In a countable language, an ultraproduct over a nonprincipal ultrafilter on realizes every countable finitely satisfiable type, including types over countably many parameters. Enumerate the type , and let be the ultrafilter-large set of coordinates where the first first-order formulas have a simultaneous witness. Put . At coordinate , choose a witness for the largest with , or an arbitrary element when there is none. For each fixed , the resulting function satisfies the first first-order formulas on . The Łoś theorem then realizes the entire type. Countability of the language and parameter set makes the enumeration possible.
An ultraproduct over a nonprincipal ultrafilter on realizes each countable finitely satisfiable type. For the first formulas, their coordinate simultaneous-witness set belongs to the ultrafilter by the Łoś theorem. Replace it by and choose at coordinate a witness to as many initial formulas as that coordinate permits. This finite number tends to infinity modulo the ultrafilter, so the resulting product class realizes every formula. More generally countably incomplete ultrafilters admit the same descending-set diagonalization. This statement does not assert saturation at every larger cardinal.
For a family of first-order structures, take free filters on the index set as worlds, ordered by inclusion, and product sequences as parameters. Force an atom when its coordinate truth set belongs to the filter. Conjunction is local, implication and negation quantify over filter extensions, and a disjunction is forced when every extension has a further extension forcing one disjunct. Existence is witnessed by a product sequence and universality holds for all sequences at all extensions. With the axiom of choice, induction on formulas identifies forcing with membership of the classical coordinate truth set. Equivalently, every ultrafilter extension satisfies the formula in its ultraproduct. Thus the semantics validates classical logic. A local disjunction rule would fail this identification: a set and its complement can both be absent from a free filter, while their union is the whole index set.
Łoś theorem Created 2026-09-24 Updated 2026-10-14
This theorem characterizes truth in an ultraproduct. Łoś's theorem says that a first-order formula holds in an ultraproduct exactly when it holds in a set of factors belonging to the ultrafilter.
The saturated model condition in degree means that a first-order model realizes every one-variable complete type over a parameter set of size less than . Equivalently every finitely satisfiable such complete type is realized, since it can be extended to a complete type. Without a specified degree, saturated usually means -saturated. Countable saturation means -saturation, including complete types over countably many parameters.
Here is a general saturated elementary extension theorem, with proof: for every infinite regular cardinal , every first-order structure has a -saturated elementary extension. At a stage , list all complete types over its subsets of size less than . There is a set of them, since their formulas lie in a set-sized language. Add a witness constant for each complete type to the elementary diagram of , together with every formula in that complete type evaluated at its witness constant. A finite part mentions finitely many complete types and finitely many formulas from each; each finite conjunction is realizable in , and the witnesses for different complete types are unconstrained relative to each other. Thus the finite part is satisfiable. The compactness theorem produces an elementary extension realizing all those complete types. At limits take elementary unions, justified by the elementary chain theorem.
Iterate for stages and put . If has size below , regularity bounds the stages at which its elements enter, so for some . A complete type over consistent with is finitely satisfiable in : each finite conjunction is an existential formula with parameters from , and elementarity transfers its truth from . The complete type is therefore realized in . This proves
For a singular desired degree, apply the theorem at a larger regular cardinal. If is infinite and an uncountable regular satisfies , with and , the construction can keep every stage of size . There are then at most parameter sets and complete types, and downward Löwenheim-Skolem gives that size after each extension; adding distinct elements initially ensures final size exactly . The resulting model is saturated in the unqualified sense. The cardinal-arithmetic hypothesis belongs to this size refinement, not to the general existence theorem.
An explicit ultraproduct version is useful too. In a countable language let be a nonprincipal ultrafilter on and , where each factor is nonempty. Enumerate a countable finitely satisfiable complete type, including its chosen parameter representatives, as . By the Łoś theorem, the set of coordinates where the first formulas have a simultaneous witness belongs to . Put
These are decreasing members of . At coordinate , let be the greatest with , if there is one. Choose a witness to the first formulas there, and an arbitrary element when there is none. For fixed , every coordinate in has , so the chosen function satisfies on a -large set. Its ultraproduct class realizes the whole complete type. A countable language over a countable parameter set has only countably many formulas, so this proves countable saturation of a nonprincipal ultraproduct over omega.
For NFU, we give the rank-indiscernible construction of an NFU model explicitly. NFU has a unary predicate for sets, atoms have no members, extensionality applies to sets, and comprehension applies to every stratified formula. A stratification assigns integer types to variables so that equality uses equal types and requires . A unary set predicate adds no type difference.
Start with the actual set structure . This structure satisfies extensionality and every pure-membership separation instance: the subset defined in a set of rank below still has rank below . We do not assert that satisfies replacement or all of ZFC. Expand it by Skolem functions. In it use the sequence of rank objects , . For two such objects in sequence order, we have
with quantifiers in . The second statement holds because every subset of belongs to , and the later rank is at least .
Introduce constants , , and require them to be order indiscernibles in the Skolem language, satisfying these two assertions whenever . Also require for every ; this fixed rank object is first-order definable in . Every finite part of these requirements together with is satisfiable: color finite increasing tuples of the original rank sequence by the truth values of the finitely many formulas mentioned, and use Ramsey's theorem to get a homogeneous subsequence. The rank assertions hold for every increasing tuple there. The compactness theorem gives a model of the full theory. In its Skolem hull generated by the , the integer shift extends to an automorphism with , by the term-transport proof of the Ehrenfeucht-Mostowski theorem. Thus still satisfies extensionality and all pure-membership separation instances, and
This is a set-sized first-order model; no satisfaction predicate for a proper-class universe is being assumed.
Externally let . The automorphism bijects onto . Interpret a typed structure with sort equal to . At sort , declare a set exactly when ; otherwise it is an atom. Define adjacent-sort membership by
The guard is necessary: a typed atom might have some ordinary -members in , and those must not become its typed members. Set-extensionality follows from extensionality in , because the ordinary members of a typed set all lie in . For any typed formula on sort , its quantifiers can be restricted to the corresponding , its set predicates replaced by subset assertions, and its memberships replaced by the guarded relation. This is an ordinary pure-membership formula of with finitely many parameters. Separation gives its extension , and the displayed closure assertion gives . It is therefore a typed set witnessing comprehension. The automorphism shifts these sorted domains and preserves the set flags and guarded memberships.
Collapse the types onto . Define
Objects not satisfying have no -members. If two sets have the same -members, their images under are subsets of with the same ordinary members, so are equal by extensionality of ; injectivity of gives equality of the original objects.
To verify every stratified comprehension instance, assign a variable its stratification type and translate its value to . Equality is preserved. An atomic translates to the guarded adjacent-sort membership because ; the unary predicate translates to . Induction on formulas, using the domain bijections for quantifiers, preserves truth. If the free variable has type , typed comprehension produces its extension , with . Put . Then holds, and for every ,
This is exactly the required NFU set. No formula containing the external automorphism has been used in a separation or comprehension scheme; only transports values after the pure formula is formed.
The construction also permits the usual infinity requirement. The ordinary and its successor graph are definable in , hence fixed by , and lie below , so belong to all the required domains. Under , the members of are still its ordinary -members. The new Kuratowski pair satisfies
Since , membership of this pair in under is equivalent to . Thus is an internal injection of into itself omitting zero, giving a Dedekind-infinite set.
We have built a model of NFU, with infinity if it is included in the formulation, in ordinary ZFC metatheory:
In particular . This proof does not assume as an additional internal axiom: its starting structure is the set , not a model of ZFC.
An ultraproduct converts coordinatewise finite information into a single first-order structure. Let be nonempty structures in a common first-order language, and let be an ultrafilter on . In , set
The ultraproduct has these equivalence classes as its elements. Functions are interpreted coordinatewise; a relation holds of classes exactly when it holds on a -large set of indices. Intersecting finitely many large agreement sets shows that these interpretations are independent of representatives.
The Łoś theorem, which explains the construction's usefulness, says
Here is the proof. Induction on terms establishes the coordinatewise interpretation of atomic formulas. Finite intersections handle conjunction, and the ultrafilter property handles negation, since precisely one of a set and its complement is large. For an existential quantification, a witness class gives coordinate witnesses on a large set. Conversely, when the coordinate existential truth set is large, select a witness in each of those structures and a default element elsewhere. Its class is a witness in the ultraproduct. This uses choice. Structural induction on formulas now proves the theorem, with universal quantification obtained by negation.
Compactness. If every finite subset of a first-order theory has a model, take to be the finite subsets and choose . The cones for finite have the finite intersection property. Extend their filter to an ultrafilter by the ultrafilter lemma. For each , its cone is large, so the Łoś theorem makes the ultraproduct satisfy . This proves the compactness theorem, including theories of arbitrary set size.
Elementary extensions and nonstandard elements. An ultrapower uses a fixed structure at every coordinate. The diagonal map sending to the class of the constant function is an elementary embedding by the Łoś theorem. For a nonprincipal ultrafilter on , the class of in an ultrapower of the natural numbers exceeds every standard integer, because each corresponding tail is large. In an ultrapower of the real ordered field, the reciprocal of this element is positive and smaller than every positive standard reciprocal integer: an infinitesimal. These examples implement ordinary finite statements in a larger structure without claiming that every external subset or second-order assertion transfers.
Saturation. Such an ultraproduct over is countably saturated. To see the actual diagonal argument, list a finitely satisfiable type with parameters in the ultraproduct and fix representatives for those parameters. For each , the set of coordinates admitting a simultaneous witness to its first formulas belongs to by the Łoś theorem. Arrange that the decrease and put . The decrease, belong to , and have empty intersection. At coordinate , choose a witness to the first formulas, where is the largest with , or choose a default element if there is no such . For each fixed , on the large set . Therefore the resulting class realizes every formula. This proves countable saturation of an ultraproduct over omega; it does not assert saturation at all larger cardinalities.
Algebraic limits. Take finite fields indexed by the primes and a nonprincipal ultrafilter. Their ultraproduct is a field of characteristic zero: for every fixed positive integer , only finitely many primes divide , so on a large set. Every first-order sentence true in all finite fields holds in this infinite field, and more generally so does any sentence true for all but finitely many of the factors. This is a way to create an infinite field retaining uniform first-order information from finite fields. It does not make the field algebraically closed: the first-order sentence that every element is a square already fails in infinitely many of the factors.
Large cardinals. A countably complete ultrafilter gives a well-founded membership ultrapower of the universe. If it had an infinite descending chain represented by , each set
would be large. Countable completeness makes nonempty, giving an actual infinite membership descent at any index in the intersection, contrary to foundation. The Mostowski collapse therefore gives a transitive target and an ultrapower embedding .
For a measure on a measurable cardinal , every function with is constant on a large set: otherwise intersect the fewer than complements of all its fibres. Consequently fixes the ordinals below . The class of the identity function is below and above every constant class below , since all tails are large. Thus and its critical point is . Fine ultrafilters on that are normal ultrafilters on small subsets and kappa-complete yield the stronger embeddings witnessing supercompact cardinals.
These applications share a single principle: an ultraproduct preserves precisely the first-order information seen by its ultrafilter. Principal ultrafilters merely select a factor; nonprincipal ones can produce new sizes, elements and saturation. Existence of the needed ultrafilters and selection of coordinate witnesses are set-theoretic assumptions, and changing the ultrafilter may change the resulting model.
An ultraproduct assembles a family of nonempty first-order structures in one fixed language, using an ultrafilter to specify which coordinate statements hold almost everywhere. Its universe is
Functions are interpreted coordinatewise, and an -ary relation holds on when its coordinate truth set belongs to . Changing representatives changes such a truth set only off a -large set, so these definitions are well defined. A principal ultrafilter simply recovers its distinguished factor; a nonprincipal ultrafilter can produce new elements and structures.
The fundamental result is the Łoś theorem:
Prove it by structural induction on first-order formulas. Atomic formulas are the definition. Intersections handle conjunction, while exactly one of a set and its complement belongs to an ultrafilter, handling negation. For the existential step, if the coordinate existential truth set is in , use choice to select witnesses there and arbitrary values elsewhere; their product function is an ultraproduct witness. Conversely a product witness makes the coordinate existential truth set contain a -large set. Other connectives and universal quantification follow.
In an ultrapower, all factors are one structure . The diagonal map is an elementary embedding by the Łoś theorem. For a nonprincipal on , the class of in an ultrapower of the standard natural numbers is larger than every constant natural number, since each tail belongs to . This gives a nonstandard model of Peano arithmetic. Similarly, an ultraproduct of finite fields with distinct primes tending to infinity has characteristic zero: for every fixed positive integer , the equation fails in all sufficiently late factors. An infinite structure can therefore arise from finite factors.
Ultraproducts prove the compactness theorem. If each finite subset of a theory has a model , index these models by . The cones have the finite intersection property. Extend their filter to an ultrafilter using the ultrafilter lemma. The Łoś theorem makes the resulting ultraproduct satisfy every . This construction also gives elementary extensions realizing prescribed finitely satisfiable types.
A useful stronger property is countable saturation of an ultraproduct over omega. Let a countable type be finitely satisfiable in an ultraproduct over a nonprincipal on . Choose coordinate representatives of its parameters. Let be the coordinates where the first formulas have a simultaneous witness; then , the decrease, and we can replace by . At coordinate , choose a witness to the first formulas, where is the largest with , taking an arbitrary value if there is none. For each fixed , the set where is -large. Its class realizes the entire type. This proof uses countable incompleteness of , not arbitrary completeness or automatic saturation at larger cardinals.
Finally, complete ultrafilters connect ultraproducts to large cardinals. A countably complete ultrafilter prevents an externally infinite descending membership chain in an ultrapower of a well-founded universe: intersect the countably many coordinate truth sets and obtain an impossible descending chain at one coordinate. A kappa-complete nonprincipal ultrafilter on consequently supplies the ultrapower embedding associated with a measurable cardinal. Thus the same construction supports both elementary compactness arguments and large-cardinal embeddings, with the completeness hypothesis deciding which well-foundedness and closure properties survive.
We prove the Ehrenfeucht-Mostowski theorem by ultraproducts, with no application of Ramsey theorem. Expand the infinite structure by Skolem functions, choose distinct elements , and choose a nonprincipal ultrafilter on . Let be the desired total index order and put .
For every finite ordered subset , define an ultrafilter on by the ordered Fubini product of ultrafilters: a set belongs to exactly when
Here means , with the quantifiers nested in the displayed order. The resulting collection is an ultrafilter, by induction using the ultrafilter laws for negation and conjunction. For , the inverse image of under coordinate projection belongs to exactly when : quantifiers on unused coordinates leave a truth value unchanged.
Consequently there is a well-defined ultrafilter on the Boolean algebra of finite-coordinate cylinders in , declaring a cylinder large by this test. Coherence proves finite intersection closure and ensures that the empty cylinder is not large. Extend its generated filter to an ultrafilter on all subsets of . Form the ultrapower , and for let be the class of .
If , the coordinate equality test belongs to no corresponding two-coordinate product ultrafilter: for every value of the outer coordinate, the inner equality set is a singleton, excluded by nonprincipality. Hence the are distinct. For any first-order formula and any , the Łoś theorem gives
The right side is independent of the actual increasing index tuple, so the form an order-indiscernible sequence. Constant functions embed elementarily into . Take the Skolem hull of the generators. The Tarski-Vaught test gives an elementary substructure, and transporting terms along an index-order automorphism gives a well-defined automorphism of the hull, with inverse obtained by transporting along the inverse index automorphism. Equality of term representations is preserved by indiscernibility. This is the indiscernible and automorphism conclusion of Ehrenfeucht–Mostowski, obtained entirely from ultrafilters and Łoś's theorem. The ordered Fubini products need not be symmetric; order indiscernibility is exactly what their coherence supplies.
For nonempty first-order structures in a common language and an ultrafilter on , identify product functions by
The ultraproduct has these equivalence classes as elements. Functions are interpreted coordinatewise, and a relation holds of classes exactly when its coordinatewise truth set belongs to . Closure under finite intersections makes these interpretations independent of representatives.
The Łoś theorem asserts
Prove it by induction on first-order formulas. Atomic first-order formulas hold by the definitions and induction on terms. Conjunction uses intersections, and negation uses the fact that an ultrafilter contains exactly one of a set and its complement. For an existential first-order formula, a product witness gives a coordinate witness on a -large set. Conversely, on the -large set where a coordinate witness exists, choose one in each factor, and choose arbitrary values elsewhere. Its class is a product witness by the induction hypothesis. This is the only witness-selection step; the surrounding argument is made in a choice metatheory. The special case with all factors equal is an ultrapower, and constant functions give an elementary embedding.
Here is a direct compactness theorem proof. Suppose every finite subset of a theory has a model. Index factors by the finite subsets , choosing . For finite , the cone is nonempty, and . Extend the generated proper filter to an ultrafilter . For every sentence , its truth set contains , so the Łoś theorem gives . Finite satisfiability therefore implies satisfiability, directly from the ultraproduct construction rather than from a syntactic completeness argument.
For saturated models, a structure is -saturated if every complete type over fewer than parameters is realized. A useful concrete case is countable saturation of a nonprincipal ultraproduct over omega. In a countable language, enumerate any finitely satisfiable type over countably many parameters as , and represent its parameters by product functions. By the Łoś theorem, the set of coordinates where the first first-order formulas have a simultaneous witness belongs to the nonprincipal ultrafilter . Put
These are decreasing -large sets. At coordinate , let be the largest with , or zero if none exists, and choose a witness for the first first-order formulas. For fixed , every coordinate in has , so the resulting product function satisfies on a -large set. Its class realizes the whole type. Thus such an ultraproduct is -saturated.
There is also an existence construction at every prescribed degree . Given an infinite model , choose a regular cardinal and construct an elementary chain . At a successor stage, add a new constant for a realization of every type over every subset of of size below , together with the elementary diagram of . Every finite part is satisfiable: only finitely many types and finitely many first-order formulas from each are involved, and each finite type fragment has a witness in . Compactness therefore supplies a simultaneous elementary extension. At limits take unions. To justify elementarity of a union, any existential first-order formula with parameters in an earlier stage has a witness in that stage whenever it has one at a later stage, by elementarity; this is the Tarski-Vaught test.
Any fewer-than- parameters of occur together in some , by regularity of . A type over them which is finitely satisfiable in is finitely satisfiable in , again by elementarity, and was realized in . Hence every infinite structure has a -saturated elementary extension for any prescribed cardinal . No bound on the size of this extension is asserted; full saturation at the model's own cardinality has additional cardinal-arithmetic issues.
Let be nonempty first-order structures in one language and let be an ultrafilter on . In the ultraproduct , identify functions when , interpret functions coordinatewise and relations by their coordinate truth sets. The Łoś theorem states that for every first-order formula ,
All interpretations are independent of representatives: changing finitely many arguments on -small sets changes truth only on their finite union, also -small.
Prove the theorem by structural induction on formulas. Terms evaluate coordinatewise by induction on terms. This proves the atomic cases of logical equality and relation symbols. For conjunction, intersect the two truth sets and use the filter laws. For negation, the truth set is complemented, and an ultrafilter contains exactly one of a set and its complement. These cases supply the other Boolean connectives too.
For the existential step, a witness in the ultraproduct makes the coordinate truth set for belong to by the induction hypothesis. That set is contained in the coordinate truth set of , so the latter is in . Conversely, if that existential truth set belongs to , choose a witness in for each , and any element of elsewhere. The axiom of choice supplies this function. The induction hypothesis makes a witness in the ultraproduct. Universal quantification follows by negation. This completes the proof.
For the compactness theorem, take to be the set of finite subsets of the given theory . For each , choose . For , the cone is nonempty, and any finite intersection of such cones contains their union as an index. Extend the filter they generate to an ultrafilter . By the proved Łoś theorem, the ultraproduct satisfies every , because its coordinate truth set contains . Thus . This proves compactness without assuming it in the ultraproduct construction.