Machine-Native ReasoningReading edition

Chapter 4. From corrected records to decisions and explanations

Reading tools
Reading libraryFind statementsInspect Lean
Switch work

Saved reading

Read side by side

Start reading

Resources & source

Read and explore

Proofs and implementation

About this work

Other resources

Original TeX with line links · Download TeX

The wording and mathematics follow the retained manuscript. This reading format does not add a proof review or extend Lean coverage.

Skip contents and start reading

4 From corrected records to decisions and explanations

The same record, model, and continuation must support the decision being certified.

Correctness of a probability calculation is not a guarantee that a real process follows its likelihood model. Within the declared model, however, a small error in the retained distribution can support a precise decision bound. We state that bridge before introducing communication, so that an explanation has a definite object to preserve.

4.1 One quantitative decision contract

Let \(p\) and \(\widehat p\) be distributions on the same finite world set. For each world let \(v_\omega\) be a response and \(\widehat v_\omega\) its approximation in one metric space. Assume

\[ {d_{\mathrm{TV}}}(p,\widehat p)\le e,\qquad \sup_\omega d(v_\omega,\widehat v_\omega)\le d_0. \]

For each action \(a\) in a finite nonempty set, let the loss \(\ell(a,v)\) lie in \([0,1]\) and be \(K\)-Lipschitz in \(v\). Define the model risks

\[ R(a)=\sum_\omega p(\omega)\ell(a,v_\omega),\qquad \widehat R(a)=\sum_\omega\widehat p(\omega)\ell(a,\widehat v_\omega). \]

Theorem 4.1: A decision bound for one actual approximation chain

Put \(\xi=\min\{1,e+Kd_0\}\). For every action, \(|R(a)-\widehat R(a)|\le\xi\). If \(\widehat a\) minimizes the approximate risk, then

\[ R(\widehat a)-\min_a R(a)\le\min\{1,2\xi\}. \]

If the approximate gap between its unique minimizer and every alternative exceeds \(2\xi\), that action is also the unique true model-risk minimizer.

Proof

Add and subtract \(\sum_\omega p(\omega)\ell(a,\widehat v_\omega)\). The response term has absolute value at most \(Kd_0\). The expectation of a function in \([0,1]\) changes by at most total variation, giving the other term at most \(e\). Risks lie in \([0,1]\), so their difference is also at most one.

For a true minimizer \(a_*\),

\[ R(\widehat a)\le\widehat R(\widehat a)+\xi \le\widehat R(a_*)+\xi\le R(a_*)+2\xi. \]

The loss range supplies the cap one. Finally, for any other \(a\), subtract the two error bounds to obtain \(R(a)-R(\widehat a)\ge\widehat R(a)-\widehat R(\widehat a)-2\xi>0\).

Source relationship. [GA], “A common quantitative grounding certificate”; [MU], “A joint posterior and recipient decision certificate.” This is a specialization to a common finite candidate set and bounded loss.

The phrase “model risk” matters. The theorem cannot repair an omitted candidate, a false sensor convention, or an action outside the stated loss function. It also cannot combine a posterior bound from one history with a response bound from another. The record must bind the actual calculation and its premises.

For the noisy calibration example, use zero-one loss for selecting the target bit. Under \(P\) and report one, choosing one has risk \(1/4\), while choosing zero has risk \(3/4\). An approximation with total variation at most \(1/10\) and no response error preserves the unique decision because the gap \(1/2\) exceeds \(2/10\). Under \(P'\) the correct decision reverses. A valid error bound around the wrong prior is not a substitute for retaining the correct association.

4.2 An explanation belongs to a recipient

An artifact is not an explanation merely because its producer can interpret it. Fix a finite case set \(X\), a sender-access map \(\alpha:X\to H\), and a finite artifact catalogue \(\mathcal C\). Recipient \(i\) has a background record \(\beta_i(x)\), a demanded output \(t_i(x)\), and a fixed bounded procedure \(L_i\). A timeout, malformed artifact, wrong output, or budget overrun counts as failure.

Let \(\mathcal C(x)\) be the artifacts that succeed for every recipient in case \(x\). For an attained sender value \(h\), put

\[ \mathcal C_h=\bigcap_{x:\alpha(x)=h}\mathcal C(x). \]

Theorem 4.2: A common artifact for fixed recipients

A sender restricted to \(\alpha(x)\) can provide one exact artifact for all recipients if and only if every \(\mathcal C_h\) is nonempty. When feasible, the smallest possible number of distinct transmitted artifacts is

\[ \min\{|C|:C\subseteq\mathcal C,\ C\cap\mathcal C_h\ne\varnothing \text{ for every attained }h\}. \]

Proof

A sender seeing \(h\) must choose the same artifact for all cases in that fibre. It must therefore select a member of \(\mathcal C_h\), proving necessity. Choosing one member of each nonempty finite intersection gives a valid encoder. The image of any encoder intersects every \(\mathcal C_h\). Conversely, any catalogue meeting all those sets supplies such an encoder by choosing from the intersections. Finite minimization gives the formula.

Source relationship. [MU], “The fixed-recipient covering criterion.” The earlier designed-decoder coloring criterion is not substituted for the installed-recipient problem.

Counterexample 4.3: Individual acceptability is not a common message

Two cases have the same sender record. In one, the sole acceptable artifact is \(c_0\); in the other it is \(c_1\ne c_0\). Each case has a valid explanation if its hidden identity is known. Their intersection is empty, so the sender cannot select a valid common explanation from its actual information.

In the sensor, a sender observing \(y\) can transmit one bit to a recipient holding \(s\). The recipient's fixed XOR procedure returns \(b=y\oplus s\). The sender need not know \(b\): its message combines with the recipient's background.

A decoder that ignores this message fails where background alone cannot distinguish the target. More strings do not fix that procedure. Installed information, interpreter work, and message size are separate resources. The next chapter asks how the sender can acquire the needed information within one budget, counting every stored branch of the controller.

Source and conversion record

Source SHA-256: c2ef44767a242021cc573bbba7bb0c95df74a704c99cf992d2eff0a396838593

Unsupported prose commands stop the build. The mathematical expression sequence is checked against the source, with manuscript macros expanded for display.

Conversion records

Notation in Machine-Native Reasoning

Look up a symbol without leaving this chapter. Select text before opening help to search for it.

Search this work’s notation.

    Symbols can have different meanings in different passages. Read each result in its own context.

    Open the full notation index