mlsanityData to 7 Oct 2026

FROC: A Unified Framework with Risk-Optimized Control for Machine Unlearning in LLMs

arXiv 2512.13337 ↗First posted 15 Dec 2025cs.LGcited by 1

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning (MU) seeks to eliminate the influence of specific training examples from deployed models. As large language models (LLMs) become widely used, managing risks arising from insufficient forgetting or utility loss is increasingly crucial. Current MU techniques lack effective mechanisms for evaluating and controlling these risks, hindering the selection of strategies that appropriately balance safety and utility, and raising trust concerns surrounding the "right to be forgotten." To address these issues, we propose FROC, a unified framework with Risk-Optimized Control for machine unlearning in LLMs. FROC is built around a conformal-style risk-control formulation that expresses a user-specified risk budget on unlearning behavior. This probability-based constraint enables FROC to compare MU strategies, identify feasible operating regions, and guide hyperparameter selection according to desired trade-offs between forgetting sufficiency and utility preservation. To operationalize this constraint, FROC introduces a smoothly varying continuous risk model that aggregates forgetting deficiency and utility degradation into a single configuration-level score. Building on conformal risk analysis, FROC computes (1) the Conformal Unlearning Risk (CUR), a data-driven estimated value on the probability that forgotten samples continue to influence model predictions, and (2) risk-controlled configuration sets, which identify unlearning hyperparameters that are valid under the specified risk budget. Experiments across multiple LLM MU methods demonstrate that FROC produces stable, interpretable risk landscapes and reveals consistent relationships between unlearning configurations, semantic shift, and utility impact. FROC reframes MU as a controllable, risk-aware process and offers a practical foundation for managing unlearning behavior in large-scale LLM deployments.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 14 of its 21 references that are in the map. First posted on arXiv 15 Dec 2025.

Builds on

14 of 21 references.

Closest ancestors · 5

Same direction, newest first

  1. 2024Threats, Attacks, and Defenses in Machine Unlearning: A Survey20 Mar
  2. 2023Layer Attack Unlearning: Fast and Accurate Machine Unlearning via Layer Level Attack and Knowledge Distillation28 Dec
  3. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
  4. 2022A Survey of Machine Unlearning6 Sep
  5. 2021Fast Yet Effective Machine Unlearning17 Nov

Other references · 9

  1. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  2. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  3. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
  4. 2023Editing Large Language Models: Problems, Methods, and Opportunitiescited by 367
  5. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
  6. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
  7. 2024RedPajama: an Open Dataset for Training Large Language Modelscited by 178
  8. 2024Privacy-Preserving Federated Unlearning with Certified Client Removalcited by 5
  9. 2024Guaranteeing Data Privacy in Federated Unlearning with Dynamic User Participationcited by 4

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.