2026-10-17-post-companion-formalization
2026-10-17 · project deference · path prompts/2026-10-17-post-companion-formalization
Verdict THE-POSTS-FORMAL-CONTENT-AS-ONE-LEAN-FILE-WITH-A-COMPANION-PAGE — Theorem 1, Theorem 2(a)(b)(c), Theorem 3(a)(b) and the Corollary (Exploration) with its ε_K → 0 specialization stated in the post's notation and proved, every hypothesis package inhabited; Unbiasedness From Feedback a named hypothesis, not derived; limsup in the eventual form; Corollary (b) needs the estimate bound U_k a' ≤ 1, added as a hypothesis and declared
Prompt prompts/2026-10-17-post-companion-formalization/PROMPT.md
Round: companion Lean formalization of "Deconfusing Corrigibility"
GOAL
Produce a self-contained Lean development that states and proves, in the post's own notation and numbering, the formal content of the Alignment Forum post "Deconfusing Corrigibility" (the post text is attached to this dispatch; the formal content is the sections "Definitions" through "Learning with logical induction"). The result must be ONE linkable place — a single wiki page, wiki/Deconfusing-Corrigibility-Companion.md (provisional name) — that a reader arriving from the post can open and see, presentably and without hunting, exactly which Lean declaration corresponds to each definition, theorem part, and corollary part in the post, in the post's order and numbering, with each statement rendered in the post's notation alongside its Lean name and a link to the source line. The post will link to that page as its formal companion, so the correspondence has to be clear and exact: same hypotheses, same conclusions, same parameter names (δ, λ, τ, κ, θ, ε_K, R_K, T_K, t_k), with every notational difference between post and Lean stated on the page itself. The Lean file is the record; the page is how the record is read.
This round has write scope for: a new file lean/Workspace/Deference/Contrib/DeconfusingCorrigibility.lean (provisional), a sibling witness file if you separate witnesses, the wiki page above, the round's own prompts/<date>-post-companion-formalization/ directory (PROMPT.md verbatim, REPORT.md), and one PRIORITIES.md item within the scope stated below. It does NOT modify any existing Lean file, any specification-namespace file, PostStatement.lean, or ThinLegitimacy.lean.
THE POST'S FORMAL OBJECTS, TO BE MATCHED EXACTLY (names provisional)
Definitions.
- A type of histories H. A legitimacy predicate Legit : H → Prop, taken as an abstract input; assume nothing about its content beyond what the theorems use. A violation count N : H → ℕ. An evaluation V : H → ℝ with the post's bounds: Legit h → 0 ≤ V h ∧ V h ≤ 1, and ¬Legit h → -δ ≤ V h ∧ V h < 0, for a parameter δ > 0. A weight λ > 1 + δ. The score S h = V h - λ * N h.
Theorem 1 (three ranges). For every h:
- N h ≥ 1 → S h ≤ 1 - λ, and 1 - λ < -δ;
- N h = 0 ∧ ¬Legit h → -δ ≤ S h ∧ S h < 0;
- N h = 0 ∧ Legit h → 0 ≤ S h ∧ S h ≤ 1.
Single-decision setting. A state space Ω with a credence μ (reuse whatever structure for credences the existing Contrib files already use; do not introduce a new one if one exists). Actions a with continuation histories h a ω. U a = E_μ[S (h a ·)]. v a = P_μ[N (h a ·) ≥ 1]. An authority-respecting alternative a* to a: ∀ ω, N (h a* ω) = 0. Asking cost κ = E_μ[(S (h a ·) - S (h a* ·)) · 1{N (h a ·) = 0}]. Define τ = (1 + δ)/λ.
Theorem 2.
- (a) v a = 1 → U a* - U a ≥ λ - (1 + δ), and λ - (1 + δ) > 0.
- (b) U a* - U a ≥ (λ - (1 + δ)) · v a - κ; hence U a* > U a whenever v a > κ / (λ - (1 + δ)).
- (c) v a > (1 - U a*)/λ → U a* > U a; and (1 - U a*)/λ ≤ τ.
Sequential setting. Decisions k : ℕ. Realized scores S_k = V_k - λ N_k with V_k ≤ 1 and N_k : ℕ. Per-decision estimates U_k : Action → ℝ, chosen action a_k, an authority-respecting alternative a_k* available at each k with -δ ≤ U_k a_k* ≤ 1 (this is a hypothesis). Tolerance t_k = (1 - U_k a_k*)/λ. Realized rate R_K = (1/K) Σ_{k<K} N_k. Average tolerance T_K = (1/K) Σ_{k<K} t_k. Maximization: ∀ k, ∀ a' available at k, U_k a' ≤ U_k a_k. Unbiasedness From Feedback enters as a NAMED HYPOTHESIS on the estimate/score sequences: ∀ γ > 0, ∃ N₀, ∀ K ≥ N₀, (1/K) Σ_{k<K} (U_k a_k - S_k) ≤ γ. It is not to be derived from LogicalInduction in this round and must not appear as an axiom. The connection to Theorem 4.8.16 of the Logical Induction paper is documentation only: a pointer, on the wiki page and in the Lean docstring, to the existing pin thm:wubexp / LogicalInduction.lic_not_frequently_positive_feedback_return in the def-lattice ledger.
Theorem 3. Under maximization and Unbiasedness From Feedback:
- (a) Authority. limsup_K (R_K - T_K) ≤ 0; in particular limsup_K R_K ≤ τ.
- (b) Best Interests. For any sequence a'_k with a'_k available at k: limsup_K (1/K) Σ_{k<K} (U_k a'_k - S_k) ≤ 0.
State limsup either via Mathlib's Filter.limsup or in the equivalent form ∀ γ > 0, ∃ N₀, ∀ K ≥ N₀, (…) ≤ γ; use one form throughout, and say which in the report and on the wiki page.
Corollary (Exploration). With 0 ≤ θ < 1, an exploration set E ⊆ ℕ, ε_K = |E ∩ {0,…,K-1}| / K, maximization on k ∉ E, and on k ∈ E the hypothesis U_k a_k ≥ -δ - λ θ (this is what the post's "estimated violation count ≤ θ plus linearity of the inductor's expectation" yields; take it as the hypothesis directly and state on the wiki page that the post derives it from linearity):
- (a) limsup_K (R_K - T_K - ε_K (τ + θ)) ≤ 0;
- (b) for any available a'_k: limsup_K ((1/K) Σ_{k<K} (U_k a'_k - S_k) - ε_K λ (τ + θ)) ≤ 0;
- and the specialization: if ε_K → 0, both conclusions of Theorem 3 hold unchanged.
RELATIONSHIP TO EXISTING WORK
PostStatement.lean (round 2026-10-01) encodes an earlier statement with parameters ϖ, D, w and a value range [0, D]. KernelExtension.lean has realized_rate / exploration_rate in an expected-violation, weighted form. Do not modify or re-prove those. On the wiki page, in a short final section, state the mapping where one exists (ϖ ↔ λ; the [0, D] range vs the post's [-δ, 1] with its legitimacy floor; expected vs realized counts) and where the new statements differ. If a new theorem is a strict specialization or generalization of an existing registered one, say which; do not claim equivalence without a proof.
REQUIREMENTS (AGENTS.md is binding; these are the points most likely to bite)
- Sorry-free. #print axioms on every declaration audits to [propext, Classical.choice, Quot.sound]. External facts (Unbiasedness From Feedback, linearity) are hypotheses, never axioms.
- Every theorem ships a nonvacuity witness: a concrete instance inhabiting its full hypothesis package, registered so CI can see it. For Theorem 2: an explicit finite Ω, μ, actions, and a*. For Theorem 3 and the Corollary: an explicit sequence satisfying maximization and Unbiasedness From Feedback (a trivial one is fine, e.g. estimates equal to realized scores, with a_k* on every menu).
- Names provisional; list every new name in the report and in the PR's "new names introduced" field.
- The wiki page is written in the verification register: a table or ordered list, post item → Lean declaration → class at merge (lean-proved on registration), each post statement rendered in the post's notation, each Lean name linked to its source line, every notational difference stated on the page. No inflation, no summary of a summary. A reader must be able to go from any theorem number in the post to its Lean declaration in one click and see that they say the same thing.
- REPORT.md contains: the theorem-by-theorem mapping; the limsup form chosen; every deviation from this prompt with its reason; and a "What this does not establish" section stating at minimum that Unbiasedness From Feedback is assumed rather than derived from logical induction, that the Corollary's exploration hypothesis stands in for linearity, that nothing is assumed about Legit beyond the bounds, and that U_k a_k* ∈ [-δ, 1] is a hypothesis.
- File one PRIORITIES.md item within scope for the follow-up this round does not do: deriving the Unbiasedness-From-Feedback hypothesis for the score sequence from LogicalInduction (Theorem 4.8.16 instantiated with uniform weighting, with the feedback-enters-the-deductive-process and latency assumptions made explicit).
- The full existing build stays green and the exact #print axioms output of every pre-existing declaration is unchanged.
- Register the Lean headline at merge (kind: lean, class lean-proved) in the same PR, per the "A Lean headline registers at merge" rule.
ACCEPTANCE CHECK
lake build succeeds; the axiom audit passes; the witness declarations typecheck; the wiki page names a declaration for Theorem 1, Theorem 2(a)(b)(c), Theorem 3(a)(b), and Corollary (a)(b) plus the ε_K → 0 specialization, each of which elaborates to the post's statement up to the notational choices declared on the page.
OUT OF SCOPE
Any change to Legit's content, to ThinLegitimacy, to the LI formalization, to PostStatement.lean, or to specification files. Any claim that the post's Theorem 3 is the repo's existing realized_rate result. Any derivation of Unbiasedness From Feedback from LogicalInduction.
Report prompts/2026-10-17-post-companion-formalization/REPORT.md
Report — 2026-10-17-post-companion-formalization
| Prompt author | the maintainer (PROMPT.md, verbatim) |
| Executor | Claude Fable 5.1 (Anthropic), in Claude Code |
| Lean | lean/Workspace/Deference/Contrib/DeconfusingCorrigibility.lean (one file; witnesses in its Witness namespace) |
| Wiki | wiki/Deconfusing-Corrigibility-Companion.md |
| Registrations | deconfusing.* in projects/deference/CLAIMS.md, against item 107 |
| Filed | PRIORITIES.md item 111 |
| Date | 2026-10-17 |
Verdict. THE-POSTS-FORMAL-CONTENT-AS-ONE-LEAN-FILE-WITH-A-COMPANION-PAGE — Theorem 1, Theorem 2(a)(b)(c), Theorem 3(a)(b) and the Corollary (Exploration) with its ε_K → 0 specialization stated in the post's notation and proved, every hypothesis package inhabited; Unbiasedness From Feedback a named hypothesis, not derived; limsup in the eventual form; Corollary (b) needs the estimate bound U_k a' ≤ 1, added as a hypothesis and declared
Depends on 2026-09-15-li-corrigibility: its finite credence LICorrigibility.expectR is reused as a definition; no result of that round is taken as a hypothesis.
The post's formal content — Definitions, Theorem 1, the single-decision setting, Theorem 2, the sequential setting, Theorem 3, the Corollary (Exploration) with its ε_K → 0 specialization — is stated in the post's notation and proved, with every hypothesis package inhabited. Unbiasedness From Feedback is a named hypothesis. The wiki page maps each post item to its declaration and source line and states every notational difference.
Mapping
All names are in Workspace.Deference.Contrib.DeconfusingCorrigibility.
| post | Lean |
|---|---|
δ > 0, λ > 1 + δ, τ = (1 + δ)/λ | Params (δ, lam, δ_pos, lam_gt), Params.τ |
H, Legit, N, V with the two bounds, S h = V h − λ N h | Scoring H (Legit, N, V, V_legit, V_illegit), Scoring.S |
| Theorem 1, three ranges and the gap | Scoring.theorem1_violated, theorem1_gap, theorem1_illegitimate, theorem1_legitimate; bundled as Scoring.theorem1 |
Ω, μ, h a ω, U, v, authority-respecting, κ | Decision H Ω A (μ, μ_nonneg, μ_sum, hist), Decision.U, Decision.v, Decision.Respects, Decision.κ |
| Theorem 2(a) | Decision.theorem2a; margin Decision.theorem2a_pos |
| Theorem 2(b) | Decision.theorem2b; consequence Decision.theorem2b_strict |
| Theorem 2(c) | Decision.theorem2c; threshold Decision.theorem2c_tau |
V_k ≤ 1, N_k, S_k, U_k, a_k, a_k* with −δ ≤ U_k a_k* ≤ 1, t_k, R_K, T_K, maximization | Sequential A (V, N, V_le_one, avail, U, a, astar, astar_avail, astar_range), Sequential.S, t, R, T, excess, Maximizes |
| Unbiasedness From Feedback | Sequential.UnbiasedFromFeedback (hypothesis) |
Theorem 3(a), and limsup R_K ≤ τ | Sequential.theorem3a, Sequential.theorem3a_rate |
| Theorem 3(b) | Sequential.theorem3b |
θ, E, ε_K, the exploration hypotheses | Exploration A (θ, θ_nonneg, θ_lt_one, E, maximizes_off, explore_bound, U_le_one), Exploration.ε |
| Corollary (a), (b), specialization | Exploration.corollary_a, corollary_b, corollary_limit |
The credence is the workspace's LICorrigibility.expectR (finite state space, μ ≥ 0 summing to one), per the dispatch; no new credence structure was introduced. Linearity of that expectation is proved in the file (expectR_mono, expectR_sub, expectR_const_mul, expectR_const).
The limsup form. Every limsup is the eventual form, throughout: LimsupLE x c := ∀ γ > 0, ∃ N₀, ∀ K ≥ N₀, x K ≤ c + γ. Filter.limsup is not used. ε_K → 0 is LimsupLE X.ε 0. Unbiasedness From Feedback is stated exactly as the dispatch gives it (… ≤ γ); Sequential.limsup_of_unbiased is the one-line bridge to LimsupLE.
Witnesses. Witness.scoring (histories Bool × ℕ, δ = 1, λ = 3) inhabits Theorem 1 in each range (theorem1_instance). Witness.decision (a fair coin on Bool; actions respecting, risky, violating) inhabits every package of Theorem 2: theorem2a_package (v violating = 1), theorem2b_package (v risky = 1/2 > 0 = κ/(λ − (1 + δ))), theorem2c_package (1/2 > 1/6); conclusions on the instance theorem2_instance, theorem2b_instance. Witness.sequential (estimates equal to realized scores, a_k* on every menu) inhabits Theorem 3 (theorem3_instance). Witness.exploration (the same sequence with E = {0}, θ = 1/10) inhabits the Corollary with exploration occurring and ε_K ≤ 1/K → 0 (corollary_instance).
The connection to Logical Induction. Documentation only, as dispatched: the file header, the docstring of Sequential.UnbiasedFromFeedback and the wiki page point at thm:wubexp / LogicalInduction.lic_not_frequently_positive_feedback_return, row 4.8.16 of projects/deference/faf-cleanroom-2026-10-02/packages/def-lattice/def-lattice-report.md. One proved link, not requested by the dispatch: Sequential.unbiased_of_weighted — the workspace's weighted absolute-value predicate BRIAFollowup.UnbiasedFromFeedback at the uniform weighting, for every γ > 0 from some N₀, implies the post's form. It cites nothing from LogicalInduction.
Verification
Run on 2026-10-17 in a second session (Claude Fable 5.1, Anthropic, in Claude Code) on the maintainer's machine, on the round branch; the first session's file did not elaborate (see Proof repairs below). Toolchain leanprover/lean4:v4.31.0; Mathlib at the manifest's revision fabf563a, reused from a sibling checkout's cache rather than fetched with lake exe cache get (same revision, same toolchain); agentFoundations cloned at the pinned 307119d0 and built.
Proof repairs, statements unchanged. Sixteen hypothesis names written hλ were two tokens to Lean (h followed by the reserved word λ), which produced unsolved goals and unexpected token 'λ' at every use; renamed hlam. In LimsupLE.mul_const, the C = 0 branch's rw [mul_zero] did not see through the beta-redex (fun K => y K * 0) K; a show line reduces the goal first. The diff is seventeen lines, all inside proofs; no signature, hypothesis, or conclusion changed. Committed as eb3556e4038d3c15568fcd206c4e80ad74a47ba9, the commit the companion page's links are pinned to.
**lake build** from lean/ (through the machine's serialized build wrapper, which only sets LEAN_NUM_THREADS):
ℹ [3775/3775] Built Workspace.Deference.Contrib.DeconfusingCorrigibility (15s)
Build completed successfully (3775 jobs).
and the full library afterwards: Build completed successfully (4086 jobs). The new file elaborates with no warnings (lake env lean on it alone: exit 0, 65 #print axioms results, nothing else printed).
**python3 ../tests/audit_axioms.py** from lean/:
AXIOM AUDIT: 2436 results across 99 files, all within ['Classical.choice', 'Quot.sound', 'propext']
65 of the 2436 results are this file's; the other 2371, across the other 98 files, are the pre-existing declarations. Their #print axioms output is unchanged: no pre-existing Lean source differs from origin/main (the diff of lean/ against it is this file and the Contrib PROVENANCE.md row), the dependency manifest is unchanged, and the audit re-elaborates each file from source, so each pre-existing file's output is the same function of the same input. No separate baseline run on origin/main was made in this session.
**python3 tests/run.py** at the root: exit 0 —
LEAN SORRY GATE: clean over 99 files
LEAN AXIOM DISCIPLINE: every file carries `#print axioms`
UNTRACKED POINTERS: clean — 313 round-record path(s) and 872 resolving citation(s) are in the repository, not merely on this disk
WORKSPACE STATE: valid — 5 projects, 157 modern claims, 1 foundations, 180 foundation claims, 119 rounds, 52 terms, 120 priorities, 10 interface objects
WIKI LINKS: clean over 31 page(s) (links resolve; repository links are commit-pinned)
WIKI STATE BINDINGS: clean over 33 page(s); 3 binding(s) verified against the state emission
GATE COVERAGE: 11 gate scripts, all invoked (5 self-test only — no local form)
LEAN BUILD SKIPPED: set WORKSPACE_LEAN=1 to run `lake build`
One local caveat: the untracked-pointers gate fails on a working tree that carries a lean/.lake build directory, because DECISIONS.md cites that path and the gate requires every cited path that exists on disk to be tracked. The run above was made with that directory set aside; CI never has one. python3 -m checkers.run: exit 0, 52 entries in the deference registry, the twelve deconfusing.* entries adjudicated by the Lean gate. python3 -m checkers.wiki_links: clean over 31 pages after the re-render. python3 -m checkers.workspace_state --write-handoff then --check: clean.
The companion page's links. Every link into the repository on wiki/Deconfusing-Corrigibility-Companion.md is pinned to eb3556e4, and each of the 47 source links to the Lean file points at the line of the declaration named in its row, recomputed from the committed file (the show line moved everything after line 358 down by one). One link changed target: the Theorem 2 row of the witness table now points at the conclusion declaration Witness.theorem2_instance, as the other three witness rows already did, where it had pointed at the instance Witness.decision.
Deviations and corrections to the prompt
- The post text was not attached. The dispatch says the post text is attached; nothing arrived with it, and the post is not in the repository. The formalization follows the dispatch's own section "The post's formal objects, to be matched exactly", which states every definition, theorem part and corollary part. Where the post's exact wording matters (the hypothesis of Corollary (b), the range of the estimates), this report says what was assumed.
- Corollary (b) carries one hypothesis the dispatch did not list:
U_k a' ≤ 1for everya'available atk(Exploration.U_le_one). The dispatched statement is false without it — on an exploration stepk ∈ Enothing relatesU_k a'_ktoU_k a_k, so a single exploration step withU_k a'_klarge violates the bound. The post's estimates are an inductor's expectations of a score at most1, which supplies the bound there; here it is a field ofExploration, stated on the wiki page. - Theorem 2(c), first clause, is stated without the authority-respecting hypothesis.
v a > (1 − U a*)/λ → U a* > U aholds for anya*(fromU a ≤ 1 − λ v a), soDecision.theorem2cdoes not assumeRespects a*;Decision.theorem2c_taudoes. The post's statement is the instance with the hypothesis present. - **
λislam.**λis a reserved word in Lean. Every other parameter keeps its name. - The exploration set is a Boolean predicate.
E : ℕ → Boolwithk ∈ EasE k = true, rather thanSet ℕwith a decidability instance;ε_Kis the filtered cardinality overK. - **Averages are
(Σ …) / (K : ℝ)**, not(1/K) * Σ …; equal forK ≥ 1, and0atK = 0, which no eventual statement sees. - The registrations answer item 107, the filed item for the theorems behind the maintainer's posts (its consumed by names "any round extending the headline"). No item names "Deconfusing Corrigibility", and the dispatch granted one filing — the follow-up, item 111 — so none was filed for the registration itself. The maintainer may re-point
answers_item(listed below). - One lemma beyond the dispatch,
Sequential.unbiased_of_weighted, importsBRIAFollowupfor its hypothesis's predicate. It adds a hypothesis-to-hypothesis implication and no claim about Logical Induction. - The def-lattice pointer. The dispatch says the pin lives "in the def-lattice ledger"; the row is in that package's report,
def-lattice-report.md, row 4.8.16, and is cited by that path. - The session could not fetch the Mathlib cache (the hosts
release.lean-lang.org,mathlib4.lakecache.organdlakecache.blob.core.windows.netare denied by the environment's network policy), so the toolchain was installed from the GitHub release and Mathlib was built from source in the session. The verification section records what ran. CI runs the same gates from the cache. - One number outside the write scope changed.
wiki/Deference.mdbinds the deference registry's entry count to the state emission; registering twelve entries moved it, andcheckers/wiki_state_bindings.pyfails until the bound value matches. The value was updated and nothing else on that page was touched (AGENTS.md§14: a contained fix belongs to the round that hits it).
What this does not establish
- Unbiasedness From Feedback is assumed, not derived.
Sequential.UnbiasedFromFeedbackis a hypothesis of Theorem 3 and the Corollary. Nothing here instantiates Theorem 4.8.16 of the Logical Induction paper, and nothing citesLogicalInduction.lic_not_frequently_positive_feedback_return; the derivation is itemunbiased_of_weightedrelates two hypotheses; it establishes neither.
- The Corollary's exploration hypothesis stands in for linearity.
U_k a_k ≥ −δ − λ θonk ∈ Eis taken directly (Exploration.explore_bound); the post's derivation from an estimated violation count at mostθand linearity of the inductor's expectation is not formalized. LikewiseU_k a' ≤ 1(U_le_one) is a hypothesis, not a consequence of the estimates being expectations. - **Nothing is assumed about
Legitbeyond the bounds.**Legit : H → Propis an abstract field; the theorems use onlyV_legitandV_illegit. No connection toThinLegitimacy,Legitimacy.leanor the authority module is stated or claimed. - **
U_k a_k* ∈ [−δ, 1]is a hypothesis** (Sequential.astar_range), as isV_k ≤ 1,a_k*available at everyk, and maximization. None is derived from a model of the agent. - **The post's Theorem 3 is not the repository's
realized_rate**, and no equivalence or specialization relation toKernelExtension.realized_rate,exploration_rateorPostStatement.post_theoremis claimed; the wiki page's final section states the correspondences of form and the differences of object (expected against realized counts, weighted finite-Kagainst uniform limsup). - **Equivalence of
LimsupLEwithFilter.limsup** is not proved; the eventual form is the statement of record. - The witnesses are trivial where the dispatch allowed it: the sequential witnesses have estimates equal to realized scores, so Unbiasedness From Feedback holds with every excess zero. They show the packages are consistent, not that they are satisfiable by a learner.
New names introduced (provisional)
File DeconfusingCorrigibility.lean; namespace Workspace.Deference.Contrib.DeconfusingCorrigibility. Structures Params, Scoring, Decision, Sequential, Exploration and their fields as listed in the mapping; Params.τ, Params.lam_pos, lam_ne, gap_pos, τ_pos, lam_mul_τ; div_le_div_same_denom; Scoring.S, V_le_one, neg_δ_le_V, S_le_one, S_eq_of_N_zero, neg_δ_le_S_of_N_zero, theorem1_violated, theorem1_gap, theorem1_illegitimate, theorem1_legitimate, theorem1; ind, ind_pos, ind_neg; expectR_mono, expectR_sub, expectR_const_mul, expectR_const; Decision.U, v, Respects, κ, S_le_one_sub, U_le, neg_δ_le_U, theorem2a, theorem2a_pos, theorem2b, theorem2b_strict, theorem2c, theorem2c_tau; LimsupLE and LimsupLE.of_le, add, add_const, mul_const; Sequential.S, t, R, T, excess, Maximizes, UnbiasedFromFeedback, unbiased_of_weighted, limsup_of_unbiased, limsup_excess_div, N_sub_t_le, t_le_τ, T_le_τ, rate_le_excess, excess_le_excess, theorem3a, theorem3a_rate, theorem3b; Exploration.ε, N_sub_t_le_expl, excess_pt, rate_le_expl, excess_le_expl, corollary_a, corollary_b, corollary_limit; Witness.scoring, theorem1_instance, Act, hist, decision, respects, v_violating, v_risky, U_respecting, κ_risky, theorem2a_package, theorem2b_package, theorem2c_package, theorem2_instance, theorem2b_instance, sequential, sequential_maximizes, sequential_excess, sequential_unbiased, theorem3_instance, exploration, exploration_E, exploration_explores, exploration_unbiased, exploration_ε_le, exploration_ε_limsup, corollary_instance. Claim identifiers deconfusing.theorem1, theorem2a, theorem2b, theorem2b-strict, theorem2c, theorem2c-tau, theorem3a, theorem3a-rate, theorem3b, corollary-a, corollary-b, corollary-limit. Wiki page Deconfusing-Corrigibility-Companion.
Filed
PRIORITIES.md item 111: Unbiasedness From Feedback for the score sequence from LogicalInduction — Theorem 4.8.16 at the uniform weighting, with the feedback-enters-the-deductive-process and latency assumptions as explicit hypotheses.
Outstanding maintainer actions
- Decide whether the
deconfusing.*registrations stay against item 107 or move to an item of their own; if the latter, file it and changeanswers_itemon the twelve entries inprojects/deference/CLAIMS.md. - Link the companion page from where the post's readers will arrive: the post itself, and — outside this round's write scope —
wiki/_Sidebar.mdunder Deference, andwiki/Corrigibility.mdif wanted.
Model attribution
Prompt author: the maintainer. Executor: Claude Fable 5.1 (Anthropic). Date: 2026-10-17.
Claims it registered
- deconfusing.theorem1: Theorem 1 (three ranges): a violated history scores at most 1 − λ < −δ; a violation-free illegitimate history scores in [−δ, 0); a violation-free legitimate history scores in [0, 1]
- deconfusing.theorem2a: Theorem 2(a): if v a = 1 then U a* − U a ≥ λ − (1 + δ), and λ − (1 + δ) > 0
- deconfusing.theorem2b: Theorem 2(b): U a* − U a ≥ (λ − (1 + δ)) · v a − κ
- deconfusing.theorem2b-strict: Theorem 2(b), the consequence: U a* > U a whenever v a > κ/(λ − (1 + δ))
- deconfusing.theorem2c: Theorem 2(c): v a > (1 − U a*)/λ forces U a* > U a
- deconfusing.theorem2c-tau: Theorem 2(c), the threshold: (1 − U a*)/λ ≤ τ for an authority-respecting a*
- deconfusing.theorem3a: Theorem 3(a), Authority: under maximization and Unbiasedness From Feedback, limsup_K (R_K − T_K) ≤ 0
- deconfusing.theorem3a-rate: Theorem 3(a), in particular: limsup_K R_K ≤ τ
- deconfusing.theorem3b: Theorem 3(b), Best Interests: for any available sequence a'_k, limsup_K (1/K) Σ_{k<K} (U_k a'_k − S_k) ≤ 0
- deconfusing.corollary-a: Corollary (Exploration) (a): limsup_K (R_K − T_K − ε_K (τ + θ)) ≤ 0
- deconfusing.corollary-b: Corollary (Exploration) (b): for any available a'_k, limsup_K ((1/K) Σ_{k<K} (U_k a'_k − S_k) − ε_K λ (τ + θ)) ≤ 0
- deconfusing.corollary-limit: Corollary (Exploration), the specialization: if ε_K → 0, both conclusions of Theorem 3 hold unchanged