal occurrence is also retained in the side context; a propagation rule additionally requires its two endpoints. There are therefore finitely many descriptions to inspect. A description is accepted when its premise and conclusion data satisfy the displayed rule equation. Equality of contexts, the chosen principal occurrences, freshness, and strict descendancy are all decidable from the finite data. Thus the finite enumeration is filtered effectively; computability is not being inferred from finiteness alone.

Deciding S⪯TS\preceq T is also a finite search: enumerate the injections from VSV_{S} to VTV_{T}. For each injection, check the root, input, and output conditions of section˜3.1. The parent data determine the unique paths between comparable nodes, so the remaining path-intersection and internal-vertex conditions are finite tests as well. If an injection passes all of them, it is a witnessing embedding; hence the same finite search also produces a witness whenever one exists. ∎

Lemma 4.6 (Computing a basis of predecessors).

Let U=↑​BU=\mathord{\uparrow}B with BB finite. For every rule schema rr, one can compute a finite basis of Prer⁡(U)\operatorname{Pre}_{r}(U).

Proof.

If rr has k>0k>0 premises and B=∅B=\varnothing, then ↑​B=∅\mathord{\uparrow}B=\varnothing and Prer⁡(↑​B)=∅\operatorname{Pre}_{r}(\mathord{\uparrow}B)=\varnothing. If k=0k=0, let B→\vec{B} be the empty tuple. Otherwise, each premise in ↑​B\mathord{\uparrow}B lies above some member of BB. We may therefore separate the predecessors according to the tuple of basis elements chosen below their premises, and fix B→=(B1,…,Bk)∈Bk\vec{B}=(B_{1},\ldots,B_{k})\in B^{k}. In either case, let SB→S_{\vec{B}} consist of the conclusions CC for which rr can be applied as

C⟹r(P1,…,Pk)withBi⪯Pi(1≤i≤k).C\Longrightarrow_{r}(P_{1},\ldots,P_{k})\qquad\text{with}\qquad B_{i}\preceq P_{i}\quad(1\leq i\leq k).

The finite-support lemma bounds representatives of the minimal classes of SB→S_{\vec{B}}. For every C∈SB→C\in S_{\vec{B}} there is a D∈SB→D\in S_{\vec{B}} such that D⪯CD\preceq C and

|D|≤2​(ar+2+∑i|Bi|)−1.|D|\leq 2\left(a_{r}+2+\sum_{i}|B_{i}|\right)-1.

If CC is minimal modulo ≡\equiv, then C⪯DC\preceq D as well, so its ≡\equiv-class already has a representative satisfying this bound. We therefore consider the finite set

FB→={C∈SB→:|C|≤2​(ar+2+∑i|Bi|)−1}.F_{\vec{B}}=\left\{C\in S_{\vec{B}}:|C|\leq 2\left(a_{r}+2+\sum_{i}|B_{i}|\right)-1\right\}.

By section˜4.2, we can enumerate all nested sequents within the bound and all applications of rr having one of them as conclusion. We retain precisely those applications for which Bi⪯PiB_{i}\preceq P_{i} for every ii; these tests are decidable. Hence FB→F_{\vec{B}} is effectively computable. Let MB→M_{\vec{B}} contain one representative from each ≡\equiv-class of those C∈FB→C\in F_{\vec{B}} for which no D∈FB→D\in F_{\vec{B}} satisfies D⊲CD\lhd C. Pairwise embedding tests compute this set.

Every C∈SB→C\in S_{\vec{B}} lies above some element of FB→F_{\vec{B}}. Repeated strict descent within the finite set FB→F_{\vec{B}} must terminate, and its last element belongs to one of the classes represented in MB→M_{\vec{B}}. Hence some member of MB→M_{\vec{B}} embeds into CC. Conversely, SB→S_{\vec{B}} is upward closed: lifting the inference along C⪯C′C\preceq C^{\prime} gives premises above the original premises, and therefore still above the fixed BiB_{i}. Since every member of MB→M_{\vec{B}} lies in SB→S_{\vec{B}}, we obtain

SB→=↑​MB→.S_{\vec{B}}=\mathord{\uparrow}M_{\vec{B}}.

A conclusion belongs to Prer⁡(↑​B)\operatorname{Pre}_{r}(\mathord{\uparrow}B) exactly when it belongs to some SB→S_{\vec{B}}: choose below each premise a basis member Bi∈BB_{i}\in B, and conversely use upward closure of ↑​B\mathord{\uparrow}B. Thus the union of the finitely many sets MB→M_{\vec{B}} is a basis of Prer⁡(↑​B)\operatorname{Pre}_{r}(\mathord{\uparrow}B); minimizing that union modulo ≡\equiv gives the desired basis. For k=0k=0 there is one empty tuple, no premise test, and the bound is 2​(ar+2)−12(a_{r}+2)-1. ∎

4.3 Proof height and stabilisation

The nullary rules supply the first basis: apply section˜4.2 with B=∅B=\varnothing to each such rule whose conclusions use only formulae from Φ\Phi: the i​did-conclusions for atoms p∈Φp\in\Phi, and ⊥∙\bot^{\bullet}-conclusions only when ⊥∈Φ\bot\in\Phi. Since k=0k=0, the premise condition is vacuous. Minimize the union of these bases modulo ≡\equiv and call the result B0B_{0}. For both schemas ar=1a_{r}=1, so every minimal contextual initial sequent has at most

2​(1+2)−1=52(1+2)-1=5

nodes. By section˜3.2, contextual initial sequents are upward closed, so ↑​B0\mathord{\uparrow}B_{0} is exactly their set. These stages simply record proof height. Take an initial sequent to have height 0, and a non-nullary inference to have height one plus the maximum height of its premise proofs. For an upward-closed set UU, put

ℱ​(U)=U∪Pre⁡(U).\mathcal{F}(U)=U\cup\operatorname{Pre}(U).

Starting from the contextual initial sequents, set

U0=↑​B0,Un+1=ℱ​(Un).U_{0}=\mathord{\uparrow}B_{0},\qquad U_{n+1}=\mathcal{F}(U_{n}).

By section˜4.2, a finite basis of each Un+1U_{n+1} is computed from a finite basis of UnU_{n} by taking the union of the existing basis with the finitely many bases for the predecessor sets and minimizing modulo ≡\equiv.

Lemma 4.7 (Proof height and the stages UnU_{n}).

For every nn and every nested sequent CC,

C∈Un⟺C​ has a ​𝖭𝖨𝖪𝟦​ proof of height at most ​n.C\in U_{n}\quad\Longleftrightarrow\quad C\text{ has a }\mathsf{NIK4}\text{ proof of height at most }n.

Consequently ⋃nUn\bigcup_{n}U_{n} is exactly the set of provable nested sequents.

Proof.

For n=0n=0, the set U0U_{0} consists exactly of the contextual initial sequents, which are precisely the nested sequents with proofs of height 0. Suppose the equivalence holds at stage nn. If C∈Un+1C\in U_{n+1}, then either C∈UnC\in U_{n} or C∈Prer⁡(Un)C\in\operatorname{Pre}_{r}(U_{n}) for some rule rr. In the first case the induction hypothesis gives a proof of height at most nn. In the second, every premise of one application of rr has a proof of height at most nn; appending that inference gives a proof of CC of height at most n+1n+1.

Conversely, let CC have a proof of height at most n+1n+1. A proof of height 0 is initial, hence its conclusion lies in U0⊆Un+1U_{0}\subseteq U_{n+1}. If the proof has positive height, every premise of its last inference has height at most nn and therefore belongs to UnU_{n} by the induction hypothesis. Thus C∈Pre⁡(Un)⊆Un+1C\in\operatorname{Pre}(U_{n})\subseteq U_{n+1}. ∎

Theorem 4.8 (Stabilisation).

One can find an NN such that

UN=UN+1=⋯,U_{N}=U_{N+1}=\cdots,

and the stable set is exactly the set of provable nested sequents.

Proof.

The set U0U_{0} is upward closed, and section˜3.2 shows inductively that every UnU_{n} is upward closed. The sequence is increasing, so section˜3.3 gives an NN with UN=UN+1U_{N}=U_{N+1}. Since UN+1=ℱ​(UN)U_{N+1}=\mathcal{F}(U_{N}), this equality says that UNU_{N} is a fixed point of ℱ\mathcal{F}. Every later stage is therefore the same set.

The first stable index is effectively recognisable. To compare two finitely based upward-closed sets, it is enough to compare their generators. The orientation is forced by upward closure: every generator of the left-hand side must already lie above some generator of the right-hand side. Thus, for finite sets B,CB,C, not necessarily minimized,

↑​B⊆↑​C⟺∀b∈B​∃c∈C​(c⪯b).\mathord{\uparrow}B\subseteq\mathord{\uparrow}C\quad\Longleftrightarrow\quad\forall b\in B\;\exists c\in C\ (c\preceq b).

For the forward direction, b∈↑​Bb\in\mathord{\uparrow}B and the inclusion gives b∈↑​Cb\in\mathord{\uparrow}C. Conversely, if x∈↑​Bx\in\mathord{\uparrow}B, choose b∈Bb\in B with b⪯xb\preceq x and then c∈Cc\in C with c⪯bc\preceq b; transitivity gives x∈↑​Cx\in\mathord{\uparrow}C. Since ⪯\preceq is decidable, mutual inclusion of finitely based upward-closed sets is decidable. Successive upward closures can therefore be compared effectively, and the first equality is detected when it occurs.

By section˜4.3, ⋃nUn\bigcup_{n}U_{n} is exactly the set of nested sequents having finite 𝖭𝖨𝖪𝟦\mathsf{NIK4} proofs. Once the chain stabilises, this union is UNU_{N}. ∎

Theorem 4.9 (Decidability of 𝖨𝖪𝟦\mathsf{IK4}).

Theoremhood in Simpson’s intuitionistic modal logic 𝖨𝖪𝟦\mathsf{IK4}, equivalently validity on transitive Fischer–Servi frames, is decidable.

Proof.

Given A0A_{0}, perform the following finite saturation:

  1. (1)

    Compute the finite set Φ=Sub⁡(A0)\Phi=\operatorname{Sub}(A_{0}).

  2. (2)

    Compute the finite initial basis B0B_{0} from the nullary rules.

  3. (3)

    Given a finite basis BnB_{n} for UnU_{n}, compute finite bases of Prer⁡(Un)\operatorname{Pre}_{r}(U_{n}) for every rule schema rr, take their union with BnB_{n}, and minimise it modulo ≡\equiv using the pairwise embedding tests of section˜4.2 to obtain a basis Bn+1B_{n+1}.

  4. (4)

    Decide whether ↑​Bn=↑​Bn+1\mathord{\uparrow}B_{n}=\mathord{\uparrow}B_{n+1} by the finite-basis inclusion test of theorem˜4.8. If not, return to step (3).

  5. (5)

    At the first equality, put B∞=BnB_{\infty}=B_{n} and form the one-node nested sequent C​(A0)C(A_{0}) whose output is A0A_{0}.

  6. (6)

    Accept exactly when D⪯C​(A0)D\preceq C(A_{0}) for some D∈B∞D\in B_{\infty}.

Every operation in steps (1)–(3) is effective by sections˜4.2 and 4.2; the test in step (4) is decidable; and section˜3.3 guarantees that step (4) eventually succeeds. Thus the procedure is total. At the first stable stage, U∞=↑​B∞U_{\infty}=\mathord{\uparrow}B_{\infty} is exactly the set of provable nested sequents over Φ\Phi, so section˜4.3 yields

A0∘​ is derivable⟺∃D∈B∞​(D⪯C​(A0)).A_{0}^{\circ}\text{ is derivable}\quad\Longleftrightarrow\quad\exists D\in B_{\infty}\ (D\preceq C(A_{0})).

Because C​(A0)C(A_{0}) has one node and no inputs, any D⪯C​(A0)D\preceq C(A_{0}) must itself be the one-node sequent with output A0A_{0} and no inputs. Thus the last basis test is exactly the original theoremhood query, not a weakening of it. The test is decidable because B∞B_{\infty} is finite and ⪯\preceq is decidable by section˜3.3. Soundness theorem˜2.4 and cut-free completeness theorem˜2.8 identify 𝖭𝖨𝖪𝟦\mathsf{NIK4}-derivability with validity on transitive Fischer–Servi frames, hence with 𝖨𝖪𝟦\mathsf{IK4}. ∎

Nothing in the construction depended on Φ\Phi being the subformula set of a single formula; finiteness and closure under subformulae were enough. The stable basis therefore contains a little more information than decidability alone records.

Corollary 4.10 (Finite generators for cut-free provability).

Let Φ\Phi be any finite set of formulae closed under subformulae. One can effectively compute a finite family of cut-free 𝖭𝖨𝖪𝟦\mathsf{NIK4}-proofs π1,…,πm\pi_{1},\ldots,\pi_{m}, with respective conclusions D1,…,DmD_{1},\ldots,D_{m}, and a number NN such that, for every nested sequent CC whose formulae lie in Φ\Phi,

C​ is provable⟺∃j​(1≤j≤m&Dj⪯C).C\text{ is provable}\quad\Longleftrightarrow\quad\exists j\ (1\leq j\leq m\ \&\ D_{j}\preceq C).

Whenever CC is provable, a proof of CC of height at most NN can be constructed effectively from a suitable πj\pi_{j} by weakening along an embedding.

Proof.

Iterate backward application of the rules over the chosen Φ\Phi until the stable stage. Closure under subformulae ensures that every premise still uses only formulae in Φ\Phi. Alongside each member of the basis at stage nn, we retain a proof of height at most nn. At stage 0 this is the corresponding nullary proof.

Suppose proofs have been retained for the basis of UnU_{n}. Whenever the computation of predecessors retains a conclusion

C⟹r(P1,…,Pk)C\Longrightarrow_{r}(P_{1},\ldots,P_{k})

above a tuple of basis elements Bi⪯PiB_{i}\preceq P_{i}, the finite search in section˜4.2 supplies witnessing embeddings. The effective weakening lemma turns the retained proof of each BiB_{i} into a proof of PiP_{i} of no greater height; appending the displayed inference gives a proof of CC of height at most n+1n+1. Previously retained basis elements keep their proofs, and during minimisation one proof is kept with each chosen representative. Thus the basis at every stage is effectively accompanied by proofs of the appropriate height.

Let NN be the first stable index, and let D1,…,DmD_{1},\ldots,D_{m} be the resulting basis, with retained proofs π1,…,πm\pi_{1},\ldots,\pi_{m}. By theorem˜4.8, their upward closure is exactly the set of provable nested sequents over Φ\Phi, and each πj\pi_{j} has height at most NN. If CC is provable, the basis property gives some Dj⪯CD_{j}\preceq C; a witnessing embedding is effectively found by section˜4.2, and section˜3.2 then constructs a proof of CC without increasing height. Conversely, every DjD_{j} is provable, and section˜3.2 preserves provability. ∎

The uniform proof-height bound is obtained only when the chain stabilises; it is not an elementary a priori complexity estimate. Obtaining such an estimate would require length-function bounds for the Kruskal order and independent bounds on the successive bases. The argument decides proof existence directly, without passing through a finite-model property.

5 Conclusion

The obvious first route is a finite-countermodel argument. The direct quotient construction breaks when transitive closure creates a modal demand that was absent before representatives were identified. We avoid that difficulty by staying with proofs: the finite objects are nested sequents, not quotient worlds.

Kruskal’s theorem makes the unbounded modal trees well-quasi-ordered, but the algorithm still requires an effective computation of predecessors. Since an inference may occur in a context of arbitrary size, a separate argument is needed to show that minimal predecessors have bounded representatives. The finite-support lemma shows that such a representative can be chosen within an explicit bound. One keeps the nodes used by the rule, the output, and the images of the basis elements, together with the branch points forced by their rooted hull. Once the required input formulae have been retained at those nodes, unmarked unary stretches between them may be suppressed. The bound is not sharp; its role is only to make the predecessor search finite.

Transitivity enters once more in the finite-support step. The propagation rules ask only for strict descendancy, which survives both the expansion of an edge into a path and the suppression of unmarked degree-22 vertices on that path. A different path language may not survive the same reduction, so this point would have to be checked afresh in any extension. It holds for 𝖨𝖪𝟦\mathsf{IK4}. Over any finite set of formulae closed under subformulae, finitely many cut-free proofs then suffice: weakening along an embedding supplies a proof of every other provable nested sequent.

References

  • [1] N. Alechina and D. Shkatov. A general method for proving decidability of intuitionistic modal logics. Journal of Applied Logic, 4(3):219–230, 2006.
  • [2] G. Amati and F. Pirri. A uniform tableau method for intuitionistic modal logics I. Studia Logica, 53(1):29–60, 1994.
  • [3] P. Balbiani, H. Gao, Ç. Gencer, and N. Olivetti. Local intuitionistic modal logics and their calculi. In C. Benzmüller, M. J. H. Heule, and R. A. Schmidt, editors, Automated Reasoning—IJCAR 2024, volume 14740 of Lecture Notes in Computer Science, pages 78–96. Springer, Cham, 2024.
  • [4] P. Balbiani, Ç. Gencer, and T. Tinchev. Intuitionistic modal logic 𝐋𝐈𝐊𝟒\mathbf{LIK4} is decidable. arXiv preprint arXiv:2512.04687, 2025.
  • [5] K. Brünnler. Deep sequent systems for modal logic. Archive for Mathematical Logic, 48(6):551–577, 2009.
  • [6] A. Finkel and P. Schnoebelen. Well-structured transition systems everywhere! Theoretical Computer Science, 256(1–2):63–92, 2001.
  • [7] G. Fischer Servi. Axiomatizations for some intuitionistic modal logics. Rendiconti del Seminario Matematico, Università e Politecnico di Torino, 42(3):179–194, 1984.
  • [8] D. Galmiche and Y. Salhi. Tree-sequent calculi and decision procedures for intuitionistic modal logics. Journal of Logic and Computation, 28(5):967–989, 2018.
  • [9] D. Garg, V. Genovese, and S. Negri. Countermodels from sequent calculi in multi-modal logics. In Proceedings of the 27th Annual ACM/IEEE Symposium on Logic in Computer Science (LICS 2012), pages 315–324. IEEE, 2012.
  • [10] R. Goré, L. Postniece, and A. Tiu. On the correspondence between display postulates and deep inference in nested sequent calculi for tense logics. Logical Methods in Computer Science, 7(2:8):1–38, 2011.
  • [11] J. B. Kruskal. Well-quasi-ordering, the tree theorem, and Vázsonyi’s conjecture. Transactions of the American Mathematical Society, 95(2):210–225, 1960.
  • [12] R. Kuznets and L. Straßburger. Maehara-style modal nested calculi. Archive for Mathematical Logic, 58:359–385, 2019.
  • [13] T. S. Lyon. Nested sequents for intuitionistic modal logics via structural refinement. In A. Das and S. Negri, editors, Automated Reasoning with Analytic Tableaux and Related Methods (TABLEAUX 2021), volume 12842 of Lecture Notes in Computer Science, pages 409–427. Springer, Cham, 2021.
  • [14] C. St. J. A. Nash–Williams. On well-quasi-ordering finite trees. Proceedings of the Cambridge Philosophical Society, 59(4):833–835, 1963.
  • [15] A. K. Simpson. The Proof Theory and Semantics of Intuitionistic Modal Logic. PhD thesis, University of Edinburgh, 1994.
  • [16] N. Voorneveld. Forward proof search for intuitionistic multimodal K logics. In G. L. Pozzato and T. Uustalu, editors, Automated Reasoning with Analytic Tableaux and Related Methods (TABLEAUX 2025), volume 15980 of Lecture Notes in Computer Science, pages 335–353. Springer, Cham, 2026.
  • [17] A. Tiu, E. Ianovski, and R. Goré. Grammar logics in nested sequent calculus: proof theory and decision procedures. In T. Bolander, T. Braüner, S. Ghilardi, and L. S. Moss, editors, Advances in Modal Logic 9, pages 516–537. College Publications, 2012.