Null It Out: Guarding Protected Attributes by Iterative Nullspace Projection
Not on the map. Why?
Cited by 22 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
The ability to control for the kinds of information encoded in neural representation has a variety of use cases, especially in light of the challenge of interpreting these models. We present Iterative Null-space Projection (INLP), a novel method for removing information from neural representations. Our method is based on repeated training of linear classifiers that predict a certain property we aim to remove, followed by projection of the representations on their null-space. By doing so, the classifiers become oblivious to that target property, making it hard to linearly separate the data according to it. While applicable for multiple uses, we evaluate our method on bias and fairness use-cases, and show that our method is able to mitigate bias in word embeddings, as well as to increase fairness in a setting of multi-class classification.
Key facts. Cited by 442 papers in the map (data through 7 Oct 2026). First posted on arXiv 16 Apr 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 28; 2022: 60; 2023: 73; 2024: 82; 2025: 73; 2026: 126.
442 papers.
Sort:
By area:
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 960
- 2023Bias and Fairness in Large Language Models: A Surveycited by 626
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 415
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 412
- 2021Self-Diagnosis and Self-Debiasing: A Proposal for Reducing Corpus-Based Bias in NLPcited by 336
- 2021Towards Understanding and Mitigating Social Biases in Language Modelscited by 294
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2023Finding Alignments Between Interpretable Causal Variables and Distributed Neural Representationscited by 197
- 2023Causal Abstraction: A Theoretical Foundation for Mechanistic Interpretabilitycited by 194
- 2021Causal Inference in Natural Language Processing: Estimation, Prediction, Interpretation and Beyondcited by 177
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
- 2024Improving Instruction-Following in Language Models through Activation Steeringcited by 149
38 more
- 2023Inspecting and Editing Knowledge Representations in Language Modelscited by 140
- 2022Towards Faithful Model Explanation in NLP: A Surveycited by 129
- 2021Harms of Gender Exclusivity and Challenges in Non-Binary Representation in Language Technologiescited by 128
- 2021Debiasing Pre-trained Contextualised Embeddingscited by 107
- 2021Inducing Causal Structure for Interpretable Neural Networkscited by 107
- 2023Interpretability at Scale: Identifying Causal Mechanisms in Alpacacited by 102
- 2022Linear Adversarial Concept Erasurecited by 98
- 2022What Artificial Neural Networks Can Tell Us About Human Language Acquisitioncited by 97
- 2021An Empirical Survey of the Effectiveness of Debiasing Techniques for Pre-trained Language Modelscited by 96
- 2023A Survey on Fairness in Large Language Modelscited by 91
- 2023Do Models Explain Themselves? Counterfactual Simulatability of Natural Language Explanationscited by 85
- 2024A Survey on Multilingual Large Language Models: Corpora, Alignment, and Biascited by 82
- 2021On Measures of Biases and Harms in NLPcited by 81
- 2024RAVEL: Evaluating Interpretability Methods on Disentangling Language Model Representationscited by 77
- 2024Bias in Large Language Models: Origin, Evaluation, and Mitigationcited by 77
- 2021Contrastive Explanations for Model Interpretabilitycited by 75
- 2023Word Embeddings Are Steers for Language Modelscited by 70
- 2023Fast Model Debias with Machine Unlearningcited by 70
- 2023SeeGULL: A Stereotype Benchmark with Broad Geo-Cultural Coverage Leveraging Generative Modelscited by 66
- 2025Convergent Linear Representations of Emergent Misalignmentcited by 66
- 2022Theories of "Gender" in NLP Bias Researchcited by 62
- 2024Robust LLM safeguarding via refusal feature adversarial trainingcited by 60
- 2024Steering Knowledge Selection Behaviours in LLMs via SAE-Based Representation Engineeringcited by 60
- 2021Counterfactual Interventions Reveal the Causal Effect of Relative Clause Representations on Agreement Predictioncited by 58
- 2022Probing for the Usage of Grammatical Numbercited by 57
- 2024Fairness in Large Language Models: A Taxonomic Surveycited by 57
- 2022Entropy-based Attention Regularization Frees Unintended Bias Mitigation from Listscited by 54
- 2022CEBaB: Estimating the Causal Effects of Real-World Concepts on NLP Model Behaviorcited by 54
- 2023The Curious Case of Hallucinatory (Un)answerability: Finding Truths in the Hidden States of Over-Confident Large Language Modelscited by 54
- 2024Spectral Editing of Activations for Large Language Model Alignmentcited by 54
- 2022Fair and Optimal Classification via Post-Processingcited by 50
- 2021Diverse Adversaries for Mitigating Bias in Trainingcited by 48
- 2022Debiasing isn't enough! -- On the Effectiveness of Debiasing MLMs and their Social Biases in Downstream Taskscited by 48
- 2025Do Language Models Use Their Depth Efficiently?cited by 48
- 2022Kernelized Concept Erasurecited by 47
- 2024Representation Surgery: Theory and Practice of Affine Steeringcited by 47
- 2024Recurrent Neural Networks Learn to Store and Generate Sequences using Non-Linear Representationscited by 45
- 2023Break It Down: Evidence for Structural Compositionality in Neural Networkscited by 44
50 most cited of 442 All 442 (JSON)
- 2026Addressing Overcommitment in the Reasoning of Gendered Economic Memes under Multimodal Ambiguity8 Oct 2026
- 2026Acmite: Mitigating Gender Bias in LLMs through Concept-Guided Mutual Information1 Oct 2026
- 2026Kernelized Activation Steering1 Oct 2026
- 2026LLM Persona Unlearning30 Sep 2026
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealing30 Sep 2026
- 2026Learning What to Forget: Distributional Unlearning for LLM Representation Spaces30 Sep 2026
- 2026Invariant Atoms: Sparse Coordinates of Local Semantic Geometry in Language Model Representations29 Sep 2026
- 2026PhysioTRACE: Provenance-Aware Stress Tests for Physiological Foundation Models28 Sep 2026
- 2026Measurement-Gated Provenance Attenuation for Frozen EEG Representations26 Sep 2026
- 2026Hidden not Deleted: How Networks Suppress Entangled Features23 Sep 2026
- 2026Few-Shot Demonstrations Elicit the Use of In-Context World Representations in LLMs21 Sep 2026
- 2026When Cosine Similarity Fails to Reflect Linearly Accessible Structure in Dialogue Models18 Sep 2026
38 more
- 2026Monitoring and Discovering Reward Hacking with Internal Representations during LLM Evaluations16 Sep 2026
- 2026Interpolation Is Not Invariance: Pair Count Is Not Coverage in Transformation Audits14 Sep 2026
- 2026MUtE: A Dual Framework for Concept Erasure and Counterfactual Interventions10 Sep 2026
- 2026How Fragile Is Safety Alignment at Frontier Scale? A Single-Direction Attack on a 320B MoE9 Sep 2026
- 2026CALIPER: Clean Scenes Cannot Rank Physical Inference in Pretrained Visual Representations8 Sep 2026
- 2026Cross-Lingual Representation Alignment by Token-Level Optimal Transport in a Language-Agnostic Space6 Sep 2026
- 2026How Do Language Models Represent and Use Phonological Information for Allomorph Selection?4 Sep 2026
- 2026How Output Format Confounds Data Quality and Capability in Instruction Tuning2 Sep 2026
- 2026Behaviorally Effective LoRA Writes Are Sparse and Structured1 Sep 2026
- 2026Where Do Multilingual Vision-Language Encoders Fail on Low-Resource Languages?31 Aug 2026
- 2026NFAD: Nuisance-Filtered Anomaly Detection Under Distribution Shift29 Aug 2026
- 2026FRAME: Separating sampling variation from performance disparities in medical image analysis26 Aug 2026
- 2026GGSS: Geodesic-Gated Spherical Steering for Inference-Time Debiasing of Generative Vision-Language Models26 Aug 2026
- 2026Tunable Tool-Call Rates in LLM Agents via Representation Steering25 Aug 2026
- 2026A survey detection channel overrides the pixels in an astronomical foundation model, and biases tomographic mean redshifts23 Aug 2026
- 2026RigidBench: Evaluating Rigid-Body Physics in Video Generation Models16 Aug 2026
- 2026Low-Rank Dynamics-Effective Latent Carriers for Counterfactual Rollout in Learned World Models15 Aug 2026
- 2026CutClean: Neural Network Pruning for Privacy-Preserving Inference13 Aug 2026
- 2026Excess Separability: Nuisance-Controlled Residual-Stream Probing for Benchmark Contamination Detection12 Aug 2026
- 2026Locating and Controlling Implicit Personalization in Large Language Models12 Aug 2026
- 2026Iterative Erasure Count Is Not an Affine-Invariant Concept Dimension11 Aug 2026
- 2026Site Is Decodable Before Pretraining: Negative Controls for Probing Frozen Brain-MRI Foundation Models10 Aug 2026
- 2026SkillEval: Decomposing Agent Skill Quality into Interpretable Signals7 Aug 2026
- 2026Are Visual Place Recognition Models Recognizing Places or Conditions? Distractor-Augmented Evaluation and Condition Suppression7 Aug 2026
- 2026FOCUS: Decoupling Expert Personas in LLMs to Enhance Domain Expert Capabilities6 Aug 2026
- 2026The Fairness Collapse Phenomenon: Bias Amplification in Language Models Trained on Synthetic Data4 Aug 2026
- 2026Probing Character-level Transformers for the Spanish L-shaped Morphome4 Aug 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026Exploring and Bridging Knowledge Holes in Unlearned Multimodal Large Language Models3 Aug 2026
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Models2 Aug 2026
- 2026A Heuristic Perspective on Debiasing Language Models1 Aug 2026
- 2026Fairness Pruning: Locating Demographic Bias in GLU-MLP Layers via Differential Activations30 Jul 2026
- 2026Minimizing Targeted Activations: Input-Only Suppression of Evaluation-Awareness Latents in Large Language Models28 Jul 2026
- 2026Unbiased Open World Regularization for Fair Self-Supervised Learning24 Jul 2026
- 2026When and Why Do Linear Bias Probes Fail? A Geometric and Statistical Theory of Bias Detectability in Large Language Model Representations21 Jul 2026
- 2026Certified Domain Consistency for Multi-Domain Retrieval: Label-Free Per-Domain Contamination Control with Conformal Risk Guarantees14 Jul 2026
- 2026Resist and Update: Counterfactual Report Coordinates for Incentive-Compatible LLMs14 Jul 2026
- 2026Toward Localizing and Repairing Bias in Transformer Attention Heads14 Jul 2026
50 newest of 442 All 442 (JSON)
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 960
- 2023Fast Model Debias with Machine Unlearningcited by 70
- 2024Digital Forgetting in Large Language Models: A Survey of Unlearning Methodscited by 38
- 2025LLM Unlearning via Neural Activation Redirectioncited by 38
- 2025Mitigating Biases in Language Models via Bias Unlearningcited by 6
- 2025Distributional Machine Unlearning via Selective Data Removalcited by 5
- 2024Towards Transfer Unlearning: Empirical Evidence of Cross-Domain Bias Mitigationcited by 4
- 2025Erasing CLIP Memories: Non-Destructive, Data-Free Zero-Shot class Unlearning in CLIP Modelscited by 1
- 2026Bias Redistribution in Visual Machine Unlearning: Does Forgetting One Group Harm Another?cited by 0
- 2026Probe-Geometry Alignment: Erasing the Cross-Sequence Memorization Signature Below Chancecited by 0
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approachcited by 0
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearningcited by 0
12 most cited of 16 All 16 (JSON)
- 2026LLM Persona Unlearning30 Sep 2026
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealing30 Sep 2026
- 2026Learning What to Forget: Distributional Unlearning for LLM Representation Spaces30 Sep 2026
- 2026Excess Separability: Nuisance-Controlled Residual-Stream Probing for Benchmark Contamination Detection12 Aug 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approach15 May 2026
- 2026Probe-Geometry Alignment: Erasing the Cross-Sequence Memorization Signature Below Chance3 May 2026
- 2026Bias Redistribution in Visual Machine Unlearning: Does Forgetting One Group Harm Another?9 Apr 2026
- 2025Erasing CLIP Memories: Non-Destructive, Data-Free Zero-Shot class Unlearning in CLIP Models16 Dec 2025
- 2025Mitigating Biases in Language Models via Bias Unlearning30 Sep 2025
- 2025Distributional Machine Unlearning via Selective Data Removal20 Jul 2025
- 2025LLM Unlearning via Neural Activation Redirection11 Feb 2025
12 newest of 16 All 16 (JSON)
- 2024Spectral Editing of Activations for Large Language Model Alignmentcited by 54
- 2022InterFair: Debiasing with Natural Language Feedback for Fair Interpretable Predictionscited by 7
- 2022Nano: Nested Human-in-the-Loop Reward Learning for Few-shot Language Model Controlcited by 6
- 2025Turning the Spell Around: Lightweight Alignment Amplification via Rank-One Safety Injectioncited by 5
- 2025Paying Alignment Tax with Contrastive Learningcited by 3
- 2026One Bias After Another: Mechanistic Reward Shaping and Persistent Biases in Language Reward Modelscited by 3
- 2025AMBEDKAR-A Multi-level Bias Elimination through a Decoding Approach with Knowledge Augmentation for Robust Constitutional Alignment of Language Modelscited by 2
- 2025Hedging and Non-Affirmation: Quantifying LLM Alignment on Questions of Human Rightscited by 1
- 2026Surgical Refusal Ablation: Disentangling Safety from Intelligence via Concept-Guided Spectral Cleaningcited by 1
- 2026Where Pretraining writes and Alignment reads: the asymmetry of Transformer weight spacecited by 1
- 2026Resist and Update: Counterfactual Report Coordinates for Incentive-Compatible LLMscited by 1
- 2026Monitoring and Discovering Reward Hacking with Internal Representations during LLM Evaluationscited by 1
12 most cited of 14 All 14 (JSON)
- 2026Monitoring and Discovering Reward Hacking with Internal Representations during LLM Evaluations16 Sep 2026
- 2026How Fragile Is Safety Alignment at Frontier Scale? A Single-Direction Attack on a 320B MoE9 Sep 2026
- 2026Resist and Update: Counterfactual Report Coordinates for Incentive-Compatible LLMs14 Jul 2026
- 2026Where Pretraining writes and Alignment reads: the asymmetry of Transformer weight space15 May 2026
- 2026VISA: Value Injection via Shielded Adaptation for Personalized LLM Alignment5 Mar 2026
- 2026One Bias After Another: Mechanistic Reward Shaping and Persistent Biases in Language Reward Models6 Feb 2026
- 2026Surgical Refusal Ablation: Disentangling Safety from Intelligence via Concept-Guided Spectral Cleaning13 Jan 2026
- 2025AMBEDKAR-A Multi-level Bias Elimination through a Decoding Approach with Knowledge Augmentation for Robust Constitutional Alignment of Language Models2 Sep 2025
- 2025Turning the Spell Around: Lightweight Alignment Amplification via Rank-One Safety Injection28 Aug 2025
- 2025Paying Alignment Tax with Contrastive Learning25 May 2025
- 2025Hedging and Non-Affirmation: Quantifying LLM Alignment on Questions of Human Rights26 Feb 2025
- 2024Spectral Editing of Activations for Large Language Model Alignment15 May 2024
12 newest of 14 All 14 (JSON)
- 2024GenderBias-VL: Benchmarking Gender Bias in Vision Language Models via Counterfactual Probingcited by 31
- 2024A Unified Framework and Dataset for Assessing Societal Bias in Vision-Language Modelscited by 11
- 2026Probing Visual Concepts in Lightweight Vision-Language Models for Automated Drivingcited by 2
- 2026Suppressing Prior-Comparison Hallucinations in Radiology Report Generation via Semantically Decoupled Latent Steeringcited by 1
- 2026Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMscited by 1
- 2025Mitigating Group-Level Fairness Disparities in Federated Visual Language Modelscited by 0
- 2026IndicFairFace: Balanced Indian Face Dataset for Auditing and Mitigating Geographical Bias in Vision-Language Modelscited by 0
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Modelscited by 0
- 2026Exploring and Bridging Knowledge Holes in Unlearned Multimodal Large Language Modelscited by 0
- 2026GGSS: Geodesic-Gated Spherical Steering for Inference-Time Debiasing of Generative Vision-Language Modelscited by 0
- 2026GGSS: Geodesic-Gated Spherical Steering for Inference-Time Debiasing of Generative Vision-Language Models26 Aug 2026
- 2026Exploring and Bridging Knowledge Holes in Unlearned Multimodal Large Language Models3 Aug 2026
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Models2 Aug 2026
- 2026Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs14 Apr 2026
- 2026Probing Visual Concepts in Lightweight Vision-Language Models for Automated Driving6 Mar 2026
- 2026Suppressing Prior-Comparison Hallucinations in Radiology Report Generation via Semantically Decoupled Latent Steering27 Feb 2026
- 2026IndicFairFace: Balanced Indian Face Dataset for Auditing and Mitigating Geographical Bias in Vision-Language Models13 Feb 2026
- 2025Mitigating Group-Level Fairness Disparities in Federated Visual Language Models3 May 2025
- 2024GenderBias-VL: Benchmarking Gender Bias in Vision Language Models via Counterfactual Probing30 Jun 2024
- 2024A Unified Framework and Dataset for Assessing Societal Bias in Vision-Language Models21 Feb 2024
- 2022SODAPOP: Open-Ended Discovery of Social Biases in Social Commonsense Reasoning Modelscited by 22
- 2025Bias Is a Subspace, Not a Coordinate: A Geometric Rethinking of Post-hoc Debiasing in Vision-Language Modelscited by 7
- 2026Latent Agents: A Post-Training Procedure for Internalized Multi-Agent Debatecited by 3
- 2026When Does a Language Model Commit? A Finite-Answer Theory of Pre-Verbalization Commitmentcited by 2
- 2026Reasoning Models Don't Just Think Longer, They Move Differentlycited by 2
- 2025Rethinking Sparse Autoencoders: Select-and-Project for Fairness and Control from Encoder Features Alonecited by 1
- 2026Reasoning Models Don't Just Think Longer, They Move Differently14 May 2026
- 2026When Does a Language Model Commit? A Finite-Answer Theory of Pre-Verbalization Commitment7 May 2026
- 2026Latent Agents: A Post-Training Procedure for Internalized Multi-Agent Debate27 Apr 2026
- 2025Bias Is a Subspace, Not a Coordinate: A Geometric Rethinking of Post-hoc Debiasing in Vision-Language Models22 Nov 2025
- 2025Rethinking Sparse Autoencoders: Select-and-Project for Fairness and Control from Encoder Features Alone13 Sep 2025
- 2022SODAPOP: Open-Ended Discovery of Social Biases in Social Commonsense Reasoning Models13 Oct 2022
- 2025The Social Cost of Intelligence: Emergence, Propagation, and Amplification of Stereotypical Bias in Multi-Agent Systemscited by 2
- 2026Controlling Tool Use with Heading-Specific Activation Steeringcited by 2
- 2026Behavioral Steering in a 35B MoE Language Model via SAE-Decoded Probe Vectors: One Agency Axis, Not Five Traitscited by 1
- 2026Tunable Tool-Call Rates in LLM Agents via Representation Steeringcited by 1
- 2026Tunable Tool-Call Rates in LLM Agents via Representation Steering25 Aug 2026
- 2026Controlling Tool Use with Heading-Specific Activation Steering7 Jul 2026
- 2026Behavioral Steering in a 35B MoE Language Model via SAE-Decoded Probe Vectors: One Agency Axis, Not Five Traits17 Mar 2026
- 2025The Social Cost of Intelligence: Emergence, Propagation, and Amplification of Stereotypical Bias in Multi-Agent Systems13 Oct 2025
- 2026Primitive Subspaces Mediate Few-Shot Transfer in VLAscited by 0
- 2026Primitive Subspaces Mediate Few-Shot Transfer in VLAs29 May 2026
- 2023Bias and Fairness in Large Language Models: A Surveycited by 626
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 415
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 412
- 2021Self-Diagnosis and Self-Debiasing: A Proposal for Reducing Corpus-Based Bias in NLPcited by 336
- 2021Towards Understanding and Mitigating Social Biases in Language Modelscited by 294
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2023Finding Alignments Between Interpretable Causal Variables and Distributed Neural Representationscited by 197
- 2023Causal Abstraction: A Theoretical Foundation for Mechanistic Interpretabilitycited by 194
- 2021Causal Inference in Natural Language Processing: Estimation, Prediction, Interpretation and Beyondcited by 177
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
- 2024Improving Instruction-Following in Language Models through Activation Steeringcited by 149
- 2023Inspecting and Editing Knowledge Representations in Language Modelscited by 140
12 most cited of 383 All 383 (JSON)
- 2026Addressing Overcommitment in the Reasoning of Gendered Economic Memes under Multimodal Ambiguity8 Oct 2026
- 2026Acmite: Mitigating Gender Bias in LLMs through Concept-Guided Mutual Information1 Oct 2026
- 2026Kernelized Activation Steering1 Oct 2026
- 2026Invariant Atoms: Sparse Coordinates of Local Semantic Geometry in Language Model Representations29 Sep 2026
- 2026PhysioTRACE: Provenance-Aware Stress Tests for Physiological Foundation Models28 Sep 2026
- 2026Measurement-Gated Provenance Attenuation for Frozen EEG Representations26 Sep 2026
- 2026Hidden not Deleted: How Networks Suppress Entangled Features23 Sep 2026
- 2026Few-Shot Demonstrations Elicit the Use of In-Context World Representations in LLMs21 Sep 2026
- 2026When Cosine Similarity Fails to Reflect Linearly Accessible Structure in Dialogue Models18 Sep 2026
- 2026Interpolation Is Not Invariance: Pair Count Is Not Coverage in Transformation Audits14 Sep 2026
- 2026MUtE: A Dual Framework for Concept Erasure and Counterfactual Interventions10 Sep 2026
- 2026CALIPER: Clean Scenes Cannot Rank Physical Inference in Pretrained Visual Representations8 Sep 2026
12 newest of 383 All 383 (JSON)