Certifying Almost-Sure Reachability in Unknown MDPs
Authors: S Akshay, Suguman Bansal, Gaurav Mahla
Organizations: Department of Computer Science and Engineering, Indian Institute of Technology Bombay, Mumbai, India · School of Computer Science, Georgia Institute of Technology, Atlanta, GA, USA
{\em Specification-Guided Reinforcement Learning (RL)} has largely concerned itself with learning an optimal policy against a formal specification in an unknown {\em Markov Decision Process (MDP)}. We take up the dual question. Given a policy already in hand, can one verify that it is correct against a formal specification in an unknown MDP, using sampling access alone? Such a question arises naturally in safety-critical systems. We investigate it for the {\em almost-sure reachability property}, whose correctness is witnessed by a {\em ranking supermartingale (RSM)} certificate. Our first finding is negative. In the absence of any further information about the MDP, one can neither learn such a certificate nor verify a candidate one with probabilistic guarantees. On the positive side, we show that, under a mild restriction, a known lower bound pmin on nonzero transition probabilities, a correct certificate can be learned with PAC-style guarantees. To the best of our knowledge, this is the first study of learning and verifying certificates for almost-sure reachability in unknown MDPs from sampling access alone. Finally, our experiments show that the pmin-based sufficient condition, while sound, is conservative: the learned certificate often remains valid on the true MDP even when the condition fails.
Figures & tables
Figure 1: MDP for Lemma 1
Benchmark
η
B
ε′
drift min
Cyclic ( p=0.01 )
0.0167
200
−2.333
0.500
Cyclic (bottleneck)
0.020
82.5
−0.650
0.783
Cyclic ( p=0.1 )
0.020
20
−0.600
0.933
DAG-like
0.010
3.132
−0.969
0.999
Gridworld
0.010
5.001
−0.950
0.998
Chain (RiverSwim)
0.010
15.695
−0.843
0.997
Table 1: Transferability across benchmarks, with ε′=1−Bη and drift min=mins(V(s)−EM[V(next)]) . The certificate is empirically valid on M (drift min>0 ) in every case, yet the sufficient condition ε′>0 fails wherever a rare transition inflates B .
Appendix figures & tables13 assets
Supplementary material from the paper’s appendix.
Appendix
Figure 2: Cyclic MDP with all forward probabilities 0.01 (true kernel M ).
State
V(s)
EM[V′]
EM′[V′]
Drift (M)
Drift (M′)
s0
150
148.5
149
1.5
1
s1
200
199.125
199
0.875
1
s2
150
149.5
149
0.5
1
Appendix
Table 2: Per-state certificate and drift values for the cyclic MDP with all forward probabilities 0.01 .
Figure 3: Cyclic MDP with one bottleneck forward transition of probability 0.01 (true kernel M ).
State
V(s)
EM[V′]
EM′[V′]
Drift (M)
Drift (M′)
s0
82.5
81.225
81.5
1.275
1
s1
65
63.942
64
1.058
1
s2
37.5
36.717
36.5
0.783
1
Appendix
Table 3: Per-state certificate and drift values for the cyclic MDP with one bottleneck forward probability 0.01 .
Figure 4: Cyclic MDP with forward probabilities 0.1 (true kernel M ).
State
V(s)
EM[V′]
EM′[V′]
Drift (M)
Drift (M′)
s0
15
13.95
14
1.05
1
s1
20
19.017
19
0.983
1
s2
15
14.067
14
0.933
1
Appendix
Table 4: Per-state certificate and drift values for the cyclic MDP with forward probabilities 0.1 .
Figure 5: DAG-like MDP (true kernel M ).
State
V(s)
EM[V′]
EM′[V′]
Drift (M)
Drift (M′)
s0
3.132
2.131
2.132
1.001
1
s1
2.42
1.421
1.42
0.999
1
s2
1.7
0.698
0.7
1.002
1
s3
1
0
0
1
1
Appendix
Table 5: Per-state certificate and drift values for the DAG-like MDP.
Figure 6: Gridworld MDP (true kernel M ; reproduced from the experiment output).
State
V(s)
EM[V′]
EM′[V′]
Drift (M)
Drift (M′)
s0
5.001
4.001
4.001
1.001
1
s2
2.793
1.795
1.793
0.998
1
s4
2.654
1.654
1.654
1
1
s6
2.795
1.794
1.795
1.001
1
s7
1.406
0.404
0.406
1.002
1
Appendix
Table 6: Per-state certificate and drift values for the gridworld MDP.
Figure 7: Chain (RiverSwim-style) MDP (true kernel M ).
State
V(s)
EM[V′]
EM′[V′]
Drift (M)
Drift (M′)
s0
15.695
14.692
14.695
1.003
1
s1
13.195
12.198
12.195
0.997
1
s3
6.664
5.657
5.664
1.007
1
s4
3.333
2.33
2.333
1.003
1
Appendix
Table 7: Per-state certificate and drift values for the chain (RiverSwim-style) MDP.
State
V(s)
EM[V′]
EM′[V′]
Drift (M)
Drift (M′)
s0
421.467
420.445
420.467
1.021
1
s25
8791.467
8790.446
8790.467
1.021
1
s50
10661.467
10660.467
10660.467
1
1
s75
8364.8
8363.778
8363.8
1.022
1
s98
425.2
424.179
424.2
1.021
1
Appendix
Table 8: Per-state certificate and drift values for the large 100 -state MDP (representative states).