7.5  Definability and Isomorphism

A sentence is true or false in a structure. A formula with one free variable is different: it is true of some elements of a structure and false of others, so it picks out a set. In (N;+) the formula ∃y(x=y+y) is true of 0,2,4,… and false of the odd numbers, so it picks out the even numbers, although the structure has no symbol for “even”. This section asks which sets a structure’s language can pick out. Its first half writes formulas for sets: points, intervals, orders, the primes, a supremum. Its second half, for a second reading, asks why some sets cannot be picked out at all, and answers with a map that moves the elements of a structure without changing anything a formula can see.

Remark (Looking back). Section 4.9 asked what the connectives can say, and answered: every truth function, by a normal form. This section asks the same question of a first-order language inside one structure. There the answer was “everything”; here it depends on the structure, and a set that one structure’s formulas define, another’s cannot.

7.5.1. Formulas define sets

A formula defines the set of elements (or tuples of elements) that make it true.

Definition 7.5.1 (Definable Set)

Let M be a structure with domain D, and φ a formula whose free variables are among x1,…,xn, all different. The set defined by φ in M is {(d1,…,dn)∈Dn:M,ℓ[x1↦d1]⋯[xn↦dn]⊨φ}, for any assignment ℓ. A set S⊆Dn is definable in M if some formula defines it.

By Lemma 7.1.1 the set does not depend on ℓ: the assignments ℓ[x1↦d1]⋯[xn↦dn], for different ℓ, agree on x1,…,xn, and only the values of the free variables matter. For n=1 the set is a set of elements, and we write it in set-builder form, {x∈D:φ}. Set-builder notation, used since school, is exactly this: the reading of a formula in a structure.

Two remarks on the definition. The structure is part of the question: the same formula defines different sets in different structures, and a set is definable in M, never definable outright. And the formula may use only the symbols of M: to define a set in (N;+) we may write +, =, connectives and quantifiers, and nothing else, not even 0 or <.

The connectives act on defined sets as the set operations do. If φ and ψ define S and T (with the same free variable x), then by (S4) and (S5) the formula φ∧ψ defines S∩T, φ∨ψ defines S∪T, and ¬φ defines D∖S, the elements not in S. So the definable sets of a structure are closed under intersection, union and complement, and a set built from definable sets by these operations is definable without further work.

Example (Sets Defined by Formulas)

Each formula is read back in words.

  • (a) In (R;+,⋅), the formula ∃y(x=y⋅y), “x is a square”, defines [0,∞): a real number is the square of a real number exactly when it is non-negative.
  • (b) In (N;+), the formula x+x=x, “x added to itself gives itself”, defines {0}, since d+d=d forces d=0. The formula ∃z(¬(z+z=z)∧x+z=y), “y is x plus something non-zero”, defines the set of pairs (d,e) with d<e.
  • (c) In (N;⋅), write U(x) for the formula ∀y(x⋅y=y), “multiplying by x changes nothing”. It defines {1}: at x=0 the instance y=1 fails, since 0⋅1=0; at x≥2 the instance y=1 fails too, since x⋅1=x≠1; and at x=1 every instance holds.
  • (d) In (N;⋅), the formula ¬U(x)∧∀y∀z(y⋅z=x→(U(y)∨U(z))), “x is not 1, and whenever x is a product, one factor is 1”, defines the primes. At x=0 the instance y=z=0 fails (0⋅0=0, and neither factor is 1); at x=1 the first conjunct fails; at a composite x=yz with y,z≥2 the instance at that y, z fails; at a prime, every factorization has a factor 1.

Each definition builds on the last: 0 and 1 are not symbols of these structures, yet the language can name them, and once 1 is defined, “prime” can be written with it. In (d), U(y) is the formula U(x) with y for x and its bound y renamed, say ∀w(y⋅w=w), so that the substituted letter is not captured.

To check that a formula defines a given set, check two directions, as for any equality of sets: every element of the set satisfies the formula, and every element that satisfies the formula is in the set. In (d) the cases x=0, x=1 and “x composite” are the second direction, and “at a prime” is the first. Leave out a case and a definition can be wrong at one point. Delete the conjunct ¬U(x) from (d): at x=1 every factorization y⋅z=1 has y=z=1, so the remaining formula is true of 1, and it defines the primes together with 1. Exactly one element changed sides.

Quick check. What does ∃y(x=y+y) define in (Z;+)? In (Q;+)?

Solution. In (Z;+), the even integers. In (Q;+), all of Q: every rational x is y+y for y=x/2, which is again rational. Same formula, two structures, two sets.

7.5.2. ∃ is a projection

A formula with two free variables defines a set of pairs, and a set of pairs of reals can be drawn. In (R;⋅), the formula y⋅y=x defines {(d,e):e2=d}, a parabola lying on its side. The formula ∃y(y⋅y=x) has the one free variable x, and by (S7) it is true of d exactly when some e puts the point (d,e) on the parabola. So it defines the set of first coordinates of the points of the parabola: its shadow on the x-axis, [0,∞).

Diagram. Labels: x, y, y cdot y = x, exists y\,(y cdot y = x)

The dashed segments drop two points, (1,1) and (1,−1), and the point (4,2), onto their shadows 1 and 4. No point of the parabola lies above a negative x, so no negative number is in the shadow.

In general, ∃yφ defines the projection of the set that φ defines: d is in it exactly when some e puts (d,e) in φ’s set, by (S7). Dually, ∀yφ keeps the d whose whole vertical line lies in φ’s set, by (S6). This is the picture behind every ∃ in a definition: to show a set definable, it is often easiest to describe a set of pairs and project.

The two readings are tied by negation. By (S4), (S6) and (S7), ∀yφ is satisfied exactly when ∃y¬φ is not, so the set defined by ∀yφ is the complement of the projection of the complement of φ’s set: remove φ’s set from the plane, take the shadow of what is left, and keep the points of the axis that are not in that shadow.

Quick check. In (R;≤,⋅), which set does ∀y(x≤y⋅y) define?

Solution. (−∞,0]. The least value of y⋅y is 0, at y=0, so x≤y2 holds for every y exactly when x≤0. In the picture: the vertical line at x lies wholly in the region x≤y2 when x≤0, and the line at a positive x leaves it near y=0.

7.5.3. Define it by a formula

A common task in mathematics is to turn a notion described in words into a formula, and the skill is the reverse of reading back. The notion must be said using only the symbols of the structure, and every variable that is not the defined set’s own must be bound.

Example (Maximum, Maximal, Supremum)
  • (a) In a structure with one two-place symbol ≤ read as a partial order: “x is a greatest element” is ∀y(y≤x), “everything is below x”. “x is a maximal element” is ∀y(x≤y→y=x), “nothing is above x except x itself”. In the divisibility order on {1,2,3} (d≤e when d divides e), 2 and 3 are maximal, and there is no greatest element, since 2 does not divide 3 nor 3 divide 2. On {1,2,3,6}, 6 is both maximal and greatest.
  • (b) Add a one-place symbol A for a set of reals, and work in (R;≤,A). “x is an upper bound of A” is the formula B(x): ∀y(A(y)→y≤x), “every element of A is at most x”. “x is the supremum of A” is B(x)∧∀z(B(z)→x≤z), “x is an upper bound, and below every upper bound”. For A=[0,1), the supremum is 1: it is an upper bound, and any z<1 is exceeded by an element of [0,1), such as the larger of 0 and (z+1)/2, so z is not one. No element of A is greatest.
  • (c) “A has a greatest element” is the sentence ∃x(A(x)∧B(x)), “some element of A is an upper bound of A”. It is false for A=[0,1) and true for A=[0,1].

In (c) the formula B(x) is used inside a larger formula, as a word is used in a sentence. This is how definitions accumulate: each defined notion is an abbreviation, and the full formula is the abbreviation written out.

Defining a notion goes in three steps. First, say the notion in words that use only the structure’s symbols: “upper bound” becomes “every element of A is at most x”. Second, write each auxiliary notion as a formula with its own free variable, and substitute it where it is used, renaming bound variables so that nothing is captured. Third, check both directions on a small case. The commonest slip is a variable left free. Written without its ∀y, the formula A(y)→y≤x has two free variables and defines a set of pairs, those (d,e) with d∉A or d≤e; it is not a property of x at all.

A defined notion can also be given its own symbol, as “even” and “the supremum of A” are in ordinary mathematics. Section 5.8 showed (Proposition 5.8.2) that such a definition is safe: introducing a predicate symbol by ∀x(P(x)↔φ), or a constant for an element that φ is proved to have, proves nothing new about the old symbols. Definability says which notions can be so introduced in a given structure: exactly those some formula of its language defines.

Warning. Greatest is not maximal. A maximal element has nothing strictly above it; a greatest element is above everything. In the divisibility order on {1,2,3}, 2 is maximal and not greatest. Writing ∀y(y≤x) for “maximal” defines the wrong set: in that order it defines ∅, while the maximal elements are 2 and 3.

Quick check. In the divisibility order on {1,2,3,4,6}, which elements are maximal? Is there a greatest element?

Solution. 4 and 6: neither divides any other element of the set. There is no greatest element: 4 does not divide 6, and 6 does not divide 4.

7.5.4. Isomorphic structures (second pass)

This half of the section is for a second reading. It asks when two structures are the same except for the names of their elements, and proves that such structures satisfy the same sentences. From that comes a way to show that a set is not definable. It uses functions and bijections in their everyday sense: a rule that sends each element to one element, and, for a bijection, one that matches the two domains one to one, every element of the second domain hit exactly once.

Definition 7.5.2 (Isomorphism of Structures)

Let M and N be structures for the same symbols, with domains D and E. An isomorphism h:M→N is a bijection h:D→E such that

  • (i) h(cM)=cN for each constant c;
  • (ii) h(fM(d1,…,dn))=fN(h(d1),…,h(dn)) for each function symbol f of arity n and all d1,…,dn∈D;
  • (iii) (d1,…,dn)∈RM if and only if (h(d1),…,h(dn))∈RN, for each predicate symbol R of arity n and all d1,…,dn∈D.

An isomorphism M→M is an automorphism of M. M and N are isomorphic if an isomorphism M→N exists.

In words: h renames every element, and the renaming carries each constant to the corresponding constant, each operation to the corresponding operation, and each relation onto the corresponding relation, in both directions.

Clause (iii) is needed in both directions. The identity map 1↦1, 2↦2, from {1,2} with R empty to {1,2} with R={(1,2)}, is a bijection, and it sends every pair in the first relation into the second, since there are none. Yet the sentence ∃x∃yR(x,y) is false in the first structure and true in the second. The converse half of (iii) fails at (1,2), and with it the map is not an isomorphism.

Examples. (N,<) and the even numbers with < are isomorphic, by h(d)=2d: every even number is 2d for exactly one d, and d<e if and only if 2d<2e. A finite example, with the bijection as a table:

Diagram. Labels: a mapsto 1\b mapsto 2\c mapsto 3

On the left, M has D={a,b,c} and RM={(a,b),(b,c),(a,c)}; on the right is ({1,2,3},<), with an arrow from d to e when d<e. The table is a bijection, and it sends the three arrows on the left exactly onto the three on the right. A non-example: d↦d+1, from (N,<) to itself, preserves < in both directions and is one to one, but it is not onto: nothing is sent to 0. So it is not an automorphism.

Theorem 7.5.1 (Isomorphic Structures Satisfy the Same Sentences)

Let h:M→N be an isomorphism. For every formula φ and every assignment ℓ in M, M,ℓ⊨φif and only ifN,h∘ℓ⊨φ, where h∘ℓ gives each variable x the value h(ℓ(x)). In particular, M⊨σ if and only if N⊨σ, for every sentence σ.

In words: renaming the elements, consistently, changes the truth of nothing.

The theorem is most often used backwards: a sentence true in one structure and false in another shows that the two are not isomorphic. The sentence ∀x∃y(y+y=x), “every element is a sum of two equal ones”, is true in (Q;+) (take y=x/2) and false in (Z;+) (at x=1), so no bijection Q→Z carries addition to addition, although bijections Q→Z exist (Sets, Relations, and Cardinality, Chapter 3). The converse of the theorem fails: two structures can satisfy the same sentences without being isomorphic, and the optional Section 7.6 meets such a pair.

The proof is in the fold below.

Second readingThe proof: terms, then formulas

Idea. An induction on terms and then on formulas, of the kind Section 7.1 gave for Lemma 7.1.1. Each clause of the definition of isomorphism carries one kind of atomic formula across; injectivity carries equations back; and in the quantifier cases, as d runs over D, its image h(d) must run over all of E, which is what “onto” gives.

Proof. Terms. First, h(tM,ℓ)=tN,h∘ℓ for every term t, by induction on t. For a variable x, both sides are h(ℓ(x)), by the definition of h∘ℓ. For a constant, this is clause (i). For t=f(t1,…,tn), clause (ii) and the hypothesis for t1,…,tn give h(fM(t1M,ℓ,…,tnM,ℓ))=fN(h(t1M,ℓ),…,h(tnM,ℓ))=fN(t1N,h∘ℓ,…,tnN,h∘ℓ).

Formulas. Structural induction on φ, with the claim stated for all assignments ℓ at once, since the quantifier clauses change the assignment.

Atomic. By (S1), M,ℓ⊨R(t1,…,tn) means that the tuple of the values tiM,ℓ is in RM. By clause (iii) that holds exactly when the tuple of their images is in RN, and by the claim for terms the images are the values tiN,h∘ℓ: this is (S1) for N,h∘ℓ. Equations. t1M,ℓ=t2M,ℓ implies h(t1M,ℓ)=h(t2M,ℓ); the converse holds because h is injective. With the claim for terms, this is (S2) on both sides. ⊥ is satisfied on neither side, by (S3).

Connectives. The answers for φ and ψ agree on the two sides by hypothesis, and (S4), (S5) combine them by the same rule on both sides.

Universal quantifier. M,ℓ⊨∀xφ holds if and only if M,ℓ[x↦d]⊨φ for every d∈D, by (S6); by the hypothesis, applied to the assignment ℓ[x↦d], if and only if N,h∘(ℓ[x↦d])⊨φ for every d∈D. Now h∘(ℓ[x↦d])=(h∘ℓ)[x↦h(d)]: both give x the value h(d) and every other variable y the value h(ℓ(y)). As d runs over D, h(d) runs over all of E, because h is onto. So the condition says that N,(h∘ℓ)[x↦e]⊨φ for every e∈E, which is (S6) for N,h∘ℓ⊨∀xφ.

Existential quantifier. The same, with (S7): some d∈D works on the left exactly when some e=h(d)∈E works on the right, and every e∈E is such an h(d), since h is onto.

For a sentence, Lemma 7.1.1 makes the assignment irrelevant on both sides, which gives the last sentence of the statement.

Quick check. Why can no sentence in the symbol < tell (N,<) from the even numbers with <?

Solution. Doubling is an isomorphism between them, so by Theorem 7.5.1 they satisfy the same sentences.

7.5.5. What an automorphism cannot move (second pass)

An automorphism is a renaming of a structure onto itself. By the theorem, a formula cannot tell an element from its image.

Corollary 7.5.2 (Automorphisms Preserve Definable Sets)

If h is an automorphism of M and S⊆D is definable in M, then for every d∈D, d∈S if and only if h(d)∈S.

Proof. Let φ, with free variable x, define S, and let ℓ be an assignment with ℓ(x)=d. By Theorem 7.5.1 with N=M, M,ℓ⊨φ if and only if M,h∘ℓ⊨φ. The first says d∈S; since (h∘ℓ)(x)=h(d), the second says h(d)∈S.

So to show that a set is not definable, find an automorphism that moves an element of it to an element outside it.

Example (Zero Cannot Be Defined from the Order of the Integers)

In (Z,<), the shift h(d)=d+1 is an automorphism: it is a bijection, with inverse d↦d−1, and d<e if and only if d+1<e+1. It sends 0 to 1, and 1∉{0}. By Corollary 7.5.2, {0} is not definable in (Z,<): no formula in < alone singles out zero among the integers.

Contrast (N,<). There {0} is definable, by ∀y¬(y<x), “nothing is below x”. The corollary is not contradicted, since d↦d+1 is not an automorphism of (N,<): it is not onto.

A finite picture: the four-cycle below, with D={a,b,c,d} and R the four arrows a→b→c→d→a.

Diagram: Zero Cannot Be Defined from the Order of the Integers

The rotation a↦b, b↦c, c↦d, d↦a is a bijection that sends each arrow to an arrow and each non-arrow to a non-arrow, so it is an automorphism. Applied once, twice or three times, it moves any element to any other, so no single element is definable.

A minimal change makes one element definable again. Add the loop (a,a) to R. Now R(x,x) defines {a}, and the rotation is no longer an automorphism, since it sends the arrow (a,a) to (b,b), which is not an arrow. The method can only use the automorphisms a structure has; each of the three non-trivial rotations sends the loop (a,a) to a loop at b, c or d, so adding one arrow removed all three.

Warning. An automorphism shows that a set is not definable; it never shows that one is. That no automorphism moves a set is not evidence that a formula defines it. To show a set definable, write the formula.

Quick check. In the four-cycle, where does the rotation send the set {a,c}? Could {a,c} be definable?

Solution. The rotation sends a to b and c to d, so it moves a∈{a,c} to b∉{a,c}. By Corollary 7.5.2, {a,c} is not definable. Its complement {b,d} is not definable either, by the same rotation.

Remark (Looking ahead). Number Systems: From N to R, Chapter 6, proves that any two complete ordered fields are isomorphic, by an isomorphism built from the rationals below each element; by this section, they then satisfy the same sentences.

7.5.6. Exercises

A. Check your understanding

Exercise (A1)
  • (a) Define “S⊆D is definable in M”.
  • (b) Write formulas defining, in (N;+), the even numbers and the set {0}.
  • (c) Why does a formula with two free variables define a set of pairs, and not a set of elements?
  • (d) (Second pass.) State Theorem 7.5.1.
  • (e) (Second pass; key proof.) Where does the proof of Theorem 7.5.1 use that h is onto, and where that it is injective? What goes wrong for d↦d+1 on (N,<)?
  • (f) (Second pass.) Why does x↦x+1 show {0} undefinable in (Z,<) but not in (N,<)?

Solution. (a) Some formula φ with free variable x (at most) defines it: S={d∈D:M,ℓ[x↦d]⊨φ}, for any assignment ℓ (Definition 7.5.1).

(b) ∃y(x=y+y), “x is a sum of two equal numbers”; x+x=x, “x added to itself is itself”.

(c) Its truth depends on the values of both variables (and, by Lemma 7.1.1, on nothing else), so it is true or false of pairs of values.

(d) If h:M→N is an isomorphism, then M,ℓ⊨φ if and only if N,h∘ℓ⊨φ, for every formula φ and every assignment ℓ in M; in particular M and N satisfy the same sentences.

(e) Onto: in the ∀ and ∃ cases, so that h(d) runs over all of E as d runs over D. Injective: in the equation case, to go from h(t1M,ℓ)=h(t2M,ℓ) back to t1M,ℓ=t2M,ℓ. The map d↦d+1 is not onto, and the ∀ case fails: ∀y¬(y<x) is satisfied when x has the value 0, and not when x has the value h(0)=1, because the element 0 below 1 is exactly the one the map never reaches.

(f) It is an automorphism of (Z,<) and moves 0; it is not an automorphism of (N,<) (not onto), and in (N,<) the set {0} is in fact definable, by ∀y¬(y<x).

Exercise (A2: Drill)

Each part takes a line or two. Parts (a)–(f) belong to the first half of the section; parts (g)–(l) to the second half (second pass). They run from reading a formula, through writing one, to judging maps and using them.

  • (a) What subset of Z does ∃y(x=y+y+y) define in (Z;+)?
  • (b) Define {0} in (Z;+).
  • (c) Define the pairs with x≤y in (N;+).
  • (d) In ({1,2,3},<), which set does ∀y¬(y<x) define? In (Z,<)?
  • (e) Write “x is maximal” and “x is greatest” for a partial order ≤.
  • (f) In (R;1,+,⋅), φ is x⋅x+y⋅y=1. What does ∃yφ define?
  • (g) Is h(d)=2d an isomorphism from (Z,<) to the even integers with <?
  • (h) Is h(d)=−d an automorphism of (Z,<)? Of (Z;+)?
  • (i) Using (h), is {1} definable in (Z;+)?
  • (j) Is that consistent with (b)?
  • (k) M has D={a,b,c} and RM={(a,c),(b,c)}. Which singletons are definable?
  • (l) Are (N,<) and (Z,<) isomorphic? Give a sentence that shows it.

Solution.

  • (a) The multiples of 3.

  • (b) x+x=x.

  • (c) ∃z(x+z=y), “y is x plus something”.

  • (d) {1}, “nothing is below x”; ∅, since every integer has a smaller one.

  • (e) ∀y(x≤y→y=x); ∀y(y≤x).

  • (f) [−1,1], the shadow of the unit circle on the x-axis.

  • (g) Yes: a bijection onto the evens, and d<e if and only if 2d<2e.

  • (h) Not of (Z,<): 0<1, but −0=0>−1. Yes of (Z;+): it is a bijection (its own inverse), and −(d+e)=(−d)+(−e).

  • (i) No: the automorphism d↦−d sends 1 to −1∉{1}.

  • (j) Yes: d↦−d sends 0 to 0, so it does not move {0}.

  • (k) {c}, by ∃yR(y,x), “something points to x”. Not {a} or {b}: swapping a and b (and fixing c) is an automorphism.

  • (l) No. ∃x∀y¬(y<x), “there is a least element”, is true in (N,<) and false in (Z,<); isomorphic structures would agree on it.

B. Practice

Exercise (B1: Define it by a formula)

Define by a formula, and read each formula back in words. Parts (i)–(iii) are in (N;⋅); parts (iv) and (v) are in (R;≤,A), with A a one-place symbol.

  • (i) “x divides y”.
  • (ii) “x is a square”.
  • (iii) “x and y have no common divisor except 1”.
  • (iv) “A is bounded above”.
  • (v) “A has a supremum that is not in A”.

Solution.

  • (i) ∃z(x⋅z=y): “y is x times something”.

  • (ii) ∃y(y⋅y=x): “x is something times itself”.

  • (iii) ∀z((∃u(z⋅u=x)∧∃v(z⋅v=y))→∀w(z⋅w=w)): “every common divisor z of x and y is 1”. The consequent is U(z) of Example (Sets Defined by Formulas) (c), with its bound variable renamed to w: written with the bound y of U, it would capture the free y. (At x=y=0 every z is a common divisor, so the formula fails, as it should.)

  • (iv) ∃xB(x), with B(x) the upper-bound formula ∀y(A(y)→y≤x): “some x is at least every element of A”.

  • (v) ∃x(B(x)∧∀z(B(z)→x≤z)∧¬A(x)): “some least upper bound of A is not in A”.

Marking scheme. (10 points) 2 for each part: 1 for the formula, 1 for its reading back, with any auxiliary formula (U, B) written out or cited. Fatal error (0 for the part): a free variable left over that is not one of the defined set’s.

Exercise (B2: What does this formula define?)

Describe the set each formula defines.

  • (i) ∃y(x=y⋅y⋅y) in (R;⋅).
  • (ii) The same formula in (Z;⋅).
  • (iii) ∀y(y⋅x=x) in (N;⋅).
  • (iv) ∃z(¬(z+z=z)∧x+z=y) in (Z;+).
  • (v) ∃y(x<y∧∀z¬(x<z∧z<y)) in (Q,<), and in (Z,<).

Solution.

  • (i) All of R: every real number has a real cube root.

  • (ii) The cubes, {…,−8,−1,0,1,8,27,…}.

  • (iii) {0}: at x=0, y⋅0=0 for every y; at x≥1, the instance y=0 fails.

  • (iv) All pairs (x,y) with x≠y. In Z, z=y−x always exists, and it is non-zero exactly when x≠y. The same formula defined x<y in (N;+) (Example (Sets Defined by Formulas) (b)); in Z, where a negative z is available, it defines something else.

  • (v) In (Q,<), ∅: between x and any larger y lies (x+y)/2. In (Z,<), all of Z: take y=x+1.

Marking scheme. (10 points) 2 for each part; in (iv), full marks require noticing that Z is not N. Fatal error (0 for the part): an answer that ignores the structure, such as the same set for both structures in (v).

Exercise (B3: Automorphisms of small structures)

(Second pass.)

  • (a) Find every automorphism of M: D={1,2,3,4}, RM={(1,1),(1,2),(2,1),(2,2),(3,3)}, the answer given to Exercise (B1: Construct a relation, or show none exists, used later) (ii).
  • (b) Which singletons and which two-element subsets of D does that leave possibly definable? Define those that are.
  • (c) Is d↦d+1 an automorphism of (Z;<,0), with 0 a constant?

Solution. (a) An automorphism sends related pairs to related pairs and unrelated pairs to unrelated pairs. 4 is the only element related to nothing, so it must go to 4. 3 is the only element related to itself and to nothing else, so it must go to 3. That leaves 1 and 2, which may stay or be swapped, and both choices preserve R. So there are two automorphisms: the identity, and the swap of 1 and 2.

(b) {1} and {2} are not definable: the swap moves them. {3} is defined by R(x,x)∧∀y(R(x,y)→y=x); {4} by ¬R(x,x). Among the two-element sets, {1,2} is defined by ∃y(R(x,y)∧¬(y=x)), “x is related to something else”, and {3,4} by its negation ¬∃y(R(x,y)∧¬(y=x)). The other four, {1,3}, {1,4}, {2,3}, {2,4}, are moved by the swap, so none is definable.

(c) No: it sends the value 0 of the constant to 1, and clause (i) of Definition 7.5.2 asks h(0)=0.

Marking scheme. (10 points) 4 for (a): both automorphisms, with the argument that 3 and 4 are fixed. 4 for (b): each definable set with its formula, and each other set with the automorphism that moves it. 2 for (c). Fatal error (0 for (b)): claiming a set definable because no automorphism moving it was found.

C. Going deeper

Exercise (C1: The definable subsets of (Z,<))

(Second pass.)

  • (a) Prove that the only subsets of Z definable in (Z,<) by a formula with one free variable are ∅ and Z.
  • (b) Show that the relation “y=x+1” is definable in (Z,<).
  • (c) Why does (a) not contradict (b)?

Solution. (a) ∅ and Z are defined by ¬(x=x) and x=x. Conversely, let S be definable and non-empty, with n∈S, and let m∈Z. The shift d↦d+(m−n) is an automorphism of (Z,<): it is a bijection, with inverse d↦d−(m−n), and d<e if and only if d+(m−n)<e+(m−n). It sends n to m, so m∈S by Corollary 7.5.2. Since m was arbitrary, S=Z.

(b) x<y∧¬∃z(x<z∧z<y), “y is above x with nothing in between”. In Z it holds of (d,e) exactly when d<e and no integer lies strictly between, that is, e=d+1: if e=d+1, an integer z with d<z<d+1 does not exist; if e≥d+2, then z=d+1 lies between.

(c) The corollary, and the argument of (a), concern sets of elements. “y=x+1” defines a set of pairs, and a shift moves each pair (n,n+1) to another pair (m,m+1) of the same set, so the set of pairs is not moved. What (a) forbids is a formula singling out some integers and not others; (b) singles out a relation that every integer has to its successor.

Marking scheme. (10 points) 5 for (a): the shift shown to be an automorphism (bijective and order-preserving), then the corollary applied. 3 for (b), with both directions checked in Z. 2 for (c). Fatal error (0 for (a)): using d↦−d, which does not preserve <.

Exercise (C2: Challenge: the automorphisms of (Q,<))

(Second pass.)

  • (a) Show that x↦2x, and x↦x+q for each rational q, are automorphisms of (Q,<).
  • (b) Deduce that the only subsets of Q definable in (Q,<) by a formula with one free variable are ∅ and Q.
  • (c) Show that {x∈Q:x>0} is definable in (Q;<,0), with 0 a constant, but not in (Q,<).

Solution. (a) Both are bijections of Q, with inverses x↦x/2 and x↦x−q, and both preserve < in both directions: x<y if and only if 2x<2y, if and only if x+q<y+q.

(b) The translations alone suffice: given p in a non-empty definable set S and any p′∈Q, the automorphism x↦x+(p′−p) sends p to p′, so p′∈S by Corollary 7.5.2. As in C1, S=Q.

(c) In (Q;<,0) the formula 0<x defines it. In (Q,<) it is neither ∅ nor Q, so by (b) it is not definable.

Marking scheme. (10 points) 3 for (a), 4 for (b), 3 for (c). Fatal error (0 for (b)): an argument with x↦2x alone, which fixes 0 and so cannot move 0 to anything else.

R. Review

Exercise (R1)

Decide whether each sequent is derivable, and justify your answer.

  • (a) (p→q)→r⊢p→r.
  • (b) (p→q)→r⊢q→r.

Solution. (a) Not derivable. Look for a refuting row, backwards from the conclusion: p→r is false only when p=T and r=F. The premise must then be true, so its hypothesis p→q must be false, which needs q=F. In the row p=T, q=F, r=F, the premise is F→F, true, and the conclusion is T→F, false. By Corollary 4.7.3 there is no derivation.

(b) Derivable. The goal is an implication, so open a box on q; the premise is waiting for p→q, which a box on p produces by repeating q (the goal-directed and premise-directed steps of the search method of Section 3.1).

1(p→q)→r
2qasm, for →I
3pasm, for →I
4qR 2
5p→q→I 3–4
6r→E 1, 5
7q→r→I 2–6

The row method of (a) could not settle (b): no row refutes it, and only a derivation (or Theorem 4.8.4) shows it is derivable.

Exercise (R2)

Derive ¬(P→¬Q)⊢¬¬P∧¬¬Q without RAA and without derived rules that use it. Which rule would you need to derive P∧Q itself?

Solution. The goal is a conjunction, so derive each conjunct. Each is a negation, so each gets a ¬I box, whose goal is ⊥. The only way to use the premise ¬(P→¬Q) is to clash with it, so inside each box we build P→¬Q. In the first box, from ¬P: a →I box on P clashes P with ¬P and uses ⊥E (the pattern of Proposition 2.1.2). In the second, from ¬Q: a →I box on P simply repeats ¬Q. These are the rules of Chapters 1 and 2 (Definition 2.2.1, Definition 2.1.1, Definition 1.4.1).

1¬(P→¬Q)
2¬Pasm, for ¬I
3Pasm, for →I
4⊥¬E 3, 2
5¬Q⊥E 4
6P→¬Q→I 3–5
7⊥¬E 6, 1
8¬¬P¬I 2–7
9¬Qasm, for ¬I
10Pasm, for →I
11¬QR 9
12P→¬Q→I 10–11
13⊥¬E 12, 1
14¬¬Q¬I 9–13
15¬¬P∧¬¬Q∧I 8, 14

No RAA is used. To reach P∧Q we would need P from ¬¬P and Q from ¬¬Q, that is, ¬¬E, which is derived with RAA (Proposition 2.5.1), or an RAA box directly (Definition 2.5.1). The look-alike is Exercise (B1: Three searches) (b), ¬(P→Q)⊢P∧¬Q: there the conjunct P needed RAA, while ¬Q came by ¬I alone. Here both conjuncts stop at a double negation. That no derivation of P (or of P∧Q) from the premise avoids RAA is true, but we state it without proof, and nothing depends on it.

Exercise (R3)

Derive ¬∃x(P(x)→¬Q(x))⊢∀x(¬¬P(x)∧¬¬Q(x)) without RAA.

Solution. The goal is ∀x, so open a flagged box with a fresh name x0 (Definition 5.4.1); the new goal is ¬¬P(x0)∧¬¬Q(x0). Inside, run the derivation of R2 (Exercise (R2)) with P(x0) and Q(x0) in place of P and Q. One change: the premise is now ¬∃x(P(x)→¬Q(x)), not ¬(P→¬Q), so each clash first turns P(x0)→¬Q(x0) into ∃x(P(x)→¬Q(x)) by ∃I at x0 (Definition 5.5.1).

1¬∃x(P(x)→¬Q(x))
2x0¬P(x0)asm, for ¬I
3P(x0)asm, for →I
4⊥¬E 3, 2
5¬Q(x0)⊥E 4
6P(x0)→¬Q(x0)→I 3–5
7∃x(P(x)→¬Q(x))∃I 6
8⊥¬E 7, 1
9¬¬P(x0)¬I 2–8
10¬Q(x0)asm, for ¬I
11P(x0)asm, for →I
12¬Q(x0)R 10
13P(x0)→¬Q(x0)→I 11–12
14∃x(P(x)→¬Q(x))∃I 13
15⊥¬E 14, 1
16¬¬Q(x0)¬I 10–15
17¬¬P(x0)∧¬¬Q(x0)∧I 9, 16
18∀x(¬¬P(x)∧¬¬Q(x))∀I 2–17

The side condition of ∀I at line 18: x0 does not appear in the premise on line 1, no box is open at line 18, and x0 does not appear in the conclusion. The flagged box immediately contains the ¬I box of line 2, so it is cited from line 2, the first line of that inner box. Lines 7 and 14 are legal ∃I steps: P(x0)→¬Q(x0) is (P(x)→¬Q(x))[x0/x]. The whole derivation is R2’s, run inside a flagged box, with an ∃I before each clash.

Exercise (R4)

Is the sentence ∀x∃y(x<y)→∃y∀x(x<y) true in (N,<)? Is it derivable?

Solution. True in (N,<)? No. The hypothesis ∀x∃y(x<y) is true in (N,<): each d has d+1 above it. The conclusion ∃y∀x(x<y) is false: a candidate e fails at x=e, since e<e is false. By (S5) of Definition 7.1.3, an implication with a true hypothesis and a false conclusion is false.

Derivable? No. By the soundness statement of Section 7.2, a derivable sentence is true in every structure; this one is false in (N,<), so no derivation exists.

Why these tools. A structure settles the question in two lines, while a derivation search could only fail, and a failed search proves nothing. A truth table is the wrong look-alike: it reads the sentence as p→q with two atoms, and a refuting row for p→q says nothing here, since the sentence ∀xP(x)→∃xP(x) has the same shape and is derivable (Proposition 5.5.1, then →I). The soundness statement used here is proved in Section 7.3.