Skip to the reading
Quodlibetthe apparatus, opened up · IV — the refinement

Deep apparatus · IV  — the refinement

The Box

The instances gave a fixed point; the refinement makes it the only one. When provability is treated as a modal operator — the box □, read "it is provable that" — the schematic laws of proof become a logic, GL, in which Löb's theorem is an axiom. And in that logic the diagonal sharpens beyond recognition: every self-referential sentence built from the box has a fixed point that is unique up to provable equivalence and explicitly computable. The most famous consequence is a single equation. The sentence "I am unprovable" is not merely some fixed point of negated provability; it is provably equal to "this theory is consistent." Self-reference, read through the box, has no slack at all.

□(□A → A)→□A

The earlier deep-dives worked at the level of sentences: the diagonal lemma built a sentence asserting a property of itself, and Lawvere's theorem guaranteed such a fixed point exists. This one moves up one storey — not to reason in the theory T about numbers and sentences, but to reason about T's own provability, using a modality. Write □A for "A is provable in T." The principles that □ obeys — that proof respects implication, that what is proved is provably proved, and Löb's law — are not about any particular sentence; they are schematic, and they form a complete and decidable modal logic. That logic is GL, the Gödel–Löb logic of provability.

Four movements. First the operator and its logic GL, with what it asserts and the one thing it pointedly refuses. Then the semantics — finite, transitive, irreflexive frames — in which Löb's law becomes the geometric fact of well-foundedness, and Gödel's second theorem becomes a single world at the end of a chain. Then Löb's theorem itself, proved from the diagonal, and shown to be the axiom GL is named for. And then the fixed-point theorem of de Jongh and Sambin — existence, uniqueness, and an algorithm — which is the precise sense in which the refinement refines: among all the instances of the construction, the provability one carries a rigidity the others lack, and that rigidity is exactly the Löb structure.

1 · the operator

Provability as a modality, and the logic GL

The schematic laws of provability are three: distribution, necessitation, and Löb. Together they are GL — and what makes GL the logic of provability rather than of truth is precisely the axiom it does not have.

A modality is an operator on propositions. Here the operator is □, intended as "provable in T," with its dual ◇A = ¬□¬A reading "consistent with T." The language is ordinary propositional logic with □ added; the laws governing □ are read off the derivability conditions of §III, lifted to schemata.

the axioms and rules of GL
On top of classical propositional logic and modus ponens, GL adds:
K□(A → B) → (□A → □B)Provability respects implication — the distribution axiom of every normal modal logic.
Necfrom ⊢ A infer ⊢ □AWhat is proved is provably proved — the necessitation rule (derivability condition D1).
L□(□A → A) → □ALöb's axiom — if it is provable that the provability of A would yield A, then A is already provable. This is the engine.

Two consequences fix the character of GL. First, the transitivity axiom 4 : □A → □□A is a theorem, not a postulate — it follows from L alone. Second, and decisively, GL does not contain the reflection axiom T : □A → A. Provability does not imply truth; if it did, □⊥ → ⊥ would make consistency provable, which §III forbade. The whole gap between ⊢ and ⊨ is encoded in the single missing axiom — GL is what remains of the logic of necessity when truth is withheld and only Löb's weakened reflection survives.

Solovay's completeness theorem (1976) — GL is the logic of provability
An arithmetical realization sends each modal formula A to an arithmetic sentence A*, interpreting □ as Prov_{PA}. Then GL ⊢ A if and only if PA ⊢ A* for every realization. The modal theorems of GL are exactly the schematic provability principles that PA can prove of itself — no more, no less. This is what licenses the entire enterprise: questions about provability in arithmetic become questions in a decidable propositional modal logic, and the diagonal phenomena of §III become modal derivations.
A clarification the corpus's honesty demands. GL is not a generalization of Lawvere's theorem; it is the logic of one specific operator, the provability box. Its relation to the construction is sharpening, not subsumption: among the instances of §III, the provability instance alone satisfies Löb's law, and that law is what will make its fixed point unique where the others' are merely existent. The refinement refines a single case — the deepest one.
2 · the frames

Where Löb becomes well-foundedness, and Gödel a world at the end

The box has a geometry. GL is sound and complete for finite, transitive, irreflexive frames — and on such a frame Löb's law is the fact that there are no infinite ascents, while Gödel's second theorem is a single terminal world that believes everything is provable.

A Kripke frame is a set of worlds W with an accessibility relation R; the box quantifies forward along it. The content of GL is carried entirely by which frames it requires.

GL-frames and forcing
A GL-frame is a pair (W, R) with R transitive and converse well-founded — no infinite ascending chain w₀ R w₁ R w₂ R ⋯, equivalently every non-empty subset has an R-maximal element. Forcing is the usual modal clause: w ⊩ □A iff v ⊩ A for every v with w R v. The converse well-foundedness is exactly what makes Löb's axiom valid, and by the finite model property only finite such frames — finite transitive irreflexive orders — are needed.
soundness and completeness
GL ⊢ A if and only if A is valid on every finite transitive irreflexive frame. The Löb axiom □(□A→A)→□A corresponds, frame-by-frame, to the conjunction of transitivity and converse well-foundedness: a frame validates Löb exactly when it has no infinite ascents. So the modal logic of provability and the geometry of well-founded orders are the same object seen twice — and the irreflexivity, that no world sees itself, is the relational shadow of the fact that provability has no fixed point of the form □A ↔ A.

The terminal worlds are where Gödel lives. At a world with no successors, □A is vacuously true for every A — there are no accessible worlds at which A could fail — so in particular □⊥ holds there. Such a world "believes" that even ⊥ is provable; it sits at the end of every chain and sees nothing beyond. Consequently ¬□⊥ — consistency — fails at that world, so it is not valid, so it is not a theorem of GL. Gödel's second incompleteness theorem is that one terminal world. Evaluate it yourself.

a Kripke-frame evaluator — a finite transitive irreflexive frame; toggle p, pick a formula, read its truth
transitive c leaf — no successors b a
valuation of p
formula to evaluate
The frame has no infinite ascent, so it validates Löb. Select ¬□⊥ (consistency): it is true at a and b but false at the leaf c — so it is not valid, and not a theorem. That single red world is Gödel's second theorem. By contrast Löb's axiom and transitivity stay true everywhere, for every valuation; reflection □p→p can be made to fail. The geometry decides the logic.
3 · Löb's law

The theorem that became an axiom

Löb's theorem says something that sounds too strong to be true: if a theory can prove that the provability of A would already give A, then it can prove A outright. Its proof is the diagonal once more, and its conclusion is the defining axiom of GL.

In 1955 Leon Henkin asked whether a sentence asserting its own provability — H ↔ □H — is true, or provable, or neither. The question has the same self-referential shape as Gödel's, but with the negation removed, and intuition gives no clear answer. Martin Löb answered it by proving a general principle, from which Henkin's sentence falls out at once: such a sentence is provable, hence true.

Löb's theorem (1955)
If T ⊢ □A → A, then T ⊢ A. A theory can only prove the reflection principle for a sentence it can already prove. The proof builds, by the diagonal lemma, a sentence ψ that says "if I am provable, then A" — the Henkin–Löb sentence — and turns the hypothesis against it.
(0)By the diagonal lemma, fix ψ with  T ⊢ ψ ↔ (□ψ → A).The construction at θ(y) = (Prov(y) → A): a sentence asserting its own provability suffices for A.
(1)From ψ → (□ψ → A):  Nec, then K, then K and axiom 4 give  T ⊢ □ψ → □A.□(ψ→(□ψ→A)) ⟹ □ψ→□(□ψ→A) ⟹ □ψ→(□□ψ→□A); and □ψ→□□ψ, so □ψ→□A.
(2)With the hypothesis □A → A:  T ⊢ □ψ → A.
(3)By the other direction (□ψ → A) → ψ:  T ⊢ ψ.  Then Nec gives T ⊢ □ψ.
∎From □ψ and □ψ → A (line 2):  T ⊢ A.The sentence that said "my provability gives A" was provable, so its provability did give A.
the theorem is the axiom — and Henkin is answered

Every step of that proof can be carried out under a box, which is to say T can prove it about itself: T ⊢ □(□A → A) → □A. That is Löb's axiom L — the formalized theorem — and it is what makes GL the logic it is. Two corollaries fall out immediately. Taking A = ⊥, the axiom reads □(□⊥ → ⊥) → □⊥, i.e. □Con(T) → □⊥; contrapositively a consistent T cannot prove its own consistency — Gödel's second theorem, in one line. And Henkin's sentence H ↔ □H gives □H → H trivially, so by Löb T ⊢ H: the sentence asserting its own provability is provable. Where Gödel's sentence flees provability, Henkin's embraces it — and Löb's law decides both.

Notice what just happened to Henkin's sentence. It was self-referential, built from the box, and it turned out to be provably equivalent to ⊤ — pinned to a value with no freedom at all. That was not luck. It is the first instance of a general phenomenon: in GL, every self-referential sentence built from the box has its truth-value determined, uniquely and computably. That theorem is the heart of the refinement.

4 · the fixed point

Unique, and computable — the de Jongh–Sambin theorem

The instances gave existence; this gives everything. For any self-referential pattern built from the box, the fixed point exists, is unique up to provable equivalence, and is produced by an algorithm. The diagonal, in the provability setting, has no remaining freedom.

Call a formula A(p) modalized in p if every occurrence of p lies within the scope of a □ — as it does whenever p stands for a sentence reached only through "is provable." For such patterns the self-reference resolves completely.

the fixed-point theorem (de Jongh, Sambin, ~1975)
Let A(p) be modalized in p. Then there is a formula H, not containing p and built from the other letters of A, such that GL ⊢ H ↔ A(H). It is unique: any H' with GL ⊢ H' ↔ A(H') satisfies GL ⊢ H ↔ H'. And it is explicitly computable from A by an algorithm. Existence reproves the diagonal lemma for the provability case; the novelty — impossible without Löb's law — is uniqueness and calculability.
the uniqueness proof — Löb's axiom is what closes it
(1)Substitution lemma: as p is modalized in A,  GL ⊢ □(q ↔ r) → (A(q) ↔ A(r)).Boxed equivalence propagates through boxes; every occurrence of the variable sits inside one.
(2)Suppose GL ⊢ q ↔ A(q) and GL ⊢ r ↔ A(r). With (1):  GL ⊢ □(q ↔ r) → (q ↔ r).Under □(q↔r), A(q)↔A(r); the two fixed-point equations then give q↔r.
∎Write Y = (q ↔ r). From □Y → Y: Nec gives □(□Y → Y), so Löb's axiom gives □Y, and with □Y → Y,  GL ⊢ Y.  The fixed point is unique.Exactly the move of §III's uniqueness was unavailable to recursion; here Löb supplies it.

The algorithm — Sambin's — computes the fixed point by recursion on the boxes of A, and always terminates. Its outputs are startling in their definiteness. Compute a few.

the fixed-point calculator — choose a self-referential pattern; read its unique fixed point and arithmetic meaning
Each pattern A(p) has exactly one fixed point in GL, and it is a concrete formula in the box alone. "I am unprovable" resolves to consistency; "I am provable" to ⊤; "I am refutable" to inconsistency; "I am self-consistent" to ⊥. The self-referential sentence is never mysterious — it is computed, and it is one thing.
the equation that ends the mystery — G ↔ Con

The first row is the one to dwell on. Gödel's sentence satisfies G ↔ ¬□G; the calculator's fixed point of ¬□p is ¬□⊥; so GL ⊢ G ↔ ¬□⊥, and by Solovay PA ⊢ G ↔ Con(PA). The sentence that says "I am not provable" is provably the same sentence as "this theory is consistent." The verification is pure Löb: since ¬□⊥ = (□⊥ → ⊥), the axiom gives □¬□⊥ → □⊥, while □⊥ → □¬□⊥ is trivial, so GL ⊢ □⊥ ↔ □¬□⊥ and hence GL ⊢ ¬□⊥ ↔ ¬□¬□⊥ — ¬□⊥ is a fixed point of ¬□p, and uniqueness makes it the one. The most famous self-referential sentence in mathematics was, all along, a statement about consistency wearing a disguise the box removes.

5 · the rigidity

Why self-reference is rigid here and floppy elsewhere

The same construction gave a unique fixed point in GL and a multitude in the recursion theorem. The difference is exactly Löb's law — well-foundedness — and naming it precisely is what keeps the refinement honest.

Set the two fixed-point results of this corpus side by side. Kleene's recursion theorem (§III) produces, for a transformation f, an index e with φ_e = φ_{f(e)} — and then infinitely many others, since every function has infinitely many indices and the construction can be padded without end. There is no canonical fixed point; the quine is one of legion. The de Jongh–Sambin theorem (§IV) produces, for a modalized pattern, a fixed point that is unique up to provable equivalence. There is exactly one Gödel sentence up to equivalence, and it is consistency. Same construction; opposite verdicts on uniqueness.

uniqueness is well-foundedness
The fixed point is unique exactly when the ambient logic has Löb's law — converse well-foundedness — and not otherwise. The uniqueness proof of §IV consumed Löb's axiom at its final step: from □Y → Y it extracted Y, a move valid only because GL's frames forbid infinite ascent. The computable universe has no such well-foundedness on its indices — one can always climb to a larger code — so the same step is unavailable and uniqueness fails. The rigidity of arithmetical self-reference and the multiplicity of computational self-reference are not two facts but one, read at a structure that has Löb's law and at one that does not.
provability — rigid

GL: one fixed point

Frames are converse well-founded; Löb's law holds. Every modalized pattern has a unique, computable fixed point. "I am unprovable" is Con; "I am provable" is ⊤. Pinned, with no freedom.

Self-reference is fully determined. The disguise comes off and there is exactly one face beneath.

computation — floppy

recursion: a multitude

No well-foundedness on indices; no Löb's law. The recursion theorem gives a fixed point and then infinitely many more — padding, re-indexing, endless variants. No quine is canonical.

Self-reference exists but is not located. The face beneath the disguise is one of uncountably many that would do.

what the refinement refines — the honest statement

It would overclaim to say that GL generalizes Lawvere's theorem, or that provability logic is "the construction one storey up." Neither is true, and the corpus's discipline is to say so. What is true is precise and narrower: among the instances of §III, the provability instance alone satisfies Löb's law, and Löb's law is exactly the extra structure that converts the construction's existence of a fixed point into uniqueness and computability. The refinement refines one case. But it is the deepest case — the one where self-reference meets a theory reasoning about its own proofs — and there the diagonal is shown to have no slack: the fixed point is not a fixed point but the fixed point, and an algorithm hands it over. That is as sharp as the phenomenon ever becomes.

The box, then, is not a new construction but the old one stripped of its freedom. Provability is the diagonal made rigid; Löb's law is the rigidity; and the unique computable fixed point is what the diagonal looks like when the structure reasoning about it is well-founded. The next deep-dives ask what holds the instances together as instances — the formal theory of reduction — and where the construction's reach finally ends. But the refinement is the high-water mark of definiteness: nowhere else in the corpus is the self-referential object pinned so completely to a single, nameable thing.

One storey up, the diagonal loses its slack. Treat provability as the box, accept Löb's law as an axiom, and every self-referential sentence built from it has a fixed point that is unique and computed — the Gödel sentence revealed as consistency, Henkin's sentence as ⊤, each disguise lifted to show the single thing beneath. The refinement adds nothing to the construction except the one structure that makes it rigid: well-foundedness, which is Löb's law, which is the box. Existence was the instances; uniqueness is the refinement.