System U

In type theory and mathematical logic, System U and System U⁻ are two closely related pure type systems (PTS), i.e. typed λ-calculi specified by a finite set of sorts (universes), axioms between sorts, and rules describing which kinds of dependent function spaces (Π-types) may be formed.

System U is historically important because it is strong enough to express a form of "type-in-type"/impredicativity that leads to Girard's paradox. Girard proved System U inconsistent in 1972. A later simplification due to Hurkens shows that even the restricted variant System U⁻ suffices for a paradox; for example, the Coq/Rocq standard library explicitly presents "Hurkens's paradox … for system U⁻" as a derivation of false.

These inconsistency results influenced the design of later type theories and proof assistants, which typically use a hierarchy of universes rather than a single universe containing itself.

Background: pure type systems

A pure type system is commonly presented as a triple $(S,A,R)$ consisting of:

• a set of sorts $S$ (universe levels);
• a set of axioms $A$, written $s_{1}:s_{2}$, specifying which sorts classify which other sorts; and
• a set of product rules $R$, describing when a dependent function type $\Pi x:A.\,B$ can be formed.

Many PTSs (including System U and System U⁻) use product rules of the schematic form

if $A:s_{1}$ and $B:s_{2}$ in context $x:A$, then $\Pi x:A.\,B:s_{2}$,

so the sort of the Π-type is determined by the sort of its codomain.

Formal definition

Following the presentation in standard references on the λ-cube and pure type systems, System U and System U⁻ are specified by the following sorts, axioms, and Π-formation rules.

Component	System U	System U−
Sorts $S$	$\{\ast ,\ \square ,\ \triangle \}$	$\{\ast ,\ \square ,\ \triangle \}$
Axioms $A$	${\displaystyle \{\ \ast$ :\square ,\ \square :\triangle \ \}}	${\displaystyle \{\ \ast$ :\square ,\ \square :\triangle \ \}}
Product rules $R$	$\{(\ast ,\ast ),\ (\square ,\ast ),\ (\square ,\square ),\ (\triangle ,\ast ),\ (\triangle ,\square )\}$	$\{(\ast ,\ast ),\ (\square ,\ast ),\ (\square ,\square ),\ (\triangle ,\square )\}$

Here $\ast$ is conventionally read as the sort of "types", $\square$ as the sort of "kinds", and $\triangle$ as a higher sort above $\square$ (often left unnamed). The axioms say that types have sort $\square$ and kinds have sort $\triangle$.

Informal reading of the rules

The product rules can be read as permitted dependencies:

• $(\ast ,\ast )$: terms may depend on terms (ordinary functions).
• $(\square ,\ast )$: terms may be polymorphic in types (type-parametric functions).
• $(\square ,\square )$: types may depend on types (type operators / type constructors).
• $(\triangle ,\square )$: kinds may depend on higher-level objects (higher-order kind formation).
• The extra rule $(\triangle ,\ast )$ (present only in System U) additionally allows types (and hence terms) to depend on higher-level objects; System U⁻ omits this particular form of dependency.

Inconsistency and Girard's paradox

System U (and, in fact, System U⁻ as well) is inconsistent: one can construct a term inhabiting the type

$\forall p:\ast .\,p$,

which corresponds to false and therefore implies that every type is inhabited (and, via Curry–Howard correspondence, that every proposition is provable).

Intuitively, the paradox becomes possible because the rules allow "polymorphism at the level of kinds", analogous to polymorphic terms in System F. For example, one can assign a polymorphic kind to a generic constructor such as:

${\displaystyle \lambda k^{\square }.\ \lambda \alpha ^{k\to k}.\ \lambda \beta ^{k}.\ \alpha (\alpha \,\beta )\$ :\ \Pi k:\square .\ ((k\to k)\to k\to k).}

Hurkens later gave a shorter and more modular presentation of the paradox (commonly called Hurkens's paradox); the Coq/Rocq standard library explicitly treats it as a paradox for System U⁻ (deriving false from axioms expressing U⁻-style impredicativity).

Girard's paradox is often described as a type-theoretic analogue of the Burali-Forti paradox: collapsing universe levels allows one to represent a "totality" that must simultaneously be inside and strictly above itself, producing a contradiction.

Historical context

Girard's 1972 inconsistency result clarified that a sufficiently strong "type of all types" principle is incompatible with consistency. This observation also affected early formulations of Martin-Löf type theory: Martin-Löf notes that an earlier, strongly impredicative axiom asserting a type of all types "had to be abandoned … after it was shown to lead to a contradiction by Jean Yves Girard". Subsequent systems typically avoid this by stratifying universes (e.g. $\mathrm {Type} _{0}:\mathrm {Type} _{1}:\mathrm {Type} _{2}:\cdots$) or by other restrictions on impredicativity.

See also

• Girard's paradox
• Pure type system
• Lambda cube
• Universe (type theory)
• Martin-Löf type theory
• Burali-Forti paradox

Further reading

• Barendregt, Henk (1992). "Lambda calculi with types". In Abramsky, Samson; Gabbay, Dov M.; Maibaum, Thomas S. E. (eds.). Handbook of Logic in Computer Science. Vol. 2. Oxford University Press. pp. 117–309.
• Howe, Douglas J. (1987). The Computational Behaviour of Girard's Paradox (Technical report). Cornell University, Computer Science Technical Reports. Retrieved 2026-03-01.