A measurable cardinal is an uncountable cardinal carrying a nonprincipal -complete ultrafilter : intersections of fewer than members of remain in . Such an ultrafilter contains no set of size less than . Indeed each singleton is absent, and intersecting fewer than singleton complements shows that every small set's complement is in . In particular every tail of is in .
Form the ultrapower of the universe by functions , identifying functions agreeing on a member of , and interpreting membership coordinatewise modulo . The Łoś theorem, applied separately to each formula, makes the map elementary. Countable completeness makes the ultrapower well-founded: an infinite descending chain would give -large sets witnessing each step, whose countable intersection is nonempty; a coordinate in that intersection would give an infinite descending membership chain in the original universe. The relation is extensional and set-like, so the Mostowski collapse theorem gives a transitive class and an elementary ultrapower embedding .
For each , every function is constant modulo . If no fibre were in , intersecting the fewer than fibre complements would give the empty set in . Induction on therefore shows that the collapsed ultrapower ordinal has precisely the elements , so
The identity function represents an ordinal below , and every constant is below it modulo , since a tail is large. Consequently
Thus the canonical collapsed embedding is not the identity; its first moved ordinal is . For a general measure the identity-function class need not collapse to exactly ; that stronger equality holds for a normal measure. The argument above needs only its lower bound.
Conversely, suppose is elementary, is transitive, its critical point is , and its derived measure is a set, as for the usual definable or amenable class embeddings. Define
Because , elementary preservation of complements and intersections makes this an ultrafilter. It is nonprincipal since for . For a sequence of large sets, fixes the index ordinal and takes the intersection to the intersection of their images; belongs to every image and hence to the intersection. Thus is -complete. The set-existence qualification excludes treating an arbitrary external class map as a set parameter without justification.
For context, measurability already implies regularity and the strong-limit property. A cofinal sequence of length below partitions into that many bounded, hence small, pieces; completeness and their absent fibres contradict covering all of . If there were distinct subsets of some , for each coordinate choose the -large side deciding its membership bit. The intersection of these large sets would still be large, but all its indices would label the same subset, so it would have at most one member. This contradiction gives . Thus the first moved ordinal is an uncountable strongly inaccessible cardinal, in addition to being measurable.
We prove the Ehrenfeucht-Mostowski theorem by ordered products of ultrafilters, without using Ramsey's theorem. Choose a Skolem expansion of the infinite structure and distinct elements . Fix a nonprincipal ultrafilter on .
For a finite increasing subset of the desired index order , define the ordered Fubini product of ultrafilters on by
The notation means that the set of satisfying belongs to ; the leftmost quantifier is outermost. Upward closure and intersection follow successively at each coordinate, and applying complement at each step proves the ultrafilter dichotomy. Products are ordered; no false claim of symmetry is needed.
Put , with . If , pullback of a function by coordinate projection induces
For a cylinder condition involving only coordinates in , deleting the unused ultrafilter quantifiers makes its membership in exactly its membership in . The Łoś theorem therefore makes an elementary embedding, not merely a homomorphism. The projection identities give .
Take the directed limit of this system: elements from two stages are identified if their images agree at a common larger finite stage, and formulas are evaluated at such a stage. Elementary coherence makes this well-defined. It also makes each stage elementary in the limit: a formula uses finitely many parameters, and an existential witness at a later stage can be pulled back at the level of existential truth because the transition maps are elementary. Denote the limit by .
For each , let be the limit image of the coordinate function . These elements are distinct. For , after fixing , equality holds for at most one , a set not in ; hence equality fails in the two-coordinate ultrapower and therefore in the limit.
For any increasing , Łoś evaluates
The right-hand side depends on the formula and the number of increasing coordinates, not their particular indices. Thus is order-indiscernible for every formula of the expanded language simultaneously; no preliminary homogeneous thinning is used. If elements of were named before expanding, the same computation gives indiscernibility over those names and the initial stage embeds the original structure into the limit.
The Skolem hull of these generators is elementary by the witness property. Transporting the generators by any order automorphism of transports every term, with well-definedness and relation preservation supplied by the formula equivalence just proved. The inverse transport supplies an inverse automorphism. The ordered-ultrapower construction gives the full Ehrenfeucht–Mostowski model and its order automorphisms without Ramsey's theorem.
A model-theoretic ultralimit is the elementary direct limit of a chain of successive ultrapowers along their diagonal embeddings. We will build two such chains with isomorphic limits. This is not a topological ultrafilter limit and does not require the stronger claim that one ultrapower of each structure is already isomorphic.
First prove the Frayne embedding lemma, including the relative form needed to make the diagrams commute. If , expand the language by constants naming every element of , and let be its complete elementary diagram. Index by finite subsets of this diagram. The finitely many constants in can be interpreted in so that holds: existentially quantifying them gives a sentence true in and hence in . Choose such interpretations, and give unused constants an arbitrary fixed value in the nonempty domain of .
For each diagram sentence , its cone has the finite intersection property with the other cones. Extend the generated filter to an ultrafilter . For , let be its chosen interpretation at coordinate . The map
is elementary by Łoś: every formula true of a tuple from , or its negation, is a diagram sentence and holds on its corresponding cone. In particular distinct named elements stay distinct.
If , the construction can keep every constant naming equal to that same at every coordinate. For a finite diagram fragment, existentially quantify just the names outside ; the resulting formula with parameters in is true in , hence true in . Thus the finite realizations still exist with all those old names fixed. Consequently
This relative extension of the diagonal map is the essential strengthening.
Now let . The nonrelative lemma embeds into an ultrapower of . Identify the image with a copy of inside . Since , the relative lemma embeds into an ultrapower of extending its diagonal map. Rename this larger structure so that the displayed copy of is a literal elementary substructure. Next apply the relative lemma over to embed into an ultrapower of fixing its diagonal copy. Continue alternately. We obtain a coherent elementary chain
with as well. Each inclusion is, up to these coherent identifications, the diagonal embedding into its ultrapower; the same holds for . It is the relative clause, not merely the existence of arbitrary elementary embeddings, which guarantees this.
By the elementary chain theorem, the unions of the two subsequences are elementary limits. They are the same structure: each lies in a subsequent , and each lies in . Hence the alternating ultrapowers give isomorphic ultralimits construction proves
Conversely each ultrapower and each elementary direct limit has the same first-order theory as its starting structure. Isomorphic ultralimits therefore imply as well. Thus the conclusion exactly characterizes elementary equivalence at the level of ultralimits.
Here and throughout, a filter on a set is proper: it contains the whole underlying set, excludes the empty set, and is upward closed and closed under finite intersections. An improper filter cannot be extended to a proper ultrafilter.
Order the proper filter extensions of by inclusion. The union of a chain is again a proper filter on a set: any two members already occur in one member of the chain, where their intersection belongs; the empty set never appears. By Zorn lemma, take a maximal proper extension . If , adjoining must make the generated filter improper, so some has . Upward closure then gives . Exactly one of belongs to , proving the ultrafilter lemma.
Let be nonempty structures for a common first-order language, and let be an ultrafilter on the index set . In the ultraproduct , identify functions when ; interpret function symbols coordinatewise and relations by membership of their coordinate truth sets in . The Łoś theorem states, for every first-order formula ,
Changing representatives changes a coordinate truth set only outside a member of , so the definitions are well defined.
Prove the theorem by structural induction on formulas. An induction on terms gives , and therefore the required equivalence for atomic equality and relation formulas. For conjunction the truth set is an intersection, and a finite intersection belongs to a proper filter on a set exactly when each constituent does. For negation it is a complement, and the ultrafilter decides exactly one of a set and its complement. These prove the Boolean induction steps.
For the existential step, a witness in gives, by induction, a member of on which holds. It is contained in the coordinate existential truth set, so that set belongs to . Conversely, if
choose a coordinate witness for , and any element of the nonempty factor otherwise. Then the truth set of contains . Induction gives a witness in the ultraproduct. Universal quantification follows from negation and existence. This completes the actual proof of the Łoś theorem.
For the compactness theorem, take to be the set of finite subsets of , and choose a model of each such subset. The cones
are nonempty and satisfy . They generate a proper filter on a set, which extends to an ultrafilter by the proved lemma. For every , the coordinate truth set of contains . The Łoś theorem therefore gives
This proves the requested compactness theorem. In fact the same proof works without the countability restriction on the language.
Let be a full Skolem expansion of an infinite structure , choose distinct for , and extend the cofinite filter to a nonprincipal ultrafilter on . For a finite subset of the desired index order , define the ordered Fubini product of ultrafilters on by
where means . These nested tests decide complements and preserve intersections by induction on , so is indeed an ultrafilter. For the empty set use the one-point index set and its principal ultrafilter.
Put . If , projection of coordinates induces
A truth test independent of a coordinate is unchanged by its dummy ultrafilter quantifier. Consequently pullback preserves exactly the -large subsets, proving that the map is well defined and injective. The Łoś theorem, applied to every formula rather than just to equality, proves that it is an elementary embedding. Projections compose, so these elementary maps form a coherent directed system.
Take its directed limit of elementary embeddings . Explicitly identify two stage elements when their images agree at a common larger stage, and interpret functions and relations there. For an existential formula true in the limit, its parameters and a witness occur at a common stage; elementarity then pulls truth back to the stage of the original parameters. This verifies that all stage maps into the limit are elementary.
Let be the image in this limit of the coordinate class . These elements are distinct: in , equality would require , whose inner-coordinate section is a singleton and hence not in the nonprincipal . For , the truth of any expanded-language formula on is exactly
This expression depends on the formula and the tuple length, not on the chosen increasing indices. Thus is an order-indiscernible sequence. The empty-coordinate stage embeds elementarily into .
Their Skolem hull is elementary by the witness-function argument, and an order automorphism of extends to it by transporting the generators in every term. Equality and relation preservation follow from the displayed uniform truth test, and the inverse order automorphism gives the inverse map. Therefore this proves the Ehrenfeucht-Mostowski theorem through ultrapowers and their directed limit, with no Ramsey-theoretic step.
A model-theoretic ultralimit is the direct limit of a chain of successive ultrapowers along their diagonal elementary maps. It is not the topological notion of a limit along an ultrafilter. We first prove the precise relative embedding lemma needed to synchronize two such limits.
If , then embeds elementarily into an ultrapower of , with the embedding restricting on to its diagonal map. To prove this Frayne embedding lemma, use the elementary diagram of with the elements of treated as named parameters. Every finite fragment of that diagram has a realization in : replace its finitely many names from by variables and existentially quantify their conjunction. It is true in , and hence true in by elementarity. Choose these simultaneous realizations for each finite fragment, keeping every parameter from interpreted as itself; give unmentioned names an arbitrary default in the nonempty .
On the index set of finite fragments, extend the filter of cones to an ultrafilter . For each , let be its value in the chosen coordinate realization. Every diagram sentence is satisfied on its cone, so the Łoś theorem makes an elementary embedding . Inequalities in the diagram ensure injectivity. If , all its coordinates equal , giving exactly the diagonal map.
There is also the initial version: if merely , then embeds elementarily into an ultrapower of . A finite fragment of the elementary diagram of , with all its names replaced by variables, yields an existential sentence true in and hence in . The identical finite-fragment and cone construction therefore proves this version without already assuming an embedding.
Start with . Use the initial version to place elementarily in an ultrapower of . Relabel embedded copies so we can regard the elementary maps as inclusions. Apply the relative version to to obtain an ultrapower of containing , and whose inclusion of is its diagonal map. Next apply it to to obtain an ultrapower of containing , again fixing the earlier diagonal inclusion. Continuing gives an elementary chain
The common union is elementary over every stage by the elementary chain theorem, and
The first presentation is a model-theoretic ultralimit of . The second, preceded by the initial diagonal embedding of into , is a model-theoretic ultralimit of . Each consecutive same-letter inclusion is precisely the corresponding ultrapower diagonal map, not just an unspecified elementary embedding. Thus the two limits are identified with the same structure , proving
Call an IP set when it contains an infinite finite-sums set with all . We first need the relative consequence of the Hindman theorem: a finite union can be an IP set only if one of its constituents is an IP set. This does not follow by simply applying the theorem to a coloring of all integers, because its monochromatic finite-sums set might lie outside the given set.
Here is a reduction that proves the partition regularity of IP sets. Suppose and is finitely colored. Index the generators by . For , let be the set of positions of the nonzero digits in its binary expansion, and color by the color of . By the Hindman theorem, there are with monochromatic in this new finite coloring.
We can take disjoint, successively later finite blocks of the whose sums have separated binary expansion supports. Start with . Having chosen finitely many blocks, take larger than every binary position used in their sums. On a fresh tail of the , consider partial sums, including the zero partial sum. Two have the same residue class modulo , by the pigeonhole principle. Their positive difference is a consecutive block sum divisible by . Discard all indices up to that block's end and repeat. Thus every bit of is above every bit in the preceding block sums.
There are no carries in a sum of distinct , so
Also , since the underlying blocks are disjoint. Consequently
satisfies , with all these sums the same original color. This proves the relative assertion. In particular, if contains an infinite finite-sums set, color its points by the first constituent containing them and apply this argument; one is an IP set.
Let be the family of sets that are not IP sets. It is closed under subsets and, by the preceding argument, under finite unions. It contains every finite set, since positive successive partial sums of an infinite sequence are unbounded. It does not contain . Therefore
is a proper filter on a set: it contains , excludes the empty set, is upward closed, and is closed under finite intersections. Its members are exactly the IP-star sets, the sets meeting every IP set. Indeed, failure to meet an IP set is equivalent to having an IP complement. This identifies the sets that must belong to the required ultrafilter.
Apply the ultrafilter lemma to extend the IP-star filter to an ultrafilter . For completeness, Zorn lemma applies to its proper filter extensions ordered by inclusion, because the union of a chain is still a proper filter on a set. A maximal extension decides every set : if cannot be adjoined while keeping the filter proper, some filter member is disjoint from , forcing into the filter. This is the defining ultrafilter property.
If were not an IP set, then , contradicting properness. Hence every member of contains an infinite finite-sums set. Conversely, any ultrafilter with finite-sums members must contain every IP-star set, since it cannot contain such a set's non-IP complement. Thus this construction captures precisely the forced filter, without making an unnecessary claim about idempotence.
To prove nonuniqueness, put
For a nonempty finite set of exponents with largest exponent , the associated sum of distinct powers of four satisfies
Thus . Doubling the inequality gives
so . These alternating dyadic intervals contain disjoint IP sets.
Every member of meets and also , because it meets every IP set. A finite intersection of members of is again a member, so both and have the finite intersection property. Extend the proper filters they generate to ultrafilters and . Each extends , so the previous argument makes each an ultrafilter with finite-sums members. But and , so
No. The ten residue classes modulo form a finite partition, so an ultrafilter contains exactly one class . The addition formula shows that contains : for , the translate is and belongs to . If is an idempotent ultrafilter, uniqueness of its selected class gives , hence .
Thus every idempotent ultrafilter contains the multiples of , and cannot also contain their complement. This is the zero-residue constraint for idempotent ultrafilters, valid for every finite modulus.
Put , an infinite cardinal number. The original PDF has the double exponent ; the single-exponent expression in the TeX aid is a transcription error.
We explicitly construct an independent family of subsets with members on a set of size . Let
For each finite there are finitely many possibilities for . The collection of finite subsets of an infinite cardinal has size , so ; the points give the reverse bound. Thus .
For every define
To verify independence, take distinct and bits . For each pair , choose a point of and let contain all these finitely many points. The traces are pairwise distinct. Set
Then exactly for those with . Every finite Boolean pattern is therefore realized. The cases work by the same definition, allowing . In particular the sets are all distinct, so the finite-trace independent family construction gives exactly independent members.
For each function , prescribe when and when . Independence gives the finite intersection property. Their finite intersections generate a proper filter on a set: its members are the subsets of containing one of those intersections.
To extend this to an ultrafilter, order its proper filter extensions by inclusion. The union of a chain is again a proper filter, so Zorn's lemma supplies a maximal one, . If neither a subset nor its complement belonged to this filter, adjoining would still generate a proper filter: otherwise some existing member would be disjoint from and force its complement into the filter already. Maximality therefore gives the ultrafilter dichotomy. Using the ambient axiom of choice, choose such an extension for every .
Distinct functions differ at some . Their ultrafilters respectively contain and its complement, and cannot be equal. There are such functions. Transporting the ultrafilters along a bijection proves the lower bound. The upper bound is immediate because every ultrafilter is a subset of :
Thus the number of ultrafilters on an infinite set is
If the complement of a truth set belongs to a proper filter on a set, the truth set itself cannot belong: their intersection is empty. Hence the right side always implies the left side.
The reverse implication can fail. In the cofinite filter, the set of even integers is absent, but its odd complement is absent as well. The filter-quantified evenness assertion is false, while the filter-quantified assertion of oddness is also false. Therefore (iii) can be false.
For an ultrafilter the equivalence is true, precisely because it contains exactly one of any set and its complement. The filter quantifier preserves conjunction for arbitrary proper filters, but its full classical Boolean behaviour requires the ultrafilter property.
Membership of either truth set in a filter on a set implies membership of its union, by upward closure. The converse need not hold. For the cofinite filter, take to mean that is even and that is odd. The union of their truth sets is all of , while neither truth set is cofinite.
Thus the left side of the printed equivalence is true and its right side false: (ii) can be false. An ultrafilter does satisfy the equivalence, because its dichotomy forces one member of a finite union into the ultrafilter. General filters need not have that dichotomy. This is one aspect of the Boolean failure of the cofinite-filter quantifier.
A proper filter on a set on contains , excludes the empty set, is closed under finite intersections and is upward closed under inclusion. An ultrafilter is a maximal proper filter. Equivalently, for every it contains exactly one of . To see maximality implies this dichotomy, if is absent then adjoining it must make the generated filter improper; hence some filter member is disjoint from , forcing into the filter. Conversely, a filter with this dichotomy cannot be properly enlarged without acquiring disjoint members.
Extend the cofinite filter to a maximal proper filter using Zorn's lemma. Every chain of proper extensions has its union as a proper filter upper bound: any finite collection of its members lies in one member of the chain, and the empty set never enters. The resulting ultrafilter contains no finite set, because it already contains that set's cofinite complement. It is therefore a free ultrafilter, or nonprincipal ultrafilter. This proves the required existence with the usual choice principle explicit.
Define the Stone-Čech compactification of the natural numbers as the set of all ultrafilters, with basic open sets
They form a basis because is the whole space and . Also , so each basic set is clopen. Distinct ultrafilters disagree on some , putting them in the disjoint open sets and . Thus this space is Hausdorff.
To prove compactness, suppose an open cover has no finite subcover and refine it by basic sets . Their complements have the finite intersection property: otherwise finitely many would cover every ultrafilter. Here a nonempty finite intersection of the has a principal ultrafilter containing it, whereas an empty intersection cannot belong to any proper filter. The therefore generate a proper filter, which extends to an ultrafilter by the same Zorn argument. That ultrafilter lies outside every , contradicting the cover. Hence is compact and Hausdorff. Natural number is identified with its principal ultrafilter.
Hindman's theorem asserts that every finite colouring of the positive integers has an increasing sequence for which all nonempty finite sums of distinct terms have one colour. Let be the given idempotent ultrafilter. Since is positive, a principal ultrafilter cannot be idempotent: its sum with itself is principal at , not . Thus is nonprincipal and contains every cofinite tail. In a convention including zero, one instead uses an idempotent in the nonprincipal part, excluding the trivial principal idempotent at zero.
For define . Addition on the Stone-Čech compactification of the natural numbers is characterized by
One cell of the finite colour partition belongs to . Put
Idempotence makes . Moreover, if , then . Indeed, write so . We have , and idempotence applied to that set gives
Their intersection is . This is the idempotent-ultrafilter star-set lemma.
Choose . If the finite-sums set of the first choices lies in , select
Every factor belongs to , so this finite intersection is nonempty. Its choice preserves . Therefore
This proves the requested Idempotent-ultrafilter proof of Hindman's theorem, without assuming an idempotent-existence proof.
Finally, for the first logical assertion put and . A proper filter contains if and only if it contains both and : one direction is finite-intersection closure and the other is upward closure. Thus (i) is always true. This is the conjunction law for filter quantifiers.
Let be the reduced product by a proper filter on a set. Its underlying equivalence relation is when . Operations are interpreted coordinatewise, and a relation holds of the classes exactly when its coordinate truth set belongs to .
Evaluation of a first-order term commutes with passage to the quotient, by mathematical induction on terms. Consequently the desired equivalence holds for every atomic formula, including logical equality. For a formula and representatives , write .
For logical conjunction, . The filter on a set axioms give
Thus the induction hypothesis transfers a conjunction in both directions.
For existential quantification, first suppose . Choose a representative of a witness. Induction gives , and this set is contained in . Upward closure therefore gives .
Conversely, suppose . For each , choose a coordinate witness , and choose an arbitrary element of outside . These simultaneous choices use the axiom of choice, as does the usual product construction. Then , so that truth set belongs to . Induction gives , providing the required witness. Therefore
for every primitive positive formula. The exam's tame formulas are exactly this fragment, built using logical conjunction and existential quantification. No ultrafilter dichotomy was used.
Take and the proper filter on a set . In the first-order language with unary predicates , let both factors be one-element first-order structures. Set true and false in the first factor, and reverse these truth values in the second.
The reduced product also has one element . Neither nor holds there: their truth sets are and , neither belonging to . Thus
Logical disjunction can therefore break the equivalence. A union can belong to a filter on a set without either summand belonging to it; the corresponding union property does hold for an ultrafilter.
Use the same two-index filter on a set , with a unary predicate true only in the first one-element factor. In the reduced product, is false, so is true. But
Logical negation also breaks the equivalence. For a general proper filter on a set, a set and its complement can both be absent. In an ultrafilter, exactly one belongs, which is the step used to transfer logical negation in the Łoś theorem.
An ultrafilter on is kappa-complete if, for every index set with and every family of members of ,
The bound is strictly fewer than sets. In particular every ultrafilter is -complete, since this requires only finite intersections; countably complete ultrafilters require intersections of countably many members, equivalently -completeness.
Fix a regular uncountable cardinal number . A club set is unbounded in and closed under suprema below of nonempty increasing sequences with no last term. Equivalently, every limit ordinal with belongs to . The club filter is
It consists of all sets containing a club set, not only the club sets themselves.
An omega-measurable cardinal is a cardinal number carrying a nonprincipal ultrafilter closed under countable intersections, that is, a countably complete ultrafilter. Such a cardinal must be uncountable: on a countable set the intersection of the complements of all singletons would be empty.
A measurable cardinal is an uncountable cardinal number carrying a nonprincipal -complete ultrafilter. A kappa-complete filter is closed under intersections of every family of size strictly below . Thus for an omega-measurable cardinal the completeness required is countable completeness, not merely closure under finitely many intersections.
The club filter completeness argument works for every regular uncountable . Let and let be a club set for each . Their intersection is closed. To prove it unbounded, start above any prescribed and choose an increasing sequence so that lies above a chosen point of every greater than . is a regular cardinal, so the supremum of these choices remains below . The resulting countable supremum likewise remains below . For each , the chosen points are cofinal in , so closure gives . Thus the intersection is a club set. Intersecting fewer than members of the club filter still contains such an intersection of clubs. In particular, .
It is not an ultrafilter. For a regular infinite , the set
is stationary. Given a club set , build in a strictly increasing continuous sequence of length and take its supremum . Closure gives , and the cofinality of an increasing ordinal supremum gives . This proves the stationarity of ordinals of prescribed cofinality.
At , the disjoint sets and are both stationary. A club contained in either or its complement would miss one of these stationary sets. Thus neither nor its complement belongs to , and
Take the least omega-measurable cardinal , with a countably complete ultrafilter on that is nonprincipal. We prove that is -complete. This will give .
Suppose , for , and . Then belongs to . For let be the least with . The pushforward ultrafilter
is a countably complete ultrafilter on ; this uses , so restricts to an ultrafilter on . For each , the fibre is contained in , hence is not in . Thus is nonprincipal. If is finite or countable, countable completeness already rules this out. Otherwise would be an omega-measurable cardinal, contradicting minimality of .
Therefore every intersection of fewer than members of lies in . Since is uncountable, it is a measurable cardinal. This proves that the least omega-measurable cardinal is measurable, even if the originally supplied cardinal carried only a countably complete ultrafilter.
One form of the Ehrenfeucht-Mostowski theorem says that, for every infinite first-order structure and every total order , an elementary extension contains distinct elements forming an order-indiscernible sequence. After a suitable Skolem expansion, their Skolem hull is a first-order model of , and every order automorphism of extends to a structure automorphism of that hull. If has a definable infinite linearly ordered subset , the generators may lie in and their order may agree with that definable order. Uniqueness of the extended structure automorphism is asserted in the chosen Skolem expansion, rather than for every structure automorphism of its reduct.
Here is an ultraproduct proof of the Ehrenfeucht-Mostowski theorem. First expand to with Skolem functions for all existential first-order formulas, iterating through the enlarged languages if necessary. This is done in the ordinary classical metatheory; the choice restriction in question 1 is not a restriction on this question. Fix a nonprincipal ultrafilter on .
We can obtain an infinite sequence of distinct elements in an elementary extension of by one preliminary ultrapower. For each choose a finite list of distinct elements of . Represent by the function taking the th entry when , with an arbitrary default otherwise. Distinctness holds on a cofinite set, so follows from Łoś theorem. In the definably ordered variant, first name any parameters defining , and choose each finite list increasingly inside instead; then and for . Infinitude of an ordered set supplies every finite increasing chain. This preparatory step uses no Ramsey theorem.
For a finite subset of , define the ultrafilter on by nested membership, in this order:
where means . This is the ordered Fubini product of ultrafilters. Closure under intersections and the decision between a set and its complement hold at each nested level, proving it is an ultrafilter. For take the principal ultrafilter on the one-point product. Put
If , pull a function back along the projection . A test independent of an omitted coordinate is unchanged by its ultrafilter quantifier, so projection pushes to . The induced map is therefore an elementary embedding by Łoś theorem. These maps are coherent, giving a directed system indexed by finite subsets of .
Take its directed limit of elementary embeddings . One can verify elementarity directly: representatives of a finite tuple occur at a common stage; functions and atomic relations are interpreted there. In the existential step, a witness in the limit occurs with the parameters at some later common stage, and elementarity pulls the existence statement back. Thus every embeds elementarily into , which contains an elementary copy of .
For , let be the class of the coordinate function . Projection coherence makes this independent of . If , then for each fixed the set is cofinite. The nested test therefore gives . In the ordered variant, the same argument with gives and .
For every first-order formula of the expanded language and every increasing tuple , Łoś theorem gives
The right-hand side depends on the first-order formula and tuple length, not on the indices. This proves order indiscernibility in the expanded language. Let be the Skolem hull of the generators in . The Tarski-Vaught test gives , and its reduct is a first-order model of .
An order automorphism of acts by
Indiscernibility makes this well defined: combine the finite supports of two term expressions into one increasing tuple, and apply indiscernibility to their logical equality. Applying it to relation first-order formulas proves preservation of all relations; the inverse is induced by . Every element of the hull is such a term, so the extension is unique among structure automorphisms preserving the Skolem expansion. Moreover
This proves the theorem, including its ordered version and structure automorphism conclusion, using ultrapowers and a directed limit throughout.