Probabilistic Model Checking

Definition

Probabilistic model checking verifies quantitative properties of stochastic transition models such as DTMCs and MDPs. Instead of asking only whether all executions satisfy a temporal property, it asks for probabilities, rewards, costs, or policies associated with temporal specifications.

Why It Matters

Many learning, robotics, and distributed systems have uncertainty in transitions or nondeterminism in choices. Probabilistic model checking gives a way to state and compute formal guarantees about those systems, including safety probabilities and risk-sensitive cost summaries.

Formalism / Key Objects

  • DTMCs model probabilistic transitions without controllable choices.
  • MDPs model both probabilistic transitions and nondeterministic or policy-resolved action choices.
  • Temporal specifications can be written in logics such as Linear Temporal Logic, PCTL-like logics, or richer strategic logics.
  • Reward queries attach costs or rewards to states/actions. In Elsayed-Aly2024 - Distributional Probabilistic Model Checking, a distributional query has the form

where f can be a distributional property such as expectation, variance, VaR, or CVaR.

  • PCIS-style safety predecessors ask for states from which some policy can keep an MDP inside a safe set with probability at least 1-epsilon over a finite horizon.
  • Explainable shielding computes finite-horizon state/action risk values such as risk(s,a,h) <= epsilon to decide which actions a probabilistic shield should permit.
  • Sound reachability algorithms such as Sound Value Iteration maintain lower and upper probability bounds, for example with x_k(s)=Pr_s(\Diamond_{\le k}G) and y_k(s)=Pr_s(\Box_{\le k}S?), so unbounded reachability estimates can be certified before being used by a shield.
  • pMDP-style compositional RL models can treat subsystem success probabilities as parameters and verify whether a high-level meta-policy reaches a goal with probability at least 1-delta.

Connections

Common Confusions

  • Probabilistic model checking is not just simulation. It explores a formal model numerically or symbolically to compute guarantees.
  • A probability guarantee is only as meaningful as the model and abstraction assumptions behind it.
  • Expected reward is only one quantitative query; distributional and tail-risk queries can reveal failures hidden by expectations.

Key Sources