research36 min studyLesson 972 in Mathematics

Soundness and Gödel completeness

Connect finite proofs to all-model consequence without turning completeness into a decision algorithm.

On this page

What you’ll understand

  • Explain the proof induction underlying soundness.
  • State strong first-order completeness and outline the Henkin construction.
  • Give an eigenvariable-correct proof and a separate countermodel.

A proof calculus is useful only if its rules preserve truth, and powerful only if it can derive every genuine semantic consequence. Soundness supplies the first guarantee; Gödel completeness supplies the second for classical first-order logic. Neither says that an arbitrary theory answers every sentence. We will connect a short quantified proof to its semantic meaning, then examine why an existence theorem for proofs does not promise a terminating search on every input.

Soundness is proved by induction on a derivation

Fix a standard classical first-order calculus with equality, including its side conditions. Soundness asserts that every derivation from premises preserves semantic consequence. Its proof proceeds through the finite derivation: assumptions hold in any model of the premises, logical axioms are valid, and each inference transfers truth from its inputs to its conclusion. Quantifier rules require particular care because a variable used as an arbitrary representative cannot secretly depend on an undischarged assumption.

For existential elimination, a fresh parameter names a temporary witness. The desired conclusion and other open assumptions must not contain that parameter. Otherwise a proof could infer a claim about a specially chosen object as if it concerned all objects. Side conditions are mathematical hypotheses of the soundness theorem. A proof checker that verifies only the visible connective pattern while ignoring freshness has not checked the stated calculus.

T⊢σ ⟹ T⊨σ.T\vdash\sigma\ \Longrightarrow\ T\models\sigma.
Soundness applies to the chosen sound calculus, including its quantifier side conditions.↔ Scroll wide equations horizontally.

Completeness builds a model when no contradiction is derivable

Strong completeness says that if every model of any set T of first-order sentences satisfies a sentence, then a finite T-proof exists. Equivalently, every syntactically consistent T has a model. For a countable language, a Henkin construction adjoins witness constants, extends consistently to decide each sentence, and forms a term model. Equality requires quotienting terms by provable equality. The truth lemma then connects membership in the completed theory with truth in that model.

This is an outline of the general construction, not a replacement for its consistency and truth-lemma proofs. For arbitrary set-sized languages the usual classical metatheory uses corresponding transfinite or choice-based constructions. Completeness of the calculus is distinct from completeness of a theory, which would mean deciding each sentence or its negation. An arithmetic theory may be incomplete even though its underlying first-order proof calculus is complete for semantic consequence.

T⊨σ  ⟺  T⊢σ,T satisfiable  ⟺  T syntactically consistent.T\models\sigma\iff T\vdash\sigma,\qquad T\text{ satisfiable}\iff T\text{ syntactically consistent}.
The reverse implications use completeness; these equivalences do not make every theory complete.↔ Scroll wide equations horizontally.

Effective proof search is only a one-sided guarantee

In a computably presented language, finite proofs can be effectively generated. If the extra axioms are computably enumerable, enumeration-stage certificates can be attached to axiom uses, making finite certificate checking decidable. Searching those certified proofs eventually finds any actual consequence. When no proof exists, that search may continue forever. Completeness guarantees eventual success on semantically entailed conclusions, not a stopping rule for nonconsequences.

Finite truth tables decide propositional validity because only finitely many valuations matter for a fixed finite list of atoms. Arbitrary first-order structures have no comparable uniform finite bound. Finding a countermodel is a semantic method, but enumerating only finite models misses formulas with exclusively infinite countermodels. The distinction between sound inference, complete inference, and a total decision procedure will become central when we formalize computation.

∀x(P(x)→Q(x)), ∃xP(x) ⊢ ∃xQ(x).\forall x(P(x)\to Q(x)),\ \exists xP(x)\ \vdash\ \exists xQ(x).
The derivation below uses one fresh witness and then discharges that temporary assumption.↔ Scroll wide equations horizontally.

Move an existential witness through a universal implication

Derive ∃xQ(x)\exists xQ(x) from ∀x(P(x)→Q(x))\forall x(P(x)\to Q(x)) and ∃xP(x)\exists xP(x), explicitly respecting existential elimination. Explain why the analogous reverse inference fails.

  1. Introduce a fresh parameter a and temporarily assume P(a) as the witness case for the existential premise. Freshness means a occurs in neither the final conclusion nor any other undischarged assumption.

  2. Instantiate the universal premise at a to obtain P(a)→Q(a)P(a)\to Q(a). Modus ponens with the temporary assumption yields Q(a), and existential introduction yields ∃xQ(x)\exists xQ(x).

  3. Discharge the temporary witness case by existential elimination, retaining only the original premises. For the reverse inference, take a one-element domain with P empty and Q the whole domain: the universal implication and existence of Q hold, while existence of P fails.

PM=∅,QM={0}⟹M⊨∀x(P(x)→Q(x))∧∃xQ(x)∧¬∃xP(x).P^{\mathcal M}=\varnothing,\quad Q^{\mathcal M}=\{0\}\quad\Longrightarrow\quad\mathcal M\models\forall x(P(x)\to Q(x))\land\exists xQ(x)\land\neg\exists xP(x).
A false antecedent makes the implication true without supplying any P-witness.↔ Scroll wide equations horizontally.
The result

The forward consequence has a valid finite proof. The reverse implication has a concrete countermodel, so soundness forbids its derivation from those premises.

Explore the model

Interactive lab

Interactive lab · probability

Finite truth tables and grouped valuations

Pause and Reset, then set probability 0.5 and trials 2. The three bars have masses 1/4,1/2,1/4 and group four equally likely assignments to P,Q by their number of true atoms. On paper list all four assignments: P implies Q fails only at (true,false), so its satisfying fraction is 3/4. The middle bar combines that failure with (false,true), and cannot check the implication alone. Reset and set both controls for fresh runs; edits retain time. This finite count does not decide first-order validity.

Finite truth tables and grouped valuationsThese are exact binomial probabilities for independent trials with one fixed success probability. Playback tours the distribution; it does not resample outcomes. Current readings: Mean · np: 5; Variance · np(1−p): 2.5; Total probability: 1. All parameters are adjustable with the labeled controls below.03581000.070.150.220.3Successes kP(X = k)k = 0 · P = 9.77e-4
Exact probabilityHighlighted outcomeMean np
Mean · np
5
Variance · np(1−p)
2.5
Total probability
1
t = 0 s

These are exact binomial probabilities for independent trials with one fixed success probability. Playback tours the distribution; it does not resample outcomes. Parameter changes pause playback and recompute the model at the current elapsed time. Reset restores both parameters and returns time to zero. Playback starts paused. Adjust either parameter, then choose Play or Step.

Look forFinite propositional checking depends on inspecting assignments, not merely their grouped counts.

Check your understanding

What does completeness give when a sentence is not a consequence of a computably enumerable first-order theory?

Try it yourself

Test the inference from ∀x(P(x)→Q(x))\forall x(P(x)\to Q(x)) and ∃xQ(x)\exists xQ(x) to ∃xP(x)\exists xP(x) on a two-element domain with P=∅P=\varnothing and Q={0}Q=\{0\}. Also explain why existential elimination cannot conclude P(a) from ∃xP(x)\exists xP(x) for a preselected parameter a.

Take a moment to make a prediction or work it out on paper. Open a hint when you need one.

Give me a hint

A witness may exist without being the particular object already named by a. Treat the two tasks as separate countermodel checks.

Compare with the solution

The implication holds vacuously for both elements and Q has witness zero, but P has no witness, so the proposed conclusion is false. For the parameter claim, take domain {0,1}, interpret a as zero, and P as {1}. Existence of P is true while P(a) is false. A temporary fresh witness may be used inside a subproof, but its name cannot survive in an unsupported conclusion.

Take it with you

  • Soundness requires every inference rule and side condition to preserve truth.
  • Gödel completeness concerns all-model consequence, not completeness of every theory.
  • Effective enumeration of proofs provides semidecision rather than a general decision algorithm.

Read further

Original sources and deeper explanations to follow at your own pace.

Optional progress, saved in this browser when available. Revisit any lesson at any time.

Lesson not marked complete.