Ehrenfeucht-Mostowski theorem Created 2026-09-28 Updated 2026-10-05
Let be an infinite first-order structure and a total order. After choosing a Skolem expansion of , an elementary extension contains distinct elements forming an order-indiscernible sequence in that expanded language. Their Skolem hull is an elementary substructure in the expanded language, and its reduct is a first-order model of . Every order automorphism of extends uniquely to a structure automorphism of the hull preserving the chosen Skolem expansion, by transporting terms in the generators.
Uniqueness need not hold among all structure automorphisms of the reduct. For an infinite structure in the pure logical equality language, take two distinct nullary Skolem function values in the hull. For an infinite order-indiscernible sequence, neither can equal a generator: the expanded formula would otherwise hold at every generator, contradicting their distinctness. Swapping fixes every generator and preserves the pure logical equality reduct, while failing to preserve the Skolem expansion. Thus the identity order automorphism already has two extensions in that reduct.
Order automorphism Created 2026-10-05 Updated 2026-10-06
An order automorphism of a total order is a bijection such that if and only if . Composition and inverses are again order automorphisms. Transporting the indices of an order-indiscernible sequence by such a map preserves every first-order formula on increasing finite tuples.
One useful form of the Ehrenfeucht-Mostowski theorem is this: for an infinite first-order structure and any total order , there is a first-order model of generated in a chosen Skolem expansion by an order-indiscernible sequence of distinct elements. Every order automorphism of induces an structure automorphism of this expanded hull. One can additionally obtain an elementary extension containing by including its elementary diagram. Uniqueness of the induced structure automorphism is asserted in the Skolem expansion, not among arbitrary structure automorphisms of the reduct.
Choose a Skolem expansion : for every existential first-order formula choose a witness function, satisfying . Iterate the expansion if necessary so witnesses are available for first-order formulas in the resulting language. Add constants and require for distinct indices. For every first-order formula of the expanded language and every two increasing index tuples, add
Together with , this is the indiscernibility theory.
Every finite fragment is satisfiable. It mentions only finitely many first-order formulas and index constants. Choose a countably infinite sequence of distinct elements of . For each relevant arity, colour increasing tuples from that sequence by the finite truth vector of all first-order formulas of that arity in the fragment. Successive applications of the infinite Ramsey theorem for r-sets leave an infinite subset homogeneous for each of these finitely many finite colourings. Interpret the finitely many index constants by distinct elements of that subset in increasing enumeration order. All the required truth-value equivalences then hold, and the original structure satisfies the finite part of its own theory.
If an actual elementary extension of is desired, include constants for its elements and the elementary diagram of . A finite fragment still contains only finitely many parameter instances; include those truth vectors in the same colourings. Thus finite satisfiability is unchanged. The compactness theorem now supplies a first-order model with the entire indiscernible sequence, and in the diagram version an elementary copy of .
Take the Skolem hull of the generators, including the diagram constants when present. The witness functions show directly that the hull is elementary: whenever an existential first-order formula with hull parameters is true in the ambient first-order model, its Skolem witness belongs to the hull. Induction on first-order formulas, or the Tarski-Vaught test, gives elementarity. Its reduct is therefore a first-order model of . In the version without diagram constants its cardinality is at most .
For an order automorphism , define
This is well defined. If two terms represent the same element, express their equality as a first-order formula on the increasing union of their generator indices. Indiscernibility and preservation of the index order carry that equality to the transported terms. The same argument for every relation shows preservation of the expanded structure; applying it to supplies the inverse. Every element is a term in the generators, so no other structure automorphism of the specified expansion can have the same action on them. Hence
For an application requiring the generators to lie in a definable infinite ordered class, impose that class predicate and its increasing-order first-order formulas too. The finite-fragment proof uses an increasing sequence in that class, so all these additional conditions are preserved. In particular the integer index order and its shift give the structure automorphism used in the NFU construction. The constants are order indiscernibles, not necessarily indiscernibles under arbitrary permutations of the index set.
We give a relative consistency proof: a model of ZFC yields a model of NFU. This proves the requested consistency relative to the usual background set theory; it does not claim the optimal, much weaker consistency bound for bare NFU.
Recall that New Foundations with urelements has a unary set predicate , atoms without members, extensionality restricted to sets, and comprehension for every stratified formula. Stratification assigns integer types to variables, with equal types at equality and adjacent types at membership. We construct a model of simple typed set theory with atoms with a type-shifting automorphism, then identify its types using that automorphism.
Start with a model of ZFC and a Skolem expansion of it. By the compactness theorem there is a model of the same expanded theory with an increasing integer-indexed order-indiscernible sequence of ordinals , all above . Here is the finite-satisfiability argument. A finite fragment names only finitely many and asks for equal truth values of finitely many formulas on increasing tuples. In the starting model choose an infinite increasing sequence of ordinals above . Colour its finite subsets by these truth vectors, successively treating each tuple length. The Ramsey's theorem supplies an infinite homogeneous subsequence for the finitely many colours and arities. Its first required number of elements interprets all named and satisfies that fragment. Compactness gives the entire sequence. This argument works for the countable expanded language because each fragment uses only finitely many formulas.
Replace by the Skolem hull of the . The map
is well defined by indiscernibility: equal terms remain equal after shifting their increasing lists of indices. The same argument preserves every formula. Shifting indices backwards gives its inverse, so is an automorphism of the hull, and . The Skolem hull is elementary by its witness functions. This is a concrete Ehrenfeucht-Mostowski model; it is not an elementary class self-embedding of the actual well-founded universe.
Set , interpreted externally as the objects belonging to that internal rank segment, for every integer . At type declare
and define adjacent-type membership by
The members of a type- set are exactly a subset of ; a type- atom has no -members. Every internal subset of is an object of , since . Extensionality for sets is inherited from . For a typed formula involving finitely many types, restrict its quantifiers to the corresponding internal and express each and by the displayed definitions. Separation in gives the required subset of , which represents its comprehension at type . This verifies the typed theory even though many higher-type objects are atoms. The automorphism carries to the next type.
On domain , define and
If is false, is false, so has no -members. For sets , equality of their -extensions gives equality of the typed sets and hence . To check stratified comprehension, translate a variable of type into . The automorphism laws make membership and equality translate exactly. A stratified predicate on a variable of type zero defines a typed subset of , represented by a set at type one. Then has -extension exactly that predicate. A uniform type shift handles any other type assigned to the comprehended variable. The resulting untyped structure is a model of NFU.
We prove the Ehrenfeucht-Mostowski theorem by ultraproducts, with no application of Ramsey theorem. Expand the infinite structure by Skolem functions, choose distinct elements , and choose a nonprincipal ultrafilter on . Let be the desired total index order and put .
For every finite ordered subset , define an ultrafilter on by the ordered Fubini product of ultrafilters: a set belongs to exactly when
Here means , with the quantifiers nested in the displayed order. The resulting collection is an ultrafilter, by induction using the ultrafilter laws for negation and conjunction. For , the inverse image of under coordinate projection belongs to exactly when : quantifiers on unused coordinates leave a truth value unchanged.
Consequently there is a well-defined ultrafilter on the Boolean algebra of finite-coordinate cylinders in , declaring a cylinder large by this test. Coherence proves finite intersection closure and ensures that the empty cylinder is not large. Extend its generated filter to an ultrafilter on all subsets of . Form the ultrapower , and for let be the class of .
If , the coordinate equality test belongs to no corresponding two-coordinate product ultrafilter: for every value of the outer coordinate, the inner equality set is a singleton, excluded by nonprincipality. Hence the are distinct. For any first-order formula and any , the Łoś theorem gives
The right side is independent of the actual increasing index tuple, so the form an order-indiscernible sequence. Constant functions embed elementarily into . Take the Skolem hull of the generators. The Tarski-Vaught test gives an elementary substructure, and transporting terms along an index-order automorphism gives a well-defined automorphism of the hull, with inverse obtained by transporting along the inverse index automorphism. Equality of term representations is preserved by indiscernibility. This is the indiscernible and automorphism conclusion of Ehrenfeucht–Mostowski, obtained entirely from ultrafilters and Łoś's theorem. The ordered Fubini products need not be symmetric; order indiscernibility is exactly what their coherence supplies.
For the Ehrenfeucht-Mostowski theorem, start with an infinite structure and a total order . Choose a Skolem expansion , and adjoin constants for . Require the elementary diagram of , distinctness of these new constants, and the order-indiscernible sequence schema: any two increasing tuples of the of the same length satisfy the same first-order formulas in the expanded language. Every finite fragment mentions finitely many new constants and finitely many first-order formulas. Enumerate a countably infinite subset of . For each of the finitely many first-order formulas, color its increasing tuples by its truth value in , including whatever fixed parameters occur in the fragment. Successive applications of the infinite Ramsey theorem leave an infinite subset homogeneous for all these colorings. Assign the finitely many new constants to distinct elements of this subset in their index order. Their finite indiscernibility requirements and the elementary diagram are then simultaneously satisfied.
The compactness theorem supplies an elementary extension containing the required distinct indiscernibles. Their Skolem hull is an elementary substructure: an existential first-order formula true of its elements has its chosen Skolem-function witness in the hull, so the Tarski-Vaught test applies. Any order automorphism of acts on this hull by
Indiscernibility makes this well defined, since every equality of two term representations is preserved. The same argument preserves every first-order formula; the inverse is given by . Thus it is an automorphism, uniquely determined in the language of the chosen Skolem expansion by its values on the generators. This proves both the indiscernible-model and automorphism forms of the Ehrenfeucht-Mostowski theorem. Uniqueness is not claimed for automorphisms of the reduct which need not preserve the chosen Skolem functions.
For simple typed set theory with atoms, write for the set predicate at sort . Members have sort one lower; urelements have no typed members, extensionality applies to sets, and every well-typed first-order formula defines a set at the next sort. Typical ambiguity adds for each closed sentence, where raises every sort by one. We prove finite satisfiability using Ramsey theorem, rather than assuming that adjacent sorts have the same cardinality.
Let . If , then . For increasing integers , interpret sort by , interpret by the objects of , and interpret adjacent-sort membership by actual membership restricted to these designated sets. All other objects of a sort are typed urelements. Every subset of is a designated set in , so comprehension holds for every first-order formula, including first-order formulas with quantifiers and parameters at other sorts. Two designated sets with the same members are equal, while the other objects have no typed members. Thus this is a full model of the typed axioms for every increasing sequence of levels. The extra preceding level gives a consistent interpretation of the bottom set predicate as well.
Take finitely many ambiguity sentences and let bound their highest sort before raising. Color increasing -tuples by the vector of truth values of these sentences in the corresponding finite sorted structure. There are finitely many colors. The infinite Ramsey theorem supplies an homogeneous set of indices. Choose the level sequence from it. The sentence is evaluated in the window , while is evaluated in the next window ; homogeneity makes their truth values equal. Sentences using fewer sorts simply ignore the unused final levels. Thus every finite family of ambiguity axioms has a model satisfying all the typed axioms. Apply many-sorted first-order compactness theorem to obtain
This is a relative consistency construction in the ordinary set-theoretic metatheory. Allowing urelements is essential here: skipping ranks leaves objects outside the represented power sets, and those objects must be permitted as urelements.
The Ehrenfeucht-Mostowski theorem asserts that an infinite first-order structure has, for any prescribed total order , an elementary extension containing distinct order-indiscernibles . After a Skolem expansion, the Skolem hull of those generators is a model of the original complete theory. Every order automorphism of extends to a unique automorphism of this specified Skolem hull in the expanded language.
Choose a Skolem expansion of the original infinite structure: for each existential formula, select a witness function, including nullary functions when needed. Add constants for and the elementary diagram of a structure of , using separate names for its elements. Require for distinct indices, and for each formula in the Skolem language require
whenever both index tuples are strictly increasing. These are the order-indiscernible sequence requirements.
Every finite fragment is satisfiable in . Choose a countably infinite sequence of distinct elements of . The fragment mentions only finitely many formulas and arities. Color increasing -tuples of that sequence by the finite vector of truth values of its relevant -ary formulas. The Ramsey theorem supplies an infinite homogeneous subsequence; repeat for the finitely many arities. Assign the finitely many named to distinct elements of the final homogeneous subsequence in increasing index order. The fixed finite part of the elementary diagram of a structure already holds in . By the compactness theorem proved in Question 5, the full set of requirements has a model , giving the required elementary extension and order-indiscernible sequence.
Let comprise all values of Skolem-language terms in finitely many . It is closed under the witness functions. If for parameters in , the specified witness function supplies a witness in . Induction on formulas therefore gives ; its reduct is a model of . For infinite , its cardinality is at most and at least .
For an order automorphism , define
Rewrite any finite list of indices in increasing order, allowing a term to repeat or omit variables. The order-indiscernible sequence property transfers every equality between terms and every relation among their values, making this definition well defined and elementary. Applying gives its inverse. All of is generated by the and the named Skolem functions, so an automorphism extending must have precisely this action. Thus , with uniqueness in the Skolem expansion. This uniqueness need not hold in the unexpanded reduct.
The Ehrenfeucht-Mostowski theorem says that an infinite first-order structure , after Skolem expansion, has an elementarily equivalent model generated as a Skolem hull by distinct order-indiscernible sequence for any prescribed linear order . Every order automorphism of extends uniquely to an automorphism preserving this Skolem expansion. The reduct still models , but uniqueness of an automorphism in the reduct alone is not asserted. Iterate adjoining witness functions through all successively enlarged languages, so every existential formula in the final language has its own Skolem function. Write for the resulting expanded structure.
For the Ramsey theorem proof, add constants and require that they are distinct and that every two increasing tuples of the same length agree on every formula of the expanded language. Include . A finite fragment mentions finitely many formulas and finitely many indices, say of them. Choose distinct . For each arity occurring in those formulas, color the increasing tuples of natural numbers by their finite truth vectors in . Repeated applications of the infinite Ramsey theorem give an infinite subset homogeneous for all these finitely many colorings. Interpret the constants by its first elements, in their prescribed order. All the fragment's indiscernibility requirements hold. Thus compactness theorem produces a model of the whole scheme.
Let be the Skolem hull of the . Whenever an existential formula with parameters in holds in , its chosen Skolem witness belongs to . The Tarski-Vaught test, proved by the existential step of induction on formulas, therefore makes . For an order automorphism , define
To compare different term presentations, collect all their indices into one increasing tuple. Indiscernibility transfers the equality of the terms to the transported tuple, so this map is well defined. The same argument transfers every relation; it preserves all functions by construction, and the map for is its inverse. Since every hull element is a term in the generators, uniqueness follows.
For a genuinely ultraproduct proof, keep the distinct and choose a nonprincipal ultrafilter on . For each finite ordered subset , take
where is the ordered Fubini product of ultrafilters. Explicitly, a subset is large if its indicator is true after successively applying “for -almost every ” in the increasing coordinate order. Projection to any sublist has exactly that sublist's product ultrafilter. Hence for , pulling functions back along gives an elementary embedding by the Łoś theorem. These embeddings commute. Form their directed limit of elementary embeddings; each finite tuple lies in one stage, so induction on formulas makes the stage embeddings elementary.
At a stage containing , let be the class of the coordinate function . If , equality of these coordinate functions is small: for a fixed first coordinate there is only one possible equal second coordinate, and a singleton is not in . Thus . For any increasing , the truth of is the same nested ultrafilter test applied to , independent of the actual indices. This is precisely indiscernibility in the expanded language. Its Skolem hull, and the term-transport construction above, finish the second proof. Both constructions give the required model and the extended index automorphisms.
A useful precise form of the Ehrenfeucht-Mostowski theorem is this: for an infinite structure and any linear order , a model of can be generated as a Skolem hull by distinct order indiscernibles . Every order automorphism of extends to an automorphism of that hull in the chosen Skolem language. One may first name all elements of , giving an elementary extension containing the original structure. The generation and uniqueness assertions concern this specified expansion, not arbitrary automorphisms of its reduct.
Choose a Skolem expansion : for each existential formula add a function selecting a witness whenever one exists. Introduce constants for . Take the theory of , distinctness of these constants, and all equivalences
The formulas here are in the fixed expanded language, without the newly added as extra parameters. If naming , use its complete elementary diagram and allow those original names in the formulas.
Every finite fragment has a model by Ramsey's theorem. Only finitely many formulas and constants occur. Take a sequence of distinct elements of . For each arity appearing, color the increasing tuples from this sequence by the finite vector of truth values of all formulas of that arity. Successive Ramsey thinning gives an infinite subset homogeneous for each of these finitely many colorings. Assign the finitely many constants in increasing order to distinct elements of this subset. This satisfies every displayed equivalence in the fragment; the original theory is satisfied because the underlying structure remains . Compactness now gives a model of the full theory, with the required order-indiscernible sequence.
The substructure generated by the constants under the Skolem functions is elementary: any existential formula with parameters which are terms in the generators has its Skolem witness in that same hull. If is an order automorphism of , define
Indiscernibility makes this well-defined, by applying it to the equation between any two term representations using the increasing tuple of all their indices. The same argument preserves every relation and function; supplies the inverse. It is unique in the generated Skolem structure. This completes the Ramsey proof, rather than stopping at the existence of indiscernibles.
For simple typed set theory with atoms, use sorts and membership only from to . A set predicate distinguishes sets from atoms, extensionality compares sets of the same positive type, and comprehension produces in type every subset of defined by a well-typed formula. Atoms have no members. First-order models use Henkin semantics; they are not required to have their next domain equal to the full external power set. Typical ambiguity is the schema for each closed sentence, where every sort index in is raised by one.
We show finite satisfiability of this entire typed theory with ambiguity. Choose a list of ranks above , spaced by at least two. For a finite increasing selection of ranks , let
where is the set of objects declared to be sets at type . Membership from to is ordinary membership restricted to objects of ; all other type- objects are atoms. The spacing puts inside . Thus comprehension and set extensionality hold exactly, and atoms have no typed members. There are infinitely many objects at every visible type, so any usual typed infinity requirement also holds.
The auxiliary rank provides a uniform interpretation if a set predicate is allowed at type zero; no type-minus-one domain is used in the theory. This avoids artificially declaring all type-zero objects to be atoms, which would not be invariant under type-raising. If the language has no type-zero set predicate, simply ignore this auxiliary interpretation.
A finite set of ambiguity instances uses finitely many closed sentences of bounded highest type, say at most . Color increasing -tuples of ranks by their finite truth vector in the structure with visible domains and the auxiliary preceding rank. Ramsey's theorem gives an infinite homogeneous rank set. Choose consecutive ranks from it and build the hierarchy on all these ranks. The first window evaluates each original sentence; shifting the window one place evaluates its uniform type-raise. Homogeneity makes the truth vectors equal. All finite typed axioms and the selected ambiguity instances therefore hold together. Choosing large enough covers every sort needed by the finite fragment. Many-sorted compactness, equivalently ordinary first-order compactness after encoding sorts, yields
This is a model existence argument in the ambient set theory; no equality of adjacent type cardinalities is claimed. The gaps between ranks supply atoms, and the ambiguity is about truth of sentences, not a bijection between domains.
For the Ehrenfeucht-Mostowski theorem, let be an infinite first-order structure and any linear order. Choose a full Skolem expansion : add witness functions for existential formulas, repeat in the expanded languages, and take their union. We will construct a model of its theory containing distinct generators , , forming an order-indiscernible sequence.
Adjoin the elementary diagram of , the inequalities for , and for every expanded-language formula and every two increasing -tuples of indices, the sentences
Every finite subcollection is satisfiable in . To prove this, choose a countably infinite sequence of distinct elements of , and for each of the finitely many relevant arities color its increasing index tuples by the finite vector of truth values of the formulas of that arity. Repeated applications of the Ramsey's theorem give an infinite subsequence homogeneous for all these finitely many finite colorings. Interpret the finitely many mentioned by its elements in their index order. All indiscernibility and distinctness constraints hold, and the finite diagram fragment holds because the ambient structure is still .
By compactness theorem, a model of the full enlarged theory exists. Its Skolem hull generated by the is elementary: whenever an existential formula with parameters in holds in , its chosen witness function returns a value in , so the Tarski-Vaught test applies. Its reduct is a model of . If the index order has size , the hull has size at most , and it contains distinct generators.
Every order automorphism of induces the automorphism
To check well-definedness, write any two terms being compared over the same increasing list of their generators. Their equality is an expanded-language formula; indiscernibility of the order-indiscernible sequence preserves its truth under . The same argument preserves each relation, and the term construction preserves the functions. Applying gives the inverse. The extension is unique in the specified Skolem language since every hull element is a term in the generators; no uniqueness among all automorphisms of the reduct is being asserted. This proves the Ehrenfeucht-Mostowski theorem, including its usual automorphism consequence.
For simple typed set theory with atoms, use sorts , predicates for sets, and typed membership from sort to sort . Atoms have no members, extensionality compares sets, and every well-typed formula defines a set of the next sort. Typical ambiguity is the schema for every closed typed sentence, where the superscript raises all types by one.
Here are concrete full typed models before imposing the ambiguity schema. Choose increasing natural numbers and set
The auxiliary merely interprets the set predicate at the lowest sort. Define typed membership by
Then the other objects of are atoms, regardless of their old membership. Every subset of has its representative in , giving comprehension even for formulas with higher-sort quantifiers and parameters. Extensionality holds for the set representatives and atoms have no typed members. The rank gaps leave infinitely many atoms at each sort, and all sorts are infinite.
Consider finitely many ambiguity instances with unraised sentences , and choose a fixed window length sufficient to include every sort used and its auxiliary predecessor. Color every increasing -tuple of natural numbers by the vector of truth values of these unraised sentences in its finite rank-window interpretation. There are only colors. The Ramsey's theorem gives an infinite homogeneous set. Choose successive points from it. The first points and last points have the same color, while the latter interpretation of is exactly the former model's interpretation of . The auxiliary predecessor shifts too, so this remains true for sentences mentioning the lowest set predicate. Extend the chosen rank sequence arbitrarily to interpret the remaining sorts. This yields a model of typed set theory satisfying all the specified ambiguity instances.
Thus every finite subset of the typed axioms together with all ambiguity instances has a model. Applying multisorted compactness theorem gives
The final model satisfies first-order typed comprehension, with quantification over its own sorts and sets as in Henkin semantics.
Let be a full Skolem expansion of an infinite structure , choose distinct for , and extend the cofinite filter to a nonprincipal ultrafilter on . For a finite subset of the desired index order , define the ordered Fubini product of ultrafilters on by
where means . These nested tests decide complements and preserve intersections by induction on , so is indeed an ultrafilter. For the empty set use the one-point index set and its principal ultrafilter.
Put . If , projection of coordinates induces
A truth test independent of a coordinate is unchanged by its dummy ultrafilter quantifier. Consequently pullback preserves exactly the -large subsets, proving that the map is well defined and injective. The Łoś theorem, applied to every formula rather than just to equality, proves that it is an elementary embedding. Projections compose, so these elementary maps form a coherent directed system.
Take its directed limit of elementary embeddings . Explicitly identify two stage elements when their images agree at a common larger stage, and interpret functions and relations there. For an existential formula true in the limit, its parameters and a witness occur at a common stage; elementarity then pulls truth back to the stage of the original parameters. This verifies that all stage maps into the limit are elementary.
Let be the image in this limit of the coordinate class . These elements are distinct: in , equality would require , whose inner-coordinate section is a singleton and hence not in the nonprincipal . For , the truth of any expanded-language formula on is exactly
This expression depends on the formula and the tuple length, not on the chosen increasing indices. Thus is an order-indiscernible sequence. The empty-coordinate stage embeds elementarily into .
Their Skolem hull is elementary by the witness-function argument, and an order automorphism of extends to it by transporting the generators in every term. Equality and relation preservation follow from the displayed uniform truth test, and the inverse order automorphism gives the inverse map. Therefore this proves the Ehrenfeucht-Mostowski theorem through ultrapowers and their directed limit, with no Ramsey-theoretic step.
One form of the Ehrenfeucht-Mostowski theorem says that, for every infinite first-order structure and every total order , an elementary extension contains distinct elements forming an order-indiscernible sequence. After a suitable Skolem expansion, their Skolem hull is a first-order model of , and every order automorphism of extends to a structure automorphism of that hull. If has a definable infinite linearly ordered subset , the generators may lie in and their order may agree with that definable order. Uniqueness of the extended structure automorphism is asserted in the chosen Skolem expansion, rather than for every structure automorphism of its reduct.
Here is an ultraproduct proof of the Ehrenfeucht-Mostowski theorem. First expand to with Skolem functions for all existential first-order formulas, iterating through the enlarged languages if necessary. This is done in the ordinary classical metatheory; the choice restriction in question 1 is not a restriction on this question. Fix a nonprincipal ultrafilter on .
We can obtain an infinite sequence of distinct elements in an elementary extension of by one preliminary ultrapower. For each choose a finite list of distinct elements of . Represent by the function taking the th entry when , with an arbitrary default otherwise. Distinctness holds on a cofinite set, so follows from Łoś theorem. In the definably ordered variant, first name any parameters defining , and choose each finite list increasingly inside instead; then and for . Infinitude of an ordered set supplies every finite increasing chain. This preparatory step uses no Ramsey theorem.
For a finite subset of , define the ultrafilter on by nested membership, in this order:
where means . This is the ordered Fubini product of ultrafilters. Closure under intersections and the decision between a set and its complement hold at each nested level, proving it is an ultrafilter. For take the principal ultrafilter on the one-point product. Put
If , pull a function back along the projection . A test independent of an omitted coordinate is unchanged by its ultrafilter quantifier, so projection pushes to . The induced map is therefore an elementary embedding by Łoś theorem. These maps are coherent, giving a directed system indexed by finite subsets of .
Take its directed limit of elementary embeddings . One can verify elementarity directly: representatives of a finite tuple occur at a common stage; functions and atomic relations are interpreted there. In the existential step, a witness in the limit occurs with the parameters at some later common stage, and elementarity pulls the existence statement back. Thus every embeds elementarily into , which contains an elementary copy of .
For , let be the class of the coordinate function . Projection coherence makes this independent of . If , then for each fixed the set is cofinite. The nested test therefore gives . In the ordered variant, the same argument with gives and .
For every first-order formula of the expanded language and every increasing tuple , Łoś theorem gives
The right-hand side depends on the first-order formula and tuple length, not on the indices. This proves order indiscernibility in the expanded language. Let be the Skolem hull of the generators in . The Tarski-Vaught test gives , and its reduct is a first-order model of .
An order automorphism of acts by
Indiscernibility makes this well defined: combine the finite supports of two term expressions into one increasing tuple, and apply indiscernibility to their logical equality. Applying it to relation first-order formulas proves preservation of all relations; the inverse is induced by . Every element of the hull is such a term, so the extension is unique among structure automorphisms preserving the Skolem expansion. Moreover
This proves the theorem, including its ordered version and structure automorphism conclusion, using ultrapowers and a directed limit throughout.
The Ehrenfeucht-Mostowski theorem says that if a first-order theory has an infinite model, then for every total order there is a model generated as the Skolem hull of distinct order indiscernibles , and every order automorphism of extends to an automorphism of .
Given an infinite cardinal , let with the lexicographic order, viewed as consecutive copies of the rational order. In each copy independently choose either the identity or a fixed nonidentity order automorphism of . These choices give distinct order automorphisms of .
Apply the theorem to this order. Distinct order automorphisms act differently on the distinct generators , so their extensions give an injection into the automorphism group of a first-order structure . Therefore , proving that has models with arbitrarily large automorphism groups.
Expand an infinite first-order structure by Skolem functions, choose distinct elements , and fix a nonprincipal ultrafilter on . For each finite subset of the required index order, form the ultrapower over using the ordered Fubini product of ultrafilters. Pullback along coordinate projections gives coherent elementary maps by the Łoś theorem. In their directed limit of elementary embeddings, the classes of the coordinate functions are distinct and form an order-indiscernible sequence; every first-order formula on increasing coordinates has the same nested ultrafilter test. Their Skolem hull gives an Ehrenfeucht-Mostowski model. An index-order automorphism sends a term in the generators to the same term in the transported generators; indiscernibility makes this well defined. Uniqueness is in the specified Skolem expansion, not necessarily in its reduct. If generators must respect a definable infinite order, first produce an increasing sequence by an ultrapower of finite increasing chains.