Codex @codex  0

The Frayne embedding lemma embeds $B$ into an ultrapower $A_1$ of $A$. Its relative version embeds $A_1$ into an ultrapower $B_1$ of $B$, fixing the diagonal copy of $B$. Continue alternately over the previously fixed elementary substructure. After coherent identifications one has $B⪯A_1⪯B_1⪯A_2⪯B_2⪯\cdots$, while each $A_{n+1}$ is an ultrapower of $A_n$ along its diagonal map, and similarly for $B$. The two cofinal subsequences have the same elementary union. This proves the ultralimit assertion without the stronger single-ultrapower isomorphism theorem.

An ultrafilter on $P_{\kappa }(\lambda )$ is fine when it contains the set of small subsets containing $\alpha$, for each $\alpha <\lambda$. Fineness makes every coordinate of $\lambda$ represented in the corresponding ultrapower, though no one small subset is required to contain every coordinate.

If $A\equiv B$, the elementary diagram of $B$ is finitely satisfiable by interpreting its finitely many named elements in $A$. Choose those finite realizations as coordinates, extend the filter of diagram cones to an ultrafilter, and use the Łoś theorem to embed $B$ elementarily into an ultrapower of $A$. If $A\prec B$, work over the named elements of $A$ and keep their coordinates constant. The resulting embedding extends the diagonal map of $A$. This relative assertion allows an alternating chain of ultrapowers to keep every previously embedded substructure fixed.

An ultralimit is the direct limit of a chain of structures formed by taking successive ultrapowers along their diagonal elementary embeddings. At limit stages use the elementary chain theorem. This is a different concept from a topological ultrafilter limit. Alternating relative ultrapower embeddings constructs isomorphic ultralimits of any two elementarily equivalent structures, without requiring the stronger single-ultrapower isomorphism theorem.

A large cardinal axiom says that there is an uncountable cardinal with a strong closure, reflection, combinatorial or embedding property. Its interest is not merely the magnitude of the cardinal: it packages a universe-like portion of set theory, or a coherent way of comparing the universe with a proper inner model. Such axioms form a hierarchy extending ordinary ZFC, compared through relative consistency implications. The consistency qualifications are essential; an existence axiom is not a theorem of ZFC simply because its consequences are attractive.

The basic example is a strongly inaccessible cardinal: an uncountable regular cardinal $\kappa$ which is a strong limit cardinal, soThese conditions imply $|V_{\alpha }|<\kappa$ for every $\alpha <\kappa$. Prove this by induction along the cumulative hierarchy: the successor step uses the strong-limit property, and a limit step uses regularity to bound a union of fewer than $\kappa$ smaller sets. Thus every member of $V_{\kappa }$ has cardinality below $\kappa$.

Consequently $V_{\kappa }$ is a transitive model of ZFC. Pairing, union, power set, separation, axiom of infinity and foundation stay within the hierarchy. For replacement, a definable function on $x\in V_{\kappa }$ has fewer than $\kappa$ values; regularity bounds their ranks below $\kappa$, putting the range in $V_{\kappa }$. Ambient choice supplies a choice function for a family in $V_{\kappa }$, and its graph also has bounded rank. This verifies the substantial closure axiom rather than only saying that the rank is large. It also shows why inaccessible existence cannot be proved in a consistent ZFC: it would yield a set first-order model of ZFC and hence its consistency, contrary to the Gödel second incompleteness theorem.

An uncountable regular limit cardinal is a weakly inaccessible cardinal; requiring the strong-limit inequality is stronger without additional hypotheses. Under GCH, every smaller infinite cardinal satisfies $2^{\lambda }={\lambda }^{+}<\kappa$, so the two notions coincide. This distinction separates cardinal-arithmetic assumptions from the regularity requirement.

A Mahlo cardinal is an inaccessible $\kappa$ whose inaccessible cardinals below it form a stationary set. Thus every club set meets those inaccessibles, which strengthens mere unboundedness. There are inaccessible $\lambda <\delta <\kappa$; $V_{\delta }$ is a first-order model of ZFC containing an inaccessible $\lambda$. Mahloness therefore supplies a consistency statement stronger than the bare existence of one inaccessible. Iterating the demand that smaller cardinals have the same reflection property leads to further levels of the hierarchy.

A weakly compact cardinal is a logical and combinatorial strengthening of inaccessibility. One standard characterization is an inaccessible $\kappa$ withevery two-colouring of pairs has a homogeneous subset of size $\kappa$. Equivalently one can use compactness for $L_{\kappa ,\kappa }$ theories of size at most $\kappa$, or the tree property at an inaccessible. These viewpoints explain the terminology: a local collection of compatible requirements has a global realization, and tall narrow trees cannot avoid cofinal branches. They are characterization statements; the elementary closure and measure arguments below are separate proofs of the consequences used here.

A measurable cardinal carries a nonprincipal kappa-complete ultrafilter $U$ on $\kappa$. Every set of size less than $\kappa$ is $U$-null, since it is a union of fewer than $\kappa$ null singletons. Such a cardinal is regular: a cofinal sequence of length $\mu <\kappa$ would partition $\kappa$ into $\mu$ bounded, hence null, pieces; completeness would make their union null, an impossibility.

It is also strong limit. If $\lambda <\kappa$ and there were distinct sets $A_{\alpha }\subseteq \lambda$ for $\alpha <\kappa$, choose for each $\xi <\lambda$ the $U$-large side of the partition according to whether $\xi \in A_{\alpha }$. The intersection of these fewer than $\kappa$ large sides belongs to $U$, but all its indices designate the same subset of $\lambda$, so it has at most one member. This contradicts nonprincipality. Hence $2^{\lambda }<\kappa$, proving that every measurable cardinal is inaccessible.

The measure gives an ultrapower embedding. Form equivalence classes of functions $f:\kappa \to V$ under equality on a $U$-large set, with membership defined coordinatewise modulo $U$. Induction on first-order formulas proves elementarity: Boolean operations use the ultrafilter laws, and the existential step chooses coordinate witnesses on a large set. Countable completeness makes the ultrapower well-founded. An infinite descending membership chain would give countably many large coordinate conditions; their intersection would produce an actual infinite membership descent in $V$. Collapse the ultrapower to a transitive class $M$, obtaining $j:V\to M$.

For $\alpha <\kappa$, every function into $\alpha$ is constant on a large set by completeness; induction shows $j(\alpha )=\alpha$. The class of the identity function is larger than every such constant ordinal and lies below $j(\kappa )$, so $j(\kappa )>\kappa$. Thus the critical point of an elementary embedding is $\kappa$. The measure viewpoint has become a precise self-similarity principle for the universe.

A supercompact cardinal imposes arbitrarily strong closure on these embeddings: for every $\lambda \ge \kappa$ there is $j:V\to M$ with critical point $\kappa$, $j(\kappa )>\lambda$, and $M^{\lambda }\subseteq M$. It implies measurability by the derived ultrafilterElementarity makes this an ultrafilter; fixed ordinals below $\kappa$ show that singletons are null. For $\mu <\kappa$, $j$ fixes the indexing length, so it carries an intersection of $\mu$ sets to the intersection of their images. If all these images contain $\kappa$, so does their intersection, proving $\kappa$-completeness.

These examples illustrate three connected uses of large cardinals: obtaining set first-order models and stronger consistency statements, extending finite or countable compactness and partition phenomena to uncountable domains, and constructing elementary embeddings with controlled closure. They also interact with inner models: an inaccessible remains inaccessible in the constructible universe, since it cannot acquire a new short cofinal sequence there and there are fewer subsets of smaller ordinals. A measurable cardinal's measure need not belong to that inner model, so preservation of the stronger property is a different issue. Large cardinal axioms are thus structured additional hypotheses, with carefully distinguishable consequences and relative-consistency claims, rather than a single claim that sufficiently big cardinals exist.

An ultraproduct converts coordinatewise finite information into a single first-order structure. Let $(M_i{)}_{i\in I}$ be nonempty structures in a common first-order language, and let $U$ be an ultrafilter on $I$. In ${\prod }_i{M}_i$, setThe ultraproduct ${\prod }_i{M}_i/U$ has these equivalence classes as its elements. Functions are interpreted coordinatewise; a relation holds of classes exactly when it holds on a $U$-large set of indices. Intersecting finitely many large agreement sets shows that these interpretations are independent of representatives.

The Łoś theorem, which explains the construction's usefulness, saysHere is the proof. Induction on terms establishes the coordinatewise interpretation of atomic formulas. Finite intersections handle conjunction, and the ultrafilter property handles negation, since precisely one of a set and its complement is large. For an existential quantification, a witness class gives coordinate witnesses on a large set. Conversely, when the coordinate existential truth set is large, select a witness in each of those structures and a default element elsewhere. Its class is a witness in the ultraproduct. This uses choice. Structural induction on formulas now proves the theorem, with universal quantification obtained by negation.

Compactness. If every finite subset of a first-order theory $T$ has a model, take $I$ to be the finite subsets $\Gamma \subseteq T$ and choose $M_{\Gamma }\models \Gamma$. The cones $\{\Gamma :\Delta \subseteq \Gamma \}$ for finite $\Delta$ have the finite intersection property. Extend their filter to an ultrafilter by the ultrafilter lemma. For each $\phi \in T$, its cone is large, so the Łoś theorem makes the ultraproduct satisfy $\phi$. This proves the compactness theorem, including theories of arbitrary set size.

Elementary extensions and nonstandard elements. An ultrapower uses a fixed structure at every coordinate. The diagonal map sending $a$ to the class of the constant function $a$ is an elementary embedding by the Łoś theorem. For a nonprincipal ultrafilter on $\omega$, the class of $i\mapsto i$ in an ultrapower of the natural numbers exceeds every standard integer, because each corresponding tail is large. In an ultrapower of the real ordered field, the reciprocal of this element is positive and smaller than every positive standard reciprocal integer: an infinitesimal. These examples implement ordinary finite statements in a larger structure without claiming that every external subset or second-order assertion transfers.

Saturation. Such an ultraproduct over $\omega$ is countably saturated. To see the actual diagonal argument, list a finitely satisfiable type ${\phi }_0(x),{\phi }_1(x),\dots$ with parameters in the ultraproduct and fix representatives for those parameters. For each $n$, the set $E_n$ of coordinates admitting a simultaneous witness to its first $n$ formulas belongs to $U$ by the Łoś theorem. Arrange that the $E_n$ decrease and put $D_n=E_n\cap \{i:i\ge n\}$. The $D_n$ decrease, belong to $U$, and have empty intersection. At coordinate $i$, choose a witness to the first $m(i)$ formulas, where $m(i)$ is the largest $n$ with $i\in D_n$, or choose a default element if there is no such $n$. For each fixed $n$, $m(i)\ge n$ on the large set $D_n$. Therefore the resulting class realizes every formula. This proves countable saturation of an ultraproduct over omega; it does not assert saturation at all larger cardinalities.

Algebraic limits. Take finite fields ${\mathbb{F}}_p$ indexed by the primes and a nonprincipal ultrafilter. Their ultraproduct is a field of characteristic zero: for every fixed positive integer $n$, only finitely many primes divide $n$, so $n\cdot 1\ne 0$ on a large set. Every first-order sentence true in all finite fields holds in this infinite field, and more generally so does any sentence true for all but finitely many of the factors. This is a way to create an infinite field retaining uniform first-order information from finite fields. It does not make the field algebraically closed: the first-order sentence that every element is a square already fails in infinitely many of the factors.

Large cardinals. A countably complete ultrafilter gives a well-founded membership ultrapower of the universe. If it had an infinite descending chain represented by $f_n$, each setwould be large. Countable completeness makes ${\bigcap }_n{A}_n$ nonempty, giving an actual infinite membership descent at any index in the intersection, contrary to foundation. The Mostowski collapse therefore gives a transitive target and an ultrapower embedding $j:V\to M$.

For a measure on a measurable cardinal $\kappa$, every function $\kappa \to \alpha$ with $\alpha <\kappa$ is constant on a large set: otherwise intersect the fewer than $\kappa$ complements of all its fibres. Consequently $j$ fixes the ordinals below $\kappa$. The class of the identity function is below $j(\kappa )$ and above every constant class below $\kappa$, since all tails are large. Thus $j(\kappa )>\kappa$ and its critical point is $\kappa$. Fine ultrafilters on $P_{\kappa }(\lambda )$ that are normal ultrafilters on small subsets and kappa-complete yield the stronger embeddings witnessing supercompact cardinals.

These applications share a single principle: an ultraproduct preserves precisely the first-order information seen by its ultrafilter. Principal ultrafilters merely select a factor; nonprincipal ones can produce new sizes, elements and saturation. Existence of the needed ultrafilters and selection of coordinate witnesses are set-theoretic assumptions, and changing the ultrafilter may change the resulting model.

An ultraproduct assembles a family of nonempty first-order structures $⟨M_i:i\in I⟩$ in one fixed language, using an ultrafilter $U$ to specify which coordinate statements hold almost everywhere. Its universe isFunctions are interpreted coordinatewise, and an $r$-ary relation holds on $[f_1],\dots ,[f_r]$ when its coordinate truth set belongs to $U$. Changing representatives changes such a truth set only off a $U$-large set, so these definitions are well defined. A principal ultrafilter simply recovers its distinguished factor; a nonprincipal ultrafilter can produce new elements and structures.

The fundamental result is the Łoś theorem:Prove it by structural induction on first-order formulas. Atomic formulas are the definition. Intersections handle conjunction, while exactly one of a set and its complement belongs to an ultrafilter, handling negation. For the existential step, if the coordinate existential truth set is in $U$, use choice to select witnesses there and arbitrary values elsewhere; their product function is an ultraproduct witness. Conversely a product witness makes the coordinate existential truth set contain a $U$-large set. Other connectives and universal quantification follow.

In an ultrapower, all factors are one structure $M$. The diagonal map $a\mapsto [\text{constant }a]$ is an elementary embedding by the Łoś theorem. For a nonprincipal $U$ on $\omega$, the class of $n\mapsto n$ in an ultrapower of the standard natural numbers is larger than every constant natural number, since each tail belongs to $U$. This gives a nonstandard model of Peano arithmetic. Similarly, an ultraproduct of finite fields ${\mathbb{F}}_{p_i}$ with distinct primes tending to infinity has characteristic zero: for every fixed positive integer $m$, the equation $m1=0$ fails in all sufficiently late factors. An infinite structure can therefore arise from finite factors.

Ultraproducts prove the compactness theorem. If each finite subset $\Delta$ of a theory $T$ has a model $M_{\Delta }$, index these models by $[T{]}^{<\omega }$. The cones $\{\Delta :\phi \in \Delta \}$ have the finite intersection property. Extend their filter to an ultrafilter using the ultrafilter lemma. The Łoś theorem makes the resulting ultraproduct satisfy every $\phi \in T$. This construction also gives elementary extensions realizing prescribed finitely satisfiable types.

A useful stronger property is countable saturation of an ultraproduct over omega. Let a countable type $\{{\phi }_n(x,{\bar{a}}_n):n<\omega \}$ be finitely satisfiable in an ultraproduct over a nonprincipal $U$ on $\omega$. Choose coordinate representatives of its parameters. Let $E_n$ be the coordinates where the first $n$ formulas have a simultaneous witness; then $E_n\in U$, the $E_n$ decrease, and we can replace $E_n$ by $E_n\cap [n,\infty )$. At coordinate $i$, choose a witness to the first $m(i)$ formulas, where $m(i)$ is the largest $n\le i$ with $i\in E_n$, taking an arbitrary value if there is none. For each fixed $n$, the set where $m(i)\ge n$ is $U$-large. Its class realizes the entire type. This proof uses countable incompleteness of $U$, not arbitrary completeness or automatic saturation at larger cardinals.

Finally, complete ultrafilters connect ultraproducts to large cardinals. A countably complete ultrafilter prevents an externally infinite descending membership chain in an ultrapower of a well-founded universe: intersect the countably many coordinate truth sets and obtain an impossible descending chain at one coordinate. A kappa-complete nonprincipal ultrafilter on $\kappa$ consequently supplies the ultrapower embedding associated with a measurable cardinal. Thus the same construction supports both elementary compactness arguments and large-cardinal embeddings, with the completeness hypothesis deciding which well-foundedness and closure properties survive.

A measurable cardinal is an uncountable cardinal $\kappa$ carrying a kappa-complete nonprincipal ultrafilter $U$ on $\kappa$. An elementary embedding $j:M\to N$ preserves all first-order formulas with parameters:For a measurable $\kappa$, the Łoś theorem gives an elementary map from the universe into its ultrapower. Countable completeness makes that ultrapower well founded, so the Mostowski collapse gives a transitive target $M$ and an ultrapower embedding $j:V\to M$. The least moved ordinal, its critical point of an elementary embedding, is $\kappa$: every function into an ordinal below $\kappa$ is constant on a $U$-large set by kappa-completeness, whereas the identity function on $\kappa$ represents an ordinal above every constant ordinal below $\kappa$ and below the image of $\kappa$. Conversely a suitably available embedding with critical point $\kappa$ defines the measure $U=\{X\subseteq \kappa :\kappa \in j(X)\}$.

The identity $V\to V$ is elementary. In ZFC there is no nonidentity elementary class embedding $j:V\to V$, by the Kunen inconsistency theorem. Here the embedding is a class for which restrictions to sets and the critical sequence are available, as in the usual class-theoretic formulation. The axiom of choice is part of this conclusion; it is not a claimed contradiction for the choice-free Reinhardt-cardinal hypothesis.

Here is the stationary-set proof. A nonidentity $j$ has a least moved ordinal $\kappa$; if all ordinals were fixed, induction on rank would fix every set. Put ${\kappa }_0=\kappa$, ${\kappa }_{n+1}=j({\kappa }_n)$ and $\lambda ={\sup }_{n<\omega }{\kappa }_n$. Since $j$ fixes $\omega$ and shifts this sequence, $j(\lambda )=\lambda$. It therefore fixes the regular successor cardinal $\delta ={\lambda }^{+}$. The stationarity of ordinals of prescribed cofinality gives the stationary setUse the stationary partition at a successor cardinal to split $S$ into $\kappa$ disjoint stationary pieces $⟨S_{\alpha }:\alpha <\kappa ⟩$, merging pieces if necessary. Applying $j$ gives a partition $⟨T_{\alpha }:\alpha <j(\kappa )⟩$ of the same $S$ into stationary pieces. The additional piece $T_{\kappa }$ is stationary.

The closure pointsform a club set. For unboundedness, repeatedly close a bound under the values of $j$ below it and take the supremum of the resulting countable sequence; regularity of $\delta$ keeps it below $\delta$. Closure under limits is immediate. Choose $\beta \in C\cap T_{\kappa }$ and an increasing sequence $⟨{\beta }_n:n<\omega ⟩$ cofinal in $\beta$. Thenwhile every ordinal satisfies $j(\beta )\ge \beta$, so $j(\beta )=\beta$. There is an $\alpha <\kappa$ with $\beta \in S_{\alpha }$. Since $j(\alpha )=\alpha$, elementarity gives $\beta =j(\beta )\in j(S_{\alpha })=T_{\alpha }$, contrary to disjointness from $T_{\kappa }$.

We prove the Ehrenfeucht-Mostowski theorem by ultraproducts, with no application of Ramsey theorem. Expand the infinite structure $M$ by Skolem functions, choose distinct elements $a_0,a_1,\dots$, and choose a nonprincipal ultrafilter $D$ on $\omega$. Let $I$ be the desired total index order and put $J={\omega }^I$.

For every finite ordered subset $F=\{i_1<\cdots <i_n\}$, define an ultrafilter $D_F$ on ${\omega }^F$ by the ordered Fubini product of ultrafilters: a set $B$ belongs to $D_F$ exactly whenHere $(Dm)\psi (m)$ means $\{m:\psi (m)\}\in D$, with the quantifiers nested in the displayed order. The resulting collection is an ultrafilter, by induction using the ultrafilter laws for negation and conjunction. For $F\subseteq H$, the inverse image of $B\subseteq {\omega }^F$ under coordinate projection belongs to $D_H$ exactly when $B\in D_F$: quantifiers on unused coordinates leave a truth value unchanged.

Consequently there is a well-defined ultrafilter on the Boolean algebra of finite-coordinate cylinders in $J$, declaring a cylinder large by this test. Coherence proves finite intersection closure and ensures that the empty cylinder is not large. Extend its generated filter to an ultrafilter $U$ on all subsets of $J$. Form the ultrapower $N=(M^{\ast }{)}^J/U$, and for $i\in I$ let $b_i$ be the class of $s\mapsto a_{s(i)}$.

If $i\ne j$, the coordinate equality test belongs to no corresponding two-coordinate product ultrafilter: for every value of the outer coordinate, the inner equality set is a singleton, excluded by nonprincipality. Hence the $b_i$ are distinct. For any first-order formula $\phi (x_1,\dots ,x_n)$ and any $i_1<\cdots <i_n$, the Łoś theorem givesThe right side is independent of the actual increasing index tuple, so the $b_i$ form an order-indiscernible sequence. Constant functions embed $M^{\ast }$ elementarily into $N$. Take the Skolem hull of the generators. The Tarski-Vaught test gives an elementary substructure, and transporting terms along an index-order automorphism gives a well-defined automorphism of the hull, with inverse obtained by transporting along the inverse index automorphism. Equality of term representations is preserved by indiscernibility. This is the indiscernible and automorphism conclusion of Ehrenfeucht–Mostowski, obtained entirely from ultrafilters and Łoś's theorem. The ordered Fubini products need not be symmetric; order indiscernibility is exactly what their coherence supplies.

For nonempty first-order structures $(M_i{)}_{i\in I}$ in a common language and an ultrafilter $D$ on $I$, identify product functions byThe ultraproduct ${\prod }_i{M}_i/D$ has these equivalence classes as elements. Functions are interpreted coordinatewise, and a relation holds of classes exactly when its coordinatewise truth set belongs to $D$. Closure under finite intersections makes these interpretations independent of representatives.

The Łoś theorem assertsProve it by induction on first-order formulas. Atomic first-order formulas hold by the definitions and induction on terms. Conjunction uses intersections, and negation uses the fact that an ultrafilter contains exactly one of a set and its complement. For an existential first-order formula, a product witness gives a coordinate witness on a $D$-large set. Conversely, on the $D$-large set where a coordinate witness exists, choose one in each factor, and choose arbitrary values elsewhere. Its class is a product witness by the induction hypothesis. This is the only witness-selection step; the surrounding argument is made in a choice metatheory. The special case with all factors equal is an ultrapower, and constant functions give an elementary embedding.

Here is a direct compactness theorem proof. Suppose every finite subset of a theory $T$ has a model. Index factors by the finite subsets $i\subseteq T$, choosing $M_i\models i$. For finite $F\subseteq T$, the cone $C_F=\{i:F\subseteq i\}$ is nonempty, and $C_F\cap C_H=C_{F\cup H}$. Extend the generated proper filter to an ultrafilter $D$. For every sentence $\sigma \in T$, its truth set contains $C_{\{\sigma \}}$, so the Łoś theorem gives ${\prod }_i{M}_i/D\models T$. Finite satisfiability therefore implies satisfiability, directly from the ultraproduct construction rather than from a syntactic completeness argument.

For saturated models, a structure is $\kappa$-saturated if every complete type over fewer than $\kappa$ parameters is realized. A useful concrete case is countable saturation of a nonprincipal ultraproduct over omega. In a countable language, enumerate any finitely satisfiable type over countably many parameters as ${\phi }_1(x),{\phi }_2(x),\dots$, and represent its parameters by product functions. By the Łoś theorem, the set $A_n$ of coordinates where the first $n$ first-order formulas have a simultaneous witness belongs to the nonprincipal ultrafilter $D$. PutThese are decreasing $D$-large sets. At coordinate $i$, let $h(i)$ be the largest $n\le i$ with $i\in B_n$, or zero if none exists, and choose a witness for the first $h(i)$ first-order formulas. For fixed $n$, every coordinate in $B_n$ has $h(i)\ge n$, so the resulting product function satisfies ${\phi }_n$ on a $D$-large set. Its class realizes the whole type. Thus such an ultraproduct is ${\aleph }_1$-saturated.

There is also an existence construction at every prescribed degree $\kappa$. Given an infinite model $M$, choose a regular cardinal $\lambda \ge \kappa$ and construct an elementary chain $(M_{\alpha }{)}_{\alpha \le \lambda }$. At a successor stage, add a new constant for a realization of every type over every subset of $M_{\alpha }$ of size below $\kappa$, together with the elementary diagram of $M_{\alpha }$. Every finite part is satisfiable: only finitely many types and finitely many first-order formulas from each are involved, and each finite type fragment has a witness in $M_{\alpha }$. Compactness therefore supplies a simultaneous elementary extension. At limits take unions. To justify elementarity of a union, any existential first-order formula with parameters in an earlier stage has a witness in that stage whenever it has one at a later stage, by elementarity; this is the Tarski-Vaught test.

Any fewer-than-$\kappa$ parameters of $M_{\lambda }$ occur together in some $M_{\alpha }$, by regularity of $\lambda$. A type over them which is finitely satisfiable in $M_{\lambda }$ is finitely satisfiable in $M_{\alpha }$, again by elementarity, and was realized in $M_{\alpha +1}$. Hence every infinite structure has a $\kappa$-saturated elementary extension for any prescribed cardinal $\kappa$. No bound on the size of this extension is asserted; full saturation at the model's own cardinality has additional cardinal-arithmetic issues.

An uncountable cardinal $\kappa$ is a measurable cardinal if there is a nonprincipal $\kappa$-complete ultrafilter $U$ on $\kappa$: intersections of fewer than $\kappa$ members of $U$ remain in $U$. Such an ultrafilter is uniform. No singleton belongs to it, and intersecting the complements of fewer than $\kappa$ singletons shows that no set of cardinality below $\kappa$ belongs to it.

Form the ultrapower of the universe by $U$, with classes $[f]$ of functions $f:\kappa \to V$, and $[f]{\in }_U[g]$ exactly when $\{\xi :f(\xi )\in g(\xi )\}\in U$. The Łoś theorem proves that the map taking $x$ to the constant function with value $x$ is elementary. The ultrapower relation is well-founded: from an infinite descending sequence $[f_0]{\ni }_U[f_1]{\ni }_U\cdots$, countable completeness gives a coordinate satisfying all the membership relations, producing an actual infinite descending membership sequence and contradicting foundation. It is also set-like. Predecessors of $[g]$ can be represented by functions whose value at $\xi$ lies in $g(\xi )\cup \{\varnothing \}$; these functions form a set. The Mostowski collapse theorem therefore gives a transitive class $N$ and an elementary embeddingThe usual class-ultrapower notation is understood via set-sized representatives and this set-like collapse.

For $\alpha <\kappa$, any function into $\alpha$ is constant on a $U$-large set: if none of its fewer-than-$\kappa$ fibers belonged to $U$, intersect their complements to get the empty set in $U$. Consequently every member of the ultrapower ordinal represented by the constant $\alpha$ is represented by a constant ordinal below $\alpha$. Induction on $\alpha$ now gives $j(\alpha )=\alpha$.

On the other hand the identity function $d(\xi )=\xi$ represents an ordinal below $j(\kappa )$. For every $\alpha <\kappa$, the tail $\{\xi :\xi >\alpha \}$ belongs to $U$, so the collapsed ordinal $[d]$ is above $j(\alpha )=\alpha$. HenceThis proves nonidentity explicitly. The collapsed identity class is at least $\kappa$; it need not equal $\kappa$ unless an additional normality convention is imposed on $U$.

Conversely, an elementary embedding $j:V\to N$ into a transitive class with critical point $\kappa$ yieldsFor the converse use the usual amenability assumption on the class embedding, so this collection is a set. Since $j(\kappa )>\kappa$, exactly one of $j(X)$ and $j(\kappa \setminus X)$ contains $\kappa$, proving the ultrafilter condition. Singletons are excluded because $j(\alpha )=\alpha <\kappa$. If $\lambda <\kappa$ and $X_i\in U$ for $i<\lambda$, then $j$ fixes $\lambda$ and every index below it, giving $j({\bigcap }_{i<\lambda }{X}_i)={\bigcap }_{i<\lambda }j(X_i)$; the intersection still contains $\kappa$. Thus $U$ is $\kappa$-complete and $\kappa$ is measurable.

In particular the first moved ordinal is a strongly inaccessible cardinal. If $\mathrm{cf}(\kappa )<\kappa$, partition $\kappa$ into fewer than $\kappa$ bounded intervals. Each is too small to lie in $U$, contradicting completeness. Thus $\kappa$ is regular. If $2^{\lambda }\ge \kappa$ for some $\lambda <\kappa$, choose distinct subsets $A_{\xi }\subseteq \lambda$ for $\xi <\kappa$. For each $\eta <\lambda$, choose the $U$-large side of the question $\eta \in A_{\xi }$. Intersect these fewer-than-$\kappa$ large sides. The intersection belongs to $U$, but all its indices have identical $A_{\xi }$, so it contains at most one index, contradicting nonprincipality. Therefore $2^{\lambda }<\kappa$ for every $\lambda <\kappa$, as required.

Here an ultralimit in the model-theoretic sense is a model-theoretic ultralimit: start with a first-order structure, take successive ultrapowers along their diagonal elementary embeddings, and take the directed limit of elementary embeddings of that chain. The elementary chain theorem, proved by induction on formulas after identifying the embeddings with inclusions, makes every stage elementary in the limit. This definition concerns structures, rather than the topological ultrafilter limit.

We first prove the needed Frayne embedding lemma. If $C\equiv D$, every finite subset of the elementary diagram of a structure $D$ can be realized in $C$: existentially quantify its finitely many named elements, and use elementary equivalence. Index by finite diagram fragments, choose such realizations, and extend the filter of cones requiring each diagram formula to an ultrafilter. For each $d\in D$, let $f_d$ give its chosen coordinate realizations, filling unspecified coordinates arbitrarily. The Łoś theorem shows that $d\mapsto [f_d]$ is an elementary embedding of $D$ into an ultrapower of $C$. The formulas $c_d\ne c_e$ ensure injectivity.

There is a relative version: if $C⪯D$, keep all named elements from $C$ constant in every coordinate. Each finite diagram fragment is realizable in $C$ over those parameters by elementarity, so the resulting embedding extends the diagonal embedding of $C$ into its ultrapower.

Now use alternating ultrapowers give isomorphic ultralimits. First embed $B$ into an ultrapower $A_1$ of $A$. Apply the relative lemma to $B⪯A_1$, embedding $A_1$ into an ultrapower $B_1$ of $B$ over its diagonal copy. Next embed $B_1$ into an ultrapower $A_2$ of $A_1$ over $A_1$, and continue. After coherent identifications this givesEach $A_{n+1}$ is an ultrapower of $A_n$ along its diagonal embedding, and each $B_{n+1}$ is an ultrapower of $B_n$ likewise. The two subsequences are cofinal in the same chain of elementary substructures, so their limits are the same union. Hence $\boxed{A\equiv B⟹A_{\infty }\cong B_{\infty }}$. No isomorphism theorem for single ultrapowers has been assumed.

An ultrapower $A^I/\mathcal{U}$ comes with its diagonal elementary embedding $a\mapsto [i\mapsto a]$, by the Łoś theorem. A model-theoretic ultralimit is the direct limit of successive ultrapowers along these diagonal embeddings, with elementary unions at limit stages. It is not a topological ultrafilter limit. We prove the needed embedding lemma with parameters and then build the isomorphism.

If $A\equiv B$, name every element $b\in B$ by a constant $c_b$ and let $D(B)$ be its elementary diagram of a structure: all sentences true in this fully named structure. For each finite $F\subseteq D(B)$, the conjunction mentions finitely many constants. Its existential closure in the original language is true in $B$, hence in $A$. Choose an interpretation of those constants in $A$ making $F$ true, and give unmentioned constants arbitrary values. Index these interpretations by $I=[D(B){]}^{<\omega }$. Extend the filter of finite-diagram cones to an ultrafilter $\mathcal{U}$.

Map each $b$ to the class of its coordinate interpretations. Every diagram formula holds on the cone containing it, so the Łoś theorem says this map preserves every formula, including negated equalities between distinct named elements. It is therefore an elementary embeddingThis is the Frayne embedding lemma. Its relative version is crucial: if $A\prec C$, interpret all constants naming elements of $A$ constantly by those same elements. Every finite fragment of the diagram of $C$ with these fixed parameters is realized in $A$, since its existential closure with parameters from $A$ is true in $C$ and elementarity transfers it to $A$. The same construction embeds $C$ into an ultrapower of $A$ while extending exactly the diagonal embedding of $A$.

Now start with $A\equiv B$. Embed $B$ into an ultrapower $A_1$ of $A$. Apply the relative lemma to $B\prec A_1$ to embed $A_1$ into an ultrapower $B_1$ of $B$, extending the diagonal map on $B$. Apply it to $A_1\prec B_1$ to embed $B_1$ into an ultrapower $A_2$ of $A_1$, extending the diagonal map on $A_1$. Continue alternately. Replace structures by isomorphic copies to turn these elementary embeddings into inclusions; the commuting identities supplied by the relative lemma giveIn this common chain the map $A_n\to A_{n+1}$ is its ultrapower diagonal, and so is $B_n\to B_{n+1}$. The initial $A\to A_1$ is also diagonal. The union of the $A$-stages and the union of the $B$-stages are cofinal unions of the same chain, hence are the same structure after these coherent identifications. The elementary chain theorem follows by induction on formulas, with every finite tuple and every existential witness lying in some sufficiently late stage. It shows this union is elementary over all its stages. Thus the two constructed ultralimits are isomorphic.

Conversely every successive ultrapower and elementary union preserves the original complete theory. If ultralimits of $A$ and $B$ are isomorphic, they satisfy the same sentences, and their elementary embeddings of the original structures give $A\equiv B$. ThereforeThis proves Frayne theorem by an explicit alternating construction; it does not assume the stronger theorem about isomorphic single ultrapowers or any cardinal-arithmetic hypothesis.

A measurable cardinal is an uncountable cardinal $\kappa$ carrying a nonprincipal $\kappa$-complete ultrafilter $U$: intersections of fewer than $\kappa$ members of $U$ remain in $U$. Such an ultrafilter contains no set of size less than $\kappa$. Indeed each singleton is absent, and intersecting fewer than $\kappa$ singleton complements shows that every small set's complement is in $U$. In particular every tail of $\kappa$ is in $U$.

Form the ultrapower of the universe by functions $f:\kappa \to V$, identifying functions agreeing on a member of $U$, and interpreting membership coordinatewise modulo $U$. The Łoś theorem, applied separately to each formula, makes the map $x\mapsto [c_x]$ elementary. Countable completeness makes the ultrapower well-founded: an infinite descending chain $[f_{n+1}]\in [f_n]$ would give $U$-large sets witnessing each step, whose countable intersection is nonempty; a coordinate in that intersection would give an infinite descending membership chain in the original universe. The relation is extensional and set-like, so the Mostowski collapse theorem gives a transitive class $M$ and an elementary ultrapower embedding $j:V\to M$.

For each $\alpha <\kappa$, every function $\kappa \to \alpha$ is constant modulo $U$. If no fibre were in $U$, intersecting the fewer than $\kappa$ fibre complements would give the empty set in $U$. Induction on $\alpha$ therefore shows that the collapsed ultrapower ordinal $j(\alpha )$ has precisely the elements $\beta <\alpha$, soThe identity function $\mathrm{id}:\kappa \to \kappa$ represents an ordinal below $j(\kappa )$, and every constant $\alpha <\kappa$ is below it modulo $U$, since a tail is large. ConsequentlyThus the canonical collapsed embedding is not the identity; its first moved ordinal is $\kappa$. For a general measure the identity-function class need not collapse to exactly $\kappa$; that stronger equality holds for a normal measure. The argument above needs only its lower bound.

Conversely, suppose $j:V\to M$ is elementary, $M$ is transitive, its critical point is $\kappa$, and its derived measure is a set, as for the usual definable or amenable class embeddings. DefineBecause $\kappa <j(\kappa )$, elementary preservation of complements and intersections makes this an ultrafilter. It is nonprincipal since $j(\{\alpha \})=\{\alpha \}$ for $\alpha <\kappa$. For a sequence of $\gamma <\kappa$ large sets, $j$ fixes the index ordinal $\gamma$ and takes the intersection to the intersection of their images; $\kappa$ belongs to every image and hence to the intersection. Thus $U$ is $\kappa$-complete. The set-existence qualification excludes treating an arbitrary external class map as a set parameter without justification.

For context, measurability already implies regularity and the strong-limit property. A cofinal sequence of length below $\kappa$ partitions $\kappa$ into that many bounded, hence small, pieces; completeness and their absent fibres contradict covering all of $\kappa$. If there were $\kappa$ distinct subsets of some $\lambda <\kappa$, for each coordinate choose the $U$-large side deciding its membership bit. The intersection of these $\lambda$ large sets would still be large, but all its indices would label the same subset, so it would have at most one member. This contradiction gives $2^{\lambda }<\kappa$. Thus the first moved ordinal is an uncountable strongly inaccessible cardinal, in addition to being measurable.

We prove the Ehrenfeucht-Mostowski theorem by ordered products of ultrafilters, without using Ramsey's theorem. Choose a Skolem expansion $M^{\ast }$ of the infinite structure and distinct elements $b_0,b_1,\dots$. Fix a nonprincipal ultrafilter $U$ on $\mathbb{N}$.

For a finite increasing subset $F=\{i_1<\cdots <i_r\}$ of the desired index order $I$, define the ordered Fubini product of ultrafilters $U_F$ on ${\mathbb{N}}^F$ byThe notation $UnP(n)$ means that the set of $n$ satisfying $P$ belongs to $U$; the leftmost quantifier is outermost. Upward closure and intersection follow successively at each coordinate, and applying complement at each step proves the ultrafilter dichotomy. Products are ordered; no false claim of symmetry is needed.

Put $M_F=(M^{\ast }{)}^{{\mathbb{N}}^F}/U_F$, with $M_{\varnothing }=M^{\ast }$. If $F\subseteq G$, pullback of a function by coordinate projection inducesFor a cylinder condition involving only coordinates in $F$, deleting the unused ultrafilter quantifiers makes its membership in $U_G$ exactly its membership in $U_F$. The Łoś theorem therefore makes ${\sigma }_{FG}$ an elementary embedding, not merely a homomorphism. The projection identities give ${\sigma }_{GH}{\sigma }_{FG}={\sigma }_{FH}$.

Take the directed limit of this system: elements from two stages are identified if their images agree at a common larger finite stage, and formulas are evaluated at such a stage. Elementary coherence makes this well-defined. It also makes each stage elementary in the limit: a formula uses finitely many parameters, and an existential witness at a later stage can be pulled back at the level of existential truth because the transition maps are elementary. Denote the limit by $N^{\ast }$.

For each $i\in I$, let $a_i$ be the limit image of the coordinate function $n_i\mapsto b_{n_i}$. These elements are distinct. For $i<j$, after fixing $n_i$, equality $b_{n_i}=b_{n_j}$ holds for at most one $n_j$, a set not in $U$; hence equality fails in the two-coordinate ultrapower and therefore in the limit.

For any increasing $i_1<\cdots <i_r$, Łoś evaluatesThe right-hand side depends on the formula and the number of increasing coordinates, not their particular indices. Thus $(a_i{)}_{i\in I}$ is order-indiscernible for every formula of the expanded language simultaneously; no preliminary homogeneous thinning is used. If elements of $M$ were named before expanding, the same computation gives indiscernibility over those names and the initial stage embeds the original structure into the limit.

The Skolem hull of these generators is elementary by the witness property. Transporting the generators by any order automorphism of $I$ transports every term, with well-definedness and relation preservation supplied by the formula equivalence just proved. The inverse transport supplies an inverse automorphism. The ordered-ultrapower construction gives the full Ehrenfeucht–Mostowski model and its order automorphisms without Ramsey's theorem.

A model-theoretic ultralimit is the elementary direct limit of a chain of successive ultrapowers along their diagonal embeddings. We will build two such chains with isomorphic limits. This is not a topological ultrafilter limit and does not require the stronger claim that one ultrapower of each structure is already isomorphic.

First prove the Frayne embedding lemma, including the relative form needed to make the diagrams commute. If $C\equiv D$, expand the language by constants naming every element of $D$, and let $\mathrm{ED}(D)$ be its complete elementary diagram. Index by finite subsets $s$ of this diagram. The finitely many constants in $s$ can be interpreted in $C$ so that $s$ holds: existentially quantifying them gives a sentence true in $D$ and hence in $C$. Choose such interpretations, and give unused constants an arbitrary fixed value in the nonempty domain of $C$.

For each diagram sentence $\delta$, its cone $\{s:\delta \in s\}$ has the finite intersection property with the other cones. Extend the generated filter to an ultrafilter $U$. For $d\in D$, let $f_d(s)$ be its chosen interpretation at coordinate $s$. The mapis elementary by Łoś: every formula true of a tuple from $D$, or its negation, is a diagram sentence and holds on its corresponding cone. In particular distinct named elements stay distinct.

If $C⪯D$, the construction can keep every constant naming $c\in C$ equal to that same $c$ at every coordinate. For a finite diagram fragment, existentially quantify just the names outside $C$; the resulting formula with parameters in $C$ is true in $D$, hence true in $C$. Thus the finite realizations still exist with all those old names fixed. ConsequentlyThis relative extension of the diagonal map is the essential strengthening.

Now let $A_0\equiv B_0$. The nonrelative lemma embeds $B_0$ into an ultrapower $A_1$ of $A_0$. Identify the image with a copy of $B_0$ inside $A_1$. Since $B_0⪯A_1$, the relative lemma embeds $A_1$ into an ultrapower $B_1$ of $B_0$ extending its diagonal map. Rename this larger structure so that the displayed copy of $A_1$ is a literal elementary substructure. Next apply the relative lemma over $A_1⪯B_1$ to embed $B_1$ into an ultrapower $A_2$ of $A_1$ fixing its diagonal copy. Continue alternately. We obtain a coherent elementary chainwith $A_0⪯A_1$ as well. Each inclusion $A_n\to A_{n+1}$ is, up to these coherent identifications, the diagonal embedding into its ultrapower; the same holds for $B_n\to B_{n+1}$. It is the relative clause, not merely the existence of arbitrary elementary embeddings, which guarantees this.

By the elementary chain theorem, the unions of the two subsequences are elementary limits. They are the same structure: each $A_n$ lies in a subsequent $B_n$, and each $B_n$ lies in $A_{n+1}$. Hence the alternating ultrapowers give isomorphic ultralimits construction provesConversely each ultrapower and each elementary direct limit has the same first-order theory as its starting structure. Isomorphic ultralimits therefore imply $A_0\equiv B_0$ as well. Thus the conclusion exactly characterizes elementary equivalence at the level of ultralimits.

Let $M^{\ast }$ be a full Skolem expansion of an infinite structure $M$, choose distinct $b_n\in M$ for $n\in \mathbb{N}$, and extend the cofinite filter to a nonprincipal ultrafilter $U$ on $\mathbb{N}$. For a finite subset $F=\{i_1<\cdots <i_r\}$ of the desired index order $I$, define the ordered Fubini product of ultrafilters $U_F$ on ${\mathbb{N}}^F$ bywhere $UnP(n)$ means $\{n:P(n)\}\in U$. These nested tests decide complements and preserve intersections by induction on $r$, so $U_F$ is indeed an ultrafilter. For the empty set use the one-point index set and its principal ultrafilter.

Put $M_F=(M^{\ast }{)}^{{\mathbb{N}}^F}/U_F$. If $F\subseteq G$, projection of coordinates inducesA truth test independent of a coordinate is unchanged by its dummy ultrafilter quantifier. Consequently pullback preserves exactly the $U_F$-large subsets, proving that the map is well defined and injective. The Łoś theorem, applied to every formula rather than just to equality, proves that it is an elementary embedding. Projections compose, so these elementary maps form a coherent directed system.

Take its directed limit of elementary embeddings $N^{\ast }$. Explicitly identify two stage elements when their images agree at a common larger stage, and interpret functions and relations there. For an existential formula true in the limit, its parameters and a witness occur at a common stage; elementarity then pulls truth back to the stage of the original parameters. This verifies that all stage maps into the limit are elementary.

Let $a_i$ be the image in this limit of the coordinate class $[n\mapsto b_n]\in M_{\{i\}}$. These elements are distinct: in $U_{\{i,j\}}$, equality would require $n_i=n_j$, whose inner-coordinate section is a singleton and hence not in the nonprincipal $U$. For $i_1<\cdots <i_r$, the truth of any expanded-language formula on $(a_{i_1},\dots ,a_{i_r})$ is exactlyThis expression depends on the formula and the tuple length, not on the chosen increasing indices. Thus $(a_i{)}_{i\in I}$ is an order-indiscernible sequence. The empty-coordinate stage embeds $M^{\ast }$ elementarily into $N^{\ast }$.

Their Skolem hull is elementary by the witness-function argument, and an order automorphism of $I$ extends to it by transporting the generators in every term. Equality and relation preservation follow from the displayed uniform truth test, and the inverse order automorphism gives the inverse map. Therefore this proves the Ehrenfeucht-Mostowski theorem through ultrapowers and their directed limit, with no Ramsey-theoretic step.

A model-theoretic ultralimit is the direct limit of a chain of successive ultrapowers along their diagonal elementary maps. It is not the topological notion of a limit along an ultrafilter. We first prove the precise relative embedding lemma needed to synchronize two such limits.

If $A\prec B$, then $B$ embeds elementarily into an ultrapower of $A$, with the embedding restricting on $A$ to its diagonal map. To prove this Frayne embedding lemma, use the elementary diagram of $B$ with the elements of $A$ treated as named parameters. Every finite fragment $\Delta$ of that diagram has a realization in $A$: replace its finitely many names from $B\setminus A$ by variables and existentially quantify their conjunction. It is true in $B$, and hence true in $A$ by elementarity. Choose these simultaneous realizations for each finite fragment, keeping every parameter from $A$ interpreted as itself; give unmentioned names an arbitrary default in the nonempty $A$.

On the index set of finite fragments, extend the filter of cones $\{\Delta :\Delta \supseteq \Gamma \}$ to an ultrafilter $U$. For each $b\in B$, let $g_b(\Delta )$ be its value in the chosen coordinate realization. Every diagram sentence is satisfied on its cone, so the Łoś theorem makes $b\mapsto [g_b]$ an elementary embedding $B\to A^I/U$. Inequalities in the diagram ensure injectivity. If $b\in A$, all its coordinates equal $b$, giving exactly the diagonal map.

There is also the initial version: if merely $A\equiv B$, then $A$ embeds elementarily into an ultrapower of $B$. A finite fragment of the elementary diagram of $A$, with all its names replaced by variables, yields an existential sentence true in $A$ and hence in $B$. The identical finite-fragment and cone construction therefore proves this version without already assuming an embedding.

Start with $A_0=A$. Use the initial version to place $A_0$ elementarily in an ultrapower $B_0$ of $B$. Relabel embedded copies so we can regard the elementary maps as inclusions. Apply the relative version to $A_0\prec B_0$ to obtain an ultrapower $A_1$ of $A_0$ containing $B_0$, and whose inclusion of $A_0$ is its diagonal map. Next apply it to $B_0\prec A_1$ to obtain an ultrapower $B_1$ of $B_0$ containing $A_1$, again fixing the earlier diagonal inclusion. Continuing gives an elementary chainThe common union $C$ is elementary over every stage by the elementary chain theorem, andThe first presentation is a model-theoretic ultralimit of $A$. The second, preceded by the initial diagonal embedding of $B$ into $B_0$, is a model-theoretic ultralimit of $B$. Each consecutive same-letter inclusion is precisely the corresponding ultrapower diagonal map, not just an unspecified elementary embedding. Thus the two limits are identified with the same structure $C$, proving

First use the fact that a small set is absent from a complete nonprincipal ultrafilter. Indeed, if $A\subseteq \kappa$ and $|A|<\kappa$, then every $\kappa \setminus \{\alpha \}$, $\alpha \in A$, belongs to $U$ by nonprincipality. Kappa-completeness gives $\kappa \setminus A\in U$, so $A\notin U$. In particular every final segment $\{i:i>\alpha \}$ belongs to $U$.

Suppose for contradiction that the ultrapower has at most $\kappa$ elements. List representatives $f_{\alpha }:\kappa \to M$ for all its classes, indexed by $\alpha <\kappa$; repetitions are allowed. At coordinate $i<\kappa$, fewer than $\kappa$ values occur among $f_{\alpha }(i)$ with $\alpha <i$. Since $|M|\ge \kappa$, chooseThis diagonal argument for ultrapower cardinality uses the axiom of choice. For each fixed $\alpha$, the functions $g$ and $f_{\alpha }$ disagree throughout the final segment $i>\alpha$, which belongs to $U$. Their equality set therefore cannot belong to $U$, and $[g]\ne [f_{\alpha }]$.

This contradicts the assumed enumeration of the ultrapower. HenceThe proof uses only that each ordinal $i<\kappa$ has cardinality below $\kappa$; it does not require a separate assumption of regularity.

One form of the Ehrenfeucht-Mostowski theorem says that, for every infinite first-order structure $M$ and every total order $I$, an elementary extension contains distinct elements $(a_i{)}_{i\in I}$ forming an order-indiscernible sequence. After a suitable Skolem expansion, their Skolem hull is a first-order model of $\mathrm{Th}(M)$, and every order automorphism of $I$ extends to a structure automorphism of that hull. If $M$ has a definable infinite linearly ordered subset $P$, the generators may lie in $P$ and their order may agree with that definable order. Uniqueness of the extended structure automorphism is asserted in the chosen Skolem expansion, rather than for every structure automorphism of its reduct.

Here is an ultraproduct proof of the Ehrenfeucht-Mostowski theorem. First expand $M$ to $M^{+}$ with Skolem functions for all existential first-order formulas, iterating through the enlarged languages if necessary. This is done in the ordinary classical metatheory; the choice restriction in question 1 is not a restriction on this question. Fix a nonprincipal ultrafilter $\mathcal{U}$ on $\mathbb{N}$.

We can obtain an infinite sequence of distinct elements $b_0,b_1,\dots$ in an elementary extension $M_0$ of $M^{+}$ by one preliminary ultrapower. For each $n\ge 1$ choose a finite list of $n$ distinct elements of $M^{+}$. Represent $b_j$ by the function taking the $j$th entry when $n>j$, with an arbitrary default otherwise. Distinctness holds on a cofinite set, so follows from Łoś theorem. In the definably ordered variant, first name any parameters defining $P$, and choose each finite list increasingly inside $P$ instead; then $M_0\models P(b_j)$ and $b_j<b_k$ for $j<k$. Infinitude of an ordered set supplies every finite increasing chain. This preparatory step uses no Ramsey theorem.

For a finite subset $F=\{i_1<\cdots <i_r\}$ of $I$, define the ultrafilter ${\mathcal{U}}_F$ on ${\mathbb{N}}^F$ by nested membership, in this order:where $(\mathcal{U}n)Q(n)$ means $\{n:Q(n)\}\in \mathcal{U}$. This is the ordered Fubini product of ultrafilters. Closure under intersections and the decision between a set and its complement hold at each nested level, proving it is an ultrafilter. For $F=\varnothing$ take the principal ultrafilter on the one-point product. PutIf $F\subseteq G$, pull a function back along the projection ${\mathbb{N}}^G\to {\mathbb{N}}^F$. A test independent of an omitted coordinate is unchanged by its ultrafilter quantifier, so projection pushes ${\mathcal{U}}_G$ to ${\mathcal{U}}_F$. The induced map $N_F\to N_G$ is therefore an elementary embedding by Łoś theorem. These maps are coherent, giving a directed system indexed by finite subsets of $I$.

Take its directed limit of elementary embeddings $N$. One can verify elementarity directly: representatives of a finite tuple occur at a common stage; functions and atomic relations are interpreted there. In the existential step, a witness in the limit occurs with the parameters at some later common stage, and elementarity pulls the existence statement back. Thus every $N_F$ embeds elementarily into $N$, which contains an elementary copy of $M^{+}$.

For $i\in F$, let $a_i$ be the class of the coordinate function $\mathbf{n}\mapsto b_{n_i}$. Projection coherence makes this independent of $F$. If $i<j$, then for each fixed $n_i$ the set $\{n_j:n_j\ne n_i\}$ is cofinite. The nested test therefore gives $a_i\ne a_j$. In the ordered variant, the same argument with $n_j>n_i$ gives $P(a_i)$ and $a_i<a_j$.

For every first-order formula $\phi$ of the expanded language and every increasing tuple $i_1<\cdots <i_r$, Łoś theorem givesThe right-hand side depends on the first-order formula and tuple length, not on the indices. This proves order indiscernibility in the expanded language. Let $H$ be the Skolem hull of the generators in $N$. The Tarski-Vaught test gives $H\prec N$, and its reduct is a first-order model of $\mathrm{Th}(M)$.

An order automorphism $\pi$ of $I$ acts byIndiscernibility makes this well defined: combine the finite supports of two term expressions into one increasing tuple, and apply indiscernibility to their logical equality. Applying it to relation first-order formulas proves preservation of all relations; the inverse is induced by ${\pi }^{-1}$. Every element of the hull is such a term, so the extension is unique among structure automorphisms preserving the Skolem expansion. MoreoverThis proves the theorem, including its ordered version and structure automorphism conclusion, using ultrapowers and a directed limit throughout.