RePAIR: Interactive Machine Unlearning through Prompt-Aware Model Repair
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large language models (LLMs) inherently absorb harmful knowledge, misinformation, and personal data during pretraining on large-scale web corpora, with no native mechanism for selective removal. While machine unlearning offers a principled solution, existing approaches are provider-centric, requiring retraining pipelines, curated retain datasets, and direct intervention by model service providers (MSPs), thereby excluding end users from controlling their own data. We introduce Interactive Machine Unlearning (IMU), a new paradigm in which users can instruct LLMs to forget targeted knowledge through natural language at inference time. To realize IMU, we propose RePAIR, a prompt-aware model repair framework comprising (i) a watchdog model for unlearning intent detection, (ii) a surgeon model for generating repair procedures, and (iii) a patient model whose parameters are updated autonomously. At the core of RePAIR, we develop Steering Through Activation Manipulation with PseudoInverse (STAMP), a training-free, single-sample unlearning method that redirects MLP activations toward a refusal subspace via closed-form pseudoinverse updates. Its low-rank variant reduces computational complexity from O(d^3) to O(r^3 + r^2 * d), enabling efficient on-device unlearning with up to ~3x speedup over training-based baselines. Extensive experiments across harmful knowledge suppression, misinformation correction, and personal data erasure demonstrate that RePAIR achieves near-zero forget scores (Acc_f = 0.00, F-RL = 0.00) while preserving model utility (Acc_r up to 84.47, R-RL up to 0.88), outperforming six state-of-the-art baselines. These results establish RePAIR as an effective and practical framework for user-driven model editing, advancing transparent and on-device control over learned knowledge, with potential extensions to multimodal foundation models.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 12 of its 26 references that are in the map. First posted on arXiv 14 Apr 2026.
Builds on
12 of 26 references.
Closest ancestors · 4
Same direction, newest first
- 2026Attention Smoothing Is All You Need For Unlearning1 Mar
- 2025A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearning21 May
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
Other references · 8
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2020Scaling Laws for Neural Language Modelscited by 6,586
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2023TinyStories: How Small Can Language Models Be and Still Speak Coherent English?cited by 449
- 2024Learning to (Learn at Test Time): RNNs with Expressive Hidden Statescited by 355
- 2024Can multiple-choice questions really be useful in detecting the abilities of LLMs?cited by 69
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Modelscited by 10
- 2024Putting People in LLMs' Shoes: Generating Better Answers via Question Rewritercited by 4
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026BackFlush: Knowledge-Free Backdoor Detection and Elimination with Watermark Preservation in Large Language Modelscited by 1
- 2026SeDT: Sentence-Transformer Decision-Transformer Conditioning for Multi-Turn Conversation Reliabilitycited by 1
- 2026Beyond OCR Accuracy: Text-Centric VQA Under Image Degradation with Modular and End-to-Endcited by 0
- 2026Beyond OCR Accuracy: Text-Centric VQA Under Image Degradation with Modular and End-to-End12 Sep 2026
- 2026SeDT: Sentence-Transformer Decision-Transformer Conditioning for Multi-Turn Conversation Reliability26 May 2026
- 2026BackFlush: Knowledge-Free Backdoor Detection and Elimination with Watermark Preservation in Large Language Models15 Apr 2026
Similar, not cited
Close in wording, no citation either way
- 2025Scalable and Robust LLM Unlearning by Correcting Responses with Retrieved Exclusions
- 2026CAP: Controllable Alignment Prompting for Unlearning in LLMs
- 2024Rethinking Machine Unlearning for Large Language Models
- 2024The Frontier of Data Erasure: Machine Unlearning for Large Language Models
- 2026Inference-Time Machine Unlearning via Gated Activation Redirection
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
- 2024A Closer Look at Machine Unlearning for Large Language Models
- 2024Machine Unlearning of Pre-trained Large Language Models