The ZFC Axioms Overview

What exactly is a set? Which operations on sets are we allowed to perform? Naive set theory answered "any collection satisfying any property." This answer collapsed into contradiction the moment Russell asked about the set of all sets that do not contain themselves. The Zermelo–Fraenkel axioms (with the Axiom of Choice, hence ZFC) are the modern repair. They are a short list of precisely stated existence and construction principles. From these, essentially all of ordinary mathematics can be built — numbers, functions, spaces, cardinalities, the entire cumulative hierarchy. Meanwhile, the paradoxical constructions are provably blocked. The axioms matter because they convert set theory from a suggestive metaphor into a formal theory. It has a first-order language, precise rules of inference, and theorems checkable line by line. Once you fix ZFC, "does this object exist?" and "is this construction legitimate?" become questions with definite, checkable answers. They are no longer matters of intuition. This is the payoff of the axiomatic method applied to the foundations themselves. The same rigor you demand of a proof about groups or manifolds is now demanded of the theory of collections underlying groups and manifolds. The big picture is a cumulative hierarchy. Start with the empty set, and build upward by repeatedly taking power sets and unions. This process is indexed by the ordinals, so that every set appears at some stage VαV_\alpha of this hierarchy. The axioms of ZF are exactly the principles needed to guarantee this hierarchy is rich enough. Power Set, Union, Pairing, Infinity, and Replacement give existence. Simultaneously, the axioms fence the hierarchy off from paradox. Separation restricts comprehension, Foundation forbids ungrounded membership, and Extensionality pins down set identity. This article states each axiom of ZF precisely in the language of first-order logic. It explains the intuition and necessity behind each one. It proves a central structural theorem: the Reflection/cumulative hierarchy picture is sketched. We prove in full detail that Separation follows a restricted pattern that blocks Russell's Paradox. The article also works through concrete examples of how ordered pairs, natural numbers, and function spaces are manufactured from the axioms alone. It closes by placing the Axiom of Choice on the horizon, the ninth axiom that completes ZFC.

Key takeaways
  • ZF is a finite (well, one is a schema, hence infinite) list of first-order axioms about the single primitive relation ∈\in.
  • Extensionality says sets are determined by their members; Foundation says ∈\in has no infinite descending chains.
  • Pairing, Union, Power Set, and Infinity are pure existence axioms guaranteeing enough sets to build mathematics.
  • Separation restricts naive comprehension to subsets of an existing set, which is exactly what blocks Russell's Paradox.
  • Replacement says the image of a set under a definable function is a set — indispensable for building large ordinals and cardinals.
  • Key idea: every set-theoretic paradox arises from unrestricted comprehension; ZFC replaces it with carefully bounded construction principles that still suffice to reconstruct all of classical mathematics.

Where this lives today

ZFC is the substrate on which the vast majority of contemporary mathematics is formally built: real numbers as Dedekind cuts or Cauchy sequences of rationals, functions as sets of ordered pairs (built exactly as in Example 1 above), cardinal and ordinal arithmetic, and the entire theory of the transfinite all rest on Pairing, Union, Power Set, Infinity, Separation, and Replacement. In mathematical logic and model theory, ZFC is the standard background theory in which one studies independence results (Gödel's constructible universe LL and Cohen's forcing method both work by building alternative models of ZF/ZFC to show the Continuum Hypothesis and Choice are independent of ZF). In computer science, the cumulative hierarchy and well-founded recursion (guaranteed by Foundation) underlie the semantics of recursive data types and the theory of well-founded induction used to prove program termination. In category theory, the need to speak of "the category of all sets" without contradiction leads directly to Grothendieck universes, themselves constructed using strengthenings of ZFC's Power Set and Replacement axioms (large cardinal axioms). Descriptive set theory, measure theory, and the foundations of probability all quietly rely on Replacement to construct the transfinite hierarchies of Borel and projective sets. And the entire question of the Axiom of Choice — whether the ninth axiom should be accepted, and what changes if it is dropped or replaced by alternatives like the Axiom of Determinacy — is a live and central topic that builds directly on the ZF framework surveyed here.

Ask the tutor: How does the Axiom of Choice interact with Zorn's Lemma and the Well-Ordering Theorem, and why are all three provably equivalent over ZF?

DefinitionThe ZFC axioms

Fix a first-order language L={∈}\mathcal{L} = \{\in\} with one non-logical binary relation symbol ∈\in, interpreted as set membership; all quantifiers range over sets. The theory ZF (Zermelo–Fraenkel set theory) consists of the universal closures of the following formulas.

1. Extensionality.

∀x ∀y [∀z (z∈x↔z∈y)→x=y].\forall x\,\forall y\,\big[\forall z\,(z \in x \leftrightarrow z \in y) \rightarrow x = y\big].

Two sets with the same elements are equal.

2. Pairing.

∀x ∀y ∃z ∀w (w∈z↔(w=x∨w=y)).\forall x\,\forall y\,\exists z\,\forall w\,\big(w \in z \leftrightarrow (w = x \lor w = y)\big).

For any x,yx, y there is a set z={x,y}z = \{x,y\}.

3. Union.

∀F ∃u ∀x (x∈u↔∃y (y∈F∧x∈y)).\forall \mathcal{F}\,\exists u\,\forall x\,\big(x \in u \leftrightarrow \exists y\,(y \in \mathcal{F} \land x \in y)\big).

For any set F\mathcal F of sets, there is a set u=⋃Fu = \bigcup \mathcal F.

4. Power Set.

∀x ∃p ∀y (y∈p↔y⊆x),\forall x\,\exists p\,\forall y\,\big(y \in p \leftrightarrow y \subseteq x\big),

where y⊆xy \subseteq x abbreviates ∀z (z∈y→z∈x)\forall z\,(z\in y \to z\in x). For any xx there is a set p=P(x)p = \mathcal P(x).

5. Separation (Schema). For each formula φ(z,w1,…,wn)\varphi(z, w_1,\dots,w_n) of L\mathcal L not containing xx free:

∀w1⋯∀wn ∀a ∃x ∀z (z∈x↔z∈a∧φ(z,w1,…,wn)).\forall w_1\cdots\forall w_n\,\forall a\,\exists x\,\forall z\,\big(z \in x \leftrightarrow z \in a \land \varphi(z,w_1,\dots,w_n)\big).

For any set aa and any definable property φ\varphi, the collection {z∈a:φ(z)}\{z \in a : \varphi(z)\} is a set.

6. Replacement (Schema). For each formula φ(z,y,w1,…,wn)\varphi(z, y, w_1,\dots,w_n) not containing xx free such that φ\varphi defines a function (i.e. ∀z ∀y ∀y′ (φ(z,y,w⃗)∧φ(z,y′,w⃗)→y=y′)\forall z\,\forall y\,\forall y'\,(\varphi(z,y,\vec w)\land \varphi(z,y',\vec w)\to y=y') is provable/assumed):

∀w⃗ ∀a ∃x ∀y (y∈x↔∃z∈a φ(z,y,w⃗)).\forall \vec w\,\forall a\,\exists x\,\forall y\,\Big(y \in x \leftrightarrow \exists z \in a\, \varphi(z,y,\vec w)\Big).

The image of a set aa under a class function is a set.

7. Infinity.

∃x (∅∈x∧∀y∈x (y∪{y}∈x)).\exists x\,\big(\varnothing \in x \land \forall y \in x\, (y \cup \{y\} \in x)\big).

There is a set containing ∅\varnothing and closed under y↦y∪{y}y \mapsto y \cup \{y\} (the successor operation).

8. Foundation (Regularity).

∀x (x≠∅→∃y∈x (y∩x=∅)).\forall x\,\big(x \neq \varnothing \rightarrow \exists y \in x\, (y \cap x = \varnothing)\big).

Every nonempty set has an ∈\in-minimal element.

ZFC is ZF together with:

9. Choice. For every set F\mathcal F of pairwise disjoint nonempty sets, there is a set CC containing exactly one element from each member of F\mathcal F. (Choice is treated in depth in its own article; it is included here only for completeness of the list.)

Intuition

Think of the universe of sets as built in stages, indexed by ordinals, forming the cumulative hierarchy V0,V1,V2,…,Vω,Vω+1,…V_0, V_1, V_2, \dots, V_\omega, V_{\omega+1}, \dots defined by

V0=∅,Vα+1=P(Vα),Vλ=⋃α<λVα for limit λ.V_0 = \varnothing, \qquad V_{\alpha+1} = \mathcal P(V_\alpha), \qquad V_\lambda = \bigcup_{\alpha<\lambda} V_\alpha \text{ for limit } \lambda.

Every set that ZF proves exists lives in some VαV_\alpha, and conversely Foundation is exactly the axiom asserting that every set lives somewhere in this hierarchy — nothing is "left out" at the bottom, floating in an infinite regress of membership. Extensionality tells you sets are nothing but their extensions: no two different "bags" with the same contents. Pairing, Union, and Power Set are the three basic moves that let you climb the hierarchy: pair two known sets, take a union of a known family, or take all subsets of a known set. Infinity is the one axiom that forces the hierarchy past every finite stage, guaranteeing an actual infinite set exists rather than merely arbitrarily large finite ones. Separation and Replacement are the two definability axioms: Separation lets you carve out a subset of something you already have using a formula, while Replacement — strictly stronger — lets you replace each element of a known set by (possibly a "larger" or differently-structured) image under a definable rule, which is essential once you need sets of very large or complicated ordinals that no amount of power-setting alone would reach. The picture below shows the first few levels of the cumulative hierarchy and where Foundation forbids "sideways" or "downward-infinite" membership chains, while the second figure shows conceptually how the roles of the eight ZF axioms partition into "existence/building" versus "restriction/safety."

Figure
The cumulative hierarchy V0⊆V1⊆V2⊆⋯⊆VωV_0 \subseteq V_1 \subseteq V_2 \subseteq \cdots \subseteq V_\omega
V₀ = ∅ V₁ = {∅} V₂ = {∅,{∅}} V₃ = 𝒫(V₂), |V₃| = 4 sets Vω = ⋃ₙ Vₙ (first infinite stage, guaranteed by Infinity)
Figure
Roles of the ZF axioms: builders vs. safeguards
Existence / Building Pairing: {x,y} Union: ⋃𝓕 Power Set: 𝒫(x) Infinity: ω exists Replacement: images of sets Separation: {z∈a : φ(z)} Identity / Safety Extensionality: x = y iff same elements Foundation: no set x ∈ x, no infinite descent x₀∋x₁∋x₂∋⋯
TheoremSeparation blocks Russell's Paradox

Let ZF include the Separation schema as stated above, and suppose (for contradiction) that ZF also included the unrestricted Comprehension Schema: for every formula φ(z)\varphi(z),

∃x ∀z (z∈x↔φ(z)).\exists x\, \forall z\, \big(z \in x \leftrightarrow \varphi(z)\big).

Then ZF (with unrestricted Comprehension in place of Separation) is inconsistent. Conversely, Separation alone — without the "∀a\forall a" restricting φ\varphi to a pre-existing set aa — proves no analogous contradiction; that is, Separation is consistent with (indeed provable from, relative to the other axioms, in) ZF, and blocks the Russell construction because it never asserts the existence of {z:φ(z)}\{z : \varphi(z)\} outright, only of {z∈a:φ(z)}\{z \in a : \varphi(z)\} for a set aa already known to exist.

Proof

Part 1: unrestricted Comprehension is inconsistent. Take φ(z)\varphi(z) to be the formula z∉zz \notin z. By unrestricted Comprehension there is a set RR with

∀z (z∈R↔z∉z).\forall z\, \big(z \in R \leftrightarrow z \notin z\big).

Instantiate the universal quantifier at z:=Rz := R (a valid step of first-order logic, universal instantiation):

R∈R↔R∉R.R \in R \leftrightarrow R \notin R.

This is a biconditional between a statement and its own negation. Let PP denote the sentence R∈RR \in R. We have derived P↔¬PP \leftrightarrow \neg P. By the law of excluded middle, either PP or ¬P\neg P holds. If PP holds, then by the biconditional ¬P\neg P holds, so P∧¬PP \land \neg P, a contradiction. If ¬P\neg P holds, then by the biconditional (right-to-left direction) PP holds, again giving P∧¬PP \land \neg P. Either way we derive a contradiction from the theory. Hence any theory containing unrestricted Comprehension is inconsistent — this is exactly Russell's argument, verified symbol by symbol. Part 2: Separation does not license this construction. Suppose we attempt the same maneuver using Separation instead. Separation requires an already-given set aa, and produces

x={z∈a:z∉z},x = \{z \in a : z \notin z\},

i.e. ∀z (z∈x↔z∈a∧z∉z)\forall z\,(z \in x \leftrightarrow z \in a \land z \notin z). Instantiating at z:=xz := x gives

x∈x↔(x∈a∧x∉x).x \in x \leftrightarrow (x \in a \land x \notin x).

Suppose x∈xx \in x. Then the right side must hold, so in particular x∉xx \notin x — contradicting the supposition. Hence by reductio ad absurdum, x∉xx \notin x. This is not a contradiction on its own (unlike Part 1): it is simply a valid derived fact, namely x∉xx \notin x. We must check it is consistent with the biconditional: since x∉xx \notin x, the right side x∈a∧x∉xx \in a \land x \notin x reduces to asking whether x∈ax \in a; if x∈ax \in a held, the right side would be true while the left side x∈xx \in x is false, contradicting the biconditional. So we further conclude x∉ax \notin a. So the only consequence extracted is: x∉xx \notin x and x∉ax \notin a, i.e. x={z∈a:z∉z}x = \{z \in a : z \notin z\} is itself a witness that a⊈xa \not\subseteq x-in-general fails to be paradoxical — precisely, we've shown x∉ax \notin a, meaning aa's Russell subset is never a member of aa itself. No contradiction arises because Separation never asserted xx has any relationship to a "universal" domain; it only asserts xx is a certain subset of the specific set aa, and subsets of aa that are not elements of aa are utterly unremarkable (e.g. aa itself is typically not an element of aa, once Foundation is assumed). Formally: the derivation in Part 1 required instantiating φ\varphi at an object RR that was itself asserted to be in the domain of comprehension (RR ranges over "all sets," including RR), producing self-reference in an unrestricted universe. Separation restricts the domain to aa, and the derived fact x∉ax \notin a shows the self-referential instantiation simply falls outside aa, dissolving the paradox rather than reproducing it. As an immediate corollary, we record the standard fact used throughout set theory:

Corollary (No universal set). There is no set VV such that ∀z (z∈V)\forall z\,(z \in V). Proof of Corollary. Suppose such VV existed. Apply Separation to a:=Va := V with φ(z):≡(z∉z)\varphi(z) :\equiv (z \notin z), obtaining x={z∈V:z∉z}x = \{z \in V : z \notin z\}. Since VV is universal, z∈Vz \in V holds for every set zz, so x={z:z∉z}x = \{z : z \notin z\}, i.e. ∀z(z∈x↔z∉z)\forall z (z \in x \leftrightarrow z \notin z) — exactly the hypothesis of Part 1's Russell set. Instantiating at z:=xz:=x reproduces the contradiction x∈x↔x∉xx \in x \leftrightarrow x \notin x of Part 1. Hence no universal set can exist in ZF. ■\blacksquare

∎

This proof technique — instantiate a universally quantified biconditional at the very object it defines, then apply excluded middle — is the paradigm diagonal/self-reference argument reused throughout logic (compare the Liar paradox, Cantor's theorem on power sets, and the undecidability of the halting problem). The proof of Part 1 is a direct derivation of ⊥\bot (non-circular: it uses only propositional logic and universal instantiation, no set-theoretic axiom other than the assumed unrestricted Comprehension). The Corollary's proof uses only Separation (already established as one of our axioms) and Part 1's propositional argument, so there is no circularity: we do not use the Corollary or any theorem depending on it anywhere in Part 1 or Part 2.

Worked examples

Example 1 — Building the ordered pair and verifying it from the axioms alone. We construct the Kuratowski ordered pair ⟨a,b⟩:={{a},{a,b}}\langle a, b\rangle := \{\{a\},\{a,b\}\} using only Pairing, and verify the defining property using Extensionality — with an asymmetric pair a≠ba \ne b to make sure the construction isn't accidentally symmetric. Let aa and bb be arbitrary sets with a≠ba \neq b. By Pairing applied to aa and aa, the set {a}:={a,a}\{a\} := \{a,a\} exists (Pairing only requires two, possibly equal, inputs, and ∀w (w∈z↔w=a∨w=a)\forall w\,(w \in z \leftrightarrow w = a \lor w = a) simplifies to w=aw = a). By Pairing applied to aa and bb, the set {a,b}\{a,b\} exists. By Pairing applied to the two sets {a}\{a\} and {a,b}\{a,b\}, the set

⟨a,b⟩:={{a},{a,b}}\langle a,b\rangle := \big\{\{a\},\{a,b\}\big\}

exists. All three applications of Pairing are legitimate since each takes two already-constructed sets as input.

Claim. For all sets a,b,c,da,b,c,d: ⟨a,b⟩=⟨c,d⟩\langle a,b \rangle = \langle c,d\rangle if and only if a=ca=c and b=db=d. Proof. (⇐\Leftarrow) If a=ca=c and b=db=d then {a}={c}\{a\} = \{c\} and {a,b}={c,d}\{a,b\}=\{c,d\} as sets (by Extensionality, since they have identical elements), so {{a},{a,b}}={{c},{c,d}}\{\{a\},\{a,b\}\} = \{\{c\},\{c,d\}\}. (⇒\Rightarrow) Suppose ⟨a,b⟩=⟨c,d⟩\langle a,b\rangle = \langle c,d \rangle, i.e. {{a},{a,b}}={{c},{c,d}}\{\{a\},\{a,b\}\} = \{\{c\},\{c,d\}\}. By Extensionality these two-element sets have the same elements, so {a}\{a\} equals {c}\{c\} or {c,d}\{c,d\}. Case A: Suppose our pair is genuinely asymmetric with a≠ba \ne b. Since {a}\{a\} is a singleton, and {c,d}\{c,d\} has the property that it is a singleton iff c=dc=d, we split further:

  • If {a}={c,d}\{a\} = \{c,d\}: then since {a}\{a\} is a singleton, c=d=ac = d = a. Then the right-hand pair is {{a},{a,a}}={{a}}\{\{a\},\{a,a\}\} = \{\{a\}\}, a genuine singleton as a set (only one distinct element, {a}\{a\}). But the left-hand pair {{a},{a,b}}\{\{a\},\{a,b\}\} has two distinct elements since a≠ba \ne b implies {a}≠{a,b}\{a\} \ne \{a,b\} (as b∈{a,b}b \in \{a,b\} but b∉{a}b \notin \{a\}, using a≠ba\ne b). A one-element set cannot equal a two-element set (their elements, compared via Extensionality, would force {a}={a,b}\{a\} = \{a,b\}, contradiction). So this sub-case is impossible.
  • Hence {a}={c}\{a\} = \{c\}, forcing a=ca = c (two singletons are equal iff their unique elements are equal, by Extensionality). And then {a,b}\{a,b\} must equal {c,d}={a,d}\{c,d\} = \{a,d\} (the other element of the right side, since {a}≠{c,d}\{a\}\ne\{c,d\} was just ruled out — more precisely, since the two-element set on the right, {c,d}\{c,d\}, must equal the two-element set on the left, {a,b}\{a,b\}, because {a}\{a\} already matched {c}\{c\} and by Extensionality the sets {{a},{a,b}}\{\{a\},\{a,b\}\}, {{c},{c,d}}\{\{c\},\{c,d\}\} having equal first components force the remaining components equal too, using that {a}≠{a,b}\{a\}\ne\{a,b\}). From {a,b}={a,d}\{a,b\}=\{a,d\}, Extensionality gives: b∈{a,d}b \in \{a,d\}, so b=ab=a or b=db=d; since b≠ab\neq a, we get b=db=d.

So a=ca=c and b=db=d, as required. ■\blacksquare This confirms the ordered pair is correctly recoverable using only Pairing and Extensionality — no new axiom for "ordered pair" is needed; it is a definable notion, and Cartesian products A×B:={⟨a,b⟩:a∈A,b∈B}A\times B := \{\langle a,b\rangle : a\in A, b\in B\} are then obtained rigorously via Separation applied inside P(P(A∪B))\mathcal P(\mathcal P(A\cup B)) (every ⟨a,b⟩\langle a,b\rangle with a∈A,b∈Ba\in A, b\in B is an element of P(P(A∪B))\mathcal P(\mathcal P(A \cup B)), and Separation carves out exactly those elements of this power set that have the ordered-pair form with first coordinate in AA and second in BB), invoking Power Set and Union along the way.

Example 2 — Why Replacement is strictly needed: constructing VωV_\omega and beyond. Using Infinity, we get a set II with ∅∈I\varnothing \in I and closed under y↦y∪{y}y \mapsto y \cup \{y\}. Define 0:=∅0 := \varnothing, 1:=0∪{0}={∅}1 := 0 \cup \{0\} = \{\varnothing\}, 2:=1∪{1}={∅,{∅}}2 := 1\cup\{1\} = \{\varnothing,\{\varnothing\}\}, and generally n+1:=n∪{n}n+1 := n \cup \{n\}; write ω\omega for the set of natural numbers obtained by Separation from II using the formula "zz is a natural number" (formalized as: zz belongs to every subset of II containing ∅\varnothing and closed under successor — this is itself a legitimate first-order formula, since it quantifies over subsets of II, which is fine because Power Set gives us P(I)\mathcal P(I) to quantify over, and Separation then extracts ω={z∈I:∀S∈P(I)(∅∈S∧(∀y∈S)(y∪{y}∈S)→z∈S)}\omega = \{z \in I : \forall S \in \mathcal P(I)(\varnothing \in S \land (\forall y\in S)(y\cup\{y\}\in S) \to z \in S)\}). Now consider the cumulative hierarchy restricted to finite levels:

V0=∅,Vn+1=P(Vn).V_0 = \varnothing,\quad V_{n+1} = \mathcal P(V_n).

Each individual VnV_n exists by nn applications of Power Set (a finite iteration, licensed one step at a time — this needs no new axiom beyond Power Set applied repeatedly, which is a legitimate meta-level induction on the natural number nn, itself justified since ω\omega exists by Infinity). But now ask for the single set

Vω:=⋃n∈ωVn.V_\omega := \bigcup_{n \in \omega} V_n.

This requires a single set {Vn:n∈ω}\{V_n : n \in \omega\} to exist, to which we could then apply Union. But "{Vn:n∈ω}\{V_n : n \in \omega\}" is exactly the image of the set ω\omega under the function n↦Vnn \mapsto V_n — and n↦Vnn \mapsto V_n is a class function definable by the formula

φ(n,y):≡"y=Vn":=∃f (f is a function with domain n+1, f(0)=∅, ∀k<n (f(k+1)=P(f(k))), y=f(n)),\varphi(n, y) :\equiv \text{"}y = V_n\text{"} := \exists f\,\big(f \text{ is a function with domain } n+1,\ f(0)=\varnothing,\ \forall k<n\,(f(k+1) = \mathcal P(f(k))),\ y = f(n)\big),

which one checks defines a genuine function of nn (existence and uniqueness of such ff for each n∈ωn \in \omega is proved by ordinary finite induction on nn, using Pairing/Power Set/Union at each successor step to build ff one value longer). Replacement, applied to the set a:=ωa := \omega and this formula φ\varphi, now directly yields

∃x ∀y (y∈x↔∃n∈ω φ(n,y)),\exists x\,\forall y\,\big(y \in x \leftrightarrow \exists n \in \omega\, \varphi(n,y)\big),

i.e. the set x={Vn:n∈ω}x = \{V_n : n \in \omega\} exists as a single set. Only then can Union be applied to xx to produce Vω=⋃xV_\omega = \bigcup x. Without Replacement, Separation alone cannot produce x={Vn:n∈ω}x = \{V_n : n\in\omega\}, because Separation only carves subsets out of an already-existing set — and no set containing all the VnV_n's is given in advance by Pairing, Union, or Power Set applied a bounded number of times; those axioms only ever hand you one new set per application, never "one new set for each of infinitely many previously constructed, increasingly large sets, collected together." This is precisely the sense in which Replacement is strictly stronger than Separation, and it is indispensable once one moves from finite iteration to genuinely transfinite constructions (e.g., defining Vω+ωV_{\omega+\omega}, or the sequence of alephs ℵ0,ℵ1,ℵ2,…\aleph_0, \aleph_1, \aleph_2, \dots, all require Replacement in exactly this pattern).

CounterexampleDropping Foundation: a set that contains itself

The Axiom of Foundation asserts every nonempty set has an ∈\in-minimal element, i.e. there is no infinite descending ∈\in-chain and, as a special case, no set is a member of itself. What breaks if we simply omit Foundation from the list (working in "ZF minus Foundation," sometimes called ZF− ⁣^-\!F, extended if one likes by an anti-foundation axiom)? Consider the theory ZF∖{Foundation}\setminus\{\text{Foundation}\} together with the extra axiom

∃ Ω (Ω={Ω}),\exists\, \Omega\,\big(\Omega = \{\Omega\}\big),

asserting a set Ω\Omega whose sole member is itself. (This is consistent relative to ZF, by the standard anti-foundation models, e.g. Aczel's AFA models, or simply because Foundation is independent of the other axioms — one can build models like Vω+1V_{\omega+1} with a single extra self-membered atom added in a controlled way, using a permutation/relabeling argument; the consistency proof is beyond the scope of this note, but the existence of such Ω\Omega relative to the remaining axioms is uncontroversial.) With Ω={Ω}\Omega = \{\Omega\} available: 1. Extensionality still holds, and is not contradicted: Ω\Omega has exactly one element, namely Ω\Omega itself, and there is no other set claiming to have exactly {Ω}\{\Omega\} as its element set that differs from Ω\Omega — Extensionality only forces sets with the same elements to be equal, and is silent about self-membership. 2. The Separation-based proof that blocked Russell's Paradox no longer gives "no set is self-membered." Indeed, apply the Russell-style Separation argument to a:={Ω}a := \{\Omega\} (which exists by Pairing) with φ(z):≡(z∉z)\varphi(z) :\equiv (z \notin z):

x={z∈{Ω}:z∉z}.x = \{z \in \{\Omega\} : z \notin z\}.

Since Ω∈Ω\Omega \in \Omega, the only candidate element Ω\Omega of a={Ω}a=\{\Omega\} fails the condition z∉zz \notin z (because Ω∈Ω\Omega \in \Omega makes "Ω∉Ω\Omega \notin \Omega" false). Hence x=∅x = \varnothing — perfectly consistent, no contradiction. The Russell argument is not violated; it simply produces the empty set when applied to a domain containing a self-membered element, rather than blowing up. This shows Separation alone does not prove Foundation; Foundation is an independent extra restriction. 3. What actually breaks: the entire cumulative-hierarchy picture collapses. Without Foundation, it is no longer true that every set appears at some ordinal stage VαV_\alpha; Ω\Omega literally never enters the hierarchy at any stage, since membership in Vα+1=P(Vα)V_{\alpha+1}=\mathcal P(V_\alpha) would require Ω⊆Vα\Omega \subseteq V_\alpha, i.e., Ω∈Vα\Omega \in V_\alpha (as Ω\Omega's only element is Ω\Omega itself) — an infinite regress with no base case. Formally, one proves with Foundation that V=⋃αVαV = \bigcup_\alpha V_\alpha (every set is in some VαV_\alpha); this theorem is simply false in the presence of Ω={Ω}\Omega=\{\Omega\}, since Ω∉Vα\Omega \notin V_\alpha for any ordinal α\alpha (a straightforward transfinite induction on α\alpha: the base case α=0\alpha=0 is immediate since V0=∅V_0=\varnothing; the successor and limit steps show that Ω∈Vα⇒Ω∈Vα\Omega \in V_\alpha \Rightarrow \Omega \in V_\alpha regresses without ever terminating, so no ordinal rank can be consistently assigned). This exhibits precisely why Foundation is needed: without it, the "sets are built up in well-founded stages" picture, which underlies rank arguments, induction on set-formation, and many independence/consistency proofs in set theory, simply fails, even though no inconsistency results and even though Extensionality and Separation remain perfectly intact.

Scope, edge cases & common traps

AxiomCommon trap
SeparationConfusing it with unrestricted Comprehension — Separation always needs a pre-existing set aa to carve inside.
ReplacementForgetting that φ\varphi must define a genuine function (single-valued); without functionality the schema is not even meaningful as stated.
Power SetAssuming P(x)\mathcal P(x)'s cardinality is "the next size up" — this is exactly the Continuum Hypothesis question, independent of ZFC.
InfinityThinking Infinity is needed to get arbitrarily large finite sets — it is not; it is needed to get one single actually infinite set.
FoundationBelieving Foundation is needed for consistency — it is not; ZF minus Foundation is equiconsistent with ZF. Foundation is a structural convenience (every set has an ordinal rank), not a paradox-preventer.
ExtensionalityForgetting it is what makes "the same elements" the only criterion for set identity — without it, one could have two "different" empty sets.

The mathematician behind it

Origins · 1 minErnst Zermelo and how this was discovered
EZ
Ernst Zermelo
1871–1953 · Foundations of Set Theory, Göttingen and Zürich

Ernst Zermelo was a German mathematician who, working in the circle of Hilbert at Göttingen, produced the first axiomatization of set theory in 1908 in direct response to the paradoxes (Russell's, Burali-Forti's) that had shaken Cantor's naive theory. His original system already contained Extensionality, Pairing, Union, Power Set, Infinity, a restricted Separation ("Aussonderung"), and an early form of Choice, which he had isolated already in 1904 to prove the Well-Ordering Theorem. Abraham Fraenkel and Thoralf Skolem independently observed around 1922 that Zermelo's Separation was not strong enough to construct certain large sets needed elsewhere in mathematics, and proposed the Replacement schema to fill the gap; von Neumann later contributed the Axiom of Foundation, completing the system now called ZF (or ZFC with Choice). Zermelo's insight — that paradox arises specifically from unrestricted comprehension, and can be excised by restricting existence claims to subsets of already-given sets plus a short list of explicit constructors — remains the structural blueprint of essentially all subsequent axiomatic set theories.

History
- 1871 — Ernst Zermelo born in Berlin.
- 1901–1902 — Russell (and independently Zermelo) discovers the paradox of the set of all sets not containing themselves.
- 1904 — Zermelo proves the Well-Ordering Theorem using an early Choice principle.
- 1908 — Zermelo publishes the first axiomatization of set theory, including a primitive Separation axiom.
- 1922 — Fraenkel and Skolem independently introduce Replacement, strengthening Separation.
- 1925 — von Neumann formulates the Axiom of Foundation, completing the modern ZF(C) list.
- 1953 — Zermelo dies in Freiburg im Breisgau.
Is ZFC known to be consistent?

No, and it provably cannot be proved consistent using only ZFC's own resources. By Gödel's Second Incompleteness Theorem, any consistent theory strong enough to formalize basic arithmetic (ZFC certainly is) cannot prove its own consistency. So the consistency of ZFC is an unprovable-from-within assumption; working set theorists proceed on the strong empirical and structural evidence (seventy-plus years without a discovered contradiction, and the intuitive cumulative-hierarchy picture) that it is consistent, sometimes explicitly flagging results as "consistent relative to ZFC" or invoking mild large-cardinal hypotheses when even more assurance is wanted.

Why is Replacement a schema rather than a single axiom?

Replacement (like Separation) is stated once for each formula φ\varphi of the language, because first-order logic has no way to quantify over "all definable properties" as a single object — doing so would require quantifying over formulas, which pushes outside first-order logic into second-order logic. So technically ZF has infinitely many Replacement axioms, one per formula (with parameters), bundled together and called "the Replacement schema." This is standard practice in first-order axiomatizations of number theory too (compare the induction schema in Peano Arithmetic).

Does ZF prove the Axiom of Choice, or is Choice really independent?

ZF does not prove Choice, and it does not disprove it either: Gödel (1938) showed Choice holds in the constructible universe LL, establishing Choice cannot be disproved from ZF (assuming ZF is consistent), and Cohen (1963) used forcing to build a model of ZF in which Choice fails, establishing it cannot be proved from ZF either. Choice is thus independent of ZF, which is exactly why it is listed as a separate, optional ninth axiom rather than folded into "ZF" itself — this independence, and its many equivalent forms (Zorn's Lemma, Well-Ordering Theorem), are the subject of their own dedicated treatment.

What exactly goes wrong if we drop Infinity?

Without Infinity, ZF minus Infinity is consistent and has a model consisting of exactly the hereditarily finite sets, VωV_\omega itself (all sets constructible from ∅\varnothing using only finitely many applications of Pairing, Union, Power Set). In that model, no infinite set exists at all: the natural numbers as individual finite ordinals 0,1,2,…0,1,2,\dots each exist, but there is no single set containing all of them. This makes it impossible to construct N\mathbb N as an actual completed set, hence impossible to do most of analysis, which needs R\mathbb R built from infinite objects. Infinity is precisely the axiom that asserts a completed infinite totality exists, rather than merely "arbitrarily large finite" approximations.

Is the Separation schema redundant once we have Replacement?

Yes — Replacement implies Separation, given the other ZF axioms (in particular given that we already have ∅\varnothing, which follows from Infinity or can be separately postulated). Given a set aa and formula φ(z)\varphi(z), define the auxiliary formula ψ(z,y):≡(φ(z)∧y=z)∨(¬φ(z)∧y=z∧⊥)\psi(z,y) :\equiv (\varphi(z) \land y = z) \lor (\neg\varphi(z) \land y = z \land \bot); more simply, one applies Replacement to the partial function that sends z↦zz\mapsto z exactly when φ(z)\varphi(z) holds (undefined otherwise), whose image is precisely {z∈a:φ(z)}\{z\in a:\varphi(z)\}. Despite this logical redundancy, Separation is traditionally listed separately because it is conceptually simpler, historically prior (Zermelo's original 1908 axiom), and pedagogically clarifies exactly how paradox is blocked without invoking the heavier machinery of Replacement.

Why does Foundation matter if, as the counterexample shows, dropping it doesn't cause inconsistency?

Foundation is not needed for consistency, but it is needed for the structural theorem that every set has a well-defined ordinal rank and appears at some stage VαV_\alpha of the cumulative hierarchy. This single fact underlies proofs by induction on rank (used constantly, e.g., to define the transitive closure of a set, to prove the Axiom of Choice is equivalent to Zorn's Lemma via well-founded chains, and to build models of set theory via forcing). Without Foundation, "pathological" sets like Ω={Ω}\Omega = \{\Omega\} can exist alongside perfectly ordinary sets, and rank-induction arguments simply do not apply to them, forcing extra hypotheses ("assume xx is well-founded") throughout the theory.

Can ZFC be used to formalize itself — i.e., can ZFC talk about "the set of all ZFC axioms"?

ZFC can certainly formalize syntax: formulas, proofs, and the axiom schemas of Separation and Replacement can each be coded as sets of natural numbers (via Gödel numbering), and the resulting set of "codes of ZFC axioms" is a perfectly good (infinite but definable) set inside any model of ZFC. What ZFC cannot do is prove, from within itself, that this coded theory is consistent (by Gödel's Second Incompleteness Theorem, discussed above) — formalizing the axioms as objects of study is unproblematic; proving their joint consistency is not achievable internally.

Before this

Where this leads