Introduction to Mechanism Design
Social choice, Arrow and Gibbard–Satterthwaite; VCG and the Clarke pivot rule; the revelation principle; weak monotonicity, Roberts' theorem and single-parameter domains; Bayesian–Nash and revenue equivalence; and design without money — single-peaked preferences, house allocation, stable matching
Motivation: economics with an engineering perspective
Mechanism Design is a subfield of economic theory that is rather unique within economics in having an engineering perspective. It is interested in designing economic mechanisms, just as computer scientists are interested in designing algorithms, protocols, or systems.
ImportantThe goal, abstractly
The goals are best viewed in the very abstract terms of social choice: an aggregation of the preferences of different participants toward a single joint decision. Mechanism Design attempts to implement desired social choices in a strategic setting — assuming each member of society acts rationally in a game-theoretic sense. Such strategic design is necessary because the preferences of the participants are usually private.
| Setting | The social choice being made |
|---|---|
| Elections | each voter has preferences among candidates; the outcome is one choice |
| Markets | classical theory assumes a “perfect market”; in reality there are only interactions governed by protocols, whose outcome is a reallocation of goods and money |
| Auctions | the extreme opposite of a perfect market — a single seller; the auction rules define the social choice, namely the identity of the winner |
| Government policy | build the bridge? how much pollution to allow? each citizen differs, one choice is made |
IntuitionWhy the Internet made this a computer science subject
The main new ingredient found on the Internet is that it is owned and operated by different parties with different goals. These preferences, and the behavior they induce, must be taken into account by every protocol in such an environment — so a protocol should be viewed as aggregating the participants’ preferences into a social choice: the outcome of its run.
Two complementary motivations:
- Economics for CS. Take any algorithmic challenge in a network — routing messages, scheduling tasks, allocating memory. With multiple owners of resources or requests, the algorithm must function well assuming strategic selfish behavior. This is Algorithmic Mechanism Design.
- CS for economics. Take any economic interaction — a market, an auction, a supply chain. Implemented over a computerized platform, it admits unprecedented sophistication handled by hyperrationally designed software. This is Electronic Market Design.
NoteThe bias of this treatment
The presentation is not very different from the standard economic approach, but is somewhat biased toward the worst-case (non-Bayesian) point of view common in computer science — dominant strategies first, Bayesian analysis later.
Social choice, and two impossibility theorems
Condorcet’s paradox
ExampleMajority fails with three candidates
With two candidates, majority vote is intuitively fine. With three, Condorcet (1785) pointed out the problem. Three candidates and three voters:
— more precisely, voter 1 prefers to to ; voter 2 prefers to to ; voter 3 prefers to to .
A majority (1 and 3) prefers to ; a majority (1 and 2) prefers to ; a majority (2 and 3) prefers to . The joint majority choice is — inconsistent. For any candidate chosen, a majority would want to change the outcome.
So whenever there are more than two alternatives we must design some more complex voting method.
WarningVoting methods invite strategic voting
Two simple methods: plurality (the candidate placed first by the most voters wins) and Borda count (a candidate gets points from each voter ranking him th). Each has nice properties and problematic ones.
The main difficulty is strategic voting. Suppose a voter’s true preference is but he knows will not win. He may be motivated to vote for instead, so that is chosen rather than . This is problematic because it is not transparent, depends closely on others’ votes, and the interaction of many strategic voters is complex.
The Gibbard–Satterthwaite theorem says this vulnerability is unavoidable.
DefinitionSocial welfare and social choice functions
With alternatives , voters of size , and the set of linear orders on (total, antisymmetric, transitive):
- is a social welfare function — it aggregates preferences into a full social order.
- is a social choice function — it aggregates into a single chosen candidate.
Arrow’s theorem
DefinitionThree desiderata for a social welfare function
- Unanimity: — if all voters agree, the social preference is theirs.
- Dictatorship: voter is a dictator if always, ignoring everyone else. is not a dictatorship if no is a dictator.
- Independence of irrelevant alternatives (IIA): the social preference between and depends only on the voters’ preferences between and .
IntuitionWhat IIA is really doing
The first two are simple and clearly desirable. IIA is trickier. Intuitively it seems natural — why should my preferences about affect the social ranking of and ? More careful inspection reveals it captures a consistency property of the voting system, and lack of such consistency is exactly what enables strategic manipulation.
TheoremArrow
Every social welfare function over candidates satisfying unanimity and IIA is a dictatorship.
ProofPairwise neutrality, then find the pivotal voter
Claim (pairwise neutrality). Let and be profiles with for every . Then .
WLOG assume and . Merge each and into a single by putting just above (unless ) and just below (unless ), preserving the internal order within the pairs and . By unanimity and , and by transitivity . IIA then transfers this to the original profiles.
Finding the dictator. Fix and for let be the profile in which exactly the first voters rank above (other rankings irrelevant). By unanimity in is false — we have — while in , . Somewhere the ranking flips: there is with in and in .
Claim: is a dictator. Take any with , and an alternative . For move to the top; for move to the bottom; for place it so — by IIA none of this changes the social ranking of vs. . Now the profile of preferences on is identical to that on in , and on identical to in . By pairwise neutrality, and , so by transitivity .
∎
The Gibbard–Satterthwaite theorem
DefinitionManipulation, incentive compatibility, monotonicity
can be strategically manipulated by voter if for some profile and some , writing and , we have — a voter preferring can get it chosen by misrepresenting his preferences. is incentive compatible if it cannot be manipulated.
is monotone if implies and — if the choice changed when one voter changed his vote, it must be because he switched his preference between exactly those two alternatives.
ProofIncentive compatible monotone
Quantifying out : logically, “not monotone between and ” is equivalent to “a voter with preference can manipulate by declaring ” or “a voter with can manipulate by declaring .”
∎
TheoremGibbard–Satterthwaite
Let be an incentive compatible social choice function onto with . Then is a dictatorship.
NoteWhy “onto” is needed
Without it the bound on has no bite — one can restrict the range to two alternatives and take a majority vote, breaking ties using preference information about points outside the range.
ProofBuild a social welfare function from and invoke Arrow
The idea: to decide whether , move and to the top of every voter’s preference and see which chooses.
Notation. For , moves all of to the top of while preserving order within and within its complement. The extension is defined by iff .
Key claim: for any profile and any , . Take ; since is onto, some profile gives . Now change to one voter at a time. At no point can the output be some , since by monotonicity for the previous outcome .
From this claim everything follows:
- Antisymmetry: the outcome lies in .
- Transitivity: if , take and WLOG ; changing each to , monotonicity keeps the outcome , so — contradiction.
- Unanimity: if all prefer to , then , so by the claim the outcome is .
- IIA: flipping to one voter at a time cannot change the outcome, by monotonicity and the claim.
- Nondictatorship: obvious.
∎
ImportantThe Procrustean bed
Gibbard–Satterthwaite seems to quash any hope of incentive compatible social choice. The whole field of Mechanism Design is an attempt to escape this impossibility by modifying the model. Two escape routes structure this note:
- Add money — Mechanisms with money onward.
- Restrict the domain of preferences — Escaping without money: restricted domains.
(Other escapes not covered: randomization, making preferences common knowledge, and weaker notions of implementation.)
Mechanisms with money
DefinitionQuasilinear preferences
We no longer model a preference as an order but as a valuation function , where is the value assigns to in terms of currency. If is chosen and is additionally given money, his utility is
Such quasilinear preferences denote the separable, linear dependence on money.
IntuitionWhat money adds
In the order model, says nothing about by how much. Money is a yardstick allowing us to measure this — and, crucially, it can be transferred between players. Its existence is an assumption, but a fairly reasonable one, and it lets us do things otherwise impossible.
Vickrey’s second price auction
A single item among players, player willing to pay . In our terms , with and 0 otherwise. The natural social choice is to give the item to — but we don’t know the ; each player does. Our degree of freedom is the payment.
WarningThe two obvious payment rules both fail
- No payment. Every player benefits by exaggerating , winning even when his real value is not highest.
- Pay your bid. A winner paying exactly gets utility 0, so he should bid some , still winning but getting . What then? If he knew the second highest bid he would bid just above it. But what if he doesn’t?
DefinitionVickrey’s second price auction
The winner is the player with highest declared , and he pays the second highest declared bid .
ProofManipulation never helps
If wins by bidding , with second highest , then . Any manipulation still wins and still pays , so ; any loses, so .
If loses, ; let win, so . Any still loses. Any wins but pays , giving .
∎
ImportantWhat this elegant idea achieves
It reliably computes a function () of numbers each held secretly by a different self-interested player. Philosophically this may be seen as the mechanics implementing Adam Smith’s invisible hand: despite private information and pure selfish behavior, social welfare is achieved. All of Mechanism Design is a generalization of this possibility.
Incentive compatible mechanisms and VCG
ConventionThe notation
, so ; similarly , , .
DefinitionDirect revelation mechanism, incentive compatibility
A (direct revelation) mechanism is a social choice function together with payment functions .
It is incentive compatible (also strategy-proof, truthful) if for every , every profile, and every , writing and :
Intuitively, prefers telling the truth to any possible lie.
DefinitionVCG mechanism
is a Vickrey–Clarke–Groves mechanism if
and for some functions (not depending on ),
IntuitionWhy this aligns incentives
The term means each player is paid the sum of the values of all others. Added to his own , the sum is exactly the total social welfare. So the mechanism aligns every player’s incentive with the social goal, which truth-telling achieves. The other term has no strategic implication for — from his point of view it is just a constant — though it does change how much money moves and in which direction.
TheoremVCG
Every VCG mechanism is incentive compatible.
ProofSubtract the same constant from both sides
Fix , and let , . The utility when declaring is , and when declaring it is . Since maximizes social welfare, , and subtracting the same preserves the inequality.
∎
The Clarke pivot rule
Warning is legal but silly
It is simple, but the mechanism then pays a great amount of money to the players. We would prefer players to pay the mechanism — but not more than their gain.
DefinitionTwo desirable properties, and the rule that gives them
- (Ex-post) individually rational: players always get non-negative utility, .
- No positive transfers: no player is ever paid, .
The Clarke pivot payment is , giving
IntuitionInternalizing externalities
pays the total damage he causes the others — the difference between the social welfare of the others with and without his participation. The payments make each player internalize the externalities that he causes.
ProofVCG with Clarke pivot has both properties
Let maximize and maximize .
Individual rationality (assuming ): ‘s utility is , the first inequality since and the second since maximizes.
No positive transfers: since maximizes.
∎
NoteWhen valuations are negative
With costs rather than values, the Clarke rule has players always paying the mechanism, while the natural reading is the opposite. Its spirit is captured by choosing to maximize welfare “when does not participate”, whose exact meaning turns out natural in most applications.
Examples
| Setting | Social choice | VCG / Clarke payment |
|---|---|---|
| Single item | highest value wins | exactly Vickrey’s second price auction |
| Reverse (procurement) auction | lowest cost supplies | pay the lowest bidder the second lowest bid — “what would happen without “ |
| Multiunit, unit demand | the highest bidders win | each winner pays the st highest offered price; losers pay 0 |
| Bilateral trade | trade iff | buyer pays , seller is paid — the mechanism subsidizes the trade |
| Public project | build iff | only pivotal players pay: if but , then |
| Buying a path | the shortest – path | each on the path is paid , where is the shortest path avoiding |
WarningTwo deficits that turn out to be unavoidable
In bilateral trade, since whenever trade occurs, the mechanism pays out more than it collects. In the public project, one may verify unless — the payments never cover the project’s cost. Uniqueness of prices shows neither can be fixed.
NoteModelling the public project
This is not technically a subcase of welfare maximization as defined, since we assumed no costs to the designer — but it becomes one by adding an extra “government” player whose singleton valuation gives cost to undertaking the project and 0 otherwise.
Implementation in dominant strategies
The wider context. So far mechanisms extract information by motivating players to “tell the truth.” More generally one might devise a complex protocol that achieves the required social choice when players act strategically. This section formalizes those more general mechanisms.
DefinitionGame with strict incomplete information
For players: action sets ; type sets , where is ‘s private information; and utilities .
Independent private values means ‘s utility depends fully on his own private information, independent of others’. Strict incomplete information — sometimes “pre-Bayesian” — means no probabilistic information is in the model; from a CS perspective, worst-case analysis over unknown information.
ImportantWhy the interplay is delicate
Each player must choose knowing but not the other . The do not affect his utility, but they do affect how the others behave. A player’s total behavior is captured by a strategy , and it is these strategies we want in equilibrium.
DefinitionEx-post Nash and dominant strategies
- is an ex-post-Nash equilibrium if for every profile of types the actions are in Nash equilibrium in the full-information game: for all , .
- is (weakly) dominant if for all , all , all : .
IntuitionThe difference, and why both seem too good to be true
Ex-post Nash requires to be a best response to for every — i.e. knowing nothing about but knowing the forms of the others’ strategies. Dominant strategy requires it against any — knowing nothing about or .
How likely is a single action to be a best response to everything? In usual cases one does not expect such equilibria to exist at all. But in Mechanism Design we get to design the game, so we can sometimes make sure they do.
PropositionThe gap is only about unused actions
If is an ex-post-Nash equilibrium, define — the actual range of . Then is a dominant strategy equilibrium in the game with action spaces .
ProofEvery action in the range is some type’s action
Let , , and for . By definition each for some . Ex-post Nash gives , and since this is exactly the dominance condition.
∎
DefinitionGeneral mechanism and implementation
A mechanism is type spaces , action spaces , alternatives , valuations , an outcome function , and payments . The induced game has .
It implements in dominant strategies if for some dominant strategy equilibrium , for all ; similarly for ex-post.
NoteA weak requirement
Our definition requires only that some equilibrium yields , allowing others to exist. Stronger requirements would demand all equilibria do, or that the equilibrium be unique.
The revelation principle
TheoremRevelation principle
If any mechanism implements in dominant strategies, then an incentive compatible (direct revelation) mechanism implements — with identical payments to those obtained at equilibrium in the original.
ProofSimulate the equilibrium strategies
Let be a dominant strategy equilibrium. Define and . Since each is dominant, for every : . Taking and gives exactly incentive compatibility.
∎
CorollaryEx-post too
Restrict the action spaces to the ranges as in the proposition above, making dominant; then apply the revelation principle.
ImportantWhat the principle does not say
It does not mean indirect mechanisms are useless. General mechanisms may be adaptive (multiround), significantly reducing the communication or computation burden on the players or the auctioneer relative to a nonadaptive direct mechanism — combinatorial auctions being the example.
Characterizing incentive compatible mechanisms
The driving question. We can implement welfare maximization. What other social choice functions can we implement?
IntuitionWhy we want others
In economics, chiefly to increase revenue or introduce fairness. In computing, there are many natural optimization goals — in scheduling, the makespan, very different from total welfare. And crucially, computational considerations: often is complex and maximizing welfare is NP-complete, while efficient approximation algorithms exist. Such an algorithm is in effect a social choice function approximating welfare maximization but differing from it. Can it be implemented?
Direct characterization
TheoremIncentive compatibility, spelled out
A mechanism is incentive compatible iff for every and every :
- The payment does not depend on , only on the alternative chosen. That is, there are prices for with whenever .
- The mechanism optimizes for each player: , over the range of .
ProofBoth directions
(If) With the outcomes and the payments, ‘s truthful utility is at least precisely because the mechanism optimizes for him.
(Only if, condition 1) If two declarations give the same outcome but different payments, a player with the more expensive type declares the cheaper one. (Only if, condition 2) If some in the range beats for player , he declares whichever produces .
∎
Weak monotonicity
DefinitionWMON
satisfies weak monotonicity if for all : implies
— if the social choice changes when one player changes his valuation, it must be because he increased his value of the new choice relative to the old.
TheoremWMON characterizes, on convex domains
If a mechanism is incentive compatible then satisfies WMON. If all domains are convex, then for every WMON social choice function there exist payments making it incentive compatible.
ProofThe easy direction
Fix ; by the direct characterization there are fixed prices . If , then not preferring to declare gives , and not preferring gives . Subtracting yields WMON.
∎
WarningWMON is local, and not sufficient in general
The converse direction is quite involved and is not given here; WMON is known not to be sufficient on general non-simply-connected domains.
Even where it holds, WMON leaves something to be desired: it is a local condition, for each player and each separately. Is there a global characterization? That depends intimately on the domain . Two extremes have good answers — unrestricted and essentially single dimensional. The intermediate range, where most computationally interesting problems lie, is still wide open.
Roberts’ theorem: unrestricted domains
DefinitionAffine maximizer
is an affine maximizer if for some subrange , player weights , and outcome weights ,
PropositionWeighted VCG works
With , the mechanism is incentive compatible.
ProofMultiply by
Assume WLOG . Player ‘s utility is ; multiplying by , this is maximized exactly when is — which is what truthful reporting produces.
∎
TheoremRoberts
If , is onto , for every , and the mechanism is incentive compatible, then is an affine maximizer.
NoteBoth hypotheses matter
The restriction is crucial, as in Arrow’s theorem, since falls into the single-parameter case below, where non-weighted-VCG mechanisms exist. It remains open how far can be relaxed.
Single-parameter domains
DefinitionSingle parameter domain
Defined by a publicly known winning set and a range : consists of those for which, for some , for and otherwise. We abuse notation and use as the scalar .
The point: all winning alternatives are equivalent to , and so are all losing ones. All the examples above fall into this category — in a single-item auction is the single outcome where wins; in buying a path, is the set of all paths containing edge .
DefinitionMonotone rules and critical values
is monotone in if and imply — a higher valuation still wins.
For a monotone there is a critical value , below which loses and above which he wins (undefined if can never win). In a second price auction the critical value is the highest other declared value.
TheoremCharacterization on single-parameter domains
A normalized mechanism (losers pay 0) is incentive compatible iff
- is monotone in every , and
- every winning bid pays the critical value: whenever .
ProofAll three parts
(If) Whatever declares, winning gives and losing gives 0, so he prefers to win iff — which is exactly what truth produces.
(Only if, monotonicity) If with winning at price and losing: not preferring to lose gives ; not preferring to win gives . Contradiction.
(Only if, payment) If a winner pays then by the direct characterization all winners pay , including one with — who would rather lose by bidding below . Conversely if , a loser with would rather win.
∎
ImportantAmple room beyond affine maximization
We can implement e.g. maximizing the Euclidean norm or the egalitarian . In many cases this flexibility allows computationally efficient approximation mechanisms for problems whose exact optimization is intractable.
Uniqueness of prices
TheoremPayments are determined up to an additive constant
Assume the domains are connected. If is incentive compatible, then is incentive compatible iff for some functions .
ProofClose alternatives first, then connectedness
The “if” is clear since has no strategic implication. For “only if”: fix ; by the direct characterization the payment is a constant on , and likewise . It suffices to show for all .
Call close if for every there are with mapping to and respectively. For close : not preferring gives , and symmetrically, so
and identically for . Since , the two bounds are at most apart, so ; as was arbitrary they are equal.
For general : let . By transitivity of the relation, no alternative outside is close to one inside, so has positive distance from — contradicting connectedness of .
∎
ImportantThree consequences
- The only incentive compatible mechanisms maximizing social welfare are those with VCG payments.
- In bilateral trade, the only welfare-maximizing incentive compatible mechanism making no payments under no-trade is the one that subsidizes trade. More generally, an ex-post individually rational mechanism cannot dictate positive payments under no-trade, so it must subsidize.
- In the public project, no ex-post individually rational welfare-maximizing mechanism can recover the cost. Players with value 0 pay 0 (as much as individual rationality permits), so their payments must be identical to the Clarke pivot ones.
NoteConnectedness is essential
If valuations are restricted to be integral, modifying by any small constants preserves incentive compatibility.
Randomized mechanisms
DefinitionTwo notions of incentive compatibility
A randomized mechanism is a distribution over deterministic mechanisms. It is incentive compatible
- in the universal sense if every deterministic mechanism in the support is incentive compatible;
- in expectation if truth is dominant in the game induced by expectation.
Universal implies in-expectation. In-expectation is the more natural requirement for most purposes; the universal definition matters if players are not risk neutral, or if the mechanism’s internal randomization is not completely hidden from the players.
TheoremRandomized single-parameter characterization
Writing and letting denote the expected payment, a normalized randomized mechanism on a single parameter domain is incentive compatible in expectation iff for every and :
- is monotonically nondecreasing in , and
ProofBoth directions, dropping the indices
(If) We need . Substituting the payment formula reduces this to for and the reverse for — both true by monotonicity.
(Only if) Combining the incentive constraints at and at and subtracting gives , i.e. monotonicity. Rearranging the same two constraints,
Setting , dividing by , and letting , both sides approach , so . Integrating with and then integrating by parts gives the formula. (This appears to need differentiability of , but monotonicity gives it almost everywhere, which suffices since we immediately integrate.)
∎
WarningWhose randomness
The randomization here is completely controlled by the mechanism designer and has nothing to do with distributional assumptions on players’ valuations — which is the subject of the next section.
Bayesian–Nash implementation
Why relax. Dominant strategies model situations where a player has no information about others — not even a prior — and must operate under worst-case assumptions. This is usually considered too strict in economic theory, whose working definition assumes a commonly known prior and Bayesian optimization.
DefinitionGame with incomplete information
As before but with a prior distribution on each type space . A profile is a Bayesian–Nash equilibrium if for all , all , all :
A mechanism is truthful in the Bayesian sense if it is direct revelation and the truthful strategies form a Bayesian–Nash equilibrium. The revelation principle holds here too, preserving expected payments.
NoteThe containment
Every ex-post-Nash implementation is by definition a Bayesian implementation for any distributions. But in general Bayesian implementation depends on the , and there are many cases where a Bayesian–Nash equilibrium exists though no dominant-strategy one does — the first price auction being the example.
First price auction
Two players, Alice with value and Bob with value . Alice will not bid (utility 0 even winning), so she bids — but how much lower? If she knew Bob’s bid she would bid . But she knows neither nor , only the distribution .
LemmaEquilibrium of the first price auction
With values uniform on , the strategies and are in Bayesian–Nash equilibrium.
ProofMaximize
Alice’s expected utility from bid is . Against she wins iff , which for uniform on has probability for (and 1 above, 0 below). The optimum is clearly in , so maximize : differentiating, , giving .
∎
NoteTwo observations
iff , so the winner is also the player with the highest value — the first price auction maximizes social welfare too, just like second price. And finding Bayesian–Nash equilibria is generally not easy; the closed form here relies on the symmetric case, though similar arguments work for arbitrary nonatomic distributions and any number of bidders.
Revenue equivalence
IntuitionThe surprising numerical coincidence
Second price revenue is ; first price revenue is . Each is higher for certain values. But in expectation over uniform on , both equal exactly . This is no coincidence.
TheoremRevenue equivalence
Under weak assumptions, for every two Bayesian–Nash implementations of the same social choice function: if for some type the expected payment of player is the same in both, then it is the same for every type . In particular, if for each player there exists such a type, the two mechanisms have identical expected revenues.
ProofPath from to through the convex valuation space
By the revelation principle restrict to Bayesian-truthful mechanisms. Assumption 1: each is convex (or path-connected, with a messier proof).
Take and derive the expected payment from that at and from alone. Write , , and the convex combinations ; convexity gives a type realizing each. Let be the expected payment at , and . Assumption 2: is continuously differentiable in .
The expected utility of type declaring is . Truthfulness at and at gives
Dividing by and letting , both sides approach , so exists and is continuous. Integrating, .
∎
ImportantCompare with uniqueness of prices
The similarity to Uniqueness of prices should be noted: in both, the allocation rule determines the payments up to a normalization — there for every fixed , here in expectation over . The proofs look different for technical reasons but the underlying idea is the same: take two close types and put together the two constraints saying neither gains by misrepresenting as the other.
Consequently all the corollaries of Uniqueness of prices hold in expectation for all Bayesian–Nash implementations.
ExampleRaising revenue requires changing the allocation
Two bidders uniform on . Put a reservation price of , selling to the highest bidder at the maximum of the low bid and , with no sale if both bid below. This is incentive compatible, and its expected revenue is . Revenue equivalence is not violated because the social choice function changed — sometimes nobody wins.
Further models
NoteRisk aversion
All the Bayesian discussion assumed risk neutrality: utility 2 with probability equals utility 1 for sure, which is why we could just take expectations. Real players are often risk-averse, preferring lower but more certain utility. The revenue equivalence principle fails for such players: it is known that first price auctions generate more revenue than second price when bidders are risk-averse.
NoteInterdependent values
We assumed independent private values. In general there is a joint distribution over “states of the world”, and players get signals — partial information providing some about their own valuation and some about others’. Most results in this chapter cease holding.
The extreme opposite is the common value model: the object has exactly the same value for everyone, but nobody knows it (e.g. bonds, whose value depends on future interest rates and default probability). Here an auction serves as an information aggregation vehicle. The pitfall is the winner’s curse: if each bidder bids his own signal-based estimate, the winner will likely regret winning — winning means other signals implied a lower value. So in equilibrium bidders must bid an estimate conditioned on the fact that they win.
A common formalization combining both components is affiliated signals, where each player’s signal is positively correlated (in the strong technical sense of affiliation) with others’ values. There, ascending English auctions generate more revenue than the nonadaptive second price auction: as bidding progresses, each bidder gets information raising his estimate.
NoteComplete information models
Sometimes all players have complete information and only the mechanism designer lacks it. The prototype is King Solomon: two women each claiming the baby. Both know the truth; Solomon must design a mechanism eliciting it from their differing preferences. Mechanism design is much easier here, and many implementations without money are possible.
NoteHidden actions
All of Mechanism Design addresses private information. A complementary difficulty is hidden actions not visible to the mechanism — widely studied in economics and recently in computer science.
Escaping without money: restricted domains
ImportantThe Procrustean bed, and the second escape route
The Gibbard–Satterthwaite theorem is a Procrustean bed — escaped only by relaxing its assumptions. (Procrustes boasted of a bed whose length exactly matched its occupant; he neglected to mention this was achieved by stretching or butchering his guests to fit.)
In many applications it is clearly unreasonable to assume preferences are completely unrestricted. Where money can be transferred, we get the rich class of rules above. But there are important environments where money cannot be used as compensation — from ethical or institutional constraints: many political decisions must be made without transfers; organ donations can be arranged by “trade” among needy patients and their relatives, yet monetary compensation is illegal.
PropositionSmaller domains are easier
Consider problems and with . If is strategy-proof for the former, its restriction is strategy-proof for the latter.
Why: on a smaller domain, strategy-proofness imposes strictly fewer constraints. This justifies searching for reasonable (or at least nondictatorial) rules on smaller domains.
NotePublic versus private goods
The single-peaked model is a canonical public good setting ( for all ). The matching problems are private good problems: each contains only preferences sensitive to certain dimensions of — each agent cares only about his own consumption — so whenever .
Single-peaked preferences over policies
DefinitionThe model
Policy space ; an outcome is a point . Agent ‘s preference is single-peaked if there is a peak such that for all and all ,
— preference is strictly decreasing as one moves away from the peak. Let denote the class of such preferences; a rule is .
IntuitionWhat this models
An income tax rate; a conservative/liberal political issue; the location of a public facility on a road; a group deciding the temperature of a shared office. In each, agents have an ideal policy and prefer decisions close to it.
DefinitionOnto, unanimity, Pareto-optimality
is onto if every is chosen for some profile — it cannot preclude an outcome ex ante. Unanimity requires that if all peaks coincide, that point is chosen. Pareto-optimality requires no that all agents prefer to .
WarningOnto is not without loss of generality
Fix and consider the rule choosing whichever a majority prefers (ties to ). That is strategy-proof but not onto. Such rules can even break ties using preference information about points not in the range.
LemmaAmong strategy-proof rules, all three coincide
If is strategy-proof then onto unanimous Pareto-optimal.
ProofOne agent at a time
Pareto-optimality trivially implies the others. Onto unanimous: fix with , and any unanimous with all peaks at . By strategy-proofness (else agent 1 manipulates); repeating agent by agent gives .
Unanimous Pareto-optimal: suppose not, so WLOG for all , with agents labelled so . If , unanimity is violated. Otherwise let be the number of agents at the minimum peak. For let have and . Let . Strategy-proofness gives (else agent with manipulates via ) and (else agent with manipulates via ), so . Repeating for each contradicts unanimity.
∎
The rules
IntuitionWhy the median works
With odd, the rule choosing the median of the peaks is strategy-proof. If an agent’s peak lies below the median, he can change the median only by reporting a peak above the true median — moving the outcome further from his own peak, making him worse off. Symmetrically above. And if his peak is the median, he cannot gain.
More generally the th highest peak is strategy-proof for the same reason: an agent can only move the th peak further from his own. The median is .
WarningAverages are manipulable
The rule choosing the average of the peaks is manipulable by any agent whose peak is not the average: he reports a more extreme peak (closer to 0 or 1). The same holds for any weighted average — with one exception: putting all weight on one agent, giving a dictatorial rule, which is strategy-proof and onto.
ImportantStrategy-proofness buys informational simplicity for free
A rule technically requires reporting an entire ordering over . The rules above need only the peak — a single number. Under the onto assumption this informational property is a consequence of strategy-proofness: all strategy-proof onto rules can be computed from the peaks alone.
DefinitionAnonymity and the phantom-voter rules
is anonymous if for any permutation — agents’ names play no role. Dictatorial rules are strategy-proof and onto but not anonymous.
Generalizing th-statistic rules: fix points and choose the median of the points consisting of the peaks and the fixed points. For some and some profiles this may choose a point that is no agent’s peak — yet it is strategy-proof for the same reason.
TheoremCharacterization with anonymity
is strategy-proof, onto and anonymous iff there exist with
ProofConstruct the from extreme profiles, then two cases
Let and be the (unique, since preferences are ordinal) preferences with peaks at 0 and 1. Construct as the outcome when exactly agents have and the rest . Strategy-proofness implies monotonicity: .
Take a profile with peaks ordered and let .
Case 1: for some . By monotonicity , and by construction is the outcome at the extreme profile. Replace by : strategy-proofness forces the outcome to stay (moving down would let the -agent manipulate; moving up would let the -agent manipulate, since ). Repeating for each and symmetrically for gives .
Case 2: , so . It suffices to show , after which repeated strategy-proofness finishes as in Case 1.
Suppose instead the outcome is (the case is symmetric). Since reporting would give , strategy-proofness gives . Let be the option set — the outcomes agent can obtain by varying his report with the others fixed. Then , and strategy-proofness forces . One shows is attained, so and .
Now take symmetric preferences with peaks just below and just above . Strategy-proofness gives outcome under , and repeated application shows this persists when all the ‘s become . But Pareto-optimality (the earlier lemma) then forces the outcome under to be at least , hence — while a separate chain of strategy-proofness arguments forces it into . Contradiction.
∎
IntuitionThe as degrees of compromise
They are the rule’s compromise when agents are extremists. If agents want 1 and want 0, a true median rule picks whichever extreme has more peaks; these rules may instead pick an intermediate . The degree of compromise can depend on how divided opinion is (the size of ).
DefinitionGeneralized median voter scheme
is a g.m.v.s. if there are points with
- ,
- , , and
- .
Two remarks. Condition (1) is redundant — parameters failing it still define a strategy-proof rule, just one expressible by other parameters satisfying it. Condition (2) merely guarantees ontoness; parameters failing it give a strategy-proof rule with range .
ExampleReading off the power of coalitions
If every agent in has peak 1 and the rest peak 0, the rule chooses — so the are a nonanonymous degree of compromise at extreme profiles.
Without anonymity some coalitions are more powerful. A large means more instances where agent 3’s peak is a candidate outcome; a small means more instances where agent 1 has no impact (whenever ).
TheoremFull characterization
is strategy-proof and onto iff it is a generalized median voter scheme. (Proof omitted; it has much in common with the anonymous case.)
Application: public good cost sharing
ExampleLabor for a public good
agents share a machine requiring the simultaneous labor of all of them. They jointly decide the number of hours ; after hours the machine outputs units of a public good, with increasing, strictly concave, . Agent has utility increasing in , decreasing in , and quasi-concave.
Since outcomes lie on the graph of , and given the assumptions, agents have single-peaked preferences over this consumption space — so any strategy-proof onto rule is a g.m.v.s. operating along the graph of .
NoteThree technicalities glossed over
The outcome space is not bounded (though bounding it is reasonable); one should verify the preference domain yields all the single-peaked preferences needed for the characterization (the proof used symmetric ones); and one should show a strategy-proof rule here is invariant to utility information away from the graph of .
ImportantAdding individual rationality pins down a unique rule
is individually rational if every agent weakly prefers the outcome to walking away (, ). Translated to : which g.m.v.s. has every agent weakly preferring the outcome to ?
There is a unique such rule: choose the minimum peak — i.e., ask each agent their most preferred labor level and take the minimum.
The house allocation problem
DefinitionThe model
agents, each owning a unique house and having a strict preference ordering over all houses. Reallocate the houses appropriately. (A modern version replaces houses with kidneys.)
Why Gibbard–Satterthwaite does not apply: although any strict ordering over houses is permitted, preferences over allocations are restricted — an agent is indifferent between all allocations giving her the same house.
ImportantWhy the core is the right solution concept
A new feature: agents control the resources to be allocated. An allocation can therefore be subverted by a subset who break away and trade among themselves. So we focus on allocations invulnerable to opting out.
DefinitionBlocking coalitions and the core
Number each house by its owner, so the initial allocation is ; feasibility means for . For let be the allocations achievable by trading among themselves alone.
is a blocking coalition for if there is with, for all , either or , and strict for at least one. The core is the set of unblocked allocations.
(This is the natural modification of the transferable-utility core to a nontransferable-utility game.)
AlgorithmTop Trading Cycle Algorithm (TTCA)
Build a directed graph with one vertex per agent; if house is agent ‘s th choice, insert edge coloured . (An edge is a loop.)
First identify all cycles and loops using only colour-1 edges; strictness of preferences implies these are node-disjoint. Let be their vertices. Each cycle implies swaps: give house to , house to , and so on. Delete all colour-1 edges and repeat with colour 2, giving , and so on.
TheoremThe core is a singleton
The core of the house allocation problem consists of exactly one matching — the one returned by TTCA.
ProofPeel off , then , and so on
Under TTCA each agent in receives his favourite house, so blocks any allocation not assigning them those houses — any core allocation must agree with TTCA on . Given that, each agent in receives his favourite house excluding those endowed by , so any core allocation must agree on too. Continuing for each shows at most one core allocation exists. (That the TTCA allocation is indeed unblocked is left to the reader.)
∎
TheoremTTC is strategy-proof
The direct mechanism associated with TTCA is strategy-proof.
ProofA misreporter cannot improve on his round
Let be the TTCA allocation at profile and suppose misreports, giving and . Observe for all , so . But TTCA chooses to be ‘s top-ranked choice from exactly that set — contradicting .
∎
NoteTwo extensions, both fragile
Indifference. With weak preferences one distinguishes the core (blocking requires all members strictly better) from the strict core (weak blocking). With strict preferences the two coincide: given a weakly blocking , remove any member not strictly better — he must have kept his own house — and repeat. With indifference, the strict core can be empty, or non-unique; deciding emptiness is polynomial in .
Multiple goods per agent. Endow each agent with a home and a car. With sufficiently rich preferences over pairs the core can be empty — and it turns out the core can be empty even under severe restrictions, e.g. separable preferences, where one’s ranking over homes is independent of which car one has.
Stable matchings
DefinitionThe model
A set of men and of women, each with a strict preference ordering over the other side. A matching assigns each man to at most one woman and vice versa. Remaining single is accommodated by including a dummy partner for each agent, so we may assume .
A matching is unstable if there are and with matched to , to , and and — the pair is blocking. A matching with no blocking pair is stable.
ExampleThree men, three women
is unstable — blocks. But is stable.
AlgorithmDeferred acceptance (male-proposal)
Each man proposes to his top choice. Each woman with at least two proposals keeps (tentatively) her top one and rejects the rest. Each rejected man proposes to his top choice among women who have not rejected him. Repeat until no man has a woman to propose to, or every woman has at most one proposal.
This terminates in a matching: no man is assigned more than one woman, and since each woman keeps only one proposal, no woman is assigned more than one man.
ExampleRunning it on the table above
Round 1: , , . Only has two proposals; she ranks above , so she rejects . Round 2: . Every woman now has one proposal. The result is — stable, and different from the one found earlier.
TheoremThe algorithm produces a stable matching
Suppose blocks, with matched to and to . Since , proposed to before ; since he was not matched to her, she must have received a proposal she ranked higher, and since the algorithm matched her to , — contradicting blocking.
DefinitionOptimality
is male-optimal if there is no stable with for all and strict for at least one. Similarly female-optimal.
TheoremMale-proposal gives the male-optimal stable matching
Suppose not; then some stable dominates for the men, so in the algorithm some man proposes to before and is rejected. Consider the first such rejection. Woman rejected for some she prefers; since this is the first such rejection, ranks above . So and — is not stable, a contradiction.
ImportantNo matching is optimal for both sides
Running the algorithm with the women proposing also yields a stable matching, generally a different one. In the example, at least one woman is strictly better off under the female-optimal matching and none worse off — and symmetrically for the men. There is no matching optimal for both sides.
TheoremThe core equals the set of stable matchings
Define to dominate if there is with (i) for all and (ii) preferred by all of . Stability is the special case of a single couple, and the set of undominated matchings — the core — is exactly the set of stable matchings.
TheoremStrategy-proofness, for one side only
The direct mechanism associated with the male-propose algorithm is strategy-proof for the males.
ProofReduce to a top-ranked misreport, then show nobody is worse off
Suppose can misreport and obtain , where are the male-propose outcomes at and .
Step 1: assume the misreport ranks first. Let rank first and . is stable w.r.t. : any blocking pair cannot involve (he gets his top choice), and the others’ preferences are unchanged, so it would block under too. Since the male-propose matching for is male optimal, .
Step 2: show is empty. If not, each is rejected by during the run on ; consider the first such rejection, say of . Then has a proposal from some with , and since was not matched to under , — so , else , a contradiction. But then must have been rejected by before was rejected, contradicting the choice of .
Since , all men are no worse off under , contradicting male optimality of .
∎
WarningNot strategy-proof for the other side
In the example, the male-propose algorithm gives and gets her second choice. Had she rejected instead of , then , who prefers to and rejects , who then proposes to — whom she prefers to . She ends up with her first choice by lying.
IntuitionThe analogy with Walrasian equilibrium
Walrasian equilibria exist and are solutions of a fixed point problem; where computable, it is because the equilibrium set is described by convex inequalities. The same holds here: stable matchings are the fixed points of a nondecreasing function on a lattice, and they are also the solutions of a system of linear inequalities. Both formulations follow.
Lattice formulation
DefinitionSemimatchings and the partial order
A male semimatching assigns each man at most one woman (but a woman may be assigned to more than one man); similarly female. A semimatching is a pair of these. Write if is unassigned.
if all men are weakly better off under and all women weakly worse off. The join takes, for each man, whichever of he prefers, and for each woman whichever she likes less; the meet reverses both. With these, the semimatchings form a compact lattice.
FormulaThe map whose fixed point we seek
is ‘s most preferred woman from , or himself if that set is empty; and symmetrically .
TheoremExistence via Tarski
There is a semimatching with , and it is a stable matching.
ProofMonotonicity, then verify the fixed point is a stable matching
is nondecreasing. If then the women are worse off under , so , giving ; symmetrically for women. Tarski’s theorem then gives a fixed point .
is a matching. Suppose . Since , is the top choice of both and in their respective sets, so with . But is ‘s top choice in , a set containing — contradiction.
is stable. If blocks, with , then . But is ‘s top choice in a set containing — contradiction.
∎
Linear programming formulation
FormulaThe stable matching polytope
With iff is matched to :
IntuitionWhat the third constraint says
If and , then is matched to a woman he ranks below and to a man she ranks below — i.e. is a blocking pair. The constraint forbids exactly this.
TheoremIntegrality
is the convex hull of all stable matchings.
Extensions
NoteThree directions, with differing robustness
Indifference. Male- and female-optimal stable matchings need not exist, so the optimality theorem fails; the other theorems continue to hold.
Many-to-one. The college admissions market: each student attends one college, each college admits many, so colleges have preferences over subsets. Without restrictions a stable matching need not exist. One restriction under which everything carries over unchanged is the quota model: a strict ordering over students plus a quota , where between two size- sets differing in one student, the college prefers the one with the more preferred student.
Nonbipartite — the stable roommates problem. Partition (even) individuals into pairs, each with strict preferences over the others. Stable matchings need not exist:
| 1 | 2 | 3 | 4 |
|---|---|---|---|
| 2 | 3 | 1 | 1 |
| 3 | 1 | 2 | 2 |
| 4 | 4 | 4 | 3 |
Pairing 1 with 4 is blocked by ; 2 with 4 by ; 3 with 4 by . An algorithm decides existence, and there is an associated system of linear inequalities feasible exactly when a solution exists.
Future directions
NoteMultiple locations on a graph
For the single-peaked model: choose multiple locations on an interval or more general graph, when each agent’s preference depends only on the closest one. When downloading files one cares only about the nearest mirror. If a planner elicits preferences to place mirrors on a network, how can this be done strategy-proofly?
NoteDynamic matching and kidney exchange
Both the house allocation and stable matching models are static, yet many resembling environments are dynamic. Kidney patients used to wait in a queue for a compatible organ; more recently exchange systems let patients “swap” incompatible but willing donors. (Alice needs a kidney and her friend Bob is willing but incompatible; Carmina and Dijen likewise. If Alice matches Dijen and Carmina matches Bob, a swap can be arranged.) Static versions have been analyzed; if donors and recipients arrive dynamically, how should swaps be arranged?
Quick reference
| Object | Statement |
|---|---|
| Condorcet | majority can cycle: |
| Arrow | unanimity IIA $ |
| Incentive compatible monotone | a changed choice must reflect a switched pairwise preference |
| Gibbard–Satterthwaite | incentive compatible onto $ |
| Quasilinear utility | |
| Vickrey | highest bidder wins, pays the second highest bid |
| VCG | maximizes ; |
| Clarke pivot | — internalizes externalities; gives IR and no positive transfers |
| Revelation principle | any dominant-strategy (or ex-post) implementation an incentive compatible one, same payments |
| Direct characterization | payment depends only on the alternative; the mechanism optimizes for each player |
| WMON | ; necessary always, sufficient on convex domains |
| Roberts | unrestricted domains, $ |
| Single parameter | incentive compatible monotone winners pay the critical value |
| Uniqueness of prices | payments determined up to , on connected domains |
| Randomized, single parameter | monotone and |
| First price, uniform | equilibrium |
| Revenue equivalence | same social choice one matching type same expected revenue |
| Single-peaked, anonymous | median of the peaks and phantom points |
| Single-peaked, general | generalized median voter schemes, parameters |
| Public good labor IR | the minimum peak rule, uniquely |
| House allocation | core is the unique TTCA allocation; TTC is strategy-proof |
| Stable matching | deferred acceptance gives a stable, male-optimal matching; core stable matchings |
| Matching, strategy-proofness | holds for the proposing side only |
| Matching, alternative views | fixed points of a monotone map on a lattice; integral LP polytope |
Facts to keep to hand:
- Gibbard–Satterthwaite is the pivot of the whole subject: money and restricted domains are the two escape routes, and this note is organized around them.
- VCG works because the payment makes each player’s utility equal the total social welfare, so his interest and the designer’s coincide. Everything else about is strategically irrelevant.
- The allocation rule determines the payments, twice over: exactly up to in dominant strategies, and in expectation up to a constant in the Bayesian setting. So raising revenue requires changing the allocation.
- Bilateral trade must be subsidized and public projects cannot recover their cost — both are corollaries of that uniqueness, not accidents of the Clarke rule.
- Single-parameter domains are where most algorithmic mechanism design lives, because monotonicity plus critical-value pricing is checkable and leaves room for non-affine objectives such as egalitarian welfare.
- Without money, every positive result comes from a domain restriction that defeats the Gibbard–Satterthwaite construction: single-peakedness, indifference among allocations giving the same house, or indifference among matchings giving the same partner.
- Both matching results are one-sided: deferred acceptance is optimal and strategy-proof for the proposing side and manipulable by the other. No two-sided optimum exists.
References
- Nisan, Roughgarden, Tardos & Vazirani, Algorithmic Game Theory — chapters 9 (Nisan) and 10 (Schummer & Vohra)
- Mas-Colell, Whinston & Green, Microeconomic Theory; Krishna, Auction Theory; Roth & Sotomayor, Two-Sided Matching