# Difference between revisions of "User:Michiexile/MATH198/Lecture 10"

Michiexile (talk | contribs) |
Michiexile (talk | contribs) |
||

Line 245: | Line 245: | ||

No homework at this point. However, if you want something to think about, a few questions and exercises: |
No homework at this point. However, if you want something to think about, a few questions and exercises: |
||

− | # |
||

+ | # Prove the relations showing that <math>\leq_1</math> is indeed a partial order on <math>[U\to\Omega]</math>. |
||

+ | # Prove the universal quantifier theorem. |
||

+ | # The ''extension'' of a formula <math>\phi</math> over a list of variables <math>x</math> is the sub-object of the product of domains <math>A_1\times\dots\times A_n</math> for the variables <math>x_1,\dots,x_n=x</math> classified by the interpretation of <math>\phi</math> as a morphism <math>A_1\times\dots\times A_n\to\Omega</math>. A formula is ''true'' if it classifies the entire product. A ''sequent'', written <math>\Gamma:\phi</math> is the statement that using the set of formulae <math>\Gamma</math> we may prove <math>\phi</math>, or in other words that the intersection of the extensions of the formulae in <math>\Gamma</math> is contained in the extension of <math>\phi</math>. If a sequent <math>\Gamma:\phi</math> is true, we say that <math>\Gamma</math> ''entails'' <math>\phi</math>. (some of the questions below are almost embarrassingly immediate from the definitions given above. I include them anyway, so that a ''catalogue'' of sorts of topoidal logic inferences is included here) |
||

+ | ## Prove the following entailments: |
||

+ | ### Trivial sequent: <math>\phi:\phi</math> |
||

+ | ### True: <math>:true</math> (note that true classifies the entire object) |
||

+ | ### False: <math>false:\phi</math> (note that false classifies the global minimum in thepreorder of subobjects) |
||

+ | ## Prove the following inference rules: |
||

+ | ### Implication: <math>\Gamma,\phi:\psi</math> is equivalent to <math>\Gamma:\phi\Rightarrow\psi</math>. |
||

+ | ### Thinning: <math>\Gamma:\phi</math> implies <math>\Gamma,\psi:\phi</math> |
||

+ | ### Cut: <math>\Gamma,\psi:\phi</math> and <math>\Gamma:\psi</math> imply <math>\Gamma:\phi</math> if every variable free in <math>\psi</math> is free in <math>\Gamma</math> or in <math>\phi</math>. |
||

+ | ### Negation: <math>\Gamma, \phi: false</math> is equivalent (implications both ways) to <math>\Gamma: \neg\phi</math>. |
||

+ | ### Conjunction: <math>\Gamma:\phi</math> and <math>\Gamma:\psi</math> together are equivalent to <math>\Gamma:\phi\wedge\psi</math>. |
||

+ | ### Disjunction: <math>\Gamma,\phi:\theta</math> and <math>\Gamma,\psi:\theta</math> together imply <math>\Gamma, \phi\vee\psi: \theta</math>. |
||

+ | ### Universal: <math>\Gamma:\phi</math> is equivalent to <math>\Gamma:\forall x.\phi</math> if <math>x</math> is not free in <math>\Gamma</math>. |
||

+ | ### Existential: <math>\Gamma,\phi: \psi</math> is equivalent to <math>\Gamma,\exists x.\phi:\psi</math> if <math>x</math> is not free in <math>\Gamma</math> or <math>\psi</math>. |
||

+ | ### Equality: <math>:q=q</math>. |
||

+ | ### Biconditional: <math>(v\Rightarrow w)\wedge(w\Rightarrow v):v=w</math>. We usually write <math>v\Leftrightarrow w</math> for <math>v=w</math> if <math>v,w:A\to\Omega</math>. |
||

+ | ### Product: <math>p_1u = p_1u', p_2u = p_2u' : u = u'</math> for <math>u,u'\in A\times B</math>. |
||

+ | ### Product revisited: <math>:(p_1(s\times s')=s)\wedge(p_2(s\times s')=s')</math>. |
||

+ | ### Extensionality: <math>\forall x\in A. f(x) = g(x) : f = g</math> for <math>f,g\in[A\to B]</math>. |
||

+ | ### Comprehension: <math>(\lambda x\in A. s)x = s</math> for <math>x\in A</math>. |
||

+ | ## Prove the following results from the above entailments and inferences -- or directly from the topoidal logic mindset: |
||

+ | ### <math>:\neg(\phi\wedge\neg\phi)</math>. |
||

+ | ### <math>:\phi\Rightarrow\neg\neg\phi</math>. |
||

+ | ### <math>:\neg(\phi\vee\psi)\Rightarrow(\neg\phi\wedge\neg\psi)</math>. |
||

+ | ### <math>:(\neg\phi\wedge\neg\psi)\Rightarrow\neg(\phi\wedge\psi)</math>. |
||

+ | ### <math>:(\neg\phi\vee\neg\psi)\Rightarrow\neg(\phi\vee\psi)</math>. |
||

+ | ### <math>\phi\wedge(\theta\vee\psi)</math> is equivalent to <math>(\phi\wedge\theta)\vee(\phi\wedge\psi)</math>. |
||

+ | ### <math>\forall x.\neg\phi</math> is equivalent to <math>\neg\exists x.\phi</math>. |
||

+ | ### <math>\exists x\phi\Rightarrow\neg\forall x.\neg\phi</math>. |
||

+ | ### <math>\exists x\neg\phi\Rightarrow\neg\forall x.\phi</math>. |
||

+ | ### <math>\forall x\phi\Rightarrow\neg\exists x.\neg\phi</math>. |
||

+ | ### <math>\phi:\psi</math> implies <math>\neg\psi:\neg\phi</math>. |
||

+ | ### <math>\phi:\psi\Rightarrow\phi</math>. |
||

+ | ### <math>\phi\Rightarrow\not\phi:\not\phi</math>. |
||

+ | ### <math>\not\phi\vee\psi:\phi\Rightarrow\psi</math> (but not the converse!). |
||

+ | ### <math>\neg\neg\neg\phi</math> is equivalent to <math>\neg\phi</math>. |
||

+ | ### <math>(\phi\wedge\psi)\Rightarrow\theta</math> is equivalent to <math>\phi\Rightarrow(\psi\Rightarrow\theta)</math> (currying!). |
||

+ | ## Using the Boolean negation rule: <math>\Gamma,\neg\phi:false</math> is equivalent to <math>\Gamma:\phi</math>, prove the following additional results: |
||

+ | ### <math>\neg\neg\phi:\phi</math>. |
||

+ | ### <math>:\phi\vee\neg\phi</math>. |
||

+ | ## Show that either of the three rules above, together with the original negation rule, implies the Boolean negation rule. |
||

+ | ### The converses of the three existential/universal/negation implications above. |
||

+ | ## The restrictions introduced for the cut rule above block the deduction of an entailment <math>:\forall x.\phi\Rightarrow\exists x.\phi</math>. The issue at hand is that <math>A</math> might not actually have members; so choosing one is not a sound move. Show that this entailment can be deduced from the premise <math>\exists x\in A. x=x</math>. |
||

+ | ## Show that if we extend our ruleset by the quantifier negation rule <math>\forall x\Leftrightarrow \neg\exists x.\neg</math>, then we can derive the entailment <math>:\forall w: w=t \vee w = false</math>. From this derive <math>:\phi\vee\neg\phi</math> and hence conclude that this extension gets us Boolean logic again. |
||

+ | # A ''topology'' on a topos <math>E</math> is an arrow <math>j:\Omega\to\Omega</math> such that <math>j\circ true=true</math>, <math>j\circ j=j<math> and <math>j\circ\wedge = \wedge\circ j\times j</math>. For a subobject <math>S\subseteq A</math> with characteristic arrow <math>\chi_S:A\to\Omega</math>, we define its <math>j</math>-closure as the subobject <math>\bar S\subseteq A</math> classified by <math>j\circ\chi_S</math>. |
||

+ | ## Prove: |
||

+ | ### <math>S\subseteq\bar S</math>. |
||

+ | ### <math>\bar S = \bar{\bar S}</math>. |
||

+ | ### <math>\bar{S\cap T} = \bar S\cap\bar T</math>. |
||

+ | ### <math>S\subseteq T</math> implies <math>\bar S\subseteq\bar T</math>. |
||

+ | ### <math>\bar{f^{-1}(S)} = f^{-1}(\bar S)</math>. |
||

+ | ## We define <math>S</math> to be <math>j</math>-closed if <math>S=\bar S</math>. It is <math>j</math>-dense if <math>\bar S=A</math>. These terms are chosen due to correspondences to classical pointset topology for the topos of sheaves over some space. For a logical standpoint, it is more helpful to look at <math>j</math> as a modality operator: "''it is <math>j</math>-locally true that''" Given any <math>u:1\to\Omega</math>, prove that the following are topologies: |
||

+ | ### <math>(u\to -): \Omega\to\Omega</math> (the ''open topology'', where such a <math>u</math> in a sheaf topos ends up corresponding to an open subset of the underlying space, and the formulae picked out are true on at least all of that subset). |
||

+ | ### <math>u\vee -): \Omega\to\Omega</math> (the closed topology, where a formula is true if its disjunction with <math>u</math> is true -- corresponding to formulae holding over at least the closed set complementing the subset picked out) |
||

+ | ### <math>\neg\neg: \Omega\to\Omega</math>. This may, depending on the topos, end up being interpreted as ''true so far as global elements are concerned'', or ''not false on any open set'', or other interpretations. |
||

+ | ### <math>1_\Omega</math>. |
||

+ | ## For a topos <math>E</math> with a topology <math>j</math>, we define an object <math>A</math> to be a ''sheaf'' iff for every <math>X</math> and every <math>j</math>-dense subobject <math>S\subseteq X</math> and every <math>f:S\to A</math> there is a unique <math>g:X\to A</math> with <math>f=g\circ s</math>. In other words, <math>A</math> is an object that cannot see the difference between <math>j</math>-dense subobjects and objects. We write <math>E_j</math> for the full subcategory of <math>j</math>-sheaves. |
||

+ | ### Prove that any object is a sheaf for <math>1_\Omega</math>. |
||

+ | ### Prove that a subobject is dense for <math>\neg\neg</math> iff its negation is empty. Show that <math>true+false:1+1\to\Omega</math> is dense for this topology. Conclude that <math>1+1</math> is dense in <math>\Omega_{\neg\neg}</math> and thus that <math>E_{\neg\neg}</math> is Boolean. |

## Revision as of 18:20, 2 December 2009

IMPORTANT NOTE: THESE NOTES ARE STILL UNDER DEVELOPMENT. PLEASE WAIT UNTIL AFTER THE LECTURE WITH HANDING ANYTHING IN, OR TREATING THE NOTES AS READY TO READ.

This lecture will be shallow, and leave many things undefined, hinted at, and is mostly meant as an appetizer, enticing the audience to go forth and seek out the literature on topos theory for further studies.

## Contents

### Subobject classifier

One very useful property of the category is that the powerset of a given set is still a set; we have an internal concept of *object of all subobjects*. Certainly, for any category (small enough) , we have a contravariant functor taking an object to the set of all equivalence classes of monomorphisms into that object; with the image given by the pullback diagram

If the functor is *representable* - meaning that there is some object such that - then the theory surrounding representable functors, connected to the Yoneda lemma - give us a number of good properties.

One of them is that every representable functor has a *universal element*; a generalization of the kind of universal mapping properties we've seen in definitions over and over again during this course; all the definitions that posit the unique existence of some arrow in some diagram given all other arrows.

Thus, in a category with a representable subobject functor, we can pick a representing object , such that . Furthermore, picking a universal element corresponds to picking a subobject such that for any object and subobject , there is a unique arrow such that there is a pullback diagram

One can prove that is terminal in , and we shall call the *subobject classifier*, and this arrow *true*. The arrow is called the characteristic arrow of the subobject.

In Set, all this takes on a familiar tone: the subobject classifier is a 2-element set, with a *true* element distinguished; and a characteristic function of a subset takes on the *true* value for every element in the subset, and the other (false) value for every element not in the subset.

### Defining topoi

**Definition** A *topos* is a cartesian closed category with all finite limits and with a subobject classifier.

It is worth noting that this is a far stronger condition than anything we can even hope to fulfill for the category of Haskell types and functions. The functional programming relevance will take a back seat in this lecture, in favour of usefulness in logic and set theory replacements.

### Properties of topoi

The meat is in the properties we can prove about topoi, and in the things that turn out to be topoi.

**Theorem** Let be a topos.

- has finite colimits.

#### Power object

Since a topos is closed, we can take exponentials. Specifically, we can consider . This is an object such that . Hence, we get an internal version of the subobject functor. (pick to be the terminal object to get a sense for how global elements of correspond to subobjects of )

#### Internal logic

We can use the properties of a topos to develop a logic theory - mimicking the development of logic by considering operations on subsets in a given universe:

Classically, in Set, and predicate logic, we would say that a *predicate* is some function from a universe to a set of truth values. So a predicate takes some sort of objects, and returns either True or False.

Furthermore, we allow the definition of sets using predicates:

Looking back, though, there is no essential difference between this, and defining the predicate as the subset of the universe directly; the predicate-as-function appears, then, as the characteristic function of the subset. And types are added as easily - we specify each variable, each object, to have a set it belongs to.

This way, predicates really are subsets. Type annotations decide which set the predicate lives in. And we have everything set up in a way that opens up for the topos language above.

We'd define, for predicates acting on the same type:

We could then start to define primitive logic connectives as set operations; the intersection of two sets is the set on which **both** the corresponding predicates hold true, so . Similarily, the union of two sets is the set on which either of the corresponding predicates holds true, so . The complement of a set, in the universe, is the negation of the predicate, and all other propositional connectives (implication, equivalence, ...) can be built with conjunction (and), disjunction (or) and negation (not).

So we can mimic all these in a given topos:

We say that a *universe* is just an object in a given topos. (Note that by admitting several universes, we arrive at a *typed* predicate logic, with basically no extra work.)

A *predicate* is a subobject of the universe.

We can now proceed to define all the familiar logic connectives one by one, using the topos setting. While doing this, we shall introduce the notation for the morphism that takes on the value *true* on all of A. We note that with this convention, , the characteristic morphism of a subobject, is the arrow such that .

**Conjunction**:
Given predicates , we need to define the *conjunction* as some that corresponds to both and simultaneously.

We may define , a subobject of . Being a subobject, this has a characteristic arrow , that we call the *conjunction arrow*.

Now, we may define for subobjects - and we take their composition to be the characteristic arrow of the subobject .

And, indeed, this results in a topoidal version of intersection of subobjects.

**Implication**:
Next we define to be the equalizer of and . Given , we write if factors through .

Using the definition of an equalizer we arrive at iff . From this, we can deduce

- If and then .
- If and then

and thus, is a partial order on . Intuitively, if is at least as true as .

This relation corresponds to inclusion on subobjects. Note that , given from the equalizer, gives us as a *relation* on - a subobject of . Specifically, it has a classifying arrow . We write . And for subobjects , we write for the subobject classified by .

It turns out, without much work, that this behaves just like classical implication in its relationship to .

**Membership**:
We can internalize the notion of *membership* as a subobject , and thus get the membership relation from a pullback:

For elements , we write for . Yielding a subset of the product , this is readily interpretable as a relation relating things in with subsets of , so that for any we can answer whether . Both notations indicate .

**Universal quantification**:
For any object , the maximal subobject of is itself, embedded with into itself. There is an arrow represents this subobject. Being a map from , it is specifically monic, so it has a classifying arrow that takes a given subobject of to precisely if it is in fact the maximal subobject.

Now, with a relation , we define by the following pullback:

where comes from the universal property of the exponential.

**Theorem** For any monic, iff .

This theorem tells us that the subobject given by is the largest subobject of that is related by to all of .

**Falsum**:
We can define the *false* truth value using these tools as . This might be familiar to the more advanced Haskell type hackers - as the type

```
x :: forall a. a
```

which has to be able to give us an element of any type, regardless of the type itself. And in Haskell, the only element that inhabits all types is `undefined`

.

From a logical perspective, we use a few basic inference rules:

and connect them up to derive

for any not involving - and we can always adjust any to avoid .

Thus, the formula has the property that it implies everything - and thus is a good candidate for the *false* truth value; since the inference

is the defining introduction rule for false.

**Negation**:
We define negation the same way as in classical logic: .

**Disjunction**:
We can define

Note that this definition uses one of our primary inference rules:

as the defining property for the disjunction, and we may derive any properties we like from these.

**Existential quantifier**:
Finally, the existential quantifier is derived similarly to the disjunction - by figuring out a rule we want it to obey, and using that as a definition for it:

Here, the rule we use as defining property is

Before we leave this exploration of logic, some properties worth knowing about: While we can prove and , we cannot, in just topos logic, prove things like

nor any statements like

We can, though, prove

If we include, extra, an additional inference rule (called the *Boolean negation rule*) given by

then suddenly we're back in classical logic, and can prove and .

#### Examples: Sheaves, topology and time sheaves

The first interesting example of a topos is the category of (small enough) sets; in some sense clear already since we've been modelling our axioms and workflows pretty closely on the theory of sets.

Generating logic and set theory in the topos of sets, we get a theory that captures several properties of *intuitionistic logic*; such as the lack of Boolean negation, of exclusion of the third, and of double negation rules.

For the more interesting examples, however, we shall introduce the concepts of *topology* and of *sheaf*:

**Definition** A (set-valued) *presheaf* on a category is a contravariant functor .

Presheaves occur all over the place in geometry and topology - and occasionally in computer science too: There is a construction in which a functor for a discrete small category identified with its underlying set of objects as a set, corresponds to the data type of *bags* of elements from - for , the image denotes the multiplicity of in the bag.

**Theorem** The category of all presheaves (with natural transformations as the morphisms) on a category form a topos.

**Example** Pick a category on the shape

A contravariant functor on this category is given by a pair of sets and a pair of function . Identities are sent to identities.

The category of presheaves on this category, thus, is the category of graphs. Thus graphs form a topos.

The subobject classifier in the category of graphs is a graph with two nodes: in and out, and five arrows:

Now, given a subgraph , we define a function by sending nodes to in or out dependent on their membership. For an arrow , we send it to all if the arrow is in , and otherwise we send it to both/source/target/neither according to where its source and target reside.

To really get into sheaves, though, we introduce more structure - specifically, we define what we mean by a *topology*:

**Definition** Suppose is a partially ordered set. We call a *complete Heyting algebra* if

- There is a top element such that .
- Any two elements have an infimum (greatest lower bound) .
- Every subset has a supremum (least upper bound) .

Note that for the partial order by inclusion of a family of subsets of a given set, being a complete Heyting algebra is the same as being a topology in the classical sense - you can take finite unions and any intersections of open sets and still get an open set.

If is a subset with supremum , and is a presheaf, we get functions from functoriality. We can summarize all these into .

Furthermore, functoriality gives us families of functions and . These can be collected into and .

**Definition** A presheaf on a Heyting algebra is called a *sheaf* if it satisfies:

implies that

is an equalizer. If you have seen sheaves before, you may recognize this as the covering axiom.

In other words, is a sheaf if whenever and , then there is some such that .

**Theorem** The category of sheaves on a Heyting algebra is a topos.

For context, we can think of sheaves over Heyting algebras as sets in a logic with an expanded notion of truth. Our Heyting algebra is the collection of truth values, and the sheaves are the fuzzy sets with fuzziness introduced by the Heyting algebra.

Recalling that subsets and predicates are viewed as the same thing, we can view the set as the part of the fuzzy set that is at least true.

As it turns out, to really make sense of this approach, we realize that *equality* is a predicate as well - and thus can hold or not depending on the truth value we use.

**Definition** Let be a complete Heyting algebra. A *-valued set* is a pair of a set and a function . A *category of fuzzy sets* is a category of -valued sets. A morphism of -valued sets is a function such that .

From these definitions emerges a fuzzy set theory where all components of it being a kind of set theory emerges from the topoidal approach above. Thus, say, subsets in a fuzzy sense are just monics, thus are injective on the set part, and such that the valuation, on the image of the injection, increases from the previous valuation: if and .

To get to topoi, though, there are a few matters we need to consider. First, we may well have several versions of the empty set - either a bona fide empty set, or just a set where every element is never actually there. This issue is minor. Much more significant though, is that while we can easily make give rise to a presheaf, by defining

this definition will not yield a sheaf. The reason for this boils down to . We can fix this, though, by adjoining another element - - to giving . The new element is imbued with two properties: it is smaller, in , than any other element, and it is mapped, by to .

**Theorem** The construction above gives a fuzzy set the structure of a sheaf on the augmented Heyting algebra.

**Corollary** The category of fuzzy sets for a Heyting algebra forms a topos.

**Final note** While this construction allows us to make *membership* a fuzzy concept, we're not really done fuzzy-izing sets. There are two fundamental predicates on sets: equality and membership. While fuzzy set theory, classically, only allows us to make one of these fuzzy, topos theory allows us - rather easily - to make both these predicates fuzzy. Not only that, but membership reduces - with the power object construction - to equality testing, by which the fuzzy set theory ends up somewhat inconsistent in its treatment of the predicates.

### Literature

At this point, I would warmly recommend the interested reader to pick up one, or more, of:

- Steve Awodey: Category Theory
- Michael Barr & Charles Wells: Categories for Computing Science
- Colin McLarty: Elementary Categories, Elementary Toposes

or for more chewy books

- Peter T. Johnstone: Sketches of an Elephant: a Topos Theory compendium
- Michael Barr & Charles Wells: Toposes, Triples and Theories

### Exercises

No homework at this point. However, if you want something to think about, a few questions and exercises:

- Prove the relations showing that is indeed a partial order on .
- Prove the universal quantifier theorem.
- The
*extension*of a formula over a list of variables is the sub-object of the product of domains for the variables classified by the interpretation of as a morphism . A formula is*true*if it classifies the entire product. A*sequent*, written is the statement that using the set of formulae we may prove , or in other words that the intersection of the extensions of the formulae in is contained in the extension of . If a sequent is true, we say that*entails*. (some of the questions below are almost embarrassingly immediate from the definitions given above. I include them anyway, so that a*catalogue*of sorts of topoidal logic inferences is included here)- Prove the following entailments:
- Trivial sequent:
- True: (note that true classifies the entire object)
- False: (note that false classifies the global minimum in thepreorder of subobjects)

- Prove the following inference rules:
- Implication: is equivalent to .
- Thinning: implies
- Cut: and imply if every variable free in is free in or in .
- Negation: is equivalent (implications both ways) to .
- Conjunction: and together are equivalent to .
- Disjunction: and together imply .
- Universal: is equivalent to if is not free in .
- Existential: is equivalent to if is not free in or .
- Equality: .
- Biconditional: . We usually write for if .
- Product: for .
- Product revisited: .
- Extensionality: for .
- Comprehension: for .

- Prove the following results from the above entailments and inferences -- or directly from the topoidal logic mindset:
- .
- .
- .
- .
- .
- is equivalent to .
- is equivalent to .
- .
- .
- .
- implies .
- .
- .
- (but not the converse!).
- is equivalent to .
- is equivalent to (currying!).

- Using the Boolean negation rule: is equivalent to , prove the following additional results:
- .
- .

- Show that either of the three rules above, together with the original negation rule, implies the Boolean negation rule.
- The converses of the three existential/universal/negation implications above.

- The restrictions introduced for the cut rule above block the deduction of an entailment . The issue at hand is that might not actually have members; so choosing one is not a sound move. Show that this entailment can be deduced from the premise .
- Show that if we extend our ruleset by the quantifier negation rule , then we can derive the entailment . From this derive and hence conclude that this extension gets us Boolean logic again.

- Prove the following entailments:
- A
*topology*on a topos is an arrow such that , . For a subobject with characteristic arrow , we define its -closure as the subobject classified by .- Prove:
- .
- .
- .
- implies .
- .

- We define to be -closed if . It is -dense if . These terms are chosen due to correspondences to classical pointset topology for the topos of sheaves over some space. For a logical standpoint, it is more helpful to look at as a modality operator: "
*it is -locally true that*" Given any , prove that the following are topologies:- (the
*open topology*, where such a in a sheaf topos ends up corresponding to an open subset of the underlying space, and the formulae picked out are true on at least all of that subset). - (the closed topology, where a formula is true if its disjunction with is true -- corresponding to formulae holding over at least the closed set complementing the subset picked out)
- . This may, depending on the topos, end up being interpreted as
*true so far as global elements are concerned*, or*not false on any open set*, or other interpretations. - .

- (the
- For a topos with a topology , we define an object to be a
*sheaf*iff for every and every -dense subobject and every there is a unique with . In other words, is an object that cannot see the difference between -dense subobjects and objects. We write for the full subcategory of -sheaves.- Prove that any object is a sheaf for .
- Prove that a subobject is dense for iff its negation is empty. Show that is dense for this topology. Conclude that is dense in and thus that is Boolean.

- Prove: