Distributional Queries and DVI
Context
Elsayed-Aly2024 - Distributional Probabilistic Model Checking extends reward-based probabilistic model checking from scalar expectations to full reward/cost distributions. The key move is to evaluate or optimize a trajectory-level random variable: accumulated reward until a co-safe LTL formula has a good prefix.
Formal Statement
For a DTMC, a distributional query is written
where r is a reward structure, f is a distributional property such as expectation, variance, mode, VaR, or CVaR, and \psi is a co-safe LTL formula.
For an MDP, a distributional optimization query is written
where opt is min or max; the paper focuses on f equal to expectation or CVaR.
The semantic random variable has the form
where k_\psi is the length of the shortest good prefix for \psi.
For CVaR, the paper uses the dual representation
with the minimizer at VaR_alpha(X).
Derivation / Construction
- Compile the co-safe LTL formula
\psiinto a DFAA_\psifor good prefixes. - Build a product DTMC or MDP with state space
S x Q, reducing satisfaction of\psito reachability of accepting automaton states. - For DTMCs, compute a distribution over
(state, accumulated_reward)pairs. The algorithm separates bottom SCCs that cannot reach the target, keeps probability mass for+\infty, and terminates when the remaining uncertainty is at mostepsilon. - The finite approximation
hat_musatisfies the paper’s pointwise/truncation guarantee: for each finite or infinite support valuei,mu(i) <= hat_mu(i) <= mu(i)+epsilon, and omitted tail mass is bounded byepsilon. - For risk-neutral MDP optimization, maintain a value distribution
mu_sfor each state and apply the distributional Bellman update
The policy chooses the action minimizing the expected value of eta(s,a).
- For risk-sensitive CVaR optimization, augment the MDP with a finite grid
Bof slack/risk-budget values. The action criterion minimizesE([X-b]^+)on the augmented state(s,b), and the best initial budget is selected after convergence. - If the slack grid has stride
varsigma_n, the paper states that the CVaR gap induced by discretization isO(varsigma_n)and vanishes as|B|increases.
Implications
- Distributional model checking can expose tail-risk and multimodality that expected reward hides.
- Co-safe temporal specifications make the stopping condition trace-based without requiring infinite-horizon reward accumulation.
- Approximate categorical or quantile representations are computationally necessary for DVI, but representation coarseness can affect both metric accuracy and policy quality.
- A useful workflow is to synthesize an MDP policy with DVI, then evaluate the induced DTMC with the more precise forward distribution algorithm.