Soundness and Gödel completeness
Connect finite proofs to all-model consequence without turning completeness into a decision algorithm.
On this page
The question for today
What you’ll understand
- Explain the proof induction underlying soundness.
- State strong first-order completeness and outline the Henkin construction.
- Give an eigenvariable-correct proof and a separate countermodel.
A proof calculus is useful only if its rules preserve truth, and powerful only if it can derive every genuine semantic consequence. Soundness supplies the first guarantee; Gödel completeness supplies the second for classical first-order logic. Neither says that an arbitrary theory answers every sentence. We will connect a short quantified proof to its semantic meaning, then examine why an existence theorem for proofs does not promise a terminating search on every input.
Soundness is proved by induction on a derivation
Fix a standard classical first-order calculus with equality, including its side conditions. Soundness asserts that every derivation from premises preserves semantic consequence. Its proof proceeds through the finite derivation: assumptions hold in any model of the premises, logical axioms are valid, and each inference transfers truth from its inputs to its conclusion. Quantifier rules require particular care because a variable used as an arbitrary representative cannot secretly depend on an undischarged assumption.
For existential elimination, a fresh parameter names a temporary witness. The desired conclusion and other open assumptions must not contain that parameter. Otherwise a proof could infer a claim about a specially chosen object as if it concerned all objects. Side conditions are mathematical hypotheses of the soundness theorem. A proof checker that verifies only the visible connective pattern while ignoring freshness has not checked the stated calculus.
Completeness builds a model when no contradiction is derivable
Strong completeness says that if every model of any set T of first-order sentences satisfies a sentence, then a finite T-proof exists. Equivalently, every syntactically consistent T has a model. For a countable language, a Henkin construction adjoins witness constants, extends consistently to decide each sentence, and forms a term model. Equality requires quotienting terms by provable equality. The truth lemma then connects membership in the completed theory with truth in that model.
This is an outline of the general construction, not a replacement for its consistency and truth-lemma proofs. For arbitrary set-sized languages the usual classical metatheory uses corresponding transfinite or choice-based constructions. Completeness of the calculus is distinct from completeness of a theory, which would mean deciding each sentence or its negation. An arithmetic theory may be incomplete even though its underlying first-order proof calculus is complete for semantic consequence.
Effective proof search is only a one-sided guarantee
In a computably presented language, finite proofs can be effectively generated. If the extra axioms are computably enumerable, enumeration-stage certificates can be attached to axiom uses, making finite certificate checking decidable. Searching those certified proofs eventually finds any actual consequence. When no proof exists, that search may continue forever. Completeness guarantees eventual success on semantically entailed conclusions, not a stopping rule for nonconsequences.
Finite truth tables decide propositional validity because only finitely many valuations matter for a fixed finite list of atoms. Arbitrary first-order structures have no comparable uniform finite bound. Finding a countermodel is a semantic method, but enumerating only finite models misses formulas with exclusively infinite countermodels. The distinction between sound inference, complete inference, and a total decision procedure will become central when we formalize computation.
Work it through
Move an existential witness through a universal implication
Derive from and , explicitly respecting existential elimination. Explain why the analogous reverse inference fails.
Introduce a fresh parameter a and temporarily assume P(a) as the witness case for the existential premise. Freshness means a occurs in neither the final conclusion nor any other undischarged assumption.
Instantiate the universal premise at a to obtain . Modus ponens with the temporary assumption yields Q(a), and existential introduction yields .
Discharge the temporary witness case by existential elimination, retaining only the original premises. For the reverse inference, take a one-element domain with P empty and Q the whole domain: the universal implication and existence of Q hold, while existence of P fails.
The forward consequence has a valid finite proof. The reverse implication has a concrete countermodel, so soundness forbids its derivation from those premises.
The living notebook
Explore the model
Interactive lab · probability
Finite truth tables and grouped valuations
Pause and Reset, then set probability 0.5 and trials 2. The three bars have masses 1/4,1/2,1/4 and group four equally likely assignments to P,Q by their number of true atoms. On paper list all four assignments: P implies Q fails only at (true,false), so its satisfying fraction is 3/4. The middle bar combines that failure with (false,true), and cannot check the implication alone. Reset and set both controls for fresh runs; edits retain time. This finite count does not decide first-order validity.
- Mean · np
- 5
- Variance · np(1−p)
- 2.5
- Total probability
- 1
These are exact binomial probabilities for independent trials with one fixed success probability. Playback tours the distribution; it does not resample outcomes. Parameter changes pause playback and recompute the model at the current elapsed time. Reset restores both parameters and returns time to zero. Playback starts paused. Adjust either parameter, then choose Play or Step.
Look forFinite propositional checking depends on inspecting assignments, not merely their grouped counts.
Pause & reason
Check your understanding
Your turn
Try it yourself
Test the inference from and to on a two-element domain with and . Also explain why existential elimination cannot conclude P(a) from for a preselected parameter a.
Take a moment to make a prediction or work it out on paper. Open a hint when you need one.
Give me a hint
A witness may exist without being the particular object already named by a. Treat the two tasks as separate countermodel checks.
Compare with the solution
The implication holds vacuously for both elements and Q has witness zero, but P has no witness, so the proposed conclusion is false. For the parameter claim, take domain {0,1}, interpret a as zero, and P as {1}. Existence of P is true while P(a) is false. A temporary fresh witness may be used inside a subproof, but its name cannot survive in an unsupported conclusion.
Keep the idea
Take it with you
- Soundness requires every inference rule and side condition to preserve truth.
- Gödel completeness concerns all-model consequence, not completeness of every theory.
- Effective enumeration of proofs provides semidecision rather than a general decision algorithm.
Read further
Original sources and deeper explanations to follow at your own pace.
Optional progress, saved in this browser when available. Revisit any lesson at any time.
Lesson not marked complete.