Invulnerable Incomplete Preferences: A Formal Statement — LessWrong