Past exam of the mathematics course of the University of Cambridge 2002 iii Paper 21 2 Solution Created 2026-10-03 Updated 2026-10-14
The independence statements are relative consistency statements. We construct models from an ambient model of ZFC; the construction is an interpretation and does not assume that the ambient model is transitive. Foundation is already true in the ordinary ambient membership structure, so its positive consistency direction is immediate.
For the negative direction, construct an extensional cumulative universe over Quine atoms. Let be a countably infinite set of formal symbols . Give each the extension . For a set of already constructed objects, let be its unique representative: set , and otherwise use a fresh tagged code . Atom codes have a different tag. Begin with and putSet . The interpreted membership relation gives exactly the members , and gives exactly the member . This convention matters: creating a second representative for would violate extensionality. Every object is uniquely determined by its extension, so satisfies full extensionality. Every set-sized collection of objects has bounded construction rank, by ambient replacement, and hence has its representative in .
Here are the remaining axiom verifications. Empty set and pairing use and . If , its interpreted union is . Its interpreted power set issince every subset extension has a unique representative. The pure, atom-free finite hierarchy supplies a copy of and an inductive set. For separation, translate an -formula into the ambient language, with quantifiers restricted to the definable class ; ambient separation gives the appropriate subset of , and represents it. For replacement, uniqueness in the interpreted functional relation gives an ambient definable functional image of the set . Ambient replacement makes that image set-sized, and again represents it. These arguments also establish that all the operations used have bounded construction rank.
Ambient choice gives choice in : choose a member from each nonempty extension in a set-sized family and represent the graph, using interpreted ordered pairs. But , and the nonempty set with extension has no -minimal member. ThusTogether with the ordinary model, this proves independence of foundation from the other ZF axioms, even when choice is retained.
To extend the construction to failure of choice, let the full permutation group of act on byThe singleton convention is equivariant, so this is an automorphism of . An object has finite support if some finite has the property that every permutation fixing pointwise fixes the object. Retain objects all of whose membership descendants have finite support, stopping the hereditary recursion at the atomic self-loops. This gives the hereditarily finite-supported Quine-atom model ; each belongs to it, with support .
Extensionality persists because every retained object's members are retained. Empty set, pairing, infinity and union preserve hereditary finite support. For separation on a retained set , the union of finite supports for and the formula's parameters supports the separated extension: permutations fixing those supports preserve satisfaction in . All its members are retained, so its representative is retained. For replacement, the same support fixes the functional range, because an automorphism must take the unique output at an input to the unique output at its transported input. Ambient replacement bounds that range; all its members are in , so its representative belongs to . Finally, the collection of all retained subset representatives of is an ambient set, contained in the full interpreted power set of . A support of permutes this collection onto itself, and its members are retained. Its representative is therefore the internal power set in . This verifies every ZF axiom except foundation; foundation still fails at each .
The atom set and the family of its two-element subsets have empty support and are retained. Suppose a choice function on were retained, with finite support . Choose distinct outside and transpose them. The transposition fixes and fixes the unordered pair , but moves whichever of its two members selects. Equivariance would require that selected member to be fixed, a contradiction. HenceThe full universe gives the corresponding positive-choice model. Choice is therefore independent of ZF without foundation. Unlike a permutation model with ordinary urelements, this model retains full pure-set extensionality: the atomic objects are self-membered sets, not empty objects exempted from extensionality.
The constructible-universe interpretation gives . Thus the consistency assumptions in both displayed conclusions can equivalently be taken to be ; no additional consistency strength is being used.
Past exam of the mathematics course of the University of Cambridge 2002 iii Paper 21 3 Solution Created 2026-10-03 Updated 2026-10-14
An inner model of ZF is a transitive class containing every ordinal, with inherited membership, such that each ZF axiom holds with all quantifiers restricted to . Here transitivity means . For a proper class this is an axiom-by-axiom assertion, not an internal truth predicate for the whole class. An inner model can have fewer subsets of a given set than the surrounding universe; it need not have the same cardinals or the same continuum function.
Inner models prove relative consistency. If a theory proves that a definable class satisfies every axiom of , an inconsistency proof from could be relativized to and become an inconsistency proof from . Thus . This reasoning concerns formal interpretations and needs no assumption that a given model of is externally well-founded.
The central example is the constructible universe. Definewhere contains exactly the subsets definable over using parameters from . Satisfaction for a set structure is definable, so this recursion is available in ZF. Induction shows that the levels are transitive and increasing: if , the subset is , so . The ordinal part of is , giving all ordinals in .
For completeness, the main axiom mechanisms explain why this example works. Finite set operations on constructible parameters are definable at finitely many further stages. For a fixed finite family of formulas and parameters, close a sequence of levels under their least constructible witness stages and take its union; induction on formulas gives a reflecting level. Separation of a constructible set then occurs at the next definability stage. For replacement, ambient replacement bounds the construction stages of the unique constructible outputs; a reflecting level above that bound makes the range definable. For the internal power set of , use ambient separation to form , bound the construction stages of its members, and at a sufficiently high level define the family of all subsets of in that level. Thus the internal power set is constructible even though some ambient subsets may not be. Foundation is inherited by transitivity, and infinity comes from and its successor stages.
There is a canonical well-order of : order by first construction stage, then by the least definition code and finite parameter tuple, using the previously constructed well-orders for parameters. Each set in can be well-ordered by the restriction of this set-like class order; hence satisfies AC. Moreover the hierarchy computed inside is the same hierarchy, because definability over a fixed set structure and limit unions are absolute. Thus satisfies . The further cardinal analysis of this hierarchy, encapsulated in the constructible universe theorem, gives GCH. ConsequentlyThis proves the relative consistency of choice, CH and GCH; in particular none can be refuted by ZF if ZF is consistent. The assertions here are internal to : they do not assert CH in the ambient universe.
Inner models also isolate definable information. The relative constructible universe built with a set parameter retains that parameter and all ordinals while discarding unrelated sets. Such constructions help compare relative consistency strengths and identify which hypotheses survive passage to smaller universes; preservation of a large-cardinal property must be checked separately, not inferred merely from transitivity.
There is an important limitation, the constructible-universe obstruction to a uniform inner-model proof of failure of choice. Every inner model of ZF contains the ambient . Indeed by induction: the same set structure has the same definable subsets at a successor stage, and both hierarchies take the same union at a limit. If the ambient universe satisfies , this forces . Thus inner models cannot uniformly produce a model of or from every ZF universe. To prove the opposite independence directions one needs an outer-model or other interpretation technique, such as forcing or the non-well-founded symmetry construction in Question 2.
Past exam of the mathematics course of the University of Cambridge 2003 iii Paper 19 2 Solution Created 2026-10-03 Updated 2026-10-14
A large cardinal axiom says that there is an uncountable cardinal with a strong closure, reflection, combinatorial or embedding property. Its interest is not merely the magnitude of the cardinal: it packages a universe-like portion of set theory, or a coherent way of comparing the universe with a proper inner model. Such axioms form a hierarchy extending ordinary ZFC, compared through relative consistency implications. The consistency qualifications are essential; an existence axiom is not a theorem of ZFC simply because its consequences are attractive.
The basic example is a strongly inaccessible cardinal: an uncountable regular cardinal which is a strong limit cardinal, soThese conditions imply for every . Prove this by induction along the cumulative hierarchy: the successor step uses the strong-limit property, and a limit step uses regularity to bound a union of fewer than smaller sets. Thus every member of has cardinality below .
Consequently is a transitive model of ZFC. Pairing, union, power set, separation, axiom of infinity and foundation stay within the hierarchy. For replacement, a definable function on has fewer than values; regularity bounds their ranks below , putting the range in . Ambient choice supplies a choice function for a family in , and its graph also has bounded rank. This verifies the substantial closure axiom rather than only saying that the rank is large. It also shows why inaccessible existence cannot be proved in a consistent ZFC: it would yield a set first-order model of ZFC and hence its consistency, contrary to the Gödel second incompleteness theorem.
An uncountable regular limit cardinal is a weakly inaccessible cardinal; requiring the strong-limit inequality is stronger without additional hypotheses. Under GCH, every smaller infinite cardinal satisfies , so the two notions coincide. This distinction separates cardinal-arithmetic assumptions from the regularity requirement.
A Mahlo cardinal is an inaccessible whose inaccessible cardinals below it form a stationary set. Thus every club set meets those inaccessibles, which strengthens mere unboundedness. There are inaccessible ; is a first-order model of ZFC containing an inaccessible . Mahloness therefore supplies a consistency statement stronger than the bare existence of one inaccessible. Iterating the demand that smaller cardinals have the same reflection property leads to further levels of the hierarchy.
A weakly compact cardinal is a logical and combinatorial strengthening of inaccessibility. One standard characterization is an inaccessible withevery two-colouring of pairs has a homogeneous subset of size . Equivalently one can use compactness for theories of size at most , or the tree property at an inaccessible. These viewpoints explain the terminology: a local collection of compatible requirements has a global realization, and tall narrow trees cannot avoid cofinal branches. They are characterization statements; the elementary closure and measure arguments below are separate proofs of the consequences used here.
A measurable cardinal carries a nonprincipal kappa-complete ultrafilter on . Every set of size less than is -null, since it is a union of fewer than null singletons. Such a cardinal is regular: a cofinal sequence of length would partition into bounded, hence null, pieces; completeness would make their union null, an impossibility.
It is also strong limit. If and there were distinct sets for , choose for each the -large side of the partition according to whether . The intersection of these fewer than large sides belongs to , but all its indices designate the same subset of , so it has at most one member. This contradicts nonprincipality. Hence , proving that every measurable cardinal is inaccessible.
The measure gives an ultrapower embedding. Form equivalence classes of functions under equality on a -large set, with membership defined coordinatewise modulo . Induction on first-order formulas proves elementarity: Boolean operations use the ultrafilter laws, and the existential step chooses coordinate witnesses on a large set. Countable completeness makes the ultrapower well-founded. An infinite descending membership chain would give countably many large coordinate conditions; their intersection would produce an actual infinite membership descent in . Collapse the ultrapower to a transitive class , obtaining .
For , every function into is constant on a large set by completeness; induction shows . The class of the identity function is larger than every such constant ordinal and lies below , so . Thus the critical point of an elementary embedding is . The measure viewpoint has become a precise self-similarity principle for the universe.
A supercompact cardinal imposes arbitrarily strong closure on these embeddings: for every there is with critical point , , and . It implies measurability by the derived ultrafilterElementarity makes this an ultrafilter; fixed ordinals below show that singletons are null. For , fixes the indexing length, so it carries an intersection of sets to the intersection of their images. If all these images contain , so does their intersection, proving -completeness.
These examples illustrate three connected uses of large cardinals: obtaining set first-order models and stronger consistency statements, extending finite or countable compactness and partition phenomena to uncountable domains, and constructing elementary embeddings with controlled closure. They also interact with inner models: an inaccessible remains inaccessible in the constructible universe, since it cannot acquire a new short cofinal sequence there and there are fewer subsets of smaller ordinals. A measurable cardinal's measure need not belong to that inner model, so preservation of the stronger property is a different issue. Large cardinal axioms are thus structured additional hypotheses, with carefully distinguishable consequences and relative-consistency claims, rather than a single claim that sufficiently big cardinals exist.
Past exam of the mathematics course of the University of Cambridge 2003 iii Paper 19 3 Solution Created 2026-10-03 Updated 2026-10-14
All independence assertions here are relative consistency results. Begin with a first-order model of ZF; for the choice-preserving side use ZFC. The original first-order model already gives the side where foundation holds. We construct the opposite side while checking the other axioms, then add a symmetry restriction to make choice fail.
Let , and let interchange the old objects and , fixing everything else. They are distinct. On the same domain define the Rieger-Bernays permutation model byWrite ; the -members of are exactly the old members of . In particular , and has no other -member. Thus is a Quine atom, and the nonempty -set has no member disjoint from itself. Foundation fails.
Here are the other axioms explicitly. Equal -extensions imply by old extensionality, hence . An -pair of is . An -union of isIts elements are precisely objects with an -membership chain of length two into . The -power set of issince means . These are old sets by power set and replacement.
Translate any first-order formula by replacing its membership symbol with , a definable relation with parameter . Separation on produces the representative of the old set . For replacement, functionality in the new structure is exactly functionality of the translated first-order formula on the old set ; old replacement gives its range, and represents that range as an -set. Thus the full schemas, not merely their quantifier-free instances, survive. The old finite ordinals and are fixed by , so their empty-set and successor relations are unchanged; the old witnesses axiom of infinity.
If the original first-order model satisfies AC, the new one does too. For an -family of nonempty -sets, old choice selects for each . The -ordered-pair construction is definable, so old replacement forms the graph of this selection in -pair codes; applying makes it an -function. It chooses an -member from each member of the family. Therefore a full membership permutation alone does not refute choice. We have provedwith choice preserved if it was initially present. Together with the unchanged well-founded first-order model, this proves foundation's independence from the remaining axioms.
For the choice-failing extension, work in an ambient first-order model of ZFC and build the extensional cumulative universe over Quine atoms. Let be a countably infinite collection of distinct tagged objects. Give each the membership extension . Adjoin sets in successive construction ranks, representing a set-sized collection by a unique new tagged object with extension , except that the representative of is the already existing . Denote this representative by again. Thus ; adjoining a second, distinct ordinary singleton would incorrectly violate extensionality.
More formally take atom tags of kind zero, put , and defineThe extension of is , and the extension of an atom is . Tags of the two kinds are disjoint. Any set-sized collection of objects has bounded construction ranks and hence a representative at a later stage. This proves pairing, union, power set, separation and replacement by representing their extensions, just as above. For axiom of infinity, recursively construct the pure finite ordinals, collect these representatives in an ambient set by replacement, and apply to that collection. The resulting inductive set is fixed by every atom permutation. Every object has a unique extension, so full extensionality holds, although foundation fails at the atoms.
Let be the full symmetric group of . Extend by , recursively on the non-atomic construction ranks. This preserves membership, including the atomic self-loops. An object is supported by a finite if every permutation fixing pointwise fixes it. Retain the hereditarily finite-supported Quine-atom model : every object reachable from a retained object by finitely many membership steps has finite support. In particular all members of a retained object are retained, every atom is supported by itself, and is supported by the empty set.
We verify the schemas in , rather than assuming that an arbitrary invariant class is a first-order model. For separation, a subset of a retained set definable in from parameters is fixed by permutations fixing the union of their finite supports. Its members are already in , so its representative belongs to . For replacement, a definable functional image of is a set in the ambient universe. Uniqueness makes it invariant under every permutation fixing and the parameters, although the individual outputs can have different supports. Those outputs are in by the relativized first-order formula, so the range representative is hereditarily supported. This proves replacement without falsely requiring one finite support for every individual value.
The internal power set is the representative ofIt is an ambient set and is fixed by the support of , because a permutation carries retained subsets of to retained subsets of . Every member is retained by its definition. This proves the internal power-set axiom. Finite unions of supports handle pairing and union; the pure natural numbers have empty support; extensionality is inherited because is membership-transitive. Hence satisfies all ZF axioms except foundation, which still fails.
In form the family of all two-element subsets of , a family with empty support. Suppose it had a choice function , with finite support . Choose distinct . Their transposition fixes and the argument , but interchanges its two possible chosen values. Equivariance gives a contradiction. ThusThe full construction over , before restricting to , has choice by ambient choice and the representability of choice graphs. Alternatively an ordinary ZFC first-order model gives the positive choice side. This proves the independence of AC from ZF minus foundation. The required metatheoretic consistency can be expressed using Con(ZF), since the constructible universe of a ZF first-order model supplies ZFC, as explained in the next solution. No assumption of a transitive model follows from mere consistency or is needed for these interpreted first-order model constructions.
Past exam of the mathematics course of the University of Cambridge 2003 iii Paper 19 4 Solution Created 2026-10-03 Updated 2026-10-14
An inner model of a universe of ZF is a transitive class containing every ordinal and satisfying the required set-theoretic axioms with the inherited membership relation. Transitivity means that every member of a member of belongs to . Requiring all ordinals distinguishes an inner model from a transitive set first-order model such as : a set first-order model has bounded ordinal height. One may specify an inner model of ZF, ZFC or a stronger theory; choice is not built into the term unless specified.
The fundamental example is the constructible universe. Form the constructible hierarchyHere definable power set means subsets definable over the set structure by first-order formulas with finitely many parameters from that level. Each level is transitive, the levels increase, and , by induction. Thus is transitive and contains all ordinals.
The construction supplies a definable well-order: order objects first by their earliest construction stage, then by a least first-order formula code and a finite tuple of parameters in the already constructed level's well-order. Recursively extend the earlier well-order at each successor stage and unite compatible orders at limits. First-order formula codes and finite tuples of well-ordered parameters are well-orderable. This yields a canonical global ordering definable within ; its restrictions to sets will give choice once the ZF axioms are checked.
For that check, a useful reflection argument is explicit. Given finitely many first-order formulas and a starting level, pass to a higher level containing witnesses for their existential subformulas on all parameter tuples from the current level, choosing least witnesses in the canonical order. There are set-many tuples, so ambient replacement bounds their witness stages. Repeat for steps and take the union level . Every relevant witness with parameters in that level appears at a later step. Induction on first-order formulas, with this witness property for the existential case, proves that reflects the chosen finite list of first-order formulas of .
Separation on a constructible set is then definability over a sufficiently large reflecting level, so its subset appears at the next level. For replacement, reflect the first-order formula specifying a functional image and its required existence statements. All inputs belong to a level containing the domain as a set; all their unique outputs then lie in one reflecting level. The image is definable there and hence is constructible. For power set, the ambient set of constructible subsets of has bounded construction stages by replacement in the ambient universe. At a level containing them all, this internal collection is definable by the bounded condition , and therefore is itself in . Pairing, union and axiom of infinity follow directly from definability over sufficiently large levels, while extensionality and foundation follow from transitivity. Thus , and its canonical ordering gives .
This proves the important relative-consistency applicationOne does not conclude that choice is true in the original universe. Instead the inner model supplies a possibly smaller universe in which choice holds.
Constructibility also supplies GCH. Here is the cardinal-counting argument, making clear the role of the condensation lemma for the constructible universe. Work inside . If is constructible, take a large limit containing and an elementary hull of of size . Its transitive collapse is by condensation. The collapse fixes every ordinal below , and hence fixes and . Since the hull has size , . Therefore every constructible subset of appears below .
The condensation fact expresses the rigidity of this definability construction: first-order formula codes, finite parameter tuples and satisfaction in set-sized lower levels are preserved by the collapse. Inducting over the hull's ordinal indices identifies each collapsed lower level with the corresponding -level; elementarity supplies every definable subset coded by parameters in that collapsed lower level. Taking unions identifies the entire collapsed hull with a level .
Induction on construction stages gives : each successor has only countably many first-order formula schemes with finite parameter tuples, and limits take unions. Hence for infinite . The preceding containment gives in , and Cantor's theorem gives the reverse inequality. ConsequentlyAll these cardinal computations are internal to ; they need not equal the ambient cardinal computations.
Inner models are also useful for analyzing stronger axioms. If is inaccessible in , it remains an uncountable regular cardinal in , because a shorter cofinal sequence in would already be one in . For each ordinal , its constructible subsets are fewer than even in the internal cardinal comparison: in , has size below , so its constructible part cannot have an -well-order of length at least . Thus it remains strong limit. Accordingly supplies relative-consistency information compatible with inaccessibles and GCH. Stronger embedding or measure properties require extra analysis, since the witnessing objects may disappear upon passing to an inner model.
There is a useful limitation: no uniform inner-model construction can refute choice from every starting ZF universe. Every inner model of ZF contains the ambient . Indeed, induction gives : the same set-sized level has the same satisfaction relation for definitions, and limit stages take the same unions. If the starting universe already satisfies , any inner model containing all ordinals must therefore be the whole universe, where choice holds. To obtain a choice-failing first-order model uniformly one needs a different method, such as the symmetry restriction in the preceding solution. Inner-model arguments establish consistency and preservation through carefully controlled smaller universes; they do not freely manufacture arbitrary desired axiom failures.
Past exam of the mathematics course of the University of Cambridge 2004 ia Paper 4 5E Solution Created 2026-09-24 Updated 2026-10-14
Number the natural numbers from one. If the power set could be enumerated as , form . For each , membership of in is opposite to its membership in , so . This contradicts completeness of the enumeration. Thus the Cantor diagonal argument proves that the power set is an uncountable set.
For a finite subset , define . This is a nonnegative integer and the map is injective: if two finite subsets differ, let be their largest differing element. Its contribution exceeds the sum of all smaller possible contributions, so their codes differ. There are infinitely many singleton subsets. Hence the countability of finite subsets of a countable set here is countable infinitude.
To treat all bijections, associate to every subset the permutation that swaps and when , and fixes both when . These disjoint pair swaps define a bijection of . Different subsets give different permutations, so the map from the power set into is injective. Therefore is an uncountable set.
Every finitely supported permutation fixes all elements above some . A bijection fixing that tail must permute : it cannot send a smaller element into the fixed tail without violating injectivity. There are exactly such permutations. Thusis a countable union of finite sets. Enumerate first by , then by one of the finitely many permutations at that ; duplicates can be omitted. Infinitely many distinct pair swaps belong to , so is countably infinite. The full family is uncountable, while the finitely supported family is countably infinite.
Past exam of the mathematics course of the University of Cambridge 2004 iii Paper 24 1 Solution Created 2026-10-03 Updated 2026-10-14
Independence here is a relative consistency assertion: from a ground first-order model satisfying ZFC, construct a first-order model of each remaining theory in which the omitted axiom fails. The ground axiom of choice is a tool for constructing these countermodels, not an extra axiom imposed on the theories being tested. The constructible universe supplies the usual relative-consistency implication from ZF to ZFC, so this ground choice assumption requires no additional consistency strength. These constructions can be formalized inside an arbitrary ground model; they do not require the stronger assumption that a transitive model exists.
Union. Put and use the hereditarily locally small membership modelThe ground cardinal is a strong limit cardinal of countable cofinality. This transitive class contains the empty set and . Pairing preserves the bound, as does taking a subset, so separation holds for every formula relativized to this class. If an internally definable function has domain , ground replacement collects its range . Since and every descendant of an element of already has fewer than members, . Thus the full functional Axiom schema of replacement holds. For , every actual subset of belongs to the class andConsequently its entire power set belongs to the class. Extensionality and foundation are inherited from the ground membership relation; witnesses infinity. However belongs to , while its only possible union is , which does not. All the other ZF axioms hold, and union fails. Bounding the entire transitive closure by instead would give the wrong model: functional ranges at this singular bound need not be hereditarily small.
Power set. Use the transitive class of hereditarily countable sets. Pairing, union and separation preserve hereditary countability. A functional image of a countable domain is countable, and its members have countable transitive closures; their countable union is countable in the ground ZFC model. This proves replacement. The remaining structural axioms and infinity are inherited. Every actual subset of belongs to , but a putative internal power set of would contain all these subsets and hence be uncountable by Cantor's theorem. Power set fails in , with every other ZF axiom intact.
Replacement. Use in the cumulative hierarchy. At a limit ordinal cutoff, pairing, union, power set and every instance of separation remain below the cutoff; foundation, extensionality and infinity hold as well. With parameter , define by finite iterations of power set. The finite iteration witnesses and each value are inside , so this is an internally definable total function on . Its range has rank of a set and is absent from the model. This instance of replacement fails.
Extensionality. Build well-founded coded sets over one urelement , retaining a distinct ordinary empty set . Membership of an atom is always false, and membership of a set code is its coded extension. Thus but they have identical empty extensions. Pairing, union, separation and replacement are performed on set codes; pure witnesses infinity, and the well-founded construction gives foundation. There is a small point concerning the unmodified, untyped Axiom of power set: the atom is vacuously a subset of every object. Therefore the internal power-set object for contains all ordinary set-subsets of and the atom. It has exactly the required extension. All remaining ZF axioms hold, but extensionality fails. In the usual typed atom theory, the power-set axiom instead quantifies only over set-subsets.
Foundation. In the ground universe let exchange and and fix all other objects. On the same domain define the Rieger-Bernays permutation modelSince is a bijection, two objects with the same -members are equal, so extensionality holds. Any ground collection of desired members is represented by the object . In particular, an -pair is and the -union of isAn -subset of is an object with , so its -power-set object isTranslate every formula by replacing membership with ; ground separation and replacement collect the required extensions and the same representation supplies their internal witnesses. The -empty object is , and its -successor operation is . Ground well-founded recursion and replacement collect the iterates of from ; representing this collection gives an -inductive object. Thus infinity holds. But for , , whence and has precisely itself as its -member. Foundation fails.
Infinity. The hereditarily finite sets satisfy extensionality, foundation, pairing, union, power set and separation. Each internal domain is externally finite, so every internally definable functional image is finite and belongs to , proving replacement. No finite object can contain the empty set and all its successive Finite von Neumann ordinals. Infinity fails, and all other ZF axioms hold.
Choice with atoms. For the negative model use the Basic Fraenkel permutation model. Let be an infinite set of urelements and let every permutation of act recursively on sets. Keep precisely the hereditarily finitely supported objects: an object has a finite support if every permutation fixing pointwise fixes the object, and every object occurring in its membership ancestry must also have such a support. The class of these objects contains the pure universe and itself.
Supports for a pair are united; union preserves a support; a formula defining a subset uses the finite union of the supports of its domain and parameters. An internally definable functional range has the same support, since its values are uniquely specified, and its elements are already hereditarily supported. This proves the full separation and replacement schemas. All hereditarily supported set-subsets of a fixed set form its symmetric internal power set; this collection is invariant under the pointwise stabilizer of a support of the original set. For the untyped version add all the atoms, as above. Pure , ground well-foundedness and set-extensionality give the remaining axioms.
The family of unordered pairs of atoms is hereditarily supported. If it had a choice function , let be a finite support of . Choose distinct . The transposition exchanging fixes and , but exchanges its two possible chosen elements. Invariance of would imply is fixed by that transposition, a contradiction. Conversely, the full well-founded universe over the atoms, before restricting to finite supports, satisfies choice when the ground universe does. Both choice and its negation are relatively consistent with the stated weakening of extensionality.