What axioms need to be added to ZFC2 (second-order ZFC) before the theory has a unique model (up to isomorphism)?
I was thinking: adjoin the generalized continuum hypothesis (GCH) and a statement asserting that no inaccessible cardinals exist.
What axioms need to be added to ZFC2 (second-order ZFC) before the theory has a unique model (up to isomorphism)?
I was thinking: adjoin the generalized continuum hypothesis (GCH) and a statement asserting that no inaccessible cardinals exist.
We already know that the models of $\sf ZFC_2$ are exactly the sets $V_\kappa$ for $\kappa$ inaccessible, so we really just want an axiom $\varphi$ such that $\sf ZFC_2+\varphi$ would only have one inaccessible cardinal which satisfies it.
For example $\varphi$ could be "There are no inaccessible cardinals" (satisfied by the first inaccessible); or "There is exactly one inaccessible cardinal" (satisfied by the second inaccessible); and so on.
Namely if $K$ is the set of inaccessible cardinals then $\varphi$ should tell us what is $K\cap V_\kappa$ in a unique way. This is not necessarily possible when that set is complicated enough (or when $\kappa$ is large enough that all sort of crazy reflections are going on), but if we can characterize $K\cap V_\kappa$ uniquely then the axiom guarantees that at most one $V_\kappa$ can satisfy that axiom.
Some words on the issue of $\sf GCH$. Suppose that the universe of set theory $V$ satisfies $\sf GCH$, in this case it is clear that any $V_\kappa$ satisfies $\sf GCH$ as well, and in particular for inaccessible $\kappa$, which means that every model of $\sf ZFC_2$ is a model of $\sf GCH$.
If, on the other hand, $V$ does not satisfy $\sf GCH$ and the example for the failure is below the first inaccessible cardinal of $V$ then for sufficiently big $\kappa$ (which is still much smaller than the inaccessible cardinals) $V_\kappa$ fails to satisfy $\sf GCH$. In particular all the models of $\sf ZFC_2$ would.
Think of something worse, suppose there are exactly two inaccessible cardinals, $\kappa_1<\kappa_2$. $\sf GCH$ holds below $\kappa_1$ but fails at $\kappa_1$. It follows that $V_{\kappa_1}\models\sf ZFC_2+GCH$ and $V_{\kappa_2}\models\sf ZFC_2+\lnot GCH$. And $V_{\kappa_1}$ is the unique model of $\sf ZFC_2$ in which there are no inaccessible cardinals, whereas $V_{\kappa_2}$ is the unique model of $\sf ZFC_2$ in which there is exactly one inaccessible cardinal.
The reason for this is that full semantics second-order logic does not have the completeness theorem. The fact there is just one model up to isomorphism does not mean that the theory can prove or disprove any proposition in the language.
My suggestion is essentially the same as Asaf's, but phrased a little differently to avoid directly mentioning inaccessible cardinals etc.
A well-known way of making an axiomatisation of a structure categorical is to add a suitable second-order induction axiom – for instance, second-order arithmetic. So the obvious thing to try in set theory is second-order $\in$-induction:
If $U \subseteq \mathbf{V}$, and $(\forall x \in \mathbf{V} . \, x \in^{\mathbf{V}} y \to x \in U) \to y \in U$, then $U = \mathbf{V}$.
Unfortunately this doesn't actually help here: it just asserts that $\in^\mathbf{V}$ is well-founded, and so if the "real" universe has lots of inaccessibles, then there will be lots of non-isomorphic models satisfying this axiom.
The problem, as far as I can tell, is that this axiom doesn't imply that $\mathbf{V}$ can be constructed inductively from a finite set of operations. In words, it simply says:
If $U$ is a subset of $\mathbf{V}$, such that $\emptyset^\mathbf{V}$ is a member of $U$, and for all elements $y$ of $\mathbf{V}$, if $y$ is a subset of $U$ (in the appropriate sense), then $y$ is a member of $U$ as well.
To put it in type-theoretic terms, the difficulty comes from the fact that the constructors for elements of $\mathbf{V}$ are themselves parametrised by $\mathbf{V}$. So let's think about the fundamental ways of constructing sets:
This suggests the following induction principle:
If $U$ is a subset of $\mathbf{V}$ and $U$ is closed under the above-mentioned constructors, then $U = \mathbf{V}$.
Informally, we are declaring that everything in $\mathbf{V}$ must be constructed using one of the above rules, and this definitely precludes the possibility of (uncountable) inaccessible cardinals in $\mathbf{V}$. Thus, by Mostowski collapse, any model of second-order ZF satisfying the above induction principle must be isomorphic to $(V_\kappa, \in)$, where $\kappa$ is the least inaccessible cardinal.
One also notes that we can economise a little and drop the $\mathsf{sep}^\mathbf{V}$ constructor without changing anything; what remains is more-or-less the definition of Grothendieck universe, at least once we erase all the $\mathbf{V}$ superscripts and add the requirement of transitivity.