Boolean elimination cannot define 𝐷(𝗍𝗍)≡ℕ,𝐷(𝖿𝖿)≡𝟏 as a type family: its branches are terms, while ℕ and 𝟏 have so far appeared only in type judgments. A universe is a type whose terms name types: it makes types available as terms. Boolean recursion may then return ℕ or 𝟏 in a universe, and the result may again be used as a type. The price is a size discipline.
The Russell hierarchy
We extend the theory of chapter 27–chapter 28 by an externally indexed sequence U0:U1:U2:⋯. In the Russell presentation, an element of U𝑖 is used directly as a type. The index 𝑖 is a metatheoretic natural number, not a term of the object theory.
The hierarchy is closed under precisely the type formers available through chapter 28:
Γ⊢𝐴:U𝑖Γ,𝑥:𝐴⊢𝐵:U𝑖
Γ⊢∏𝑥:𝐴𝐵:U𝑖
U-Pi
Γ⊢𝐴:U𝑖Γ,𝑥:𝐴⊢𝐵:U𝑖
Γ⊢∑𝑥:𝐴𝐵:U𝑖
U-Sig
Γ⊢𝐴:U𝑖Γ,𝑥:𝐴⊢𝐵:U𝑖
Γ⊢𝖶𝑥:𝐴𝐵:U𝑖
U-W
Γ⊢𝐴:U𝑖Γ⊢𝐵:U𝑖
Γ⊢𝐴+𝐵:U𝑖
U-Sum
Γ𝖼𝗍𝗑
Γ⊢𝟎:U𝑖
U-Void
Γ𝖼𝗍𝗑
Γ⊢𝟏:U𝑖
U-Unit
Γ𝖼𝗍𝗑
Γ⊢𝟐:U𝑖
U-Bool
Γ𝖼𝗍𝗑
Γ⊢ℕ:U𝑖
U-Nat
Each rule has its classified congruence companion. There is no eliminator for U𝑖, no rule U𝑖:U𝑖, and no closure rule for a type former introduced only in a later chapter.
For later calculations, note the nullary instances explicitly: U-Void, U-Unit, U-Bool, and U-Nat place 𝟎,𝟏,𝟐,ℕ in every U𝑖. Together with U-Sum, these are the branch elements used by the large eliminations below.
The open-endedness is deliberate. Martin-Löf adopts a reflection principle for the universe of small types but notes that it does not justify the axiom that the universe is one of its own elements, which Girard had shown contradictory [ML75]. His adjacent-level rule is weaker than the all-lower-level instance U-Hier fixed here. The sequence supplies a place for each universe without closing the entire sequence inside one final universe.
The characteristic derivation is 𝜆𝑋.𝜆𝑥.𝑥:∏𝑋:U0∏𝑥:𝑋𝑋. In the context 𝑋:U0, rule U-El makes 𝑋 a type. The inner lambda is then ordinary Π-introduction. The outer domain is a type by U-Form. No universe eliminator is involved.
A type is U𝑖-small when it is judgmentally equal as a type to some element of U𝑖. A type family over 𝐴 is U𝑖-small when it is represented by a term 𝐴→U𝑖. Bare 𝑖,𝑗,𝑘 in universe judgments range over external naturals. Letters 𝑢,𝑣 denote external level variables: metatheoretic unknowns that will later be instantiated by external naturals.
The hierarchy contains one rule instance for each external level. A single derivation uses finitely many instances, and there is no object-language quantifier over levels.
For 𝐴𝑡,𝐴𝑓:U𝑖 and 𝑏:𝟐, put 𝖨𝖿𝑖(𝐴𝑡,𝐴𝑓,𝑏):=𝗋𝖾𝖼𝟐(𝐴𝑡,𝐴𝑓,𝑏):U𝑖. Then 𝖨𝖿𝑖(𝐴𝑡,𝐴𝑓,𝗍𝗍)≡𝐴𝑡,𝖨𝖿𝑖(𝐴𝑡,𝐴𝑓,𝖿𝖿)≡𝐴𝑓 at U𝑖, hence also as types. In the context 𝑏:𝟐, however, 𝑏:𝟐⊢𝖨𝖿0(ℕ,𝟏,𝑏):U0and𝑏:𝟐⊢𝖨𝖿0(ℕ,𝟏,𝑏)𝗍𝗒𝗉𝖾 are neutral: neither Boolean computation rule applies. Thus 𝜆𝑥.𝑥 has type 𝖨𝖿0(ℕ,𝟏,𝑏)→𝖨𝖿0(ℕ,𝟏,𝑏), but the intended conversion of 𝟢:ℕ to 𝟢:𝖨𝖿0(ℕ,𝟏,𝑏) is stuck. After substituting 𝗍𝗍 for 𝑏, the classifier computes to ℕ and that conversion is immediate.
A primitive type-level Boolean conditional could reproduce this example, but would not provide recursion into a universe for ℕ and hence would not define the recursive family below.
Let Γ⊢𝐴𝗍𝗒𝗉𝖾 and let 𝑥 be fresh for Γ. The assignments Γ⊢𝐹:𝐴→U𝑖givesΓ,𝑥:𝐴⊢𝐹(𝑥):U𝑖,Γ,𝑥:𝐴⊢𝐵:U𝑖givesΓ⊢𝜆𝑥.𝐵:𝐴→U𝑖. The assignments are mutually inverse: their composites are identified by Π-𝛽 and Π-𝜂.
Proof of Proposition 29.16 — Families are maps into
Proof. Application gives 𝐹(𝑥):U𝑖, and U-El makes it a type. Abstraction gives the reverse assignment. Their composites are (𝜆𝑥.𝐵)(𝑥)≡𝐵 and 𝜆𝑥.𝐹(𝑥)≡𝐹 by the Π rules. ◻
For example, if Γ⊢𝐴:U0 and Γ,𝑥:𝐴⊢𝐵:U0, rule U-W gives Γ⊢𝖶𝑥:𝐴𝐵:U0. Thus the W-type former, not merely its ordinary formation rule, is available to universe-valued families.
Define the recursive universe map 𝖥𝗂𝗇LE:=𝜆𝑛.𝗋𝖾𝖼ℕ(𝟎,𝜆𝑘.𝜆𝑅.𝑅+𝟏,𝑛):ℕ→U0. The subscript recalls “large elimination,” not an order relation. The family 𝖥𝗂𝗇LE(𝑛) has one element for each 𝑘<𝑛: external induction uses the cardinal equations |𝟎|=0 and |𝐴+𝟏|=|𝐴|+1. The recursor computes at the universe classifier, so 𝖥𝗂𝗇LE(𝟢)≡𝟎:U0,𝖥𝗂𝗇LE(𝗌𝗎𝖼(𝑛))≡𝖥𝗂𝗇LE(𝑛)+𝟏:U0. After U-El-Eq, the same equations hold as equalities of types. This is a recursively defined family of ordinary types. It is not yet a genuinely indexed inductive declaration: no constructor result constrains an index by unification.
Recursion into U0 defines 𝖤𝗊𝖭(𝟢,𝟢)≡𝟏,𝖤𝗊𝖭(𝟢,𝗌𝗎𝖼(𝑛))≡𝟎,𝖤𝗊𝖭(𝗌𝗎𝖼(𝑚),𝟢)≡𝟎,𝖤𝗊𝖭(𝗌𝗎𝖼(𝑚),𝗌𝗎𝖼(𝑛))≡𝖤𝗊𝖭(𝑚,𝑛). Concretely, first recurse on the first argument to produce a function ℕ→U0; in its zero branch recurse on the second argument with branches 𝟏,𝟎, and in its successor branch recurse with branches 𝟎 and the recursively supplied family. These are judgmental equations at U0, hence equations of types by U-El-Eq.
The calculations in this section use the optional cumulative membership extension
Γ⊢𝐴:U𝑖𝑖≤𝑗
Γ⊢𝐴:U𝑗
U-Cumul
Without U-Cumul, every premise of U-Pi must have exactly the rule’s single level, so level inference collapses to unification rather than the inequality problem below. This is an explicit local change of theory, not a silent property of definition 29.1.
An implementation replaces some external indices by level variables. For the fragment used here, level expressions are generated by ℓ::=0∣𝑢∣ℓ+1∣max(ℓ,ℓ), and formation emits inequalities between such expressions. Normalize a level expression as a finite maximum of atoms 𝑢+𝑛 and a constant 𝑛. Then ℓ≤𝑟 means that every atom on the left is dominated by an atom with the same parameter on the right or by a known parameter constraint.
The notation 𝑓.{𝑢,𝑣} means that the declaration is generalized metatheoretically over the external level variables 𝑢,𝑣; the braces are not object-language binders. For 𝖼𝗈𝗇𝗌𝗍.{𝑢,𝑣}:∏𝑋:U𝑢∏𝑌:U𝑣𝑋→𝑌→𝑋, let 𝑚 classify the entire displayed type. The two universe binders emit 𝑢+1≤𝑚 and 𝑣+1≤𝑚; the result emits only 𝑢≤𝑚 and 𝑣≤𝑚. Removing the dominated constraints leaves 𝑢+1≤𝑚,𝑣+1≤𝑚, with least solution 𝑚=max(𝑢,𝑣)+1. At 𝑢=0,𝑣=2 this is 𝑚=3. By contrast, 𝑢+1≤𝑣 and 𝑣+1≤𝑢 are inconsistent: transitivity would give 𝑢+2≤𝑢.
Let 𝑃 be a satisfiable finite set of constraints involving only external parameters. Suppose every remaining normalized constraint has the one-sided form max𝑟(𝑎𝑟+𝑛𝑟)≤𝑥, where 𝑥 is an unknown and each 𝑎𝑟 is an external parameter, zero, or an unknown. Collapse zero-weight strongly connected components. If a component contains a positive-weight cycle, the constraints are unsatisfiable. Otherwise, for every assignment of the external parameters satisfying 𝑃, topological propagation of maxima terminates and returns the componentwise least solution as a max/successor expression in those parameters.
Proof of Proposition 74.10 — Completeness of the normalized solver
Proof. Fix an assignment of the external parameters satisfying 𝑃; those constraints restrict the inputs but add no unknown-bearing edge. Split every maximum into atomic inequalities and draw an edge 𝑎𝑛→𝑥 for 𝑎+𝑛≤𝑥. A positive cycle sums to 𝑥+𝑛≤𝑥 with 𝑛>0, impossible in ℕ. If no such cycle exists, every edge inside a strongly connected component has weight zero; the variables in that component may be identified. The quotient graph is finite and acyclic. Process it in topological order, assigning each node the maximum of the expressions delivered by its incoming edges. This terminates. Every solution dominates every incoming expression, so induction over the topological order proves that it dominates the constructed assignment. The assignment itself satisfies every edge, hence is the least solution. ◻
For an external parameter 𝑢>0, the constraint 𝑢≤max(𝑥,𝑦) has the two incomparable minimal solutions (𝑥,𝑦)=(𝑢,0) and (0,𝑢). It therefore has no componentwise least solution. A solver admitting an unknown-bearing maximum on the right must preserve that disjunction or use a more general output language.
Universe polymorphism is metatheoretic generalization over level variables followed by solving; it is not object-language quantification over levels. Kovács instead studies level structures and level-indexed families [Kov22]. That more expressive calculus is engineering evidence, not a theorem transferred to ours.
Lifting and cumulativity
The frozen Russell hierarchy is noncumulative. From 𝐴:U𝑖 one cannot silently conclude 𝐴:U𝑖+1. The cumulative rule used explicitly in section 74.4 is one repair; the other changes the syntax.
An explicit strict lift records a change of universe level in the term. The optional lifting extension has
Γ⊢𝐴:U𝑖
Γ⊢𝖫𝗂𝖿𝗍𝑖𝐴:U𝑖+1
Lift-U
Γ⊢𝐴:U𝑖
Γ⊢𝖫𝗂𝖿𝗍𝑖𝐴≡𝐴𝗍𝗒𝗉𝖾
Lift-El
Rule Lift-Cong says that lifting respects universe-element equality. Its commuting rules are Lift-Pi, Lift-Sig, Lift-W, Lift-Sum, Lift-Void, Lift-Unit, Lift-Bool, Lift-Nat, and Lift-Hier. For example, 𝖫𝗂𝖿𝗍𝑖(∏𝑥:𝐴𝐵)≡∏𝑥:𝖫𝗂𝖿𝗍𝑖𝐴𝖫𝗂𝖿𝗍𝑖𝐵:U𝑖+1. The codomain is transported along Lift-El when forming the right-hand product.
Without lifting or cumulativity, ∑𝑋:U0𝑋→𝑋 does not receive the uniform closure derivation at level 1: the domain U0 lies in U1, but the fibre is obtained in U0. Explicit lifting uses ∑𝑋:U0𝖫𝗂𝖿𝗍0(𝑋→𝑋):U1. Cumulative membership instead raises 𝑋→𝑋 by U-Cumul. The resulting surface types may look alike, but their derivations record different theories.
The fuss-free design replaces a proliferating family of lift naturality equations with a smallness calculus and proves its own equivalence and injectivity results [SS26]. Those results depend on that paper’s syntax and equations. Mugen implements displacement-algebra universe polymorphism and reports separate Agda and OCaml artifacts [FAM23]. We borrow neither metatheorem for the calculus fixed here.
Assume ZFC with an increasing sequence of strongly inaccessible cardinals 𝜅0<𝜅1<⋯. Extend the raw-syntax interpretation of definition 28.12, definition 73.39 by [[U𝑖]]=𝑉𝜅𝑖 and interpret every strict lift by the same set as its argument. Then every rule of definition 29.1 and the optional strict-lifting rules is sound. The same interpretation separately validates U-Cumul.
Proof of Lemma 74.14 — Set interpretation of the universe rules
Proof. The ordinary final rules are sound by lemma 28.14; it remains to inspect the universe-specific final rules. For every environment 𝜌, U-Form is valid because 𝑉𝜅𝑖 is a set. If 𝑗<𝑖, then rank(𝑉𝜅𝑗)=𝜅𝑗<𝜅𝑖,𝑉𝜅𝑗∈𝑉𝜅𝑖, which is the U-Hier case. If [[𝐴]]Γ𝜌∈𝑉𝜅𝑖, then that denotation is a set; transitivity of 𝑉𝜅𝑖 also keeps all its elements inside the stage. This proves U-El, while equality of two universe elements gives equality of the same two sets and proves U-El-Eq.
For the representative dependent-closure case, assume 𝐴𝜌:=[[𝐴]]Γ𝜌∈𝑉𝜅𝑖,𝐵𝜌,𝑎:=[[𝐵]]Γ,𝑥:𝐴(𝜌,𝑎)∈𝑉𝜅𝑖(𝑎∈𝐴𝜌). Strong inaccessibility makes 𝑉𝜅𝑖 closed under the indexed product, so [[∏𝑥:𝐴𝐵]]Γ𝜌=∏𝑎∈𝐴𝜌𝐵𝜌,𝑎∈𝑉𝜅𝑖. This is U-Pi. The Σ-, W-, coproduct-, and nullary cases use the corresponding closure operation already defined in definition 73.39 (one line each).
A lift and its argument have literally the same set denotation. This proves Lift-El; closure at the next stage proves Lift-U, and applying the same set operation to equal denotations proves the congruence and commuting rules (one line for each constructor). Finally, the case 𝑖=𝑗 of U-Cumul is immediate. If 𝑖<𝑗 and 𝐴∈𝑉𝜅𝑖, then rank(𝐴)<𝜅𝑖<𝜅𝑗, hence 𝐴∈𝑉𝜅𝑗. Because the interpretation is defined on raw expressions, the denotation of 𝐴 is the same set whether a derivation uses it as a universe element or, by U-El, as a type. These cases extend the simultaneous induction of lemma 28.14. ◻
Proof of Theorem 74.15 — Relative consistency and separation
Proof. Soundness is lemma 74.14. A closed term of 𝟎 would denote an element of the empty set, while the displayed Boolean equality would identify the distinct denotations 1 and 0. ◻
If 𝗍𝗍≡𝖿𝖿:𝟐 is derivable in the empty context, then there is a closed term of 𝟎. Under the set-theoretic hypothesis of theorem 74.15, that equality judgment is not derivable.
Proof of Theorem 29.14 — Disjointness of the booleans
Proof. Define 𝑃(𝑏):=𝖨𝖿0(𝟏,𝟎,𝑏):U0. Congruence sends an assumed equality of booleans to 𝑃(𝗍𝗍)≡𝑃(𝖿𝖿):U0. Computation and U-El-Eq give 𝟏≡𝟎 as types, so conversion sends ⋆:𝟏 to a term of 𝟎. The second assertion is the Boolean-separation clause of theorem 74.15. ◻
This is a relative model theorem under a strong set-theoretic hypothesis. It proves neither normalization nor decidability, and it does not assert that inaccessible cardinals are necessary for every finite fragment.
★★★ Let Γ⊢𝐴:U𝑖 be derived in an arbitrary well-formed context using only U-Hier and the closure rules of definition 29.1. By induction on that derivation, construct 𝐴′ with Γ⊢𝐴′:U𝑖+1andΓ⊢𝐴′≡𝐴𝗍𝗒𝗉𝖾, using explicit lifts. Mark every context conversion in a dependent rule.
★★★ Suppose 𝑖<𝑗, Γ⊢𝐴:U𝑖, and Γ,𝑥:𝐴⊢𝐵:U𝑖. Define 𝖫𝗂𝖿𝗍𝑖→𝑗 and prove Γ⊢𝖫𝗂𝖿𝗍𝑖→𝑗𝐴:U𝑗,Γ⊢𝖫𝗂𝖿𝗍𝑖→𝑗𝐴≡𝐴𝗍𝗒𝗉𝖾, and, after transporting the codomain to the lifted binder context, Γ⊢𝖫𝗂𝖿𝗍𝑖→𝑗(∏𝑥:𝐴𝐵)≡∏𝑥:𝖫𝗂𝖿𝗍𝑖→𝑗𝐴𝖫𝗂𝖿𝗍𝑖→𝑗𝐵:U𝑗.
★★☆ In the cumulative extension of section 74.4, take 𝑃={𝑣≤𝑢+1} as a constraint on external parameters. Normalize and solve 𝑢+1≤𝑚, max(𝑣+2,𝑢)≤𝑚, and 𝑣≤𝑢+1. State whether the solution is principal and which hypothesis of proposition 74.10 you used.
Begin with exercise 74.16: its paper calculation fixes the expected constraint graph. Then complete exercise 74.15 and compare the executable counterexample with that calculation.
★★★Practical project.universe-level-solver Run this chapter’s Kappa artifact on the satisfiable declaration from example 74.9 and the strict-cycle rejection. Add a case with three level variables and two maxima. Then replay the mutation that treats a strict edge as weak. Explain which mathematical obligation is tested and which part of proposition 74.10 remains a paper proof.
★★☆ In the cumulative extension used by example 74.9, suppose 𝐴𝑖:U𝑖, 𝐵𝑗(𝑎):U𝑗 for 𝑎:𝐴𝑖, and, for 𝑥:∏𝑎:𝐴𝑖𝐵𝑗(𝑎), suppose 𝐶𝑘(𝑥):U𝑘 and 𝐷𝑙(𝑥,𝑐):U𝑙 for 𝑐:𝐶𝑘(𝑥). Calculate the least level of ∑𝑥:∏𝑎:𝐴𝑖𝐵𝑗(𝑎)∏𝑐:𝐶𝑘(𝑥)𝐷𝑙(𝑥,𝑐). Then add the constraint 𝑖+1≤𝑖 and exhibit the strict cycle.
The universe pages of Martin-Löf’s predicative paper give the historical closure and hierarchy boundary [ML75]. Generalized level structures are developed by Kovács [Kov22]. The implementation comparison above is deliberately bounded to the displayed interfaces of the fuss-free and Mugen artifacts [SS26, FAM23]; their normalization or elaboration theorems are not imported into this chapter.