# minimal_change_in_modal_logic_s5__6b658180.pdf Minimal Change in Modal Logic S5 Carlos Aguilera-Ventura*, Jonathan Ben-Naim*, Andreas Herzig* IRIT, CNRS, Univ. Toulouse, France carlos.aguilera-ventura@irit.fr, Jonathan.Ben-Naim@irit.fr, Andreas.Herzig@irit.fr We extend belief revision theory from propositional logic to the modal logic S5. Our first contribution takes the form of three new postulates (M1-M3) that go beyond the AGM ones and capture the idea of minimal change in the presence of modalities. Concerning the construction of modal revision operations, we work with set pseudo-distances, i.e., distances between sets of points that may violate the triangle-inequality. Our second contribution is the identification of three axioms (A3-A5) that go beyond the standard axioms of metrics. Loosely speaking, our main result states the following: if a pseudo-distance satisfies certain axioms, then the induced revision operation satisfies (M1-M3). We investigate three pseudo-distances from the literature (Dhaus, Dinj, Dsum), and the three induced revision operations ( Dhaus, Dinj, Dsum). Using our main result, we show that only Dsum satisfies (M1M3) all together. As a last contribution, we revisit a major criticism of AGM operations, namely that the revisions of p q and p (p q) are identical. We show that the problem disappears if instead of material implication we use the modal operator of strict implication that can be defined in S5. 1 Introduction Logical languages with modalities provide expressive power beyond propositional logic: they allow us to distinguish between necessary truths p p and contingent truths p p. This distinction accounts for things such as laws of nature and database integrity constraints. The belief revision literature in the AGM tradition (Alchourr on, G ardenfors, and Makinson 1985) has neglected the problem of how to revise belief sets containing modalities: as the SEP entry on belief revision says, it is fair to say that operations of AGM-style belief change have not yet been constructed that are generally recognized as able to deal adequately with conditional or modal sentences (Hansson 2022). We address this shortcoming by providing an axiomatic and semantic analysis of belief revision operations for modal logic. On the axiomatic side, we formulate three simple rationality postulates and argue why a reasonable revision operation should satisfy them. On the semantic side, the main difficulty is to lift the orderings (on which the semantics of *These authors contributed equally. Copyright 2025, Association for the Advancement of Artificial Intelligence (www.aaai.org). All rights reserved. revision operations are based) from propositional logic valuations to Kripke models. For a start, we choose the modal logic S5 because it has an alternative, simpler semantics in terms of sets of valuations. We propose a family of distancebased revision operations. Each of them is based on a lifting of the Hamming distance from valuations to sets of valuations. The most interesting one sums up the minimal distances from each valuation of one set to the other set: we show that it validates all postulates. Our revision operations allow us to shed new light on an old debate in belief revision: whether revision operations should be syntax-sensitive or not. According to the AGM postulate of syntax insensitivity, when two logically equivalent belief bases are revised by the same new piece of information then the two outcomes should also be logically equivalent. The main argument against syntax insensitivity is that while the two belief bases {p, q} and {p, p q} are statically equivalent , they are not dynamically equivalent , in the sense that they have to be revised differently. We argue that this non-equivalence should be made formal by investigating revision for logics where these two belief bases fail to be equivalent. We show that the strict implication operator , defined in modal logic by φ ψ = (φ ψ), provides an interesting solution: the bases {p, q} and {p, p q} fail to be equivalent, and the revision of {p, q} by q entails {p, q} while that of {p, p q} by q entails { p, q}. The paper is organized as follows. We start by recalling distance-based revision operations and modal logics (Section 2). We then formulate three simple postulates for modal revision (Section 3). After that, we introduce a general way of lifting the Hamming distance between valuations to distances between pointed S5 models (Section 4). We then propose axioms for these distances and check the status of the modal revision postulates w.r.t. the induced revision operations (Section 5). Finally, we show that if we replace material implication by strict implication then the main counterexamples against syntax-insensitive revision can be handled satisfactorily (Section 6) and conclude (Section 8). 2 Background We suppose given a finite set Var = {p, q, r, . . .} of propositional variables. A valuation is a subset of Var. The set of all valuations is Val = Pow(Var). The set PFor is the set of all propositional formulas built from Var and the connectives , The Thirty-Ninth AAAI Conference on Artificial Intelligence (AAAI-25) , and . The set of all propositional models of a formula φ PFor is noted ||φ||PC. Revision In the original AGM framework, a revision operation maps a set of formulas B and a formula µ to a new set of formulas B µ, where the first argument of is a belief set: a set of formulas that is closed under logical theorems and modus ponens. Such sets are typically infinite. However, it has been argued in the philosophical as well as in the AI literature that this is not a realistic hypothesis, both in the case of human agents and in the case of computers: their memory can only contain finite sets of formulas that fail to be closed under theorems and modus ponens. Such finite sets are called belief bases. We follow the KM approach (Katsuno and Mendelzon 1991) and consider formulas instead of belief bases. In that presentation, a revision operation is a function mapping couples of formulas to a formula. Let φ, ψ, µ be formulas in some logic language. Let be a deduction relation for that language. A formula φ is consistent if φ ; and φ ψ abbreviates that both φ ψ and ψ φ. The KM postulates are: (R1) φ µ µ. (R2) If φ µ is consistent then φ µ φ µ. (R3) If µ is consistent then φ µ is consistent. (R4) If φ φ and µ µ then φ µ φ µ . (R5) (φ µ) ψ φ (µ ψ). (R6) If (φ µ) ψ is consistent then φ (µ ψ) (φ µ) ψ. A model-based propositional revision operation is a function from PFor PFor to Pow(Val). An important family of such operations was introduced in (Lehmann, Magidor, and Schlechta 2001; Ben-Naim 2006). All of them are built from arbitrary distances and are syntax-insensitive. The most prominent one is due to Dalal (1988) and is based on the Hamming distance between two valuations, which is the cardinality of their symmetric difference. Formally, the function h : Val Val N0 is such that for u, v Val, h(u, v) = |(u\v) (v\u)|. The lifting of h to sets is a function hs on Val Pow(Val) such that hs(v, U) = ( min{h(v, u) : u U} if U , , |Var| otherwise, for v Val and U Val. Then Dalal s model-based propositional revision operation is φ h µ = Arg Minv ||µ||PChs(v, ||φ||PC). Modal Logic There is not just one modal logic but a whole family. Here we focus on S5, our choice being mainly motivated by the simplicity of its semantics: beyond the usual Kripke models, S5 also has simpler models in terms of sets of valuations that we are going to use here. An (S5-)model is a non-empty subset V of Val; the set of all such models is noted Mod = Pow(Val). A pointed (S5-)model is a pair M = V, v such that V Mod and v V; the set of all such models is noted PMod. The actual world v describes the current state of the world, while the elements of V describe the possible ways the world could be. For the sake of readability, in examples we underline the actual world and drop braces and commas in the description of valuations; we e.g. write { , pq} instead of { , {p, q}}, . The set MFor of modal formulas is defined by the grammar φ ::= p | | φ | φ φ | φ | φ where p ranges over Var. The formula φ is read φ is necessary and φ is read φ is possible . Other boolean connectives such as , material implication , and material equivalence are defined as abbreviations. A formula φ MFor is propositional when and do not appear in φ, that is, when φ PFor. The modal operator of necessity allows us to distinguish necessary and contingent truth of a formula φ. Necessary truths can be viewed as laws of nature, or as integrity constraints in databases. For example, if we read p1 as Bob is a member of Department D1 and p2 as Bob is a member of Department D2 then p1 p2 is a contingent truth: p1 p2 is presently true but is not necessarily so and may change in the future. In contrast, (p1 p2) is a necessary truth expressing the integrity constraint that Bob cannot be a member of both D1 and D2. A formula of MFor is interpreted in a pointed model M = V, v according to the following truth conditions: M p iff p v; M φ iff for every v V, V, v φ; M φ iff for some v V, V, v φ; and as usual for the boolean operators. A pointed model of φ is a couple V, v such that V, v φ; the set of all pointed models of φ is noted ||φ||. If φ is without modal operators (that is, φ PFor) then ||φ|| equals the set of pointed models V, v PMod such that v ||φ||PC. When ||φ|| , then φ is (S5-)satisfiable; when ||φ|| = PMod then φ is (S5-)valid. We denote by |= the relation on MFor such that φ |= ψ iff ||φ|| ||ψ||. Finally, a model of φ is a set of valuations V Mod such that V, v φ for some v V. Several axiomatic systems for S5 exist; we here recall one from (Chellas 1980) which extends that of propositional logic by the following axiom schemas and inference rule: (φ ψ) ( φ ψ); ; φ ψ φ ψ; φ φ; φ φ; φ φ. Provability of a formula φ from the axioms is noted φ. The (S5-)deduction relation φ ψ is defined as φ ψ. The axiomatics is sound and strongly complete: the relations and |= are identical (Chellas 1980). By φ ψ we mean both φ ψ and ψ φ. We say that φ is (S5-)consistent iff φ . Fact 1. Let φ, ψ MFor. The following hold: 1. φ ψ is consistent iff φ and ψ have at least one pointed model in common. 2. φ ψ is consistent iff φ and ψ have at least one model in common. 3. φ ψ is consistent iff φ ψ is consistent. 4. If φ, ψ PFor then φ ψ is consistent iff φ is consistent and ψ is consistent. 3 The Modal Postulates A modal revision operation maps a base φ MFor and an input µ MFor to a revised base φ µ MFor. The new base φ µ should only differ minimally from φ, and a central idea in that perspective, embodied in the KM postulate (R2), is that when φ and µ are consistent then φ µ should be equivalent to φ µ. However, modal logic provides two perspectives on consistency: propositional consistency and modal consistency. Propositional consistency refers to cases where φ and µ share a pointed model. Modal consistency, on the other hand, occurs when φ and µ share a model, but not necessarily a pointed model. This requirement is weaker than propositional consistency. From now, when we use consistency to refer to propositional consistency. The KM postulate (R2) accounts for cases of propositional consistency but not for cases of modal consistency. We introduce three new postulates that, in conjunction with (R1) (R6), appropriately account for revision in the context of modal consistency. The new postulates can be viewed as refinements of the preservation postulate (R2). For a start, we state a consequence of (R2). Fact 2. Let be a modal revision operation satisfying the KM postulates. If φ and µ are propositionally consistent and µ µ then φ µ φ.1 Modal consistency is more liberal than propositional consistency. For example, p and p are modally consistent. By Fact 1 (item 2) this is the same as consistency of p p. While the idea of minimal change in the case of propositional consistency involves preserving the shared pointed models, the same should hold in the case of modal consistency; only the actual world should be (minimally) changed in order to obtain a model of the input. Let us illustrate the above point by a scenario where Detective Hercule Poirot is investigating a murder case. Initially, Poirot believes Antonio Foscarelli is innocent, because certain evidences prove that Foscarelli had no opportunity to be at the scene of the crime. But, as the investigation unfolds, those evidences proved to be false. Consequently, Poirot has to revise his beliefs accordingly, i.e., Poirot has to replace Foscarelli is innocent by Foscarelli is possibly innocent . This kind of revision (i.e., replace an actual fact by a possibility) cannot be done in the classical AGM framework, which motivates our modal framework. Our first new postulate conveys the following intuition: assume φ µ is consistent; then, φ should be preserved when φ is revised by µ; indeed, φ entails φ and µ is consistent with φ (thanks to our assumption). More formally: (M1) If φ µ is consistent, then φ µ φ. When base and input are modally inconsistent, we say we have a case of strong revision. In contrast, when base and 1Obviously, the hypothesis that µ µ can be dropped when is deduction in S5 because µ µ is an S5 theorem. input are propositionally inconsistent, but modally consistent, we have a case of weak revision. The only things we can preserve in case of strong revision are possibilities. For example, the base p and the input p are modally inconsistent. However, p p in S5, and the possibility p is propositionally consistent with p; we therefore expect that p p p. Next, our second new postulate says the following: assume φ entails ψ, and µ is consistent with ψ; then ψ should be preserved when φ is revised by µ. More formally: (M2) If µ propositional, ψ µ is consistent, and φ ψ then φ µ ψ. Note that in (M2), the restriction to propositional µ cannot be dropped at least if our modal logic is S5. Consider e.g. φ = p1 p2, ψ1 = p1, ψ2 = p2, and µ = (p1 p2). Then φ µ would entail both p1 and p2; but as µ is S5equivalent to ( p1 p2), this would conflict with the success postulate (R1). We turn to our last postulate. It means the following: assume φ entails ψ, and µ is consistent with ψ; then, µ is consistent with ψ; thus, ψ should be preserved when φ is revised by µ. More formally: (M3) If µ propositional, ψ µ is consistent, and φ ψ, then φ µ ψ. The restriction in (M3) to propositional µ cannot be dropped, as exemplified by φ = (p1 p2), ψ1 = p1, ψ2 = p2, and µ = (p1 p2). We observe that in cases of weak revision, that is, when µ is consistent with φ, (M2) follows from the preservation postulate (R2), and (M3) follows from (M1). 4 Distance Between Pointed S5 Models Lifting the Hamming Distance to Sets Contrarily to distances, pseudo-distances need not satisfy the triangle inequality: we say that a pseudo-distance is a function D from Mod Mod to N0 satisfying the following two basic axioms: (A1) D(U, V) = 0 iff U = V. (A2) D(U, V) = D(V, U). The elements evaluated by D are not mere points, but subsets of Val. This allows us to formulate the following three supplementary axioms for D: (A3) D({u}, {v}) < D({u }, {v }) iff h(u, v) < h(u , v ). (A4) w U \ V, D(U, V {w}) D(U, V) hs(w, V). (A5) w Val, D(U, U {w}) = hs(w, U). A stronger version of (A3) was introduced in (Eiter and Mannila 1997): in the case of singletons the pseudo-distance D should equal h. (A4) says that the increased distance associated with the loss of common elements is bounded by the Hamming distance. (A5) says that if we add a new valuation to a model then the resulting model s distance from the original set is exactly the Hamming distance between this new valuation and the closest valuation from the original set. Note that the case w U is covered by (A1). We now recall three specific such distances. First, the Hausdorff distance is the minimum of the maximum distances between corresponding points in V and U. Dhaus(U, V) = max max u U min v V h(u, v), max v V min u U h(u, v) . In (Song, Cai, and Immink 2020) a distance function based on injection is introduced. Let Inj(U, V) be the set of all injective functions from U to V. The injection-based pseudo-distance is defined by Dinj(U, V) = min f Inj(X,Y) u X h(u, f(u)) + |Var| (|Y| |X|) where: X = U and Y = V, if |U| |V|; X = V and Y = U, if |V| < |U|. Finally, in (Niiniluoto 1987) the sum-based pseudodistance is defined by Dsum(U, V) = X u U hs(u, V) + X v V hs(v, U). Proposition 3. Dinj satisfies (A3), Dhaus satisfies (A3) and (A5), Dsum satisfies (A3)-(A5). In addition, Dhaus violates (A4), and Dinj violates (A4) and (A5). The following table summarizes the above proposition: Dhaus Dinj Dsum (A3) (A4) (A5) Table 1: Satisfaction of our new pseudo-distance axioms Lexicographic Distance between Pointed Models We are going to view the set of accessible worlds V of a pointed model (V,v) as a first circle of possible fallback worlds in a system of spheres (Lindstr om and Rabinowicz 1999): when a new piece of information is false at the actual world v then the first try is to replace v by one of the other worlds in V. It is only when none of the elements of V satisfies the new piece of information that we have to modify V. In both cases, we are going to determine the resulting model through a distance measure. We define the distance between two pointed models (V,v) and (U,u) to be a pair of integers: Definition 4. Let D be a pseudo-distance. We denote by δD the function from PMod PMod to N0 N0. such that, M = U, u , N = V, v PMod, the following holds: δD(M, N) = D(U, V), h(u, v) . We denote by lex the linear order on N0 N0 such that, r = r1, r2 , s = s1, s2 N0 N0, the following holds: r lex s iff r1 s1 or (r1 = s1 and r2 s2). Fact 5. Let D be a pseudo-distance and M = U, u , N = V, v PMod. Then: u = v iff r N0, δD(M, N) = r, 0 ; U = V iff r N0, δD(M, N) = 0, r . Definition 6. Let D be a pseudo-distance. We denote by D the function on Pow(PMod) PMod such that, M PMod, N PMod, the following holds: D(M, N) = min lex {δD(M, N) : M M}. Slightly abusing notation, we also note D the minimum distance between two sets of pointed models w.r.t