Volitional Multiagent Atomic Transactions: Describing People and their Machines

TL;DR

This paper introduces a novel mathematical framework for modeling distributed systems involving both machines and people, capturing their joint states and volitions to improve system specification and implementation.

Contribution

It proposes volitional multiagent atomic transactions as a new foundation for specifying systems with human and machine interactions, including safety and liveness properties.

Findings

Develops a formal framework for systems with people and machines

Provides example specifications for social networks and financial platforms

Uses AI to derive implementations from formal specifications

Abstract

Formal models for concurrent and distributed systems describe machines; the people who operate them are either ignored or treated as external environment. Yet key distributed systems -- notably grassroots platforms -- include people operating their personal machines (smartphones), and their faithful description must include the states of both people and machines and how they jointly effect system behaviour. Here, we propose volitional multiagent atomic transactions -- executed atomically by machines and guarded by their people's volitions -- as a novel mathematical foundation for specifying systems consisting of people operating machines. Each agent's state consists of a volitional state and machine state; a transaction is enabled when the machine precondition holds and the guarding persons are willing. For example, befriending two people is guarded by both; unfriending, by either; voluntary swap of coins and bonds is guarded by both parties, while a payment is guarded by the payer. We develop the mathematical machinery to express safety and liveness of platforms specified in this framework, and provide example specifications of two grassroots platforms: social networks, and coins and bonds. These specifications are then used by AI to derive working implementations. % We employ here a novel and simpler definition of `grassroots' that better captures the informal notion -- multiple instances can form and operate independently, yet may coalesce -- and show that the platforms specified here, as well as those hitherto proven grassroots under the original definition, are grassroots under the new definition.