OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasure
On the map: Mechanistic interpretability → Interpreting and steering diffusion models
Abstract (arXiv)
Text-to-image (T2I) models face significant safety risks from adversarial induction, yet current concept erasure methods often cause collateral damage to benign attributes when suppressing selected neurons entirely. This occurs because sensitive and benign semantics exhibit non-orthogonal superposition, sharing activation subspaces where their respective vectors are inherently entangled. To address this issue, we propose OrthoEraser, which leverages sparse autoencoders (SAE) to achieve high-resolution feature disentanglement and subsequently redefines erasure as an analytical orthogonalization projection that preserves the benign manifold's invariance. OrthoEraser first employs SAE to decompose dense activations and segregate sensitive neurons. It then uses coupled neuron detection to identify non-sensitive features vulnerable to intervention. The key novelty lies in an analytical gradient orthogonalization strategy that projects erasure vectors onto the null space of the coupled neurons. This orthogonally decouples the sensitive concepts from the identified critical benign subspace, effectively preserving non-sensitive semantics. Experimental results on safety demonstrate that OrthoEraser achieves high erasure precision, effectively removing harmful content while preserving the integrity of the generative manifold, and significantly outperforming SOTA baselines. This paper contains results of unsafe models.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Interpreting and steering diffusion models, one of 13 directions in Mechanistic interpretability. Builds on 43 of its 50 references that are in the map. First posted on arXiv 12 Mar 2026.
Builds on
43 of 50 references.
Closest ancestors · 2
Same direction, newest first
- 2025A Single Neuron Works: Precise Concept Erasure in Text-to-Image Diffusion Models25 Sep
- 2025SAeUron: Interpretable Concept Unlearning in Diffusion Models with Sparse Autoencoders29 Jan
Other references · 41
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2022Scalable Diffusion Models with Transformerscited by 6,054
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,431
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,420
- 2022Plug-and-Play Diffusion Features for Text-Driven Image-to-Image Translationcited by 906
- 2016InfoGAN: Interpretable Representation Learning by Information Maximizing Generative Adversarial Netscited by 860
- 2024Scaling and evaluating sparse autoencoderscited by 553
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
- 2020Closed-Form Factorization of Latent Semantics in GANscited by 408
29 more
- 2023Unified Concept Editing in Diffusion Modelscited by 388
- 2022Diffusion Models already have a Semantic Latent Spacecited by 328
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 317
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 307
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 301
- 2020Unsupervised Discovery of Interpretable Directions in the GAN Latent Spacecited by 289
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?cited by 250
- 2025Show-o2: Improved Native Unified Multimodal Modelscited by 250
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Modelscited by 189
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Promptscited by 171
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 169
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
- 2023Concept Sliders: LoRA Adaptors for Precise Control in Diffusion Modelscited by 153
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Modelscited by 133
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 120
- 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 85
- 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradientcited by 69
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Modelscited by 33
- 2025Localized Concept Erasure for Text-to-Image Diffusion Models Using Training-Free Gated Low-Rank Adaptationcited by 33
- 2023AltDiffusion: A Multilingual Text-to-Image Diffusion Modelcited by 30
- 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearningcited by 29
- 2025CURE: Concept Unlearning via Orthogonal Representation Editing in Diffusion Modelscited by 27
- 2025Fine-Grained Erasure in Text-to-Image Diffusion-based Foundation Modelscited by 25
- 2024Editable Image Elements for Controllable Synthesiscited by 13
- 2025Side Effects of Erasing Concepts from Diffusion Modelscited by 13
- 2025DuMo: Dual Encoder Modulation Network for Precise Concept Erasurecited by 11
- 2025Where Culture Fades: Revealing the Cultural Gap in Text-to-Image Generationcited by 11
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspectivecited by 10
- 2025Towards Irreversible Machine Unlearning for Diffusion Modelscited by 1
Built on by
Citing papers per year: 2026: 7.
7 papers.
- 2026PEAK: Precise and Persistent Concept Erasure via k-Sparse Autoencoderscited by 1
- 2026No Single Neuron of Failure: Distributed Safety Alignment Against White-Box Attackscited by 0
- 2026Moving the Safety Barrier: Dynamic Routing Adaptive Alignment Against White-Box Attackscited by 0
- 2026Video Generation Models: A Survey of Post-Training and Alignmentcited by 0
- 2026DV-Lens: Revealing the Functional Organization of Language Model Parameterscited by 0
- 2026Do correct answers have stable latent knowledge support?cited by 0
- 2026SuperAI: Merging Capabilities Across Heterogeneous Foundation Modelscited by 0
- 2026SuperAI: Merging Capabilities Across Heterogeneous Foundation Models11 Oct 2026
- 2026Do correct answers have stable latent knowledge support?11 Oct 2026
- 2026DV-Lens: Revealing the Functional Organization of Language Model Parameters3 Oct 2026
- 2026Video Generation Models: A Survey of Post-Training and Alignment30 Sep 2026
- 2026PEAK: Precise and Persistent Concept Erasure via k-Sparse Autoencoders11 Aug 2026
- 2026Moving the Safety Barrier: Dynamic Routing Adaptive Alignment Against White-Box Attacks2 Aug 2026
- 2026No Single Neuron of Failure: Distributed Safety Alignment Against White-Box Attacks2 Aug 2026
Similar, not cited
Close in wording, no citation either way
- 2025Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generation
- 2026Orthogonal Concept Erasure for Diffusion Models
- 2025Minimalist Concept Erasure in Generative Models
- 2025OrtSAE: Orthogonal Sparse Autoencoders Uncover Atomic Features
- 2024Pruning for Robust Concept Erasing in Diffusion Models
- 2025Concept-SAE: A Controllable and Invertible Concept Interface for Sparse Autoencoders
- 2026EraseSAE: Surgical Concept Erasure in Text-to-Video Diffusion Models via Sparse Autoencoders
- 2026TEA: Text Encoder Alignment for Robust Concept Erasure in Text-to-Image Models