Gradient Routing: Masking Gradients to Localize Computation in Neural Networks
Not on the map. Why?
Abstract (arXiv)
Neural networks are trained primarily based on their inputs and outputs, without regard for their internal mechanisms. These neglected mechanisms determine properties that are critical for safety, like (i) transparency; (ii) the absence of sensitive information or harmful capabilities; and (iii) reliable generalization of goals beyond the training distribution. To address this shortcoming, we introduce gradient routing, a training method that isolates capabilities to specific subregions of a neural network. Gradient routing applies data-dependent, weighted masks to gradients during backpropagation. These masks are supplied by the user in order to configure which parameters are updated by which data points. We show that gradient routing can be used to (1) learn representations which are partitioned in an interpretable way; (2) enable robust unlearning via ablation of a pre-specified network subregion; and (3) achieve scalable oversight of a reinforcement learner by localizing modules responsible for different behaviors. Throughout, we find that gradient routing localizes capabilities even when applied to a limited, ad-hoc subset of the data. We conclude that the approach holds promise for challenging, real-world applications where quality data are scarce.
Key facts. Cited by 34 papers in the map (data through 14 Oct 2026). Builds on 93 of its 140 references that are in the map. First posted on arXiv 6 Oct 2024.
Builds on
93 of 140 references.
References · 93
- 2017Attention Is All You Needcited by 60,361
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
- 2021RoFormer: Enhanced Transformer with Rotary Position Embeddingcited by 4,703
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,236
- 2017Outrageously Large Neural Networks: The Sparsely-Gated Mixture-of-Experts Layercited by 3,509
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2015Domain-Adversarial Training of Neural Networkscited by 3,044
38 more
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2020Learning to summarize from human feedbackcited by 2,588
- 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,917
- 2016Concrete Problems in AI Safetycited by 1,642
- 2019Root Mean Square Layer Normalizationcited by 1,480
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,312
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2021BitFit: Simple Parameter-efficient Fine-tuning for Transformer-based Masked Language-modelscited by 1,245
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,165
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
- 2019Machine Unlearningcited by 1,061
- 2020Concept Bottleneck Modelscited by 1,032
- 2022Solving math word problems with process- and outcome-based feedbackcited by 901
- 2017PackNet: Adding Multiple Tasks to a Single Network by Iterative Pruningcited by 898
- 2016InfoGAN: Interpretable Representation Learning by Information Maximizing Generative Adversarial Netscited by 860
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 724
- 2020Beyond English-Centric Multilingual Machine Translationcited by 561
- 2017Learning multiple visual domains with residual adapterscited by 557
- 2017Large Batch Training of Convolutional Networkscited by 535
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 492
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 467
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 455
- 2023TinyStories: How Small Can Language Models Be and Still Speak Coherent English?cited by 449
- 2020MAD-X: An Adapter-Based Framework for Multi-Task Cross-Lingual Transfercited by 445
- 2024Improve Mathematical Reasoning in Language Models by Automated Process Supervisioncited by 441
- 2022Dataless Knowledge Fusion by Merging Weights of Language Modelscited by 387
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2022Video PreTraining (VPT): Learning to Act by Watching Unlabeled Online Videoscited by 345
- 2013Learning Factored Representations in a Deep Mixture of Expertscited by 278
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 257
- 2019Simple, Scalable Adaptation for Neural Machine Translationcited by 242
- 2024A Survey on Data Selection for Language Modelscited by 236
- 2021Training Neural Networks with Fixed Sparse Maskscited by 214
- 2022Surgical Fine-Tuning Improves Adaptation to Distribution Shiftscited by 205
- 2024Foundational Challenges in Assuring Alignment and Safety of Large Language Modelscited by 199
50 most cited of 93 All 93 (JSON)
Built on by
Citing papers per year: 2025: 14; 2026: 20.
34 papers.
Sort:
By area:
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-timecited by 43
- 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignmentcited by 43
- 2026Model Spec Midtraining: Improving How Alignment Training Generalizescited by 20
- 2026Shaping capabilities with token-level data filteringcited by 13
- 2025Distillation Robustifies Unlearningcited by 11
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMscited by 11
- 2025Physics of Skill Learningcited by 8
- 2025Memorization Sinks: Isolating Memorization during LLM Trainingcited by 7
- 2025On the creation of narrow AI: hierarchy and nonlocality of neural network skillscited by 4
- 2025Access Controls Will Solve the Dual-Use Dilemmacited by 3
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamicscited by 3
- 2026Modular Pretraining Enables Access Controlcited by 3
22 more
- 2025Studying Cross-cluster Modularity in Neural Networkscited by 2
- 2026Position: Capability Control Should be a Separate Goal From Alignmentcited by 2
- 2026Anatomy of Post-Training: Using Interpretability to Characterize Data and Shape the Learning Signalcited by 2
- 2026Natively Unlearnable Large Language Modelscited by 2
- 2026Prototype Language Modelscited by 2
- 2026LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearningcited by 2
- 2026Train the Model, Not the Reader: Decodability Supervision for Verifiable Activation Explanationscited by 2
- 2025Inducing, Detecting and Characterising Neural Modules: A Pipeline for Functional Interpretability in Reinforcement Learningcited by 1
- 2025Wide Neural Networks as a Baseline for the Computational No-Coincidence Conjecturecited by 1
- 2026ModalImmune: Immunity Driven Unlearning via Self Destructive Trainingcited by 1
- 2025Self-Ablating Transformers: More Interpretability, Less Sparsitycited by 0
- 2025Preserving Bilinear Weight Spectra with a Signed and Shrunk Quadratic Activation Functioncited by 0
- 2025PerNodeDrop: A Method Balancing Specialized Subnets and Regularization in Deep Neural Networkscited by 0
- 2026The Persistent Vulnerability of Aligned AI Systemscited by 0
- 2026Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMscited by 0
- 2026Safety Anchor: Defending Harmful Fine-tuning via Geometric Bottleneckscited by 0
- 2026Policy-Masked Private Experts: Auditable and Reversible Capability Access Control in Sparse MoE Modelscited by 0
- 2026Sparse Competition during Training For the Emergence of Specialized Modulescited by 0
- 2026Entangled Representations Amplify Collateral Damage in Unlearningcited by 0
- 2026From Latents to Wires: Surgical Post-Editing on Large Language Modelscited by 0
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealingcited by 0
- 2026Gradient Routing Localizes and Removes Unintended Behaviors in RLcited by 0
- 2026Gradient Routing Localizes and Removes Unintended Behaviors in RL12 Oct 2026
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealing30 Sep 2026
- 2026From Latents to Wires: Surgical Post-Editing on Large Language Models26 Sep 2026
- 2026Entangled Representations Amplify Collateral Damage in Unlearning2 Sep 2026
- 2026Sparse Competition during Training For the Emergence of Specialized Modules31 Aug 2026
- 2026Policy-Masked Private Experts: Auditable and Reversible Capability Access Control in Sparse MoE Models7 Aug 2026
- 2026Train the Model, Not the Reader: Decodability Supervision for Verifiable Activation Explanations22 Jul 2026
- 2026Modular Pretraining Enables Access Control9 Jul 2026
- 2026LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearning2 Jul 2026
- 2026Prototype Language Models1 Jul 2026
- 2026Natively Unlearnable Large Language Models11 Jun 2026
- 2026Anatomy of Post-Training: Using Interpretability to Characterize Data and Shape the Learning Signal10 Jun 2026
22 more
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamics3 Jun 2026
- 2026Safety Anchor: Defending Harmful Fine-tuning via Geometric Bottlenecks7 May 2026
- 2026Model Spec Midtraining: Improving How Alignment Training Generalizes3 May 2026
- 2026Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMs12 Apr 2026
- 2026The Persistent Vulnerability of Aligned AI Systems31 Mar 2026
- 2026ModalImmune: Immunity Driven Unlearning via Self Destructive Training18 Feb 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2025PerNodeDrop: A Method Balancing Specialized Subnets and Regularization in Deep Neural Networks14 Dec 2025
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMs5 Dec 2025
- 2025Wide Neural Networks as a Baseline for the Computational No-Coincidence Conjecture8 Oct 2025
- 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignment6 Oct 2025
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-time5 Oct 2025
- 2025Preserving Bilinear Weight Spectra with a Signed and Shrunk Quadratic Activation Function2 Sep 2025
- 2025Memorization Sinks: Isolating Memorization during LLM Training14 Jul 2025
- 2025Distillation Robustifies Unlearning6 Jun 2025
- 2025On the creation of narrow AI: hierarchy and nonlocality of neural network skills21 May 2025
- 2025Access Controls Will Solve the Dual-Use Dilemma14 May 2025
- 2025Self-Ablating Transformers: More Interpretability, Less Sparsity1 May 2025
- 2025Studying Cross-cluster Modularity in Neural Networks4 Feb 2025
- 2025Inducing, Detecting and Characterising Neural Modules: A Pipeline for Functional Interpretability in Reinforcement Learning28 Jan 2025
- 2025Physics of Skill Learning21 Jan 2025
- 2025Distillation Robustifies Unlearningcited by 11
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMscited by 11
- 2026Natively Unlearnable Large Language Modelscited by 2
- 2026LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearningcited by 2
- 2026ModalImmune: Immunity Driven Unlearning via Self Destructive Trainingcited by 1
- 2026Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMscited by 0
- 2026Entangled Representations Amplify Collateral Damage in Unlearningcited by 0
- 2026From Latents to Wires: Surgical Post-Editing on Large Language Modelscited by 0
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealingcited by 0
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealing30 Sep 2026
- 2026From Latents to Wires: Surgical Post-Editing on Large Language Models26 Sep 2026
- 2026Entangled Representations Amplify Collateral Damage in Unlearning2 Sep 2026
- 2026LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearning2 Jul 2026
- 2026Natively Unlearnable Large Language Models11 Jun 2026
- 2026Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMs12 Apr 2026
- 2026ModalImmune: Immunity Driven Unlearning via Self Destructive Training18 Feb 2026
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMs5 Dec 2025
- 2025Distillation Robustifies Unlearning6 Jun 2025
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-timecited by 43
- 2026Model Spec Midtraining: Improving How Alignment Training Generalizescited by 20
- 2026Shaping capabilities with token-level data filteringcited by 13
- 2025Physics of Skill Learningcited by 8
- 2025Memorization Sinks: Isolating Memorization during LLM Trainingcited by 7
- 2025On the creation of narrow AI: hierarchy and nonlocality of neural network skillscited by 4
- 2025Access Controls Will Solve the Dual-Use Dilemmacited by 3
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamicscited by 3
- 2026Modular Pretraining Enables Access Controlcited by 3
- 2025Studying Cross-cluster Modularity in Neural Networkscited by 2
- 2026Position: Capability Control Should be a Separate Goal From Alignmentcited by 2
- 2026Anatomy of Post-Training: Using Interpretability to Characterize Data and Shape the Learning Signalcited by 2
12 most cited of 20 All 20 (JSON)
- 2026Sparse Competition during Training For the Emergence of Specialized Modules31 Aug 2026
- 2026Train the Model, Not the Reader: Decodability Supervision for Verifiable Activation Explanations22 Jul 2026
- 2026Modular Pretraining Enables Access Control9 Jul 2026
- 2026Prototype Language Models1 Jul 2026
- 2026Anatomy of Post-Training: Using Interpretability to Characterize Data and Shape the Learning Signal10 Jun 2026
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamics3 Jun 2026
- 2026Model Spec Midtraining: Improving How Alignment Training Generalizes3 May 2026
- 2026The Persistent Vulnerability of Aligned AI Systems31 Mar 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2025PerNodeDrop: A Method Balancing Specialized Subnets and Regularization in Deep Neural Networks14 Dec 2025
- 2025Wide Neural Networks as a Baseline for the Computational No-Coincidence Conjecture8 Oct 2025
12 newest of 20 All 20 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026Routing in Gradient Space: Balanced Usage Is Not Expert Specialization
- 2023Soft Merging of Experts with Adaptive Routing
- 2026Traversing the solution space of neural networks with Hessian Null Space Continuation
- 2025Correcting Gradient-Based Circuit Localization via Interaction-Aware Backpropagation
- 2026Gradient Under Microscope: Benchmarking Resource Utilization of Memory-Efficient Gradient Computation Methods
- 2026Localized LoRA-MoE: Block-wise Low-Rank Experts With Adaptive Routing
- 2026Rethinking Local Learning: A Cheaper and Faster Recipe for LLM Post-Training
- 2026Self-Routing: Parameter-Free Expert Routing from Hidden States