Precise In-Parameter Concept Erasure in Large Language Models
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) often acquire knowledge during pretraining that is undesirable in downstream deployments, e.g., sensitive information or copyrighted content. Existing approaches for removing such knowledge rely on fine-tuning, training low-rank adapters or fact-level editing, but these are either too coarse, too shallow, or ineffective. In this work, we propose PISCES (Precise In-parameter Suppression for Concept EraSure), a novel framework for precisely erasing entire concepts from model parameters by directly editing directions that encode them in parameter space. PISCES uses a disentangler model to decompose MLP vectors into interpretable features, identifies those associated with a target concept using automated interpretability techniques, and removes them from model parameters. Experiments on Gemma 2 and Llama 3.1 over various concepts show that PISCES achieves modest gains in efficacy over leading erasure methods, reducing accuracy on the target concept to as low as 7.7%, while dramatically improving erasure specificity (by up to 31%) and robustness (by up to 38%). Overall, these results demonstrate that feature-based in-parameter editing enables a more precise and reliable approach for removing conceptual knowledge in language models.
Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Builds on 59 of its 87 references that are in the map. First posted on arXiv 28 May 2025.
Builds on
59 of 87 references.
References · 59
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2020Scaling Laws for Neural Language Modelscited by 6,586
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,218
- 2019Language Models as Knowledge Bases?cited by 1,936
- 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,554
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,420
- 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,336
38 more
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,312
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
- 2022Mass-Editing Memory in a Transformercited by 1,001
- 2020How Much Knowledge Can You Pack Into the Parameters of a Language Model?cited by 719
- 2022Transformer Feed-Forward Layers Build Predictions by Promoting Concepts in the Vocabulary Spacecited by 532
- 2023Dissecting Recall of Factual Associations in Auto-Regressive Language Modelscited by 528
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 455
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 435
- 2024Gemma Scope: Open Sparse Autoencoders Everywhere All At Once on Gemma 2cited by 394
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 381
- 2021Pay Attention to MLPscited by 368
- 2023Finding Neurons in a Haystack: Case Studies with Sparse Probingcited by 334
- 2024Improving Alignment and Robustness with Circuit Breakerscited by 322
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2025AxBench: Steering LLMs? Even Simple Baselines Outperform Sparse Autoencoderscited by 218
- 2023Finding Alignments Between Interpretable Causal Variables and Distributed Neural Representationscited by 209
- 2024Llama Scope: Extracting Millions of Features from Llama-3.1-8B with Sparse Autoencoderscited by 143
- 2024An Adversarial Perspective on Machine Unlearning for AI Safetycited by 123
- 2023Neurons in Large Language Models: Dead, N-gram, Positionalcited by 88
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearningcited by 84
- 2021Neuron-level Interpretation of Deep NLP Models: A Surveycited by 81
- 2024RAVEL: Evaluating Interpretability Methods on Disentangling Language Model Representationscited by 79
- 2025The Alternative Annotator Test for LLM-as-a-Judge: How to Statistically Justify Replacing Human Annotators with LLMscited by 74
- 2024Do Unlearning Methods Remove Information from Language Model Weights?cited by 73
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progresscited by 63
- 2024Applying sparse autoencoders to unlearn knowledge in language modelscited by 59
- 2022Discovering Latent Concepts Learned in BERTcited by 56
- 2025Open Problems in Machine Unlearning for AI Safetycited by 51
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2025Enhancing Automated Interpretability with Output-Centric Feature Descriptionscited by 41
- 2024WilKE: Wise-Layer Knowledge Editor for Lifelong Knowledge Editingcited by 40
- 2024Threats, Attacks, and Defenses in Machine Unlearning: A Surveycited by 39
- 2022Analyzing Encoded Concepts in Transformer Language Modelscited by 38
- 2024Erasing Conceptual Knowledge from Language Modelscited by 34
- 2024Large Language Models Relearn Removed Conceptscited by 27
50 most cited of 59 All 59 (JSON)
Built on by
Citing papers per year: 2025: 3; 2026: 8.
11 papers.
- 2025Watch the Weights: Unsupervised monitoring and control of fine-tuned LLMscited by 7
- 2026Interpretability Can Be Actionablecited by 7
- 2025Transmuting prompts into weightscited by 3
- 2026Disentangling MLP Neuron Weights in Vocabulary Spacecited by 3
- 2025From Memorization to Reasoning in the Spectrum of Loss Curvaturecited by 2
- 2026Steerability of Instrumental-Convergence Tendencies in LLMscited by 1
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Modelscited by 0
- 2026Understanding Empirical Unlearning with Combinatorial Interpretabilitycited by 0
- 2026Safety Anchor: Defending Harmful Fine-tuning via Geometric Bottleneckscited by 0
- 2026Reinforcement Learning for Neural Model Editingcited by 0
- 2026Weights Read and Write Features: Scalable Parameter Decomposition Grounded in Activation Spacecited by 0
- 2026Weights Read and Write Features: Scalable Parameter Decomposition Grounded in Activation Space29 Sep 2026
- 2026Reinforcement Learning for Neural Model Editing11 Jun 2026
- 2026Interpretability Can Be Actionable11 May 2026
- 2026Safety Anchor: Defending Harmful Fine-tuning via Geometric Bottlenecks7 May 2026
- 2026Disentangling MLP Neuron Weights in Vocabulary Space7 Apr 2026
- 2026Understanding Empirical Unlearning with Combinatorial Interpretability22 Feb 2026
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Models29 Jan 2026
- 2026Steerability of Instrumental-Convergence Tendencies in LLMs4 Jan 2026
- 2025From Memorization to Reasoning in the Spectrum of Loss Curvature28 Oct 2025
- 2025Transmuting prompts into weights9 Oct 2025
- 2025Watch the Weights: Unsupervised monitoring and control of fine-tuned LLMs31 Jul 2025