Dynamic epistemic logic

Dynamic epistemic logic (DEL) is a logical framework dealing with knowledge and information change. Typically, DEL focuses on situations involving multiple agents and studies how their knowledge changes when events occur. These events can change factual properties of the actual world (they are called ontic events): for example a red card is painted in blue. They can also bring about changes of knowledge without changing factual properties of the world (they are called epistemic events): for example a card is revealed publicly (or privately) to be red. Originally, DEL focused on epistemic events. We only present in this entry some of the basic ideas of the original DEL framework; more details about DEL in general can be found in the references. Due to the nature of its object of study and its abstract approach, DEL is related and has applications to numerous research areas, such as computer science (artificial intelligence), philosophy (formal epistemology), economics (game theory) and cognitive science. In computer science, DEL is for example very much related to multi-agent systems, which are systems where multiple intelligent agents interact and exchange information.

As a combination of dynamic logic and epistemic logic, dynamic epistemic logic is a young field of research. It really started in 1989 with Plaza's logic of public announcement. Independently, Gerbrandy and Groeneveld proposed a system dealing moreover with private announcement and that was inspired by the work of Veltman. Another system was proposed by van Ditmarsch whose main inspiration was the Cluedo game. But the most influential and original system was the system proposed by Baltag, Moss and Solecki. This system can deal with all the types of situations studied in the works above and its underlying methodology is conceptually grounded. We will present in this entry some of its basic ideas.

Formally, DEL extends ordinary epistemic logic by the inclusion of event models to describe actions, and a product update operator that defines how epistemic models are updated as the consequence of executing actions described through event models. Epistemic logic will first be recalled. Then, actions and events will enter into the picture and we will introduce the DEL framework.

Epistemic Logic

Epistemic logic is a modal logic dealing with the notions of knowledge and belief. As a logic, it is concerned with understanding the process of reasoning about knowledge and belief: which principles relating the notions of knowledge and belief are intuitively plausible? Like epistemology, it stems from the Greek word $ϵ\pi \iota \sigma \tau \eta \mu \eta$ or ‘episteme’ meaning knowledge. Epistemology is nevertheless more concerned with analyzing the very nature and scope of knowledge, addressing questions such as “What is the definition of knowledge?” or “How is knowledge acquired?”. In fact, epistemic logic grew out of epistemology in the Middle Ages thanks to the efforts of Burley and Ockham. The formal work, based on modal logic, that inaugurated contemporary research into epistemic logic dates back only to 1962 and is due to Hintikka. It then sparked in the 1960s discussions about the principles of knowledge and belief and many axioms for these notions were proposed and discussed. For example, the interaction axioms $Kp\to Bp$ and $Bp\to KBp$ are often considered to be intuitive principles: if an agent Knows $p$ then (s)he also Believes $p$, or if an agent Believes $p$, then (s)he Knows that (s)he Believes $p$. More recently, these kinds of philosophical theories were taken up by researchers in economics, artificial intelligence and theoretical computer science where reasoning about knowledge is a central topic. Due to the new setting in which epistemic logic was used, new perspectives and new features such as computability issues were then added to the research agenda of epistemic logic.

Syntax

In the sequel, $AGTS=\{1,\dots ,n\}$ is a finite set whose elements are called agents and $PROP$ is a set of propositional letters.

The epistemic language is an extension of the basic multi-modal language of modal logic with a common knowledge operator $C_A$ and a distributed knowledge operator $D_A$. Formally, the epistemic language ${\mathcal{L}}_{\mathsf{\text{EL}}}^C$ is defined inductively by the following grammar in BNF:

${\mathcal{L}}_{\mathsf{\text{EL}}}^C:\varphi ::=p\mid \mathrm{\neg }\varphi \mid (\varphi \wedge \varphi )\mid K_j\varphi \mid C_A\varphi \mid D_A\varphi$

where $p\in PROP$, $j\in AGTS$ and $A\subseteq AGTS$. The basic epistemic language ${\mathcal{L}}_{EL}$ is the language ${\mathcal{L}}_{EL}^C$ without the common knowledge and distributed knowledge operators. The formula $\mathrm{\perp }$ is an abbreviation for $\mathrm{\neg }p\wedge p$ (for a given $p\in PROP$), $⟨K_j⟩\varphi$ is an abbreviation for $\mathrm{\neg }{K}_j\mathrm{\neg }\varphi$, $E_A\varphi$ is an abbreviation for $\underset{j\in A}{\bigwedge }{K}_j\varphi$ and $C\varphi$ an abbreviation for $C_{AGTS}\varphi$.

Group notions: general, common and distributed knowledge.

In a multi-agent setting there are three important epistemic concepts: general knowledge, distributed knowledge and common knowledge. The notion of common knowledge was first studied by Lewis in the context of conventions. It was then applied to distributed systems and to game theory, where it allows to express that the rationality of the players, the rules of the game and the set of players are commonly known.

General knowledge.

General knowledge of $\varphi$ means that everybody in the group of agents $AGTS$ knows that $\varphi$. Formally, this corresponds to the following formula:

$E\varphi :=\underset{j\in AGTS}{\bigwedge }{K}_j\varphi .$

Common knowledge.

Common knowledge of $\varphi$ means that everybody knows $\varphi$ but also that everybody knows that everybody knows $\varphi$, that everybody knows that everybody knows that everybody knows $\varphi$, and so on ad infinitum. Formally, this corresponds to the following formula

$C\varphi :=E\varphi \wedge EE\varphi \wedge EEE\varphi \wedge \dots$

As we do not allow infinite conjunction the notion of common knowledge will have to be introduced as a primitive in our language.

Before defining the language with this new operator, we are going to give an example introduced by Lewis that illustrates the difference between the notions of general knowledge and common knowledge. Lewis wanted to know what kind of knowledge is needed so that the statement $p$: “every driver must drive on the right” be a convention among a group of agents. In other words, he wanted to know what kind of knowledge is needed so that everybody feels safe to drive on the right. Suppose there are only two agents $i$ and $j$. Then everybody knowing $p$ (formally $Ep$) is not enough. Indeed, it might still be possible that the agent $i$ considers possible that the agent $j$ does not know $p$ (formally $\mathrm{\neg }{K}_i{K}_{j}p$). In that case the agent $i$ will not feel safe to drive on the right because he might consider that the agent $j$, not knowing $p$, could drive on the left. To avoid this problem, we could then assume that everybody knows that everybody knows that $p$ (formally $EEp$). This is again not enough to ensure that everybody feels safe to drive on the right. Indeed, it might still be possible that agent $i$ considers possible that agent $j$ considers possible that agent $i$ does not know $p$ (formally $\mathrm{\neg }{K}_i{K}_j{K}_{i}p$). In that case and from $i$’s point of view, $j$ considers possible that $i$, not knowing $p$, will drive on the left. So from $i$’s point of view, $j$ might drive on the left as well (by the same argument as above). So $i$ will not feel safe to drive on the right. Reasoning by induction, Lewis showed that for any $k\in \mathbb{N}$, $Ep\wedge E^{1}p\wedge \dots \wedge E^{k}p$ is not enough for the drivers to feel safe to drive on the right. In fact what we need is an infinite conjunction. In other words, we need common knowledge of $p$: $Cp$.

Distributed knowledge.

Distributed knowledge of $\varphi$ means that if the agents pulled their knowledge altogether, they would know that $\varphi$ holds. In other words, the knowledge of $\varphi$ is distributed among the agents. The formula $D_A\varphi$ reads as ‘it is distributed knowledge among the set of agents $A$ that $\varphi$ holds’.

Semantics

Epistemic logic is a modal logic. So, what we call an epistemic model $\mathcal{M}=(W,R_1,\dots ,R_n,I)$ is just a Kripke model as defined in modal logic. The set $W$ is a non-empty set whose elements are called possible worlds and the interpretation $I:W\to 2^{PROP}$ is a function specifying which propositional facts (such as ‘Ann has the red card’) are true in each of these worlds. The accessibility relations $R_j\subseteq W\times W$ are binary relations for each agent $j\in AGTS$; they are intended to capture the uncertainty of each agent (about the actual world and about the other agents' uncertainty). Intuitively, we have $(w,v)\in R_j$ when the world $v$ is compatible with agent $j$’s information in world $w$ or, in other words, when agent $j$ considers that world $v$ might correspond to the world $w$ (from this standpoint). We abusively write $w\in \mathcal{M}$ for $w\in W$ and $R_j(w)$ denotes the set of worlds $\{v\in W;(w,v)\in R_j\}$.

Intuitively, a pointed epistemic model $(\mathcal{M},w)$, where $w\in \mathcal{M}$, represents from an external point of view how the actual world $w$ is perceived by the agents $AGTS$.

For every epistemic model $\mathcal{M}$, every $w\in \mathcal{M}$ and every $\varphi \in {\mathcal{L}}_{\mathsf{\text{EL}}}$, we define $\mathcal{M},w\models \varphi$ inductively by the following truth conditions:

$\mathcal{M},w\models p$	iff	$p\in I(w)$
$\mathcal{M},w\models \mathrm{\neg }\varphi$	iff	$\text{it~is~not~the~case~that~}\mathcal{M},w\models \varphi$
$\mathcal{M},w\models \varphi \wedge \psi$	iff	$\mathcal{M},w\models \varphi \text{~and~}\mathcal{M},w\models \psi$
$\mathcal{M},w\models K_j\varphi$	iff	$\text{for~all~}v\in R_j(w),\mathcal{M},v\models \varphi$
$\mathcal{M},w\models C_A\varphi$	iff	$\text{for~all~}v\in {\left(\bigcup _{j\in A}{R}_j\right)}^{+}(w),\mathcal{M},v\models \varphi$
$\mathcal{M},w\models D_A\varphi$	iff	$\text{for~all~}v\in \bigcap _{j\in A}{R}_j(w),\mathcal{M},v\models \varphi$

where ${\left(\bigcup _{j\in A}{R}_j\right)}^{+}$ is the transitive closure of $\bigcup _{j\in A}{R}_j$: we have that $v\in {\left(\bigcup _{j\in A}{R}_j\right)}^{+}(w)$ if, and only if, there are $w_0,\dots ,w_m\in \mathcal{M}$ and $j_1,\dots ,j_m\in A$ such that $w_0=w,w_m=v$ and for all $i\in \{1,\dots ,m\}$, $w_{i-1}{R}_{j_i}{w}_i$.

Despite the fact that the notion of common belief has to be introduced as a primitive in the language, we can notice that the definition of epistemic models does not have to be modified in order to give truth value to the common knowledge and distributed knowledge operators.

Card Example:

Players $A$, $B$ and $C$ (standing for Ann, Bob and Claire) play a card game with three cards: a red one, a green one and a blue one. Each of them has a single card but they do not know the cards of the other players. Ann has the red card, Bob has the green card and Claire has the blue card. This example is depicted in the pointed epistemic model $(\mathcal{M},w)$ represented below. In this example, $AGTS:=\{A,B,C\}$ and $PROP:=\{A,B,C,B,C,A,C,A,B\}$. Each world is labelled by the propositional letters which are true in this world and $w$ corresponds to the actual world. There is an arrow indexed by agent $j\in \{A,B,C\}$ from a possible world $u$ to a possible world $v$ when $(u,v)\in R_j$. Reflexive arrows are omitted, which means that for all $j\in \{A,B,C\}$ and all $v\in \mathcal{M}$, we have that $(v,v)\in R_j$.

Card Example: pointed epistemic model $(\mathcal{M},w)$

$A$ stands for : "$A$ has the red card''

$C$ stand for: "$C$ has the blue card''

$B$ stands for: "$B$ has the green card''

and so on...

When accessibility relations are equivalence relations (like in this example) and we have that $(w,v)\in R_j$, we say that agent $j$ cannot distinguish world $w$ from world $v$ (or world $w$ is indistinguishable from world $v$ for agent $j$). So, for example, $A$ cannot distinguish the actual world $w$ from the possible world where $B$ has the blue card ($B$), $C$ has the green card ($C$) and $A$ still has the red card ($A$).

In particular, the following statements hold:

$\mathcal{M},w\models (A\wedge K_{A}A)\wedge (C\wedge K_{C}C)\wedge (B\wedge K_{B}B)$

'All the agents know the color of their card'.

$\mathcal{M},w\models K_A(B\vee B)\wedge K_A(C\vee C)$

'$A$ knows that $B$ has either the blue or the green card and that $C$ has either the blue or the green card'.

$\mathcal{M},w\models E(A\vee A\vee A)\wedge C(A\vee A\vee A)$

'Everybody knows that $A$ has either the red, green or blue card and this is even common knowledge among all agents'.

Knowledge versus Belief

We use the same notation $K_j$ for both knowledge and belief. Hence, depending on the context, $K_j\varphi$ will either read ‘the agent $j$ Knows that $\varphi$ holds’ or ‘the agent $j$ Believes that $\varphi$ holds’. A crucial difference is that, unlike knowledge, beliefs can be wrong: the axiom $K_j\varphi \to \varphi$ holds only for knowledge, but not necessarily for belief. This axiom called axiom T (for Truth) states that if the agent knows a proposition, then this proposition is true. It is often considered to be the hallmark of knowledge and it has not been subjected to any serious attack ever since its introduction in the Theaetetus by Plato.

The notion of knowledge might comply to some other constraints (or axioms) such as $K_j\varphi \to K_j{K}_j\varphi$: if agent $j$ knows something, she knows that she knows it. These constraints might affect the nature of the accessibility relations $R_j$ which may then comply to some extra properties. So, we are now going to define some particular classes of epistemic models that all add some extra constraints on the accessibility relations $R_j$. These constraints are matched by particular axioms for the knowledge operator $K_j$. Below each property, we give the axiom which defines the class of epistemic frames that fulfill this property. ($K\varphi$ stands for $K_j\varphi$ for any $j\in AGTS$.)

Properties of accessibility relations and corresponding axioms

serial	$R(w)\ne \mathrm{\varnothing }$
D	$K\varphi \to ⟨K⟩\varphi$
transitive	$\text{If }{w}^{\prime }\in R(w)\text{ and }{w}^{″}\in R(w^{\prime }),\text{ then}{w}^{″}\in R(w)$
4	$K\varphi \to KK\varphi$
Euclidicity	$\text{If }{w}^{\prime }\in R(w)\text{ and }{w}^{″}\in R(w),\text{ then }{w}^{\prime }\in R(w^{″})$
5	$\mathrm{\neg }K\varphi \to K\mathrm{\neg }K\varphi$
reflexive	$w\in R(w)$
T	$K\varphi \to \varphi$
symmetric	$\text{If }{w}^{\prime }\in R(w),\text{ then }w\in R(w^{\prime })$
B	$\varphi \to K\mathrm{\neg }K\mathrm{\neg }\varphi$
confluent	$\text{If }{w}^{\prime }\in R(w)\text{~and~}{w}^{″}\in R(w),\text{then~there~is~}v\text{~such~ that }v\in R(w^{\prime })\text{~and~}v\in R(w^{″})$
.2	$⟨K⟩K\varphi \to K⟨K⟩\varphi$
weakly connected	$\text{If }{w}^{\prime }\in R(w)\text{~and~}{w}^{″}\in R(w),\text{~then~}{w}^{\prime }=w^{″}\text{~or~}{w}^{\prime }\in R(w^{″})\text{~or~}{w}^{″}\in R(w^{\prime })$
.3	$⟨K⟩\varphi \wedge ⟨K⟩\psi \to ⟨K⟩(\varphi \wedge \psi )\vee ⟨K⟩(\psi \wedge ⟨K⟩\varphi )\vee ⟨K⟩(\varphi \wedge ⟨K⟩\psi )$
semi-Euclidean	$\text{If~}{w}^{″}\in R(w)\text{~and~}w\notin R(w^{″})\text{~and~}{w}^{\prime }\in R(w),\text{~then~}{w}^{″}\in R(w^{\prime })$
.3.2	$(⟨K⟩\varphi \wedge ⟨K⟩K\psi )\to K(⟨K⟩\varphi \vee \psi )$
R1	$\text{If~}{w}^{″}\in R(w)\text{~and~}w\ne w^{″}\text{~and~}{w}^{\prime }\in R(w),\text{~then~}{w}^{″}\in R(w^{\prime })$
.4	$(\varphi \wedge ⟨K⟩K\varphi )\to K\varphi$

We discuss the axioms above. Axiom 4 states that if the agent knows a proposition, then she knows that she knows it (this axiom is also known as the “KK-principle”or “KK-thesis”). In epistemology, axiom 4 tends to be accepted by internalists, but not by externalists. Axiom 4 is nevertheless widely accepted by computer scientists (but also by many philosophers, including Plato, Aristotle, Saint Augustine, Spinoza and Schopenhauer, as Hintikka recalls ). A more controversial axiom for the logic of knowledge is axiom 5 for Euclidicity: this axiom states that if the agent does not know a proposition, then she knows that she does not know it. Most philosophers (including Hintikka) have attacked this axiom, since numerous examples from everyday life seem to invalidate it. In general, axiom 5 is invalidated when the agent has mistaken beliefs, which can be due for example to misperceptions, lies or other forms of deception. Axiom B states that it cannot be the case that the agent considers it possible that she knows a false proposition (that is, $\mathrm{\neg }(\mathrm{\neg }\varphi \wedge \mathrm{\neg }K\mathrm{\neg }K\varphi )$). If we assume that axioms T and 4 are valid, then axiom B falls prey to the same attack as the one for axiom 5 since this axiom is derivable. Axiom D states that the agent's beliefs are consistent. In combination with axiom K (where the knowledge operator is replaced by a belief operator), axiom D is in fact equivalent to a simpler axiom D' which conveys, maybe more explicitly, the fact that the agent's beliefs cannot be inconsistent: $\mathrm{\neg }B\mathrm{\perp }$. The other intricate axioms .2, .3, .3.2 and .4 have been introduced by epistemic logicians such as Lenzen and Kutchera in the 1970s and presented for some of them as key axioms of epistemic logic. They can be characterized in terms of intuitive interaction axioms relating knowledge and beliefs.

Axiomatization

The Hilbert proof system K for the basic modal logic is defined by the following axioms and inference rules: for all $j\in AGTS$,

Proof system $\mathsf{\text{K}}$ for ${\mathcal{L}}_{EL}$

Prop	All axioms and inference rules of propositional logic
K	$K_j(\varphi \to \psi )\to (K_j\varphi \to K_j\psi )$
Nec	If $\varphi$ then $K_j\varphi$

The axioms of an epistemic logic obviously display the way the agents reason. For example, the axiom K together with the rule of inference Nec entail that if I know $\varphi$ ($K\varphi$) and I know that $\varphi$ implies $\psi$ ($K(\varphi \to \psi ))$ then I know that $\psi$ ($K\psi$). Stronger constraints can be added. The following proof systems for ${\mathcal{L}}_{\mathsf{\text{EL}}}$ are often used in the literature.

Common proof systems for ${\mathcal{L}}_{EL}$

KD45

=

K+D+4+5

S4.2

=

S4+.2

S4.3.2

=

S4+.3.2

S5

=

S4+5

S4

=

K+T+4

S4.3

=

S4+.3

S4.4

=

S4+.4

Br

=

K+T+B

We define the set of proof systems ${\mathbb{L}}_{\mathsf{\text{EL}}}:=\{\mathsf{\text{K}},\mathsf{\text{KD45}},\mathsf{\text{S4}},\mathsf{\text{S4.2}},\mathsf{\text{S4.3}},\mathsf{\text{S4.3.2}},\mathsf{\text{S4.4}},\mathsf{\text{S5}}\}$.

Moreover, for all $\mathcal{H}\in {\mathbb{L}}_{\mathsf{\text{EL}}}$, we define the proof system ${\mathcal{H}}^{\mathsf{\text{C}}}$ by adding the following axiom schemes and rules of inference to those of $\mathcal{H}$. For all $A\subseteq AGTS$,

Dis	$K_j\varphi \to D_A\varphi$
Mix	$C_A\varphi \to E_A(\varphi \wedge C_A\varphi )$
Ind	$\text{if~}\varphi \to E_A(\psi \wedge \varphi )\text{~then~}\varphi \to C_A\psi$

The relative strength of the proof systems for knowledge is as follows:

$\mathsf{\text{S4}}\subset \mathsf{\text{S4.2}}\subset \mathsf{\text{S4.3}}\subset \mathsf{\text{S4.3.2}}\subset \mathsf{\text{S4.4}}\subset \mathsf{\text{S5}}.$

So, all the theorems of $\mathsf{\text{S4.2}}$ are also theorems of $\mathsf{\text{S4.3}},\mathsf{\text{S4.3.2}},\mathsf{\text{S4.4}}$ and $\mathsf{\text{S5}}$. Many philosophers claim that in the most general cases, the logic of knowledge is $\mathsf{\text{S4.2}}$ or $\mathsf{\text{S4.3}}$. Typically, in computer science and in many of the theories developed in artificial intelligence, the logic of belief (doxastic logic) is taken to be $\mathsf{\text{KD45}}$ and the logic of knowledge (epistemic logic) is taken to be $\mathsf{\text{S5}}$, even if $\mathsf{\text{S5}}$ is only suitable for situations where the agents do not have mistaken beliefs. $\mathsf{\text{Br}}$ has been propounded by Floridi as the logic of the notion of 'being informed’ which mainly differs from the logic of knowledge by the absence of introspection for the agents.

For all $\mathcal{H}\in {\mathbb{L}}_{\mathsf{\text{EL}}}$, the class of $\mathcal{H}$–models or ${\mathcal{H}}^{\mathsf{\text{C}}}$–models is the class of epistemic models whose accessibility relations satisfy the properties listed above defined by the axioms of $\mathcal{H}$ or ${\mathcal{H}}^{\mathsf{\text{C}}}$. Then, for all $\mathcal{H}\in {\mathbb{L}}_{\mathsf{\text{EL}}}$, $\mathcal{H}$ is sound and strongly complete for ${\mathcal{L}}_{\mathsf{\text{EL}}}$ w.r.t. the class of $\mathcal{H}$–models, and ${\mathcal{H}}^{\mathsf{\text{C}}}$ is sound and strongly complete for ${\mathcal{L}}_{\mathsf{\text{EL}}}^{\mathsf{\text{C}}}$ w.r.t. the class of ${\mathcal{H}}^{\mathsf{\text{C}}}$–models.

Decidability and Complexity

The satisfiability problem for all the logics introduced is decidable. We list below the computational complexity of the satisfiability problem for each of them. Note that it becomes linear in time if there are only finitely many propositional letters in the language. For $n\ge 2$, if we restrict to finite nesting, then the satisfiability problem is NP-complete for all the modal logics considered. If we then further restrict the language to having only finitely many primitive propositions, the complexity goes down to linear in time in all cases.

Complexity of the satisfiability problem

Logic	$n=1$	$n\ge 2$	with common knowledge
K, S4	PSPACE	PSPACE	EXPTIME
KD45	NP	PSPACE	EXPTIME
S5	NP	PSPACE	EXPTIME

The computational complexity of the model checking problem is in P in all cases.

Adding Dynamics

Dynamic Epistemic Logic (DEL) is a logical framework for modeling epistemic situations involving several agents, and changes that occur to these situations as a result of incoming information or more generally incoming action. The methodology of DEL is such that it splits the task of representing the agents’ beliefs and knowledge into three parts:

1. One represents their beliefs about an initial situation thanks to an epistemic model;
2. One represents their beliefs about an event taking place in this situation thanks to an event model;
3. One represents the way the agents update their beliefs about the situation after (or during) the occurrence of the event thanks to a product update.

Typically, an informative event can be a public announcement to all the agents of a formula $\psi$: this public announcement and correlative update constitute the dynamic part. However, epistemic events can be much more complex than simple public announcement, including hiding information for some of the agents, cheating, lying, bluffing, etc. This complexity is dealt with when we introduce the notion of event model. We will first focus on public announcements to get an intuition of the main underlying ideas of DEL.

Public Events

In this section, we assume that all events are public. We start by giving a concrete example where DEL can be used, to better understand what is going on. This example is called the muddy children puzzle. Then, we will present a formalization of this puzzle in a logic called Public Announcement Logic (PAL). The muddy children puzzle is one of the most well known puzzles that played a role in the development of DEL. Other significant puzzles include the sum and product puzzle, the Monty Hall dilemma, the Russian cards problem, the two envelopes problem, Moore's paradox, the hangman paradox, etc.

Muddy Children Example:

We have two children, A and B, both dirty. A can see B but not himself, and B can see A but not herself. Let $p$ be the proposition stating that A is dirty, and $q$ be the proposition stating that B is dirty.

1. We represent the initial situation by the pointed epistemic model $(\mathcal{N},s)$ represented below, where relations between worlds are equivalence relations. States $s,t,u,v$ intuitively represent possible worlds, a proposition (for example $p$) satisfiable at one of these worlds intuitively means that in the corresponding possible world, the intuitive interpretation of $p$ (A is dirty) is true. The links between worlds labelled by agents (A or B) intuitively express a notion of indistinguishability for the agent at stake between two possible worlds. For example, the link between $s$ and $t$ labelled by A intuitively means that A can not distinguish the possible world $s$ from $t$ and vice versa. Indeed, A cannot see himself, so he cannot distinguish between a world where he is dirty and one where he is not dirty. However, he can distinguish between worlds where B is dirty or not because he can see B. With this intuitive interpretation we are brought to assume that our relations between worlds are equivalence relations.
   

   Initial situation: pointed epistemic model $(\mathcal{N},s)$
2. Now, suppose that their father comes and announces that at least one is dirty (formally, $p\vee q$). Then we update the model and this yields the pointed epistemic model represented below. What we actually do is suppressing the worlds where the content of the announcement is not fulfilled. In our case this is the world where $\mathrm{\neg }p$ and $\mathrm{\neg }q$ are true. This suppression is what we call the update. We then get the model depicted below. As a result of the announcement, both A and B do know that at least one of them is dirty. We can read this from the epistemic model.
   

   Updated epistemic model after the first announcement $p\vee q$
3. Now suppose there is a second (and final) announcement that says that neither knows they are dirty (an announcement can express facts about the situation as well as epistemic facts about the knowledge held by the agents). We then update similarly the model by suppressing the worlds which do not satisfy the content of the announcement, or equivalently by keeping the worlds which do satisfy the announcement. This update process thus yields the pointed epistemic model represented below. By interpreting this model, we get that A and B both know that they are dirty, which seems to contradict the content of the announcement. However, if we assume that A and B are both perfect reasoners and that this is common knowledge among them, then this inference makes perfect sense.

Updated epistemic model after the second announcement

Public announcement logic (PAL):

We present the syntax and semantic of Public Announcement Logic (PAL), which combines features of epistemic logic and propositional dynamic logic.

We define the language ${\mathcal{L}}_{PAL}$ inductively by the following grammar in BNF:

${\mathcal{L}}_{PAL}:\varphi ::=p\mid \mathrm{\neg }\varphi \mid (\varphi \wedge \varphi )\mid K_j\varphi \mid [\varphi !]\varphi$

where $j\in AGTS$.

The language ${\mathcal{L}}_{PAL}$ is interpreted over epistemic models. The truth conditions for the connectives of the epistemic language are the same as in epistemic logic (see above). The truth condition for the new dynamic action modality $[\psi !]\varphi$ is defined as follows:

$\mathcal{M},w\models [\psi !]\varphi$

iff

$\text{if }\mathcal{M},w\models \psi \text{ then }{\mathcal{M}}^{\psi },w\models \varphi$

where ${\mathcal{M}}^{\psi }:=(W^{\psi },R_1^{\psi },\dots ,R_n^{\psi },I^{\psi })$ with

$W^{\psi }:=\{w\in W;\mathcal{M},w\models \psi \}$,

$R_j^{\psi }:=R_j\cap (W^{\psi }\times W^{\psi })$ for all $j\in \{1,\dots ,n\}$ and

$I^{\psi }(w):=I(w)\text{~for~all~}w\in W^{\psi }$.

The formula $[\psi !]\varphi$ intuitively means that after a truthful announcement of $\psi$, $\varphi$ holds. A public announcement of a proposition $\psi$ changes the current epistemic model like in the figure below.

Eliminate all worlds which currently do not satisfy $\psi$

The proof system ${\mathcal{H}}_{PAL}$ defined below is sound and strongly complete for ${\mathcal{L}}_{PAL}$ w.r.t. the class of all pointed epistemic models.

$\mathsf{\text{K}}$		The Axioms and the rules of inference of the proof system $\mathsf{\text{K}}$(see above)
Red 1		$[\psi !]p\leftrightarrow (\psi \to p)$
Red 2		$[\psi !]\mathrm{\neg }\varphi \leftrightarrow (\psi \to \mathrm{\neg }[\psi !]\varphi )$
Red 3		$[\psi !](\varphi \wedge \chi )\leftrightarrow ([\psi !]\varphi \wedge [\psi !]\chi )$
Red 4		$[\psi !]K_i\varphi \leftrightarrow (\psi \to K_i(\psi \to [\psi !]\varphi ))$

The axioms Red 1 - Red 4 are called reduction axioms because they allow to reduce any formula of ${\mathcal{L}}_{PAL}$ to a provably equivalent formula of ${\mathcal{L}}_{EL}$ in ${\mathcal{H}}_{PAL}$. The formula $[q!]Kq$ is a theorem provable in ${\mathcal{H}}_{PAL}$. It states that after a public announcement of $q$, the agent knows that $q$ holds.

PAL is decidable, its model checking problem is solvable in polynomial time and its satisfiability problem is PSPACE-complete.

Muddy children puzzle formalized with PAL:

Here are some of the statements that hold in the muddy children puzzle formalized in PAL.

$\mathcal{N},s\models p\wedge q$

'In the initial situation, A is dirty and B is dirty'.

$\mathcal{N},s\models (\mathrm{\neg }{K}_{A}p\wedge \mathrm{\neg }{K}_A\mathrm{\neg }p)\wedge (\mathrm{\neg }{K}_{B}q\wedge \mathrm{\neg }{K}_B\mathrm{\neg }q)$

'In the initial situation, A does not know whether he is dirty and B neither'.

$\mathcal{N},s\models [p\vee q!](K_A(p\vee q)\wedge K_B(p\vee q))$

'After the public announcement that at least one of the children A and B is dirty, both of them know that at least one of them is dirty'. However:

$\mathcal{N},s\models [p\vee q!]((\mathrm{\neg }{K}_{A}p\wedge \mathrm{\neg }{K}_A\mathrm{\neg }p)\wedge (\mathrm{\neg }{K}_{B}q\wedge \mathrm{\neg }{K}_B\mathrm{\neg }q))$

'After the public announcement that at least one of the children A and B is dirty, they still do not know that they are dirty'. Moreover:

$\mathcal{N},s\models [p\vee q!][(\mathrm{\neg }{K}_{A}p\wedge \mathrm{\neg }{K}_A\mathrm{\neg }p)\wedge (\mathrm{\neg }{K}_{B}q\wedge \mathrm{\neg }{K}_B\mathrm{\neg }q)!](K_{A}p\wedge K_{B}q)$

'After the successive public announcements that at least one of the children A and B is dirty and that they still do not know whether they are dirty, A and B then both know that they are dirty'.

In this last statement, we see at work an interesting feature of the update process: a formula is not necessarily true after being announced. That is what we technically call “self-persistence” and this problem arises for epistemic formulas (unlike propositional formulas). One must not confuse the announcement and the update induced by this announcement, which might cancel some of the information encoded in the announcement.

Arbitrary Events

In this section, we assume that events are not necessarily public and we focus on items 2 and 3 above, namely on how to represent events and on how to update an epistemic model with such a representation of events by means of a product update.

Event Model

Epistemic models are used to model how agents perceive the actual world. Their perception can also be described in terms of knowledge and beliefs about the world and about the other agents’ beliefs. The insight of the DEL approach is that one can describe how an event is perceived by the agents in a very similar way. Indeed, the agents’ perception of an event can also be described in terms of knowledge and beliefs. For example, the private announcement of $A$ to $B$ that her card is red can also be described in terms of knowledge and beliefs: while $A$ tells $B$ that her card is red (event $e$) $C$ believes that nothing happens (event $f$). This leads to define the notion of event model whose definition is very similar to that of an epistemic model.

A pointed event model $(\mathcal{E},e)$ represents how the actual event represented by $e$ is perceived by the agents. Intuitively, $f\in R_j(e)$ means that while the possible event represented by $e$ is occurring, agent $j$ considers possible that the possible event represented by $f$ is actually occurring.

An event model is a tuple $\mathcal{E}=(W^{\alpha },R_1^{\alpha },\dots ,R_m^{\alpha },I^{\alpha })$ where:

• $W^{\alpha }$ is a non-empty set of possible events,
• $R_j^{\alpha }\subseteq W^{\alpha }\times W^{\alpha }$ is a binary relation called an accessibility relation on $W^{\alpha }$, for each $j\in AGTS$,
• $I^{\alpha }:W^{\alpha }\to {\mathcal{L}}_{\mathsf{\text{EL}}}$ is a function called the precondition function assigning to each possible event a formula of ${\mathcal{L}}_{\mathsf{\text{EL}}}$.

$R_j^{\alpha }(e)$ denotes the set $\{f\in W^{\alpha };(e,f)\in R_j^{\alpha }\}$ .We write $e\in \mathcal{E}$ for $e\in W^{\alpha }$, and $(\mathcal{E},e)$ is called a pointed event model ($e$ often represents the actual event).

Card Example:

Let us resume the card example and assume that players $A$ and $B$ show their card to each other. As it turns out, $C$ noticed that $A$ showed her card to $B$ but did not notice that $B$ did so to $A$. Players $A$ and $B$ know this. This event is represented below in the event model $(\mathcal{E},e)$.

The possible event $e$ corresponds to the actual event ‘players $A$ and $B$ show their and cards respectively to each other’ (with precondition $A\wedge B$), $f$ stands for the event ‘player $A$ shows her green card’ (with precondition $A$) and $g$ stands for the atomic event ‘player $A$ shows her red card’ (with precondition $A$). Players $A$ and $B$ show their cards to each other, players $A$ and $B$ know this and consider it possible, while player $C$ considers possible that player $A$ shows her red card and also considers possible that player $A$ shows her green card, since he does not know her card. In fact, that is all that player $C$ considers possible because she did not notice that $B$ showed her card.

Pointed event model $(\mathcal{E},e)$: Players A and B show their cards to each other in front of player C

Another example of event model is given below. This second example corresponds to the event whereby Player $A$ shows her red card publicly to everybody. Player $A$ shows her red card, players $A$, $B$ and $C$ ‘know’ it, players $A$, $B$ and $C$ ‘know’ that each of them ‘knows’ it, etc. In other words, there is common knowledge among players $A$, $B$ and $C$ that player $A$ shows her red card.

Pointed event model $(\mathcal{F},e)$

Product Update

The DEL product update is defined below. This update yields a new pointed epistemic model $(\mathcal{M},w)\otimes (\mathcal{E},e)$ representing how the new situation which was previously represented by $(\mathcal{M},w)$ is perceived by the agents after the occurrence of the event represented by $(\mathcal{E},e)$.

Let $\mathcal{M}=(W,R_1,\dots ,R_n,I)$ be an epistemic model and let $\mathcal{E}=(W^{\alpha },R_1^{\alpha },\dots ,R_n^{\alpha },I^{\alpha })$ be an event model. The product update of $\mathcal{M}$ and $\mathcal{E}$ is the epistemic model $\text{Missing argument for mathcal}$ defined as follows: for all $v\in W$ and all $f\in W^{\alpha }$,

$W^{\otimes }$	=	$\{(v,f)\in W\times W^{\alpha };\mathcal{M},v\models I^{\alpha }(f)\}$
$R_j^{\otimes }(v,f)$	=	$\{(u,g)\in W^{\otimes };u\in R_j(v)\text{~and~}g\in R_j^{\alpha }(f)\}$
$I^{\otimes }(v,f)$	=	$I(v)$

If $w\in W$ and $e\in W^{\alpha }$ are such that $\mathcal{M},w\models I^{\alpha }(e)$ then $(\mathcal{M},w)\otimes (\mathcal{E},e)$ denotes the pointed epistemic model $(\mathcal{M}\otimes \mathcal{E},(w,e))$. This definition of the product update is conceptually grounded.

Card Example:

As a result of the first event described above (Players $A$ and $B$ show their cards to each other in front of player $C$), the agents update their beliefs. We get the situation represented in the pointed epistemic model $(\mathcal{M},w)\otimes (\mathcal{E},e)$ below. In this pointed epistemic model, the following statement holds: $(\mathcal{M},w)\otimes (\mathcal{E},e)\models (B\wedge K_{A}B)\wedge K_C\mathrm{\neg }{K}_{A}B.$ It states that player $A$ knows that player $B$ has the card but player $C$ 'believes' that it is not the case.

Updated pointed epistemic model $(\mathcal{M},w)\otimes (\mathcal{E},e)$

The result of the second event is represented below. In this pointed epistemic model, the following statement holds: $(\mathcal{M},w)\otimes (\mathcal{F},e)\models C_{\{B,C\}}(A\wedge B\wedge C)\wedge \mathrm{\neg }{K}_A(B\wedge C)$. It states that there is common knowledge among $B$ and $C$ that they know the true state of the world (namely $A$ has the red card, $B$ has the green card and $C$ has the blue card), but $A$ does not know it.

Updated pointed epistemic model $(\mathcal{M},w)\otimes (\mathcal{F},e)$

Based on these three components (epistemic model, event model and product update), Baltag, Moss and Solecki defined a general logical language inspired from the logical language of propositional dynamic logic to reason about information and knowledge change.

See also

• Epistemic logic
• Epistemology
• Logic in computer science
• Modal logic

References

• van Benthem, Johan (2011). Logical Dynamics of Information and Interaction. Cambridge University Press. ISBN 978-0521873970. 
• Hans, van Ditmarsch; Halpern, Joseph; van der Hoek, Wiebe; Kooi, Barteld (2015). Handbook of Epistemic Logic. London: College publication. ISBN 978-1848901582. 
• van Ditmarsch, Hans, van der Hoek, Wiebe, and Kooi, Barteld (2007). Dynamic Epistemic Logic. Ithaca: volume 337 of Synthese library. Springer.. ISBN 978-1-4020-5839-4. 
• Fagin, Ronald; Halpern, Joseph; Moses, Yoram; Vardi, Moshe (2003). Reasoning about Knowledge. Cambridge: MIT Press. ISBN 978-0-262-56200-3.  A classic reference.
• Hintikka, Jaakko (1962). Knowledge and Belief - An Introduction to the Logic of the Two Notions. Ithaca: Cornell University Press. ISBN 978-1-904987-08-6. https://archive.org/details/knowledgebeliefi00hint_0. .

External links

• Baltag, Alexandru; Renne, Bryan. "Dynamic Epistemic Logic". in Zalta, Edward N.. Stanford Encyclopedia of Philosophy. https://plato.stanford.edu/entries/dynamic-epistemic/. 
• van Ditmarsch, Hans; van der Hoek, Wiebe; Kooi, Barteld. "Dynamic Epistemic Logic". Internet Encyclopedia of Philosophy. http://www.iep.utm.edu/de-logic. 
• Hendricks, Vincent; Symons, John. "Epistemic Logic". in Zalta, Edward N.. Stanford Encyclopedia of Philosophy. https://plato.stanford.edu/entries/logic-epistemic/. 
• Garson, James. "Modal logic". in Zalta, Edward N.. Stanford Encyclopedia of Philosophy. https://plato.stanford.edu/entries/logic-modal/.