Reviving Your MNEME: Predicting The Side Effects of LLM Unlearning and Fine-Tuning via Sparse Model Diffing
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large language models (LLMs) are frequently fine-tuned or unlearned to adapt to new tasks or eliminate undesirable behaviors. While existing evaluation methods assess performance after such interventions, there remains no general approach for detecting unintended side effects, such as unlearning biology content degrading performance on chemistry tasks, particularly when these effects are unpredictable or emergent. To address this issue, we introduce MNEME, Model diffiNg for Evaluating Mechanistic Effects, a lightweight framework for identifying these side effects using sparse model diffing. MNEME compares base and fine-tuned models on task-agnostic data (for example, The Pile, LMSYS-Chat-1M) without access to fine-tuning data to isolate behavioral shifts. Applied to five LLMs across three scenarios: WMDP knowledge unlearning, emergent misalignment, and benign fine-tuning, MNEME achieves up to 95 percent accuracy in predicting side effects, aligning with known benchmarks and requiring no custom heuristics. Furthermore, we show that retraining on high-activation samples can partially reverse these effects. Our results demonstrate that sparse probing and diffing offer a scalable and automated lens into fine-tuning-induced model changes, providing practical tools for understanding and managing LLM behavior.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 13 of its 34 references that are in the map. First posted on arXiv 19 Jun 2025.
Builds on
13 of 34 references.
Closest ancestors · 2
Same direction, newest first
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
Other references · 11
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2024MMLU-Pro: A More Robust and Challenging Multi-Task Language Understanding Benchmarkcited by 1,848
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
- 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMscited by 172
- 2024Fine-Tuning Enhances Existing Mechanisms: A Case Study on Entity Trackingcited by 149
- 2023Mechanistically analyzing the effects of fine-tuning on procedurally defined taskscited by 115
- 2024Model Editing Harms General Abilities of Large Language Models: Regularization to the Rescuecited by 103
- 2024Fine-tuning large language models for domain adaptation: Exploration of training strategies, scaling, model merging and synergistic capabilitiescited by 69
- 2024Unveiling the Generalization Power of Fine-Tuned Large Language Modelscited by 36
- 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patchingcited by 17
Built on by
Citing papers per year: 2025: 1; 2026: 7.
8 papers.
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuningcited by 39
- 2026Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Modelscited by 27
- 2026Delta-Crosscoder: Robust Crosscoder Model Diffing in Narrow Fine-Tuning Regimescited by 4
- 2026Objective Matters: Fine-Tuning Objectives Shape Safety, Robustness, and Persona Driftcited by 1
- 2026Backdoor Unlearning Generalization: A Path Toward the Removal of Unknown Triggers in LLMscited by 1
- 2026Med-SegLens: Latent-Level Model Diffing for Interpretable Medical Image Segmentationcited by 0
- 2026Mechanism-Guided Selective Unlearning for RLVR-Induced Reasoningcited by 0
- 2026Introspecting Alignment Shifts Beyond Behaviors Implanted Through Fine-Tuningcited by 0
- 2026Introspecting Alignment Shifts Beyond Behaviors Implanted Through Fine-Tuning5 Aug 2026
- 2026Mechanism-Guided Selective Unlearning for RLVR-Induced Reasoning17 Jun 2026
- 2026Backdoor Unlearning Generalization: A Path Toward the Removal of Unknown Triggers in LLMs2 Jun 2026
- 2026Delta-Crosscoder: Robust Crosscoder Model Diffing in Narrow Fine-Tuning Regimes16 Feb 2026
- 2026Med-SegLens: Latent-Level Model Diffing for Interpretable Medical Image Segmentation11 Feb 2026
- 2026Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Models20 Jan 2026
- 2026Objective Matters: Fine-Tuning Objectives Shape Safety, Robustness, and Persona Drift19 Jan 2026
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuning22 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2026Simple LLM Baselines are Competitive for Model Diffing
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks
- 2024Does Unlearning Truly Unlearn? A Black Box Evaluation of LLM Unlearning Methods
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics
- 2025Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearning
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMs
- 2026On the Limits of LLM Adaptability: Impact of Model-Internalized Priors on Annotation Task Performance