mlsanityData to 14 Oct 2026

Descend or Rewind? Stochastic Gradient Descent Unlearning

arXiv 2511.15983 ↗First posted 20 Nov 2025cs.LGcited by 0

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning algorithms aim to remove the impact of selected training data from a model without the computational expenses of retraining from scratch. Two such algorithms are ``Descent-to-Delete" (D2D) and ``Rewind-to-Delete" (R2D), full-batch gradient descent algorithms that are easy to implement and satisfy provable unlearning guarantees. In particular, the stochastic version of D2D is widely implemented as the ``finetuning" unlearning baseline, despite lacking theoretical backing on nonconvex functions. In this work, we prove (varepsilon, δ) certified unlearning guarantees for stochastic R2D and D2D for strongly convex, convex, and nonconvex loss functions, by analyzing unlearning through the lens of disturbed or biased gradient systems, which may be contracting, semi-contracting, or expansive respectively. Our argument relies on optimally coupling the random behavior of the unlearning and retraining trajectories, resulting in a sensitivity bound that holds in expectation that yields (varepsilon, δ) unlearning. We determine that D2D can yield tighter guarantees for strongly convex functions, but R2D is more appropriate for convex and nonconvex functions. Finally, we compare the algorithms empirically, demonstrating the strengths and weaknesses of each approach.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 39 of its 51 references that are in the map. First posted on arXiv 20 Nov 2025.

Builds on

39 of 51 references.

Closest ancestors · 13

Same direction, newest first

  1. 2025Certified Unlearning for Neural Networks8 Jun
  2. 2025A Certified Unlearning Approach without Access to Source Data6 Jun
  3. 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec
  4. 2024Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functions15 Sep
  5. 2024Towards Certified Unlearning for Deep Neural Networks1 Aug
  6. 2024A Reliable Cryptographic Framework for Empirical Machine Unlearning Evaluation17 Apr
  7. 2024Certified Machine Unlearning via Noisy Stochastic Gradient Descent25 Mar
  8. 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
  9. 2023Certified Minimax Unlearning with Generalization Rates and Deletion Capacity16 Dec
  10. 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
  11. 2022Algorithms that Approximate Data Removal: New Results and Limitations25 Sep
  12. 2021Adaptive Machine Unlearning8 Jun
1 more
  1. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar

Other references · 26

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2016Deep Learning with Differential Privacycited by 2,728
  3. 2017VGGFace2: A dataset for recognising faces across pose and agecited by 914
  4. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  5. 2016Linear Convergence of Gradient and Proximal-Gradient Methods Under the Polyak-Lojasiewicz Conditioncited by 539
  6. 2019Certified Data Removal from Machine Learning Modelscited by 535
  7. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
  8. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
  9. 2020Approximate Data Deletion from Machine Learning Modelscited by 255
  10. 2020When Machine Unlearning Jeopardizes Privacycited by 198
  11. 2023Handbook of Convergence Theorems for (Stochastic) Gradient Methodscited by 163
  12. 2020Better Theory for SGD in the Nonconvex Worldcited by 158
14 more
  1. 2023Revisiting Gradient Clipping: Stochastic bias and tight convergence guaranteescited by 83
  2. 2020SGD for Structured Nonconvex Functions: Learning Rates, Minibatching and Interpolationcited by 67
  3. 2017Efficient Private ERM for Smooth Objectivescited by 61
  4. 2024Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Datacited by 50
  5. 2022Certified Graph Unlearningcited by 46
  6. 2023A Guide Through the Zoo of Biased SGDcited by 40
  7. 2020MAAD-Face: A Massively Annotated Attribute Dataset for Face Imagescited by 32
  8. 2022SIFU: Sequential Informed Federated Unlearning for Efficient and Provable Client Unlearning in Federated Optimizationcited by 18
  9. 2016(Bandit) Convex Optimization with Biased Noisy Gradient Oraclescited by 12
  10. 2019On Biased Stochastic Gradient Estimationcited by 11
  11. 2021Remarks on input to state stability of perturbed gradient flows, motivated by model-free feedback control learningcited by 8
  12. 2022Generalization in Supervised Learning Through Riemannian Contractioncited by 8
  13. 2024Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothnesscited by 8
  14. 2017Pain-Free Random Differential Privacy with Sensitivity Samplingcited by 7

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Provable Unlearning with Gradient Ascent on Two-Layer ReLU Neural Networks
  2. 2024Hessian-Free Online Certified Unlearning
  3. 2021Machine Unlearning via Algorithmic Stability
  4. 2026Near-Optimal Machine Unlearning Utility for Smooth Strongly Convex Losses
  5. 2026On Optimization Complexity of Second-Order Certified Unlearning
  6. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning
  7. 2024nabla τ: Gradient-based and Task-Agnostic machine Unlearning
  8. 2025Online Learning and Unlearning