A syntactically bounded formula in set theory is built from the atomic first-order formulas and using Boolean operations and bounded quantifiers and . These abbreviate and , with different from the bounding variable .
The superscript in the question allows provable equivalence: a ZF-equivalent bounded formula is any first-order formula for which some syntactically bounded formula in set theory satisfies
Thus is the class of first-order formulas equivalent over ZF to a syntactic first-order formula. If a convention uses just for syntactically bounded set-theoretic first-order formulas, it is the smaller syntactic class; the subsequent set-theoretic absoluteness proof works for both conventions.
For parameters , set-theoretic absoluteness means agreement of the two membership first-order structures:
This must hold for every such parameter tuple. Equivalently, formula relativization to a class produces two formulas and whose truth values agree on tuples from . Agreement for parameters only in is not part of the definition. For a proper class in set theory, this notation is understood separately for each fixed first-order formula, rather than as an unrestricted truth predicate for the entire universe.
Use the standard convention that a strongly inaccessible cardinal is uncountable, regular and strong limit. The printed explanatory definition omits uncountability: literally it also admits , for which no finite cardinal is a worldly cardinal. Thus that omission makes the requested conclusion false under the literal abbreviated definition. The proof below applies to the usual, intended strongly inaccessible cardinal convention .
First for every . At successor stages this follows from the strong limit cardinal property, and at limits from the regular cardinal property. Consequently . In particular, for Axiom schema of replacement, a domain has size less than , so its functional image has fewer than elements, so the supremum of the rank of a set over its elements is below by regular cardinal structure. All other axioms, including axiom of choice, have their witnesses at bounded ranks below ; uncountability supplies axiom of infinity.
Enumerate the first-order formulas as . For each finite collection, reflection inside the set structure gives a closed unbounded subset of of agreeing ranks. To see why the witness bounds stay below , there are fewer than parameter tuples at each , and the supremum of their least witness ranks remains below by regular cardinal structure. Closing under these bounds and taking increasing countable limits gives the usual reflection theorem for definable hierarchies argument. The countable intersection of these closed unbounded subsets is still closed unbounded because is regular and uncountable. At each resulting ,
The infinite cardinal numbers below also form a closed unbounded subset: they are unbounded because for infinite , and a supremum of increasing cardinal numbers is a cardinal number. Intersect the two closed unbounded subsets. Every member of the intersection is a worldly cardinal, and an unbounded subset of a regular cardinal has size . Hence
In fact this proves the stronger worldly cardinals below an inaccessible cardinal result that these worldly cardinals contain a closed unbounded subset of .
Use relative constructible level recognition. The finite coding conditions matter here: merely writing “every set is relatively constructible” inside an arbitrary transitive set does not ensure that its computations are correct.
Let be a single finite conjunction expressing finite relation closure for set-theoretic coding. Concretely require the empty set, pairing, set union, set difference, Cartesian products, and the following uniform relation operations: for each finite ordinal and each set , the set of finite tuples exists; relations on these tuple domains can be complemented, intersected, projected along a coordinate and pulled back along finite coordinate maps; the equality and membership relations restricted to exist. These are finitely many first-order closure assertions with quantified, not an axiom schema. Each operation is specified by its usual elementwise membership equivalence. Transitivity makes the operations correct externally. Finite tuple domains are also correct: every individual finite tuple is already present by pairing and union.
These conditions make satisfaction for a set structure absolute. For a fixed coded first-order formula, compute its truth relations on by induction: equality and membership give the atomic cases, relative complement gives negation, intersection gives logical conjunction, and projection gives existential quantification. All required truth tables exist by and agree with the actual ones. Thus the first-order assertion is absolute whenever belong to a transitive structure satisfying : require that each member of has such a finite formula-and-parameter definition, and that each coded definition contributes a member of . Codes are finite objects; no truth predicate for the ambient universe is being used.
Write for the coded relative constructible stage assertion: is an ordinal and there is a function with domain , with , , at nonzero limit ordinals, and . Under , any such internal code is correct by transfinite induction. Restrictions of a code to shorter domains exist by the relation operations. Define the one-free-variable first-order formula
All displayed abbreviations expand into first-order formulas of the membership language.
Suppose is transitive, , and . Let be the externally defined set of indices of stage codes in . It contains , is downward closed by restricting codes, and has no largest member by the last conjunct. Thus is a nonzero limit ordinal . Correctness of stage codes gives for , hence by transitivity. Conversely the exhaustion conjunct puts every in some such level. Therefore
For the converse, every with nonzero limit satisfies : each listed operation on parameters from one level is definable at finitely many later levels, still below . Moreover stage histories appear below every limit constructible level. Here is the essential limit step of that lemma. If the histories for are available in , the correct predicate defines their graph of endpoints as a subset of . No endpoint with can belong to , because would then give , contradicting Axiom of foundation. The defined graph therefore has domain exactly . Adjoining its final pair takes finitely many more stages. Together with finite successor extensions, this proves by transfinite induction that every belongs to for some finite .
Thus all histories for belong to . Exhaustion follows from continuity, and supplies a larger represented stage. Hence , proving both directions without assuming ZF for the arbitrary input structure .
Fix the base convention . For a transitive set , the relative constructible hierarchy is
Here the definable power set is
The satisfaction for a set structure in this definition is a definable set-theoretic relation, obtained by finite syntax coding and recursion on a first-order formula. The transfinite recursion therefore defines a class in ZF.
Each level is a transitive set. For transitive , every is a subset of definable using the parameter , so ; also using the always-true first-order formula. Thus the levels increase and . Starting instead with is another common indexing convention, but it is not the convention used here. The relative universe need not satisfy axiom of choice: arbitrary need not have an internally available well-order.
A definable continuous hierarchy is a definable class function on the ordinals, with set-valued levels, such that for and
for nonzero limit ordinals. Its union is a definable class in set theory . Often the definition additionally requires every level to be a transitive set; the following statement also works without that requirement.
The reflection theorem for definable hierarchies says that for any finite collection of first-order formulas, there is a closed unbounded class of ordinals such that, for every and every parameter tuple from ,
A useful justification is the witness-closure proof. Close under subformulas. At each level and for each existential subformula, bound the least level containing a witness for each parameter tuple for which a witness exists in . Axiom schema of replacement bounds these indices. Iterating the finitely many bounds through produces a limit level containing all required witnesses. Induction on the first-order formulas, equivalently the finite-formula version of the Tarski-Vaught test, yields agreement. Continuity gives closedness of the reflecting class, and starting above any prescribed ordinal gives unboundedness. This is finite reflection, not a claim that all first-order formulas reflect simultaneously in an arbitrary hierarchy.
Use standard notation for forcing: means that is stronger. A generic filter is nonempty, upward closed and downward directed, and meets every dense subset of a forcing order in the ground model. Names below are forcing names in , with pairs ordered as .
The semantic forcing relation is
Here is the evaluation of a forcing name. Countability of supplies such generic filters through every condition by the Rasiowa–Sikorski lemma.
Define the syntactic forcing relation by mutual well-founded recursion on the forcing names for the atomic cases, then induction on the first-order formula. Its membership clause is
For equality, first abbreviate
and set exactly when both inclusions hold. Each recursive call lowers the rank of at least one forcing name without raising the other. This makes the mutual recursion well-founded.
For a basis of connectives consisting of logical conjunction, negation and existential quantification, the remaining clauses are
The last line is the existential clause of syntactic forcing; witnesses need only occur densely, rather than be forced by itself with one preselected name. Other connectives are defined by logical abbreviations. The recursion gives a definable relation inside for each fixed first-order formula, with quantification over the class of its names. If has no greatest element, use canonical forcing names , which still evaluate to . It also proves monotonicity: strengthening a condition preserves what it forces. The forcing theorem identifies the two relations and supplies the truth lemma.
The countable form of the omitting types theorem is as follows. Let be a countable first-order language and a consistent first-order theory in . For any countable family of nonprincipal partial types in finite tuples of variables, there is an at most countable first-order model of omitting all of them. Nonprincipality means that no -consistent first-order formula entails every member of the type modulo . A complete first-order theory with nonisolated complete types is the usual special case; neither an uncountable language nor an arbitrary uncountable family is covered by this statement.
Use the Godel completeness theorem to pass between consistency and the existence of a first-order model. Adjoin a countable stock of new constants. Construct finite conditions with consistent, interleaving three countable lists of requirements: decide each -sentence; provide a fresh constant witness for each existential sentence; and, for each and each tuple of closed terms of its arity, add for some . Sentence decisions preserve consistency by choosing a consistent sign. For an existential sentence , add with fresh for that condition and first-order formula. This is consistent: any first-order model of the old condition can interpret as a witness if one exists, and otherwise arbitrarily in the nonempty domain.
The omission step is the key Henkin omission extension lemma. Let be the logical conjunction of the current finite condition, listing every new constant occurring either there or in . If adding were inconsistent for every , then would entail for each such . Replace the new constants by fresh variables and form
It is consistent with and entails every , contradicting nonprincipality. Hence some omission extension is consistent. The construction need not be computable; countability merely permits all these requirements to be scheduled.
Let be the deductive closure of . It is consistent by the finite character of formal proofs, complete by sentence decisions, and has the Henkin witness property. Its term model consists of closed terms modulo provable logical equality and has at most countably many elements. The truth lemma for a Henkin term model proves that it is a first-order model of . Every tuple in it is represented by closed terms, whose scheduled omission requirement supplies a negated member of each corresponding type. Thus
A universal sentence has the form with quantifier-free , including an empty quantifier block. Embeddings preserve and reflect quantifier-free truth, so universal sentences pass to substructures of a first-order structure. For the converse Łoś-Tarski preservation theorem, let be all universal consequences of an arbitrary first-order theory , and take . We claim is consistent, where the diagram of a structure contains both atomic and negated atomic sentences in constants naming the elements of .
If inconsistent, the compactness theorem gives a finite logical conjunction of diagram sentences for which . The added constants do not occur in , so
This universal sentence belongs to but is false in at the named tuple, a contradiction. The compactness theorem therefore produces containing an isomorphic embedded copy of . The signed diagram ensures a genuine substructure of a first-order structure: functions are preserved, constants are included and relations are preserved and reflected. If the first-order model class of is closed under substructures of a first-order structure, this copy, and hence , is a first-order model of . We have proved
No countability assumption is needed for this second argument. An inconsistent first-order theory is covered as well, with a universally false axiom and an empty first-order model class.
One form of the Ehrenfeucht-Mostowski theorem says that, for every infinite first-order structure and every total order , an elementary extension contains distinct elements forming an order-indiscernible sequence. After a suitable Skolem expansion, their Skolem hull is a first-order model of , and every order automorphism of extends to a structure automorphism of that hull. If has a definable infinite linearly ordered subset , the generators may lie in and their order may agree with that definable order. Uniqueness of the extended structure automorphism is asserted in the chosen Skolem expansion, rather than for every structure automorphism of its reduct.
Here is an ultraproduct proof of the Ehrenfeucht-Mostowski theorem. First expand to with Skolem functions for all existential first-order formulas, iterating through the enlarged languages if necessary. This is done in the ordinary classical metatheory; the choice restriction in question 1 is not a restriction on this question. Fix a nonprincipal ultrafilter on .
We can obtain an infinite sequence of distinct elements in an elementary extension of by one preliminary ultrapower. For each choose a finite list of distinct elements of . Represent by the function taking the th entry when , with an arbitrary default otherwise. Distinctness holds on a cofinite set, so follows from Łoś theorem. In the definably ordered variant, first name any parameters defining , and choose each finite list increasingly inside instead; then and for . Infinitude of an ordered set supplies every finite increasing chain. This preparatory step uses no Ramsey theorem.
For a finite subset of , define the ultrafilter on by nested membership, in this order:
where means . This is the ordered Fubini product of ultrafilters. Closure under intersections and the decision between a set and its complement hold at each nested level, proving it is an ultrafilter. For take the principal ultrafilter on the one-point product. Put
If , pull a function back along the projection . A test independent of an omitted coordinate is unchanged by its ultrafilter quantifier, so projection pushes to . The induced map is therefore an elementary embedding by Łoś theorem. These maps are coherent, giving a directed system indexed by finite subsets of .
Take its directed limit of elementary embeddings . One can verify elementarity directly: representatives of a finite tuple occur at a common stage; functions and atomic relations are interpreted there. In the existential step, a witness in the limit occurs with the parameters at some later common stage, and elementarity pulls the existence statement back. Thus every embeds elementarily into , which contains an elementary copy of .
For , let be the class of the coordinate function . Projection coherence makes this independent of . If , then for each fixed the set is cofinite. The nested test therefore gives . In the ordered variant, the same argument with gives and .
For every first-order formula of the expanded language and every increasing tuple , Łoś theorem gives
The right-hand side depends on the first-order formula and tuple length, not on the indices. This proves order indiscernibility in the expanded language. Let be the Skolem hull of the generators in . The Tarski-Vaught test gives , and its reduct is a first-order model of .
An order automorphism of acts by
Indiscernibility makes this well defined: combine the finite supports of two term expressions into one increasing tuple, and apply indiscernibility to their logical equality. Applying it to relation first-order formulas proves preservation of all relations; the inverse is induced by . Every element of the hull is such a term, so the extension is unique among structure automorphisms preserving the Skolem expansion. Moreover
This proves the theorem, including its ordered version and structure automorphism conclusion, using ultrapowers and a directed limit throughout.