Skip to the reading
QuodlibetFoundations · the descent · companion to The Ascent

The truth that outruns proof has no fixed ground

The Descent

The Ascent proved there is no top: no system proves everything, so truth outruns proof at every level. But the unprovable truths are true — true in the standard model ℕ. That opens a question the climb never asked: what is ℕ, and can it be pinned down? It cannot. No first-order theory fixes an infinite model; every attempt to secure the ground from outside needs a richer ground, itself unsecured. There is no roof, and there is no floor.

the intended model · nonstandard numbers · the ground that recedes · the diagonal turned downward

The Ascent ended on a line it did not examine. Truth outruns proof, it said — the Gödel sentence is true though unprovable. But true where? A sentence is not true or false in the void; it is true in a model. The Gödel sentence is true in ℕ, the standard natural numbers — the structure 0, 1, 2, … that every child counts and every mathematician means. The whole of the previous panel was syntax: which marks on paper follow from which. The instant we call a sentence true, we have left syntax for semantics, and stepped onto ground we have not yet inspected.

This panel inspects it, and finds it will not hold still. The intended model ℕ exists and is unique — but only in second-order logic, which pins it down at a price we will have to pay. In the first-order logic that actually carries Gödel's and Tarski's theorems, ℕ is not unique at all: there are nonstandard models, dense with infinite numbers, in which the very sentences true of ℕ come out false. And the obvious remedy — climb to a richer logic that fixes the intended model — relocates the problem exactly as the reflection ladder did, into a ground that is itself unfixed.

The result mirrors the last one with eerie precision. The Ascent's engine was that the repair operator has no fixed point: no consistent system proves its own soundness, so the climb up never ends. The Descent's engine is that no first-order theory with an infinite model is categorical: it cannot fix its own model up to isomorphism, so the dig down never reaches bedrock. There the missing thing was completeness; here it is the intended model; in both, you cannot reach it from inside, and reaching from outside needs an outside without end. The edifice has no roof and no floor — one absence seen from two sides. We descend in four movements.

I · the intended model

True in ℕ

The Gödel sentence is true — true in the standard model. In second-order logic that model is unique. The truth that outruns proof is truth in a structure.

The Gödel sentence G says, of itself, that it has no proof in T. If T is consistent, G indeed has no proof — so what G says is the case. G is true. But this "true" is not a verdict of the proof system; it is a claim about a structure, ℕ, in which G's arithmetic comes out right. So the gap the Ascent opened — truth beyond proof — is a gap between a theory and a model. Everything now turns on the model. What secures ℕ as a single, definite object?

Dedekind, 1888
The second-order Peano axioms are categorical. When the induction axiom quantifies over all subsets of the domain — ∀X (0∈X ∧ ∀n(n∈X→n+1∈X) → ∀n n∈X) — exactly one structure satisfies the axioms, up to isomorphism: ℕ. There is, up to relabeling, only one standard model. In second-order logic, "G is true" is fully determinate, and the intended model is a definite mathematical object.

So far the ground is firm — suspiciously so. Categoricity says the axioms admit no rival to ℕ; the unprovable Gödel sentence has a definite truth value because there is a definite structure to be true in. The trouble is hidden in four words: quantifies over all subsets. That phrase is what makes second-order induction strong enough to exclude every impostor — and, as the next movement shows, it is exactly the phrase the first-order logic of Gödel and Tarski cannot say. Drop it, and the impostors flood in.

II · the descent

ℕ has company

First-order arithmetic cannot pin down ℕ. By compactness, it has nonstandard models — full of infinite numbers, in which truths of ℕ go false. Truth is model-relative.

First-order induction is a schema: one axiom per definable property, not a single axiom quantifying over all subsets. That is a weaker net, and it cannot hold ℕ alone. The proof is a machine you can run. Introduce a fresh constant c and the axioms c > 0, c > 1, c > 2, …. Any finite batch of them is satisfiable in plain ℕ — just interpret c as a number bigger than the largest bound used. The compactness theorem then forces the whole infinite set to be satisfiable too — in a model where c is bigger than every numeral at once.

every finite subset is satisfiable in ℕ — so the infinite set is too — but its model is not ℕ. Compactness cannot tell the standard numbers from a structure with infinite ones bolted on past the end.

The model the machine produces is no curiosity. Every countable nonstandard model of arithmetic has the same shape: the standard ray ℕ, and then — past every finite number — a procession of ℤ-chains (each running …, c−1, c, c+1, … with no first or last), packed together as densely as the rationals, no chain first and no chain last. And the sentences change their minds across the gap. Since PA ⊬ Con(PA), the theory PA + ¬Con(PA) is consistent — so it has a model, a nonstandard one harboring a "proof of 0=1" of infinite length. In ℕ, arithmetic is consistent; in M, a number codes its refutation. True was never a property of the sentence alone.

the bridge — and the trapdoor

The machine runs on a single theorem, and it is the one that joins this panel to its twin. Gödel's completeness theorem (1930) — the bridge of the whole subject — says that for first-order logic provable and true in every model coincide: syntax and semantics, the matter of The Ascent and the matter of The Descent, are two views of one relation. Compactness is its shadow. But the very theorem that bridges proof and model is the trapdoor that unfixes ℕ: because consistency alone buys a model, the consistent theory PA + ¬Con(PA) must have one — and the arithmetized completeness theorem (Hilbert–Bernays, 1939) builds it as a structure whose relations are arithmetically definable, a Henkin model computed relative to the halting problem. The nonstandard model is not summoned from some platonic elsewhere; it is nearly an inside job.

overspill — the model cannot find its own edge
In a nonstandard M ⊨ PA, the standard part ℕ ⊆ M is not definable in M. Were it definable, induction inside M would force it to swallow all of M — yet it is a proper initial segment, so no formula can carve it out. The consequence is overspill: any property that holds of every standard number already holds of some infinite one, and the border between finite and infinite is invisible from within. This is the semantic echo of Tarski. There the model could not define its own truth; here it cannot define its own standard cut — the thing you most want to name is the one thing the structure cannot.

And yet — against all this receding — there is one direction in which ℕ is pinned exactly. Where model theory cannot single it out, recursion theory can.

Tennenbaum's theorem (1959) — ℕ is the only one you can compute

No nonstandard model of PA is computable. In any countable nonstandard model neither addition nor multiplication can be a computable function of the codes — a nonstandard element would let you compute a separation of two recursively inseparable sets, which is impossible. So while PA has infinitely many models, exactly one of them — ℕ — can ever be exhibited, written down, computed with. The rest are guaranteed to exist and guaranteed to be unreachable: solid in the model theory, ghosts to any computation. Reference is unfixed in one register and pinned in the other — and that split, not a verdict for either side, is the exact situation we are in.

Skolem's paradox — the relativity goes all the way up

It is not only arithmetic. By the downward Löwenheim–Skolem theorem, any consistent first-order theory in a countable language has a countable model — set theory included. So ZFC, if consistent, has a model with only countably many objects, even though ZFC proves there are uncountable sets. The resolution is exact and unsettling: the bijection that would count that model's "reals" exists outside the model, not within it. "Uncountable" is not absolute; it is relative to a model. The most basic notions of size — like the most basic notions of truth — recede when you formalize them.

and truth recedes with it — the semantic Tarski

The relativity reaches truth itself. The set of sentences true in ℕ — Th(ℕ), true arithmetic — is not arithmetical: by Tarski's theorem no arithmetical formula defines it. Its Turing degree is 0(ω), the ω-th jump, sitting strictly above every level Σ⁰ₙ and Π⁰ₙ of the arithmetical hierarchy at once. Where The Ascent reached Tarski through syntax — no consistent effective theory defines its own truth — The Descent reaches the same wall through semantics: the standard model's complete theory outruns every formula that would capture it, exactly as proof outran truth one panel above.

III · the ground recedes

No self-grounding base

To fix ℕ you ascend to a richer logic or theory — which has its own unfixed model. Grounding has no bottom, for the same shape of reason the ascent has no top.

The remedy is the one we already named: if first-order logic is too weak to pin down ℕ, use second-order logic, which by Dedekind does. But second-order logic exacts two payments, and together they end the hope of standing on solid ground.

payment one — no grip  The logic strong enough to fix ℕ is exactly the logic with no effective hold on its own truths.

full (standard) semantics

Pins ℕ down — but you cannot compute with it

categorical (fixes ℕ)✓ yes
sound, complete, effective proof system✗ none
validity is …not even arithmetical
Henkin semantics

Has a proof system — but no longer fixes ℕ

complete proof system✓ yes
categorical (fixes ℕ)✗ no
in effect, it is …first-order again
You may have the logic that fixes ℕ, or the logic you can reason in — never both at once (Henkin, 1950). The categoricity that secures the ground comes with no procedure to walk on it.

payment two — borrowed definiteness  And the categoricity itself rests on an account that is empty. Second-order induction excludes the nonstandard models only by quantifying over all subsets of the domain — it presupposes that "all subsets of ℕ," the full powerset, is a single definite totality. But that is exactly what set theory cannot settle: the size of the powerset, the continuum, is independent of ZFC (Cohen, 1963), and ZFC has its own teeming multitude of models. The definiteness of ℕ was purchased with the definiteness of the powerset — and that, in turn, must be purchased one level up, in a set theory no more uniquely fixed than the arithmetic it was meant to ground.

internal categoricity — definiteness transmitted, not made
One might hope second-order categoricity needs no platonic powerset — and in a sense it does not. Categoricity for second-order PA is provable internally, inside a deductive calculus with comprehension, with no appeal to full semantics (Väänänen–Wang, 2015): any two interpretations obeying the second-order axioms together with their own comprehension are isomorphic. But this does not manufacture definiteness — it transmits it. The isomorphism is only as determinate as the second-order domain the background fixes; internal categoricity says ℕ is exactly as definite as "all subsets" is, and no more. The borrowing is not removed. It is made precise.

watch the ground recede  The Ascent let you climb: add the consistency a theory lacked, and the tower rose with no top. Here the motion inverts. Each theory borrows its definiteness from a richer one beneath it — and that one borrows in turn. Add the ground each level needs, and the floor sinks away forever.

no self-grounding base has been reached — and none can be
each level fixes the one above by borrowing a totality it cannot itself secure — and is itself a theory with unfixed models. Descend as far as you like; the readout will never report a ground that fixes itself.
the keystone — Löwenheim–Skolem
No first-order theory with an infinite model is categorical. Any first-order theory that has an infinite model has models of every infinite cardinality — and so cannot determine its model up to isomorphism. The intended structure cannot be singled out from inside first-order logic. Where The Ascent proved no consistent r.e. theory proves its own soundness, The Descent proves no first-order theory fixes its own infinite model. The missing thing — completeness there, categoricity here — is in each case unreachable from within.
the descent — the grounding regress

Grounding never bottoms out

To fix the model of a theory, interpret it in a richer metatheory. That metatheory has its own unfixed model — so it needs another beneath it. The regress descends without end.

Mod(T) fixed in M
⊐ Mod(M) fixed in M′
⊐ Mod(M′) fixed in M″
⊐ ⋯  no base
the forbidden bedrock

A self-grounding base cannot exist

Bedrock would be a theory that fixes its own intended model while staying first-order and effective — categorical, with an infinite model.

T fixes Mod(T), first-order
⟹ categorical, infinite model
✗  Löwenheim · Skolem
The exact mirror of The Ascent's hinge. There the repair operator had no fixed point, so the theory ascended forever toward a completeness it never reached. Here the grounding operator has no base, so the model descends forever toward a bedrock that is never there. Same absence — read up in proof, down in meaning.

the seam the dispute turns on  This does not settle whether ℕ is "really" a definite thing. It locates, precisely, the seam where that ancient argument runs — and shows why neither side can dislodge the other.

the mathematician — ℕ is real

Platonism (Gödel)

The standard model is a definite reality the axioms grope toward. The unprovable truths are facts about ℕ that our formal nets fail to land — incompleteness is a limit on us, not on the numbers. We see that G is true.

the formalizer — ℕ is unfixed

Skepticism (Skolem, Putnam)

"ℕ" is only ever specified by theories, and no theory we can write distinguishes it from its nonstandard rivals. To say G is "true" is to have already chosen a model the formalism cannot single out. The reference of ℕ is not pinned by anything we can say.

Both are right, and that is the discovery. The standard model is real to the one who works in it and unreachable to the one who formalizes the reaching — because every formal net fine enough to catch ℕ catches infinitely much besides. The seam does not close. It is the subject.
IV · the diagonal, turned downward

One engine, read two ways

The climb with no top and the dig with no floor are not analogies. They are one construction — the diagonal at the level of systems — run with its twist set up, then down.

Set the two engines side by side and they are one. The Ascent: the operation add the soundness you lack has no fixed point — so no theory is complete, and there is no roof. The Descent: the operation add the strength to fix your model has no self-grounding base — so no first-order theory is categorical, and there is no floor. Both are the diagonal worn at the level of systems: the thing you reach for is unreachable from inside, and reaching from outside opens an outside without end. To demand a final proof is to ask negation for a fixed point. To demand a final ground is to ask the same question, turned downward.

aspect
The Ascent — no top
The Descent — no floor
the domain
syntax — what is provable
semantics — what is true in a model
the gap
truth outruns proof
reference outruns description
the missing thing
completeness — proving all it should
categoricity — fixing the model it means
the operator
R — add the soundness you lack
G — add the ground you stand on
forbidden fixed point
T = R(T) ⟹ T ⊢ Con(T) — Gödel·Löb
T fixes Mod(T), first-order ⟹ categorical·infinite — L·Skolem
the motion
T ⊊ R(T) ⊊ R²(T) ⊊ ⋯ ascends
Mod(T) ⊐ Mod(M) ⊐ ⋯ descends
Two columns, one theorem. Each is Lawvere's construction g(x) = α(φ(x)(x)) with no fixed point for its twist — read once in proof, once in meaning. Power and limit were one purchase; here limit and limit are one purchase, seen from opposite ends.

the skeptic's permanent move  One might still hope to say which model is meant — adjoin an axiom, a constraint, a causal story that pins ℕ down. Putnam's argument (1980) is that the hope is structurally empty: whatever you add is just more theory, itself a set of sentences with its own deviant interpretations. The fix never closes, for the same reason the ladder never tops out.

adjoin constraint C to pin ℕ
⟹ C is more sentences ⟹ a deviant M ⊨ PA + C
✗  reference still unfixed

And the seam does not stay in arithmetic. Ask the same question one level up — is the universe of sets V itself a definite thing? — and the dispute reappears unchanged, with the continuum hypothesis standing where the Gödel sentence stood.

the set theorist — V is real

The universe view (Gödel · Woodin)

There is one universe of sets, and CH has an answer we have not yet found. The work is to discover the axioms — large cardinals, an ultimate inner model — that decide it. Independence marks our ignorance, not the world's indeterminacy.

the forcing theorist — V is plural

The multiverse view (Hamkins, 2012)

CH is a switch — true in some universes, false in others, flipped at will by forcing. To ask its "real" value is a category mistake; the plurality of universes is the subject, exactly as the plurality of models was below.

The same seam, one storey up, and it never terminates: every ground you stand on to fix the level below is itself a level whose ground is in dispute. The seam is not a flaw in the floors — it is the shape of having floors at all. (That the ℕ-seam and the V-seam are one seam is a framing; the results beneath them are not.)

So the corpus closes where it began. The Diagonal found the construction; The Engine ran its twist as the identity and got recursion, the fixed point that powers computation; The Ascent ran it as negation in proof and got no roof; The Descent runs it in meaning and gets no floor; The Mirror reads the two as one. Power and limit, completeness and categoricity, the roof and the floor — one purchase, read four ways. The sign of α is the only dial; everything else is what the dial was set to.

⌜ no top ⌝ the structure that holds PROOF · MEANING ⌞ no floor ⌟
Neither resting on a foundation nor crowned by a completion — held between a proof it cannot finish and a ground it cannot reach. The suspension is the structure.

The Ascent found no roof: no system proves everything. The Descent finds no floor: no system fixes everything it means. Between a truth it cannot finish proving and a ground it cannot finish fixing, mathematics hangs — and holds. The standard model is real to the one who works in it and unreachable to the one who formalizes the reaching; both are right, because every net fine enough to catch ℕ catches infinitely much besides. No top, no bottom — and the suspension is the structure.