Fair upfront warning: This is not a particularly readable proof section. There's a bunch of dense notation, logical leaps due to illusion of transparency since I've spent months getting fluent with these concepts, and a relative lack of editing since it's long. If you really want to read this, I'd suggest PM-ing me to get a link to MIRIxDiscord, where I'd be able to guide you through it and answer questions. This post will be recapping the notions and building up an arsenal of lemmas, the next one will show the isomorphism theorem, translation theorems, and behavior of mixing, and the last one is about updates and the decision-theory results. It's advised to have them open in different tabs and go between them as needed.
With that said, let's establish some notation and mental intuition. I'll err on the side of including more stuff because illusion of transparency. First, visualize the tree of alternating actions and observations in an environment. A full policy can be viewed as that tree with some branches pruned off, specifying every history that's possible with your policy of interest. All our policies are deterministic. A policy stub is a policy tree that's been mostly pruned down (doesn't extend further than some finite time ). A partial policy is just any policy tree in any state of specification or lack thereof, from tiny stubs to full policies to trees that are infinite down some branches but not others.
denotes the empty policy (a stub) which specifies nothing about what a policy does, and is some partial policy which specifies everything (acts like a full policy) everywhere except on history and afterwards.
There's a distance metric on histories, as well as a distance metric on partial policies. Both of them are of the form where , and is the "time of first difference". For histories, it's "what's the first time these histories differ", for policies, it's "what's the shortest time by which one partial policy is defined and the other is undefined, or where the policies differ on what to do". So, thinking of the distance as getting smaller as the time of first difference gets bigger is a reliable guide.
The outcome set is... take the tree corresponding to , and it's the set of all the observation leaf nodes and infinite paths. No matter what, if you're interacting with an environment and acting according to , the history you get is guaranteed to have, as a prefix, something in . is that same set but minus all the Nirvana observations. Nirvana is a special observation which can occur at any time, counts as infinite reward, and ends the history. This is our compact metric space of interest that we're using to define a-measures and sa-measures. We assume that there's only finitely many discrete actions/observations available at any given point in time.
In this setting, sa-measures and a-measures over are defined as usual (a pair of a signed measure and a number where for sa-measures, and a measure with no negative parts and , respectively), because there's no infinite reward shenanigans. Sa-measures over require a technicality, though, which is that no nirvana event can have negative measure. will denote the total amount of measure you have. So, for a probability distribution, will be . We'll just use this for a-measures, and talk freely about the and values of an a-measure. We use the KR-metric for measuring the distance between sa-measures (or a-measures), which is like "if two measures are really similar for a long time and then start diverging at late times, they're pretty similar." It's also equivalent to the earthmover distance, which is "how much effort does it take to rearrange the pile-of-dirt-that-is-this-measure into the pile-of-dirt-that-is-that-measure."
One important note. While is "what's the expectation of the continuous function over histories, according to the measure we have", we frequently abuse notation and use to refer to what technically should be "what's the expectation of the indicator function for "this history has as a prefix" w.r.t the measure". The reason we can do this is because the indicator function for the finite history is a continuous function! So we can just view it as "what's the measure assigned to history ". Similarly, is the continuous function that's on histories with as a prefix and on histories without as a prefix.
For a given or the nirvana-free variant, is just the subset of that where the measure components of the a-measures assign 0 measure to Nirvana occurring. They're safe from infinite reward. We suppress the dependency on . Similarly,
because if a Nirvana-containing measure was selected by Murphy, you'd get infinite expected value, so Murphy won't pick anything with Nirvana in it. Keep that in mind.
There's a fiddly thing to take into account about upper completion. We're usually working in the space of a-measures or the nirvana-free equivalent. But the variant of upper completion we impose on our sets is: take the nirvana-free part of your set of interest, take the upper completion w.r.t the cone of nirvana-free sa-measures, then intersect with a-measures again. So, instead of the earlier setting where we could have any old sa-measure in our set and we could add any old sa-measure to them, now, since we're working purely in the space of a-measures and only demanding upper closure of the nirvana-free part, our notion of upper completion is something more like "start with a nirvana-free a-measure, you can add a nirvana-free sa-measure to it, and adding them has to make a nirvana-free a-measure"
Even worse, this is the notion of upper completion we impose, but for checking whether a point counts as minimal, we use the cone of sa-measures (with nirvana). So, for certifying that a point is non-minimal, we have to go "hey, there's another a-measure where we can add an sa-measure and make our point of interest". A different notion of upper completion here.
And, to make matters even worse, sometimes we do arguments involving the cone of sa-measures or nirvana-free sa-measures and don't impose the a-measure restriction. I'll try to clarify which case we're dealing with, but I can't guarantee it'll all be clear or sufficiently edited.
There's a partial ordering on partial policies, which is if the two policies never disagree on which action to take, and is defined on more histories than is (is a bigger tree). So, instead of viewing a partial policy as a tree, we can view the set of partial policies as a big poset. The full policies are at the top, the empty policy is at the bottom. Along with this, we've got two important notions. One is the fundamental sequence of a partial policy. Envisioning it at the tree level, is "the tree that is , just cut off at level ". Envisioning it at the poset level, the sequence is a chain of points in our poset ascending up to the point .
Also synergizing with the partial-order view, we've got functions heading down the partial policy poset. is the function that takes an a-measure or sa-measure over , and is like "ok, everything in has a unique prefix in , push your measure component down, keep the term the same". A good way of intuiting this is that this sort of projection describes what happens when you crunch down a measure over 10-bit-bitstrings to a measure over 8-bit-bitstrings. So view your poset of partial policies as being linked together by a bunch of projection arrows heading down.
There's a function mapping each partial policy to a set of a-measures over (or the nirvana-free variant), fulfilling some special properties. Maybe is only defined over policy stubs or full policies, in which case we use or , respectively. So, the best mental visualization/sketching aid for a lot of the proofs is visualizing your partial policies of interest with an ordering on them where bigger=up and smaller=down, and have a set/point for each one, that organizes things fairly well and is how many of these proofs were created.
Every (or the stub/full policy analogue) is associated with a and value, which is "smallest upper bound on the of the minimal points of the sets" and "smallest upper bound on the of the minimal points of the sets". Accordingly, the set is defined as , and is a way of slicing out a bounded region of a set that contains all minimal points, if we need to do compactness arguments.
Finally, we'll reiterate two ultra-important results from basic inframeasure theory that get used a lot in here and will be tossed around casually for arguments without citing where they came from. There's the Compactness Lemma, which says that if you have a bound on the values and the values of a closed set of a-measures, the set is compact. There's also Theorem 2, which says that you can break down any sa-measure into (minimal point + sa-measure), we use that decomposition a whole lot.
Other results we'll casually use are that projections commute (projecting down and then down again is the same as doing one big projection down), projections are linear (it doesn't matter whether you mix before or after projecting), projections don't expand distance (if two a-measures are apart before being projected down, they'll be or less apart after being projected down), if two a-measures are distinct in, then the measure components differ at some finite time (or the terms differ), so we can project down to some finite (same thing, just end history at time ) and they'll still be different, and projections preserve the and value of an a-measure.
One last note, is the space of a-measures on nirvana-free histories. This is all histories, not just the ones compatible with a specific policy. And a surmeasure is like a measure, but it can assign value to a nirvana event, marking it as "possible" even though it has 0 (arbitrarily low) measure.
Now, we can begin. Our first order of business is showing how the surtopology/surmetric/surmeasures are made and link together, but the bulk of this is the Isomorphism theorem. Which takes about 20 lemmas to set up first, in order to compress all the tools we need for it, and then the proof itself is extremely long. After that, things go a bit faster.
Lemma 1: is a metric if is a metric and is a pseudometric.
For identity of indiscernibles, because is a metric, and in the reverse direction, if , then (pseudometrics have distance from a point to itself) and , so .
For symmetry, both metrics and pseudometrics have symmetry, so
For triangle inequality, both metrics and pseudometrics fulfill the triangle inequality, so
And we're done.
Lemma 2: The surmetric is a metric.
To recap, the surmetric over sa-measures is
where , and is the minimum length of a Nirvana-containing history that has positive measure according to and measure according to (or vice-versa) We'll show that acts as a pseudometric, and then invoke Lemma 1.
The first three conditions of nonnegativity, , and symmetry are immediate. That just leaves checking the triangle inequality. Let , , and .
Assume . Then, going from to , all changes in the possibility of a Nirvana-history take place strictly after , and going from to , all changes in the possibility of a Nirvana-history also take place strictly after , so and behave identically (w.r.t. Nirvana-possibilities) up to and including time , which is impossible, because of being "what's the shortest time where and disagree on the possiblility of a Nirvana-history".
Therefore, . and this case is ruled out.
In one case, either or are . Without loss of generality, assume it's . Then, and the triangle inequality is shown.
In the other case, . In that case, And the triangle inequality is shown.
Therefore, is a pseudometric. Now, we can invoke Lemma 1 to show that is a metric.
Theorem 1: The surmetric on the space of sa-measures induces the surtopology. The Cauchy completion of w.r.t the surmetric is exactly the space of sa-surmeasures.
Proof sketch: First, use the metric to get an entourage (check the Wikipedia page on "Uniform Space"), and use the entourage to get a topology. Then, we go in both directions, and check that entourage-open sets are open according to the surtopology and the surtopology subbasis sets are entourage-open, to conclude that the topology induced by the surmetric is exactly the surtopology. Then, for the Cauchy completion, we'll show a bijection between equivalence classes of Cauchy sequences w.r.t. the surmetric and sa-surmeasures.
The surmetric is where , and is the minimum length of a Nirvana-containing history that has positive measure according to and measure according to (or vice-versa)
From the Wikipedia page on "Uniform Space", a fundamental system of entourages for is given by
A set is open w.r.t. the uniformity iff for all , there exists an entourage where lies entirely within (wikipedia page). Because is a subset of , is the set of all the second components paired with a given sa-measure.
So, let's say is open w.r.t. the uniformity. Then, for all , there's an entourage where lies entirely within . A fundamental system of entourages has the property that every entourage is a superset of some set from the fundamental system. Thus, from our earlier definition of the fundamental system, there exists some where
We'll construct an open set from the surtopology that is a subset of this set and contains , as follows. First, observe that if , then , and . For the latter, there are finitely many nirvana-containing histories with a length less than , and if a matches w.r.t. which nirvana-containing histories of that finite set are possible or impossible, then (because and only differ on which Nirvana-histories are possible at very late times)
Accordingly, intersect the following sets:
1: the open ball centered at with a size of
2: For all the nirvana-histories where and , intersect all the sets of a-measures where that history has positive measure. These are open because they're the complements of "this finite history has zero measure", which is a closed set of sa-measures.
3: For all the nirvana-histories where and , intersect all the sets of a-measures where that nirvana-history has 0 measure. These are open because they are subbasis sets for the surtopology.
We intersected finitely many open sets, so the result is open. Due to 2 and 3 and our earlier discussion, any in the intersection must have . Due to 1, .
This finite intersection of open sets (in the surtopology) produces an open set that contains (obviously) and is a subset of , which is a subset of which is a subset of .
Because this argument can be applied to every point to get an open set (in the surtopology) that contains and is a subset of , we can make itself by just unioning all our open sets together, which shows that is open in the surtopology.
In the reverse direction, let's show that all sets in the subbasis of the surtopology are open w.r.t. the uniform structure.
First, we'll address the open balls around a point . Every point in such an open ball has some -sized open ball which fits entirely within the original open ball. Then, we can just consider our entourage being
And then is all points that are or less away from according to the surmetric, and so this is a subset of the -sized ball around , which is a subset of the ball around . The extra measure we added in total on step is (note that no nirvana-history can have a length of 0, so we start at 1, and denotes timesteps in the history)
So, as increases, the deviation of this sequence of sa-measures from the limit sa-surmeasure approaches w.r.t. the usual metric, and every component in this sequence agrees with the others and the limit sa-surmeasure on which nirvana events are possible or impossible, so it's a Cauchy sequence limiting to the sa-surmeasure of interest.
Thus, all parts have been shown. The surmetric induces the surtopology, and the Cauchy completion of the sa-measures w.r.t. the surmetric is the set of sa-surmeasures. The same proof works if you want a-surmeasures (get it from the a-measures), or surmeasures (get it from the measures).
Alright, now we can begin the lemma setup for the Isomorphism Theorem, which is the Big One. See you again at Lemma 21.
Lemma 3: If and is nonempty, closed, convex, nirvana-free upper-complete, and has bounded-minimals, then
So, first, refers to the set of extreme minimal points of . An extreme point of is one that cannot be written as a mixture of other points in .
Proof Sketch: One subset direction, is immediate. For the other direction, we need a way to write a minimal point as a finite mixture of extreme minimal points. What we do is first show that all extreme points in must lie below the bound by crafting a way to write them as a mix of different points with upper completion if they violate the bound. Then, we slice off the top of to get a compact convex set with all the original minimal (and extreme) points in it. Since is a policy stub, has finitely many possible outcomes, so we're working in a finite-dimensional vector space. In finite dimensions, a convex compact set is the convex hull of its extreme points, which are all either (extreme points in originally), or (points on the high hyperplane we sliced at). Further, a minimal point can only be made by mixing together other minimal points. Putting this together, our minimal point of interest can be made by mixing together extreme minimal points, and the other subset direction is immediate from there.
Proof: As stated in the proof sketch, one subset direction is immediate, so we'll work on the other one. To begin with, fix a that is extreme in . It's an a-measure. If has , then it's not minimal ( has bounded-minimals) so we can decompose it into a minimal point respecting the bound and some nonzero sa-measure . . Now, consider the point instead. We're adding on the negative part of , and just enough of a term to compensate, so it's an sa-measure. The sum of these two points is an a-measure, because we already know from being an a-measure that the negative part of isn't enough to make any negative parts when we add it to .
Anyways, summing the two parts like that saps a bit from the value of , but adds an equal amount on the value, so it lies below the "barrier", and by nirvana-free upper-completeness, it also lies in . Then, we can express as
Now, we already know that is an a-measure, and is an a-measure (no negative parts, end term is ). So, we just wrote our extreme point as a mix of two distinct a-measures, so it's not extreme. Contradiction. Therefore, all extreme points have .
Let's resume. From bounded-minimals, we know that has a suitable bound on , so the minimal points respect the bound. Take and chop it off at some high hyperplane, like . (the constant 2 isn't that important, it just has to be above 1 so we net all the extreme points and minimal points). Call the resulting set . Due to the bound, and being closed, is compact by the Compactness Lemma. It's also convex.
Now, invoke the Krein-Milman theorem (and also, we're in a finite-dimensional space since we're working with a stub, finitely many observation leaf nodes, so we don't need to close afterwards, check the Wikipedia page for Krein-Milman Theorem at the bottom) to go . The only extreme points in are either points that were originally extreme in , or points on the high hyperplane that we chopped at.
Fix some. , so . Thus, can be written as a finite mixture of points from . However, because is minimal, it can only be a mixture of minimal points, as we will show now.
Decompose into , and then decompose the into . To derive a contradiction, assume there exists some where isn't minimal, so that isn't 0. Then,
Thus, we have decomposed our minimal point into another point which is also present in , and a nonzero sa-measure because is nonzero, so our original minimal point is actually nonminimal. and we have a contradiction. Therefore, all decompositions of a minimal point into a mix of points must have every component point being minimal as well.
So, when we decomposed into a mix of points in , all the extreme points we decomposed it into are minimal, so there's no component on the high hyperplane. was arbitrary in establishing that . Therefore,
So we have our desired result.
Lemma 4: If , and and (also works with the nirvana-free variants) and then This works for surmeasures too.
A point in the preimage of has , and by projections commuting and projecting down further landing you in , we get , so is in the preimage of too.
Lemma 5: Given a partial policy and stub , if , then
is a stub that specifies less about what the policy does than , and because it's a stub it has a minimum time beyond which it's guaranteed to be undefined, so just let that be your . then specifies everything that does, and maybe more, because it has all the data of up till time .
Lemma 6: If is a partial policy, and holds, then, for all , This works for surmeasures too.
First, all the are stubs, so we get one subset direction immediately.
In the other direction, use Lemma 5 to find a , with , and then pair
with Lemma 4 to deduce that
Due to being able to take any stub preimage and find a smaller preimage amongst the fundamental sequence for (with an initial segment clipped off) we don't need anything other than the preimages of the fundamental sequence (with an initial segment clipped off), which establishes the other direction and thus our result.
Lemma 7: If is an a-measure and and and is an a-measure, then there exists a (or the nirvana-free variant) s.t. and there's an sa-measure s.t. . This works for a-surmeasures and sa-surmeasures too.
What this essentially says is "let's say we start with a and project it down to , and then find a point below . Can we "go back up" and view as the projection of some point below ? Yes". It's advised to sketch out the setup of this one, if not the proof itself.
Proof sketch: To build our and , the components are preserved, but crafting the measure component for them is tricky. They've gotta project down to and so those two give us our base case to start working from with the measures (and automatically get the "must project down appropriately" requirement) and then we can recursively build up by extending both of them with the conditional probabilities that gives us. However, we must be wary of division-by-zero errors and accidentally assigning negative measure on Nirvana, which complicates things considerably. Once we've shown how to recursively build up the measure components of our and , we then need to check four things. That they're both well formed (sum of measure on 1-step extensions of a history=measure on the history, no semimeasures here), that they sum up to make , the measure component of can't go negative anywhere (to certify that it's an a-measure), and that the term attached to is big enough to cancel out the negative regions (to certify that it's an sa-measure).
Proof: Let where is the term of . Let where is the term of . Recursively define and on that are prefixes of something in (or the nirvana-free variant) as follows:
If is a prefix of something in (or the nirvana-free variant), and . That defines our base case. Now for how to inductively build up by mutual recursion. Let's use for a nirvana-history and for a non-nirvana history.
If , then
is the number of non-nirvana observations that can come after .
If and , then
and the same holds for defining and .
If and , then
We need to verify that these sum up to , that they're both well-formed signed measures, that has no negative parts, and that the value for is big enough. having no negative parts is immediate by the way we defined it, because it's nonnegative on all the base cases since came from an a-measure, and came from an a-measure as well which lets you use induction to transfer that property all the way up the histories.
To verify that they sum up to , observe that for base-case histories in ,
For non-base-case histories we can use induction (assume it's true for ) and go:
Negative case, .
Nonnegative case, no division by zero.
Zero case: because and came from an a-measure and has no negative parts.
Ok, so we've shown that .
What about checking that they're well-formed signed measures? To do this, it suffices to check that summing up their measure-mass over gets the measure-mass over . This works over the base case, so we just have to check the induction steps.
In the negative case, for ,
In the nonnegative case, no division by zero, then
And similar for .
In the zero case where , we need to show that and will also be zero. Winding back, there's some longest prefix where . Now, knowing that , we have two possible options here.
In the first case, , so (advancing one step) is:
And similar for , so they're both 0, along with , on , and then the zero case transfers the "they're both zero" property all the way up to .
In the second case, and . Then, proceeding forward, , and this keeps holding all the way up to , so we're actually in the negative case, not the zero case.
So, if , then as long as we're in the case where and . Then, it's easy. and the same for .
Also, , by the way we defined it, never puts negative measure on a nirvana event, so we're good there, they're both well-formed signed measures. For the value being sufficient to compensate for the negative-measure of , observe that the way we did the extension, the negative-measure for is the same as the negative measure for , and , and the latter is sufficient to cancel out the negative measure for , so we're good there.
We're done now, and this can be extended to a-surmeasures by taking the nirvana-events in and saying that all those nirvana-events have measure in .
Lemma 8: Having a bound on a set of a-surmeasures is sufficient to ensure that it's contained in a compact set w.r.t the surtopology.
This is the analogue of the Compactness Lemma for the sur-case. We'll keep it in the background instead of explicitly invoking it each time we go "there's a bound, therefore compactness". It's important.
Proof sketch: Given a sequence, the bound gets convergence of the measure part by the Compactness Lemma, and then we use Tychonoff to show that we can get a subsequence where the a-surmeasures start agreeing on which nirvana events are possible or impossible, for all nirvana events, so their first time of disagreement gets pushed arbitrarily far out, forcing convergence w.r.t. the surmetric.
Proof: given a sequence of a-surmeasures , and rounding them off to their "standard" part (slicing off the probability), we can get a convergent subsequence, where the measure part and part converges, by the Compactness Lemma since we have a bound, which translates into bounds on and .
Now, all we need is a subsequence of that subsequence that ensures that, for each nirvana-event, the sequence of a-surmeasures starts agreeing on whether it's possible or impossible. There are countably many finite histories, and each nirvana-history is a finite history, so we index our nirvana events by natural numbers, and we can view our sequence as wandering around within , where the t'th coordinate keeps track of whether the t'th nirvana event is possible or impossible. is compact by Tychonoff's Theorem, so we can find a convergent subsequence, which corresponds to a sequence of a-surmeasures that, for any nirvana event, eventually start agreeing on whether it's possible or impossible. There's finitely many nirvana events before a certain finite time, so if we go far enough out in the , the a-surmeasures agree on what nirvana events are possible or impossible for a very long time, and so the surdistance shrinks to 0 and they converge, establishing that all sequences have a convergent subsequence, so the set is compact.
Lemma 9: Given a and a sequence of nonempty compact sets (or the nirvana-free variant) where then there is a point (or the nirvana-free variant) where . This also works with a-surmeasures.
Sketch this one out. It's essentially "if sets get smaller and smaller, but not empty, as you ascend up the chain towards , and are nested in each other, then there's something at the level that projects down into all the "
Proof sketch: Projection preserves and , the Compactness Lemma says that compactness means you have a and bound, so the preimage of a compact set is compact. Then, we just have to verify the finite intersection property to show that the intersection of the preimages is nonempty, which is pretty easy since all our preimages are nested in each other like an infinite onion.
Proof: Consider the intersection . Because are all compact, they have a and bound. Projection preserves the and values, so the preimage of has a and bound, therefore lies in a compact set (By Lemma 8 for the sur-case). The preimage of a closed set is also closed set, so all these preimages are compact. This is then an intersection of a family of compact sets, so we just need to check the nonempty intersection property. Fixing finitely many , we can find an above them all, and pick an arbitrary point in the preimage of , and invoke Lemma 4 on to conclude that said point lies in all lower preimages, thus demonstrating finite intersection. Therefore, the intersection is nonempty.
Lemma 10: Given a sequence of nonempty closed sets where , and a sequence of points , all limit points of the sequence (if they exist) lie in (works in the a-surmeasure case)
Proof: Assume a limit point exists, isolate a subsequence limiting to it. By Lemma 4, the preimages are nested in each other. Also, the preimage of a closed set is closed. Thus, for our subsequence, past , the points are in the preimage of and don't ever leave, so the limit point is in the preimage of . This argument works for all , so the limit point is in the intersection of the preimages.
The next three Lemmas are typically used in close succession to establish nirvana-free upper-completeness for projecting down a bunch of nirvana-free upper complete sets, and taking the closed convex hull of them, which is an operation we use a lot. The first one says that projecting down a nirvana-free upper-complete set is upper-complete, the second one says that convex hull preserves the property, and the third one says that closure preserves the property. The first one requires building up a suitable measure via recursion on conditional probabilities, the second one requires building up a whole bunch of sa-measures via recursion on conditional probabilities and taking limits of them to get suitable stuff to mix together, and the third one also requires building up a whole bunch of sa-measures via recursion on conditional probabilities and then some fanciness with defining a limiting sequence.
Lemma 11: In the nirvana-free setting, a projection of an upper-complete set is upper-complete.
Proof sketch: To be precise about exactly what this says, since we're working with a-measures, it says "if you take the fragment of the upper completion composed of a-measures, and project it down, then the thing you get is: the fragment of the upper completion of (projected set) composed of a-measures". Basically, since we're not working in the full space of sa-measures, and just looking at the a-measure part of the upper completion, that's what makes this one tricky and not immediate.
The proof path is: Take an arbitrary point in the projection of which has been crafted by projecting down . Given an arbitrary (assuming it's an a-measure) which lies in the upper completion of the projection of , we need to certify that it's in the projection of to show that is upper-complete. In order to do this, we craft a and (an a-measure) s.t: (certifying that is in since is upper complete), and projects down to hit our point of interest.
These a-measures are crafted by starting with the base case of and , and recursively building up the conditional probabilities in accordance with the conditional probabilities of . Then we just verify the basic conditions like the measures being well-formed, being an a-measure, having a big enough term, and , to get our result. Working in the Nirvana-free case is nice since we don't need to worry about assigning negative measure to Nirvana.
Proof: Let be our upper-complete set. We want to show that is upper-complete. To that end, fix a in the projection of that's the projection of a . Let , where is an a-measure. Can we find an a-measure in that projects down to ? Let's define and as follows:
Let where is . Let where is . Recursively define and on that are prefixes of something in as follows:
If is a prefix of something in , and .
Otherwise, recursively define the measure components and as:
If , then
If , then .
We need to verify that has no negative parts so it's fitting for an a-measure, that , that the value for works, and that they're both well-formed signed measures. The first part is easy to establish, in the base cases since is an a-measure and a quick induction as well as coming from the a-measure (so no negatives anywhere) establish as not having any negative parts.
To verify that they sum up to , observe that for base-case histories in , . Then, in the general case, we can use induction (assume it's true for ) and go:
If , then
If , then , so
What about checking that they're well-formed measures? To do this, it suffices to check that summing up their measure-mass over gets the measure-mass over . If , then:
And similar for .
If , then, when we trace back to some longest prefix where