Sequent Calculus, Cut-Elimination, and the Consistency of Arithmetic
Anchor (Master): Takeuti 1987 *Proof Theory* 2e (North-Holland) Ch. 1-2 (LK, the Hauptsatz, the subformula property, the consequences for LJ) and Ch. 2 §11-12 (Gentzen's consistency proof for first-order arithmetic by assigning ordinals $< \varepsilon_0$ to derivations and reducing them under transfinite induction); Gentzen 1936 *Die Widerspruchsfreiheit der reinen Zahlentheorie* (Math. Ann. 112) and 1938 *Neue Fassung des Widerspruchsfreiheitsbeweises* (the original ordinal-assignment consistency proofs); Prawitz 1965 *Natural Deduction: A Proof-Theoretical Study* (Almqvist & Wiksell) (normalization for NK/NJ, the normal-form and subformula properties, the strong-normalization conjecture); Pohlers 2009 *Proof Theory: The First Step into Impredicativity* (Springer) (the proof-theoretic ordinal $|T|$, ordinal analysis of $PA$, $ATR_0$, $\Pi^1_1\text{-CA}_0$, and the hierarchy of theories by ordinal strength); Schütte 1977 *Proof Theory* (Springer) (the $\varepsilon$-calculus, the $\omega$-rule, and cut-elimination for infinitary derivations); Girard, Lafont and Taylor 1989 *Proofs and Types* (Cambridge) (the Curry-Howard correspondence: proofs as terms, cut-elimination/normalization as reduction)
Intuition Beginner
The earlier unit on proofs read a proof as a vertical list of lines built by one detachment step. Proof theory steps back and studies those proofs as objects in their own right — combinatorial things you can take apart, rearrange, and shrink. To do this Gentzen rewrote each line as a two-sided statement: a list of assumptions on the left of an arrow, a list of alternatives on the right. The line reads "if all the things on the left hold, then at least one thing on the right holds." A proof is now a tree of such lines, each got from the lines above it by a fixed rule that adds one connective.
Among the rules there is one suspect move, the cut. It says: prove a helper statement, then turn around and use that helper, and the helper itself vanishes from the final line. This is exactly how ordinary reasoning uses a lemma. The trouble is that the helper can be far more complicated than anything in the result, so a proof full of cuts can detour through wild intermediate claims.
Gentzen's central discovery is that every cut can be removed. Any proof, however many lemmas it leans on, can be rewritten into a proof that never proves a helper just to discard it. The rewriting can blow up the proof enormously, but it always finishes.
The reward is sharp. A cut-free proof only ever mentions pieces of its own final statement — nothing foreign sneaks in. So a cut-free proof of a plain contradiction, which has no pieces at all, simply cannot be written. The logic cannot prove a contradiction. Consistency falls straight out of the shape of cut-free proofs.
Visual Beginner
A sequent is the arrow line. The left side is what you assume; the right side is the alternatives you claim. A proof grows downward as a tree, each line earned by a rule. The cut is the one rule whose helper formula does not survive into the line below.
A SEQUENT (one line of a proof):
assumptions conclusions-or-alternatives
A1 , A2 , A3 => B1 , B2
\_______________/ \________/
the LEFT side the RIGHT side
"if all the A's hold, then some B holds"
THE SUSPECT RULE (cut): prove a helper H, then use it, then drop it
left tree ......... => ... , H H , ... => ......... right tree
------------------------------------------------------------(cut)
............ => ............
^^^^
H is GONE from the line below
GENTZEN'S THEOREM: every proof can be rewritten with NO cut at all.
PAYOFF: a cut-free proof only mentions PIECES of its own last line.
the empty line "=> " (a bare contradiction) has no pieces,
so it has NO cut-free proof --> the logic is CONSISTENT.Read the cut from the top: the left tree ends with on its right, the right tree starts with on its left, and the rule cancels the matching . Every other rule only adds a connective, so it keeps the pieces of the line below in view. Cut is the lone rule that can introduce a formula with no trace in the conclusion.
| feature | with cut allowed | after cut removed |
|---|---|---|
| helper formulas | may be wildly complex | none survive |
| formulas in the proof | can be anything | only subformulas of the last line |
| proof of a bare contradiction | not visibly blocked | impossible |
Cut-freeness is the property that turns "what can be proved" into "what can be built from the parts of the goal."
Worked example Beginner
We take a short proof that uses a cut and watch the cut disappear, leaving a proof that mentions only parts of its goal. Goal line: from the assumption " and ( implies )" conclude "." Written as a sequent: .
Step 1. A proof with a cut first proves the helper "" on the right using both assumptions, then cuts on . The helper here happens to be simple, but imagine it were a long detour formula; the cut would still cancel it.
Step 2. Build the left part. From "" and " implies ," the rule for "implies" on the left lets you pass to on the right. So one branch ends with the line . That branch already mentions only , , and " implies " — all pieces of the goal.
Step 3. The cut would now take that and feed it into a second branch that just restates , then cancel the matching . The line below the cut is again .
Step 4. Notice the cut bought nothing. The first branch already reached the goal directly. Delete the cut and the redundant second branch; the surviving proof is the single application of the "implies"-left rule. It is cut-free.
Step 5. Inspect the cut-free proof. Every formula in it — , , " implies " — is a piece of the final line. No outside formula appears.
What this tells us: removing a cut can leave a smaller, cleaner proof whose every formula is a part of the goal. When the helper is genuinely complicated, the rewriting works just as surely, though the cut-free proof can be far larger. The shrinking-to-parts is what makes a contradiction unprovable.
Check your understanding Beginner
Formal definition Intermediate+
Fix a first-order language with the syntax and the Hilbert calculus of 42.01.05 pending. Gentzen's sequent calculus LK replaces "many axioms, one rule" by "few axioms, many rules acting on two-sided sequents." A sequent is an expression in which (the antecedent) and (the succedent) are finite sequences of formulas; semantically it asserts [Takeuti Ch. 1]. The initial sequents are .
The structural rules act without touching connectives. Writing them on the left (antecedent) — each has a right (succedent) twin:
The logical rules introduce each connective once on the left and once on the right; representative cases are
where in -R (and dually -L) the free variable — the eigenvariable — occurs in neither the conclusion sequent nor any side formula; this is the sequent-calculus form of the generalization restriction of 42.01.05 pending. Finally the cut rule:
with the cut formula. An LK-derivation of is a finite tree of sequents grown from initial sequents by these rules with root ; means such a tree exists. The grade (degree) of a formula is its number of logical symbols; the rank of a cut measures the heights of the two subderivations over the cut formula. The intuitionistic calculus LJ is LK with every succedent restricted to at most one formula.
The cut formula need not be a subformula of the conclusion — it is the only rule with this feature. A derivation is cut-free when it uses no instance of cut.
Counterexamples to common slips Intermediate+
"LK and the Hilbert calculus prove different theorems." They prove the same first-order theorems: iff in the calculus of
42.01.05pending. Cut internalizes modus ponens — -L together with cut on simulates detachment — and the eigenvariable conditions reproduce generalization. The calculi differ in shape, not in extent."Cut-elimination preserves proof size." It can blow the proof up super-exponentially: removing all cuts from a derivation of grade- cuts and height can produce a cut-free derivation of height a tower of exponentials in . Cut-freeness buys the subformula property at a real cost in size; the elimination is constructive but not feasible.
"Cut-elimination works for arithmetic too." It fails for the calculus LK augmented with the induction rule: induction reintroduces cut formulas of unbounded complexity, so no finite-grade bound controls the cuts. Gentzen's consistency proof for arithmetic does not eliminate cuts outright; it assigns ordinals and reduces derivations transfinitely.
"The subformula property makes first-order logic decidable." It bounds the formulas in a cut-free proof but not the terms substituted by -L and -R, which range over infinitely many terms. Cut-free search decides propositional and certain quantifier-bounded fragments, not full first-order validity (undecidable,
42.01.10pending).
Key theorem with proof Intermediate+
The load-bearing theorem of structural proof theory is cut-elimination: the cut rule, though convenient, is eliminable, and its removal exposes the subformula property from which consistency and much else follow.
Theorem (Cut-elimination — Gentzen's Hauptsatz). Every LK-derivation of a sequent can be transformed into a cut-free LK-derivation of . The same holds for LJ. [Takeuti Ch. 1]
Proof. It suffices to remove a single cut from a derivation whose only cut is the lowest one, then iterate. To control contractions, generalize cut to the mix rule, which cuts all copies of at once; a mix is reduced rather than a single cut. Argue by a double induction: the outer induction is on the grade of the cut formula , the inner on the rank (the sum of the left and right ranks, where the left rank is the number of consecutive sequents above the right premise's... above each premise still containing ). Take a topmost mix and reduce.
Rank-reduction (inner step). If the cut formula is not principal in the rule immediately above one premise — that is, was carried passively, not just introduced — permute the mix upward past that rule. The mix now sits over a strictly smaller subderivation, lowering the rank while keeping the grade fixed; the inductive hypothesis on rank applies. Weakening and the initial sequents are the base: a mix against or a weakening-introduced is deleted outright.
Grade-reduction (outer step). If the cut formula is principal on both sides — just introduced by a logical rule above each premise — replace the single mix on the compound by mixes on its immediate subformulas, each of strictly smaller grade. For : the left premise ends in -R (premises and ) and the right in -L (premise , say); replace the mix on by a mix on between and , followed by structural rules. For : the left premise ends in -R with eigenvariable (premise ) and the right in -L with term (premise ); substitute for throughout the left subderivation — legitimate precisely because the eigenvariable condition kept out of — and mix on the lower-grade . Each new mix has grade , so the outer inductive hypothesis applies. After finitely many reductions every mix is gone, leaving a cut-free derivation of .
Corollary (Subformula property and consistency). In a cut-free derivation of , every formula occurring is a subformula of some formula in , since every rule but cut has its premise-formulas among the subformulas of its conclusion-formulas. Hence the empty sequent has no cut-free derivation — there is no subformula of nothing to populate the leaves — and by the theorem no derivation at all. Pure first-order LK is consistent.
Bridge. Cut-elimination is the foundational reason a proof can be normalized to mention only the parts of its goal, and this is exactly the structural twin of the soundness argument of 42.01.05 pending: there an induction on a Hilbert deduction pinned below ; here an induction on the grade and rank of cuts pins every theorem to a proof in subformula normal form. It builds toward the consistency of arithmetic below, where the same reduce-the-derivation idea is carried out transfinitely once the induction rule blocks naive cut-elimination, and it appears again in the disjunction and existence properties of LJ and in Craig interpolation, each read off the last rule of a cut-free proof. The central insight is that the cut rule is a definitional convenience — it internalizes modus ponens — and removing it generalises the propositional decidability of cut-free search to the structural backbone of the whole subject: the subformula property. Putting these together, consistency, the midsequent theorem, interpolation, and the constructive reading of intuitionistic proofs are not separate theorems but four shadows of one normal form, and the bridge from logic to arithmetic is the question of how far that normal form survives when induction is added.
Exercises Intermediate+
Advanced results Master
The cut-elimination theorem organizes four developments: the structural corollaries of the subformula property (consistency, midsequent/Herbrand, interpolation, the constructive properties of LJ); the natural-deduction counterpart, normalization, and through it the Curry-Howard reading of proofs as programs; Gentzen's ordinal analysis of arithmetic, where cut-elimination is replaced by transfinite reduction below ; and the general theory of the proof-theoretic ordinal that calibrates theories by their consistency strength.
Theorem 1 (the structural corollaries). The subformula property of cut-free LK-derivations yields, for the intuitionistic calculus LJ, the disjunction property ( or ) and the existence property ( for some term ), each read off the last rule of a cut-free single-succedent proof [Takeuti Ch. 1]. The midsequent theorem for prenex sequents separates a cut-free proof into a propositional upper block and a quantifier lower block, exposing Herbrand's theorem: a prenex existential theorem reduces to a propositionally valid finite disjunction of substitution instances. Craig interpolation follows by Maehara's method — inducting on a cut-free derivation of and splitting the antecedent, one constructs an interpolant in the common vocabulary. Each corollary is unavailable from the Hilbert calculus directly; each needs the normal form cut-elimination supplies, and each fails or weakens without it.
Theorem 2 (natural deduction, normalization, Curry-Howard). Gentzen's natural deduction NK/NJ is symmetric to the sequent calculus: its introduction and elimination rules correspond to the right and left logical rules, and a maximal formula — the conclusion of an introduction immediately serving as the major premise of the matching elimination — is the natural-deduction analogue of a cut formula. Normalization (Prawitz) removes maximal formulas, yielding normal derivations with the subformula property; strong normalization (every reduction sequence terminates) was proved by Tait and Girard [Prawitz Ch. II-IV]. The Curry-Howard correspondence makes this computational: intuitionistic formulas are types, NJ-derivations are typed -terms, -introduction is -abstraction, -elimination is application, and normalization is -reduction — proofs are programs and cut-elimination is their evaluation [Girard-Lafont-Taylor]. Girard's System F extends this to second-order arithmetic, its strong normalization (by reducibility candidates) delivering , connecting structural proof theory to type theory [03.09 context] and the operational semantics of functional languages.
Theorem 3 (Gentzen's consistency proof for arithmetic). Adjoining the equality/successor axioms and the induction rule to LK gives a calculus for first-order arithmetic in which cut-elimination fails — induction injects cut formulas of unbounded grade. Gentzen assigns to each derivation an ordinal (the least with ) and exhibits a reduction procedure that, applied to any derivation of the empty sequent, returns another of strictly smaller ordinal; well-foundedness of forbids an infinite descent, so no derivation of exists and is consistent [Gentzen 1936]. The metatheory is finitary save for transfinite induction up to , and Gentzen's companion result shows for every but — so the consistency proof uses exactly the one principle beyond , in precise agreement with the second incompleteness theorem 42.01.09 pending: the unprovable is equivalent over a weak base to , and the -strength independence shows itself concretely in Goodstein's theorem and the Paris-Harrington principle, true statements unprovable in [42.03.02 context].
Theorem 4 (proof-theoretic ordinals and the strength hierarchy). The proof-theoretic ordinal of a sound recursively axiomatized is the supremum of the order types of primitive-recursive well-orderings for which , equivalently the least ordinal whose transfinite induction cannot prove [Pohlers]. It calibrates theories: , , (Feferman-Schütte, the predicative limit), the Bachmann-Howard ordinal. The ordinal bounds the provably total recursive functions of (via the slow- and fast-growing hierarchies) and, through ordinal collapsing functions and the infinitary -rule (Schütte's -calculus and cut-elimination for infinite derivations), drives the analyses of impredicative theories. The same ordinals index the "big five" of reverse mathematics, and the program connects to Gödel's Dialectica/functional interpretation, which reduces -consistency to the quantifier-free theory of primitive recursive functionals of finite type — a complementary route to Gentzen's.
Synthesis. Cut-elimination is the foundational reason structural proof theory exists, and putting these together it is the single normal form behind all four developments: the subformula property it produces is exactly what gives consistency, the midsequent/Herbrand theorem, interpolation, and the disjunction/existence properties of LJ in Theorem 1, and it is dual, across the symmetry of sequent calculus and natural deduction, to normalization in Theorem 2 — where the cut formula becomes the maximal formula and cut-reduction becomes -reduction, so that the central insight "cut-elimination is computation" is the Curry-Howard correspondence read in the proof-theoretic direction. This is exactly the bridge from logic to arithmetic: when the induction rule defeats finite cut-elimination, Gentzen's transfinite reduction below of Theorem 3 is the same reduce-the-derivation idea carried into the ordinals, and the one transfinite principle it consumes, , is the precise measure by which escapes — the constructive complement that Gödel's second theorem 42.01.09 pending predicts and bounds. The proof-theoretic ordinal of Theorem 4 generalises to a universal yardstick, so that the consistency strength of a theory, the growth rate of its provably total functions, and its position in the reverse-mathematics hierarchy are three readings of one ordinal. The architecture is complete: proofs are combinatorial objects, cut-elimination is their central theorem, and ordinal analysis is the constructive consistency proof that complements — and is exactly bounded by — incompleteness.
Full proof set Master
Proposition 1 (cut-elimination, mix reduction). Every LK-derivation transforms into a cut-free LK-derivation of the same sequent.
Proof. Generalize cut to mix and remove a lowest mix from a derivation containing no other mix, by double induction on the grade of the mix formula and the rank (sum of the heights of the maximal chains of -containing sequents above each premise). If a premise is an initial sequent or enters by weakening, delete the mix and weaken. If is not principal in the rule above some premise, permute the mix above that rule: the rank drops, fixed, inner hypothesis applies. If is principal on both sides, it was introduced by dual logical rules; replace the mix by mixes on the immediate subformulas. For (left ends -R, right ends -L on ): mix with on (grade ). For (left ends -R with eigenvariable , right ends -L with term ): substitute for through the left subderivation — sound by the eigenvariable condition — then mix on (grade ). The outer hypothesis dispatches the new lower-grade mixes. Finitely many reductions clear all mixes.
Proposition 2 (subformula property and consistency of LK). Every formula in a cut-free LK-derivation of is a subformula of a formula in ; consequently and LK is consistent.
Proof. Induct on the cut-free derivation. Initial sequents : is a subformula of itself in the end-sequent (preserved downward). Every structural and logical rule has each premise-formula equal to, or an immediate subformula of, a conclusion-formula (e.g. -L: is a subformula of ). By transitivity of "subformula," every formula upward is a subformula of an end-sequent formula. For the empty end-sequent , there are no such subformulas, so every sequent above is empty; but the leaves are , nonempty — contradiction. So has no cut-free derivation, and by Proposition 1 none at all. As (or any refutation) would yield by structural rules, LK proves no contradiction.
Proposition 3 (LJ disjunction and existence properties). In LJ: implies or ; and implies for some term .
Proof. Cut-eliminate (Proposition 1 holds for LJ). LJ succedents hold at most one formula, and the end-antecedent is empty, so the last rule of a cut-free proof of cannot be a left or structural-left rule (no antecedent formula to act on) and must introduce the single succedent formula : it is -R, whose premise is or , itself a cut-free LJ proof. Likewise the last rule of a cut-free proof of is -R, premise for the witnessing term .
Proposition 4 (Herbrand's theorem via the midsequent). If with quantifier-free, there are terms with propositionally.
Proof. Take a cut-free derivation (Proposition 1). By the subformula property the only quantifier inferences are -R steps introducing the prefixed existentials, each from an instance . No -R or -L occurs, so all eigenvariable conditions are vacuous and each -R commutes downward past every propositional and structural rule whose principal formula it is not. Permuting all -R steps below the propositional steps separates the derivation at a midsequent of quantifier-free instances; the block above it uses only propositional and structural rules, so it is a propositional derivation of , whence as a tautological consequence.
Proposition 5 (Gentzen: consistency of , and ). is consistent, with a proof using transfinite induction up to ; and while for each .
Proof. Assign each -derivation an ordinal by a notation system tracking cut grades and induction instances, so that a derivation of the empty sequent admits an effective reduction with again ending in and (the induction rule is unfolded one step, raising -powers but staying below ; cuts of maximal grade are pushed and lowered). An infinite iteration would yield , an infinite descent below , contradicting . So no derivation of exists; is consistent. For the ordinal: a primitive-recursive well-ordering of type admits a -proof of its transfinite-induction schema (by an internal -power bound), so ; but would internalize the reduction argument and give , contradicting Gödel's second theorem 42.01.09 pending. Hence .
Connections Master
The deductive calculus and soundness
42.01.05pending is the prerequisite this unit's sequent calculus reorganizes: LK proves the same first-order theorems as the Hilbert calculus, with the cut rule internalizing that unit's modus ponens and the eigenvariable conditions on -R/-L reproducing its generalization restriction. Where soundness there pinned below by induction on a Hilbert deduction, cut-elimination here normalizes by induction on cut grade and rank, and the two inductions are the semantic and structural faces of the same control over proofs.The incompleteness theorems
42.01.09pending are exactly what bound this unit's consistency proof: Gödel's second theorem says , and Gentzen's ordinal analysis locates the missing strength precisely as transfinite induction , which is equivalent over a weak base to . The -strength independence the second theorem predicts surfaces concretely as Goodstein's theorem and the Paris-Harrington principle, true sentences unprovable in — ordinal analysis turns the abstract incompleteness into a calibrated measure of strength.Decidability and the Entscheidungsproblem
42.01.10pending consume the subformula property of cut-free proofs: cut-free proof search decides propositional logic and bounded-quantifier fragments because the formulas in a proof are confined to subformulas of the goal, while the residual freedom in the terms substituted by the quantifier rules is exactly why full first-order validity stays undecidable. The midsequent/Herbrand theorem proved here is the structural engine behind the reduction of quantified provability to propositional disjunctions of instances.Ordinals, transfinite induction and recursion
42.03.02supply the metamathematical apparatus of Gentzen's proof: the ordinal as the least fixed point of , the well-foundedness that forbids infinite descent, and the transfinite-induction principle whose unprovability in pins the proof-theoretic ordinal . The hierarchy of theories by ordinal strength () is a direct application of that ordinal arithmetic to consistency strength.The Curry-Howard correspondence links cut-elimination to computation: through the symmetry of sequent calculus and natural deduction, the cut formula becomes the maximal formula of a natural-deduction detour, cut-reduction becomes -reduction in the typed -calculus, and normalization becomes program evaluation — so "proofs as programs, cut-elimination as computation" makes structural proof theory the proof-theoretic shadow of type theory and the operational semantics of functional languages, with Girard's System F extending the reading to second-order arithmetic.
Historical & philosophical context Master
Gerhard Gentzen introduced the sequent calculi LK and LJ and the natural-deduction systems NK and NJ in Untersuchungen über das logische Schließen (1934-35), proving the cut-elimination Hauptsatz for both LK and LJ and drawing the subformula property and the consistency of pure logic as corollaries [Gentzen 1936]. The work grew from David Hilbert's programme to secure mathematics by finitary consistency proofs, a programme that Gödel's 1931 incompleteness theorems had shown could not be completed in the naive form; Gentzen's response was to identify the exact transfinite resource — induction up to — by which a constructive consistency proof of arithmetic could nonetheless be given.
Gentzen's Die Widerspruchsfreiheit der reinen Zahlentheorie (1936) and its cleaner Neue Fassung (1938) proved the consistency of first-order arithmetic by assigning ordinal notations below to derivations and reducing them; the companion result that proves for each but not fixed as the proof-theoretic ordinal of [Gentzen 1936]. Dag Prawitz's Natural Deduction (1965) systematized the normalization theory of the natural-deduction calculi and made precise the correspondence between maximal formulas and cut formulas [Prawitz Ch. II]. Gaisi Takeuti's Proof Theory (1967; 2e 1987) became the standard reference for LK, the Hauptsatz, and ordinal analysis [Takeuti Ch. 1]; Kurt Schütte and later Wolfram Pohlers extended ordinal analysis past the predicative Feferman-Schütte ordinal into impredicative theories [Pohlers], while Jean-Yves Girard, Yves Lafont, and Paul Taylor codified the Curry-Howard reading of cut-elimination as computation [Girard-Lafont-Taylor], the line of work begun by Haskell Curry's observation on combinators and William Howard's 1969 notes on formulae-as-types.
Bibliography Master
@book{takeuti1987prooftheory,
author = {Takeuti, Gaisi},
title = {Proof Theory},
edition = {2},
publisher = {North-Holland},
year = {1987}
}
@article{gentzen1935untersuchungen,
author = {Gentzen, Gerhard},
title = {Untersuchungen \"{u}ber das logische Schlie{\ss}en},
journal = {Mathematische Zeitschrift},
volume = {39},
year = {1935},
pages = {176--210, 405--431}
}
@article{gentzen1936widerspruchsfreiheit,
author = {Gentzen, Gerhard},
title = {Die Widerspruchsfreiheit der reinen Zahlentheorie},
journal = {Mathematische Annalen},
volume = {112},
year = {1936},
pages = {493--565}
}
@book{prawitz1965naturaldeduction,
author = {Prawitz, Dag},
title = {Natural Deduction: A Proof-Theoretical Study},
publisher = {Almqvist \& Wiksell},
year = {1965}
}
@book{pohlers2009prooftheory,
author = {Pohlers, Wolfram},
title = {Proof Theory: The First Step into Impredicativity},
publisher = {Springer},
year = {2009}
}
@book{schutte1977prooftheory,
author = {Sch\"{u}tte, Kurt},
title = {Proof Theory},
publisher = {Springer},
year = {1977}
}
@book{girard1989proofstypes,
author = {Girard, Jean-Yves and Lafont, Yves and Taylor, Paul},
title = {Proofs and Types},
series = {Cambridge Tracts in Theoretical Computer Science},
number = {7},
publisher = {Cambridge University Press},
year = {1989}
}
@incollection{howard1980formulaeastypes,
author = {Howard, William A.},
title = {The Formulae-as-Types Notion of Construction},
booktitle = {To H. B. Curry: Essays on Combinatory Logic, Lambda Calculus and Formalism},
publisher = {Academic Press},
year = {1980},
pages = {479--490}
}