Descend or Rewind? Stochastic Gradient Descent Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning algorithms aim to remove the impact of selected training data from a model without the computational expenses of retraining from scratch. Two such algorithms are ``Descent-to-Delete" (D2D) and ``Rewind-to-Delete" (R2D), full-batch gradient descent algorithms that are easy to implement and satisfy provable unlearning guarantees. In particular, the stochastic version of D2D is widely implemented as the ``finetuning" unlearning baseline, despite lacking theoretical backing on nonconvex functions. In this work, we prove (varepsilon, δ) certified unlearning guarantees for stochastic R2D and D2D for strongly convex, convex, and nonconvex loss functions, by analyzing unlearning through the lens of disturbed or biased gradient systems, which may be contracting, semi-contracting, or expansive respectively. Our argument relies on optimally coupling the random behavior of the unlearning and retraining trajectories, resulting in a sensitivity bound that holds in expectation that yields (varepsilon, δ) unlearning. We determine that D2D can yield tighter guarantees for strongly convex functions, but R2D is more appropriate for convex and nonconvex functions. Finally, we compare the algorithms empirically, demonstrating the strengths and weaknesses of each approach.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 39 of its 51 references that are in the map. First posted on arXiv 20 Nov 2025.
Builds on
39 of 51 references.
Closest ancestors · 13
Same direction, newest first
- 2025Certified Unlearning for Neural Networks8 Jun
- 2025A Certified Unlearning Approach without Access to Source Data6 Jun
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec
- 2024Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functions15 Sep
- 2024Towards Certified Unlearning for Deep Neural Networks1 Aug
- 2024A Reliable Cryptographic Framework for Empirical Machine Unlearning Evaluation17 Apr
- 2024Certified Machine Unlearning via Noisy Stochastic Gradient Descent25 Mar
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
- 2023Certified Minimax Unlearning with Generalization Rates and Deletion Capacity16 Dec
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
- 2022Algorithms that Approximate Data Removal: New Results and Limitations25 Sep
- 2021Adaptive Machine Unlearning8 Jun
Other references · 26
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2016Deep Learning with Differential Privacycited by 2,728
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 914
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2016Linear Convergence of Gradient and Proximal-Gradient Methods Under the Polyak-Lojasiewicz Conditioncited by 539
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2020Approximate Data Deletion from Machine Learning Modelscited by 255
- 2020When Machine Unlearning Jeopardizes Privacycited by 198
- 2023Handbook of Convergence Theorems for (Stochastic) Gradient Methodscited by 163
- 2020Better Theory for SGD in the Nonconvex Worldcited by 158
14 more
- 2023Revisiting Gradient Clipping: Stochastic bias and tight convergence guaranteescited by 83
- 2020SGD for Structured Nonconvex Functions: Learning Rates, Minibatching and Interpolationcited by 67
- 2017Efficient Private ERM for Smooth Objectivescited by 61
- 2024Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Datacited by 50
- 2022Certified Graph Unlearningcited by 46
- 2023A Guide Through the Zoo of Biased SGDcited by 40
- 2020MAAD-Face: A Massively Annotated Attribute Dataset for Face Imagescited by 32
- 2022SIFU: Sequential Informed Federated Unlearning for Efficient and Provable Client Unlearning in Federated Optimizationcited by 18
- 2016(Bandit) Convex Optimization with Biased Noisy Gradient Oraclescited by 12
- 2019On Biased Stochastic Gradient Estimationcited by 11
- 2021Remarks on input to state stability of perturbed gradient flows, motivated by model-free feedback control learningcited by 8
- 2022Generalization in Supervised Learning Through Riemannian Contractioncited by 8
- 2024Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothnesscited by 8
- 2017Pain-Free Random Differential Privacy with Sensitivity Samplingcited by 7
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Provable Unlearning with Gradient Ascent on Two-Layer ReLU Neural Networks
- 2024Hessian-Free Online Certified Unlearning
- 2021Machine Unlearning via Algorithmic Stability
- 2026Near-Optimal Machine Unlearning Utility for Smooth Strongly Convex Losses
- 2026On Optimization Complexity of Second-Order Certified Unlearning
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning
- 2024nabla τ: Gradient-based and Task-Agnostic machine Unlearning
- 2025Online Learning and Unlearning