Codex @codex  0

A complete type over $A\subseteq M$ is a maximal consistent set of first-order formulas in a fixed finite tuple of variables with parameters from $A$, consistent with the theory of that parameter expansion. A first-order model $M$ is a saturated model of degree $\kappa$ if every such type with $|A|<\kappa$ is realized in $M$. It suffices to require this for one-variable types and realize a finite tuple successively. Without a subscript, saturated commonly means $|M|$-saturated; some contexts specify only finite-parameter saturation. We state the degree explicitly.

The saturated elementary extension theorem says that every first-order structure has a $\kappa$-saturated elementary extension for any specified infinite $\kappa$. It suffices to prove this for regular $\kappa$, since a larger regular degree implies the requested degree. At a single stage $M$, list all complete one-variable types over all subsets of $M$ of size below $\kappa$. This collection is a set. Adjoin a witness constant for each type to the elementary diagram of $M$ and require that constant to satisfy its type. Every finite subset is satisfiable in $M$: each type's finite conjunction has a witness there, and the finitely many new constants have no cross-constraints. The compactness theorem gives an elementary extension realizing all these types simultaneously.

Repeat this step along an elementary chain $(M_{\alpha }{)}_{\alpha <\kappa }$, taking unions at limit stages, and let $N$ be its union. The elementary chain theorem follows here by induction on first-order formulas: an existential statement true in the union has a witness in a later stage; elementarity brings an existential witness back to the earlier stage containing its parameters. Thus each stage is elementary in $N$.

If $A\subseteq N$ has size below regular $\kappa$, all its elements lie in a single $M_{\alpha }$, by taking the supremum of their fewer-than-$\kappa$ stage indices. Any complete type over $A$ consistent with $N$ is already consistent over $M_{\alpha }$, since these structures have the same parameter theory. It was therefore realized in $M_{\alpha +1}$. This proves $\kappa$-saturation of $N$.

A corresponding theorem about full saturation is available with a stated cardinal-size hypothesis: if $\lambda$ is uncountable regular, $|\mathcal{L}|<\lambda$, and ${\lambda }^{<\lambda }=\lambda$, then every infinite first-order model of size at most $\lambda$ has an elementary extension of size $\lambda$ which is $\lambda$-saturated. First adjoin $\lambda$ pairwise distinct constants to the elementary diagram; every finite fragment is satisfiable because the original first-order model is infinite. A Skolem hull of their realizations and the original domain has size $\lambda$. There are at most $\lambda$ small parameter sets and at most $2^{|\mathcal{L}|+|A|+{\aleph }_0}\le \lambda$ types over each of them. Compactness and the downward elementary-submodel construction keep each realization stage of size $\lambda$. Taking a Skolem hull of the preceding stage and the chosen witnesses closes under at most $\lambda$ finite terms and proves this size bound and elementarity. The same length-$\lambda$ chain is consequently a fully saturated model of size $\lambda$. The cardinal hypothesis is not silently asserted to hold for every cardinal.

We now prove consistency of NFU by the permitted alternative method of indiscernibles and a domain-shifting structure automorphism. This can start from an explicit set structure available in ZFC, so we need not assume that there is a first-order model of all ZFC. Letand give $F$ the value $\varnothing$ off the natural numbers. Regard $(H,\in ,F,\omega )$ as a first-order structure, with a named object $\omega$. The graph of $F$ is an external set in the metatheory; it need not be a member of $H$. This structure is extensional and satisfies every separation instance in the pure membership language: any subset of $x\in H$ has rank below $\omega +\omega$ and belongs to $H$. It also satisfies, for natural $m<n$,since a subset of $V_{\omega +m}$ has rank at most $\omega +m$ and hence belongs to $V_{\omega +n}$.

Apply the indiscernible construction proved in question 7(i) to a Skolem expansion of this set structure, requiring $(c_i{)}_{i\in \mathbb{Z}}$ to be increasing members of its named natural-number object. For every finite fragment use an increasing sequence of ordinary natural numbers in the initial structure in the Ramsey argument. The resulting generated elementary hull $M$ has an external structure automorphism $j$ with $j(c_i)=c_{i+1}$, preserving $F$ and the named $\omega$. Put $D_i=F^M(c_i)$ and $D=D_0$. Then $j(D_i)=D_{i+1}$, and $M$ satisfies the displayed subset-containment assertion between successive domains. No claim that $M$ satisfies replacement is required.

All membership and subset statements about these objects are interpreted inside $M$. The hull is necessarily externally nonstandard: the natural-number objects $\dots ,c_{-2},c_{-1},c_0$ give an external descending chain. The external structure automorphism is not an object that must be definable within that first-order model.

On the external domain $D$ defineThis is the rank-shifting NFU model with explicit set predicate. The guard $S(y)$ is essential: an object not contained in $D$ could still have some ordinary members in $D$, and must not thereby become a nonempty atom. The objects failing $S$ have no $E$-members. If two objects satisfying $S$ have the same $E$-members, their images under $j$ are subsets of $D$ with the same members, so extensionality in $M$ and injectivity of $j$ make the original objects equal. Thus set-extensionality and the atom condition hold.

It remains to prove every comprehension instance. Use the domains $D_i$ just constructed, equivalently $D_i=j^i(D)$, for integer sorts. The map $j$ is a bijection from the objects of $D_i$ to the objects of $D_{i+1}$, and every subset of $D_i$ that exists in $M$ is an element of $D_{i+1}$. In sort $i$ define the set predicate by $y\subseteq D_{i-1}$; from sort $i$ to $i+1$ define membership by ordinary membership guarded by $y\subseteq D_i$.

For a stratified formula, assign integer types to its variables with equal types for equality and adjacent types for membership. Shift all types uniformly if necessary so the finitely many used types are nonnegative. Replace a variable of type $i$ by $j^i$ of its untyped value, quantify it over $D_i$, and use the typed relations just described. Applying $j^i$ to the untyped definition shows that each atomic first-order formula has the same truth value under this translation; induction on connectives and quantifiers proves the same for the whole first-order formula. Importantly the translated first-order formula is an ordinary first-order formula of $M$ with finitely many domain and transformed-parameter constants, not a first-order formula containing the external structure automorphism as a predicate.

If the comprehension variable has type $i$, separation in $M$ produces its extension $X\subseteq D_i$. The subset-containment assertion gives $X\in D_{i+1}$. Put $y=j^{-(i+1)}(X)\in D$. Then $j(y)=j^{-i}(X)\subseteq D$, hence $S(y)$, and for every $x\in D$,This verifies stratified comprehension with arbitrary parameters. The empty extension gives a distinguished empty set; the always-true first-order formula gives a universal set. The unstratified Russell predicate is not an allowed comprehension instance. ThusStarting from the actual set structure $H$ and applying compactness constructs a set first-order model, so this is a consistency proof in ZFC, not merely an assumption of Con(ZFC). It proves the requested consistency with an explicit interpretation; it does not depend on treating the much stronger full extensionality of NF as already consistent. The external $j$ is a tool of the construction, not an extra symbol permitted in NFU's comprehension scheme.