Gödel's Incompleteness Theorems
Gödel's two incompleteness theorems (1931) are the central limitative results of mathematical logic. They say, roughly, that any formal system rich enough to express elementary arithmetic is unable to settle every question in its own language, and is unable to certify its own consistency. They mark the boundary between what can be captured by a fixed set of axioms and inference rules and what is true — and they do so constructively, by exhibiting concrete undecided sentences.
These results live downstream of first-order logic: the framework of effective axiomatization, provability (), and truth in a model () is assumed throughout. They are best read alongside the contrasting completeness theorem, with which they are easily confused, and they underpin the independence phenomena seen in set theory.
Statement of the theorems
Fix a formal theory in the language of arithmetic (or any language interpreting arithmetic). Three hypotheses are essential:
- is effectively axiomatized (recursively/computably enumerable): there is an algorithm that decides whether a given string is an axiom of . This is what makes " proves " a mechanically checkable notion.
- is consistent: it does not prove a contradiction. (For the exact form of the first theorem one needs -consistency, later weakened to plain consistency by Rosser.)
- interprets a sufficient fragment of arithmetic — it is strong enough to represent all computable functions. The standard weak benchmark is Robinson arithmetic ; the usual working theory is Peano arithmetic .
First Incompleteness Theorem. Any consistent, effectively axiomatized theory extending is incomplete: there is a sentence in the language of such that Moreover can be chosen to be true in the standard model — it is a arithmetical statement asserting its own unprovability.
Second Incompleteness Theorem. For such a (now at least as strong as ), if is consistent then where is a natural arithmetical sentence expressing the consistency of . A theory strong enough to talk about its own proofs cannot prove its own consistency.
A useful slogan: truth outruns provability, and a system cannot lift itself by its own bootstraps.
Why "enough arithmetic"? The three hypotheses cannot be dropped
Each hypothesis is necessary, and dropping any one produces a complete theory, showing the theorem is sharp.
- Drop effective axiomatizability. True arithmetic — the set of all sentences true in — is complete by definition. But it is not computably enumerable (this is essentially Tarski's theorem below), so it is not a formal system in the required sense.
- Drop consistency. An inconsistent theory proves everything, hence is trivially complete. Incompleteness is interesting only for consistent theories.
- Drop arithmetical strength. Several mathematically rich theories are complete and decidable because they cannot encode their own syntax: the theory of dense linear orders (DLO), Presburger arithmetic (the additive theory , with no multiplication), the theory of algebraically closed fields, and the first-order theory of real closed fields (Tarski). The presence of multiplication — which lets one express the divisibility and prime-counting relations needed to encode sequences — is exactly what tips arithmetic into incompleteness.
The machinery: arithmetization and three lemmas
Gödel's proof is a feat of self-reference made rigorous. Its parts have become standard tools.
Gödel numbering
Every symbol, formula, and finite proof is assigned a natural number — its Gödel number — by a fixed, computable, injective coding (e.g. via prime factorization ). Syntactic operations (" is an axiom", " is a proof of ", "substitute a numeral into ") become arithmetical relations on the codes. Write for the numeral naming the code of .
The numbering itself is purely syntactic and metatheoretic: the map is defined in the metalanguage and depends only on the shape of a string, never on any interpretation or model. Two facts confirm its syntactic character. It is choice-independent — any computable injection with computable inverse and decidable syntactic predicates serves equally (prime powers, sequence codings, base- ASCII, …), so nothing depends on the scheme. And the basic syntactic predicates (" codes a formula", " codes a proof of ") are primitive recursive, so the metatheory doing the coding can be as weak as primitive recursive arithmetic (PRA) — no set theory, no semantics. This finitary character is exactly why the construction was admissible to Hilbert's finitists.
What makes self-reference non-circular is a number-vs-numeral distinction. For each expression there are two levels:
| Object | What it is | Where it lives |
|---|---|---|
| a natural number (the code) | metatheory | |
| a numeral, a closed term naming that number | object language |
The metalevel map lives in the metalanguage, but what appears inside a formula like is the numeral — an honest object-language term. The object theory never literally contains expressions; it contains numerals denoting their codes, together with arithmetical formulas defining the (recursive) syntactic relations on those codes. So "talks about its own syntax" only via the isomorphic copy . The one semantic-sounding claim — that denotes in — is never needed for the proof, which manipulates numerals purely as closed terms.
Representability
Because interprets enough arithmetic, every computable function and decidable relation is representable in : there is a formula that proves to hold exactly on the true instances. In particular the proof predicate is decidable, hence representable, and the provability predicate expresses " is the code of a -theorem." Note is (a search for a proof), and not in general decidable.
The proof predicate up close
It is worth unpacking , since it carries the weight. It says: codes a finite sequence of formulas that is a correct -proof whose last line is the formula coded by .
The explicit formula and its decomposition. Long in symbols, but a bounded conjunction of decidable pieces.
"Correct proof" means every line is an axiom or follows from earlier lines by a rule:
with decidable subpredicates: (" codes a sequence", its -th entry, its length), (" codes a logical or nonlogical axiom of " — for this must recognize instances of the induction schema), (" codes "), and (" codes "). Because cannot quantify over finite sequences directly, the coding uses Gödel's β-function (or prime-power exponents) to pack a sequence into one number with a decoding.
Is it a long formula? In primitive symbols () it is astronomically long — one must build sequence-coding, formulahood, substitution, and axiomhood from scratch. But as a logical object it is short and modular: a bounded conjunction of decidable pieces, normally written in a definitional extension (one defined symbol per primitive-recursive function, justified by representability + conservativity). The length is bookkeeping; the complexity is what matters.
That complexity is measured by the arithmetical hierarchy, which classifies formulas by their leading unbounded number-quantifiers (a bounded quantifier is one of the form or ):
- (= = ): all quantifiers bounded. Such formulas are decidable — their truth on given numerals can be checked mechanically, and decides each closed instance.
- : with — one block of unbounded existentials over a decidable matrix. These are exactly the recursively enumerable (semi-decidable) properties: search for a witness.
- : with — the co-r.e. properties. and are dual: is iff is .
(The superscript in the fuller notation records that the quantifiers range over numbers; the whole of this page stays at that level, so we drop the and write .) With this vocabulary the three predicates line up cleanly:
| Predicate | Form | Status |
|---|---|---|
| (all quantifiers bounded by ) | primitive recursive, decidable | |
| r.e., not decidable | ||
| the Gödel sentence |
The engine is exactly this asymmetry: checking a candidate proof is mechanical (); searching for one adds a single unbounded and jumps to . That one quantifier is the gap between proof-verification and provability. Two riders:
- This is where "effectively axiomatized" is used. is primitive recursive only because 's axioms are decidable; drop that and is no longer and the derivability conditions break.
- Intensionality (matters for the second theorem). Gödel II is sensitive to how is written, not merely its extension: a natural predicate satisfying the derivability conditions gives , but deviant extensionally-equivalent predicates (Rosser's, Feferman's) can make a -style sentence provable.
The Diagonal (Fixed-Point) Lemma
For any formula with one free variable there is a sentence with
The sentence "says of itself" that it has property . This is the rigorous engine behind the Liar-paradox intuition, but it produces a genuine sentence of arithmetic rather than a paradox.
Proof sketch. Self-reference is manufactured by a substitution function.
The key gadget: the diagonal function. Define a function on codes which takes the code of a one-variable formula and returns the code of the sentence obtained by substituting 's own numeral back into it. Substitution-of-a-numeral is a primitive-recursive operation on codes, so is primitive recursive, hence representable in .
The construction (term version). Given , build a formula saying " holds of the diagonalization of ." Working in a definitional extension where is available as a term, By definition of , Substituting equals into gives .
The miracle in one line: applies to "the diagonalization of "; plugging 's own code in for makes that inner term compute the code of the very sentence being formed — self-reference is engineered, not assumed.
The honest version (for , which lacks function terms). Use a representing formula for ("") with provable uniqueness, and take Then , so and . The two directions are routine: () from , instantiate via to get ; () from , any with equals by uniqueness, so , i.e. . The only ingredients are representability of one primitive-recursive function plus pure logic — no semantics.
A metatheorem: from provability to provable provability
The proofs below repeatedly take a step of the form " proves , therefore proves that it proves ." This is not a triviality — it is a genuine metatheorem, and it is worth isolating because the formula by itself is just a string. Four statements must be kept apart, two in each language:
| Statement | Kind |
|---|---|
| object-language formulas (mere sentences) | |
| metalanguage: "a derivation exists" | |
| metalanguage: "that formula is a theorem" | |
| metalanguage: "that formula is true in " |
So "getting from to " is ambiguous between reaching its truth and reaching its provability. The consistency-only proofs need the latter.
This is the first Hilbert–Bernays–Löb derivability condition, a metatheorem about whose engine is:
Provable -completeness (core lemma). Every true sentence is provable already in (hence in ).
Proof sketch. The core lemma, then D1 from it.
Why the core lemma holds. A true sentence is with a (bounded) formula true of some numeral . Bounded sentences are decided by — numerals evaluate, and bounded quantifiers unfold into finite conjunctions/disjunctions can check — so , hence .
Why D1 follows. If , fix a concrete derivation with code . Then is a true sentence, so by the core lemma , and existential generalization gives , i.e. .
The weaker passage to mere truth — — needs only that faithfully represents the real provability relation (a real proof's code witnesses the existential); it does not deliver the object-language theorem the consistency-only argument requires. Finally, the internalized form of D1 — proving the implication for itself, — is condition D3, which the second theorem needs.
Proof sketch of the first theorem
Apply the diagonal lemma to . This yields the Gödel sentence a sentence asserting "I am not provable in ." Then:
- . If , then by (D1) ; but the fixed-point equivalence turns into , so proves a sentence and its negation — contradicting consistency. (Note D1 delivers the object-language theorem , not just its truth, which is what makes the contradiction internal to .)
- . If , then proves , i.e. " is provable." Under -consistency this cannot happen while is in fact unprovable. (Rosser's trick — using a cleverer "there is a proof of with no shorter proof of " sentence — replaces -consistency by plain consistency.)
Hence is undecided by . And since truly is unprovable, what it asserts is correct: is true in yet not a theorem. Incompleteness is not a gap in our cleverness; it is structural.
Proof idea of the second theorem
The argument above shows, informally, "if is consistent then is unprovable" — and that implication is itself elementary enough to be formalized inside . Formalized, it reads If could also prove , it would prove — which the first theorem forbids. Therefore .
What is ? The arithmetical sentence "no proof of a contradiction exists."
Consistency is internalized using the proof predicate. Pick any fixed refutable sentence — conventionally (i.e. ) — and define which reads "there is no -proof of ." Because is , this is a sentence. Equivalent formulations (provably so, given the derivability conditions) include and "no sentence has both and provable," .
Two cautions, both instances of intensionality:
- depends on the chosen , hence on the axiom-recognizing predicate . A natural enumeration of the axioms gives the that the second theorem rules unprovable; deviant enumerations (Rosser-style, or Feferman's) yield consistency-style sentences can prove.
- "Expressing consistency" is a claim about the standard model: iff really is consistent. Inside a nonstandard model, can hold via a nonstandard "proof" of — which is exactly the model produces.
The Hilbert–Bernays–Löb derivability conditions
Making "the first theorem is provable in " precise requires the Hilbert–Bernays–Löb derivability conditions on . Abbreviating the provability predicate by a box, the three conditions read:
- (D1) necessitation: ;
- (D2) distribution: ;
- (D3) provable necessitation: .
These three are exactly the modal axioms of the provability logic GL (Gödel–Löb). Löb's theorem ( only when ) is the elegant generalization, and the second incompleteness theorem is its instance at .
The crux of the second theorem: . Reduce to , then a short box-calculus chain.
The crux of the second theorem is the single formalized implication . Recall (with as defined above) and that the fixed point gives So proving — i.e. — is the contrapositive of the one fact that really needs the derivability conditions: In words: "if were provable then would be inconsistent" — the first theorem's own argument — is itself formalizable inside .
Derivation of . From , . Now reason with the derivability conditions D1–D3:
- — from . Apply D1 then D2: .
- D3: . Chaining with (1): .
- From the logical theorem , apply D1/D2 twice: .
- Combine (2) and (3): , which is .
Contraposing gives , i.e. , and by that is .
Finishing the theorem. The first theorem gives (assuming consistent). If also proved , then modus ponens on would yield — a contradiction. Hence Two things are worth flagging. The proof needs only the first half of the first theorem (), so it goes through with plain consistency — no -consistency or Rosser trick required. And it is exactly here that intensionality bites: step (1)'s reliance on a well-behaved is why a deviant provability predicate, though extensionally correct, can break and let a -style sentence become provable.
Closely related limitative results
Incompleteness is one node in a tight web of results, all powered by diagonalization.
| Result | Statement | Diagonal target |
|---|---|---|
| Gödel I | consistent, effective, ⊇ ⟹ incomplete | |
| Gödel II | such ⟹ | (formalized Gödel I) |
| Tarski's undefinability of truth | the set is not arithmetically definable | a "truth" predicate |
| Church–Turing / undecidability | provability (and validity) in first-order logic is not decidable (the Entscheidungsproblem has no solution) | the halting problem |
| Rosser | consistency (not -consistency) suffices for Gödel I | a refined provability predicate |
| Löb | iff |
Tarski's theorem is the semantic twin of Gödel's syntactic one: truth cannot be defined within the language; provability can, and that very definability is what makes the Gödel sentence possible.
"True but unprovable" — natural examples
Gödel's is artificial (it is built to be self-referential). A natural question is whether mathematically meaningful statements are independent of . They are:
- The Paris–Harrington theorem (1977): a strengthened finite Ramsey theorem is true (provable in ZFC) but unprovable in — the first "natural" combinatorial independence.
- Goodstein's theorem: every Goodstein sequence terminates — true, but unprovable in (its proof needs transfinite induction up to ).
- The hydra game (Kirby–Paris): Hercules always wins, again independent of .
For set theory the analogous independences — the Continuum Hypothesis and the Axiom of Choice — are independent of ZFC, established by Gödel's constructible universe and Cohen's forcing. These are incompleteness phenomena one level up.
Common misreadings
The theorems are famous and frequently distorted. A few guardrails:
- They do not say "some truths are absolutely unprovable." is unprovable in ; the stronger theory (or ) proves it — and is in turn incomplete, with a new Gödel sentence. Incompleteness is relative to a fixed system, and provability is always relative to a theory.
- They do not refute formalism wholesale, but they do refute Hilbert's program in its original form: there is no finitary consistency proof of analysis or set theory carried out within a weaker, "safe" fragment. (Gentzen's 1936 proof of survives — at the cost of using -induction, machinery not available inside .)
- They are not about vagueness, paradox, or human intuition. is a precise arithmetical sentence; nothing inconsistent is asserted. The Liar analogy is heuristic — the diagonal lemma replaces "this sentence is false" (semantic, paradoxical) with "this sentence is unprovable" (syntactic, merely undecided).
- They do not by themselves settle questions about minds and machines. The Lucas–Penrose argument — that incompleteness shows the mind is not a Turing machine — is contested; it assumes we can know our own consistency, exactly the move the second theorem blocks.
Summary
| Question | Answer |
|---|---|
| What must be? | consistent, effectively axiomatized, interprets |
| First theorem | such is incomplete: an undecided, true exists |
| Second theorem | such (⊇ ) cannot prove |
| Key machinery | Gödel numbering, representability, diagonal lemma |
| What says | "I am not provable in " |
| Semantic twin | Tarski: truth is not definable in the language |
| Computational twin | Church–Turing: provability is undecidable |
| Escape routes (why sharp) | drop effectiveness, consistency, or multiplication ⟹ completeness returns |
| What it kills | Hilbert's program (finitary self-certification), not mathematics |
Gödel's theorems do not show that mathematics is unreliable or that any particular problem is hopeless. They show something subtler and permanent: no single effectively given axiom system can be both complete and capable of certifying itself. Every consistent foundation strong enough to do arithmetic leaves true statements it cannot reach and a consistency it cannot vouch for — and the only way to settle them is to step up to a stronger system, which inherits the same predicament.