Start with a well-founded universe of sets over an infinite set of urelements. The full symmetric group of acts recursively on sets. Retain the objects all of whose descendants have a finite support in a permutation action. This class satisfies set-extensionality, foundation, infinity, pairing, union, separation, replacement and its internal power set axiom. A definable functional image has the finite union of the supports of its domain and parameters as a support; uniqueness makes the image invariant. The family of two-element subsets of has no choice function: a transposition of two atoms outside the function's finite support fixes their pair and moves either possible choice. For untyped membership with extensionality merely restricted to nonempty objects, atoms are also vacuous subsets; add all atoms to each internal power-set object.
Build well-founded coded sets over a single urelement with no members, retaining a distinct empty set. Use the unmodified membership language, so both and the empty set have the same empty extension and extensionality fails. Pairs, unions, separation and functional ranges have set codes, and pure natural numbers give infinity. For the unrestricted Axiom of power set, the power-set code must contain as well as all ordinary subset codes, since the atom is vacuously a subset of every object. Rank gives foundation. Thus the other ZF axioms hold.
The independence statements are relative consistency statements. We construct models from an ambient model of ZFC; the construction is an interpretation and does not assume that the ambient model is transitive. Foundation is already true in the ordinary ambient membership structure, so its positive consistency direction is immediate.
For the negative direction, construct an extensional cumulative universe over Quine atoms. Let be a countably infinite set of formal symbols . Give each the extension . For a set of already constructed objects, let be its unique representative: set , and otherwise use a fresh tagged code . Atom codes have a different tag. Begin with and put
Set . The interpreted membership relation gives exactly the members , and gives exactly the member . This convention matters: creating a second representative for would violate extensionality. Every object is uniquely determined by its extension, so satisfies full extensionality. Every set-sized collection of objects has bounded construction rank, by ambient replacement, and hence has its representative in .
Here are the remaining axiom verifications. Empty set and pairing use and . If , its interpreted union is . Its interpreted power set is
since every subset extension has a unique representative. The pure, atom-free finite hierarchy supplies a copy of and an inductive set. For separation, translate an -formula into the ambient language, with quantifiers restricted to the definable class ; ambient separation gives the appropriate subset of , and represents it. For replacement, uniqueness in the interpreted functional relation gives an ambient definable functional image of the set . Ambient replacement makes that image set-sized, and again represents it. These arguments also establish that all the operations used have bounded construction rank.
Ambient choice gives choice in : choose a member from each nonempty extension in a set-sized family and represent the graph, using interpreted ordered pairs. But , and the nonempty set with extension has no -minimal member. Thus
Together with the ordinary model, this proves independence of foundation from the other ZF axioms, even when choice is retained.
To extend the construction to failure of choice, let the full permutation group of act on by
The singleton convention is equivariant, so this is an automorphism of . An object has finite support if some finite has the property that every permutation fixing pointwise fixes the object. Retain objects all of whose membership descendants have finite support, stopping the hereditary recursion at the atomic self-loops. This gives the hereditarily finite-supported Quine-atom model ; each belongs to it, with support .
Extensionality persists because every retained object's members are retained. Empty set, pairing, infinity and union preserve hereditary finite support. For separation on a retained set , the union of finite supports for and the formula's parameters supports the separated extension: permutations fixing those supports preserve satisfaction in . All its members are retained, so its representative is retained. For replacement, the same support fixes the functional range, because an automorphism must take the unique output at an input to the unique output at its transported input. Ambient replacement bounds that range; all its members are in , so its representative belongs to . Finally, the collection of all retained subset representatives of is an ambient set, contained in the full interpreted power set of . A support of permutes this collection onto itself, and its members are retained. Its representative is therefore the internal power set in . This verifies every ZF axiom except foundation; foundation still fails at each .
The atom set and the family of its two-element subsets have empty support and are retained. Suppose a choice function on were retained, with finite support . Choose distinct outside and transpose them. The transposition fixes and fixes the unordered pair , but moves whichever of its two members selects. Equivariance would require that selected member to be fixed, a contradiction. Hence
The full universe gives the corresponding positive-choice model. Choice is therefore independent of ZF without foundation. Unlike a permutation model with ordinary urelements, this model retains full pure-set extensionality: the atomic objects are self-membered sets, not empty objects exempted from extensionality.
The constructible-universe interpretation gives . Thus the consistency assumptions in both displayed conclusions can equivalently be taken to be ; no additional consistency strength is being used.
Independence here is a relative consistency assertion: from a ground first-order model satisfying ZFC, construct a first-order model of each remaining theory in which the omitted axiom fails. The ground axiom of choice is a tool for constructing these countermodels, not an extra axiom imposed on the theories being tested. The constructible universe supplies the usual relative-consistency implication from ZF to ZFC, so this ground choice assumption requires no additional consistency strength. These constructions can be formalized inside an arbitrary ground model; they do not require the stronger assumption that a transitive model exists.
Union. Put and use the hereditarily locally small membership model
The ground cardinal is a strong limit cardinal of countable cofinality. This transitive class contains the empty set and . Pairing preserves the bound, as does taking a subset, so separation holds for every formula relativized to this class. If an internally definable function has domain , ground replacement collects its range . Since and every descendant of an element of already has fewer than members, . Thus the full functional Axiom schema of replacement holds. For , every actual subset of belongs to the class and
Consequently its entire power set belongs to the class. Extensionality and foundation are inherited from the ground membership relation; witnesses infinity. However belongs to , while its only possible union is , which does not. All the other ZF axioms hold, and union fails. Bounding the entire transitive closure by instead would give the wrong model: functional ranges at this singular bound need not be hereditarily small.
Power set. Use the transitive class of hereditarily countable sets. Pairing, union and separation preserve hereditary countability. A functional image of a countable domain is countable, and its members have countable transitive closures; their countable union is countable in the ground ZFC model. This proves replacement. The remaining structural axioms and infinity are inherited. Every actual subset of belongs to , but a putative internal power set of would contain all these subsets and hence be uncountable by Cantor's theorem. Power set fails in , with every other ZF axiom intact.
Replacement. Use in the cumulative hierarchy. At a limit ordinal cutoff, pairing, union, power set and every instance of separation remain below the cutoff; foundation, extensionality and infinity hold as well. With parameter , define by finite iterations of power set. The finite iteration witnesses and each value are inside , so this is an internally definable total function on . Its range has rank of a set and is absent from the model. This instance of replacement fails.
Extensionality. Build well-founded coded sets over one urelement , retaining a distinct ordinary empty set . Membership of an atom is always false, and membership of a set code is its coded extension. Thus but they have identical empty extensions. Pairing, union, separation and replacement are performed on set codes; pure witnesses infinity, and the well-founded construction gives foundation. There is a small point concerning the unmodified, untyped Axiom of power set: the atom is vacuously a subset of every object. Therefore the internal power-set object for contains all ordinary set-subsets of and the atom. It has exactly the required extension. All remaining ZF axioms hold, but extensionality fails. In the usual typed atom theory, the power-set axiom instead quantifies only over set-subsets.
Foundation. In the ground universe let exchange and and fix all other objects. On the same domain define the Rieger-Bernays permutation model
Since is a bijection, two objects with the same -members are equal, so extensionality holds. Any ground collection of desired members is represented by the object . In particular, an -pair is and the -union of is
An -subset of is an object with , so its -power-set object is
Translate every formula by replacing membership with ; ground separation and replacement collect the required extensions and the same representation supplies their internal witnesses. The -empty object is , and its -successor operation is . Ground well-founded recursion and replacement collect the iterates of from ; representing this collection gives an -inductive object. Thus infinity holds. But for , , whence and has precisely itself as its -member. Foundation fails.
Infinity. The hereditarily finite sets satisfy extensionality, foundation, pairing, union, power set and separation. Each internal domain is externally finite, so every internally definable functional image is finite and belongs to , proving replacement. No finite object can contain the empty set and all its successive Finite von Neumann ordinals. Infinity fails, and all other ZF axioms hold.
Choice with atoms. For the negative model use the Basic Fraenkel permutation model. Let be an infinite set of urelements and let every permutation of act recursively on sets. Keep precisely the hereditarily finitely supported objects: an object has a finite support if every permutation fixing pointwise fixes the object, and every object occurring in its membership ancestry must also have such a support. The class of these objects contains the pure universe and itself.
Supports for a pair are united; union preserves a support; a formula defining a subset uses the finite union of the supports of its domain and parameters. An internally definable functional range has the same support, since its values are uniquely specified, and its elements are already hereditarily supported. This proves the full separation and replacement schemas. All hereditarily supported set-subsets of a fixed set form its symmetric internal power set; this collection is invariant under the pointwise stabilizer of a support of the original set. For the untyped version add all the atoms, as above. Pure , ground well-foundedness and set-extensionality give the remaining axioms.
The family of unordered pairs of atoms is hereditarily supported. If it had a choice function , let be a finite support of . Choose distinct . The transposition exchanging fixes and , but exchanges its two possible chosen elements. Invariance of would imply is fixed by that transposition, a contradiction. Conversely, the full well-founded universe over the atoms, before restricting to finite supports, satisfies choice when the ground universe does. Both choice and its negation are relatively consistent with the stated weakening of extensionality.
All assertions of independence below are relative consistency assertions. We construct structures satisfying the other ZF axioms but falsifying the indicated axiom; an ordinary model of ZF supplies the positive side. The convenient ground theory is ZFC, which has the same consistency strength as ZF by the constructible universe theorem.
For the Axiom of union, put and use the hereditarily locally small membership model
It is a transitive class. The condition requires each individual set in the membership ancestry to have size below ; it does not require its entire transitive closure to have size below . Extensionality and foundation are inherited. Pairs and subsets of members remain in the class, giving pairing and separation, and witnesses infinity. For , the actual also belongs to : if , then by the strong-limit property, while every subset of and every member further below it remains locally small. This verifies the full power set axiom. If an internally definable functional relation has domain , ground replacement, applied to the relativized first-order formula, gives its range . Since and every value is already in , its range is also locally small. Thus every replacement instance holds.
However, belongs to : its members have cardinalities , and their members are smaller still. Its actual union is , of cardinality , which is not in . Transitivity makes any internal union witness equal to this actual union. Hence Union fails while all the other ZF axioms hold.
For the Axiom of power set, use the hereditarily countable sets in the ground choice universe. This is transitive and contains . Pairs, subsets and unions have countable transitive closure. For replacement, a functional image of a countable domain is countable, and the union of countably many countable transitive closures is countable; hence that image is again hereditarily countable. These observations, with inherited extensionality and foundation, verify all the remaining axioms. Every real, viewed as a subset of , belongs to . A power-set witness for would therefore contain every such real, but a hereditarily countable set has only countably many members, whereas is uncountable by Cantor's theorem. Power set fails.
For the Axiom schema of replacement, use with actual membership. This limit-rank structure contains and is closed under pairs, unions and power sets: every relevant finite increase in rank stays below . A separated subset has rank no higher than that of the original set. Extensionality and foundation are inherited. The internally definable function
is obtained by successive power-set operations starting with the parameter . Each finite iteration, including its finite history, belongs to the structure. Its range has rank and is not an element of . Thus the replacement instance for this first-order formula fails, although every other ZF axiom holds.
For the axiom of extensionality, take the well-founded cumulative set universe over two distinct urelements, and forget the predicate distinguishing urelements from sets. Each urelement has no members, just as the ordinary empty set has no members, so extensionality fails. Every other axiom survives in this pure membership language. Pairing, union, separation and replacement are witnessed by the corresponding ordinary sets of urelements and sets; foundation follows from their well-founded ranks, and the pure supplies infinity. Here foundation is written with “has a member” as its nonemptiness antecedent, and disjointness means having no common member. Formulations using inequality to one designated empty object are not equivalent after removing extensionality. There is also one necessary adjustment to power set: an urelement is vacuously a subset of every object because it has no members. Thus the power-set witness for is the ordinary set of all usual subsets of its extension, together with both urelements. This is still a set, and contains exactly the objects satisfying the unrestricted subset first-order formula. Consequently the countermodel falsifies Extensionality alone, without silently weakening Power set to sets only.
Finally, the hereditarily finite sets satisfy extensionality, foundation, pairing, union, power set and separation. Every functional image of a finite domain is a finite set of hereditarily finite objects, hence also belongs to , giving all replacement instances. No finite set contains and is closed under successor: it would then contain every finite von Neumann ordinal. Infinity fails while the remaining axioms hold.
For the Ehrenfeucht-Mostowski theorem, start with an infinite structure and a total order . Choose a Skolem expansion , and adjoin constants for . Require the elementary diagram of , distinctness of these new constants, and the order-indiscernible sequence schema: any two increasing tuples of the of the same length satisfy the same first-order formulas in the expanded language. Every finite fragment mentions finitely many new constants and finitely many first-order formulas. Enumerate a countably infinite subset of . For each of the finitely many first-order formulas, color its increasing tuples by its truth value in , including whatever fixed parameters occur in the fragment. Successive applications of the infinite Ramsey theorem leave an infinite subset homogeneous for all these colorings. Assign the finitely many new constants to distinct elements of this subset in their index order. Their finite indiscernibility requirements and the elementary diagram are then simultaneously satisfied.
The compactness theorem supplies an elementary extension containing the required distinct indiscernibles. Their Skolem hull is an elementary substructure: an existential first-order formula true of its elements has its chosen Skolem-function witness in the hull, so the Tarski-Vaught test applies. Any order automorphism of acts on this hull by
Indiscernibility makes this well defined, since every equality of two term representations is preserved. The same argument preserves every first-order formula; the inverse is given by . Thus it is an automorphism, uniquely determined in the language of the chosen Skolem expansion by its values on the generators. This proves both the indiscernible-model and automorphism forms of the Ehrenfeucht-Mostowski theorem. Uniqueness is not claimed for automorphisms of the reduct which need not preserve the chosen Skolem functions.
For simple typed set theory with atoms, write for the set predicate at sort . Members have sort one lower; urelements have no typed members, extensionality applies to sets, and every well-typed first-order formula defines a set at the next sort. Typical ambiguity adds for each closed sentence, where raises every sort by one. We prove finite satisfiability using Ramsey theorem, rather than assuming that adjacent sorts have the same cardinality.
Let . If , then . For increasing integers , interpret sort by , interpret by the objects of , and interpret adjacent-sort membership by actual membership restricted to these designated sets. All other objects of a sort are typed urelements. Every subset of is a designated set in , so comprehension holds for every first-order formula, including first-order formulas with quantifiers and parameters at other sorts. Two designated sets with the same members are equal, while the other objects have no typed members. Thus this is a full model of the typed axioms for every increasing sequence of levels. The extra preceding level gives a consistent interpretation of the bottom set predicate as well.
Take finitely many ambiguity sentences and let bound their highest sort before raising. Color increasing -tuples by the vector of truth values of these sentences in the corresponding finite sorted structure. There are finitely many colors. The infinite Ramsey theorem supplies an homogeneous set of indices. Choose the level sequence from it. The sentence is evaluated in the window , while is evaluated in the next window ; homogeneity makes their truth values equal. Sentences using fewer sorts simply ignore the unused final levels. Thus every finite family of ambiguity axioms has a model satisfying all the typed axioms. Apply many-sorted first-order compactness theorem to obtain
This is a relative consistency construction in the ordinary set-theoretic metatheory. Allowing urelements is essential here: skipping ranks leaves objects outside the represented power sets, and those objects must be permitted as urelements.