Quotient Sets and Well-Definedness

Suppose you want to add fractions. A fraction like 2/42/4 is really just a name. It's a name for the number that 1/21/2, 3/63/6, and −5/−10-5/-10 also name. Addition of fractions is defined by the rule a/b+c/d=(ad+bc)/(bd)a/b + c/d = (ad+bc)/(bd). But how do you know the answer doesn't depend on which names you picked? This question is about whether an operation defined on representatives actually descends to an operation on the things they represent. It is the problem of well-definedness. This problem sits at the heart of an enormous amount of ordinary mathematics. The formal machinery for this problem is the quotient set. Given a set AA and an equivalence relation ∼\sim on AA, the quotient set A/∼A/\sim collects the equivalence classes of ∼\sim. These classes form a brand-new set. Its elements are themselves sets of elements of AA. This construction converts "sameness up to ∼\sim" into literal set-theoretic equality. Two classes [a][a] and [b][b] are equal as elements of A/∼A/\sim exactly when a∼ba \sim b. Quotient sets let us build new mathematical objects this way. Examples include the integers from pairs of naturals, and the rationals from pairs of integers. Other examples are remainders mod nn, congruence classes, and cosets of a subgroup. We do this by declaring certain elements "the same." Then we work with the resulting classes as if they were single points. The subtlety appears once you pass to the quotient. Suppose you want to define a function or relation on classes. First you choose a representative and compute something with it. But this must be checked for well-definedness. Does the result depend only on the class? Or does it secretly depend on which representative you happened to pick? This check is not a formality. It is a genuine proof obligation. Forgetting it is one of the most common errors made by students. This tends to happen when they are first learning to build quotient structures. This article gives the precise definition of A/∼A/\sim. It proves the fundamental theorem linking equivalence relations, partitions, and quotient sets. It develops the general recipe for proving a map on a quotient is well-defined. It closes with worked examples: rational numbers and arithmetic modulo nn. It also gives a counterexample showing what happens when well-definedness genuinely fails. Finally, it looks at where this idea recurs throughout modern mathematics.

Key takeaways
  • A/∼A/\sim is the set of all equivalence classes of ∼\sim on AA; its elements are sets of elements of AA, not elements of AA itself.
  • The Fundamental Theorem of Equivalence Relations says equivalence relations on AA correspond exactly to partitions of AA, and this correspondence is what makes A/∼A/\sim meaningful.
  • Defining a function f ⁣:A/∼→Bf\colon A/\sim \to B "by representatives" means picking a rule F ⁣:A→BF\colon A \to B and setting f([a])=F(a)f([a]) = F(a).
  • Such an ff is well-defined iff a∼a′a \sim a' implies F(a)=F(a′)F(a) = F(a') for all a,a′∈Aa, a' \in A — this is a theorem you must prove, not an assumption.
  • Classic constructions (rationals from integer pairs, modular arithmetic, cosets) are quotient sets whose operations require exactly this check.
  • Key idea: a rule on representatives determines a genuine function on the quotient only if equivalent representatives always produce equal outputs.

Where this lives today

Quotient constructions and their well-definedness checks are everywhere once you know to look. In abstract algebra, quotient groups G/NG/N, quotient rings R/IR/I, and quotient vector spaces V/WV/W are all built exactly this way: elements of the quotient are cosets (equivalence classes), and operations like (g1N)(g2N):=(g1g2)N(g_1N)(g_2N) := (g_1g_2)N require the same representative-independence proof, using the defining properties of a normal subgroup or ideal. In number theory and cryptography, modular arithmetic — the backbone of RSA and other public-key systems — is arithmetic on the quotient set Z/nZ\mathbb{Z}/n\mathbb{Z}, and every claim that "encryption commutes with the modular operations" ultimately rests on a well-definedness argument of this kind. In topology, quotient spaces (gluing constructions like forming a torus from a square, or projective space from a sphere) use the same equivalence-class idea, now demanding also that continuity of maps descend to the quotient topology. In computer science and formal verification, data type invariants and "canonical forms" (e.g. representing rational numbers, or terms modulo alpha-equivalence in lambda calculus) are handled by exactly this apparatus, since programs must be shown to give consistent output regardless of which internal representative of an abstract value they receive. In statistics and measure theory, spaces of random variables identified when they agree "almost surely" form a quotient set, and operators (like conditional expectation) must be checked to be well-defined on these classes.

:::quiz[The Well-definedness Criterion says f([a]):=F(a)f([a]):=F(a) is a well-defined function on A/∼A/\sim if and only if:]

  • FF is injective on AA
  • FF is surjective onto BB
  • a∼a′a \sim a' implies F(a)=F(a′)F(a) = F(a'), for all a,a′∈Aa,a' \in A ✓
  • F(a)∼F(a′)F(a) \sim F(a') implies a=a′a = a'

Ask the tutor: Can you show me why the "check both coordinates separately" step in the fraction-addition example is enough to guarantee full well-definedness on pairs of classes?

DefinitionQuotient set and well-defined map

Let AA be a set and let ∼\sim be an equivalence relation on AA. For a∈Aa \in A, the equivalence class of aa is

[a]={ x∈A:x∼a }.[a] = \{\, x \in A : x \sim a \,\}.

The quotient set of AA by ∼\sim, written A/∼A/\sim, is the set of all equivalence classes:

A/∼  =  { [a]:a∈A }.A/\sim \;=\; \{\, [a] : a \in A \,\}.

Thus A/∼A/\sim is a subset of the power set P(A)\mathcal{P}(A): an element of A/∼A/\sim is itself a set (an equivalence class), and two elements [a],[b]∈A/∼[a], [b] \in A/\sim satisfy

[a]=[b]⟺a∼b.[a] = [b] \quad \Longleftrightarrow \quad a \sim b.

The map q ⁣:A→A/∼q\colon A \to A/\sim defined by q(a)=[a]q(a) = [a] is called the quotient map (or canonical projection); it is always surjective. Now suppose BB is any set and F ⁣:A→BF\colon A \to B is a function. We say FF respects ∼\sim (or is compatible with ∼\sim) if

∀a,a′∈A,a∼a′  ⟹  F(a)=F(a′).\forall a, a' \in A,\quad a \sim a' \implies F(a) = F(a').

If FF respects ∼\sim, we say the rule

f([a]):=F(a)f([a]) := F(a)

defines a well-defined function f ⁣:A/∼→Bf\colon A/\sim \to B. Well-definedness means precisely: the value f(c)f(c) of ff at a class c∈A/∼c \in A/\sim does not depend on which representative aa of cc (i.e. which aa with [a]=c[a]=c) was used to compute F(a)F(a).

Intuition

Think of AA as a set of raw objects and ∼\sim as an instruction for "gluing together" objects that we've decided to regard as the same. The quotient set A/∼A/\sim is the set of resulting blobs, one blob per equivalence class. The quotient map qq sends each raw object to its blob. Crucially, qq is generally not injective: many different elements of AA can land in the same blob. That collapsing is the entire point — it's how we manufacture new mathematical objects (like "the number 1/21/2") out of old ones (like "pairs of integers"). The trouble comes when we want to define an operation on blobs. A blob has no preferred representative — [1/2][1/2] as a fraction class has representatives (1,2)(1,2), (2,4)(2,4), (−3,−6)(-3,-6), all equally legitimate. If we compute an answer using one representative, we must get the same answer no matter which representative we had used, or the "operation on blobs" isn't really an operation at all — it would be assigning multiple different outputs to the single input [1/2][1/2], violating the very definition of a function. The well-definedness check is exactly the verification that our chosen computation doesn't secretly "look inside" the blob and depend on more information than the blob itself contains. The picture below shows A=ZA = \mathbb{Z} partitioned by congruence mod 33 into three classes, collapsed to the three-point quotient set Z/≡3\mathbb{Z}/{\equiv_3}.

Figure
The quotient map collapsing Z\mathbb{Z} into three classes mod 3
A = ℤ, partitioned by a ≡ b (mod 3) -3 -2 -1 0 1 2 3 4 5 6 quotient map q(a) = [a] [0] [1] [2] A/~ = { [0], [1], [2] } — a 3-element set

Central results

TheoremFundamental Theorem of Equivalence Relations and Partitions

Let AA be a set. 1. If ∼\sim is an equivalence relation on AA, then the collection A/∼A/\sim of equivalence classes is a partition of AA: its members are nonempty, pairwise disjoint, and their union is AA. 2. Conversely, if P\mathcal{P} is a partition of AA, then the relation ∼P\sim_\mathcal{P} defined by

a∼Pb  ⟺  a and b lie in the same block of Pa \sim_\mathcal{P} b \iff a\text{ and }b\text{ lie in the same block of } \mathcal{P}

is an equivalence relation on AA, and A/∼P=PA/{\sim_\mathcal{P}} = \mathcal{P}. 3. These two processes are mutually inverse: starting from ∼\sim, forming A/∼A/\sim, and then forming ∼A/∼\sim_{A/\sim} recovers ∼\sim; starting from P\mathcal{P}, forming ∼P\sim_\mathcal{P}, and then forming A/∼PA/{\sim_\mathcal{P}} recovers P\mathcal{P}.

Proof

We use direct verification from the definitions of equivalence relation (reflexive, symmetric, transitive) and partition.

(1) A/∼A/\sim is a partition. Nonempty blocks. For each a∈Aa \in A, reflexivity gives a∼aa \sim a, so a∈[a]a \in [a]; hence [a]≠∅[a] \neq \emptyset. Cover. Every a∈Aa \in A lies in [a]∈A/∼[a] \in A/\sim, so ⋃a∈A[a]=A\bigcup_{a\in A} [a] = A. Pairwise disjoint (via the key lemma [a]=[b]  ⟺  a∼b[a]=[b] \iff a\sim b). We first prove: for a,b∈Aa,b \in A, either [a]=[b][a] = [b] or [a]∩[b]=∅[a] \cap [b] = \emptyset. Suppose [a]∩[b]≠∅[a] \cap [b] \neq \emptyset; pick c∈[a]∩[b]c \in [a] \cap [b], so c∼ac \sim a and c∼bc \sim b. We show [a]=[b][a] = [b]. Let x∈[a]x \in [a], so x∼ax \sim a. Since c∼ac \sim a, symmetry gives a∼ca \sim c, and transitivity on x∼ax \sim a, a∼ca \sim c gives x∼cx \sim c. Since c∼bc \sim b, transitivity gives x∼bx \sim b, i.e. x∈[b]x \in [b]. This shows [a]⊆[b][a] \subseteq [b]. By the symmetric argument (swapping roles of aa and bb), [b]⊆[a][b] \subseteq [a]. Hence [a]=[b][a] = [b]. So any two classes are either identical or disjoint; since A/∼A/\sim is defined as a set of classes (repeats collapse automatically, as sets contain no duplicate elements), distinct elements of A/∼A/\sim are automatically disjoint. Combined with nonemptiness and the covering property, A/∼A/\sim is a partition of AA.

(2) ∼P\sim_\mathcal{P} is an equivalence relation with A/∼P=PA/{\sim_\mathcal{P}} = \mathcal{P}. Since P\mathcal{P} is a partition, every a∈Aa \in A lies in exactly one block Ba∈PB_a \in \mathcal{P} (existence because P\mathcal{P} covers AA; uniqueness because blocks are pairwise disjoint). Define a∼Pba \sim_\mathcal{P} b to mean Ba=BbB_a = B_b. Reflexive: Ba=BaB_a = B_a, so a∼Paa \sim_\mathcal{P} a. Symmetric: if Ba=BbB_a = B_b then Bb=BaB_b = B_a, so a∼Pb  ⟹  b∼Paa\sim_\mathcal{P} b \implies b \sim_\mathcal{P} a. Transitive: if Ba=BbB_a = B_b and Bb=BcB_b = B_c then Ba=BcB_a = B_c, so a∼Pba \sim_\mathcal{P} b and b∼Pcb\sim_\mathcal{P} c imply a∼Pca \sim_\mathcal{P} c. Thus ∼P\sim_\mathcal{P} is an equivalence relation. Its equivalence class of aa is

[a]∼P={x∈A:Bx=Ba}=Ba,[a]_{\sim_\mathcal{P}} = \{x \in A : B_x = B_a\} = B_a,

because x∈Bax \in B_a forces Bx=BaB_x = B_a by uniqueness of blocks, and conversely Bx=BaB_x = B_a forces x∈Bx=Bax \in B_x = B_a. So the equivalence classes of ∼P\sim_\mathcal{P} are exactly the blocks of P\mathcal{P}, giving A/∼P=PA/{\sim_\mathcal{P}} = \mathcal{P}.

(3) The two constructions are mutually inverse. Starting from an equivalence relation ∼\sim, form the partition A/∼A/\sim, then form ∼A/∼\sim_{A/\sim}. By definition, a∼A/∼ba \sim_{A/\sim} b iff a,ba, b lie in the same block of A/∼A/\sim, i.e. iff [a]=[b][a] = [b] (blocks of A/∼A/\sim are exactly the classes [x][x]). We showed in part (1)'s lemma that [a]=[b]  ⟺  a∼b[a] = [b] \iff a \sim b. Hence a∼A/∼b  ⟺  a∼ba \sim_{A/\sim} b \iff a \sim b, so ∼A/∼=∼\sim_{A/\sim} = {\sim}. Starting from a partition P\mathcal{P}, form ∼P\sim_\mathcal{P}, then form A/∼PA/{\sim_\mathcal{P}}: part (2) already showed directly that A/∼P=PA/{\sim_\mathcal{P}} = \mathcal{P}. This establishes the claimed mutual inversion, completing the proof. ■\blacksquare

∎
CorollaryWell-definedness criterion

Let ∼\sim be an equivalence relation on AA, let BB be a set, and let F ⁣:A→BF\colon A \to B be a function. Define ff on A/∼A/\sim by attempting to set f([a])=F(a)f([a]) = F(a) for each class [a]∈A/∼[a] \in A/\sim. Then:

f is a well-defined function A/∼→B⟺∀a,a′∈A, (a∼a′  ⟹  F(a)=F(a′)).f \text{ is a well-defined function } A/\sim \to B \quad \Longleftrightarrow \quad \forall a,a'\in A,\ \big(a \sim a' \implies F(a)=F(a')\big).

Moreover, when this condition holds, ff is the unique function A/∼→BA/\sim \to B satisfying f∘q=Ff \circ q = F, where q ⁣:A→A/∼q\colon A \to A/\sim is the quotient map.

Proof

(⇒\Rightarrow) Suppose ff is a well-defined function on A/∼A/\sim with f([a])=F(a)f([a]) = F(a) for all aa. Let a∼a′a \sim a'. By the Fundamental Theorem (part 1's lemma, restated: [a]=[a′]  ⟺  a∼a′[a]=[a'] \iff a\sim a'), a∼a′a \sim a' implies [a]=[a′][a] = [a']. Since ff is a function, equal inputs give equal outputs: f([a])=f([a′])f([a]) = f([a']). Substituting the defining rule, F(a)=F(a′)F(a) = F(a'). (⇐\Leftarrow) Suppose the compatibility condition holds. We must check that the assignment c↦F(a)c \mapsto F(a) for any aa with [a]=c[a] = c is a genuine function on A/∼A/\sim, i.e. that it assigns exactly one value in BB to each c∈A/∼c \in A/\sim. Existence of a value: every c∈A/∼c \in A/\sim has the form c=[a]c = [a] for some a∈Aa \in A (by the definition of A/∼A/\sim as {[a]:a∈A}\{[a] : a \in A\}), so at least one representative aa exists, and F(a)∈BF(a) \in B is defined. Independence of the choice of representative (single-valuedness): suppose a,a′∈Aa, a' \in A both satisfy [a]=c=[a′][a] = c = [a']. By the Fundamental Theorem lemma, [a]=[a′][a]=[a'] implies a∼a′a \sim a'. By the compatibility hypothesis, a∼a′a \sim a' implies F(a)=F(a′)F(a) = F(a'). So any two representatives of cc give the same value of FF; call this common value f(c)f(c). This shows ff, defined by f(c)=F(a)f(c) = F(a) for any representative aa of cc, is a genuine function A/∼→BA/\sim \to B with a single well-defined value at each point, and it satisfies f([a])=F(a)f([a]) = F(a) for all a∈Aa \in A by construction, i.e. f∘q=Ff \circ q = F. Uniqueness: if g ⁣:A/∼→Bg\colon A/\sim \to B also satisfies g∘q=Fg \circ q = F, then for every a∈Aa \in A, g([a])=F(a)=f([a])g([a]) = F(a) = f([a]). Since every element of A/∼A/\sim is of the form [a][a] (surjectivity of qq), gg and ff agree at every point of A/∼A/\sim, so g=fg = f. ■\blacksquare

∎

Worked examples

Example 1: Addition of rational numbers as fractions in lowest-terms-free form. Let A=Z×(Z∖{0})A = \mathbb{Z} \times (\mathbb{Z} \setminus \{0\}), the set of pairs (p,q)(p,q) thought of as "the fraction p/qp/q." Define ∼\sim on AA by

(p,q)∼(r,s)  ⟺  ps=rq.(p,q) \sim (r,s) \iff ps = rq.

This is an equivalence relation (a standard fact we take as known, verified by checking reflexivity from ps=psps=ps; symmetry by the commutativity of multiplication; and transitivity using that q,s,uq,s,u are all nonzero, so cancellation in Z\mathbb{Z} is valid: from ps=rqps=rq and ru=tsru=ts, cross-multiplying by uu and qq respectively and comparing yields pu=tqpu = tq after cancelling the nonzero common factor ss). We want to define addition on Q:=A/∼\mathbb{Q} := A/\sim by

[(p,q)]+[(r,s)]:=[(ps+rq, qs)].[(p,q)] + [(r,s)] := [(ps+rq,\ qs)].

Take F ⁣:A×A→AF\colon A \times A \to A, F((p,q),(r,s))=(ps+rq, qs)F((p,q),(r,s)) = (ps+rq,\, qs), followed by the quotient map; formally we're defining a map on A/∼×A/∼A/\sim \times A/\sim, but the same representative-independence idea applies to each coordinate separately, and we check it coordinate by coordinate for concreteness. Note qs≠0qs \neq 0 since q,s≠0q,s\neq0, so FF does land in AA.

Well-definedness check. Suppose (p,q)∼(p′,q′)(p,q) \sim (p',q'), i.e. pq′=p′qpq' = p'q, and we replace (p,q)(p,q) by (p′,q′)(p',q') while keeping (r,s)(r,s) fixed. We must show

(ps+rq, qs)∼(p′s+rq′, q′s).(ps+rq,\ qs) \sim (p's+rq',\ q's).

Using the definition of ∼\sim, this means checking

(ps+rq)(q′s)  =  (p′s+rq′)(qs).(ps+rq)(q's) \;=\; (p's+rq')(qs).

Expand the left side: psq′s+rqq′s=pq′s⋅s+rqq′sps q's + rq q's = pq's \cdot s + rqq's. Expand the right side: p′sqs+rq′qs=p′qs⋅s+rqq′sp'sqs + rq'qs = p'qs\cdot s + rqq's (using q′q=qq′q'q = qq'). So the claim reduces to pq′s2=p′q s2pq' s^2 = p'q\, s^2, i.e. (since s≠0s \neq 0, so s2≠0s^2 \neq 0, and we may cancel in Z\mathbb{Z}, an integral domain) to pq′=p′qpq' = p'q — which is exactly our hypothesis (p,q)∼(p′,q′)(p,q)\sim(p',q'). Since s2≠0s^2 \ne 0 and Z\mathbb Z has no zero divisors, the cancellation is valid. The symmetric check for varying the second argument (r,s)(r,s) is identical with the roles of the two pairs swapped. By the Well-definedness Criterion (applied to each argument, or to the product relation on A×AA\times A defined by "same in both coordinates"), addition of fractions

[p/q]+[r/s]:=[(ps+rq)/(qs)][p/q] + [r/s] := [(ps+rq)/(qs)]

is a well-defined operation on Q=A/∼\mathbb{Q} = A/\sim. This is precisely the proof, usually skipped in school, that "adding fractions by finding a common denominator gives the same rational number no matter which representing fractions you started from."

Example 2: A map that is well-defined, and the specific representatives that test it. Let A=ZA = \mathbb{Z} and let ∼\sim be congruence mod 66: a∼b  ⟺  6∣(a−b)a \sim b \iff 6 \mid (a-b). Define F ⁣:Z→Z/2ZF \colon \mathbb{Z} \to \mathbb{Z}/2\mathbb{Z} (identify Z/2Z={0,1}\mathbb{Z}/2\mathbb{Z} = \{0,1\} with the usual parity classes) by

F(n)=n  2.F(n) = n \bmod 2.

We claim this descends to a well-defined map f ⁣:Z/≡6→{0,1}f\colon \mathbb{Z}/{\equiv_6} \to \{0,1\}, f([n]6)=n  2f([n]_6) = n \bmod 2. Check the criterion. Suppose a∼ba \sim b, i.e. 6∣a−b6 \mid a - b. Since 6=2⋅36 = 2 \cdot 3, in particular 2∣a−b2 \mid a-b, so aa and bb have the same parity, i.e. F(a)=F(b)F(a) = F(b). This verifies the hypothesis of the Well-definedness Criterion, so ff is a genuine, well-defined function Z/≡6→{0,1}\mathbb{Z}/{\equiv_6} \to \{0,1\}. A concrete test. Take the class [4]6={…,−8,−2,4,10,16,… }[4]_6 = \{\dots,-8,-2,4,10,16,\dots\}. Using representative 44: F(4)=0F(4) = 0. Using representative 1010 (since 10≡4(mod6)10 \equiv 4 \pmod 6, as 10−4=610-4=6): F(10)=0F(10)=0. Using representative −8-8 (since −8−4=−12=6⋅(−2)-8-4=-12=6\cdot(-2)): F(−8)=0F(-8) = 0. All three representatives of the same class [4]6[4]_6 give the same output 00, exactly as the theorem guarantees. Contrast — what would fail. Suppose instead we tried G(n)=n  4G(n) = n \bmod 4 and asked whether g([n]6):=n  4g([n]_6) := n \bmod 4 is well-defined on Z/≡6\mathbb{Z}/{\equiv_6}. Test representative 22 of the class [2]6[2]_6: G(2)=2G(2) = 2. Test representative 88 (since 8−2=68 - 2 = 6, so 8∼28 \sim 2): G(8)=8  4=0G(8) = 8 \bmod 4 = 0. We get 2≠02 \neq 0 from two representatives of the same class [2]6[2]_6, so gg is not well-defined — this is exactly the failure the next block explores formally.

Counterexample

CounterexampleDropping the compatibility hypothesis breaks well-definedness

The Well-definedness Criterion requires a∼a′  ⟹  F(a)=F(a′)a \sim a' \implies F(a) = F(a') for all a,a′a, a', not just for some pairs. If we drop this hypothesis — i.e. attempt to define f([a]):=F(a)f([a]) := F(a) for an FF that is not compatible with ∼\sim — the resulting "rule" fails to be a function at all. Concretely, let A=ZA = \mathbb{Z} and let ∼\sim be congruence mod 66, as in Example 2. Let B={0,1,2,3}B = \{0,1,2,3\} and define F ⁣:Z→BF\colon \mathbb{Z} \to B by F(n)=n  4F(n) = n \bmod 4 (ordinary remainder on division by 44). Consider the class c=[2]6={…,−10,−4,2,8,14,… }∈Z/≡6c = [2]_6 = \{\dots, -10, -4, 2, 8, 14, \dots\} \in \mathbb{Z}/{\equiv_6}. We attempt to compute f(c):=F(a)f(c) := F(a) for a representative aa of cc:

  • Using a=2a = 2: F(2)=2F(2) = 2.
  • Using a=8a = 8 (note 8∼28 \sim 2 since 8−2=68 - 2 = 6): F(8)=8−2⋅4=0F(8) = 8 - 2\cdot4 = 0.
  • Using a=−4a = -4 (note −4∼2-4 \sim 2 since 2−(−4)=62-(-4) = 6): F(−4)=0F(-4) = 0 (since −4=−1⋅4+0-4 = -1\cdot 4 + 0).

So representative 22 gives output 22, while representatives 88 and −4-4 give output 00. The "rule" f(c)=F(a)f(c) = F(a) assigns two different values, 22 and 00, to the single input c=[2]6∈Z/≡6c = [2]_6 \in \mathbb{Z}/{\equiv_6}. This violates the defining requirement of a function — that each input have exactly one output — so no function ff with f([n]6)=n  4f([n]_6) = n\bmod 4 exists. The root cause is visible directly: FF fails the compatibility hypothesis, since 2∼682 \sim_6 8 (as 6∣8−26\mid 8-2) but F(2)=2≠0=F(8)F(2) = 2 \neq 0 = F(8). This single failure of compatibility is enough to destroy well-definedness entirely — the criterion is an "if and only if," so any violation for even one pair of ∼\sim-related elements produces a genuine contradiction with functionhood, not merely an inconvenience. This is precisely why, in the theory of Z/nZ\mathbb{Z}/n\mathbb{Z}, one may define addition and multiplication mod nn, but a rule like "n  4n \bmod 4" only descends to Z/6Z\mathbb{Z}/6\mathbb{Z} when 4∣64 \mid 6 — which fails here, and the failure is exactly what breaks the construction.

Scope, edge cases & common traps

SituationWhat to checkCommon error
Defining f([a]):=F(a)f([a]):=F(a) for one-variable FFa∼a′⇒F(a)=F(a′)a\sim a' \Rightarrow F(a)=F(a') for all pairsChecking only one or two sample representatives, not a universally quantified statement
Defining an operation [a]∗[b]:=[F(a,b)][a]*[b] := [F(a,b)]Independence under changing aa and independence under changing bb (often two separate checks)Verifying only one coordinate and assuming symmetry handles the other
A/∼A/\sim is finite (e.g. Z/nZ\mathbb{Z}/n\mathbb{Z})Same universal compatibility condition; finiteness gives no shortcutBelieving "checking a few cases" ever substitutes for the general argument
Relation is only reflexive+symmetric (not transitive)The Fundamental Theorem's disjointness argument needs transitivityCalling classes "equivalence classes" for a non-transitive relation, then applying the theorem anyway
FF happens to be injectiveInjectivity of FF says nothing about compatibility with ∼\simAssuming an injective FF is automatically well-defined on A/∼A/\sim

The mathematician behind it

Origins · 1 minRichard Dedekind and how this was discovered
RD
Richard Dedekind
1831–1916 · Foundations of arithmetic and algebraic number theory, University of Göttingen and Braunschweig

Dedekind was among the first to treat "sameness up to an equivalence" as a rigorous algebraic tool rather than an informal convenience. His construction of ideals in rings of algebraic integers — and his method of Dedekind cuts for constructing the real numbers from the rationals — both hinge on the idea of collecting equivalent or compatible objects into a single new object and then verifying that arithmetic operations descend correctly to these new objects. This is exactly the well-definedness pattern formalized in this article, applied by Dedekind decades before the general set-theoretic language of equivalence relations and quotient sets was codified.

History
- 1858 — Dedekind develops the cut construction of the real numbers, an early quotient-like device separating rationals into compatible classes.
- 1871 — Dedekind introduces ideals in rings of algebraic integers, treating classes of elements as new algebraic objects with well-defined operations.
- 1888 — Dedekind's Was sind und was sollen die Zahlen? gives an early rigorous treatment of equivalence and abstraction in the foundations of number.
- 1895 — Georg Cantor's set-theoretic papers make the general notion of a set of equivalence classes an explicit, freestanding object of study.
- 1930s — Modern algebra texts (van der Waerden, following Emmy Noether and Emil Artin) formalize quotient groups, quotient rings, and the general well-definedness check as standard technique.
What exactly is the difference between an equivalence class and the quotient set?

An equivalence class [a][a] is a subset of AA: the set of all elements equivalent to aa. The quotient set A/∼A/\sim is a set of such subsets — one element for each distinct equivalence class. So if A={1,2,3,4}A = \{1,2,3,4\} and ∼\sim groups {1,3}\{1,3\} and {2,4}\{2,4\}, then [1]={1,3}[1] = \{1,3\} is a subset of AA with two elements, while A/∼={{1,3},{2,4}}A/\sim = \{\{1,3\},\{2,4\}\} is a two-element set whose elements are themselves sets. This distinction — class as subset, quotient as set-of-subsets — is exactly why A/∼⊆P(A)A/\sim \subseteq \mathcal{P}(A).

Do I always need to check well-definedness "by hand" using the criterion?

Yes, in the sense that the criterion is what the check reduces to, though in practice you streamline the algebra. Whenever you define a function or operation on a quotient by choosing representatives and computing with them, you must verify that swapping any representative for an equivalent one leaves the output unchanged. There is no shortcut around this for a genuinely new construction; what varies from example to example is how much algebra the verification requires, not whether the verification is logically necessary.

Can well-definedness fail in only "some" cases but not others?

No — well-definedness is an all-or-nothing property of the pair (F,∼)(F,\sim): either the universally quantified statement "a∼a′⇒F(a)=F(a′)a\sim a' \Rightarrow F(a)=F(a')" holds for every pair, or it fails for at least one pair. If it fails for even a single pair, then, as the counterexample shows, the proposed rule assigns two different values to one class, so it isn't a function at all on the quotient. There's no notion of "mostly well-defined."

How does this connect to functions being a special kind of relation?

A function f ⁣:X→Yf\colon X \to Y is often defined as a relation R⊆X×YR \subseteq X \times Y satisfying: for every x∈Xx\in X there is exactly one yy with (x,y)∈R(x,y) \in R. The well-definedness check is precisely verifying this "exactly one" clause when the proposed relation is {([a],F(a)):a∈A}\{([a], F(a)) : a \in A\} on A/∼×BA/\sim \times B: existence of an output is automatic (every class has a representative), and the real content is uniqueness — that no class gets sent to two different outputs. This ties the quotient-set discussion directly to the general treatment of Functions as Special Relations.

Is the quotient map q ⁣:A→A/∼q\colon A \to A/\sim itself an example of this construction?

Yes, trivially and instructively: take B=A/∼B = A/\sim and F=qF = q itself, i.e. F(a)=[a]F(a) = [a]. Compatibility is immediate — if a∼a′a \sim a' then [a]=[a′][a]=[a'] by the Fundamental Theorem, so F(a)=F(a′)F(a)=F(a') holds automatically. This shows the quotient map is always well-defined "for free," which is exactly why every quotient construction begins by taking qq for granted before worrying about any further structure (like addition) defined on top of it.

What if ∼\sim is not an equivalence relation, just reflexive and symmetric?

Then A/∼A/\sim as we've defined it may fail to be a partition, because the disjointness argument in the Fundamental Theorem genuinely used transitivity. Concretely, on A={1,2,3}A=\{1,2,3\}, let 1∼21\sim2, 2∼32\sim3, but not 1∼31\sim3 (plus reflexivity and symmetry). Then [1]={1,2}[1]=\{1,2\} and [3]={2,3}[3]=\{2,3\} overlap in 22 without being equal, so the "classes" are not pairwise disjoint, and the resulting collection is not a partition. The entire theory in this article requires genuine equivalence relations.

Why does this matter for cryptographic or computational systems that use modular arithmetic?

Systems built on Z/nZ\mathbb{Z}/n\mathbb{Z} (like RSA) represent numbers by one integer among infinitely many congruent choices, and every operation — modular multiplication, exponentiation, inversion — must be proven independent of which representative integer was used internally. This is exactly the Well-definedness Criterion applied to FF's built from ordinary integer arithmetic composed with reduction mod nn; without this guarantee, the same abstract residue class could be computed to different "answers" depending on implementation details, which would make the cryptosystem's correctness proofs meaningless.

Before this

Where this leads