mlsanityData to 7 Oct 2026

Understanding Empirical Unlearning with Combinatorial Interpretability

arXiv 2602.19215 ↗First posted 22 Feb 2026cs.LGcited by 0

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

While many recent methods aim to unlearn or remove knowledge from pretrained models, seemingly erased knowledge often persists and can be recovered in various ways. Because large foundation models are far from interpretable, understanding whether and how such knowledge persists remains a significant challenge. To address this, we turn to the recently developed framework of combinatorial interpretability. This framework, designed for two-layer neural networks, enables direct inspection of the knowledge encoded in the model weights. We reproduce baseline unlearning methods within the combinatorial interpretability setting and examine their behavior along two dimensions: (i) whether they truly remove knowledge of a target concept (the concept we wish to remove) or merely inhibit its expression while retaining the underlying information, and (ii) how easily the supposedly erased knowledge can be recovered through various fine-tuning operations. Our results shed light within a fully interpretable setting on how knowledge can persist despite unlearning and when it might resurface.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 24 of its 26 references that are in the map. First posted on arXiv 22 Feb 2026.

Builds on

24 of 26 references.

Closest ancestors · 4

Same direction, newest first

  1. 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct
  2. 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
  3. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
  4. 2021Machine Unlearning of Features and Labels26 Aug

Other references · 20

  1. 2022Locating and Editing Factual Associations in GPTcited by 2,609
  2. 2020Extracting Training Data from Large Language Modelscited by 2,144
  3. 2022Editing Models with Task Arithmeticcited by 1,076
  4. 2019BERT Rediscovers the Classical NLP Pipelinecited by 1,046
  5. 2019What Does BERT Look At? An Analysis of BERT's Attentioncited by 994
  6. 2022Toy Models of Superpositioncited by 928
  7. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  8. 2023Erasing Concepts from Diffusion Modelscited by 530
  9. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 501
  10. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
  11. 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 347
  12. 2017Learning to Generate Reviews and Discovering Sentimentcited by 147
8 more
  1. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Modelscited by 123
  2. 2022Linear Adversarial Concept Erasurecited by 98
  3. 2024Safeguarding Large Language Models: A Surveycited by 73
  4. 2023Shielded Representations: Protecting Sensitive Attributes Through Iterative Gradient-Based Projectioncited by 25
  5. 2024On the Complexity of Neural Computation in Superpositioncited by 21
  6. 2025When Are Concepts Erased From Diffusion Models?cited by 14
  7. 2025Precise In-Parameter Concept Erasure in Large Language Modelscited by 11
  8. 2025Towards Combinatorial Interpretability of Neural Computationcited by 9

Built on by

Not cited yet.