<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Computational Strategies for the Trustworthy Pursuit and the Safe Modeling of Probabilistic Maintenance Commitments</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Qi Zhang</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Edmund Durfee</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Satinder Singh</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Computer Science and Engineering, University of Michigan</institution>
          ,
          <country country="US">USA</country>
        </aff>
      </contrib-group>
      <abstract>
        <p>Most research on probabilistic commitments focuses on commitments to achieve conditions for other agents. Our work reveals that probabilistic commitments to instead maintain conditions for others are surprisingly different from their achievement counterparts, despite strong semantic similarities. We focus on the question of how the commitment recipient should model the provider's effect on the recipient's local environment, with only imperfect information being provided in the commitment specification. Our theoretic analyses show that we can more tightly bound the inefficiency of this imperfect modeling for achievement commitments than for maintenance commitments. We empirically demonstrate that probabilistic maintenance commitments are qualitatively more challenging for the recipient to model, and addressing the challenges can require the provider to adhere to a more detailed profile and sacrifice flexibility.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>-</title>
      <p>Safe cooperative behavior among humans is often realized via
social commitments that constrain people to acting reliably.
By making a commitment, a person promises to act in a
manner to fulfill it. This form of commitment-based interaction
also exists among autonomous agents. To build safe artificial
multiagent systems, we need trustworthy and reliable
mechanisms that are accountable for pursuing and modeling
agentbased commitments. Adopting a decision-theoretic
framework, this paper formulates and studies problems that arise
in managing commitments in multiagent systems.</p>
      <p>In multiagent systems, agents are often interdependent in
the sense that what one agent does can be beneficial or
harmful to another. If trust means having confidence that another
will act so as to reciprocate help in a safe and reliable manner,
then being trustworthy—worthy of such trust—constrains the
agent to acting thusly. To persuade an agent designer to create
trustworthy agents, other agents (individually and/or
collectively) can form and share opinions about agents’
trustworthiness, and won’t act to benefit agents with a bad reputation.</p>
      <p>Our work assumes that the designer has been persuaded.
Even so, however, it isn’t always clear how to create a
trustworthy agent, given that an agent often lacks complete
control over its environment. Specifically, the form of
interdependency we focus on is with respect to a scenario where an
agent (the commitment provider) makes a social commitment
[Singh, 1999; Kalia et al., 2014] to another (the commitment
recipient). When stochasticity is inherent in the
environment, the provider cannot guarantee to bring about the
outcomes that the recipient expects [Kwiatkowska et al., 2007;
Nuzzo et al., 2019], and in fact could discover after making
the commitment that how it planned to try to bring about the
outcomes would be more costly or risky than it had
previously realized. Given that the recipient is unable to predict
precisely the future situations it will face, it’s also unclear
how it should model the commitment safely and effectively.</p>
      <p>There exists work focusing on semantics and mechanisms
for an agent to follow such that it is assured of faithfully
pursuing its commitments despite the uncertainty [Jennings,
1993; Xing and Singh, 2001; Winikoff, 2006; Durfee and
Singh, 2016]. Previous work articulated the perspective that
such a probabilistic commitment should be considered
fulfilled if the provider’s actions would have brought about the
desired outcome with a high enough expectation, even if in
a particular instance the desired outcome was not realized.
That is, the provider acted in good faith. Thus, even if the
provider changes its course of action as it learns more about
costs and risks on the fly, it can still fulfill its commitment
if whatever course of action it pursued could be expected to
achieve the desired outcome with at least the promised
likelihood. With this perspective, previous work has focused
largely on commitments of achievement [Xuan and Lesser,
1999; Maheswaran et al., 2008; Witwicki and Durfee, 2009;
Zhang et al., 2016; Zhang et al., 2017], which we also call
enablement commitments, where the provider commits to
changing some features of the state in a way desired by the
recipient with some probability by some time. For example, the
recipient plans to take an action (e.g., move from one room to
another) with a precondition (e.g., the door separating them
is open) that it is counting on the provider to enable.</p>
      <p>This paper focuses on another form of commitment, which
we refer to as a maintenance commitment, where instead of
committing to some course of action that in expectation will
enable conditions the recipient wants, the provider instead
commits to courses of action to probabilistically avoid
changing conditions that are already the way the recipient wants
them maintained, up until a particular time. After that time,
the condition cannot be assumed to remain unchanged, and
before that time, there is a (usually small) probability it could
be changed at any point. For example, an open door the
recipient needs might be initially achieved, but as the provider
opens and closes other doors during its housekeeping tasks, a
resulting draft could close the door the recipient needs open.
The provider could plan its tasks to postpone altering the
riskiest doors as long as possible, but an ill-placed breeze
could close the door at any time.</p>
      <p>Our claim is that decision-theoretic mechanisms for
representing and reasoning about enablement commitments
cannot straightforwardly apply to maintenance commitments
because, despite strong superficial similarities, the two types of
commitments are fundamentally different. We will
substantiate this claim analytically and empirically. This in turn raises
the questions of whether modifications could be made to
existing decision-theoretic mechanisms for representing and
reasoning about enablement commitments so that they can be
applied to maintenance commitments. We will show
empirical results that cast doubt on whether this is possible, thus
suggesting that in the future a different treatment of
maintenance commitments should be considered.
2</p>
    </sec>
    <sec id="sec-2">
      <title>Preliminaries</title>
      <p>In this section, we describe the decision-theoretic setting
we adopt for analyzing probabilistic commitments,
including both enablement commitments and maintenance
commitments. We review the prior work in the definition and
semantics of enablement commitments, which can be extended to
maintenance commitments.</p>
      <p>The recipient’s environment is modeled as an MDP
defined by the tuple M = (S ; A; P; R; H; s0) where S is the
finite state space, A is the finite action space, P : S A !
(S ) ( (S ) denotes the set of all probability distributions
over S ), R : S A S ! R is the reward function, H is
the finite horizon, and s0 is the initial state. The state space is
partitioned into disjoint sets by the time step, S = SH
h=0 Sh,
where states in Sh only transition to states in Sh+1. The
MDP starts in s0 and terminates in SH . Given a policy
: S ! A and starting in the initial state, a random
trajectory is generated by ah = (sh); sh+1 P (sh; ah); rh =
R(sh; ah; sh+1) for h = 0; ; H 1. The value function of
is VM (s) = E[PH 1</p>
      <p>h0=h rh0 j ; sh = s] where h is such that
s 2 Sh. There exists an optimal policy in M , denoted as M ,
and its value function maximizes VM for all s 2 S and is
abbreviated as VM . The value of the initial state is abbreviated
as vM := VM (s0).</p>
      <p>As one way to model the interaction between the provider
and the recipient [Witwicki and Durfee, 2010; Zhang et al.,
2016], we assume that the recipient’s state can be factored as
s = (l; u), where l is the set of all the recipient’s state features
locally controlled by the recipient, and u is the state feature
shared with the provider. The provider and the recipient are
weakly coupled in the sense that u is the only shared state
feature and is only controllable by the provider. Formally, the
dynamics of the recipient’s state can be factored as
P (s0js; a) = P ((l0; u0)j(l; u); a) = Pu(u0ju)Pl (l0j(l; u); a) :
We assume the recipient’s cumulative reward can be
expressed in the trajectory of l:</p>
      <p>R(s; a; s0) = R(s0) = R((l0; u0)) = R(l0):
Note that though the value of u does not directly determine
the reward, it does affect the value of l0 at the next time step.
Throughout, we refer to Pu as the true profile of u, which is
fully determined by the provider’s policy.
2.1</p>
      <sec id="sec-2-1">
        <title>Commitment Semantics</title>
        <p>An enablement or maintenance commitment is concerned
with state feature u that is shared by both agents but only
controllable by the provider. Intuitively, a commitment
provides partial information about Pu from which the recipient
can plan accordingly. We will refer to u as the
commitment feature. In this paper, we focus on the setting where
the value of u is binary, letting u+, as opposed to u , be
the value of u that is desirable for the recipient. Further, we
assume that u can be toggled at most once. Citations with
this assumption include [Hindriks and van Riemsdijk, 2007;
Witwicki and Durfee, 2009; Zhang et al., 2016]. In
transactional settings, a feature (e.g., possession of goods) changing
once is common. It is also common in multiagent planning
domains where one agent establishes a precondition needed
by an action of another. Some cooperative agent work
requires agents to return changed features to prior values (e.g.,
shutting the door after opening and passing through it). And
in the extreme case where toggling reliably repeats frequently
(e.g., a traffic light) there may be no need for explicit
commitments. More generally, while removing this assumption can
complicate the specification of a commitment (e.g., a
compound commitment to enable and then maintain a condition
over a time interval), we think the fundamental difference
between modeling enablement and maintenance commitments
can be best theoretically explained and conceptually
understood without such complications. We next formally give
the definition and semantics of enablement commitments and
maintenance commitments, respectively.</p>
      </sec>
      <sec id="sec-2-2">
        <title>Enablement Commitments</title>
        <p>Let the initial state be factored as s0 = (l0; u0). For
enablement commitments, the initial value of the commitment
feature is u , i.e. u0 = u . The provider commits to pursuing a
course of action that can bring about the commitment feature
desirable to the recipient with some probability. Formally, an
enablement commitment is defined by tuple ce = (Te; pe),
where Te is the enablement commitment time, and pe is the
enablement commitment probability. The provider’s
commitment semantics is to follow a policy that sets u to u+ by
time step Te with at least probability pe, i.e.</p>
        <p>Pr(uTe = u+ju0 = u ; )
pe:</p>
      </sec>
      <sec id="sec-2-3">
        <title>Maintenance Commitments</title>
        <p>
          As a reminder, our maintenance commitment is motivated by
scenarios where the initial value of state feature u is
desirable to the recipient, who wants it to maintain its initial value
for some interval of time
          <xref ref-type="bibr" rid="ref1 ref3 ref5">(e.g., [Hindriks and van Riemsdijk,
2007; Duff et al., 2014])</xref>
          , but where the provider could want
to take actions that could change it. Formally, a maintenance
commitment is defined by tuple cm = (Tm; pm), where Tm
is the maintenance commitment time, and pm is the
maintenance commitment probability. Given such a maintenance
commitment, the provider is constrained to follow a policy
that keeps u unchanged for the first Tm time steps with at
least probability pm. Since u can be toggled at most once, it
is equivalent to guaranteeing u = u+ at Tm, i.e.
        </p>
        <p>Pr(uTm = u0ju0 = u+; )
pm:
2.2</p>
      </sec>
      <sec id="sec-2-4">
        <title>The Recipient’s Approximate Profile</title>
        <p>The commitment semantics provides partial information on
Pu by specifying the profile at the single time step, rather
than in a potentially more gradual manner. Why would we
choose to do that? The most important reason is that it opens
up even more latitude for the provider to evolve its policy as it
learns more about its environment: instead of needing to meet
probabilistic expectations at multiple time steps, it can
modify its policy much more flexibly as long as in the long run
(by the commitment time) it hits the target probability. Prior
work has shown the value of having such flexibility [Zhang
et al., 2017]. Here, we are interested in the problem when
the recipient creates a profile Pbu with this partial information
as an approximation of Pu, and plans accordingly.
Specifically, we are interested in the quality of the plan computed
from approximate profile Pbu when evaluated in (true) profile
Pu. Formally, given Pbu, let Mc = (S; A; Pb; R; H; s0) be the
approximate model that only differs from M in terms of the
profile of u, i.e. Pb = (Pl; Pbu). The quality of Pbu is evaluated
using the difference between the value of the optimal policy
for Mc and the value of the optimal policy for M when both
policies are evaluated in M starting in s0, i.e.</p>
      </sec>
      <sec id="sec-2-5">
        <title>Suboptimality : vM</title>
        <p>vMMc :
Note that when the support of Pu is not fully contained in
the support of Pbu, the recipient could end up in un-modelled
states when executing in M , which makes VMMc
ill</p>
        <p>M
defined. In this paper, we cfix this by re-planning: during
execution of , the recipient re-plans from un-modelled states.</p>
        <p>M</p>
        <p>Previouscwork chooses an intuitive and straightforward
approximate profile for enablement commitments that models a
single branch (at the commitment time) for when u
probabilistically toggles to u+. This strategy reduces the
complexity of the recipient’s reasoning; the inefficiency caused by
imperfect modelling is easily outweighed by computational
benefits [Witwicki and Durfee, 2010; Zhang et al., 2016].
This profile takes a pessimistic view in the sense that u is
(stochastically) enabled at the latest possible time consistent
with the commitment, and, if it was not enabled at that time,
will never be enabled after the commitment time. Therefore,
we refer to it as the pessimistic profile, as formalized in
Definition 1. For maintenance commitments, the pessimistic
profile should probabilistically disable u at the earliest time, and
should determinisically disable u after the commitment time,
as formalized in Definition 2.</p>
        <p>Definition 1. Given enablement commitment ce = (Te; pe),
its pessimistic profile Pbup;ecsesimistic toggles u in the transition
from time step t = Te 1 to t = Te with probability pe, and
does not toggle u at any other time step.</p>
        <p>Definition 2. Given maintenance commitment cm =
(Tm; pm), its pessimistic profile Pbup;ecsmsimistic toggles u in the
transition from time step t = 0 to t = 1 with probability
1 pm, and from t = Tm to t = Tm + 1 with probability
one. It does not toggle u at any other time step.</p>
        <p>In a previous, unpublished workshop paper [Zhang et al.,
2018], we have addressed the general topic of using an
approximate profile, especially the pessimitisc profile, for the
recipient to model probabilistic commitments, but didn’t
provide any results. This paper presents both theoretical
analysis (Section 3) and empirical results (Section 4) that reveal
the fundamental difference between enablement and
maintenance commitments.
3</p>
      </sec>
    </sec>
    <sec id="sec-3">
      <title>Theoretical Analysis</title>
      <p>In this section, we derive bounds on the suboptimality of the
pessimistic profiles. Our analysis makes the following two
assumptions. Assumption 1 intuitively says that u+
establishes a condition for an action that would be irrational, or
even unsafe, to take when u holds. For example, if u+ is
a door being open, then the action of moving into the
doorway could be part of an optimal plan, but taking that action if
the door is closed (u ) never is. Assumption 2 is a
simplifying assumption for our analysis stating the true profile agrees
with the pessimistic profile after the commitment time, so that
the suboptimality is caused by the imperfect modeling by the
commitment time.</p>
      <p>Assumption 1. Let s = (l; u ) and s+ = (l; u+) be a pair
of states that only differ in u. For any M with arbitrary profile
Pu, we have</p>
      <p>Pl js ; M (s ) = Pl js+; M (s ) :
Assumption 2. Pu(uh+1juh) agrees with the pessimistic
profile for h T , where T is the commitment time.</p>
      <p>To derive bounds on enablement and maintenance
commitments, we will make use of the following lemma, where M +
(M ) is defined as the recipient’s MDP identical to M
except that u is always set to u+(u ). Lemma 1 directly follows
from Assumption 1, stating that the value of M is no more
than that of M + and the value of any M is between the two.
Lemma 1. For any M with arbitrary profile Pu and initial
value of u, we have vM vM vM+ .</p>
      <p>Proof. Let’s first consider the case in which Pu toggles u
only at a single time step. We show vM vM by
constructing a policy in M for which the value is vM by
mimicking M . Whether u is initially u and later toggled to u+
or the other way around, we can construct a policy M that
chooses the same actions as M assuming u = u
throughout the episode. Formally, for any s = (l; u ), letting
s+ = (l; u+), we have M (s+) = M (s ) = M (s ).
By Assumption 1, M in M yields the same trajectory
distribution of l as M in M , and therefore vMM = vM since
value only depends on the trajectory of l.</p>
      <p>Similarly, we show vM vM+ by constructing a policy
M+ in M + for which the value is vM by mimicking .
Formally, for time steps when u = u in M , let M+ (s+)M=
M (s ). For time steps when u = u+ in M , let M+ (s+) =
M (s+), where s = (l; u ), s+ = (l; u+).</p>
      <p>For the case in which Pu toggles u at K &gt; 1 time steps, we
can decompose the value function Pu as the weighted
average of K value functions corresponding to the K profiles that
toggle u at a single time step, and the weights of the average
are the toggling probabilities of Pu at these K time steps.
3.1</p>
      <sec id="sec-3-1">
        <title>Bounding Suboptimality for Enablement</title>
        <p>Here, we derive a bound on the suboptimality for enablement
commitments. From the two assumptions, we also make use
of Lemma 2 to prove Theorem 1 that bounds the
suboptimality for enablement commitments as the difference between
vM and vM+ . Lemma 2 states that, for enablement
commitments, the possible imperfect modeling of the pessimistic
profile can only improve the expected value.</p>
        <p>Lemma 2. Given enablement commitment ce = (Te; pe), let
Pbu = Pbup;ecsesimistic, then we have vMMc vMMc where profile
Pu in M respects the commitment semanticcsof ce.
Proof. For enablement commitments, the initial value of u is
u . Let Pu(t) be the probability that u is enabled to u+ at t in
profile Pu, vt be the initial state value of when u is enabled
from u to u+ at t with probability one. By Assumption 2,
v Mc and v Mc can be decomposed as
M Mc
v Mc = PtT=e 1 Pu(t)vt Mc + (1
M
pe)vMMc ;
vMMc = pevTMec + (1 pe)vMMc :</p>
        <p>c
When u is enabled at t in M , can be executed as if u
M
is not enabled, by Assumption 1, ycielding identical trajectory
rdeicstirpiibeuntti’osnreopflaln(ntihnegreaftotrewvhaelnueu) =as uin+Mcwi.ll Tdehreirveefoareb,etttheer
policy if possible. Therefore, the value of executing
in
M
c
vTMec . Therefore,
M is no less than that in Mc, i.e. vt Mc
v Mc = PtT=e 1 Pu(t)vt Mc + (1
M</p>
        <p>PtT=e 1 Pu(t)vTMec + (1
pevTMec + (1</p>
        <p>pe)vMMc
=v Mc :</p>
        <p>M
c
pe)vMMc
pe)vMMc
commitment semantics
Theorem 1. Given enablement commitment ce, let Pbu =
Pbup;ecsesimistic. The suboptimality can be bounded as
vM
where profile Pu in M respects the commitment semantics
of ce. Further, there exists an enablement commitment for
which the equality is attained.
...</p>
        <p>L0=5
L0=5
…...</p>
        <p>L=14
Approx. profile policy</p>
        <p>Optimal policy
…...</p>
        <p>L=14</p>
        <p>Proof. The derivation is straightforward from Lemma 2:
vM vMMc vM+ vMcMc vM+ vM :
Then, we use a simple illustrative example to give an
enablement commitment for which the equality is attained.
Example: An Enablement Commitment in 1D Walk
Consider the example of a 1D walk on [0; L], as illustrated
in Figure 1(top), in which the recipient starts at L0 and can
move right, left, or stay still. There is a gate between 0 and 1
for which u+ denotes the state of open and u denotes closed.
The gate toggles stochastically according to Pu. For each step
until the recipient reaches either end, a 1 reward is given.
Therefore, the optimal policy is to reach either end as soon as
possible in expectation. We assume 1 L0 &lt; L=2 to avoid
the uninteresting trivial case of vM = vM+ . A negative
reward is incurred when bumping into the closed gate, which
makes Assumption 1 hold.</p>
        <p>Here, we derive an enablement commitment for which the
bound in Theorem 1 is attained. Consider L = 14; L0 =
5; H = 15, enablement commitment (Te = L L0 = 9; pe =
1), and the true profile Pu in M that toggles the gate to open at
t = 4 with probability pe = 1. The optimal policy in M is to
move left to 0. Therefore, vM = vM+ = L0 = 5. Given
the pessimistic profile, moving right to L (arriving at time 9)
is faster than waiting for the gate to toggle at Te = 9 and then
reaching location 0 at time 10. Had the recipient known the
gate would toggle at time 4, it would have moved left, but by
the time it toggles at time 4 the recipient is at location 9, and
going to L is the faster choice. Therefore vMMc = vM
(L L0) = 9, and bound (1) is attained.
=
3.2 Bounding Suboptimality for Maintenance
We next ask if the bound in Equation (1) on suboptimality in
enablement commitments also holds for maintenance
commitments. Unfortunately, as stated in Theorem 2, the
optimal policy of the pessimistic profile for maintenance
commitments can be arbitrarily bad when evaluated in the true
profile, incurring a suboptimality exceeding (1). An existence
proof is given with an example.</p>
        <p>Theorem 2. There exists an MDP M with nonnegative
rewards, and a maintenance commitment cm, such that the
profile Pu in M respects the commitment semantics of cm,
vM
v Mc = vM+
M
(2)
where Pbu = Pbup;ecsmsimistic is the profile in Mc.
(1)</p>
        <p>vM = vM+ , vMMc = 0, and therefore the suboptimality is
M
c
Proof. As an existence proof, we give an example of a
maintenance commitment in 1D Walk with nonnegative rewards
for which vM = vM+ and vMMc = 0.</p>
        <p>Consider 1D Walk with the same L = 14; L0 = 5; H = 15
as in the example for Theorem 1. Here we offset the
rewards by +1 such that the rewards are nonnegative. Consider
maintenance commitment (Tm = 7; pm = 0), and Pu
toggles the gate from open to closed at t = 6 with probability
1 pm = 1. As illustrated in Figure 1(bottom), the
optimality policy should take 5 steps to move directly to 0, for which
the value is vM+ . With probability pm, the gate is kept open
through Tm, and takes 7 steps to reach 0. With
probabil</p>
        <p>M
ity 1 pm, the gatecis closed at t = 6, and takes 19 &gt; H
steps to reach L = 14. Therefore, vMMc = 0.</p>
        <p>Comparing bound (1) in Theorem 1 with bound (2) in
Theorem 2 reveals a fundamental difference between enablement
and maintenance commitments: maintenance commitments
are inherently less tolerant to an unexpected change in the
commitment feature. For enablement commitments, it is easy
to construct a pessimistic profile, such that any unexpected
changes to the feature, if they impact the recipient at all, can
only improve the expected value. Thus, if despite the
pessimistic profile, a recipient has chosen to follow a policy that
exploits the commitment, it can never experience a true
profile that would lead it to regret having done so. The same
cannot be said for maintenance commitments. The
easilyconstructed pessimistic profile does not guarantee that any
deviations from the profile can only improve the expected
value. As our theoretical results show, the pessimistic
profile of assuming toggling from u+ to u right away can still
lead to negative surprises, since if the toggling doesn’t occur
the profile suggests that it is safe to assume no toggling until
Tm, but that is not true since toggling could happen sooner,
after the recipient has incurred cost for a policy that would
need to be abandoned. The poor performance of the
pessimistic model for maintenance is because it is not reliably
pessimistic enough: in the example for Theorem 2, the worst
time for toggling to u is not right away, but right before the
condition would be used (the gate shutting just as the
recipient was about to pass through).
4</p>
      </sec>
    </sec>
    <sec id="sec-4">
      <title>Empirical Results</title>
      <p>Our analyses suggest the pessimistic profile might not be the
best approximate profile for a recipient to adopt for
maintenance commitments. In this section, we identify several
alternative heuristics to create approximate profiles for the
recipient, and evaluate them for both maintenance and enablement
commitments. We conduct our evaluations in two domains.
The first is the same 1D Walk domain as in our theoretical
analysis, and the second is a Gate Control problem with a
more interesting transition profile (violating Assumption 2).
4.1 1D Walk
As previously defined, the 1D Walk domain restricts the set
of profiles to toggle u only at a single time step no later than
the commitment time, and agree with Assumption 2
thereafter. We denote the set of such profiles as Pu1 from which
Pu; Pbu are chosen. Besides using the pessimistic profile to
approximate the true profile, we consider the following three
1
heuristics for generating approximate profile Pbu 2 Pu:
Optimistic. As opposed to the pessimistic, the optimistic
profile toggles u right after the initial time step for
enablement commitments, and at the commitment time for
maintenance commitments.</p>
      <p>Minimum Value. The toggling time minimizes the
optimal value over all possible profiles in Pu1, i.e.,
arg minPbu2Pu1 vM , where Pbu is the profile of u in Mc.</p>
      <p>c
Minimax Regret. The toggling time is chosen based on the
minimax regret principle. Formally,
arg minPbu2Pu1 maxPu2Pu1 vM
where Pu; Pbu are the profiles of u in M; Mc, respectively.
The four heuristics include two simple, inexpensive
heuristics (Pessimistic and Optimistic), and two more complex and
expensive heuristics (Minimum Value and Minimax Regret).
Recall that our theoretical analysis suggests, for maintenance,
the worst time for toggling to u is not right away, but right
before the recipient uses the condition, and this causes the
poor performance of the pessimistic profile. We hypothesize
that the latter two heuristics can improve the pessimistic
profile by identifying the worst toggling time.</p>
      <p>Results Here we evaluate the suboptimality of our
candidate heuristics for both enablement commitments and
maintenance commitments. The setting is the same as the
example for Theorem 1 except that the horizon is longer, L =
14; L0 = 5; H = 30. Figure 2 shows the mean, minimum,
1
and maximum suboptimality over all realizations of Pu 2 Pu
for commitment time Te; Tm 2 f5; 7; 10g. We see that for
enablement commitments, the suboptimality of the pessimistic
profile is comparable to the two more sophisticated strategies,
and the optimistic profile incurs most suboptimality overall.
For maintenance commitments, however, the two expensive
strategies incur overall less suboptimality than the pessimistic
and the optimistic, yet it is difficult to identify a single best
heuristic that reliably reduces the suboptimality for all the
maintenance commitments.
4.2</p>
      <sec id="sec-4-1">
        <title>Gate Control</title>
        <p>In this domain, we are concerned with the more general
situation in which Pu 62 Pu1 can toggle u at more than one time
step by the commitment time, and even can toggle u after the
commitment time. We also consider approximate profiles Pbu
1
that are not elements of Pu.</p>
        <p>As illustrated in Figure 3, the provider’s environment
contains four cells, A $ B $ C $ D $ A, that are connected
circularly. The provider can deterministically move to an
adjacent cell or stay in the current cell. Upon a transition, the
gate could toggle with probability 0:5 if the provider ends
up in cell C. In the enablement commitment scenario, the
provider gets a +1 reward if it ends up in cell C, and in the
maintenance commitment scenario it gets a +1 reward if
ending up in cell A. For a given commitment, the provider adopts
a policy that aims to maximize its cumulative reward while
respecting the commitment semantics. The recipient gets a -0.1
reward each time step. Upon reaching cell G, the recipient
gets a +1 reward and the episode ends.</p>
        <p>Besides the four heuristics we considered for the 1D Walk,
we further consider the following two that choose an
approx1
imate profile outside of the set Pu:
Constant. This profile toggles u at every time step up to the
commitment time with a constant probability, and the
probability is chosen such that the overall probability of
toggling by the commitment time matches the
commitment probability. It agrees with the pessimistic profile
after the commitment time.</p>
        <p>Multi-timepoints. Besides time T , the provider also
provides the recipient with the toggling probabilities for
0.000.0
2.00
1.75
1.50
ity1.25
l
a
im1.00
t
p
ob0.75
u
s0.50
0.25</p>
        <p>other time steps T . Here, we consider T = f1; bT =2cg,
and the pessimistic heuristic is then used to match the
toggling probabilities at these three time steps.</p>
        <p>Results We consider the combination of the following
scenarios: the provider can start in any one of the four cells;
and the toggling can happen in even, odd, or all time steps.
The time horizon is H = 10 for both the provider and the
recipient. This yields in total 12 (true) profiles Pu. Figure 4
shows the mean, maximum, and minimum suboptimality for
Te; Tm 2 f4; 6g over the 12 profiles. Similar to 1D Walk,
the results show that the pessimistic profile is among the best
for enablement commitments, but it is difficult for
maintenance commitments to identify a best heuristic, besides the
multi-timepoints, that reliably reduces the suboptimality for
all commitment time/probability pairs we consider. Using the
multi-timepoints profile that is more aligned with the true
profile, the suboptimality can be dramatically reduced for
maintenance commitments, but it has a less significant impact for
enablement commitments. This suggests that, unlike
enablement commitments where the cost is low of the provider
retaining considerable flexibility by only committing to a single
time-probability pair (leaving itself freedom to change its
policy dynamically so long as it meets or exceeds that target),
maintenance commitments greatly benefit from a provider
committing to a more detailed profile, sacrificing flexibility
in order to improve the quality of the recipient’s expectations
to reduce the frequency and costs of negative surprises.
5</p>
      </sec>
    </sec>
    <sec id="sec-5">
      <title>Conclusion</title>
      <p>We have shown that we cannot straightforwardly extend the
semant?ics and algorithms for trustworthy fulfillment of
enablement commitments to maintenance commitments. Our
theoretical and empirical results suggest that, despite their
similarities in describing the toggling of conditions over time,
maintenance commitments are fundamentally different from
enablement commitments. We have theoretically shown that
the easily-constructed pessimistic profile can only improve
the expected value in the face of unexpected changes for
enablement commitments but not for maintenance
commitments. Empirically, we have seen that an inexpensive
pessimistic approximation of the profile works comparably to
more sophisticated approximations for enablement
commitments, but not for maintenance commitments.</p>
      <p>The fact that approximating profiles well is harder for
maintenance commitments could mean that agents engaged
in maintenance commitments might need to make a
different tradeoff. That is, for enablement, we could give the
provider a lot of flexibility by only constraining it to meet
the probability at the commitment time and so can
unilaterally change the profile before then. The gain in flexibility
for the provider is worth the relatively small value loss to
the recipient from using the pessimistic profile. However, for
maintenance commitments, the potential for the recipient to
lose more value with a bad (simple or sophisticated)
approximate profile could mean that the provider should commit to a
more detailed profile—the loss of flexibility for the provider
in this case is warranted because the recipient makes much
better decisions. In other words, our theoretical and empirical
work suggests that maintenance commitments could require
providers and recipients to inherently be more tightly coupled
than they need to be for enablement commitments.
Acknowledgments We thank the anonymous reviewers for
great suggestions. This work was supported in part by the
Air Force Office of Scientific Research under grant
FA955015-1-0039. Any opinions, findings, conclusions, or
recommendations expressed here are those of the authors and do
not necessarily reflect the views of the sponsors.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [Duff et al.,
          <year>2014</year>
          ]
          <string-name>
            <given-names>S.</given-names>
            <surname>Duff</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            <surname>Thangarajah</surname>
          </string-name>
          , and
          <string-name>
            <given-names>J.</given-names>
            <surname>Harland</surname>
          </string-name>
          .
          <article-title>Maintenance goals in intelligent agents</article-title>
          .
          <source>Computational Intelligence</source>
          ,
          <volume>30</volume>
          (
          <issue>1</issue>
          ):
          <fpage>71</fpage>
          -
          <lpage>114</lpage>
          ,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          <source>[Durfee and Singh</source>
          , 2016]
          <string-name>
            <surname>Edmund</surname>
            <given-names>H.</given-names>
          </string-name>
          <string-name>
            <surname>Durfee</surname>
            and
            <given-names>Satinder</given-names>
          </string-name>
          <string-name>
            <surname>Singh</surname>
          </string-name>
          .
          <article-title>On the trustworthy fulfillment of commitments</article-title>
          . In Nardine Osman and Carles Sierra, editors,
          <source>AAMAS Workshops</source>
          , pages
          <fpage>1</fpage>
          -
          <lpage>13</lpage>
          . Springer,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          <source>[Hindriks and van Riemsdijk</source>
          ,
          <year>2007</year>
          ]
          <string-name>
            <given-names>K. V.</given-names>
            <surname>Hindriks and M. B. van Riemsdijk</surname>
          </string-name>
          .
          <article-title>Satisfying maintenance goals</article-title>
          .
          <source>In 5th Int. Workshop Declarative Agent Languages and Technologies (DALT)</source>
          , pages
          <fpage>86</fpage>
          -
          <lpage>103</lpage>
          ,
          <year>2007</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          <source>[Jennings</source>
          , 1993]
          <article-title>Nick R Jennings. Commitments and conventions: The foundation of coordination in multi-agent systems</article-title>
          .
          <source>The knowledge engineering review</source>
          ,
          <volume>8</volume>
          (
          <issue>3</issue>
          ):
          <fpage>223</fpage>
          -
          <lpage>250</lpage>
          ,
          <year>1993</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [Kalia et al.,
          <year>2014</year>
          ]
          <string-name>
            <given-names>A. K.</given-names>
            <surname>Kalia</surname>
          </string-name>
          ,
          <string-name>
            <given-names>Z.</given-names>
            <surname>Zhang</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M. P.</given-names>
            <surname>Singh</surname>
          </string-name>
          .
          <article-title>Estimating trust from agents' interactions via commitments</article-title>
          .
          <source>In 21st Euro. Conf. on AI (ECAI)</source>
          , pages
          <fpage>1043</fpage>
          -
          <lpage>1044</lpage>
          ,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [Kwiatkowska et al.,
          <year>2007</year>
          ]
          <string-name>
            <given-names>Marta</given-names>
            <surname>Kwiatkowska</surname>
          </string-name>
          , Gethin Norman, and David Parker.
          <article-title>Stochastic model checking</article-title>
          .
          <source>In International School on Formal Methods for the Design of Computer</source>
          ,
          <source>Communication and Software Systems</source>
          , pages
          <fpage>220</fpage>
          -
          <lpage>270</lpage>
          . Springer,
          <year>2007</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [Maheswaran et al.,
          <year>2008</year>
          ]
          <string-name>
            <given-names>Rajiv</given-names>
            <surname>Maheswaran</surname>
          </string-name>
          , Pedro Szekely, Marcel Becker, Stephen Fitzpatrick, Gergely Gati, Jing Jin, Robert Neches, Narges Noori, Craig Rogers,
          <string-name>
            <surname>Romeo Sanchez</surname>
          </string-name>
          , et al.
          <article-title>Predictability &amp; criticality metrics for coordination in complex environments</article-title>
          .
          <source>In Proceedings of the 7th International Joint Conference on Autonomous Agents and Multiagent Systems-Volume</source>
          <volume>2</volume>
          , pages
          <fpage>647</fpage>
          -
          <lpage>654</lpage>
          ,
          <year>2008</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [Nuzzo et al.,
          <year>2019</year>
          ]
          <string-name>
            <given-names>Pierluigi</given-names>
            <surname>Nuzzo</surname>
          </string-name>
          ,
          <string-name>
            <given-names>Jiwei</given-names>
            <surname>Li</surname>
          </string-name>
          , Alberto L.
          <string-name>
            <surname>Sangiovanni-Vincentelli</surname>
            ,
            <given-names>Yugeng</given-names>
          </string-name>
          <string-name>
            <surname>Xi</surname>
            , and
            <given-names>Dewei</given-names>
          </string-name>
          <string-name>
            <surname>Li</surname>
          </string-name>
          .
          <article-title>Stochastic assume-guarantee contracts for cyber-physical system design</article-title>
          .
          <source>ACM Trans. Embed. Comput. Syst.</source>
          ,
          <volume>18</volume>
          (
          <issue>1</issue>
          ):2:
          <fpage>1</fpage>
          -
          <lpage>2</lpage>
          :
          <fpage>26</fpage>
          ,
          <year>January 2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          <source>[Singh</source>
          ,
          <year>1999</year>
          ]
          <string-name>
            <given-names>M. P.</given-names>
            <surname>Singh</surname>
          </string-name>
          .
          <article-title>An ontology for commitments in multiagent systems</article-title>
          .
          <source>Artificial Intelligence and Law</source>
          ,
          <volume>7</volume>
          (
          <issue>1</issue>
          ):
          <fpage>97</fpage>
          -
          <lpage>113</lpage>
          ,
          <year>1999</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          <source>[Winikoff</source>
          , 2006]
          <string-name>
            <given-names>Michael</given-names>
            <surname>Winikoff</surname>
          </string-name>
          .
          <article-title>Implementing flexible and robust agent interactions using distributed commitment machines</article-title>
          .
          <source>Multiagent and Grid Systems</source>
          ,
          <volume>2</volume>
          (
          <issue>4</issue>
          ):
          <fpage>365</fpage>
          -
          <lpage>381</lpage>
          ,
          <year>2006</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          <source>[Witwicki and Durfee</source>
          , 2009]
          <string-name>
            <given-names>Stefan J.</given-names>
            <surname>Witwicki</surname>
          </string-name>
          and
          <string-name>
            <surname>Edmund H. Durfee</surname>
          </string-name>
          .
          <article-title>Commitment-based service coordination</article-title>
          .
          <source>Int.J. Agent-Oriented Software Engineering</source>
          ,
          <volume>3</volume>
          :
          <fpage>59</fpage>
          -
          <lpage>87</lpage>
          ,
          <year>01 2009</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          <source>[Witwicki and Durfee</source>
          , 2010]
          <string-name>
            <given-names>Stefan J.</given-names>
            <surname>Witwicki</surname>
          </string-name>
          and
          <string-name>
            <surname>Edmund H. Durfee</surname>
          </string-name>
          .
          <article-title>Influence-based policy abstraction for weakly-coupled Dec-POMDPs</article-title>
          .
          <source>In Int. Conf. Auto. Planning Sys</source>
          .
          <source>(ICAPS)</source>
          , pages
          <fpage>185</fpage>
          -
          <lpage>192</lpage>
          ,
          <year>2010</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          <source>[Xing and Singh</source>
          , 2001]
          <string-name>
            <given-names>Jie</given-names>
            <surname>Xing and Munindar P Singh</surname>
          </string-name>
          .
          <article-title>Formalization of commitment-based agent interaction</article-title>
          .
          <source>In Proceedings of the 2001 ACM symposium on Applied computing</source>
          , pages
          <fpage>115</fpage>
          -
          <lpage>120</lpage>
          . ACM,
          <year>2001</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          <source>[Xuan and Lesser</source>
          , 1999]
          <string-name>
            <given-names>Ping</given-names>
            <surname>Xuan and Victor R Lesser.</surname>
          </string-name>
          <article-title>Incorporating uncertainty in agent commitments</article-title>
          . In International Workshop on Agent Theories, Architectures, and Languages, pages
          <fpage>57</fpage>
          -
          <lpage>70</lpage>
          . Springer,
          <year>1999</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          [Zhang et al.,
          <year>2016</year>
          ]
          <string-name>
            <given-names>Qi</given-names>
            <surname>Zhang</surname>
          </string-name>
          , Edmund H Durfee, Satinder Singh,
          <string-name>
            <given-names>Anna</given-names>
            <surname>Chen</surname>
          </string-name>
          , and
          <string-name>
            <surname>Stefan</surname>
          </string-name>
          J Witwicki.
          <article-title>Commitment semantics for sequential decision making under reward uncertainty</article-title>
          .
          <source>In Int J. Conf. on Artificial Intelligence (IJCAI)</source>
          , pages
          <fpage>3315</fpage>
          -
          <lpage>3323</lpage>
          ,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          [Zhang et al.,
          <year>2017</year>
          ]
          <string-name>
            <given-names>Qi</given-names>
            <surname>Zhang</surname>
          </string-name>
          , Satinder Singh,
          <string-name>
            <given-names>and Edmund</given-names>
            <surname>Durfee</surname>
          </string-name>
          .
          <article-title>Minimizing maximum regret in commitment constrained sequential decision making</article-title>
          .
          <source>In Int. Conf. Automated Planning Systems (ICAPS)</source>
          , pages
          <fpage>348</fpage>
          -
          <lpage>356</lpage>
          ,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          [Zhang et al.,
          <year>2018</year>
          ]
          <string-name>
            <given-names>Qi</given-names>
            <surname>Zhang</surname>
          </string-name>
          ,
          <string-name>
            <surname>Edmund H. Durfee</surname>
            , and
            <given-names>Satinder P.</given-names>
          </string-name>
          <string-name>
            <surname>Singh</surname>
          </string-name>
          .
          <article-title>Challenges in the trustworthy pursuit of maintenance commitments under uncertainty</article-title>
          .
          <source>In Proceedings of the 20th International Trust Workshop co-located with AAMAS/IJCAI/ECAI/ICML</source>
          <year>2018</year>
          , Stockholm, Sweden, July
          <volume>14</volume>
          ,
          <year>2018</year>
          ., pages
          <fpage>75</fpage>
          -
          <lpage>86</lpage>
          ,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>