Admissible and Restrained Revision

R. Booth and T. Meyer

Volume 26, 2006

Links to Full Text:

Abstract:
As partial justification of their framework for iterated belief revision Darwiche and Pearl convincingly argued against Boutilier's natural revision and provided a prototypical revision operator that fits into their scheme. We show that the Darwiche-Pearl arguments lead naturally to the acceptance of a smaller class of operators which we refer to as admissible. Admissible revision ensures that the penultimate input is not ignored completely, thereby eliminating natural revision, but includes the Darwiche-Pearl operator, Nayak's lexicographic revision operator, and a newly introduced operator called restrained revision. We demonstrate that restrained revision is the most conservative of admissible revision operators, effecting as few changes as possible, while lexicographic revision is the least conservative, and point out that restrained revision can also be viewed as a composite operator, consisting of natural revision preceded by an application of a "backwards revision" operator previously studied by Papini. Finally, we propose the establishment of a principled approach for choosing an appropriate revision operator in different contexts and discuss future work.

Extracted Text


Journal of Artificial Intelligence Research 26 (2006) 127-151 Submitted 8/05;
published 6/06

Admissible and Restrained Revision Richard Booth richard.b@msu.ac.thFaculty
of Informatics Mahasarakham UniversityMahasarakham 44150, Thailand

Thomas Meyer Thomas.Meyer@nicta.com.au National ICT Australia and University
of New South Wales 223 Anzac Parade Kensington, NSW 2052, Australia

Abstract As partial justification of their framework for iterated belief
revision Darwiche andPearl convincingly argued against Boutilier's natural
revision and provided a prototypical

revision operator that fits into their scheme. We show that the Darwiche-Pearl
argumentslead naturally to the acceptance of a smaller class of operators
which we refer to as admissible. Admissible revision ensures that the penultimate
input is not ignored completely,thereby eliminating natural revision, but
includes the Darwiche-Pearl operator, Nayak's lexicographic revision operator,
and a newly introduced operator called restrained revision.We demonstrate
that restrained revision is the most conservative of admissible revision
operators, effecting as few changes as possible, while lexicographic revision
is the least con-servative, and point out that restrained revision can also
be viewed as a composite operator, consisting of natural revision preceded
by an application of a "backwards revision" oper-ator previously studied
by Papini. Finally, we propose the establishment of a principled approach
for choosing an appropriate revision operator in different contexts and discussfuture
work.

1. Introduction The ability to rationally change one's knowledge base in
the face of new information which possibly contradicts the currently held
beliefs is a basic characteristic of intelligent behaviour. Thus the question
of belief revision is of crucial importance in Artificial Intelligence. In
the last twenty years this question has received considerable attention,
starting from the work of Alchourr'on, G"ardenfors, and Makinson (1985) -
usually abbreviated to just AGM - who proposed a set of rationality postulates
which any reasonable revision operator should satisfy. A semantic construction
of revision operators was later provided by Katsuno and Mendelzon (1991),
according to which an agent has in its mind a plausibility ordering - a total
preorder - over the set of possible worlds, with the knowledge base associated
to this ordering being identified with the set of sentences true in all the
most plausible worlds. This approach dates back to the work of Lewis (1973)
on counterfactuals. It was introduced into the belief revision literature
by Grove (1988) and Spohn (1988). Given a new sentence - or epistemic input
- ff, the revised knowledge base is set as the set of sentences true in all
the most plausible worlds in which ff holds. As was shown by Katsuno and
Mendelzon (1991), the family of operators defined by this construction coincides
exactly with the family of opcfl2006 AI Access Foundation and Morgan Kaufmann
Publishers. All rights reserved.

Booth & Meyer erators satisfying the AGM postulates. Due to its intuitive
appeal, this construction came to be widely used in the area. However, researchers
soon began to notice a deficiency with it - although it prescribes how to
obtain a new knowledge base, it remains silent on how to obtain a new plausibility
ordering which can then serve as a target for the next epistemic input. Thus
it is not rich enough to deal adequately with the problem of iterated belief
revision. This paper is a contribution to the study of this problem.

Most iterated revision schemes are sensitive to the history of belief changes1,
based on a version of the "most recent is best" argument, where the newest
information is of higher priority than anything else in the knowledge base.
Arguably the most extreme case of this is Nayak's lexicographic revision
(Nayak, 1994; Nayak, Pagnucco, & Peppas, 2003). However, there are operators
where, once admitted to the knowledge base, it rapidly becomes as much of
a candidate for removal as anything else in the set when another, newer,
piece of information comes along, Boutilier's natural revision (1993, 1996)
being a case in point. A dual to this is what Rott (2003) terms radical revision
where the new information is accepted with maximal, irremediable entrenchment
- see also Segerberg (1998). Another issue to consider is the problem termed
temporal incoherence (Rott, 2003):

the comparative recency of information should translate systematically into
comparative importance, strength or entrenchment

In an influential paper Darwiche and Pearl (1997) proposed a framework for
iterated revision. Their proposal is characterised in terms of sets of syntactic
and semantic postulates, but can also be viewed from the perspective of conditional
beliefs. It is an extension of the formulation by Katsuno and Mendelzon (1991)
of AGM revision (Alchourr'on et al., 1985). To justify their proposal Darwiche
and Pearl mount a comprehensive argument. The argument includes a critique
of natural revision, which is shown to admit too few changes. In addition,
they provide a concrete revision operator which is shown to satisfy their
postulates. In many ways this can be seen as the prototypical Darwiche-Pearl
operator. It is instructive to observe that the two best-known operators
satisfying the Darwiche-Pearl postulates, natural revision and lexicographic
revision, form the opposite extremes of the Darwiche-Pearl framework: Natural
revision is the most conservative Darwiche-Pearl operator, in the sense that
it effects as few changes as possible, while lexicographic revision is the
least conservative.

In this paper we show that the Darwiche-Pearl arguments lead naturally to
the acceptance of a smaller class of operators which we refer to as admissible.
We provide characterisations of admissible revision, in terms of syntactic
as well as semantic postulates. Admissible revision ensures that the penultimate
input is not ignored completely. A consequence of this is that natural revision
is eliminated. On the other hand, admissible revision includes the prototypical
Darwiche-Pearl operator as well as lexicographic revision, the latter result
also showing that lexicographic revision is the least conservative of the
admissible operators. The removal of natural revision from the scene leaves
a gap which is filled by the introduction of a new operator we refer to as
restrained revision. It is the most conservative of admissible revision operators,
and can thus be seen as an appropriate replacement of natural revision. We
give a syntactic and a semantic characterisation of restrained revision,

1. An external revision scheme like that of Areces and Becher (2001) and
Freund and Lehmann (1994) is

not.

128

Admissible and Restrained Revision and demonstrate that it satisfies desirable
properties. In particular, and unlike lexicographic revision, it ensures
that older information is not discarded unnecessarily, and it shows that
the problem of temporal incoherence can be dealt with.

Although natural revision does not feature in the class of admissible revision
operators, we show that it still has a role to play in iterated revision,
provided it is first tempered appropriately. We show that restrained revision
can also be viewed as a composite operator, consisting of natural revision
preceded by an application of a "backwards revision" operator previously
studied by Papini (2001).

The paper is organised as follows. After outlining some notation, we review
the DarwichePearl framework in Section 2. This is followed by a discussion
of admissible revision in Section 3. In Section 4 we introduce restrained
revision, and in Section 5 we show how it can be defined as a composite operator.
Section 6 discusses the possibility of enriching epistemic states as a way
of determining the appropriate admissible revision operator in a particular
context. In this section we also conclude and briefly discuss some future
work.

1.1 Notation We assume a finitely generated propositional language L which
includes the constants ? and ?, is closed under the usual propositional connectives,
and is equipped with a classical model-theoretic semantics. V is the set
of valuations of L and [ff] (or [B]) is the set of models of ff 2 L (or B
` L). Classical entailment is denoted by ffl and logical equivalence by j.
We also use Cn to denote the operation of closure under classical entailment.
Greek letters ff, fi, . . . stand for arbitrary sentences. In our examples
we sometimes use the lower case letters p, q, and r as propositional atoms,
and sequences of 0s and 1s to denote the valuations of the language. For
example, 01 denotes the valuation, in a language generated by p and q, in
which p is assigned the value 0 and q the value 1, while 011 denotes the
valuation, in a language generated by p, q and r, in which p is assigned
the value 0 and both q and r the value 1. Whenever we use the term knowledge
base we will always mean a set of sentences X which is deductively closed,
i.e., X = Cn(X).

2. Darwiche-Pearl Revision Darwiche and Pearl (1997) reformulated the AGM
postulates (Alchourr'on et al., 1985) to be compatible with their suggested
approach to iterated revision. This necessitated a move from knowledge bases
to epistemic states. An epistemic state contains, in addition to a knowledge
base, all the information needed for coherent reasoning including, in particular,
the strategy for belief revision which the agent wishes to employ at a given
time. Darwiche and Pearl consider epistemic states as abstract entities,
and do not provide a single formal representation. It is thus possible to
talk about two epistemic states E and F being identical (denoted by E = F)
, but yet syntactically different.2 This has to be borne in mind below, particularly
when considering postulate (E * 5). In Darwiche and Pearl's reformulated
postulates * is a belief change operator on epistemic states, not knowledge
bases. We denote by B(E) the knowledge base extracted from an epistemic state
E.

(E*1) B(E * ff) = Cn(B(E * ff))

2. Personal communication with Adnan Darwiche.

129

Booth & Meyer (E*2) ff 2 B(E * ff) (E*3) B(E * ff) ` B(E) + ff (E*4) If ~ff
/2 B(E) then B(E) + ff ` B(E * ff) (E*5) If E = F and ff j fi then B(E *
ff) = B(F * fi) (E*6) ? 2 B(E * ff) iff ffl ~ff (E*7) B(E * (ff ^ fi)) `
B(E * ff) + fi (E*8) If ~fi /2 B(E * ff) then B(E * ff) + fi ` B(E * (ff
^ fi)) Darwiche and Pearl then show, via a representation result similar
to that of Katsuno and Mendelzon (1991), that revision on epistemic states
can be represented in terms of plausibility orderings associated with epistemic
states.3 More specifically, every epistemic stateE

has associated with it a total preorder _E on all valuations, with elements
lower down in the ordering deemed more plausible. Moreover, for any two epistemic
states E and F which are identical (but may be syntactically different),
it has to be the case that _E=_F. Let min(ff, _E) denote the minimal models
of ff under _E. The knowledge base associated with the epistemic state is
obtained by considering the minimal models in _E i.e., [B(E)] = min(?, _E).
Observe that this means that B(E) has to be consistent. This requirement
enables us to obtain a unique knowledge base from the total preorder _E.
Preservation of the results in this paper when this requirement is relaxed
is possible, but technically messy.

The observant reader will note that our assumption of a consistent B(E) is
incompatible with a successful revision by ?. This requires that we jettison
(E*6) and insist on consistent epistemic inputs only. (The left-to-right
direction of (E*6) is rendered superfluous by (E*1) and the assumption that
knowledge bases extracted from all epistemic states have to be consistent.)
The other difference between the original AGM postulates and the DarwichePearl
reformulation - first inspired by a critical observation by Freund and Lehmann
(1994) - occurs in (E*5), which states that revising by logically equivalent
sentences results in epistemic states with identical associated knowledge
bases. This is a weakening of the original AGM postulate, phrased in our
notation as follows:

(B*5) If B(E) = B(F) and ff j fi then B(E * ff) = B(F * fi) (B*5) states
that two epistemic states with identical associated knowledge bases will,
after having been revised by equivalent inputs, produce two epistemic states
with identical associated knowledge bases. This is stronger than (E*5) which
requires equivalent associated knowledge bases only if the original epistemic
states were identical. We shall refer to the reformulated AGM postulates,
with (E*6) removed, as DP-AGM.

DP-AGM guarantees a unique extracted knowledge base when revision by ff is
performed. It sets [B(E * ff)] equal to min(ff, _E) and thereby fixes the
most plausible valuations in _E*ff. However, it places no restriction on
the rest of the ordering. The purpose

3. Alternative frameworks for studying iterated revision, both based on using
sequences of sentences rather

than plausibility orderings, are those of Lehmann (1995) and Konieczny and
Pino-P'erez (2000).

130

Admissible and Restrained Revision of the Darwiche-Pearl framework is to
constrain this remaining part of the new ordering. It is done by way of a
set of postulates for iterated revision (Darwiche & Pearl, 1997). (Throughout
the paper we follow the convention that * is left associative.)

(C1) If fi ffl ff then B(E * ff * fi) = B(E * fi) (C2) If fi ffl ~ff then
B(E * ff * fi) = B(E * fi) (C3) If ff 2 B(E * fi) then ff 2 B(E * ff * fi)
(C4) If ~ff /2 B(E * fi) then ~ff /2 B(E * ff * fi) The postulate (C1) states
that when two pieces of information--one more specific than the other--arrive,
the first is made redundant by the second. (C2) says that when two contradictory
epistemic inputs arrive, the second one prevails; the second evidence alone
yields the same knowledge base. (C3) says that a piece of evidence ff should
be retained after accommodating more recent evidence fi that entails ff given
the current knowledge base. (C4) simply says that no epistemic input can
act as its own defeater. We shall refer to the class of belief revision operators
satisfying DP-AGM and (C1) to (C4) as DP-revision. The following are the
corresponding semantic versions (with v, w 2 V ):

(CR1) If v 2 [ff], w 2 [ff] then v _E w iff v _E*ff w (CR2) If v 2 [~ff],
w 2 [~ff] then v _E w iff v _E*ff w (CR3) If v 2 [ff], w 2 [~ff] then v OEE
w only if v OEE*ff w (CR4) If v 2 [ff], w 2 [~ff] then v _E w only if v _E*ff
w (CR1) states that the relative ordering between ff-worlds remain unchanged
following an ffrevision, while (CR2) requires the same for ~ff-worlds. (CR3)
requires that, for an ff-world strictly more plausible than a ~ff-world,
this relationship be retained after an ff-revision, and (CR4) requires the
same for weak plausibility. Darwiche and Pearl showed that, given DP-AGM,
a precise correspondence obtains between (Ci) and (CRi) above (i = 1, 2,
3, 4).

One of the guiding principles of belief revision is the principle of minimal
change: changes to a belief state ought to be kept to a minimum. What is
not always clear is what ought to be minimised. In AGM theory the prevailing
wisdom is that minimal change refers to the sets of sentences corresponding
to knowledge bases. But there are other interpretations. With the move from
knowledge bases to epistemic states, minimal change can be defined in terms
of the fewest possible changes to the associated plausibility ordering _E.
In what follows we will frequently have the opportunity to refer to the latter
interpretation of minimal change. See also the discussion of this principle
by Rott (2000).

3. Admissible Revision In this section we consider two of the best-known
DP-operators, and propose three postulates to be added to the Darwiche-Pearl
framework. The first is more of a correction than a strengthening. We show
that the Darwiche-Pearl representation of the principle of the irrelevance
of syntax is too weak and suggest an appropriate strengthened postulate.

131

Booth & Meyer The second is suggested by some of the arguments advanced by
Darwiche and Pearl themselves. It eliminates one of the operators they criticise,
and is satisfied by the sole operator they provide as an instance of their
framework. The addition of these two postulates to the Darwiche-Pearl framework
leads to the definition of the class of admissible revision operators. Finally,
we point out a problem with Nayak's well-known lexicographic revision operator
and propose a third postulate to be added. The consequences of insisting
on the addition of this third postulate are discussed in detail in Section
4.

As mentioned in Section 2, Darwiche and Pearl replaced the original AGM postulate
(B * 5) with (E * 5). Both are attempts at an appropriate formulation of
the principle of the irrelevance of syntax, popularised by Dalal (1988).
But whereas (B * 5) has been shown to be too strong, as shown by Darwiche
and Pearl (1997), closer inspection reveals that (E * 5) is too weak. To
be more precise, it fails as an adequate formulation of syntax irrelevance
for iterated revision. It specifies that revision by two equivalent sentences
should produce epistemic states with identical associated knowledge bases,
but does not require that these epistemic states, after another revision
by two equivalent sentences, also have to produce epistemic states with identical
associated knowledge bases. So, as can be seen from the following example,
under DP-AGM (and indeed, even if (C1) to (C4) are added) it is possible
for B(E * ff * fl) to differ from B(E * fi * ffi) even if ff is equivalent
to fi and fl is equivalent to ffi.

Example 1 Consider a propositional language generated by the two atoms p
and q and letE

be an epistemic state such that B(E) = Cn(p . q). Now consider the two epistemic
statesE0

and E00 such that B(E0) = B(E00) = Cn(p), 01 OEE0 00 and 00 OEE00 01. Observe
that this gives complete descriptions of _E0 and _E00 . It is tedious, but
not difficult, to verify that setting _E*p=_E0 and _E*~~p=_E00 is compatible
with DP-AGM. But observe then that B(E * p * ~p) = Cn(~p ^ q), while B(E
* ~~p * ~p) = Cn(~p ^ ~q).

As a consequence of this, we propose that (E*5) be replaced by the following
postulate: (E*50) If E = F, ff j fi and ffi j fl then B(E * ff * fl) = B(F
* fi * ffi) The semantic equivalent of (E*50) looks like this: (ER*50) If
E = F and ff j fi then _E*ff=_F*fi (ER*50) states that the revision of two
identical epistemic states by two equivalent sentences has to result in epistemic
states with identical associated total preorders, not just in epistemic states
with identical associated knowledge bases.

Proposition 1 (E*50) and (ER*50) are equivalent, given DP-AGM. Proof: The
proof that (E*50) follows from (ER*50) is straightfoward. For the converse,
suppose that (ER*50) does not hold; i.e. ff j fi and _F*ff6=_E*fi for some
ff and fi. This means there exist x, y 2 V such that x _E*ff y but y OEF*fi
x. Now let fl be such that [fl] = {x, y}. Then x 2 [B(E * ff * fl)], but
[B(F * fi * fl)] = {y}, and so B(E * ff * fl) 6= B(F * fi * fl); a violation
of (E*50). Lambda 

132

Admissible and Restrained Revision From this it should already be clear that
(E*50) is a desirable property. This view is bolstered further by observing
that all the well-known iterated revision operators satisfy it; natural revision,
the Darwiche-Pearl operator *, and Nayak's lexicographic revision, the first
and third of which are to be discussed in detail below. In fact, we conjecture
that Darwiche and Pearl's intention was to replace (B*5) with (E*50), not
with (E*5) and propose this as a permanent replacement.

Definition 1 The set of postulates obtained by replacing (E*5) with (E*50)
in DP-AGM is defined as RAGM.

Observe that RAGM, like DP-AGM, guarantees that [B(E * ff)] = min(ff, _E).

Rule (E*50) is the first of the new postulates we want to add to the Darwiche-Pearl
framework. We now lead up to the second. One of the oldest known DP-operators
is natural revision, usually credited to Boutilier (1993, 1996), although
the idea can also be found in (Spohn, 1988). Its main feature is the application
of the principle of minimal change to epistemic states. It is characterised
by DP-AGM plus the following postulate:

(CB) If ~fi 2 B(E * ff) then B(E * ff * fi) = B(E * fi) (CB) requires that,
whenever B(E * ff) is inconsistent with fi, revising E * ff with fi will
completely ignore the revision by ff. Its semantic counterpart is as follows:

(CBR) For v, w /2 [B(E * ff)], v _E*ff w iff v _E w As shown by Darwiche
and Pearl (1997), natural revision minimises changes in conditional beliefs,
with fi | ff being a conditional belief of an epistemic state E iff fi 2
B(E * ff). In fact, Darwiche and Pearl show (Lemma 1, p. 7), that keeping
_E and _E*ff as similar as possible has the effect of minimising the changes
in conditional beliefs to a revision. So, from (CBR) it is clear that natural
revision is an application of minimal change to epistemic states. It requires
that, barring the changes mandated by DP-AGM, the relative ordering of valuations
remains unchanged, thus keeping _E*ff as similar as possible to _E. In that
sense then, natural revision is the most conservative of all DP-operators.
Such a strict adherence to minimal change is inadvisable and needs to be
tempered appropriately, an issue that will be addressed in Section 5. Darwiche
and Pearl have shown that (CB) is too strong, and that natural revision is
not all that natural, sometimes yielding counterintuitive results.

Example 2 (Darwiche & Pearl, 1997) We encounter a strange animal and it appears
to be a bird, so we believe it is one. As it comes closer, we see clearly
that the animal is red, so we believe it is a red bird. To remove further
doubts we call in a bird expert who examines it and concludes that it is
not a bird, but some sort of animal. Should we still believe the animal is
red? (CB) tells us we should no longer believe it is red. This can be seen
by substituting B(E) = Cn(~fi) = Cn(bird) and ff j red in (CB), instructing
us to totally ignore the observation ff as if it had never taken place.

Given Example 2, it is perhaps surprising that Darwiche and Pearl never considered
postulate (P) below. In this example, the argument for retaining the belief
that the creature is red hinges upon the assumption that being red is not
in conflict with the newly obtained information that it is a kind of animal.
That is, because learning that the creature is an

133

Booth & Meyer animal will not automatically disqualify it from being red,
it is reasonable to retain the belief that it is red. More generally then,
whenever ff is consistent with a revision by fi, it should be retained if
an ff-revision is inserted just before the fi-revision.

(P) If ~ff /2 B(E * fi) then ff 2 B(E * ff * fi) Applying (P) to Example
2 we see that, if red is consistent with B(E * ~bird), we have red 2 B(E
* red * ~bird). Put differently, (P) requires that you retain your belief
in the animal's redness, provided this would not have been precluded if the
observation about it being red had never occurred. (P) was also proposed
independently of the present paper by Jin and Thielscher (2005) where it
is named Independence. The semantic counterpart of (P) looks like this:

(PR) For v 2 [ff] and w 2 [~ff], if v _E w then v OEE*ff w (PR) requires
an ff-world v that is at least as plausible as a ~ff-world w to be strictly
more plausible than w after an ff-revision. The following result was also
proved independently by Jin and Thielscher (2005).

Proposition 2 If * satisfies DP-AGM, then it satisfies (P) iff it also satisfies
(PR). Proof: For (P))(PR), let v 2 [ff], w 2 [~ff], v _E w, and let fi be
such that [fi] = {v, w}. This means that ~ff /2 B(E * fi) (since [B(E * fi)]
is either equal to {v} or to {v, w}), and so, by (P), ff 2 B(E * ff * fi).
And therefore v OEE*ff w, for if not, we would have that w _E*ff v, from
which it follows that w 2 [B(E * ff * fi)], and so ff /2 B(E * ff * fi)].

For (P)((PR), suppose that ~ff /2 B(E * fi). This means there is a v 2 [ff]
" [B(E * fi)]; that is, v _E w for every w 2 [fi]. And this means that ff
2 B(E * ff * fi). For if not, it means there is an x in [~ff] " [B(E * ff
* fi)]. Now, since x 2 [B(E * ff * fi)], it follows from DP-AGM that x _E*ff
w for every w 2 [fi], and so x _E*ff v (since v 2 [B(E * fi)] ` [fi]). But
it also follows from DP-AGM that x 2 [fi], and therefore that v _E x, and
by (PR) it then follows that v OEE*ff x; a contradiction. Lambda 

Rule (PR) enforces certain changes in the ordering _E after receipt of ff.
In fact as soon as there exist an ff-world v and a ~ff-world w on the same
plausibility level somewhere in _E (in that both v _E w and w _E v), (PR)
implies _E*ff6=_E. Furthermore these changes must also occur even when ff
is already believed in E to begin with, i.e., ff 2 B(E). (Although of course
if ff 2 B(E) then B(E * ff) = B(E), i.e., the knowledge base associated to
E will remain unchanged - this follows from DP-AGM.) The rules (P)/(PR) ensure
input ff is believed with a certain minimal strength of belief - enough to
help it survive the next revision. The point that being informed of ff can
lead to an increase in the strength of an agent's belief in ff, even in cases
where the agent already believes ff to begin with, has been made before,
e.g., by Friedman and Halpern (1999, p.405). Note that (P) has the antecedent
of (C4) and the consequent of (C3). In fact, (P) is stronger than (C3) and
(C4) combined. This is easily seen from the semantic counterparts of these
postulates. It also follows that the only concrete example of an iterated
revision operator provided by Darwiche and Pearl, the operator they refer
to as * and which employs a form of Spohnian conditioning (Spohn, 1988),
satisfies (PR), and therefore (P) as well. Furthermore, by adopting (P) we
explicitly

134

Admissible and Restrained Revision exclude natural revision as a permissible
operator. So accepting (P) is a move towards the viewpoint that information
obtained before the latest input ought not to be discarded unnecessarily.

Based on the analysis of this section we propose a strengthening of the Darwiche-Pearl
framework in which (E*5) is replaced by (E*50) and (C3) and (C4) are replaced
by (P).

Definition 2 A revision operator is admissible iff it satisfies RAGM, (C1),
(C2), and (P). Inasmuch as the Darwiche-Pearl framework can be visualised
as one in which ff-worlds slide "downwards" relative to ~ff-worlds, admissible
revision ensures, via (PR), that this "downwards" slide is a strict one.

We now pave the way for the third postulate we would like to add in this
paper to the Darwiche-Pearl framework. To begin with, note that another view
of (P) is that it is a significant weakening of the following property, first
introduced by Nayak et al. (1996):

(Recalcitrance) If ~ff /2 Cn(fi) then ff 2 B(E * ff * fi) Semantically, (Recalcitrance)
corresponds to the following property, as was pointed out by Booth (2005)
and implicitly contained in the work of Nayak et al. (2003):

(R) For v 2 [ff], w 2 [~ff], v OEE*ff w (Recalcitrance) is a property of
the lexicographic revision operator, the second of the wellknown DP-operators
we consider, and one that is just as old as natural revision. It was first
introduced by Nayak (1993) and has been studied most notably by Nayak et
al. (1994, 2003), although, as with natural revision, the idea actually dates
back to Spohn (1988). In fact, lexicographic revision is characterised by
DP-AGM (and also RAGM) together with (C1), (C2) and (Recalcitrance), a result
that is easily proved from the semantic counterparts of these properties
and Nayak et al.'s semantic characterisation of lexicographic revision in
(2003). Informally, lexicographic revision takes the assumption of "most
recent is best", on which the Success postulate (E * 2) is based, and adds
to it the assumption of temporal coherence. In combination, this leads to
the stronger assumption that "more recent is better".

An analysis of the semantic characterisation of lexicographic revision shows
that it is the least conservative of the DP-operators, in the sense that
it effects the most changes in the relative ordering of valuations permitted
by DP-AGM (or RAGM for that matter) and the Darwiche-Pearl postulates. Since
it is also an admissible revision operator, it follows that it is also the
least conservative admissible operator.

The problem with (Recalcitrance) is that the decision of whether to accept
fi after a subsequent revision by ff is completely determined by the logical
relationship between fi and ff - the epistemic state E is robbed of all influence.
The replacement of (Recalcitrance) by the weaker (P) already gives E more
influence in the outcome. What we will do shortly is constrain matters further
by giving E as much influence as allowed by the postulates for admissible
revision. Such a move ensures greater sensitivity to the agent's epistemic
record in making further changes.

Note that lexicographic revision assumes that more recent information takes
complete precedence over information obtained previously. Thus, when applied
to Example 2, it

135

Booth & Meyer requires us to believe that the animal, previously assumed
to be a bird, is indeed red, because red is a recent input which does not
conflict with the most recently obtained input. While this is a reasonable
approach in many circumstances, a dogmatic adherence to it can be problematic,
as the following example shows.

Example 3 While holidaying in a wildlife park we observe a creature which
is clearly red, but we are too far away to determine whether it is a bird
or a land animal. So we adopt the knowledge base B(E) = Cn(red). Next to
us is a person with knowledge of the local area who declares that, since
the creature is red, it is a a bird. We have no reason to doubt him, and
so we adopt the belief red ! bird. Now the creature moves closer and it becomes
clear that it is not a bird. The question is, should we continue believing
that it is red? Under the circumstances described above we want our initial
observation to take precedence, and believe that the animal is red. But lexicographic
revision does not allow us to do so.

Other examples along similar lines speaking against a rigid acceptance of
(Recalcitrance) are those of Glaister (1998, p.31) and Jin and Thielscher
(2005, p.482).

While (P) allows for the possibility of retaining the belief that the animal
is red, it does not enforce this belief. The rest of this section is devoted
to the discussion of a property which does so. To help us express this property,
we introduce an extra piece of terminology and notation.

Definition 3 ff and fi counteract with respect to an epistemic state E, written
ff !E fi, iff ~fi 2 B(E * ff) and ~ff 2 B(E * fi).

The use of the term counteract to describe this relation is taken from Nayak
et al. (2003). ff !E fi means that, from the viewpoint of E, ff and fi tend
to "exclude" each other. We will now discuss a few properties of this relation.
First note that !E depends only on the total preorder _E obtained from E.
Indeed we have ff !E fi iff both min(ff, _E) ` [~fi] and min(fi, _E) ` [~ff].
This in turn can be reformulated in the following way, which provides a useful
aid to visualise a counteracts relation:

Proposition 3 ff !E fi iff there exist v 2 [ff], w 2 [fi] such that both
v OEE x and w OEE x for all x 2 min(ff ^ fi, _E).

Proof: First note that, since obviously min(ff, _E) ` [ff], min(ff, _E) `
[~fi] may be rewritten as min(ff, _E) ` [~(ff ^ fi)]. Using the fact that
_E is a total preorder, it is easy to see that this can hold iff there exists
v 2 [ff] such that v OEE x for all x 2 min(ff ^ fi, _E). In the same way
we may rewrite min(fi, _E) ` [~ff] as min(fi, _E) ` [~(ff ^ fi)], which is
then equivalent to saying there exists w 2 [~fi] such that w OEE x for all
x 2 min(ff ^ fi, _E). Lambda 

In other words, Proposition 3 says ff !E fi iff there exist both an ff-world
and a fi-world which are strictly more plausible than the most plausible
(ff ^ fi)-worlds. Other immediate things to note about !E are that it is
symmetric, and that it is syntax-independent, i.e., if ff !E fi and fi j
fi0 then ff !E fi0. Furthermore if ff and fi are logically inconsistent with
each other then ff !E fi, but the converse need not hold (see the short example
after the next proposition for confirmation). Thus !E can be seen as a weak
form of inconsistency. The next result gives two more properties of !E:

136

Admissible and Restrained Revision Proposition 4 Given RAGM, the following
properties hold for !E: (i) If ff !E fi and fl !E fi then (ff . fl) !E fi
(ii) If ff 6!E fi and fl 6!E fi then (ff . fl) 6!E fi

Proof: (i) Suppose ff !E fi and fl !E fi. To show (ff . fl) !E fi we need
to show both ~fi 2 B(E * (ff . fl)) and ~(ff . fl) 2 B(E * fi). For the former
we already have both~

fi 2 B(E * ff) and ~fi 2 B(E * fl) from ff !E fi and fl !E fi respectively.
Since it follows from RAGM that B(E * *) " B(E * O/) ` B(E * (* . O/)) for
any *, O/ 2 L, we can conclude from this ~fi 2 B(E * (ff . fl)). For the
latter we already have both ~ff 2 B(E * fi) and~

fl 2 B(E * fi) from ff !E fi and fl !E fi respectively. And from this we
can conclude~ (ff . fl) 2 B(E * fi), again using RAGM (specifically (E *
1)). (ii) Suppose ff 6!E fi and fl 6!E fi. Firstly, if either ~ff 62 B(E
* fi) or ~fl 62 B(E * fi) then we must have ~(ff . fl) 62 B(E * fi) by RAGM
and so (ff . fl) 6!E fi as required. So suppose both ~ff 2 B(E * fi) and
~fl 2 B(E * fi). Then, since ff 6!E fi and fl 6!E fi, this means we have
both ~fi 62 B(E * ff) and ~fi 62 B(E * fl). Since it follows from RAGM that
B(E * (* . O/)) ` B(E * *) [ B(E * O/) for any *, O/ 2 L, it follows from
these two that~

fi 62 B(E * (ff . fl)) and so also in this case (ff . fl) 6!E fi as required.
Lambda 

The first property above says that if fi counteracts with two sentences separately,
then it counteracts with their disjunction, while the second says that it
cannot counteract with a disjunction without counteracting with at least
one of the disjuncts. Obviously these properties also hold for the binary
relation of logical inconsistency. However one departure from the inconsistency
relation is that it is possible to have both fl 6!E fi and (ff.fl) !E fi.
To see this assume for the moment L is generated by just three propositional
atoms {p, q, r} and take ff = p, fi = q and fl = r. Then take _E to be such
that its lowest plausibility level contains only the two valuations 010 and
100, and the next plausibility level only the valuation 111.

We are now ready to introduce our third postulate. It is the following:

(D) If ff !E fi then ~ff 2 B(E * ff * fi) (D) requires that, whenever ff
and fi counteract with respect to E, ff should be disallowed when an ff-revision
is followed by a fi-revision. That is, when the fi-revision of E * ff takes
place, the information encoded in E takes precedence over the information
contained inE *

ff. Darwiche and Pearl (1997) considered this property (it is their rule
(C6)) but argued against it, citing the following example.

Example 4 (Darwiche & Pearl, 1997) We believe that exactly one of John and
Mary committed a murder. Now we get persuasive evidence indicating that John
is the murderer. This is followed by persuasive information indicating that
Mary is the murderer. Let ff represent that John committed the murder and
fi that Mary committed the murder. Then (D) forces us to conclude that Mary,
but not John, was involved in the murder. This, according to Darwiche and
Pearl, is counterintuitive, since we should conclude that both were involved
in committing the murder.

Darwiche and Pearl's argument against (D) rests upon the assumption that
more recent information ought to take precedence over information previously
obtained. But as we have

137

Booth & Meyer seen in Example 3, this is not always a valid assumption. In
fact, the application of (D) to Example 3, with ff = red ! bird and fi =
~bird, produces the intuitively correct result of a belief in the observed
animal being red: red 2 B(E * (red ! bird) * ~bird).

Another way to gain insight into the significance of (D) is to consider its
semantic counterpart:

(DR) For v 2 [~ff], w 2 [ff], and w /2 [B(E * ff)], if v OEE w then v OEE*ff
w (DR) curtails the rise in plausiblity of ff-worlds after an ff-revision.
It ensures that, with the exception of the most plausible ff-worlds, the
relative ordering between an ff-world and the ~ff-worlds more plausible than
it remains unchanged.

Proposition 5 Whenever a revision operator * satisfies RAGM, then * satisfies
(D) iff it satisfies (DR).

Proof: For (D))(DR), suppose that v 2 [~ff], w 2 [ff], w /2 [B(E * ff)],
v OEE w, and let fi be such that [fi] = {v, w}. Then ~ff 2 B(E * fi) and
~fi 2 B(E * ff), and so, by (D).~

ff 2 B(E * ff * fi). From this it follows that v OEE*ff w. For if not, we
would have that w _E*ff v, which means that w 2 [B(E * ff * fi)], and therefore
that ~ff /2 B(E * ff * fi); a contradiction.

For (D)((DR), suppose that ~fi 2 B(E * ff) and that ~ff 2 B(E * fi), but
assume that~ ff /2 B(E * ff * fi). This means there is a w 2 [ff] that is
also in [B(E * ff * fi)]. Now observe that w /2 [B(E * fi)] since w is an
ff-model. Also, since w 2 [B(E * ff * fi)], it follows from RAGM that w is
a fi-model, and therefore w /2 [B(E * ff)]. Our supposition of~

ff 2 B(E * fi) means that min(fi, _E) ` [~ff]. Since w 2 [ff] " [fi] it thus
follows that there is a v 2 [fi] " [~ff] such that v OEE w. By (DR) it then
follows that v OEE*ff w. But then w cannot be a model of B(E * ff * fi);
a contradiction. Lambda 

4. Restrained Revision We now strengthen the requirements on admissible revision
(those operators satisfying RAGM, (C1), (C2) and (P)) by insisting that (D)
is satisfied as well. To do so, let us first consider the semantic definition
of an interesting admissible revision operator. Recall that RAGM fixes the
set of (_E*ff)-minimal models, setting them equal to min(ff, _E), but places
no restriction on how the remaining valuations should be ordered. The following
property provides a unique relative ordering of the remaining valuations.

(RR) 8v, w /2 [B(E * ff)], v _E*ff w iff ae v OEE w or,v _E w and (v 2 [ff]
or w 2 [~ff]) (RR) says that the relative ordering of the valuations that
are not (_E*ff)-minimal remains unchanged, except for ff-worlds and ~ff-worlds
on the same plausibility level; those are split into two levels with the
ff-worlds more plausible than the ~ff-worlds. So RAGM combined with (RR)
fixes a unique ordering of valuations.

Definition 4 The revision operator satisfying RAGM and (RR) is called restrained
revision.

138

Admissible and Restrained Revision It turns out that within the framework
provided by admissible revision, it is only restrained revision that satisfies
(D). We prove this with the help of the following lemma, asserting the equivalence
of (RR) to (CR1), (CR2), (PR) and (DR) in the presence of RAGM.

Lemma 1 Whenever a revision operator * satisfies RAGM, then * satisfies (RR)
iff it satisfies (CR1), (CR2), (PR), and (DR).

Proof: For (CR1)((RR), pick v, w 2 [ff]. If v 2 [B(E * ff)] then (CR1) follows
from RAGM. If not, it follows from RAGM that w /2 [B(E * ff)], and then (CR1)
follows from a direct application of (RR). For (CR2)((RR), pick v, w 2 [~ff].
From RAGM it follows that v, w /2 [B(E * ff)], and then we obtain (CR2) from
a direct application of (RR).

Observe that (RR) can be rewritten as

(RR0) 8v, w /2 [B(E * ff)], v OEE*ff w iff ae v _E w and,v OEE w or (v 2
[ff] and w 2 [~ff]) Now, for (PR)((RR), pick v 2 [ff] and w 2 [~ff]. If v
2 [B(E * ff)] then (PR) follows from RAGM. If not, it follows from a direct
application of (RR0). For (DR)((RR), pick v 2 [~ff], w 2 [ff], and w /2 [B(E
* ff)]. Then (PR) follows from a direct application of (RR0).

For (CR1), (CR2), (PR), (DR))(RR), let v, w /2 [B(E * ff)] and suppose that
v _E*ff w and v 6OEE w (i.e. w _E v). We have to show that v _E w and either
v 2 [ff] or w 2 [~ff]. Assume this is not the case. Then w OEE v or both
v 2 [~ff] and w 2 [ff]. Now, the second case is impossible because, together
with w _E v and (PR) it implies that w OEE*ff v; a contradiction. But the
first case is also impossible. To see why, observe that by (CR1) it implies
that v and w cannot both be ff-models, by (CR2) v and w cannot both be ~ffmodels,
by (DR) it cannot be the case that w 2 [~ff] and v 2 [ff]. And by (PR) it
cannot be the case that w 2 [ff] and v 2 [~ff]. This concludes the first
part of the proof of (CR1), (CR2), (PR), (DR))(RR). For the second part,
let v, w /2 [B(E * ff)] and suppose first that v OEE w. If v, w 2 [ff] then
v _E*ff w follows from (CR1). If v, w 2 [~ff] then v _E*ff w follows from
(CR2). If v 2 [ff] and w 2 [~ff] then v _E*ff w follows from (PR). If v 2
[~ff] and w 2 [ff] then v _E*ff w follows from (DR). Now suppose that v _E
w and either v 2 [ff] or w 2 [~ff]. If v 2 [ff] then v _E*ff w follows either
from (CR1) or (PR), depending on whether w 2 [ff] or w 2 [~ff]. And similarly,
if w 2 [~ff] then v _E*ff w follows either from (CR2) or (PR), depending
on whether v 2 [~ff] or v 2 [ff]. Lambda 

Theorem 2 RAGM, (C1), (C2), (P) and (D) provide an exact characterisation
of restrained revision.

Proof: The proof follows from Lemma 1, Proposition 2, Proposition 5, and
the correspondence between (C1) and (CR1), and (C2) and (CR2). Lambda 

Another interpretation of (RR) is that it maintains the relative ordering
of the valuations that are not (_E*ff)-minimal, except for the changes mandated
by (PR). From this it can be seen that restrained revision is the most conservative
of all admissible revision operators, in the sense that effects the least
changes in the relative ordering of valuations permitted

139

Booth & Meyer by admissible revision. So, in the context of admissible revision,
restrained revision takes on the role played by natural revision in the Darwiche-Pearl
framework.

In the rest of this section we examine some further properties of restrained
revision. Firstly, Examples 3 and 4 share some interesting structural properties.
In both, the initial knowledge base B(E) is pairwise consistent with each
of the subsequent sentences in the revision sequence, while the sentences
in each revision sequence are pairwise inconsistent. And in both examples
the information contained in the initial knowledge base B(E) is retained
after the revision sequence. These commonalities are instances of an important
general result. Let Gamma  denote the non-empty sequence of inputs fl1,
. . . , fln, and let E * Gamma  denote the revision sequence E * fl1 * .
. . * fln. Furthermore we shall refer to an epistemic state E as Gamma -compatible
provided that ~fli /2 B(E) for every i in {1, . . . , n}.

(O) If E is Gamma -compatible then B(E) ` B(E * Gamma ) (O) says that as
long as B(E) is not in direct conflict with any of the inputs in the sequence
fl1, . . . , fln, the entire B(E) has to be propagated to the knowledge base
obtained from the revision sequence E * fl1 * . . . * fln. This is a preservation
property that is satisfied by restrained revision.

Proposition 6 Restrained revision satisfies (O). Proof: We denote by E *
Gamma i, for i = 0, . . . , n, the revision sequence E * fl1, . . . , fli
(withE *

Gamma 0 = E). We give an inductive proof that, for 8v 2 [B(E)] and 8w /2
[B(E)], v OEE*Gamma i w for i = 0, . . . , n. In other words, every B(E)-world
is always strictly below every non B(E)- world. From this the result follows
immediately. For i = 0 this amounts to showing that v OEE w which follows
immediately from the definition of _E and B(E). Now pick any i = 1, . . .
, n and assume that v OEE*Gamma i-1 w. We consider four cases. If v, w 2
[fli] then it follows by (CR1) that v OEE*Gamma i w. If v, w 2 [~fli] then
it follows by (CR2) that v OEE*Gamma i w. If v 2 [fli] and w 2 [~fli] then
it follows by (PR) that v OEE*Gamma i w. And finally, suppose v 2 [~fli]
and w 2 [fli]. By Gamma i-compatibility there is an x 2 [B(E)] " [fli],
and by the inductive hypothesis, x OEE*Gamma i-1 w. So w /2 [B(E * Gamma
i)], and then it follows by (DR) that v OEE*Gamma i w. Lambda 

Although restrained revision preserves information which has not been directly
contradicted, it is not dogmatically wedded to older information. If neither
of two successive, but incompatible, epistemic states are in conflict with
any of the inputs of a sequence Gamma  = fl1, . . . , fln, it prefers the
latter epistemic state when revising by Gamma .

Proposition 7 Restrained revision satisfies the following property: (Q) If
E and E*ff are both Gamma -compatible but B(E)[B(E*ff) ffl ?, then B(E*ff)
` B(E*ff*Gamma )

and B(E) * B(E * ff * Gamma )

Proof: It follows immediately from Proposition 6 that B(E * ff) ` B(E * ff
* Gamma ). And B(E) * B(E * ff * Gamma ) then follows from the consistency
of B(E * ff * Gamma ). Lambda 

Next we consider another preservation property, but this time, unlike the
case for (O) and (Q), we look at circumstances where B(E) is incompatible
with some of the inputs in a revision sequence.

140

Admissible and Restrained Revision (S) If ~fi 2 B(E * ff) and ~fi 2 B(E *
~ff) then B(E * ff * ~ff * fi) = B(E * ff * fi) Note that, given RAGM, the
antecedent of (S) implies that ~fi 2 B(E). Thus (S) states that if ~fi is
believed initially, and that a subsequent commitment to either ff or its
negation would not change this fact, then after the sequence of inputs in
which fi is preceded by ff and~

ff, the second input concerning ff is nullified, and the older input regarding
ff is retained.

Proposition 8 Restrained revision satisfies (S). Proof: Suppose the antecedent
holds. If ~ff !E*ff fi then the consequent holds. In fact this can be seen
from the property (T) in Proposition 10 below. So suppose ~ff 6!E*ff fi.
Then either ff 62 B(E * ff * fi) or ~fi 62 B(E * ff * ~ff). This latter doesn't
hold by one of the assumptions together with (C2), so the former must hold.
This implies ~ff 2 B(E * fi) by (P). Combining this with the other assumption
we get ff !E fi. In this case we get B(E * ff * fi) = B(E * fi) (again using
(T)), while (since ~ff 6!E*ff fi) B(E * ff * ~ff * fi) = B(E * ff * (~ff
^ fi)) ((T) once more), which in turn equals B(E * (~ff ^ fi)) by (C2). Since~

ff 2 B(E * fi) this is in turn equal to B(E * fi) by RAGM as required. Lambda

We now provide a more compact syntactic representation of restrained revision.
First we show that (C1) and (P) can be combined into a single property, and
so can (C2) and (D).

Proposition 9 Given RAGM,

1. (C1) and (P) are together equivalent to the single rule

(C1P) If ~ff 62 B(E * fi) then B(E * ff * fi) = B(E * (ff ^ fi)) 2. (C2)
and (D) are together equivalent to the single rule

(C2D) If ff !E fi then B(E * ff * fi) = B(E * fi). Proof: For (C1),(P))(C1P),
suppose ~ff 62 B(E*fi). By (P) it follows that ff 2 B(E*ff*fi) which means,
by RAGM, that B(E * ff * fi) = B(E * ff * (ff ^ fi)). By (C1) it follows
that B(E*ff*(ff^fi)) = B(E*(ff^fi)), and thus that B(E*ff*fi) = B(E*(ff^fi)).
For (C1)((C1P), suppose that fi ffl ff. Then ~ff 62 B(E * fi) by RAGM, and
so B(E * ff * fi) = B(E * (ff ^ fi)) by (C1P). But since fi j ff ^ fi it
follows that B(E * ff * fi) = B(E * fi). For (P)((C1P), suppose that ~ff
62 B(E * fi). Then B(E * ff * fi) = B(E * (ff ^ fi)) by (C1P) which means,
by RAGM, that ff 2 B(E * ff * fi).

For (C2),(D))(C2D), suppose that ff !E fi. By (D), ~ff 2 B(E * ff * fi).
By RAGM this means that B(E * ff * fi) = B(E * ff * (~ff ^ fi)). Now, by
(C2) it follows that B(E * ff * (~ff ^ fi)) = B(E * (~ff ^ fi)). So B(E *
ff * fi) = B(E * (~ff ^ fi)). But since~

ff 2 B(E * fi), we get by RAGM that B(E * (~ff ^ fi)) = B(E * fi), from which
it follows that B(E * ff * fi) = B(E * fi). For (C2)((C2D), suppose that
fi ffl ~ff. Then ff !E fi for any E and by B(E * ff * fi) = B(E * fi) by
(C2D). For (D)((C2D), suppose that ff !E fi. Then B(E*ff*fi) = B(E*fi) by
(C2D) and since ~ff 2 B(E*fi), it follows that ~ff 2 B(E*ff*fi). Lambda

Both (C1P) and (C2D) provide conditions for the reduction of the two-step
revision sequenceE *

ff * fi to a single-step revision (if only as regards the resulting knowledge
base). (C1P)

141

Booth & Meyer reduces it to an (ff ^ fi)-revision when ff is consistent with
a fi-revision. (C2D) reduces it to a fi-revision, ignoring ff completely,
when ff and fi counteract with respect to E. Now, it follows from RAGM that
the consequent of (C1P) also obtains when ~fi 62 B(E * ff). Putting this
together we get a most succinct characterisation of restrained revision.

Proposition 10 Only restrained revision satisfies RAGM and:

(T) B(E * ff * fi) = ae B(E * fi) if ff !E fiB(E * (ff ^ fi)) otherwise.
Proof: From Theorem 2 and Proposition 9 it is sufficient to show that RAGM,
(C1P) and (C2D) hold iff RAGM and (T) hold. So, suppose that * satisfies
RAGM and (T). (C1P) follows from the bottom part of (T), while (C2D) follows
from the top part. Conversely, suppose that * satisfies RAGM, (C1P) and (C2D).
If ff !E fi it follows from (C2D) that B(E * ff * fi) = B(E * fi). If not,
we consider two cases. If ~ff /2 B(E * fi) it follows from (C1P) that B(E*ff*fi)
= B(E*(ff^fi)). Otherwise it has to be the case that ~fi /2 B(E*ff). But
then it follows from RAGM that B(E * ff * fi) = B(E * (ff ^ fi)). Lambda

If we were to replace "ff !E fi" in the first clause in (T) by the stronger
"ff and fi are logically inconsistent", we would obtain instead the characterisation
of lexicographic revision given by Nayak et al. (2003).

Proposition 10 allows us to see clearly another significant property of restrained
revision. For if ff !E fi then we know ~ff 2 B(E * ff * fi) directly from
(D), while if ff 6!E fi then Proposition 10 tells us B(E * ff * fi) = B(E
* (ff ^ fi)) and so ff 2 B(E * ff * fi) by RAGM. Thus we see in the state
E * ff * fi the epistemic status of ff (either accepted or rejected) is always
completely determined, i.e., we have proved:

Proposition 11 Restrained revision satisfies the following property: (U)
If ~ff 62 B(E * ff * fi) then ff 2 B(E * ff * fi) (Given its similar characterisation
just mentioned above, it is easy to see lexicographic revision satisfies
(U) too.) Like (P), property (U) can be read as providing conditions under
which the penultimate revision input ff should be believed. Its antecedent
is simply saying B(E * ff * fi) is consistent with ff. Thus (U) is saying
the penultimate input should be believed as long as it is consistent to do
so. By chaining (U) together with (C4), we easily see that (U) actually implies
(P) in the presence of (C4). As a consequence, we obtain the following alternative
axiomatic characterisation of restrained revision.

Theorem 3 RAGM, (C1), (C2), (C4), (U) and (D) provide an exact characterisation
of restrained revision.

For (U), we are also able to provide a simple semantic counterpart property.
It corresponds to a separating of all the ff-worlds from all the ~ff-worlds
in the total preorder _E*ff following an ff-revision, in that each plausibility
level in _E*ff either contains only ff-worlds or contains only ~ff-worlds:

Proposition 12 Whenever a revision operator * satisfies RAGM, then * satisfies
(U) iff it satisfies the following property:

142

Admissible and Restrained Revision (UR) For v 2 [ff] and w 2 [~ff], either
v OEE*ff w or w OEE*ff v Proof: For (U))(UR) suppose (UR) doesn't hold, i.e.,
there exist ff, v 2 [ff] and w 2 [~ff] such that both v _E*ff w and w _E*ff
v. Letting fi be such that [fi] = {v, w} we get [B(E * ff * fi)] = {v, w}
from RAGM and thus both ~ff, ff 62 B(E * ff * fi) (because of v, w 2 [B(E
* ff * fi)] respectively). Hence (U) doesn't hold.

For (U)((UR) suppose (U) doesn't hold, i.e., there exist ff, fi such that
both ~ff, ff 62 B(E * ff * fi). Then there exist v 2 [ff] and w 2 [~ff] such
that v, w 2 [B(E * ff * fi)] = (by RAGM) min(fi, _E*ff). Since both v and
w are (_E*ff)-minimal fi-worlds we must have both v _E*ff w and w _E*ff v.
Hence ff, v, w give a counterexample to (UR). Lambda 

Finally in this section we turn to two properties first mentioned (as far
as we know) by Schlecta et al. (1996) (see also the work of Lehmann et al.
(2001)):

(Disj1) B(E * ff * fi) " B(E * fl * fi) ` B(E * (ff . fl) * fi) (Disj2) B(E
* (ff . fl) * fi) ` B(E * ff * fi) [ B(E * fl * fi) (Disj1) says that if
a sentence is believed after any one of two sequences of revisions that differ
only at step i (step i being ff in one case and fl in the other), then the
sentence should also be believed after that sequence which differs from both
only in that step i is a revision by the disjunction ff . fl. Similarly,
(Disj2) says that every sentence believed after an (ff . fl)-fi-revision
should be believed after at least one of (ff-fi) and (fl-fi). Both conditions
are reasonable properties to expect of revision operators.

Proposition 13 Restrained revision satisfies (Disj1) and (Disj2).

To prove this result we will make use of the properties of the counteracts
relation given in Proposition 4, along with the following lemma.

Lemma 4 If ff !E fi and (ff . fl) 6!E fi then B(E * ((ff . fl) ^ fi)) = B(E
* (fl ^ fi)) Proof: Suppose ff !E fi and (ff . fl) 6!E fi. We will first
show that this implies~

ff 2 B(E*((ff.fl)^fi)). We will then be able to conclude the required B(E*((ff.fl)^fi))
= B(E * (fl ^ fi)) using RAGM. So suppose on the contrary ~ff 62 B(E * ((ff
. fl) ^ fi)). Then there exists some ff-world w 2 min((ff . fl) ^ fi, _E).
Then also w 2 min(ff ^ fi, _E). Since ff !E fi we know from Proposition 3
there exist an ff-world w1 and a fi-world w2 such that wi OEE w for i = 1,
2. Clearly w1 is also a (ff . fl)-world, so we infer (ff . fl) 6!E fi - contradiction.
Hence ~ff 2 B(E * ((ff . fl) ^ fi)) as required. Lambda 

Proof:[of Proposition 13] We prove both properties simultaneously by looking
at two cases: Case (i): (ff . fl) !E fi. In this case B(E * (ff . fl) * fi)
= B(E * fi) by property (T) in Proposition 10. Meanwhile we know from Proposition
4(ii) that either ff !E fi or fl !E fi, and so using (T) again we know at
least one of B(E * ff * fi) and B(E * fl * fi) must also be equal to B(E
* fi). Hence we see both (Disj1) and (Disj2) hold in this case. Case (ii):
(ff . fl) 6!E fi. In this case (T) tells us B(E * (ff . fl) * fi) = B(E *
((ff . fl) ^ fi)) = B(E * ((ff ^ fi) . (fl ^ fi)). Meanwhile Proposition
4(i) tells us at least one of ff 6!E fi and fl 6!E fi holds. We now consider
two subcases according to which either both these

143

Booth & Meyer hold, or only one holds. If both these hold then B(E * ff *
fi) = B(E * (ff ^ fi)) and B(E * fl * fi) = B(E * (fl ^ fi)), so (Disj1)
and (Disj2) reduce to

(Disj10) B(E * (ff ^ fi)) " B(E * (fl ^ fi)) ` B(E * ((ff ^ fi) . (fl ^ fi)))
(Disj20) B(E * ((ff ^ fi) . (fl ^ fi))) ` B(E * (ff ^ fi)) [ B(E * (fl ^
fi)) respectively. Now it is a consequence of RAGM that for any sentences
`, OE we have both (1) B(E * `) " B(E * OE) ` B(E * (` . OE)) and (2) B(E
* (` . OE)) ` B(E * `) [ B(E * OE). Substituting ff ^ fi for ` and fl ^ fi
for OE here gives us the required (Disj10) (from (1)) and (Disj20) (from
(2)).

Now let's consider the subcase where ff !E fi and fl 6!E fi. (A symmetric
argument will work for the other subcase ff 6!E fi and fl !E fi.) Then from
fl 6!E fi we get B(E * fl * fi) = B(E * (fl ^ fi)), while from ff !E fi together
with (ff . fl) 6!E fi we get also B(E*(ff.fl)*fi) = B(E*(fl^fi)) using Lemma
4. So in this case B(E*(ff.fl)*fi) = B(E*fl*fi), from which both (Disj1)
and (Disj2) follow immediately. Lambda 

We end this section by remarking that it can be shown that lexicographic
revision also satisfies (Disj1) and (Disj2).

5. Restrained Revision as a Composite Operator As we saw in Section 3, Boutilier's
natural revision operator - let us denote it in this section by Phi  - is
vulnerable to damaging counterexamples such as the red bird Example 2, and
fails to satisfy the very reasonable postulate (P). Although a new input
ff is accepted in the very next epistemic state E Phi  ff, Phi  does not
in any way provide for the preservation of ff after subsequent revisions.
As Hans Rott (2003, p.128) describes it, "[t]he most recent input sentence
is always embraced without reservation, the last but one input sentence,
however, is treated with utter disrespect". Thus, there seem to be convincing
reasons to reject Phi  as a viable operator for performing iterated revision.
However, the literature on epistemic state change constantly reminds us that
keeping changes minimal should be a major concern, and when judged from a
purely minimal change viewpoint, it is clear that Phi  can't be beaten!
How can we find our way out of this apparent quandary? In this section we
show that the use of Phi  can be retained, provided its application is preceded
by an intermediate operation in which, rather than revising E by new input
ff, essentially ff is revised by E.

Given an epistemic state E and sentence ff, let us denote by E / ff the result
of this intermediate operation. E / ff is an epistemic state. The idea is
that when forming E / ff, the information in E should be maintained. That
is, the total preorder _E/ff should satisfy

v OEE w implies v OEE/ff w. (1) But rather than leaving behind ff entirely
in favour of E, as much of the informational content of ff should be preserved
in E / ff as possible. This is formalised by saying that for any v 2 [ff],
w 2 [~ff], we should take v OEE/ff w as long as this does not conflict with
(1) above. It is this second requirement which will guarantee ff enough of
a "presence" in the revised epistemic state E * ff to help it survive subsequent
revisions and allow (P) to be

144

Admissible and Restrained Revision captured. Taken together, the above two
requirements are enough to specify _E/ff uniquely:

v _E/ff w iff ae v OEE w, orv _E w and (v 2 [ff] or w 2 [~ff]). (2) Thus,
_E/ff is just the lexicographic refinement of _E by the "two-level" total
preorder _ff defined by v _ff w iff v 2 [ff] or w 2 [~ff]. This "backwards
revision" operator is not new. It has been studied by Papini (2001). It can
also be viewed as just a "backwards" version of Nayak's lexicographic revision
operator. We do not necessarily have ff 2 B(E / ff) (this will hold only
if ~ff 62 B(E)), and so / does not satisfy RAGM.

Given /, we can define the composite revision operator */ by setting

E */ ff = (E / ff) Phi  ff (3) This is reminiscent of the Levi Identity
(G"ardenfors, 1988), used in AGM theory as a recipe for reducing the operation
of revision on knowledge bases to a composite operation consisting of contraction
plus expansion. In (3), Phi  is playing the role of expansion. The operator
*/ does satisfy RAGM. In fact, as can easily be seen by comparing (2) above
with condition (RR) at the start of Section 4, */ coincides with restrained
revision.

Proposition 14 Let *R denote the restrained revision operator. Then *R =
*/. Thus we have proved that restrained revision can be viewed as a combination
of two existing operators.

6. How to Choose a Revision Operator The contribution of this paper so far
can be summarised as follows. We have argued for the replacement of the Darwiche-Pearl
framework by the class of admissible revision operators, arguing that the
former needs to be strengthened. In doing so we have eliminated natural revision,
but retained lexicographic revision and the * operator of Darwiche and Pearl
as admissible operators. We have also introduced a new admissible revision
operator, restrained revision, and argued for its plausibility. But this
is not an argument that restrained revision is somehow unique, or more preferred
than other revision operators. The contention is merely that, for epistemic
state revision, the Darwiche-Pearl framework is too weak and should be replaced
by admissible revision. And restrained revision, being an admissible revision
operator, is therefore only one of many revision operators deemed to be rational.
The question of which admissible revision operator to use in a particular
situation is one which depends on a number of issues, such as context, the
strength with which certain beliefs are held, the source of the information,
and so on. This point has essentially also been made by Friedman and Halpern
(1999). For example, Example 3 formed part of an argument for the use of
restrained revision, and against the use of lexicographic revision. In effect
we used the example to argue that red ought to be in B (E * red ! bird *
~bird), where B(E) = Cn(red). But if we change the context slightly, it becomes
an example in favour of the use of lexicographic revision, and against restrained
revision.

Example 5 We observe a creature which seems to be red, but we are too far
away to determine whether it is a bird or a land animal. So we adopt the
knowledge base B(E) =

145

Booth & Meyer Cn(red). Next to us is an expert on birds who remarks that,
if the creature is indeed red, it must be a bird. So we adopt the belief
red ! bird. Then we get information from someone standing closer to the creature
that it is not a bird. Given this context, that is, the reliability of the
expert combined with the statement that the creature initially seemed to
be red, it is reasonable to adopt the lexicographic approach of "more recent
is best" and conclude that the bird is not red. Formally, ~red 2 B (E * red
! bird * ~bird), where B(E) = Cn(red).

For a case where the source of the information dramatically affects the outcome,
consider the following example.

Example 6 Consider the sequence of inputs where p is followed by a finite
number, say n, of instances of the pair p ! q, ~q. (To make this more concrete,
the reader might wish to substitute p with red and q with bird.) Since p
is not in direct conflict with any sentences in the sequence succeeding it,
any revision operator satisfying the property O (and this includes restrained
revision) will require that p be contained in the knowledge base obtained
from this revision sequence. Now, if each pair p ! q and ~q is obtained from
a different source, such a conclusion is clearly unreasonable. After all,
such a sequence amounts to being told that p is the case, followed by n different
sources essentially telling you that ~p is the case. On the other hand, if
the pairs p ! q and ~q all come from the same source, the case is not so
clear cut anymore. In fact, in this case one would expect the result to be
the same as that obtained from the sequence p, p ! q, ~q, a sequence with
the same formal structure as that employed in Example 3, where restrained
revision was seen to be a reasonable approach.

Another example in which restrained revision fares less well is the following:4
Example 7 Suppose we are teaching a class of students consisting of n boys
and m girls, and suppose the class takes part in a mathematics competition.
For each i = 1, . . . , n and j = 1, . . . , m let the propositional variables
pi and qj stand for "boy i won the competition" and "girl j won the competition"
respectively, and suppose initially we believe one of the boys won the competition,
i.e., B(E) = Cn(OE ^ Sigma ) where OE = Wi pi and Sigma  is just some sentence
expressing the uniqueness of the competition winner. Now suppose we interview
each of the boys one after the other, and each of them tells us that either
one of the girls or he himself won, i.e., we obtain the sequence of inputs
(~OE . pi)i. Suppose we are willing to accept the boys' testimony. Using
a revision operator which satisfies O will lead us to believe boy n won the
competition, which seems implausible. Lexicographic revision gives the desired
result that one of the girls won the competition.

From these examples it is clear that an agent need not, and in most cases,
ought not to stick to the same revision operator every time that it has to
perform a revision. This means that the agent will keep on switching from
one revision operator to another during the process of iterated revision.
Of course, this leads to the question of how to choose among the available
(admissible) revision operators at any particular point. A comprehensive
answer to this question is beyond the scope of this paper, but we do provide
some clues on how to address the problem. In brief, we contend that epistemic
states have to be enriched, with a more detailed specification of their internal
structure. Looking back at the history of belief revision, we can see that
this is exactly how the field has progressed. In the initial papers,

4. We are grateful to one of the anonymous referees for suggesting this example.

146

Admissible and Restrained Revision such as those on AGM revision, an epistemic
state was taken to contain nothing more than a knowledge base. So, for example,
basic AGM revision as characterised by the first six AGM postulates imposes
no structure on epistemic states at all. We shall refer to these as simple
epistemic states. With full AGM belief revision as characterised by all eight
AGM postulates, the view is still one of the revision of knowledge bases,
but now every revision operator for knowledge base B is uniquely associated
with a B-faithful total preorder; i.e., a total preorder on valuations with
the models of B as its minimal elements. From here it is a small step to
define epistemic states to include such an ordering, i.e. to include the
total preorder _E associated with an epistemic state E as part of the definition
of E. We shall refer to these as complex epistemic states.

This leads to two different views of the same revision process. If we view
revision as an operator on simple epistemic states we have many different
revision operators; one corresponding to each of the B-faithful total preorders,
but with no way to distinguish between them when having to choose a revision
operator. Viewed as such, iterated revision is a process in which a (possibly)
different revision operator is employed at every revision step. This is the
principal view adopted by Nayak et al. (2003). However, if we view revision
as an operator on complex epistemic states, every epistemic state contains
enough information to determine uniquely the knowledge base, but not the
faithful total preorder, resulting from the revision. In other words, we
now have enough information encoded in an epistemic state to uniquely determine
the knowledge base resulting from a revision, but we lack the information
to uniquely determine the full epistemic state. The DarwichePearl framework,
and now also admissible revision, place some constraints on the resulting
epistemic state, but do not impose any additional structure on the complex
epistemic state. In our view admissible revision for complex epistemic states
is analogous to basic AGM revision for simple epistemic states. The next
step would thus be to impose additional structure on complex epistemic states.
This could possibly involve the addition of a second ordering on valuations
as was done, for example, by Booth et al. (2004). In the case of simple epistemic
states the effect of adding the two supplementary postulates is to constrain
basic revision to the extent that each revision operator can be uniquely
associated with a Bfaithful total preorder. In that sense, the addition of
the supplementary postulates allowed for the imposition of additional structure
on simple epistemic states. Recall that one way of interpreting the two supplementary
postulates is that they explain the interaction between revision by two sentences
and revision by their conjunction, something the basic postulates do not
address.

So, as we have seen, the addition of the supplementary postulates leads to
the definition of revision as operators on complex epistemic states. We conjecture
that giving additional structure to complex epistemic states might involve
the provision of postulates analogous to the two AGM supplementary postulates.
In particular, we conjecture that such postulates might be such that they
explain the interaction between two sentences and their conjunction, or disjunction,
for iterated revision. Observe that none of the Darwiche-Pearl postulates,
or the additional postulates for admissible revision for that matter, address
this issue. In fact the only postulates to have been suggested (of which
we are aware) which so far do address it are (Disj1) and (Disj2). We speculate
that the appropriate set of supplementary postulates for iterated revision
(which may or may not include the two just mentioned) will lead to the definition
of extra structure on complex epistemic states, which can then be

147

Booth & Meyer incorporated into an enriched version of complex epistemic
states, with revision then being seen as operators on these enriched entities.
Let us refer to them as enriched epistemic states. Enriched epistemic states
will enable us to determine uniquely the complex epistemic state resulting
from a revision, thereby solving the question we started off with; that of
determining which revision on complex epistemic states to use at every particular
point during a process of iterated revision. Below we shall briefly discuss
a possible way of enriching complex epistemic states. But note also that
a recent proposal for doing so is that of Booth et al. (2006). It is instructive
to observe that (Disj1) and (Disj2) both hold in their framework.

The proposed outline above is not without its pitfalls. The most obvious
problem with such an approach is that it leaves us with a meta-version of
the dilemma that we started off with. Using enriched epistemic states we
are now able to uniquely determine the complex epistemic states resulting
from a revision, but not the resulting enriched epistemic state. We can lessen
the problem by constraining the permissible resulting enriched epistemic
states in the same way that admissible revision constrains the permissible
complex epistemic states, but chances are that this whittling down will not
produce a single permissible enriched epistemic state. And, of course, this
is bound to occur over and over again. That is, whenever we solve the problem
of uniquely determining an epistemic state with a certain structure by a
process of further enrichment, we will be saddled with the question of how
to uniquely determine the further enriched epistemic state resulting from
a revision. Our conjecture is that at some level a point will be reached
where constraining further enriched epistemic states, 'a la admissible revision,
will eventually lead to a unique further enriched epistemic state associated
with every revision. Only further research will determine whether our conjecture
holds water.

In conclusion, we have shown that the Darwiche-Pearl arguments lead to the
acceptance of the admissible revision operators as a class worthy of study.
The restrained revision operator, in particular, exhibits quite desirable
properties. Besides taking the place of natural revision as the operator
adhering most closely to the principle of minimal change, its satisfaction
of the properties (O), (Q) and (U) shows that it does not unnecessarily remove
previously obtained information.

For future work we would also like to explore more thoroughly the class of
admissible revision operators. In this paper we saw that restrained revision
and lexicographic revision lie at opposite ends of the spectrum of admissible
operators. They represent respectively the most conservative and the least
conservative admissible operators in the sense that they effect the most
changes and the least changes, respectively, in the relative ordering of
valuations permitted by admissible revision. A natural question is whether
there exists an axiomatisable class of admissible operators which represents
the "middle ground". One clue for finding such a class can be found in the
counteracts relation !E which can be derived from an epistemic state E. As
we said, this relation depends only on the preorder_

E associated to E. In fact, given any total preorder _ over V we can define
the relation!_ by

ff !_ fi iff min(ff, _) ` [~fi] and min(fi, _) ` [~ff]. Then clearly !E=!_E
. Furthermore if _ is the full relation V * V then !_ reduces to logical
inconsistency. A counteracts relation stronger than !E, but still weaker
than logical inconsistency can be found by setting !=!_0, where _0 lies somewhere
in between _E

148

Admissible and Restrained Revision and V * V . Hence one avenue worth exploring
might be to assume that from each epistemic state E we can extract not one
but two preorders _E and _0E such that _E`_0E. Then, instead of only requiring
ff !E fi to deduce ~ff 2 B(E * ff * fi), as is done with restrained revision
(the postulate (D)), we could require the stronger condition ff !_0E fi for
this to hold. We are currently experimenting with strategies for using the
second preorder to guide the manipulation of _E to enable this property to
be satisfied. The use of a second preorder can be seen as a way of enriching
the epistemic state, and might thus contribute to the solution of the choice
of revision operators discussed in Section 6.

Some more future work relates also to the two extreme cases revision, but
looked at from a different angle. As mentioned earlier, lexicographic revision
is a formalisation of the "most recent is best" approach to revision taken
to its logical extreme. This approach is exemplified by the (E*2) postulate,
also known as Success, which requires a revision to be successful, in the
sense that the epistemic input provided always has to be contained in the
resulting knowledge base. Given that (E*2) is one of the postulates for admissible
revision, this requirement carries over even to restrained revision, which
is on the opposite end of the spectrum for admissible revision. But this
means that the admissible revision operator which differs the most from lexicographic
revision still adheres to the dictum of "most recent is best", which raises
the question of why the most recent input is given such prominence. The relaxation
of this requirement would imply giving up (E*2) and venturing into the area
known as non-prioritised revision (Booth, 2001; Chopra, Ghose, & Meyer, 2003;
Hansson, 1999). We speculate that an appropriate relaxation of admissible
revision, with (E*2) removed as a requirement, will lead to a class of (non-prioritised)
revision operators strictly containing admissible revision, and with lexicographic
revision still at one end of the spectrum, but with the other end of the
spectrum occupied by the operator studied by Papini (2001) which was used
as a sub-operation of restrained revision in Section 5. This operator is
formalised by the extreme version of "most recent is worst"; in other words,
"the older the better".

Acknowledgements Much of the first author's work was done during stints as
a researcher at Wollongong University and Macquarie University, Sydney. He
wishes to thank Aditya Ghose and Abhaya Nayak both for making it possible
to enjoy the great working environments there, and also for some interesting
comments on this work. Thanks are also due to Samir Chopra who contributed
to a preliminary version of the paper, Adnan Darwiche for clearing up some
misconceptions on the definition of epistemic states, and three anonymous
referees for their valuable and insightful comments. National ICT Australia
is funded by the Australia Government's Department of Communications, Information
and Technology and the Arts and the Australian Research Council through Backing
Australia's Ability and the ICT Centre of Excellence program. It is supported
by its members the Australian National University, University of NSW, ACT
Government, NSW Government and affiliate partner University of Sydney.

149

Booth & Meyer References Alchourr'on, C. E., G"ardenfors, P., & Makinson,
D. (1985). On the logic of theory change:

Partial meet functions for contraction and revision. Journal of Symbolic
Logic, 50, 510-530.

Areces, C., & Becher, V. (2001). Iterable AGM functions. In Frontiers in
belief revision,

pp. 261-277. Kluwer, Dordrecht.

Booth, R. (2001). A negotiation-style framework for non-prioritised revision.
In van Benthem, J. (Ed.), Theoretical Aspects of Rationality and Knowledge:
Proceedings of the Eighth Conference (TARK 2001), pp. 137-150, San Francisco,
California. Morgan Kaufmann.

Booth, R. (2005). On the logic of iterated non-prioritised revision. In Conditionals,
Information and Inference - Selected papers from the Workshop on Conditionals,
Information and Inference, 2002, Vol. 3301 of LNAI, pp. 86-107. Springer-Verlag,
Berlin.

Booth, R., Chopra, S., Ghose, A., & Meyer, T. (2004). A unifying semantics
for belief

change. In Mantaras, R. L. D., & Saitta, L. (Eds.), Sixteenth European Conference
on Artificial Intelligence: ECAI2004, pp. 793-797. IOS Press.

Booth, R., Meyer, T., & Wong, K.-S. (2006). A bad day surfing is better than
a good day

working: How to revise a total preorder. In Proceedings of KR2006, Tenth
International Conference on the Principles of Knowledge Representation and
Reasoning.

Boutilier, C. (1993). Revision sequences and nested conditionals. In Bajcsy,
R. (Ed.), IJCAI93. Proceedings of the 13th International Joint Conference
on Artificial Intelligence held in Chambery, France, August 28 to September
3, 1993, Vol. 1, pp. 519-525, San Mateo, CA. Morgan Kaufmann.

Boutilier, C. (1996). Iterated revision and minimal changes of conditional
beliefs. Journal

of Philosophical Logic, 25 (3), 263-305.

Chopra, S., Ghose, A., & Meyer, T. (2003). Non-prioritized ranked belief
change. Journal

of Philosophical Logic, 32 (3), 417-443.

Dalal, M. (1988). Investigations into a theory of knowledge base revision.
In Proceedings of

the 7th National Conference of the American Association for Artificial Intelligence,
Saint Paul, Minnesota, pp. 475-479.

Darwiche, A., & Pearl, J. (1997). On the logic of iterated belief revision.
Artificial Intelligence, 89, 1-29.

Freund, M., & Lehmann, D. (1994). Belief revision and rational inference.
Tech. rep. TR

94-16, The Leibniz Centre for Research in Computer Science, Institute of
Computer Science, Hebrew University of Jerusalem.

Friedman, N., & Halpern, J. Y. (1999). Belief revision: A critique. Journal
of Logic,

Language and Information, 8, 401-420.

G"ardenfors, P. (1988). Knowledge in Flux : Modeling the Dynamics of Epistemic
States.

The MIT Press, Cambridge, Massachusetts.

Glaister, S. M. (1998). Symmetry and belief revision. Erkenntnis, 49, 21-56.

150

Admissible and Restrained Revision Grove, A. (1988). Two modellings for theory
change. Journal of Philosophical Logic, 17,

157-170.

Hansson, S. O. (1999). A survey of non-prioritized belief revision. Erkenntnis,
50, 413-427. Jin, Y., & Thielscher, M. (2005). Iterated belief revision,
revised. In Proceedings of the

Nineteenth International Joint Conference on Artificial Intelligence (IJCAI
05), pp. 478-483.

Katsuno, H., & Mendelzon, A. O. (1991). Propositional knowledge base revision
and minimal change. Artificial Intelligence, 52, 263-294.

Konieczny, S., & Pino P'erez, R. (2000). A framework for iterated revision.
Journal of

Applied Non-Classical Logics, 10(3-4), 339-367.

Lehmann, D. (1995). Belief revision, revised. In Proceedings of the Fourteenth
International

Joint Conference on Artificial Intelligence (IJCAI'95), pp. 1534-1540.

Lehmann, D., Magidor, M., & Schlechta, K. (2001). Distance semantics for
belief revision.

Journal of Symbolic Logic, 66, 295-317.

Lewis, D. K. (1973). Counterfactuals. Journal of Philosophy, 70, 556-567.
Nayak, A. C. (1993). Studies in Belief Change. Ph.D. thesis, University of
Rochester. Nayak, A. C. (1994). Iterated belief change based on epistemic
entrenchment. Erkenntnis,

41, 353-390.

Nayak, A. C., Foo, N. Y., Pagnucco, M., & Sattar, A. (1996). Changing Conditional
Belief

Unconditionally. In Shoham, Y. (Ed.), Theoretical Aspects of Rationality
and Knowledge: Proceedings of the Sixth Conference (TARK 1996), pp. 119-136,
San Francisco, California. Morgan Kaufmann.

Nayak, A. C., Pagnucco, M., & Peppas, P. (2003). Dynamic belief change operators.
Artificial Intelligence, 146, 193-228.

Papini, O. (2001). Iterated revision operations stemming from the history
of an agent's

observations. In Frontiers in belief revision, pp. 281-303. Kluwer, Dordrecht.

Rott, H. (2000). Two dogmas of belief revision. Journal of Philosophy, 97,
503-522. Rott, H. (2003). Coherence and conservatism in the dynamics of belief
II: Iterated belief

change without dispositional coherence. Journal of Logic and Computation,
13 (1), 111-145.

Schlechta, K., Lehmann, D., & Magidor, M. (1996). Distance semantics for
belief revision.

In Shoham, Y. (Ed.), Proceedings of the Sixth Conference on Theoretical Aspects
of Rationality and Knowledge, pp. 137-145. Morgan Kaufmann.

Segerberg, K. (1998). Irrevocable belief revision in dynamic doxastic logic.
Notre Dame

Journal of Formal Logic, 39, 287-306.

Spohn, W. (1988). Ordinal conditional functions: A dynamic theory of epistemic
states.

In Harper, W. L., & Skyrms, B. (Eds.), Causation in Decision: Belief, Change
and Statistics: Proceedings of the Irvine Conference on Probability and Causation:
Volume II, Vol. 42 of The University of Western Ontario Series in Philosophy
of Science, pp. 105-134, Dordrecht. Kluwer Academic Publishers.

151