The transitive set of hereditarily countable sets satisfies every ZFC axiom except the Axiom of power set. For internal definable functions on a countable domain, ambient Axiom schema of replacement gives a countable range of hereditarily countable sets, which belongs to the structure by countable-subset closure. The same closure proves axiom schema of collection and retains countable choice-function graphs. All subsets of are elements, but their uncountable full power set is not an element, so Power Set fails.
Forcing constructs new first-order models while controlling which ground-model properties survive. Fix a ground model and a partially ordered set , writing when is the stronger condition. A generic filter is upward closed, directed towards stronger conditions, and meets every ground-model dense subset of a forcing order. If is externally a countable transitive model, enumerate its dense subsets and successively choose stronger conditions in them. The resulting filter is -generic. External countability is crucial: this is not a claim that the ground model regards its own universe as countable.
A forcing name is built recursively from pairs of earlier names and conditions. For a generic filter , its evaluation of a forcing name is
The canonical forcing name evaluates to , so . Recursive evaluation also proves transitivity. Name ranks bound the ranks of their evaluations, so an ordinal in the extension is below some ground ordinal and is already a ground ordinal. Thus forcing preserves ordinals.
The central link between syntax and generic interpretation is the forcing theorem. The relation is definable in the ground model, and the forcing truth lemma says
For an atomic membership assertion, densely many refinements must witness equality with a member-name whose associated condition is compatible with the refinement. Equality is obtained by recursive mutual inclusion of names. For negation, means no stronger condition forces ; for an existential quantification, witnesses must be obtainable densely below . Induction on name rank establishes the atomic clauses, and induction on formulas establishes definability and the truth lemma. The generic filter meets the relevant dense sets at the existential step. An arbitrary semantic assertion about one chosen generic filter is insufficient: the definable relation must work uniformly for all generic interpretations.
This explains preservation of ZFC. Extensionality and foundation follow from transitivity; canonical names supply infinity. Pair and union names give pairing and union. For separation, restrict a name's members to conditions forcing the defining formula. For replacement, the definable forcing relation lets ground axiom schema of collection bound a set of names for all possible witnesses to the unique outputs; evaluating their collected name gives the range. For power set, let name the given set and let be the set of its member-names. Every subset of has an equivalent name drawn from , by the truth lemma, so a ground set of candidate names collects all its subsets. Finally choose a ground well-order of the relevant names; its evaluated image surjects onto the desired set, and choosing the first name for each value well-orders that set. This is why ordinary forcing over a choice model preserves choice.
For a concrete example, Cohen forcing consists of finite partial functions , ordered by extension. The generic union is total because deciding each coordinate is dense. For every ground real , the set of conditions disagreeing with somewhere is dense, so . This construction changes the universe by adding a genuinely new real without changing its ordinals.
The size and compatibility of conditions determine what else changes. With the countable chain condition for forcing, an ordinal-valued name has only countably many possible values at each coordinate: take a maximal antichain deciding that value. Therefore the possible range of a name for a map with infinite ground domain of cardinality lies in a ground set of size at most . This prevents cardinal collapse and changes of uncountable regular cofinalities. Forcing by finite partial functions is ccc: the delta-system lemma thins any uncountable family of finite domains to a delta-system, and a further thinning makes their values agree on its finite root. Two remaining conditions are compatible. Distinct coordinates add distinct reals.
For example, start with GCH and take . This forcing has size and adds distinct reals. A nice name for a real uses countably many antichains, and each antichain is countable. The ground arithmetic bounds the number of such names by . Hence
giving a relative-consistency example of the failure of CH. The ground choice of GCH is available through the constructible universe; no claim that every starting model has this arithmetic is needed.
By contrast, countably closed forcing adds no new countable sequences of ground ordinals. Given a name, recursively strengthen a condition to decide each coordinate, then take a lower bound of the descending sequence. That condition decides the entire sequence. Closure and chain conditions thus control different features; neither should be silently substituted for the other.
Further applications include changing cofinalities, adding branches through trees, and constructing prescribed continuum patterns. If the aim is to violate choice, an ordinary generic extension of a choice model will not do: one restricts to a suitable symmetric collection of names, checking the axioms again. These examples also mark a limitation: forcing proves relative consistency, not absolute consistency of the background theory. The countable-transitive-model picture gives a concrete semantic construction; the definable forcing relation and Boolean-valued formulation supply the corresponding formal consistency arguments without asserting that a transitive ground model can be proved to exist.
Here “constructive ZF” is understood as full intuitionistic Zermelo–Fraenkel set theory, with power set, full separation, collection and set induction. It is not the predicative theory CZF with restricted separation and subset collection. We construct a negative inner interpretation of classical ZF. Its classical logic belongs to the interpreted universe, not to the ambient intuitionistic universe. A bare double-negation of the ordinary set axioms does not by itself solve the extensionality and power-set difficulties.
Work inside IZF. Let and regard subsets of as truth values. For , put . Define the double-negation Boolean algebra
Meets are intersections, joins are of unions, and complement is . Arbitrary intersections of stable predicates are stable. The laws and give complementation, and distributing a stable conjunction through a regularized disjunction gives distributivity. Thus is a complete Boolean algebra, constructively. In particular , even when their ordinary union is not known to be .
Construct a class of Boolean-valued names. A name has a set of immediate subnames and a coefficient in on each; the subname relation is inductively well-founded. More concretely, take set-sized rooted-tree codes with Boolean labels on their edges, requiring that every progressive subset of their nodes contains every node. A subset is progressive when containing all children of a node implies containing that node. This set-quantified condition is definable using power set and supplies induction for each formula by separation. On these trees recursively code each root by the function assigning its children's coded names their edge coefficients; repeated equal codes can be combined by joining their coefficients. The class of these codes is definable by the existence of such a well-founded construction tree. Every set-indexed family of names with coefficients produces another name by adjoining a new root. Collection gathers a set of construction trees witnessing the given subnames, and gluing all these witnesses under the new root avoids choosing one witness tree for each subname; repetitions have identical codes and coefficients. Well-founded recursion on these trees collects compatible partial evaluations by collection; uniqueness identifies all overlapping evaluations, so no selection of witnesses is required. Double induction gives the corresponding recursion on pairs of trees. This avoids assuming a classical linear ordering of all constructive ordinals.
For names , define valued membership and equality simultaneously:
Here . Each recursive call replaces at least one argument by an immediate subname, so well-founded double recursion applies. Induction proves reflexivity, symmetry and transitivity of valued equality and its substitution laws. For example the diagonal term in the membership join gives , establishing reflexivity; expanding joins and using distributivity gives transitivity and substitution at the next step.
Interpret logical connectives by the Boolean operations, and quantifiers by meets and joins over names. Although is a class, the values being joined form a subset of the set : for each fixed formula, full separation forms . This defines each fixed formula's truth value inductively. It does not give a uniform truth predicate for all formulas of the ambient universe. Substitution and the complete Boolean algebra laws verify the classical logical rules, including excluded middle. We now verify the set axioms with explicit names.
The empty-domain name is empty. The name with domain and coefficient on both is a pair, since its membership value is . For union of , use domain , with coefficient at equal to , taking missing coefficients to be zero. The membership definition distributes to the required existential membership condition. Extensionality follows from the definition of valued equality: agreeing on the membership value of every name in particular implies both displayed inclusion conditions.
For separation, keep the domain of and replace its coefficient at by . Substitution makes membership in the resulting name equal to . For power set, write . Every function gives a name with coefficients . The functions form the set , so collect all as a domain with coefficient . Each is a valued subset of . Conversely, for an arbitrary name , put . If , the membership and substitution formulas give
Thus, to the full extent that is a subset of , it belongs to the constructed power-set name. This proves the full power-set axiom without treating every external subset of a name as an internal subset.
The subtle point is collection for Boolean-valued names. For a fixed formula form by full separation the set
Every pair in has a witness name. The ambient axiom schema of collection supplies a set of witness names covering all these pairs; separation discards any non-name elements. Make a name with domain and all coefficients . For each , every value occurring with an arbitrary name is itself a permissible in . Its collected witness has value at least . Hence
If , this inequality says is covered by the witnesses in for every . The bounded universal truth formula therefore gives . This is exactly the collection axiom's implication at value . It also yields replacement under a uniqueness hypothesis. We collected all Boolean portions of the existential truth; no choice of a single top-valued witness was assumed.
For infinity, form the canonical names recursively, with domain and coefficients , and the name with all in its domain. It is inductive. For set induction, let be the value of . Induction on the construction of a name , using the bounded universal formula, gives from the same inequalities for all its subnames. Consequently . Thus set induction has value , and classical logic in the interpreted universe converts it to the usual foundation axiom.
We have proved all axioms of classical ZF in the Boolean-valued inner universe over intuitionistic set theory, with bottom distinct from top. Any finite classical proof of contradiction would translate, instance by instance, to an intuitionistic proof that in , an ambient contradiction. Therefore
Conversely classical ZF proves the intuitionistic set axioms and allows their logical rules, so the consistency strengths agree. This is a proof-translation argument, not an assertion that IZF proves its own consistency. The valued construction is an inner interpretation of the same negative-model kind as the stable-set approach. Closing arbitrary sets under the unbounded predicate would require an additional double-complement axiom; the bounded truth-value construction above avoids that assumption. The distinction is discussed in the study of double complement; the treatment of intuitionistic valued models gives the broader semantic setting.
We work in the ambient theory ZFC for this question. Write , using the transitive closure convention that contains and all its membership descendants.
First construct a set containing exactly the intended objects. If is a countable set, apply well-founded induction to membership on this transitive set. If all members of have countable set-theoretic rank, then
Indeed is countable, and a countable union of countable sets is countable in ZFC. The induction therefore gives . The collection
is now a genuine set by the axiom schema of separation inside the cumulative hierarchy level , and it contains every hereditarily countable set. It is a transitive set, since implies .
If is a countable subset of , then
The right side is countable, so . Thus has countable-subset closure. This proves existence of a set with the required closure before taking any intersection.
To make the least-set argument precise, form the nonempty set
It is a subset of and contains . Its intersection is also closed: a countable subset of is a countable subset of every and therefore belongs to each such . For any set with the prescribed closure, , whence . This is leastness among all such sets, not just among subsets of .
Finally, well-founded induction on shows for every such : when all members of are in , the countable set is a countable subset of , so . Hence , proving that the definition gives precisely
For the cardinal bound, code the entire countable membership ancestry. A code is a triple , where , is a well-founded relation and an extensional relation, and is distinguished. There are at most such codes: and are coded by subsets of countable sets, and a Cantor pairing function with finitely many tags codes the triple as a subset of .
The well-founded recursion
defines its collapse, as in the Mostowski collapse theorem. The range is countable and transitive; thus each decoded belongs to . Conversely, for , choose a bijection and the point with . Set exactly when . Transitivity of makes this relation extensional, and Axiom of foundation makes it well-founded. The recursion then gives , so this code decodes to .
We have a surjection from a set of at most continuum many codes onto . Using the permitted axiom of choice, well-order the codes and assign each its least code; this is an injection. In fact every subset of is hereditarily countable, giving the reverse bound as well:
Every member has rank below , while every countable ordinal belongs to and has rank . Consequently
The axioms hold except Power Set. axiom of extensionality and Axiom of foundation are inherited by this transitive structure. The empty set and belong to it, giving the empty-set axiom and the axiom of infinity. The axiom of pairing follows from countable-subset closure. For , is a countable subset of , giving the Axiom of union. Any subset of is countable and lies in , so the axiom schema of separation holds for all formulas interpreted in .
For the Axiom schema of replacement, let a formula interpreted in assign a unique to each . Relativize that formula to the set and use the ambient Axiom schema of replacement to collect its range. The range is countable and consists of members of , hence belongs to . The same argument, selecting one witness for each member of the countable domain, proves axiom schema of collection. An ambient choice function on a family has a countable graph of ordered pairs of hereditarily countable sets. Each such pair is in , and countable-subset closure puts the graph in , proving the internal axiom of choice.
However, all external subsets of are elements of . An internal power set of would therefore have to be the full external , by transitivity and absoluteness of subset membership. That is uncountable by Cantor's theorem, whereas every member of is countable. Thus the axioms satisfied by hereditarily countable sets are
Here the asserted axiom list includes both Axiom schema of replacement and axiom schema of collection; no equivalence relying on Power Set is being silently invoked.