(Note: I'm only an amateur in logic, so I'm sorry for any weird terminology or notation, or excessive tedious details. Most of what I know is from Kunen's Foundations of Mathematics.)
I'm trying to learn a little about pointwise definable models. I'm
looking at "Pointwise definable models of set
theory" by Hamkins, Linetsky and
Reitz, and I'm stuck on the really basic question of what
"pointwise definable" really means formally.
Let me give a toy example that I hope will illustrate my problem. Let's work in $\mathsf{ZFC}-\mathsf{Infinity}$, or $\newcommand{\ZFCI}{\mathsf{ZFC}-\mathsf{I}}\ZFCI$ for short, and let $HF$ be the class of hereditarily finite sets, which may not itself be a set. But there is certainly a first-order formula which says that $x$ is hereditarily finite, which will be abbreviated as usual by "$x \in HF$". Note that $HF$ is a model of $\ZFCI$, and given any first-order sentence $\varphi$, there is a first-order sentence $HF \vDash \varphi$ which relativizes $\varphi$ to $HF$, i.e. replacing all $\forall y$ with $\forall y \in HF$ and so on.
It's intuitively obvious that the model $HF$ is pointwise definable, because I "know" what all the hereditarily finite sets are, and for each one I can write down a first-order formula in the language of set theory that uniquely defines it. But if I want to try to prove this, I need to know where the statement "lives", and what axioms would be available. I can think of three different possibilities but they each have problems.
I could try to state and prove "$HF$ is pointwise definable" as a theorem schema in the metatheory. Now the best way I've found to understand the metatheory is as a system that reasons about "strings": its universe of discourse consists of first-order formulas, sentences, lists of sentences, proofs, etc. So I would have to say something like
For every set $x \in HF$, there exists a first-order formula $\varphi(y)$ with $y$ free and a proof from the axioms $\ZFCI$ of the sentence $$HF \vDash \forall y (y=x \longleftrightarrow \varphi(y) )\tag{1}$$
But I have two problems with that statement. Sets are not strings, and so the metatheory can't quantify over them. And the "sentence" (1) is not a sentence because $x$ is free, and I don't know what to put in its place. (This feels like the paradox illustrated by Hamkins' young son in a footnote in the paper: "Tell me any number, and I'll tell you a description of it.")
I could try to state and prove "$HF$ is pointwise definable" as a theorem of $\ZFCI$. Now I have the opposite problem with a statement like ``for every set $x \in HF$ there exists a first-order formula $\varphi$'', because first-order formulas are not sets and set theory cannot quantify over them, at least not as such. But I do know that I can encode first-order formulas $\varphi$ as sets $\ulcorner \varphi \urcorner$ using Gödel codes or the like. So I could try to write down a sentence in the language of set theory, of the form $$\forall x \in HF \: \exists\, \ulcorner \varphi \urcorner \: \dots $$ But now I am stuck again because the $\cdots$ needs to say $HF \vDash \forall y (y=x \longleftrightarrow \varphi(y))$, and Tarski's undefinability of truth tells me that there is no first-order formula in $\ulcorner \varphi \urcorner$ and $y$ that expresses that.
I could try to state and prove "$HF$ is pointwise definable" as a theorem of some stronger set theory, say $\mathsf{ZFC}$. This gives me a way out of the previous dilemma, because in $\mathsf{ZFC}$, $HF$ is actually a set. And Tarski's definability of truth tells me that there is indeed a first-order formula $\Phi(M, \ulcorner \varphi \urcorner, x)$ which says $M \vDash \varphi(x)$ for set models $M$. So finally I can write a sentence like $$\forall x \in HF \: \exists \ulcorner \varphi \urcorner \: \Phi(HF, \ulcorner \forall y ( y=x \longleftrightarrow \varphi(y) )\urcorner)).$$ But I've paid a price in consistency strength. More generally, if I want to do this for any other class model $M$ of $\ZFCI$, then by Gödel's second incompleteness theorem, I am going to have to work in an axiom system at least as strong as $(\ZFCI) + \mathrm{Con}(\ZFCI)$ so that $M$ has some hope of being a set.
So I'm wondering if 3 is really what's meant when we say that a model is pointwise definable, or if there's some way to salvage 1 or 2, or yet a fourth interpretation that I haven't thought of (some sort of meta-meta-theory, or a different logic or set theory altogether?).
Likewise in the HLR paper, I don't know whether the theorem "there exist pointwise definable models of $\mathsf{ZFC}$" is meant to be understood as a metatheorem, or a theorem of $\mathsf{ZFC}$, or of $\mathsf{ZFC}+\mathrm{Con}(\mathsf{ZFC})$ (in which the models in question are actually sets), or what. I can't figure out how to make sense of the first two, and if they meant the third, it seems surprising that they wouldn't say so explicitly.
I did notice a comment on HLR's page 3 that ``the property of being pointwise definable is not first-order expressible'', which I don't quite understand but is maybe a reference to my problem?