Ehrenfeucht-Mostowski theorem Created 2026-09-28 Updated 2026-10-05
Let be an infinite first-order structure and a total order. After choosing a Skolem expansion of , an elementary extension contains distinct elements forming an order-indiscernible sequence in that expanded language. Their Skolem hull is an elementary substructure in the expanded language, and its reduct is a first-order model of . Every order automorphism of extends uniquely to a structure automorphism of the hull preserving the chosen Skolem expansion, by transporting terms in the generators.
Uniqueness need not hold among all structure automorphisms of the reduct. For an infinite structure in the pure logical equality language, take two distinct nullary Skolem function values in the hull. For an infinite order-indiscernible sequence, neither can equal a generator: the expanded formula would otherwise hold at every generator, contradicting their distinctness. Swapping fixes every generator and preserves the pure logical equality reduct, while failing to preserve the Skolem expansion. Thus the identity order automorphism already has two extensions in that reduct.
Elementarity 2026-10-14
Preservation of all first-order formulas with parameters by an embedding. For an inclusion of structures this is the condition for an elementary substructure.
Inside the constructible universe, every hereditarily countable set appears in a countable level of the constructible hierarchy. Take a countable elementary substructure of a sufficiently large containing its transitive closure pointwise. The condensation lemma for the constructible universe identifies the collapse with for countable , and the collapse fixes the original set. Conversely, a countable-indexed level is countable inside the constructible universe.
Keisler extension property Created 2026-09-28 Updated 2026-10-06
An inaccessible cardinal has the Keisler extension property when there is a proper transitive set for which
Such a is not the least inaccessible cardinal: regards as inaccessible, elementarity reflects the existence of an inaccessible into , and strong-inaccessibility absoluteness from rank agreement makes the resulting witness genuinely inaccessible below .
A worldly cardinal permits a countable transitive model of ZFC and a transitive model of ZFC with , , and . First collapse a countable elementary substructure of . Then collapse an -sized Skolem hull containing every countable ordinal and every member of , as well as itself. The transitive collapse fixes transitive subsets lemma preserves and those ordinals.
Let be all universal sentences true in . The theory is consistent. Indeed, if a finite conjunction of sentences from were inconsistent with , then . A finite conjunction of universal sentences is universal, so its negation is equivalent to an existential sentence. By the hypothesis would satisfy , whereas it satisfies .
Choose . Now expand the language by names for every element of and consider its elementary diagram . Its universal consequences in the original language are exactly : any such consequence is true in the named copy of , while any original-language sentence true in already belongs to its elementary diagram. Part (b), applied to and this expanded theory, gives a structure embedding of into a model of . The named copy of is an elementary substructure of . Identifying that copy with , we obtain
Thus the required target is an elementary extension of , although itself need not be a model of .
Here a monochromatic set must mean an infinite homogeneous set for a colouring: every singleton is a finite monochromatic set. The requested phenomenon holds for every finite . For it is impossible, since the colour classes of a finite computable colouring are computable and at least one is infinite. We treat this necessary qualification explicitly.
We construct a finite-injury computable colouring of pairs with no infinite computably enumerable homogeneous set, which is stronger than the requested absence of a recursive one. Enumerate the computably enumerable sets as , with computable finite approximations . Requirement seeks distinct markers . At stage , consider indices not currently assigned markers. Choose the least one, if any, for which has two elements outside all markers of higher-priority indices . Assign two such elements as its markers, using a fixed least-element rule, and cancel all markers at lower-priority indices. Do nothing if no such index exists. The active markers are therefore pairwise distinct at every stage.
For , simulate this finite construction through stage and define
In particular every active first marker has colour zero against larger points. This is a total computable function: no question about eventual enumeration or eventual stabilization is used in computing a given pair.
Induction on proves finite injury. Once the finitely many higher requirements have stabilized, requirement is never cancelled again. If it has markers they stay fixed. If is infinite, it eventually supplies two points outside the finite collection of higher markers, so it becomes eligible and is assigned markers; only finitely many higher indices could delay its assignment. Thus an infinite eventually has permanent distinct markers . Choose beyond both markers and beyond their stabilization stage. Then
So is not homogeneous. Every infinite recursive set is computably enumerable, proving the desired obstruction. For , colour an increasing -tuple by the pair formed by its first two elements. Every pair from an infinite homogeneous candidate can be completed by larger members of that candidate, so it would give an infinite pair-homogeneous set, already ruled out.
The uncountable positive theorem is the Erdős-Rado theorem for finite arities. For every infinite cardinal and finite , define and . Then
The partition relation means that every colouring of -element subsets of the left-hand cardinal by at most colours has a homogeneous subset of size . In particular, taking gives an uncountable homogeneous set for every finite arity, once the domain is sufficiently large.
We prove the end-homogeneity lemma needed for induction. Let be infinite, , finite, and with . In a sufficiently large choose an elementary substructure of size containing and all ordinals below , and closed under externally given sequences of length at most . Here consists of sets whose transitive closures have size below .
To justify that closure, begin with a hull containing the indicated parameters and ordinals. At each successor stage add every sequence of length at most from the preceding stage, then take a Skolem hull. There are at most such sequences. Iterate for stages and take elementary unions at limits. The union still has size , and every sequence of at most of its elements is contained in one earlier stage by regularity of , so appears at the next. This proves the claimed closed first-order model rather than assuming its existence.
Let . The inequality uses regularity of and ; has no largest element, since it is closed under successor. Recursively choose increasing for , imposing, for every -tuple of earlier points,
At any stage there are at most earlier points and constraints. Each constraint consists of a tuple of elements of and a colour below , also in . The entire constraint code therefore belongs to by closure. The bound above the previous points belongs to as well. Although itself need not belong to , it witnesses in the existence of a point above that bound satisfying the coded constraints. Elementarity supplies such a point inside . This proves the recursion.
On the resulting sequence of length , the colour of an -tuple depends only on its first entries: its last entry has the same colour contribution as . This is the required closed elementary-submodel construction of an end-homogeneous sequence.
Now prove the theorem by induction on . The case is the infinite pigeonhole principle: partitioning into at most classes of size at most cannot cover it. For , set and apply the lemma to the colouring on . Define a colouring of -tuples from its end-homogeneous sequence of length by their colour when completed with . The induction hypothesis supplies a subset of size on which this derived colouring is constant. Every original -tuple from that subset has the derived colour of its first entries, and is therefore monochromatic. This completes the proof.
The unrestricted infinite-exponent situation is very different under AC. On , choose one representative of each equivalence class modulo finite symmetric difference, and colour by
If is infinite and , deleting remains in the same equivalence class and flips the colour. Every infinite candidate homogeneous set contains such an and as subsets, so
More generally the same argument works for subsets of any fixed infinite cardinality: deleting one element preserves that cardinality, so there is no unrestricted analogue with a homogeneous set large enough to contain such subsets. For the order-type- convention, choose in increasing order type and delete its first element; both sets still have that order type. Thus the distinction from the finite-arity theorem is genuine, not merely a notational ambiguity. This argument uses choice of representatives and is not a claim about every definability-restricted infinite-arity colouring.
Let be the finite approximation to the halting problem obtained by running the first programs for steps, so and is not computable. For , define the recursive triple colouring with no computable infinite homogeneous set by
This is a total computable function. Here homogeneous sets are required to be infinite: finite homogeneous sets certainly exist. An infinite homogeneous cannot have colour one. Fix ; the finite approximation below eventually stabilizes, so two sufficiently large in give colour zero. If has colour zero, choose in with . For arbitrarily large , homogeneity gives , and hence . Thus computes membership of in . A computable infinite would make the halting problem computable, a contradiction.
For the uncountable partition relation, the Erdős-Rado theorem for finite arities states that for every infinite cardinal and integer ,
The case is the pigeonhole principle: a union of sets of size at most cannot have size . Suppose the assertion holds for . Put and , and let . We give the closed elementary-submodel construction of an end-homogeneous sequence, which avoids intersecting a decreasing family of reservoirs at a limit stage.
Take a sufficiently large regular and an elementary substructure with , containing and all ordinals below , and closed under sequences of length at most . Such an is obtained by successive Skolem hull closures: , and the regularity of puts any at-most--long sequence from the union inside one stage. Put . The set has no greatest element, since taking an ordinal successor is definable in , so .
Recursively choose an increasing sequence in . At stage , its earlier set has size at most , and the colour table on has size at most . Both and this table belong to by its closure. The set
belongs to and is nonempty because it contains . Elementarity supplies . Consequently the colour of each -tuple from the resulting sequence depends only on its first entries. The induction hypothesis applied to these entries gives a homogeneous subsequence of size , proving the result.
Infinite exponents behave differently with the axiom of choice. On the countably infinite subsets of any infinite cardinal , choose a representative of each equivalence class modulo finite symmetric difference. Colour a set by the parity of . Removing one point flips its colour. Every infinite proposed homogeneous set contains an increasing sequence of order type , and that sequence and its tail have opposite colours. Thus the finite-symmetric-difference colouring of infinite subsets gives , whether the domain consists of all countably infinite subsets or only those of order type . There is no unrestricted infinite-arity counterpart to the displayed finite-arity theorem in ZFC.
We prove the Ehrenfeucht-Mostowski theorem by ultraproducts, with no application of Ramsey theorem. Expand the infinite structure by Skolem functions, choose distinct elements , and choose a nonprincipal ultrafilter on . Let be the desired total index order and put .
For every finite ordered subset , define an ultrafilter on by the ordered Fubini product of ultrafilters: a set belongs to exactly when
Here means , with the quantifiers nested in the displayed order. The resulting collection is an ultrafilter, by induction using the ultrafilter laws for negation and conjunction. For , the inverse image of under coordinate projection belongs to exactly when : quantifiers on unused coordinates leave a truth value unchanged.
Consequently there is a well-defined ultrafilter on the Boolean algebra of finite-coordinate cylinders in , declaring a cylinder large by this test. Coherence proves finite intersection closure and ensures that the empty cylinder is not large. Extend its generated filter to an ultrafilter on all subsets of . Form the ultrapower , and for let be the class of .
If , the coordinate equality test belongs to no corresponding two-coordinate product ultrafilter: for every value of the outer coordinate, the inner equality set is a singleton, excluded by nonprincipality. Hence the are distinct. For any first-order formula and any , the Łoś theorem gives
The right side is independent of the actual increasing index tuple, so the form an order-indiscernible sequence. Constant functions embed elementarily into . Take the Skolem hull of the generators. The Tarski-Vaught test gives an elementary substructure, and transporting terms along an index-order automorphism gives a well-defined automorphism of the hull, with inverse obtained by transporting along the inverse index automorphism. Equality of term representations is preserved by indiscernibility. This is the indiscernible and automorphism conclusion of Ehrenfeucht–Mostowski, obtained entirely from ultrafilters and Łoś's theorem. The ordered Fubini products need not be symmetric; order indiscernibility is exactly what their coherence supplies.
For the Ehrenfeucht-Mostowski theorem, start with an infinite structure and a total order . Choose a Skolem expansion , and adjoin constants for . Require the elementary diagram of , distinctness of these new constants, and the order-indiscernible sequence schema: any two increasing tuples of the of the same length satisfy the same first-order formulas in the expanded language. Every finite fragment mentions finitely many new constants and finitely many first-order formulas. Enumerate a countably infinite subset of . For each of the finitely many first-order formulas, color its increasing tuples by its truth value in , including whatever fixed parameters occur in the fragment. Successive applications of the infinite Ramsey theorem leave an infinite subset homogeneous for all these colorings. Assign the finitely many new constants to distinct elements of this subset in their index order. Their finite indiscernibility requirements and the elementary diagram are then simultaneously satisfied.
The compactness theorem supplies an elementary extension containing the required distinct indiscernibles. Their Skolem hull is an elementary substructure: an existential first-order formula true of its elements has its chosen Skolem-function witness in the hull, so the Tarski-Vaught test applies. Any order automorphism of acts on this hull by
Indiscernibility makes this well defined, since every equality of two term representations is preserved. The same argument preserves every first-order formula; the inverse is given by . Thus it is an automorphism, uniquely determined in the language of the chosen Skolem expansion by its values on the generators. This proves both the indiscernible-model and automorphism forms of the Ehrenfeucht-Mostowski theorem. Uniqueness is not claimed for automorphisms of the reduct which need not preserve the chosen Skolem functions.
For simple typed set theory with atoms, write for the set predicate at sort . Members have sort one lower; urelements have no typed members, extensionality applies to sets, and every well-typed first-order formula defines a set at the next sort. Typical ambiguity adds for each closed sentence, where raises every sort by one. We prove finite satisfiability using Ramsey theorem, rather than assuming that adjacent sorts have the same cardinality.
Let . If , then . For increasing integers , interpret sort by , interpret by the objects of , and interpret adjacent-sort membership by actual membership restricted to these designated sets. All other objects of a sort are typed urelements. Every subset of is a designated set in , so comprehension holds for every first-order formula, including first-order formulas with quantifiers and parameters at other sorts. Two designated sets with the same members are equal, while the other objects have no typed members. Thus this is a full model of the typed axioms for every increasing sequence of levels. The extra preceding level gives a consistent interpretation of the bottom set predicate as well.
Take finitely many ambiguity sentences and let bound their highest sort before raising. Color increasing -tuples by the vector of truth values of these sentences in the corresponding finite sorted structure. There are finitely many colors. The infinite Ramsey theorem supplies an homogeneous set of indices. Choose the level sequence from it. The sentence is evaluated in the window , while is evaluated in the next window ; homogeneity makes their truth values equal. Sentences using fewer sorts simply ignore the unused final levels. Thus every finite family of ambiguity axioms has a model satisfying all the typed axioms. Apply many-sorted first-order compactness theorem to obtain
This is a relative consistency construction in the ordinary set-theoretic metatheory. Allowing urelements is essential here: skipping ranks leaves objects outside the represented power sets, and those objects must be permitted as urelements.
Here an ultralimit in the model-theoretic sense is a model-theoretic ultralimit: start with a first-order structure, take successive ultrapowers along their diagonal elementary embeddings, and take the directed limit of elementary embeddings of that chain. The elementary chain theorem, proved by induction on formulas after identifying the embeddings with inclusions, makes every stage elementary in the limit. This definition concerns structures, rather than the topological ultrafilter limit.
We first prove the needed Frayne embedding lemma. If , every finite subset of the elementary diagram of a structure can be realized in : existentially quantify its finitely many named elements, and use elementary equivalence. Index by finite diagram fragments, choose such realizations, and extend the filter of cones requiring each diagram formula to an ultrafilter. For each , let give its chosen coordinate realizations, filling unspecified coordinates arbitrarily. The Łoś theorem shows that is an elementary embedding of into an ultrapower of . The formulas ensure injectivity.
There is a relative version: if , keep all named elements from constant in every coordinate. Each finite diagram fragment is realizable in over those parameters by elementarity, so the resulting embedding extends the diagonal embedding of into its ultrapower.
Now use alternating ultrapowers give isomorphic ultralimits. First embed into an ultrapower of . Apply the relative lemma to , embedding into an ultrapower of over its diagonal copy. Next embed into an ultrapower of over , and continue. After coherent identifications this gives
Each is an ultrapower of along its diagonal embedding, and each is an ultrapower of likewise. The two subsequences are cofinal in the same chain of elementary substructures, so their limits are the same union. Hence . No isomorphism theorem for single ultrapowers has been assumed.
A model-theoretic ultralimit is the elementary direct limit of a chain of successive ultrapowers along their diagonal embeddings. We will build two such chains with isomorphic limits. This is not a topological ultrafilter limit and does not require the stronger claim that one ultrapower of each structure is already isomorphic.
First prove the Frayne embedding lemma, including the relative form needed to make the diagrams commute. If , expand the language by constants naming every element of , and let be its complete elementary diagram. Index by finite subsets of this diagram. The finitely many constants in can be interpreted in so that holds: existentially quantifying them gives a sentence true in and hence in . Choose such interpretations, and give unused constants an arbitrary fixed value in the nonempty domain of .
For each diagram sentence , its cone has the finite intersection property with the other cones. Extend the generated filter to an ultrafilter . For , let be its chosen interpretation at coordinate . The map
is elementary by Łoś: every formula true of a tuple from , or its negation, is a diagram sentence and holds on its corresponding cone. In particular distinct named elements stay distinct.
If , the construction can keep every constant naming equal to that same at every coordinate. For a finite diagram fragment, existentially quantify just the names outside ; the resulting formula with parameters in is true in , hence true in . Thus the finite realizations still exist with all those old names fixed. Consequently
This relative extension of the diagonal map is the essential strengthening.
Now let . The nonrelative lemma embeds into an ultrapower of . Identify the image with a copy of inside . Since , the relative lemma embeds into an ultrapower of extending its diagonal map. Rename this larger structure so that the displayed copy of is a literal elementary substructure. Next apply the relative lemma over to embed into an ultrapower of fixing its diagonal copy. Continue alternately. We obtain a coherent elementary chain
with as well. Each inclusion is, up to these coherent identifications, the diagonal embedding into its ultrapower; the same holds for . It is the relative clause, not merely the existence of arbitrary elementary embeddings, which guarantees this.
By the elementary chain theorem, the unions of the two subsequences are elementary limits. They are the same structure: each lies in a subsequent , and each lies in . Hence the alternating ultrapowers give isomorphic ultralimits construction proves
Conversely each ultrapower and each elementary direct limit has the same first-order theory as its starting structure. Isomorphic ultralimits therefore imply as well. Thus the conclusion exactly characterizes elementary equivalence at the level of ultralimits.
The printed inclusion-and-elementarity assertion is false if transitivity is required of the same submodel. Take the theorem of ZFC that combines the axiom of infinity and the Axiom of power set. Whenever satisfies this sentence, it contains , every subset of , and their actual power set . A submodel contains and , since these are uniquely definable in . If were transitive, it would contain every element of , contradicting countability by Cantor theorem.
The corrected conclusion uses an elementary embedding rather than elementary inclusion. By Lévy reflection theorem, choose with and with Extensionality true there. The Downward Lowenheim-Skolem theorem says that an infinite structure in a countable language has a countable elementary substructure. Apply it to obtain a countable . The membership relation on is externally well-founded, and elementarity makes it extensional. The Mostowski collapse theorem gives an isomorphism onto a countable transitive set. Hence
Indeed : rank induction gives for every . The crucial correction is that , rather than the inclusion of , is elementary. For a formula with free variables, apply this argument to its universal closure.
Put . Because is inaccessible, for every , and is regular. Choose one witness in for every existential formula of this expanded language and every finite parameter tuple for which a witness exists. These are Skolem functions; they can be chosen in the ambient universe even when is not definable inside .
For each , the ranks of all chosen witnesses with parameters from have supremum below : there are fewer than such parameters and only countably many formulas. Choose strictly above those ranks. The limit closure points
form a club set. At , every existential assertion in with parameters in has a witness in . The Tarski-Vaught test yields
Thus the set of all such elementary levels is unbounded. It is also closed: the union at a limit of increasing elementary levels is an elementary substructure by the elementary chain theorem, and the union of their ranks is with predicate . Therefore
This is club reflection below an inaccessible cardinal.
If is a Mahlo cardinal, its inaccessible ordinals form a stationary set. For any , intersect that set with the club set of elementary levels from club reflection below an inaccessible cardinal. This supplies an inaccessible with the required elementary substructure.
Conversely, take an arbitrary club set and use it as the predicate . In , the sentence asserting that predicate-marked ordinals occur above every ordinal is true. Any inaccessible elementary level therefore satisfies that is unbounded in its ordinals, which are precisely the ordinals below . Since is closed and is a limit ordinal, . The assumed reflection property consequently gives an inaccessible ordinal in every club set. Hence the inaccessible ordinals are stationary and
A suitable relative condensation lemma fixes the base pointwise. Let be a nonzero limit ordinal, and let be an elementary substructure with
Then the Mostowski collapse theorem gives an isomorphism onto a transitive set, and
For the collapse to apply, the restricted membership relation is well-founded because it is actual membership. It is extensional: if two members of differ, an element distinguishing them in can be chosen in by elementary substructure structure. Since is transitive and all its members are in , transfinite induction on their rank of a set shows that fixes every member of , and then .
By the preceding relative constructible level recognition, . Elementary substructure agreement transfers this to , and the collapse isomorphism transfers it to . Thus and for a nonzero limit ordinal .
For the bound, let . The relative constructible hierarchy has ordinal height : at a successor the definable power set adds exactly the previous ordinal height as a new ordinal, and at limits take unions. The order type of is at most , so ; strict increase of ordinal addition in the right argument gives . The requirement is essential to this version: merely having need not make the collapse fix the base.
The Tarski-Vaught test says that is an elementary substructure of if and only if every existential statement true in with parameters from has a witness in that satisfies its matrix in . Explicitly, for every first-order formula and every parameter tuple , require
The truth of the matrix in this test is evaluated in the larger structure . Under this criterion, means that all first-order formulas with parameters from have identical truth values in the two structures.
We construct the two transitive models together, taking care that the later collapse really retains the earlier model. First, a worldly cardinal is greater than : ZFC in contains the full power set , and the axiom of choice there gives a bijection between it and an ordinal . That power set is externally uncountable by Cantor theorem, so . Infinity rules out the finite cardinals and before this argument is applied.
By the Downward Lowenheim-Skolem theorem, choose a countable elementary substructure . Its inherited membership is a well-founded relation, and elementarity transfers extensionality from . Apply the Mostowski collapse theorem to obtain a countable transitive model of ZFC. Because is a countable transitive set, it is a hereditarily countable set and its rank of a set is below . In particular, .
Now take the Skolem hull in of the seed
Call it . The seed has external cardinality and lies inside . The hull is an elementary substructure of with : closure under countably many finitary Skolem functions gives the upper bound, and gives the lower bound. Let be its Mostowski collapse theorem map. Then is a transitive model of ZFC.
The transitive collapse fixes transitive subsets lemma gives for every , since is transitive. Since also , the collapse sends that element to itself. Thus , and transitivity of yields the required inclusion:
This is the construction of nested transitive models from a worldly cardinal; the next two parts verify its size and ordinal requirements.