Abstract: A set of players delegate playing a game to a set of representatives, one for each player. We imagine that each player trusts their respective representative's strategic abilities. Thus, we might imagine that per default, the original players would simply instruct the representatives to play the original game as best as they can. In this paper, we ask: are there safe Pareto improvements on this default way of giving instructions? That is, we imagine that the original players can coordinate to tell their representatives to only consider some subset of the available strategies and to assign utilities to outcomes differently than the original players. Then can the original players do this in such a way that the payoff is guaranteed to be weakly higher than under the default instructions for all the original players? In particular, can they Pareto-improve without probabilistic assumptions about how the representatives play games? In this paper, we give some examples of safe Pareto improvements. We prove that the notion of safe Pareto improvements is closely related to a notion of outcome correspondence between games. We also show that under some specific assumptions about how the representatives play games, finding safe Pareto improvements is NP-complete.

Safe Pareto Improvements for Delegated Game Playing *

Introduction Between Aliceland and Bobbesia lies a sparsely populated desert. Until recently, neither of the two countries had any interest in the desert. However, geologists have recently discovered that it contains large oil reserves. Now, both Aliceland and Bobbesia would like to annex the desert, but they worry about a military conflict that would ensue if both countries insist on annexing. Table  1  models this strategic situation as a normal-form game. The strategy DM (short for "Demand with Military") denotes a military invasion of the desert, demanding annexation. If both countries send their military with such an aggressive mission, the countries fight a devastating war. The strategy RM (for "Refrain with Military") denotes yielding the territory to the other country, but building defenses to prevent an invasion of one's current territories. Alternatively, the countries can choose to not raise a military force at all, while potentially still demanding control of the desert by sending only its leader (DL, short for "Demand with Leader"). In this case, if both countries demand the desert, war does not ensue. Finally, they could neither demand nor build up a military (RL). If one of the two countries has their military ready and the other does not, the militarized country will know and will be able to invade the other country. In gametheoretic terms, militarizing therefore strictly dominates not militarizing. Instead of making the decision directly, the parliaments of Aliceland and Bobbesia appoint special commissions for making this strategic decision, led by Alice and Bob, respectively. The parliaments can instruct these representatives in various ways. They can explicitly tell them what to do -for example, Aliceland could directly tell Alice to play DM. However, we imagine that the parliaments trust the commissions' judgments more than they trust their own and hence they might prefer to give an instruction of the type, "make whatever demands you think are best for our country" (perhaps contractually guaranteeing a reward in proportion to the utility of the final outcome). They might not know what that will entail, i.e., how the commissions decide what demands to make given that instruction. However -based on their trust in their representatives -they might still believe that this leads to better outcomes than giving an explicit instruction. We will also imagine these instructions are (or at least can be) given publicly and that the commissions are bound (as if by a contract) to follow these instructions. In particular, we imagine that the two commissions can see each other's instructions. Thus, in instructing their commissions, the countries play a game with bilateral precommitment. When instructed to play a game as best as they can, we imagine that the commissions play that game in the usual way, i.e., without further abilities to credibly commit or to instruct subcommittees and so forth. It may seem that without having their parliaments ponder equilibrium selection, Aliceland and Bobbesia cannot do better than leave the game to their representatives. Unfortunately, in this default equilibrium, war is still a possibility. Even the brilliant strategists Alice and Bob may not always be able to resolve the difficult equilibrium selection problem to the same pure Nash equilibrium. In the literature on commitment devices and in particular the literature on program equilibrium, important ideas have been proposed for avoiding such bad outcomes. Imagine for a moment that Alice and Bob will play a Prisoner's Dilemma (Table  3 ) (rather than the Demand Game of Table  1 ). Then the default of (Defect, Defect) can be Pareto-improved upon. Both original players (Aliceland and Bobbesia) can use the following instruction for their representatives: "If the opponent's instruction is equal to this instruction, Cooperate; otherwise Defect."  [23, 17, 33, Sect. 10.4, 39]  Then it is a Nash equilibrium for both players to use this instruction. In this equilibrium, (Cooperate, Cooperate) is played and it is thus Pareto-optimal and Pareto-better than the default. In cases like the Demand Game, it is more difficult to apply this approach to improve upon the default of simply delegating the choice. Of course, if one could calculate the expected utility of submitting the default instructions, then one could similarly commit the representatives to follow some (joint) mix over the Pareto-optimal outcomes ((RM, DM), (DM, RM), (RM, RM), (DL, DL), etc.) that Pareto-improves on the default expected utilities.  1  However, we will assume that the original players are unable or unwilling to form probabilistic expectations about how the representatives play the Demand Game, i.e., about what would happen with the default instructions. If this is the case, then this type of Pareto improvement on the default is unappealing. The goal of this paper is to show and analyze how even without forming probabilistic beliefs about the representatives, the original players can  1  One might argue that due to the symmetry of the Demand Game, the original players should expect the representatives to play the game's unique symmetric equilibrium (in which both players play DM with probability 1 /4 and RM with probability 3 /4). Of course, in general games might be asymmetric. We here consider a symmetric game only for simplicity. More generally, some games with multiple equilibria might have a single "focal" equilibrium  [35, pp. 54 -58] that we expect the representatives to play. However, we maintain that in many games it is not clear what equilibrium should be played.  Pareto-improve on the default equilibrium. We will call such improvements safe Pareto improvements (SPIs). We here briefly give an example in the Demand Game. The key idea is for the original players to instruct the representatives to select only from {DL, RL}, i.e., to not raise a military. Further, they tell them to disvalue the conflict outcome without military (DL, DL) as they would disvalue the original conflict outcome of war in the default equilibrium. Overall, this means telling them to play the game of Table  2 . (Again, we could imagine that the instructions specify Table  2  to be how Aliceland and Bobbesia financially reward Alice and Bob.) Importantly, Aliceland's instruction to play that game must be conditional on Bobbesia also instructing their commission to play that game, and vice versa. Otherwise, one of the countries could profit from deviating by instructing their representative to always play DM or RM (or to play by the original utility function). The game of Table  2  is isomorphic to the DM-RM part of the original Demand Game of Table  1 . Of course, the original players know neither how the original Demand Game nor the game of Table  2  will be played by the representatives. However, since these games are isomorphic, one should arguably expect them to be played isomorphically. For example, one should expect that (RM, DM) would be played in the original game if and only if (RL, DL) would be played in the modified game. However, the conflict outcome (DM, DM) is replaced in the new game with the outcome (DL, DL). This outcome is harmless (Pareto-optimal) for the original players. Contributions Our paper generalizes this idea to arbitrary normal-form games and is organized as follows. In Section 2, we introduce some notation for games and multivalued functions that we will use throughout this paper. In Section 3, we introduce the setting of delegated game playing for this paper. We then formally define and further motivate the concept of safe Pareto  improvements. We also define and give an example of unilateral SPIs. These are SPIs that require only one of the players to commit their representative to a new action set and utility function. In Section 4, we briefly review the concepts of program games and program equilibrium and show that SPIs can be implemented as program equilibria. In Section 5, we introduce a notion of outcome correspondence between games. This relation expresses the original players' beliefs about similarities between how the representatives play different games. In our example, the Demand Game of Table  1  (arguably) corresponds to the game of Table  2  in that the representatives (arguably) would play (DM, DM) in the original game if and only if they play (DL, DL) in the new game, and so forth. We also show some basic results (reflexivity, transitivity, etc.) about the outcome correspondence relation on games. In Section 6 we show that the notion of outcome correspondence is central to deriving SPIs. In particular, we show that a game Γ s is an SPI on another game Γ if and only if there is a Pareto-improving outcome correspondence relation between Γ s and Γ. To derive SPIs, we need to make some assumptions about outcome correspondence, i.e., about which games are played in similar ways by representatives. We give two very weak assumptions of this type in Section 7. The first is that the representatives' play is invariant under the removal of strictly dominated strategies. For example, we assume that in the Demand Game the representatives only play DM and RM. Moreover we assume that we could remove DL and RL from the game and the representatives would still play the same strategies as in the original Demand Game with certainty. The second assumption is that the representatives play isomorphic games isomorphically. For example, once DL and RL are removed for both players from the Demand Game, the Demand Game is isomorphic to the game in Table  2  such that we might expect them to be played isomorphically. In Section 7.5, we derive a few SPIs -including our SPI for the Demand Game -using these assumptions. Section 8 shows that determining whether there exists an SPI based on these assumptions is NP-complete. Section 9 con-siders a different setting in which we allow the original players to let the representatives choose from newly constructed strategies whose corresponding outcomes map arbitrarily onto feasible payoff vectors from the original game. In this new setting, finding SPIs can be done in polynomial time. We conclude by discussing the problem of selecting between different SPIs on a given game (Section 10) and giving some ideas for directions for future work (Section 11).
 Preliminaries
 Games We here give some basic game-theoretic definitions. We assume the reader to be familiar with most of these concepts and with game theory more generally. An n-player (normal-form) game is a tuple (A, u) of a set A = A 1 × ... × A n of (pure) strategy profiles (or outcomes) and a function u : A → R n that assigns to each outcome a utility for each player. The Prisoner's Dilemma shown in Table  3  is a classic example of a game. The Demand Game of Table  1  is another example of a game that we will use throughout this paper. Instead of (A, u) we will also write (A 1 , ..., A n , u 1 , ..., u n ). We also write A −i for × j =i A i , i.e., for the Cartesian product of the action sets of all players other than i. We similarly write u −i and a −i for vectors containing utility functions and actions, respectively, for all players but i. If u i is a utility function and u −i is a vector of utility functions for all players other than i, then (even if i = 1) we use (u i , u −i ) for the full vector of utility functions where Player i has utility function u i and the other players have utility functions as specified by u −i . We use (A i , A −i ) and (a i , a −i ) analogously. We say that a i ∈ A i strictly dominates a i ∈ A i if for all a −i ∈ A −i , u i (a i , a −i ) > u i (a i , a −i ). For example, in the Prisoner's Dilemma, Defect strictly dominates Cooperate for both players. As noted earlier, DM and RM strictly dominate DL and RL for both players. For any given game Γ = (A, u), we will call any game Γ = (A , u ) a subset game of Γ if A i ⊆ A i for i = 1, ..., n. Note that a subset game may assign different utilities to outcomes than the original game. For example, the game of Table  2  is a subset game of the Demand Game. We say that some utility vector y ∈ R n is a Pareto improvement on (or is Pareto-better than) y ∈ R n if y i ≥ y i for i = 1, ..., n. We will also denote this by y ≥ y . Note that, contrary to convention, we allow y = y .  Whenever we require one of the inequalities to be strict, we will say that y is a strict Pareto improvement on y . In a given game, we will also say that an outcome a is a Pareto improvement on another outcome a if u(a) ≥ u(a ). We say that y is Pareto-optimal or Pareto-efficient relative to some S ⊂ R n if there is no element of S that strictly Pareto-dominates y. Let Γ = (A, u) and Γ = (A , u ) be two n-player games. Then we call an n-tuple of functions Φ = (Φ i : A i → A i ) i=1,...,n a (game) isomorphism between Γ and Γ if there are vectors λ ∈ R n + and c ∈ R n such that u(a 1 , ..., a n ) = λu (Φ 1 (a 1 ), ..., Φ n (a n )) + c for all a ∈ A. If there is an isomorphism between Γ and Γ , we call Γ and Γ isomorphic. For example, if we let Γ be the Demand Game and Γ s the subset game of Table  2 , then ({DM, RM}, {DM, RM}, u) is isomorphic to Γ s via the isomorphism Φ with Φ i (DM) = DL and Φ i (RM) = RL and the constants λ = (1, 1) and c = (0, 0).
 Multivalued functions For sets M and N , a multi-valued function Φ : M N is a function which maps each element m ∈ M to a set Φ(m) ⊆ N . For a subset Q ⊆ M , we define Φ(Q) := m∈Q Φ(m). Note that Φ(Q) ⊆ N and that Φ(∅) = ∅. For any set M , we define the identity function id M : M M : m → {m}. Also, for two sets M and N , we define all M,N : M N : m → N . We define the inverse Φ −1 : N M : n → {m ∈ M | n ∈ Φ(m)}. Note that Φ −1 (∅) = ∅ for any multi-valued function Φ. For sets M , N and Q and functions Φ : M N and Ψ : N Q, we define the composite Ψ • Φ : M Q : m → Ψ(Φ(m)). As with regular functions, composition of multi-valued functions is associative. We say that Φ : M N is singlevalued if |Φ(m)| = 1 for all m ∈ M . Whenever a multi-valued function is single-valued, we can apply many of the terms for regular functions. For example, we will take injectivity, surjectivity, and bijectivity for single-valued functions to have the usual meaning. We will never apply these notions to non-single-valued functions.
 Delegation and safe Pareto improvements We consider a setting in which a given game Γ is played through what we will call representatives. For example, the representatives could be humans whose behavior is determined or incentivized by some contract à la the principal-agent literature  [21] . We imagine that one way in which the representatives can be instructed is to in turn play a subset game Γ s = (A s 1 ⊆ A 1 , ..., A s n ⊆ A n , u s ) of the original game, without necessarily specifying a strategy or algorithm for solving such a game. We emphasize, again, that u s is allowed to be a vector of entirely different utility functions. For any subset game Γ s , we denote by Π(Γ s ) the outcome that arises if the representatives play the subset game Γ s of Γ. Because it is unclear what the right choice is in many games, the original players might be uncertain about Π(Γ s ). We will therefore model each Π(Γ s ) as a random variable. We will typically imagine that the representatives play Γ in the usual way, i.e., that they are not able to make further commitments or delegate again. For example, we imagine that if Γ is the Prisoner's Dilemma, then Π(Γ) = (Defect, Defect) with certainty. The original players trust their representatives to the extent that we take Π(Γ) to be a default way for the game to played for any Γ. That is, by default the original players tell their representatives to play the game as given. For example, in the Demand Game, it is not clear what the right action is. Thus, if one can simply delegate the decision to someone with more relevant expertise, that is the first option one would consider. We are interested in whether and how the original players can jointly Pareto-improve on the default. Of course, one option is to compute the expected utilities in the default (E [u(Π(Γ))]) and then let the representatives play a distribution over outcomes whose expected utility exceeds that default expected utility. However, this is unrealistic if Γ is a complex game with potentially many Nash equilibria. For one, the precise point of delegation is that the original players are unable or unwilling to properly evaluate Γ. Second, there is no widely agreed upon, universal procedure for selecting an action in the face of equilibrium selection problems. In such cases, the original players may in practice be unable to form a probability distribution over Π(Γ). This type of uncertainty is sometimes referred to as Knightian uncertainty, following Knight's  [19]  distinction between the concepts of risk and uncertainty. We address this problem in a typical way. Essentially, we require of any attempted improvement that it incurs no regret in the worst-case. That is, we are interested in subset games Γ s that are Pareto improvements with certainty under weak and purely qualitative assumptions about Π.  2  In particular, in Section 7, we will introduce the assumptions that the representatives do not play strictly dominated actions and play isomorphic games isomorphically. Definition 1. Let Γ s be a subset game of Γ. We say Γ s is a safe Pareto improvement (SPI) on Γ if u(Π(Γ s )) ≥ u(Π(Γ)) with certainty. We say that Γ s is a strict SPI if furthermore, there is a player i s.t. u i (Π(Γ s )) > u i (Π(Γ s )) with positive probability. For example, in the introduction we have argued that the subset game in Table  2  is a strict SPI on the Demand Game (Table  1 ). Less interestingly, if we let Γ = (A, u) be the Prisoner's Dilemma (Table  3 ), then we might expect ({Cooperate}, {Cooperate}, u) to be an SPI on Γ. After all, we might expect that Π(Γ) = (Defect, Defect) with certainty, while it must be Π({Cooperate}, {Cooperate}, u) = (Cooperate, Cooperate) with certainty, for lack of alternatives. Both players prefer mutual cooperation over mutual defection.
 Unilateral SPIs Both SPIs given above require both players to let their representatives choose from restricted strategy sets to maximize something other than the original player's utility function. Definition 2. We will call a subset game Γ s = (A s , u s ) of Γ = (A, u) unilateral if for all but one i ∈ {1, ..., n} it holds that A s i = A i and u s i = u i . Consequently, if a unilateral subset game Γ s of Γ is also an SPI for Γ, we call Γ s a unilateral SPI. We now give an example of a unilateral SPI using the Complicated Temptation Game, formalized as a normal-form game in Table  4 . (We give the not-so complicated Temptation Game -in which we can only give a trivial example of SPIs -in Section 7.5.) Two players each deploy a robot. Each of the robots faces two choices in parallel. First, each can choose whether to work on Project 1 or Project 2. Player 1 values Project 1 higher and Player 2 values Project 2 higher, but the robots are more effective if they work on the same project. To complete the task, the two robots need to share a resource. Robot 2 manages the resource and can choose whether to control Robot 1's access tightly (e.g., by frequently checking on the resource, or requiring Robot 1 to demonstrate a need for the resource) or give Robot 1 relatively free access. Controlling access tightly decreases the efficiency of both robots, though the exact costs depend on which projects the robots are working on. Robot 1 can choose between using the resource as intended by Robot 2; or give in to the temptation of trying to steal as much of the resource as possible to use it for other purposes. Regardless of what Robot 2 does (in particular, regardless of whether Robot 2 controls access or not), Player 1 prefers trying to steal. In fact, if Robot 2 controls access and Robot 1 refrains from theft, they never get anything done. Given that Robot 1 tries to steal, Player 2 prefers his Robot 2 to control access. As usual we assume that the original players can instruct their robots to play arbitrary subset games of Γ (without specifying an algorithm for solving such a game) and that they can give such instructions conditional on the other player providing an analogous instruction. Player 1 has a unilateral SPI in the Complicated Temptation Game. In particular, Player 1 can commit her representative to play only from R 1 and R 2 and to assign utilities u s 1 (R 1 , F 1 ) = u 1 (T 1 , C 1 ) = 2, u s 1 (R 1 , F 2 ) = u 1 (T 1 , C 2 ) = 1, u s 1 (R 2 , F 1 ) = u 1 (T 2 , C 1 ) = 1, and u s 1 (R 2 , F 2 ) = u 1 (T 2 , C 2 ) = 4; otherwise u s 1 does not differ from u 1 . The resulting SPI is given in Table  5 . In this subset game, Player 2's representative -knowing that Player 1's representative will only play from R 1 and R 2 -will choose from F 1 and F 2 (since F 1 and F 2 strictly dominate C 1 and C 2 in Table  5 ). Now notice that the remaining subset game is isomorphic to the ({T 1 , T 2 }, {C 1 , C 2 }) subset game of the original Complicated Temptation Game, where T 1 maps to R 1 and T 2 maps to R 2 for both Player 1, and C 1 maps to F 1 and C 2 maps to Player 2 C 1 C 2 F 1 F 2 Player 1 T 1 2, 4 1, 1 6, 0 6, 0 T 2 1, 1 4, 2 6, 0 6, 0 R 1 0, 0 0, 0 3, 5 3, 2 R 2 0, 0 0, 0 2, 2 5, 3 Table 4: Complicated Temptation Game Player 2 C 1 C 2 F 1 F 2 Player 1 R 1 0, 0 0, 0 2, 5 1, 2 R 2 0, 0 0, 0 1, 2 4, 3 Table  5 : Safe Pareto improvement for the Complicated Temptation Game F 2 for Player 2. Player 1's representative's utilities have been set to be the same between the two; and Player 2's utilities happen to be the same up to a constant (1) between the two subset games. Thus, we might expect that if Π(Γ) = (T 1 , C 1 ), then Π(Γ s ) = (R 1 , F 1 ), and so on. Finally, notice that u(R 1 , F 1 ) ≥ u(T 1 , C 1 ) and so on. Hence, Table  5  is indeed an SPI on the Complicated Temptation Game. Such unilateral changes are particularly interesting because they only require one of the players to be able to credibly delegate. That is, it's enough for a single player to instruct their representative to choose from a restricted action set to maximize a new utility function. The other players can simply instruct their representatives to play the game in the normal way (i.e., maximizing the respective players' original utility functions without restrictions on the action set). In fact, we may also imagine that only one player i delegates at all, while the other players choose an action themselves, after observing Player i's instruction to her representative. One may object that in a situation where only one player can commit, the sole player with commitment power can simply play the meta game as a standard unilateral commitment (Stackelberg) game [as studied by, e.g.,  8, 38, 43]  or perhaps as a first mover in a sequential game (as solved by backward induction), without bothering with any Pareto conditions. For example, in the Complicated Temptation Game, Player While this is true in many situations, it is easy come up with scenarios in which it is not and in which SPIs are relevant. For one, we may imagine that only one Player has the fine-grained commitment and delegation abilities needed for SPIs but that the other players can still credibly commit (or are already credibly committed) against any "commitment trickery" that clearly leaves them worse off. For instance, many people appear credibly committed by intuitions about fairness and retributivist instincts and emotions [see, e.g., 31, Chapter 6, especially the section "The Doomsday Machine"], but are nonetheless very limited in their abilities to commit. Second, we may imagine that the players who cannot commit are subject to reputation effects. Then they might want to build a reputation of resisting coercion. (In contrast, we expect a reputation of playing along with unilateral SPIs to be beneficial in most such situations.)
 Implementing safe Pareto improvements as program equilibria So far, we have been vague about the details of the strategic situation that the original players face in instructing their representatives. From what sets of actions can they choose? How can they jointly let the representatives play some new subset game Γ s ? Are SPIs Nash equilibria of the meta game played by the representatives? If I instruct my representative to play the SPI of Table  2  in the Demand Game, could my opponent not instruct her representative to play DM? In this section, we briefly describe one way to fill this gap by discussing the concept of program games and program equilibrium  [33, Sect. 10.4, 39, 12, 3, 10, 26] . This section is essential to understanding why SPIs (especially omnilateral ones) are relevant. However, the remaining technical content of this paper does not rely on this section and the main ideas presented here are straightforward from previous work. We therefore only give an informal exposition. For formal detail, see Appendix A. For any game Γ = (A, u), the program equilibrium literature considers the following meta game. First, each player i chooses from a set of computer programs. Each program then receives as input a vector containing everyone else's chosen program. Each player i's program then returns an action from A i , player i's set of actions in Γ. Together these actions then form an outcome a ∈ A of the original game. Finally, the utilities u(a) are realized according to the utility function of Γ. The meta game can be analyzed like any other game. Its Nash equilibria are called program equilibria. Importantly, the program equilibria can implement payoffs not implemented by any Nash equilibria of Γ itself. For example, in the Prisoner's Dilemma, both players can submit a program that says: "If the opponent's chosen computer program is equal to this computer program, Cooperate; otherwise Defect."  [23, 17, 33, Sect. 10.4, 39]  This is a program equilibrium which implements mutual cooperation. In the setting for our paper, we similarly imagine that each player i can choose from a set of programs that in turn choose from A i . However, the types of program that we have in mind here are more sophisticated than those typically considered in the program equilibrium literature. Specifically we imagine that the programs are executed by intelligent representatives who are themselves able to competently choose an action for player i in any given game Γ s , without the original player having to describe how this choice is to be made. The original player may not even understand much about this program other than that it generally plays well. Thus, in addition to the elementary instructions used in a typical computer program (branches, comparisons, arithmetic operations, etc.), we allow player i to use an instruction "Play Π i (Γ s )" in the program she submits. To jointly let the representatives play, e.g., the SPI Γ s of Table  2  on the Demand Game of Table  1 , the representatives can both use an instruction that says, "If the opponent's chosen program is analogous to this one, play Π i (Γ s ); otherwise play DM". Assuming some minimal rationality requirements on the representatives (i.e., on how "play Π i (Γ s )" is implemented), this is a Nash equilibrium. Figure  1  illustrates how (in the two-player case) the meta game between the original players is intended to work. For illustration consider the following two real-world instantiations of this setup. First, we might imagine that the original players hire human representatives. Each player specifies, e.g., via monetary incentives, how she wants her representative to act by some contract. For example, a player might contract her representative to play a particular action; or she might specify in her contract a function (u s i ) over outcomes according to which she will pay the representative after an outcome is obtained. Moreover, these contracts might refer to one another. For example, Player 1's contract with her representative might specify that if Player 2 and his representative use an analogous contract, then she will pay her representative according to Table  2 . As a second, more futuristic scenario, you could imagine that the representatives are software agents whose goals are specified by so-called smart contracts, i.e., computer programs implemented on a blockchain to be publicly verifiable  [6, 34] . To justify our study of SPIs, we prove that every SPI is played in some program equilibrium: Theorem 1. Let Γ be a game and Γ s be an SPI of Γ. Now consider a program game on Γ, where each player i can choose from a set of computer programs that output actions for Γ. In addition to the normal kind of instructions, we allow the use of the command "play Π i (Γ )" for any subset game Γ of Γ. Finally, assume that Π(Γ) guarantees each player i at least that player's minimax utility (a.k.a. threat point) in the base game Γ. Then Π(Γ s ) is played in a program equilibrium, i.e., in a Nash equilibrium of the program game. We prove this in Appendix A. As an alternative to having the original players choose contracts separately, we could imagine the use of jointly signed contracts which only come into effect once signed by all players [cf.  18, 24] . Also compare earlier work by Sen  [37]  and Raub  [32] , which we discuss in Appendix B. Definition 3. Consider two games Γ = (A 1 , ..., A n , u) and Γ = (A 1 , ..., A n , u ). We write Γ ∼ Φ Γ for Φ : A A if Π(Γ ) ∈ Φ(Π(Γ)) with certainty. Note that Γ ∼ Φ Γ is a statement about Π, i.e., about how the representatives choose. Whether such a statement holds generally depends on the specific representatives being used. In Section 7, we describe two general circumstances under which it seems plausible that Γ ∼ Φ Γ . For example, if two games Γ and Γ are isomorphic, then one might expect Γ ∼ Φ Γ , where Φ is the isomorphism between the two games. We now illustrate this notation using our discussion from the Demand Game. Let Γ be the Demand Game of Table  1 . First, it seems plausible that Γ is in some sense equivalent to Γ , where Γ = ({DM, RM, u) is the game that results from removing DL and RL for both players from Γ. Again, strict dominance could be given as an argument. We can now formalize this as Γ ∼ Φ Γ , where Φ(a 1 , a 2 ) = {(a 1 , a 2 )} if a 1 , a 2 ∈ {DM, RM} and Φ(a 1 , a 2 ) = ∅ otherwise. Next, it seems plausible that Γ ∼ Ψ Γ s , where Γ s is the game of Table  2  and Ψ is the isomorphism between Γ and Γ s . We now state some basic facts about the relation ∼, many of which we will use throughout this paper. Lemma 2. Let Γ = (A, u), Γ = (A , u ), Γ = ( Â, û) and Φ, Ξ : A A , Ψ : A Â. 1. Reflexivity: Γ ∼ id A Γ, where id A : A A : a → {a}.
 Symmetry: If Γ ∼ Φ Γ , then Γ ∼ Φ −1 Γ. 3. Transitivity: If Γ ∼ Φ Γ and Γ ∼ Ψ Γ, then Γ ∼ Ψ•Φ Γ. 4. If Γ ∼ Φ Γ and Φ(a) ⊆ Ξ(a) for all a ∈ A, then Γ ∼ Ξ Γ . 5. Γ ∼ all A,A Γ , where all A,A : A A : a → A . 6. If Γ ∼ Φ Γ and Φ(a) = ∅, then Π(Γ) = a with certainty. 7. If Γ ∼ Φ Γ and Φ −1 (a ) = ∅, then Π(Γ ) = a with certainty. Proof. 1. By reflexivity of equality, Π(Γ) = Π(Γ) with certainty. Hence, Π(Γ) ∈ id A (Π(Γ)) by definition of id A . Therefore, Γ ∼ id A Γ by definition of ∼, as claimed.
 Γ ∼ Φ Γ means that Π(Γ ) ∈ Φ(Π(Γ)) with certainty. Thus, Π(Γ) ∈ {a∈A | Π(Γ )∈Φ(a)} = Φ −1 (Π(Γ )), where equality is by the definition of the inverse of multi-valued functions. We conclude (by definition of ∼) that Γ ∼ Φ −1 Γ as claimed. 3. If Γ ∼ Φ Γ , Γ ∼ Ψ Γ, then by definition of ∼, (i) Π(Γ ) ∈ Φ(Π(Γ)) and (ii) Π( Γ) ∈ Ψ(Π(Γ )), both with certainty. The former (i) implies {Π(Γ )} ⊆ Φ(Π(Γ)). Hence, Ψ(Π(Γ )) = Ψ({Π(Γ )}) ⊆ Ψ(Φ(Π(Γ))). With ii, it follows that Π( Γ) ∈ Ψ(Φ(Π(Γ))) with certainty. By defini- tion, Γ ∼ Ψ•Φ Γ as claimed. 4. It is Π(Γ ) ∈ Φ(Π(Γ)) ⊆ Ξ(Π(Γ)) with certainty. Thus, by definition Γ ∼ Ξ Γ .
 By definition of Π, it is Π(Γ ) ∈ A with certainty. By definition of all A,A , it is all A,A (Π(Γ)) = A with certainty. Hence, Π(Γ ) ∈ all A,A (Π(Γ) ) with certainty. We conclude that Γ ∼ all A,A Γ as claimed. 6. With certainty, Π(Γ ) ∈ Φ(Π(Γ)) (by assumption). Also, with certainty Π(Γ ) / ∈ ∅. Hence, Φ(Π(Γ)) = ∅ with certainty. We conclude that Π(Γ) = a with certainty. Items 1-3 show that ∼ has properties resembling those of an equivalence relation. Note, however, that since ∼ is not a binary relationship, ∼ itself cannot be an equivalence relation in the usual sense. We can construct equivalence relations, though, by existentially quantifying over the multivalued function. For example, we might define an equivalence relation R on games, where (Γ, Γ ) ∈ R if and only if there is a single-valued bijection Φ such that Γ ∼ Φ Γ .  3  Item 4 states that if we can make an outcome correspondence claim less precise, it will still hold true. Item 5 states that in the extreme, it is always Γ ∼ all A,A Γ , where all A,A is the trivial, maximally imprecise outcome correspondence function that confers no information. Item 6 shows that ∼ can be used to express the elimination of outcomes, i.e., the belief that a particular outcome (or strategy) will never occur. Besides an equivalence relation, we can also use ∼ with quantification over the respective outcome correspondence function to construct (nonsymmetric) preorders over games, i.e., relations that are transitive and reflexive (but not symmetric or antisymmetric). Most importantly, we can construct a preorder on games where Γ Γ if Γ ∼ Φ Γ for a Φ that always increases every player's utilities.
 Safe Pareto improvements through outcome correspondence We now show that as advertised, outcome correspondence is closely tied to SPIs. The following theorem shows not only how outcome correspondences can be used to find (and prove) SPIs. It also shows that any SPI requires an outcome correspondence relation via a Pareto-improving correspondence function. Definition 4. Let Γ = (A, u) be a game and Γ s = (A s , u s ) be a subset game of Γ. Further let Φ : A → A s be such that Γ ∼ Φ Γ . We call Φ a Paretoimproving outcome correspondence (function) if u(a s ) ≥ u(a) for all a ∈ A and all a s ∈ Φ(a). Theorem 3. Let Γ = (A, u) be a game and Γ s = (A s , u s ) be a subset game of Γ. Then Γ s is an SPI on Γ if and only if there is a Pareto-improving outcome correspondence from Γ to Γ s . Proof. ⇐: By definition, Π(Γ s ) ∈ Φ(Π(Γ)) with certainty. Hence, for i = 1, 2, u i (Π(Γ s )) ∈ u i (Φ(Π(Γ))) with certainty. Hence, by assumption about Φ, with certainty, u i (Π(Γ s )) ≥ u i (Π(Γ)). ⇒: Assume that u i (Π(Γ)) ≥ u i (Π(Γ s )) with certainty for i = 1, 2. We define Φ : A → A s : a → {a s ∈ A s | u(a s ) ≥ u(a)} . It is immediately obvious that Φ is Pareto-improving as required. Also, whenever Π(Γ) = a and Π(Γ s ) = a s for any a ∈ A and a s ∈ A s , it is (by assumption) with certainty u(a s ) ≥ u(a). Thus, by definition of Φ, it holds that a s ∈ Φ(a). We conclude that Γ ∼ Φ Γ s as claimed. Note that the theorem concerns weak SPIs and therefore allows the case where with certainty u(Π(Γ)) = u(Π(Γ s )). To show that some Γ s is a strict SPI, we need additional information about which outcomes occur with positive probability. This, too, can be expressed via our outcome correspondence relation. However, since this is cumbersome, we will not formally address strictness much to keep things simple.  4  We now illustrate how outcome correspondences can be used to derive the SPI for the Demand Game from the introduction as per Theorem 3. Of course, at this point we have not made any assumptions about when games are equivalent. We will introduce some in the following section. Nevertheless, we can already sketch the argument using the specific outcome correspondences that we have given intuitive arguments for. Let Γ again be the Demand Game of Table  1 . Then, as we have argued, Γ ∼ Φ Γ , where Γ = ({DM, RM}, {DM, RM}, u) is the game that results from removing DL and RL for both players; and Φ(a 1 , a 2 ) = {(a 1 , a 2 )} if a 1 , a 2 ∈ {DM, RM} and Φ(a 1 , a 2 ) = ∅ otherwise. In a second step, Γ ∼ Ψ Γ s , where Γ s is the game of Table  2  and Ψ is the isomorphism between Γ and Γ s . Finally, transitivity (Lemma 2.3) implies that Γ ∼ Ψ•Φ Γ s . To see that Ψ • Φ is Pareto-improving for the original utility functions of Γ, notice that Φ does not change utilities at all. The correspondence function Ψ maps the conflict outcome (DM, DM) onto the outcome (DL, DL), which is better for both original players. Other than that, Ψ, too, does not change the utilities. Hence, Ψ • Φ is Pareto-improving. By Theorem 3, Γ s is therefore an SPI on Γ. In principle, Theorem 3 does not hinge on Π(Γ) and Π(Γ s ) resulting from playing games. An analogous result holds for any random variables over A and A s . In particular, this means that Theorem 3 applies also if the representatives receive other kinds of instructions (cf. Section 4). However, it seems hard to establish non-trivial outcome correspondences between Π(Γ) and other types of instructions. Still, the use of more complicated instructions can be used to derive different kinds of SPIs. For example, if there are different game SPIs, then the original players could tell their representatives to randomize between them in a coordinated way.
 Assumptions about outcome correspondence To make any claims about how the original players should play the metagame, i.e., about what instructions they should submit, we generally need to make assumptions about how the representatives choose and (by Theorem 3) about outcome correspondence in particular.  5  We here make two fairly weak assumptions.
 Elimination Our first is that the representatives never play strictly dominated actions and that removing them does not affect what the representatives would choose. Assumption 1. Let Γ = (A, u) be an arbitrary n-player game where A 1 , ..., A n are pairwise disjoint, and let ãi ∈ A i be strictly dominated by some other strategy in A i . Then Γ ∼ Φ (A −i , A i − {ã i }, u |(A −i ,A i −{ã i }) ), where for all a −i ∈ A −i , Φ(ã i , a −i ) = ∅ and Φ(a i , a −i ) = {(a i , a −i )} whenever a i = ãi . Assumption 1 expresses that representatives should never play strictly dominated strategies. Moreover, it states that we can remove strictly dominated strategies from a game and the resulting game will be played in the same way by the representatives. For example, this implies that when evaluating a strategy a i , the representatives do not take into account how many other strategies a i strictly dominates. Assumption 1 also allows (via Transitivity of ∼ as per Lemma 2.3) the iterated removal of strictly dominated strategies. The notion that we can (iteratively) remove strictly dominated strategies is common in game theory  [28, 20, 27 , Section 2.9, Chapter 12] and has rarely been questioned. It is also implicit in the solution concept of Nash equilibrium -if a strategy is removed by iterated strict dominance, that strategy is played in no Nash equilibrium. However, like the concept of Nash equilibrium, the elimination of strictly dominated strategies becomes implausible if the game is not played in the usual way. In particular, for Assumption 1 to hold, we will in most games Γ have to assume that the representatives cannot in turn make credible commitments (or delegate to further subrepresentatives) or play the game iteratively  [2] .
 Isomorphisms Our second assumption is that the representatives play isomorphic games isomorphically when those games are fully reduced. Assumption 2. Let Γ = (A, u) and Γ = (A , u ) be two games that do not contain strictly dominated actions. If Γ and Γ are isomorphic, then there exists an isomorphism Φ between Γ and Γ such that Γ ∼ Φ Γ . Note that if there are multiple game isomorphisms, then we assume outcome correspondence for only one of them. This is necessary for the assumption to be satisfiable in the case of games with action symmetries. (Of course, such games are not the focus of this paper.) For example, let Γ be Rock-Paper-Scissors. Then Γ is isomorphic to itself via the function Φ that for both players maps Rock to Paper, Paper to Scissors, and Scissors to Rock. But if it were Γ ∼ Φ Γ, then this would mean that if the representatives play Rock in Rock-Paper-Scissors, they play Paper in Rock-Paper-Scissors. Contradiction! We will argue for the consistency of our version of the assumption in Section 7.3. Notice also that we make the assumption only for reduced games. This relates to the previous point about action-symmetric games. For example, consider two versions of Rock-Paper-Scissors and assume that in both versions both players have an additional strictly dominated action that breaks the action symmetries e.g., the action, "resign and give the opponent $10 if they play Rock/Paper". Then there would only be one isomorphism between these two games (which maps Rock to Paper, Paper to Scissors, and Scissors to Rock for both players). However, in light of Assumption 1, it seems problematic to assume that these strictly dominated actions restrict the outcome correspondences between these two games.  6  One might worry that reasoning about the existence of multiple isomorphisms renders it intractable to deal with outcome correspondences as implied by Assumption 2, and in particular that it might make it impossible to tell whether a particular game is an SPI. However, one can intuitively see that the different isomorphisms between two games do analogous operations. In particular, it turns out that if one isomorphism is Pareto-improving, then they all are: Lemma 4. Let Φ and Ψ be isomorphisms between Γ and Γ . If Φ is (strictly) Pareto-improving, then so is Ψ. We prove Lemma 4 in Appendix C. Lemma 4 will allow us to conclude from the existence of a Paretoimproving isomorphism Φ that there is a Pareto-improving Ψ s.t. Γ ∼ Ψ Γ by Assumption 2, even if there are multiple isomorphisms between Γ and Γ . In the following, we can therefore afford to be lax about our ignorance (in some games) about which outcome isomorphism induces outcome equivalence. We will therefore generally write "Γ ∼ Φ Γ by Assumption 2" as short for "Φ is a game isomorphism between Γ and Γ and hence by Assumption 2 there exists an isomorphism Ψ such that Γ ∼ Ψ Γ ". One could criticize Assumption 2 by referring to focal points (introduced by Schelling [35, pp. 54-58]) as an example where context and labels of strategies matter. A possible response might be that in games where context plays a role, that context should be included as additional information and not be considered part of (A, u). Assumption 2 would then either not apply to such games with (relevant) context or would require one to, in some way, translate the context along with the strategies. However, in this paper we will not formalize context, and assume that there is no decision-relevant context.
 Consistency of Assumptions 1 and 2 We will now argue that there exist representatives that indeed satisfy Assumptions 1 and 2, both to provide intuition and because our results would not be valuable if Assumptions 1 and 2 were inconsistent. We will only sketch the argument informally. To make the argument formal, we would need to specify in more detail what the set of games looks like and in particular what the objects of the action sets are. Imagine that for each player i there is a book 7 that on each page describes a normal-form game that does not have any strictly dominated strategies. The actions have consecutive integer labels. Importantly, the book contains no pair of games that are isomorphic to each other. Moreover, for every fully reduced game, the book contains a game that is isomorphic to this game. (Unless we strongly restrict the set of games under consideration, the book must therefore have infinitely many pages.) We imagine that each player's book contains the same set of games. On each page, the book for Player i recommends one of the actions of Player i to be taken deterministically.  8  Each representative owns a potentially different version of this book and uses it as follows to play a given game Γ. First the given game is fully reduced by iterated strict dominance. They then look up the unique game in the book that is isomorphic to Γ red and map the action labels in Γ red onto the integer labels of the game in the book via some isomorphism. If there are multiple isomorphisms from Γ red to the relevant page in the book, then all representatives decide between them using the same deterministic procedure. Finally they choose the action recommended by the book. It is left to show a pair of representatives Π thus specified satisfies Assumptions 1 and 2. We first argue that Assumption 1 is satisfied. Let Γ be a game and let Γ be a game that arises from removing a strictly dominated action from Γ. By the well known path independence of iterated elimination of strictly dominated strategies  [1, 15, 28] , fully reducing Γ and Γ results in the same game. Hence, the representatives play the same actions in Γ and Γ . Second, we argue that Assumption 2 is satisfied. Let us say Γ and Γ are fully reduced and isomorphic. Then it is easy to see that each player i, plays Γ and Γ based on the same page of their book. Let the game on that book page be Γ. Let Φ : A → Ã and Φ : A → Ã be the bijections used by the representatives to translate actions in Γ and Γ , respectively, to labels in Γ. Then if the representatives take actions a in Γ, the actions Φ(a) are the ones specified by the book for Γ, and hence the actions Φ−1 (Φ(a)) are played in Γ . Thus Γ ∼ Φ−1 •Φ Γ. It is easy to see that Φ−1 • Φ is a game isomorphism between Γ and Γ.
 Discussion of alternatives to Assumptions 1 and 2 One could try to use principles other than Assumptions 1 and 2. We here give some considerations. First, game theorists have also considered the iterated elimination of weakly dominated strategies  [14, 22, Section 4.11] . Unfortunately, the iterated removal of weakly dominated strategies is pathdependent [20, Section 2.7.B, 5, Section 5.2, 27, Section 12.3]. That is, for some games, iterated removal of weakly dominated strategies can lead to different subset games, depending on which weakly dominated strategy one chooses to eliminate at any stage. A straightforward extension of Assumption 1 to allow the elimination of weakly dominated strategies would therefore be inconsistent. The iterated removal of strictly dominated strategies, on the other hand, is path-independent, and in the 2-player case always eliminates exactly the non-rationalizable strategies  [1, 15, 28] . Many other dominance concepts have been shown to be path independent. For an overview, see Apt  [1] . We could have used any of these path-independent dominance concepts. With Assumptions 1 and 2, all our outcome correspondence functions are either 1-to-1 or 1-to-0. Other elimination assumptions could involve the use of many-to-1 or even many-to-many functions. In general, such functions are needed when a strategy ãi can be eliminated to obtain a strategically equivalent game, but in the original game ãi may still be played. The simplest example would be the elimination of payoff-equivalent strategies. Imagine that in some game Γ for all opponent strategies a −i ∈ A −i it is the case that u(ã i , a −i ) = u(â i , a −i ) and that there are no other strategies that are similarly payoff-equivalent to ãi and âi . Then one would assume that Γ ∼ Φ (A i − {ã i }, A −i , u), where Φ maps ãi onto {â i } and otherwise Φ is just the identity function.
 Examples In this section, we use Assumptions 1 and 2 to formally prove a few SPIs. Proposition (Example) 5. Let Γ be the Prisoner's Dilemma (Table  3 ) and Γ s = (A s 1 , A s 2 , u s 1 , u s 2 ) be any subset game of Γ with A s 1 = A s 2 = {Cooperate}. Then under Assumption 1, Γ s is a strict SPI on Γ. Proof. By applying Assumption 1 twice and Transitivity once, Γ ∼ Φ Γ D , where Γ D = ({Defect}, {Defect}, u) and Φ(Defect, Defect) = {(Defect, Defect)} and Φ(a 1 , a 2 ) = ∅ for all (a 1 , a 2 ) = (Defect, Defect). By Lemma 2.5, we further obtain Γ D ∼ all Γ s , where Γ s is as described in the proposition. Hence, by transitivity, Γ ∼ all•Φ Γ s . It is easy to verify that the function all • Φ is Pareto-improving. Proposition (Example) 6. Let Γ be the Demand Game of Table  1  and Γ s be the subset game described in Table  2 . Under Assumptions 1 and 2, Γ s is an SPI on Γ. Further, if P (Π(Γ)=(DM, DM)) > 0, then Γ s is a strict SPI. Proof. Let (A 1 , A 2 , u 1 , u 2 ) = Γ. We can repeatedly apply Assumption 1 to eliminate from Γ the strategies DL and RL for both players. We can then apply Lemma 2.   ) ∈ A 1 × A 2 , it is for all (a s 1 , a s 2 ) ∈ Ψ(Φ(Γ s )) the case that u(a s 1 , a s 2 ) ≥ u(a 1 , a 2 ). Next, we give two examples of unilateral SPIs. We start with an example that is trivial in that the original player instructs her resentatives to take a specific action. We then give the SPI for the Complicated Temptation game as a non-trivial example. Consider the Temptation Game given in Table  6 . In this game, Player 1's T (for Temptation) strictly dominates R. Once R is removed, Player 2 prefers C. Hence, this game is strict-dominance solvable to (T, C). Player 1 can safely Pareto-improve on this result by telling her representative to play R, since Player 2's best response to R is F and u(R, F ) = (4, 4) > (1, 2) = u(T, C). We now show this formally. Proposition (Example) 7. Let Γ = (A 1 , A 2 , u 1 , u 2 ) be the game of Table 6. Under Assumption 1, Γ s = ({R}, A 2 , u 1 , u 2 ) is a strict SPI on Γ. Proof. First consider Γ. We can apply Assumption 1 to eliminate Player 1's R and then apply Assumption 1 again to the resulting game to also eliminate Player 2's R. By transitivity, we find Γ ∼ Φ Γ , where Γ = ({T }, {C}, u 1 , u 2 ) and Φ(T, C) = {(T, C)} and Φ(A 1 × A 2 − {(T, C)}) = ∅. Next, consider Γ s . We can apply Assumption 1 to remove Player 2's strategy C and find Γ s ∼ Ψ Γs , where Γs = (({R}, {F }, u 1 , u 2 )) and Ψ(R, F ) = {(R, F )} and Ψ(R, C) = ∅. Third, Γ ∼ all Γs by Lemma 2.5, where all(T, C) = {(R, F )}. Finally, we can apply transitivity to conclude Γ ∼ Ξ Γ s , where Ξ = Ψ −1 • all•Φ. It is easy to verify that Ξ(T, C) = (R, F ) and Ξ(A 1 ×A 2 −{(R, F )}) = ∅. Hence, Ξ is Pareto-improving and so by Theorem 3, Γ s is an SPI on Γ. Note that in this example, Player 1 simply commits to a particular strategy R and Player 2 maximizes their utility given Player 1's choice. Hence, this SPI can be justified with much simpler unilateral commitment setups  [8, 38, 43] . For example, if the Temptation Game was played as a sequential game in which Player 1 plays first, its unique subgame-perfect equilibrium is (R, F ). In Table  4  we give the Complicated Temptation Game, which better illustrates the features specific to our setup. Roughly, it is an extension of the simpler Temptation Game of Table  6 . In addition to choosing T versus R and C versus F , the players also have to make an additional choice (1 versus 2), which is difficult in that it cannot be solved by strict dominance. As we have argued in Section 3.1, the game in Table  5  is a unilateral SPI on Table  4 . We can now show this formally. Proposition (Example) 8. Let Γ be the Complicated Temptation Game (Table  4 ) and Γ s be the subset game in Table  5 . Under Assumptions 1 and 2, Γ s is a unilateral SPI on Γ. Proof. In Γ, for Player 1, T 1 and T 2 strictly dominate R1 and R 2 . We can thus apply Assumption 1 to eliminate Player 1's R1 and R 2 . In the resulting game, Player 2's C 1 and C 2 strictly dominate F 1 and F 2 , so one can apply Assumption 1 again to the resulting game to also eliminate Player 2's F 1 and F 2 . By transitivity, we find Γ ∼ Φ Γ , where Γ = ({T 1 , T 2 }, {C 1 , C 2 }, u 1 , u 2 ) and Φ(a 1 , a 2 ) = {(a 1 , a 2 )} if a 1 ∈ {T 1 , T 2 } and a 2 ∈ {C 1 , C 2 } ∅ otherwise . Next, consider Γ s (Table  5 ). We can apply Assumption 1 to remove Player 2's strategies C 1 and C 2 and find Γ s ∼ Ψ Γs , where Γs = (({R 1 , R 2 }, {F 1 , F 2 }, u s 1 , u 2 )) and Ψ(a 1 , a 2 ) = {(a 1 , a 2 )} if a 1 ∈ {R 1 , R 2 } and a 2 ∈ {F 1 , F 2 } ∅ otherwise . Third, Γ ∼ Ξ Γs by Assumption 2, where Ξ decomposes into Ξ 1 and Ξ 2 , corresponding to the two players, respectively, where Ξ 1 (T i ) = R i and Ξ 2 (C i ) = F i for i = 1, 2. Finally, we can apply transitivity and the rule about symmetry and inverses (Lemma 2.2) to conclude Γ ∼ Ψ −1 •Ξ•Φ Γ s . It is easy to verify that Ψ −1 • Ξ • Φ is Pareto-improving.
 Computing safe Pareto improvements In this section, we ask how computationally costly it is for the original players to identify for a given game Γ a non-trivial SPI Γ s . Of course, the answer to this question depends on what the original players are willing to assume about how their representatives act. For example, if only trivial outcome correspondences (as per Lemma 2.1 and 2.5) are assumed, then the decision problem is easy. Similarly, if Γ ∼ Φ Γ for given Φ is hard to decide (e.g., because it requires solving for the Nash equilibria of Γ and Γ ), then this could trivially also make the safe Pareto improvement problem hard to decide. We specifically are interested in deciding whether a given game Γ has a non-trivial SPI that can be proved using only Assumptions 1 and 2, the general properties of game correspondence (in particular Transitivity (Lemma 2.3), Symmetry (Lemma 2.2) and Theorem 3). Definition 5. The SPI decision problem consists in deciding for any given Γ, whether there is a game Γ s and a sequence of outcome correspondences Φ 1 , ..., Φ k and a sequence of subset games Γ 0 = Γ, Γ 1 , ..., Γ k = Γ s of Γ s.t.: 1. (Non-triviality:) If we fully reduce Γ s and Γ using iterated strict dominance (Assumption 1), the two resulting games are not equal. (Of course, they are allowed to be isomorphic.) 2. For i = 1, ..., k, Γ i−1 ∼ Φ i Γ i is valid by a single application of either Assumption 1 or Assumption 2, or an application of Assumption 1 in reverse via Lemma 2.2. 3. For all a ∈ A, and whenever a s ∈ (Φ k • Φ k−1 • ... • Φ 1 )(a), it is the case that u(a s ) ≥ u(a). For the strict SPI decision problem, we further require: (4.) There is a player i and an outcome a that survives iterated elimination of strictly dominated strategies from Γ s.t. u i ((Φ k •Φ k−1 •...•Φ 1 )(a)) > u i (a) . For the unilateral SPI decision problem, we further require: (5.) For all but one of the players i, u i = u s i and A i = A s i . Many variants of this problem may be considered. For example, to match Definition 1, the definition of the strict SPI problem assumes that all outcomes a that survive iterated elimination occur with positive probability. Alternatively we could have required that for demonstrating strictness, there must be a player i such that for all a ∈ A that survive iterated elimination, u i ((Φ k • Φ k−1 • ... • Φ 1 )(a)) > u i (a) . Similarly one may wish to find SPIs that are strict improvements for all players. We may also wish to allow the use of the elimination of duplicate strategies (as described in Section 7.4) or trivial outcome correspondence steps as per Lemma 2.5. These modifications would not change the computational complexity of the problem, nor would they require new proof ideas. One may also wish to compute all SPIs, or -in line with multi-criteria optimization  [11, 42]  -all SPIs that cannot in turn be safely improved upon. However, in general there may exist exponentially many such SPIs. To retain any hope of developing an efficient algorithm, one would therefore have to first develop a more efficient representation scheme [cf.  29, Sect. 16.4 ]. The full proof is tedious (see Appendix D), but the main idea is simple, especially for omnilateral SPIs. To find an omnilateral SPI on Γ based on Assumptions 1 and 2, one has to first iteratively remove all strictly dominated actions to obtain a reduced game Γ , which the representatives would play the same as the original game. This can be done in polynomial time. One then has to map the actions Γ onto the original Γ in such a way that each outcome in Γ is mapped onto a weakly Pareto-better outcome in Γ. Our proof of NP-hardness works by reducing from the subgraph isomorphism problem, where the payoff matrices of Γ and Γ represent the adjacency matrices of the graphs. Besides being about a specific set of assumptions about ∼, note that Theorem 9 and Proposition 10 also assume that the utility function of the game is represented explicitly in normal form as a payoff matrix. If we changed the game representation (e.g., to boolean circuits, extensive form game trees, quantified boolean formulas, or even Turing machines), this can affect the complexity of the SPI problem. For example, Gabarró, García, and Serna  [13]  show that the game isomorphism problem on normal-form games is equivalent to the graph isomorphism problem, while it is equivalent to the (likely computationally harder) boolean circuit isomorphism problem for a weighted boolean formula game representation. Solving the SPI problem requires solving a subset game isomorphism problem (see the proof of Lemma 28 in Appendix D for more detail). We therefore suspect that the SPI problem analogously increases in computational complexity (perhaps to being Σ p 2 -complete) if we treat games in a weighted boolean formula representation. In fact, even reducing a game using strict dominance by pure strategies -which contributes only insignificantly to the complexity of the SPI problem for normal-form games -is difficult in some game representations [7,  Section 6] . Note, however, that for any game representation to which 2-player normal-form games can be efficiently reduced -such as, for example, extensive-form games -the hardness result also applies. 9 Safe Pareto improvements under improved coordination
 Setup In this section, we imagine that the players are able to simply invent new token strategies with new payoffs that arise from mixing existing feasible payoffs. To define this formally, we first define for any game Γ = (A, u), C(Γ) := u(∆(A)) = a∈A p a u(a) a∈A p a = 1 and ∀a ∈ A : p a ∈ [0, 1] to be the set of feasible coordinated payoff vectors of Γ, which is exactly the convex closure of u(A), i.e., of the set of deterministically achievable utilities of the original game. For any game Γ, we then imagine that in addition to subset games, the players can let the representatives play a perfect-coordination token game (A s , u s , u e ), where for all i, A s i ∩ A i = ∅ and u s i : A s → R are arbitrary utility functions to be used by the representatives and u e : A s → C(Γ) are the utilities that the original players assign to the token strategies. The instruction (A s , u s , u e ) lets the representatives play the game (A s , u s ) as usual. However, the strategies A s are imagined to be meaningless token strategies which do not resolve the given game Γ. Once some token strategies a s are selected, these are translated into some probability distribution over A, i.e., over outcomes of the original game, thus giving rise to (expected) utilities u e (a s ) ∈ C(Γ). These distributions and thus utilities are specified by the original players. We here imagine in our definition of C(Γ) that these distributions over A could require the representatives to correlate their choices for the original game for any given a s . Definition 6. Let Γ be a game. A perfect-coordination SPI for Γ is a perfect-coordination token game (A s , u s , u e ) for Γ s.t. u e (Π(A s , u s )) ≥ u(Π(Γ)) with certainty. We call (A s , u s , u e ) a strict perfect-coordination SPI if there furthermore is a player i for whom u e i (Π(A s , u s )) > u i (Π(Γ)) with positive probability. As an example, imagine that Γ is just the DM-RM subset game of the Demand Game of Table  1 . Then, intuitively, an SPI under improved coordination could consist of the original players telling the representatives, "Play as if you were playing the DM-RM subset game of the Demand Game, but whenever you find yourself playing (DM, DM), randomize [according to some given distribution] between the other (Pareto-optimal) outcomes instead". Formally, A s 1 = { D, R} and A s 2 = { D, R} would then consist of tokenized versions of the original strategies. The utility functions u s 1 and u s 2 are then simply the same as in the original Demand Game except that they are applied to the token strategies. For example, u s ( D, R) = (2, 0). The utilities for the original players remove the conflict outcome. For example, the original players might specify u e ( D, D) = (1, 1), representing that the representatives are supposed to play (RM, RM) in the ( D, D) case. For all other outcomes (â 1 , â2 ), it must be the case that u e (â 1 , â2 ) = u s (â 1 , â2 ) because the other outcomes cannot be Pareto-improved upon. As with our earlier SPIs for the Demand Game, Assumption 2 implies that Γ ∼ Φ Γ s , where Φ maps the original conflict outcome (DM, DM) onto the Pareto-optimal ( D, D). Relative to the SPIs considered up until now, these new types of instructions put significant additional requirements on how the representatives interact. They now have to engage in a two-round process of first choosing and observing one another's token strategies and then playing the corresponding distribution over outcomes from the original game. Further, it must be the case that this additional coordination does not affect the payoffs of the original outcomes. The latter may not be the case in, e.g., the Game of Chicken. That is, we could imagine a Game of Chicken in which coordination is possible but that the rewards of the game change if the players do coordinate. After all, the underlying story in the Game of Chicken is that the positive reward (admiration from peers) is attained precisely for accepting a grave risk.
 Finding safe Pareto improvement under improved representative coordination With these more powerful ways to instruct representatives, we can now replace individual outcomes of the default game ad libitum. For example, in the reduced Demand Game, we singled out the outcome (DM, DM) as Pareto-suboptimal and replaced it by a Pareto-optimal outcome, while keeping all other outcomes the same. This allows us to construct SPIs in many more games then before. Definition 7. The strict full-coordination SPI decision problem consists in deciding for any given Γ whether under Assumption 2 there is a perfectcoordination SPI Γ s for Γ. Lemma 11. For a given n-player game Γ and payoff vector y ∈ R n , it can be decided by linear programming and thus in polynomial time whether y is Pareto-optimal in C(Γ). For an introduction to linear programming, see, e.g., Schrijver  [36] . In short, a linear program is a specific type of constrained optimization problem that can be solved efficiently. Proof. Finding a Pareto improvement on a given y ∈ R n can be formulated as the following linear program: Variables: p a ∈ [0, 1] for all a ∈ A Maximize n i=1 a∈A p a u i (a) − y i s.t. a∈A p a = 1 a∈A p a u i (a) ≥ y i for i = 1, ..., n Based on Lemma 11, Algorithm 1 decides whether there is a strict perfect-coordination SPI for a given game Γ. It is easy to see that this algorithm runs in polynomial time (in the size of, e.g., the normal form representation of the game). It is also correct: if it returns True, simply replace the Pareto-suboptimal outcome while keeping all other outcomes the same; if it returns False, then all outcomes are Paretooptimal within C(Γ) and so there can be no strict SPI. We summarize this result in the following proposition. Proposition 12. Assuming supp(Π(Γ)) is known and that Assumption 2 holds, it can be decided in polynomial time whether there is a strict perfectcoordination SPI. We start with a lemma that directly provides a characterization. So far, all the considered perfect-coordination SPIs (A s , u s , u e ) for a game (A, u) have consisted in letting the representatives play a game (A s , u s ) that is isomorphic to the original game, but Pareto-improves (from the original players' perspectives, i.e., u e ) at least one of the outcomes. It turns out that we can restrict attention to this very simple type of SPI under improved coordination. Lemma 13. Let Γ = ({a 1 1 , ..., a l 1 1 }, ..., {a 1 n , ..., a ln n }, u) be any game. Let Γ be a perfect-coordination SPI on Γ. Then we can define u e with values in C(Γ) such that under Assumption 2 the game Γ s = Â1 := {â 1 1 , ..., âl 1 1 }, ..., Ân := {â 1 n , ..., âln n }, û : (â i 1 1 , ..., âin n ) → u(a i 1 1 , ..., a in n ), u e is also an SPI on Γ, with E [u(Π(Γ s )) | Π(Γ)=a] = E u(Π(Γ )) Π(Γ)=a for all a ∈ A and consequently E [u(Π(Γ s ))] = E [u(Π(Γ ))]. Proof. First note that ( Â, û) is isomorphic to Γ. Thus by Assumption 2, there is isomorphism Φ s.t. Γ ∼ Φ ( Â, û). WLOG assume that Φ simply maps a i 1 1 , ..., a in n → âi 1 1 , ..., âin n . Then define u e as follows: u e (â i 1 1 , ..., âin n ) = E u (Π(Γ )) | Π(Γ) = (a i 1 1 , ..., a in n ) . Here u describes the utilities that the original players assign to the outcomes of Γ . Since u maps onto C(Γ) and C(Γ) is convex, u e as defined also maps into C(Γ) as required. Note that for all a i 1 1 , ..., a in n it is by assumption u (Π(Γ )) ≥ u(a i 1 1 , ..., a in n ) with certainty. Hence, u e (â i 1 1 , ..., âin n )) = E u (Π(Γ )) | Π(Γ) = (a i 1 1 , ..., a in n ) ≥ u(a i 1 1 , ..., a in n ), as required. Because of this result, we will focus on these particular types of SPIs, which simply create an isomorphic game with different (Pareto-better) utilities. Note, however, that without assigning exact probabilities to the distributions of Π(Γ), Π(Γ ), the original players will in general not be able to construct a Γ s that satisfies the expected payoff equalities. For this reason, one could still conceive of situations in which a different type of SPI would be chosen by the original players and the original players are unable to instead choose an SPI of the type described in Lemma 13. Lemma 13 directly implies a characterization of the expected utilities that can be achieved with perfect-coordination SPIs. Of course, this characterization depends on the exact distribution of Π(Γ). We omit the statement of this result. However, we state the following implication. Corollary 14. Under Assumption 2, the set of Pareto improvements that are safely achievable with perfect coordination {E[u(Γ )] | Γ is perfect-coordination SPI on Γ} is a convex polygon. Because of this result, one can also efficiently optimize convex functions over the set of perfect-coordination SPIs. Even without referring to the distribution Π(Γ), many interesting questions can be answered efficiently. For example, we can efficiently identify the perfect-coordination SPI that maximizes the minimum improvements across players and outcomes a ∈ A. In the following, we aim to use Lemma 13 and Corollary 14 to give maximally strong positive results about what Pareto improvements can be safely achieved, without referring to exact probabilities over Π(Γ). To keep things simple, we will do this only for the case of two players. To state our results, we first need some notation: We use PF(C) := y ∈ C ∃y ∈C, i ∈ {1, ..., n} : y ≥ y, y i > y to denote the Pareto frontier of a convex polygon C (or more generally convex, closed set). For any real number x ∈ R, we use π i (x, C(Γ)) to denote the y ∈ C(Γ) which maximizes y −i under the constraint y i = x. (Recall that we consider 2-player games, so y −i is a single real number.) Note that such a y exists if and only if x is i's utility in some feasible payoff vector. We first state our result formally. Afterwards, we will give a graphical explanation of the result, which we believe is easier to understand. Then there is an SPI under improved coordination Γ s such that E [u(Π(Γ s ))] = y. B) If there is no element in C(Γ) which Pareto-dominates all of supp(Π(Γ)) and if y is Pareto-dominated by an element each of L 1 and L 3 as defined above, then there is a perfect-coordination SPI Γ s such that E [u(Π(Γ s ))] = y. We now illustrate the result graphically. We start with Case A, which is illustrated in Figure  2 . The Pareto-frontier is the solid line in the north and east. The points marked x indicate outcomes in supp(Π(Γ)). The point marked by a filled circle indicates the expected value of the default equilibrium E [u(Π(Γ))]. For some y ∈ R 2 to be a Pareto improvement, Player 1's utility it must be to the north-east of the filled circle. The vertical dashed lines starting at the two extreme x marks illustrate the application of π 1 to project x min/max 1 onto the Pareto frontier. The dotted line between these two points is L 1 . Similarly, the horizontal dashed lines starting at x marks illustrate the application of π 2 to project x min/max 2 onto the Pareto frontier. The line segment between these two points is L 3 . In this case, this line segments lies on the Pareto frontier. The set L 2 is simply that part of the Pareto frontier, which Pareto-dominates all elements of supp(Π(Γ)), i.e., the part of the Pareto frontier to the north-east between the two intersections with the northern horizontal dashed line and eastern vertical dashed line. E [u 1 (Π(Γ)))] E [u 2 (Π(Γ)))] Player 2's utility Case B of Theorem 15 is depicted in Figure  3 . Note that here the two line segments L 1 and L 3 intersect. To ensure that a Pareto improvement is safely achievable, the theorem requires that it is below both of these lines. For a full proof, see Appendix E. Roughly, Theorem 15 is proven by re-mapping each of the outcomes of the original game as per Lemma 13. For example, the projection of the default equilibrium E [u(Π(Γ))] (i.e., the filled circle) onto L 1 is obtained as an SPI by projecting all the outcomes (i.e., all the x marks) onto L 1 . In Case A, any utility vector y ∈ L 2 that Pareto-improves on all outcomes of the original game can be obtained by re-mapping all outcomes onto y. Other kinds of y are handled similarly. As a corollary of Theorem 15, we can see that all (potentially unsafe) Pareto improvements in the DM-RM subset game of the Demand Game of Table  1  are equivalent to some perfect-coordination SPI. However, this is not always the case:   7 : An example of a game in which -depending on Π -a Pareto improvement may not be safely achievable. Player 1's utility E [u 1 (Π(Γ))] E [u 2 (Π(Γ))]) Player 2's utility Proposition 16. There is a game Γ = (A, u), representatives Π that satisfy Assumptions 1 and 2, and an outcome a ∈ A s.t. u i (a) > E [u i (Π(Γ)) ] for all players i, but there is no perfect-coordination SPI (A s , u s , u e ) s.t. for all players i, E [u e i (Π(A s , u s ))] = u i (a). As an example of such a game, consider the game in Table  7 . Strategy c can be eliminated by strict dominance (Assumption 1) for both players, leaving a typical Chicken-like payoff structure with two pure Nash equilibria ((a, b) and (b, a)), as well as a mixed Nash equilibrium ( 3 /8 * a + 5 /8 * b, 3 /8 * a + 5 /8 * b). Now let us say that in the resulting game P (Π(Γ)=(a, b)) = p = P (Π(Γ)=(b, a)) for some p with 0 < p ≤ 1 /2. Then one (unsafe) Pareto improvement would be to simply always have the representatives play (c, c) for a certain payoff of  (3, 3) . Unfortunately, there is no safe Pareto improve-Player 1's utility ment with the same expected payoff. Notice that  (3, 3)  is the unique element of C(Γ) that maximizes the sum of the two players' utilities. By linearity of expectation and convexity of C(Γ), if for any Γ s it is E [u(Π(Γ s ))] = (3, 3), it must be u(Π(Γ s )) = (3, 3) with certainty. Unfortunately, in any safe Pareto improvement the outcomes (a, b) and (b, a) must corresponds to outcomes that still gives utilities of (4, 0) and (0, 4), respectively, because these are Pareto-optimal within the set of feasible payoff vectors.
 The SPI selection problem In the Demand Game, there happens to be a single non-trivial SPI. However, in general (even without the type of coordination assumed in Section 9) there may be multiple SPIs that result in different payoffs for the players. For example, imagine an extension of the Demand Game imagine that both players have an additional action DL , which is like DL, except that under (DL , DL ), Aliceland can peacefully annex the desert. Aliceland prefers this SPI over the original one, while Bobbesia has the opposite preference. In other cases, it may be unclear to some or all of the players which of two SPIs they prefer. For example, imagine a version of the Demand Game in which one SPI mostly improves on (DM, DM) and another mostly improves on the other three outcomes, then outcome probabilities are required for comparing the two. If multiple SPIs are available, the original players would be left with the difficult decision of which SPI to demand in their instruction.  9  This difficulty of choosing what SPI to demand cannot be denied. However, we would here like to emphasize that players can profit from the use of SPIs even without addressing this SPI selection problem. To do so, a player picks an instruction that is very compliant ("dove-ish") w.r.t. what SPI is chosen, e.g., one that simply goes with whatever SPI the other players demand as long as that SPI cannot further be safely Pareto-improved upon.  10  In many cases, all such SPIs benefit all players. For example, optimal SPIs in bargaining scenarios like the Demand Game remove the conflict outcome, which benefits all parties. Thus, a player can expect a safe improvement even under such maximally compliant demands on the selected SPI. In some cases there may also be natural choices of demands (a là Schelling [35, pp. 54-58] or focal points). If the underlying game is symmetric, a symmetric safe Pareto improvement may be a natural choice. For example, the fully reduced version of the Demand Game of Table  1  is symmetric. Hence, we might expect that even if multiple SPIs were available, the original players would choose a symmetric one.
 Conclusion and future directions Safe Pareto improvements are a promising new idea for delegating strategic decision making. To conclude this paper, we discuss some ideas for further research on SPIs. Straightforward technical questions arise in the context of the complexity results of Section 8. First, what impact on the complexity does varying the assumptions have? Our NP-completeness proof is easy to generalize at least to some other types of assumptions. It would be interesting to give a generic version of the result. We also wonder whether there are plausible assumptions under which the complexity changes in interesting ways. Second, one could ask how the complexity changes if we use more sophisticated game representations (see the remarks at the end of that section). Third, one could impose additional restrictions on the sought SPI. For example, some of the players may be unable to have their representative maximize arbitrary utility functions. We could then ask whether there is an SPI in which only a given subset of the players adopt different utility functions and restrictions on the set of available strategies. Fourth, we could restrict the games under consideration. Are there games in which it becomes easy to decide whether there is an SPI? It would also be interesting to see what real-world situations can already be interpreted as utilizing SPIs, or could be Pareto-improved upon using SPIs.
 A Proof of Theorem 1 -program equilibrium implementations of safe Pareto improvements This paper considers the meta-game of delegation. SPIs are a proposed way of playing these games. However, throughout most of this paper, we do not analyze the meta-game directly as a game using the typical tools of game theory. We here fill that gap and in particular prove Theorem 1, which shows that SPIs are played in Nash equilibria of the meta game, assuming sufficiently strong contracting abilities. As noted, this result is essential. However, since it is mostly an application of existing ideas from the literature on program equilibrium, we left a detailed treatment out of the main text. A program game for Γ = (A, u) is defined via a set PROG = PROG 1 × ...×PROG n and a non-deterministic mapping exec : PROG 1 ×...×PROG n A. We obtain a new game with action sets PROG and utility function U : PROG → R n : c → E [u(exec(c))] . Though this definition is generic, one generally imagines in the program equilibrium literature that for all i, PROG i consists of computer programs in some programming language, such as Lisp, that take as input vectors in PROG and return an action a i . The function exec on input c ∈ PROG then executes each player i's program c i on c to assign i an action. The definition implicitly assumes that PROG only contains programs that halt when fed one another as input. A program equilibrium is then simply a Nash equilibrium of the program game. For the present paper, we add the following feature to the underlying programming language. A program can call a "black box subroutine" Π i (Γ ) for any subset game Γ of Γ, where Π i (Γ ) is a random variable over A i and Π(Γ ) = (Π 1 (Γ ), ..., Π n (Γ )). We need one more definition. For any game Γ and player i, we define Player i's threat point (a.k.a. minimax utility) v Γ i as v Γ i = min σ −i ∈× j =i ∆(A j ) max σ i ∈∆(A i ) u i (σ i , σ −i ). In words, v Γ i is the minimum utility that the players other than i can force onto i, under the assumption that i reacts optimally to their strategy. We further will use minimax (i, j) ∈ ∆(A j ) to denote the strategy for Player j that is played in the minimizer σ −i of the above. Of course, in general, there might be multiple minimizers σ −i . In the following, we will assume that the function minimax breaks such ties in some consistent way, such that for all i, (minimax (i, j)) j∈{1,...,n}−{i} ∈ arg min σ −i ∈× j =i ∆(A j ) max σ i ∈∆(A i ) u i (σ i , σ −i ). Note that for n = 2, each player's threat point is computable in polynomial time via linear programming; and that by the minimax theorem  [25] , the threat point is equal to the maximin utility, i.e., v Γ i = max σ i ∈∆(A i ) min σ −i ∈∆(A −i ) u i (σ i , σ −i ), so v Γ i is also the minimum utility that Player i can guarantee for herself under the assumption that the opponent sees her mixed strategy and reacts in order to minimize Player i's utility. Tennenholtz'  [39]  main result on program games is the following: Theorem 17  (Tennenholtz 2004 [39] ). Let Γ = (A, u) be a game and let x ∈ u × n i=1 ∆(A i ) be a (feasible) payoff vector. If x i ≥ v Γ i for i = 1, ..., n, then x is the utility of some program equilibrium of a program game on Γ. Throughout the rest of this section, our goal is to use similar ideas as Tennenholtz did for Theorem 17 to construct for any SPI Γ s on Γ, a program equilibrium that results in the play of Π(Γ s ). As noted in the main text, the Player i's instruction to her representative to play the game Γ s will usually be conditional on the other player telling her representative to also play her part of Γ s and and vice versa. After all, if Player i simply tells her representative to maximize u s i from A s i regardless of Player −i's instruction, then Player −i will often be able to profit from deviating from the Γ s instruction. For example, in the safe Pareto improvement on the Demand Game, each player would only want their representative to choose from {DL, RL} rather than {DM, DM} if the other player's representative does the same. It would then seem that in a program equilibrium in which Π(Γ s ) is played, each program c i would have to contain a condition of the type, "if the opponent code plays as in Π(Γ s ) against me, I also play as I would in Π(Γ s )." But in a naive implementation of this, each of the programs would have to call the other, leading to an infinite recursion. In the literature on program equilibrium, various solutions to this problem have been discovered. We here use the general scheme proposed by Tennenholtz  [39] , because it is the simplest. We could similarly use the variant proposed by Fortnow  [12] , techniques based on Löb's theorem  [3, 10] , or -grounded mutual simulation  [26]  or even (meta) Assurance Game preferences (see Appendix B). In our equilibrium, we let each player submit code as sketched in Algorithm 2. Roughly, each player uses a program that says, "if everyone else submitted the same source code as this one, then play Π(Γ s ). Otherwise, if there is a player j who submits a different source code, punish player j by playing her minimax strategy". Note that for convenience, Algorithm 2 receives the player number i as input. This way, every player can use the exact same source code. Otherwise the original players would have to provide slightly different programs and in line 2 of the algorithm, we would have to use a more complicated comparison, roughly: "if c j = c i are the same, except for the player index used". Proof. By inspection of Algorithm 2, we see that exec(c) = Π(Γ s ). It is left to show that c is a Nash equilibrium. So let i be any player and c i ∈ PROG i − {c i }. We need to show that E [u i (exec(c −i , c i ))] ≤ E [u i (exec(c))]. Again, by inspection of c, exec(c −i , c i ) is the threat point of Player i. Hence, E u i (exec(c −i , c i )) = v i ≤ E [u i (Π(Γ))] ≤ E [u i (Π(Γ s ))] = E [u i (exec(c))] as required. Theorem 1 follows immediately. B A discussion of work by  Sen (1974)  and  Raub (1990)  on preference adaptation games We here discuss Raub's  [32]  paper in some detail, which in turn elaborates on an idea by Sen  [37] . Superficially, Raub's setting seems somewhat similar to ours, but we here argue that it should be thought of as closer to the work on program equilibrium and bilateral precommitment. In Sections 1, 3 and 4, we briefly discuss multilateral commitment games, which have been discussed before in various forms in the game-theoretic literature. Our paper extends this setting by allowing instructions that let the representatives play a game without specifying an algorithm for solving that game. On first sight, it appears that Raub pursues a very similar idea. Translated to our setting, Raub allows that as an instruction, each player i chooses a new utility function u s i : A → R, where A is the set of outcomes of the original game Γ. Given instructions u s 1 , ..., u s n , the representatives then play the game (A, u s ). In particular, each representative can see what utility functions all the other representatives have been instructed to maximize. However, what utility function representative i maximizes is not conditional on any of the instructions by other players. In other words, the instructions in Raub's paper are raw utility functions without any surrounding control structures, etc. Raub then asks for equilibria u s of the meta-game that Pareto-improve on the default outcome. To better understand how Raub's approach relates to ours, we here give an example of the kind of instructions Raub has in mind. (Raub uses the same example in his paper.) As the underlying game Γ, we take the Prisoner's Dilemma. Now the main idea of his paper is that the original players can instruct their representatives to adopt so-called Assurance Game preferences. In the Prisoner's Dilemma, this means that the representatives prefer to cooperate if the other representative cooperates, and prefer to defect if the other player defects. Further, they prefer mutual cooperation over mutual defection. An example of such Assurance Game preferences is given in Table  8 . (Note that this payoff matrix resembles the classic Stag Hunt studied in game theory.) The Assurance Game preferences have two important properties. The first important difference between Raub's approach and ours is related to item 2. We have ignored the issue of making SPIs Γ s Nash equilibria of our meta game. As we have explained in Section 4 and Appendix A, we imagine that this is taken care of by additional bilateral commitment mechanisms that are not the focus of this paper. For Raub's paper, on the other hand, ensuring mutual cooperation to be stable in the new game Γ s is arguably the key idea. Still, we could pursue the approach of the present paper even when we limit assumptions to those that consist only of a utility function. The second difference is even more important. Raub assumes that -as in the PD -the default outcome of the game (Π(Γ) in the formalism of this paper) is known. (Less significantly, he also assumes that it is known how the representatives play under assurance game preferences.) Of course, the key feature of the setting of this paper is that the underlying game Γ might be difficult (through equilibrium selection problems) and thus that the original players might be unable to predict Π(Γ). These are the reasons why we cite Raub in our section on bilateral commitment mechanisms. Arguably, Raub's paper could be seen as very early work on program equilibrium, except that he uses utility functions as a programming language for representative. In this sense, Raub's Assurance Game preferences are analogous to the program equilibrium schemes of Tennenholtz  [39] , Oesterheld  [39] , Barasz et al.  [3]  and van der Hoek, Witteveen, and Wooldridge  [41] , ordered in increasing order of similarity of the main idea of the scheme.
 C Proof of Lemma 4 Lemma 4. Let Φ and Ψ be isomorphisms between Γ and Γ . If Φ is (strictly) Pareto-improving, then so is Ψ. Proof. First, we argue that if Φ and Ψ are isomorphisms, then they are isomorphisms relative to the same constants λ and c. For each player i, we distinguish two cases. First the case where all outcomes a in Γ have the same utility for Player i is trivial. Now imagine that the outcomes of Γ do not all have the same utility. Then let y min and y max be the lowest and highest utilities, respectively, in Γ. Further, let x min and x max be the lowest and highest utilities, respectively, in Γ . It is easy to see that if Ψ is a game isomorphism, it maps outcomes with utility y min in Γ onto outcomes with utility x min in Γ , and outcomes with utility y max in Γ onto outcomes with utility x max in Γ . Thus, if λ Ψ,i and c Ψ,i are to be the constants for Ψ, then y min = λ Ψ,i x min + c Ψ,i y max = λ Ψ,i x max + c Ψ,i . Since x min = x max , this system of linear equations has a unique solution. By the same pair of equations, the constants for Φ are uniquely determined. It follows that for all a ∈ A, u(a) = λu (Ψ(a)) + c = u(Φ −1 (Ψ(a))) ≤ u(Φ(Φ −1 (Ψ(a)))) = u(Ψ(a)). Furthermore, if Φ is strictly Pareto-improving for some ã ∈ A, then by bijectivity of Φ, Ψ, there is a ∈ A s.t. Φ −1 (Ψ(a)) = ã. For this a, the inequality above is strict and therefore u(a) < u(Ψ(a)).
 D Proof of Theorem 9 We here prove Theorem 9. We assume familiarity with basic ideas in computational complexity theory (non-deterministic polynomial time (NP), re-ductions, NP-completeness, etc.).
 D.1 On the structure of relevant outcome correspondence sequences Throughout our proof we will use a result about the structure of relevant outcome correspondences. Before proving this result, we give two lemmas. The first is a well-known lemma about elimination by strict dominance. Lemma 19 (path independence of iterated strict dominance). Let Γ be a game in which some strategy a i of player i is strictly dominated. Let Γ be a game we obtain from Γ by removing a strictly dominated strategy (of any player) other than a i . Then a i is strictly dominated in Γ . Note that this lemma does not by itself prove that iterated strict dominance is path dependence. However, path independence follows from the property shown by this lemma. Proof. Let a i be the strategy that strictly dominates a i . We distinguish two cases: Case 1: The strategy removed is a i . Then there must be âi that strictly dominates a i . Then it is for all a −i u i (â i , a −i ) > u i (a i , a −i ) > u i (a i , a −i ). Both inequalities are due to the definition of strict dominance. We conclude that âi must strictly dominate a i . Case 2: The strategy removed is one other than a i or a i . Since the set of strategies of the new game is a subset of the strategies of the old game it is still for each strategy a −i in the new game u i (a i , a −i ) > u i (a i , a −i ), i.e., a i still strictly dominates a i . The next lemma shows that instead of first applying Assumption 1 plus symmetry (Lemma 2.2) to add a strictly dominated action and then applying Assumption 1 to eliminate a different strictly dominated strategy, we could also first eliminate the strictly dominated strategy and then add the other strictly dominated strategy. A conciser way to state the consequence is that there must be games Γ red , Γ s,red and Γ s such that Γ red is obtained from Γ by iterated elimination of strictly dominated strategies, Γ s,red is isomorphic to Γ s,red , and Γ s,red is obtained from Γ s by iterated elimination of strictly dominated strategies. Proof. First divide the given sequence of outcome correspondences up into periods that are maximally long while containing only correspondences by Assumption 1 (with or without Lemma 2.2). That is, consider subsequences of the form Γ q ∼ Φ q ... ∼ Φ r−1 Γ r such that: • Each of the correspondences Γ q ∼ Φ q Γ q+1 , ..., Γ r−1 ∼ Φ r−1 Γ r is by applying Assumption 1 with or without Lemma 2.2. • Either q = 1 or the correspondence Γ q−1 ∼ Φ q−1 Γ q is by Assumption 2. • Either r = k or the correspondence Γ r ∼ Φ r Γ r+1 is by Assumption 2. In each such period apply Lemma 20 iteratively to either eliminate or move to the right all inverted reduction elimination steps. In all but the first period, Γ q contains no strictly dominated actions (by stipulation of Assumption 2). Hence all but the first period cannot contain any non-reversed elimination steps. Similarly, in all but the final period, Γ r contains no strictly dominated actions. Hence, in all but the final period, there can be no reversed applications of Assumption 1. Overall, our new sequence of outcome correspondences thus has the following structure: first there is a sequence of elimination steps via Assumption 1, then there is a sequence of isomorphism steps, and finally there is a sequence of reverse elimination steps. We can summarize all the applications of Assumption 2 into a single step applying that assumption to obtain the claimed structure. Now notice that that the reverse elimination steps are only relevant for deriving unilateral SPIs. Using the above concise formulation of the lemma, we can always simply use Γ s,red itself as an omnilateral SPI -it is not relevant that there is some subset game Γ s that reduces to Γ s,red . Lemma 22. As in Lemma 21, let Γ 1 ∼ Φ 1 ... ∼ Φ k−1 Γ k , where each outcome correspondence is due to a single application of Assumption Assumption 1, Assumption 1 plus symmetry (Lemma 2.2) or Assumption 2. Let Γ 2 , ..., Γ k all be subset games of Γ 1 . Moreover, let Φ k−1 • ... • Φ 1 be Pareto improving. Then there is a sequence of subset games Γ 2 , ..., Γ m , Γ m+1 such that Γ We now show that the SPI problem is in NP at all. The following algorithm can be used to determine whether there is a safe Pareto improvement: Reduce the given game Γ until it can be reduced no further to obtain some subset game Γ = (A , u). Then non-deterministically select injections Φ 1 ∼ Ψ 1 Γ 2 ∼ Ψ 2 ... ∼ Ψ m−1 Γ m all i : A i → A i . If Φ = (Φ 1 , ..., Φ n ) is ( strictly) Pareto-improving (as required in Theorem 3), return True with the solution Γ s defined as follows: The set of action profiles is defined as A s = × i Φ i (A i ). The utility functions are u s i : A s → R : a s → (u i (Φ −1 1 (a s 1 ), ..., Φ −1 n (a s n ))) i=1,...,n . Otherwise, return False. Let us say there is a sequence of outcome correspondences as per Assumptions 1 and 2 that show Γ ∼ Φ Γ s for Pareto-improving Φ. Then by Lemma 22, there is Γ such that Γ ∼ Ψ red Γ via applying Assumption 1 iteratively to obtain a fully reduced Γ and Γ ∼ Ψ iso Γ s via a single application of Assumption 2. By construction, our algorithm finds (guesses) this Pareto-improving outcome correspondence. Overall, we have now shown that our non-deterministic polynomial-time algorithm is correct and therefore that the SPI problem is in NP. Note that the correctness of other algorithms can be proven using very similar ideas. For example, instead of first reducing and then finding an isomorphism, one could first find an isomorphism, then reduce and then (only after reducing) test whether the overall outcome correspondence function is Pareto-improving. One advantage of reducing first is that there are fewer isomorphisms to test if the game is smaller. In particular, the number of possible isomorphisms is exponential in the number of strategies in the reduced game Γ but polynomial in everything else. Hence, by implementing our algorithm deterministically, we obtain the following positive result.
 D.2.2 The unilateral SPI problem Next we show that the problem of finding unilateral SPIs is also in NP. Here we need a slightly more complicated algorithm: We are given an n-player game Γ and a player i. First reduce the game Γ fully to obtain some subset game Γ red . Then non-deterministically select injections Φ i : A red i → A i . The resulting candidate SPI game then is Γ s = ((A −i , Φ i (A red i )), (u −i , u s i )), where u s i (a s ) = u i (Φ −1 1 (a s 1 ), ..., Φ −1 n (a s n )) for all a s ∈ Φ(A red ), and u s i (a s ) is arbitrary for a s / ∈ Φ(A red ). Return True if the following conditions are satisfied: 1. The correspondence function Φ must be (strictly) Pareto improving (as per the utility functions u). 2. For each j ∈ {1, ..., n} − {i}, there are λ j ∈ R + and c j ∈ R such that for all a ∈ A red , we have u j (a) = λ j u j (Φ(a)) + c j . 3. The game Γ s reduces to the game (Φ(A red ), (u −i , u s i )). Otherwise, return False. Proposition 25. The above algorithm runs in non-deterministic polynomial time and returns True if and only if there is a (strict) unilateral SPI. Proof. First we argue that the algorithm can indeed be implemented in non-deterministic polynomial time. For this notice that for checking Item 2, the constants can be found by solving n systems of linear equations of two variables. It is left to prove correctness, i.e., that the algorithm returns True if and only if there exists an SPI. We start by showing that if the algorithm returns True, then there is an SPI. Specifically, we show that if the algorithm returns True, the game Γ s is indeed an SPI game. Notice that Γ ∼ Ψ Γ red for some Ψ by iterative application of Assumption 1 with Transitivity (Lemma 2.2); that Γ red ∼ Φ (Φ(A red ), (u −i , u s i )) by application of Assumption 2. Finally, (Φ(A red ), (u −i , u s i )) ∼ Ξ −1 Γ s for some Ξ by iterative application of Assumption 1 to Γ s , plus transitivity (Lemma 2.3) with reversal (Lemma 2.2). It is left to show that if there is an SPI, then the above algorithm will find it and return true. To see this, notice that Lemma 21 implies that there is a sequence of outcome correspondences Γ ∼ Ψ Γ red ∼ Φ Γ s,red ∼ Ξ Γ s . We can assume that Γ s,red and Γ s have the same action sets for Player i. It is easy to see that in Γ s we could modify the utilities u s i (a) for any a that is not in Γ s,red , because Player i's utilities do not affect the elimination of strictly dominated strategies from Γ s .
 D.3 The SPI problems are NP-hard We now proceed to showing that the safe Pareto improvement problem is NP-hard. We will do this by reducing the subgraph isomorphism problem to the (two-player) safe Pareto improvement problem. We start by briefly describing one version of that problem here. A (simple, directed) graph is a tuple (n, a : {1, ..., n} × {1, ..., n} → B), where n ∈ N and B := {0, 1}. We call a the adjacency function of the graph. Since the graph is supposed to be simple and therefore free of self-loops (edges from one vertex to itself), we take the values a(j, j) for j ∈ {1, ..., n} to be meaningless. For given graphs G = (n, a),G = (n , a ) a subgraph isomorphism from G to G is an injection φ : {1, ..., n} → {1, ...n } such that for all j = l a(j, l) ≤ a (φ(j), φ(l)). In words, a subgraph isomorphism from G to G identifies for each node in G a node in G s.t. if there is an edge from node j to node l in G, there must also be an edge in the same direction between the corresponding nodes  . We define Γ based on Ĝ analogously, except that in Player 1's utilities we use 5 instead of 4, 5 + (n + i) instead of 4 + (n + i) , 5 + j instead of 4 + j and 4 instead of 3. We now define Γ c = (A c , u c ) from Γ and Γ as sketched in Table  10 . For the following let in contradiction to the assumption that Ψ is Pareto improving. We are ready to construct our subgraph isomorphism. For i ∈ [n], define φ(i) to be the second element of the pair Ψ 1 (T, i). By Item d, φ(i) can equivalently be defined as the second item in the pair Ψ 2 (D, i). By Item c, φ is a function from [n] to  [n] . By assumption about Ψ, φ is injective. Further, by construction of Γ c and φ, as well as the assumption that Ψ is Pareto improving, we infer that for all i, j ∈ [n] with i = j, â(φ(a), φ(j)) = u c 1 ((R, φ(i)), (P, φ(j))) = u c 1 (Ψ 1 (T, i), Ψ 2 (D, j)) ≥ u c 1 ((T, i), (D, j)) = a(i, j). We conclude that φ is a subgraph isomorphism.
 E Proof of Theorem 15 Proof. We will give the proof based on the graphs as well, without giving all formal details. Further we assume in the following that neither L 1 nor L 3 consist of just a single point, since these cases are easy. Case A: Note first that by Corollary 14 it is enough to show that if y is in any of the listed sets L 1 , L 2 , L 3 , it can be made safe. It's easy to see that all payoff vectors on the curve segment of the Pareto frontier L 2 are safely achievable. After all, all payoff vectors in this set Pareto-improve on all outcomes in supp(Π(Γ)). Hence, for each y on the line segment, one could select the Γ s where u e = y. It is left to show that all elements of L 1/2 are safely achievable. Remember that not all payoff vectors on the line segments are Pareto improvements, only those that are to the north-east of (Pareto-better than) the default utility. In the following, we will use L 1 and L 3 to denote those elements of L 1 and L 3 , respectively, that are Pareto-improvements on the default. We now argue that the Pareto improvement y on the line L 1 for which y 1 = E [u 1 (Π(Γ))] is safely achievable. In other words, y is the projection Now note that the set of feasible payoffs of Γ is convex. Further, the curve max(L 1 , L 3 ) is concave. Because the area above a concave curve is convex and because the intersection of convex sets is convex, the set of feasible payoffs on or above max(L 1 , L 3 ) is also convex. By definition of convexity, E 2 = E [u e (Π(Γ s ))] is therefore also in the set of feasible payoffs on or above max(L 1 , L 3 ) and therefore above both L 1 and L 3 as desired. In our second step, we now use E 1 , E 2 , E 3 to prove the claim. Because of convexity of the set of safely achievable payoff vectors as per Corollary 14, all utilities below the curve consisting of the line segments from E 1 to E 2 and from E 2 to E 3 are safely achievable. The line that goes through E 1 , E 2 intersects the line that contains L 1 at E 1 , by definition. Since non-parallel lines intersect each other exactly once and parallel lines that intersect each other are equal and because E 2 is above or on L 1 , the line segment from E 1 to E 2 lies entirely on or above L 1 . Similarly, it can be shown that the line segment from E 2 to E 3 lies entirely on or above L 3 . It follows that the E 1 − E 2 − E 3 curve lies entirely above or on min(L 1 , L 3 ). Now take any Pareto improvement that lies below both L 1 and L 3 . Then this Pareto improvement lies below min(L 1 , L 3 ) and therefore below the E 1 − E 2 − E 3 curve. Hence, it is safely achievable. 7 . 7 If Γ ∼ Φ Γ , then by reflexivity of ∼ (Lemma 2.1) Γ ∼ Φ −1 Γ. If Φ −1 (a ) = ∅, then by Lemma 2.6, Π(Γ ) = a with certainty.
 Similar desiderata have been discussed in the context of equilibrium selection, e.g., by Harsanyi and Selten [16, Chapter 3.4] [cf. 40, for a discussion in the context of fully cooperative multi-agent reinforcement learning].
 3 (Transitivity)  to obtain Γ ∼ Φ Γ, where Γ = ({DM, RM}, {DM, RM}, u 1 , u 2 )
 Theorem 9 . 9 The (strict) (unilateral) SPI decision problem is NP-complete, even for 2-player games.Proposition 10. For games Γ with |A 1 | + ... + |A n | = m that can be reduced (via iterative application of Assumption 1) to a game Γ with |A 1 | + ... + |A n | = l, the (strict) (unilateral) SPI decision problem can be solved in O(m l ).
 Algorithm 1 : 3 Return True; 4 134 An algorithm for deciding the strict perfectcoordination SPI problem. Data: Game Γ, set supp(Π(Γ) 1 for a ∈ supp(Π(Γ)) do 2 if u(a) is Pareto-suboptimal within C(Γ) then Return False; 9.3 Characterizing safe Pareto improvements under improved representative coordination From the problem of deciding whether there are strict SPIs under improved coordination at all, we move on to the question of what different perfectcoordination SPIs there are. In particular, one might ask what the cost is of only considering safe Pareto improvements relative to acting on a probability distribution over Π(Γ) and the resulting expected utilities E [u(Π(Γ))].
 Theorem 15 . 1 , 1 , 2 , 2 , 151122 Make Assumption 2. Let Γ be a two-player game. Let y ∈ R 2 be some potentially unsafe Pareto improvement on E [u(Π(Γ))]. For i = 1, 2, let x min/max i = min / max u i (supp(Π(Γ))). Then: A) If there is some element in C(Γ) which Pareto-dominates all of supp(Π(Γ)) and if y is Pareto-dominated by an element of at least one of the following three sets:• L 1 := the line segment between π 1 (x min 1 , PF(C(Γ)) and π 1 (x max PF(C(Γ));• L 2 := the segment of the curve PF(C(Γ)) between π 1 (x max PF(C(Γ))))and π 2 (x max PF(C(Γ))));• L 3 := the line segment between π 2 (x max PF(C(Γ)) and π 2 (x min 2 , PF(C(Γ)).
 Figure 2 : 2 Figure 2: This figure illustrates Theorem 15, Case A.
 Figure 3 : 3 Figure 3: This figure illustrates Theorem 15, Case B.
 Figure 4 : 4 Figure 4: This figure illustrates the Game of Table 7 as an instance of Theorem 15, Case B.
 Algorithm 2 : 2 if c j = c i then 3 223 A program equilibrium implementation of an SPI Γ s of Γ.Data: Everybody's source code c, my index i 1 for j ∈ {1, ..., n} − {i} do Play minimax (i, j); 4 Play Π i (Γ s ); Proposition 18. Let Γ be a game and let Γ s be an SPI on Γ. Let c be the program profile consisting only of Algorithm 2 for each player. Assume that Π(Γ) guarantees each player at least threat point utility in expectation. Then c is a program equilibrium and apply(c) = Π(Γ s ).
 by applications of Assumption 1 (without applying symmetry), and Γ m ∼ Ξ Γ m+1 by application of Assumption 2 such that Ξ • Ψ m−1 ... • Ψ 1 is Pareto improving. Proof. First apply Lemma 21. Then notice that the correspondence functions from applying Assumption 1 with symmetry have no effect on whether the overall outcome correspondence is Pareto improving. D.2 Non-deterministic polynomial-time algorithms for the SPI problem D.2.1 The omnilateral SPI problem
 Proposition 24 . 24 For games Γ with |A 1 | + ... + |A n | = m that can be reduced (via iterative application of Assumption 1) to a game Γ with |A 1 | + ... + |A n | = l, the (strict) omnilateral SPI decision problem can be solved in O(m l ).
 Proposition 26 . 26 For games Γ with |A 1 | + ... + |A n | = m that can be reduced (via iterative application of Assumption 1) to a game Γ with |A 1 | + ... + |A n | = l, the (strict) unilateral SPI decision problem can be solved in O(m l ).
 A Γ = ({T } × [2n + 2]) × ({D} × [2n + 2]) A Γ = ({R} × [2n + 2]) × ({P } × [2n + 2]), (d) Finally, notice that for i ∈ [n] and j ∈ [n], if Ψ 1 (T, i) = (R, j), thenalso Ψ 2 (D, i) = (P, j). To see this, assume it was Ψ 2 (R, i) = (P, l) for some l = j. Then by Item c, l ∈ [n]. Hence,u c 2 ((T, i), (R, i)) = 2 > 1 = u c 2 ((R, j), (P, l)) = u c 2 (Ψ 1 (T, i), Ψ 2 (R, i))
 Table 1 : 1 The Demand Game
 Table 2 : 2 A safe Pareto improvement for the Demand Game
 Table 3 : 3 The Prisoner's Dilemma
 Table 6 : 6 Simple Temptation Game andΦ(a 1 , a 2 ) = {(a 1 , a 2 )} if a 1 , a 2 ∈ {DM, RM} ∅ otherwise .Next, by Assumption 2, Γ ∼ Ψ Γ s , where Ψ i (DM) = DL and Ψ i (RM) = RL for i = 1, 2. We can then apply Lemma 2.3 (Transitivity) again, to infer Γ ∼ Ψ•Φ Γ s . It is easy to verify that for all (a 1 , a 2
 Table 8 : 8 Assurance Game preferences for the Prisoner's Dilemma Cooperate). 2. Under reasonable assumptions about the rationality of the representatives, it is a Nash equilibrium of the meta-game for both players to adopt Assurance Game preferences. If Player 1 tells her representative to adopt Assurance Game preferences, then Player 2 maximizes his utility by telling his representative to also maximize Assurance Game preferences. After all, representative 1 prefers defecting if representative 2 defects. Hence, if Player 2 instructs his representative to adopt preferences that suggest defecting, then he should expect representative to defect as well. 1. If both players tell their representatives to adopt Assurance Game preferences, (Cooperate, Cooperate) is a Nash equilibrium. (Defect, Defect) is a Nash equilibrium as well. However, since (Cooperate, Cooperate) is Pareto-better than (Defect, Defect), the original play- ers could reasonably expect that the representatives play (Cooperate,
 Proposition 23. The above algorithm runs in non-deterministic polynomial time and returns True if and only if there is a (strict) unilateral SPI.Proof. It is easy to see that this algorithm runs in non-deterministic polynomial time. Furthermore, with Lemma 4 it is easy to see that if this algorithm finds a solution Γ s , that solution is indeed a safe Pareto improvement. It is left to show that if there is a safe Pareto improvement via a sequence of Assumption 2 and 1 outcome correspondences, then the algorithm indeed finds a safe Pareto improvement.
 Table 9 : 9 The game Γ constructed to represent the graph G = (n, a). 1 . . . n n+1 . . . 2n 2n+1 2n+2 1 2, 2 a, 1 4+n + , 4 −1, −1 0, 3 0, 3 . . . . . . . . . . . . . . . n a, 1 2, 2 −1, −1 4+2n , 4 0, 3 0, 3 n+1 4+ , 4 −1, −1 0, 3 0, 3 . . . . . . −1, −1 . . . . . . 2n −1, −1 4+n , 4 0, 3 0, 3 2n + 1 3, 0 . . . 3, 0 3, 0 . . . 3, 0 6, , 2n + 2 3, 0 . . . 3, 0 3, 0 . . . 3, 0 , , 6 {D} × [2n + 2] {P } × [2n + 2] {R} × [2n + 2] −2, −1 Γ {T } × [2n + 2] Γ 10, −10
 Table 10 : 10 The game Γ c as constructed from Γ and Γ. and  u 2 (i, j) =                               2, if i = j and i, j∈ [n] 1, if i = j and i, j ∈ [n] −1, if i ∈ {n + 1, ..., 2n}, j ∈ [n] and i = j + n −1, if i ∈ [n], j ∈ {n + 1, ..., 2n} and i + n = j 4 if i ∈ [n] and j = i + n 4 if j ∈ [n] and i = j + n −1 if i, j ∈ {n + 1, ..., 2n} 3 if j ∈ {2n + 1, 2n + 2} and i ∈ [2n] 6 if i = j = 2n + 2 if i ∈ {2n + 1, 2n + 2}and not i = j = 2n + 2
			 Here is another way of putting this. When one of the players i deliberates whether she would rather have the representatives play Π(Γ) or Π(Γ s ), we could imagine that the agent has a number of possible of models of how the representatives (Π) operate. Absent a probability distribution over models, the only widely accepted circumstance under which she can make such comparisons is decision-theoretic dominance [30,  Sect. 3.1]: she should prefer Π(Γ s ) if ui(Π(Γ s )) ≥ ui(Π(Γ)) under all models and ui(Π(Γ s )) > ui(Π(Γ)) under at least some model of Π.
			 Note that the fact that this is an equivalence relation relies on the following three facts:1. For reflexivity of R: The identity function id is a single-valued bijection. 2. For symmetry of R: If Φ is a single-valued bijection, so is Φ −1 .3. For transitivity of R: If Ψ, Φ are bijections, so is Ψ • Φ.
			 For an SPI Γ s to be also be a strict SPI on Γ, there must be a s which strictly Paretodominates a such that for all Φ with Γ ∼Φ Γ s , it must be a s ∈ Φ(a).
			 There are trivial, uninteresting cases in which no assumptions are needed. In particular, if a game Γ has an outcome a that Pareto dominates all other outcomes of the game, then (by Lemma 2.5 with Theorem 3) any game Γ s = (A s = {a}, u s ) is an SPI on Γ.
			 In fact, depending on formal details we omit throughout this paper -how to quantify over games in these assumptions, what type of objects actions are, etc. a more general version of Assumption 2 threatens to yield a contradiction with Assumption 1 again.
			 The use of a book as illustration is inspired by Binmore [4,Section 1].
			 Of course, in many cases (such as Rock-Paper-Scissors) it is implausible for the players to choose deterministically. The idea is that in such games the randomization was performed in the process of printing. If the book is intended to be used multiple times, we may imagine that a sequence of (randomly generated) actions is provided (à la the RAND Corporation's book of random numbers).
			 A second question is what to instruct the representatives to do in case of differing demands. 10  Of course, such an instruction would then also have to specify what happens if all players submit such an instruction. This appears to be a lesser problem, however.